- dovecot - dovecot.org

Query: SELECT "INBOX" permission denied
by Don Levey 12 Nov '14

12 Nov '14

Yesterday I was forced to migrate servers due to a hardware failure. I have been able to bring up my mail server, and set up Squirrelmail and Dovecot. I am able to access (via Squirrelmail) all users' mail except one - which happens to be my wife's, so it would be really helpful if I could get that working too. I am able to log in, but see the following message in the main pane: ERROR: Could not complete request. Query: SELECT "INBOX" Reason Given: [NOPERM] Permission denied I have see similar errors in my searches, but they all relate to *creating* files (inbox, sent, etc). The files do already exist here, they used to work in the same directory structure on the old server configuration, and I can see no relative difference between this user's files/permissions and working users' files/permissions. Suggestions are welcome; thanks in advance, -Don Here are the vitals: Version: 2.2.10 OS: CentOS 7 # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.9.3.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) ext3 auth_mechanisms = plain login disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_location = mbox:/home/%u/~mail:INBOX=/var/spool/mail/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [root@dungeon sandra]# ls -la /var/spool/mail total 2097152 drwxrwxr-x. 2 root mail 4096 Nov 11 22:10 . drwxr-xr-x. 16 root root 4096 Nov 11 14:21 .. -rw-rw----. 1 sandra mail 625547161 Nov 11 21:32 sandra -rw-rw----. 1 spamtrap_000 mail 26773946 Nov 11 20:53 spamtrap_000 -rw-rw----. 1 spamtrap_001 mail 3092961 Nov 11 22:10 spamtrap_001 -rw-rw----. 1 spamtrap_002 mail 8778257 Nov 11 00:03 spamtrap_002 -rw-rw----. 1 spamtrap_003 mail 63579856 Nov 11 21:21 spamtrap_003 Her directory: [root@dungeon .imap]# ls -la total 100 drw-------. 25 sandra sandra 4096 Jul 1 2008 . drwx------. 4 sandra sandra 4096 Nov 10 10:48 .. drwx------. 2 sandra sandra 4096 Jul 1 2008 bday drwx------. 2 sandra sandra 4096 Jul 1 2008 beads drwx------. 2 sandra sandra 4096 Jul 1 2008 books drwx------. 2 sandra sandra 4096 Jul 1 2008 Drafts drwx------. 2 sandra sandra 4096 Jul 1 2008 ham drwx------. 2 sandra sandra 4096 Nov 11 21:39 INBOX drwx------. 2 sandra sandra 4096 Jul 1 2008 Sent drwx------. 2 sandra sandra 4096 Jul 1 2008 spam drwx------. 2 sandra sandra 4096 Jul 1 2008 Trash drwx------. 2 sandra sandra 4096 Jul 1 2008 Work A working directory: [root@dungeon .imap]# ls -la total 56 drwx------. 14 spamtrap_003 spamtrap_003 4096 Oct 23 19:22 . drwx------. 3 spamtrap_003 spamtrap_003 4096 Nov 10 09:15 .. drwx------. 2 spamtrap_003 spamtrap_003 4096 Jun 8 08:40 Deleted Messages drwx------. 2 spamtrap_003 spamtrap_003 4096 Aug 11 2011 Drafts drwx------. 2 spamtrap_003 spamtrap_003 4096 Mar 18 2011 ham drwx------. 2 spamtrap_003 spamtrap_003 4096 Nov 11 21:21 INBOX drwx------. 2 spamtrap_003 spamtrap_003 4096 Oct 18 2013 Sent drwx------. 2 spamtrap_003 spamtrap_003 4096 Aug 28 09:55 Sent Messages drwx------. 2 spamtrap_003 spamtrap_003 4096 Oct 6 20:11 spam drwx------. 2 spamtrap_003 spamtrap_003 4096 Nov 11 21:21 Trash

3 4

Some of the mail on the server to duplicate.
by オーエフ・テック　榊 12 Nov '14

12 Nov '14

I am using dovecot in mbox format. I'm going to set to leave the 30-day mail to the server with the mail client. The other day, some of email was received duplicate When receive mail. Mail does not arrive between Nov 4 11:09:03 and Nov 4 11:13:25. There should be the 259 (274-15) messages at the time of Nov 4 11:09:03 on the server from the log. But there were the 280 messages at the time of Nov 4 11:13:25 and 21 messages was a duplicate. Do you know the cause? /var/log/maillog -------------------------------------------------- Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Loading modules from directory: /usr/lib/dovecot/pop3 Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Module loaded: /usr/lib/dovecot/pop3/drac.so Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Effective uid=1000, gid=1000 Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): [drac]: login by xxxx from 153.219.140.xxx Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): mbox: data=/home/xxx/mail:INBOX=/var/spool/mail/xxx Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): mbox: root=/home/xxx/mail, index=/home/xxx/mail, inbox=/var/spool/mail/xxx Nov 4 11:09:03 xxxxxxxx dovecot: POP3(xxxx): Disconnected: Logged out top=0/0, retr=32/209178, del=15/274, size=3554823 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Loading modules from directory: /usr/lib/dovecot/pop3 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Module loaded: /usr/lib/dovecot/pop3/drac.so Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Effective uid=1000, gid=1000 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): [drac]: login by xxxx from 153.219.140.xxx Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): mbox: data=/home/xxx/mail:INBOX=/var/spool/mail/xxx Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): mbox: root=/home/xxx/mail, index=/home/xxx/mail, inbox=/var/spool/mail/xxx Nov 4 11:13:27 xxxxxxxx dovecot: POP3(xxxx): Disconnected: Logged out top=0/0, retr=42/279598, del=0/280, size=3346231 -------------------------------------------------- dovecot -n -------------------------------------------------- # 1.0.7: /etc/dovecot.conf protocols: imaps pop3s ssl_ca_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.cacert.pem ssl_cert_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.crt ssl_key_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.key ssl_cipher_list: ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:!LOW login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: ready. mail_access_groups: mail mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_debug: yes mbox_write_locks: dotlock fcntl mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/rawlog /usr/libexec/dovecot/pop3 mail_plugins(default): drac mail_log mail_plugins(imap): drac mail_log mail_plugins(pop3): drac mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 pop3_reuse_xuidl(default): no pop3_reuse_xuidl(imap): no pop3_reuse_xuidl(pop3): yes pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes auth default: passdb: driver: pam userdb: driver: passwd plugin: drac_host: xxx.xxx.xxx.xxx -------------------------------------------------- uname -a -------------------------------------------------- Linux xxxxxxxx.co.jp 2.6.18-371.9.1.el5PAE #1 SMP Tue Jun 10 19:05:56 EDT 2014 i686 i686 i386 GNU/Linux --------------------------------------------------

1 1

Disabling SSLv3 protocol
by Timo Sirainen 12 Nov '14

12 Nov '14

Since people are now talking about the SSLv3 security hole and how to disable it, here's a thread where you can talk about that. In Dovecot v2.1+ you can disable SSLv3 by setting: ssl_protocols = !SSLv2 !SSLv3 In older versions you'd have to patch the source code. Attached a patch against v2.0. I don't know if there are any clients that would break by disabling SSLv3. I'd expect all the clients to use the system (or otherwise generic) SSL libraries, which would automatically choose the TLS protocol over SSL. So my guess is that unless somebody is using over a 10 year old client there wouldn't be any problems. Maybe some old mobile phones might be using SSL.. If you find out about any clients that require SSLv3 I'd like to know about it. For Dovecot v2.3 I could maybe disable SSLv3 by default if there's no real need for it. (Also: Don't be confused by SSL/TLS protocols vs. SSL port/STARTTLS, as described in http://wiki2.dovecot.org/SSL. For example https://en.wikipedia.org/wiki/Comparison_of_email_clients#SSL_and_TLS_suppo… is irrelevant here.)

3 4

New director features
by Timo Sirainen 12 Nov '14

12 Nov '14

I implemented a couple of larger director changes today. These could still be changed a bit if somebody has any ideas. http://hg.dovecot.org/dovecot-2.2/rev/b9df3d654710 Support for director "tags", which allow creating multiple Dovecot backend groups using a single director ring. So you can mark different backend hosts with @tag names and then have passdb lookup return the wanted tag for each user. Note that because director works using user hashes, two users with the same hash can't be in different backend groups. Use "doveadm director map -u user@domain" to see which hash is used by the user@domain. http://hg.dovecot.org/dovecot-2.2/rev/b9df3d654710 Added director_consistent_hashing=yes setting so users don't move around much when backend servers are added/removed. Ideally at some point this setting will be removed and directors will automatically switch to it when all the directors in the ring support it.

1 0

Re: Virtual User Authentication
by Joseph Tam 12 Nov '14

12 Nov '14

Jerry <jerry(a)seibercom.net> writes: > Personally, I am not a fan of this multiple file configuration scenario. Then don't use it. Concatenate all the included files together and throw out the settings you don't need. My (single) config file is ~340 lines, 2/3 of which are comments. Joseph am <jtam.home(a)gmail.com>

1 0

Re: Help with last_login plugin
by Pascal Volk 11 Nov '14

11 Nov '14

On 11/11/2014 08:55 PM, Jorge Bastos wrote: > Hi, > > > > I want to have a datetime column in my users table, to have the value > updated every time my users login via POP3/IMAP. > > Last_login is new but I don't see any query example, or field names or so. > > > > Does anyone can give an help on this? > This topic was discussed a few days ago. See http://dovecot.org/list/dovecot/2014-October/098300.html Regards, Pascal -- The trapper recommends today: cafefeed.1431522(a)localdomain.org

1 0

Help with last_login plugin
by Jorge Bastos 11 Nov '14

11 Nov '14

Hi, I want to have a datetime column in my users table, to have the value updated every time my users login via POP3/IMAP. Last_login is new but I don't see any query example, or field names or so. Does anyone can give an help on this? Thanks,

1 0

FTS-Solr: indexer-worker does not find mailbox
by Marc Stürmer 11 Nov '14

11 Nov '14

Greetings, I am running Dovecot v. 2.2.13 on a Gentoo Box. Mail users are virtual, data for them is stored in a MySQL-DB, Sieve is enabled and deliver is the LDA in conjunction with Postfix. This setup has been running for a few years now without problems, the configuration works. Some weeks ago the setup was still on a Ubuntu 12.04 LTS box, and Dovecot was v. 2.0.9. I've installed a Tomcat there with Solr and configured the FTS-Solr plugin from Dovecot. Worked like a charm without any problems at all. Now the same setup on the Gentoo box does not work at all; either indexer-worker does not find the directory or is just indexing 0 messages. Solr is also installed again (v. 3.6.0) on Tomcat, and Solr is running properly. I checked it with my browser and the logs, they are showing no errors. gentoo ~ # dovecot --version 2.2.13 dovecot -n: http://pastebin.com/NqLfrbp8 dovecot-sql.conf: http://pastebin.com/KLf4pjJZ Debug log. Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker: Debug: auth input: mail(a)marc-stuermer.de home=/var/kunden/mail/ mail=maildir:marc/mail@marc-stuermer.de/ uid=9997 gid=9997 Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker: Debug: Added userdb setting: mail=maildir:marc/mail@marc-stuermer.de/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Effective uid=9997, gid=9997, home=/var/kunden/mail/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:marc/mail@marc-stuermer.de/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: maildir++: root=marc/mail(a)marc-stuermer.de, index=, indexpvt=, control=, inbox=marc/mail(a)marc-stuermer.de, alt= Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace INBOX.: marc/mail(a)marc-stuermer.de doesn't exist yet, using default permissions Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace INBOX.: Using permissions from marc/mail(a)marc-stuermer.de: mode=0700 gid=default Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Syncing mailbox INBOX.gentoo failed: Mailbox doesn't exist: INBOX.gentoo Nov 11 20:12:14 kraftzwerg dovecot: imap(mail(a)marc-stuermer.de): Error: indexer failed to index mailbox INBOX.gentoo So the question is: where's the error and how to fix it? I am kinda clueless right now. Thanks in advance, Marc

1 0

Virtual User Authentication
by Jerry 11 Nov '14

11 Nov '14

I have only "virtual users" on the system that I maintain. I am using Postfix which is configured to use Devecot for authentication. I get several attempts everyday to hack into the system, both via Postfix and directly via Dovecot. The following is from the dovecot log: Nov 11 04:14:48 auth-worker(21005): Error: pam(monica,69.193.88.146): pam_authenticate() failed: authentication error (/etc/pam.d/dovecot missing?) Now, I do not use "pam" on this system. Is there a way I can eliminate Dovecot from trying to use it? -- Jerry

4 5

Replication Advice Needed
by Asai 11 Nov '14

11 Nov '14

I successfully set up Dovecot replication, having 2 servers syncing with each other. While I had both servers in the same room on a Gigabit network, they were syncing fine. But I took one to another location, and syncing was turned off for about 2 weeks. Now I've turned both back on, they're sort of syncing, but not really. The one remote server is not populating emails into various folders and it really should be cranking to sync those emails. Do anyone have any insights on how we could troubleshoot this? -- --Asai

1 0