October 2010 - dovecot

[Dovecot] gssapi problems (postfix sasl through dovecot, dovecot imap working fine)
by Trever L. Adams 19 Oct '10

19 Oct '10

Thanks to Timo, I have solved all but one of my problems. For back ground, I am using Samba4 as an AD. I have the userdb working from LDAP just fine and kerberos authenetication for dovecot's IMAP server working fine. The problem is using dovecot's SASL with postfix. I also have plain/login working in imap and smtp. Both use pam_krb5 through pam to authenticate clients that don't have kerberos, and for now smtp. When trying to do smtp kerberos, I get the following: postfix/smtpd[6197]: warning: CLIENT_FQDN[CLIENT_IP]: request longer than 2048: AUTH GSSAPI ... dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=SERVER_IP#011rip=CLIENT_IP#011secured#011resp=<hidden> dovecot: auth: Debug: gssapi(?,CLIENT_IP): Obtaining credentials for smtp@MAILSERVER_FQDN dovecot: auth: gssapi(?,CLIENT_IP): While processing incoming data: Unspecified GSS failure. Minor code may provide more information dovecot: auth: gssapi(?,CLIENT_IP): While processing incoming data: Invalid message type postfix/smtpd[6197]: warning: CLIENT_FQDN[CLIENT_IP]: SASL GSSAPI authentication failed: dovecot: auth: Debug: client out: FAIL#0111 # klist -k /etc/dovecot/krb5.keytab Keytab name: WRFILE:/etc/dovecot/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 2 imap/MAILSERVER_FQDN@DOMAIN_REALM 2 smtp/MAILSERVER_FQDN@DOMAIN_REALM The client is Thunderbird. Any help would be greatly appreciated. I have made sure that the file has proper permissions. I have regenerated the smtp cert making suer the password is accurate. I have done everything I know to try. The only thing that I am guess remains is something is broken with Thunderbird's kerberos setup for smtp. Thank you very much, Trever

1 3

[Dovecot] (no subject)
by Dead Gardens 19 Oct '10

19 Oct '10

Hello dovecot-list. I have the next problem with include option and managesieve .dovecot.sieve.log: info: started log at Oct 18 21:46:18. main_script: line 2: error: include: global location for included script 'roundcube.sieve' is unavailable (contact system administrator for more information). main_script: error: validation failed. .dovecot.sieve file content: require ["include"]; include :global "roundcube.sieve"; sieve/roundcube.sieve file content: require ["fileinto"]; # rule:[subject] if anyof (header :contains "subject" "test") { fileinto "Servers"; stop; } dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.16-linode28 i686 Gentoo Base System release 2.0.1 rootfs protocols: imap imaps managesieve ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 12 last_valid_gid: 12 mail_uid: 8 mail_gid: 12 mail_location: maildir:/var/vmail/%d/%n/Maildir/:INDEX=/var/vmail/%d/%n/indexes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve lda: postmaster_address: postmaster(a)domain.com mail_plugins: quota sieve auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve Any idea? Regards.

3 3

[Dovecot] Imap Logout format
by Antonio Perez-Aranda 19 Oct '10

19 Oct '10

He all, I'm migrating a big system from Courier to Dovecot and we have a custom analyzer logger system to Courier logs. We have got the very similar specs on IMAP LOGIN log, but I can't get the Logout format. Courier write like that: ... imapd: LOGOUT, user=luism.martinez, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=131, sent=632, time=0 ¿Is there any Variables on imap_logout_format to get headers, body and time vars?

2 3

Re: [Dovecot] Segfault in dovecot-lda 2.0.5
by Stephan Bosch 19 Oct '10

19 Oct '10

On 10/19/2010 12:25 AM, Aaron wrote: > On 10/10/2010 8:48 AM, Stephan Bosch wrote: >> Op 10-10-2010 17:30, Sean Cardus schreef: >>> Any ideas? >>> >> >> Yes, this was reported several times already. First thread: >> >> http://www.dovecot.org/list/dovecot/2010-October/053475.html >> >> Apply this change: >> >> http://hg.dovecot.org/dovecot-2.0/rev/e2f9baa436f2 >> >> That should fix it. > > I'm seeing a similar crash when piping in excessively large (7-10mb) > emails. I have already applied the listed change, which fixed this > issue with normal sized email. Could you provide some more info, i.e. a gdb backtrace? Regards, Stephan

2 3

[Dovecot] disable zlib via config to allow per mailbox compression level
by Kui Zhang 19 Oct '10

19 Oct '10

Hello Dovecot v2.0.5 zlib_save_level = 6 # 1..9 zlib_save = gz # or bz2 Is there a config option to disable zlib, even if above config are in place? If so please provide an example. If no, would it be possible to add one? Like if zlib_save_level = 0 disable zlib. So one can configure per mailbox compression level via sql database. KuiZ Thanks

3 5

[Dovecot] sharing of virtual folders?
by Lutz Preßler 19 Oct '10

19 Oct '10

Hello, Debian 2.0.5-0~auto+23 (b8803a1e2dc2): Is sharing of virtual folders supposed to work? namespace virtual { location = virtual:~/Maildir/virtual:LAYOUT=maildir++ prefix = INBOX.virtual. type = private } with (as user) 0 getacl INBOX.virtual.week * ACL "INBOX.virtual.week" "testuser" lrs "user" lrwstipekxacd virtual.week is neither LISTed or SELECTable under shared of testuser. Also tried with full rights and right to INBOX.virtual for testuser. No errors logged. Greetings, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

3 3

[Dovecot] changed separator/sharing of subfolders (Re: problem with subscriptions=no and changed separator ?)
by Lutz Preßler 19 Oct '10

19 Oct '10

Hello, another problem with changed separator (2.0.5-0~auto+23 (b8803a1e2dc2)). I tried sharing virtual folders (see next mail), and noticed that sharing of subfolders does not seem to work if the "receiving" user has a changed separator (different separator/prefix settings through userdb_namespace attributes). As "user": 0 getacl "INBOX.test" * ACL "INBOX.test" "testuser" lrs "user" lrwstipekxacd 0 getacl "INBOX.test.test2" * ACL "INBOX.test.test2" "testuser" lrs "user" lrwstipekxacd (but also tested with more rights for testuser) As testuser with unchanged separator: 0 list "" "*" [includes:] * LIST (\Noselect \HasChildren) "." "INBOX.shared.user" * LIST (\HasChildren) "." "INBOX.shared.user.test" * LIST (\HasNoChildren) "." "INBOX.shared.user.test.test2" and 0 select INBOX.shared.lpmail.test.test2 works. As testuser with separator=^: 0 list "" "*" [includes:] * LIST (\Noselect \HasChildren) "^" "INBOX^shared^lpmail" * LIST (\HasNoChildren) "^" "INBOX^shared^lpmail^test" INBOX^shared^lpmail^test^test2 is missing. 0 select INBOX^shared^lpmail^test2 0 NO Mailbox doesn't exist: INBOX^shared^lpmail^test2 (also tested without having everything under INBOX). No error messages in log. Regards, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

[Dovecot] cmusieve and logging
by cool.chris65＠web.de 18 Oct '10

18 Oct '10

Hello, is there a way to write a logfile during sieve-actions? At least, I have trouble in reading sieve-scripts with tools from kmail ("connection refused) or thunderbird (timed out: server does not answer). There is no problem with the mailbox itself in reading or writing in it. The config for Sieve: dovecot.conf: ## ## LDA specific settings ## protocol lda { # Address to use when sending rejection mails. postmaster_address = christoph@localhost # Hostname to use in various parts of sent mails, eg. in Message-Id. # Default is the system's real hostname. #hostname = # Support for dynamically loadable plugins. mail_plugins is a space separated # list of plugins to load. # Binary to use for sending mails. #sendmail_path = /usr/lib/sendmail # UNIX socket path to master authentication server to find users. #auth_socket_path = /var/run/dovecot/auth-master debug = yes log_path = /var/log/dovecot/dovecot-deliver-errors.log info_log_path = /var/log/dovecot/dovecot-deliver.log # Enabling Sieve plugin for server-side mail filtering mail_plugins = cmusieve } plugin { # Here you can give some extra environment variables to mail processes. # This is mostly meant for passing parameters to plugins. %variable # expansion is done for all values. #sieve = /var/sieve-scripts/%u/sieve sieve=~/.dovecot.sieve # Quota plugin. Multiple backends are supported: # dirsize: Find and sum all the files found from mail directory. # Extremely SLOW with Maildir. It'll eat your CPU and disk I/O. # dict: Keep quota stored in dictionary (eg. SQL) # maildir: Maildir++ quota # fs: Read-only support for filesystem quota #quota = maildir # ACL plugin. vfile backend reads ACLs from "dovecot-acl" file from maildir # directory. You can also optionally give a global ACL directory path where # ACLs are applied to all users' mailboxes. The global ACL directory contains # one file for each mailbox, eg. INBOX or sub.mailbox. #acl = vfile:/etc/dovecot-acls # Convert plugin. If set, specifies the source storage path which is # converted to destination storage (mail_location) when the user logs in. # The existing mail directory is renamed to <dir>-converted. #convert_mail = mbox:%h/mail # Skip mailboxes which we can't open successfully instead of aborting. #convert_skip_broken_mailboxes = no # Trash plugin. When saving a message would make user go over quota, this # plugin automatically deletes the oldest mails from configured mailboxes # until the message can be saved within quota limits. The configuration file # is a text file where each line is in format: <priority> <mailbox name> # Mails are first deleted in lowest -> highest priority number order #trash = /etc/dovecot-trash.conf # Lazy expunge plugin. Currently works only with maildirs. When a user # expunges mails, the mails are moved to a mailbox in another namespace # (1st). When a mailbox is deleted, the mailbox is moved to another namespace # (2nd) as well. Also if the deleted mailbox had any expunged messages, # they're moved to a 3rd namespace. The mails won't be counted in quota, # and they're not deleted automatically (use a cronjob or something). #lazy_expunge = .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/ } and postfix as LDA: ... mailbox_command = /usr/lib/dovecot/deliver ... There are much logentrys about dovecot, devivering and mail, but no sieve- entrys in any log. Hope you can help me, Greets, Christoph PS the system: fritz!box (mipsel-cpu) debian etch (and backports; lenny + dovecot does not run with this environment) dovecot and postfix from etch-backports -- GPG-Fingerprint: 171A 6F66 52E5 A6CE D664 2427 832F E711 7442 8261

2 3

[Dovecot] CLient issues
by The Doctor 18 Oct '10

18 Oct '10

BSDI and Dovecot 2 solved. However some POP3 issues have popped up. 1) Outlook reate e-mail but not on Thunderbird. 2) AVG Proxy interferes with POP3. Any solutions? -- Member - Liberal International This is doctor(a)nl2k.ab.ca Ici doctor(a)nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.facebook.com/dyadallee Are you a real human: http://www.cuttingedge.org/news/n1334.cfm

3 6

[Dovecot] After Upgrade to Dovecot 2.0.5 SSL problems
by derunfehlbare＠freenet.de 18 Oct '10

18 Oct '10

Hi, I've upgraded my Dovecot from 1.2 to 2.0.5. Everything is working fine on my Gentoo, also login with imaps and pop3s. But: I have in my config autocreate folders for new users. After creating a new user (with PostfixAdmin) I see in my logfile with SSL enabled this: imap-login: Warning: SSL alert: where=0x4004, ret=560: fatal unknown CA [127.0.0.1] With SSL-disable, autocreation folders for new users is no problem. I've searched a fiew days for a solution, but I did not find anything. Also dovecot-page what describes running SSL does not help me. Here are the relevant config-sniplets: plugin { autocreate = Trash autocreate2 = Sent autocreate3 = Junk autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Junk autosubscribe4 = Drafts } service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } ssl = yes ssl = yes ssl_cert =

2 1