- dovecot - dovecot.org

[Dovecot] Manual verses Wiki
by Roderick A. Anderson 07 Oct '08

07 Oct '08

I know I'm looking at the answer but probably not seeing it on the Wiki? Is there a "manual" for Dovecot? Or ... where do I find all the options for the userdb and passdb options? While trying to get my head wrapped around this I noticed I might have been mixing args between the two. One example has userdb first then the next one passdb. Rod --

2 2

[Dovecot] Improvements to "Authentication failed" error
by Timo Sirainen 07 Oct '08

07 Oct '08

Probably one of the most commonly asked question is "Why does Dovecot just say authentication failed"? It would be nice to be able to get rid of these questions by having Dovecot itself point out the http://wiki.dovecot.org/WhyDoesItNotWork link. But how to do this? There are two groups of people here: 1) People who look at logs after seeing the "Authentication failed" from a client/telnet session. 2) People who don't even think about looking at logs. I'm thinking that the group 1 could be handled by having Dovecot log the link once as informational message if the first authentication attempt fails and it's from localhost. This shouldn't cause problems I think. Group 2 is more difficult though, and I fear they're also the ones asking this question more often than group 1.. I think the only solution would be to change the IMAP/POP3 error message for them. So instead of: NO Authentication failed. they'd get something more usable. So: 2a) NO Authentication failed. See http://wiki.dovecot.org/WhyDoesItNotWork. 2b) NO Authentication failed. Refer to server log for more information. 2c) NO Authentication failed. Enable auth_debug in server for more information. But there are some problems I think: - If it's done only for connections from localhost, the error messages would be different from localhost vs. elsewhere, which might confuse some log parser scripts. - Some people are running stunnel or some other proxies, causing all connections to appear from localhost. Also webmails often run in localhost. So it can't be assumed that only admins will see the error message. I think this rules out 2a) message. I'm certain I don't want end users emailing me and asking why they can't connect to their server because they saw that link. - Sending 2b) for all connections could be a solution, but it might be confusing for end users. They of course can't refer to server log.. Also unless the wiki link is logged for every failure or auth_debug is enabled, there's nothing useful in the server log. - Sending 2c) for all connections when auth_debug isn't enabled (and plain "Authentication failed" when it is) might also work, but it's again confusing to end users since they can't do that. Any thoughts?

5 7

[Dovecot] Unable telnet port 143
by satimis 07 Oct '08

07 Oct '08

Hi folks, Postfix Dovecot-imap 1.0 port 143 not working. $ telnet localhost 143[code] Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. * OK Dovecot ready. 1 login satimis mypassword 1 NO Authentication failed. * BYE Disconnected for inactivity. Connection closed by foreign host. [/code] # tail /var/log/mail.log[code] Password: Oct 6 01:05:02 xen5 dovecot: imap-login: Disconnected: user=<satimis>, method=P LAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 6 01:17:09 xen5 postfix/smtpd[1820]: connect from 201-43-209-60.dsl.telesp. net.br[201.43.209.60] Oct 6 01:17:11 xen5 postfix/smtpd[1820]: NOQUEUE: reject: RCPT from 201-43-209- 60.dsl.telesp.net.br[201.43.209.60]: 554 5.7.1 Service unavailable; Client host [201.43.209.60] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.n et/bl.shtml?201.43.209.60; from=<criticastry(a)frontier-cnc.com> to=<mail@satimis. com> proto=SMTP helo=<gvaeprbc> Oct 6 01:17:11 xen5 postfix/smtpd[1820]: lost connection after RCPT from 201-43 -209-60.dsl.telesp.net.br[201.43.209.60] Oct 6 01:17:11 xen5 postfix/smtpd[1820]: disconnect from 201-43-209-60.dsl.tele sp.net.br[201.43.209.60] Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max connection rate 1/60s for (smtp:201.43.209.60) at Oct 6 01:17:09 Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max connection count 1 for (smtp:201.43.209.60) at Oct 6 01:17:09 Oct 6 01:20:31 xen5 postfix/anvil[1823]: statistics: max cache size 1 at Oct 6 01:17:09 Oct 6 01:24:32 xen5 dovecot: auth-worker(default): mysql: Connected to 127.0.0. 1 (mailserver) Oct 6 01:26:06 xen5 dovecot: imap-login: Disconnected: Inactivity: user=<satimi s>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured [/code] I suppose it uses "MySQL authorization". But I can't find /etc/dovecot/dovecot-mysql.conf # cat /etc/dovecot/dovecot.conf[code] protocols = imap imaps disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " ssl_cert_file = /etc/ssl/certs/xen5.pem ssl_key_file = /etc/ssl/private/xen5.pem mail_privileged_group = mail ## ## IMAP specific settings ## protocol imap { } ## ## POP3 specific settings ## protocol pop3 { pop3_uidl_format = %08Xu%08Xv } ## ## LDA specific settings ## protocol lda { log_path = /var/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)satimis.com # Enabling Sieve plugin for server-side mail filtering mail_plugins = cmusieve global_script_path = /var/vmail/globalsieverc } ## ## Authentication processes ## auth default { # Space separated list of wanted authentication mechanisms: # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi mechanisms = plain login passdb sql { # Path for SQL configuration file, see /etc/dovecot/dovecot-sql.conf for example args = /etc/dovecot/dovecot-sql.conf } userdb passwd { } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 # Default user/group is the one who started dovecot-auth (root) user = vmail #group = } client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } dict { #quota = mysql:/etc/dovecot-dict-quota.conf } ## ## Plugin settings ## plugin { } [/code] Please help. Where can I find samples of dovecot.conf and dovecot-mysql.conf for my use. TIA B.R. satimis -- View this message in context: http://www.nabble.com/Unable-telnet-port-143-tp19831992p19831992.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Quota Issues
by Peter Fraser 07 Oct '08

07 Oct '08

Hi All Is there a way to test to see if the dovecot quota settings are being applied? I'm doing this as part of troubleshooting. I have set up dovecot + quotas with squirrelmail and I am not seeing the quota graphs in squirrelmail but I am not getting any errors. Could someone please help me with this? THanks.

3 2

[Dovecot] PAM authentication problems
by Tom Lobato 07 Oct '08

07 Oct '08

Hi all! I`m using dovecot for a while with no problems. Some days ago it started to delay the authentication until the timeout. syslog... Oct 3 09:00:10 coan dovecot: auth(default): pam(rodrigo.botan,121.120.119.179): pipe() failed: Too many open files Oct 3 09:00:11 coan dovecot: auth(default): pam(katia,121.120.200.97): pipe() failed: Too many open files Oct 3 09:00:11 coan dovecot: auth(default): pam(andersoncampos,121.120.200.35): pipe() failed: Too many open files Oct 3 08:25:55 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.39, lip=121.120.119.251 Oct 3 08:25:58 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.94, lip=121.120.119.251 Oct 3 08:26:01 coan dovecot: pop3-login: Disconnected: Inactivity: method=PLAIN, rip=121.120.119.148, lip=121.120.119.251 After the commands /etc/init.d/dovecot stop killall -9 dovecot-auth /etc/init.d/dovecot start It come back to work, then after some time, I need to restart again and again... I tried 'ulimit -n 5000' in /etc/init.d/dovecot, but the problem remains. The problem is in the authentication backend, I guess. I`m using PAM, so I leaved only one line in /etc/pam.d/dovecot: auth sufficient pam_permit.so and all worked fine. Of course, just for test, since this allows login with any password. My system: Debian Etch 64bit dovecot version: 1.0.rc15 (from etch repositories) PAM lib version: 0.79-5 (from etch repositories) The system has 200 users, with 30 logins per minute. hardware: Intel(R) Xeon(R) CPU 3050 @ 2.13GHz, 2GB RAM. If you have some pointer to the solution, it will be welcome. Thank you, Tom Lobato

2 3

[Dovecot] Transition from Courier-IMAP
by Arno van Amersfoort 07 Oct '08

07 Oct '08

Hello all, Currently we are looking at the possibility of moving from Courier-IMAP to Dovecot (the one that comes with Debian Lenny: version 1.0.15). I'm currently testing it on a non-production server and have a few questions: 1) Currently all our clients use Thunderbird as their mail client to read mail from our IMAP server. Thunderbird is configured with "INBOX." as the "IMAP server directory". As we certainly do NOT want to reconfigure over 150 desktops, we would like to know if it's possible to make Dovecot work with Thunderbird Configured this way -> Simply make Dovecot act the same as Courier-IMAP. With the default configuration of Dovecot I can see the (IMAP) Inbox but not its subfolders when "IMAP server directory" is NOT empty. Is there a way to let Dovecot ignore this setting and/or make it compatible with Courier? 2) About a year back we already test-drived Dovecot but we weren't able to get "Delete as marked" option to work in Thunderbird in combination with "Expunge to trash". Any messages marked as deleted would simply be deleted permanently when Thunderbird was closed. This did work properly with Courier where any messages were expunged to Trash (as it should). Is this a known problem and has it been addressed yet? Basically both questions can be brought together as "How can we make Dovecot as compatible as possible with Courier-IMAP"? Thanks, -- Ing. A.C.J. van Amersfoort (Arno) Electronics & ICT Engineer ---------------------------------------------------------------- Leiden Institute of Physics (LION), Electronics Department (ELD) Huygens Laboratory (Room 1007), Leiden University Postal Address: P.O. Box 9504, 2300 RA Leiden Visit Address : Niels Bohrweg 2, 2333 CA Leiden The Netherlands ---------------------------------------------------------------- Phone : +31-(0)71-527.1894 Fax : +31-(0)71-527.5819 E-mail : a.c.j.van.amersfoort(a)eld.physics.leidenuniv.nl Homepage : http://rocky.eld.leidenuniv.nl

2 3

[Dovecot] Zlib plugin question
by Ralf Hildebrandt 07 Oct '08

07 Oct '08

http://wiki.dovecot.org/Plugins/Zlib says pop3 and imap can use this plugin. Does deliver also use it? -- Ralf Hildebrandt (Ralf.Hildebrandt(a)charite.de) snickebo(a)charite.de Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job T-Shirt I need to see - SARAH PALIN: IN ENGLAND WE SHOOT PIT BULLS

2 2

[Dovecot] Postfix - dspam - dovecot deliver fails at deliver
by Shawn P. Duncan 07 Oct '08

07 Oct '08

I have Postfix & Dovecot working properly with mail delivered to the user's ~/Maildir using the postfix config: mailbox_command = /usr/lib/dovecot/deliver I would like to insert dspam in between, passing mail from postfix to dspam and then to dovecot/deliver for delivery. My objective is to only filter incoming mail. This set up doesn't seem to be documented anywhere that I've found via Google. Can someone give me some pointers? Platform is Ubuntu hardy using Dovecot 1.0.10 - Shawn

1 0

[Dovecot] Help - I keep getting LSUB permission denied
by Don Steiny 07 Oct '08

07 Oct '08

Hi, I am using dovecot: 1.0.rc15 I was upgrading Debian and installed new versions of lots of things. My mail came fine and I though there was not problem until a user called and said it was not working through webmail. I tried, it it worked fine and I realized the problem was with dovecot. I have created new users, tried different UIDs. Removed any protections but when I telnet to the port, I get this: a02 LSUB "" "*" * LSUB () "/" "Trash" * LSUB () "/" "Junk" * LSUB () "/" "Sent" * LSUB () "/" "Junk E-mail" * LSUB () "/" "INBOX/Sent" * LSUB () "/" "INBOX/Trash" * LSUB () "/" "INBOX/Drafts" a002 NO Permission denied when I do it on my account, I get: * LSUB () "/" "INBOX/Sent" * LSUB () "/" "INBOX/Trash" * LSUB () "/" "INBOX/Drafts" a002 OK Lsub completed. I have tried making the directory 777, checked the owners. Copied my Maildir into the other user's to see if I could figure out what could be going on, but I still get the same behavior. HELP, my user needs his mail. THANKS -Don

3 5

[Dovecot] Stopping imap synchronization on spool failure
by Chris Cappuccio 06 Oct '08

06 Oct '08

Is there any way to tell an IMAP client to not synchronize/delete old mail through IMAP? Let's say that recent events cause a mail spool to not exist, but people may still want to see old messages that are already cached on their machines.

4 3