May 2007 - dovecot - dovecot.org

[Dovecot] AIX mail quota plugin problems
by Stewart Dean 05 Jun '07

05 Jun '07

From reading the wiki for a filesystem quota, I took my shot at 1) building my binaries using the mods in AIXPluginsSupport 2) changing dovecot.conf and 3) putting the plugins in the library But I'm getting this error message when I invoke dovecot: Plugin imap_quota not found from directory /usr/local/lib/dovecot Error: imap dump-capability process returned 89 It would seem that a) I have the syntax or the parameters wrong b) I didn't get the changes to the AIX build environment right I've attached the dovecot -n output. Here are the details of what I did. 1) dovecot.conf =========== within the imap config section =========== # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. #mail_plugins = #mail_plugin_dir = /usr/lib/dovecot/imap # SD 5/24/07 tryout FS quota plugin mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/lib/dovecot/imap plugin { # Here you can give some extra environment variables to mail processes. # This is mostly meant for passing parameters to plugins. %variable # expansion is done for all values. # Quota plugin. Multiple backends are supported: # dirsize: Find and sum all the files found from mail directory. # Extremely SLOW with Maildir. It'll eat your CPU and disk I/O. # dict: Keep quota stored in dictionary (eg. SQL) # maildir: Maildir++ quota # fs: Read-only support for filesystem quota #quota = maildir # SD 5/24/07 Try FS quota support quota = fs I've tried it as both mail_plugin_dir = /usr/local/lib/dovecot/imap and mail_plugin_dir = /usr/local/lib/dovecot 2) Both ways I see this error message: > 4229 root@mercury:/usr/local/etc ## dovecot > ILoading modules from directory: /usr/local/lib/dovecot > IModule loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so > FPlugin imap_quota not found from directory /usr/local/lib/dovecot > Error: imap dump-capability process returned 89 > > 4272 root@mercury:/usr/local/lib/dovecot/imap ## dovecot > ILoading modules from directory: /usr/local/lib/dovecot/imap > IModule loaded: /usr/local/lib/dovecot/imap/lib10_quota_plugin.so > FPlugin imap_quota not found from directory /usr/local/lib/dovecot/imap > Error: imap dump-capability process returned 89 > 3) These directories have the following contents: 4292 root@mercury:/usr/local/lib/dovecot ## ls -al total 1168 drwxr-xr-x 3 root system 512 May 24 12:36 ./ drwxr-xr-x 7 root system 512 May 21 14:31 ../ -rw-r--r-- 1 root sys 292522 May 22 15:12 052207-1455-64bit-ssl.lib10_quota_plugin.a -rwxr-xr-x 1 root sys 904 May 22 15:12 052207-1455-64bit-ssl.lib10_quota_plugin.la* -rwxr-xr-x 1 root sys 270499 May 22 15:12 052207-1455-64bit-ssl.lib10_quota_plugin.so* drwxr-xr-x 2 root system 512 May 24 12:41 imap/ lrwxrwxrwx 1 root system 65 May 24 12:36 lib10_quota_plugin.a@ -> /usr/local/lib/dovecot/052207-1 455-64bit-ssl.lib10_quota_plugin.a lrwxrwxrwx 1 root system 66 May 24 12:36 lib10_quota_plugin.la@ -> /usr/local/lib/dovecot/052207- 1455-64bit-ssl.lib10_quota_plugin.la* lrwxrwxrwx 1 root system 66 May 24 12:36 lib10_quota_plugin.so@ -> /usr/local/lib/dovecot/052207- 1455-64bit-ssl.lib10_quota_plugin.so* root@mercury:/usr/local/lib/dovecot/imap ## ls -al total 152 drwxr-xr-x 2 root system 512 May 24 12:41 ./ drwxr-xr-x 3 root system 512 May 24 12:36 ../ -rw-r--r-- 1 root system 19250 May 22 15:12 052207-1455-64bit-ssl.lib11_imap_quota_plugin.a -rwxr-xr-x 1 root system 944 May 22 15:12 052207-1455-64bit-ssl.lib11_imap_quota_plugin.la* -rwxr-xr-x 1 root system 28645 May 22 15:12 052207-1455-64bit-ssl.lib11_imap_quota_plugin.so* lrwxrwxrwx 1 root system 66 May 24 12:36 lib10_quota_plugin.so@ -> /usr/local/lib/dovecot/052207- 1455-64bit-ssl.lib10_quota_plugin.so* lrwxrwxrwx 1 root system 75 May 24 12:36 lib11_imap_quota_plugin.a@ -> /usr/local/lib/dovecot/ima p/052207-1455-64bit-ssl.lib11_imap_quota_plugin.a lrwxrwxrwx 1 root system 76 May 24 12:36 lib11_imap_quota_plugin.la@ -> /usr/local/lib/dovecot/im ap/052207-1455-64bit-ssl.lib11_imap_quota_plugin.la* lrwxrwxrwx 1 root system 76 May 24 12:36 lib11_imap_quota_plugins.so@ -> /usr/local/lib/dovecot/i Any suggestions? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 2

[Dovecot] testink
by Timo Sirainen 05 Jun '07

05 Jun '07

# Protocols we want to be serving: # imap imaps pop3 pop3s #protocols = imap imaps # IP or host address where to listen in for connections. It's not currently # possible to specify multiple addresses. "*" listens in all IPv4 interfaces. # "[::]" listens in all IPv6 interfaces, but may also listen in all IPv4 # interfaces depending on the operating system. You can specify ports with # "host:port". #imap_listen = * #pop3_listen = *

3 6

[Dovecot] dovecot-shared tries to fchown index+control files but fails
by Adam McDougall 04 Jun '07

04 Jun '07

I have some public mailboxes setup in 1.0.0, location = maildir:/egr/mail/shared/org:CONTROL=%h/Maildir/dovecot/public/control/org:INDEX=%h/Maildir/dovecot/public/indexes/org I also have a dovecot-shared file in the maildir folders so messages that are added to the inbox get a decent set of default permissions. However, I think dovecot is also trying to fchown the index files (stored in a user home directory, far away from the shared mail) to match the owner of the dovecot-shared file. When I rename dovecot-shared, these errors (apparently harmless at this point) go away: May 24 18:45:35 hostname dovecot: IMAP(username): fchown(/home/username/Maildir/dovecot/public/control/org/.mailfolder/dovecot-uidlist) failed: Operation not permitted May 24 18:45:35 hostname dovecot: IMAP(username): fchown() failed with file /home/username/Maildir/dovecot/public/indexes/org/.mailfolder/dovecot.index.log: Operation not permitted At this point it is just clogging up the log, but I see two issues: 1. Isn't dovecot already running as the imap user, so as long as that user isn't root, it shouldn't be possible to change file owners at all. This is the behavior I see of dovecot-shared on new mail files, that is the group and file mode from dovecot-shared are applied, but not the owner. 2. Since these kind of metadata files aren't generally supposed to be shared anyway, why would it even want to change the permissions? Especially since I have them stored in a place where the user has ownership already. Please let me know if I am missing something, or a behavior change is needed. Thanks.

2 4

[Dovecot] Client certificate verification/authentication
by eizert 04 Jun '07

04 Jun '07

I would like to use Client certificate verification/authentication. My MTA used this function. I've a problem to make a valid certificate. For my MTA i used : openssl req -new -nodes -x509 -keyout user_key.pem -out user_req.pem -days 365 openssl ca -out user_signed.pem -infiles user_req.pem openssl pkcs12 -in user_signed.pem -inkey user_key.pem -out user.p12 -export -name "user@hotsname" user.p12 match in my MTA Not in Dovecot... In my log, i've simply : dovecot: auth(default): Client didn't present valid SSL certificate Also, in the documentation The username is taken from the subject's DN's CommonName <http://wiki.dovecot.org/CommonName> field (using OpenSSL's X509_NAME_get_text_by_NID() function). But when i used openssl req -new -nodes -keyout user_key.pem -out user_req.pem -days 365 my common name is my hostname not my username. I don't think that the option -name user@hostname (in manpage openssl :: -name is friendly name)... Sorry but it's ambiguous for me...

2 4

[Dovecot] dovecot-sieve-1.0 (hg) does not build
by Bernhard Schmidt 04 Jun '07

04 Jun '07

Hi, the dovecot-sieve plugin from the hg repository (http://hg.dovecot.org/dovecot-sieve-1.0/) does not build against current dovecot-1.0 repository. /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -DENABLE_REGEX -o sievec sievec.o map.o imparse.o libsieve.la /usr/src/dovecot-1.0/src/lib/liblib.a gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -DENABLE_REGEX -o sievec sievec.o map.o imparse.o /.libs/libsieve.a /usr/src/dovecot-1.0/src/lib/liblib.a /.libs/libsieve.a(script.o): In function `sieve_script_parse': /usr/src/dovecot-sieve-1.0/src/libsieve/script.c:140: undefined reference to `yylineno' /.libs/libsieve.a(sieve.o): In function `sieveerror': /usr/src/dovecot-sieve-1.0/src/libsieve/sieve.y:568: undefined reference to `yylineno' /.libs/libsieve.a(sieve.o): In function `sieveparse': /usr/src/dovecot-sieve-1.0/src/libsieve/sieve.c:1644: undefined reference to `sievelex' /.libs/libsieve.a(sieve.o): In function `sieve_parse': /usr/src/dovecot-sieve-1.0/src/libsieve/sieve.y:551: undefined reference to `yyrestart' /.libs/libsieve.a(addr.o): In function `addrparse': /usr/src/dovecot-sieve-1.0/src/libsieve/addr.c:1289: undefined reference to `addrlex' collect2: ld returned 1 exit status make[3]: *** [sievec] Error 1 make[3]: Leaving directory `/usr/src/dovecot-sieve-1.0/src/libsieve' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/dovecot-sieve-1.0/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/dovecot-sieve-1.0' make: *** [all] Error 2 dovecot-sieve-1.0.1.tar.gz builds fine. 1.0.1 is from January 2007, the last changes in the hg repository are three months ago, but none of them look like they would be causing this issue. Also there is no r_1_0_1 tag. It looks to me like 1.0.1 is something quite different to the hg-repository, right? Does the latter compile against anything at the moment? Thanks, Bernhard

2 3

[Dovecot] frequent index rebuilds versus disabled indexes
by Justin McAleer 04 Jun '07

04 Jun '07

Ok, here's the short and sweet version of my dilemma. I have a group of servers mounting a shared NFS device to hold mail data for many different domains. Is it worth the load balancing management nightmare of setting up dedicating smtp, pop, and imap to one server (failing over to another in the group if the server goes down) to keep indexes on local disk? It's very tempting to just disable indexes and not worry about which server a user hits, and considering the vast majority of our 170,000 accounts only have about a 20MB quota, I'm not sure indexes will help that many users. Although, I guess I would need to work out something for the few huge accounts we do have.

2 1

[Dovecot] Quota handling - v2 - updated FR
by Charles Marcus 04 Jun '07

04 Jun '07

This revised proposal for a Feature Request is the result of my desire to implement quotas, but not have the attendant headaches that inevitably accompany its implementation. Ralf Hildebrandt wrote: > I have to face it, my users are retards: Is there any other kind of user? ;) <snip> > Thus I need a feature in dovecot that will tell them via email: > > Level1: "You ALMOST exceeded your quota, you're at 90% now" > Level2: "You're very close to exceededin your quota, you're at 95% > now" > Level3: "Would you please clean up now? You're at 99% now" What I'd *really* like to see implemented is something along the lines outlined below - but of course, this will depend entirely on whether or not Timo thinks it is doable - or desirable... I'm thinking this would be best handled by the Quota plug-in - either as part of the current one, or as a separate/different one... *** 1. Have a 'special' user-specific folder (by special, I mean like the Drafts, Sent, Templates folders) that dovecot controls. For purposes of this FR, call it the 'over-quota' folder. Question: could the .tmp folder be used for this? No sense in reinventing the wheel if necessary... and then if someone migrated from dovecot to something else, and messages were left in there from an over-quota condition, that other solution would most likely just move these to .new the first time it ran, right? Or, possibly, could dovecot create a new one maybe, .oqt (for over-quota), and store the queued messages there until the over-quota condition was rectified? Anyway, the main thing is, this folder should be essentially hidden from the user so they do *not* have access to it, and should temporarily hold messages that come in that are unable to be delivered due to an over-quota condition. *** 2. Make dovecot aware of and use a special 'Quota Status' message that it uses to inform a user that they are over quota. This message should be able to be customized, with variables (like, for example, it should list the messages that are currently being prevented from being moved to the Inbox - including, optionally, the Subject, the sender, date/time, attachments, size, etc - as well as provide general quota information (ie, how close to or over quota they are, and how much they'd need to delete or move to Local Folders to allow delivery of all of the messages being held), and lastly, any custom information the System Admin wanted to provide - like, maybe, specific instructions for how to move messages to Local Folders, how to request additional storage allowance, etc. *** 3. When user is over quota, have LDA deliver to the folder referenced above (# 1) - (yes, accept the message for final delivery from the sending mta), and then update the Quota Status message and move it to the Inbox. Optionally, a bounce/notification could be generated to the sender, informing them that their message is being 'held in queue' or something to that effect, due to the recipient being over-quota. *** 4. Once the user deletes enough mail to come back under quota, dovecot would then move messages from the 'over-quota' folder to his Inbox. Ok, again, am willing to hear *valid* reasons how/why this is a terrible idea... :) -- Best regards, Charles

6 10

[Dovecot] delivery and quota question
by Arkadiusz Miskiewicz 04 Jun '07

04 Jun '07

Hi, I'm considering using delivery for delivering emails. The question is about quota. Does delivery check quota for single maildir or for entire collection of user folders? Example: /var/mail/user/{new,cur,tmp} /var/mail/user/.Some_Folder/{new,cur,tmp} /var/mail/user/.Some_Other_Folder/{new,cur,tmp} Can I somehow get deliver checking size for all these folders? I need quota per user not per folder. -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

2 1

[Dovecot] Simple questions about Quota
by Venilton Junior 04 Jun '07

04 Jun '07

Hi folks, hope that get some help for some doubts :P I've configured dovecot in a clustered environment 3 X HP Proliant DL380+RHEL ES 4.0+EVA4000+GFS. Everything is working great. But, when I putted this cluster on production, I had some problems with quota+ldap in my dovecot. Here follows my configuration: /etc/dovecot.conf last_valid_gid = 101 maildir_copy_with_hardlinks = no login_greeting = Internet ready. disable_plaintext_auth = no auth_default_realm =domain.com.br protocol imap { mail_plugins = imap_quota quota } protocol lda { postmaster_address = postmaster(a)domain.com.br <mailto:postmaster@domain.com.br> mail_plugins = quota } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } auth default_with_listener { mechanisms = plain login userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } } plugin { quota = maildir } /etc/dovecot-ldap.conf ... user_attrs = mail,homeDirectory,,,,quota=quota=maildir:storage user_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) I'm heaving heavy load of e-mails in this environment, so this problem started to happen: Almost all users have 100MB of quota, that's ok for us and we are storing 102400 at our ldap. But, when I put this configuration working on, all clients receive overquota messages. If I'm using quota information in my ldap server, do I have to use this option in my dovecot.conf file? plugin { quota = maildir } Tnx for any help and/or tips. Regards, Venilton C. Junior HP Certified Professional Sercompe Computadores Ltda. Office: +55 47 3431-9700 Fax: +55 47 3431-9747 Mobile: +55 47 9653-5872 www.sercompe.com.br <http://www.sercompe.com.br/>

2 1

[Dovecot] Dovecot and Seamonkey/Mozilla "delete attachment"
by Bryce Nesbitt 04 Jun '07

04 Jun '07

I'm having persistent trouble deleting larger attachments from messages in Mozilla/Seamonkey mail, and I'm thinking it may be related to Dovecot. A bug report is over at https://bugzilla.mozilla.org/show_bug.cgi?id=381759 I do not have the version number of Dovecot available, unless you know how to get it from the IMAP prompt: > telnet idiom.com 143 Trying 216.240.32.1... Connected to idiom.com. Escape character is '^]'. * OK Dovecot ready. How can I track this down more? Is anyone using Seamonkey and this particular new feature (delete the attachment, but keep the message body intact)?

2 1