- dovecot - dovecot.org

[Dovecot] Dovecot SSL issue on Solaris 10 x64 (64-bit)
by Patric 26 Aug '06

26 Aug '06

I'm having an issue with Thunderbird (and Opera) and Dovecot SSL on a Solaris 10. My OS is Solaris 10 6/06 x86 (running in 64-bit mode) using ZFS (disk mirror) as the filesystem for my users. Dovecot version is 1.0rc7 (logs below are from 1.0rc6). First the connection asks if the SSL-certificate should be accepted, accepting it seems to work but then nothing happens. Thunderbird is quite silent, not always displays an error message, it just seems that there are no emails to download. It works fine in Mac OS X Mail.app with POP3s and IMAPs (both SSL). But not for Thunderbird (1.5.0.5) and Opera (latest). Setting "verbose_ssl=yes" and "auth_debug=yes" in the configuration gives this error from a Thunderbird login: Aug 16 14:16:28 credo dovecot: [ID 107833 mail.warning] pop3-login: SSL_accept() failed: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash unavailable [85.225.200.123] Aug 16 14:16:28 credo dovecot: [ID 107833 mail.info] pop3-login: Disconnected: rip=85.225.200.123, lip=195.198.174.212, TLS Aug 16 14:16:29 credo dovecot: [ID 107833 mail.warning] pop3-login: SSL_accept() failed: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash unavailable [85.225.200.123] Aug 16 14:16:29 credo dovecot: [ID 107833 mail.info] pop3-login: Disconnected: rip=85.225.200.123, lip=195.198.174.212, TLS It seems to be that the OpenSSL installed with Solaris 10 is abit "broken" or missing the cryptographic procotols needed. (at least from what I've read on the Internet) Strange that it works fine with Mail.app on Mac OS X. So, I installed the latest OpenSSL, compiled, tested and installed. (no problems occured) Back to compiling Dovecot, used this oneliner to point it to the new OpenSSL (and my compile settings): env PKG_CONFIG_PATH=/usr/local/ssl/lib/pkgconfig ./configure --sysconfdir=/usr/local/etc --with-ssldir=/usr/local/etc/ssl Worked! bash-3.00$ egrep "^SSL_" config.log SSL_CFLAGS='-I/usr/local/ssl/include ' SSL_LIBS='-L/usr/local/ssl/lib -lssl -lcrypto -lsocket -lnsl -ldl ' But gives this error message when I compile: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -I/usr/local/ssl/include -o ssl-build-param ssl-init-main.o ssl-init-openssl.o ssl-init-gnutls.o ../lib/liblib.a -L/usr/local/ssl/lib -lssl -lcrypto -ldl -lsocket -lnsl -lrt -lsendfile ld: warning: file /usr/local/ssl/lib/libcrypto.a(dh_asn1.o): wrong ELF class: ELFCLASS64 Undefined first referenced symbol in file DH_generate_parameters ssl-init-openssl.o ERR_get_error ssl-init-openssl.o ERR_error_string_n ssl-init-openssl.o i2d_DHparams ssl-init-openssl.o ld: fatal: Symbol referencing errors. No output written to ssl-build-param collect2: ld returned 1 exit status *** Error code 1 make: Fatal error: Command failed for target `ssl-build-param' Current working directory /home/nollan/work2/dovecot-1.0.rc7/src/master *** Error code 1 The following command caused the error: (error message removed to save space, can include if requested) It seems that the Thunderbird/Opera SSL problem will be solved with a new OpenSSL. But I seem to have problems getting Dovecot to compile with the new OpenSSL (64-bit issue?). Anyone got any hints on what I should do? With Regards, Patric

3 2

[Dovecot] imap daemon consuming all the cpu
by Rui Lopes 26 Aug '06

26 Aug '06

Hello, I've tried to do a full text search on the inbox, it run fine, but the imap daemon started to eat all the CPU until I closed the email client. I'm running dovecot 1.0.rc7 [using kqueue] on FreeBSD 6.1. ktrace shows this pattern over and over (its seems to be looping): 49021 imap CALL kevent(0x4,0,0,0x80df000,0x5,0xbfbfe988) 49021 imap RET kevent 1 49021 imap CALL gettimeofday(0x80d0b00,0x80d0b08) 49021 imap RET gettimeofday 0 49021 imap CALL gettimeofday(0x80d0b00,0x80d0b08) 49021 imap RET gettimeofday 0 49021 imap CALL kevent(0x5,0,0,0xbfbfe930,0x1,0xbfbfe928) 49021 imap RET kevent 1 49021 imap CALL gettimeofday(0xbfbfe990,0) 49021 imap RET gettimeofday 0 Maybe this is useless to track the cause... :( Unfortunately(?) I can't reproduce this again, because searches run OK. Best regards, Rui Lopes

1 1

[Dovecot] High CPU load
by Nagy László 25 Aug '06

25 Aug '06

Hello, I'm using dovecot-1.0.b9 on a FreeBSD 6.1 system. Usually we have 6 clients connected to dovecot through IMAPs. These clients are Thunderbird 1.5 programs. After some hours, one or two processed go up to 100% WCPU. As an example, this is what I see when I run 'top': last pid: 5111; load averages: 1.34, 1.82, 1.75 up 13+00:04:09 15:26:59 150 processes: 2 running, 147 sleeping, 1 zombie CPU states: 21.2% user, 0.0% nice, 47.7% system, 0.0% interrupt, 31.1% idle Mem: 149M Active, 368M Inact, 196M Wired, 29M Cache, 111M Buf, 255M Free Swap: 5120M Total, 548M Used, 4572M Free, 10% Inuse PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 52627 thomas 1 109 0 2940K 1500K CPU1 0 21:49 99.02% imap When there are two rebellious clients, they occupy 50-50% CPU time. If I restart thunderbird, then all goes well for a couple of minutes. I need to solve this problem. I already had a system crash that was probably caused by the cpu heat. Pleas help me. Laszlo

5 4

[Dovecot] Restricting IP and/or user access (POP3/IMAP)
by Phil Clare 25 Aug '06

25 Aug '06

Hi, The documentation says to authenticate only from a specific IP or network… if you set this to 127.0.0.1 to indicate the local loop then this effectively blocks every IP address but this one. Since the extra field is in passdb then this would imply it can be done on a per user basis. Have you tried this? Phil ________________________________________ From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Jos Chrispijn Sent: 24 August 2006 15:08 To: dovecot(a)dovecot.org Subject: [Dovecot] Restricting IP and/or user access (POP3/IMAP) Hi, Just new on this mailinglist; I sure hope my questions wouldn't be too dumb for words :-) Q: Restricting IP and/or user access (POP3/IMAP) What I would like to do is blocking some of my user from fetching their mail with neither POP3 nor IMAP. The only way of letting them read/write their e-mail is to be done with my/their Webmail client. On the site of Dovecot I read: 'It's possible to allow user to authenticate only from a specific IP or network. This is especially useful for master users. This can be done by returning allow_nets extra field in passdb.' Actually I am looking for a way of _blocking_ user(names) or certain IP adress(es) instead of _allowing_ certain IP adresses to get their POP3/IMAP mail. Pls could someone hint me out on this? Thanks in advance. Jos -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.11.5/426 - Release Date: 23/08/2006

3 3

[Dovecot] multiple mailboxes in imap
by einKI.ml 25 Aug '06

25 Aug '06

Hi I try to setup a mail server which fetches mails from some pop accounts and presents them through imap (with dovecot) to my local network. I get the mails with getmail at this works as it should. To use dovecot as a pop3 and imap server works too. Now I am trying to setup multiple mailboxes which then should be presented to the user as different folders. I think I have to use namespaces for this (is this correct?) So I tried to configure two namespaces with the following statement. namespace private { separator = / inbox = yes prefix = } namespace private { separator = / prefix = ns location = maildir:/data/server/mail/in/%u/ns } when i try to access the imap server with thunderbird I can receive mails for Inbox but when I want to subscripe an additional folder ns can be seen but is grayed out in thunderbird. To summarize this can anybody give me a hint or example how to configure multiple mailboxes which are located in different directories on the server. thx

1 0

[Dovecot] forward flag metadata
by Tim Schafer 24 Aug '06

24 Aug '06

In testing the migration from courier-imap to dovecot I've discovered that the forward flag on messages isn't kept track of in a standard way. courier-imap seems to keep track of forwarded messages in courierimapkeywords/:list dovecot seems to add an 'a' flag to the filename. Unfortunately this 'a' flag information doesn't seem to be given out by dovecot. It's like it's write only. Is it a bug that dovecot doesn't hand out the "forwarded" metadata? -- Regards, Tim Schafer Information Technology Logistics Easier with Technology Freight Solution Providers direct 916-376-6190 10453 Old Placerville Road fax 916-376-6156 Sacramento, CA 95827 tim_schafer(a)shipfsp.com

3 3

[Dovecot] getting dovecot unwedged
by Scott Murman 24 Aug '06

24 Aug '06

I'm having a problem with the dovecot server. I've upgraded to 1.0rc7 to no avail. My naive view is that a cache file is corrupt, or a lock file cannot be unset. Certain mailboxes cannot be accessed to read or write. Checking the process, the server looks stuck in an infinite poll/wait loop. telnetting directly to the server shows that things are definately amiss, though the original problem may have been caused by a faulty client (Apple Mail or Outlook). My question at this point is how to unwedge the server. Is there a cache repair utility, or a list of files which shouldn't exist? I don't see this info on the Wiki. After sortinig this out, I'm going to install mysql, since this seems to be the more-tested installation. Will dovecot automatically rebuild my current databases or do i need to prepare for sql by hand? -SM-

1 0

[Dovecot] dovecot v1.0 rc7 hung up
by Jack Chen 24 Aug '06

24 Aug '06

It looks like the v.0 RC7 is still not stable. It hangs almost every day. This morning I found that pop3 was not working but imap was working. I know other times when dovecot stop working, neither pop3 and imap worked. I just want to know if other users are getting the same problem.

3 2

[Dovecot] Restricting IP and/or user access (POP3/IMAP)
by Jos Chrispijn 24 Aug '06

24 Aug '06

2 1

[Dovecot] (no subject)
by Joseph D. Wagner 24 Aug '06

24 Aug '06

Ok, I tried: sh -x /etc/rc.d/init.d/dovecot start and it started ok. Then I tried: sh /etc/rc.d/init.d/dovecot start and it started ok too. However, simply using: /etc/rc.d/init.d/dovecot start won't start. On a hunch, I disabled SELinux, and then: /etc/rc.d/init.d/dovecot start started ok. So I have an SELinux problem. Right now I'm doing a filesystem relabel. If that doesn't work, does anyone know where to go from here? Joseph D. Wagner

2 1