- dovecot - dovecot.org

Dovecot sieve pigeonhole permission
by Gerhard Wiesinger 05 Aug '15

05 Aug '15

Hello, I'm running dovecot in a classical vmail.vmail setup with pigeonhole and LMTP. Permission worked well in the initial setup but currently (maybe after Fedora 22 update) I'm having the following permission issue: lmtp(root): Error: 7fPZFOL9wFXePQAABcdabc: sieve: binary open: failed to open: open(/etc/dovecot/sieve_after.svbin) failed: Permission denied (euid=9999(vmail) egid=9999(vmail) missing +r perm: /etc/dovecot/sieve_after.svbin, we're not in group 0(root), dir owned by 0:0 mode=0755) lmtp(root): Error: 7fPZFOL9wFXePQAABcdabc: sieve: binary save: failed to create temporary file: open(/etc/dovecot/sieve_after.svbin.myserver.mydomain.15838.) failed: Permission denied (euid=9999(vmail) egid=9999(vmail) missing +w perm: /etc/dovecot, dir owned by 0:0 mode=0755) lmtp(root): Error: 7fPZFOL9wFXePQAABcdcbc: sieve: The LDA Sieve plugin does not have permission to save global Sieve script binaries; global Sieve scripts like `/etc/dovecot/sieve_after.sieve' need to be pre-compiled using the sievec tool rpm -V dovecot dovecot-pigeonhole doesn't report any permission issues Versions: dovecot-2.2.18-2.fc22.x86_64 dovecot-pigeonhole-2.2.18-2.fc22.x86_64 Relevant config parts: mail_gid = vmail mail_uid = vmail plugin { sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve_after.sieve sieve_dir = ~/sieve } ls -lad /etc/dovecot/ drwxr-xr-x. 3 root root 4096 Jul 30 18:13 /etc/dovecot/ ls -la /etc/dovecot/*sieve* -rwxr-x--- 1 vmail vmail 288 Aug 8 2014 /etc/dovecot/sieve_after.sieve -rw-r----- 1 root root 355 Jul 30 18:13 /etc/dovecot/sieve_after.svbin What's are the recommended permissions for the files/directories (also for root service startup of dovecot)? Did something change in permissions management? Thanx. Ciao, Gerhard -- http://www.wiesinger.com/

2 3

451 4.3.0 Temporary internal failure
by Nutsch 04 Aug '15

04 Aug '15

Hi i can send mails without problems in any direction, except when the attachments are bigger than 1 MB. I alway get this message relay=mail.example.net[private/dovecot-lmtp], delay=35155, delays=35155/0.03/0.02/0.09, dsn=4.3.0, status=deferred (host mail.example.net[private/dovecot-lmtp] said: 451 4.3.0 Temporary internal failure (in reply to end of DATA command)) Aug 3 19:34:34 46185 dovecot: lmtp(6477): Disconnect from local: Temporary internal failure (in DATA) postconf message_size_limit message_size_limit = 0 postconf mail_size_limit mailbox_size_limit = 0 i can send big attachments to an extern address but not from intern to intern. Someone said that maybe the tmp directory is the problem so i checked the size. ls -ald /tmp/; df -h /tmp/ drwxrwxrwt 4 root root 80 Aug 3 19:44 /tmp/ Filesystem Size Used Avail Use% Mounted on - 1,0M 4,0K 1020K 1% /tmp root@example:/tmp# is there a connection between lmtp and the size of the tmp directory? And why is the size 1,0M, tmp is not an own partion. Should i increase the size? And if yes, how? df -h Filesystem Size Used Avail Use% Mounted on /dev/vzfs 80G 12G 69G 15% / ??? br. noctua

2 4

Renaming shared mailbox makes it disappear from sharee
by Andy Csillag 03 Aug '15

03 Aug '15

I've run into an interesting thing. If a mailbox has been shared to a second user (I'll call it the sharee), and there are subfolders on that mailbox, and the sharee renames one of those subfolders, it disappears from view to the sharee. The only way I've been able discover to fix it is to have the sharee create a new subfolder -- then the renamed folder shows up again; in addition to the newly created folder. For example, first(a)example.org shares it's INBOX to second(a)example.org. There's a folder INBOX/thing, which second@ renames to INBOX/renamed (ACLs permitting). second@ can no longer can see INBOX/renamed (or INBOX/thing for that matter), via IMAP's LIST command. But if second@ creates a new folder INBOX/other, INBOX/renamed is now visible. This is very reproducible for me. I also tried it without the imappostlogin bit (in the dovecot -n). Anyone else run into this? No NFS is involved, this is a single machine setup. Output of dovecot -n # 2.2.18: /dovecot/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 # OS: Linux 2.6.32-504.el6.x86_64 x86_64 CentOS release 6.6 (Final) xfs auth_master_user_separator = * auth_mechanisms = plain login dict { acl = mysql:/dovecot/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no lda_mailbox_autosubscribe = yes mail_home = mdbox:/dovecot/var/homedirs/%2Mu/%2.2Mu/%u mail_location = mdbox:/dovecot/var/mailboxes/%2Mu/%2.2Mu/%u mail_plugins = acl mail_shared_explicit_inbox = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate vnd.dovecot.pipe vnd.dovecot.filter vnd.dovecot.execute namespace { list = children location = mdbox:/dovecot/var/mailboxes/%%2Mu/%%2.2Mu/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = Drafts } mailbox Junk { special_use = Junk } mailbox Sent { special_use = Sent } mailbox "Sent Messages" { special_use = Sent } mailbox Trash { special_use = Trash } prefix = } passdb { args = /dovecot/etc/dovecot/mastership-sql.conf driver = sql master = yes pass = yes } passdb { args = /dovecot/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl sieve_after = /dovecot/etc/dovecot/sieve/99-autofile.sieve sieve_after2 = /dovecot/etc/dovecot/sieve/98-notify-biz-address.sieve sieve_execute_bin_dir = /dovecot/etc/dovecot/sieve-execute sieve_execute_socket_dir = sieve-execute sieve_extensions = +vnd.dovecot.execute +vnd.dovecot.filter +vnd.dovecot.pipe sieve_filter_bin_dir = /dovecot/etc/dovecot/sieve-filter sieve_filter_socket_dir = sieve-filter sieve_pipe_bin_dir = /dovecot/etc/dovecot/sieve-pipe sieve_pipe_socket_dir = sieve-pipe sieve_plugins = sieve_extprograms } postmaster_address = postmaster(a)xxxxdomain.com sendmail_path = /dovecot/sbin/sendmail service dict { unix_listener dict { user = dovecot } } service imap-postlogin { executable = script-login /dovecot/etc/dovecot/imappostlogin user = $default_internal_user } service imap { executable = imap imap-postlogin } ssl = no userdb { args = uid=dovecot gid=dovecot home=/dovecot/var/mailboxes/%%2Mu/%%2.2Mu/%%u driver = static } protocol lmtp { mail_plugins = acl sieve } protocol lda { mail_plugins = acl sieve } protocol imap { mail_plugins = acl imap_acl }

1 0

Structure of dovecot.index.pvt.log
by Miloslav Hůla 03 Aug '15

03 Aug '15

Hi, we are migrating from Cyrus to Dovecot and I would like to migrate seen flags for shared folder too. We have Dovecot 2.2.13 prepared as: location = maildir:/vmail/user/%%n/Maildir:INDEXPVT=/vmail/user/%n/Maildir/Shared/%%n Now I'm looking for 'dovecot.index.pvt.log' syntax to be able migrate Seen flags. All I know is, that index contains messages UID and Seen flag. May I ask you for a link to doc (if it exists) or into a source code? Should I care about 'dovecot.index.pvt.log' timestamps? Thank you, Milo

1 0

Question RE listescape and separators
by Jakob Curdes 30 Jul '15

30 Jul '15

Hello, we just start moving a large number of mailboxes to a new dovecot server with dovecot 2.0.9 (from CentOS) and sdbox as mailbox type. We use imapsync so there is no issue with mailbox type conversion. However, in test runs I noted that some mail folders,e.g. with dots in them, could not be transferred; dovecot says Couldn't create folder [7.8) Personnel] from [7.8) Personnel]: 106 NO Character not allowed in mailbox name: '.' We have the separator "/" defined for our only namespace so the dot should not be an issue!? I tried to use listescape but either the plugin is not loading (how can I verify this?) or it does not escape the dot in the mailbox name. The listescape settings are the defaults: namespace { separator = / (...) } mail_plugins = $mail_plugins listescape plugin { listescape_char = "\\" } What am I doing wrong? How can I make dots in mailboxes possible? Best regards, Jakob Curdes

1 0

Re: Sieve case insensitive detail part
by Peter Chiochetti 30 Jul '15

30 Jul '15

Am 2015-07-30 um 01:07 schrieb Sascha: > Ich hab mehr als 30-40 Ordner, die ich per + Zeichen direkt adressiere. > […] Adressen gezielt zu filtern, ohne Sieve zu konfigurieren, hab nicht > immer gleich zugriff ein Sieve Client (bei Neuvergabe, wurden die Ordner > angelegt, wenn auch erst mal in der Schreibweise der Adresserweiterung. > Ich habe das ganze schon befürchtet und muss wohl doch über sieve > nachdenken, um mein Problem zu lösen. Hello Sascha, sieve scripts are quite easy, see Steffen's example. I think what you want your script to do is: With any detail part, lowercase it, file message into detail folder, create as necessary. Something like auto-variables in Makfiles, where the rule gets its value from the target, e.g. -- peter

1 0

Re:\ help, permissions issues‏
by josh schooler 29 Jul '15

29 Jul '15

both of my other servers its owned by exim, the permissions in the other two servers are 644, and dovecot starts just fine on those, I don't know what happened I updated my server from opensuse 12.1 to 13.2 and now dovecot is refusing to start.> From: alvin.sm(a)Mail.Linux-Consulting.com> Subject: Re: help, permissions issues> To: dovecot(a)dovecot.org> Date: Mon, 27 Jul 2015 14:47:14 -0700> CC: alvin.sm(a)Mail.Linux-Consulting.com> > > hi> > > Hey everyone I've tried changing the permissions with the file it is telling me is giving me the issue, restarted exim and the computer, but still can't get dovecot to start.> > > > 2.2.13> > > dovecot -F> > doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 14: ssl_cert: Can't open file /etc/exim/openssl/exim.crt: Permission denied> > wag ...> > chown root.root /etc/exim/openssl> chmod 750 /etc/exim/openssl> > chown root.root /etc/exim/openssl/exim.*> chmod 400 /etc/exim/openssl/exim.*> > OpenSSL certs should always be read only by root> > you might want to check the docs regarding uid/gid running dovecot > and uid/gid of dovenull> and permissions for the dovecot dir tree /etc/dovecot*> > wag ... i think it should not be owned by exim> > ...> > > ssl_cert = </etc/exim/openssl/exim.crt> > ssl_key = </etc/exim/openssl/exim.key> > pixie dust> alvin> - http://NetworkNightmare.net/OpenSSL> - http://DDos-Mitigator.net

3 4

Deafness
by Steffan Cline 29 Jul '15

29 Jul '15

I’ve started in the last day or so having issues where users get a timeout when connecting to dovecot. The iPhone interprets this as an auth issue but re-entering the password makes no change. Outlook will either just not connect to it at all or it gives an error to re-enter the password also with no change. This happens within an hour of a "service dovecot restart". I’m using CentOS 6 with dovecot 2.0.9 from the centos repos. There’s nothing visible in the logs. Suggestions of what to check for? Thanks, Steffan

6 9

dbox: message internal date
by Francesco 29 Jul '15

29 Jul '15

Hello everyone and thanks in advance for the help :) I'm trying to figure out where does dovecot store the message internal date when using single dbox storage format. In Maildir format, the internal date is determined by the actual date of the file on the filesystem, but in dbox it doesn't seem to be the case. I'm looking forward for a way to modify a message internal date when on a dovecot instance running dbox storage engine, maybe anyone knows if it's possible and how to accomplish this? Again, thank you for the help Sincerely Francesco

1 0

sharing INBOX with ACL -> share all folders
by Marco Giunta 28 Jul '15

28 Jul '15

Hi at all, I have a problem with ACL; I want to share INBOX and Sent folder to an other user, but when I configure ACL on INBOX, all folders are shared (Sent, Junk, Draft, Trash, etc) # doveadm acl get -u janedoe INBOX ID Global Rights user=johndoe expunge insert lookup post read write write-deleted write-seen # doveadm acl get -u janedoe Sent ID Global Rights user=johndoe expunge insert lookup post read write write-deleted write-seen # doveadm acl get -u janedoe Trash ID Global Rights # doveadm acl get -u janedoe Drafts ID Global Rights # doveadm acl get -u janedoe Junk ID Global Rights # doveadm mailbox list -u johndoe Trash Junk Drafts Sent Archives Archives.2015 Other Users Other Users.janedoe Other Users.janedoe.Junk Other Users.janedoe.Drafts Other Users.janedoe.Sent Other Users.janedoe.Trash Other Users.janedoe.INBOX INBOX If I remove the INBOX ACL, only 'Sent' folder is shared, as expected: # doveadm acl delete -u janedoe INBOX johndoe # doveadm mailbox list -u provahe Trash Trash.saved-messages Junk Drafts Sent INBOX_spam Archives Archives.2015 Archives.2015.INBOX_spam Other Users Other Users.janedoe Other Users.janedoe.Sent INBOX My Dovecot instance use a single user, and all my mailboxes use standard maildir files: drwx------ 9 vmail mail 0 Jul 28 10:59 . drwx------ 12 vmail mail 3864 Jul 28 09:39 .. drwx------ 2 vmail mail 0 Jul 28 09:51 cur -rw------- 1 vmail mail 0 Jul 28 10:59 dovecot-acl -rw------- 1 vmail mail 16 Jul 28 10:59 dovecot-acl-list -rw------- 1 vmail mail 1448 Jul 28 09:51 dovecot.index.cache -rw------- 1 vmail mail 1016 Jul 28 09:52 dovecot.index.log -rw------- 1 vmail mail 113 Jul 28 09:51 dovecot-uidlist -rw------- 1 vmail mail 8 Jul 28 09:39 dovecot-uidvalidity -r--r--r-- 1 vmail mail 0 Jul 28 09:39 dovecot-uidvalidity.55b731ac drwx------ 5 vmail mail 0 Jul 28 09:39 .Drafts lrwxrwxrwx 1 vmail mail 5 Jul 28 09:39 .INBOX_spam -> .Junk drwx------ 5 vmail mail 0 Jul 28 09:39 .Junk -rw------- 1 vmail mail 16 Jul 28 09:39 maildirsize drwx------ 2 vmail mail 0 Jul 28 09:51 new drwx------ 5 vmail mail 0 Jul 28 09:50 .Sent -rw------- 1 vmail mail 37 Jul 28 09:39 subscriptions drwx------ 2 vmail mail 0 Jul 28 09:51 tmp drwx------ 5 vmail mail 0 Jul 28 09:39 .Trash any clue to solve my problem ?? I've already try to play with 'acl_defaults_from_inbox' setting, but no way .. Thank you, Marco # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.18-400.1.1.el5 x86_64 Red Hat Enterprise Linux Server auth_master_user_separator = * auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = XXXXXXXXXXXXXXXXXXXXXXXX doveadm_port = 12345 first_valid_uid = 200 hostname = xxxxxxx.sissa.it imap_client_workarounds = delay-newmail lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = * login_log_format_elements = user=<%u> PID=%p method=%m rip=%r lip=%l %c login_trusted_networks = XXX.XXX.1.172/30 XXX.XXX.24.0/23 mail_gid = mail mail_home = /var/spool/mail/%1n/%n mail_location = maildir:/var/spool/mail/%1n/%n:INDEX=/var/shared/indexes/%1n/%n mail_plugins = acl fts fts_solr mailbox_alias quota mail_shared_explicit_inbox = yes mail_uid = vmail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify mbox_write_locks = fcntl mmap_disable = yes namespace archives { hidden = no inbox = no list = children location = maildir:/var/spool/archives/%1n/%n:INDEX=/var/shared/indexes/%1n/%n/archives mailbox 2015 { auto = subscribe special_use = \Archive } prefix = Archives. separator = . subscriptions = no type = private } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox INBOX_spam { auto = subscribe special_use = \Junk } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } namespace others { list = children location = maildir:/var/spool/mail/%%1n/%%n:INDEXPVT=/var/shared/indexes/%1n/%n/shared/%%n prefix = Other Users.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_defaults_from_inbox = no acl_shared_dict = file:/var/shared/dovecot/shared-mailboxes.dict fts = solr fts_autoindex = yes fts_autoindex_max_recent_msgs = 20 fts_solr = url=http://solr.localdomain:8080/solr/ mailbox_alias_new = INBOX_spam mailbox_alias_old = Junk quota = maildir:User quota:ns= quota2 = maildir:Archive quota:ns=Archives. quota2_rule = *:storage=20GB quota2_warning = storage=95%% quota2-warning 95 %u quota2_warning2 = storage=90%% quota2-warning 90 %u quota2_warning3 = storage=80%% quota2-warning 80 %u quota_rule = *:storage=5GB quota_rule2 = Trash:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Quota exceeded (mailbox for user is full) quota_status_success = DUNNO quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/sieve/.dovecot.sieve sieve_default = /etc/dovecot/sieve/dovecot.sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 16 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)sissa.it protocols = imap pop3 lmtp sieve rejection_reason = Your message to <%t> was automatically rejected for the following reason: %n%n%r service auth { inet_listener { port = 49494 } unix_listener auth-userdb { user = vmail } } service dict { unix_listener dict { user = vmail } } service doveadm { inet_listener { port = 26001 } } service imap-login { process_min_avail = 16 service_count = 0 } service imap { process_limit = 2048 } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } process_min_avail = 16 service_count = 0 vsz_limit = 256 M } service quota-status { client_limit = 1 executable = /usr/libexec/dovecot/quota-status -p postfix inet_listener { port = 25001 } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } service quota2-warning { executable = script /usr/local/bin/dovecot-quota2-warning.sh unix_listener quota2-warning { user = vmail } user = vmail } ssl_cert = </etc/pki/dovecot/certs/xxxxx-crt.pem ssl_key = </etc/pki/dovecot/private/Xxxxx-key.pem ssl_protocols = !SSLv2 !SSLv3 submission_host = xxxxxx.sissa.it:25 syslog_facility = local2 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl fts fts_solr mailbox_alias quota sieve postmaster_address = xxxxxxx(a)sissa.it } protocol lda { info_log_path = log_path = mail_plugins = acl fts fts_solr mailbox_alias quota sieve syslog_facility = local2 } protocol imap { mail_max_userip_connections = 50 mail_plugins = acl fts fts_solr mailbox_alias quota imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 50 } -- ----------------------------------- |Marco Giunta - SISSA Computer Staff| |Via Bonomea, 265 | |34136 - Trieste, Italy | |Tel: +39-40-3787-503 | |Fax: +39-040-3787-244 | |e-mail: giunta(a)sissa.it | -----------------------------------

3 3