- dovecot - dovecot.org

[Dovecot] Public dovecot namespace visible only to some users
by Joachim Breitner 17 Oct '13

17 Oct '13

Hi, I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A and B, but not any other user. I tried to set up the namespace as follows: namespace { type = public separator = . prefix = INBOX.XFeeds. location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ subscriptions = no } together with a acl-file: /var/vhosts/feeds $ cat dovecot-acl user=A lrwstipekxa user=B lrwipk Now user C cannot access the contents of the XFeeds mailbox, but it still shows up in its IMAP client. How can I make sure that other users cannot observe that this namespace exists? Thanks, Joachim PS: If you collect serverfault reputation, feel free to answer on http://serverfault.com/questions/544061/public-dovecot-namespace-visible-on… as well :-) PPS: Relevant parts of my configuration: first_valid_uid = 109 last_valid_uid = 109 mail_gid = vhost mail_location = maildir:~/Maildir mail_privileged_group = mail mail_uid = vhost managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ prefix = INBOX.XFeeds. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/vhosts/dovecot-userdb driver = passwd-file } plugin { acl = vfile sieve = ~/dovecot.sieve sieve_dir = ~/sieve } userdb { args = uid=vhost gid=vhost home=/var/vhosts/%d/%n driver = static } protocol imap { mail_plugins = " acl" } -- Joachim “nomeata” Breitner mail(a)joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nomeata(a)joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nomeata(a)debian.org

2 3

Re: [Dovecot] Strange output from LIST command
by azurIt 17 Oct '13

17 Oct '13

> Od: Charles Sprickman <spork(a)bway.net> > Komu: azurIt <azurit(a)pobox.sk> > Dátum: 16.10.2013 23:20 > Predmet: Re: [Dovecot] Strange output from LIST command > >I just did a move from Courier to Dovecot 2.2, and also followed the namespace suggestions in the wiki. > >I've not had any issues, but if you want to drop me a note showing the IMAP commands and results you get for LIST, I'll compare locally and let you know if I see anything different… > >Charles >-- >Charles Sprickman >NetEng/SysAdmin >Bway.net - New York's Best Internet www.bway.net >spork(a)bway.net - 212.655.9344 > Thank you. I tried to upgrade to 2.1.17 just to see if it helps - it didn't. Looks like an unfixed bug in 2.1.. I will see tomorrow if i can rebuild Debian experimental packages so i can try version 2.2. azur

2 1

[Dovecot] "Perfect Forward Secrecy" on Redhat/Fedora
by Reindl Harald 16 Oct '13

16 Oct '13

RHEL/CentOS 6.5 will support ECDHE Fedora currently makes the turnaround no wonder that i burned down many hours: https://bugzilla.redhat.com/show_bug.cgi?id=1019390 https://bugzilla.redhat.com/show_bug.cgi?id=319901#c108 ______________________________ recent dovecot with also support older clients but perfer best possible encryption for modern ones ssl_prefer_server_ciphers = yes ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SSLv2:@STRENGTH ______________________________ the same for Apache: SSLHonorCipherOrder On SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

1 0

[Dovecot] Using dovecot as LDA for postfix
by Farzad Mahdikhani 15 Oct '13

15 Oct '13

Hi Here is my environment: Red Hat Enterprise Linux Server release 5.7 (Tikanga) postfix-2.9.1-1.rhel5 dovecot 1.0.7 I want to config a complete postfix-dovecot mail server. First I configured postfix to use procmail, its default LDA and dovecot for pop3 and imap. I didn't changed main.cf a lot, just myhostname and a few other properties. I didn't set home_mailbox. About dovecot.conf here is the output of dovecot -n : # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd As you can see mail_location is not set. At this time everything was OK and working. I was able to send email using SquirrelMail and thunderbird. I got two users, user1 and user2, in my linux machine and when I sent an email from user1(a)software.com to user2(a)software.com the sent mail was saved in /home/user1/mail/Sent and the received email was in /var/mail/user2. The log file for dovecot had entries like this for user1 and user2: dovecot: Oct 14 14:44:52 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 At this point I tried to change the LDA from procmail to dovecot by the following settings: I added/changed the following in the main.cf: mailbox_command = /usr/libexec/dovecot/deliver dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = software.com virtual_transport = dovecot I added the following in the master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} But it didn't work. When I send email from from user2 to user1 the sent email is correctly saved in /home/user2/mail/Sent but it seems that user1 doesn't receive the incoming email. dovecot.log had entries like the following: dovecot: Oct 14 14:54:04 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=::ffff:172.27.7.8, lip=::ffff:172.16.100.183, TLS dovecot: Oct 14 14:54:04 Info: IMAP(user1): Effective uid=504, gid=504, home=/home/user1 dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: access(/home/user1/Maildir, rwx): failed: No such file or directory dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 Setting home_mailbox = Maildir/ in main.cf and mail_location = maildir:~/Maildir in dovecot.cf didn't help. I have been googling and reading and testing for 4 or 5 days for this but there was no chance. Now, I am stuck and any help would be really really appreciated. Regards, Ferez

4 3

[Dovecot] how to handle logging
by Andreas Schulze 15 Oct '13

15 Oct '13

Hello, I plan a migration to dovecot and have concerns about the amount of logged data. On a testsystem dovecot produced 1TB syslog per day with a comparable amount of pop3 sessions. The current server log to STDOUT which is connected to multilog (circular buffer, http://cr.yp.to/daemontools/multilog.html) That way I can have a look at the last activities to any time. I like to have that in dovecot too. But since dovecot uses syslog it's not possible to adopt 1:1 Any ideas? Thanks -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

4 5

[Dovecot] POP3 Setup help - more info
by Thomas I Higgins 15 Oct '13

15 Oct '13

Well my last email went unaswered - I assume because I didn't provide enough detailed information. Not a surprise if that is the case. Anyway, I also noted that there is no dovecot/pop3 process like there is for IMAP. Not certain that is wrong, but I am guessing it is. I am enclosing the output from a doveconf -an query - hopefully you can see a screenshot, otherwise I have to figure out how to get it in text form (work disables cp & scp traffic). Hopefully this will provide information that will help define what I am missing? Thanks again, Thomas Higgins

5 4

[Dovecot] Analyzing and correlating Dovecot with Postfix logs
by Igor David 14 Oct '13

14 Oct '13

Hi All, I was wondering if anyone knows what are best practices for correlating logs between Postfix and Dovecot ? I am having setup with postfix + amavisd + spamassassin + dovecot and everything looks like a charm for few years now. However, when e-mail arrives to my system, postfix is sending it to amavisd on port 10024, which is returning back to postfix on 10025, and postfix is then delivering e-mail to Dovecot (which is acting as LDA), so I can find e-mail header via message-ID easily in Postfix logs. But after that I cannot find e-mail in my Dovecot Maildir list as a filename, as Dovecot is having it's own way of storing e-mails in Maildir format, and I can't see that messageID in directory. I can grep all e-mails which can take some time, so I was wondering if there is more appropriate work around or setup Postfix/Dovecot, e.g. to modify somehow dovecot Maildir naming convention or similar? I was trying to find answer around but could not so any help is appreciated! Versions: Dovecot: 2.1.13 Amavisd: amavisd-new-2.6.6 postfix: 2.3.3 Thanks in advance! -- Kind regards, Igor

1 0

[Dovecot] Email address with special characters in userdb
by Arnon Weinberg 14 Oct '13

14 Oct '13

Hi, I have a userdb file set up in passwd-file format containing the following entries: >doveadm user test1*test2(a)test.com test1-test2(a)test.com test1étest2(a)test.com test1@test2@test.com test1%test2(a)test.com I can access the 1st entry (no special characters) no problem: >doveadm user test1-test2(a)test.com -f home /var/vmail The 2nd entry (using UTF-8 encoding) doesn't come up: >doveadm user test1étest2(a)test.com -f home userdb lookup: user test1étest2(a)test.com doesn't exist The 3rd entry does come up: >doveadm user test1@test2@test.com -f home /var/vmail but Postfix escapes this case using quotes, and they don't work: >doveadm user '"'test1@test2'"'@test.com userdb lookup: user "test1@test2"@test.com doesn't exist The 4th entry does not come up at all: >doveadm user test1%test2(a)test.com -f home userdb lookup: user test1%test2(a)test.com doesn't exist I believe these are all valid characters for email addresses (per the RFC) except '@' (which ironically works without escaping). How can I get them working? >dovecot --version 2.1.16 -- Arnon Weinberg www.back2front.ca

2 1

[Dovecot] LMTP Proxy auth
by claus.r＠bayern-mail.de 14 Oct '13

14 Oct '13

Hi, i tried to use lmtp proxy to a cyrus-server where i need authentication. My passdb lookup gives me: user=mailbox(a)cyrus.serv.er host=192.168.1.1 proxy=Y pass=secret destuser=cyrus_lmtp_master As i see in packettrace to the lmtp-cyrus-server the dovecot-proxy didn't try any authentication. Could someone please confirm to me that LMTP proxy with auth isn't supported or is there any configuration issue i have missed?

1 0

[Dovecot] Questions about special_use mailboxes
by Florian Lindner 14 Oct '13

14 Oct '13

Hello, I am using using dovecot 2.1.7 from debian stable: namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Spam { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } I monitor IMAP traffic using the MUA trojita. When I select the mailbox Drafts: >>> y10 SELECT Drafts (QRESYNC (1381746443 1)) <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. Flag is \Draft instead of \Drafts? When I select Sent >>> y12 SELECT Sent (QRESYNC (1381746442 7 (2 2))) <<< * OK [CLOSED] Previous mailbox closed.␍␊ <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT \*)] Flags permitted. Why is the flag $SENT ? http://www.faqs.org/rfcs/rfc6154.html mentiones nothing like that. When I select Spam: >>> y14 SELECT Spam (QRESYNC (1381746444 1)) <<< * OK [CLOSED] Previous mailbox closed. <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. No flag at all? Or am I getting IMAP wrong? Thanks, Florian

1 0