- dovecot - dovecot.org

[Dovecot] Rawlogging uid
by Mikko Lehto 30 Jun '11

30 Jun '11

Hi, this is my first post to the list after years of passive following every now and then. Dovecot: 2.0.13 (3d07ab746a67) prebuilt binaries from xi.rename-it.nl OS: i686 Debian 6.0 squeeze/sid I am about to run a setup where users are virtual and their mail is owned by vmail user. I bumped into minor client issue and needed to enable rawlogging according to http://wiki2.dovecot.org/Debugging/Rawlog This is what was printed to log at first try: Jun 29 21:46:25 (null)Fatal: This process must not be run as root I changed service postlogin to contain "user = vmail" and above error disapperead. I also tried "user = dovecot" which seem to work as well. Is vmail or dovecot user more appropriate for raw logging? >From wiki I got the impression that user must be same as the effective UID of logged in user, which in my setup is vmail(121). Also, maybe the (null)Fatal -message could be improved(?). # dovecot -n # 2.0.13 (3d07ab746a67): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-1-686 i686 Debian squeeze/sid ext3 auth_debug = yes auth_verbose = yes debug_log_path = /var/log/dovecot/debug.log first_valid_gid = 123 first_valid_uid = 121 info_log_path = /var/log/dovecot/info.log last_valid_gid = 123 last_valid_uid = 121 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot/dovecot.log mail_debug = yes mail_location = maildir:/home/vmail/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } plugin { sieve = /home/vmail/%n/dovecot.sieve sieve_dir = /home/vmail/%n/sieve sieve_extensions = +enotify +subaddress +vacation } protocols = " imap lmtp sieve" rejection_reason = Your message to <%t> was rejected: %r rejection_subject = Mail delivery failed: returning message to sender service auth { unix_listener auth-userdb { group = vmail mode = 0660 } } service imap { executable = imap postlogin } service postlogin { executable = script-login rawlog user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=121 gid=123 driver = passwd } userdb { args = uid=121 gid=123 allow_all_users=yes home=/home/vmail/%n driver = static } protocol lda { info_log_path = /var/log/dovecot/lda-info.log log_path = /var/log/dovecot/lda.log mail_plugins = sieve } -- Mikko

2 1

Re: [Dovecot] [Urgent] Email Retrieval from remote servers doesn't use Dovecot
by Joseph Tam 30 Jun '11

30 Jun '11

Shazia Javed writes: > Trying 127.0.0.1... > Connected to 127.0.0.1. > Escape character is '^]'. > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE > STARTTLS AUTH=PLAIN] Dovecot ready. > ... > > telnet mail.ut.ee 143 > > Trying 193.40.5.156... > Connected to mailhost.ut.ee. > Escape character is '^]'. > * OK IMAP4 ready That is weird. Maybe you got NAT forwarding going on where a firewall or other network appliance (like a load balancer) is translating ip1/143 -> ip2/143? Or you're not on the host you think you're on. You can check the dovecot logs to verify that in fact your client is connecting. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Virtual Servers
by Daniel L. Miller 29 Jun '11

29 Jun '11

Maybe a little off-topic - but I hope not too much. Looking for some insight on setting up Dovecot under a virtual server. In particular, I use VirtualBox - and at the moment, Ubuntu Linux. Initial questions on configuration: Caching. It seems to me - and I'm probably wrong - that running a Linux in a VM on a Linux host, there would be a duplication of caching. That is, the host server has a file cache - and the VM, which is otherwise a standard Linux installation, is also going to try to cache its files. This strikes me as a duplication of effort and waste of RAM. Is this something I should devote any time to thinking about and trying to minimize? If so, how? Mail storage. My current mail store is a RAID-10, using the mdbox format. I wish to continue storing the mail on "raw" disks - not place the mail inside a virtual disk. Accordingly, the VM needs to reach the mail outside the VM environment - which according to conventional wisdom means NFS. My initial testing shows NFS results in a dramatically reduced performance for Dovecot. Given that this NFS access is going to be exclusively for Dovecot, and I'm only running a single server, are there any NFS or Dovecot tweaks I should implement? Is there an alternative connectivity for the VirtualBox environment I should explore? -- Daniel

7 16

[Dovecot] [Urgent] Email Retrieval from remote servers doesn't use Dovecot
by Shazia Javed 29 Jun '11

29 Jun '11

------------------------ Dovecot Version: ------------------------ 2.0.13 ------------------------ Output of "dovecot -n": ------------------------ # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.35-28-generic x86_64 Ubuntu 10.10 ext4 mail_location = maildir:/home/%u/Maildir passdb { args = %s driver = pam } protocols = imap pop3 ssl = no userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } --------------------------- Objective: --------------------------- We need to download emails from remote server using Dovecot and thunderbird. Our objective is to store emails in maildir or mbox format, and process them as part of our research project. --------------------------- Problem: --------------------------- Dovecot works for localhost, but not for remote servers. How do I know? Because thunderbird downloads emails in its default location (specified in settings) and not in maildir or mbox folders. If I send mail to <user>@<system_name> using mail command, dovecot works and thunderbird shows the email stored in maildir folder. But for email from <id>@yahoo.com goes to thunderbird's default folder and are browsed from there. --------------------------- Relevant Technical Details: --------------------------- ps auxw|grep "dovecot\|imap\|pop3" root 1033 0.0 0.0 52796 1916 ? Ss 12:45 0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf root 1173 0.0 0.0 75096 3284 ? S 12:45 0:00 dovecot-auth root 1214 0.0 0.0 75188 3424 ? S 12:45 0:00 dovecot-auth -w dovecot 8356 0.0 0.0 50528 2692 ? S 13:30 0:00 pop3-login dovecot 8357 0.0 0.0 50528 2692 ? S 13:30 0:00 pop3-login dovecot 8358 0.0 0.0 50528 2688 ? S 13:30 0:00 pop3-login dovecot 8359 0.0 0.0 50528 2688 ? S 13:30 0:00 pop3-login dovecot 8360 0.0 0.0 50528 2688 ? S 13:30 0:00 pop3-login dovecot 8364 0.0 0.0 50540 2688 ? S 13:30 0:00 imap-login dovecot 8375 0.0 0.0 50540 2692 ? S 13:30 0:00 imap-login dovecot 8378 0.0 0.0 50540 2684 ? S 13:30 0:00 imap-login shaz 9048 0.0 0.0 8956 864 pts/0 S+ 15:06 0:00 grep --color=auto dovecot\|imap\|pop3 sudo netstat -lnptu [sudo] password for shaz: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 1033/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 1033/dovecot tcp 0 0 0.0.0.0:64277 0.0.0.0:* LISTEN 2068/skype tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1295/cupsd tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 1389/master tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 1033/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 1033/dovecot tcp6 0 0 ::1:631 :::* LISTEN 1295/cupsd udp 0 0 127.0.0.1:45902 0.0.0.0:* 2068/skype udp 0 0 0.0.0.0:33754 0.0.0.0:* 1065/avahi-daemon: udp 0 0 0.0.0.0:5353 0.0.0.0:* 1065/avahi-daemon: udp 0 0 0.0.0.0:68 0.0.0.0:* 2132/dhclient udp 0 0 0.0.0.0:64277 0.0.0.0:* 2068/skype udp6 0 0 :::5353 :::* 1065/avahi-daemon: udp6 0 0 :::50994 :::* 1065/avahi-daemon: sudo lsof -i | grep LISTEN dovecot 1033 root 6u IPv4 7578 0t0 TCP *:imap2 (LISTEN) dovecot 1033 root 7u IPv4 7579 0t0 TCP *:imaps (LISTEN) dovecot 1033 root 9u IPv4 7580 0t0 TCP *:pop3 (LISTEN) dovecot 1033 root 10u IPv4 7581 0t0 TCP *:pop3s (LISTEN) cupsd 1295 root 5u IPv6 7932 0t0 TCP Casper:ipp (LISTEN) cupsd 1295 root 6u IPv4 7933 0t0 TCP localhost.localdomain:ipp (LISTEN) master 1389 root 12u IPv4 9284 0t0 TCP *:smtp (LISTEN) skype 2068 shaz 67u IPv4 18344 0t0 TCP *:64277 (LISTEN) pop3-logi 8356 dovecot 4u IPv4 7580 0t0 TCP *:pop3 (LISTEN) pop3-logi 8356 dovecot 5u IPv4 7581 0t0 TCP *:pop3s (LISTEN) pop3-logi 8357 dovecot 4u IPv4 7580 0t0 TCP *:pop3 (LISTEN) pop3-logi 8357 dovecot 5u IPv4 7581 0t0 TCP *:pop3s (LISTEN) pop3-logi 8358 dovecot 4u IPv4 7580 0t0 TCP *:pop3 (LISTEN) pop3-logi 8358 dovecot 5u IPv4 7581 0t0 TCP *:pop3s (LISTEN) pop3-logi 8359 dovecot 4u IPv4 7580 0t0 TCP *:pop3 (LISTEN) pop3-logi 8359 dovecot 5u IPv4 7581 0t0 TCP *:pop3s (LISTEN) pop3-logi 8360 dovecot 4u IPv4 7580 0t0 TCP *:pop3 (LISTEN) pop3-logi 8360 dovecot 5u IPv4 7581 0t0 TCP *:pop3s (LISTEN) imap-logi 8364 dovecot 4u IPv4 7578 0t0 TCP *:imap2 (LISTEN) imap-logi 8364 dovecot 5u IPv4 7579 0t0 TCP *:imaps (LISTEN) imap-logi 8375 dovecot 4u IPv4 7578 0t0 TCP *:imap2 (LISTEN) imap-logi 8375 dovecot 5u IPv4 7579 0t0 TCP *:imaps (LISTEN) imap-logi 8378 dovecot 4u IPv4 7578 0t0 TCP *:imap2 (LISTEN) imap-logi 8378 dovecot 5u IPv4 7579 0t0 TCP *:imaps (LISTEN) telnet 127.0.0.1 110 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. +OK Dovecot ready. telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. 1 logout * BYE Logging out 1 OK Logout completed. Connection closed by foreign host. telnet mail.ut.ee 110 Trying 193.40.5.156... Connected to mailhost.ut.ee. Escape character is '^]'. +OK POP3 ready quit +OK Connection closed by foreign host. telnet mail.ut.ee 143 Trying 193.40.5.156... Connected to mailhost.ut.ee. Escape character is '^]'. * OK IMAP4 ready 1 logout * BYE 1 OK completed Connection closed by foreign host. ----------------- Commentary: ----------------- As is obvious from the commands and output listed above that dovecot is running, listening on 110 and 143 - but only for localhost. When I try to telnet mail.ut.ee 110/143 I get to see IMAP4/POP3 ready rather than Dovecot ready. ----------------- Queries ----------------- Shouldn't I get "Dovecot ready" message for remote servers as well? It is an MRA and we shouldn't be required to install it on remote servers, right? What should I do to make dovecot work for remote servers?

4 3

[Dovecot] LDAP timeout
by Bernhard Schmidt 29 Jun '11

29 Jun '11

Hi, we recently hit an issue where one (of the three configured) LDAP servers dropped an index on an attribute due to a misconfiguration, which caused all/most queries for passdb to take a very long time (several 10s of seconds). The other servers would have been fine, but it seems like Dovecot does either not set a timelimit on the query or uses a very high one. I could not find any place to control that either. Is there any knob to tune the LDAP timeout? Bernhard

2 2

[Dovecot] Dovecot 1.2.16 -> Dovecot 2.0.13 Performance?
by Jorgen Lundman 29 Jun '11

29 Jun '11

Hello list, Currently running dovecot-1.2.16 as pop, imap, and deliver (with sieve). All on Solaris 10u9, on NFSv4 backends. All is working great. But occasionally, the system gets rather loaded, not entirely sure what part yet, but as part of researching that; If we were to start the upgrade path to dovecot 2.0.13, are there any known areas of performance increase which should encourage us to do this? Since we have a stable system, there is hesitation in changing any part of it :) Each NFS server hosts about 92,381 mailboxes, LDAP as authentication and ZFS user quotas. What sort of numbers do others manage generally? Cheers, Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

1 0

[Dovecot] Sendmail + dovecot-lda + LDAP
by Василий Яковлев 28 Jun '11

28 Jun '11

Hi, I experince some problems with setting up Sendmail with the LDAP database for virtual mail accounts. Why i'm not writing to the LDAP mailing list? I believe, that the reason of my problem is in configuring dovecot-deliver. What i have: - FreeBSD 8.2-RELEASE - sendmail (Version 8.14.4 with LDAP support installed from ports) - Dovecot LDA + dovecot (as pop3/imap) - 1.2.16 - Cyrus Sasl (authdaemon for authentification) 1. Following http://wiki.dovecot.org/LDA/Sendmail i've set up deliver as LDA. Everything worked fine. 2. Following http://wiki.dovecot.org/HowTo/DovecotOpenLdap i've set up Dovecot to work with tha ldap. Now i can authorize through the client or web interface and get to my maildir. 3. Now, i want my sendmail to accept mail for the account in LDAP database. sendmail.mc: ++++++++++++++++++++++ FEATURE(`local_procmail', `/usr/local/libexec/dovecot/deliver',`/usr/local/libexec/dovecot/deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') ...................................... define(`confLDAP_DEFAULT_SPEC', `-h "localhost" -b "dc=mydomain,dc=ru" -d "cn=dovecot,ou=accounts,dc=mydomain,dc=ru" -MLDAP_AUTH_SIMPLE -P /etc/mail/ldap_pass')dnl LDAPROUTE_DOMAIN(`mydomain.ru')dnl FEATURE(`ldap_routing', `null -T<TMPF>', `ldap -1 -T<TMPF> -v mail -k (&(objectclass=posixaccount)(mail=%0))', `passthru')dnl ...................................... MAILER(procmail) ++++++++++++++++++++++ After re-making the sendmail: ++++++++++++++++++++++ [root@test2 /etc/mail]# sendmail -bv -d60.1 test_user(a)mydomain.ru map_lookup(dequote, test) => NOT FOUND (0) map_lookup(host, mydomain.ru) => mydomain.ru. (0) map_lookup(dequote, test_user) => NOT FOUND (0) map_lookup(ldapmra, test_user(a)mydomain.ru) => test_user(a)mydomain.ru (0) map_lookup(ldapmh, test_user(a)mydomain.ru) => NOT FOUND (68) map_lookup(host, mydomain.ru) => mydomain.ru. (0) map_lookup(dequote, test_user) => NOT FOUND (0) map_lookup(virtuser, test_user(a)mydomain.ru) => NOT FOUND (0) map_lookup(virtuser, @mydomain.ru) => NOT FOUND (0) test_user(a)mydomain.ru... User unknown ++++++++++++++++++++++ It's the problem of the local delivery, i believe. Why? Because after sendmail getting an email it passes it to the LDA, which must check the LDAP (not the passwd!) database for the user, to which this email is send to. Are there some possibilities to solve this problem? I appreciate any help... ----------------------- Best regards, Vasily Yakovlev ----------------------------------------------------------------------

1 0

[Dovecot] hide sieve folder from imap clients
by Christopher Stolzenberg 28 Jun '11

28 Jun '11

Hello, What is the best way to hide sieve folders from IMAP clients? old config mail_home = /var/vmail/%d/%n plugin { sieve_dir = /var/vmail/%d/%n/.sieve/ sieve = /var/vmail/%d/%n/.dovecot.sieve } new config (hide sieve folder) mail_home = /var/vmail/%d/%n maildir_stat_dirs = yes plugin { sieve_dir = /var/vmail/%d/%n/sieve/ sieve = /var/vmail/%d/%n/.dovecot.sieve } Is there a better way without maildir_stat_dirs = yes ? -- Christopher

5 10

[Dovecot] ACLs: Group ACL adds empty ACL for user of same name, why?
by Jim Hague 28 Jun '11

28 Jun '11

I'm playing around with ACLs, Groups and SOGo on Debian Stable, Dovecot 1.2.15. If I set an ACL for a group 'developers': 6 setacl "INBOX.Trash" "$developers" "lrsw" 6 OK Setacl complete. The dovecot-acl file for INBOX.Trash then contains a group setting for the group, and a user setting for a user of the same name, giving it no permissions. group=developers lrws user=developers and a subsequent GETACL reports the user: 5 getacl "INBOX.Trash" * ACL "INBOX.Trash" "$developers" lrws "developers" "" "jim" lrwstipekxacd 5 OK Getacl completed. Currently SOGo does not deal well with the unexpected non-existant user. So I'm curious - why's it there? -- Jim Hague - jim.hague(a)acm.org Never trust a computer you can't lift.

2 2

[Dovecot] Hi
by Meisam Navaki 28 Jun '11

28 Jun '11

Hi all, I'm reading dovecot source codes(2.0.13),and I need to know how dovecot communicate with sasl? I traced the source code from cmd_login function,and found out something about sasl_callback. but i never found where this function called and also I couldn't understand how sasl inform the dovecot from authentication result. I'll be thankful if someone could help me out.

1 0