- dovecot - dovecot.org

[Dovecot] doveadm stop
by Andreas Schulze 06 Jul '10

06 Jul '10

hello I start dovecot via daemontools and use "dovecot -F". "doveadm stop" does correctly stop dovecot. Of course dovecot will restart not a second later. Is it possible, that "doveadm stop" detect that dovecot is started with -F an print an informational log ? I think, it's helpfull, because in this special setup "doveadm stop" can and will not do what the the user expects from the name. -- Andreas Schulze Internetdienste | P532 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 1

Re: [Dovecot] Jul 06 00:06:15 dict: Error: dict client: Broken handshake
by Dennis Clarke 06 Jul '10

06 Jul '10

> > On 6.7.2010, at 1.15, Dennis Clarke wrote: > >> base_dir: /var/opt/csw/dovecot/ >> login_dir: /var/opt/csw/dovecot > > These must not be the same. Just use the default for login_dir, it > defaults under base_dir. (I thought I already added a check against this > .. oh well, v2.0 won't let you specify login_dir at all anymore.) > fixed ! awesome software ... now I'll test this in a production machine and see how things go :-) -- Dennis

1 0

[Dovecot] Jul 06 00:06:15 dict: Error: dict client: Broken handshake
by Dennis Clarke 06 Jul '10

06 Jul '10

After building and install dovecot I then made my own self signed SSL certs and placed them carefully into the correct places : Thus : # grep -v "^#" dovecot-openssl.cnf | grep -v "^$" [ req ] default_bits = 1024 encrypt_key = yes distinguished_name = req_dn x509_extensions = cert_type prompt = no [ req_dn ] C=CA ST=Ontario L=Toronto O=Blastwave OU=IMAP server CN=titan.blastwave.org emailAddress=postmaster(a)blastwave.org [ cert_type ] nsCertType = server # /opt/csw/bin/openssl req -new -x509 -nodes -config ./dovecot-openssl.cnf -out /etc/opt/csw/dovecot/certs/dovecot.pem -keyout /etc/opt/csw/dovecot/private/dovecot.pem -days 365 Generating a 1024 bit RSA private key ...........................++++++ ....................++++++ writing new private key to '/etc/opt/csw/dovecot/private/dovecot.pem' ----- # ls -l /etc/opt/csw/dovecot/certs/dovecot.pem /etc/opt/csw/dovecot/private/dovecot.pem -rw-r--r-- 1 root other 1050 Jul 5 23:58 /etc/opt/csw/dovecot/certs/dovecot.pem -rw-r--r-- 1 root other 887 Jul 5 23:58 /etc/opt/csw/dovecot/private/dovecot.pem # I then checked things out with a dovecot -n : # /opt/csw/sbin/dovecot -n # 1.2.12: /etc/opt/csw/dovecot/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 576). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: SunOS 5.8 i86pc base_dir: /var/opt/csw/dovecot/ log_path: /var/opt/csw/dovecot/error.log info_log_path: /var/opt/csw/dovecot/message.log ssl_cert_file: /etc/opt/csw/dovecot/certs/dovecot.pem ssl_key_file: /etc/opt/csw/dovecot/private/dovecot.pem login_dir: /var/opt/csw/dovecot login_executable: /opt/csw/libexec/dovecot/imap-login login_greeting: Dovecot from Blastwave.org is ready. login_max_processes_count: 64 mail_location: mbox:%h/mail:INBOX=/var/mail/%u auth default: passdb: driver: pam userdb: driver: passwd Other than the warning it looks ready to run. I fire up the init script : # /etc/opt/csw/init.d/cswdovecot start dovecot service starting. ps -ef confirms that things are happening : # ps -ef UID PID PPID C STIME TTY TIME CMD root 0 0 0 Jun 15 ? 0:16 sched root 1 0 0 Jun 15 ? 0:24 /etc/init - root 2 0 0 Jun 15 ? 0:00 pageout root 3 0 0 Jun 15 ? 10:37 fsflush root 331 1 0 Jun 15 ? 0:00 /usr/lib/saf/sac -t 300 root 334 331 0 Jun 15 ? 0:00 /usr/lib/saf/ttymon root 153 1 0 Jun 15 ? 0:00 /usr/sbin/rpcbind root 392 196 0 Jun 16 ? 0:00 in.telnetd root 75 1 0 Jun 15 ? 0:00 /usr/lib/sysevent/syseventd root 149 1 0 Jun 15 ? 0:43 /usr/lib/ldap/ldap_cachemgr root 199 1 0 Jun 15 ? 0:00 /usr/lib/autofs/automountd root 156 1 0 Jun 15 ? 0:00 /usr/sbin/keyserv root 196 1 0 Jun 15 ? 0:00 /usr/sbin/inetd -s daemon 198 1 0 Jun 15 ? 0:00 /usr/lib/nfs/statd root 234 1 0 Jun 15 ? 0:08 /usr/lib/inet/xntpd root 226 1 0 Jun 15 ? 0:00 /usr/sbin/cron root 202 199 0 Jun 15 ? 0:42 /usr/lib/autofs/automountd root 194 1 0 Jun 15 ? 0:00 /usr/lib/nfs/lockd root 239 1 0 Jun 15 ? 0:00 /usr/lib/lpsched root 266 265 0 Jun 15 ? 0:00 /usr/sbin/cs00 root 251 1 0 Jun 15 ? 0:00 /usr/lib/power/powerd root 265 1 0 Jun 15 ? 0:00 /usr/sbin/cssd root 225 1 0 Jun 15 ? 0:00 /usr/sbin/syslogd root 267 1 0 Jun 15 ? 0:00 /usr/bin/fgd root 264 1 0 Jun 15 ? 0:00 /usr/lib/utmpd root 290 288 0 Jun 15 ? 0:00 htt_server -port 9010 -syslog -message_locale C root 275 1 0 Jun 15 ? 0:00 /usr/lib/locale/ja/wnn/dpkeyserv root 281 1 0 Jun 15 ? 0:00 /usr/lib/locale/ja/wnn/jserver root 282 281 0 Jun 15 ? 0:00 /usr/lib/locale/ja/wnn/jserver_m root 288 1 0 Jun 15 ? 0:00 /usr/lib/im/htt -port 9010 -syslog -message_locale C root 297 1 0 Jun 15 ? 0:00 /usr/lib/locale/ja/atokserver/atokmngdaemon root 320 317 0 Jun 15 ? 6:33 mibiisa -r -p 3200 root 5500 1 0 Jun 16 console 0:00 -sh root 317 1 0 Jun 15 ? 0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf root 325 1 0 Jun 15 ? 0:00 /usr/lib/dmi/snmpXdmid -s titan root 324 1 0 Jun 15 ? 0:00 /usr/lib/dmi/dmispd root 11633 11624 0 00:02:40 ? 0:00 dovecot-auth -w root 11624 1 1 00:02:39 ? 0:00 /opt/csw/sbin/dovecot -c /etc/opt/csw/dovecot/dovecot.conf sysadmin 394 392 0 Jun 16 pts/1 0:09 -sh root 10182 5500 0 Jun 19 console 0:00 /opt/csw/bin/bash dclarke 10759 10717 0 18:02:33 pts/2 0:01 /opt/csw/bin/bash root 16188 16185 0 Jun 23 pts/3 0:01 -sh root 10713 10703 0 18:01:21 ? 0:02 /opt/csw/sbin/sshd -f /etc/opt/csw/ssh/sshd_config -R root 11626 11624 0 00:02:39 ? 0:00 dovecot-auth dovecot 11629 11624 2 00:02:40 ? 0:01 imap-login root 11635 16188 1 00:02:44 pts/3 0:00 ps -ef root 10703 1 0 17:56:08 ? 0:00 /opt/csw/sbin/sshd -f /etc/opt/csw/ssh/sshd_config root 11634 11624 0 00:02:40 ? 0:00 dovecot-auth -w dclarke 10717 10715 0 18:01:38 pts/2 0:00 -sh dovecot 11628 11624 2 00:02:40 ? 0:01 imap-login root 11631 11624 5 00:02:40 ? 0:02 dict dclarke 10715 10713 0 18:01:37 ? 0:14 /opt/csw/sbin/sshd -f /etc/opt/csw/ssh/sshd_config -R root 11627 11624 0 00:02:40 ? 0:00 dovecot-auth -w root 11625 11624 11 00:02:39 ? 0:05 ssl-build-param /var/opt/csw/dovecot/lib/dovecot/ssl-parameters.dat dovecot 11630 11624 2 00:02:40 ? 0:01 imap-login root 10175 1 0 Jun 19 ? 0:00 /opt/trustedhost/sbin/sshd -f /opt/trustedhost/etc/ssh/sshd_config root 11632 11624 0 00:02:40 ? 0:00 dovecot-auth -w I look in the area for logging and see : # ls -lap /var/opt/csw/dovecot/ total 7292 drwxr-x--- 3 root dovecot 512 Jul 6 00:02 ./ drwxr-xr-x 6 root bin 512 Jul 5 23:40 ../ srw------- 1 root other 0 Jul 6 00:02 auth-worker.11626 srw-rw---- 1 root dovecot 0 Jul 6 00:02 default srwxrwxrwx 1 root other 0 Jul 6 00:02 dict-server lrwxrwxrwx 1 root other 33 Jul 6 00:02 dovecot.conf -> /etc/opt/csw/dovecot/dovecot.conf -rw------- 1 root other 3720949 Jul 6 00:04 error.log drwxr-x--- 3 root other 512 Jul 6 00:02 lib/ -rw------- 1 root other 6 Jul 6 00:02 master.pid -rw------- 1 root other 171 Jul 6 00:02 message.log Why is there a symlink to the dovecot.conf I have no idea but far more intersting is the very large error.log. # tail -f /var/opt/csw/dovecot/error.log Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake Jul 06 00:04:35 dict: Error: dict client: Broken handshake . . . many many lines. About 100,000 lines of that. The message.log looks innocent : # cat /var/opt/csw/dovecot/message.log Jul 06 00:02:39 dovecot: Info: Dovecot v1.2.12 starting up Jul 06 00:02:39 dovecot: Info: Generating Diffie-Hellman parameters for the first time. This may take a while.. What's up with that "Broken handshake" ?? -- Dennis

2 1

[Dovecot] NFS(4) IMAP Quota
by Martin Schanzenbach 05 Jul '10

05 Jul '10

Hi *, We use nfs4 in combination with dovecot. Also (hard)quotas are used on the exports. Using the dovecot quota fs plugin things did not work at all. There were a few issues we encountered: 1. Nfs4 is not recognized. The problem is that the mount type is only checked for "nfs" and not nfs4. This was an easy fix. 2. The (fs)path for nfs4 that is relayed to rquotad has to be without the leading "/". This was an easy fix, too. (borrowed from linuxquota: http://linuxquota.cvs.sourceforge.net/viewvc/linuxquota/quota-tools/rquota_… ) 3. Maybe because we do not use softquotas the quota active boolean (rq_active) in the rquota struct is always false. So we hackishly removed this check. This problem also occured here: http://dovecot.org/pipermail/dovecot/2009-May/039593.html Apparently quota-tools do not check for this either (not needed?). 4. As metioned above we only use hardquotas but the plugin only reports softquotas. In my patch below I changed the behaviour: Check softquota == 0. If true then use hardquota, else softquota. Maybe you can use some of those fixes. I think at least #3 is reproducible (see ml post). The hard vs softquota behaviour is certainly a matter of discussion. The nfs4 "fixes" are actually more like feature requests that I think should be added to the plugin in one way or another. I created a diff of my changes to quota-fs.c. The changes were tested only for nfs3/4 though. Cheers Martin For completeness: BEGIN dovecot -n # 1.2.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.31-xen-r10-xen_domU x86_64 Gentoo Base System release 1.12.13 protocols: imaps pop3s listen: [::] ssl_listen(default): *:1993 ssl_listen(imap): *:1993 ssl_listen(pop3): *:1995 <cert files omitted> version_ignore: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_max_processes_count: 256 mail_privileged_group: mail mail_debug: yes mmap_disable: yes mail_nfs_index: yes mail_executable(default): /usr/local/bin/dovecot_helper mail_executable(imap): /usr/local/bin/dovecot_helper mail_executable(pop3): /usr/local/bin/dovecot_helper_pop mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v,%u lda: postmaster_address: <omitted> auth default: passdb: driver: pam args: * userdb: driver: passwd plugin: quota: fs:user:noenforcing -- END The diff (-Naur): --- quota-fs.c 2010-06-19 00:12:44.000000000 +0200 +++ quota-fs.c 2010-06-29 15:44:45.033517162 +0200 @@ -164,7 +164,7 @@ mount->fd = -1; #endif - if (strcmp(mount->type, "nfs") == 0) { + if (strcmp(mount->type, "nfs") == 0 || strcmp(mount->type, "nfs4") == 0) { if (strchr(mount->device_path, ':') == NULL) { i_error("quota-fs: %s is not a valid NFS device path", mount->device_path); @@ -210,7 +210,7 @@ #ifdef FS_QUOTA_SOLARIS #ifdef HAVE_RQUOTA - if (strcmp(mount->type, "nfs") == 0) { + if (strcmp(mount->type, "nfs") == 0 || strcmp(mount->type, "nfs4") == 0) { /* using rquota for this mount */ } else #endif @@ -319,6 +319,11 @@ host = t_strdup_until(mount->device_path, path); path++; + /* For NFSv4, we send the filesystem path without initial /. Server prepends proper + * NFS pseudoroot automatically and uses this for detection of NFSv4 mounts. */ + if (strcmp(root->mount->type, "nfs4") == 0) + while (*path == '/') + path++; if (root->root.quota->set->debug) { i_info("quota-fs: host=%s, path=%s, uid=%s, %s", @@ -366,17 +371,24 @@ /* convert the results from blocks to bytes */ const rquota *rq = &result.getquota_rslt_u.gqr_rquota; - if (rq->rq_active) { - if (bytes) { - *value_r = (uint64_t)rq->rq_curblocks * - (uint64_t)rq->rq_bsize; + if (bytes) { + *value_r = (uint64_t)rq->rq_curblocks * + (uint64_t)rq->rq_bsize; + if (rq->rq_bsoftlimit) { *limit_r = (uint64_t)rq->rq_bsoftlimit * (uint64_t)rq->rq_bsize; } else { - *value_r = rq->rq_curfiles; - *limit_r = rq->rq_fsoftlimit; + *limit_r = (uint64_t)rq->rq_bhardlimit * + (uint64_t)rq->rq_bsize; } + } else { + *value_r = rq->rq_curfiles; + if (rq->rq_fsoftlimit) + *limit_r = rq->rq_fsoftlimit; + else + *limit_r = rq->rq_fhardlimit; } + if (root->root.quota->set->debug) { i_info("quota-fs: uid=%s, value=%llu, " "limit=%llu, active=%d", dec2str(root->uid), @@ -419,7 +431,12 @@ host = t_strdup_until(mount->device_path, path); path++; - + /* For NFSv4, we send the filesystem path without initial /. Server prepends proper + * NFS pseudoroot automatically and uses this for detection of NFSv4 mounts. */ + if (strcmp(root->mount->type, "nfs4") == 0) + while (*path == '/') + path++; + if (root->root.quota->set->debug) { i_info("quota-fs: host=%s, path=%s, gid=%s, %s", host, path, dec2str(root->gid), @@ -761,7 +778,7 @@ bytes = strcasecmp(name, QUOTA_NAME_STORAGE_BYTES) == 0; #ifdef HAVE_RQUOTA - if (strcmp(root->mount->type, "nfs") == 0) { + if (strcmp(root->mount->type, "nfs") == 0 || strcmp(root->mount->type, "nfs4") == 0) { T_BEGIN { ret = !root->user_disabled ? do_rquota_user(root, bytes, value_r, &limit) :

2 2

[Dovecot] sieve dovecot2 rc1 error undefined symbol: client_send_tagline
by Robert Schetterer 05 Jul '10

05 Jul '10

Hi @ll, using sieve dovecot2 rc1 on testing system ubuntu lucid with packs recompiled from http://xi.rename-it.nl/debian/ i have Jul 05 11:48:35 managesieve: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Jul 05 11:48:35 managesieve: Error: dlopen(/usr/lib/dovecot/modules/lib02_imap_acl_plugin.so) failed: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so: undefined symbol: client_send_tagline Jul 05 11:48:35 managesieve: Fatal: Couldn't load required plugins allready known ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

3 9

Re: [Dovecot] Dovecot-2.0 conf misc questions
by Timo Sirainen 05 Jul '10

05 Jul '10

On Mon, 2010-06-28 at 19:04 +0200, Thomas Hummel wrote: > On Fri, Jun 25, 2010 at 09:06:53PM +0100, Timo Sirainen wrote: > > > That alone doesn't break it with my tests. Could you send me the entire > > config file so I could get this fixed? > > Here it is (I anonymised some path and addresses) in attachment doveconf -n -c dovecot.conf > /dev/null gives only some warnings with me. No errors..: doveconf: Warning: Obsolete setting in dovecot.conf:176: login_max_processes_count has been replaced by service { process_limit } > > default_client_limit: This is mainly for non-imap/pop3 processes, since > > they have overridden it. 1 client = 1 connection, usually from another > > Dovecot process. > > You mean connexions between internal dovecot processes other than > login/auth/imap or pop3 processes ? Look at "doveconf -a service" output. For each service 1) that has service_count=1, the client limits have no effect. only a single client is ever served. 2) that has client_limit != 0, that limit is used 3) otherwise, default_client_limit is used

2 4

Re: [Dovecot] dovecot-1.2.12 fails to build on Solaris 8 and 10
by Dennis Clarke 05 Jul '10

05 Jul '10

> On Sun, Jul 04, 2010 at 05:56:54PM -0400, Dennis Clarke wrote: >> Makes me wonder. However my simple test code works fine. >> Something very fishy going on here. > > Just as a datapoint. Here is 1.2.12 on opensolaris 2009.06 While that is very far away from production Solaris 8 it is a valid datapoint. However I did manage to find the ID-Ten-T error that I was having related to a CFLAGS switch of all things. # uname -a SunOS titan 5.8 Generic_127722-03 i86pc i386 i86pc # /opt/csw/sbin/dovecot --version 1.2.12 # /opt/csw/sbin/dovecot --build-options Build options: ioloop=poll ipv6 openssl Mail storages: maildir mbox raw shared SQL drivers: Passdb: checkpassword pam passwd passwd-file shadow Userdb: passwd passwd-file prefetch static If you wonder why it is compiled on a ten year old OS it is because of the Solaris ABI ( Application Binary Interface ) stability in which *anything* that compiles and runs on Solaris 8 will run everywhere else flawlessly. However, your dovecot compiled on that OpenSolaris beta release won't run anywhere else but on that machine. In fact, no promises on that[1] OpenSolaris release either. :-) Dennis [1] keep in mind that there ha never been a prod ready release of OpenSolaris. Maybe someday but Oracle isn't talking. :-(

1 0

[Dovecot] Replacing real inbox by virtual inbox
by François-Xavier Payet 05 Jul '10

05 Jul '10

Hello, I'm using dovecot 1.2.11 with virtual folders. I'd like to replace my real INBOX by a virtual one but I have several questions : * will my mail still be delivered to my real INBOX? * will I be able to access my real INBOX, for example using a virtual folder reliyng on INBOX * and, how to do it. Here's my problem, if I look to the wiki page [1], I don't really understand what the _NAMESPACE_1_INBOX_ and the _NAMESPACE_2_INBOX_ stands for. Plus, I can't put my paths in my scripts, as they use %d and %u (see below) which, if I understand correctly, aren't available for PostLoginScripts. Thanks for your help, -- François-Xavier Payet fx.payet(a)tfdn.org Jabber : fx.payet(a)tfdn.org Links: ------ [1] http://wiki.dovecot.org/Plugins/Virtual

2 2

[Dovecot] Dovecot git mirror
by David Woodhouse 05 Jul '10

05 Jul '10

I've been working on Evolution's 'imapx' back end to support QRESYNC, and was going to look at NOTIFY next. Then I realised I may have to look at implementing it on the server side first. Before I can even contemplate that, though, I had to mirror it into git. I've always resisted the one-version-control-system-per-child craze, and these days if I'm even contemplating a project which is using some other version control system, I'll start by importing it into a git repo. Thus: git://git.infradead.org/dovecot/dovecot-1.0 git://git.infradead.org/dovecot/dovecot-1.1 git://git.infradead.org/dovecot/dovecot-1.2 git://git.infradead.org/dovecot/dovecot-2.0 These are browsable in gitweb as: http://git.infradead.org/dovecot/dovecot-1.0 http://git.infradead.org/dovecot/dovecot-1.1 http://git.infradead.org/dovecot/dovecot-1.2 http://git.infradead.org/dovecot/dovecot-2.0 The mirrors are updated hourly, at 15 minutes past the hour. When making such a mirror, I usually try to ensure that it's imported in such a way that that the project maintainer(s) _could_ switch to using it as their primary VCS if they wanted to -- and a number of projects have actually done so. But I'm not arguing for that; I'm just making the repository available in git form in case it's useful to anyone else who, like me, doesn't really want to install and learn to use all of arch/hg/bzr/monotone/svn/etc for various different projects. No VCS flame wars please. -- dwmw2

3 3

[Dovecot] dovecot last logged in via sql
by Daniel Petre 05 Jul '10

05 Jul '10

hello, i am currently matching users via sql database with: password_query = SELECT clear as password FROM users,domains WHERE users.username = '%u' \ AND users.enabled = '1' AND (users.type='local' OR users.type='piped') and domains.enabled='1' \ and domains.domain_id = users.domain_id user_query = SELECT pop as home, uid, gid FROM users WHERE username = '%u' is there any way i can also insert into database when users successfully logged in? thanks!

2 1