- dovecot - dovecot.org

[Dovecot] Locking down master user to certain domains through passwd-file auth
by Andrew Obertas 12 Dec '13

12 Dec '13

Hello, I know it is possible to lock down a master user to only have access to certain domains through SQL login but I was wondering if the same was possible with a passwd-based system. I currently have a master-passwd file residing in the /etc/virtual/domain.com/ directories I want the master user to be able to log in to. Is there a way to tell passdb to only allow the master user login to proceed if they can auth to the master-passwd file in the same folder as the user? Alternatively, is there a better way to go about this? What I assumed would be the easy approach, where the domain from the user's e-mail is fetched, doesn't seem to work as %d fetches the master user's domain and, unless I'm doing something wrong, the login_domain variable cannot be used as this is outside Dovecot-auth. Any assistance with this would be appreciated. -- Best regards, Andrew Obertas Technical Support Representative Infinet Communications Group

2 2

[Dovecot] error with xz compression
by Michael Cramer 12 Dec '13

12 Dec '13

i have enabled the zlib plugin with xz compression but on some new mails i got now a segfault and the following lines in dovecot error.log Dec 12 08:51:23 imap(tester(a)domain.com): Error: lzma.read(/srv/vmail/mail/domain.com/root/storage/m.3): unexpected EOF at 136004 Dec 12 08:51:23 imap(tester(a)domain.com): Error: read(zlib(/srv/vmail/mail/domain.com/root/storage/m.3)) failed: Invalid argument (uid=2985) Dec 12 08:51:23 imap(tester(a)domain.com): Error: mail parser: read(zlib(/srv/vmail/mail/domain.com/root/storage/m.3), box=Shared/root(a)domain.com) failed: Invalid argument Dec 12 08:52:33 indexer-worker(tester(a)domain.com): Error: lzma.read(/srv/vmail/mail/domain.com/tester/storage/m.41): unexpected EOF at 4913758 the problem is that the mails can't be shown. this happens not with every mail i also got new mails that can be shown without any problem. i was not able to produce a coredump

2 1

[Dovecot] Dsync error: Couldn't drop privileges: getgrnam
by Alan McGinlay - SICS 12 Dec '13

12 Dec '13

Hi, I upgraded (in place upgrade, preserving my dovecot configs) to a newer release of ubuntu in order to gain access to slightly newer Dovecot release and be able to use Dsync for migration from Cyrus, here is my doveconf -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-44-generic x86_64 Ubuntu 12.10 auth_debug = yes auth_default_realm = whatever.com auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-master imapc_features = rfc822.size imapc_host = oldmail.whatever.com imapc_master_user = cyradmin imapc_password = <password hidden> mail_chroot = /var/vmail mail_debug = yes mail_gid = 5000 mail_location = maildir:~/Maildir mail_prefetch_count = 20 mail_privileged_group = vmail mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = dovecot mode = 0600 user = dovecot } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = <cert ssl_key = <cert userdb { args = uid=vmail gid=vmail home=/domain/%1d/%d/%1n/%n allow_all_users=yes driver = static } protocol lmtp { postmaster_address = post(a)whatever.com } protocol imap { mail_max_userip_connections = 10 } protocol pop3 { pop3_uidl_format = %v.%u } And the command I am using to (attempt) a mailbox sync: doveadm -o mail_fsync=never backup -R -u alantestuser(a)whatever.com imapc: Produces this output: dsync(alantestuser(a)whatever.com): Error: user alantestuser(a)whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) dsync(alantestuser(a)whatever.com): Fatal: User init failed mail.log shows this: Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Dec 5 21:10:54 newmailserver dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Dec 5 21:10:54 newmailserver dovecot: auth: Debug: master in: USER#0111#011alantestuser(a)whatever.com#011service=doveadm Dec 5 21:10:54 newmailserver dovecot: auth: Debug: master out: USER#0111#011alantestuser@whatever.com#011uid=5000#011gid=5000#011home=/domain/w/whatever.com/a/alantestuser I followed this doc (which could use a little fleshing out, I will be happy to do it once I get a grasp on this!): http://wiki2.dovecot.org/Migration/Dsync Thanks in advance! /Alan

3 9

[Dovecot] managesieve error with dovecot
by saurabh 12 Dec '13

12 Dec '13

Hi All, I am using Dovecot version 2.0.9 on Centos 6.4. I have installed dovecot-pegionhole version 2.0.9 and Roundcube version 0.9.5 . After doing all the configurations. I am able to see the filters icon in roundcube setting. But whem I click it I get the error "could not connect to server" please help. Below are the error logs. ########### log from /var/log/maillog ########## Dec 11 21:41:06 eximtest dovecot: managesieve: Debug: Unknown userdb setting: plugin//mail/%d/%n/=/home/test Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: Effective uid=6006, gid=6000, home= Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: quota: No quota setting - plugin disabled Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/ayurve.co.uk/test/Maildir Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: maildir++: root=/mail/ayurve.co.uk/test/Maildir, index=, control=, inbox=/mail/ayurve.co.uk/test/Maildir Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: sieve-storage: using active sieve script path: (null) Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: sieve-storage: using sieve script storage directory: (null) Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Error: sieve-storage: stat((null)) failed: Bad address Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Error: sieve-storage: stat((null)) failed: Bad address Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Fatal: Failed to open Sieve storage. ############## log from /var/www/html/roundcube/logs/errors ############## [11-Dec-2013 16:11:06 +0000]: PHP Error: Unable to connect to managesieve on eximtest.techblue.co.uk:4190 in /var/www/html/roundcube/plugins/managesieve/managesieve.php on line 308 (GET /roundcube/?_task=settings&_action=plugin.managesieve) [11-Dec-2013 16:11:06] Not currently in AUTHORISATION state (1): [11-Dec-2013 16:11:06] Failed to write to socket: connection lost (): ################### log from /var/www/html/roundcube/logs/sieve ################### [11-Dec-2013 16:11:06 +0000]: S: "IMPLEMENTATION" "dovecot" [11-Dec-2013 16:11:06 +0000]: S: "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date" [11-Dec-2013 16:11:06 +0000]: S: "NOTIFY" "mailto" [11-Dec-2013 16:11:06 +0000]: S: "SASL" "PLAIN" [11-Dec-2013 16:11:06 +0000]: S: "VERSION" "1.0" [11-Dec-2013 16:11:06 +0000]: S: OK "Capability completed." [11-Dec-2013 16:11:06 +0000]: C: AUTHENTICATE "PLAIN" "AHRlc3RAYXl1cnZlLmNvLnVrADRRUG9vZFdvMGQ=" [11-Dec-2013 16:11:06 +0000]: S: Thanks, Saurabh -- Saurabh Kumar (RHCSA,RHCE,RHCVA)

2 6

[Dovecot] what's wrong with this config file?
by Jim Reid 12 Dec '13

12 Dec '13

Hi. I'm setting up a new IMAPS server. Mail users don't have login access to the box but will each have unique UNIX-style UIDs: no back-end database or LDAP thing. So far. Their mail will get delivered to UNIX-style mailboxes in /var/mail/%u (where %u is the UNIX username obviously). Their IMAP folders will go in /var/imap/%u. These will contain subfolders once everyone migrates to the new set-up and some folders will contain messages and subfolders. I think this is what I configured in dovecot. However when I try to set up a test account, dovecot reports the following error: Dec 12 02:22:00 shaun dovecot: imap-login: Login: user=<jim>, method=CRAM-MD5, rip=10.0.0.1, lip=10.1.1.1, mpid=14874, TLS, session=<8Hy1Ak3t+gDDNulD> Dec 12 02:22:00 shaun dovecot: imap(jim): Error: user jim: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Dec 12 02:22:00 shaun dovecot: imap(jim): Error: Invalid user settings. Refer to server log for more information. I've checked and re-checked the wiki. google was unable to suggest any explanation either. Any ideas what's wrong? There is no duplicate namespace (and/or prefix) that I can see below. # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.2-RELEASE amd64 auth_mechanisms = cram-md5 auth_verbose = yes base_dir = /var/run/dovecot/ default_client_limit = 120 director_username_hash = %Lu import_environment = TZ listen = *, [::] mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl namespace { disabled = no hidden = yes ignore_on_failure = no inbox = yes list = yes location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / subscriptions = yes type = private } namespace imapstuff { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/var/imap/%u:LAYOUT=fs prefix = separator = / subscriptions = yes type = private } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no driver = special_use = \Drafts } mailbox Junk { auto = no driver = special_use = \Junk } mailbox Sent { auto = no driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = separator = subscriptions = yes type = private } passdb { driver = pam } passdb { driver = pam } passdb { args = /usr/local/etc/dovecot-md5 driver = passwd-file } protocols = imap service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 32 drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 0 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 8 process_min_avail = 3 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 32 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 32 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 8 process_min_avail = 3 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 32 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </usr/local/etc/ssl/private/dovecot.pem ssl_parameters_regenerate = 1 weeks state_dir = /var/lib/dovecot syslog_facility = local4 userdb { driver = passwd } userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)example.com } protocol imap { mail_max_userip_connections = 10 mail_plugin_dir = /usr/local/lib/dovecot/imap }

3 2

[Dovecot] warning from managesieve
by Michael Cramer 12 Dec '13

12 Dec '13

when .dovecot.sieve is a symlink (which it is in my case) a warning is written to the error log file, but it still works. Dec 12 10:02:33 managesieve(tester(a)domain.com): Warning: sieve-storage: Active sieve script symlink /srv/vmail/sieve/domain.com/tester/.dovecot.sieve is broken: invalid/unknown path to storage (points to ingo.sieve). root@i920:/srv/vmail/sieve/domain.com/tester# ll insgesamt 20 drwx------ 3 mail mail 4096 Dez 12 10:03 ./ drwx------ 15 mail mail 4096 Dez 12 10:02 ../ lrwxrwxrwx 1 mail mail 10 Dez 12 10:02 .dovecot.sieve -> ingo.sieve -rw------- 1 mail mail 1575 Dez 12 10:03 .dovecot.svbin -rw------- 1 mail mail 2457 Dez 12 10:02 ingo.sieve drwx------ 2 mail mail 4096 Dez 12 10:02 tmp/

4 7

[Dovecot] Panic: file buffer.c: assertion failed: (used_size <= buf->alloc)
by giom87＠libero.it 12 Dec '13

12 Dec '13

Hi, We have a crash in dovecot 2.2.7 2013-12-11 10:38:44 imap(xxx(a)example.com): Panic: file buffer.c: line 307 (buffer_set_used_size): assertion failed: (used_size <= buf->alloc) 2013-12-11 10:38:44 imap(xxx(a)example.com): Error: Raw backtrace: /opt/dovecot- 2.2.7/lib/dovecot/libdovecot.so.0(+0x672a2) [0x7f576b9742a2] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot.so.0(+0x67306) [0x7f576b974306] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f576b92eb4f] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot.so.0(+0x62d89) [0x7f576b96fd89] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_file_open+0x228) [0x7f576bc85488] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot-storage.so.0 (mail_transaction_log_open+0xba) [0x7f576bc8229a] -> /opt/dovecot-2.2.7 /lib/dovecot/libdovecot-storage.so.0(+0x8dc94) [0x7f576bc69c94] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot-storage.so.0(mail_index_open+0xf0) [0x7f576bc69ee0] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot-storage.so.0 (index_storage_mailbox_open+0xad) [0x7f576bc5d0dd] -> /opt/dovecot-2.2.7 /lib/dovecot/libdovecot-storage.so.0(+0x4432a) [0x7f576bc2032a] -> /opt/dovecot- 2.2.7/lib/dovecot/libdovecot-storage.so.0(+0x443ff) [0x7f576bc203ff] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot-storage.so.0(+0x564e4) [0x7f576bc324e4] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot-storage.so.0 (mailbox_open+0xf) [0x7f576bc3269f] -> /opt/dovecot-2.2.7 /lib/dovecot/libdovecot-storage.so.0(mailbox_delete+0x1d) [0x7f576bc3287d] -> dovecot/imap(cmd_delete+0xb4) [0x40cc24] -> dovecot/imap(command_exec+0x3d) [0x416d0d] -> dovecot/imap() [0x415e30] -> dovecot/imap() [0x415f1d] -> dovecot/imap(client_handle_input+0x11d) [0x41619d] -> dovecot/imap (client_input+0x6f) [0x41650f] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot.so.0 (io_loop_call_io+0x36) [0x7f576b983b96] -> /opt/dovecot-2.2.7 /lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f576b984bf7] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f576b983b08] -> /opt/dovecot-2.2.7/lib/dovecot/libdovecot.so.0 (master_service_run+0x13) [0x7f576b9338f3] -> dovecot/imap(main+0x2a7) [0x41fa27] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f576b598cdd] -> dovecot/imap() [0x40ab79] 2013-12-11 10:38:44 imap(xx(a)example.com): Fatal: master: service(imap): child 6214 killed with signal 6 (core dumped) We use CentOS 6.4: # cat /etc/issue CentOS release 6.4 (Final) The output of dovecot -n: # 2.2.7: /opt/dovecot-2.2.7/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.23.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_master_user_separator = * auth_username_format = disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 101 first_valid_uid = 102 imap_id_send = import_environment = TZ info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = always mail_gid = 101 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota expire fts fts_lucene mail_uid = 102 maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /opt/dovecot-2.2.7/etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /opt/dovecot-2.2.7/etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /opt/dovecot-2.2.7/etc/dovecot/dovecot-ldap-multiuser.conf driver = ldap master = yes } plugin { fts = lucene fts_lucene = quota = maildir quota_rule2 = INBOX.Trash:storage=+100M } protocols = imap pop3 service anvil { client_limit = 3000 } service auth { client_limit = 4096 unix_listener auth-userdb { mode = 0600 } } service imap-login { inet_listener imap { address = xxx.xxx.xxx.xxx port = 143 } inet_listener imaps { address = xxx.xxx.xxx.xxx port = 993 ssl = yes } process_limit = 2500 process_min_avail = 5 } service imap { drop_priv_before_exec = yes process_limit = 2500 process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { drop_priv_before_exec = yes process_limit = 1024 } service pop3-login { inet_listener pop3 { address = xxx.xxx.xxx.xxx port = 110 } inet_listener pop3s { address = xxx.xxx.xxx.xxx port = 995 ssl = yes } process_limit = 300 process_min_avail = 5 } service pop3 { drop_priv_before_exec = yes process_limit = 300 process_min_avail = 5 } ssl_cert = </opt/dovecot-2.2.7/certs/imapd.pem ssl_key = </opt/dovecot-2.2.7/certs/imapd.pem userdb { args = /opt/dovecot-2.2.7/etc/dovecot/dovecot-ldap.conf driver = ldap } protocol lmtp { mail_plugins = quota expire fts fts_lucene sieve } protocol lda { mail_plugins = quota expire fts fts_lucene sieve } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = UID%u-%v } Thanks

2 1

[Dovecot] ot: tracking messages- luser troubleshooting
by voytek＠sbt.net.au 12 Dec '13

12 Dec '13

I had a user complaining of 'not getting emails' I've searched for sender in maillog, got two messages, both showed up as; Dec 12 15:51:29 emu postfix/pipe[9607]: 3F21C5E750: to=<xxx>, relay=dovecot, delay=6.4, delays=6.3/0.01/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service) Dec 12 15:51:29 emu postfix/qmgr[20178]: 3F21C5E750: removed yes the user claimed the message was not received, eventually, after traversing through severl directories, I found the message in '../Maildir/.Deleted Messages' it turns out it was inadvertenltly deleted on iphone. there has to be a better way to try to find / resolve such issues ? what's an optimal way of trying to trace such? I greped for the 3F21C5E750 string through several Maildirs tia,

2 1

[Dovecot] Dovecot as caching proxy
by Anton Lundin 12 Dec '13

12 Dec '13

Hi. I'm bin playing around with dovecot to try to setup it as a caching imap proxy. I manged to get dovecot to use both proxy=y and imapc: connections to the master server, but i haven't manged to get dovecot to cache any mails. The remote imap server is a quite hostile one, that i don't have any super/master user access to, and it only exposes imap. I've used tried both with the static passdb, nopassword=y, and imap authdb and with static and prefetch userdbs. I manage to produce the same results, eg. dovecot grabbing the password from the client and uses it to establish a imapc connection to the server and re-exposing it, and starts to write indexes. ( The later plan is probably to use pam as passdb to grab a and store a hashed copy of the password to allow offline access to the cached emails, but thats a later problem to solve.) What i haven't managed to get working is to trigger some replication of the remote emails to dovecot and using that as a cache to serve the emails to the client. I found some presentations and some emails that point in the direction that this should be possible to achieve, probably with the replication plugin, but never managed to get this to work. I'm using dovecot 2.2.9 Does anyone have manged to produce a working setup like this? //Anton -- Anton Lundin +46702-161604

1 0

[Dovecot] Dovecot 2.1.7 crash (with core dumped)
by Alessio Cecchi 12 Dec '13

12 Dec '13

Hi, I'm running dovecot 2.1.7 with vpopmail auth and Maildir on NFS (I have only one POP/IMAP server). All works fine but sometimes dovecot "imap" process crush and I would like to understand why: Error in log files: Dec 12 06:32:56 pop01eeh dovecot: imap-login: Login: user=<info(a)mydomain.com>, method=PLAIN, rip=1.2.3.4, lip=192.168.1.3, mpid=4086, session=<UbiBrU/tvACXCCva> Dec 12 06:50:25 pop01eeh dovecot: imap(info(a)mydomain.com), session=<UbiBrU/tvACXCCva>: Disconnected: Disconnected in IDLE in=654 out=704677 Dec 12 06:50:25 pop01eeh dovecot: imap(info(a)mydomain.com), session=<UbiBrU/tvACXCCva>: Panic: Message count decreased Dec 12 06:50:25 pop01eeh dovecot: imap(info(a)mydomain.com), session=<UbiBrU/tvACXCCva>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4892a) [0x7f68af1ae92a] -> /usr/lib/dovecot/libdovecot.so.0(+0x48976) [0x7f68af1ae976] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f68af181faf] -> dovecot/imap() [0x4191e9] -> dovecot/imap() [0x40b366] -> dovecot/imap() [0x40b69c] -> dovecot/imap(command_exec+0x3d) [0x411ffd] -> dovecot/imap(client_command_cancel+0x3a) [0x4108da] -> dovecot/imap(client_destroy+0xdd) [0x41178d] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f68af1bab56] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f68af1bbb8f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f68af1baaf8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f68af1a6413] -> dovecot/imap(main+0x2a4) [0x419dd4] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f68aee22c8d] -> dovecot/imap() [0x4090b9] Dec 12 06:50:25 pop01eeh dovecot: imap(info(a)mydomain.com), session=<UbiBrU/tvACXCCva>: Fatal: master: service(imap): child 4086 killed with signal 6 (core dumped) Backtrace: # gdb /usr/libexec/dovecot/imap /home/dovecot/core GNU gdb (GDB) 7.0.1-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...done. warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /usr/lib/libssl.so.0.9.8...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.0.9.8 Reading symbols from /usr/lib/libcrypto.so.0.9.8...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libcrypto.so.0.9.8 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /usr/lib/dovecot/lib01_acl_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib01_acl_plugin.so Reading symbols from /usr/lib/dovecot/lib02_imap_acl_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib02_imap_acl_plugin.so Reading symbols from /usr/lib/dovecot/lib10_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/dovecot/lib20_expire_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib20_expire_plugin.so Reading symbols from /usr/lib/dovecot/lib20_zlib_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib20_zlib_plugin.so Reading symbols from /lib/libbz2.so.1.0...(no debugging symbols found)...done. Loaded symbols for /lib/libbz2.so.1.0 Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00007f68aee361b5 in raise () from /lib/libc.so.6 (gdb) bt full #0 0x00007f68aee361b5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007f68aee38fc0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007f68af1ae93d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1980248 "/usr/lib/dovecot/libdovecot.so.0(+0x4892a) [0x7f68af1ae92a] -> /usr/lib/dovecot/libdovecot.so.0(+0x48976) [0x7f68af1ae976] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f68af181faf] -> dovecot/im"... #3 0x00007f68af1ae976 in i_internal_fatal_handler (ctx=0x7fffb9588e70, format=<value optimized out>, args=<value optimized out>) at failures.c:649 status = 0 #4 0x00007f68af181faf in i_panic (format=0xff6 <Address 0xff6 out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7fffb9588f40, reg_save_area = 0x7fffb9588e80}} #5 0x00000000004191e9 in imap_sync_deinit (ctx=0x1a36ae0, sync_cmd=0x19a54c0) at imap-sync.c:242 client = 0x19a48e0 status = {messages = 1983, recent = 0, unseen = 0, uidvalidity = 1290163110, uidnext = 84072, first_unseen_seq = 0, first_recent_uid = 84072, last_cached_seq = 0, highest_modseq = 1, keywords = 0x0, permanent_flags = 0, nonpermanent_modseqs = 1, permanent_keywords = 0, allow_new_keywords = 0} sync_status = {sync_delayed_expunges = 0} ret = 0 #6 0x000000000040b366 in idle_finish (ctx=0x19a55b0, done_ok=false, free_cmd=false) at cmd-idle.c:38 client = 0x19a48e0 #7 0x000000000040b69c in cmd_idle_continue (cmd=0x19a54c0) at cmd-idle.c:234 client = 0x19a48e0 ctx = 0x19a55b0 orig_offset = 704677 #8 0x0000000000411ffd in command_exec (cmd=0x19a54c0) at imap-commands.c:148 hook = 0x1989cd0 ret = <value optimized out> #9 0x00000000004108da in client_command_cancel (_cmd=0x7fffb9589088) at imap-client.c:136 cmd = 0x19a54c0 cmd_ret = <value optimized out> #10 0x000000000041178d in client_destroy (client=0x19a48e0, reason=<value optimized out>) at imap-client.c:202 cmd = 0x0 __FUNCTION__ = "client_destroy" #11 0x00007f68af1bab56 in io_loop_call_io (io=0x1a35ad0) at ioloop.c:379 ioloop = 0x1988670 t_id = 2 #12 0x00007f68af1bbb8f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x19889e0 event = 0x1988a50 list = 0x19a5410 io = 0xff6 tv = {tv_sec = 29, tv_usec = 999250} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #13 0x00007f68af1baaf8 in io_loop_run (ioloop=0x1988670) at ioloop.c:398 No locals. #14 0x00007f68af1a6413 in master_service_run (service=0x1988520, callback=0xff6) at master-service.c:544 No locals. ---Type <return> to continue, or q <return> to quit--- #15 0x0000000000419dd4 in main (argc=1, argv=0x1988370) at main.c:389 set_roots = {0x41cf20, 0x0} login_set = {auth_socket_path = 0x1980078 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41a0b0 <login_client_connected>, failure_callback = 0x41a050 <login_client_failed>} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> (gdb) And my configuration: dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.8 auth_cache_size = 8 M deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_fsync = always mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u), session=<%{session}>: " mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota acl zlib expire maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = username_format=%Ld /etc/dovecot/extra/alias-domains-denylogin.txt deny = yes driver = passwd-file } passdb { args = cache_key=%s%u webmail=192.168.1.5 driver = vpopmail } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation } pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { process_limit = 300 unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap { process_limit = 2400 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 0 } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </etc/dovecot/ssl/wildcard-myserver.net.pem ssl_key = </etc/dovecot/ssl/wildcard-myserver.net.key submission_host = localhost userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol lda { mail_plugins = quota acl zlib expire sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins mail_max_userip_connections = 15 mail_plugins = quota acl zlib expire imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 5 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz Cloud Email Hosting -> http://www.qboxmail.com @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 7