- dovecot - dovecot.org

[Dovecot] LDA without lookup as non-root?
by E.B. 29 Oct '12

29 Oct '12

Hello, I'm having some problems getting LDA to work without userdb lookups and have a few related questions. This system has all users in MySQL, each user with unique UID/GID, no local users at all. Installation is from apt-get. 1) If LDA is invoked without lookups, is it correct to assume that the "service auth" and "service auth-worker" can be completely removed from dovecot master configuration? (I have tried commenting them out and logging into IMAP, which seems to work, not sure if anyone else needs the auth service) 2) If LDA is invoked without lookups, will I be unable to use Dovecot quota plugin? Does it need to have a user lookup to get quota info? (haven't added quota support, need to take this one step at a time) 3) The interesting part -- I am invoking LDA from Maildrop. See: http://thread.gmane.org/gmane.mail.imap.dovecot/65473 So when invoked, Maildrop has already dropped to the destination UID/GID and the needed paths are available in the environment. However, using as many permutations of calling LDA as I can think of (based on http://wiki2.dovecot.org/LDA ), I always get this: (command line usage error. Command output: lda: Fatal: Couldn't lookup our username (uid=2500) ) The UID is correct for the target user. If I add "-d $LOGNAME" to my LDA callout, I get permission denied on the userdb lookup, which I guess is another issue to work out if I want to go with lookups. But right now I am trying not to. Why does LDA seem to try for a lookup even when I follow the wiki instructions how to call it without a lookup? 3.5) Related question, my users have separate homedir and maildir, both paths are looked up by Maildrop. I think I need to call LDA with "HOME=$DEFAULT dovecot-lda -f $FROM". Is this correct?

2 3

[Dovecot] Dovecot quota postgres dictionary problems
by tmihalicek 29 Oct '12

29 Oct '12

I have a strange errors in .err log file, but the postgres seem to be filling with quota changes, i will also put configs in Oct 19 09:23:52 mailstore-node-01 dovecot: imap(test(a)example.net): Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds Oct 19 09:24:22 mailstore-node-01 dovecot: imap(test(a)example.net): Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds Oct 19 09:23:21 mailstore-node-01 dovecot: imap(test(a)example.net): Panic: file dict-client.c: line 270 (client_dict_finish_transaction): assertion failed: (dict->async_commits > 0) Oct 19 09:23:21 mailstore-node-01 dovecot: imap(test(a)example.net): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x484ea) [0x7fbed405d4ea] -> /usr/lib/dovecot/libdovecot.so.0(+0x48536) [0x7fbed405d536] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fbed4030eaf] -> /usr/lib/dovecot/libdovecot.so.0(+0x22337) [0x7fbed4037337] -> /usr/lib/dovecot/libdovecot.so.0(+0x2236b) [0x7fbed403736b] -> /usr/lib/dovecot/libdovecot.so.0(+0x22e78) [0x7fbed4037e78] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0x8a3f) [0x7fbed2c76a3f] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_get_resource+0x72) [0x7fbed2c73262] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_transaction_commit+0x1e7) [0x7fbed2c738d7] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb39f) [0x7fbed2c7939f] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb4f4) [0x7fbed2c794f4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_deinit+0x2a) [0x7fbed432396a] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](imap_sync_deinit+0x4d) [0x418edd] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge]() [0x41918c] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](cmd_sync_delayed+0x1f5) [0x4195b5] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](client_handle_input+0x1fd) [0x41127d] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](client_input+0x5f) [0x411adf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fbed40696c6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7fbed406a6ff] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fbed4069668] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fbed4055043] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge](main+0x2a4) [0x419d24] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fbed3cd1c8d] -> dovecot/imap [test(a)example.net 10.84.34.2 expunge]() [0x409059] doveconf.txt <http://dovecot.2317879.n4.nabble.com/file/n38234/doveconf.txt> dovecot-dict-sql.conf.ext <http://dovecot.2317879.n4.nabble.com/file/n38234/dovecot-dict-sql.conf.ext> -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-quota-postgres-dictionary-prob… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] mail open slowly
by Bernics Gábor | Penta Unió Zrt. 29 Oct '12

29 Oct '12

Hello, I have a dovecot IMAP server (relative small hardware: HP Microserver with 6 Gbyte RAM, linux soft RAID1 with 2x 7200 SATA disk) with 100 Gbyte maildirs. Server works fine but sometimes I can open mails slowly (5-10 sec), typical with new mails. It's intresting when I open an another old mail (with 0 sec wait), after new mail open quickly. Is it dovecot mail indexes or I/O problem? Load and CPU use is small typical 0.10, 10%, I see small IO wait. Debian 6.0, Dovecot 1.2.15, fsync and nmap is disable Best Regards, Gabor

3 5

[Dovecot] doveadm purge -A via doveadm-proxy director fails after some users
by Daniel Parthey 29 Oct '12

29 Oct '12

# 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-44-server x86_64 Ubuntu 10.04.4 LTS doveadm -c /etc/dovecot-director/dovecot-director.conf -D purge -A shows the following message in the log when iterating the 49th user: Oct 17 00:47:17 10.129.3.233 dovecot: doveadm: Error: purge: invalid option -- 'e' Oct 17 00:47:17 10.129.3.233 dovecot: doveadm(someuser(a)example-ll.org): Error: doveadm purge: Client sent unknown parameter: ? Any ideas on how this error gets triggered? Regards Daniel -- https://plus.google.com/103021802792276734820

2 1

[Dovecot] Active Directory 2003 user database and passwords with special characters
by Boris PINON 29 Oct '12

29 Oct '12

Hello everybody, As explained in the topic, i have troubles with authentication of my users. First of all, sorry for my poor english... I'm running dovecot v1.2.15 on a Debian 6 64bits server up to date. My users database is an Active Directory 2003 (it's important to know that because Active Directory can't retrieve users passwords, you have to bind LDAP with a domain administrator). So, i'm using userdb ldap for authenticated my users and it works ! BUT... When an user having a password with special characters like " ² ° § µ à é è ç à â ê î ô û ù ä ë ï ö ü ", authentication does not work. And in my log file : MY_SERVER | mail/info | dovecot | 2012/08/27 10:42:14 | auth(default): cache(my_user,192.168.7.127): plain(RU0975é*) != 'RU0975Ã©*' As you can see, the character é has been replaced by Ã©. My dovecot.conf : protocols = imap imaps pop3 pop3s managesieve shutdown_clients = yes protocol imap { listen = 192.168.7.1:143 ssl_listen = 192.168.7.1:993 mail_plugins = quota imap_quota autocreate imap_client_workarounds = outlook-idle delay-newmail tb-extra-mailbox-sep } protocol pop3 { listen = 192.168.7.1:110 ssl_listen = 192.168.7.1:995 mail_plugins = quota pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_lock_session = no pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol managesieve { listen = 192.168.7.1:4190 login_executable = /usr/lib/dovecot/managesieve-login mail_executable = /usr/lib/dovecot/managesieve managesieve_implementation_string = dovecot } protocol lda { mail_plugins = sieve quota postmaster_address = postmaster(a)contoso.fr hostname = webmail.contoso.fr sendmail_path = /usr/sbin/sendmail quota_full_tempfail = no auth_socket_path = /var/run/dovecot/auth-master } log_timestamp = "%Y-%m-%d %H:%M:%S " syslog_facility = mail mail_debug = no auth_debug = no auth_debug_passwords = no ssl = required ssl_cert_file = /etc/ssl/certs/webmail.contoso.fr.pem ssl_key_file = /etc/ssl/private/webmail.contoso.fr.key ssl_ca_file = /etc/ssl/certs/VERYSIGN.pem ssl_verify_client_cert = no mail_location = maildir:%h mail_full_filesystem_access = no mail_uid = 500 mail_gid = 8 mail_privileged_group = mail first_valid_uid = 500 last_valid_uid = 500 first_valid_gid = 8 last_valid_gid = 8 login_greeting = Webmail CONTOSO login_process_size = 256 login_process_per_connection = no login_processes_count = 2 login_max_processes_count = 128 login_max_connections = 512 max_mail_processes = 1024 mail_process_size = 256 mail_max_keyword_length = 50 disable_plaintext_auth = yes auth_failure_delay = 2 auth_process_size = 256 auth_username_format = %Lu auth default { mechanisms = plain login auth_cache_size = 2048 passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = vmail count = 1 socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail group = mail } client { path = /var/run/dovecot/auth-client mode = 0666 user = vmail group = mail } } } dict { } plugin { quota = maildir:User quota quota_warning = bytes=80%% /usr/lib/dovecot/quota-warning 80 quota_warning2 = bytes=95%% /usr/lib/dovecot/quota-warning 95 quota_warning3 = bytes=99%% /usr/lib/dovecot/quota-warning 99 sieve=dovecot.sieve sieve_dir=~/.Sieve sieve_extensions=+imapflags autocreate = Spam autocreate2 = Trash autosubscribe = Spam autosubscribe2 = Trash autosubscribe3 = Sent autosubscribe4 = Drafts } And my dovecot-ldap.conf : # My domain controller uris = ldap://192.168.1.1:3268 dn = CN=ServerOperator,CN=Users,DC=contoso,DC=fr dnpass = MyPassword debug_level = 0 auth_bind = yes ldap_version = 3 base = CN=Users,DC=contoso,DC=fr deref = never scope = subtree user_attrs = mailDirectory=home=/var/spool/mail/%$,mailQuota=quota_rule=*:bytes=%$,=quota_rule2=Trash:storage=100%% user_filter = (&(|(sAMAccountName=%n)(mailAcceptingGeneralID=%u)(mail=%u))(!(|(mailDrop="*|*")(mailDrop="*:*")(mailDrop="*/*")(userParams=noMail)))) pass_filter = (&(sAMAccountName=%n)(!(|(mailDrop="*|*")(mailDrop="*:*")(mailDrop="*/*")(userParams=noMail)))) default_pass_scheme = CRYPT Does anyone else have this problem? If yes, how to solve? Thank you in advance.

1 0

[Dovecot] Problem with sieve. dovecot 2.0.17
by Eliezer Croitoru 28 Oct '12

28 Oct '12

Since I have lots of filtering rules in thunderbird I was thinking of using sieve instead. I want to filter incoming mail into subdirectories. like "from" store at folder "old". the script is: require ["fileinto", "envelope"]; if envelope :is "from" "eliezer(a)test.dom" { fileinto "old"; } else { # The rest goes into INBOX # default is "implicit keep", we do it explicitly here keep; } the result is that the mail is stored in two folders instead of just one, INBOX and old. the logs shows: Oct 23 17:12:26 lda(eliezer(a)ngtech.co.il): Debug: sieve: executing script from /home/vmail/domain/eliezer/home/.dovecot.svbin Oct 23 17:12:26 lda(eliezer(a)test1.dom): Info: sieve: msgid=<5086B3C9.5030909(a)test.dom>: stored mail into mailbox 'INBOX' Oct 23 17:12:26 lda(eliezer(a)test1.dom): Info: sieve: msgid=<5086B3C9.5030909(a)test.dom>: stored mail into mailbox 'old' from unknown reason(or I didnt understood how sieve works?) plugin section from dovecot -n plugin { ... sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.debug +imapflags +relational +comparator-i;ascii-numeric } Thanks, Eliezer

4 6

[Dovecot] How to activate antispam plugin
by Xavier Claude 28 Oct '12

28 Oct '12

Hello, I'm using dovecot 2.1.7 from the Debian backports package and I'm trying to get working the antispam plugin with dspam. I have followed the documentation http://wiki2.dovecot.org/Plugins/Antispam but it does not seem to work. The /var/log/dspam folder is empty even after I put mail in the Spam folder. How can I see if the plugin is working and what config option am I missing ? Thank in advance for your help. Here is my config from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-xenU-6887-i386 i686 Debian 6.0.6 mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } plugin { antispam_backend = dspam antispam_dspam_args = --mode=teft;--deliver=;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Corbeille;Trash;Deleted Items; Deleted Messages sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = antispam } -- Xavier Claude claude.xavier(a)gmail.com

1 0

[Dovecot] Locking /var/mail/user issue with postfix and dovecot
by Robert JR 26 Oct '12

26 Oct '12

Hello, I have a question regarding mailbox locking and hope any one can help me to better understanding the locking of mbox My Postfix lock option is fcntl dotlock mailbox_delivery_lock = fcntl, dotlock virtual_mailbox_lock = fcntl, dotlock My Dovecot lock option is fcntl only mbox_write_locks = fcntl mbox_read_locks = fcntl now, when user is download a large mail (20 MB) for example, dovecot locks /var/mail/user with fcntl until the users finish downloading the mail ok here comes my question. While the user is downloading the mail , a mail arrives so postfix make some thing weird 1- Postfix creates /var/mail/user.lock for 5 secs , then postfix defer the mail with reason that the /var/mail/user is locked and then delete the /var/mail/user.lock (after 5 secs) My question is ? why postfix create user.lock although it shouldn't because already dovecot fcntl it … 1- Dovecot locks /var/mail/user using FCNTL 2- Posttix at the same time tries to FCNTL /var/mail/user .. but it fail since dovecot already fcnl it. 3- Postfix at the same time add dot lock /var/mail/user for 5 secs then remove the lock. the question is how come postfix dot lock /var/mail although it couldn't FCNTL the file in the first place ??????? what i was expecting is 1- Dovecot locks /var/mail/user using FCNTL 2- Postfix tries to FCNTL /var/mail/user 3- POSTFIX WILL NOT CREATE DOTLOCK file unless the FCNTL is released by dovecot!!!! Please advise if postfix will dot lock the file even if it couldn't FCNTL the file in the first place…… Regards

5 23

Re: [Dovecot] Changing password for users
by Mike John 26 Oct '12

26 Oct '12

> Hello, > > I am using dovecot (2.0.9) and using virtual users using > > passdb { > args = /etc/dovecot/dovecotpasswd > driver = passwd-file > } > > How can i make my virtual users change their passwords using web > interface ? > > My users already uses squirrelmail to access their mail. is there a > program to add to squirrelmail to add this function to the clients ? > or should i user different separate website for password changing ? > and what program/tool can help me with this ? > > Any ideas is greatly appreciated. > > Mike. >Mike, >I don't know about forcing users to change their passwords however > with >Squirrelmail there are several password change plugins available that >use "poppasswd" to actually change the password. >Of course poppasswd will probably need to be modified to go against > your >password data base, in my case it simply uses PAM. The version I use > is >poppassd version 1.8.5. >Oh you probably want to restrict access to the port from the local > host >only since passwords are transmitted in clear text. >Jeff I know about poppassd , but it works only for /etc/passwd , /etc/shadow, but my dovecot virtual users password files are in different location and i do not know how to modify poppassd, any idea how can i do that? and is there another way other than poppassd?

4 4

Re: [Dovecot] Changing password for users
by Joseph Tam 26 Oct '12

26 Oct '12

> From: Mike John <mike(a)alaadin.org> > >> I know about poppassd , but it works only for /etc/passwd , >> /etc/shadow, but my dovecot virtual users password files >> are in different location and i do not know how to modify poppassd, >> any idea how can i do that? I downloaded and examined it; it's just a wrapper for /usr/bin/passwd, and there doesn't seem an easy way to modify it to use something other than the system password file. Maybe replace "/usr/bin/passwd" with htpasswd? > and is there another way other than poppassd? Write your own PHP script -- it couldn't be more than a few dozen lines of code for a working skeleton. Or Google "php change password htpasswd". Joseph Tam <jtam.home(a)gmail.com>

2 1