- dovecot - dovecot.org

Re: [Dovecot] SUMMARY: LDA vs LMTP, Cyrus SASL, verbose_proctitle
by Joseph Tam 13 Apr '11

13 Apr '11

Timo Sirainen <tss(a)iki.fi> wrote: > On Mon, 2011-04-11 at 18:19 -0700, Joseph Tam wrote: > > > Also, one significant advantage not mentioned for LMTP was that one > > delivery failure to multiple recipients can be disambiguated; LDA can only > > return an exit code to be tested by the MTA, but the MTA cannot know > > which recipient(s) generated the error. > > In almost all setups MTA delivers mails to LDA one at a time. Multiple > deliveries are useful only if you want to try to get the same mail file > hard linked to all recipients. So normally this is a non-issue. I guess my sendmail is not normal. The default configuration does pool multiple recipient delivery and run mail.local with all these users as arguments in one invocation. dovecot-lda doesn't seem to support multiple recipients per invocation, so this won't be a problem. The implication for sendmail users, though, is that multiple concurrent deliveries must be disabled if you use dovecot-lda (the 'm' flag must be removed from LOCAL_MAILER_FLAGS) as implicitely done in http://wiki2.dovecot.org/LDA/Sendmail I notice the 'A' flag is missing here: doesn't this kill aliasing? If and when I can fully test my setup, I will update this page. > > echo "main(int c,char**v){**v='x';sleep(9);}" | \ > > gcc -xc -o y -; ./y; rm y & > > ps -f > > IIRC /usr/ucb/ps shows the changes. Ah. I'll take your word for it since I only have the SysV stuff installed. Thanks for the info. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Best practices to migrate from mbox to Maildir++ and also changing the deliver method
by Julio C. Ortega 13 Apr '11

13 Apr '11

Greetings. Im about to move from mbox to Maildir++ and change the deliver method from procmail. I have less than 100 accounts, but there's a lot of mail (around 16GB) Apart from the documentation on Dovecot's site, anyone has good recommendations, and, if you have experience doing this migration any tips? Thanks for any info, and wishing you all a nice week -- ------------------------------------ Julio C. Ortega ONUVA http://www.onuva.com

2 1

[Dovecot] Upgraded to Dovecot-1.2.16 and Sieve-1.1.8 but Still No Sieve Parameters
by Jay Welch 12 Apr '11

12 Apr '11

I have upgraded to a newer version of Dovecot and I have installed Sieve. Everything went smooth and with no errors but I still don't see any Sieve parameters in dovecot.conf file. I'm looking at /usr/local/etc/dovecot-example.conf. What could be the issue? Thanks -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

[Dovecot] v2.0.12 released
by Timo Sirainen 12 Apr '11

12 Apr '11

http://dovecot.org/releases/2.0/dovecot-2.0.12.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.12.tar.gz.sig Many small fixes, plus some more noticeable: + doveadm: Added "move" command for moving mails between mailboxes. + virtual: Added support for "+mailbox" entries that clear \Recent flag from messages (default is to preserve them). - dbox: Fixes to handling external attachments - dsync: More fixes to avoid hanging with remote syncs - dsync: Many other syncing/correctness fixes - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right BTW. I'm moving again next weekend, this time to Helsinki. Hopefully I'll be living there for a while. :)

2 1

[Dovecot] Questions about converting maildir to mdbox.
by Henrique Fernandes 12 Apr '11

12 Apr '11

First of all i would like to thanks Timo for the excellent job done in dovecot. We are using it in you prodution server with about 5 millions of emails and it is pretty good, only a performance problens but i guess it is realated to ocfs2 that we are using. So lets begin: We are using dovecot 2.0.6 with maildir in an ocfs2 partiton. It is pretty slow access in peak time, but it is related to ocfs2 as i said before, i am trying to mimimize the ocfs2 latancy by using mdbox. Another problem that we have are Full backup that takes about 24h and incremental takes about 13h I am thinking in converting some email for testing propose, but i am wondoring how would dovecot convert this, like if i convert all mail from maildir to mdbox it would make many mailbox based on this seetings ? Or in the first convert it would make a big mdbox file and after it it will rotate by day or it would make many boxes just based on size? mdbox_rotate_size = 5m mdbox_rotate_interval = 1d Well, another thing can i make rotate interval happens in a certain time of day? end from where it takes this time ? it rotates at midnight ? Another one!, if i lose the index files what really happens ? Sometimes in my server the index get corrupet and as i am reading mdbox index files held information that is not in other place. So what should i do to prevent any possible lose of data even if i lose the indexes? I was reading about backup restore also, but i did not get it pretty well. With maildir we simple restore the files and the index gets rebuilt! What should i do with mdbox ? Restore the files and the index ? But how about the other emails that the account got after the backup, how i should merge the multiple files and more importanet how do i merge the index files ? Well, sorry about my english! And Thanks alot guys! []'sf.rique

3 4

[Dovecot] Vpopmail and lastauth
by mailing＠securitylabs.it 12 Apr '11

12 Apr '11

Hello, I'm migrating many accounts to a new server with vpopmail 5.4.33 and dovecot 2.0.11. I've already vpopmail 5.4.32 and dovecot 1.2.16 on others servers running without problems. With dovecot 2.0.11 my lastauth file is not updated. This file usually is update on any access (smtp, pop3, imap) with the client's IP, for every mailbox. Now it's updated only when a client authenticate itself via SMTP (smtp-auth with qmail + vpopmail), and not with imap/pop3 access. My conf: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 auth_cache_negative_ttl = 2 mins auth_cache_size = 1000 M auth_cache_ttl = 2 mins auth_mechanisms = plain cram-md5 apop auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@& disable_plaintext_auth = no first_valid_uid = 89 last_valid_uid = 95 lock_method = dotlock log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Server ready. mail_fsync = never mail_gid = vchkpw mail_location = maildir:~/Maildir mail_privileged_group = vchkpw mail_uid = vpopmail namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = webmail=127.0.0.1 driver = vpopmail } plugin/mail_log_events = delete expunge plugin/mail_log_group_events = plugin/quota = maildir plugin/quota_rule = ?:storage=0 pop3_uidl_format = %f protocols = imap pop3 service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } service imap-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service imap { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } service pop3-login { client_limit = 256 process_limit = 128 process_min_avail = 3 service_count = 1 } service pop3 { drop_priv_before_exec = yes process_limit = 256 vsz_limit = 256 M } ssl_cert = </usr/local/etc/dovecot/dovecot.crt ssl_key = </usr/local/etc/dovecot/dovecot.key userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify quota imap_quota mail_log" }

3 4

[Dovecot] SUMMARY: LDA vs LMTP, Cyrus SASL, verbose_proctitle
by Joseph Tam 12 Apr '11

12 Apr '11

A summary of answers I got to the questiosn I posed. > Is there a reason I should prefer LMTP over LDA for local delivery? Thanks for the responses I received. The benefits reported were more/better information logging, and service isolation. Also, one significant advantage not mentioned for LMTP was that one delivery failure to multiple recipients can be disambiguated; LDA can only return an exit code to be tested by the MTA, but the MTA cannot know which recipient(s) generated the error. This problem present can itself, for example, when one user has a full mailbox. An LDA will return EX_TEMPFAIL, and the message will be requeued, and delivery will be retried for all recipients (even those that were successfully delivered to). > The Wiki doesn't differentiates LMTP vs LDA with respect to sendmail > configuration, so am I correct that I just need to replace mail.local > with dovecot-lda, which will choose LDA/LMTP based on dovecot.conf? Not that simple, but I finally did find my answer in the Dovecot archives. It's too bad I had to spend hours tearing apart the sendmail docs before finding it http://www.dovecot.org/list/dovecot/2010-September/052936.html The .mc version of the configuration: # Use LMTP for local delivery over IPC channel FEATURE(`local_lmtp',`[IPC]') # Location of LMTP socket define(`LOCAL_MAILER_ARGS', `FILE /path/to/dovecot/lmtp') # Replace default sendmail LMTP options: the same options # with the 'P' flag removed so that the Return-Path is not # added (again?) define(`LOCAL_MAILER_FLAGS', `SXmnz9') MAILER(`local') I haven't tried this yet, but this is pretty close. > Also, can I consolidate authentication by configuring dovecot to use > what sendmail uses (Cyrus SASL) or vice versa? The Wiki hints this is > in the works. No response, so I guess the answer is no. > Lastly, toggling verbose_proctitle seems to have no effect on the output > of ps. Is verbose_proctitle broken for Solaris? The answer to is verbose_proctitle is broken for Solaris. There is no setproctitle(), and ps does not report changes to a process's argv[]: echo "main(int c,char**v){**v='x';sleep(9);}" | \ gcc -xc -o y -; ./y; rm y & ps -f You'll have to use "lsof", "pfiles" or "doveadm who" to get the information. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Intermitent ldap auth problems benchmarking dovecot
by Maria Arrea 12 Apr '11

12 Apr '11

Hello We are using SLAMD (Distributed Load Generation Engine, www.slamd.com) to benchmark our dovecot server (ldap auth). We are simulating 2.000 simultaneous logins and 20% of them fail. We saw the following errors in the log: Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) Apr 12 09:40:07 buzon dovecot: auth: Error: ldap(correo,192.168.4.153): Request queue is full (oldest added 1 secs ago) We increased auth_worker_max_count from 350 to 3500 (10x increase). Now we see the following errors (still 20% of logins fail): Apr 12 10:14:45 buzon dovecot: imap-login: Internal login failure (pid=29016 id=24783) (auth failed, 1 attempts): user=<correo>, method=PLAIN, rip=192.168.4.153, lip=192.168.4.80, mpid=21284 Apr 12 10:14:45 buzon dovecot: imap-login: Internal login failure (pid=29016 id=24784) (auth failed, 1 attempts): user=<correo>, method=PLAIN, rip=192.168.4.153, lip=192.168.4.80, mpid=21286 What are we doing wrong? We expect 1000 simultaneous imap sessions, we have 65.000 mailboxes. This is our doveconf -n output # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.5.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) ext4 auth_debug = yes auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 3500 base_dir = /var/run/dovecot/ default_client_limit = 5000 default_process_limit = 6500 disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep delay-newmail lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_fsync = never mail_gid = entrega mail_home = /buzones/%2.26Hn/%2.200Hn/%n/ mail_location = mdbox:/buzones/%2.26Hn/%2.200Hn/%n:INDEX=/indices_dovecot/indices/%2.26Hn/%2.200Hn/%n mail_max_userip_connections = 15000 mail_plugins = " zlib acl" mail_uid = entrega managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mdbox_rotate_interval = 1 days mdbox_rotate_size = 60 M passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/usuario_maestro.txt driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin/acl = vfile plugin/quota = dict:Cuota de usuario::file:/buzones/cuotas/%n plugin/quota_rule2 = Trash:storage=+10%% plugin/quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 plugin/quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80 plugin/sieve = /buzones/%2.26Hn/%2.200Hn/%n/dovecot.sieve plugin/sieve_dir = /buzones//%2.26Hn/%2.200Hn/%n/sieve/ plugin/zlib_save = gz plugin/zlib_save_level = 9 protocols = pop3 imap sieve service anvil { client_limit = 25000 } service auth { client_limit = 28000 unix_listener auth-master { user = entrega } unix_listener auth-userdb { user = entrega } user = root } service imap-login { executable = /usr/libexec/dovecot/imap-login group = dovenull service_count = 0 } service imap { executable = /usr/libexec/dovecot/imap process_limit = 6000 } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 2000 } process_limit = 2000 } service managesieve { executable = /usr/libexec/dovecot/managesieve process_limit = 5000 } service pop3-login { executable = /usr/libexec/dovecot/pop3-login process_limit = 4000 service_count = 0 } service pop3 { executable = /usr/libexec/dovecot/pop3 process_limit = 4000 } ssl_ca = </etc/pki/generico/cacert.crt.pem ssl_cert = </etc/pki/generico/wildcard.crt ssl_key = </etc/pki/generico/wildcard-key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } verbose_proctitle = yes protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lda { hostname = us.es info_log_path = log_path = mail_fsync = optimized mail_plugins = sieve zlib postmaster_address = evcorreo(a)domain.es syslog_facility = mail } protocol imap { mail_plugins = zlib } protocol pop3 { mail_plugins = zlib pop3_enable_last = yes pop3_uidl_format = %g }

3 3

[Dovecot] Fwd: .dovecot.sieve as Mailbox
by Francisco Wagner C. Freire 12 Apr '11

12 Apr '11

---------- Forwarded message ---------- From: Francisco Wagner C. Freire <wgrcunha(a)gmail.com> Date: Tue, Apr 12, 2011 at 9:20 AM Subject: Re: [Dovecot] .dovecot.sieve as Mailbox To: Jan Phillip Greimann <jg(a)softjury.de> Yeah, i can do that, or change the user homedir, but i need some time to change scripts. But, is normal to dovecot show a file as a mailbox? And have any kind of option to hide this one? On Tue, Apr 12, 2011 at 9:15 AM, Jan Phillip Greimann <jg(a)softjury.de>wrote: > > > Am 12.04.2011 14:08, schrieb Francisco Wagner C. Freire: > > Hello, > Hi there, > > > > > I current using maildir and mail location is: > > *mail_location = maildir:%h:INDEX=%h/cache* > > > > Any tip to hide this to users? > > what's about > sieve_dir = ~/sieve > in 90-sieve.conf? > > must the sieve-files be in ~/ ? > > > > > Sorry for my bad english :) > Sorry for my bad english too ^^ > > Greetings Jan P. Greimann > Administrator (in training) > >

3 4

[Dovecot] .dovecot.sieve as Mailbox
by Francisco Wagner C. Freire 12 Apr '11

12 Apr '11

Hello, I current using dovecot 2.0.11 and with all other 2x versions occurring the same problem. When i create the file .dovecot.sieve and compiled one .dovecot.svbin on user homedir, the imap show it like a folder, example: doveadm mailbox list -u user(a)domain.com .. .. *dovecot.sieve* *dovecot.svbin* .. .. I current using maildir and mail location is: *mail_location = maildir:%h:INDEX=%h/cache* Any tip to hide this to users? Sorry for my bad english :) Att. Francisco Freire System Administrator

3 2