- dovecot - dovecot.org

[Dovecot] Trying to get Centos5 set up with dovecot
by DCA 26 Mar '14

26 Mar '14

Greetings, It seems I'm having some trouble getting this message into the list. I have used this dovecot list before. I am trying to set up dovecot to replace an older POP3 server in an existing set up. Currently the server uses sendmail to handle incoming mail. users are in /etc/mail and their incoming eMail lands in the /var/mail/username in /var/mail the username file is owned by username:mail I have dovecot configured to create the imap folders in /home/username/mail/ on existing accounts login attempts fail with errors such as: chown /home/username/mail/.imap/INBOX failed: Operation not permitted egid=500(username), group based on /var/mail/username mkdir /home/username/mail/imap/INBOX failed: Operation not permitted. Everything seems to work as expected but only if I add "username" into the "mail" group OR if I have all mailboxes chowned to username:username Is there any way to tell dovecot to ignore the group ownership of /var/mail/username and focus instead on using username:username for everything in /home/username ? If I have to add every user to the mail group I can but this seems messy. Thanks!

2 1

[Dovecot] Direct groups of users to pairs of backend servers
by Murray Trainer 25 Mar '14

25 Mar '14

Hi All, I am using dovecot in the Director setup with multiple proxy and backend mailstores and user information stored in LDAP. I am aware users can be directed to a single backend server. It would be useful to be able to direct groups of users to pairs of backend servers to give some fault tolerance against NFS issues and make the whole thing more scalable. Otherwise each backend mailstore will need all the NFS mounts and the whole cluster will be affected if one NFS mount has an issue. I am not sure if this possible with the current dovecot implementation? If not it would be a great enhancement. Thanks Murray

2 3

Re: [Dovecot] Disconnected (auth failed, 1 attempts)
by Joseph Tam 25 Mar '14

25 Mar '14

ldaamandy <amandy_lda(a)outlook.com> writes: > {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/", ... Dovecot uses the uses the native crypt() which ought to recognize $1$ hashes, but maybe try changing it to "{MD5-CRYPT}". http://wiki2.dovecot.org/Authentication/PasswordSchemes Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] pb with setting quota_rule=backend quota=fs for quota-warning
by marion 25 Mar '14

25 Mar '14

Hello my config is debian wheezy with dovecot v.2.1.17-2., plugin quota /imap_quota is ok : I can read the real filesystem user quota for each different user with - doveadmin quota get - thunderbird - SOGo my problem is to configure quota-warning message : 1) if no quota_rule is defined then my dovecot-debug.log looks like Mar 25 18:28:02 imap(testuser): Debug:Quota warning: bytes=0 (80%) messages=0 ... 2) As soon as I set quota_rule = *:storage=1G , quota root is correctly defined, and quota-warning messages are sent according to the ratio I defined (cf below 90-quota.conf) with THIS limit (1G) , the same for all users and that’s not what I expect when I set individual quota... 3)And If define something like: quota_rule = * : backend (or backend=%q or …) dovecot definitively hangs with a) doveadm quota get -u testuser doveadm(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend b) even my login in SOGo hangs /var/mail/mail.err Mar 25 21:56:22 biwa dovecot: imap(testuser): Error: user testuser: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:backend: Unknown rule limit name: backend Is there a way ( a variable ?) to link the real filesystem quota limit with the quota_warning process ? … something like quota_rule = *:storage=%VAR ? 90-quota.conf ------------------- plugin { quota_warning = storage=80%% quota-warning 80 %u quota_warning2 = storage=90%% quota-warning 90 %u } plugin { quota =fs } service quota-warning { executable = script /etc/dovecot/myconfig/quota-warning.sh unix_listener quota-warning { mode =0666 } } Thank you in advance best regards, Philippe ______________ Philippe Marion

1 0

[Dovecot] Getting second quota limit out of database
by dev＠stean.ch 25 Mar '14

25 Mar '14

Hello there, I am working with dovecot v2.2.12, and have setup a user and domain quota by using a quota/quota_rule for user and quota2/quota2_rule for the domain. This works fine when the limit configuration for both is stored inside dovecot configuration files. However, I would like to have the limits configurable on a user and domain base, and that data is stored inside my SQL database. Getting the user quota out of a database with SQL works fine, as documented with "SELECT whatever AS quota_rule FROM mytable", I extended my query to return quota2_rule too, but dovecot did not really do something with that value in the end, the domain limit was set to 0, as visible through the logs and with doveadm quota get ... Any idea or hint how I could get dovecot to read the limit for the domains out of my SQL database ? Thanks, Stephan

2 2

[Dovecot] mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 1

[Dovecot] [LMTP] sieve filter does not drop privilleges?
by kjonca＠o2.pl 25 Mar '14

25 Mar '14

I have (user) sieve filter in my home dir. This filter uses "vnd.dovecot.filter" extension to call some shell scripts. These scrips creates some temporary files. Strange thing: whent sieve is called via dovecot-lda - these files are created by user "kjonca" when sieve is called via lmtp - these files are created by root. Is there any way to drop privilleges where lmtp passing messages to sieve? KJ -- http://wolnelektury.pl/wesprzyj/teraz/

1 0

[Dovecot] Dovecot mail-filter cannot work with large email about 700k
by boyd yang 25 Mar '14

25 Mar '14

Hi All I configured dovecot 2.1.7 with mail-filter plugin. It works well for small emails like server k big.(7k) But it failed with larger emails about 700k. The scripts hang out, and the mail-filter-out process does not exist and always in ps. It does not work even I use "cat" in mail-filter-out.sh. Where to set the size limit for mail-filter? Do you know how to fix this? This bug also exists in 2.2.12. Thanks!

1 0

[Dovecot] Disconnected (auth failed, 1 attempts)
by ldaamandy 25 Mar '14

25 Mar '14

hi : i just install dovecot-2 and start ok but login failed for test-user . i turn on all debug options , the debug info follow: "Mar 25 14:40:10 cs2c dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<q1(a)t.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured" and the info of input->w_buffer is : cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" the auth of dovecot.conf: >>>>>>>>>>>>>>>>>>>>> passdb { args = /etc/dovecot.master driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot-memcached.conf driver = dict } userdb { args = /etc/dovecot-memcached.conf driver = dict } [root@cs2c log]# telnet 127.0.0.1 11211 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. get q1(a)t.com_imap VALUE q1(a)t.com_imap 0 205 {"username":"q1(a)t.com","password":"{CRYPT}$1$d5ef98b7$brWKOJiUiqII3DysGzsfl\/","home":"\/test\/mail","mail":"maildir:\/t.com\/q1@t.com","quota_rule2":"*:messages=11111","quota_rule":"*:bytes=11650727936"} END >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> The relevant code is: >>>>>>>>>>>>>login-common/client-common.c<<<<<<< bool client_read(struct client *client) { switch (i_stream_read(client->input)) { //w_buffer:cp01 CAPABILITY a001 LOGIN "q1(a)t.com" "q1q1q1q1" case -2: /* buffer full */ client_send_line(client, CLIENT_CMD_REPLY_BYE, "Input buffer full, aborting"); client_destroy(client, "Disconnected: Input buffer full"); return FALSE; case -1: /* disconnected */ client_destroy(client, "Disconnected"); //debug infomation return FALSE; case 0: /* nothing new read */ return TRUE; default: /* something was read */ return TRUE; } } >>>>>>>>>>imap-login/client.c<<<<<<<<<< static void imap_client_input(struct client *client) { struct imap_client *imap_client = (struct imap_client *)client; if (!client_read(client)) return; client_ref(client); o_stream_cork(imap_client->common.output); for (;;) { if (!auth_client_is_connected(auth_client)) { /* we're not currently connected to auth process - don't allow any commands */ client_send_line(client, CLIENT_CMD_REPLY_STATUS, AUTH_SERVER_WAITING_MSG); if (client->to_auth_waiting != NULL) timeout_remove(&client->to_auth_waiting); client->input_blocked = TRUE; break; } else { if (!client_handle_input(imap_client)) break; } } o_stream_uncork(imap_client->common.output); client_unref(&client); } >>>>>>>>>>>>>>other-dovecot.conf>>>>>>>>>>>>>>>>>>>>>>>>>>>> .......... protocols = pop3 imap service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = testmail mode = 0666 user = testmail } user = testmail } service imap-login { service_count = 1 } service imap { drop_priv_before_exec = no executable = /usr/libexec/dovecot/imap } service pop3-login { service_count = 1 } service pop3 { drop_priv_before_exec = yes executable = /usr/libexec/dovecot/pop3 } ssl_cert = </etc/pki/NSMail/SSL.cert ssl_key = </etc/pki/NSMail/SSL.key userdb { args = /etc/dovecot-memcached.conf driver = dict } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/sieve.log mail_plugins = menc sieve quota acl expire postmaster_address = root } protocol imap { mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire } #protocol vipimap { # mail_plugins = quota imap_quota zlib mdec imap_acl acl autocreate expire #} protocol pop3 { mail_plugins = quota zlib mdec expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_no_flag_updates = yes pop3_uidl_format = %08Xu%08Xv }

1 0

[Dovecot] Weird Authentication behaviour
by Jürgen Ladstätter 24 Mar '14

24 Mar '14

Hi guys, we use dovecot 2.0.9 and authentication against a mysql database. Everything works fine, but we found some weird behavior when the password is e.g. testpass you also authenticate successfully with testpass123 or testpassNOT. Whatever comes after the correct password doesnt matter, the authentication is still successful. Here are the used configs: // auth-sql.conf.ext passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = static args = uid=vmail gid=vmail home=/data/mail/%d/%n } // dovecot-sql.conf.ext driver = mysql connect = host=[IP] dbname=[DB] user=[USER] password=[PASS] default_pass_scheme = CRYPT password_query = SELECT `password`, `login` AS `user` FROM `v_email_accounts` WHERE `login`='%u' // 10-auth.conf disable_plaintext_auth = no auth_mechanisms = plain !include auth-sql.conf.ext // 10-master.conf default_process_limit = 1000 default_client_limit = 3003 default_vsz_limit = 1024M service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 1024M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service lmtp { unix_listener lmtp { } } service imap { vsz_limit = 1024M process_limit = 2048 } service pop3 { process_limit = 2048 } service auth { unix_listener auth-userdb { user = vmail group = vmail } client_limit = 8096 } service auth-worker { } service dict { unix_listener dict { } } Thanks in advance for your help!

4 3