On 04/05/2023 21:20 EEST efeizbudak@disroot.org wrote:
On 2023-05-04 21:16, Aki Tuomi wrote:
On 04/05/2023 21:09 EEST Aki Tuomi via dovecot <dovecot@dovecot.org> wrote:
On 04/05/2023 21:08 EEST efeizbudak@disroot.org wrote:
On 2023-05-04 20:53, Aki Tuomi via dovecot wrote:
On 04/05/2023 20:11 EEST efeizbudak--- via dovecot <dovecot@dovecot.org> wrote:
Hi all,
So recently google has been trying to send email to dmarc@domain.com on my server but I'm using encrypted storage and since the dmarc user has no password the email is being rejected with the error:
May 4 16:51:50 domain dovecot: lda(dmarc)<3326><l0J9NabiU2T+DAAA1iAyAg>: Error: sieve: msgid=<10341808348719730099@google.com>: failed to store into mailbox 'INBOX': generate_keypair(INBOX) failed: mail_crypt_require_encrypted_user_key set, cannot generate user keypair without password or key
How can I fix this, or at least read what the mail says? Would it be safe to just give dmarc user a strong password?
You can run
doveadm mailbox cryptokey generate -U dmarc -N
so the user will have a keypair generated. Then it should work.
Aki
I'm getting
generate: invalid option -- 'N'
should I just run it without -N ?
Thank you!
Please keep responses on the list.
Try -n password? I have a faint recall of a buggy version like this.
Aki
Sorry for replying twice, I'm getting doveadm(root): Error: Couldn't drop privileges: User is missing UID (see mail_uid setting) when I try to run it without the -N op
Sorry, my bad.
doveadm mailbox cryptokey generate -U -u dmarc -n password
Aki This too gives me
generate: invalid option -- 'n'
So it seems. Have to investigate this.
In the mean time, can you try just
doveadm mailbox cryptokey generate -U -u dmarc
If you want, you can do
doveadm mailbox cryptokey password -u user -U -N
which hopefully should work.
Aki