- dovecot - dovecot.org

[Dovecot] How to configure POP3 access in Dovecot?
by Andre Lopes 05 Oct '08

05 Oct '08

Hi, I'am new to Dovecot and Postfix... I have made a Postfix installation as "Internet with Smarthost". I'am using a domain in Godaddy, I have point "A (Host) Record" to my IP and the "MX Record" is also pointing to my IP. I have tested sending e-mail from my gmail.com account to my server, the server receive e-mails from gmail.comto my /home/andre/mbox successfully, the server is also sending mails by SMTP successfully. Now I need to configure POP3, I have been searching but I don't know what to do... I only need to receive e-mails in my windows machines in Outlook Express. I have test telnet in my localhost with "telnet mydomain.com 110" It appears: Trying 127.0.0.1 Connected to localhost +OK Dovecot ready Then I try to auth by telnet with: user andre(a)mydomain.com +OK pass mypass -ERR Authentication failed. I know that my password it's ok. When I try to "telnet mydomain.com 110" on other computer with another IP on Internet I get blank screen. My question: What can I do to, or what can I read to configure POP3 successfully? Best Regards, Andre.

2 1

[Dovecot] Dovecot 1.1.3 crash & backtrace
by Ralf Hildebrandt 05 Oct '08

05 Oct '08

Backtrace:/usr/local/libexec/dovecot/imap GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.7.so...done. done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.7.so...done. done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so Reading symbols from /usr/lib/gconv/ISO8859-1.so...Reading symbols from /usr/lib/debug/usr/lib/gconv/ISO8859-1.so...done. done. Loaded symbols for /usr/lib/gconv/ISO8859-1.so Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `/usr/local/libexec/dovecot/imap'. Program terminated with signal 6, Aborted. [New process 6239] #0 0xb7f20424 in __kernel_vsyscall () #0 0xb7f20424 in __kernel_vsyscall () No symbol table info available. #1 0xb7de1640 in raise () from /lib/i686/cmov/libc.so.6 No symbol table info available. #2 0xb7de3018 in abort () from /lib/i686/cmov/libc.so.6 No symbol table info available. #3 0x080d6785 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x97bc1d8 "/usr/local/libexec/dovecot/imap [0x80d6771] -> /usr/local/libexec/dovecot/imap [0x80d67f2] -> /usr/local/libexec/dovecot/imap [0x80d6189] -> /usr/local/libexec/dovecot/imap [0x80d93e1] -> /usr/local/l"... #4 0x080d67f2 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80ea60c "file %s: line %d (%s): assertion failed: (%s)", args=0xbf83b334 "g�\017\b\037") at failures.c:430 No locals. #5 0x080d6189 in i_panic ( format=0x80ea60c "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 No locals. #6 0x080d93e1 in file_lock_do (fd=-1, path=0x97d1e38 "/home/m/r/mrowka/Maildir/dovecot.index.search", lock_type=1, lock_method=FILE_LOCK_METHOD_FCNTL, timeout_secs=60) at file-lock.c:31 ret = <value optimized out> __PRETTY_FUNCTION__ = "file_lock_do" #7 0x080d94fe in file_wait_lock (fd=-1, path=0x97d1e38 "/home/m/r/mrowka/Maildir/dovecot.index.search", lock_type=1, lock_method=FILE_LOCK_METHOD_FCNTL, timeout_secs=60, lock_r=0x97db704) at file-lock.c:129 ret = <value optimized out> #8 0xb7d95875 in squat_trie_lock (trie=0x97d0448, lock_type=1, file_lock_r=0x97db704, dotlock_r=0x97db708) at squat-trie.c:294 ret = 0 #9 0xb7d98996 in squat_trie_build_deinit (_ctx=0x97db720, expunged_uids=0xbf83b548) at squat-trie.c:1600 ctx = (struct squat_trie_build_context *) 0x97db6f8 unlock = <value optimized out> ret = 0 #10 0xb7d948ee in fts_backend_squat_build_deinit (_ctx=0x97db718) at fts-backend-squat.c:182 uids = {arr = {buffer = 0x97dbe20, element_size = 8}, v = 0x97dbe20, v_modifiable = 0x97dbe20} ret = <value optimized out> #11 0xb7da4abd in fts_backend_build_deinit (_ctx=0x97db774) at fts-api.c:108 ctx = (struct fts_backend_build_context *) 0x6 #12 0xb7da6330 in fts_build_deinit (_ctx=<value optimized out>) at fts-storage.c:240 ctx = (struct fts_storage_build_context *) 0x97db728 box = (struct mailbox *) 0x97cee50 ret = 0 #13 0xb7da6eda in fts_mailbox_search_next_nonblock (ctx=0x97dac68, mail=0x97dbec8, tryagain_r=0xbf83b68b) at fts-storage.c:393 fctx = (struct fts_search_context *) 0x97dad08 #14 0x08060826 in cmd_search_more (cmd=0x97c85f0) at cmd-search.c:83 ctx = (struct imap_search_context *) 0x97c86b0 end_time = {tv_sec = 3, tv_usec = 159225840} tryagain = <value optimized out> ret = 3 #15 0x08060c76 in cmd_search_more_callback (cmd=0x97c85f0) at cmd-search.c:132 client = (struct client *) 0x97c83a8 finished = <value optimized out> #16 0x080ddb09 in io_loop_handle_timeouts (ioloop=0x97c49b0) at ioloop.c:298 _data_stack_cur_id = 2 #17 0x080de3e2 in io_loop_handler_run (ioloop=0x97c49b0) at ioloop-epoll.c:175 ctx = (struct ioloop_handler_context *) 0x97c4aa8 event = <value optimized out> list = <value optimized out> io = <value optimized out> tv = {tv_sec = 0, tv_usec = 0} t_id = <value optimized out> msecs = 0 ret = 0 i = <value optimized out> j = <value optimized out> call = <value optimized out> #18 0x080dd8b0 in io_loop_run (ioloop=0x97c49b0) at ioloop.c:320 No locals. #19 0x0806b51a in main (argc=) at main.c:293 No locals. -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job "General Failure's Fault. Not Yours." -Anon.

2 2

Re: [Dovecot] GETQUOTAROOT (part 2)
by Patrick Medina 05 Oct '08

05 Oct '08

--- On Mon, 9/1/08, Timo Sirainen <tss(a)iki.fi> wrote: > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] GETQUOTAROOT (part 2) > To: cpjmedina(a)yahoo.com > Cc: dovecot(a)dovecot.org > Date: Monday, September 1, 2008, 1:55 AM > On Aug 31, 2008, at 8:34 PM, Patrick Medina wrote: > > > Did some further testing: > > 1. maildirsize was initially = 5119 bytes > > 2. login via imap command line, verified GETQUOTAROOT > > returns correct quota, then logged out > > 3. sent test email and is delivered by deliver > > 4. maildirsize is updated but now = 5126 bytes > > (i.e. it is _not_ recreated) > > 5. log in again and GETQUOTAROOT now returns empty > > 6. quota thereafter no longer works > > OK, that's clearly a bug. If it's not gone in v1.1 > I'll look at it again. And in any case it would be more > reliable if you could have your userdb return the quota Upgraded to 1.1.2 from atrpms.net but I'm still getting the same behavior. I am trying to look at the quota plugin source (e.g. quota-maildir.c), but I'm very rusty in that aspect already. Thank you.

2 1

[Dovecot] Quota exceeded message
by Timo Sirainen 05 Oct '08

05 Oct '08

I just realized that "quota" word probably doesn't mean much to many non-native english speakers. Do even non-technical native speakers understand what "Quota exceeded" really means? It's sent by quota plugin, currently in two different situations: 1) To the user doing the operation via IMAP COPY/APPEND. 2) More importantly: If deliver rejects the mail, it's sent to the sender. Here are some ideas for improvements: "Mail storage disk quota exceeded" "User's mail storage disk quota exceeded" "Quota exceeded - not enough disk storage capasity for the user" Any better ideas? I think it should mention "quota" word in any case so that people who understand it would know immediately what the error message is about. The current code doesn't allow cleanly using separate messages for 1) and 2), so I'd prefer to use the same one. But if you've a great suggestion for them separately I could do it.

5 9

[Dovecot] Stupid question: Need to increase some connection limits
by Jon Callas 05 Oct '08

05 Oct '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 When I switch from one network to another, I sometimes get dovecot rejecting my connections. The error I get in the log is similar to: Sep 22 15:23:22 hostname dovecot: imap-login: Maximum number of connections from user+IP exceeded: user=<user>, method=METHOD, rip=1.2.3.4, lip=5.6.7.8 So the question is what parameter increases that? My five minutes of looking has failed me. Jon -----BEGIN PGP SIGNATURE----- Version: PGP Universal 2.6.3 Charset: US-ASCII wj8DBQFI2BtFsTedWZOD3gYRAs18AJ4wcFwyUl7JyVg5EO6jiZCWwt8URACdElWW 4pYB51ubkC1I+wf8RLuivYY= =yjuT -----END PGP SIGNATURE-----

2 1

[Dovecot] dovecot 1.0.10 inet_addr(0.0.0.0)
by Zbigniew Polito 05 Oct '08

05 Oct '08

Hi, I've got a problem. my Dovecot is not running ;) It immidiately exits when run with no output info I've figuret out that is something wrong with network but i can't find such option in conf any Ideas?? strace output : dup(3) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 6 setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(6, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(6, {sa_family=AF_INET, sin_port=htons(995), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(6, {sa_family=AF_INET, sin_port=htons(995), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(6, 8) = 0 fcntl64(6, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 7 setsockopt(7, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(7, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 bind(7, {sa_family=AF_INET, sin_port=htons(110), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(7, {sa_family=AF_INET, sin_port=htons(110), sin_addr=inet_addr("0.0.0.0")}, [16]) = 0 listen(7, 8) = 0 fcntl64(7, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(7, F_SETFL, O_RDWR|O_NONBLOCK) = 0 fcntl64(7, F_GETFD) = 0 fcntl64(7, F_SETFD, FD_CLOEXEC) = 0 dup2(5, 0) = 0 dup2(5, 1) = 1 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e2b708) = 2692 --- SIGCHLD (Child exited) @ 0 (0) --- exit_group(0) = ? Process 2691 detached Regards -- Pozdrawiam Zbigniew Polito zbigniew_pol(a)airpost.net -- http://www.fastmail.fm - A fast, anti-spam email service.

5 10

[Dovecot] authentication issue - dovecot + Mysql
by Reinhard Sanjeet Lal 05 Oct '08

05 Oct '08

Hi, I have a FreeBSD 7.0 server with the following version of software's installed: postfix-2.5.4,1 postfixadmin-2.2.1.1 roundcube-0.2.a,1 php5 mysql-server-5.0.67 dovecot-1.1.3_1 Note that pre-reqs for all of the above also has been installed. I have used this guide to walk myself through the setup : http://www.purplehat.org/?page_id=4 My setup uses virtual domain and user style(mostly for hosting provider type) , all stored into the Mysql db, now when I try to telnet to port 110 for pop test or even telnet for IMAP test , I get this error: dovecot: Sep 24 18:51:49 Info: pop3-login: Aborted login (auth failed, 1 attempts): user=<rein>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured note : there are numerous of there errors , but I included only this. Dovecot is not able to authenticate by using the query in its dovecot-sql.conf file. I have tried a lot of tricks by changing the mechanism MD5 , PLAIN LOGIN etc, but no avail. Please , could someone assist me in solving this issue, not that I can send and receive emails but pop and IMAP seems not to work , so is the webmail functionality . Here is my dovecot -n output : # 1.1.3: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/dovecot/cert.pem ssl_key_file: /etc/ssl/dovecot/key.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Baby Is Ready. login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no verbose_proctitle: yes first_valid_uid: 125 last_valid_uid: 125 first_valid_gid: 125 last_valid_gid: 125 mail_privileged_group: mail mail_location: maildir:/usr/local/virtual/%d/%n maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-se imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_enable_last(default): no pop3_enable_last(imap): no pop3_enable_last(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: login plain cram-md5 digest-md5 plain login username_format: %Ln passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 ____________________________ Reinhard Sanjeet Lal Manager Network Operations p + 679 3275040 f + 679 3275053 m + 679 9923147 e sanjeet(a)getunwired.com.fj <http://www.unwired.com.fj> www.unwired.com.fj disclaimer "This transmission is for the intended addressee only and is confidential information. If you have received this transmission in error, please delete it and notify the sender. The contents of this e-mail are the opinion of the writer only and are not endorsed by Unwired Fiji unless expressly stated otherwise. Unwired Fiji has virus detection in place and makes every reasonable effort to ensure that this message is free from viruses. However, you should scan this message and any attachments for viruses. Under no circumstances will Unwired Fiji accept liability for any loss or damage that may result from your receipt of this message or any attachments."

2 1

[Dovecot] cyrus2courrier mass migration
by Mathieu Kretchner 05 Oct '08

05 Oct '08

Hello, So we've chosen to use dovecot as our imap mail server and replace our old cyrus server ! BUT : I would like to do a conversion of my imap accounts (and keep all theirs characteristics) from cyrus-imapd-2.2.12 in cyrus format to dovecot 1.1.3 in courrier format. I've tried those 3 tools : cyrus2courrier.1.5.ts cyrus2courier-1.3z4 imapsync (works well but very slow and should not be a true solution) But nothing is working to keep the seen/unseen flag (expect imapsync) ! I know my cyrus version is too "recent" but do you have any idea how could I do this migration ? A second problem is that I have 600 Go of imap account to migrate, if you've any clue on how to do a migration without loosing a lot of availability, I would be happy to read you ! Tanks in advance.

6 12

[Dovecot] Bug? Expunging Symlinked Maildir w/ Lazy_expunge Enabled
by Rich at Whidbey Telecom 05 Oct '08

05 Oct '08

Hi all, Using Dovecot 1.0.3 on RedHat Enterprise 5 (kernel 2.6.18-8.1.6.el5PAE), and NFS storage, we symlinked a Maildir folder: /mailstore/user/Maildir/.Junk -> /junkstore/user/Junkmaildir Everything works fine, until we try to expunge, which produces: A04 NO BUG: Unknown internal error This only happens if "lazy_expunge" is enabled: mail_plugins = quota imap_quota acl lazy_expunge lazy_expunge = .EXPUNGED/ .EXPUNGED/ .EXPUNGED/ Lazy_expunge works great on non-symlinked folders. We tried version 1.1 alpha2, which actually crashes in this scenario. The only fix we've found is to disable "lazy_expunge". Attached is our "dovecot -n" config. Anyone have an idea what might be causing this or a workaround? Thanks! Rich richs(a)whidbey.net # 1.0.3: /shared/dovecot.conf base_dir: /var/dovecot-mail/ log_path: /var/dovecot-mail/dovecot.log protocols: imap imaps pop3 pop3s ssl_ca_file: /adminstore/exim/ssl/instantsslroot.crt ssl_cert_file: /adminstore/exim/ssl/public-mail.crt ssl_key_file: /adminstore/exim/ssl/private-mail.key disable_plaintext_auth: no shutdown_clients: no login_dir: /var/dovecot-mail//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: exim login_greeting: System ready. login_processes_count: 32 login_max_processes_count: 400 verbose_proctitle: yes mail_location: maildir:/mailstore/%Lu/Maildir:INDEX=MEMORY mail_cache_fields: mail_cache_min_mail_count: 65536 mailbox_idle_check_interval: 10 mmap_disable: yes lock_method: dotlock maildir_stat_dirs: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota acl lazy_expunge mail_plugins(imap): quota imap_quota acl lazy_expunge mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %Mf pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . inbox: yes namespace: type: private separator: . prefix: .EXPUNGED/ location: maildir:/mailstore/%u/Expunged:INDEX=MEMORY hidden: yes auth default: mechanisms: plain login passdb: driver: pam args: exim userdb: driver: ldap args: /adminstore/configs/dovecot-ldap.conf plugin: quota: maildir:storage=250000:ignore=Junk acl: vfile:/adminstore/configs/dovecot-acls

3 5

[Dovecot] Corrupted transaction log file / record size too small
by Steven Winikoff 05 Oct '08

05 Oct '08

I recently upgradeded dovecot on one of our servers from version 1.0.10 to version 1.1.3. Ever since, we've been seeing occasional errors similar to this sequence (with the username and IP addresses elided): Sep 30 00:09:56 alcor dovecot: pop3-login: Login: [4954], XXXX, NNN.NNN.NN.NNN Sep 30 00:09:56 alcor dovecot: wrapper[5006]: pop3, XXXX, NNN.NNN.NN.NNN Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Corrupted transaction log file /home/XXXX/.imap/INBOX/dovecot.index.log: record size too small (type=0x40, offset=12224, size=0) Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2008-09-30 00:09:56] Sep 30 00:09:56 alcor dovecot: pop3[5006] XXXX, NNN.NNN.NN.NNN: Mailbox init failed top=0/0, retr=0/0, del=0/0, size=0, xfer=0/95 System and dovecot configuration details are appended. I saw an archived mailing list message from January 2007 which may be relevant (www.mailinglistarchive.com/dovecot@dovecot.org/msg07908.html) in which the original poster's symptoms disappeared when he recompiled dovecot with gcc-3.4.0 instead of using gcc-3.1. In my case I used gcc-4.1.2, so I don't know if that's still relevant (and if so, what other version to use instead). In the output of `dovecot -n` which follows, /local/pkg/dovecot/localmods/wrapper.imap is a locally written program which registers the user's IMAP or POP connection in the lastlog file and also ensures that the user's shell is considered valid. I'd be surprised if this is relevant, but I've appended the source code in case it may be (and/or in case anyone else may find it useful!). I've been working around the problem by deleting the contents of ~user/.imap for affected users, but I'd really prefer to fix it properly. :-) Any suggestions would be gratefully received. Thanks, - Steven # server type = SunFire X4100 (two dual-core Opteron CPUs) # OS = Linux (Slamd64 12.0) # file system type = XFS # uname -a Linux alcor 2.6.25.2 #1 SMP Fri May 16 07:06:34 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux # dovecot --version 1.1.3 # (limit descriptors 4096; dovecot -n) # 1.1.3: /local/pkg/dovecot/root-dovecot-1.1.3/etc/dovecot.conf base_dir: /local/pkg/dovecot/data/var/run/dovecot syslog_facility: local0 protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /public/apache/ssl/combined.cert ssl_key_file: /public/apache/ssl/key.pem disable_plaintext_auth: no login_dir: /local/pkg/dovecot/data/var/run login_executable(default): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/imap-login login_executable(imap): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/imap-login login_executable(pop3): /local/pkg/dovecot/root-dovecot-1.1.3/libexec/dovecot/pop3-login login_user: nul-mail login_log_format_elements: [%p] %u %r %c login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_processes_count: 6 login_max_processes_count: 512 max_mail_processes: 1024 verbose_proctitle: yes first_valid_uid: 111 mail_location: mbox:~/:INBOX=/var/spool/mail/%u mail_full_filesystem_access: yes mail_executable(default): /local/pkg/dovecot/localmods/wrapper.imap mail_executable(imap): /local/pkg/dovecot/localmods/wrapper.imap mail_executable(pop3): /local/pkg/dovecot/localmods/wrapper.pop3 mail_plugin_dir(default): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/imap mail_plugin_dir(imap): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/imap mail_plugin_dir(pop3): /local/pkg/dovecot/root-dovecot-1.1.3/lib/dovecot/pop3 mail_log_prefix: %Ls[%p] %u, %r: imap_capability(default): IMAP4rev1 QUOTA SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS imap_capability(imap): IMAP4rev1 QUOTA SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS imap_capability(pop3): imap_client_workarounds(default): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(pop3): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, xfer=%i/%o auth default: cache_negative_ttl: 0 passdb: driver: shadow userdb: driver: passwd # source code for /local/pkg/dovecot/localmods/wrapper.imap # and /local/pkg/dovecot/localmods/wrapper.pop3 # follows: 8<---------------------------- cut here -------------------------->8 /* * wrapper.c -- login wrapper program for dovecot * * Steven Winikoff * 2008/01/31 * * Part of this program is based on code written by Sylvain Robitaille. * * The intention is twofold: * * 1) ensure that IMAP and POP sessions are registered in the * system's lastlog file * * 2) ensure that all IMAP and POP users have a valid login shell * * Rather than hack the code for the dovecot server directly, this use * of a wrapper is based on dovecot's intrinsic "post-login scripting" * facility; for details, see http://wiki.dovecot.org/PostLoginScripting */ #include <unistd.h> #include <stdlib.h> #include <string.h> #include <sys/types.h> #include <sys/stat.h> #include <lastlog.h> #include <fcntl.h> #include <pwd.h> #include <syslog.h> #include <errno.h> #include <time.h> #define STRLEN 1024+1 #define LASTLOG "/var/adm/lastlog" #define NEWSHELL "/local/paths/newshell" #define BLOCKSHELL "/local/paths/blocksh" #define REAL_IMAP_SERVER "/local/paths/dovecot-imap" #define REAL_POP3_SERVER "/local/paths/dovecot-pop3" #define REAL_IMAP_NAME "dovecot-imap" #define REAL_POP3_NAME "dovecot-pop3" #define LOGNAME "dovecot: wrapper" int valid_shell(char *); void update_lastlog(uid_t, char *, char *); /*-----------------------------------------------------------------------*/ int main(int argc, char **argv) { char service[STRLEN]; char server[STRLEN], server_name[STRLEN], *u, *rh; int unknown_service = 0, len; struct passwd *p; /** the service name we've been invoked to wrap is determined **/ /** by the last four characters of our own basename ("imap" or **/ /** "pop3"): **/ len = strlen(argv[0]); (void)strcpy(service, argv[0] + (len-4)); if (strcmp(service, "imap") == 0) { (void)strcpy(server, REAL_IMAP_SERVER); (void)strcpy(server_name, REAL_IMAP_NAME); } else if (strcmp(service, "pop3") == 0) { (void)strcpy(server, REAL_POP3_SERVER); (void)strcpy(server_name, REAL_POP3_NAME); } else { unknown_service = 1; } /** prepare to log: **/ openlog(LOGNAME, LOG_PID, LOG_LOCAL0); if (unknown_service) { syslog(LOG_INFO, "can't handle unknown service '%s'", service); exit(1); } /** $USER is the only way we can determine who called us: **/ if (! (u = getenv("USER"))) { syslog(LOG_INFO, "aborting: no value supplied for $USER"); exit(2); } /** likewise, $IP is our only source for the host we were called **/ /** from: **/ if (! (rh = getenv("IP"))) { syslog(LOG_INFO, "aborting: no value supplied for (remote host) $IP"); exit(3); } /** grab $USER's password file entry: **/ if (! (p = getpwnam(u))) { syslog(LOG_INFO, "aborting: can't find a passwd entry for %s", u); exit(4); } /** is this user blocked? **/ if (strcmp(p->pw_shell, BLOCKSHELL) == 0) { /** yes, so we're out of here: **/ syslog(LOG_INFO, "aborting: %s is blocked", u); exit(5); } /** okay, but is the user's shell recognized? **/ if (! valid_shell(p->pw_shell)) { syslog(LOG_INFO, "aborting: %s has invalid shell %s", u, p->pw_shell); exit(6); } /** update the user's lastlog entry: **/ update_lastlog(p->pw_uid, service, rh); /** now run the real program for the requested service: **/ syslog(LOG_INFO, "%s, %s, %s", service, u, rh); argv[0] = server_name; (void) execv(server, argv); /** if we're still here, execv() failed: **/ syslog(LOG_INFO, "execv(%s) FAILED (%s), %s, %s", server_name, strerror(errno), u, rh); return(7); } /*-----------------------------------------------------------------------*/ int valid_shell(char *s) /* * return 1 if s represents a valid login shell, or 0 otherwise * * for our purposes, "valid" means anything returned by getusershell(3), * or NEWSHELL as a special case */ { char *next_shell; /** a NULL pointer can't be a valid shell: **/ if (! s) return(0); /** NEWSHELL is always valid: **/ if (strcmp(s, NEWSHELL) == 0) return(1); /** okay, we have to consult /etc/shells: **/ while ((next_shell = getusershell()) != NULL) { if (strcmp(s, next_shell) == 0) { endusershell(); return(1); } } /** if we're still here, we don't have a valid shell: **/ endusershell(); return(0); } /*-----------------------------------------------------------------------*/ void update_lastlog(uid_t uid, char *service, char *remote_system) /* * records the user's activity in the system lastlog file. * * Sylvain Robitaille (using code borrowed from the ssh source) * * 1997/11/21 * 2000/07/31 (call with the uid as a parameter) * */ { int fd; struct lastlog ll; const char *lastlog = LASTLOG; /** initialize the lastlog structure: **/ memset(&ll, 0, sizeof(ll)); /** fill in the data: **/ ll.ll_time = time(NULL); strncpy(ll.ll_line, service, sizeof(ll.ll_line)); strncpy(ll.ll_host, remote_system, sizeof(ll.ll_host)); /** update the lastlog file: **/ if ((fd = open(lastlog, O_RDWR)) >= 0) { lseek(fd, (off_t)(uid * sizeof(ll)), 0); if(write(fd, &ll, sizeof(ll)) != sizeof(ll)) { syslog(LOG_INFO, "Could not write %.100s: %.100s", lastlog, strerror(errno)); } close(fd); } else { syslog(LOG_INFO, "Could not open %.100s: %.100s", lastlog, strerror(errno)); } } 8<---------------------------- cut here -------------------------->8 ________________________________________________________________________ Steven Winikoff | Concordia University | Doyle's Law: Montreal, QC, Canada | Expenditures shall rise smw(a)alcor.concordia.ca | automatically to absorb any http://alcor.concordia.ca/~smw | increased income.

2 1