- dovecot - dovecot.org

Alternate mail store of few users is disparaged unexpectedly
by Prakash Autade 02 Sep '16

02 Sep '16

Hello, We are using dovecot with mdbox and ALT store on S3(Simple Storage System). We export the mail_location=mdbox:/<user-mailstore>/mdbox:ALT=/altmailstore/<user-mailstore>/mdbox of user in extra parameters. Today, alternate mail store of few users is disparaged unexpectedly which resulted in mail loss. We are unable to trace out why and when the alternate store is disparaged. Our hypothesis is, the folder is removed during doveadm altmove. We want to prevent this in future. It will be great if someone helps to identify the root cause. Dovecot version: 2.2.19 # dovecot -n # 2.2.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-573.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_mechanisms = plain login auth_verbose_passwords = plain disable_plaintext_auth = no mail_fsync = always mail_gid = 65111 mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 65111 mdbox_rotate_interval = 1 days mdbox_rotate_size = 20 M mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { auto = create } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = create special_use = \Trash } mailbox chat { auto = create } prefix = INBOX. separator = . type = private } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } ssl_cert = </conf/server/server.crt ssl_key = </conf/server/server.key -- Sincerely, Prakash P. Autade.

1 0

Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 02 Sep '16

02 Sep '16

Dear Dovecot developers! This problem already existed some years ago, has been fixed, and now it's there again in Dovecot 2.2.25 (2.2.24 was fine). I'm running CentOS 6 with a custom OpenSSL installation in /usr/local/ssl Therefore, Dovecot is configured like this: env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto -lssl" ./configure --prefix=/usr/local/Dovecot-2.2.25 --with-ssl=openssl --with-ssldir=/usr/local/Dovecot-2.2.25/etc/dovecot/certs With "pkg-config", the same options for SSL are provided. "make" and "make install" run just fine, and the daemon starts without any errors. However, if a user connects on port 993 (IMAPS), Dovecot logs this failure message to syslog: Jul 4 01:08:43 myhost dovecot: ssl-params: Fatal: Couldn't load required plugin /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so: dlopen() failed: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory Jul 4 01:08:43 myhost dovecot: ssl-params: Error: child process failed with status 22784 ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x00e8c000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00be4000) libc.so.6 => /lib/libc.so.6 (0x001a6000) libpthread.so.0 => /lib/libpthread.so.0 (0x003e4000) /lib/ld-linux.so.2 (0x007e7000) ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libdcrypt_openssl.so linux-gate.so.1 => (0x00dca000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00a7a000) libc.so.6 => /lib/libc.so.6 (0x00160000) libpthread.so.0 => /lib/libpthread.so.0 (0x0072f000) /lib/ld-linux.so.2 (0x00560000) When comparing to Dovecot 2.2.24: ldd /usr/local/Dovecot-2.2.24/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x0073d000) libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00b04000) libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x0044a000) librt.so.1 => /lib/librt.so.1 (0x00a60000) libc.so.6 => /lib/libc.so.6 (0x001e5000) libdl.so.2 => /lib/libdl.so.2 (0x003a9000) libpthread.so.0 => /lib/libpthread.so.0 (0x009d0000) /lib/ld-linux.so.2 (0x00d77000) There's no libdcrypt_openssl.so in Dovecot 2.2.24, so I guess with the newly introduced dcrypt stuff something with SSL went wrong. Would be great if that could be fixed so that SSL works again. Thanks a lot in advance ... Andreas

3 6

index: namespace not selectable, and no info. :(
by Larry Rosenman 02 Sep '16

02 Sep '16

thebighonker.lerctr.org ~ $ doveadm -D -v index \#ARCHIVE/2012/02/INBOX Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, inbox=/home/ler/mail/INBOX, alt= doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no, subscriptions=yes location=mbox:~/MAILARCHIVE doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=, control=, inbox=/home/ler/MAILARCHIVE/inbox, alt= doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable doveadm(ler): Error: Mailbox #ARCHIVE/2012/02/INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2016-08-30 13:41:57] NOTHING additional is logged in syslog. doveconf -n attached. I **CAN** select the mailbox in mutt using #ARCHIVE/2012/02/INBOX -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 1

Force SSL/TLS and client certificate checking only for connections from Internet
by Konstantin Khomoutov 02 Sep '16

02 Sep '16

(Please CC me if possible.) I have Dovecot 2.2.13 (shipped with Debian 8 "Jessie") serving IMAP for a small organization. It's connected both to the Internet and to that organization LAN. I'd like to have Dovecot has rather tight security requirements for connections made from the Internet and reasonably laxed requirements for the LAN clients. Due to Dovecot authenticating users against a LDAP database which is also used for logging into the users' machines, we have to use somewhat weak passwords (randomly generated but short) for most users. Because of this I want to: * Mandate the usage of TLS for the connections made from Internet; * Require the clients to present their SSL certificates, and * Verify the validity of these certificates. The certificates are issued by our own CA, so it's not a problem to verify them. The first iteration was to set ssl = required and disable_plaintext_auth = yes which I then overrode with a "remote" section for LAN connections: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes } The next iteration was to actually enable verification of the client certificates. I have set the "ssl_ca" variable appropriately, then ssl_require_crl = yes ssl_verify_client_cert = yes and auth_ssl_require_client_cert = yes Then I went on and attempted to override the latter two settings for the LAN clients by appending them to my special "remote" section to it read: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes ssl_verify_client_cert = no auth_ssl_require_client_cert = no } But after restart Dovecot complained that I cannot use the "auth_ssl_require_client_cert" setting in a "remote" section. I have removed it in the hope that still having ssl_verify_client_cert = no there would inhibit SSL certificate checks for the LAN clients but apparently it did not. So, to recap: * I need to have tight TLS settings for the clients connecting from the Internet: - TLS is required; - The client must present a valid certificate (issued by a CA we control). * LAN clients should use relaxed security settings: TLS is okay but that's all. How do I go about setting this? (On a side note, I can supposedly get away installing stunnel and making it proxy IMAP and IMAPS connections to Dovecot -- at least from the documentation, it appears stunnel supports IMAP+STARTTLS, -- but I would rather have all this handled solely by Dovecot.)

1 0

Re: initd script does not stop/restart all dovecot processes
by Christian Kivalo 02 Sep '16

02 Sep '16

On 2016-09-02 12:15, Florent B wrote: > On 09/02/2016 11:57 AM, Aki Tuomi wrote: >>> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> >>> wrote: >>> >>> >> Hi >> >> You could look under /lib/systemd/system or similar. The .in file from >> repo gets a sed treatment during make install. >> >> Aki Tuomi > > Ok, but I use 2.2.24, and when I did "make install" from source, it did > not install any Dovecot service. Was it introduced in 2.2.25 ? "make > install" output does not show anything with "dovecot.service.in"... i use ./configure with --with-systemdsystemunitdir=/etc/systemd/system/ and that installs the systemd.service and socket > That's why I need to copy initd script by myself, and did the same with > systemd unit file when you suggested me to try it. -- Christian Kivalo

1 0

Re: initd script does not stop/restart all dovecot processes
by Aki Tuomi 02 Sep '16

02 Sep '16

> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> wrote: > > Hi You could look under /lib/systemd/system or similar. The .in file from repo gets a sed treatment during make install. Aki Tuomi

1 0

Re: initd script does not stop/restart all dovecot processes
by Sami Ketola 02 Sep '16

02 Sep '16

> On 01 Sep 2016, at 17:25, Florent B <florent(a)coppint.com> wrote: > > Hi everyone, > > On Debian Jessie servers, I use initd script provided by Dovecot 2.2 (in > doc/dovecot-initd.sh) and when I stop or restart dovecot service, it > still remains some process : > > ps aux | grep dove > dovecot 1798 0.0 0.1 9408 2116 ? S 16:15 0:00 > dovecot/anvil [1 connections] > root 1799 0.0 0.1 9544 2288 ? S 16:15 0:00 dovecot/log > dovecot 1812 0.0 0.2 39144 5720 ? S 16:15 0:00 > dovecot/auth [0 wait, 0 passdb, 0 userdb] > root 1844 0.0 0.1 12728 2076 pts/0 S+ 16:16 0:00 grep dove > > > Is it expected ? "restart" does not work of course, and "start" after > "stop" too. > > How can I fix this ? Debian Jessie comes with systemd so you really should not use initscript anymore but switch to systemd for starting dovecot. There is systemd service description file available for you in case your vendor does not provide it in the package: https://github.com/dovecot/core/blob/master/dovecot.service.in Sami

2 1

dovecot and ldap with problem on userdb
by Averlon GmbH (in Gründung) 02 Sep '16

02 Sep '16

Hi, I have setup a new ubuntu on 16.04.. I have already a running system on 14.04 but wanted to migrate. I get an error when checking user in ldap. +++ Aug 31 18:14:16 auth: Error: ldap_bind Aug 31 18:14:16 auth: Error: ldap_simple_bind Aug 31 18:14:16 auth: Error: ldap_sasl_bind Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_new_connection 1 1 0 Aug 31 18:14:16 auth: Error: ldap_int_open_connection Aug 31 18:14:16 auth: Error: ldap_connect_to_host: TCP localhost:389 Aug 31 18:14:16 auth: Error: ldap_new_socket: 20 Aug 31 18:14:16 auth: Error: ldap_prepare_socket: 20 Aug 31 18:14:16 auth: Error: ldap_connect_to_host: Trying ::1 389 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: fd: 20 tm: 5 async: 0 Aug 31 18:14:16 auth: Error: ldap_ndelay_on: 20 Aug 31 18:14:16 auth: Error: attempting to connect: Aug 31 18:14:16 auth: Error: connect errno: 115 Aug 31 18:14:16 auth: Error: ldap_int_poll: fd: 20 tm: 5 Aug 31 18:14:16 auth: Error: ldap_is_sock_ready: 20 Aug 31 18:14:16 auth: Error: ldap_ndelay_off: 20 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: 0 Aug 31 18:14:16 auth: Error: ldap_open_defconn: successful Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 1, origid 1, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 1 message type bind Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 1, msgid 1) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_search Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Aug 31 18:14:16 auth: Error: put_filter: AND Aug 31 18:14:16 auth: Error: put_filter_list "(objectClass=posixAccount)(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: "(objectClass=posixAccount)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "objectClass=posixAccount" Aug 31 18:14:16 auth: Error: put_filter: "(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "mail=info" Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 2, origid 2, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 2 message type search-result Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 2, msgid 2) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_first_attribute Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 1 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 0 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:16:18 auth: Error: ldap_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection 1 1 Aug 31 18:16:18 auth: Error: ldap_send_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection: actually freed +++ The problem is this line: Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Since the file to run the userdb contains this command: user_filter = (&(objectClass=posixAccount)(mail=%u)) Which should user the full name, in my case a full e-mail address. The postfix command is: virtual_transport = lmtp:unix:private/dovecot-lmtp When using: virtual_transport = dovecot The correct string is shown for %u. Here is dovecot conf. I don't believe this will cause the error. Anyhow. +++ dovecot -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS ext4 auth_mechanisms = plain login auth_username_format = %Ln debug_log_path = /var/log/dovecot/dovecot-debug.log info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log mail_gid = avvmail mail_location = maildir:/var/av_vmail/%d/%n:LAYOUT=fs mail_privileged_group = avvmail mail_uid = avvmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocols = pop3 imap lmtp service auth-worker { unix_listener auth-worker { user = root } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mode = 0666 user = } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = avvmail } ssl = required ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128 :+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDE A:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl-cert-snakeoil.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = " quota imap_quota antispam" } +++ Please let me know what additional info I can provide to narrow the problem and get to a solution. By the way: When using: virtual_transport = dovecot I get another error with some file permissions on auth-userdb which I was not able to overcome sofar. Help appreciated. Mit freundlichenGrüßen / Kind Regards Kallewirsch

2 3

Dsync config help
by Jean-Luc Wasmer 01 Sep '16

01 Sep '16

Hi, I’m having a hard time with the http://wiki2.dovecot.org/Replication page. - for a master-master setup, does the configuration need to be mirrored on both masters? - after aggregating unrelated sections of the wiki page, there seems to be 3 different values for “mail_replica": - "remote”: for SSH - “remoteprefix": for SSH wrapper - “tcp”: for TCP connection using the Doveadm protocol Is this correct? - what’s the purpose of the replicator VS aggregator VS doveadm services? Who talks to who? Where can I find documentation about their configuration (i.e. not examples) - most examples are for a single vmail user setup… what should be done when using system accounts? Thanks, Jean-Luc

2 4

autoexpunge clarification
by Michael Fox 01 Sep '16

01 Sep '16

I'm trying to understand autoexpunge, but the documentation is just not clear. Hopefully, someone can clear up a few questions. http://wiki.dovecot.org/MailboxSettings says the following: autoexpunge=<time>: (v2.2.20+) Automatically at user deinitialization expunge all mails in this mailbox whose saved-timestamp is older than <time> (e.g. autoexpunge=30d). This removes the need for expire plugin <http://wiki.dovecot.org/Plugins/Expire> if you don't care that the expunging may not always happen in time. What does "at user deinitialization" mean? What does "if you don't care that the expunging may not always happen in time" mean? I read the sub-bullets but they just aren't clear. When exactly does autoexpunge occur? Thanks, Michael

2 4