- dovecot - dovecot.org

Re:\ help, permissions issues‏
by josh schooler 29 Jul '15

29 Jul '15

both of my other servers its owned by exim, the permissions in the other two servers are 644, and dovecot starts just fine on those, I don't know what happened I updated my server from opensuse 12.1 to 13.2 and now dovecot is refusing to start.> From: alvin.sm(a)Mail.Linux-Consulting.com> Subject: Re: help, permissions issues> To: dovecot(a)dovecot.org> Date: Mon, 27 Jul 2015 14:47:14 -0700> CC: alvin.sm(a)Mail.Linux-Consulting.com> > > hi> > > Hey everyone I've tried changing the permissions with the file it is telling me is giving me the issue, restarted exim and the computer, but still can't get dovecot to start.> > > > 2.2.13> > > dovecot -F> > doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 14: ssl_cert: Can't open file /etc/exim/openssl/exim.crt: Permission denied> > wag ...> > chown root.root /etc/exim/openssl> chmod 750 /etc/exim/openssl> > chown root.root /etc/exim/openssl/exim.*> chmod 400 /etc/exim/openssl/exim.*> > OpenSSL certs should always be read only by root> > you might want to check the docs regarding uid/gid running dovecot > and uid/gid of dovenull> and permissions for the dovecot dir tree /etc/dovecot*> > wag ... i think it should not be owned by exim> > ...> > > ssl_cert = </etc/exim/openssl/exim.crt> > ssl_key = </etc/exim/openssl/exim.key> > pixie dust> alvin> - http://NetworkNightmare.net/OpenSSL> - http://DDos-Mitigator.net

3 4

Deafness
by Steffan Cline 29 Jul '15

29 Jul '15

I’ve started in the last day or so having issues where users get a timeout when connecting to dovecot. The iPhone interprets this as an auth issue but re-entering the password makes no change. Outlook will either just not connect to it at all or it gives an error to re-enter the password also with no change. This happens within an hour of a "service dovecot restart". I’m using CentOS 6 with dovecot 2.0.9 from the centos repos. There’s nothing visible in the logs. Suggestions of what to check for? Thanks, Steffan

6 9

dbox: message internal date
by Francesco 29 Jul '15

29 Jul '15

Hello everyone and thanks in advance for the help :) I'm trying to figure out where does dovecot store the message internal date when using single dbox storage format. In Maildir format, the internal date is determined by the actual date of the file on the filesystem, but in dbox it doesn't seem to be the case. I'm looking forward for a way to modify a message internal date when on a dovecot instance running dbox storage engine, maybe anyone knows if it's possible and how to accomplish this? Again, thank you for the help Sincerely Francesco

1 0

sharing INBOX with ACL -> share all folders
by Marco Giunta 28 Jul '15

28 Jul '15

Hi at all, I have a problem with ACL; I want to share INBOX and Sent folder to an other user, but when I configure ACL on INBOX, all folders are shared (Sent, Junk, Draft, Trash, etc) # doveadm acl get -u janedoe INBOX ID Global Rights user=johndoe expunge insert lookup post read write write-deleted write-seen # doveadm acl get -u janedoe Sent ID Global Rights user=johndoe expunge insert lookup post read write write-deleted write-seen # doveadm acl get -u janedoe Trash ID Global Rights # doveadm acl get -u janedoe Drafts ID Global Rights # doveadm acl get -u janedoe Junk ID Global Rights # doveadm mailbox list -u johndoe Trash Junk Drafts Sent Archives Archives.2015 Other Users Other Users.janedoe Other Users.janedoe.Junk Other Users.janedoe.Drafts Other Users.janedoe.Sent Other Users.janedoe.Trash Other Users.janedoe.INBOX INBOX If I remove the INBOX ACL, only 'Sent' folder is shared, as expected: # doveadm acl delete -u janedoe INBOX johndoe # doveadm mailbox list -u provahe Trash Trash.saved-messages Junk Drafts Sent INBOX_spam Archives Archives.2015 Archives.2015.INBOX_spam Other Users Other Users.janedoe Other Users.janedoe.Sent INBOX My Dovecot instance use a single user, and all my mailboxes use standard maildir files: drwx------ 9 vmail mail 0 Jul 28 10:59 . drwx------ 12 vmail mail 3864 Jul 28 09:39 .. drwx------ 2 vmail mail 0 Jul 28 09:51 cur -rw------- 1 vmail mail 0 Jul 28 10:59 dovecot-acl -rw------- 1 vmail mail 16 Jul 28 10:59 dovecot-acl-list -rw------- 1 vmail mail 1448 Jul 28 09:51 dovecot.index.cache -rw------- 1 vmail mail 1016 Jul 28 09:52 dovecot.index.log -rw------- 1 vmail mail 113 Jul 28 09:51 dovecot-uidlist -rw------- 1 vmail mail 8 Jul 28 09:39 dovecot-uidvalidity -r--r--r-- 1 vmail mail 0 Jul 28 09:39 dovecot-uidvalidity.55b731ac drwx------ 5 vmail mail 0 Jul 28 09:39 .Drafts lrwxrwxrwx 1 vmail mail 5 Jul 28 09:39 .INBOX_spam -> .Junk drwx------ 5 vmail mail 0 Jul 28 09:39 .Junk -rw------- 1 vmail mail 16 Jul 28 09:39 maildirsize drwx------ 2 vmail mail 0 Jul 28 09:51 new drwx------ 5 vmail mail 0 Jul 28 09:50 .Sent -rw------- 1 vmail mail 37 Jul 28 09:39 subscriptions drwx------ 2 vmail mail 0 Jul 28 09:51 tmp drwx------ 5 vmail mail 0 Jul 28 09:39 .Trash any clue to solve my problem ?? I've already try to play with 'acl_defaults_from_inbox' setting, but no way .. Thank you, Marco # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.18-400.1.1.el5 x86_64 Red Hat Enterprise Linux Server auth_master_user_separator = * auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = XXXXXXXXXXXXXXXXXXXXXXXX doveadm_port = 12345 first_valid_uid = 200 hostname = xxxxxxx.sissa.it imap_client_workarounds = delay-newmail lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = * login_log_format_elements = user=<%u> PID=%p method=%m rip=%r lip=%l %c login_trusted_networks = XXX.XXX.1.172/30 XXX.XXX.24.0/23 mail_gid = mail mail_home = /var/spool/mail/%1n/%n mail_location = maildir:/var/spool/mail/%1n/%n:INDEX=/var/shared/indexes/%1n/%n mail_plugins = acl fts fts_solr mailbox_alias quota mail_shared_explicit_inbox = yes mail_uid = vmail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify mbox_write_locks = fcntl mmap_disable = yes namespace archives { hidden = no inbox = no list = children location = maildir:/var/spool/archives/%1n/%n:INDEX=/var/shared/indexes/%1n/%n/archives mailbox 2015 { auto = subscribe special_use = \Archive } prefix = Archives. separator = . subscriptions = no type = private } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox INBOX_spam { auto = subscribe special_use = \Junk } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } namespace others { list = children location = maildir:/var/spool/mail/%%1n/%%n:INDEXPVT=/var/shared/indexes/%1n/%n/shared/%%n prefix = Other Users.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_defaults_from_inbox = no acl_shared_dict = file:/var/shared/dovecot/shared-mailboxes.dict fts = solr fts_autoindex = yes fts_autoindex_max_recent_msgs = 20 fts_solr = url=http://solr.localdomain:8080/solr/ mailbox_alias_new = INBOX_spam mailbox_alias_old = Junk quota = maildir:User quota:ns= quota2 = maildir:Archive quota:ns=Archives. quota2_rule = *:storage=20GB quota2_warning = storage=95%% quota2-warning 95 %u quota2_warning2 = storage=90%% quota2-warning 90 %u quota2_warning3 = storage=80%% quota2-warning 80 %u quota_rule = *:storage=5GB quota_rule2 = Trash:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Quota exceeded (mailbox for user is full) quota_status_success = DUNNO quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/sieve/.dovecot.sieve sieve_default = /etc/dovecot/sieve/dovecot.sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 16 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)sissa.it protocols = imap pop3 lmtp sieve rejection_reason = Your message to <%t> was automatically rejected for the following reason: %n%n%r service auth { inet_listener { port = 49494 } unix_listener auth-userdb { user = vmail } } service dict { unix_listener dict { user = vmail } } service doveadm { inet_listener { port = 26001 } } service imap-login { process_min_avail = 16 service_count = 0 } service imap { process_limit = 2048 } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service quota-status { client_limit = 1 executable = /usr/libexec/dovecot/quota-status -p postfix inet_listener { port = 25001 } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } service quota2-warning { executable = script /usr/local/bin/dovecot-quota2-warning.sh unix_listener quota2-warning { user = vmail } user = vmail } ssl_cert = </etc/pki/dovecot/certs/xxxxx-crt.pem ssl_key = </etc/pki/dovecot/private/Xxxxx-key.pem ssl_protocols = !SSLv2 !SSLv3 submission_host = xxxxxx.sissa.it:25 syslog_facility = local2 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl fts fts_solr mailbox_alias quota sieve postmaster_address = xxxxxxx(a)sissa.it } protocol lda { info_log_path = log_path = mail_plugins = acl fts fts_solr mailbox_alias quota sieve syslog_facility = local2 } protocol imap { mail_max_userip_connections = 50 mail_plugins = acl fts fts_solr mailbox_alias quota imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 50 } -- ----------------------------------- |Marco Giunta - SISSA Computer Staff| |Via Bonomea, 265 | |34136 - Trieste, Italy | |Tel: +39-40-3787-503 | |Fax: +39-040-3787-244 | |e-mail: giunta(a)sissa.it | -----------------------------------

3 3

help, permissions issues
by josh schooler 28 Jul '15

28 Jul '15

Hey everyone I've tried changing the permissions with the file it is telling me is giving me the issue, restarted exim and the computer, but still can't get dovecot to start. 2.2.13 > dovecot -F doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 14: ssl_cert: Can't open file /etc/exim/openssl/exim.crt: Permission denied > dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.7-21-desktop x86_64 openSUSE 13.2 (x86_64) auth_verbose = yes base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot/debug doveadm_worker_count = 10 first_valid_uid = 1000 info_log_path = /var/log/dovecot/dovecot.info login_trusted_networks = 127.0.0.1 192.168.1.0/24 174.75.35.100 174.75.35.98 mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_uidl_format = %v-%u protocols = pop3 service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/exim/openssl/exim.crt ssl_key = </etc/exim/openssl/exim.key userdb { driver = passwd } protocol pop3 { mail_max_userip_connections = 30 }

2 1

LMPT SSL
by Piotr Rotter 27 Jul '15

27 Jul '15

Hello, I tryed to eneble TLS connection from postfix to dovecot lmtp. Unfortunely I have problem with certificate, postfix shows, 2015-07-27T12:51:15.025333+02:00 k30 postfix/lmtp[4572]: Untrusted TLS connection established to 192.168.67.30[192.168.67.30]:24: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) I checked certs by openssl s_client: #openssl s_client -connect localhost:24 -showcerts -starttls smtp -CApath /etc/ssl/certs/ And I gets didn't found starttls in server response, try anyway... depth=0 OU = GT46258006, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = mail.active24.pl verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 OU = GT46258006, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = mail.active24.pl verify error:num=27:certificate not trusted verify return:1 depth=0 OU = GT46258006, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = mail.active24.pl verify error:num=21:unable to verify the first certificate verify return:1 It look likes dovecot lmtp send 3 times the same certificate. I made the same test for imap in the same dovecot instance: #openssl s_client -connect localhost:143 -showcerts -starttls imap -CApath /etc/ssl/certs/ CONNECTED(00000003) depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA verify return:1 depth=1 C = US, O = GeoTrust Inc., CN = RapidSSL SHA256 CA - G3 verify return:1 depth=0 OU = GT46258006, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = mail.active24.pl verify return:1 For imap it looks ok. Why lmtp shows wrong certs list # dovecot --version 2.2.16 -- Pozdrawiam! / Best regards! ------------------ Piotr Rotter Konsultant IT / IT Consultant =========================================== http://www.ACTIVE24.pl - Powerful hosting - surprisingly easy =========================================== ul. Barkocińska 6, 03-543 Warszawa PL Email: bok(a)active24.pl Tel: +48 222 950 446

2 2

Importing mbox archives into a inbox?
by Paul Hoffman 27 Jul '15

27 Jul '15

Greetings from a dovecot newbie. I have a bunch of mailing list archives (in mbox) format that I want to dump into the inbox for a particular account on the system. I want them to retain all of their information, particularly the date. I'm not seeing how to do this, but I could be missing it. Is this LDA or LMTP with some command-line options I'm not seeing? --Paul Hoffman

2 1

POP3 getting previously delivered messages.
by Jas Reehal 24 Jul '15

24 Jul '15

Hi All, This is my first post to this list. I have recently upgraded to dovecot version 2.2.10. 1. I have one POP3 user who does not want to delete his email on the server. 2. He has accumulated over 19000 messages, and the 'dovecot.uidlist' file has more than 19000 lines! 3. Occasionally now when he has received one or more new emails, and his email client does a 'get new mail' operation (POP3) he begins to receive email he has already received previously. last time this happened all 19000+ messages were delivered again, leaning to duplicate entries in all his mailboxes. I have reproduced this issue with a dummy email account with a POP3 client, leaving all messages on the server. I have delivered 20000 messages to this email account, each about 1.3k ins size and each with .... Subject: Message number <n> Body containing "Message number <n>" where <n> is 1 to 20000 now occasionally if I send another message to this email account, and then check for new messages using a POP3 client I get more messages downloaded than I expect! The 'dovecot.uidlist' file is not corrupt, but I beleive due ti it's size (number of lines) the is an issue on compiling a ' POP3 drop-list'. I have attached a file 'dovecot-a.txt' which shows the 'dovecot -a' output from my server. Based on what I have investigated I believe that this issue may not be correlated with a migration to version 2.2.10, but more to do with the number of messages retained on the server. Is there anyone who has any insight into what is happening and if there is any remedy, perhaps a "pop3_client_workarounds =" or other POP3 or UIDL directive in the conf files? The user is stubbornly resisting migration to IMAP, because of the time and effort he says will be required to replicate his organised filing/storage of messages on the server. Kind Regards Jas Reehal -- Jas Reehal | IT & Networks Consultant *Zuken Limited - /The Partner for Success/* 1500 Aztec West, Almondsbury, Bristol, BS32 4RF, United Kingdom T: +44 1454 207824 | F: +44 1454 207803 E: jas.reehal(a)zuken.co.uk <mailto:jas.reehal@zuken.co.uk> | W: www.zuken.com <http://www.zuken.com> Connect with Zuken: blog <http://blog.zuken.com> | youtube <http://www.youtube.com/zukentube> | linkedin <http://www.zuken.com/linkedin> | twitter <http://www.zuken.com/twitter> | facebook <http://www.zuken.com/facebook> Zuken Ltd // Registered office: Bristol // Registered No. 956340 // Directors: Jinya Katsube, Kazuhiro Kariya, S Yukawa This e-mail message from Zuken including any attachments is intended only for the individual or entity to which it is addressed. This e-mail may contain privileged, proprietary, or otherwise private information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you received this e-mail by accident, please notify the sender immediately and destroy this e-mail and all copies of it.

2 1

possible patch for ACL SQL ERROR: duplicate key value violates unique constraint "user_shares_pkey"
by Steffen Kaiser 24 Jul '15

24 Jul '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using Postgres as dict backend now and then I get this error, when someone changed ACLs, actually for some reason some users, who get permission from other users, get this error quite often: dict: Error: sql dict: commit failed: ERROR: duplicate key value violates unique constraint "user_shares_pkey" (query: INSERT INTO user_shares (dummy,to_user,from_user) VALUES ('1','user1','user2')) It looks like that this error is triggered, when a MUA is connecting to Dovecot after ACLs had been changed and opens several mailboxes at once. So two or parallel Dovecot instances try to insert the record simultaneously. With a similiar technique to the quota problem, I added a trigger. The idea is to use the condition dummy ISNULL to detect, that the function was triggered from the INSERT of the function itself, hence, breaking the recursive triggers. This assumes that dummy is never NULL from Dovecot. The same applies to anyone_shares, just remove the to_user field from the function. Does somebody see something wrong with my hack? ============= CREATE FUNCTION insert_sharing() RETURNS trigger LANGUAGE plpgsql AS $$ BEGIN IF NEW.dummy IS NULL THEN -- ugly kludge: we came here from this function, really do try to insert return NEW; END IF; LOOP UPDATE user_shares SET dummy = NEW.dummy WHERE from_user = NEW.from_user AND to_user = NEW.to_user; IF found THEN -- updated and inserted RETURN NULL; END IF; BEGIN INSERT INTO user_shares (from_user,to_user,dummy) VALUES (NEW.from_user,NEW.to_user,NULL); --- return NULL; EXCEPTION WHEN unique_violation THEN -- someone just inserted the record, update it END; -- Update dummy after INSERT END LOOP; END; $$; CREATE TRIGGER insertsharing BEFORE INSERT ON user_shares FOR EACH ROW EXECUTE PROCEDURE insert_sharing(); - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVbHxJXz1H7kL/d9rAQIn5gf/dNMQKmmigGrbccGQQrsGU66B6OHvTY7L 1vyh8hgr985KNk2/Ws/usLnAqpl5jhpo8kVPLI8TqcGYLAS/67TOIFrwLKAEBU96 e+QpbqqiSm66mZwWOQZgCI63+Fh7fdBUMREL6UqGleFF1GrzNnjmX4MGecbpu/L9 gQMAGUG++/S+ka9S6B275RXIj9DvWzq/oYqJ1M1grGckUxXfDk5szLyvuIJ981At 20qaCHEIlIOlkQ0ttE4W+RWkkYS2rMJvCzQelF4pcm6vaxhXxvqUryzmy9pv+UUT osqS6igWt7BPXF7ku8+rKYVp/qPZrh9IWXMsajr/2nI+V5gRb6u2ow== =gb1P -----END PGP SIGNATURE-----

1 0

Authenticate system user with alternate password
by AC 23 Jul '15

23 Jul '15

Is there a way to configure Dovecot to authenticate a system user against a different password list? I want to give my own personal account on my machine a password for IMAP and have that be different from the password I use to log into the system for maintenance purposes. I currently do this for outbound email by having the MTA authenticate against a SASL database during the initial SMTP connection (STARTTLS).

2 1