July 2020 - dovecot - dovecot.org

Multiple authentication instances (GSSAPI _or_ Client Certificate)
by Joakim Ekblad 27 Jul '20

27 Jul '20

Hi there, I am trying to make a paranoid IMAPS/Submission server. I'm running Ubuntu 20.04 with Dovecot 2.3.7.2 (3c910f64b). I mostly use my mail-server from the LAN/Realm where I have GSSAPI working well for both IMAPS and Submission and most other services But... I would like to be able to configure Dovecot to require mobile ("external") devices to authenticate using client certificates (with different SSL cert superset) instead of 'plain' fallback (if there is no valid Kerberos token/infrastructure). I have one SSL-certificate for the LAN-solution, but would like to have my self-signed PKI-stuff for the other solution where client certificates are used to authenticate. So. First of all. Is this a possible scenario? I'm struggling with the configuration and it seems Dovecot-configs are not accepting different authentication methods for different local listeners for different IPs etc. The only way i can think of getting this up and running is having two separate Dovecot instances (somehow) listening to different ports or even on different server hosts. What would be neat is if it would be possible to have like: auth_mechanisms = gssapi ssl :D But i know that's not how things work. I hope I'm not too unspecific. Is there any other clever ideas on how to get this use-case configured with the current version of Dovecot? I am thinking i _might_ be able to do something with stunnel to terminate the PKI authentication and still require normal plain user authentication with login/pass to get the extra security. But it does not feel clean enough. All good ideas are welcome! Stay safe! Kind regards, Joakim Ekblad

1 0

To field was not correct indexed by FTS
by TACHIBANA Masashi 27 Jul '20

27 Jul '20

Hi, This To field was not correct indexed by FTS. To: Yamada Taro <yamada(a)example.com>,=?UTF-8?B?dXNlcjJAZXhhbXBsZS5jb20=?= <user2(a)example.com>, =?UTF-8?B?dXNlcjNAZXhhbXBsZS5jb20=?= <user3(a)example.com>, user4 desu <user4(a)example.com> --> Yamada Taro <yamada(a)example.com> , user2(a)example.com And follow was correct indexed by FTS To: Yamada Taro <yamada(a)example.com>,"user2(a)example.com" <user2(a)example.com>, "user3(a)example.com" <user3(a)example.com>, user4 desu <user4(a)example.com> --> Yamada Taro <yamada(a)example.com> , user2(a)example.com <user2(a)example.com> , user3(a)example.com <user3(a)example.com> , user4 desu <user4(a)example.com> Any hint? -- TACHIBANA Masashi QUALITIA CO., LTD. mailto:tachibana@qualitia.co.jp 株式会社クオリティア https://www.qualitia.co.jp/

2 6

Dovecot serving incorrect certificate
by Antonio Leding 25 Jul '20

25 Jul '20

Hello all, I have a Dovecot (v2.3.10.1) + Postfix (v3.5.3) both cfg; d to use TLS however each using different certificates. In addition, I have cfg’d a DNS CNAME that points to the server A record. For example, mail.example.com (A) —> 1.2.3.4 alias.example.con (CNAME) —> mail.example.com When setting up a new account in Apple Mail, if I specify the server name as the “Host Name” (i.e. mil server), the cert that is cfg’d in Dovecot is received and everything works fine. However, if I instead use the alias CNAME as the “Host Name”, then the cert for Postfix is sent to the client. This causes issues because I do not have the CNAME in the SAN of the Postfix certificate. I doubt this is a bug because I have to think others have employed a similar configuration so I must be missing something here — any thoughts? Thanks in advance...

2 4

(re-) dsync: INBOX Can't be deleted
by PGNet Dev 24 Jul '20

24 Jul '20

with dovecot --version 2.3.10.1 (a3d0e1171) exec of doveadm -v -o mail_fsync=never backup -R -f -u testuser(a)example.com imapc: currently fails, here, with Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted checking lists, this has been seen before @ https://dovecot.org/pipermail/dovecot/2016-January/102988.html On 24 Jan 2016, at 18:47, Timo Sirainen <tss at iki.fi> wrote: > During Migration with dsync I get these Errors: > Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted > Is there a way to work around these Errors ? With "doveadm backup" you have gotten into such a state that the INBOX needs to be deleted and recreated to preserve it exactly as it's in source. But you're using Maildir format, which doesn't allow deleting INBOX. So possibilities: a) Don't use Maildir format b) Delete the entire Maildir manually with rm -rf and the next doveadm backup should work (if not then something strange is going on) per "b)", i explicitly 'rm' the Maildir rm -rf /data/vmail/example.com/testuser/Maildir tree /data/vmail/example.com/testuser/Maildir /data/vmail/example.com/testuser/Maildir [error opening dir] on re-exec, the backup still fails dsync(testuser(a)example.com): Info: imapc(mx.example.com:993): Connected to 10.1.0.20:993 (local 10.1.0.114:42926) dsync(testuser(a)example.com): Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted. where tree /data/vmail/example.com/testuser/Maildir /data/vmail/example.com/testuser/Maildir ├── cur ├── new ├── sieve │ └── tmp └── tmp and log detail, Debug: Loading modules from directory: /usr/lib64/dovecot Debug: Module loaded: /usr/lib64/dovecot/lib20_virtual_plugin.so Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(testuser(a)example.com)<>: Debug: auth-master: userdb lookup(testuser(a)example.com): Started userdb lookup doveadm(testuser(a)example.com)<>: Debug: auth-master: conn unix:/run/dovecot/auth-userdb: Connecting doveadm(testuser(a)example.com)<>: Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=25419,uid=0): Client connected (fd=10) doveadm(testuser(a)example.com)<>: Debug: auth-master: userdb lookup(testuser(a)example.com): auth USER input: testuser(a)example.com uid=5000 gid=5000 home=/data/vmail/example.com/testuser/Maildir doveadm(testuser(a)example.com)<>: Debug: auth-master: userdb lookup(testuser(a)example.com): Finished userdb lookup (username=testuser(a)example.com uid=5000 gid=5000 home=/data/vmail/example.com/testuser/Maildir) doveadm(testuser(a)example.com): Debug: Effective uid=5000, gid=5000, home=/data/vmail/example.com/testuser/Maildir doveadm(testuser(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/data/vmail/example.com/testuser/Maildir:CONTROL=/data/vma… doveadm(testuser(a)example.com): Debug: fs: root=/data/vmail/example.com/testuser/Maildir, index=/var/vmail-index/example.com/testuser, indexpvt=, control=/data/vmail/example.com/testuser/_control, inbox=/data/vmail/example.com/testuser/Maildir, alt= doveadm(testuser(a)example.com): Debug: Namespace shared: type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/data/vmail/example.com/testuser/Maildir:INDEXPVT=/var/vma… doveadm(testuser(a)example.com): Debug: shared: root=/run/dovecot/, index=, indexpvt=, control=, inbox=, alt= doveadm(testuser(a)example.com): Debug: Namespace virtual: type=private, prefix=virtual/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=virtual:/data/vmail/virtual:INDEX=MEMORY doveadm(testuser(a)example.com): Debug: fs: root=/data/vmail/virtual, index=, indexpvt=, control=, inbox=, alt= doveadm(testuser(a)example.com): Debug: brain M: Namespace has location maildir:/data/vmail/example.com/testuser/Maildir:CONTROL=/data/vmail/exampl… doveadm(testuser(a)example.com): Debug: Namespace : Using permissions from /data/vmail/example.com/testuser/Maildir: mode=0700 gid=default dsync(testuser(a)example.com): Debug: Effective uid=5000, gid=5000, home=/data/vmail/example.com/testuser/Maildir dsync(testuser(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Created new connection dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Looking up IP address (reconnect_ok=true, last_connect=1595599741) dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Connecting to 10.1.0.20:993 dsync(testuser(a)example.com): Info: imapc(mx.example.com:993): Connected to 10.1.0.20:993 (local 10.1.0.114:42924) dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Starting SSL handshake dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): SSL handshake successful dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Server capabilities: IMAP4rev1 AUTH=PLAIN ACL BINARY CATENATE CHILDREN CONDSTORE ENABLE ESEARCH ESORT I18NLEVEL=1 ID IDLE LIST-EXTENDED LIST-STATUS LITERAL+ LOGIN-REFERRALS MULTIAPPEND NAMESPACE QRESYNC QUOTA RIGHTS=ektx SASL-IR SEARCHRES SORT THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN XLIST dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Authenticating as testuser(a)example.com dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Server capabilities: IMAP4rev1 ACL BINARY CATENATE CHILDREN CONDSTORE ENABLE ESEARCH ESORT I18NLEVEL=1 ID IDLE LIST-EXTENDED LIST-STATUS LITERAL+ LOGIN-REFERRALS MULTIAPPEND NAMESPACE QRESYNC QUOTA RIGHTS=ektx SASL-IR SEARCHRES SORT THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN XLIST dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Authenticated successfully dsync(testuser(a)example.com): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(testuser(a)example.com): Debug: Namespace shared: type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/data/vmail/example.com/testuser/Maildir:INDEXPVT=/var/vma… dsync(testuser(a)example.com): Debug: shared: root=/run/dovecot/, index=, indexpvt=, control=, inbox=, alt= dsync(testuser(a)example.com): Debug: Namespace virtual: type=private, prefix=virtual/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=virtual:/data/vmail/virtual:INDEX=MEMORY dsync(testuser(a)example.com): Debug: fs: root=/data/vmail/virtual, index=, indexpvt=, control=, inbox=, alt= dsync(testuser(a)example.com): Debug: brain S: Namespace has location imapc: dsync(testuser(a)example.com): Debug: brain M: Local mailbox tree: Sent guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595535189 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1 uid_next=89207 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Local mailbox tree: Drafts guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595535189 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: Templates guid=d9f092123a43acb205a6869342cf9dd6 uid_validity=126054 uid_next=22295 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Local mailbox tree: Trash guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595534293 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: Sent guid=bfb2e03fdce327671e82bf173b1ccb8b uid_validity=1 uid_next=89068 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Local mailbox tree: INBOX guid=6f51443ad5eb195f9f4400005439fba4 uid_validity=1595534294 uid_next=1 subs=no last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Local mailbox tree: Junk guid=6e51443ad5eb195f9f4400005439fba4 uid_validity=1595534293 uid_next=1 subs=yes last_change=0 last_subs=1595534293 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: Junk guid=87680557f26fcb26843f739f7427e8c4 uid_validity=1 uid_next=88649 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1 uid_next=89209 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: Trash guid=7f5af7ba291b2df1a11d573bdb55d7e9 uid_validity=1 uid_next=89207 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: Templates guid=d9f092123a43acb205a6869342cf9dd6 uid_validity=126054 uid_next=22295 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: Sent guid=bfb2e03fdce327671e82bf173b1ccb8b uid_validity=1 uid_next=89068 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: Junk guid=87680557f26fcb26843f739f7427e8c4 uid_validity=1 uid_next=88649 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: INBOX guid=c92f64f79f0d1ed01e6d5b314f04886c uid_validity=1 uid_next=89209 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain S: Local mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1 uid_next=88914 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Remote mailbox tree: Drafts guid=e0187b65e763143666d22094cedfe6a4 uid_validity=1 uid_next=88914 subs=yes last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain M: Mailbox Drafts: local=00000000000000000000000000000000/0/2, remote=e0187b65e763143666d22094cedfe6a4/0/1: mailbox not selectable yet dsync(testuser(a)example.com): Debug: brain M: Mailbox INBOX: local=6f51443ad5eb195f9f4400005439fba4/0/1, remote=c92f64f79f0d1ed01e6d5b314f04886c/0/1: GUIDs conflict - will be merged later dsync(testuser(a)example.com): Debug: brain M: Mailbox Junk: local=6e51443ad5eb195f9f4400005439fba4/0/1, remote=87680557f26fcb26843f739f7427e8c4/0/1: GUIDs conflict - will be merged later dsync(testuser(a)example.com): Debug: brain M: Mailbox Sent: local=00000000000000000000000000000000/0/0, remote=bfb2e03fdce327671e82bf173b1ccb8b/0/1: mailbox not selectable yet dsync(testuser(a)example.com): Debug: brain M: Mailbox Templates: local=00000000000000000000000000000000/0/0, remote=d9f092123a43acb205a6869342cf9dd6/0/1: mailbox not selectable yet dsync(testuser(a)example.com): Debug: brain M: Mailbox Trash: local=00000000000000000000000000000000/0/0, remote=7f5af7ba291b2df1a11d573bdb55d7e9/0/1: mailbox not selectable yet dsync(testuser(a)example.com): Debug: brain M: Deleting mailbox 'INBOX' (GUID 6f51443ad5eb195f9f4400005439fba4): UIDVALIDITY changed (1 -> 1595534294) dsync(testuser(a)example.com): Debug: brain M: Deleting mailbox 'Junk' (GUID 6e51443ad5eb195f9f4400005439fba4): UIDVALIDITY changed (1 -> 1595534293) dsync(testuser(a)example.com): Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted. dsync(testuser(a)example.com): Debug: brain S: Remote mailbox tree: Sent guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595535189 dsync(testuser(a)example.com): Debug: brain S: Remote mailbox tree: Drafts guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595535189 dsync(testuser(a)example.com): Debug: brain S: Remote mailbox tree: Trash guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=yes last_change=0 last_subs=1595534293 dsync(testuser(a)example.com): Debug: brain S: Remote mailbox tree: INBOX guid=6f51443ad5eb195f9f4400005439fba4 uid_validity=1595534294 uid_next=1 subs=no last_change=0 last_subs=0 dsync(testuser(a)example.com): Debug: brain S: Remote mailbox tree: Junk guid=6e51443ad5eb195f9f4400005439fba4 uid_validity=1595534293 uid_next=1 subs=yes last_change=0 last_subs=1595534293 dsync(testuser(a)example.com): Debug: imapc(mx.example.com:993): Disconnected dsync(testuser(a)example.com): Debug: auth-master: conn unix:/run/dovecot/auth-userdb (pid=25419,uid=0): Disconnected: Connection closed (fd=10) given the error again on "next doveadm backup", it indeed appears "something strange is going on" ... hints/suggestions as to what?

1 1

Mailbox sharing, user to user in same domain, OK! User to user sharing in separate domains, problem. ( ... and more oh boy!)
by Andreas T (DC) 22 Jul '20

22 Jul '20

Dovecot -n and version present at the bottom of the email for legibility. System is a Debian 10 + Virtualmin hosting setup for my domains ------------------------------------------------------------------- Hello everyone, my first post. Sorry for the long and confusing post, I'm pretty new to dovecot other than basic functionality. I recently in the last week went through the documentation for both shared (user to user) and public mailboxes and got them both working. Took me a bit but eventually I figured it out, but I am still encountering some stubborn scenarios. I am having some issues with 2 types of sharing. ( I believe problem A + B are related as the error is similarly permission based error) For inconsistencies in the user account names, user(a)domain.com vs user-domain.com please see issue C, which my workaround is functional. A.) Sharing user to user between in the same domain works fine. Sharing user to user in different domains gives me some permission errors. Permissions have been granted (to (using Linux ACL for more fine grained permissions) as far as I can tell. Trying to share the info "INBOX" (fullshare, same issue for single boxes as well) from the info(a)primarydomain.com to user(a)externaldomain.com from info(a)primarydomain.com Mailder cat dovecot-acl user=user-externaldomain.com akxeilprwts getfacl dovecot-acl # file: dovecot-acl # owner: info(a)primarydomain.com # group: primarydomain.com user::rw- user:user@externaldomain.com:rwx #effective:rw- user:info@primarydomain.com:rwx #effective:rw- group::--- mask::rw- other::--- doveadm acl debug -u user-externaldomain.com "@/info@primarydomain.com/INBOX" doveadm(user-externaldomain.com): Error: stat(/home/primarydomain.com/homes/info/Maildir/tmp) failed: Permission denied (euid=1121(user(a)externaldomain.com) egid=1091(holanow.com) missing +x perm: /home/primarydomain.com, we're not in group 1092(primarydomain.com), dir owned by 1126:1092 mode=0750) doveadm(user-externaldomain.com): Error: Can't open mailbox @/info@primarydomain.com/INBOX: stat(/home/primarydomain.com/homes/info/Maildir/tmp) failed: Permission denied (euid=1121(user(a)externaldomain.com) egid=1091(holanow.com) missing +x perm: /home/primarydomain.com, we're not in group 1092(primarydomain.com), dir owned by 1126:1092 mode=0750) getfacl /home/primarydomain.com/homes/info/Maildir/tmp # file: home/primarydomain.com/homes/info/Maildir/tmp # owner: info(a)primarydomain.com # group: primarydomain.com user::rwx user:user@externaldomain.com:rwx user:info@primarydomain.com:rwx group::--- mask::rwx other::--- default:user::rwx default:user:user@externaldomain.com:rwx default:user:info@primarydomain.com:rwx default:group::--- default:mask::rwx default:other::--- getfacl /home/primarydomain.com/homes/info/Maildir # file: home/primarydomain.com/homes/info/Maildir/ # owner: info(a)primarydomain.com # group: primarydomain.com user::rwx user:user@externaldomain.com:rwx user:info@primarydomain.com:rwx group::--- mask::rwx other::--- default:user::rwx default:user:user@externaldomain.com:rwx default:user:info@primarydomain.com:rwx default:group::--- default:mask::rwx default:other::--- B.) Public mailbox, mailboxes that are physically present on the public mail dir, work fine. Public boxes which are symlinks to mailboxes to other users, with correct permission and ACL, always give me permission errors and do not show up publicly. These type of mailboxes do show up if the person already has user to user share setup with those boxes, which due to problem A, means only within the same domain. Similar errors as to the A scenario, even if giving complete rwx access to all (user/group/other) I still get permission denied issues. It just feel like dovecot isn't even trying to access the files C. Tiny "other" problem I have worked around already. dovecot-acl when using users via their user(a)domain.com account doesn't lookup the user correctly. I already have set, auth_username_translation = @- which works for when users login but it doesn't seem to work with dovecot-acl files. I have helper account pointers replacing the @ with - and then the ACL file works fine. Would prefer acl files contain, user=user1(a)primarydomain.com akxeilprwts user=user2(a)primarydomain.com akxeilprwts But this works and is not a show stopper. user=user1-primarydomain.com akxeilprwts user=user2-primarydomain.com akxeilprwts -------------------------------------------- dovecot --version 2.3.4.1 (f79e8e7e4) # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 () # OS: Linux 5.4.44-2-pve x86_64 Debian 10.4 # Hostname: vps1.abclution.com doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem doveconf: Warning: You can generate it with: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem auth_mechanisms = plain login auth_username_translation = @- mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = acl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } namespace public_ns1 { location = maildir:/home/.Public_Mailboxes:INDEX=~/Maildir/public_ns1:INDEXPVT=~/Maildir/public_ns1 prefix = Public/ separator = / subscriptions = no type = public } namespace shared_ns1 { list = yes location = maildir:%%h/Maildir:INDEX=~/Maildir/shared_ns1/%%u:INDEXPVT=~/Maildir/shared_ns1/%%u prefix = @/%%u/ separator = / subscriptions = no type = shared } passdb { driver = pam } plugin { acl = vfile acl_anyone = allow acl_defaults_from_inbox = yes acl_shared_dict = file:%h/Maildir/shared-mailboxes } protocols = " imap pop3" service auth { unix_listener auth-userdb { mode = 0777 } } ssl_cert = </etc/dovecot/dovecot.cert.pem ssl_cipher_list = ECDHE-RSA-AES256-SHA384:AES256-SHA256:AES256-SHA256:RC4:HIGH:MEDIUM:+TLSv1:+TLSv1.1:+TLSv1.2:!MD5:!ADH:!aNULL:!eNULL:!NULL:!DH:!ADH:!EDH:!AESGCM ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { driver = passwd } protocol imap { mail_plugins = acl imap_acl }

1 1

IMAP ALERT on reason/nologin
by Pedro Ribeiro 22 Jul '20

22 Jul '20

Hello everyone, Some dovecot versions (years!) ago. I've made a rather complicated SQL query that verified some conditions during the SQL passdb checking and returned the usual parameters or "nologin" field signalling some account problem and a text on the "reason" field that were shown to the user telling him the reason of being rejected the login. Common "reasons" are blocked accounts, suspected brute-force to the user account, historic problems from his IP address, etc. In the current versions I've found that despite the attributes being set by the SQL query, dovecot no longer seems to signal that to the client application and it ends with some generic "wrong password" causing a lot of confusion and user complains. I can't find any reference to that (nologin/reason) logic in the current Dovecot documentation. Is this feature deprecated/removed? Were that logic changed and documented elsewhere? regards! stay safe! Note: running Dovecot 2.3.10.1 -- Best regards, =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pedro Ribeiro Politécnico de Lisboa, Serviços da Presidência Departamento de Sistemas de Informação e Comunicações Phone: +351 210 464 700 (general) / VoIP: 80100 Helpdesk: helpdesk(a)net.ipl.pt / https://www.net.ipl.pt =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

1 0

ports with different crypto settings
by Leonardo Rodrigues 21 Jul '20

21 Jul '20

Hello Everyone, Is it possible, with latest dovecot, to have different crypto settings on different pop/imap ports? Basically i'm looking to have one port with TLSv1 enabled, which will be exposed to internal networks only, and other ports with TLSv1.2+ only, which will be exposed to the external networks. The internal one will likely be running on a different port and traffic will be redirected to it via iptables, so user doesn't need to care about it. Is that possible? I haven't found anything similar on the documentations, it seems to me that crypto settings are global ... -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

Sieve and OX push_notification_drive seem to not work together
by Ralf Becker 21 Jul '20

21 Jul '20

While it's documented that the OX push_notification_driver only supports MessageNew events, it does NOT generate any event if a Sieve script moves the message on arrival to an other folder, neither in INBOX were it original arrives by LMTP, nor in the folder Sieve moves the message. Is that a misconfiguration on my side, or a know / desired limitation or just a bug? I use LMTP to deliver mails from Postfix to Dovecot: protocol lmtp { mail_plugins = $mail_plugins notify push_notification } Does eg. the same need to be configured somehow for the Sieve plugin? Ralf -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0

2 2

Questions about Dovecot push notifications
by Ralf Becker 21 Jul '20

21 Jul '20

I read the docu available under: https://doc.dovecot.org/configuration_manual/push_notification/ I'm using Dovecot 2.2.36.4 with directors and a replicating pair of backends using a custom dict with proxy protocol for user- and passdb plus a userdb using sqlite for backup. I understand 2.2 only allows to notify about new arriving mails, not eg. flag-changes which would require 2.3 with LUA. I want to use the ox notification driver with a http url (https seems to be 2.3 only). I read to enable push notifications on a mailbox I need: a) IMAP metadata enabled incl. a backend/driver to store the metadata b) enable push for the individual mailbox using a doveadm command (maybe also via IMAP, which would be easier in my case) My questions are: 1. can I set some static metadata via userdb to enable push for all mailboxes? 2. if no, does setting the metadata on one replicating backend replicates it to the other one too? 3. what purpose does the user=<something@else> argument in the doveadm command to enable push server: doveadm mailbox metadata set -u user(a)example.com -s "" /private/vendor/vendor.dovecot/http-notify user=11@3 Does it replace "user(a)example.com" in the push payload with <something@else>? 4. can I set the required metadata via IMAP command preferable with a (already configured) master user? Thanks in advance :) Ralf -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0

1 1

History mails are stored in the tmp/ directory
by lty 21 Jul '20

21 Jul '20

We found that there are historically corrupted mails in the tmp/ directory, For example, Maildir/tmp/ or Maildir/.Drafts/tmp/ exists. We suspect that it may be caused by network transmission, or the user interrupted the network link. Can the dovecot team possibly fix this problem? dovecot --version 2.2.36

3 3