October 2018 - dovecot

doveadm expunge with static users
by azurit＠pobox.sk 18 Oct '18

18 Oct '18

Hi, is it possible to use 'doveadm expunge' with static user database? Or can i, somehow, tell dovecot the directory location where i need to do an expunge? Thank you. azur

2 3

Ass(et) protection for mobile users
by Rupert Gallagher 18 Oct '18

18 Oct '18

Hello! Is it possible to hide the public folder when the user is on its mobile phone?

2 6

Problems recovering IMAP Data
by Albert Whale 18 Oct '18

18 Oct '18

HELP, I have experience an issue with the long running IMAP service using Dovecot 2.1.15. I have replaced the interface cards (suspected failure), and I have only recently been able to retrieve my Inbox (1.45GB) via POP3 protocol (I normally run IMAP) I am suspecting a corrupted dovecot.index, but which one? I have counted 260 files in my IMAP tree with the word dovecot. I cannot determine which folder is corrupted with 2.1.5 even with the Mail Debug option. How can I recover the use of my IMAP configuration? Thank you.

2 1

dovecot passdb driver=checkpassword as external script for block ip
by bes 18 Oct '18

18 Oct '18

Refer to https://dovecot.org/pipermail/dovecot/2015-March/099971.html https://wiki.dovecot.org/PasswordDatabase I tried to repeat the same thing. Set these passdb: passdb { args = /myscript.sh ip=%r driver = checkpassword result_failure = return-fail result_success = continue } passdb { args = /etc/dovecot/dovecot-sql.conf.ext ( my working auth method ) driver = sql } Created executable /myscript.sh: #!/bin/sh exit 1 But I saw in the logs: dovecot[15111]: auth: Error: checkpassword(techdept(a)nestormedia.com,192.168.99.128,<Mos6jW94XNzAqGOA>): Child 15115 exited with status 1 dovecot[18016]: imap-login: Login: user=....[successful login] Why result_failure=return-fail from first passdb does not work?

2 2

"Broken MIME parts for mail"
by Poliman - Serwis 18 Oct '18

18 Oct '18

I have many lines like below in error.log file: Oct 16 10:03:22 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: unlink(/var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache) failed: No such file or directory (in mail-cache.c:28) Oct 16 10:03:22 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: Corrupted index cache file /var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache: Broken MIME parts for mail UID 1019 in mailbox INBOX: Cached MIME parts don't match message during parsing: Cached header size mismatch (parts=) Oct 16 10:03:23 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: unlink(/var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache) failed: No such file or directory (in mail-cache.c:28) Oct 16 10:03:23 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: Corrupted index cache file /var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache: Broken MIME parts for mail UID 1052 in mailbox INBOX: Cached MIME parts don't match message during parsing: Cached header size mismatch (parts=) Oct 16 10:03:23 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: unlink(/var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache) failed: No such file or directory (in mail-cache.c:28) Oct 16 10:03:23 s1 dovecot: imap(artur(a)firmastanaszek.pl): Error: Corrupted index cache file /var/vmail/firmastanaszek.pl/artur/Maildir/dovecot.index.cache: Broken MIME parts for mail UID 1098 in mailbox INBOX: Cached MIME parts don't match message during parsing: Cached header size mismatch (parts=) I didn't do anything with Dovecot neither update in last time nor move files or something. Does anybody could tell me what above means and how to fix it?

1 0

Replication 'noreplicate' field usage
by Phil 17 Oct '18

17 Oct '18

I've set up replication as per the wiki under 2.3.3 and in my SQL user query I am returning a 'noreplicate' field, this is a boolean and returns true for all users at the moment. However when I do "doveadm replicator status '*'" it lists all users in my database suggesting it is trying to sync all users regardless of the noreplicate field. ``` user_query = SELECT home, uid, gid, noreplicate FROM users WHERE address = '%u' ``` It seems that the noreplicate field is being ignored, am I using it correctly?

1 0

: Re: Corrupted dbox file/index
by Raymond Sellars 16 Oct '18

16 Oct '18

>On Mon, Oct 15, 2018 at 08:50:21AM +0000, Raymond Sellars wrote: > > Hi > > Looking for some insight into mdbox index file management and recovery from corruptions. > What version of dovecot and what OS are you running? Is NFS linux/bsd/netapp/etc? [Raymond] Linux 2.6.32-279.19.1.el6.x86_64 Red Hat Enterprise Linux Server release 6.7 (Santiago) - its selectively patched a little higher than this. nfs-utils-1.2.3-64.el6.x86_64 nfs-utils-lib-1.1.5-11.el6.x86_64 NFS is provided by SAN array. Either Isilon SAN or VNX SAN. I believe the older Isilon with NFS. [Raymond Sellars] fstab: <ip removed>:/ mailshare-isi /mailshare nfs _netdev,noatime,vers=3,rsize=32768,wsize=32768,bg,intr,tcp 0 0 Thanks Raymond

1 0

Corrupted dbox file/index
by Raymond Sellars 15 Oct '18

15 Oct '18

Hi Looking for some insight into mdbox index file management and recovery from corruptions. I have a two node cluster on NFS with proxy director in front for user stickness. One node (a nominated master) bidirectionally replicates to a 3rd node on a DR site. We periodically get index file corruptions resulting in rebuilds. However the user experience is poor as messages read/deleted from months/years ago all reappear as unread again. We've seen corruption because of NFS NTP time sync problems, proxy not being stick, but also the DR node being off line for a while and then tripping corruption within production when it comes back on. Error message example (1 of): Error: Corrupted dbox file /mailshare/.. (removed) ../home/mail/storage/m.4 (around offset=993548): EOF reading msg header (got 0/30 bytes) https://wiki2.dovecot.org/MailboxFormat/dbox- i've read up on all the documentation I can find and understand " you must not lose the dbox index files, they can't be regenerated without data loss." Questions: #1 Any additional tips for avoiding mdbox index corruptions with dsync? Or should I revert to maildir format? I like the performance premise of the mdbox but these index corruptions are a reliability issue. #2 I'm guessing read status is one of the meta data items lost. But its seems it can't recover it from dovecot.index.backup files either. Any technique to preserve that item as its key to the user experience? #3 If index/transaction logs are so critical is there some kind of check point backups I can take? Native dovecot feature or do I need to script something. #4 I've noticed that rebuilding the index does not work if the dovecot.index.log file is lost (deleted as a hard test). The dovecot.index.cache can be but once the log file i gone messages are not automatically (or manually that i can find) recovered from the storage directory. I've not seen any dovecot.index.log file corruptions but that file seems very high risk. If rebuilding the index only from the log file or a combination process from storage directory? Is there perhaps an option to just use the transaction log and not the index? Although that doesn't sound wise for performance. #5 In additional to status UNREAD we also notice files moved to the trash reappear. Is that expected behavior? Thanks Raymond

2 1

Problems with qouta_clone plugin
by Christian Ejlertsen 15 Oct '18

15 Oct '18

Hello I'm having troubles getting the quota_clone plugin to work for me. iø, trying to put the quota values into to to fields, messages and usage_in_bytes, in the mysql database. The quotas are getting written to the maildirsize file and can be updated with the doveadm quota recalc -A or -u "*" command But i can't seem to get it to trigger the quota_clone plugin, not even an error or a warning.. At this point a crash would be preferred since it might yield some information :) It is probably something simple but apparantly i'm failing to see it :) Hope someone can help. ------------- dovecot --version 2.3.2.1 (0719df592) cat dovecot-quota-clone-sql.conf.ext connect = **** map { pattern = priv/quota/storage table = virtual_users value_field = usage_in_bytes username_field = email } map { pattern = priv/quota/messages table = virtual_users value_field = messages username_field = email } # 2.3.2.1 (0719df592): /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-862.11.6.el7.x86_64 x86_64 CentOS Linux release 7.5.1804 (Core) nfs4 # Hostname: imap01.ltmail.dk auth_debug = yes dict { lastlogin = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quotaclone = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } doveadm_password = # hidden, use -P to show it lock_method = dotlock login_trusted_networks = 192.168.100.11/32 192.168.100.16/32 mail_fsync = always mail_location = maildir:/storage/vmail/%d/%n mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota notify replication" mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { last_login_dict = proxy::lastlogin last_login_key = last-login/%u mail_replica = tcp:imapb01.litmail.dk:12345 quota = maildir:User quota quota_clone_dict = proxy::quotaclone quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO } protocols = imap replication_max_conns = 100 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = $default_internal_user } service config { unix_listener config { user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service doveadm { group = vmail inet_listener { port = 12345 } user = vmail } service imap-login { inet_listener imap { port = 143 } process_min_avail = 10 service_count = 0 } service quota-status { client_limit = 1 executable = /usr/libexec/dovecot/quota-status -p postfix inet_listener { port = 12340 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } service stats { unix_listener stats-writer { mode = 0600 user = vmail } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 1000 mail_plugins = " quota notify replication imap_quota last_login quota_clone" } protocol submission { mail_max_userip_connections = 1000 } -- Christian Ejlertsen

2 5

Sieve scripts not replicated
by Pascal 13 Oct '18

13 Oct '18

Hello, I use dovecot replication and the sieve scripts are not replicated. Mail replication is working fine. Log when sieve script (with Rainloop webmail) is created: Oct 12 12:57:57 srv1 dovecot: managesieve-login: Login: user=<hativ(a)example.com>, method=PLAIN, rip=91.67.174.186, lip=195.201.251.57, mpid=5360, TLS, session=<OXvK9QV4fOBbQ666> Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Loading modules from directory: /usr/local/lib/dovecot Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib10_mail_crypt_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib20_mail_log_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib20_quota_clone_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Module loaded: /usr/local/lib/dovecot/lib20_replication_plugin.so Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Added userdb setting: plugin/mail_crypt_private_password=<hidden> Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Added userdb setting: plugin/mail_crypt_save_version=0 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Effective uid=998, gid=998, home=/srv/mail/example.com/hativ Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Quota root: name= backend=count args= Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Quota rule: root= mailbox=* bytes=0 messages=0 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Quota grace: root= bytes=0 (10%) Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Namespace INBOX: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/ Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: fs: root=/srv/mail/example.com/hativ, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: owner = 1 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: Namespace Shared: type=shared, prefix=Shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:%h/:INDEXPVT=~/shares/%u Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl: owner = 0 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: Pigeonhole version 0.5.3 (f018bbab) initializing Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: Sieve Extprograms plugin for Pigeonhole version 0.5.3 (f018bbab) loaded Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: Sieve imapsieve plugin for Pigeonhole version 0.5.3 (f018bbab) loaded Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: Using active Sieve script path: /srv/mail/example.com/hativ/.dovecot.sieve Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: Using script storage path: /srv/mail/example.com/hativ/sieve Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: Using permissions from /srv/mail/example.com/hativ/sieve: mode=0700 gid=-1 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: Relative path to sieve storage in active link: sieve/ Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: sync: Synchronization active Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file storage: Using Sieve script path: /srv/mail/example.com/hativ/sieve/tmp/rainloop.user_1539341877.M470670P5360.srv1.sieve Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file script: Opened script `rainloop.user' from `/srv/mail/example.com/hativ/sieve/tmp/rainloop.user_1539341877.M470670P5360.srv1.sieve' Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: replication: Replication requested by 'sieve_storage_sync_transaction_begin', priority=1 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: sieve: file script: Opened script `rainloop.user' from `/srv/mail/example.com/hativ/sieve/rainloop.user.sieve' Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Debug: replication: Replication requested by 'sieve_storage_sync_transaction_begin', priority=1 Oct 12 12:57:57 srv1 dovecot: managesieve(hativ(a)example.com)<5360><OXvK9QV4fOBbQ666>: Disconnected: Logged out bytes=865/124 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: auth PASS input: user=hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com)<5361><>: Debug: auth USER input: hativ(a)example.com mail_crypt_private_password mail_crypt_save_version=0 quota_rule=*:bytes=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com)<5361><>: Debug: Added userdb setting: plugin/mail_crypt_private_password=<hidden> Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com)<5361><>: Debug: Added userdb setting: plugin/mail_crypt_save_version=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com)<5361><>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): auth PASS input: user=hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): auth USER input: hativ(a)example.com mail_crypt_private_password mail_crypt_save_version=0 quota_rule=*:bytes=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/mail_crypt_private_password=<hidden> Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/mail_crypt_save_version=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/quota_rule=*:bytes=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Effective uid=998, gid=998, home=/srv/mail/example.com/hativ Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota root: name= backend=count args= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota rule: root= mailbox=* bytes=0 messages=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota grace: root= bytes=0 (10%) Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Namespace INBOX: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/ Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): fs: root=/srv/mail/example.com/hativ, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: owner = 1 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Namespace Shared: type=shared, prefix=Shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:%h/:INDEXPVT=~/shares/%u Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: owner = 0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): quota: quota_over_flag check: quota_over_script unset - skipping Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Effective uid=998, gid=998, home=/srv/mail/example.com/hativ Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota root: name= backend=count args= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota rule: root= mailbox=* bytes=0 messages=0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota grace: root= bytes=0 (10%) Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace INBOX: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/ Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: fs: root=/srv/mail/example.com/hativ, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: owner = 1 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace Shared: type=shared, prefix=Shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:%h/:INDEXPVT=~/shares/%u Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: initializing backend with data: vfile Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: acl username = hativ(a)example.com Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: owner = 0 Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: Global ACLs disabled Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Archiv/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Templates/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Offen/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Trash/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Junk/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Sent/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Drafts/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace : Using permissions from /srv/mail/example.com/hativ: mode=0700 gid=default Oct 12 12:57:57 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace Shared/: Using permissions from : mode=0700 gid=default Oct 12 12:57:57 srv1 dovecot: dsync-local(hativ(a)example.com)<gHffIzV+wFvxFAAA69eCHA>: Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/INBOX/dbox-Mails/dovecot-acl not found According to the two lines "Debug: replication: Replication requested by 'sieve_storage_sync_transaction_begin', priority=1" it should work, but the sieve script doesn't show up on the second server. Then I try to change the script (disabling it), here the log: Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: auth PASS input: user=hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com)<5509><>: Debug: auth USER input: hativ(a)example.com mail_crypt_private_password mail_crypt_save_version=0 quota_rule=*:bytes=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com)<5509><>: Debug: Added userdb setting: plugin/mail_crypt_private_password=<hidden> Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com)<5509><>: Debug: Added userdb setting: plugin/mail_crypt_save_version=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com)<5509><>: Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): auth PASS input: user=hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): auth USER input: hativ(a)example.com mail_crypt_private_password mail_crypt_save_version=0 quota_rule=*:bytes=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/mail_crypt_private_password=<hidden> Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/mail_crypt_save_version=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Added userdb setting: plugin/quota_rule=*:bytes=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Effective uid=998, gid=998, home=/srv/mail/example.com/hativ Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota root: name= backend=count args= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota rule: root= mailbox=* bytes=0 messages=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Quota grace: root= bytes=0 (10%) Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Namespace INBOX: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/ Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): fs: root=/srv/mail/example.com/hativ, index=, indexpvt=, control=, inbox=, alt= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: initializing backend with data: vfile Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: acl username = hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: owner = 1 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl vfile: Global ACLs disabled Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): Namespace Shared: type=shared, prefix=Shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:%h/:INDEXPVT=~/shares/%u Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: initializing backend with data: vfile Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: acl username = hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl: owner = 0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): acl vfile: Global ACLs disabled Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: remote(mail2.example.com): quota: quota_over_flag check: quota_over_script unset - skipping Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Effective uid=998, gid=998, home=/srv/mail/example.com/hativ Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota root: name= backend=count args= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota rule: root= mailbox=* bytes=0 messages=0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Quota grace: root= bytes=0 (10%) Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace INBOX: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/ Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: fs: root=/srv/mail/example.com/hativ, index=, indexpvt=, control=, inbox=, alt= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: initializing backend with data: vfile Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: acl username = hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: owner = 1 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: Global ACLs disabled Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace Shared: type=shared, prefix=Shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=yes location=sdbox:%h/:INDEXPVT=~/shares/%u Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: initializing backend with data: vfile Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: acl username = hativ(a)example.com Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl: owner = 0 Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: Global ACLs disabled Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: quota: quota_over_flag check: quota_over_script unset - skipping Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Archiv/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Templates/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Offen/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Trash/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Junk/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Sent/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/Drafts/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace : Using permissions from /srv/mail/example.com/hativ: mode=0700 gid=default Oct 12 13:03:59 srv1 dovecot: doveadm(hativ(a)example.com): Debug: Namespace Shared/: Using permissions from : mode=0700 gid=default Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: acl vfile: file /srv/mail/example.com/hativ/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: Pigeonhole version 0.5.3 (f018bbab) initializing Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: Sieve Extprograms plugin for Pigeonhole version 0.5.3 (f018bbab) loaded Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: Sieve imapsieve plugin for Pigeonhole version 0.5.3 (f018bbab) loaded Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: file storage: Using active Sieve script path: /srv/mail/example.com/hativ/.dovecot.sieve Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: file storage: Using script storage path: /srv/mail/example.com/hativ/sieve Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: file storage: Using permissions from /srv/mail/example.com/hativ/sieve: mode=0700 gid=-1 Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: file storage: Relative path to sieve storage in active link: sieve/ Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: sieve: file storage: sync: Synchronization active Oct 12 13:03:59 srv1 dovecot: dsync-local(hativ(a)example.com)<aS7nDJ9/wFuFFQAA69eCHA>: Debug: doveadm-sieve: Value missing for key `vendor/vendor.dovecot/pvt/server/sieve/default' (last change: 2018-10-12 13:03:59) Maybe the line "Debug: doveadm-sieve: Value missing for key `vendor/vendor.dovecot/pvt/server/sieve/default' (last change: 2018-10-12 13:03:59)" gives an hint? root@srv1 ~ # doveadm replicator dsync-status username type status root@srv2 ~ # doveadm replicator dsync-status username type status root@srv1 ~ # doveadm replicator status Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 0 Queued 'failed' requests 0 Queued 'full resync' requests 0 Waiting 'failed' requests 0 Total number of known users 5 root@srv2 ~ # doveadm replicator status Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 0 Queued 'failed' requests 0 Queued 'full resync' requests 0 Waiting 'failed' requests 0 Total number of known users 5 root@srv1 ~ # doveadm sieve list -u hativ(a)example.com rainloop.user root@srv2 ~ # doveadm sieve list -u hativ(a)example.com Relevant configuration: service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = $mail_uid } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = $mail_uid } } plugin { # Replication mail_replica = tcps:mail2.example.com # Sieve imapsieve_mailbox1_name = Junk imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_before = file:/etc/dovecot/sieve/report-spam.sieve imapsieve_mailbox2_name = * imapsieve_mailbox2_from = Junk imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/etc/dovecot/sieve/report-ham.sieve sieve = file:~/sieve;active=~/.dovecot.sieve sieve_after = /etc/dovecot/sieve-after sieve_before = /etc/dovecot/sieve-before sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin/ sieve_plugins = sieve_extprograms sieve_imapsieve } Greetings Pascal

3 2