- dovecot - dovecot.org

[Dovecot] Dovecot 1.2.13 intermittent authentication failures
by C. Bensend 04 Aug '10

04 Aug '10

Hey folks, I recently upgraded my mail server from an older OpenBSD -CURRENT snapshot to the latest (Aug 1). As part of this upgrade, I updated all of my packages to their latest versions. Since this upgrade, dovecot has begun failing to authenticate intermittently. I use it primarily for web mail (Squirrelmail 1.4.20) and leave myself logged in during the day. This problem manifests itself by kicking me back to the "Username or password incorrect" screen occasionally (several times an hour) when the page refreshes. I am not using sieve, and while I have the PostgreSQL version of the OpenBSD package installed, I do not currently use it for authentication. I am authenticating against the OpenBSD system. The only error I get in the mail log is: Aug 3 11:00:09 fusion dovecot: imap-login: Aborted login (auth failed, 1 attempts): user=<benny>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured There are no errors in the Apache error log... Squirrelmail's version wasn't upgraded, so I don't think this is a Squirrelmail problem as far as I can tell. My config is pretty simple: # 1.2.13: /etc/dovecot.conf Warning: fd limit 128 is lower than what Dovecot can use under full load (more than 640). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: OpenBSD 4.8 i386 base_dir: /var/dovecot/ listen: *, [::1] ssl_cert_file: /etc/ssl/webmail.crt ssl_key_file: /etc/ssl/private/webmail.key login_dir: /var/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login login_user: _dovecot mail_location: maildir:~/Maildir mbox_write_locks: fcntl imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com auth default: mechanisms: plain login passdb: driver: bsdauth userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: _postfix group: _postfix Everything seems to be working just fine (ie, I don't get any other IMAP errors or see any problems), it's just that it will spontaneously fail to authenticate. When this happens, it may take more than one try to get logged back in. I checked with the OpenBSD port's maintainer, and he hadn't heard of any similar issues (and he uses it himself). Can anyone please help? Thank you so much! Benny -- "Something's going on in this house - last night, I saw a face!" "Did it have a nose?" "Yes!" "That sounds like a face all right." -- Scary Movie 4

2 10

[Dovecot] error 89 when loading plugin
by John O'Brien 04 Aug '10

04 Aug '10

Hi, I'm very confused - that's not too difficult for me. I have written a small plugin change_passwd_plugin.c I would like this custom IMAP command to be available to all users. The code contains the following. void change_passwd_plugin_init(void) { command_register("XCHANGEPASSWORD", cmd_xchangepasswd, 0); str_append(capability_string, " XCHANGEPASSWORD"); } void change_passwd_plugin_deinit(void) { command_unregister("XCHANGEPASSWORD"); } % nm 0000000000000920 T change_passwd_plugin_deinit 00000000000008ec T change_passwd_plugin_init 0000000000201248 D change_passwd_plugin_version dovecot.conf mail_plugins = change_passwd_plugin mail_plugin_dir = /usr/lib/dovecot/imap imap_capability = XCHANGEPASSWORD %ls -la /usr/lib/dovecot/imap ls -la /usr/lib/dovecot/imap total 28 drwxr-xr-x 2 root root 4096 Aug 1 16:03 . drwxr-xr-x 3 root root 4096 Aug 1 10:51 .. -rwxr-xr-x 1 root root 16969 Aug 1 16:03 change_passwd_plugin.so During login I see the following /var/log/maillog Aug 1 16:13:00 development dovecot: IMAP(test): Loading modules from directory: /usr/lib/dovecot/imap Aug 1 16:13:00 development dovecot: IMAP(test): Plugin change_passwd_plugin not found from directory /usr/lib/dovecot/imap Aug 1 16:13:00 development dovecot: child 29715 (imap) returned error 89 I don't understand why I'm getting an "error 89" reported. The login session is terminated by dovecot when the error occurs. Any assistance or ideas would be appreciated. Regards, John

4 4

[Dovecot] IMAP/POP3 Proxy Redundancy
by Cory 04 Aug '10

04 Aug '10

Looking over the list archives and Wiki there doesn't seem to be any sort of built-in host redundancy with the proxy. I would prefer to use a built in though it doesn't look like this is possible. One of the suggestions that I found in the list archives was to write a script which checks the health of the hosts and adjusts the MySQL table accordingly. Has anyone done anything like this in production? Thanks, Cory Here is a sample of what I'm testing the proxy with. CREATE TABLE `users` ( `user` varchar(255) NOT NULL, `filesystem` varchar(5) NOT NULL, PRIMARY KEY (`user`), UNIQUE KEY `idx_user` (`user`) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 CREATE TABLE `hostmap` ( `id` int(11) NOT NULL auto_increment, `filesystem` varchar(5) NOT NULL COMMENT 'Filesystem identifier', `ip` int(10) unsigned NOT NULL, `alive` tinyint(1) NOT NULL default '1', PRIMARY KEY (`id`), UNIQUE KEY `idx_hostmap` (`filesystem`,`ip`) ) ENGINE=MyISAM AUTO_INCREMENT=103 DEFAULT CHARSET=latin1 password_query = SELECT user,NULL as password, INET_NTOA(hostmap.ip) as host, 'Y' AS proxy_maybe from users left join hostmap on users.filesystem=hostmap.filesystem where hostmap.alive=1 and users.user='%u' limit 1;

2 1

[Dovecot] expire plugin
by Arnaud2 bali 04 Aug '10

04 Aug '10

Hi I try to use expire plugin with mysql When i use my thunderbird client to delete a message, nothing is write in the mysql database. My maildir is look like /home/vmail/homes/arnaud2(a)xxx.xxxx.xxx/ and /etc/dovecot/dovecot-dict-expire.conf : connect = host=localhost user=xxxxxx password=xxxxxxxxx dbname=postfixadmin map { pattern = /home/vmail/homes/$user/$mailbox #shared/expire/$user/$mailbox table = dovecot_expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } Is pattern ok ? My detail configuration : # dovecot --version 1.2.11 # dovecot -n # 1.2.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.5 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3s managesieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/%h mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota expire imap_quota autocreate mail_plugins(imap): quota expire imap_quota autocreate mail_plugins(pop3): quota expire autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve lda: postmaster_address: xxx(a)xxxxxxxx.xx mail_plugins: quota expire sieve autocreate auth_socket_path: /var/run/dovecot/auth-master auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir expire: .Trash 1 .Trash/* 1 .Spam 2 expire_dict: proxy::expire sieve: ~/.dovecot.sieve sieve_after: /home/vmail/sieve/default.sieve autocreate: Trash autocreate2: Spam autocreate3: Sent autocreate4: Inbox autocreate5: Drafts autocreate6: Templates autosubscribe: Trash autosubscribe2: Spam autosubscribe3: Sent autosubscribe4: Inbox autosubscribe5: Drafts autosubscribe6: Templates dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf # cat /etc/dovecot/dovecot-dict-expire.conf connect = host=localhost user=xxxxxx password=xxxxxxxxx dbname=postfixadmin map { pattern = /home/vmail/homes/$user/$mailbox #shared/expire/$user/$mailbox table = dovecot_expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } mysql> desc dovecot_expires; +--------------+--------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +--------------+--------------+------+-----+---------+-------+ | username | varchar(255) | NO | PRI | NULL | | | mailbox | varchar(255) | NO | PRI | NULL | | | expire_stamp | int(11) | NO | | NULL | | +--------------+--------------+------+-----+---------+-------+ # cat /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=localhost user=xxxxxxx password=xxxxxxx dbname=postfixadmin user_query = SELECT CONCAT('/home/vmail/homes/',maildir) AS home, 65500 AS uid, 65500 AS gid, \ CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule \ FROM mailbox WHERE username = "%u" AND active=1 password_query = SELECT username as user, password, maildir as userdb_home, 65500 as userdb_uid, 65500 as userdb_gid FROM mailbox WHERE username = '%u' AND active=1 Thank you

2 4

[Dovecot] Dovecot 2.0.rc3 Capability response
by Christian Affolter 04 Aug '10

04 Aug '10

Hi I have a question regarding the IMAP CAPABILITY command behavior of Dovecot 2.0.rc3. While connecting to a Dovecot 1.2.4 server and requesting the supported capabilities, Dovecot returns all capabilities: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. a1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH ACL RIGHTS=texk QUOTA AUTH=PLAIN AUTH=CRAM-MD5 a1 OK Capability completed. Doing the same on 2.0.rc3, will return only a limited set of supported capabilities: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. a1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN a1 OK Capability completed. However after a user has logged in, Dovecot 2.0.rc3 returns all supported capabilities: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. a1 login user(a)example.com pass a1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA ACL RIGHTS=texk] Logged in a2 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS QUOTA ACL RIGHTS=texk a2 OK Capability completed So what's the idea behind the change of this behavior? Is it planned to support different capabilities per user in the future? The reason behind my question is, that the Open-Xchange IMAP client implementation relies on the presence of the ACL capability presented before the actual login took place. Thanks for any clarifications. Regards Christian

6 8

[Dovecot] doveadm director remove error
by Xavier Pons 04 Aug '10

04 Aug '10

Hi, with the version 2.0.rc3, when I try to remove a mail server from director list, get this error: doveadm director remove 10.180.188.21 (null): doesn't exist but the other commands are working without problem ... doveadm director status mail server ip vhosts users 10.180.188.21 100 2 10.180.188.22 100 3 thanks Xavier

2 1

[Dovecot] OT dovecot w/postfix, mysql , postfix does unnecessary lookups
by Noel Butler 04 Aug '10

04 Aug '10

I know this unnecessary lookups question is really a postfix one, but I'm curious if anyone else sees the behaviour of postfix continuing looking up users after it clearly have got its answer that it is "not a local domain" response. (this msg is an extract from what I sent to WV some time ago, with him showing absolutely no interest, I got bored tonight so thought I'd throw it on this list since the question remains valid today) 30 Query SELECT 1 FROM virtual_domains WHERE name='example.net' AND active ='1' 31 Query SELECT destination FROM view_aliases WHERE email='someuser(a)example.net' Should that not have ended its lookups at Q30 and not gone on to ask Q31 which it now knows is not local? Secondly, it seems to do "double lookups" of destination and email before it gets to dovecots deliver, has anyone else ran a log on mysql and seen same? I'm trying to work out why, since it already has its answer by Q54 and Q55, it is doing Q56 and Q57, which seem pointless... 54 Connect 54 Query SELECT destination FROM view_aliases WHERE email='laura(a)example.com' 55 Connect 55 Query SELECT email FROM view_users WHERE email='laura(a)example.com' 56 Connect 56 Query SELECT destination FROM view_aliases WHERE email='laura(a)example.com' 57 Connect 57 Query SELECT email FROM view_users WHERE email='laura(a)example.com' So, it to me appears postifx does more work then it needs too since it already knows the answer, I consider this a flaw in postfix, yet perhaps I am the only one seeing it hence why WV couldnt give a shit. just curious if anyone has noted same or not....

3 4

[Dovecot] Dsync fatal error.
by Henrique Fernandes 04 Aug '10

04 Aug '10

#dsync -D -vv -u stak(a)nti.uff.br mirror maildir:/CX4/vdomains/ nti.uff.br/stak/mail dsync(root): Fatal: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace) My mail.conf *mail_location = mbox:/CX4/vdomains/%d/home/%n/mail:INBOX=/CX4/vdomains/%d/var/spool/mail/%n:INDEX=/tmp/imap-index/%d/%n *What that error means ? Before when i used convert before, it worked as expected. I want to convert my mboxs to maildir. Prefered withoud down time. To do without down time i will do like this. First i convert like i am trying it above, and after i do this, i run once again to see if got any new mail after this, i change in my mysql setting of mail location to /CX4/vdomains/%d/%u/mail/ My mysql settins override the conf file. But firts i have to make the first command work, anyone has any ideias ? []'sf.rique

2 11

[Dovecot] AntiSpam Plugin
by Leander S. 04 Aug '10

04 Aug '10

P.S. I just tried it with 1.2.13 as well - still the same issue. Am I doing something wrong, or is this really a bug now!? Best Regards Leander S. Hi, Has anyone got the chance to get this running? I'm permanently getting this Serverbug error ... ;( *"[SERVERBUG] failed to send email"* ... This happens when I try to drag&drop mails from one to the other folder within a IMAP-session. What version of Dovecot must I have to get this plugin working? Or will it generally be broken in upcoming new releases of Dovecot? Best Regards Leander S.

8 16

[Dovecot] problem with mail_full_filesystem_access = yes
by Ladislav Pašek 04 Aug '10

04 Aug '10

Hello, I have configured Dovecot 1.2.12 with Postfix 2.6.5 and everything is working fine. But tomorrow I wanted to run IMAP ALCs and from log I found that this plugin is conflicting with parameter mail_full_filesystem_access = yes in my config. But when I set mail_full_filesystem_access = no it stops authorization for postfix with this message: <pasek(a)valbek.cz>: Command died with signal 11: "/usr/libexec/dovecot/deliver" Does anybody know what could be wrong in my config? I've spend a night with it but without success. You can see my Dovecot here: http://www.volny.cz/vykupitel/Pictures/mail/dovecot.conf http://www.volny.cz/vykupitel/Pictures/mail/dovecot-ldap.conf and Postfix here: http://www.volny.cz/vykupitel/Pictures/mail/main.cf http://www.volny.cz/vykupitel/Pictures/mail/master.cf http://www.volny.cz/vykupitel/Pictures/mail/ldap-users.cf http://www.volny.cz/vykupitel/Pictures/mail/ldap-groups.cf Thanks in Advance Ladislav

4 7