May 2011 - dovecot - dovecot.org

[Dovecot] Post-login scripting with mail_drop_priv_before_exec in dovecot2
by Mark Zealey 09 May '11

09 May '11

Hi, I'm in the process of upgrading from dovecot v1.1 to dovecot 2. We fetch uid/gid user information from a database and also use post-login scripting with mail_drop_priv_before_exec = yes which means the postlogin script is executed with the permissions of the user we have found in the database. According to the dovecot2 wiki page, to get this behaviour in version 2 we have to set the post-login script to run as root and then su to the user. This seems a bit of a strange (and insecure as you might forget) way of doing this. Are there any other options, such as fetching a certain column name from the database to set the value of service imap-postlogin { user } or setting something like user = $user in the configuration? (or is the configuration only read at startup so such dynamic configuration can't be done in the service section?) Cheers, Mark

2 2

Re: [Dovecot] sieve filters not being invoked
by Colin Brace 09 May '11

09 May '11

On Mon, 09 May 2011 13:00:45 +0200, Colin Brace wrote: > In the dovecot-lda log, I am now seeing some action, but there is a > > permissions problem somewhere: > > May 09 12:43:13 lda: Debug: Loading modules from directory: > /usr/local/lib/dovecot > May 09 12:43:13 lda: Debug: Module loaded: > /usr/local/lib/dovecot/lib90_sieve_plugin.so > May 09 12:43:13 lda: Error: userdb lookup: > connect(/var/run/dovecot//auth-userdb) failed: Permission denied > (euid=200(vmail) egid=6(mail) missing +w perm: > /var/run/dovecot//auth-userdb, euid is not dir owner) > May 09 12:43:13 lda: Fatal: Internal error occurred. Refer to server > log for more information. Following up my earlier mail, perhaps I am being obtuse here; I've changed the permissions of auth-userdb to 666, although I have no idea what these files in /var/run/dovecot are. These appears to solve the problem above. Renabling dovecot lda in Postfix, I try sending myself a message; however it gets bounced: "user unknown" (/var/log/maillog): [...] May 9 17:33:08 venus postfix/pipe[73445]: 8BCF629F3F: to=, relay=dovecot, delay=0.34, delays=0.3/0/0/0.03, dsn=5.1.1, status=bounced (user unknown) May 9 17:33:08 venus postfix/cleanup[73442]: C61332A0AB: message-id= May 9 17:33:08 venus postfix/bounce[73447]: 8BCF629F3F: sender non-delivery notification: C61332A0AB May 9 17:33:08 venus postfix/qmgr[73435]: C61332A0AB: from=, size=3183, nrcpt=1 (queue active) May 9 17:33:08 venus postfix/qmgr[73435]: 8BCF629F3F: removed May 9 17:33:08 venus postfix/smtpd[73444]: disconnect from localhost[127.0.0.1] May 9 17:33:08 venus postfix/lmtp[73443]: C5E4729ED5: to=, relay=venus[/var/run/dspam.sock], delay=1.1, delays=0.45/0/0/0.61, dsn=2.6.0, status=sent (250 2.6.0 Message accepted for delivery) May 9 17:33:08 venus postfix/qmgr[73435]: C5E4729ED5: removed If I comment out this line in main.cf, and restart Postfix, things work again: # virtual_transport = dovecot Any ideas on what is going wrong here? I feel I am almost there. -- Colin Brace Amsterdam http://lim.nl -- Colin Brace Amsterdam http://lim.nl

2 1

[Dovecot] sieve filters not being invoked
by Colin Brace 09 May '11

09 May '11

Hi all, Similar to someone who posted here yesterday, I am having trouble getting sieve filters working. I have installed pigeonhole. I can create, edit, and save scripts from both the Thunderbird sieve extension as well as the Roundcube sieve plugin via managesieve running on port 4190. The .sieve file is properly saved in ~/sieve with a symlink from ~/.dovecot.sieve. But the filters are not being invoked on incoming mail. I have mail_debug enabled, but I don't see anything useful in /var/log/dovecot. Anyone have any ideas? Thanks $ dovecot -n # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-RELEASE amd64 ufs auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 0 info_log_path = /var/log/dovecot log_path = /var/log/dovecot mail_access_groups = mail mail_debug = yes mail_location = maildir:/home/colin/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot-passwd driver = passwd-file } plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve plugin/sieve_global_dir = /var/lib/dovecot/sieve/global/ plugin/sieve_global_path = /var/lib/dovecot/sieve/default.sieve protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = mail mode = 0660 user = vmail } user = root } service imap-login { executable = /usr/local/libexec/dovecot/imap-login vsz_limit = 64 M } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { executable = /usr/local/libexec/dovecot/imap-login vsz_limit = 64 M } ssl_cert = </etc/ssl/venus.crt ssl_key = </etc/ssl/venus.key userdb { driver = passwd } userdb { args = uid=vmail gid=vmail home=/home/colin/vmail/%d/%n driver = static } verbose_proctitle = yes protocol lda { mail_plugins = sieve } ----- Colin Brace Amsterdam http://lim.nl -- View this message in context: http://old.nabble.com/sieve-filters-not-being-invoked-tp31569757p31569757.h… Sent from the Dovecot mailing list archive at Nabble.com.

3 3

[Dovecot] mbox/maildir mixed setup with system/virtual mixed users
by Victor TARHON-ONU 09 May '11

09 May '11

Hello Everyone, I'm using dovecot 1.0.7 (not sure how relevant it is though) configured to handle both sytem users and virtual users. The system users are handled by default (PAM), while the virtual users are handled pretty much like this: passdb passwd-file { args = /var/spool/vmail/%d/auth/%n } ...And mailbox and folder location settings: userdb static { args = uid=mail gid=mail home=/var/spool/vmail/%d/mail/%n mail=mbox:/var/spool/vmail/%d/imap/%n:INBOX=mbox:/var/spool/vmail/%d/mail/%n } Everything works perfectly with the inbox and mail foder in mbox format. Now, what I'm trying to accomplish is to reconfigure dovecot to create and handle the secondary mail folders (/home/user/mail for system users and /var/spool/vmail/domainname/imap/user/imap for virtual users) in maildir format. I tried to define some name spaces to make this happen, but whatever I to do make one work (either the virtual users or the system users) would make the other non-functional. By example, I have these name space definitions and the virtual users work fine with maildir: namespace private { separator = / prefix = "#mbox/" location = mbox:/var/spool/vmail/%d/imap/%n:INBOX=/var/spool/vmail/%d/mail/%n inbox = yes hidden = yes } namespace private { separator = / prefix = location = maildir:/var/spool/vmail/%d/imap/%n hidden = yes } Maybe I didn't fully understand the namespace concept, but I was unable to make them apply only to one location of the imap folders locations or another. Can anyone give me a hand with this, if this setup is even possible? --

2 1

[Dovecot] Spelling error in #define ?
by Peter Mogensen 09 May '11

09 May '11

Hi, I stumbled over this define in lazy-expunge-plugin.h: #ifndef LAZY_EXPUNGE_PLUGIN_H #define TLAZY_EXPUNGE_PLUGIN_H Isn't there a "T" too much? http://hg.dovecot.org/dovecot-2.0/file/036260ae0261/src/plugins/lazy-expung… /Peter

2 1

[Dovecot] Saving mails to +detail failed: Namespace error
by Peer Heinlein 09 May '11

09 May '11

We have the following namespace: namespace { inbox = yes list = yes location = prefix = INBOX/ separator = / subscriptions = yes type = private } namespace { list = children location = maildir:%%h:INDEX=%h/shared/%%u:CONTROL=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } and we set: lmtp_save_to_detail_mailbox = yes recipient_delimiter = + But sending Mails to user+detail is failing: May 3 12:40:06 dobby2 postfix/cleanup[8245]: 12E787756C: message- id=<201105031239.40804.p.heinlein(a)heinlein-support.de> May 3 12:40:06 dobby2 postfix/qmgr[23304]: 12E787756C: from=<p.heinlein(a)heinlein-support.de>, size=1963, nrcpt=1 (queue active) May 3 12:40:06 dobby2 dovecot: lmtp(6537): Debug: auth input: p.heinlein(a)jpberlin.de home=/mail/jpberlin.de/p.heinlein/Maildir/ uid=10000 gid=10000 May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Effective uid=10000, gid=10000, home=/mail/jpberlin.de/p.heinlein/Maildir/ May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Namespace : type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~:INDEX=/cache/jpberlin.de/p.heinlein May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: maildir++: root=/mail/jpberlin.de/p.heinlein/Maildir/, index=/cache/jpberlin.de/p.heinlein, control=, inbox=/mail/jpberlin.de/p.heinlein/Maildir/ May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir: %h:INDEX=/mail/jpberlin.de/p.heinlein/Maildir//shared/%u:CONTROL=/mail/jpberlin.de/p.heinlein/Maildir//shared/%u May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: shared: root=/var/run/dovecot/, index=, control=, inbox= May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Pg/fKrHav02JGQAAir+T1Q: sieve: user's script path /mail/jpberlin.de/p.heinlein/Maildir//../.dovecot.sieve doesn't exist (using global script path in stead) May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Pg/fKrHav02JGQAAir+T1Q: sieve: user has no valid personal script May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Debug: Pg/fKrHav02JGQAAir+T1Q: sieve: no scripts to execute: reverting to default delivery. May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Pg/fKrHav02JGQAAir+T1Q: msgid=<201105031239.40804.p.heinlein@heinlein- support.de>: save failed to Cong: Unknown namespace May 3 12:40:06 dobby2 dovecot: lmtp(6537, p.heinlein(a)jpberlin.de) Pg/fKrHav02JGQAAir+T1Q: msgid=<201105031239.40804.p.heinlein@heinlein- support.de>: saved mail to INBOX May 3 12:40:06 dobby2 postfix/lmtp[8338]: 12E787756C: to=<p.heinlein+Cong(a)jpberlin.de>, relay=dobby.heinlein- support.de[private/lmtp-dovecot], delay=0.1, delays=0.06/0.02/0/0.02, dsn=2.0.0, status=sent (250 2.0.0 <p.heinlein+Cong(a)jpberlin.de> Pg/fKrHav02JGQAAir+T1Q Saved) But a folder named "Cong" exists: # ls -la .Cong -d drwx------ 5 vmail vmail 4096 30. Apr 04:46 .Cong # What's going wrong? My mistake or is it a bug? peer -- Die Mailserver-Konferenz: Das Know-how-Update für Postmaster 26./27. Mai 2011 - http://www.heinlein-support.de/mk Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030 / 40 50 51 - 0 Fax: 030 / 40 50 51 - 19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] Restricting IMAP
by Matt 09 May '11

09 May '11

I want to restrict IMAP use too 127.0.0.1 and to only certain usernames. Such as fred(a)my777domain.com would be allowed to use IMAP. How would I do that with Dovecot or can I? Basically I want webmail to work with IMAP regardless of username but I only want certain usernames allowed to use IMAP remotely.

3 2

[Dovecot] example-config mail_log plugin options
by Lutz Preßler 09 May '11

09 May '11

Hello, dovecot-2.0.12/doc/example-config/conf.d/10-logging.conf contains # mail_log plugin provides more event logging for mail processes. plugin { # Events to log. Also available: flag_change append #mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename # Group events within a transaction to one line. #mail_log_group_events = no # Available fields: uid, box, msgid, from, subject, size, vsize, flags # size and vsize are available only for expunge and copy events. #mail_log_fields = uid box msgid size } "mail_log_group_events" seems to be gone (when and why?). And it's now "save" instead of "append", with "mailbox_create" also available. Greetings, Lutz Pressler -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] Corrupted index cache file
by Frank Bonnet 09 May '11

09 May '11

Hello I got this error message yesterday evening for a user I've checked LDA error log it happened 6 times in 3 days for 5 differents users, not much but I wonder what's going on as actually the server is moderately loaded ( Easter holidays ) we have currently 250/300 IMAP processes , in "normal" production time we have approx 1000 IMAP processes running. Apr 14 19:24:37 imap(xxxxxxx): Error: FETCH [] for mailbox Drafts (Hugues at ESIEE) UID 17836 got too little data: 16384 vs 18012 Apr 14 19:24:37 imap(xxxxxxx): Error: Corrupted index cache file /var/cache/dovecot/index/xxxxxxx/.imap/Drafts (Hugues at ESIEE)/dovecot.index.cache: Broken virtual size for mail UID 17836 The machine is supposed to be HUDGE for our 4000 mailboxes HP Proliant DL380 G7 , 12 Gb RAM 24 cores !!! I've located index/cache files on another disk than users mailboxes mailboxes are living on a 2Tb RAID array ( 50% full ) index/cache are living on another single disk ( 10% full ) I run Dovecot 2.0.11 + dovecot2-pigeonhole compiled from FreeBSD 8.2 ports Dovecot or hardware problem ??? Thanks a lot for any ideas/infos

4 4

[Dovecot] doveadm mailbox status 2.0.12 crashes
by Joseph Tam 09 May '11

09 May '11

My gdb won't cooperate and produce a backtrace so I hope this dbx stack trace gives sufficient clues as to why it crashed. It happended when I was testing a doveadm command for a user which a large collection of mboxs: # dbx doveadm (dbx) run mailbox status -u user messages \* ... long list ... igel messages=1 INBOX messages=231 doveadm(user): Panic: Trying to deinit storage before freeing its objects doveadm(user): Error: Raw backtrace: 0xff1bf0e4 -> 0xff1bf34c -> 0xff2a42a0 -> 0xff29d68c -> 0xff29e494 -> 0xff2a7bc4 -> 0xff2a7e3c -> 0x16894 -> 0x169a0 -> 0x16e18 -> 0x17234 -> 0x17304 -> 0x1c0a0 -> 0x1629c signal ABRT (Abort) in __lwp_kill at 0xfefcd6ac 0xfefcd6ac: __lwp_kill+0x0008: bcc,a,pt %icc,__lwp_kill+0x18 ! 0xfefcd6bc Current function is default_fatal_finish dbx: warning: can't find file "/build/dovecot-2.0.12/src/lib/failures.c" (dbx) where [1] __lwp_kill(0x0, 0x6, 0x0, 0x6, 0xffbffeff, 0x0), at 0xfefcd6ac [2] raise(0x6, 0x0, 0x0, 0xfefacd88, 0xffffffff, 0x6), at 0xfef669ac [3] abort(0xff1ea980, 0x1, 0x0, 0xee4cc, 0xff0334d8, 0x0), at 0xfef42010 =>[4] default_fatal_finish(type = LOG_TYPE_PANIC, status = 0), line 187 in "failures.c" [5] default_fatal_handler(ctx = 0xffbff598, format = (nil), args = 0xffbff600), line 201 in "failures.c" [6] i_panic(format = 0xff30d3b8 "Trying to deinit storage before freeing its objects", ...), line 259 in "failures.c" [7] mail_storage_unref(_storage = 0x6b9ec), line 379 in "mail-storage.c" [8] mail_namespace_free(ns = 0x6b9b8), line 52 in "mail-namespace.c" [9] mail_namespaces_deinit(_namespaces = 0x66efc), line 438 in "mail-namespace.c" [10] mail_user_deinit_base(user = 0x66ec0), line 28 in "mail-user.c" [11] mail_user_unref(_user = 0x55450), line 140 in "mail-user.c" [12] doveadm_mail_next_user(ctx = 0x55438, input = 0x55450, error_r = 0xffbff8c4), line 221 in "doveadm-mail.c" [13] doveadm_mail_single_user(ctx = 0x55438, argv = 0xffbffc08, username = 0xffbffd1f "user", service_flags = -4196156), line 246 in "doveadm-mail.c" [14] doveadm_mail_cmd(cmd = 0x544f0, argc = 5, argv = 0xffbffc08), line 416 in "doveadm-mail.c" [15] doveadm_mail_try_run_multi_word(cmd = 0x544f0, cmdname = 0x2ade0 "status", argc = 6, argv = 0xffbffbf8), line 457 in "doveadm-mail.c" [16] doveadm_mail_try_run(cmd_name = 0xffbffd0d "mailbox", argc = 6, argv = 0xffbffbf8), line 480 in "doveadm-mail.c" [17] main(argc = 6, argv = 0xffbffbf8), line 183 in "doveadm.c" Joseph Tam <jtam.home(a)gmail.com>

2 1