- dovecot - dovecot.org

Problem overriding default quota limit for LDAP users
by Rasim Kalimullin 25 Aug '14

25 Aug '14

Hi! I install dovecot from debian-backports: dovecot --version 2.2.9 Dovecot is configured to multiple authorization: /etc/dovecot# cat conf.d/10-auth.conf |grep include #!include auth-deny.conf.ext !include auth-master.conf.ext #include auth-system.conf.ext !include auth-sql.conf.ext !include auth-ldap.conf.ext #!include auth-passwdfile.conf.ext #!include auth-checkpassword.conf.ext #!include auth-vpopmail.conf.ext #!include auth-static.conf.ext /etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-sql.conf.ext driver = mysql connect = host=127.0.0.1 dbname=postfixadmin user=postfixadmin password=***** default_pass_scheme = MD5-CRYPT password_query = \ SELECT username, domain, password \ FROM mailbox WHERE username = '%u' AND domain = '%d' user_query = \ SELECT CONCAT('/var/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:bytes=', quota) AS quota_rule \ FROM mailbox WHERE username = '%u' AND domain = '%d' iterate_query = SELECT username AS user FROM mailbox /etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-ldap.conf.ext hosts = ***.***.local ***.***.local dn = dovecot(a)***.local dnpass = ****** auth_bind = yes ldap_version = 3 base = ou=XXX,dc=***,dc=local deref = never scope = subtree user_attrs = \ =uid=5000, \ =gid=5000, \ =mail=maildir:/var/mail/%d/%{ldap:mail}, \ =home=/var/mail/%d/%u/, \ =quota_rule=*:bytes=%{ldap:quotaMail} user_filter = (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) pass_attrs = mail=user,userPassword=password pass_filter = (&(mail=%u)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) iterate_attrs = mail=user iterate_filter = (&(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) default_pass_scheme = CRYPT quotamail attribute was added to Active Directory. Enable quota: /etc/dovecot# grep -v '^ *$#.*$\?$' conf.d/90-quota.conf plugin { quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M quota_grace = 10%% } ... plugin { quota = maildir:User quota } Per-user quota from SQL works fine: doveadm quota get -u i.ivanov(a)***.ru Quota name Type Value Limit % User quota STORAGE 8 1000000 0 User quota MESSAGE 14 - 0 Per-user quota from LDAP works too: doveadm quota get -u testmail(a)***.ru Quota name Type Value Limit % User quota STORAGE 962 2000 48 User quota MESSAGE 6 - 0 But if you do not set the attribute quotaMail: doveadm quota get -u e.etc(a)***.ru Quota name Type Value Limit % User quota STORAGE 0 - 0 User quota MESSAGE 0 - 0 And quota is unlimited. For comparison: doveadm user e.etc(a)***.ru field value uid 5000 gid 5000 home /var/mail/***.ru/e.etc(a)***.ru/ mail maildir:/var/mail/***.ru/e.etc@***.ru quota_rule *:bytes= doveadm user testmail(a)***.ru field value uid 5000 gid 5000 home /var/mail/***.ru/testmail(a)***.ru/ mail maildir:/var/mail/****.ru/testmail@***.ru quota_rule *:bytes=2048576 Logs: Aug 25 16:15:40 mail dovecot: auth: Debug: master in: USER#0111#011e.etc@ ***.ru#011service=doveadm Aug 25 16:15:40 mail dovecot: auth-worker(15295): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 25 16:15:40 mail dovecot: auth-worker(15295): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 25 16:15:40 mail dovecot: auth-worker(15295): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 25 16:15:40 mail dovecot: auth-worker(15295): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Aug 25 16:15:40 mail dovecot: auth-worker(15295): Debug: sql(e.etc(a)***.ru): SELECT CONCAT('/var/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:bytes=', quota) AS quota_rule FROM mailbox WHERE username = 'e.etc(a)***.ru' AND domain = '***.ru' Aug 25 16:15:40 mail dovecot: auth-worker(15295): sql(e.etc(a)***.ru): unknown user Aug 25 16:15:40 mail dovecot: auth: Debug: ldap(e.etc(a)***.ru): user search: base=ou=XXX,dc=***,dc=local scope=subtree filter=(&(mail=e.etc@***.ru)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) fields=mail,quotaMail Aug 25 16:15:40 mail dovecot: auth: Debug: ldap(e.etc(a)***.ru): result: mail=e.etc(a)***.ru; mail unused Aug 25 16:15:40 mail dovecot: auth: Debug: ldap(e.etc(a)***.ru): result: mail=e.etc(a)***.ru; quotaMail missing Aug 25 16:15:40 mail dovecot: auth: Debug: userdb out: USER#0111#011e.etc@ ***.ru#011uid=5000#011gid=5000#011mail=maildir:/var/mail/***.ru/e.etc@ ***.ru#011home=/var/mail/***.ru/e.etc@***.ru/#011quota_rule=*:bytes= Aug 25 16:15:42 mail dovecot: auth: Debug: master in: USER#0111#011testmail@ ***.ru#011service=doveadm Aug 25 16:15:42 mail dovecot: auth-worker(15295): Debug: sql(testmail(a)***.ru): SELECT CONCAT('/var/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:bytes=', quota) AS quota_rule FROM mailbox WHERE username = 'testmail(a)***.ru' AND domain = '***.ru' Aug 25 16:15:42 mail dovecot: auth-worker(15295): sql(testmail(a)***.ru): unknown user Aug 25 16:15:42 mail dovecot: auth: Debug: ldap(testmail(a)***.ru): user search: base=ou=XXX,dc=***,dc=local scope=subtree filter=(&(mail=testmail@***.ru)(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) fields=mail,quotaMail Aug 25 16:15:42 mail dovecot: auth: Debug: ldap(testmail(a)***.ru): result: mail=testmail(a)***.ru quotaMail=2048576; mail,quotaMail unused Aug 25 16:15:42 mail dovecot: auth: Debug: ldap(testmail(a)***.ru): result: mail=testmail(a)***.ru quotaMail=2048576 Aug 25 16:15:42 mail dovecot: auth: Debug: userdb out: USER#0111#011testmail@ ***.ru#011uid=5000#011gid=5000#011mail=maildir:/var/mail/***.ru/testmail@ ***.ru#011home=/var/mail/***.ru/testmail@ ***.ru/#011quota_rule=*:bytes=2048576 Information from: http://dovecot.org/list/dovecot/2012-July/084859.html v2.1.7 2012-05-29 Timo Sirainen * LDAP: Compatibility fix for v2.0: ldap: If attributes contain ldapAttr=key=template%$ and ldapAttr *doesn't exist, skip the key* instead of using "template" value with empty %$ part for the key. OK, if quotaMail not set, shall apply root quota. Check LDAP: ldapsearch -x -h ***.***.local -D 'dovecot' -W -b 'OU=XXX,dc=***,dc=local' -s sub '(&(objectCategory=user)(objectClass=user)(mail=testmail(a)***.ru*))'|grep quotaMail Enter LDAP Password: quotaMail: 2048576 ldapsearch -x -h ***.***.local -D 'dovecot' -W -b 'OU=XXX,dc=***,dc=local' -s sub '(&(objectCategory=user)(objectClass=user)(mail=e.etc(a)***.ru*))'|grep quotaMail Enter LDAP Password: root@mail:/etc/dovecot# LDAP attribute *doesn't exist. * But Dovecot thinks that the quota is 0 and disables the quota. I can to set all the users quotaMail attribute, but a lot of them. Can I use root quota when the per-user quota is not set? Аnd change a per-user quota specific users only, if necessary? I apologize for my English. Thank you! -- Rasim Kalimullin

1 0

dict SQL : HA / RR load-balancing ?
by Florent Bautista 25 Aug '14

25 Aug '14

Hi everyone, I am using Dovecot 2.2 with dict SQL. My config is using : connect = host=10.111.5.1X host=10.111.5.1Y host=10.111.5.1Z dbname=mail user=quota_updater password=xxxxxxxx But when an SQL server is down, I have these messages in logs : dict: Error: mysql(10.111.5.1Y): Connect failed to database (mail): Can't connect to MySQL server on '10.111.5.1Y' (111) - waiting for 125 seconds before retry Does Dovecot support HA / RR load-balancing in dict SQL, as in passdb/userdb ? Thank you.

2 1

Director health checker
by Eduardo Ramos 24 Aug '14

24 Aug '14

Hi all. I'm writing a director health checker and ask you for suggestions. My project repository: https://github.com/duderamos/dovesitter Thanks.

2 1

does dovecot assume ~ = /home/userid ?
by Per Jessen 22 Aug '14

22 Aug '14

See $SUBJ - or is there a setting somewhere to control this? I have a userid = user(a)example.com with homedir (from /etc/shadow) = /home/example.com/user, but when dovecot wants to find e.g. ~/.dovecot.sieve , it looks in /home/user(a)example.com .... Doing "su - user(a)example.com" puts me in the correct directory. -- Per Jessen, Zürich (22.3°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland.

2 2

Dovecot authentication LDAP SSL-TLS againts SAMBA4
by Lista de Dovecot 22 Aug '14

22 Aug '14

Hi, i would like to know if anybody have implemented the authentication of dovecot against samba4 via secure ldap (SSL/TLS). I made it but in plain text through dovecot´s offical page: http://wiki2.dovecot.org/AuthDatabase/LDAP/AuthBinds http://wiki2.dovecot.org/AuthDatabase/LDAP But when i try to do it in a secure way i can´t make it work. Samba4 is listening by port 636 and dovecot is speaking by 389 or 636, but they can´t comunicate themself. I´m wondering if any of you have done this before or have any clue that might help me. Thanks.

1 0

Avoid "451 4.4.0 Remote server not answering (timeout while waiting for reply to DATA reply)"
by Florent Bautista 22 Aug '14

22 Aug '14

Hi all, I have a Dovecot setup (2.1, I will switch to 2.2 soon) with one Director and 2 backend servers. When my MX server (Postfix) tries to deliver mail to Dovecot via LMTP, it often gets an error "451 4.4.0 Remote server not answering (timeout while waiting for reply to DATA reply)" from the Director. Service LMTP is configured with "client_limit = 1" on Director en backends (others limits are default ones). Postfix is using "lmtp_destination_recipient_limit = 1" and "lmtp_destination_concurrency_limit = 1". I want that incoming messages are stored one after one per recipient (have a queue per recipient). I does not seem to be done actually. I think Postfix is sending too many messages at a time to Director. How do you do to handle that ? I already applied the 3 patches available on the list for 2.1, but it does not seem to solve my problem... Thank you a lot. Florent

1 0

Folders don't show up
by Christian Hudon 22 Aug '14

22 Aug '14

Hello, I've upgraded to the new LTS version of Ubuntu. With that comes a new dovecot version. I think I've migrated my dovecot configuration correctly to the new version. Everything works, except that the mailboxes don't show up in the list of mailboxes in my mail clients. Trying to issue a LIST command, I see the following: CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot (Ubuntu) ready. 1 login USERNAME_HERE PASSWORD_HERE 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in 2 LIST "" "*" * LIST (\HasNoChildren) " * LIST (\HasNoChildren) " [SNIP... A bunch of other identical lines... roughly as many as I have mailboxes] * LIST (\HasNoChildren) " * LIST (\HasNoChildren) " * LIST (\HasChildren) " 2 OK List completed. I'm not an IMAP protocol expert, but those answers to the list command don't quite look like valid IMAP to me. My imapdir has a bunch of maildir directories in it, like a normal imapdir should. Everything worked fine with the previous version of dovecot (1.2?). Maybe a dovecot bug? At least I don't see how my config could cause this. Any help would be appreciated. The output of "dovecot -n" is included below. Thanks in advance, Christian ----cut here---- # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-34-generic i686 Ubuntu 14.04.1 LTS mail_location = maildir:~/IMAPdir:LAYOUT=imapdir mail_plugins = fts fts_squat passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap { vsz_limit = 2 G } ssl_cert = </etc/ssl/certs/cert.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl.key ssl_prefer_server_ciphers = yes userdb { driver = passwd }

1 0

Thunderbird not able to edit sieve Message Filters
by Peter Bell 22 Aug '14

22 Aug '14

I'm not sure when this problem first occurred - it is many months since I last editted a sieve filter. I am certainly several versions of Thunderbird and, probably, a few versions of Dovecot on from when I last editted a sieve filter. However, I do know that I have done so in the past. I have just built Dovecot 2.2.13 and Pigeonhole 0.4.3, installed and running on Slackware 14.1 x64. I am running an up-to-date version of Thunderbird (31.0) on Arch Linux x64. The sieve filters are definitely being applied to incoming mail, and working perfectly well. However, when I attempt to edit the Sieve Filters (from Thunderbird Tools->Sieve Message Filters...), the Sieve Filters tab is displayed, but not populated (eg, the Server Sieve Capabilities are not displayed, and there is an endless 'hourglass' displayed in the main mailfilters pane. Does anyone recognise the symptoms and can advise how to resolve the problem, or suggest what logs I should examine/post in order to identify the cause? -- ------------------------------------------------------------------- Peter Bell Mob: +63 (0) 9287 340 343 Tagum City, Philippines. Tel: +63 (0) 84 216 9037 email/msn: peter(a)bellfamily.org.uk Tel: +63 (0) 84 308 0002

5 5

Assertion in istream.c::167 in POP3 mode when maildir content has wrong S value (using 2.2.13)
by Rolf Eike Beer 21 Aug '14

21 Aug '14

Hi, the affected machine is running 2.2.13 on Gentoo x86_64. For me it looks like the old size is still in some struct or whereever even after the file has been renamed. I see that there are many commits following 2.2.13, is that possibly already fixed or do I need to dig in the code? The original problem seems to be that maildrop uses the file size before piping the mail into spamassassin even if the mail is bigger afterwards. Not relevant here, but in case anyone wonders how this happens. Greetings, Eike Error: Cached message size smaller than expected (81118 < 81308) Error: Maildir filename has wrong S value, renamed the file from /var/vpopmail/domains/example.org/user/.maildir/cur/1408452738.16341.mail,S=81118:2, to /var/vpopmail/domains/example.org/user/.maildir/cur/1408452738.16341.mail,S=81308:2, Error: Corrupted index cache file /var/vpopmail/domains/example.org/user/.maildir/dovecot.index.cache: Broken physical size for mail UID 65 Panic: file istream.c: line 167 (i_stream_read): assertion failed: (old_size <= _stream->pos - _stream->skip) Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x6bbef) [0x7f50652a4bef] -> /usr/lib64/dovecot/libdovecot.so.0(+0x6bc4e) [0x7f50652a4c4e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f506525e2be] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x214) [0x7f50652ad904] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f50652adfed] -> /usr/lib64/dovecot/libdovecot.so.0(message_get_body_size+0x9d) [0x7f5065299b3d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_init_stream+0x200) [0x7f506556f700] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x2dd0f) [0x7f506553cd0f] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_stream+0x4b) [0x7f506554915b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x2dae7) [0x7f506553cae7] -> dovecot/pop3(client_create+0x56d) [0x40622d] -> dovecot/pop3() [0x404ea3] -> dovecot/pop3() [0x40508f] -> /usr/lib64/dovecot/libdovecot.so.0(+0x28346) [0x7f5065261346] -> /usr/lib64/dovecot/libdovecot.so.0(+0x28841) [0x7f5065261841] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f50652b58de] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7f50652b68b7] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f50652b5969] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f50652b59e8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f50652635a3] -> dovecot/pop3(main+0x233) [0x404bf3] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f5064eb6db5] -> dovecot/pop3() [0x404d49]

1 1

About network throughput between Director and backends
by Listas＠Adminlinux 21 Aug '14

21 Aug '14

I plan to migrate my Dovecot IMAP servers to a clustered structure. I'm planning a cluster with high availability and load balancing. I know I need instances of Dovecot Proxy / Director. But these instances can be on another network? There is need for high network throughput between the Director and the backends? For me it would be cheaper to run Director in VM's at Amazon AWS for example. Thanks! -- Thiago Henrique

1 0