- dovecot - dovecot.org

sieve permission problem with dovecot.svbin
by Cliff Hayes 22 May '15

22 May '15

Hello list, I am starting to see these in maillog: dovecot: lmtp(31949, dwright): Error: kXK3KnTpXFXNfAAAU+Cu/Q: sieve: binary open: failed to open: open(/var/spool/mail/dwright/.dovecot.svbin) failed: Permission denied (euid=520(dwright) egid=12(mail) missing +r perm: /var/spool/mail/dwright/.dovecot.svbin, euid is not dir owner) But the directory /var/spool/mail/dwright is owned by dwright:mail with permission set to 700. How do I fix? Here is my config: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release 6.5 (Carbon) auth_failure_delay = 5 secs auth_username_format = %Ln auth_verbose_passwords = plain mail_access_groups = mail mail_location = maildir:~/Maildir mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_after = /dovecotSieveAfter/ sieve_dir = ~/sieve } protocols = imap lmtp sieve service managesieve-login { inet_listener sieve { port = 4190 } } ssl_ca = </etc/pki/dovecot/certs/intermediate20150202.crt ssl_cert = </etc/pki/dovecot/certs/avalon20150202.crt ssl_key = </etc/pki/dovecot/private/avalon20150129.key ssl_verify_client_cert = yes userdb { args = /etc/dovecot/passwd driver = passwd-file } protocol lmtp { log_path = /var/log/dovecot-lmtp.log mail_plugins = " quota sieve" } protocol lda { log_path = /var/log/dovecot-lda.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" }

2 1

dovecot 2.2.18 and ssl_parameters_regenerate
by django＠nausch.org 22 May '15

22 May '15

HI Timo, On http://wiki2.dovecot.org/SSL/DovecotConfiguration I read in chapter SSL security settings: When Dovecot starts up for the first time, it generates new 512bit and 1024bit Diffie Hellman parameters and saves them into <prefix>/var/lib/dovecot/ssl-parameters.dat. After the initial creation they're by default regenerated every week. With newer computers the generation shouldn't take more than a few seconds, but with older computers it can take as long as half an hour. The extra security gained by the regeneration is quite small, so with slower computers, for Dovecot versions prior to v2.2, you might want to disable it If I discover the default-value of ssl_parameters_regenerate I receive: # doveconf -d ssl_parameters_regenerate ssl_parameters_regenerate = 0 In your doku you wrote, that dovecot will regenerate every week. :/ ? I set it to "1 hours" and watch if /var/lib/dovecot/ssl-parameters.dat is build every hour, but nothing happens. ssl-parameters.dat is only rebuild, if I change ssl_dh_parameters_length What's the problem? What I've made false? ttyl Django -- http://dokuwiki.nausch.org http://wetterstation-pliening.info http://ebersberger-liedersammlung.de

1 0

charset_to_utf8 assertion of remaining src_size
by Xin Li 22 May '15

22 May '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I have seen the following assertion fails on my own mail server (indexer-worker): Panic: file charset-iconv.c: line 132 (charset_to_utf8): assertion failed: (*src_size - pos <= CHARSET_MAX_PENDING_BUF_SIZE) However, when charset_to_utf8_try returns FALSE (e.g. iconv() got EINVAL or EILSEQ), the for loop in charset_to_utf8 may end earlier, and there may be additional pending characters, and the assertion doesn't seem always hold in the error case, perhaps we should assert that pos is non-zero in the error case? Cheers, - -- Xin LI <delphij(a)delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.1.2 (FreeBSD) iQIcBAEBCgAGBQJVVjO/AAoJEJW2GBstM+nsbKUP/29fYdZArCiUSStK0hCtRvC3 o4L35zq4iP4WUry7VqNtdMg2Uiythei9l0JokNOJAy2ZDktJ3ns9CArXHi/pJE7/ V8374Iu9ygb4tzDvcNY/353SFkN+Sw4pJzSGJTelVT8nHxahQMtN7E0u26l54zNx p1H8rgt2nVA8eRvKL9MrhudN3eSI2+Jq4HX+dR4/Tu4qLkSU1nqi8sopQxNXzW4C 4XG4haSbTtXLu0H1MGa8y5pmwrFmZEluNOBm2SOww+UqeteD/MwE/pgA7g+cQx8l /t3FWzSe4C9HROV1VGW5V5HDM7cDvNJZ+nxQGI6L6qInkCBqQx/muIb9nIe7dhro tiHIuX4h8X2zaga+iD+B9fkf4QpDUc11WYE+0DUArb2cNTTAgeTXQ68+g0Q+UC8s OxUVDA4KwOSzkpEifDgvVCdgPG7U87SGe9NlMGjSZvAIEPsww16A3f2IaM4fhFa2 lVuTh1wq8phdWXLbCbZ0F36hAyxVbbwC5Xyj4Ygy3QL4RiBC7CJJ8I4f1lRLnoFz 1Wg0/M7psXBLVN7vx2MKtK5Rj1OvMOKmL4VpkhKcnp2z/Y9I5Qq2CP4C5uOv3DLJ JjoCsnVDpWJKQo6EPleb9OxVJF+NmjHd63zimXbuUyDJ7AJCsx/0m9mJZ5QYf+jU U3OqESCU5e5q++QLd2Kl =ksoA -----END PGP SIGNATURE-----

3 4

"doveadm backup" doesn't work anymore after upgrading to 2.2.18
by Jesus Cea 21 May '15

21 May '15

Until today I could do this to backup my primary IMAP4 server: """ doveadm backup ssh csi doveadm dsync-server """ It doesn't work anymore after upgrading to Dovecot 2.2.18: """ jcea@ubuntu:~$ doveadm backup ssh csi doveadm dsync-server Enter passphrase for key '/home/jcea/.ssh/id_rsa': dsync-remote(root): Error: Mailbox INBOX: Failed to get attribute vendor/vendor.dovecot/pvt/server/sieve/default: Mailbox attributes not enabled dsync-local(jcea): Error: Remote command returned error 65: ssh csi doveadm dsync-server dsync-server """ The first error is regular business: I don't have SIEVE in the backup, since it is a backup. I have seen this error forever, no consequences. Now in 2.2.18 I get the second error and the backup is aborted. It doesn't work anymore. I don't find any reference to error 65 anywhere. -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

2 2

Log mail access
by Philipp Brüll 20 May '15

20 May '15

Hello, is it somehow possible to log the access to a mail? The log entry should be written, if a user fetches a mail via imap or pop3. It would be convenient for debugging. I've checked the Logging-Wiki and the docs for the mail_log plugin, but they seem to log any event but "mail access". Best regards, Philipp

1 0

what's the different between the processes dovecot-auth and dovecot -w
by 刘莹莹 20 May '15

20 May '15

hi： what's the different between the processes dovecot-auth and dovecot -w ? What's the function on each of them ? thanks

1 0

Re: Can't achieve alias working with SQL
by Samuel 20 May '15

20 May '15

Le 19/05/2015 14:54, Jorge Bastos a écrit : > Hi Samuel, > >> On a fresh install of Jessie, I achieve to make dovecot/postfix working >> with SQL, but I still can't send email to alias for wich one I get : >> "Unknown user" >> >> After debug enable in dovecot, I see that the user_query SQL , just >> query for the "users" table and not the "forward" table so the final >> alias user is not known. >> >> But when I check postfix for alias, it seems ok : >> >> root@cluster-dovecot:/etc/dovecot# postmap -q contact2(a)XXXXXXXX.com >> mysql:alias_maps contact(a)XXXXXXXXXX.com >> >> So what do I missed for alias working with dovecot ? >> > I had similar question on how to make it working, and it ended up being: > > virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf I have found : In fact, it was not dovecot but postfix policy fault because of check_policy_service making alias down. I'm digging on it now. Thanks. Samuel.

1 0

Re: Controlling shared folder rename?
by andy＠thecsillags.com 19 May '15

19 May '15

Eventually I figured out a solution that looks like it should work; postlogin scripting described here http://wiki2.dovecot.org/PostLoginScripting . Specifically, the sample at the bottom that adds a shared folder, obviously will need some work to make it work the way I want, but it should work. May 19 2015 3:18 PM, andy(a)thecsillags.com (mailto:andy@thecsillags.com) wrote: Dovecot version 2.2.16 I'm using shared folders and what I'd like to do is either have the folder that gets shared be able to be renamed by the user, or failing that, to be able to have an administrator define how the shared folder shows up to the account it's shared to. For example, right now, the INBOX owned by testuser(a)mydomain.com (mailto:testuser@mydomain.com) is shared to otheruser@mydomain as shows up as shared/testuser(a)mydomain.com (mailto:testuser@mydomain.com) because of the prefix directive in the shared namespace in 10-mail.conf. It would be nice if, either via a dict (like the way the acls work), or via normal IMAP folder commands, that I control how it shows up to otheruser@mydomain. So if I could do something like: prefix = proxy::sharedname or similar. Currently trying to rename from IMAP fails -- given the way my understanding of how things works is, I'm not surprised, but hey, it was worth a shot right? First, does the question make sense? Two, is there a way to do this? Thanks, :Drew

1 0

Re: Can't achieve alias working with SQL
by Samuel 19 May '15

19 May '15

Le 19/05/2015 14:54, Jorge Bastos a écrit : > Hi Samuel, > >> On a fresh install of Jessie, I achieve to make dovecot/postfix working >> with SQL, but I still can't send email to alias for wich one I get : >> "Unknown user" >> >> After debug enable in dovecot, I see that the user_query SQL , just >> query for the "users" table and not the "forward" table so the final >> alias user is not known. >> >> But when I check postfix for alias, it seems ok : >> >> root@cluster-dovecot:/etc/dovecot# postmap -q contact2(a)XXXXXXXX.com >> mysql:alias_maps contact(a)XXXXXXXXXX.com >> >> So what do I missed for alias working with dovecot ? >> > I had similar question on how to make it working, and it ended up being: > > virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf In fact, this part is yet in my main.conf and is working (see my postmap query above). And I don't understand why dovecot doesn't use it. So I revert back my dirty user_query and I'm still searching why I can't send email to alias .... Thanks. Samuel.

1 0

Understanding the "doveadm replicator status" output
by Listas＠Adminlinux 19 May '15

19 May '15

Where can I get more detailed information about the output of the 'doveadm replicator status' ? man doveadm-replicator isn't enough. For example, Total number of known users = 29409, but the server has only 17667 users. This is confusing. Look: # doveadm user '*' |wc -l 17667 # doveadm replicator status Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 0 Queued 'failed' requests 0 Queued 'full resync' requests 12962 Waiting 'failed' requests 16447 Total number of known users 29409 What it means to "Queued full resync requests" ? thanks! Thiago Henrique

1 0