July 2007 - dovecot - dovecot.org

[Dovecot] listen parm questions
by Stewart Dean 03 Jul '07

03 Jul '07

Q1: My imap server has 4 interfaces, but only one is used for imap traffic. Can I do this: listen = 10.20.30.40:10143 (when imap.mycollege.edu is 10.20.30.40) Or is there even any benefit to doing this? Q2: Can I specify more than one port....during test eval, I've had the IT dept using port 1043 for listen....which I will, of course, change to 143 when DC goes production. So my department isn't cut off by that switchover, can I do this? listen = *:10143,143 or this listen = 10.20.30.40:10143,143 I did look at the wiki but didn't see anything -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

3 2

[Dovecot] [Fwd: Bounce action notification]
by Timo Sirainen 03 Jul '07

03 Jul '07

Anyone have ideas why this happened? Nothing special in logs, all tss(a)iki.fi deliveries went OK. Mailman's bounce log is unhelpful. Why does it say it tried to deliver to dovecot(a)dovecot.org and when it failed it disabled my account? Why doesn't it even bother saying which remote host gave an error? Grepping mail.log for 'This user' shows nothing.

5 7

[Dovecot] dovecot + winbind problem
by Gregorics Tamás 03 Jul '07

03 Jul '07

Hi! I'm having some problem with our setup. I have a linux server authenticating from a win2k3 domain controller via winbind and pam. When i try to log in I receive the following error messages: Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' OK Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz dovecot: auth(default): userdb(tamas,127.0.0.1): user not found from userdb Jul 3 10:26:10 zeusz dovecot: imap-login: Internal login failure: user=<tamas>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured But when i try other services which also use winbind via pam (like popa3d) i can log in without any problem. Any ideas?

2 4

[Dovecot] NameSpases
by Sergey A. Kobzar 03 Jul '07

03 Jul '07

Hi guys, I have a problem with namespases in Dovecot: namespace public { separator = / prefix = Public/ location = maildir:/home/mail/public } namespace private { separator = / prefix = inbox = yes } namespace private works well, but I can't subscribe to namespace Public in Outlooks Express, The Bat! and Mozilla Thunderbird. Outlook shows error 'Mailbox doesn't exist: Public'. Same with The Bat!. maildir:/home/mail/public exists and has correct rights: # ls -alh /home/mail/public/ total 0 drwx------ 5 mail mail 184 Jul 2 21:55 . drwxr-x--- 4 mail root 104 Jul 2 21:01 .. drwx------ 2 mail mail 48 Jul 2 21:01 cur -rw-r--r-- 1 mail mail 0 Jul 2 21:54 dovecot-shared drwx------ 2 mail mail 48 Jul 2 21:01 new -rw-r--r-- 1 mail mail 0 Jul 2 21:55 subscriptions drwx------ 2 mail mail 48 Jul 2 21:01 tmp # dovecot --version 1.0.1 # uname -rsm Linux 2.6.20-gentoo-r8 i686 Any help appreciated :) -- Sergey

2 2

[Dovecot] Leaky dovecot-auth ?
by Christian Balzer 03 Jul '07

03 Jul '07

Hello, as mentioned before, we are migrating our mailboxes from a 0.99 cluster to a 1.0.0 one. With 0.99 dovecot-auth (with LDAP as backend) was leaking quite happily and the dovecot-auth processes frequently did hit their size limit and thus were killed and restarted. Which in 0.99 at least lead to authentication failures on a busy server, as the dovecot master process just killed off the auth process w/o disabling new connections to it first and letting any current authentications finish. The activity per cluster node on the 0.99 boxes was about 700k logins (mostly pop3) per day and 5 dovecot-auth processes with a 64MB limit each. The migrated users so far are of the less active kind and on one node of the 1.0.0 cluster we see about 70k logins/day and currently the dovecot-auth process there is hovering at 123/84MB (VIRT/RES in top). It was at 121/82MB when I checked 4 hours ago and no new users have been added to that node for 2 days. Authentication backend is still LDAP, no caching, 256MB process size limit. There are just 16k users on that node at this point in time, with only 1200 distinct users generating those 70k logins/day. We will start migrating the rest of the users tomorrow and now I'm wondering: 1. How and why would the memory footprint of dovecot-auth grow when there is no change in the amount of users in the DB? 2. What will happen when the single dovecot-auth process reaches 256MB in the end? Internal housekeeping attempts of that process? A whack to the head from the master process like in 0.99 and thus more erroneous authentication failures, potentially aggravated by the fact that there is just single dovecot-auth process? I guess at the current rate of leakage we shall know the answers to #2 soon one way or another. ;) Regards, Christan -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

3 15

[Dovecot] Semi-static userdb...?
by John Robinson 03 Jul '07

03 Jul '07

I'm trying to add "virtual" mailboxes to a system. Real users with different uids own domains. Each domain has a passwd-file passdb. I don't want to use this passwd-file for the userdb, because I want to fix the home, mail and uid/gid settings. Can I use the static userdb in a less static manner, e.g. userdb static { args = uid=%{owner of /vmail/%d} gid=%{gid of /vmail/%d} home=/vmail/%d/users/%u mail=mbox:/vmail/%d/users/%u/mail:INBOX=/vmail/%d/users/%u/INBOX } Or is it just a bad idea to let relatively untrusted domain owners manage their own passwd-file at all...? Cheers, John.

2 4

[Dovecot] userdb nss
by Timo Sirainen 03 Jul '07

03 Jul '07

I remembered people complaining how glibc ignores NSS errors with getpwent(), so I thought I'd see how easy it is to use NSS directly. Unless I misunderstood something, this should work: http://hg.dovecot.org/dovecot/rev/c9b49ed99d28 Tested only with "files" backend. Also it won't work with Solaris, it seems to have completely different NSS modules. Don't know about BSDs. Can someone test how it handles LDAP/NIS failures (or if it even works with them)?

1 0

[Dovecot] Force rebuild v1.0.1
by Bruce Bodger 02 Jul '07

02 Jul '07

Haven't seen a thread discussing forcing rebuilding of indexes / cache, so the question is, if these files in a users home directory were deleted... -rw------- 1 bb admin 80 May 17 15:05 dovecot-keywords -rw------- 1 bb admin 85449 Jul 2 06:15 dovecot-uidlist -rw------- 1 bb admin 6832 Jul 2 06:15 dovecot.index -rw------- 1 bb admin 752640 Jul 2 06:19 dovecot.index.cache -rw------- 1 bb admin 95416 Jul 2 06:20 dovecot.index.log -rw------- 1 bb admin 131104 Jun 27 21:32 dovecot.index.log.2 ...would they be rebuilt by dovecot? Thank you, B. Bodger

3 4

[Dovecot] Debian packages
by Moritz Mertinkat 02 Jul '07

02 Jul '07

Hi there, anyone interested in Debian Dovecot 1.0.1 packages? I have created a package for etch/stable... Could do that for sarge/oldstable as well. Greets, Maurice.

2 2

[Dovecot] v1.1 max connections per user
by Timo Sirainen 02 Jul '07

02 Jul '07

v1.1 has now: # Maximum number of connections allowed for a user. The limits are enforced # separately for IMAP and POP3 connections, so you can move this setting # inside protocol {} to have separate settings for them. NOTE: The user names # are compared case-sensitively, so make sure your userdb returns usernames # always using the same casing so users can't bypass this limit! #mail_max_user_connections = 10 Is 10 a good default? Currently new connections just fail authentication with a "Maximum number of connections exceeded" error message. v2.0 hopefully will instead disconnect the oldest idling connection with IMAP.

5 7