- dovecot - dovecot.org

[Dovecot] uid / gid and systemusers
by xamiw＠arcor.de 10 Jan '12

10 Jan '12

Hi all, I'm facing a problem when a user (q and g in this example) is logging into dovecot. Can anybody tell some hint? Thanks in advance. George /var/log/mail.log: ... Jan 8 16:18:28 test dovecot: User q is missing UID (see mail_uid setting) Jan 8 16:18:28 test dovecot: imap-login: Internal login failure (auth failed, 1 attempts): user=<q>, method=PLAIN, rip=AAA.BBB.CCC.DDD, lip=EEE.FFF.GGG.HHH TLS <--- edited by me Jan 8 16:18:28 test dovecot: dovecot: User g is missing UID (see mail_uid setting) Jan 8 16:18:28 test dovecot: imap-login: Internal login failure (auth failed, 1 attempts): user=<g>, method=PLAIN, rip=AAA.BBB.CCC.DDD, lip=EEE.FFF.GGG.HHH TLS <--- edited by me /etc/dovecot/dovecot.conf: protocols = imaps disable_plaintext_auth = yes shutdown_clients = yes log_timestamp = "%Y-%m-%d %H:%M:%S " ssl = yes ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fnctl dotlock auth default { mechanisms = plain passdb shadow { } } /etc/passwd: ... g:x:1000:1000:test1,,,:/home/g:/bin/bash q:x:1001:1001:test2,,,:/home/q:/bin/bash /etc/group: ... g:x:1000: q:x:1001:

2 2

[Dovecot] FTS-Solr plugin
by Daniel L. Miller 09 Jan '12

09 Jan '12

Solr plugin appears to break when mailbox names have an ampersand in the name. The messages appear to indicate '&' gets translated to '&--'. -- Daniel

2 1

[Dovecot] change initial permissions on creation of mail folder
by mailinglist 09 Jan '12

09 Jan '12

Installed dovcot from Debian .deb file. Creating a new account for system users sets permission for user-only. Where to change initial permissions on creation of mail folder and other subdirectories. Installed dovecot using "apt-get install dovecot-imapd dovecot-pop3d". Any time when I create a new account in my mail client for a system user, Dovecot tries to create ~/mail/.imap/INBOX. The permissions for mail and .imap are set to 0700. By this permissions INBOX can not be created leading to an error message in log files. When I manualy change the permissions to 0770, INBOX is created

2 1

[Dovecot] failed: Too many levels of symbolic links
by David Egbert 09 Jan '12

09 Jan '12

All, My dovecot install works great except for one error I keep seeing this in my logs. The folder has 7138 messages in it. I am informed the user they needed to reduce the number of messages in the folder and believe this will fix the problem. My question is about where the problem lies. Is the problem related to an internal limit with Dovecot v2.0.15 or with my Debian (3.1.0-1-amd64)? Thanks --- dovecot: imap(XXXXX(a)XXXXX.com): Error: readdir(/XXXX/XXXX/XXXXXXXXX/XXXXX/XXXXXXX/XXXXXXXXXXXXXXXXXXX/XXX) failed: Too many levels of symbolic links David Egbert Paperclip Systems, LLC --- This message, its contents, and attachments are confidential and are only authorized for the intended recipient. Disclosure, re-distribution, or use of said information is strictly prohibited, and may be excluded from disclosure by applicable law. If you are not the intended recipient, or their intermediary, please notify the sender and delete this message.

2 6

Re: [Dovecot] Newbie: LDA Isn't Logging
by Michael Papet 09 Jan '12

09 Jan '12

I did some testing on a Debian testing VM. I built 2.0.17 from sources and copied the config straight over from the malfunctioning machine. LDA logging worked. So, it could be something about my system. But, running /usr/lib/dovecot/deliver still doesn't return a value on the command line as documented on the wiki. I've attached strace files from both the malfunctioning Debian packages machine and the built from sources VM. Unfortunately, I'm a new strace user, so I don't know what it all means. Michael --- On Tue, 1/3/12, Timo Sirainen <tss_no_spam(a)iki.fi> wrote: > From: Timo Sirainen <tss_no_spam(a)iki.fi> > Subject: Re: [Dovecot] Newbie: LDA Isn't Logging > To: "Michael" <mpapet_no_spam(a)yahoo.com> > Cc: dovecot(a)dovecot.org > Date: Tuesday, January 3, 2012, 4:15 AM > On Mon, 2012-01-02 at 22:48 -0800, > Michael wrote: > > Hi, > > > > I'm a newbie having some trouble getting deliver to > log anything. Related to this, there are no return > values unless the -d is missing. I'm using LDAP to > store virtual domain and user account information. > > > > Test #1: /usr/lib/dovecot/deliver -e -f mpapet(a)yahoo.com > -d zed(a)mailswansong.dom > < bad.mail > > Expected result: supposed to fail, there's no zed > account via ldap lookup and supposed to get a return code > per the wiki at http://wiki2.dovecot.org/LDA. > Supposed to log too. > > Actual result: nothing gets delivered, no return code, > nothing is logged. > > As in return code is 0? Something's definitely wrong there > then. > > First check that deliver at least reads the config file. > Add something > broken in there, such as: "foo=bar" at the beginning of > dovecot.conf. > Does deliver fail now? > > Also running deliver via strace could show something > useful. > > >

2 1

[Dovecot] Resetting a UID
by Tom Clark 09 Jan '12

09 Jan '12

Hi, We've got a client with a Blackberry that hass deleted his emails off his Blackberry device. The BES won't re-download the messages as it believes it has already downloaded them (apparently it matches on UID). Is there any way of resetting a folder (and messages in the folder) UID? I know in courier you used to be able to touch the directory. Thanks, Tom Clark

2 1

Re: [Dovecot] dovecot: imap-login: Disconnected (no auth attempts)
by Robert Schetterer 09 Jan '12

09 Jan '12

Am 09.01.2012 10:37, schrieb Simon Loewenthal: > On 09/01/12 10:27, Robert Schetterer wrote: >> Am 09.01.2012 10:16, schrieb J4K: >>> Morning everyone, >>> >>> On the 8th of Jan the TLS/SSL certificate I use with Dovecot expired. I >>> replaced it with a new on the 9th of Jan. I tested this with >>> Thunderbird and all is well. >>> >>> This morning people tell me they cannot get their email using their >>> mobile telephones : K9 Mail >>> >>> I have reverted the SSL cert back to the old one just in case. >>> Thunderbird will works. >>> >>> >>> Dovecot 1:1.2.15-7 running on Debian 6 >>> >>> The messages in the logs are: >>> >>> Jan 9 10:11:37 logout dovecot: imap-login: Disconnected (no auth >>> attempts): rip=90.131.95.130, lip=88.119.95.13, TLS: Disconnected >>> Jan 9 10:11:38 logout dovecot: imap-login: Disconnected (no auth >>> attempts): rip=90.131.95.130, lip=88.119.95.13, TLS: Disconnected >>> >>> In dovecot.conf I have this set : >>> >>> disable_plaintext_auth = no >>> >>> And the auth default mechanisms are set to: >>> mechanisms = plain login >>> >>> What is strange is the only item that changed is the SSL cert, which has >>> since been changed back to the old one (which has expired... ^^). >>> >>> Any ideas where I may look or change? >>> >>> Regards, S >> if you only changed the crt etc, and youre sure you did everything right >> >> perhaps you have forgot adding a needed intermediate cert ? >> >> read here >> http://www.trustico.co.uk/install/how-to-install-ssl-certificate.php >> >> Required Intermediate Certificates (CA Certificates) >> >> To successfully install your SSL Certificate you may be required to >> install an Intermediate CA Certificate. Please review the above >> installation instructions carefully to determine if an Intermediate CA >> Certificate is required, how to obtain it and correctly import it into >> your system. For more information please Contact Us. >> Alternatively, and for systems not covered by the above installation >> instructions, please use our Intermediate Certificate Wizard to find the >> correct CA Certificate or Root Bundle that is required for your SSL >> Certificate to function correctly. Find Out More Information > I know that the intermediate certs are messed up, which is why I rolled > back to the old expired certificate. I did not expect an expired > certificate to block authentication, and it does not mean that it does > block. The problem may be elsewhere. that might be a k9 problem ( older versions ) or in android older versions, is there a ignore ssl failure option as workaround what does thunderbird tell you about the new cert ? but for sure the problem may elsewhere > > -- > PGP is optional: 4BA78604 > simon @ klunky . org > simon @ klunky . co.uk > I won't accept your confidentiality > agreement, and your Emails are kept. > ~Ö¿Ö~ > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

3 2

[Dovecot] dovecot: imap-login: Disconnected (no auth attempts)
by J4K 09 Jan '12

09 Jan '12

Morning everyone, On the 8th of Jan the TLS/SSL certificate I use with Dovecot expired. I replaced it with a new on the 9th of Jan. I tested this with Thunderbird and all is well. This morning people tell me they cannot get their email using their mobile telephones : K9 Mail I have reverted the SSL cert back to the old one just in case. Thunderbird will works. Dovecot 1:1.2.15-7 running on Debian 6 The messages in the logs are: Jan 9 10:11:37 logout dovecot: imap-login: Disconnected (no auth attempts): rip=90.131.95.130, lip=88.119.95.13, TLS: Disconnected Jan 9 10:11:38 logout dovecot: imap-login: Disconnected (no auth attempts): rip=90.131.95.130, lip=88.119.95.13, TLS: Disconnected In dovecot.conf I have this set : disable_plaintext_auth = no And the auth default mechanisms are set to: mechanisms = plain login What is strange is the only item that changed is the SSL cert, which has since been changed back to the old one (which has expired... ^^). Any ideas where I may look or change? Regards, S

2 2

Re: [Dovecot] Possible mdbox corruption
by Daniel L. Miller 09 Jan '12

09 Jan '12

On 1/6/2012 12:32 PM, Daniel L. Miller wrote: > On 1/6/2012 9:36 AM, Timo Sirainen wrote: >> On 6.1.2012, at 19.30, Daniel L. Miller wrote: >> >>> Jan 6 09:22:42 bubba dovecot: indexer-worker(user1(a)domain.com): >>> Error: fts_solr: Indexing failed: 400 Illegal character ((CTRL-CHAR, >>> code 18)) at [row,col {unknown-source}]: [482765,16] >>> Jan 6 09:22:42 bubba dovecot: indexer-worker: Error: >>> >>> Google seems to indicate that Solr cannot handle "invalid" >>> characters - and that it is the responsibility of the calling >>> program to strip out such. A quick search shows me a both an >>> individual character comparison in Java and a regex used for the >>> purpose. Is there any "illegal character protection" in the Dovecot >>> Solr plugin? >> Yes, there is. So I'm not really sure what it's complaining about. >> Are you using the "solr" or "solr_old" backend? >> >> > "Solr". > > plugin { > fts = solr > fts_solr = url=http://localhost:8983/solr/ > } > Now seeing: Jan 8 15:40:09 bubba dovecot: imap(user1(a)domain.com): Error: fts_solr: Lookup failed: 400 undefined field CC Jan 8 15:40:09 bubba dovecot: imap: Error: -- Daniel

1 0

[Dovecot] Building 2.1.rc1 with cluence, but without libstemmer
by Jan Mikkelsen 08 Jan '12

08 Jan '12

Hi, I'm testing out 2.1.rc1, building against clucene 2.3.3.4. Without libstemmber, the build fails because it attempts to include SnowballAnalyzer.h which is not part of "core" clucene. Simple patch below to make dovecot 2.1.rc1 build with clucene but without libstemmer (or textcat). Looking at libstemmer itself, there are multiple versions. The version in clucene is put into libclucene-contribs-lib.so, but that version is older than libstemmer_c, which generates libstemmer.a, tested for in the dovecot 2.1.rc1 configure script. The dovecot code uses SnowballAnalyzer.h as a C++ wrapper around libstemmer. What versions of libstemmer, clucene and libtextcat is dovecot 2.1.rc1 intended to be used against? Is it worth bringing the wrapper class around libstemmer into dovecot to avoid funny dependencies against clucene and so that the -lstemmer test in configure is enough? For reference, I'm building on FreeBSD 9.0-RC3, system gcc. Regards, Jan Mikkelsen. diff -u -d -r dovecot-2.1.rc1/src/plugins/fts-lucene/lucene-wrapper.cc dovecot-2.1.rc1.patched/src/plugins/fts-lucene/lucene-wrapper.cc --- dovecot-2.1.rc1/src/plugins/fts-lucene/lucene-wrapper.cc 2011-11-09 08:45:26.000000000 +1100 +++ dovecot-2.1.rc1.patched/src/plugins/fts-lucene/lucene-wrapper.cc 2011-12-14 23:36:54.319796535 +1100 @@ -23,7 +23,9 @@ #include <CLucene.h> #include <CLucene/util/CLStreams.h> #include <CLucene/search/MultiPhraseQuery.h> +#if defined(HAVE_LUCENE_STEMMER) || defined(HAVE_LUCENE_TEXTCAT) #include "SnowballAnalyzer.h" +#endif /* Lucene's default is 10000. Use it here also.. */ #define MAX_TERMS_PER_DOCUMENT 10000

3 2