- dovecot - dovecot.org

[Dovecot] master user and ACL's
by Peter Mogensen 14 Feb '14

14 Feb '14

Hi, Quick question...I read in the docs that: "Master user is still subject to ACLs just like any other user, which means that by default the master user has no access to any mailboxes of the user." ... and that the standard workaround is to return master_user=%u from the userdb. But why is the master_user authn-id used in the ACLs and not the authz-id (requested-login-user) ? Isn't the whole point of SASL authz-id semantics to have authorization resolved based on the authz-id? /Peter

2 4

[Dovecot] Public folder doesn't work
by vupibi 14 Feb '14

14 Feb '14

Hey, I have some issues with dovecot, because the public folder won't show up in Mail accounts. Dovecot is installed via zentyal 3.3. I tried several settings, but I dont get it running. What I tried is adding this to my dovecot.conf file # User's private mail location mail_location = maildir:~/Maildir # When creating any namespaces, you must also have a private namespace: namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = public separator = / prefix = Public/ location = maildir:/var/vmail/public subscriptions = no } But nothing happened. I tried it with # Umask for shared folders umask = 0007 with subscriptions = yes tried creating the folder first like this touch /var/vmail/public/dovecot-shared chown -R ebox /var/vmail/public find /var/vmail/public -type d -print0 | xargs -0 chmod 2770 find /var/vmail/public -type f -print0 | xargs -0 chmod 660 But i had no success. Any Ideas how to get it running? Here is my dovecot -n output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-58-generic x86_64 Ubuntu 12.04.4 LTS ext4 auth_gssapi_hostname = mailand.sxps.int auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = gssapi plain first_valid_gid = 116 first_valid_uid = 108 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = 116 mail_home = /var/vmail/sieve/%d/%u mail_location = maildir:/var/vmail/%$ mail_uid = 108 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = maildir:User quota quota_rule = *:storage=0 sieve = /var/vmail/sieve/%d/%u/sieve-script sieve_dir = /var/vmail/sieve/%d/%u sieve_global_path = /var/vmail/sieve/default.sieve sieve_storage = /var/vmail/sieve/%d/%u } protocols = imap sieve service auth { executable = /usr/lib/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = ebox mode = 0600 user = ebox } user = dovecot } service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/dovecot/ssl/dovecot.pem ssl_key = </etc/dovecot/ssl/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota autocreate } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota postmaster_address = admin(a)XX.eu } Modify message -- View this message in context: http://dovecot.2317879.n4.nabble.com/Public-folder-doesn-t-work-tp46671.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Some LDA questions!
by Фадеев Виталий Львович 14 Feb '14

14 Feb '14

Hi there! I have been setuped exim and dovecot. Exim uses dovecot-lda to deliver mails to mailbox. Some configurations of exim: dovecot_virtual_delivery: driver = pipe command = /usr/libexec/dovecot/dovecot-lda -d $local_part@$domain -f $sender_address message_prefix = message_suffix = delivery_date_add envelope_to_add return_path_add log_output user = vmail group = vmail #mode = 0660 temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78 dovecot does mysql lookups of users, passwords. All works, but in headers of example message: Return-path: <"vitalyf(a)bbb.com"@host.aaa.com> Envelope-to: vitalyf(a)bbb.com Delivery-date: Tue, 11 Feb 2014 03:59:17 -0600 Received: from xxx.net ([11.22.33.44] helo=[192.168.1.77]) by host.aaa.com with esmtpsa (TLS1.0:ECDHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from <"vitalyf(a)bbb.com"@host.aaa.com>) id 1WDA7Y-0007GS-VR for vitalyf(a)bbb.com; Tue, 11 Feb 2014 03:59:17 -0600 Message-ID: <52F9F468.9030001(a)bbb.com> Date: Tue, 11 Feb 2014 16:59:04 +0700 From: =?UTF-8?B?0KTQsNC00LXQtdCyINCS0LjRgtCw0LvQuNC5INCb0YzQstC+0LLQuNGH?= <vitalyf(a)bbb.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: vitalyf(a)bbb.com Subject: adfasdf Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Sender: "vitalyf(a)bbb.com"@host.aaa.com Test headers host.aaa.com is a hostname that run dovecot and exim. bbb.com is a virtual domain located in mysql db. I do not want to show host.aaa.com in headers. How can i disable this so headers looks like this: Return-path: <vitalyf(a)bbb.com> Which configuration i need to show you?

2 1

[Dovecot] Cached message size larger than expected
by Steven Haigh 14 Feb '14

14 Feb '14

Hi guys, I recently turned on IMAP zlib compression for Maildir and noticed that I've started getting these errors in the maillog. Error: Cached message size larger than expected (1627 > 1548) Error: Maildir filename has wrong S value, renamed the file from /home/crc.id.au/netwiz/.System Generated.Cron Jobs/cur/1392224150.M52270P1073.mail.crc.id.au,S=1627:2,S,Z to /home/crc. id.au/netwiz/.System Generated.Cron Jobs/cur/1392224150.M52270P1073.mail.crc.id.au,S=1627:2,S,Z Error: Corrupted index cache file /home/crc.id.au/netwiz/.System Generated.Cron Jobs/dovecot.index.cache: Broken physical size for mail UID 10916 Error: read(zlib(/home/crc.id.au/netwiz/.System Generated.Cron Jobs/cur/1392224150.M52270P1073.mail.crc.id.au,S=1627:2,S,Z)) failed: Invalid argument Disconnected: Internal error occurred. Refer to server log for more information. [2014-02-14 15:08:20] For these emails, I can no longer retrieve the contents of those messages in my mail client. I noticed a thread similar to this for Dovecot 2.1.3 (or so) - however I'm getting the same on 2.2.12. Has there been any solutions for this? -- Steven Haigh Email: netwiz(a)crc.id.au Web: https://www.crc.id.au Phone: (03) 9001 6090 - 0412 935 897 Fax: (03) 8338 0299

2 4

[Dovecot] Exclude Users from replication/sync
by Daniel Stoye 14 Feb '14

14 Feb '14

Hi All, i'm searching for a way to exclude certain users from dovecots replication mechanism. I can't use the first_valid_uid setting, because the uid of my pam (ldap) users und my system users are mixed up. So, is there a way to limit my users i currently have in my userdb or somehow exclude specific uids from replication? Thanks, Daniel

2 3

[Dovecot] v2.2.12 released
by Timo Sirainen 14 Feb '14

14 Feb '14

http://dovecot.org/releases/2.2/dovecot-2.2.12.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.12.tar.gz.sig POP3 server code changes rarely, so I haven't spent time adding automated testing for it. So of course now that it changed in v2.1.11 there was a bug that caused it to crash most of the time (except for the test case I was using while developing it). This release fixes it, no other changes.

2 2

[Dovecot] Dovecot 2.2.10 crash / infinite loop bug
by Jani Hast 14 Feb '14

14 Feb '14

Hello, I though this bug should be reported, although there is workaround already made and in use. Dovecot 2.2.10 crashes into out of memory error when there is defined system users (userdb+passdb) and own virtual users (userdb+passdb). Removing either one solves the issue and Dovecot is working as it should. When memory leak (I replaced pw_init and gr_init with the version that is found from 2.1.17) is fixed from lib/ipwd.c source, the auth worker gets to infinite loop and authentication timeouts(timeout was increased, but worker does not end what ever it's doing). This far I got chance to debug this before other passdb was removed due lack of time. Here's logs, configs and backtrace: Feb 1 07:39:19 openbsd dovecot: auth-worker(30906): Fatal: pool_system_realloc(268435456): Out of memory Feb 1 07:39:19 openbsd dovecot: auth: Error: auth worker: Aborted request: Worker process died unexpectedly Feb 1 07:39:19 openbsd dovecot: auth-worker(30906): Fatal: master: service(auth-worker): child 30906 returned error 83 (Out of memory (service auth-worker { vsz_limit=256 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) Feb 1 07:39:19 openbsd dovecot: auth: Error: static(email@localhost): passdb doesn't support lookups, can't verify user's existence Feb 1 07:39:19 openbsd dovecot: lda: Error: user email@localhost: Auth USER lookup failed Feb 1 07:39:19 openbsd dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Feb 1 07:39:19 openbsd postfix/pipe[17487]: 5DBAE5F289: to=<email@localhost>, relay=dovecot, delay=37607, delays=37606/0.02/0/0.67, dsn=4.3.0, status=deferred (temporary failure) # 2.2.10: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.5 i386 ffs auth_debug = yes auth_verbose = yes first_valid_uid = 1000 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_debug = yes mail_location = maildir:/var/vmail/mydomain/%n mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Spam { auto = subscribe } prefix = } passdb { driver = bsdauth } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </cert.pem ssl_key = </cert.pem userdb { driver = passwd override_fields = uid=vmail gid=vmail quota_rule=*:storage=1G } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file override_fields = uid=vmail gid=vmail home=/var/vmail/%d/%u quota_rule=*:storage=1G } verbose_ssl = yes protocol imap { mail_plugins = } (gdb) bt full #0 0x0221be9d in kill () at <stdin>:2 No locals. #1 0x02285e36 in raise (s=6) at /usr/src/lib/libc/gen/raise.c:39 No locals. #2 0x02285d5c in abort () at /usr/src/lib/libc/stdlib/abort.c:70 p = (struct atexit *) 0x7fc2c000 mask = 4294967263 cleanup_called = 1 #3 0x0245dcd4 in default_fatal_finish (type=Variable "type" is not available. ) at failures.c:193 backtrace = Variable "backtrace" is not available. (gdb) bt #0 0x0221be9d in kill () at <stdin>:2 #1 0x02285e36 in raise (s=6) at /usr/src/lib/libc/gen/raise.c:39 #2 0x02285d5c in abort () at /usr/src/lib/libc/stdlib/abort.c:70 #3 0x0245dcd4 in default_fatal_finish (type=Variable "type" is not available. ) at failures.c:193 #4 0x0245dd4d in i_internal_fatal_handler (ctx=0xcfbec0f4, format=0x22406990 "pool_system_realloc(%lu): Out of memory", args=0xcfbec118 "") at failures.c:657 #5 0x0245cee3 in i_fatal_status (status=Could not find the frame base for "i_fatal_status". ) at failures.c:295 #6 0x02475543 in pool_system_realloc (pool=Could not find the frame base for "pool_system_realloc". ) at mempool-system.c:120 #7 0x02464c47 in i_realloc (mem=0x86122000, old_size=134217728, new_size=268435456) at imem.c:14 #8 0x0246505c in pw_init () at ipwd.c:23 #9 0x024651f7 in i_getpwnam (name=0x76941140"email@localhost", pwd_r=0xcfbec1cc) at ipwd.c:51 #10 0x164eef8e in bsdauth_verify_plain (request=0x76941020, password=0x78a183a2 "testi", callback=0x164e0320 <verify_plain_callback>) at passdb-bsdauth.c:26 #11 0x164e0bf4 in auth_worker_input (client=0x7b386460) at auth-worker-client.c:205 #12 0x0246f9c2 in io_loop_call_io (io=0x7d1ae8c0) at ioloop.c:388 #13 0x02470e97 in io_loop_handler_run (ioloop=0x7d1ae3c0) at ioloop-kqueue.c:151 #14 0x0246f928 in io_loop_run (ioloop=0x7d1ae3c0) at ioloop.c:412 #15 0x0241609d in master_service_run (service=0x7e433d00, callback=0x164e66a0 <worker_connected>) at master-service.c:566 #16 0x164e6cc8 in main (argc=Cannot access memory at address 0x0 ) at main.c:393 Current language: auto; currently asm Sincerelly, Jani Hast

2 1

[Dovecot] sqlite queries for master user
by Alan Chandler 14 Feb '14

14 Feb '14

Hi I am trying to achieve the following functionality "usera" can't login because his account is set non active. there is a deny query that checks this. a master user ("masteruser") should be able login using "usera*masteruser" syntax to this disabled account I just tried it with auth_debug set on, but the deny query is being run for usera, presumably because my master definition is passdb { driver = sql master = yes args = /etc/dovecot/sqlite-master.conf # Unless you're using PAM, you probably still want the destination user to # be looked up from passdb that it really exists. pass=yes does that. pass = yes } with pass=yes, and that causes usera to be validated through both the deny and accept phase of authorisation. In the password_query defined in sqlite-master.conf I user '%u' to locate my master user. Is there any variable I could use to (in that query) to also check that "usera" exists? I could then remove the pass = yes, both to avoid two more queries and to avoid the trap that this account is locked out. Alternatively some other parameter in the passdb segment above to tell the other login to miss the deny stage.

1 1

[Dovecot] v2.2.11 released
by Timo Sirainen 13 Feb '14

13 Feb '14

http://dovecot.org/releases/2.2/dovecot-2.2.11.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.11.tar.gz.sig I haven't had time to read through the Dovecot mailing list yet, so there are likely some reported bugs that haven't been fixed yet. I'll try to get to them next week in San Francisco. (Probably can't get much done this week in Tokyo.) In the mean time here's v2.2.11 with some new features. + acl plugin: Added an alternative global ACL file that can contain mailbox patterns. See http://wiki2.dovecot.org/ACL for details. + imap proxy: Added proxy_nopipelining passdb setting to work around other IMAP servers' bugs (MS Exchange 2013 especially). + Added %{auth_user}, %{auth_username} and %{auth_domain} variables. See http://wiki2.dovecot.org/Variables for details. + Added support for LZ4 compression. + stats: Track also wall clock time for commands. + pop3_migration plugin improvements to try harder to match the UIDLs correctly. - imap: SEARCH/SORT PARTIAL reponses may have been too large. - doveadm backup: Fixed assert-crash when syncing mailbox deletion.

11 15

Re: [Dovecot] Hybrid of linux user accounts and virtual user accounts configuration
by Derek Winterstien 13 Feb '14

13 Feb '14

Murry my mail delivery is working fine. The first message even automatically creates the Maildir structure like it should, all permissions correct. Steffen Kaiser I will place the output of dovecot n at the bottom of this message. I've configured checkpassword which should be a script that comes with dovecot. However, I cant find it in my install. Which I thought was standard. Not sure where to go get it from either. See this error from the log: dovecot: auth: Fatal: execv(/usr/bin/checkpassword) failed: No such file or directory dovecot: auth: Error: checkpassword(foo,127.0.0.1): Child 29179 exited with status 84 And the pop client sees: -ERR [IN-USE] Temporary authentication failure. Isn't it a script rather than a binary? Is it what should be using to read my simple virtual user flat text file? dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-xxx.xxx.i686 i686 CentOS release 6.4 (Final) auth_failure_delay = 10 secs auth_mechanisms = plain login auth_verbose = yes default_process_limit = 50 disable_plaintext_auth = no listen = * login_greeting = Greetings! mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { driver = pam } passdb { args = /usr/bin/checkpassword driver = checkpassword } service auth { unix_listener auth-userdb { group = postfix user = postfix } } ssl_cert = </etc/pki/arj22/certs/d.pem ssl_key = </etc/pki/arj22/private/d.pem userdb { driver = passwd } userdb { driver = prefetch } userdb { args = /etc/dovecot/passwd/%d driver = passwd-file } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } EOF

1 0