- dovecot - dovecot.org

Imap: Panic: UID 13737 lost unexpectedly from INBOX
by Urban Loesch 29 Sep '14

29 Sep '14

Hi, today I got an panic in imap proccess. Details are: Dovecot Version: ii dovecot-core 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - core files ii dovecot-dbg 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - debug symbols ii dovecot-imapd 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - IMAP daemon ii dovecot-lmtpd 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - LMTP server ii dovecot-managesieved 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - ManageSieve server ii dovecot-mysql 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - MySQL support ii dovecot-pop3d 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - POP3 daemon ii dovecot-sieve 2:2.2.13-1~auto+74 amd64 secure POP3/IMAP server - Sieve filters support Logs: Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Panic: UID 13737 lost unexpectedly from INBOX Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6cc1f) [0x7f14d02aac1f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6cc7e) [0x7f14d02aac7e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f14d026389e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0xa12e) [0x7f14cea4c12e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x8db) [0x7f14cea4d07b] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f14d05982a3] -> dovecot/imap(imap_sync_init+0x7a) [0x41f92a] -> dovecot/imap() [0x41032e] -> dovecot/imap() [0x410531] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa577e) [0x7f14d05bb77e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xc6) [0x7f14d02bbfa6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x93) [0x7f14d02bcd63] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f14d02bbe09] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f14d02bbe88] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f14d0268d03] -> dovecot/imap(main+0x298) [0x40c238] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f14cfed1eed] -> dovecot/imap() [0x40c39d] Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Fatal: master: service(imap): child 15160 killed with signal 6 (core dumped) The core dump: (gdb) bt full #0 0x00007f14cfee51a5 in raise () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f14cfee8420 in abort () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #2 0x00007f14d02aac15 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:193 backtrace = 0x253b380 "/usr/lib/dovecot/libdovecot.so.0(+0x6cc1f) [0x7f14d02aac1f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6cc7e) [0x7f14d02aac7e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f14d026389e] -> /usr/lib/d"... #3 0x00007f14d02aac7e in i_internal_fatal_handler (ctx=0x7fff0f69d7f0, format=<optimized out>, args=<optimized out>) at failures.c:657 status = 0 #4 0x00007f14d026389e in i_panic (format=format@entry=0x7f14cea4f528 "UID %u lost unexpectedly from %s") at failures.c:267 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff0f69d8e0, reg_save_area = 0x7fff0f69d820}} #5 0x00007f14cea4c12e in virtual_sync_external_flags (vseq=1250, real_uid=13737, bbox=<error reading variable: Unhandled dwarf expression opcode 0xfa>, bbox=<error reading variable: Unhandled dwarf expression opcode 0xfa>, ctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>, ctx=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at virtual-sync.c:67 flags = <optimized out> kw_names = <optimized out> keywords = <optimized out> #6 0x00007f14cea4d07b in virtual_sync_backend_box_sync (sync_flags=<optimized out>, bbox=0x26071f0, ctx=0x261f200) at virtual-sync.c:975 sync_rec = {seq1 = 5, seq2 = 7, type = MAILBOX_SYNC_TYPE_FLAGS} idx1 = 5 vuid = <optimized out> sync_ctx = 0x268a640 sync_status = {sync_delayed_expunges = 1} idx2 = 11 vseq = 1250 #7 virtual_sync_backend_box (bbox=0x26071f0, ctx=0x261f200) at virtual-sync.c:1106 status = {messages = 0, recent = 0, unseen = 3491983296, uidvalidity = 32532, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 3456139202, last_cached_seq = 32532, highest_modseq = 80, highest_pvt_modseq = 140733451983700, keywords = 0x7, permanent_flags = 3495924087, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 1, no_modseq_tracking = 0, have_guids = 1, have_save_guids = 0, have_only_guid128 = 0} ret = <optimized out> sync_flags = <optimized out> bbox_index_opened = <optimized out> #8 virtual_sync_backend_boxes (ctx=0x261f200) at virtual-sync.c:1444 bboxes = 0x6 i = <optimized out> count = <optimized out> #9 virtual_sync (flags=0, mbox=0x2611de0) at virtual-sync.c:1542 ctx = <optimized out> index_sync_flags = <optimized out> ret = <optimized out> #10 virtual_storage_sync_init (box=0x2611de0, flags=0) at virtual-sync.c:1562 mbox = 0x2611de0 sync_ctx = <optimized out> ret = 0 #11 0x00007f14d05982a3 in mailbox_sync_init (box=box@entry=0x2611de0, flags=flags@entry=0) at mail-storage.c:1678 _data_stack_cur_id = 4 ctx = <optimized out> #12 0x000000000041f92a in imap_sync_init (client=0x2567f40, box=<optimized out>, imap_flags=imap_flags@entry=0, flags=flags@entry=0) at imap-sync.c:230 ctx = 0x25ff630 __FUNCTION__ = "imap_sync_init" #13 0x000000000041032e in idle_sync_now (box=<optimized out>, ctx=0x2568b40) at cmd-idle.c:146 No locals. #14 0x0000000000410531 in idle_callback (box=<optimized out>, ctx=<optimized out>) at cmd-idle.c:158 client = 0x2567f40 #15 0x00007f14d05bb77e in check_timeout (box=0x267d320) at index-mailbox-check.c:51 ibox = <optimized out> file = 0x0 st = {st_dev = 37633, st_ino = 21496482, st_nlink = 1, st_mode = 33152, st_uid = 1001, st_gid = 1001, __pad0 = 0, st_rdev = 0, st_size = 2500, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1411943094, tv_nsec = 172171250}, st_mtim = {tv_sec = 1411972876, tv_nsec = 150792601}, st_ctim = {tv_sec = 1411972876, tv_nsec = 150792601}, __unused = {0, 0, 0}} notify = true #16 0x00007f14d02bbfa6 in io_loop_handle_timeouts_real (ioloop=0x2543740) at ioloop.c:410 timeout = 0x261bdd0 item = 0x261bdd0 tv = {tv_sec = 0, tv_usec = 0} tv_call = {tv_sec = 1411972876, tv_usec = 171667} t_id = 3 #17 io_loop_handle_timeouts (ioloop=ioloop@entry=0x2543740) at ioloop.c:423 ---Type <return> to continue, or q <return> to quit--- _data_stack_cur_id = 2 #18 0x00007f14d02bcd63 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x2543740) at ioloop-epoll.c:193 ctx = 0x25443d0 events = 0x0 event = 0x11a list = <optimized out> io = <optimized out> tv = {tv_sec = 0, tv_usec = 281628} events_count = 5 msecs = 282 ret = 0 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #19 0x00007f14d02bbe09 in io_loop_handler_run (ioloop=ioloop@entry=0x2543740) at ioloop.c:488 No locals. #20 0x00007f14d02bbe88 in io_loop_run (ioloop=0x2543740) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #21 0x00007f14d0268d03 in master_service_run (service=0x25435d0, callback=callback@entry=0x420cd0 <client_connected>) at master-service.c:566 No locals. #22 0x000000000040c238 in main (argc=1, argv=0x2543390) at main.c:410 set_roots = {0x428900, 0x0} login_set = {auth_socket_path = 0x253b048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x420b60 <login_client_connected>, failure_callback = 0x420870 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> When did the error happened? I was connected with two clients to the same account. - Thunderbird - Horde 5 Webmail I deleted the mail with the UID 13737 within Horde Webmail. Logs for this operation: The email was deleted by the Horde Webmail: Sep 29 08:40:30 mailstoreul. dovecot: imap(sys@domain pid:32487 session:<Xvn5ii4EQwDD/uH4>): flag_change: box=INBOX, uid=13737, msgid=<20140928233719.96BAAE842@bkp-eloma>, size=3613, from=sys@domain (Cron Daemon) Sep 29 08:40:43 mailstoreul. dovecot: imap(sys@domain pid:33205 session:</JzHiy4EdgDD/uH4>): expunge: box=INBOX, uid=13737, msgid=<20140928233719.96BAAE842@bkp-eloma>, size=3613, from=sys@domain (Cron Daemon) The still opened session from Thunderbird gots the error and panics (detailed logs see above): Sep 29 08:41:16 mailstoreul. dovecot: imap(sys@domain pid:15160 session:<4ccaeS4EYgDD/uGI>): Panic: UID 13737 lost unexpectedly from INBOX Thanks and regards Urban Loesch

1 0

"doveadm backup/sync" don't follow message moving even with MDBOX
by Jesus Cea 29 Sep '14

29 Sep '14

Using mdbox as the storage backend, moving a message from a mailbox to another just update a reference. The message is not fisically moved on the disk. I would expect "dsync" to use this fact when source and destination are mdbox. But it doesn't. Anybody else can confirm?. Any plan to implement it?. Thanks!. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

dsync full sync
by Atıf CEYLAN 29 Sep '14

29 Sep '14

Hi all, I have 2 question. First: I use dovecot (version 2.2.9) with mdbox mail format. When I run dsync tool with "mirror" or "backup" parameters my source and destination directory synchronize correctly but if I delete some messages in user mailbox, deleted messages does not synced to destination. For example : atif(a)domain.com path is /mail/domain.com/atif/ and its size is 1GB. after first running the "dsync -u atif(a)domain.com backup mdbox:/backup/domain.com/atif/" command, size of "/backup/domain.com/atif/" is 1GB I deleted 300mb messages in atif mailbox then /mail/domain.com/atif/ is decreased to 700MB and I launched dsync command again. But /backup/domain.com/atif/ is not decreased to 700Mb. My backup directory still 1GB . I tried dsync with "-f , backup, mirror" parameters. Second problem, the first time the backup atif's quota size is increasing to x2. before backup : atif(a)domain.com quota size 1GB after backup: atif(a)domain.com quota size 2GB so I must run "doveadm quota recalc" command. Why? What is correct usage of mdbox mail format and dsync tool? -- M.Atıf CEYLAN

2 1

dsync mirror does not maintain changes between mailboxes
by Alan McGinlay 28 Sep '14

28 Sep '14

Hi, running: dsync -D -v -o mail_fsync=never mirror -R -f -u user@domain imapc: Where "domain" is a cyrus imap server does not do what the documentation says it does, not even close. After the first run to an empty mailbox on the dovecot 2.2.13 server all the mails (1.1GB) seem to be correctly synced. I send a test email to the dovecot server and it shows up correctly. Second run of the above dsync command, first thing that happens is all mails are deleted from the dovecot mailbox (yet the storage used by output of "du -m" doesn't change) and the sync appears to happen again from scratch however the disk space increases again! Now up to about 2GB and another run will take it up a few hundred mb more! I have tried with multiple different mail storage formats, maildir++, mdbox sdbox, all show the same (except maildir which just complains that INBOX can't be deleted on the second dsync run). This is frustrating beyond belief, please please anyone who has any insight let me know, the dsync debug output is a little huge to sanitize and post to the list but i can send it individually if anyone has any ideas! I am ready to give up totally on dovecot but at the same time I just wish it would work! doveconf -n # 2.2.13 (6bb26098a45c): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-67-virtual x86_64 Ubuntu 14.04.1 LTS auth_debug = yes auth_master_user_separator = * default_vsz_limit = 512 M disable_plaintext_auth = yes imapc_features = rfc822.size imapc_host = oldmailhost.domain.com imapc_master_user = cyradmin imapc_password = xxxxxxxx imapc_user = %u mail_gid = vmail mail_home = /var/vmail/domains/%d/%1n/%n mail_location = sdbox:~/sdbox mail_plugins = zlib notify quota fts fts_solr mail_prefetch_count = 30 mail_uid = vmail mailbox_list_index = yes managesieve_sieve_capability = fileinto imapflags namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = solr fts_solr = url=http://localhost:8080/solr/ quota = dirsize:User quota quota_grace = 10%% quota_rule = *:storage=20G sieve = ~/.dovecot.sieve sieve_dir = /var/vmail/sieve/domain/%1d/%d/%1n/%n/ sieve_extensions = imapflags fileinto zlib_save = bz2 zlib_save_level = 5 } protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } vsz_limit = 512 M } service imap { process_limit = 1024 vsz_limit = 512 M } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_plugins = zlib notify quota fts fts_solr quota sieve } protocol imap { mail_plugins = zlib notify quota fts fts_solr imap_quota } protocol sieve { managesieve_implementation_string = Cyrus timsievd v2.2.13 }

1 0

Re: Dovecot Sieve and Postfix header_checks Issue
by Joseph Tam 27 Sep '14

27 Sep '14

"Klaipedaville on Google" <klaipedaville(a)gmail.com> writes: > However, my header_checks file has just 5 lines of regexp as follows: > ... > /^From:.*\@.*\.tw/ REJECT Sorry, Taiwanese mail is not allowed. Can't speak about the other issues you are having, but is this regexp pattern what you want? Unless Postfix PCRE automatically right-anchors these regexps, aren't you rejecting mail from someone(a)mail.twinpeaks.org, or even twitter notifications (from *(a)bounce.twitter.com) Joseph Tam <jtam.home(a)gmail.com>

4 7

Dovecot Sieve and Postfix header_checks Issue
by Klaipedaville on Google 27 Sep '14

27 Sep '14

Hello List, I tried to subscribe but it's taking forever for the confirmation email to arrive so I thought I would ask away by emailing directly. My apologies in advance should this question appear twice. It may seem real simple to experts but I cannot really figure it out. I'll try to be concise: Dovecot version is 2.1.7. Its dovecot –n is real short one and follows right after my question. I have my Postfix 2.9.6 properties set like this: header_checks = /etc/path/to/myfile. Then I have Dovecot Sieve also configured and working fine. Now the trouble is that these two cannot be combined together can they? Dovecot Sieve and Postfix's header_checks? If I turn off header_checks in Postfix then Dovecot Sieve is working fine. If I vise versa turn off Dovecot Sieve then Postfix's header-checks are also working fine. However, when I keep them both turned on it also works but only partially and in this case Dovecot Sieve never bounces back any rejected massages remotely, the bounce happens only locally. That is I can see it in my logs that it was rejected locally but the message is never sent back to the sender saying something like, "Spam is rejected here". Thus the reject turns into a silent discard without telling the sender anything at all. Any ideas, help, advices how do I fix that? Would be really grateful for any suggestions / assistance at all. Many thanks in advance! P.S. I would like to use both because Dovecot Sieve is a very powerful and great plugin that uses Spamassassin's added tags and headers based on which I create my rules. Postfix in its turn has a very neat feature of checking the headers via regexp but Postfix does not see / detect Spamassassin's added headers at all because I passed delivery and authentication (which is a way better than Postfix's) to dovecot deliver. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.6 ext4 auth_mechanisms = plain login cram-md5 scram-sha-1 auth_verbose = yes hostname = WindTalker info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log mail_location = maildir:/home/mvail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/passwd driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_default = /etc/dovecot/default.sieve sieve_dir = ~/sieve } pop3_uidl_format = %g postmaster_address = postmaster(a)example.com protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl//new.crt ssl_key = </etc/ssl/new.key userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } protocol lda { mail_debug = yes mail_plugins = sieve } Regards, Dennis.

4 22

ALT storage question
by Ralf Hildebrandt 27 Sep '14

27 Sep '14

I want to migrate from a non-hashed storage to a hashed storage. So I set this up: mail_location = mdbox:/srv/vmail/%2.256Hu/%Lu/mdbox:ALT=/srv/vmail/%Ld/%Ln/mdbox I rsynced the "old" mdbox-style mailbox from another machine to to /srv/vmail/%Ld/%Ln/mdbox (/srv/vmail/charite.de/ralf.hildebrandt/mdbox in my case) The mail_location /srv/vmail/c5/ralf.hildebrandt(a)charite.de was non-existing. Then I connected using IMAP and tried to have a look at the INBOX: Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Effective uid=10000, gid=10000, home=/srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Home dir not found: /srv/vmail/c5/ralf.hildebrandt(a)charite.de Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/srv/vmail/c5/ralf.hildebrandt@charite.de/mdbox:ALT=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: fs: root=/srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox, index=, indexpvt=, control=, inbox=, alt=/srv/vmail/charite.de/ralf.hildebrandt/mdbox Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/mailboxes/INBOX doesn't exist yet, using default permissions Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Debug: Namespace : Using permissions from /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox: mode=0700 gid=default Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Error: Failed to autocreate mailbox INBOX: Internal error occurred. Refer to server log for more information. [2014-09-27 11:15:15] Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Warning: fscking index file /srv/vmail/c5/ralf.hildebrandt(a)charite.de/mdbox/storage/dovecot.map.index Sep 27 11:15:15 imap(ralf.hildebrandt(a)charite.de): Info: Disconnected: Logged out in=58 out=623 What is "Mailbox INBOX has existing files in alt path, rebuilding storage to avoid losing messages" referring to? And why is this an error? After all that I reconnect, just to find an empty inbox. WTF? Why is the ALT storage being ignored? The ALT storage contains: total 8 drwxr-xr-x 6 vmail vmail 4096 Aug 18 15:25 mailboxes drwxr-xr-x 2 vmail vmail 4096 Sep 24 00:37 storage and those two directories contain: mailboxes: total 16 drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Drafts drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 INBOX drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Sent drwxr-xr-x 3 vmail vmail 4096 Aug 18 15:25 Trash storage: -rw-r--r-- 1 vmail vmail 3552 Sep 25 14:47 dovecot.map.index.log -rw-r--r-- 1 vmail vmail 20015 Sep 25 13:51 m.1 On the other hand, just moving /srv/vmail/charite.de/ralf.hildebrandt/mdbox to /srv/vmail/c5/ralf.hildebrandt(a)charite.de worked like a charm! -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 0

Re: Is dovecot vulnerable to the shellshock/CVE-2014-6271 exploit?
by Joseph Tam 27 Sep '14

27 Sep '14

Timo Sirainen writes: >> Although I don't use it, it's plausible the checkpassword hook is also vulnerable >> via the MASTER_USER environment variable: >> >> http://wiki2.dovecot.org/AuthDatabase/CheckPassword > > This is one possibility, and it's the worst one because it could happen > before login. But it requires two things: > > 1. auth_username_chars setting must include the characters required in > the exploit, so "(){;" at least I guess. None of these characters are > enabled by default. But I think some people may have set this setting > to empty to allow all characters. > > 2. checkpassword must call bash, which also isn't done by default. > > Another possibility is is that in some setups the password (%w) may be > added to userdb fields, which ends up being exported to environment if > post-login scripts are used. Again Dovecot doesn't execute shell > automatically, but it may end up being executed by the configuration. > So this requires a valid username + password, and ability to change the > password to the bash exploit. Thanks for confirming what I suspected, Timo. The latter, if it is at all feasible, appears to be an "inside job" type of exploit, where the exploiter already has an account but can arbitrarily change their password. It's not as serious as the pre-login one, but worth addressing if the narrow circumstances of using post-login bash scripts apply. Joseph Tam <jtam.home(a)gmail.com>

1 0

doveadm penalty: who is 0.0.0.0?
by Peer Heinlein 27 Sep '14

27 Sep '14

Using doveadm penalty I just noticed a penalty for 0.0.0.0. Is this Postfix querying the auth-socket for his SASL-requests? I tried adding 0.0.0.0 to login_trusted_networks, but that doesn't help. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

Re: director
by Chris Lasater 26 Sep '14

26 Sep '14

The configuration and run/base_dir directories can be where ever you like. The locations Eduardo stated are the most appropriate for dovecot installed with an RPM. Mine were compiled and set in the home directory, so they are in a slightly different location. As long as you use the -c to point to the correct configuration file you should be good. For mine I kept my dovecot config file in the default location and put the director one elsewhere and created an alias, so that I can start the director by just typing director. This might make things easier for you to manage, then you can just stop it by running "doveadm -i <instance_name> stop" alias director="sudo -E PATH=${PATH} LD_LIBRARY_PATH=${LD_LIBRARY_PATH} /home/user/dovecot/sbin/dovecot -c /home/user/dovecot/etc/dovecot/director.conf" On 09/23/2014 05:00 PM, jjhoffart wrote: >> Thanks for the replies, >> I am still fairly new to dovecot and still learning. This is a quick run down of my setup: 3 servers running iRedMail (this is a package that installs dovecot 2.1.7, postfix, and LDAP). All three servers share an NFS backend. The same 3 servers are also sitting behind a load balancer. What I want to do is use these three servers as directors and mail servers. So from the replies I have gotten I understand that I need to create 2 config files 1 for director and 1 for dovecot. Now my next question is do these config files need to be stored in /etc/dovecot or /var/run/dovecot? Also is creating the second config file as simple as copying and renaming the dovecot.conf file? >> >> On Sep 23, 2014, at 2:26 PM, Eduardo Ramos <eduardo(a)freedominterface.org> wrote: >> >>> Hi, >>> >>> In fact you don't NEED a director. You can use two dovecot servers sharing a NFS storage with a normal (backend) implementation. It's good to see that page: http://wiki2.dovecot.org/NFS for some good recomendations. >>> >>> You must have a base_dir for each instance of dovecot you want to run, and a dovecot.conf as well. One could be director and other backend. I suggest you have two separated configuration directories, /etc/dovecot-director and /etc/dovecot-backend. Each with the respective configuration. Start dovecot with "dovecot -c /etc/dovecot-director/dovecot.conf". Backend is the same. >>> >>> In order to help more, provide us more details about your environment and doulbts. >>> >>> On 09/23/2014 03:57 PM, jjhoffart wrote: >>>> Hello, >>>> I am currently trying to setup a cluster of mail servers. I currently have two servers I am trying to cluster together. These servers will also have a shared NFS backend. I have read on the site that I will need to configure director since I am using NFS. I have read through all of the documentation on director but still need a little guidance to get things up and running. One of the questions I have is about the base_dir on the Multiple Invocations section of the wiki. It states that I will need to change the bas_dir to the new run directory, not sure what needs to happen here, can anyone help me out?

3 3