April 2014 - dovecot - dovecot.org

[Dovecot] How to bring dovecot to using a slightly modified passwd file
by Stephan von Krawczynski 23 Apr '14

23 Apr '14

Hello all, I am trying to use a setup where domains have separate passwd files with a slightly different layout. Is there a way to tell dovecot that a passwd file contains everything it looks for but on different positions inside the passwd file line? Standard passwd: USERNAME:PASSWD:UID:GID:HOME:extras different layout: USERNAME:PASSWD:extras:UID:GID:HOME Or do I have to patch the source, and where if necessary? Thanks for your help. -- Regards, Stephan

4 5

[Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

I'm trying to set up my system (using Dovecot 2.0.9) so that certain Password Databases are available over pop3 and imap and others are available over pop3s and imaps. In particular, I would like users to be able to connect without SSL to accounts set up in vpopmail, but to require SSL for system accounts. Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? Thank you, Dan

3 7

Re: [Dovecot] Allowing non-SSL connections only for certain Password Databases
by Dan Pollock 23 Apr '14

23 Apr '14

On Apr 22, 2014, Urban Loesch wrote: > > > > Is there a way to set "disable_plaintext_auth" to different values for different Password Databases? Is there another way to do it? > > > > Why do you not force SSL for all users? I have some users whose mail clients don't properly support SSL. For users using system accounts, it's important that passwords are protected (as they can use that password to log in to things other than email). It's not as critical to keep virtual mailboxes on vpopmail encrypted, as those accounts only have access to email. Dan

3 2

[Dovecot] Shared mailboxes not working with . dot namespace separator - values truncated in SQL
by Frantisek Kucera 23 Apr '14

23 Apr '14

Hello, I have Dovecot configured for multiple domains (usernames are user(a)domain.tld) and I wanted to enable shared mailboxes. But there is some problem - if I share a folder, other user can't see it. In the log I foud: > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user petr: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > Apr 22 19:21:02 veverka dovecot: imap(user(a)veverka.tld): Error: Couldn't create namespace 'shared.' for user emclient@veverka: userdb didn't return a home directory, but location used it (%h): maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u Which is weird because the user name is "petr.surname" not only "petr" and the domain is "veverka.tld" not only "veverka". So I turned on SQL logging on my PostgreSQL and saw that Dovecot executes these queries: > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'petr' AND domena = '' > 2014-04-22 19:21:02 CEST LOG: statement: SELECT * FROM dovecot_uzivatel WHERE login = 'emclient' AND domena = 'veverka' The first username was "petr.surname(a)veverka.tld" and the second one was "emclient(a)veverka.tld" so it seems that it was truncated right after first "." dot and I afraid that this is a bug. Then it is obvious that Dovecot can't find the home directory and complains in log (as mentioned above). I found workaround – I had "." configured as namespace separator so I reconfigured it to "/" slash and now mailbox sharing works! But I think that it should work also with "." dot separator and the values should not be truncated in SQL queries. I tried also using '%u' in my SQL and its value was also truncated. Values in "dovecot-acl" a "shared-mailboxes" files seem to be ok. BTW: I have also another server with only one domain and simple user names (no dots) and there the mailbox sharing works – but now it seems that it works only accidentally. This might lead to hardly debuggable problems if someone has usernames with and without dots – mailbox sharing will work for some users but for some not. My old configuration: > password_query = SELECT * FROM dovecot_heslo WHERE login = '%n' AND domena = '%d' > user_query = SELECT * FROM dovecot_uzivatel WHERE login = '%n' AND domena = '%d' > iterate_query = SELECT login AS username, domena AS domain FROM dovecot_uzivatel > namespace { > type = shared > separator = . > prefix = shared.%%u. > location = maildir:%h/Maildir:INDEX=~/Maildir/shared/%%u > subscriptions = yes > list = children > } Had to be reconfigured to: > separator = / > prefix = shared/%%u/ Used version: > # dovecot --version > 2.1.7 > # uname -a > Linux veverka 3.11.0-19-generic #33-Ubuntu SMP Tue Mar 11 18:48:34 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Regards, Franta P.S. If you have similar problem and have to switch from "." to "/" separators, don't forget to update your Sieve scripts (with fileinto). And sometimes also reconfiguration of the client is needed (e.g. NGImap4ConnectionStringSeparator in SOGo; and Kontact/KMail stopped working and I had to recreate the account in this client).

2 6

[Dovecot] Can't find sieve files
by Chris Kottaridis 23 Apr '14

23 Apr '14

I have been running dovecot on a Fedora 14 host for years and am moving up to Fedora 19. I have things setup to run as a generic user vmail and have all users mailboxes in /var/vmail which is owned by the vmail user. Each user has a Maildir directory and a sieve directory. I also changed sendmail's procmail to run dovecot so it delivers into /var/vmail/<user>/Maildir instead of /var/spool/mail. I just copied the /var/vmail directory from the old machine to the new machine and made all the files there owned by vmail that had the same uid. I then compared the /etc/dovecot/conf.d files and made changes to ty and match the previous configuration as much as possible. I can send mail to a local user and se it show up in the users INBOX. However, when I watch /var/log/maillog when I send the mail I see errors like this: --------------------- script /var/vmail//ckottari/sieve/Active.sieve;name=main script (view user logfile /var/vmail//ckottari/sieve/Active.sieve.log for more information) Apr 22 17:05:46 ckottari-dhcp1 dovecot: lda(ckottari): msgid=<201404222205.s3MM5jJs003128(a)ckottari-dhcp1.wrs.com>: saved mail to INBOX --------------------- When I look at Active.sieve.log: --------------------------------------------------- sieve: info: started log at Apr 22 17:05:46. main script: line 8: error: included personal script 'My RRs.sieve' does not exist. main script: line 9: error: included personal script 'RCPL.sieve' does not exist. main script: line 10: error: included personal script 'New_Incomplete Messages.sieve' does not exist. --------------------------------------------------- Basically, I get an error message for all my scripts that get included by the Active.sieve. The Active.sieve file and all the scripts exist in the /var/vmail/<user>/sieve directory and sieve_dir is set to ~/sieve. So, I am not sure why it can't find them if it can find Active.sieve. Below is my configuration output. This has been working for years in my Fedora 14 host without errors. But, there are some configuration differences that I just kind of guessed at. Any ideas on how to get sieve working would be appreciated. $ dovecot -n # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.13.5-101.fc19.x86_64 x86_64 Fedora release 19 (Schrödinger’s Cat) login_trusted_networks = 172.25.33.32/5 mail_location = maildir:~/Maildir:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = dovecot driver = pam } plugin { sieve = ~/sieve/Active.sieve sieve_dir = ~/sieve } protocols = imap sieve ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/vmail/%n driver = passwd } protocol lda { mail_plugins = " sieve" } Thanks Chris Kottaridis

2 2

[Dovecot] Sieve extprograms problem (broken pipe)
by Ron Guerin 23 Apr '14

23 Apr '14

I've been trying to pipe a message to an external script, and simplifying it as much as possible, I still get a broken pipe error. Can anyone point me in the right direction? X-Sieve: Pigeonhole Sieve 0.3.1 Using this script for debugging: -------------------------------- #!/bin/bash cat > /dev/null exit 0 server log contains: -------------------- Apr 21 19:45:18 generator dovecot: script: Error: write(response) failed: Broken pipe Apr 21 19:45:18 generator dovecot: lda(support(a)example.com): Error: sieve: execution of script /vmail/example.com/support//.dovecot. sieve failed, but implicit keep was successful (user logfile /vmail/example.com/support//.dovecot.sieve.log may reveal additional details) The logfile contains: --------------------- sieve: info: started log at Apr 21 20:13:50. error: msgid=<20140422001349.EA94C2A0CFD2(a)generator.vnetworx.net>: pipe action: failed to pipe message to program `sieve-pipe-supportticket': refer to server log for more information. [2014-04-21 20:13:50]. - Ron

2 1

[Dovecot] one way replication
by Pavel Stano 22 Apr '14

22 Apr '14

Hi, anyone using one way (or master/slave) replication instead of master/master ? There is no info in documentation but in sources (src/doveadm/dsync/doveadm-dsync.c) i found some flags which looks like for setting up master/slave switch (c) { case '1': ctx->oneway = TRUE; ctx->backup = TRUE; break; case 'R': ctx->reverse_backup = TRUE; break; So on master i add -1 : replication_dsync_parameters = -1 -d -n INBOX -l 30 -U and on slave -1 -R: replication_dsync_parameters = -1 -R -d -n INBOX -l 30 -U It looks it works, if i but question is if it is production ready. -- [ Ohodnotte kvalitu mailu: http://nicereply.com/websupport/Stano/ ] Pavel Stano | Troubleshooter http://WebSupport.sk *** BERTE A VYCHUTNAVAJTE ***

1 0

[Dovecot] dovecot-openssl.cnf - switch to 2048 bits?
by A M 22 Apr '14

22 Apr '14

Hello, Just had a query, from security point of view. Shouldn't dovecot-openssl.conf defaults now be 2048 bits? i.e. default_bits = 1024 I have read that 1024 bit certificates are now deprecated, since Dec 31, 2013. So may be we should have default as 2048 and can be changed manually if someone specifically wants 1024 or lower. Regards, A M

2 1

[Dovecot] "Reapplying" sieve rules
by Axel Luttgens 22 Apr '14

22 Apr '14

I did a mistake (shame on me). While migrating accounts on a new server, I didn't pay attention to a detail: sieve_max_actions, that I set to a low value for my testings, but then forgot to raise before the migration. As a result, several redirect-only accounts have now their inbox filled with messages that should have been redirected to "real people", then discarded. Would there be a nice way to "reapply" the sieve scripts, so that the messages of those mailboxes are redirected to their final recipients, the way they should have been upon arrival? Many thanks in advance, Axel

3 3

[Dovecot] FTS Lucene: Fatal: master: service(indexer-worker): child * killed with signal 6
by kfx 22 Apr '14

22 Apr '14

Hi List, Since we migrated from dovecot 1.2.4 to 2.2.12 with lucene as FTS engine, I have this in my error log: Apr 22 14:01:14 indexer-worker(username): Error: lucene index /var/vmail/username/lucene-indexes: IndexWriter() failed (#1): Lock obtain timed out Apr 22 14:01:14 indexer-worker: Error: indexer-worker [username(a)mydomain.com MailBox-1 - 20800/22707]: /home/anotherusername/newnew/clucene/src/core/CLucene/index/DocumentsWriter.cpp:210: std::string lucene::index::DocumentsWriter::closeDocStore(): Assertion `numDocsInStore*8 == directory->fileLength( (docStoreSegment + "." + IndexFileNames::FIELDS_INDEX_EXTENSION).c_str() )' failed. Apr 22 14:01:14 indexer: Error: Indexer worker disconnected, discarding 1 requests for username(a)mydomain.com Apr 22 14:01:14 indexer-worker(username(a)mydomain.com): Fatal: master: service(indexer-worker): child 31158 killed with signal 6 (core not dumped) Apr 22 14:01:16 imap(username): Error: indexer failed to index mailbox MailBox-2 Does that sound familiar to someone ? Thanks. # 2.2.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.11.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_cache_size = 10 M auth_debug = yes auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@* auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_client_limit = 2128 default_process_limit = 512 default_vsz_limit = 2 G hostname = mydomain.com info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot-error.log login_greeting = Welcome login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%Ln mail_plugins = fts fts_lucene quota stats mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = maildir:/var/vmail/%Ln mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /usr/local/etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent = 1000 fts_lucene = whitespace_chars=@ quota = maildir:User quota quota_rule = *:storage=20GB quota_rule2 = Trash:storage=+200M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = /var/sieve-scripts/%Ln.sieve sieve_dir = /var/vmail/%Ln/home/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 sieve sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0777 user = vmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 } user = dovecot } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service imap { process_limit = 1024 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = nobody } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/pki/tls/certs/mail.mydomain.com.pem ssl_key = </etc/pki/tls/private/mail.mydomain.com.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/vmail/%Ln/home } verbose_proctitle = yes protocol lda { mail_plugins = fts fts_lucene quota stats sieve virtual } protocol imap { mail_plugins = fts fts_lucene quota stats imap_quota virtual imap_stats }

1 0