- dovecot - dovecot.org

panic when doveadm sieve put between multiple hosts
by Tyler Jachetta 31 Jan '17

31 Jan '17

Dovecot version: 2.2.25 (7be1766) I’m looking into an issue we’re having with a new setup. We have one fronted host with two backend hosts, and we’re attempting to use doveadm to allow us to administer sieve on the frontend and have it replicated to the backend hosts. When I attempt to use doveadm sieve put on the frontend host, i get the following on the frontend host: frontend-machine $ cat /tmp/default.sieve | doveadm sieve put default doveadm(root): Error: doveadm server disconnected before handshake: Connection reset by peer doveadm(root): Error: 10.1.11.82:10993: Command sieve put failed for root: Connection reset by peer when this happens, on the backend, I see this in /var/log/maillog: Jan 9 17:00:35 was-imap1 dovecot: doveadm: Panic: epoll_ctl(add, 0) failed: Operation not permitted (fd doesn't support epoll - instead of '<file', try 'cat file|') Jan 9 17:00:35 was-imap1 dovecot: doveadm: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x8d52e) [0x7f7a86ba952e] -> /usr/lib64/dovecot/libdovecot.so.0(+0x8d60e) [0x7f7a86ba960e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7a86b481b6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_add+0x147) [0x7f7a86bbe067] -> /usr/lib64/dovecot/libdovecot.so.0(+0xa0311) [0x7f7a86bbc311] -> /usr/lib64/dovecot/libdovecot.so.0(io_add+0xd) [0x7f7a86bbc3bd] -> dovecot/doveadm-server(doveadm_mail_get_input+0xde) [0x7f7a875c53de] -> dovecot/doveadm-server(doveadm_mail_single_user+0x73) [0x7f7a875c5633] -> dovecot/doveadm-server(+0x2874d) [0x7f7a875c574d] -> dovecot/doveadm-server(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x27d) [0x7f7a875c65fd] -> dovecot/doveadm-server(doveadm_cmd_run_ver2+0x50c) [0x7f7a875d492c] -> dovecot/doveadm-server(+0x3b223) [0x7f7a875d8223] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f7a86bbce8c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xff) [0x7f7a86bbe2ef] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f7a86bbcf15] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f7a86bbd0c8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7a86b4e613] -> dovecot/doveadm-server(main+0x186) [0x7f7a875b6276] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f7a8677bb15] -> dovecot/doveadm-server(+0x19321) [0x7f7a875b6321] Jan 9 17:00:36 was-imap1 dovecot: doveadm: Fatal: master: service(doveadm): child 28542 killed with signal 6 (core dumped) Now, if I log in to either of the backend hosts, I can run the sieve put command and it all works out fine, so it’s something in the communication between the frontend and backend. dovecot -n output for both a frontend and backend below frontend-machine $ dovecot -n # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 3.10.0-327.18.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_username_format = %Ln director_mail_servers = 10.1.11.82 10.1.11.83 director_servers = 10.1.11.81 director_username_hash = %Ln doveadm_port = 10993 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = proxy=y nopassword=y ssl=any-cert driver = static } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap pop3 lmtp sieve service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 1109 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 10993 } } service imap-login { executable = imap-login director } service imap { process_limit = 250 } service ipc { unix_listener ipc { user = dovecot } } service managesieve-login { executable = managesieve-login director } service pop3-login { executable = pop3-login director } ssl = required ssl_ca = </etc/pki/CA/ca-cert-***.pem ssl_cert = </etc/pki/tls/certs/dovecot.cert ssl_client_ca_file = </etc/pki/CA/ca-cert-***.pem ssl_key = </etc/pki/tls/private/dovecot.key ssl_protocols = !SSLv2 !SSLv3 ssl_require_crl = no userdb { driver = passwd } protocol doveadm { auth_socket_path = director-userdb } protocol sieve { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static name = } } local 10.1.11.0/24 { doveadm_password = # hidden, use -P to show it } backend-machine $ dovecot -n # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 3.10.0-327.18.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_username_format = %Ln default_vsz_limit = 2 G lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_location = maildir:~/Maildir mail_plugins = " notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } plugin { mail_replica = tcp:10.1.11.82:10993 sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service doveadm { inet_listener { port = 10993 } } service lmtp { inet_listener lmtp { port = 24 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_ca = </etc/pki/CA/ca-cert-***.pem ssl_cert = </etc/pki/tls/certs/dovecot.cert ssl_client_ca_file = </etc/pki/CA/ca-cert-***.pem ssl_key = </etc/pki/tls/private/dovecot.key ssl_protocols = !SSLv2 !SSLv3 ssl_require_crl = no userdb { driver = passwd } protocol lmtp { auth_username_format = %Ln info_log_path = /var/log/dovecot/lmtp.log mail_plugins = " notify replication sieve" postmaster_address = postmaster(a)***global.com } protocol sieve { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static name = } } local 10.1.11.0/24 { doveadm_password = # hidden, use -P to show it }

2 1

dovecot 2.2.18 replication I/O Timeout
by Jan Büren 31 Jan '17

31 Jan '17

Dear list, I am having an issue like this http://www.dovecot.org/list/dovecot-cvs/2014-September/024898.html with my current dovecot 2.2.18 Concret: doveadm -Dv replicator replicate -p high -f info throws an I/O Timeout error and the only thing I can see are some lock issues: Error: Couldn't lock /var/vmail/info/.dovecot-sync.lock: Timed out after 30 seconds Can I debug the communication one level deeper? I replicate over a somewhat slow DSL connection. I had the some problem with dovecot 2.2.9 and after upgrading to 2.2.15 everything went smoothly, just a wild guess, maybe the timeout_reset was removed again? Well, doesn't look like it: https://github.com/dovecot/core/blob/master/src/doveadm/dsync/dsync-ibc-str… or https://github.com/dovecot/core/blame/master/src/doveadm/dsync/dsync-ibc-st… Some debug hints would be nice. Thanks! Jan -- Blog http://blog.kivitendo.de/ kivitendo GmbH Jan Büren Kölnstr. 311 53117 Bonn USt-IdNr. DE292363254 Telefon: 0228 92 98 2012 persönliche Durchwahl: 0228 92 97 8965

1 0

Auth cache does not take %real_rip into account
by Tom Sommer 31 Jan '17

31 Jan '17

I run a Director setup with a webmail in front, the webmail is in login_trusted_networks and sends IMAP-ID x-original-ip to log the client IP. If I enable auth_debug on the director, I see that the cache key contains the client IP, and not the %real_rip. This is causing problems because in my passdb SQL query, I use the %real_rip to determine if login is allowed. Should %real_rip not be added to the auth cache key? Or should it be the cache key instead of the %rip? Thanks -- Tom

1 0

Re: dovecot mdbox never fix broken indexes
by Andrey Melnikov 31 Jan '17

31 Jan '17

2017-01-30 11:43 GMT+03:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > Hi! > > Please send these to dovecot(a)dovecot.org instead of us directly. Thank you. Ok, added to cc. > Also, did you try force-resync? Not help. # doveadm force-resync -u altek(a)altek.info \* doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332136) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332196) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332212) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332272) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332288) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332348) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332364) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332424) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332440) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332500) doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index doveadm(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index in logs after force-resync Jan 30 11:49:23 mail dovecot: lmtp(21946): Connect from ::1 Jan 30 11:49:23 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332516) Jan 30 11:49:23 mail dovecot: lmtp(altek(a)altek.info): Error: Log synchronization error at seq=63,offset=58292 for /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension record inc drops number below zero (uid=5845, diff=-1, orig=0) Jan 30 11:49:23 mail dovecot: lmtp(altek(a)altek.info): Error: Log synchronization error at seq=63,offset=78516 for /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension record inc drops number below zero (uid=11497, diff=-1, orig=0) Jan 30 11:49:23 mail dovecot: lmtp(altek(a)altek.info): Error: Log synchronization error at seq=63,offset=201684 for /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension record inc drops number below zero (uid=14249, diff=-2, orig=0) Jan 30 11:49:23 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index Jan 30 11:49:24 mail dovecot: lmtp(altek(a)altek.info): 7inAKRP+jli6VQAANAhlbg: msgid=<7e59e033dac89045b4429bde28e559aa7ca6662c(a)41sem-glav.ru>: saved mail to INBOX Jan 30 11:49:24 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: Inconsistency in map index (63,31880 != 63,332640) Jan 30 11:49:24 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index Jan 30 11:49:24 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox /srv/vmail/altek.info/altek/storage: rebuilding indexes Jan 30 11:49:24 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking index file /srv/vmail/altek.info/altek/storage/dovecot.map.index Jan 30 11:49:24 mail dovecot: lmtp(21946): Disconnect from ::1: Successful quit > On 30.01.2017 10:20, Andrey Melnikov wrote: >> Hello. >> >> After power crash mdbox index corrupted and dovecot never fix it. >> >> -- cut -- >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327528) >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=58292 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=5845, diff=-1, orig=0) >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=78516 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=11497, diff=-1, orig=0) >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=201684 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=14249, diff=-2, orig=0) >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): >> gfPAFtXejlhbOAAANAhlbg: >> msgid=<E1cY5ZK-00037Z-AM(a)mx-out.depo-magazine.ru>: saved mail to INBOX >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327652) >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: rebuilding indexes >> Jan 30 09:36:05 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:43:32 mail dovecot: pop3-login: Login: >> user=<altek(a)altek.info>, method=PLAIN, rip=192.168.0.28, >> lip=192.168.0.1, mpid=14619, session=<azNKIkpHtg7AqAAc> >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327728) >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: rebuilding indexes >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Disconnected: >> Logged out top=0/0, retr=4/1676349, del=0/1153, size=439478778 >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327788) >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:43:35 mail dovecot: pop3(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327804) >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=58292 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=5845, diff=-1, orig=0) >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=78516 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=11497, diff=-1, orig=0) >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Error: Log >> synchronization error at seq=63,offset=201684 for >> /srv/vmail/altek.info/altek/storage/dovecot.map.index: Extension >> record inc drops number below zero (uid=14249, diff=-2, orig=0) >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): >> vwxyI/fgjlgyOQAANAhlbg: msgid=<003a01d27ac4$639789e0$2ac69da0$@ru>: >> saved mail to INBOX >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: Inconsistency in map index >> (63,31880 != 63,327928) >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> Jan 30 09:45:11 mail dovecot: lmtp(altek(a)altek.info): Warning: mdbox >> /srv/vmail/altek.info/altek/storage: rebuilding indexes >> Jan 30 09:45:12 mail dovecot: lmtp(altek(a)altek.info): Warning: fscking >> index file /srv/vmail/altek.info/altek/storage/dovecot.map.index >> -- cut -- >

2 3

2.2.26.0 : accessing "mdbox_deleted" content destroys indexes
by Benoit Branciard 31 Jan '17

31 Jan '17

Accessing or listing "mdbox_deleted" contents seems to destroy MDBOX indexes. Examples of commands which triggers this problem ($home being the home directory of $user, and mail_location being mdbox:~/mdbox): doveadm -o mail="mdbox_deleted:$home/mdbox" -f table mailbox status -u "$user" 'messages vsize' INBOX doveadm -v import -s -u "$user" "mdbox_deleted:$home/mdbox" restored-mail ALL The above "doveadm mailbox status" command outputs an error: doveadm(user): Error: Log synchronization error at seq=1,offset=104908 for (in-memory index): Append with UID 1, but next_uid = 5227 doveadm(user): Warning: fscking index file (in-memory index) Subsequent "doveadm mailbox status -u $user 'messages vsize'" on the active mailbox report empty folders (null messages and vsize), whereas folders actually aren't empty. Workaround: this problem is corrected by a "doveadm search -u $user all", which obviously forces indexes to be rebuilt. Vesion: 2.2.26.0 (23d1de6) (Debian jessie-backports package) We did *not* have this problem in 2.2.24 version (previous Debian jessie-backports package). We use following mail_location with explicit DIRNAME (don't know if that matters): mail_location = mdbox:~/mdbox:DIRNAME=_@@_dbox-Mails_@@_ I tested with and without appending ":DIRNAME=_@@_dbox-Mails_@@_" to mail="mdbox_deleted:$home/mdbox" with same results. -- Benoit BRANCIARD Service InfraStructures (SIS) Direction du Système d'Information et des Usages Numériques (DSIUN) Université Paris 1 Panthéon-Sorbonne Centre Pierre Mendès France 90 rue de Tolbiac - 75634 Paris cedex 13 - France Bur. B406 - Tél +33 1 44 07 89 68 - Fax +33 1 44 07 89 66 Accueil: +33 1 44 07 89 65 - Assistance-DSIUN(a)univ-paris1.fr http://dsi.univ-paris1.fr

1 1

Re: tlsv1 alert unknown ca: SSL alert number 48
by Joseph Tam 31 Jan '17

31 Jan '17

> Jan 28 22:42:44 dovecot: imap-login: Disconnected (no auth attempts in 0 > secs): user=<>, rip=192.168.1.16, lip=192.168.1.3, TLS: SSL_read() > failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown > ca: SSL alert number 48, session= > ... > # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> > ssl = yes > ssl_cert = </etc/ssl/certs/dovecot.pem > ssl_key = </etc/ssl/private/dovecot.pem > ssl_ca = </etc/ssl/private/cert.pem Are you using client verification (i.e. mutual authentication of mail client and server)? If not, just comment out ssl_ca. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Moving to new password scheme
by Joseph Tam 30 Jan '17

30 Jan '17

Okn Mon, 30 Jan 2017, dovecot-request(a)dovecot.org wrote: > OK, I have the dovecot.conf stuff working so that it calls the external > script and I have that script spitting out the login and a SHA256-CRYPT > password with hash: > > Thu Jan 26 06:45:54 MST 2017 > USER: xander(a)xanmax.com > {SHA512-CRYPT}$6$CfKc0NdiRkWOisjL$kHAx2oxB? Did you truncate the results? This hash looks far too short to be a real SHA512 hash. Joseph Tam <jtam.home(a)gmail.com>

1 0

tlsv1 alert unknown ca: SSL alert number 48
by Maurizio Caloro 30 Jan '17

30 Jan '17

Hello together Please i'am new to this list, i have already installed Postfix and Dovecot last version from Internet but i have the porblem that the mail do not arive, and with me Cert, i have read on the Dovecot site, but i don't have me found me solutions to fix this. "tlsv1 alert unknown ca: SSL alert number 48" Jan 28 22:42:44 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.16, lip=192.168.1.3, TLS: SSL_read() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session= # dovecot --version 2.2.27 (c0f36b0) i think that the settings about Cert are done, but if connecting with Thunderbird i will become this error "tlsv1 alert unknown ca: SSL alert number 48" Please you can point me to the right direction, so i can run this Mailserver on me RaspverryPi. Regards Mauri -- "10-ssl.conf" i have editing and Dovecot and Postfix reloaded without problems. # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem ssl_ca = </etc/ssl/private/cert.pem root@raspberrypi: # cat /var/log/mail.log Jan 28 22:50:08 raspberrypi postfix/smtp[1889]: 9CF1E63F53: to=<mauric(a)gmx.ch>, relay=mx01.emig.gmx.net[212.227.17.5]:25, delay=193476, delays=193476/0.03/0.17/0, dsn=4.0.0, status=deferred (host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx109) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 7740F63E0F: from=<joe(a)caloro.ch>, size=575, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 98D5D63E0E: from=<joe(a)caloro.ch>, size=578, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/qmgr[940]: 9946863E0D: from=<joe(a)caloro.ch>, size=550, nrcpt=1 (queue active) Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: host mx01.emig.gmx.net[212.227.17.5] refused to talk to me: 554-gmx.net (mxgmx113) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl Jan 28 22:55:08 raspberrypi postfix/smtp[1926]: 7740F63E0F: to=<mauric(a)gmx.ch>, relay=mx00.emig.gmx.net[212.227.15.9]:25, delay=298205, delays=298205/0.03/0.18/0, dsn=4.0.0, status=deferred (host mx00.emig.gmx.net[212.227.15.9] refused to talk to me: 554-gmx.net (mxgmx006) Nemesis ESMTP Service not available 554-No SMTP service 554-IP address is black listed. 554 For explanation visit http://postmaster.gmx.com/en/error-messages?ip=151.248.162.33&c=bl) Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1927]: 98D5D63E0E: to=<joe(a)caloro.ch>, relay=none, delay=298271, delays=298241/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 22:55:38 raspberrypi postfix/smtp[1928]: 9946863E0D: to=<joe(a)caloro.ch>, relay=none, delay=298375, delays=298345/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 54EA064AF4: from=<>, size=2460, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 1D29F5F03D: from=<>, size=2471, nrcpt=1 (queue active) Jan 28 23:00:08 raspberrypi postfix/qmgr[940]: 86D2B63F5A: from=<joe(a)caloro.ch>, size=581, nrcpt=1 (queue active) Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: connect to caloro.ch[158.181.112.49]:25: Connection timed out Jan 28 23:00:38 raspberrypi postfix/smtp[2011]: 54EA064AF4: to=<joe(a)caloro.ch>, relay=none, delay=4596, delays=4566/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2013]: 86D2B63F5A: to=<joe(a)caloro.ch>, relay=none, delay=4586, delays=4556/0.04/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:00:38 raspberrypi postfix/smtp[2012]: 1D29F5F03D: to=<joe(a)caloro.ch>, relay=none, delay=350945, delays=350915/0.03/30/0, dsn=4.4.1, status=deferred (connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:05:08 raspberrypi postfix/qmgr[940]: E3C3C5DA02: from=<joe(a)caloro.ch>, size=576, nrcpt=1 (queue active) Jan 28 23:05:08 raspberrypi postfix/error[2058]: E3C3C5DA02: to=<joe(a)caloro.ch>, relay=none, delay=21492, delays=21492/0.03/0/0.02, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to caloro.ch[158.181.112.49]:25: Connection timed out) Jan 28 23:10:08 raspberrypi postfix/qmgr[940]: BEB535F03F: from=<>, size=2870, nrcpt=1 (queue active) root@raspberrypi: # doveconf -N # 2.2.27 (c0f36b0): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.41-v7+ armv7l Debian 8.0 auth_mechanisms = plain disable_plaintext_auth = yes listen = *, :: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam name = } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocols = imap pop3 service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service { unix_listener { mode = 0666 path = /var/spool/postfix/private/auth } unix_listener { group = postfix mode = 0666 user = postfix path = auth-userdb } name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl = yes ssl_ca = </etc/ssl/private/cert.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd name = } userdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file name = } protocol lmtp { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol pop3 { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict-async { name = dict-async } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap-hibernate { name = imap-hibernate } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service imap-master { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

3 2

FTS: how to remove from Solr index deleted mailbox?
by Alessio Cecchi 30 Jan '17

30 Jan '17

Hi, I'm running Dovecot with FTS and Apache Solr as backend. What is the command or the query to remove from Solr a deleted user/mailbox? Thanks -- Alessio Cecchi Postmaster AT http://www.qboxmail.it http://www.linkedin.com/in/alessice

2 1

Sharing between domains?
by dovecot＠avv.solutions 30 Jan '17

30 Jan '17

Hello Community, I am facing the following question: how is it possible to share malboxes between domains? Example: - 2 domains present on the same dovecot: domA and domB - userA@domA - userB@domB userA@domA wants to share his mailbox to userB@domB (again same server)? Thank you for your help. Greetz

2 2