- dovecot - dovecot.org

[Dovecot] Multiple copies of a message
by Anne Wilson 31 Jan '08

31 Jan '08

I have a problem and I don't know which part of the mail chain could be causing it, although dovecot does seem to be the most logical source. I get multiple copies of messages to my Inbox. I have just deleted 24 copies of a newsletter from Computer Shopper. The worst example I have seen of this had more than 90 copies. This doesn't happen to any subfolder of Inbox, just Inbox itself. The problem started about 10-14 days ago, on the old mail server (running Mandriva 2007.1). The new server runs CentOS and exhibits the same problem. I'd be interested in any comments, as my efforts to track it down have got nowhere. Anne

5 9

[Dovecot] Plugin Trash don't work ?
by Sebastien Andreatta 31 Jan '08

31 Jan '08

Hello, I have a problem with the trash plugin. i'm not English, but if i ave understand this http://wiki.dovecot.org/Plugins/Trash , if a mailbox is full (90% for example) and i want to delete a mail, the plugin Tras, delete a mail in mailbox specified in a file ... I have this : dovecot.conf : protocol imap { [.....] mail_plugins = quota imap_quota trash } plugin { trash = /etc/dovecot-trash.conf } And in dovecot-trash.conf : # Spam mailbox is emptied before Trash 1 Spam # Trash mailbox is emptied before Sent 2 Trash # If both Sent and "Sent Messages" mailboxes exist, the next oldest message # to be deleted is looked up from both of the mailboxes. 3 Sent 3 Sent Messages I have 3 mail in a 20Mb quota mailbox : 2 in Mailbox (5.1mb both) 1 in Trash (6.2Mb) When i try to delete a mail from my mailbox i have a error and i only see this in maillog : Jan 28 15:49:37 soez dovecot: child 28398 (imap) killed with signal 11 I can't receive mail and i can't delete because i exceed quota Thanks for your help !! Number :-) _________________________________________________________________ Changez votre Live en un clic ! http://get.live.com

2 3

[Dovecot] Rename file opened for read-write -- cannot edit subscriptions
by Jack Schmidt 31 Jan '08

31 Jan '08

Howdy, Here is a problem with fix affecting dovecot-1.0.10 (and 1.1rc13). On a linux system's CIFS mounted filesystem, it is not possible to rename a file opened read-write: $ sleep 5 >> .subscriptions.lock & mv .subscriptions.lock .subscriptions mv: cannot move `.subscriptions.lock' to `.subscriptions': Text file busy This causes problems in editing subscriptions, as the new subscription list is still open for writing before it is renamed in: lib-storage/subscription-file/subscription-file.c line 169 in dovecot version 1.0.10 (and 1.1rc13) This is an unpatched linux 2.6.21-5, CIFS mounted filesystem from a windows 2003 sp2 server. The documentation for rename(2) indicates that it is allowed to return an error when the file is already opened, so perhaps the file should be closed before the replace. Should this be done in file_dotlock_replace (before line 672) generally? Here is a patch that does so: diff -rw -U3 dovecot-1.0.10/src/lib/file-dotlock.c dovecot-1.0.10-patch/src/lib/file-dotlock.c --- dovecot-1.0.10/src/lib/file-dotlock.c 2007-12-11 13:52:08.000000000 -0500 +++ dovecot-1.0.10/src/lib/file-dotlock.c 2008-01-23 08:53:33.000000000 -0500 @@ -635,7 +635,7 @@ struct dotlock *dotlock; struct stat st, st2; const char *lock_path; - int fd; + int fd, old_errno; dotlock = *dotlock_p; *dotlock_p = NULL; @@ -669,6 +669,14 @@ } } + if (dotlock->fd != -1) { + old_errno = errno; + if (close(dotlock->fd) < 0) + i_error("close(%s) failed: %m", dotlock->path); + dotlock->fd = -1; + errno = old_errno; + } + if (rename(lock_path, dotlock->path) < 0) { i_error("rename(%s, %s) failed: %m", lock_path, dotlock->path); file_dotlock_free(dotlock);

2 1

Re: [Dovecot] dovecot Digest, Vol 57, Issue 55
by Sean Smitz 31 Jan '08

31 Jan '08

I'm trying to configure PAM authentication and I'm having some issues. I'm using RHEL 5 and included below are excerpts from my relevant configuration and log files: */var/log/maillog* Jan 19 10:55:39 flacpmail dovecot: imap-login: Aborted login: user=<test>, method=PLAIN, rip=::ffff:128.8.244.15, lip=::ffff:128.8.244.161, TLS */etc/dovecot.conf* passdb pam { args = session=yes dovecot # also tried args = session=yes * } */etc/pam.d/dovecot* #%PAM-1.0 auth required pam_unix.so nullok auth include system-auth account include pam_unix.so session include system-auth Thanks in advnaced, ------------------------------------------------------------------------ Sean Smitz System Administrator Fujitsu Laboratories of America 8400 Baltimore Ave, Suite 302 College Park, MD 20740 (301) 486-0298 (Desk)

2 3

[Dovecot] login_processes_count & login_max_processes_count question
by Ken A 31 Jan '08

31 Jan '08

re: > # Maximum number of login processes to create. The listening process count > # usually stays at login_processes_count, but when multiple users start logging > # in at the same time more extra processes are created. To prevent fork-bombing > # we check only once in a second if new processes should be created - if all > # of them are used at the time, we double their amount until the limit set by > # this setting is reached. > #login_max_processes_count = 128 If the server is attacked by a password guessing routine, or just gets very busy, and login process count reaches 128, will the created processes ever get killed, or will dovecot continue to run 128 processes until it's restarted? Thanks, Ken -- Ken Anderson Pacific.Net

2 1

[Dovecot] Using Dovecot with nsswitch for LDAP on Solaris
by Laurent Blume 31 Jan '08

31 Jan '08

Hello all, I'm having some issues configuring dovecot 1.0.10 on a Solaris 10 box, that uses LDAP¨for its accounts. The local accounts (in /etc/passwd) are authenticated properly and work as expected, but all accounts from the LDAP fail authentication. Those are declared for the system using PAM and NSS (/etc/pam.conf and /etc/nsswitch.conf are configured accordingly). Currently, there are WU-IMAP and Qpopper installed and working, and neither of them needed any special configuration to use the login, they're just using Unix auth. I tried various configurations, based on what I read in the wiki documentation, but nothing works, even the passwd userdb/passdb, which *should* if I understand correctly. Trying to use PAM in dovecot fails, too. Any idea what I'm doing wrong, or pointers to hints? Google returned little information about configuring Dovecot on Solaris, and none that was useful. TIA, Laurent # /opt/csw/sbin/dovecot --version 1.0.10 Sample of failure in the dovecot logs: Jan 30 18:11:00 balif dovecot: [ID 107833 local1.info] auth(default): new auth connection: pid=13210 Jan 30 18:11:09 balif dovecot: [ID 107833 local1.info] auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=xxxxx Jan 30 18:11:09 balif dovecot: [ID 107833 local1.info] auth-worker(default): pam(lblume,127.0.0.1): lookup service=dovecot Jan 30 18:11:10 balif dovecot: [ID 107833 local1.info] auth(default): client out: FAIL 1 user=lblume Jan 30 18:11:17 balif dovecot: [ID 107833 local1.info] imap-login: Aborted login (1 authentication attempts): user=<lblume>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured My latest config try: # /opt/csw/sbin/dovecot -n # 1.0.10: /opt/csw/etc/dovecot.conf base_dir: /var/run/dovecot/ syslog_facility: local1 protocols: imap pop3 listen(default): *:60143 listen(imap): *:60143 listen(pop3): *:60110 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /opt/csw/libexec/dovecot/imap-login login_executable(imap): /opt/csw/libexec/dovecot/imap-login login_executable(pop3): /opt/csw/libexec/dovecot/pop3-login mail_location: mbox:~/:INBOX=/var/mail/%u mail_executable(default): /opt/csw/libexec/dovecot/imap mail_executable(imap): /opt/csw/libexec/dovecot/imap mail_executable(pop3): /opt/csw/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/csw/lib/dovecot/imap mail_plugin_dir(imap): /opt/csw/lib/dovecot/imap mail_plugin_dir(pop3): /opt/csw/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: blocking=yes setcred=yes dovecot userdb: driver: passwd args: blocking=yes -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 2

[Dovecot] Using dovecot proxy as multi-account aggregator?
by Mika Boström 31 Jan '08

31 Jan '08

Good day. I am trying to build a rather weird setup. The basic idea is to have a relatively simple IMAP client and let dovecot do the actual connections. So far both the documentation and my trials on this front have been rather fruitless. The desired components: - 1 dovecot server, acting as a proxy - 1 master account - 1 client connection - 0 "real" user accounts, so no local mail storage at all - N real accounts, spread over different domains - mails from different remote accounts combined to the single client connection - outgoing server for mails selected by the address of the remote account Since the proxy setup can use name(a)domain.tld as destination user, it would appear that the setup is not impossible. Hence my two questions: 1) Is it possible? 2) If yes, how in the name of all that is good and holy do I configure that? And believe me, I am fully aware that for most setups a full-featured client or fetchmail would be the easier path. Thank you for any and all help in advance, -- Mika Boström / mika.bostrom(a)nomovok.com

2 1

[Dovecot] Dovecot + Windows AD + Postfix + quota
by Maciej Paczesny 31 Jan '08

31 Jan '08

Hello, I'm almost sure that all topics and problems mentioned below were separately posted to this list already. But after spending 4 days on searching, I did'n find a compilation similar to my case. So maybe some of you guys, are able to answer to help me solve this: 1. I'd like to use userdb and passdb of Dovetcot to work with Windows AD. 2. I have to use them both because I'd like to use LDA to serve for my Postfix. 3. I DO NOT want tou use any external programs (ie PAM) to talk to AD server. 4. I was able to make my system partially running - I CAN bind to AD database, and confirm user/password. 5. I want to get follownig attributes: home directory (OK, I could put it statically), uid/gid (OK, it could be static too) and MAIL QUOTA (my users have different values - no 'statics'). To help you on this subject, here are my configs/data: OS => Gentoo Linux uname -a => 2.6.15-gentoo-r7 #1 SMP PREEMPT Tue Mar 21 18:08:57 CET 2006 i686 Intel(R) Xeon(TM) CPU 2.40GHz GenuineIntel GNU/Linux dovecot --version => 1.1.beta14 dovecot -n => protocols: imaps ssl_listen: *:993 ssl_cert_file: /etc/ssl/dovecot/newcert.pem ssl_key_file: /etc/ssl/dovecot/newkey.pem ssl_parameters_regenerate: 0 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login verbose_proctitle: yes mail_uid: 5000 mail_gid: 5000 mail_location: maildir:~/.Maildir/ mail_debug: yes mail_executable: /usr/libexec/dovecot/var mail_plugins: quota imap_quota auth default: mechanisms: login plain username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir:storage=10240000000:ignore=Trash sieve: /var/vmail/lpr/%u/.Maildir/.dovecot.sieve grep -v '^ *$#.*$\?$' dovecot-ldap.conf hosts = 10.10.10.8:3268 uris = ldap://10.10.10.8:3268 dn = lpr\Administrator dnpass = *** auth_bind = yes auth_bind_userdn = lpr\%u base = dc=lpr,dc=com,dc=pl ldap_version = 3 user_attrs = uidNumber=uid,gidNumber=gid,postOfficeBox=home,carLicense=quota user_filter = (&(cn=%u)) pass_attrs = cn=user,userPasword=password pass_filter = (&(cn=%u)) Windows AD => Windows 2003 R2 PL ----------------------- Logs: Jan 28 00:37:40 gentoo dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=10.10.10.2 rip=10.10.10.29 Jan 28 00:37:40 gentoo dovecot: auth(default): client out: CONT 1 Jan 28 00:37:40 gentoo dovecot: auth(default): client in: CONT 1 AG1wYWN6ZXNueQBOZGYxNjEzODI= Jan 28 00:37:40 gentoo dovecot: auth(default): client out: OK 1 user=xxx Jan 28 00:37:40 gentoo dovecot: auth(default): master in: REQUEST 1 16026 1 Jan 28 00:37:40 gentoo dovecot: auth(default): ldap(xxx,10.10.10.29): user search: base=dc=lpr,dc=com,dc=pl scope=subtree filter=(&(cn=xxx)) fields=uidNumber,gidNumber,postOfficeBox,carLicense Jan 28 00:37:40 gentoo dovecot: auth(default): master out: USER 1 xxx Jan 28 00:37:40 gentoo dovecot: imap-login: Login: user=<xxx>, method=PLAIN, rip=10.10.10.29, lip=10.10.10.2, TLS Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Loading modules from directory: /usr/lib/dovecot/imap Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Module loaded: /usr/lib/dovecot/imap/lib10_quota_plugin.so Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Module loaded: /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Effective uid=5000, gid=5000, home= Jan 28 00:37:40 gentoo dovecot: IMAP(xxx): Quota root: name=storage=10240000000 backend=maildir args=ignore=Trash Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): maildir: data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir/ Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): maildir++: root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir, index=, control=, inbox=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir Jan 28 00:37:41 gentoo dovecot: IMAP(xxx): mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.Maildir/cur) failed: Permission denied the second case is that i receive following errors in log file: Jan 28 00:47:31 gentoo dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=10.10.10.2 rip=10.10.10.29 Jan 28 00:47:31 gentoo dovecot: auth(default): client out: CONT 1 Jan 28 00:47:31 gentoo dovecot: auth(default): client in: CONT 1 AG1wYCN6ZXNuew9OZGYxxAEzODIe= Jan 28 00:47:31 gentoo dovecot: auth(default): client out: OK 1 user=xxx Jan 28 00:47:31 gentoo dovecot: auth(default): master in: REQUEST 1 16170 1 Jan 28 00:47:31 gentoo dovecot: auth(default): prefetch(xxx,10.10.10.29): passdb didn't return userdb entries Jan 28 00:47:31 gentoo dovecot: auth(default): userdb(xxx,10.10.10.29): user not found from userdb Jan 28 00:47:31 gentoo dovecot: auth(default): master out: NOTFOUND 1 when i use prefetch driver and with change like this one below to ldap.conf file: pass_attrs = uid=user, userPassword=password, postOfficeBox=userdb_home, uidNumber=userdb_uid, gidNumber=userdb_gid, carLicense=userdb_quota (and, yes, i know about the home directory path. it is easy to make it real and working (change mail_location) - it is not a problem.) the case and question is: how can i get a QUOTA (in my case - carLicense) attribute from AD/LDAP? is it shown somewhere? how can it be verified? the value "storage=10240000000 " is a static one written in config and the same for all users. is there any kind of manual on how to make AD and Dovecot running and returning uid, gid, home, quota etc attributes without PAM? Regards, -- Maciej Paczesny maciunio2(a)gmail.com ***Gdyby nie wymyślono elektryczności, siedziałbym przed kompem przy świeczkach***

2 2

[Dovecot] SQL user_query question
by John Dubchak 31 Jan '08

31 Jan '08

Hi, I am working through setting up a virtual hosting system using Dovecot, Postfix and Postgres on a CentOS 5 box running an install of the dovecot-1.0-1.2.rc15.el5 RPM. The question I have is, given this password_query SELECT clause, which all return valid values from the database: user password domain can I use a %d in the WHERE clause of my user_query? The reason I ask is that the log file shows the results coming back correctly for the password_query in the log file: dovecot: auth(default): client out: OK 1 user=user1 domain=domain.com Yet, the user_query that is logged shows: dovecot: auth(default): sql(user1,192.168.0.77): SELECT vu.virtual_mailbox AS home, vu.virtual_uid AS uid, vu.virtual_gid AS gid, vd.domain AS domain FROM virtual_users vu, virtual_mailbox_domains vd WHERE vu.domain_key = vd.id AND vu.username = 'user1' AND vd.domain = '' And the actual query in my dovecot-sql.conf looks like this: user_query = SELECT vu.virtual_mailbox AS home, vu.virtual_uid AS uid, vu.virtual_gid AS gid, vd.domain AS domain FROM virtual_users vu, virtual_mailbox_domains vd WHERE vu.domain_key = vd.id AND vu.username = '%u' AND vd.domain = '%d' I would have expected the above %d to contain the "domain" SELECT value from the password_query, but that doesn't seem to be the case. Any insight is most appreciated. Thanks, John

3 3

[Dovecot] multiple ports, different characteristics
by bill-dovecot＠carpenter.ORG 31 Jan '08

31 Jan '08

The wiki <http://wiki.dovecot.org/Iptables> leads me to believe that the only way to configure dovecot to listen for the same protocol on multiple ports is via external redirection (iptables or similar). Is that so, or can dovecot be directly configured to listen on multiple ports? Here's a concrete example of what I'm trying to accomplish. Our environment uses plaintext authentication, and so we force our users to use TLS for IMAP. For some internal connections (specifically with dovecot built-in proxying), we need non-TLS connections for IMAP. It's completely OK here if we need to listen on different ports for the two flavors of connections. Can dovecot be configured to handle this and/or do we need to run multiple instances of dovecot with different config files? Thanks -- bill-dovecot(a)carpenter.ORG (WJCarpenter) PGP 0x91865119 38 95 1B 69 C9 C6 3D 25 73 46 32 04 69 D6 ED F3

2 1