September 2007 - dovecot

[Dovecot] Dovecot stops talking to the auth server.
by Tom Diehl 17 Sep '07

17 Sep '07

Hi, I have an RHEL4 machine running dovecot-1.0.3 + postfix-2.3.2 + postfixadmin + mysql-4.1.20-2.RHEL4.1 + amavisd-new-2.5.2-1. The machine only has a gig of memory in it, I am trying to keep it running until I get new hardware to replace it in a couple of weeks. For the most part it works as advertised but every once in a while it stops talking to the auth server. I think I have tracked this to periods of high auth requests. Today the machine experienced a dictionary attack and I had log entries like the following: Sep 10 13:31:06 rocky dovecot: pop3-login: Disconnected: Shutting down: rip=::ffff:24.0.201.240, lip=::ffff:192.168.0.16 Sep 10 13:31:06 rocky dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Sep 10 13:31:07 rocky last message repeated 47 times Sep 10 13:31:08 rocky dovecot: pop3-login: Disconnected: Shutting down: rip=::ffff:24.0.201.240, lip=::ffff:192.168.0.16 Sep 10 13:31:08 rocky dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable Sep 10 13:31:08 rocky dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Sep 10 13:31:09 rocky last message repeated 27 times Sep 10 13:31:09 rocky dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable Sep 10 13:31:09 rocky dovecot: pop3-login: Can't connect to auth server at default: Resource temporarily unavailable Sep 10 13:31:09 rocky last message repeated 4 times Sep 10 13:31:09 rocky dovecot: imap-login: Can't connect to auth server at default: Resource temporarily unavailable ... a ps showed numerous defunct processes similar to the following: ... nobody 16647 0.0 0.2 9784 2112 ? S 13:17 0:00 dovecot-auth nobody 16654 0.0 0.2 9784 2088 ? S 13:17 0:00 dovecot-auth nobody 16663 0.0 0.0 0 0 ? Z 13:17 0:00 [dovecot-auth] <defunct> nobody 16668 0.0 0.2 9784 2088 ? S 13:17 0:00 dovecot-auth nobody 16669 0.0 0.0 0 0 ? Z 13:17 0:00 [dovecot-auth] <defunct> nobody 16671 0.0 0.2 9784 2088 ? S 13:17 0:00 dovecot-auth nobody 16672 0.0 0.2 9784 2128 ? S 13:17 0:00 dovecot-auth nobody 16673 0.0 0.2 9784 2088 ? S 13:17 0:00 dovecot-auth nobody 16674 0.0 0.2 9784 2088 ? S 13:17 0:00 dovecot-auth nobody 16675 0.0 0.2 9784 2112 ? S 13:17 0:00 dovecot-auth nobody 16681 0.0 0.0 0 0 ? Z 13:17 0:00 [dovecot-auth] <defunct> ... dovecot -n follows: (rocky pts4) # dovecot -n # 1.0.3: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 509 last_valid_uid: 509 first_valid_gid: 509 last_valid_gid: 509 mail_extra_groups: vmail mail_location: maildir:~/ maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): mail_plugins(imap): mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login user: nobody worker_max_count: 20 passdb: driver: sql args: /etc/dovecot/sql.conf passdb: driver: pam userdb: driver: passwd userdb: driver: static args: uid=509 gid=509 home=/home/vmail/domains/%d/%n userdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir:storage=10240:messages=1000 acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf (rocky pts4) # Is there anything I can do to prevent this? Does this look like simply a resource problem or am I doing something else wrong? Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

2 1

[Dovecot] Dovecot Sieve crash
by Julian Cowley 16 Sep '07

16 Sep '07

I just transferred the files in my home directory from an x86_64 machine to an i686 machine. This included the .dovecot.sieve and .dovecot.sievec files in my home root, and the Dovecot index files in my ~/Maildir directory. Everything seemed to be working until I tried sending an email that triggers a Sieve "redirect" command, then I got the following in the logs. I then tried the same dovecot.sieve file using a separate account which has always been on the i686 machine (and the index files have always been written there too), and the Sieve "redirect" worked fine. There were core files written in my home directory which I can post if necessary. Both the x86_64 and i686 machines are CentOS 4.5 running Dovecot 1.0.5 and Dovecot Sieve plugin 1.0.1. Sep 15 21:44:10 myhost deliver(julian): Trying to allocate 0 bytes Sep 15 21:44:10 myhost deliver(julian): Raw backtrace: /usr/libexec/dovecot/deliver(i_syslog_panic_handler+0x24) [0x80a08b4] -> /usr/libexec/dovecot/deliver [0x80a06a9] -> /usr/libexec/dovecot/deliver [0x80a91bd] -> /usr/libexec/dovecot/deliver [0x80574f8] -> /usr/libexec/dovecot/deliver(duplicate_check+0x51) [0x8057671] -> /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so [0x133f1f] -> /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so(sieve_execute_bytecode+0x549) [0x141b59] -> /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so(cmu_sieve_run+0x3fd) [0x134c4d] -> /usr/lib/dovecot/lda/lib90_cmusieve_plugin.so [0x1339f8] -> /usr/libexec/dovecot/deliver(main+0x10c8) [0x8056e28] -> /lib/tls/libc.so.6(__libc_start_main+0xd3) [0x506de3] -> /usr/libexec/dovecot/deliver [0x80550a1] Sep 15 21:44:10 myhost postfix/local[4924]: E1947344AE: to=<julian(a)lava.net>, relay=local, delay=0.35, delays=0.17/0.01/0/0.17, dsn=5.3.0, status=bounced (Command died with signal 6: "/usr/libexec/dovecot/deliver")

3 6

Re: [Dovecot] Dovecot Periodically Stops Authenticating Users
by Tom Diehl 16 Sep '07

16 Sep '07

On Sat, 15 Sep 2007, David Gitman wrote: > Hi, > > It seems that my dovecot installation periodically stops authenticating > users. Restarting dovecot resolves the issue temporarily. I'm authenticating > via PAM to OpenLDAP on a CentOS 4 box. I've seen several related posts about > this issue but no resolution. I too am seeing this problem but I am using mysql to do the auth. I posted here a few days ago but so far received no replies. If you find a solution I would appreciate hearing about it. FIWI I am on 1.0.3. Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

2 1

[Dovecot] Migration woes from tpop mbox to dovecot maildir
by Chris Richardson 16 Sep '07

16 Sep '07

I was hoping some one might be able to offer me some advice on a little problem I have. I am looking to A. move from mbox to maildir B. looking to move from tpop to dovecot to bring both pop and imap under the same program. anyways the problem I am having is this tpop3d mbox uses MD5 sum of the mailbox headers in hex which is option %m in the uidl section but the problem is when dovecot convert plugin runs and makes in a maildir it fails to find the md5 of this because it is only used for mboxs. if I change this from %m to %Mf it downloads every message on the clients computer which is not desirable. I was thinking only options i have is to allow it to download all them mail and or write a script to convert it to maildir or another pop servers uidl. but i dont know much about how other pop servers generate there headers. so I was hoping maybe some one has done something similar to this or could offer some input. thanks -Chris The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this material from any computer. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member FINRA/SIPC. Home Office: 2 Oliver Street, 11th Floor, Boston, MA 02109 Telephone: (617)521-8630

6 8

[Dovecot] Quota Exceeded message
by alandaluz＠gmail.com 15 Sep '07

15 Sep '07

Any plans on having custom Quota Exceeded messages in the future (or now)? I'd love to be able to put the exceeding username in the message to help with some issues. Thanks, Cassidy

3 2

[Dovecot] Does auth_username_format work at all?
by Lars Stavholm 15 Sep '07

15 Sep '07

Hi All, can anyone confirm whether "auth_username_format = %n" works or not? R /Lars

2 4

[Dovecot] v1.1.alpha5 crashes with segmentation fault
by arvids 15 Sep '07

15 Sep '07

Hello, dovecot process crashes on startup with segmentation fault. Here is backtrace: (gdb) r Starting program: /usr/local/dovecot/sbin/dovecot Program received signal SIGSEGV, Segmentation fault. settings_is_active (set=0x0) at master-settings.c:505 505 if (*set->protocols == '\0') { (gdb) bt full #0 settings_is_active (set=0x0) at master-settings.c:505 No locals. #1 0x080535d5 in master_settings_read (path=<value optimized out>, nochecks=false, nofixes=false) at master-settings.c:1397 ctx = {type = SETTINGS_TYPE_ROOT, parent_type = SETTINGS_TYPE_ROOT, protocol = MAIL_PROTOCOL_ANY, root = 0x80721d0, server = 0x80721d0, auth = 0x80727c8, socket = 0x807293c, auth_socket = 0x8072930, auth_passdb = 0x8072878, auth_userdb = 0x80728e0, namespace = 0x0, level = 0} server = <value optimized out> prev = (struct server_settings *) 0x80721d0 auth = <value optimized out> ns = <value optimized out> temp = <value optimized out> #2 0x08051407 in main (argc=1, argv=0xbfdf9524) at main.c:445 exec_protocol = 0x0 exec_section = 0x0 foreground = false ask_key_pass = false log_error = false dump_config = false dump_config_nondefaults = false i = -1208668172 (gdb) dovecot -n also crashes, but here is dovecot -n output taken with previous version: # 1.1.alpha4: /usr/local/dovecot/etc/dovecot.conf base_dir: /var/run/dovecot/ syslog_facility: local0 protocols: pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/pop3-login login_greeting: Server. login_process_per_connection: no login_process_size: 64 verbose_proctitle: yes first_valid_uid: 95 first_valid_gid: 95 mail_uid: 95 mail_gid: 95 mail_location: maildir:~/Maildir mail_debug: yes fsync_disable: yes mail_executable: /usr/local/dovecot/libexec/dovecot/pop3 mail_plugins: quota mail_plugin_dir: /usr/local/dovecot/lib/dovecot/pop3 pop3_enable_last: yes pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login digest-md5 cram-md5 apop cache_size: 2048 cache_ttl: 28800 cache_negative_ttl: 60 user: doveauth verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/dovecot/etc/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /usr/local/dovecot/etc/dovecot-sql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: dict:::proxy:/var/run/dovecot/dict-server:quotadict dict: quotadict: mysql:/usr/local/dovecot/etc/dovecot-sql-dict-quota.conf Regards, Arvids

2 1

[Dovecot] mailbox_idle_check_interval in minutes or seconds?
by Rupert Kolb 15 Sep '07

15 Sep '07

Hi, sorry for this question, but I didn't find the information in the documentation or wiki: Is mailbox_idle_check_interval (in dovecot.conf) in seconds or minutes? I think it's minutes. But ... It would be nice, if this will be in the docu of the dovecot.conf. Thanks Rupert

2 1

[Dovecot] v1.0.5 released
by Timo Sirainen 15 Sep '07

15 Sep '07

http://dovecot.org/releases/1.0/dovecot-1.0.5.tar.gz http://dovecot.org/releases/1.0/dovecot-1.0.5.tar.gz.sig v1.0.4 was a bit bad release. - deliver: v1.0.4 broke home directory handling - maildir: Creating mailboxes didn't use dovecot-shared's group for cur/new/tmp directories.

3 4

[Dovecot] v1.1.alpha5 released
by Timo Sirainen 15 Sep '07

15 Sep '07

http://dovecot.org/releases/1.1/alpha/dovecot-1.1.alpha5.tar.gz http://dovecot.org/releases/1.1/alpha/dovecot-1.1.alpha5.tar.gz.sig I think we're finally close to v1.1.betas. - Fixed "messages_count too large" index errors. - deliver was crashing. - Saving messages with maildir accessed freed memory, which might have caused crashes. - Index files are now never marked as "corrupted". Instead fsck is run which preserves as much of the original index as possible. This is important with dbox at least since index files are the only place where the latest flag/keyword changes are. Recent alphas were also modifying process's fd limits. The current behavior is: - If current fd limit is less than login_max_processes_count (imap +pop3) + max_mail_processes, log a warning at startup: "fd limit 1024 is lower than what Dovecot can use under full load (more than 1234). Either grow the limit or change login_max_processes_count and max_mail_processes settings" - Since 1024 is a common default limit, I dropped max_mail_processes default to 512. - Login processes drop their fd limit to the maximum number of fds needed, plus a few more just in case.

1 0