- dovecot - dovecot.org

[Dovecot] passdb: password contains illegal chars question
by Torsten Krah 03 Jun '11

03 Jun '11

Hi, some question about passdb backend: I'll receive this (using dovecot 2.0.13, pgsql passdb backend) for some users: mail dovecot: auth: passdb(account-username,127.0.0.1): Attempted login with password having illegal chars Password schema ist crypt-md5. So what "chars" does dovecot not like (why?) and whats the preferred way to fix this? regards Torsten -- Bitte senden Sie mir keine Word- oder PowerPoint-Anhänge. Siehe http://www.gnu.org/philosophy/no-word-attachments.de.html Really, I'm not out to destroy Microsoft. That will just be a completely unintentional side effect." -- Linus Torvalds

2 1

[Dovecot] doveadm segfault
by Joan Moreau 03 Jun '11

03 Jun '11

Hi, Using HG latest version, I get the following in the dmesg : [38041.387112] doveadm[20515]: segfault at 8 ip 000000000040f51d sp 00007fffb774c010 error 4 in doveadm[400000+2a000] [38041.397966] doveadm[20613]: segfault at 8 ip 000000000040f51d sp 00007fff953c1790 error 4 in doveadm[400000+2a000] [38041.428206] doveadm[20615]: segfault at 8 ip 000000000040f51d sp 00007ffffdce0cf0 error 4 in doveadm[400000+2a000] [38041.444879] doveadm[20619]: segfault at 8 ip 000000000040f51d sp 00007fffbb0668b0 error 4 in doveadm[400000+2a000] [38041.451815] doveadm[20622]: segfault at 8 ip 000000000040f51d sp 00007fff91d9b670 error 4 in doveadm[400000+2a000] [38041.459231] doveadm[20624]: segfault at 8 ip 000000000040f51d sp 00007fffe92b31b0 error 4 in doveadm[400000+2a000] [38041.468292] doveadm[20625]: segfault at 8 ip 000000000040f51d sp 00007fff5a4895c0 error 4 in doveadm[400000+2a000] [38041.481951] doveadm[20626]: segfault at 8 ip 000000000040f51d sp 00007fff8e84d010 error 4 in doveadm[400000+2a000] [38041.489414] doveadm[20629]: segfault at 8 ip 000000000040f51d sp 00007fff79206180 error 4 in doveadm[400000+2a000] [38041.512329] doveadm[20630]: segfault at 8 ip 000000000040f51d sp 00007ffff10582d0 error 4 in doveadm[400000+2a000] hundreds of times... No clue what is the bug.... JM

2 1

[Dovecot] Error: file_dotlock_create failed: Permission denied
by M. Fioretti 03 Jun '11

03 Jun '11

Hi, I have a Fedora 14 x86_64 computer. I run dovecot 2.0.12 on it, only to keep a local imap copy of all my email, in maildir format. A couple days ago the hard disk broke, so I bought a new one, and reinstalled Fedora 14 x86_64 with all the updates. Then I copied all the maildirs from a backup to the new drive. But I can't access email now. No matter how I change sticky bits or ownership and permissions of all the involved files and directories, etc.. Login succeeds, but I get this error whenever I try to create new mailboxes or access existing ones: May 25 13:36:03 polaris dovecot: imap-login: Login: user=<marco>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=8489, secured May 25 13:36:06 polaris dovecot: imap(marco): Error: file_dotlock_open(/home/z/email/marco/dovecot.index.log) failed: Permission denied (euid=500(marco) egid=500(marco) missing +w perm: /home/z/email/marco, euid is not dir owner) May 25 13:36:06 polaris dovecot: imap(marco): Error: file_dotlock_create(/home/z/email/marco/dovecot-uidlist) failed: Permission denied (euid=500(marco) egid=500(marco) missing +w perm: /home/z/email/marco, euid is not dir owner) May 25 13:36:06 polaris dovecot: imap(marco): Error: file_dotlock_create(/home/z/email/marco/dovecot-uidlist) failed: Permission denied (euid=500(marco) egid=500(marco) missing +w perm: /home/z/email/marco, euid is not dir owner) May 25 13:36:06 polaris dovecot: imap(marco): Error: opendir(/home/z/email/marco/new) failed: Permission denied (euid=500(marco) egid=500(marco) missing +r perm: /home/z/email/marco/new, euid is not dir owner) May 25 13:36:06 polaris dovecot: imap(marco): Error: file_dotlock_create(/home/z/email/marco/dovecot-uidlist) failed: Permission denied (euid=500(marco) egid=500(marco) missing +w perm: /home/z/email/marco, euid is not dir owner) Again, this doesn't change changing ownership. Output of dovecot -n is below The only possible difference I can find between this and the previous install of the SAME distro/dovecot package is that this time I use ext4 filesystem. Maybe, I don't remember, I was using ext3 in the original install. What must I change to gain access again to my mailboxes??? thanks! Marco dovecot -n # 2.0.12: /etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:88: ssl_disable has been renamed to ssl doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:979: auth_user has been replaced by service auth { user } doveconf: Warning: SSL is disabled because global ssl=no, ignoring ssl=yes for subsection # OS: Linux 2.6.35.13-91.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login listen = * mail_location = maildir:/home/z/email/%u mail_privileged_group = mail_imap passdb { args = scheme=plain username_format=%n /etc/local_dovecot_passwords driver = passwd-file } protocols = imap service auth { user = root } ssl = no userdb { args = username_format=%n /etc/local_dovecot_passwords driver = passwd-file } protocol lda { postmaster_address = postmaster(a)example.com }

2 2

[Dovecot] Squat Question!
by Henrique Fernandes 03 Jun '11

03 Jun '11

Hello folks, I use dovecot squat for indexing. I use to have fts_squat = partial=4 full=4 But i change to fts_squat = partial=4 full=8 My question is, do i need to delete older indexes to have it consistenly, or dovecot is able "update" the indexes or it sees that it is broken and rebuild it all? Other question, is there an comand line to update the indexes ? Thanks a lot! []'sf.rique

3 7

[Dovecot] This is appear a fts bug
by Antonio Perez-Aranda 03 Jun '11

03 Jun '11

I have checked this on dovecot 2.0.9 and 2.0.13 with fts-solr without patching. If you execute the follow IMAP script, then the imap process die by and a "assert" . select "inbox." . search text something After search, the connection is aborted in the client side, and imap process died on the server. When the log in dovecot says: (fts_backend_solr_init): assertion failed: (*box_name != '\0') After debug the code, there isn't in context any possibility to get "box_name". With squat plugin it is running. -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] v2.0.13 released
by Sean Donelan 03 Jun '11

03 Jun '11

After configure and compiling dovecot-2.0.13, running "make check" fails on a few tests on sparc/solaris net_is_in_network(0) ................................................. : ok net_is_in_network(1) ................................................. : ok net_is_in_network(2) ................................................. : ok net_is_in_network(3) ................................................. : ok net_is_in_network(4) ................................................. : ok net_is_in_network(5) ................................................. : ok net_is_in_network(6) ................................................. : ok net_is_in_network(7) ................................................. : ok net_is_in_network(8) ................................................. : ok net_is_in_network(9) ................................................. : ok net_is_in_network(10) ................................................ : ok net_is_in_network(11) ................................................ : FAILED net_is_in_network(12) ................................................ : FAILED net_is_in_network(13) ................................................ : ok net_is_in_network(14) ................................................ : ok net_is_in_network(15) ................................................ : ok net_is_in_network(16) ................................................ : ok The failing tests are for { "255.255.255.255", "128.0.0.0", 1, TRUE }, { "255.255.255.255", "127.0.0.0", 1, FALSE } src/lib/network.c src/lib/test-network

2 1

[Dovecot] shared folders "invisible" on new setup
by Torsten Harenberg 03 Jun '11

03 Jun '11

Dear list, I hope this is not an old issue, but I couldn't find a solution even after google'ing quite some time. I try to migrate our institute's mail server (~200 users) from an old cyrus-based Mac installation to a new machine (NetBSD, dovecot 2.0.13). Everything went quite smoothly so far, but we are used to have "shared folders" ("public" folders in dovecot) and I simply couldn't make them to appear. I have two separate folders for private (user) mails and for public ones (yes, I set everything to 777 for the moment to avoid file access problems) : mailserver# pwd /var/mail mailserver# ls -al total 8 drwxrwxrwt 4 dovecot wheel 512 May 31 12:26 . drwxr-xr-x 28 root wheel 512 Mar 29 15:05 .. drwxrwxrwx 3 root mail 512 May 31 15:18 public drwxrwxrwx 4 root wheel 512 May 31 12:26 user In the public folder there is a shared folder named "fb8": mailserver# pwd /var/mail/public mailserver# ls -al total 8 drwxrwxrwx 3 root mail 512 May 31 15:18 . drwxrwxrwt 4 dovecot wheel 512 May 31 12:26 .. -rw-rw-rw- 1 10001 mail 0 May 31 15:14 dovecot-acl-list -rwxrwxrwx 1 root mail 0 May 31 11:06 dovecot-shared drwxrwxrwx 5 root mail 512 May 31 12:03 fb8 Now my own username (LDAP-based) is "harenber" and I try to subscribe myself to this list: mailserver# doveadm mailbox subscribe -u harenber public.fb8 mailserver# So a "subscriptions" file appears: mailserver# ls -al total 8 drwxrwxrwx 3 root mail 512 May 31 15:18 . drwxrwxrwt 4 dovecot wheel 512 May 31 12:26 .. -rw-rw-rw- 1 10001 mail 0 May 31 15:14 dovecot-acl-list -rwxrwxrwx 1 root mail 0 May 31 11:06 dovecot-shared drwxrwxrwx 5 root mail 512 May 31 12:03 fb8 -rw-rw-rw- 1 10001 mail 4 May 31 15:18 subscriptions mailserver# cat subscriptions fb8 mailserver# (although I think this is wrong, as I have namespace { list = children location = maildir:/var/mail/public:INDEX=~/public prefix = public. separator = . subscriptions = no type = public } I would assume this file to appear somewhere in /var/mail/user/harenber/public... ) But I cannot access this "fb8" folder with any client. Alpine says that the public folder is empty: ----------------------------------------------------------------------------------------------------------------------------------Folder-Collection <test> ---------------------------------------------------------------------------------------------------------------------------------- [No Folders in Collection] and also Apple Mail sees nothing beneath "public". Tried to speak IMAP directly shows: 01 login harenber XXXXX 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in 02 namespace * NAMESPACE (("" ".")) NIL (("public." ".")) 02 OK Namespace completed. 03 list "" * * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "ALiCEnext" [...] * LIST (\HasNoChildren) "." "sent-mail" * LIST (\HasNoChildren) "." "tier2" * LIST (\HasNoChildren) "." "trash" * LIST (\HasNoChildren) "." "INBOX" * LIST (\Noselect \HasChildren) "." "public" 03 OK List completed Maybe someone of you has a clue what I do wrong here, I'm completely lost at the moment. Thanks for any hint and best regards, Torsten mailserver# doveconf -n # 2.0.13: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.1 amd64 ffs auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ mail_debug = yes mail_gid = 6 mail_location = maildir:/var/mail/user/%u mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=%u/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = dovecot user = dovecot } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/certificates/mail.physik.uni-wuppertal.de.crt ssl_key = </etc/certificates/mail.physik.uni-wuppertal.de.key userdb { args = /usr/pkg/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole } mailserver# -- <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> <> <> <> Dr. Torsten Harenberg harenberg(a)physik.uni-wuppertal.de <> <> Bergische Universitaet <> <> FB C - Physik Tel.: +49 (0)202 439-3521 <> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <> <> 42097 Wuppertal <> <> <> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><>

2 4

[Dovecot] dbox single instance storage maintenance
by Daniel Miller 03 Jun '11

03 Jun '11

Does the "doveadm purge" operation delete unused attachments? -- Daniel

2 1

[Dovecot] Dovecot 2 + Director: IMAP+GSSAPI and LMTP-proxying
by Jahnke-Zumbusch, Dirk 03 Jun '11

03 Jun '11

Hi all, I have a setup of some nodes running Dovecot 2.0.13 and Postfix 2.5.6 with storage in NFS and authentication happening with PAM. Poking around in the wiki, I tried out different possibilities but now I am stuck -- and are hoping for your (enlightening) comments and tips. My planned setup for IMAP and LMTP is like this: IMAP ==== 1. A loadbalancer directs new sessions to a Dovecot-Director instance; this extra amount of traffic routing is mostly done for automatic handling in case of a failing Director node; this works fine, the same IP will end always on the same backend, but user-based Directory proxying seems more appropriate, especially taking the NFS-setup and the delivery process into account 2. Then the Director decides where to direct the user's session; this works fine when I let the backend servers do the authentication work 3. The backend Dovecot server will happily provide the user's e-mail For now my section for the passdb in the Director instance is passdb { driver = static args = proxy=y nopassword=y } So the backend will do the authentication of the session. But this setup inhibits using Kerberos, as the TGT is not forwarded to the backend server. I would very much like to provide GSSAPI/Kerberos authentication, which already works fine with the backend servers being directly connected by mail clients. The backend servers are using the PAM driver. I could not figure out, how to setup the passdb entry for the director instance to use PAM (this way enabling GSSAPI/Kerberos) and also giving back the necessary "proxy=y" to make director proxying the IMAP session. Is this setup feasible at all? LMTP ==== 1. Postfix accepts incoming e-mail and decides, which e-mail will go the LMTP-way to be deliverd into a Dovecot mailbox with something like virtual_transport = lmtp:inet:DOVECOT-DIRECTORS-IP:LMTP-PORT-ABC 2. the Dovecot Director instance accepts the LMTP connections and will proxy this to the appropriate==user's current backend server For now Postfix delivers e-mails using LMTP to the _backend_ w/o proxying and everything like SIEVE-filtering works fine: virtual_transport = lmtp:inet:DOVECOT-BACKENDS-IP:LMTP-PORT-XYZ But when I use the Director's IP/Port combination for LMTP, I see an error "554 5.4.6 <the(a)addr.ess> Proxying loops to itself". Where may I specify the port number of the backend server's LMTP-port? I suspect that the missing port number implies that the receiving LMTP-backend server uses the same port and so this would lead to a loop, hence the loop error?! I browsed the Wiki and the archives but still cannot find the information I am looking for. Any hints on that? Cheers, Dirk And here's the director.conf (via doveconf -n): # 2.0.13: /dovecot/code/etc/dovecot-director/director.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_verbose = yes base_dir = /var/run/director/ debug_log_path = /var/adm/dovecot-director.debug director_mail_servers = <LOCAL-BACKEND-IP> director_servers = <PUBLIC-DIRECTOR-IP> lmtp_proxy = yes login_greeting = Dovecot Director ready. mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = proxy=y nopassword=y driver = static } protocols = imap lmtp service auth-worker { user = root } service auth { client_limit = 6000 unix_listener auth-userdb { mode = 0644 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { port = 10143 } inet_listener imaps { port = 10993 ssl = yes } process_min_avail = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = <LOCAL-DIRECTOR-IP> port = 24242 } } ssl_cert = </dovecot/code/dovecot-homedir/dovecot.crt ssl_key = </dovecot/code/dovecot-homedir/dovecot.key syslog_facility = local0 protocol lmtp { auth_socket_path = director-userdb } -- Dirk Jahnke-Zumbusch Deutsches Elektronen-Synchrotron DESY IT Information Fabrics Member of the Helmholtz Association D-22603 Hamburg Notkestrasse 85 / 22607 Hamburg T: +49-40-899.81760 F: +49-40-899.41760 dirk.jahnke-zumbusch(a)desy.de

3 2

[Dovecot] doveadm "-S <socket_path>" option enabled in 2.0.8?
by David Warden 03 Jun '11

03 Jun '11

I apologize if this is a stupid question but I just compiled 2.0.8 and am trying to use doveadm to get the quota for a user using the -S <socket_path> option because I have different options for the various local IPs that dovecot listens on. For example, my default quota is filesystem (NFS rquota) and I can get that by doing: doveadm quota get -u warden which tells me: Quota name Type Value Limit % User quota STORAGE 1313476 1766400 74 But when I try to get my quota on a different local IP using the -S flag to doveadm: doveadm quota get -u warden -S 137.238.2.244:143 I am told: get: invalid option -- S The strange thing is doveadm's usage says that the -S option is valid for quite a few commands and in the man pages for those commands it looks like they should work for the way I'm calling doveadm. In the 2.0.8 source I also see code that looks like it should be parsing the -S flag. I can telnet to 127.0.0.1:143 and do ". getquotaroot inbox" which gives me the same information as "doveadm quota get -u warden" and I can telnet to 137.238.2.244:143 and ". getquotaroot inbox" also tells me my quota, but I'm hoping to use doveadm to periodically recalc my Maildir++ quota and update the squat FTS indexes and for that to happen doveadm needs to be able to be told what local IP address/port to connect to (I think). Here's my doveconf -n: # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.26.1.0.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.5 (Tikanga) nfs auth_cache_size = 10 M auth_master_user_separator = * auth_mechanisms = plain login auth_username_format = %Ln deliver_log_format = msgid="%m" subject="%s" from="%f" size=%p result="%$" first_valid_uid = 0 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_log_format_elements = user=%u method=%m rip=%r lip=%l lport=%a mpid=%e encryption=%c mail_location = maildir:/home/%Lu/Maildir:CONTROL=/Mail/mailhome/%Lu/.dovecot:INDEX=/Mail/mailhome/%Lu/.dovecot mail_log_prefix = "service=%s user=%u rip=%r lip=%l " mail_nfs_storage = yes mail_plugins = zlib quota mail_log notify fts fts_squat managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = cache_key=%u dovecot driver = pam } plugin { autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent fts = squat mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject flags mail_log_group_events = yes quota = fs:User quota quota_exceeded_message = Quota exceeded (mailbox for user is full). Please see http://go.geneseo.edu/emailoverquota for help deleting messages while over quota. sieve = /Mail/mailhome/%Lu/.filter.sieve sieve_dir = /Mail/mailhome/%Lu/.sievedir } postmaster_address = postmaster(a)geneseo.edu protocols = imap pop3 sieve quota_full_tempfail = yes service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = zlib quota mail_log notify fts fts_squat sieve } protocol lda { mail_plugins = zlib quota mail_log notify fts fts_squat sieve zlib } protocol imap { imap_logout_format = bytes(in/out)=%i/%o mail_max_userip_connections = 50 mail_plugins = zlib quota mail_log notify fts fts_squat quota imap_quota autocreate imap_zlib fts fts_squat } protocol sieve { managesieve_logout_format = bytes(in/out)=%i/%o } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = bytes(in/out)=%i/%o, top=%t/%p, retr=%r/%b, del=%d/%m, mailbox-size=%s pop3_uidl_format = UID%u-%v } local 137.238.2.244 { mail_location = maildir:/Mail/mailhome/$Lu/mailtest/Maildir:CONTROL=/Mail/mailhome/%Lu/mailtest/.dovecot2-control:INDEX=/Mail/mailhome/%Lu/mailtest/.dovecot2-index namespace { location = prefix = } plugin { quota = maildir:User quota quota_rule = *:storage=200M quota_rule2 = Trash:storage=+50M zlib_save = gz zlib_save_level = 6 } } local 137.238.1.1 { protocol imap { ssl_cert = </etc/pki/tls/certs/imaps.geneseo.edu.crt ssl_key = </etc/pki/tls/private/imaps.geneseo.edu.key } } local 137.238.2.244 { protocol imap { ssl_cert = </etc/pki/tls/certs/mailtest.geneseo.edu.crt ssl_key = </etc/pki/tls/private/mailtest.geneseo.edu.key } } local 137.238.1.1 { protocol pop3 { ssl_cert = </etc/pki/tls/certs/imaps.geneseo.edu.crt ssl_key = </etc/pki/tls/private/imaps.geneseo.edu.key } } local 137.238.2.244 { protocol pop3 { ssl_cert = </etc/pki/tls/certs/mailtest.geneseo.edu.crt ssl_key = </etc/pki/tls/private/mailtest.geneseo.edu.key } }

3 3