- dovecot - dovecot.org

[Dovecot] How to run a program with mail_filter plugin
by Stanislas SABATIER 07 Mar '14

07 Mar '14

Hi, I'm using mail_filter plugin but I don't want it to launch a script but a program I wrote instead. In 10-master, if I put the absolute path to my program in the plugin settings ie : (…) service mail-filter { executable = /usr/local/bin/mail/my_email_filter (…) But I've got the following error from Dovecot : dovecot: master: Error: service(mail-filter): Initial status notification not received in 30 seconds, killing the process h ow do I need to configure the service to launch my program ? Thanks, Regards, Stan. --------------------------------------------------------------- Stanislas SABATIER s.sabatier(a)pobox.com ---------------------------------------------------------------

1 0

[Dovecot] no sieve with lmtp_save_to_detail_mailbox=yes
by Dennis Kuhn 06 Mar '14

06 Mar '14

i have a problem with sieve and lmtp_save_to_detail_mailbox = yes. If the mailbox "detail" exists everything works fine, but if the mailbox detail does not exist then sieve does not work. The .dovecot.sieve.log file says sieve: info: started log at Mar 06 14:28:47. error: msgid=<531877EE.7070806(a)heinlein-support.de>: failed to store into mailbox 'test2': Mailbox doesn't exist: test2. I think this is the reason why no sieve script is executed, but why is sieve here involved? Is there any relation between lmtp_save_to_detail_mailbox=yes and sieve or is this a bug? The same sieve file works with the same mailaddress without mailextension, so the sieve script is not the reason for the failure. I am using dovecot version 2.2.12 Dennis Kuhn -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-57 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] Public Namespace and INBOX
by Dieter Knopf 06 Mar '14

06 Mar '14

Hello, i added a existing MAILDIR as a Public Namespace and i can subscribe to this Namespace without a problem. I can access every folder except the INBOX. Thunderbird just shows a GREY "INBOX". Is there any way to access the INBOX of a maildir? Thanks Dieter Knopf

4 6

[Dovecot] Still no emails since Feb. 6
by Steve Campbell 06 Mar '14

06 Mar '14

I checked my settings on the dovecot mailman page, and although my account was set to "disable" email, after changing it and attempting to have the list resend my password, I'm still not seeing emails. The last time I received emails, the outgoing server for the list was sent from the IP 193.210.130.67. Is that still correct? I've checked my logs to see if there's anything blocked, and I don't see anything. I've checked my access file and firewall, and nothing is blocked there. I'm not sure why my account settings showed "disabled", but it sounds like email was either bounced back to the list or my server is in some type of outgoing list to prevent sending to me. I'm at a loss. Is there any way an admin can check for me, please, to see if there's a problem they might spot? Thanks, steve

4 6

[Dovecot] Pigeonhole Sieve Extprograms Plugin
by dovecot＠voidptr.de 06 Mar '14

06 Mar '14

Hi, I upgraded to Dovecot 2.2.9 from Debian's wheezy-backports today (which should contain the "sieve_extprograms" plugin and thus also the vnd.dovecot.{pipe,filter,execute} capabilities. However when I add require "vnd.dovecot.filter"; to my sieve script via managesieve, the server reports error: require command: unknown Sieve capability: 'vnd.dovecot.filter' What am I missing and what should I do to get pipe/filter/execute to work? postconf -n attached. Nils

2 2

[Dovecot] whole user mailbox read only
by Francesco 06 Mar '14

06 Mar '14

Hello, i was browsing the dovecot wiki for some documentation related to the use of ACLs but i couldn't find an answer. i'm in the need to prevent users from deleting emails, yet being able to add new content via imap, what i mean is that a user should be able to create an email in its mailbox (maildir actually is used), but once the email is there the user shouldn't be able to delete it. do you know if there is a way to accomplish this for each subfolder on a Maildir environment? Thanks in advance Francesco

1 0

[Dovecot] Bounce messages
by Thanh Long DANG 06 Mar '14

06 Mar '14

Hi, I just set up my mail server using postfix / dovecot / mysql and it works well. I just have a problem : I'm a trying to have a overquota notification and the server sends nothing (mail server rejects incoming mail). Could you tell me if there is a problem with dovecot or postfix configuration? Kind regards,Long My conf : # 2.1.7: /etc/dovecot/dovecot.conf# OS: Linux 2.6.32-26-pve x86_64 Debian 7.2 simfsauth_mechanisms = plain logindebug_log_path = /var/log/dovecot-debug.logdict { quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf}disable_plaintext_auth = noinfo_log_path = /var/log/dovecot-info.loglog_path = /var/log/dovecot.logmail_location = maildir:/home/vmail/%d/%n:INDEX=/home/vmail/%d/%n/indexesnamespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix =}passdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql}plugin { quota = maildir:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_rule = *:storage=1G quota_rule2 = Trash:storage=+30%% quota_rule3 = Sent:storage=+30%% quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve}postmaster_address = postmaster(a)multidist.euprotocols = " imap lmtp pop3"quota_full_tempfail = yesrejection_subject = Rejet: %sservice auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 }}service dict { unix_listener dict { mode = 0777 }}service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix }}service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0777 }}ssl_cert = </etc/dovecot/dovecot.pemssl_key = </etc/dovecot/private/dovecot.pemuserdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql}verbose_proctitle = yesprotocol lmtp { mail_plugins = " quota"}protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " quota"}protocol imap { mail_max_userip_connections = 10 mail_plugins = quota imap_quota}protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv}

3 3

[Dovecot] Shared Namespace and correct location
by Dieter Knopf 05 Mar '14

05 Mar '14

Hello again, i still have problems using a Shared Namespace in my configuration. I'm using Dovecot 2.2.9. mail_location = maildir:/home/vmail/%d/%n/MAILDIR:INDEX=/home/vmail/%d/%n/INDEX/ namespace inbox { type = private separator = / prefix = inbox = yes } This works create. But: namespace { type = shared separator = / prefix = shared/%%u/ location = maildir:/home/vmail/%%d/%%u/MAILDIR/shared:INDEX=/home/vmail/%d/%u/INDEXS/%%u subscriptions = no list = children } I'm still not sure how i can see a shared mailbox on a different account. I can add ACL rules and dovecot is adding SQL-Entries to the user-shares table. The dovecot-acl-list file is created too, hope this is okay (vfile + SQL) But i can't see the shared folder on the target account. I tried many location-pathes, but not sure how i can add the right folder. There must be a problem with %%d and %%u. Thank you very much, Dieter

2 1

[Dovecot] Dovecot Migration: Retrieving/Logging POP/IMAP Passwords in Plaintext
by Traiano Welcome 05 Mar '14

05 Mar '14

Hi List I'm currently in the process of migrating my dovecot imap/pop users to a new server and have to extract their passwords in order to import them into the new system (different password encryption schemes). I've tried enabling auth_* debug parameters in my dovecot.conf in the hope that this would result in logging plaintext passwords to the dovecot log. However dovecot does not log the passwords in plaintext under any debugging configuration. My question: Is there any other configuration of dovecot that would allow me to capture POP/IMAP passwords at a successful login time? Dovecot version: 1.0.7 (from dovecot-1.0.7-7.el5_7.1 rpm) The output of dovecot -n is: --- # 1.0.7: /etc/dovecot.conf info_log_path: /var/log/dovecot.debug verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~:INBOX=~/Mailbox mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 --- My dovecot.conf is as follows: ------ info_log_path = /var/log/dovecot.debug verbose_ssl = yes mail_location = mbox:~:INBOX=~/Mailbox mail_debug = yes protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain login passdb pam { } userdb passwd { } user = root socket listen { client { path = /var/run/dovecot/auth-client mode = 0666 } } } dict { } plugin { } --- Many thanks in advance! Traiano

3 5

[Dovecot] Using AD, one more try - "successfol auth" and crashing auth process
by Jeroen Scheerder 05 Mar '14

05 Mar '14

Hi, I have no success in using AD with dovecot. The little checkpassword script I cooked up that uses ldapsearch to lookup a user DN (with an authenticated bind) and then ldapsearch with an authenticated bind for that DN again works well. * Approach 1: use a service account to bind to AD, lookup the user DN, and bind to that DN. It fails. The LDAP config looks like: hosts = dc2.office.on2it.net ldap_version = 3 base = dc=office,dc=on2it,dc=net scope=subtree auth_bind = yes dn = CN=DovecotSvc,OU=Svcs,DC=office,DC=on2it,DC=net dnpass = suppressed pass_attrs = sAMAccountName=user pass_filter = (&(objectClass=person)(sAMAccountName=%u)) user_attrs = sAMAccountName=user user_filter = (&(objectClass=person)(sAMAccountName=%u)) What happens in this case is best shown in the packet capture as displayed by tshark: $ tshark -o tcp.check_checksum:FALSE -tr -r dc2.pcap 1 0.000000 172.17.50.13 -> 172.17.10.2 LDAP 197 bindRequest(7) "CN=DovecotSvc,OU=Svcs,DC=office,DC=on2it,DC=net" simple 2 0.001879 172.17.10.2 -> 172.17.50.13 LDAP 88 bindResponse(7) success Yay! The service account binds just fine. 3 0.001967 172.17.50.13 -> 172.17.10.2 LDAP 180 searchRequest(8) "dc=office,dc=on2it,dc=net" wholeSubtree 4 0.002772 172.17.10.2 -> 172.17.50.13 LDAP 502 searchResEntry(8) "CN=Jeroen Scheerder,OU=Users,DC=office,DC=on2it,DC=net" \ | searchResRef(8) | searchResRef(8) | searchResRef(8) | searchResDone(8) success 5 0.098367 172.17.50.13 -> 172.17.10.2 TCP 66 49416 > 389 [ACK] Seq=246 Ack=459 Win=1037 Len=0 TSval=602425599 TSecr=124473537 Yay! The user DN is found successfully. 6 225.149885 172.17.50.13 -> 172.17.10.2 LDAP 166 bindRequest(12) "CN=Jeroen Scheerder,OU=Users,DC=office,DC=on2it,DC=net" simple 7 225.152323 172.17.10.2 -> 172.17.50.13 LDAP 88 bindResponse(12) success 8 225.248387 172.17.50.13 -> 172.17.10.2 TCP 66 49416 > 389 [ACK] Seq=346 Ack=481 Win=1040 Len=0 TSval=602650749 TSecr=124496053 Yay! The user DN bind works. But wait, why is it taking dovecot 225 seconds to get around to trying it? The auth process has already given up. * Approach 2: A template defines the user DN. Bind to that DN. AD DNs don't contain usernames, but AD allows all kinds of non-LDAP shorthands for DNs, inclusing %user%@domain. I've verified this to work using ldapsearch: $ ldapsearch -o ldif-wrap=no -x -LLL -E pr=200/noprompt -H ldap://dc2.office.on2it.net \ -b dc=office,dc=on2it,dc=net -s sub \ -D js(a)office.on2it.net -W \ '(&(ObjectClass=person)(sAMAccountName=js))' DN Enter LDAP Password: dn: CN=Jeroen Scheerder,DC=office,DC=on2it,DC=net The config looks like: hosts = dc2.office.on2it.net ldap_version = 3 base = dc=office,dc=on2it,dc=net scope=subtree auth_bind = yes auth_bind_userdn = "%u(a)office.on2it.net" pass_attrs = sAMAccountName=user user_attrs = sAMAccountName=user What happens in this case is best shown by a snippet of dovecot logging: Mar 5 09:57:36 <mail.err> ponyboy dovecot: auth: Error: ldap(js,127.0.0.1,<z1dLNtjzJwB/AAAB>): ldap_search(base=dc=office,dc=on2it,dc=net filter=(&(objectClass=posixAccount)(uid=js))) failed: Operations error Mar 5 09:57:36 <mail.err> ponyboy dovecot: imap: Error: Disconnected from auth server, aborting (client-pid=7247 client-id=1) Mar 5 09:57:36 <mail.crit> ponyboy dovecot: auth: Fatal: master: service(auth): child 7245 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes }) Mar 5 09:57:36 <mail.info> ponyboy dovecot: imap-login: Internal login failure (pid=7247 id=1) (internal failure, 1 successful auths): user=<js>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=7248, secured, session=<z1dLNtjzJwB/AAAB> I find this intriguing -- "1 successful auths", so says imap-login, with auth dying horribly. I smell a rat. Something's wrong here...

1 0