- dovecot - dovecot.org

[Dovecot] load increase after upgrade to 2.0.8
by Cor Bosman 17 Dec '10

17 Dec '10

I upgraded most of our servers from 1.2.x to 2.0.8 and am noticing a really big increase in server load. This is across the board, not any specific server. Check this screenshot of a load graph: http://grab.by/7N8V Is there anything i should be looking at that could cause such a drastic load increase? Conf file is available here: http://wa.ter.net/download/doveconf.txt Regards, Cor

15 98

[Dovecot] How to avoid "authenticated user not found" - messages when using multiple Ldap userdbs/passdbs?
by Sebastian Urbanneck 16 Dec '10

16 Dec '10

Following: We've got a Dovecot 1.0.10 running on Ubuntu Hardy. Till now we used to have only mail accounts under our own domain, but since we're also a webhoster the people began to ask if there is a possibility to use there own Domains in there mail address. For addressing this we changed our Ldap Tree Structur: users which had been there befor remain in there old subtree, new accounts for Virtual Domains are located below an "vd=<domain>,ou=domains,..." subtree. The main Problem at this: old users are used to login only with their username and password, new users has to login via their complete mail address and their password. This is not going to change in the future so I tried to do this: Using two userdb/passdb - entries, in each case one for the old users and one for the new ones. If a user is not found through the first request the second is tried. If this failed too, the user gets rejected. The Problem with this: when not found during the first try the request logs an "authenticated user ot found" - message, no matter if trying via the second etry is successful. Is there a way to tell dovecot, that the user is not "not found" until __both__ requests failed? Regards Sebastian

3 3

[Dovecot] Upgrade dovecot 1.2.14 to 2.0.7
by Firebolt 16 Dec '10

16 Dec '10

Hi, I try to upgrade my dovecot server to the 2.x branch. But i have a big problem with the mailbox which are over quota. Server works fine, but when a mail arrived to user who is over quota, i have this error: Dec 16 14:54:42 lda(*******(a)*******.com): Panic: stream doesn't support seeking backwards OS: FreeBSD 6.1 Dovecot: 2.0.7 Could you help me to solve the problem. My dovecot.conf is: ssl = yes ssl_cert = </etc/ssl/mail2010.crt ssl_key = </etc/ssl/mail2010.key auth_mechanisms = plain login disable_plaintext_auth = no first_valid_uid = 143 info_log_path = /home/log/mail/dovecot/dovecot-info.log last_valid_uid = 143 log_path = /home/log/mail/dovecot/dovecot.log mail_location = maildir:/home/vmail/%d/%u mail_privileged_group = mail auth_socket_path = /var/run/dovecot/auth-userdb passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } userdb { driver = prefetch } pop3_uidl_format = %08Xu%08Xv protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = dovecot } user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 1 process_min_avail = 0 vsz_limit = 64M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } protocol lda { postmaster_address = ************(a)********.com mail_plugins = quota log_path = /***********/dovecot-deliver.log info_log_path = /************/dovecot-deliver.log sendmail_path = /usr/lib/sendmail } protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = delay-newmail } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } plugin { acl = vfile:/usr/local/etc/dovecot/dovecot-acls quota = maildir:User quota quota_rule = *:storage=20480k trash = /usr/local/etc/dovecot/dovecot-trash.conf }

1 0

[Dovecot] adding servers to director_mail_servers
by Cor Bosman 16 Dec '10

16 Dec '10

Is there a specific order in which one has to add servers to director_mail_servers, Let's say I have 20 loadbalanced director servers (I dont, but for arguments sake). I want to add 5 servers to director_mail_servers. If I do this by restarting each director server 1 by 1 with an updated conf, it seems the 5 new servers dont get added. Or at least I dont get what makes it work eventually. Only after restarting a few times they seem to all want to agree on the new list of servers. Cor

2 2

[Dovecot] users's mailboxes = mbox , shared mailboxes = maildir ... is it possible ?
by Frank Bonnet 16 Dec '10

16 Dec '10

Hello I solved my previous SSL problem by reinstalling dovecot2 ... :-) at FreeBSD 8.1 Now I'm using dovecot 2 , cool ... Actually my production mail server runs with MBOX format but reading the dovecot 2 wiki I read shared mailboxes are only working well with Maildir format. As I would like to setup some shared mailboxes, is it possible to have MBOX format for normal users ( UNIX NIS users ) and Maildir format for shared mailboxes to gain access to the per-user \Seen flag Or do I have to convert ALL my server to Maildir format ? Thanks a lot for your help

3 2

[Dovecot] Plugins on a NFS
by Alex Baule 16 Dec '10

16 Dec '10

Hi timo..... I Made a plugin that's works fine in a Normal Partition and a GlusterFS enviroment too. in NFS it's intermitent, some times works, some times don't. Only the expunge part have this issue, i use stat to get the amont of hard link in a file. There is because of that (stat, hard link count) ? If is, there is some workarround to do !? Tks Timo !!!

2 3

[Dovecot] xapian search plugin
by Vasiliy G Tolstov 16 Dec '10

16 Dec '10

Hello. Does anybody write fts xapian plugin to dovecot 2? If nobody - can You suggest me what i need to read and what source files i need no read to write own xapian fts plugin. Thank You for any comments. -- Vasiliy G Tolstov <v.tolstov(a)selfip.ru> Selfip.Ru

2 2

[Dovecot] ssl enabled, but ssl_cert not set ( 2.0.7 freebsd 8.1 )
by Frank Bonnet 16 Dec '10

16 Dec '10

hello trying to install dovecot 2 on a fresh installed machine I get this error message : doveconf -n > dovecot-new.conf doveconf: Error: ssl enabled, but ssl_cert not set doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: ssl enabled, but ssl_cert not set the ssl config file look like the following : Thanks for any info. ## ## SSL settings ## # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem # If key file is password protected, give the password here. Alternatively # give it when starting dovecot with -p parameter. Since this file is often # world-readable, you may want to place this setting instead to a different # root owned 0600 file by using ssl_key_password = <path. #ssl_key_password = # PEM encoded trusted certificate authority. Set this only if you intend to use # ssl_verify_client_cert=yes. The file should contain the CA certificate(s) # followed by the matching CRL(s). (e.g. ssl_ca = </etc/ssl/certs/ca.pem) #ssl_ca = # Request client to send a certificate. If you also want to require it, set # auth_ssl_require_client_cert=yes in auth section. #ssl_verify_client_cert = no # Which field from certificate to use for username. commonName and # x500UniqueIdentifier are the usual choices. You'll also need to set # auth_ssl_username_from_cert=yes. #ssl_cert_username_field = commonName # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 168 # SSL ciphers to use #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL -- Frank BONNET 01.45.92.66.17 Service des Moyens Informatique Generaux ESIEE PARIS Cité Descartes / BP 99 93162 NOISY-LE-GRAND Cedex http://www.esiee.fr <http://www.esiee.fr/>

5 6

[Dovecot] problem with ~/mail/ namespace
by Tom Lieuallen 16 Dec '10

16 Dec '10

We just changed from UW imap last night and one of our bigger problems right now is that the ~/mail/ compatibility namespace doesn't seem to work. dovecot 2.0.8 Dec 15 12:01:52 zen.engr.oregonstate.edu dovecot: [ID 583609 mail.warning] imap(tom2): Warning: Subscriptions file /nfs/rack/u4/t/tom2/mail/.subscriptions: Ignoring invalid entry: ~/mail/foo1/folder1 Dec 15 12:01:52 zen.engr.oregonstate.edu dovecot: [ID 583609 mail.warning] imap(tom2): Warning: Subscriptions file /nfs/rack/u4/t/tom2/mail/.subscriptions: Ignoring invalid entry: ~tom2/mail/foo1/folder1 from .subscriptions: ~/mail/foo1/folder1 ~tom2/mail/foo1/folder1 in 10-mail.conf namespace { type = private separator = / prefix = inbox = yes } # for backwards compatibility: namespace { type = private separator = / prefix = mail/ hidden = yes list = no } namespace { type = private separator = / prefix = ~/mail/ hidden = yes list = no } namespace { type = private separator = / prefix = ~%u/mail/ hidden = yes list = no } What's funny is that it appears to work with a preauthenticated session or by using openssl to connect to port 993. 1 list "~/mail/" * * LIST (\NoInferiors \UnMarked) "/" "~/mail/testfolder" * LIST (\NoInferiors \UnMarked) "/" "~/mail/Trash" * LIST (\NoInferiors \UnMarked) "/" "~/mail/Sent" * LIST (\Noselect \HasChildren) "/" "~/mail/foo1" * LIST (\NoInferiors \UnMarked) "/" "~/mail/foo1/folder1" * LIST (\Noselect \HasChildren) "/" "~/mail/foo2" * LIST (\NoInferiors \UnMarked) "/" "~/mail/foo2/folder1" 1 OK List completed. 1 select ~/mail/foo2/folder1 * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 1 EXISTS * 0 RECENT * OK [UIDVALIDITY 1274985137] UIDs valid * OK [UIDNEXT 2] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 1 OK [READ-WRITE] Select completed. We're seeing this with at least thunderbird and outlook. thank you Tom Lieuallen Oregon State University

3 4

[Dovecot] Dovecot 2.0.8 don´t recognize auth user format
by Wilberth Perez 15 Dec '10

15 Dec '10

My configuration file have this lines: # doveconf | grep user auth_anonymous_username = anonymous auth_master_user_separator = auth_socket_path = auth-userdb auth_ssl_username_from_cert = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu <-----(in version 1.2.10 this work fine) auth_username_translation = default_internal_user = dovecot default_login_user = dovenull director_user_expire = 15 mins login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_max_userip_connections = 10 in this new version, my user authentication fails: Debug: shadow(wperez(a)mydomain,1.2.3.4): lookup Info: shadow(wperez(a)mydomain,1.2.3.4): unknown user auth: Debug: client out: FAIL 2 user=wperez@mydomain in my server only exists the user wperez, but dovecot uses the user "wperez@mydomain" in this new version auth format changes? Thank you.

3 2