July 2018 - dovecot - dovecot.org

LMTP crashing heavily for my 2.2.36 installation
by Wolfgang Rosenauer 11 Jul '18

11 Jul '18

Hi, I'm running 2.2.36 (as provided by openSUSE in their server:mail repository) and at least at one of my systems LMTP is crashing regularly on certain messages (apparently a lot of them). Sometimes (but not always a backtrace is posted to the logs: 2018-07-11T07:34:56.741848+02:00 saruman dovecot: lmtp(14690): Fatal: master: service(lmtp): child 14690 killed with signal 11 (core dumps disabled) 2018-07-11T07:34:56.820474+02:00 saruman dovecot: lmtp(an007498): Panic: file imap-bodystructure.c: line 116 (part_write_body_multipart): assertion failed: (p art->data != NULL) 2018-07-11T07:34:56.821410+02:00 saruman dovecot: lmtp(an007498): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xa0eb0) [0x7ff54949ceb0] -> /usr/ lib64/dovecot/libdovecot.so.0(+0xa0f8e) [0x7ff54949cf8e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7ff549430f46] -> /usr/lib64/dovecot/libdovecot.so .0(imap_bodystructure_write+0x3b1) [0x7ff5494753b1] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb8ff5) [0x7ff5497e9ff5] -> /usr/lib64/dovecot/libdovecot- storage.so.0(+0xbbbdc) [0x7ff5497ecbdc] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_get_special+0x20d) [0x7ff5497ed05d] -> /usr/lib64/dovecot/lib dovecot-storage.so.0(mail_get_special+0xd) [0x7ff54977325d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_set_attachment_keywords+0x162) [0x7ff549773662] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb9995) [0x7ff5497ea995] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb9d6b) [0x7ff5497ead6b] -> /usr/lib 64/dovecot/libdovecot-storage.so.0(index_mail_get_parts+0x60) [0x7ff5497ec850] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_parts+0x23) [0x7ff549772 cb3] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(+0x2ed1e) [0x7ff544fefd1e] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(sieve_message_body_get_text+0x33) [0x7 ff544ff1283] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(ext_body_get_part_list+0x47) [0x7ff545024ec7] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(+0x64612) [ 0x7ff545025612] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(sieve_interpreter_continue+0x6c) [0x7ff545002e4c] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(siev e_interpreter_run+0x2b) [0x7ff54500309b] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(+0x543e2) [0x7ff5450153e2] -> /usr/lib64/dovecot/libdovecot-sieve.so.0(si eve_multiscript_run+0x38) [0x7ff545016018] -> /usr/lib64/dovecot/modules/lib90_sieve_plugin.so(+0x36a7) [0x7ff54527e6a7] -> /usr/lib64/dovecot/libdovecot-lda. so.0(mail_deliver+0xa2) [0x7ff549a81eb2] -> dovecot/lmtp(+0x79ca) [0x5574fc4519ca] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7ff5494b1fd2 ] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xe7) [0x7ff5494b3577] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0 x7ff5494b206c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7ff5494b2228] Any idea? thanks, Wolfgang

3 5

Dovecot API for Email Archive
by Nduduzo Phili 11 Jul '18

11 Jul '18

Good day, Is there a Dovecot API for version 2.2.15 and/or above that can be used to archive to Microsoft Archive Storage OR, Is there another tool or cloud archive platform you are aware of that could assist with this? Thank you. [cid:image001.png@01D41918.B96DB030] Nduduzo Phili Product Manager ______________________________________ D: 087 805 1146 | M: A: nduduzo.phili(a)voxtelecom.co.za www.vox.co.za

1 0

Re: Make fails with 2.3.0.1 & 2.2.34 on Mac OS X 10.7.5
by James Brown 11 Jul '18

11 Jul '18

> On 2 Mar 2018, at 6:11 pm, James Brown <jlbrown(a)bordo.com.au> wrote: > > > >> On 2 Mar 2018, at 5:59 pm, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: >> >> >> We have attempted to compile our code with OpenSSL 1.0, 1.0.2 and 1.1.0, but I'll try the specific releases too. >> >> Can you try this patch? >> >> diff --git a/src/lib-dcrypt/dcrypt-openssl.c b/src/lib-dcrypt/dcrypt-openssl.c >> index 26c9b91..187bb75 100644 >> --- a/src/lib-dcrypt/dcrypt-openssl.c >> +++ b/src/lib-dcrypt/dcrypt-openssl.c >> @@ -9,17 +9,17 @@ >> #include "array.h" >> #include "module-dir.h" >> #include "dovecot-openssl-common.h" >> -#include <openssl/evp.h> >> -#include <openssl/sha.h> >> -#include <openssl/err.h> >> -#include <openssl/rsa.h> >> -#include <openssl/ec.h> >> -#include <openssl/bio.h> >> -#include <openssl/pem.h> >> -#include <openssl/x509.h> >> -#include <openssl/engine.h> >> -#include <openssl/hmac.h> >> -#include <openssl/objects.h> >> +#include "openssl/evp.h" >> +#include "openssl/sha.h" >> +#include "openssl/err.h" >> +#include "openssl/rsa.h" >> +#include "openssl/ec.h" >> +#include "openssl/bio.h" >> +#include "openssl/pem.h" >> +#include "openssl/x509.h" >> +#include "openssl/engine.h" >> +#include "openssl/hmac.h" >> +#include "openssl/objects.h" >> #include "dcrypt.h" >> #include "dcrypt-private.h" >> >> And if it does not work, add after the includes >> >> #pragma message("OpenSSL version is " OPENSSL_VERSION_TEXT) >> #error See above >> >> And provide output? >> >> Aki Hi Aki, Change src/lib-dcrypt/dcrypt-openssl.c start to: /* Copyright (c) 2016-2017 Dovecot authors, see the included COPYING file */ #include "lib.h" #include "buffer.h" #include "str.h" #include "hex-binary.h" #include "safe-memset.h" #include "randgen.h" #include "array.h" #include "module-dir.h" #include "dovecot-openssl-common.h" #include "openssl/evp.h" #include "openssl/sha.h" #include "openssl/err.h" #include "openssl/rsa.h" #include "openssl/ec.h" #include "openssl/bio.h" #include "openssl/pem.h" #include "openssl/x509.h" #include "openssl/engine.h" #include "openssl/hmac.h" #include "openssl/objects.h" #include "dcrypt.h" #include "dcrypt-private.h" #pragma message("OpenSSL version is " OPENSSL_VERSION_TEXT) #error See above /** Ie changed the < and > to double quotes. Ran make clean, then ./configure and but it still fails. :-( dcrypt-openssl.c:25: warning: ignoring #pragma message dcrypt-openssl.c:26:2: error: #error See above dcrypt-openssl.c:118: error: field 'ctx' has incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ctx_hmac_destroy': dcrypt-openssl.c:452: warning: implicit declaration of function 'HMAC_cleanup' dcrypt-openssl.c: In function 'dcrypt_openssl_generate_ec_key': dcrypt-openssl.c:556: error: dereferencing pointer to incomplete type dcrypt-openssl.c:557: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_local': dcrypt-openssl.c:589: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_ecdh_derive_secret_peer': dcrypt-openssl.c:669: error: dereferencing pointer to incomplete type dcrypt-openssl.c:698: error: dereferencing pointer to incomplete type dcrypt-openssl.c:699: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_private_key_dovecot': dcrypt-openssl.c:1462: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1483: error: dereferencing pointer to incomplete type dcrypt-openssl.c:1490: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_load_private_key': dcrypt-openssl.c:1616: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_store_public_key': dcrypt-openssl.c:1766: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_to_public_key': dcrypt-openssl.c:1802: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_name2oid': dcrypt-openssl.c:2063: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_old': dcrypt-openssl.c:2113: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_private_key_id_old': dcrypt-openssl.c:2136: error: dereferencing pointer to incomplete type dcrypt-openssl.c: In function 'dcrypt_openssl_public_key_id_evp': dcrypt-openssl.c:2154: error: dereferencing pointer to incomplete type make[3]: *** [libdcrypt_openssl_la-dcrypt-openssl.lo] Error 1 make[2]: *** [all-recursive] Error 1 make[1]: *** [all-recursive] Error 1 make: *** [all] Error 2 Thanks for your help. James.

1 1

Remove authentication penalty for webmailer
by Andreas Meyer 11 Jul '18

11 Jul '18

Hi all, I want to remove the authentication penalty for specific ip addresses (subnets if possible). I am using Dovecot 2.3.2 (582970113) and figured that this information: https://wiki2.dovecot.org/Authentication/Penalty > If the IP is in login_trusted_networks (e.g. webmail), skip any authentication penalties is not up to date. Instead this information is: https://wiki2.dovecot.org/Upgrading/2.3 --- START --- *Localhost Auth Penalty* Dovecot no longer disables auth penalty waits for clients connecting from localhost (or login_trusted_networks in general). The previous idea was that it would likely be a webmail that would have its own delays, but there are no guarantees about this. If the old behavior is still wanted, it's possible to do nowadays even more generically with e.g.: passdb { driver = passwd-file args = username_format=%{rip} /etc/dovecot/passdb } /etc/dovecot/passdb: 127.0.0.1:::::::nodelay=yes 192.168.10.124:::::::nodelay=yes --- STOP --- Adding the passdb section and creating a passdb file with the respective ip addresses does not have any effect though. Login failures through the webmailer are still being delayed. "dovecot -n" shows that the new passdb section is loaded: --- START --- passdb { args = username_format=%{rip} /etc/dovecot/passdb driver = passwd-file } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } --- STOP --- Changing orders does not make a difference. The passdb file contains these entries: --- START --- 127.0.0.1:::::::nodelay=yes 10.25.1.20:::::::nodelay=yes --- STOP --- The logfile shows the increased delay: --- START --- Jul 10 23:37:16 9fcdf83ee81e dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<xxx(a)yyy.zzz>, method=PLAIN, rip=10.25.1.20, lip=10.25.1.10, TLS, TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bit s) Jul 10 23:37:25 9fcdf83ee81e dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xxx(a)yyy.zzz>, method=PLAIN, rip=10.25.1.20, lip=10.25.1.10, TLS, TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bit s) --- STOP --- What am I missing?

1 0

Sieve-filter and default postmaster_address -> error?
by Larry Rosenman 11 Jul '18

11 Jul '18

I wanted to re-filter my inbox after adding some filters for my DMARC reports. When I didn’t have postmaster_address in my 15-lda.conf, I got an error from sieve-filter that it was invalid (postmaster@). I added the setting (postmaster_address = ler(a)lerctr.org<mailto:ler@lerctr.org>), and the error went away. Is this expected? Dovecot 2.3.2 Pigeonhole 0.5.2 thebighonker.lerctr.org /home/ler $ pkg info | grep dovecot dovecot-2.3.2 Secure, fast and powerful IMAP and POP3 server dovecot-pigeonhole-0.5.2_2 Sieve plugin for the Dovecot 'deliver' LDA and LMTP thebighonker.lerctr.org /home/ler $ -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106

2 2

Dovecot on CentOS 7
by John Rowan 10 Jul '18

10 Jul '18

I guess I've been lucky. My Red Hat server I built in 2003 finally gave up the ghost yesterday. Fifteen years with almost zero problems running 7x24. Now I'm trying to build a basic server to host my e-mail using CentOS 7, Sendmail and Dovecot. Server is running great as are Sendmail and Dovecot but Dovecot only allows connections from the CentOS 127.0.0.1. I can telnet localhost pop3 and get a +OK Dovecot ready response. Trying to telnet from a different computer on same LAN times out. I've looked at my old Dovecot config files to see how I enabled LAN IP access but the configs have changed a lot since I last installed Dovecot. Googling hasn't helped. Anyone help with a sample config with LAN IPs permitted?

5 4

v2.3.2.1 released
by Timo Sirainen 10 Jul '18

10 Jul '18

https://dovecot.org/releases/2.3/dovecot-2.3.2.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.2.1.tar.gz.sig v2.3.2 still had a few unexpected bugs: - SSL/TLS servers may have crashed during client disconnection - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have sometimes assert-crashed. - v2.3.2: "make check" may have crashed with 32bit systems

2 3

Authentication failure with OpenLDAP
by Anushka Bandara 10 Jul '18

10 Jul '18

Hi all, *Dovecot version: 2.2.22 (fe789d2)* *Ubuntu version: 16.04* *OpenLDAP version: openldap-2.4.42+dfsg* Configurations *# 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf# Pigeonhole version 0.4.13 (7b14904)# OS: Linux 4.10.0-28-generic x86_64 Ubuntu 16.04.3 LTS disable_plaintext_auth = nolisten = *log_path = /var/log/dovecot.logmail_location = maildir:~/Maildirnamespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = }passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap}protocols = pop3 imapservice auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 }}ssl = nouserdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap}* I am having "*Authentication failed" *problem with dovecot-ldap. Before it, I had binding error and I fixed it. Now I am having authentication problem when I am trying to log dovecot (usign telnet localhost 110) using a user which is created in ldap server. I can provide any configuration file and I did this configurations according to this " https://help.ubuntu.com/community/DovecotLDAP". Now I am having an authentication error. Thank you

2 1

slow mailbox refreshes
by Fabian A. Santiago 09 Jul '18

09 Jul '18

Hello, I am using dovecot 2.3.2 on my private email server in conjunction with: centos 7.5 apache 2.4.6 mariadb 10.2.16 roundcube mail 1.3.6 php 5.6.36 postfix 2.10.1 I have one mailbox with nearly 30k messages in it dispersed across several folders. it's often very slow in refreshing the message list, especially in the one largest 25k+ message folder. is this simply to be expected based on my message count or is there some kind of performance optimization and tuning i can do to improve the response times? The mail server itself is a linode hosted VPS: intel xeon e5-2680 v2 @ 2.80 GHz, 4 cores 8 GB real memory 2 GB virtual memory 200 GB local storage (ext4) KVM hypervisor Thanks everyone for any guidance you can offer. -- Fabian S. OpenPGP: 0x643082042DC83E6D94B86C405E3DAA18A1C22D8F (new key) *** 0x3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC (to be retired, still valid)

2 1

New error message with Dovecot/Pigeonhole
by Jerry 08 Jul '18

08 Jul '18

FreeBSD 11.1 / amd64 dovecot --version 2.3.2 (582970113) Pigeonhole version 0.5.2 (7704de5e) I have run 'sieve-test" many times to check out changes in my "sieve" scripts. This morning, it suddenly started issuing this error message: sieve-test(root): Fatal: Couldn't drop privileges: User is missing UID (see mail_uid setting) I am not sure what is wrong or how to correct it, since it never happened before. -- Jerry "Ainsi sera, groigne qui groigne"

3 2