April 2014 - dovecot - dovecot.org

[Dovecot] Quick win... command to remove all attachments from an Inbox
by IT geek 31 19 Apr '14

19 Apr '14

Good evening all, Does anyone know of a doveadm command I can use to remove (delete) all attachments from an mdbox Inbox? I prefer to save my attachments and have a sleek Inbox... but sometimes I forget. A command I can feed into a cron job would be ideal. Many thanks, -Mark

3 4

[Dovecot] dkim test
by Benny Pedersen 19 Apr '14

19 Apr '14

just testing, if it tempfails on dovecot mail me private from the admins of dovecot maillist only

1 0

[Dovecot] Changing SSL certificates - switching from self-signed to RapidSSL
by Charles Marcus 19 Apr '14

19 Apr '14

Hi all, Ok, been wanting to do this for a while, and I after the Heartbleed fiasco, the boss finally agreed to let me buy some real certs... Until now, we've been using self-signed certs with the following dovecot config: ssl = required ssl_cert = </etc/ssl/ourCerts/imap.pem ssl_key = </etc/ssl/ourCerts/imap_key.pem Now, I've created new keys/certs and the CSR, got the new certs from RapidSSL (and also downloaded their Intermediate bundle), saved everything per their instructions, which say to reference them as follows: ssl = required ssl_cert_file = /etc/ssl/ourNewCerts/mail.ourdomain.com.crt ssl_key_file = /etc/ssl/ourNewCerts/mail.ourdomain.com.key ssl_ca_file = /etc/ssl/ourNewCerts/RapidSSL_Intermediate.crt But my current config doesn't have the _file for the variable names, and the wiki doesn't use them, so I'm planning on setting these to: ssl = required ssl_cert = /etc/ssl/ourNewCerts/mail.ourdomain.com.crt ssl_key = /etc/ssl/ourNewCerts/mail.ourdomain.com.key ssl_ca = /etc/ssl/ourNewCerts/RapidSSL_Intermediate.crt Anyone else ever used RapidSSL certs? Does this look correct? Thanks, Charles

6 20

Re: [Dovecot] Changing SSL certificates - switching from self-signed to RapidSSL
by Joseph Tam 19 Apr '14

19 Apr '14

Charles Marcus <CMarcus(a)Media-Brokers.com> wrote: > 2014-04-18T15:54:07-04:00 dinkumthinkum dovecot: imap-login: > Disconnected (no auth attempts in 0 secs): user=<>, TLS handshaking: > SSL_accept() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 > alert bad certificate: SSL alert number 42, rip=99.14.24.224, lport=143 > > Not a huge number, but enough to be concerning... > > Could this just be from cached junk from some clients, and they will > resolve themselves over time? Short answer: maybe. I got these errors when I switched from a self-signed to CA signed cert, and the client had an open mail session: Feb 22 02:10:32 imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=x.x.x.x, lip=y.y.y.y, TLS: SSL_read() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48, session=<w4Lm8vvypgCJUgmg> Not quite the same as your's, but if you call the client up and ask them to restart their mail client, I'm fairly confident these will go away, as for my user. You might get some weirdness if for some reason the client does not have the intermediate CAs cached. I ran into this problem with our certs -- some RH distributions did have the intermediate CA certs in its store. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Hash Verification with doveadm
by Andreas Krischer - AKbyte 19 Apr '14

19 Apr '14

Hello! I have a problem with the doveadm tool. I’m trying to verify a hash from my MySQL-Db with the following command: doveadm pw -p '123' -t '{SHA512-CRYPT}$6$e3TLkiahfHFv29/J$8etBEtmbh06B72kc1TpetT/k8aHkQrJAPQVpTGDYuzyHZX4MwU2PeL2cIupNEoUUGt6SLB0N7xNqbbqp/5OZo.' I'm expecting that it says verified or not, but it prompts for a password, so the „-p“ parameter does not work. I need this, because I want to use the verification in a shell script and for that it have to work without a prompt. I hope you guess what my problem is :) My configuration: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.41-042stab078.27 i686 Debian 7.4 reiserfs auth_mechanisms = plain login mail_location = maildir:/var/vmail/%d/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/mailserver.pem ssl_key = </etc/ssl/private/mailserver.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n driver = static } protocol lda { mail_plugins = " sieve“ } Regards, Andi PS: Sorry for my bad English, I’m just a 16 year old guy from Germany ...

2 1

[Dovecot] Dovecot Replication setup
by Nikolaos Milas 18 Apr '14

18 Apr '14

Hi, I am trying to setup a master/master replication with dsync (according to the first part of: http://wiki2.dovecot.org/Replication) Sorry if this question sounds foolish, but I would like to ask/confirm whether the indicated setup is required on *both* servers participating in the master/master replication. It seems to me that both need it, but I would like to confirm, just in case. Both servers are running 2.2.12 on CentOS x86_64 (5.10 and 6.5 respectively) and users are virtual over ldap. I might have more questions in the near future, but this is a starting point. Please clarify. Best regards, Nick

3 5

[Dovecot] How to disable Director service?
by Wesley Huang 17 Apr '14

17 Apr '14

Hi All, Does anyone know how to disable the Director service. In our current running Dovecot 2.2.4, if the director configuration is commented out and Dovecot has no errors nor warnings. But the version 2.2.12 I'm testing with gives out fatal errors. We have dedicated Dovecot Director servers that serve the public frontend and separate dedicated imap/pop3 servers on the backend internal network. With the new version, Dovecot is always trying to start Director service and I couldn't find a way to stop Dovecot from giving out errors. 1. When the entire Director configuration block is commented out, there errors: dovecot: director: Fatal: No inet_listeners defined for director service (for standalone keep director_servers empty) dovecot: master: Error: service(director): command startup failed, throttling for 2 secs 2. When the director_servers line is configured as "*director_servers = *", there errors: dovecot: director: Error: Empty server list dovecot: director: Fatal: Invalid value for director_mail_servers setting master: Error: service(director): command startup failed, throttling for 2 secs 3. If the director_servers and direcotr_mail_servers are configured the same as our Director servers, there errors: dovecot: director: Fatal: director_servers doesn't list ourself dovecot: master: Error: service(director): command startup failed, throttling for 2 secs Does any one know how to disable this director service? We don't need the director service on the backend. Cheers, Wesley

2 2

[Dovecot] Move of mail folders to other mail account on same server
by Jan Valvekens 16 Apr '14

16 Apr '14

Hi, I'd like to move mail folders from one mail account to another mail account on the same server. Moving the folders via my mail client (Thunderbird) takes a long time. Therefore I wondered whether it's not possible to simply move the files on the server itself. If I unsubscribe to the folders in my source account, then move the folder and subscribe to the folders in my target account: will that work? I run dovecot version 2.1.15 Thanks a lot, Jan

2 1

[Dovecot] Segmentation fault running doveadm index (lucene) on a big mailbox
by Florian Klink 16 Apr '14

16 Apr '14

Hi, on a server running dovecot 2.2.12 I have a user with a quite big mailbox (~37000 Mails in the INBOX). I tried to enable full text search using the fts_lucene backend (dovecot 2.2.12). However, the `doveadm -v index -u <username> INBOX` always runs into a segmentation fault after mail number 24200: I tried to get a backtrace using gdb: doveadm(<username>): Info: INBOX: Caching mails seq=1..37578 24200/37578 Program received signal SIGSEGV, Segmentation fault. 0x00007ffff6612151 in lucene_index_build_more () from /usr/lib64/dovecot/lib21_fts_lucene_plugin.so (gdb) bt #0 0x00007ffff6612151 in lucene_index_build_more () from /usr/lib64/dovecot/lib21_fts_lucene_plugin.so #1 0x00007ffff6610b01 in ?? () from /usr/lib64/dovecot/lib21_fts_lucene_plugin.so #2 0x00007ffff6820d5b in fts_build_mail () from /usr/lib64/dovecot/lib20_fts_plugin.so #3 0x00007ffff6825b90 in ?? () from /usr/lib64/dovecot/lib20_fts_plugin.so #4 0x000000000041650a in ?? () #5 0x00000000004123a7 in _start () `ulimit` reports "unlimited", so ulimits shouldn't be the culprit. Is there another limit in dovecot? Unfortunately, I can't "resume" the process, the indexing always starts again from the beginning. Florian doveconf -n: # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.14.0-gentoo x86_64 Gentoo Base System release 2.2 ext4 auth_mechanisms = plain login cram-md5 ntlm mail_gid = 900 mail_location = maildir:/home/vmail/%u mail_plugins = acl quota fts fts_lucene mail_uid = 900 maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no list = children location = maildir:/home/vmail/%%u/:INDEX=/home/vmail/%%u/ prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/home/vmail/shared-mailboxes fts = lucene fts_lucene = whitespace_chars=@. quota = maildir quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /home/vmail/%u/.dovecot.sieve sieve_dir = /home/vmail/%u/sieve } postmaster_address = postmaster@<domain> protocols = imap pop3 lmtp sieve sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } } service imap-postlogin { executable = script-login /usr/local/bin/imap-postlogin.sh user = $default_internal_user } service imap { executable = imap imap-postlogin } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = required ssl_cert = </etc/ssl/<domain>/chain.crt ssl_key = </etc/ssl/<domain>/server.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl } protocol imap { mail_plugins = acl quota quota imap_quota imap_acl }

3 6

[Dovecot] migration advice
by Raphael Bauduin 15 Apr '14

15 Apr '14

Hi, I am preparing a migration from courier-imap to dovecot. The maildir is in each user's home directory, and /home is mounted by NFS. All this running in a kvm virtual machine. My plan would be to create a new virtual machine (with another IP) with dovecot, mounting the same /home, and switching a couple of users to dovecot for testing purpose. If the tests go well, I would then migrate the other users and assign the IP address of the courier imap kvm to the dovecote kvm. Does that make sense? Or can it be problematic to have some users switched to dovecot while their maildir directory is still accessible to courier-imap? Looking forward to reading your feedback, thanks in advance! Raph

1 0