Re: dmarc user can't receive email because of encrypted storage

On 04/05/2023 21:20 EEST efeizbudak@disroot.org wrote:

On 2023-05-04 21:16, Aki Tuomi wrote:

...

...

On 04/05/2023 21:09 EEST Aki Tuomi via dovecot dovecot@dovecot.org wrote:

...

On 04/05/2023 21:08 EEST efeizbudak@disroot.org wrote:

On 2023-05-04 20:53, Aki Tuomi via dovecot wrote:

...

...

On 04/05/2023 20:11 EEST efeizbudak--- via dovecot dovecot@dovecot.org wrote:

Hi all,

So recently google has been trying to send email to dmarc@domain.com on my server but I'm using encrypted storage and since the dmarc user has no password the email is being rejected with the error:

May  4 16:51:50 domain dovecot: lda(dmarc)<3326>: Error: sieve: msgid=10341808348719730099@google.com: failed to store into mailbox 'INBOX': generate_keypair(INBOX) failed: mail_crypt_require_encrypted_user_key set, cannot generate user keypair without password or key

How can I fix this, or at least read what the mail says? Would it be safe to just give dmarc user a strong password?

You can run

doveadm mailbox cryptokey generate -U dmarc -N

so the user will have a keypair generated. Then it should work.

Aki

I'm getting

generate: invalid option -- 'N'

should I just run it without -N ?

Thank you!

Please keep responses on the list.

Try -n password? I have a faint recall of a buggy version like this.

Aki

...

Sorry for replying twice, I'm getting doveadm(root): Error: Couldn't drop privileges: User is missing UID (see mail_uid setting) when I try to run it without the -N op

Sorry, my bad.

doveadm mailbox cryptokey generate -U -u dmarc -n password

Aki This too gives me

generate: invalid option -- 'n'

So it seems. Have to investigate this.

In the mean time, can you try just

doveadm mailbox cryptokey generate -U -u dmarc

If you want, you can do

doveadm mailbox cryptokey password -u user -U -N

which hopefully should work.

Aki