November 2022 - dovecot

compiled sieve files svbin ?
by jeremy ardley 23 Nov '22

23 Nov '22

Hi, I have recently started using claws mail to manage my user sieve scripts using server dovecot-sieve_1%3a2.3.13+dfsg1-2_arm64.deb I originally edited ~/.dovecot.sieve to hold my script and I recall that ~/.dovecot.svbin was automatically generated on first use. (either that or I have forgotten that I had used sievec) Later I used claws mail to generate sieve scripts but they were written into directory ~/sieve/ In experimentation I changed ~/.dovecot.sieve into a link to my principal script ~/sieve/main.sieve The oddity now is that sieve seems to be working when there is no compiled version Should I expect a compiled .svbin version to be generated from claws client? Or generated by first run of the sieve server on the user account? Or should I manage the scripts with claws, but log in to the server later to generate the .svbin versions? In any event what effect does not having a .svbin version have on typical small installation? -- Jeremy

2 1

Can't figure out why managesieve (pigeonhole) can't connect
by colin＠colinlikesfood.com 22 Nov '22

22 Nov '22

Subject line says it all? I am using Roundcube, and every time i click on "filters" i get RC's "unable to connect to server" message. This might be an SQL error, but i can't figure out how to pull the relevant logs yet. Please see below and any advice you have is so very appreciated SYSLOG: ------------------- Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Connection refused (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Not currently in AUTHORISATION state (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:27 mail php[66295]: <keirks4p> PHP Error: Not currently connected (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> PHP Error: Connection refused (GET /index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide) Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (GET /index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide) Nov 22 10:29:31 mail php[66295]: <keirks4p> PHP Error: Not currently connected (GET /index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide) Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> PHP Error: Connection refused (POST /?_task=settings&_action=plugin.managesieve-save) Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (POST /?_task=settings&_action=plugin.managesieve-save) Nov 22 10:29:43 mail roundcube[71055]: PHP Warning: Trying to access array offset on value of type null in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 1065 Nov 22 10:29:43 mail php[71055]: <keirks4p> PHP Error: Not currently connected (POST /?_task=settings&_action=plugin.managesieve-save) DOVECOT.LOG: ------------------- Nov 22 10:28:58 mail roundcube[66297]: <keirks4p> [43CD] C: A0008 LOGOUT Nov 22 10:28:58 mail dovecot[8514]: imap(obfuscated(a)user.name)<8609><XgBCqxHusXAKAAAB>: Disconnected: Logged out in=219 out=1045 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 22 10:28:58 mail roundcube[66297]: <keirks4p> [43CD] S: * BYE Logging out Nov 22 10:28:58 mail roundcube[66297]: <keirks4p> [43CD] S: A0008 OK Logout completed (0.001 + 0.000 secs). Nov 22 10:29:25 mail roundcube[66295]: <keirks4p> [1] SELECT "vars", "ip", "changed", datetime('now') AS ts, CASE WHEN "changed" < datetime('now', '-600 seconds') THEN 1 ELSE 0 END AS expired FROM "session" WHERE "sess_id" = 'keirks4pbepr17um9mvj1qsvt2'; Nov 22 10:29:25 mail roundcube[66295]: <keirks4p> [2] SELECT * FROM "users" WHERE "user_id" = '2'; Nov 22 10:29:25 mail roundcube[66295]: <keirks4p> [3] UPDATE "session" SET "changed" = datetime('now'), "vars" = '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 Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> [1] SELECT "vars", "ip", "changed", datetime('now') AS ts, CASE WHEN "changed" < datetime('now', '-600 seconds') THEN 1 ELSE 0 END AS expired FROM "session" WHERE "sess_id" = 'keirks4pbepr17um9mvj1qsvt2'; Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> [2] SELECT * FROM "users" WHERE "user_id" = '2'; Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Connection refused (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:27 mail roundcube[66295]: <keirks4p> PHP Error: Not currently in AUTHORISATION state (GET /index.php?_task=settings&_action=plugin.managesieve) Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [1] SELECT "vars", "ip", "changed", datetime('now') AS ts, CASE WHEN "changed" < datetime('now', '-600 seconds') THEN 1 ELSE 0 END AS expired FROM "session" WHERE "sess_id" = 'keirks4pbepr17um9mvj1qsvt2'; Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [2] SELECT * FROM "users" WHERE "user_id" = '2'; Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> PHP Error: Connection refused (GET /index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide) Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (GET /index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide) Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] Connecting to tls://obfuscated.domain:143... Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED AUTH=CRAM-MD5] Dovecot ready. Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0001 STARTTLS Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0001 OK Begin TLS negotiation now. Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0002 CAPABILITY Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ LOGINDISABLED AUTH=CRAM-MD5 Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0002 OK Pre-login capabilities listed, post-login capabilities have more. Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0003 AUTHENTICATE CRAM-MD5 Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: + PDI3MjU4Mjg1ODUxMTkzMTEuMTY2OTEzNDU3MUBtYWlsPg== Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: ****** [74] Nov 22 10:29:31 mail dovecot[8514]: imap-login: Login: user=<obfuscated(a)user.name>, method=CRAM-MD5, rip=10.0.0.1, lip=10.0.0.91, mpid=8639, TLS, session=<51k6rRHuw5gKAAAB> Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0003 OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW STATUS=SIZE SAVEDATE LITERAL+ NOTIFY SPECIAL-USE] Logged in Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0004 ID ("name" "Roundcube" "version" "1.6.0" "php" "8.0.25" "os" "FreeBSD" "command" "/index.php?_task=settings&_action=plugin.managesieve-action&_framed=1&_nav=hide") Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * ID ("name" "Dovecot") Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0004 OK ID completed (0.001 + 0.000 secs). Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0005 LIST (SUBSCRIBED) "" "*" Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" Drafts Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" Junk Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" Sent Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" Trash Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" INBOX/NAS-Alerts Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * LIST (\Subscribed) "/" INBOX/email-reports Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0005 OK List completed (0.001 + 0.000 secs). Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [3] UPDATE "session" SET "changed" = datetime('now'), "vars" = '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 Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] C: A0006 LOGOUT Nov 22 10:29:31 mail dovecot[8514]: imap(obfuscated(a)user.name)<8639><51k6rRHuw5gKAAAB>: Disconnected: Logged out in=215 out=821 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: * BYE Logging out Nov 22 10:29:31 mail roundcube[66295]: <keirks4p> [7FB5] S: A0006 OK Logout completed (0.001 + 0.000 secs). Nov 22 10:29:42 mail roundcube[71055]: <keirks4p> [1] SELECT "vars", "ip", "changed", datetime('now') AS ts, CASE WHEN "changed" < datetime('now', '-600 seconds') THEN 1 ELSE 0 END AS expired FROM "session" WHERE "sess_id" = 'keirks4pbepr17um9mvj1qsvt2'; Nov 22 10:29:42 mail roundcube[71055]: <keirks4p> [2] SELECT * FROM "users" WHERE "user_id" = '2'; Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> PHP Error: Connection refused (POST /?_task=settings&_action=plugin.managesieve-save) Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> PHP Error: Unable to connect to managesieve on obfuscated.domain:4190 in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 221 (POST /?_task=settings&_action=plugin.managesieve-save) Nov 22 10:29:43 mail roundcube[71055]: PHP Warning: Trying to access array offset on value of type null in /usr/local/www/roundcube/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 1065 Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] Connecting to tls://obfuscated.domain:143... Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED AUTH=CRAM-MD5] Dovecot ready. Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0001 STARTTLS Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0001 OK Begin TLS negotiation now. Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0002 CAPABILITY Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ LOGINDISABLED AUTH=CRAM-MD5 Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0002 OK Pre-login capabilities listed, post-login capabilities have more. Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0003 AUTHENTICATE CRAM-MD5 Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: + PDE2NjcxMDUwNTU2NDcwMTMuMTY2OTEzNDU4M0BtYWlsPg== Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: ****** [74] Nov 22 10:29:43 mail dovecot[8514]: imap-login: Login: user=<obfuscated(a)user.name>, method=CRAM-MD5, rip=10.0.0.1, lip=10.0.0.91, mpid=8644, TLS, session=<677prRHu4aAKAAAB> Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0003 OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE SNIPPET=FUZZY PREVIEW=FUZZY PREVIEW STATUS=SIZE SAVEDATE LITERAL+ NOTIFY SPECIAL-USE] Logged in Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0004 ID ("name" "Roundcube" "version" "1.6.0" "php" "8.0.25" "os" "FreeBSD" "command" "/") Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * ID ("name" "Dovecot") Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0004 OK ID completed (0.001 + 0.000 secs). Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0005 LIST (SUBSCRIBED) "" "*" Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" Drafts Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" Junk Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" Sent Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" Trash Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" INBOX/NAS-Alerts Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * LIST (\Subscribed) "/" INBOX/email-reports Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0005 OK List completed (0.001 + 0.000 secs). Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] C: A0006 LOGOUT Nov 22 10:29:43 mail dovecot[8514]: imap(obfuscated(a)user.name)<8644><677prRHu4aAKAAAB>: Disconnected: Logged out in=137 out=821 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: * BYE Logging out Nov 22 10:29:43 mail roundcube[71055]: <keirks4p> [CD90] S: A0006 OK Logout completed (0.001 + 0.000 secs). DOVECOT INFO: ------------------------ # dovecot --version 2.3.19.1 (9b53102964) # dovecot -n # 2.3.19.1 (9b53102964): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: FreeBSD 13.1-RELEASE-p2 amd64 zfs # Hostname: localhost auth_mechanisms = cram-md5 first_valid_gid = 10000 first_valid_uid = 10000 mail_location = maildir:/var/mail/users/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = create special_use = \Sent } mailbox Trash { auto = create special_use = \Trash } prefix = separator = / } passdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } plugin { sieve = file:/usr/local/etc/dovecot/sieve;active=/usr/local/etc/dovecot/sieve/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/before-global.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_global = /usr/local/etc/dovecot/sieve/global/ } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </usr/local/etc/letsencrypt/live/obfuscated.domain/fullchain.pem ssl_cipher_list = HIGH:!aNULL:!AES128:!SSLv2 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it syslog_facility = local1 userdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " sieve" } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 64 k } THANKS! Colin

3 5

Event 0x560045857eb0 leaked
by support＠openmbox.net 18 Nov '22

18 Nov '22

what do these logs mean in mail.log? Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x560045857eb0 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x560045894390 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x56004589d3e0 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x56004588f810 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x560045857240 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x56004589cfd0 leaked (parent=(nil)): auth-client-connection.c:338 Nov 18 10:23:03 mx dovecot: auth: Warning: Event 0x56004586b130 leaked (parent=(nil)): auth-client-connection.c:338 I am using this version dovecot in a ubunto 20.04 box. # dovecot --version 2.3.7.2 (3c910f64b) thanks.

1 0

Dovecot 2.2 to 2.3 migration
by Markus Wienhöfer 17 Nov '22

17 Nov '22

Hi, we are currently using Dovecot 2.2 (from the Ubuntu 18.04 repos) and would like to migrate to 2.3 I have read the migration documentation regarding the configuration changes. Apart from that, is it feasible/possible to change from Ubuntu to official Dovecot repositories and upgrade the dovecot package this way? Or is there anything else we should be aware of? Best regards Markus

3 3

Doveadm backup stateful synchronization trouble
by dovecot＠f-hamelin.fr 16 Nov '22

16 Nov '22

Hi, The non-blocking error is: doveadm(user1s@domain): Error: Saved sync state is invalid, falling back to full sync: Invalid base64 data This error occurs every time on my test machine (no traffic, only a few test messages). That error sometime also occurs on my production system, but not each time. The command I used for the first time is : doveadm backup -A -s "" -d > state.txt After that there is a daily calls (as vmail user, my config only handle virtual users) to : doveadm backup -A -s "$(<state.txt)" -d > state.txt.tmp && mv state.txt.tmp state.txt doveconf -n output is available at https://www.f-hamelin.fr/pub/doveadm-backup-doveconf.txt Any help will be welcomed Best regards, Franck

1 0

OAUTH2 local validation
by Felix Auringer 16 Nov '22

16 Nov '22

Hello, <https://doc.dovecot.org/configuration_manual/authentication/oauth2/#local-v…> describes how to set up local validation for OAUTH2 with dovecot. This works fine as long as the keys are not rotated. In my experience, it is common for a client to try to validate a token with the cached key and update the cached keys when the local validation fails (e.g. via the /auth/realms/<realm>/protocol/openid-connect/certs endpoint in Keycloak). This way, the client does not need to fetch new keys periodically but only when the old ones expired. If I understand it correctly, Dovecot reads the keys from a defined path but does not care how to update them. Did you have a nice way in mind how the keys should be refreshed when deciding not to do that in dovecot? Are you planning to add automatic refreshing of local validation keys to dovecot? I am running dovecot in Docker and one way would be a cron job on the host that fetches new keys and updates the files inside the container via docker exec. It would work but it's not really a nice solution because from outside dovecot, the information whether the old keys are no longer valid, is not available and the whole process needs to run periodically (and thus way more often than actually necessary). Best regards, Felix Auringer --- Gesellschaft für interkulturelles Zusammenleben gGmbH (GIZ) Felix Auringer IT Reformationsplatz 2 13597 Berlin Tel: 030/513 0100 00; Fax: 030/513 0100 09 www.giz.berlin; felix.auringer(a)giz.berlin Amtsgericht Charlottenburg HRB 200872 B Geschäftsführerin: Dr. Britta Marschke

2 1

Re: bug: ARGON2 hash selection incompatible with LDAP
by Krisztián Szegi 16 Nov '22

16 Nov '22

"Michael Ströder" michael(a)stroeder.com – 15 November 2022 15:00 > On 11/15/22 13:45, Krisztián Szegi wrote: >> I'd like to report that non-binding auth to (Open)LDAP doesn't work >> if the latter hashes passwords with ARGON2. > Could you please elaborate why using LDAP bind is a problem for you? > > Ciao, Michael. > > Fair enough question! I cannot specify bind_dn template due to mismatched mail addresses and user DNs, and I thought that that would be suboptimal due to re-binding. I am a bit confused about how to optimize LDAP lookups now (static files not option :), re-reading the docs it just made me question more things - auth_bind_dn cannot be given in my case, as a fixed starting point - auth_bind adds a temporary binding (using pass_filter) - can I use userdb prefetch? Docs say I cannot if I use bind with template, but I am not using the latter. So the search for the user's dn during auth IS the passdb lookup? - assuming I am correct, I should give back stuff with passdb lookup: or do I? - Must I give back userid an guid? 10-mail.conf has "vmail" for both, as mail accounts don't have UNIX ones linked to them... - same for home? There is no default I've given until userdb lookup. Just specify a global mail_home with variables, and get on with life? -if I should give back one, should I pass it with default_fields = userdb_home (currently I specify it under default_fields:home in userdb lookup as LDAP doesn't override home). The docs are confusing around userdb. The main thing what is not clear that they CAN override fields on a per-user basis, but must they provide them for non-extra fields, when there are global settings for those? Thanks! BTW, thanks for the great software all of you. Michael, I've come across some of your work, you have my respect!

3 2

Accessing Shared Mailbox not working
by Quiwy 15 Nov '22

15 Nov '22

Hi, I'm new on this mailing list and I'm struggling with the configuration of shared mailboxes. I've followed the following documentation page : https://doc.dovecot.org/configuration_manual/shared_mailboxes/shared_mailbo… and manage to had it working for something like 2 minutes, but then changed a parameter and can't get it back working (and of course I don't remember which one it was). I'm using dovecot 2.3.13 . user@hostname:~# dovecot -n # 2.3.13 (89f716dc2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.13 (cdd19fe3) # OS: Linux 5.10.0-19-amd64 x86_64 Debian 11.5 # Hostname: hostname auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } mail_debug = yes mail_home = /var/vmail/%d/%n mail_location = maildir:~/ mail_plugins = acl mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = yes location = maildir:/var/mail/vmail/%%d/%%n/Maildir:INDEXPVT=/var/mail/vmail/%%d/%%n/Maildir/shared/%n prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } ssl_cert = </etc/letsencrypt/live/domain/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = uid=vmail gid=vmail home=/var/mail/vmail/%d/%n driver = static } protocol imap { mail_plugins = acl imap_acl imap_acl } protocol lda { mail_plugins = acl sieve } This is the content of dovecot-dict-sql.conf.ext : cat dovecot-dict-sql.conf.ext # This file is commonly accessed via dict {} section in dovecot.conf connect = host=localhost dbname=my_dbname user=my_admin_db_user password=my_password map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } map { pattern = shared/shared-boxes/anyone/$from table = anyone_shares value_field = dummy fields { from_user = $from } } Now, I have configured some rigth through SOGo interface as I need to use it. With doveadm I can see the good rights : doveadm acl get -u user1@domain INBOX ID Global Rights user=user2(a)devops.algoo.net lookup read user=user3(a)devops.algoo.net admin create delete expunge insert lookup post read write write-deleted write-seen This this the output I have from journalctl -f command with debug enabled when trying to access to the shared folder within SOGo : Nov 15 17:51:14 hostname dovecot[269267]: imap-login: Login: user=<user3@domain>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=270025, secured, session=<UL//KYXt7ul/AAAB> Nov 15 17:51:14 hostname dovecot[269267]: imap(user3user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Loading modules from directory: /usr/lib/dovecot/modules Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vmail/domain/user3 Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/ Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user3, index=, indexpvt=, control=, inbox=/var/mail/vmail/domain/user3, alt= Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/mail/vmail/%d/%n/Maildir:INDEXPVT=/var/mail/vmail/%d/%n/Maildir/shared/user3 Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: Mailbox INBOX/folder_i_want_to_share_from_user1_to_user3: Mailbox opened because: SELECT Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Debug: acl vfile: reading file /var/mail/vmail/domain/user3/.INBOX.folder_i_want_to_share_from_user1_to_user3/dovecot-acl Nov 15 17:51:14 hostname dovecot[269267]: imap(user3@domain)<270025><UL//KYXt7ul/AAAB>: Logged out in=140 out=1521 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 15 17:51:15 hostname dovecot[269267]: imap-login: Login: user=<user3@domain>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=270028, secured, session=<IDgGKoXt/Ol/AAAB> Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Loading modules from directory: /usr/lib/dovecot/modules Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vmail/domain/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/ Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user3, index=, indexpvt=, control=, inbox=/var/mail/vmail/domain/user3, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/mail/vmail/%d/%n/Maildir:INDEXPVT=/var/mail/vmail/%d/%n/Maildir/shared/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap-login: Login: user=<user3@domain>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=270029, secured, session=<7mIGKoXtAOp/AAAB> Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Loading modules from directory: /usr/lib/dovecot/modules Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vmail/domain/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/ Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user3, index=, indexpvt=, control=, inbox=/var/mail/vmail/domain/user3, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/mail/vmail/%d/%n/Maildir:INDEXPVT=/var/mail/vmail/%d/%n/Maildir/shared/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: file /var/mail/vmail/domain/user3/dovecot-acl not found Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: reading file /var/mail/vmail/domain/user3/.INBOX.folder_i_want_to_share_from_user1_to_user3/dovecot-acl Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Debug: acl vfile: file /var/mail/vmail/domain/user3/dovecot-acl not found Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user1/Maildir, index=, indexpvt=/var/mail/vmail/domain/user1/Maildir/shared/user3, control=, inbox=/var/mail/vmail/domain/user1/Maildir, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: acl username = user1@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user1/Maildir, index=, indexpvt=/var/mail/vmail/domain/user1/Maildir/shared/user3, control=, inbox=/var/mail/vmail/domain/user1/Maildir, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl: Mailbox not in dovecot-acl-list: shared/user1@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: acl vfile: file /var/mail/vmail/domain/user1/Maildir/dovecot-acl not found Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Debug: Namespace shared/: Using permissions from : mode=0700 gid=default Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270028><IDgGKoXt/Ol/AAAB>: Logged out in=198 out=1581 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270029><7mIGKoXtAOp/AAAB>: Logged out in=125 out=1417 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Nov 15 17:51:15 hostname dovecot[269267]: imap-login: Login: user=<user3@domain>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=270033, secured, session=<B4gIKoXtDOp/AAAB> Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Loading modules from directory: /usr/lib/dovecot/modules Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vmail/domain/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/ Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user3, index=, indexpvt=, control=, inbox=/var/mail/vmail/domain/user3, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/mail/vmail/%d/%n/Maildir:INDEXPVT=/var/mail/vmail/%d/%n/Maildir/shared/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: Mailbox INBOX/folder_i_want_to_share_from_user1_to_user3: Mailbox opened because: SELECT Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Debug: acl vfile: reading file /var/mail/vmail/domain/user3/.INBOX.folder_i_want_to_share_from_user1_to_user3/dovecot-acl Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270033><B4gIKoXtDOp/AAAB>: Logged out in=313 out=2117 deleted=0 expunged=0 trashed=0 hdr_count=1 hdr_bytes=2 body_count=0 body_bytes=0 Nov 15 17:51:15 hostname dovecot[269267]: imap-login: Login: user=<user3@domain>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=270037, secured, session=<nRkMKoXtFup/AAAB> Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Loading modules from directory: /usr/lib/dovecot/modules Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vmail/domain/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/ Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: maildir++: root=/var/mail/vmail/domain/user3, index=, indexpvt=, control=, inbox=/var/mail/vmail/domain/user3, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: owner = 1 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/mail/vmail/%d/%n/Maildir:INDEXPVT=/var/mail/vmail/%d/%n/Maildir/shared/user3 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: shared: root=/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: initializing backend with data: vfile Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: acl username = user3@domain Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl: owner = 0 Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl vfile: Global ACLs disabled Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl vfile: file /var/mail/vmail/domain/user3/dovecot-acl not found Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: Mailbox INBOX/folder_i_want_to_share_from_user1_to_user3: Mailbox opened because: SELECT Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Debug: acl vfile: reading file /var/mail/vmail/domain/user3/.INBOX.folder_i_want_to_share_from_user1_to_user3/dovecot-acl Nov 15 17:51:15 hostname dovecot[269267]: imap(user3@domain)<270037><nRkMKoXtFup/AAAB>: Logged out in=218 out=1925 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 I tried with thunderbird too but no folders appears neither. Do you have any clue on which parameter do I need to change in order to get it working? Thank you very much for any help provided. Quiwy

1 0

R: Dovecot 2.3 shared namespace issues
by Stefano Cecconello 15 Nov '22

15 Nov '22

Hello, My bad, the OS was ubuntu 20.04 and not 22.04 . After further tinkering\testing, it seems that removing the " acl_ignore_namespace = shared/* " setting did the trick, now we're getting the correct ACL on client side . Without it we can see the folder with the right permissions : Logging as user01 : shared\Sharer01\INBOX : '[NONEXISTENT] Mailbox doesn't exist: shared/test.imapsharer01(a)td01.testdomain.it/INBOX'' shared\Sharer01\subfolder01 ( RW ) : 'shared/test.imapsharer01(a)td01.testdomain.it/subfolder01 test.imapuser01(a)td01.testdomain.it akxeilprwtscd '] shared\Sharer01\subfolder02ro ( RO ) : '[NOPERM] You lack administrator privileges on this mailbox' Logging on Thunderbird and other IMAP clients ( sylpheed\claws ) as user01 : - It list correctly the shared folders as subscribed folders ; - can't view the mail contents of the sharer INBOX, as desired ; - show the total elements of the sharer INBOX, even if the user01 didnt have access ; If the config is correct, this is somehow what we're trying to accomplish, i have some concerns regarding how it is possible to show the total messages of the remote INBOX without having any privileges . Maybe is something related to the index of that INBOX folder that is somewhat read by the accessing user even if IMAP-wise didnt have any ACL \ rights . I still dont understand why enabling the acl_ignore_namespace setting, results in a : - remote INBOX full control, even if it was not defined in any acl ; - subfolders ACL applied correctly Hope that someone can shed a light on it . Thanks Stefano

1 0

Re: bug: ARGON2 hash selection incompatible with LDAP
by Krisztián Szegi 15 Nov '22

15 Nov '22

Sorry, I wanted to post from this alias, but From-Address isn't saved with my drafts :) I failed to recognize during my patchwork that the verification function is the same for ARGON2I and -ID: both call `verify_argon2`, which in turn calls `libsodium's crypto_pwhash_str_verify`. In the new light this, there is no "harm" in my patch: - If backend gives back "{ARGON2}...", dovecot verifies with the same call anyway, regardless of what subtype it actually is, i.e.: {ARGON2I} will work too. - If dovecot generates the hash, the prefix will be the one set by the config's default hash, so for backwards comp., "{ARGON2ID}" could be used if someone wants that. Dovecot will succeed in verifying {ARGON2} generated by itself as well. "Aki Tuomi" aki.tuomi(a)open-xchange.com – 15 November 2022 13:55 > > On 15/11/2022 14:45 EET Krisztián Szegi <oni-dono(a)mszk.eu> wrote: > > > > > > Good day to all, > > > > this is my first post to the mailing list! > > > > I'd like to report that non-binding auth to (Open)LDAP doesn't work if the latter hashes passwords with ARGON2. > > > > Although dovecot (I am using http://2.3.19.1) does support ARGON2 with libsodium, but it doesn't recoginize hashes beginning "{ARGON2}$argon2id$" stored (and hashed, using ppolicy module's hashCleartext) by OpenLDAP. > > > > Now, I understand that ARGON2I, -D, and -ID are not compatible, but the ACTUAL algorithm is there between the two $. > > Furthermore, I think dovecot is in the minority here, I haven't met any software that specifies the ARGON2 subtype between {}. > > BTW, I haven't met any software that hashes passwords with ARGON2, but not with the ARGON2ID subtype (where libsodium is available, which also seems to be the standard here), as THAT is the recommended one anyway. > > > > I patched the rpm in OpenSUSE repo to alias {ARGON2} to {ARGON2ID}: > > https://build.opensuse.org/package/view_file/home:Samonitari:branches:openS… > > > > Could we get something like this (but maybe more correct) into the official source? > > Maybe a config switch to alias it runtime? > > > > Thanks for the attention: > > Krisztián > > Hi! > > Thanks for your report. I think it makes sense, we'll see what we can do about this. > > Aki > >

1 0