- dovecot - dovecot.org

ACL problems on shared folder
by Thomas Robers 26 Jun '17

26 Jun '17

Hello, I've a Dovecot Server Version 2.2.30.2 running on CentOS 6.9 and there's a problem with acls on shared folder. We have some mailboxes which are shared and used as a "group mailbox" and also some user who share their inbox and only the inbox when they are on holiday e.g.. When I set "acl_defaults_from_inbox = yes" it's not possible to restrict the access to only the inbox, meaning that the user who wants to share only their inbox have to share the whole mailbox. On the other hand when I set "acl_defaults_from_inbox = no" it is not possible to create a folder direct under the inbox of a "group mailbox" and one gets a "permission denied" message. Is this the normal behavior normal? Although the user who wants to create the folder has all rights he gets a "permission denied" message? Why? Am I missing something important? Does anyone who uses shared mailboxes had the same problem and solved this? Any suggestion or information, that I probably miss is welcome. If needed here's my Dovecot configuration: > # 2.2.30.2 (c0c463e): /etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.18 (29cc74d) > # OS: Linux 2.6.32-696.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 > auth_debug = yes > auth_master_user_separator = * > auth_mechanisms = plain login > auth_verbose = yes > disable_plaintext_auth = no > mail_debug = yes > mail_location = maildir:/export/home/imap/%Lu/Maildir > mail_plugins = acl zlib mail_log notify > mailbox_idle_check_interval = 10 secs > mailbox_list_index = yes > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext > mbox_write_locks = fcntl > namespace { > hidden = no > ignore_on_failure = no > inbox = no > list = children > location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u > prefix = shared/%%u/ > separator = / > subscriptions = yes > type = shared > } > namespace inbox { > hidden = no > inbox = yes > list = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = INBOX/ > separator = / > type = private > } > passdb { > args = /etc/dovecot/master-users > driver = passwd-file > master = yes > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = file:/export/home/shared-db/shared-mailboxes > mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change > mail_log_fields = uid box msgid size from flags > sieve = ~/.dovecot.sieve > sieve_dir = ~/sieve > sieve_global = /var/lib/dovecot/sieve/global/ > sieve_user_log = ~/.dovecot.sieve.log > zlib_save = gz > zlib_save_level = 6 > } > protocols = imap pop3 lmtp sieve > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > unix_listener auth-userdb { > group = vmail > mode = 0660 > user = vmail > } > } > service imap-login { > process_limit = 500 > process_min_avail = 20 > } > service lmtp { > inet_listener lmtp { > address = 127.0.0.1 > port = 24 > } > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > ssl = required > ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain > ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT > ssl_key = # hidden, use -P to show it > ssl_protocols = !SSLv3 !SSLv2 > syslog_facility = local6 > userdb { > args = /etc/dovecot/dovecot-ldap-userdb.conf.ext > driver = ldap > } > protocol lmtp { > mail_plugins = acl zlib mail_log notify sieve > } > protocol imap { > mail_max_userip_connections = 100 > mail_plugins = acl zlib mail_log notify imap_zlib imap_acl > } TIA & Regards, Thomas

1 0

Courier migration to dovecot
by j.emerlik 23 Jun '17

23 Jun '17

Hi, I'm almost ready to migrate Courier to Dovecot 2.2.31 but I have one question about home and mail directory. It's good idea to have same directory form home and mail ? Which scenerio will be better and why ? For example: A) Home: /home/doamin/user1 Mail: /home/doamin/user1 B) Home: /home/doamin/user1/home Mail: /home/doamin/user1 C) Home: /home/doamin/user1/ Mail: /home/doamin/user1/mail Thanks & regards, Jack

3 4

v2.2.31 release candidate released
by Timo Sirainen 23 Jun '17

23 Jun '17

https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz.sig Unless new bugs are found, this will be the final v2.2.31 release, which will be released on Monday. * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + pop3-migration plugin: Strip trailing whitespace from headers when matching mails between IMAP and POP3. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it.

4 5

sieve vacation message if ....
by lejeczek 23 Jun '17

23 Jun '17

hi fellas generic construct for(if possible): reply vacation message if address is not from add1@com1 add2@com2 would you share? many thanks L.

4 5

Trouble after Upgrade to v2.2.30.2 missing value for DOVECOT_
by Beng Hui Ong 23 Jun '17

23 Jun '17

Hi, I keep getting these errors after upgraded to 2.2.30.2. I can't seems to find what is going on. This is running a Freebsd 10.3-RELEASE-p11 :( Can someone please assist ? Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Module loaded: /usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Jun 22 14:45:23 starlite2 dovecot: auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 22 14:45:23 starlite2 dovecot: auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 22 14:45:23 starlite2 dovecot: master: Error: service(auth): command startup failed, throttling for 4 secs root@starlite2:/usr/ports/mail/dovecot2/work/dovecot-2.2.30.2/src/auth # dovecot -n # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-RELEASE-p11 amd64 auth_debug = yes auth_default_realm = ispworkshop.com auth_mechanisms = plain login auth_realms = ispworkshop.com auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 5000 hostname = www3.ispworkshop.net last_valid_uid = 5000 lda_mailbox_autocreate = yes login_greeting = Ready. mail_gid = 5000 mail_location = maildir:~/ mail_plugins = quota expire mail_log notify mail_temp_dir = /var/tmp mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = ongbh(a)ispworkshop.net sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { process_min_avail = 1 } ssl = no userdb { driver = passwd } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 }

2 1

Issue with dsync server - copy transaction record copying to wrong destination mailbox.
by Ivan Warren 22 Jun '17

22 Jun '17

Hello all, I am encountering the following issue : I have 2 dovecot servers with 2 way replication. Everything works fine except for one specific issue : When my MUA (thunderbird) filters (junk & manual) refile a mail from my inbox, I then sometimes find multiple copies of the original message in the destination folder. I have seen the following log entries which make me think (but I'm new to this) that there could be an issue with the processing of the COPY transaction record during DSYNC : * TB Marking msg as Junk Jun 22 20:36:14 db04 dovecot: imap(ivan): flag_change: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB Copies msg to Junk Mailbox Jun 22 20:36:14 db04 dovecot: imap(ivan): copy from INBOX: box=Junk, uid=32059, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB expunges mail from INBOX Jun 22 20:36:14 db04 dovecot: imap(ivan): expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Local server receives transaction from remote server and saves message again to INBOX Jun 22 20:36:16 db04 dovecot: dsync-local(ivan): save: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server copies message from INBOX to INBOX <<<<<<<<<<<<<< That's my issue Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: copy from INBOX: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server expunges msg copy Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 Is this a known issue (I may not have looked deep enough..) ? Is more information needed ? (note again that for me dovecot is working perfectly fine except for that little issue). (Version is 2.2.27 from Debian stretch) Thanks, --Ivan

1 0

Released Pigeonhole v0.4.19.rc1 for Dovecot v2.2.31.rc1.
by Stephan Bosch 22 Jun '17

22 Jun '17

Hello Dovecot users, This small release is mainly about adjusting to changes in the Dovecot API. There is one significant fix. Changelog v0.4.19: * This release adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. Previous versions of Pigeonhole will produce compile warnings with the recent Dovecot releases (but still work ok). - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. This is in essence a very old bug, but it was exposed by recent changes. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

+vnd.dovecot.duplicate for Bogofilter duplication shortcomings
by Luescher Claude 21 Jun '17

21 Jun '17

Hello, Sorry for a bit offtopic but it seems the bogofilter community is just as dead as dspam is. I trying to switch from DSPAM to bogofilter on a server where if I turn bogofilter on I run into the following issue: Certain users have sender and recipient bcc maps setup in postfix. This is for forwarding copy of an email to other address for example: Incoming lclude(a)company.com -> info(a)company.com Outgoing lclude(a)company.com -> info(a)company.com This way whatever lcalude sends or receives a copy will be sent to the info mailbox. When bogofilter is enabled the bcc recipient (info) receives a dupe of every email. Did anybody run into this? virtual_destination_recipient_limit = 1 dspam_destination_recipient_limit = 1 was a working fix for me for the old system, however bogofilter_destination_recipient_limit = 1 does not work in this case so if this issue is not possible to fix by configuration an alternate solution like making dovecot delete duplicate messages by message ID would be a viable option. I have +vnd.dovecot.duplicate plugin enabled but it seems to be ineffective. Any other tips for a workaround? Thank you. Claude

2 3

Dovecot 2.2.30* compiling error
by Mart Pirita 21 Jun '17

21 Jun '17

Hello. I cant build 2.2.30*, but I can build fine version 2.2.29* with same options: RedHat based customized distro, 2.6.28.10 kernel Build options: export CPPFLAGS export LDFLAGS CPPFLAGS=-I/usr/local/ssl/include LDFLAGS=-L/usr/local/ssl/lib ./configure \ --prefix=/usr \ --with-ssl=openssl \ --with-ssldir=/etc/ssl \ --sysconfdir=/etc \ --without-vpopmail \ --with-pam \ --without-bsdauth \ --without-sql \ --without-nss \ --without-ldap \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-rundir=/var/run/dovecot\ --without-deliver \ --without-gssapi Build error: ltest_lib-test-bits.o: In function `bits_required64': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' test_lib-test-bits.o: In function `test_bits_requiredXX': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' ./.libs/liblib.a(numpack.o): In function `numpack_decode': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/numpack.c:43: undefined reference to `__builtin_clz' collect2: ld returned 1 exit status Please advise? -- Mart

3 7

dovecot & cap_net_admin capability
by Michal Hlavinka 21 Jun '17

21 Jun '17

Hi, we've seen SELinux reports from our users that dovecot tried to use something that needs CAP_NET_ADMIN capability. Before enabling it, we would like to know where it originated from. I've checked the sources, but was not able to find anything that would require this capability. Do you know for what it is used? CAP_NET_ADMIN Perform various network-related operations: * interface configuration; * administration of IP firewall, masquerading, and accounting; * modify routing tables; * bind to any address for transparent proxying "IP_TRANSPARENT"; * set type-of-service (TOS) "IP_TOS" * clear driver statistics; * set promiscuous mode; * enabling multicasting; * use setsockopt(2) to set the following socket options: SO_DEBUG, SO_MARK, SO_PRIORITY (for a priority outside the range 0 to 6),SO_RCVBUFFORCE, and SO_SNDBUFFORCE Cheers, Michal Hlavinka

2 2