- dovecot - dovecot.org

stopped being able to kerberos/GSSAPI authenticate with new email accounts
by Mark Foley 12 Jul '17

12 Jul '17

I've been running with Dovecot 2.2.15 on my mail server and Thunderbird on workstations with Kerberos/GSSAPI authentication. This has been working for over a year for 10 users. The other day, I replaced a user's workstation and set up this user with a Thunderbird client. Unfortunately, I got the error: "The Kerberos/GSSAPI ticket was not accepted by the IMAP server ... please check that you are logged into the Kerberos/GSSAPI realm." Doing more experimentation I've found that I cannot set up *any* existing user with a new account without getting that same message. Interestingly, all existing users can still connect just fine from their Tbird clients on their current workstations which were set up over a year ago, I just can't create an account for them on a different workstation. I'm at a loss as to where to start on this. My config is: $ dovconf -n: # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.38 x86_64 Slackware 14.2 auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain login gssapi auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key userdb { driver = passwd } verbose_ssl = yes Here is the log from an existing user, configured a long time ago, that works OK: Jul 11 17:28:31 auth-worker(5858): Debug: shadow(mark,192.168.0.99): lookup Jul 11 17:28:31 auth-worker(5858): Info: shadow(mark,192.168.0.99): unknown user Jul 11 17:28:31 auth: Debug: shadow(mark,192.168.0.99,<OxGMYRFUsADAqABj>): Credentials: Jul 11 17:28:31 auth: Debug: client passdb out: OK 1 user=mark original_user=mark(a)HPRS.LOCAL Jul 11 17:28:31 auth: Debug: master in: REQUEST 3872522241 6421 1 46614c53fd96efa48a94b889ad2405d3 session_pid=6429 request_auth_token Jul 11 17:28:31 auth-worker(5858): Debug: shadow(mark,192.168.0.99): lookup Jul 11 17:28:31 auth-worker(5858): Debug: shadow(mark,192.168.0.99): username changed mark -> HPRS\mark Jul 11 17:28:31 auth: Debug: master userdb out: USER 3872522241 mark system_groups_user=HPRS\mark uid=10001 gid=10000 home=/home/HPRS/mark auth_token=4959011413324b3d5d2d6f77c0adf2629551d91d auth_user=mark(a)HPRS.LOCAL Jul 11 17:28:31 imap-login: Info: Login: user=<mark>, method=GSSAPI, rip=192.168.0.99, lip=192.168.0.2, mpid=6429, TLS, session=<OxGMYRFUsADAqABj> Here is that same user set up on a new client computer, with all the same settings (as far as I can tell. This one apparently doesn't even try kerberos. Jul 11 18:08:25 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:08:25 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:08:25 auth: Debug: auth client connected (pid=1055) Jul 11 18:08:25 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:08:25 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:08:25 auth: Debug: client in: AUTH 1 GSSAPI service=imap secured session=grVG8BFU2gDAqAA5 lip=192.168.0.2 rip=192.168.0.57 lport=143 rport=58586 Jul 11 18:08:25 auth: Debug: gssapi(?,192.168.0.57,<grVG8BFU2gDAqAA5>): Using all keytab entries Jul 11 18:08:25 auth: Debug: client passdb out: CONT 1 Jul 11 18:08:25 auth: Debug: client in: CONT 1 YIIE+ [deleted] Jul 11 18:08:26 auth: Debug: gssapi(dsmith,192.168.0.57,<grVG8BFU2gDAqAA5>): security context state completed. Jul 11 18:08:26 auth: Debug: client passdb out: CONT 1 YIGVB [deleted] Jul 11 18:08:26 auth: Debug: client in: CONT 1 (previous base64 data may contain sensitive data) Jul 11 18:08:26 auth: Debug: gssapi(dsmith,192.168.0.57,<grVG8BFU2gDAqAA5>): Negotiated security layer Jul 11 18:08:26 auth: Debug: client passdb out: CONT 1 BQQF/wAMAAAAAAAAFuHbYgH///9r9NgQ1SHdkCg7kho= Jul 11 18:08:26 auth: Debug: client in: CONT 1 BQQE/wAMAAAAAAAAF9wdQwEAAABtYXJrXNhf7+Xh4YGqvoA5 (previous base64 data may contain sensitive data) Jul 11 18:08:26 auth-worker(30944): Debug: shadow(mark,192.168.0.57): lookup Jul 11 18:08:26 auth-worker(30944): Info: shadow(mark,192.168.0.57): unknown user Jul 11 18:08:26 auth: Debug: shadow(mark,192.168.0.57,<grVG8BFU2gDAqAA5>): Credentials: Jul 11 18:08:26 auth: Info: gssapi(mark,192.168.0.57,<grVG8BFU2gDAqAA5>): User not authorized to log in as mark Jul 11 18:08:28 auth: Debug: client passdb out: FAIL 1 user=mark original_user=dsmith(a)HPRS.LOCAL Jul 11 18:08:28 imap-login: Debug: Ignoring unknown passdb extra field: original_user Jul 11 18:08:28 imap-login: Debug: SSL alert: close notify [192.168.0.57] Jul 11 18:08:28 imap-login: Debug: SSL alert: close notify [192.168.0.57] Jul 11 18:08:28 imap-login: Info: Disconnected (auth failed, 1 attempts in 3 secs): user=<mark>, method=GSSAPI, rip=192.168.0.57, lip=192.168.0.2, TLS, session=<grVG8BFU2gDAqAA5> Lastly, at the risk of too much information, here is the log info for the actual user (dsmith) for whom I'm trying to set up tbird email on his new workstation. I get the "Kerberos/GSSAPI ticket was not accepted by the IMAP server ..." message shown at the top of this post when this user opens Thunderbird. Note that this user can connect and get mail just find from his old workstation. Jul 11 18:24:29 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:24:29 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:24:29 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jul 11 18:24:29 auth: Debug: Read auth token secret from /usr/local/var/run/dovecot/auth-token-secret.dat Jul 11 18:24:29 auth: Debug: auth client connected (pid=11449) Jul 11 18:24:29 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:24:29 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Jul 11 18:24:29 auth: Debug: auth client connected (pid=11452) Jul 11 18:24:30 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:24:30 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.57] Jul 11 18:24:30 auth: Debug: client in: AUTH 1 GSSAPI service=imap secured session=dYHDKRJUJgDAqAA5 lip=192.168.0.2 rip=192.168.0.57 lport=143 rport=58662 Jul 11 18:24:30 auth: Debug: client in: AUTH 1 GSSAPI service=imap secured session=dYHDKRJUJADAqAA5 lip=192.168.0.2 rip=192.168.0.57 lport=143 rport=58660 Jul 11 18:24:30 auth: Debug: gssapi(?,192.168.0.57,<dYHDKRJUJgDAqAA5>): Using all keytab entries Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 Jul 11 18:24:30 auth: Debug: gssapi(?,192.168.0.57,<dYHDKRJUJADAqAA5>): Using all keytab entries Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 Jul 11 18:24:30 auth: Debug: client in: CONT 1 YIIE+ [deleted] Jul 11 18:24:30 auth: Debug: gssapi(dsmith,192.168.0.57,<dYHDKRJUJADAqAA5>): security context state completed. Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 YIGVB [deleted] Jul 11 18:24:30 auth: Debug: client in: CONT 1 YIIE+ [deleted] Jul 11 18:24:30 auth: Debug: gssapi(dsmith,192.168.0.57,<dYHDKRJUJgDAqAA5>): security context state completed. Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 YIGVB [deleted] Jul 11 18:24:30 auth: Debug: client in: CONT 1 (previous base64 data may contain sensitive data) Jul 11 18:24:30 auth: Debug: gssapi(dsmith,192.168.0.57,<dYHDKRJUJADAqAA5>): Negotiated security layer Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 BQQF/wAMAAAAAAAAH1+3awH////7bf0e2rfKTxNaqLg= Jul 11 18:24:30 auth: Debug: client in: CONT 1 BQQE/wAMAAAAAAAALn6AhAEAAABkc21pdGgQuBsLom6nqscutNM= (previous base64 data may contain sensitive data) Jul 11 18:24:30 auth: Debug: client in: CONT 1 (previous base64 data may contain sensitive data) Jul 11 18:24:30 auth: Debug: gssapi(dsmith,192.168.0.57,<dYHDKRJUJgDAqAA5>): Negotiated security layer Jul 11 18:24:30 auth: Debug: client passdb out: CONT 1 BQQF/wAMAAAAAAAAFRtpiAH///9zZJNlQtcDSy2+KYo= Jul 11 18:24:30 auth: Debug: client in: CONT 1 BQQE/wAMAAAAAAAANzdOTQEAAABkc21pdGhTz0R9AmEjueuv4Kk= (previous base64 data may contain sensitive data) Jul 11 18:24:30 auth-worker(12060): Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jul 11 18:24:30 auth-worker(12060): Debug: shadow(dsmith,192.168.0.57): lookup Jul 11 18:24:30 auth-worker(12060): Info: shadow(dsmith,192.168.0.57): unknown user Jul 11 18:24:30 auth: Debug: shadow(dsmith,192.168.0.57,<dYHDKRJUJADAqAA5>): Credentials: Jul 11 18:24:30 auth: Debug: client passdb out: OK 1 user=dsmith original_user=dsmith(a)HPRS.LOCAL Jul 11 18:24:30 auth-worker(12062): Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jul 11 18:24:30 auth: Debug: master in: REQUEST 2956591105 11449 1 c9c09995778a3d70b6569097b3d3fe34 session_pid=12064 request_auth_token Jul 11 18:24:30 auth-worker(12060): Debug: shadow(dsmith,192.168.0.57): lookup Jul 11 18:24:30 auth-worker(12062): Debug: shadow(dsmith,192.168.0.57): lookup Jul 11 18:24:30 auth-worker(12062): Info: shadow(dsmith,192.168.0.57): unknown user Jul 11 18:24:30 auth: Debug: shadow(dsmith,192.168.0.57,<dYHDKRJUJgDAqAA5>): Credentials: Jul 11 18:24:30 auth: Debug: client passdb out: OK 1 user=dsmith original_user=dsmith(a)HPRS.LOCAL Jul 11 18:24:30 auth: Debug: master in: REQUEST 313131009 11452 1 8af9373d65d7d3dc2f556156d6c1c979 session_pid=12066 request_auth_token Jul 11 18:24:30 auth-worker(12062): Debug: shadow(dsmith,192.168.0.57): lookup Jul 11 18:24:30 auth-worker(12060): Debug: shadow(dsmith,192.168.0.57): username changed dsmith -> HPRS\dsmith Jul 11 18:24:30 auth: Debug: master userdb out: USER 2956591105 dsmith system_groups_user=HPRS\dsmithuid=3000036 gid=10000 home=/home/HPRS/dsmith auth_token=5e36f7c4ae98f7873aefcb9186d661e54a94f180 auth_user=dsmith(a)HPRS.LOCAL Jul 11 18:24:30 imap-login: Info: Login: user=<dsmith>, method=GSSAPI, rip=192.168.0.57, lip=192.168.0.2, mpid=12064, TLS, session=<dYHDKRJUJADAqAA5> Jul 11 18:24:30 auth-worker(12062): Debug: shadow(dsmith,192.168.0.57): username changed dsmith -> HPRS\dsmith Jul 11 18:24:30 auth: Debug: master userdb out: USER 313131009 dsmith system_groups_user=HPRS\dsmithuid=3000036 gid=10000 home=/home/HPRS/dsmith auth_token=057d47a48c1d97b4c5a8b413c4b4753de41f0a19 auth_user=dsmith(a)HPRS.LOCAL Jul 11 18:24:30 imap-login: Info: Login: user=<dsmith>, method=GSSAPI, rip=192.168.0.57, lip=192.168.0.2, mpid=12066, TLS, session=<dYHDKRJUJgDAqAA5> HELP! THX - Mark

1 0

pigeonhole-0.4.14
by j.emerlik 10 Jul '17

10 Jul '17

Hi, my global sieve filter looks like this: require "fileinto"; if header :contains "X-Spam-Status" "YES" { fileinto "INBOX.Junk"; } if header :contains "X-Spam-Level" "********************" { discard; stop; } Why Dovecot 2.2.24 and pigeonhole-0.4.14 moves all e-mails to spam eg .: with "X-Spam-Status: No," too ? Regards, Jack

3 6

how to make user iteration work (with active directory ldap)
by mj 07 Jul '17

07 Jul '17

We received no replies to this email that we sent a few days ago. We're not sure why. If we miss something that is obvious to everybody, kindly point it out. We ẃould like to get iteration working, to be able to mass-delete specific emails from all mailboxes, in case of for example received virusses... Here is my question again: Hi, User iteration doesn't work, we're getting: > auth: Error: Trying to iterate users, but userdbs don't support it The way I understand it, I need to set iterate_attrs and iterate_filter for iteration to work. I have set it (see configs below) and yet dovecot says "userdbs don't support it". What else do I need to do to enable it? Our config is against samba Active Directory ldap and generally works fine. Can anyone here take a quick look at the configs below, and tell me how to make doveadm user -u "*" work? Below are our configs. Any tips would be appreciated...! MJ > root@dovetest:/etc/dovecot# doveconf -n > # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.16 (fed8554) > # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.7 xfs > auth_debug = yes > auth_debug_passwords = yes > auth_failure_delay = 400 secs > auth_master_user_separator = * > auth_mechanisms = plain login > auth_username_format = %Ln > auth_verbose = yes > auth_verbose_passwords = plain > debug_log_path = /var/log/dovecot/dovecot.debug > deliver_log_format = %f | %s | msgid=%m: %$ > disable_plaintext_auth = no > info_log_path = /var/log/dovecot/dovecot.info > lda_mailbox_autocreate = yes > lda_mailbox_autosubscribe = yes > log_path = /var/log/dovecot/dovecot.err > login_greeting = Dovecot ready. > mail_gid = vmail > mail_location = maildir:/var/vmail/%Ln/Maildir:LAYOUT=fs:DIRNAME=mAildir > mail_plugins = acl lazy_expunge zlib quota mail_log notify > mail_uid = vmail > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave > namespace { > list = children > location = maildir:/var/vmail/%%u/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%u/shared/%%u > prefix = shared/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace inbox { > inbox = yes > location = > mailbox "Deleted items" { > special_use = \Trash > } > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent items" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > mailbox inbox { > auto = subscribe > } > prefix = > separator = / > type = private > } > passdb { > args = /etc/dovecot/master-users > driver = passwd-file > master = yes > } > passdb { > args = failure_show_msg=yes dovecot > driver = pam > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > skip = authenticated > } > plugin { > acl = vfile > acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db > mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append > mail_log_fields = uid box msgid from subject > quota = maildir > quota_rule = ?:storage=5G > quota_rule2 = Trash:storage=+100M > quota_warning = storage=97%% quota-warning 97 %u > quota_warning2 = storage=95%% quota-warning 95 %u > quota_warning3 = storage=90%% quota-warning 90 %u > quota_warning4 = storage=85%% quota-warning 85 %u > quota_warning5 = storage=80%% quota-warning 80 %u > quota_warning6 = -storage=100%% quota-warning below %u > sieve = ~/.dovecot.sieve > sieve_default = /var/lib/dovecot/default.sieve > sieve_dir = ~/sieve > } > protocols = imap lmtp sieve > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > unix_listener auth-userdb { > group = vmail > mode = 0666 > user = vmail > } > } > service imap-login { > process_limit = 500 > process_min_avail = 2 > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > unix_listener quota-warning { > user = vmail > } > user = dovecot > } > ssl_ca = </etc/ssl/comodo/chain.crt > ssl_cert = </etc/ssl/comodo/server.crt > ssl_key = # hidden, use -P to show it > ssl_protocols = !SSLv2 !SSLv3 > userdb { > args = uid=vmail gid=vmail home=/var/vmail/%n allow_all_users=yes > driver = static > } > verbose_proctitle = yes > protocol lda { > mail_plugins = acl lazy_expunge zlib quota mail_log notify sieve quota > } > protocol imap { > imap_max_line_length = 2 M > mail_max_userip_connections = 30 > mail_plugins = acl lazy_expunge zlib quota mail_log notify imap_quota imap_acl > } and dovecot-ldap.conf.ext: > hosts = 127.0.0.1:391 > dn = cn=search,cn=users,dc=company,dc=com > dnpass = secret > tls = no > debug_level = 0 > auth_bind = yes > base = CN=Users, DC=samba, DC=cmpany, DC=com > scope = subtree > user_attrs = =home=/var/vmail/%n/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%n/shared/%n,=mail=maildir:/var/vmail/%n/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%n/shared/%n > user_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) > pass_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) > iterate_attrs = sAMAccountName=user > iterate_filter = (objectClass=person)

2 2

Dovecot 2.2.31: IMAP core dumped after upgrade
by Alessio Cecchi 07 Jul '17

07 Jul '17

Hi, after upgrade to dovecot 2.2.31 (ee) some users (very few) have problem to see, via IMAP, their folders after login. The error in the log is simple master: service(imap): child 15528 killed with signal 11 (core dumped). The user see only the INBOX folder. We are using Director and NFS. Below my configuration and the backtrace. Thanks # dovecot -n # 2.2.31 (65cde28): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.19.rc1 (e5c7051) # OS: Linux 2.6.32-696.3.2.el6.x86_64 x86_64 CentOS release 6.9 (Final) auth_cache_negative_ttl = 2 mins auth_cache_size = 20 M auth_cache_ttl = 20 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 50 default_vsz_limit = 384 M deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins imap_logout_format = in=%i out=%o session=<%{session}> imap_max_line_length = 2 M last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 10.1.3.157 login_trusted_networks = 10.1.3.0/24 192.168.12.128/25 192.168.216.0/22 mail_fsync = always mail_location = maildir:~/Maildir mail_plugins = quota acl expire zlib fts fts_solr maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-deny-sql.conf.ext deny = yes driver = sql } passdb { args = /etc/dovecot/extra/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql result_success = continue-ok } passdb { args = /etc/dovecot/extra/extrafields-passdb driver = passwd-file result_internalfail = return-fail skip = unauthenticated } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire fts = solr fts_solr = url=http://10.1.3.145:8983/solr/doveindex/ quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_grace = 10M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation zlib_save = gz zlib_save_level = 6 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o, session=<%{session}> protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth { client_limit = 6524 unix_listener auth-userdb { group = vchkpw mode = 0660 user = vmail } } service dict { process_limit = 500 unix_listener dict { group = vchkpw mode = 0660 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap-postlogin { executable = script-login /etc/dovecot/scripts/imap-postlogin.sh unix_listener imap-postlogin { group = vchkpw mode = 0660 user = vmail } user = vmail } service imap { executable = imap imap-postlogin process_limit = 6000 vsz_limit = 512 M } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { process_min_avail = 4 service_count = 0 } service pop3-postlogin { executable = script-login /etc/dovecot/scripts/pop3-postlogin.sh unix_listener pop3-postlogin { group = vchkpw mode = 0660 user = vmail } user = vmail } service pop3 { executable = pop3 pop3-postlogin } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no submission_host = 127.0.0.1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_fsync = optimized mail_location = maildir:~/Maildir:INDEX=MEMORY mail_plugins = quota acl expire zlib fts fts_solr sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl expire zlib fts fts_solr imap_quota imap_acl imap_zlib } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 15 } ==== Fatal: imap(myuser(a)mydomain.it): master: service(imap): child 15528 killed with signal 11 (core dumped) # gdb /usr/libexec/dovecot/imap /home/vmail/domains/mydomain.it/myuser/core.9739 GNU gdb (GDB) Red Hat Enterprise Linux (7.2-92.el6) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib/debug/usr/libexec/dovecot/imap.debug...done. done. [New Thread 9739] Reading symbols from /usr/lib64/dovecot/libdovecot-lda.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot-lda.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot-lda.so.0 Reading symbols from /usr/lib64/dovecot/libdovecot-storage.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot-storage.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/lib64/dovecot/libdovecot.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot.so.0 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /usr/lib64/dovecot/lib01_acl_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib01_acl_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib01_acl_plugin.so Reading symbols from /usr/lib64/dovecot/lib02_imap_acl_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib02_imap_acl_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib02_imap_acl_plugin.so Reading symbols from /usr/lib64/dovecot/lib10_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib10_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib10_quota_plugin.so Reading symbols from /usr/lib64/dovecot/lib11_imap_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib11_imap_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib11_imap_quota_plugin.so Reading symbols from /usr/lib64/dovecot/lib20_expire_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_expire_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_expire_plugin.so Reading symbols from /usr/lib64/dovecot/lib20_fts_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_fts_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_fts_plugin.so Reading symbols from /usr/lib64/libicui18n.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicui18n.so.56 Reading symbols from /usr/lib64/libicuuc.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicuuc.so.56 Reading symbols from /usr/lib64/libicudata.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicudata.so.56 Reading symbols from /usr/lib64/libstdc++.so.6...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libstdc++.so.6 Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/dovecot/lib20_zlib_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_zlib_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_zlib_plugin.so Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libbz2.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libbz2.so.1 Reading symbols from /usr/lib64/dovecot/lib21_fts_solr_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib21_fts_solr_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib21_fts_solr_plugin.so Reading symbols from /lib64/libexpat.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libexpat.so.1 Reading symbols from /usr/lib64/dovecot/lib30_imap_zlib_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib30_imap_zlib_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Core was generated by `dovecot/imap [myuser@abytaim'. Program terminated with signal 11, Segmentation fault. #0 fts_backend_deinit (_backend=0xd67ef8) at fts-api.c:84 84 backend->v.deinit(backend); Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-13.el6_8.x86_64 glibc-2.12-1.209.el6_9.2.x86_64 libgcc-4.4.7-18.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-18.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 fts_backend_deinit (_backend=0xd67ef8) at fts-api.c:84 backend = 0x0 #1 0x00007f168263a8de in fts_mailbox_list_deinit (list=0xd678e8) at fts-storage.c:833 flist = 0xd67e28 #2 0x00007f1683ff705a in mail_namespace_free (ns=0xd69780) at mail-namespace.c:62 storagep = <value optimized out> #3 0x00007f1683ff8045 in mail_namespaces_init_location (user=0xd712f0, location=<value optimized out>, error_r=0x7ffd248bc8d0) at mail-namespace.c:514 inbox_set = 0xd72110 unexpanded_inbox_set = 0xd72170 ns = 0xd69780 mail_set = <value optimized out> error = 0xd323c0 "mkdir(/var/run/dovecot/user-not-found/myuser2(a)mydomain.it) failed: Permission denied (euid=89(vmail) egid=89(vchkpw) missing +w perm: /var/run/dovecot, dir owned by 0:97 mode=0755)" driver = 0x0 location_source = 0x7f16840ad670 "mail_location parameter" default_location = <value optimized out> ret = <value optimized out> __FUNCTION__ = "mail_namespaces_init_location" #4 0x00007f1684012e9e in shared_storage_get_namespace (_ns=0x7ffd248bc948, _name=0x7ffd248bc940) at shared-storage.c:328 _storage = 0xd60fd8 list = 0xd607c8 storage = 0xd60fd8 user = 0xd554f8 static_tab = {{key = 117 'u', value = 0x0, long_key = 0x7f16840bda70 "user"}, {key = 110 'n', value = 0x0, long_key = 0x7f16840b092a "username"}, {key = 100 'd', value = 0x0, long_key = 0x7f16840b0938 "domain"}, { key = 104 'h', value = 0x0, long_key = 0x7f16840b06e4 "home"}, {key = 0 '\000', value = 0x0, long_key = 0x0}} tab = <value optimized out> new_ns = 0xd69960 ns = 0xd60660 ns_set = 0xd564f8 unexpanded_ns_set = <value optimized out> owner = 0xd712f0 domain = 0xd55607 "mydomain.it" username = 0xd315f0 "myuser2" userdomain = 0xd31600 "myuser2(a)mydomain.it" name = 0xd6f183 "INBOX" p = <value optimized out> next = <value optimized out> dest = <value optimized out> error = <value optimized out> prefix = 0xd320e8 ---Type <return> to continue, or q <return> to quit--- location = 0xd320e8 ns_sep = 47 '/' ret = <value optimized out> #5 0x00007f1684012421 in shared_list_join_refpattern (list=<value optimized out>, ref=0xd6f172 "shared/myuser2/INBOX", pattern=0x7f16840b4536 "") at shared-list.c:102 ns = 0x0 ns_ref = 0xd6f179 "myuser2/INBOX" prefix = 0xd60700 "shared/" prefix_len = <value optimized out> #6 0x00007f1684067c43 in mailbox_list_subscription_fill_one (src_list=0xd5e598, dest_list=0xd607c8) at mailbox-list-subscriptions.c:68 ns = 0xd60660 namespaces = <value optimized out> vname = <value optimized out> ns_name = 0xd6f172 "shared/myuser2/INBOX" node = <value optimized out> created = false default_ns = 0xd60660 error = 0x7f1684517c55 "I\211\303L\213L$0L\213D$(H\213|$ H\213t$\030H\213T$\020H\213L$\bH\213\004$H\203\304HA\377\343ffffff.\017\037\204" len = <value optimized out> #7 mailbox_list_subscriptions_refresh (src_list=0xd5e598, dest_list=0xd607c8) at mailbox-list-subscriptions.c:159 _data_stack_cur_id = 6 _data_stack_cur_id = 5 subsfile_ctx = 0xd6b930 st = {st_dev = 21, st_ino = 88027185, st_nlink = 1, st_mode = 33152, st_uid = 89, st_gid = 89, __pad0 = 0, st_rdev = 0, st_size = 123, st_blksize = 65536, st_blocks = 8, st_atim = {tv_sec = 1492836107, tv_nsec = 0}, st_mtim = { tv_sec = 1486382417, tv_nsec = 0}, st_ctim = {tv_sec = 1492836107, tv_nsec = 361387000}, __unused = {0, 0, 0}} type = <value optimized out> path = 0xd315a0 "/home/vmail/domains/mydomain.it/myuser/Maildir/subscriptions" name = 0xd6f172 "shared/myuser2/INBOX" sep = <value optimized out> __FUNCTION__ = "mailbox_list_subscriptions_refresh" #8 0x00007f1684064861 in mailbox_list_iter_init_multiple (list=0xd607c8, patterns=<value optimized out>, flags=8448) at mailbox-list-iter.c:160 ctx = <value optimized out> __FUNCTION__ = "mailbox_list_iter_init_multiple" #9 0x00007f16840652e7 in mailbox_list_ns_iter_try_next (_ctx=0xd64cc8) at mailbox-list-iter.c:591 ctx = 0xd64cc8 info = <value optimized out> ns = <value optimized out> #10 mailbox_list_ns_iter_next (_ctx=0xd64cc8) at mailbox-list-iter.c:658 ---Type <return> to continue, or q <return> to quit--- info = <value optimized out> #11 0x00007f1684064348 in mailbox_list_iter_next_call (ctx=0xd64cc8) at mailbox-list-iter.c:985 info = <value optimized out> set = <value optimized out> #12 mailbox_list_iter_next (ctx=0xd64cc8) at mailbox-list-iter.c:1053 _data_stack_cur_id = 4 info = <value optimized out> #13 0x000000000041115f in cmd_list_continue (cmd=0xd5bc78) at cmd-list.c:229 ctx = 0xd5be20 info = <value optimized out> flags = <value optimized out> str = 0xd31388 mutf7_name = 0xd314e0 name = <value optimized out> ret = <value optimized out> #14 0x000000000041190e in cmd_list_full (cmd=0xd5bc78, lsub=<value optimized out>) at cmd-list.c:468 client = <value optimized out> args = 0xd3fcc0 list_args = 0xd3fdd0 arg_count = 41 ctx = 0xd5be20 patterns = {arr = {buffer = 0xd5be60, element_size = 8}, v = 0xd5be60, v_modifiable = 0xd5be60} ref = 0xd5be50 "" pattern = 0xd5be58 "*" patterns_strarr = <value optimized out> str = <value optimized out> #15 0x000000000041a89d in command_exec (cmd=0xd5bc78) at imap-commands.c:200 hook = 0xd3a370 finished = <value optimized out> __FUNCTION__ = "command_exec" #16 0x00000000004188d0 in client_command_input (cmd=0xd5bc78) at imap-client.c:1080 client = 0xd59508 command = <value optimized out> __FUNCTION__ = "client_command_input" #17 0x0000000000418966 in client_command_input (cmd=0xd5bc78) at imap-client.c:1140 client = 0xd59508 command = <value optimized out> __FUNCTION__ = "client_command_input" #18 0x0000000000418ca5 in client_handle_next_command (client=0xd59508) at imap-client.c:1182 No locals. #19 client_handle_input (client=0xd59508) at imap-client.c:1194 _data_stack_cur_id = 3 ---Type <return> to continue, or q <return> to quit--- ret = 176 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #20 0x000000000041914f in client_input (client=0xd59508) at imap-client.c:1241 cmd = <value optimized out> output = 0xd5ba60 bytes = 32 __FUNCTION__ = "client_input" #21 0x00007f1683d40f01 in io_loop_call_io (io=0xd5bb50) at ioloop.c:599 ioloop = 0xd399a0 t_id = 2 __FUNCTION__ = "io_loop_call_io" #22 0x00007f1683d42b1f in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:223 ctx = 0xd3b4c0 events = <value optimized out> event = 0xd3c330 list = 0xd5bbb0 io = <value optimized out> tv = {tv_sec = 1799, tv_usec = 999269} events_count = <value optimized out> msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #23 0x00007f1683d40fbc in io_loop_handler_run (ioloop=0xd399a0) at ioloop.c:648 No locals. #24 0x00007f1683d41178 in io_loop_run (ioloop=0xd399a0) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #25 0x00007f1683cc96f3 in master_service_run (service=0xd39840, callback=<value optimized out>) at master-service.c:666 No locals. #26 0x0000000000426525 in main (argc=2, argv=0xd395e0) at main.c:491 set_roots = {0x42f280, 0x637a40, 0x0} login_set = {auth_socket_path = 0xd31050 "\210\020", <incomplete sequence \323>, postlogin_socket_path = 0xd31088 "[myuser(a)mydomain.it 192.168.12.215 LIST]", postlogin_timeout_secs = 60, callback = 0x426680 <login_client_connected>, failure_callback = 0x425dd0 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = 0x430284 "auth-master" c = <value optimized out> (gdb) ==== Fatal: imap(myuser(a)mydomain.eu): master: service(imap): child 15528 killed with signal 11 (core dumped) # gdb /usr/libexec/dovecot/imap /home/vmail/domains/mydomain.eu/myuser/core.6641 GNU gdb (GDB) Red Hat Enterprise Linux (7.2-92.el6) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib/debug/usr/libexec/dovecot/imap.debug...done. done. [New Thread 6641] Reading symbols from /usr/lib64/dovecot/libdovecot-lda.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot-lda.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot-lda.so.0 Reading symbols from /usr/lib64/dovecot/libdovecot-storage.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot-storage.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/lib64/dovecot/libdovecot.so.0...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/libdovecot.so.0.0.0.debug...done. done. Loaded symbols for /usr/lib64/dovecot/libdovecot.so.0 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /usr/lib64/dovecot/lib01_acl_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib01_acl_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib01_acl_plugin.so Reading symbols from /usr/lib64/dovecot/lib02_imap_acl_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib02_imap_acl_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib02_imap_acl_plugin.so Reading symbols from /usr/lib64/dovecot/lib10_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib10_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib10_quota_plugin.so Reading symbols from /usr/lib64/dovecot/lib11_imap_quota_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib11_imap_quota_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib11_imap_quota_plugin.so Reading symbols from /usr/lib64/dovecot/lib20_expire_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_expire_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_expire_plugin.so Reading symbols from /usr/lib64/dovecot/lib20_fts_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_fts_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_fts_plugin.so Reading symbols from /usr/lib64/libicui18n.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicui18n.so.56 Reading symbols from /usr/lib64/libicuuc.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicuuc.so.56 Reading symbols from /usr/lib64/libicudata.so.56...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libicudata.so.56 Reading symbols from /usr/lib64/libstdc++.so.6...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libstdc++.so.6 Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/dovecot/lib20_zlib_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib20_zlib_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib20_zlib_plugin.so Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libbz2.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libbz2.so.1 Reading symbols from /usr/lib64/dovecot/lib21_fts_solr_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib21_fts_solr_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib21_fts_solr_plugin.so Reading symbols from /lib64/libexpat.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libexpat.so.1 Reading symbols from /usr/lib64/dovecot/lib30_imap_zlib_plugin.so...Reading symbols from /usr/lib/debug/usr/lib64/dovecot/lib30_imap_zlib_plugin.so.debug...done. done. Loaded symbols for /usr/lib64/dovecot/lib30_imap_zlib_plugin.so Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Core was generated by `dovecot/imap [myuser'. Program terminated with signal 11, Segmentation fault. #0 fts_backend_deinit (_backend=0xbfaaf8) at fts-api.c:84 84 backend->v.deinit(backend); Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-13.el6_8.x86_64 glibc-2.12-1.209.el6_9.2.x86_64 libgcc-4.4.7-18.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-18.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 fts_backend_deinit (_backend=0xbfaaf8) at fts-api.c:84 backend = 0x0 #1 0x00007f9cad42d8de in fts_mailbox_list_deinit (list=0xbfa4e8) at fts-storage.c:833 flist = 0xbfaa28 #2 0x00007f9caedea05a in mail_namespace_free (ns=0xbfbcf0) at mail-namespace.c:62 storagep = <value optimized out> #3 0x00007f9caedeb045 in mail_namespaces_init_location (user=0xbfe980, location=<value optimized out>, error_r=0x7fff170e1e80) at mail-namespace.c:514 inbox_set = 0xbff790 unexpanded_inbox_set = 0xbff7f0 ns = 0xbfbcf0 mail_set = <value optimized out> error = 0xbc29e8 "mkdir(/var/run/dovecot/user-not-found/myuser2(a)mydomain.eu) failed: Permission denied (euid=89(vmail) egid=89(vchkpw) missing +w perm: /var/run/dovecot, dir owned by 0:97 mode=0755)" driver = 0x0 location_source = 0x7f9caeea0670 "mail_location parameter" default_location = <value optimized out> ret = <value optimized out> __FUNCTION__ = "mail_namespaces_init_location" #4 0x00007f9caee05e9e in shared_storage_get_namespace (_ns=0x7fff170e1f38, _name=0x7fff170e1f28) at shared-storage.c:328 _storage = 0xbf0fd8 list = 0xbf07c8 storage = 0xbf0fd8 user = 0xbe54f8 static_tab = {{key = 117 'u', value = 0x0, long_key = 0x7f9caeeb0a70 "user"}, {key = 110 'n', value = 0x0, long_key = 0x7f9caeea392a "username"}, {key = 100 'd', value = 0x0, long_key = 0x7f9caeea3938 "domain"}, { key = 104 'h', value = 0x0, long_key = 0x7f9caeea36e4 "home"}, {key = 0 '\000', value = 0x0, long_key = 0x0}} tab = <value optimized out> new_ns = 0xbfbbd0 ns = 0xbf0660 ns_set = 0xbe6510 unexpanded_ns_set = <value optimized out> owner = 0xbfe980 domain = 0xbe560f "mydomain.eu" username = 0xbc1c18 "myuser2" userdomain = 0xbc1c28 "myuser2(a)mydomain.eu" name = 0xbc1b99 "" p = <value optimized out> next = <value optimized out> dest = <value optimized out> error = <value optimized out> prefix = 0xbc2710 location = 0xbc2710 ns_sep = 47 '/' ret = <value optimized out> #5 0x00007f9cadec1dae in acl_shared_namespace_add (ns=0xbf0660) at acl-shared-storage.c:67 sstorage = 0xbf0fd8 new_ns = 0x0 tab = 0xbc1ad0 iter = 0xbc17d0 info = <value optimized out> str = <value optimized out> static_tab = {{key = 117 'u', value = 0x0, long_key = 0x7f9cadec310e "user"}, {key = 110 'n', value = 0x0, long_key = 0x7f9cadec30d1 "username"}, {key = 100 'd', value = 0x0, long_key = 0x7f9cadec30da "domain"}, { key = 0 '\000', value = 0x0, long_key = 0x0}} p = 0xbf5890 "@mydomain.eu" mailbox = 0xbc1b90 "myuser2/" #6 acl_shared_namespaces_add (ns=0xbf0660) at acl-shared-storage.c:103 _data_stack_cur_id = 5 auser = <value optimized out> alist = <value optimized out> storage = 0xbf0fd8 iter = 0xbf50d8 name = 0xbf5888 "myuser2(a)mydomain.eu" __FUNCTION__ = "acl_shared_namespaces_add" #7 0x00007f9cadec0b30 in acl_mailbox_list_iter_init_shared (list=0xbf07c8, patterns=0xbf4fb8, flags=49152) at acl-mailbox-list.c:155 alist = 0xbf0a78 ctx = 0xbfaaf8 ret = <value optimized out> #8 0x00007f9caee57820 in mailbox_list_iter_init_multiple (list=0xbf07c8, patterns=<value optimized out>, flags=49152) at mailbox-list-iter.c:164 ctx = <value optimized out> __FUNCTION__ = "mailbox_list_iter_init_multiple" #9 0x00007f9caee582e7 in mailbox_list_ns_iter_try_next (_ctx=0xbf4cc8) at mailbox-list-iter.c:591 ---Type <return> to continue, or q <return> to quit--- ctx = 0xbf4cc8 info = <value optimized out> ns = <value optimized out> #10 mailbox_list_ns_iter_next (_ctx=0xbf4cc8) at mailbox-list-iter.c:658 info = <value optimized out> #11 0x00007f9caee57348 in mailbox_list_iter_next_call (ctx=0xbf4cc8) at mailbox-list-iter.c:985 info = <value optimized out> set = <value optimized out> #12 mailbox_list_iter_next (ctx=0xbf4cc8) at mailbox-list-iter.c:1053 _data_stack_cur_id = 4 info = <value optimized out> #13 0x000000000041115f in cmd_list_continue (cmd=0xbebc78) at cmd-list.c:229 ctx = 0xbebe00 info = <value optimized out> flags = <value optimized out> str = 0xbc1598 mutf7_name = 0xbc16f0 name = <value optimized out> ret = <value optimized out> #14 0x000000000041190e in cmd_list_full (cmd=0xbebc78, lsub=<value optimized out>) at cmd-list.c:468 client = <value optimized out> args = 0xbcfc90 list_args = 0x0 arg_count = 41 ctx = 0xbebe00 patterns = {arr = {buffer = 0xbebe40, element_size = 8}, v = 0xbebe40, v_modifiable = 0xbebe40} ref = 0xbebe30 "" pattern = 0xbebe38 "*" patterns_strarr = <value optimized out> str = <value optimized out> #15 0x000000000041a89d in command_exec (cmd=0xbebc78) at imap-commands.c:200 hook = 0xbca370 finished = <value optimized out> __FUNCTION__ = "command_exec" #16 0x00000000004188d0 in client_command_input (cmd=0xbebc78) at imap-client.c:1080 client = 0xbe9508 command = <value optimized out> __FUNCTION__ = "client_command_input" #17 0x0000000000418966 in client_command_input (cmd=0xbebc78) at imap-client.c:1140 client = 0xbe9508 command = <value optimized out> __FUNCTION__ = "client_command_input" #18 0x0000000000418ca5 in client_handle_next_command (client=0xbe9508) at imap-client.c:1182 No locals. #19 client_handle_input (client=0xbe9508) at imap-client.c:1194 _data_stack_cur_id = 3 ret = 176 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #20 0x000000000041914f in client_input (client=0xbe9508) at imap-client.c:1241 cmd = <value optimized out> output = 0xbeba60 bytes = 15 __FUNCTION__ = "client_input" #21 0x00007f9caeb33f01 in io_loop_call_io (io=0xbebb50) at ioloop.c:599 ioloop = 0xbc99a0 t_id = 2 __FUNCTION__ = "io_loop_call_io" #22 0x00007f9caeb35b1f in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:223 ctx = 0xbcb4c0 events = <value optimized out> event = 0xbcc330 list = 0xbebbb0 io = <value optimized out> tv = {tv_sec = 1799, tv_usec = 999143} events_count = <value optimized out> msecs = <value optimized out> ret = 1 ---Type <return> to continue, or q <return> to quit--- i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #23 0x00007f9caeb33fbc in io_loop_handler_run (ioloop=0xbc99a0) at ioloop.c:648 No locals. #24 0x00007f9caeb34178 in io_loop_run (ioloop=0xbc99a0) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #25 0x00007f9caeabc6f3 in master_service_run (service=0xbc9840, callback=<value optimized out>) at master-service.c:666 No locals. #26 0x0000000000426525 in main (argc=2, argv=0xbc95e0) at main.c:491 set_roots = {0x42f280, 0x637a40, 0x0} login_set = {auth_socket_path = 0xbc1050 "\210\020\274", postlogin_socket_path = 0xbc1088 "[myuser(a)mydomain.eu 192.168.218.35 LIST]", postlogin_timeout_secs = 60, callback = 0x426680 <login_client_connected>, failure_callback = 0x425dd0 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = 0x430284 "auth-master" c = <value optimized out> -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

2 4

Dovecot user lookup from sendmail
by Garry Glendown 06 Jul '17

06 Jul '17

Hi * after trying everything I could think of and find on the web, I'm totally stumped ... maybe someone give me some hints on what I'm doing wrong, or where to look ... I have an ancient customer box with sendmail & cyrus imap, with imap using an LDAP database of users (no locally configured users), all of which is working fine. This machine needs to be replaced by a new installation, which - regrettably - is supposed to use SLES 12. Which does not have any Cyrus IMAP packages available anymore, so I had to use the Dovecot imap instead. I've already got the LDAP auth working, as well as the imap storage of mails (used imapsync to copy all of the old mailboxes to the new machine), everything fine so far. Anyway, I'm running into problems getting sendmail to check whether a recipient actually exists. Any local user is correctly identified, but all virtual users are constantly rejected. I tried finding anything on how sendmail actually does the user check ... on the cyrus install, all I had to do is define(`confLOCAL_MAILER',`cyrusv2')dnl define(`CYRUSV2_MAILER_ARGS',`FILE /var/lib/imap/socket/lmtp')dnl MAILER(cyrusv2)dnl and both user checks and local delivery worked. What's the appropriate config entry in the .mc for dovecot? I tried settings like: FEATURE(`local_lmtp',`[IPC]',`FILE /var/run/dovecot/lmtp')dnl and used the dovecot.m4 file together with MAILER(`dovecot')dnl but couldn't see anything happening - or improve. Hints and help greatly appreciated! -garry -- PGP Fingerprint: A79F A33F 5B13 BEB7 A51D 274F F99C 3AE2 4BCB 7015

4 4

Re: Dovecot user lookup from sendmail
by Joseph Tam 06 Jul '17

06 Jul '17

Garry Glendown <garry(a)glendown.de> writes: > Anyway, I'm running into problems getting sendmail to check whether a > recipient actually exists. Any local user is correctly identified, but > all virtual users are constantly rejected. I tried finding anything on > how sendmail actually does the user check ... on the cyrus install, all > I had to do is > > define(`confLOCAL_MAILER',`cyrusv2')dnl > define(`CYRUSV2_MAILER_ARGS',`FILE /var/lib/imap/socket/lmtp')dnl > MAILER(cyrusv2)dnl It's unclear what you mean when you say "problems getting sendmail to check whether a recipient actually exists". Are you saying 1) During SMTP delivery, sendmail complains a user is unknown? RCPT TO:<user@domain> 550 5.1.1 <user@domain>... User unknown In this case, it has nothing to do with dovecot. You'll have to check your sendmail configs on user map lookups. 2) The LMTP can't deliver to a user's INBOX? If this is what you're complaining about, you ought to supply i) log entries demonstrating the problem ii) a hint of your configuration i.e. doveconf -n Joseph Tam <jtam.home(a)gmail.com>

1 0

gzip compressed mbox: Panic: file istream-zlib.c: line 421 (i_stream_zlib_seek): assertion failed: (ret == -1)
by Anton Yuzhaninov 05 Jul '17

05 Jul '17

Hello, I use mbox compressed by gzip as read-only folder (using zlib plugin). I have errors in logs: Panic: file istream-zlib.c: line 416 (i_stream_zlib_seek): assertion failed: (ret == -1) and can't read messages in MUA. IMAP commands to reproduce a bug: 1 SELECT "compressed.gz" 2 UID fetch 2 BODY.PEEK[] # sleep 5 3 UID fetch 2 BODY.PEEK[] # repeat sleep/fetch until assert (a few fetches need to trigger bug, probably because of caching) The bug appeared in 2.2.26 and still can be reproduced (in 2.2.31) Using 'git bisect' was not productive (a lot of build errors), but I've found that reverting this commit: https://github.com/dovecot/core/commit/6a1110d8757bb72fd90f4fe0857fd3aeaf89… "fixes" problem for me, so I suppose the bug was introduced in this commit. -- Best Regards, Anton Yuzhaninov

2 4

how to make user iteration work (ldap)
by mj 04 Jul '17

04 Jul '17

Hi, User iteration doesn't work, we're getting: > auth: Error: Trying to iterate users, but userdbs don't support it The way I understand it, I need to set iterate_attrs and iterate_filter for iteration to work. I have set it, and yet it does't work with the above failure. Our config is against ldap (active directory) and generdoveadm user -u "*" oalally works fine. Can anyone here take a quick look, and tell me how to make > doveadm user -u "*" work? Below are the required configs. Any tips would be appreciated...! MJ > root@dovetest:/etc/dovecot# doveconf -n > # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.16 (fed8554) > # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.7 xfs > auth_debug = yes > auth_debug_passwords = yes > auth_failure_delay = 400 secs > auth_master_user_separator = * > auth_mechanisms = plain login > auth_username_format = %Ln > auth_verbose = yes > auth_verbose_passwords = plain > debug_log_path = /var/log/dovecot/dovecot.debug > deliver_log_format = %f | %s | msgid=%m: %$ > disable_plaintext_auth = no > info_log_path = /var/log/dovecot/dovecot.info > lda_mailbox_autocreate = yes > lda_mailbox_autosubscribe = yes > log_path = /var/log/dovecot/dovecot.err > login_greeting = Dovecot ready. > mail_gid = vmail > mail_location = maildir:/var/vmail/%Ln/Maildir:LAYOUT=fs:DIRNAME=mAildir > mail_plugins = acl lazy_expunge zlib quota mail_log notify > mail_uid = vmail > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave > namespace { > list = children > location = maildir:/var/vmail/%%u/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%u/shared/%%u > prefix = shared/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace inbox { > inbox = yes > location = > mailbox "Deleted items" { > special_use = \Trash > } > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent items" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > mailbox inbox { > auto = subscribe > } > prefix = > separator = / > type = private > } > passdb { > args = /etc/dovecot/master-users > driver = passwd-file > master = yes > } > passdb { > args = failure_show_msg=yes dovecot > driver = pam > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > skip = authenticated > } > plugin { > acl = vfile > acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db > mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append > mail_log_fields = uid box msgid from subject > quota = maildir > quota_rule = ?:storage=5G > quota_rule2 = Trash:storage=+100M > quota_warning = storage=97%% quota-warning 97 %u > quota_warning2 = storage=95%% quota-warning 95 %u > quota_warning3 = storage=90%% quota-warning 90 %u > quota_warning4 = storage=85%% quota-warning 85 %u > quota_warning5 = storage=80%% quota-warning 80 %u > quota_warning6 = -storage=100%% quota-warning below %u > sieve = ~/.dovecot.sieve > sieve_default = /var/lib/dovecot/default.sieve > sieve_dir = ~/sieve > } > protocols = imap lmtp sieve > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > unix_listener auth-userdb { > group = vmail > mode = 0666 > user = vmail > } > } > service imap-login { > process_limit = 500 > process_min_avail = 2 > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > unix_listener quota-warning { > user = vmail > } > user = dovecot > } > ssl_ca = </etc/ssl/comodo/chain.crt > ssl_cert = </etc/ssl/comodo/server.crt > ssl_key = # hidden, use -P to show it > ssl_protocols = !SSLv2 !SSLv3 > userdb { > args = uid=vmail gid=vmail home=/var/vmail/%n allow_all_users=yes > driver = static > } > verbose_proctitle = yes > protocol lda { > mail_plugins = acl lazy_expunge zlib quota mail_log notify sieve quota > } > protocol imap { > imap_max_line_length = 2 M > mail_max_userip_connections = 30 > mail_plugins = acl lazy_expunge zlib quota mail_log notify imap_quota imap_acl > } and dovecot-ldap.conf.ext: > hosts = 127.0.0.1:391 > dn = cn=search,cn=users,dc=company,dc=com > dnpass = secret > tls = no > debug_level = 0 > auth_bind = yes > base = CN=Users, DC=samba, DC=cmpany, DC=com > scope = subtree > user_attrs = =home=/var/vmail/%n/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%n/shared/%n,=mail=maildir:/var/vmail/%n/Maildir:LAYOUT=fs:DIRNAME=mAildir:INDEX=/var/vmail/%n/shared/%n > user_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) > pass_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) > iterate_attrs = sAMAccountName=user > iterate_filter = (objectClass=person)

1 0

[PATCH] dsync: fix splitting login from host
by Thomas Reifferscheid 04 Jul '17

04 Jul '17

Using strchr() was splitting login and host at the first occurrence of '@' which leads to troublesome behaviour. When calling strace one would notice the misbehaviour: execve("/usr/sbin/ssh", ["ssh", "-lthomas", "domain.org(a)10.8.13.2" using strrch() however splits login and host at the last occurrence of '@'. Signed-off-by: Thomas Reifferscheid <thomas(a)reifferscheid.org> --- src/doveadm/doveadm-dsync.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/doveadm/doveadm-dsync.c b/src/doveadm/doveadm-dsync.c index caf569f1d..3b8d4549a 100644 --- a/src/doveadm/doveadm-dsync.c +++ b/src/doveadm/doveadm-dsync.c @@ -479,7 +479,7 @@ parse_ssh_location(const char *location, const char *username) { const char *host, *login; - host = strchr(location, '@'); + host = strrchr(location, '@'); if (host != NULL) login = t_strdup_until(location, host++); else { -- 2.11.0

2 1

NOTIFY broken in 2.2.31?
by Bojan Smojver 04 Jul '17

04 Jul '17

Hi, I just updated my Dovecot to the new build in Fedora 26, which is based on 2.2.31. After I did that, Evolution (3.24.3) is no longer receiving notifications about new mail in folders other than inbox (the same version of Evo that worked fine against Dovecot 2.2.30.2). The only folder that still gets notifications is inbox. I see there have been changes to NOTIFY code in this release. What would you like me to send to you in order to debug this problem? When I run Evo with some debugging options turned on, I can see: ---------------- [imapx:B] I/O: 'B00010 NOTIFY SET (selected (MessageNew (UID RFC822.SIZE RFC822.HEADER FLAGS) MessageExpunge FlagChange)) (personal (MessageNew MessageExpunge MailboxName SubscriptionChange))' [imapx:B] I/O: 'B00010 OK NOTIFY completed (0.001 + 0.000 secs).' ---------------- So, notify setting appears to be happening and it looks pretty much the same as it does against version 2.2.30.2. -- Bojan

3 3