February 2010 - dovecot

[Dovecot] deliver problem ( Error: file_dotlock_create )
by Frank Bonnet 18 Feb '10

18 Feb '10

Hello all ( Postfix and Dovecot ) Trying to use deliver as mailbox_command with Postfix I get this error each time an email is arriving deliver(xxxxxxxx): Error: file_dotlock_create(/var/mail/xxxxxxxx) failed: Permission denied (euid=3003(xxxxxxxx) egid=3010(smig) missing +w perm: /var/mail) (set mail_privileged_group=mail) Doea this means I have to chmod 777 the /var/mail directory ? Thanks a lot

2 1

[Dovecot] dovecot v1.2.10 + unknown mail_uid parameter
by maximatt 18 Feb '10

18 Feb '10

hi... i upgrading dovecot from v1.0.7 to v1.2.10, so i perform some modifications (http://wiki.dovecot.org/Upgrading/1.1 and http://wiki.dovecot.org/Upgrading/1.2) but i have the following problem when i want to test installation: in dovecot.conf, i set the user mail: mail_uid= 72940 mail_gid= 72941 but when i try to start dovecot i have the following error: # sbin/dovecot Error: Error in configuration file /etc/dovecot/etc/dovecot.conf line 962: Unknown setting: mail_uid Fatal: Invalid configuration in /etc/dovecot/etc/dovecot.conf # sbin/dovecot --version 1.2.10 i try, but i dont know how to fix them :( thanks in advance! :) -- Salu2 ;)

2 1

[Dovecot] quick question
by David Halik 18 Feb '10

18 Feb '10

Timo (and anyone else who feels like chiming in), I was just wondering if you'd be able to tell me if the amount of corruption I see on a daily basis is what you consider "average" for our current setup and traffic. Now that we are no longer experiencing any core dumps with the latest patches since our migration from courier two months ago, I'd like to know what is expected as operational norms. Prior to this we had never used Dovecot, so I have nothing to go on. Our physical setup is 10 Centos 5.4 x86_64 IMAP/POP servers, all with the same NFS backend where the index, control, and Maildir's for the users reside. Accessing this are direct connections from clients, plus multiple squirrelmail webservers, and pine users, all at the same time with layer4 switch connection load balancing. Each server has an average of about 400 connections, for a total of around concurrent 4000 during a normal business day. This is out of a possible user population of about 15,000. All our dovecot servers syslog to one machine, and on average I see about 50-75 instances of file corruption per day. I'm not counting each line, since some instances of corruption generate a log message for each uid that's wrong. This is just me counting "user A was corrupted once at 10:00, user B was corrupted at 10:25" for example. Examples of the corruption are as follows: ########### Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 28: Invalid transaction log size (32692 vs 32800): ...../dovecot/.INBOX/dovecot.index.log (sync_offset=32692) Corrupted index cache file ...../dovecot/.Sent Messages/dovecot.index.cache: Corrupted physical size for uid=624: 0 != 53490263 Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 66: Unexpected garbage at EOF (sync_offset=21608) Corrupted transaction log file ...../dovecot/.Trash.RFA/dovecot.index.log seq 2: indexid changed 1264098644 -> 1264098664 (sync_offset=0) Corrupted index cache file ...../dovecot/.INBOX/dovecot.index.cache: invalid record size Corrupted index cache file ...../dovecot/.INBOX/dovecot.index.cache: field index too large (33 >= 19) Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 40: record size too small (type=0x0, offset=5788, size=0) (sync_offset=5812) ########## These are most of the unique messages I could find, although the majority are the same as the first two I posted. So, my question, is this normal for a setup such as ours? I've been arguing with my boss over this since the switch. My opinion is that with a setup such as ours where a user can be logged in using Thunderbird, Squirrelmail, and their Blackberry all concurrently at the same time, there will always be the occasional index/log corruption. Unfortunately, he is of the opinion that there should rarely be any and there is a design flaw in how Dovecot is designed to work with multiple services with an NFS backend. What has been your experience so far? Thanks, -Dave -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

7 44

[Dovecot] Anyone successfully setup Continous Backup of mailboxes using rsync ?
by CoolAtt NNA 18 Feb '10

18 Feb '10

Hi All.. Am working on continous backup of mailboxes using rsync(for e.g by running rsync every 2 min) Things gets more complicated when users create Subfolders in INBOX , SENT , etc.. If anyone among you did that plz guide & advise. Thanks CoolAtt _________________________________________________________________ Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. https://signup.live.com/signup.aspx?id=60969

17 41

[Dovecot] dovecot-sieve vacation vs qmail-ldap
by Lazy 18 Feb '10

18 Feb '10

Helloo, We are using dovectot lda with qmail-ldap, dovecot 1.2.10, sieve 0.1.15 lda is executed as exec /var/qmail/bin/preline -f /usr/local/dovecot/libexec/dovecot/deliver -s preline adds Delivered-To: header, everything works fine except vacation Feb 9 16:07:16 thebe dovecot: deliver(lazy): sieve: msgid=unspecified: discarding vacation response for message implicitly delivered to <lazy(a)thebe.org> Feb 9 16:07:16 thebe dovecot: deliver(lazy): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' thebe.org is the hostname of the machine, oryginal recipient address has other domain .dovecot.sieve file looks like this require ["vacation"]; #autoresponder vacation :days 1 :subject "Auto Reply / Odpowiedz automatyczna" "aaaaaaaaaaaaaaaaaaaaa"; I did experiments with :addresses ["*"] without any luck. deliver only gets user and HOME directory form env variables provided by qmail, so it's unaware of the target email address. How to fix it ? I was thinking about deliver extracting target address from Delivered-To: header added by qmail's preline, or use DTLINE env variable, whitch qmail populates with Delivered-To header.

2 2

[Dovecot] Dovecot 1.2.8 problem on AIX
by Jonathan Siegle 18 Feb '10

18 Feb '10

Running revision 9492:3efdbaab2960(Mon Nov 23) on AIX 5.3. I run dovecot out of inetd. Every once in a while I get the following error: Dovecot is already running with PID 2592842 (read from /usr/ladmin/dovecot-1.2.8/var/run/dovecot/master.pid) when I try to connect to the imap port. -Jonathan

3 2

[Dovecot] using signed certificates for TLS/SSL
by Leonardo Rodrigues 18 Feb '10

18 Feb '10

Hi, I have, in one customer, a web server running on a Verisign-signed certificate SSL certificate. Everything works fine, IE and Firefox connects on https without asking anything, which usually happens on self-signed certificates. I'm trying to use that certificate on dovecot, but clients (Thunderbird basically) keeps saying the certificate is not valid. yes i'm using, when configuring Thunderbird, the same CN that was signed by Verisign for the web usage i've enabled verbose_ssl and got when thunderbird tries to connect: Feb 18 12:32:02 correio dovecot: imap-login: Disconnected (no auth attempts): rip=201.86.xxx.xxx, lip=192.168.1.2, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca unknown CA ??? is that Thunderbird that is not recognizing the Verisign-signed certificate ? Do i need to, somehow, install some Verisign CA certificate in dovecot.conf ? when using a self-signed certificate, i also get an SSL_accept failed, but with different message: Feb 18 12:41:45 correio dovecot: imap-login: Disconnected (no auth attempts): rip=201.86.191.114, lip=192.168.1.2, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate despite the fact my certificates were generated for use with Apache, i can 'print' them, both of them, with the same commands i use to print dovecot generated certificates, with mkcert.sh. So, it seems they are compatible. if i click OK on Thunderbird, when using my Verisign-signed certificates, everything works and i do got TLS logs: Feb 18 12:23:36 correio dovecot: imap-login: Login: user=<user(a)domain.com.br>, method=PLAIN, rip=201.86.xx.xx, lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Feb 18 12:31:43 correio dovecot: imap-login: Login: user=<user(a)domain.com.br>, method=PLAIN, rip=201.86.xx.xx, lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) what am i doing wrong ?? or using a signed-certificate for WEB usage is not possible on dovecot ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

3 3

[Dovecot] revision control on maildir possible?
by Markus Beyer 18 Feb '10

18 Feb '10

Hi, I was wondering if it is possible to put a dovecot managed maildir under a vcs like system, for example git or bzr. I'd like to have a seamless history of all mail going in and out of my mailboxes, so a vcs like system seams a good choice for me. I'm not quite sure however if that would cause any problems to dovecot and what the best way of handling commits would be. If anyone on the list got any pointers regarding this, it would be much apprechiated. Best regards, Markus -- Sicherer, schneller und einfacher. Die aktuellen Internet-Browser - jetzt kostenlos herunterladen! http://portal.gmx.net/de/go/atbrowser

3 2

[Dovecot] tls not working on ubuntu
by zhong ming wu 18 Feb '10

18 Feb '10

Hello List, I'm new to dovecot. I have sucessfully configured dovecot with just virtual users on a centos linux box to my satisfaction; I can connect with TLS with disable_plaintext_auth = yes. This dovecot is also version > 1. Can't post exact version right now but it's what comes with Centos 5.4. On a Ubuntu 9.10 box here, I cannot connect with TLS (port 110) but I can connect with plain SSL (port 995). The config files between centos and ubuntu boxes are the same except for minor details. The following is the log entry Feb 17 21:38:18 ubuntu dovecot: pop3-login: Disconnected (no auth attempts): rip=192.168.0.101, lip=192.168.0.108 The output below is from a binary compiled from source. I have also tested with 1.1.11 (that I get from apt-get install) with the same config file. I have tested ubuntu with both Thunderbird 3 and thunderbird 2. I have also searched google as well as dovecot website. Thanks mr.wu # 1.2.10: /usr/local/etc/dovecot.conf # OS: Linux 2.6.31-14-server x86_64 Ubuntu 9.10 ext4 base_dir: /var/run/dovecot/ protocols: pop3 pop3s listen: 192.168.0.108 ssl_cert_file: /usr/local/etc/pop.crt ssl_key_file: /usr/local/etc/pop.key ssl_parameters_regenerate: 29 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/pop3-login mail_location: maildir:/var/vmail/%d/%n mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 auth default: user: authdove debug: yes passdb: driver: passwd-file args: /usr/local/etc/%d/passwd userdb: driver: static args: uid=2000 gid=2000 home=/var/vmail/%d/%n

2 1

[Dovecot] Sieve libexec /usr/lib/dovecot/deliver
by Filip Dvořák 17 Feb '10

17 Feb '10

Hi, I have installed dovecot(1.2.10) with --libexecdir=/usr/lib . Dovecot sieve(0.1.15) is compiled with --with-dovecot but still uses /usr/libexec/dovecot/deliver instead of /usr/lib/dovecot/deliver. How should be dovecot sieve configured to use /usr/lib/dovecot/deliver thanks in advance Filip # dovecot configuration: ./configure --prefix=/usr --sysconfdir=/etc/dovecot --localstatedir=/var \ --libexecdir=/usr/lib --with-moduledir=/usr/lib/dovecot/modules \ --with-db --with-mysql --with-pgsql --with-sqlite \ --with-ssl=openssl --with-ssldir=/etc/dovecot/ssl \ --with-gssapi --with-ldap=plugin --enable-header-install --with-docs # dovecot sieve configuration: ./configure --prefix=/usr --with-dovecot=/usr/lib/dovecot # /usr/lib/dovecot/dovecot-config: CFLAGS="-std=gnu99 -march=i686 -mtune=generic -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 " LIBS=" -lrt" SSL_LIBS="-lssl -lcrypto -ldl -lz " STORAGE_LIBS="$(top_builddir)/src/lib-storage/register/libstorage-register.a $(top_builddir)/src/lib-storage/list/libstorage_list.a $(top_builddir)/src/lib-storage/index/cydir/libstorage_cydir.a $(top_builddir)/src/lib-storage/index/dbox/libstorage_dbox.a $(top_builddir)/src/lib-storage/index/maildir/libstorage_maildir.a $(top_builddir)/src/lib-storage/index/mbox/libstorage_mbox.a $(top_builddir)/src/lib-storage/index/raw/libstorage_raw.a $(top_builddir)/src/lib-storage/index/shared/libstorage_shared.a $(top_builddir)/src/lib-storage/index/libstorage_index.a $(top_builddir)/src/lib-storage/libstorage.a $(top_builddir)/src/lib-index/libindex.a $(top_builddir)/src/lib-imap/libimap.a $(top_builddir)/src/lib-mail/libmail.a $(top_builddir)/src/lib-auth/libauth.a $(top_builddir)/src/lib-charset/libcharset.a $(top_builddir)/src/lib/liblib.a" LIBICONV="" MODULE_LIBS="-export-dynamic -ldl" dovecot_incdir=/usr/include/dovecot moduledir=/usr/lib/dovecot/modules CFLAGS="-std=gnu99 -march=i686 -mtune=generic -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscri LIBS=" -lrt" SSL_LIBS="-lssl -lcrypto -ldl -lz " STORAGE_LIBS="$(top_builddir)/src/lib-storage/register/libstorage-register.a $(top_builddir)/src/lib-storage/list/libstorage_list.a $(top_ LIBICONV="" MODULE_LIBS="-export-dynamic -ldl" dovecot_incdir=/usr/include/dovecot moduledir=/usr/lib/dovecot/modules # end of dovecot-config dovecot -n output: # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-lts i686 ext3 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/mail.pruda.com/cert.pem ssl_key_file: /etc/ssl/mail.pruda.com/key.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%u mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: postmaster_address: postmaster(a)pruda.com mail_plugins: sieve sieve_global_path: /home/vmail/dovecot-global.sieve sendmail_path: /usr/sbin/sendmail auth default: user: nobody passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: sieve: /home/vmail/%u/dovecot.sieve home: /home/vmail/%u

1 1