- dovecot - dovecot.org

[Dovecot] how to display dovecot.index.cache
by ldaamandy 07 Nov '13

07 Nov '13

hello dovecot(a)dovecot.org: I want to see the contents of dovecot.index.cache . Is there any command can make it become visible character displayed ? the command idxview can displayed doveoct.index and logview can dispalyed dovecot.index.log but it seems no command to displays dovecot.index.cache for us. thanks amandy

3 6

[Dovecot] Postfix delivers mails to maildir and not to dovecot LDA for a virtual user
by Tru Pheenix 06 Nov '13

06 Nov '13

Hi I have been able to setup postfix and dovecot using postgres as the backend store with virtual user maps on Ubuntu 12.04 LTS Server. I have been following instructions from here: http://wiki2.dovecot.org/HowTo/DovecotPostgresql I haven't setup postfix to use saslauthd and PAM, instead I am using dovecot for SASL authentication. Rest of the table structures and query files are the same as from the wiki. SASL authentication works correctly for SMTP POP IMAP. I am able to send emails from a mail client such as Thunderbird with SASL authentication. However I am not able to receive emails for virtual users. I cannot figure out why. System users are getting their emails in the mail box correctly. Postfix fires the mailbox_command to hand over the mail to dovecot. This is how my *mail.log* looks when I send emails from an external domain: Nov 6 06:48:21 localhost postfix/smtpd[20053]: E075280C52: client= mail-ee0-f41.google.com[74.125.83.41] Nov 6 06:48:22 localhost postfix/cleanup[20064]: E075280C52: message-id=< CAJ+V0eCU891rSzSMVbcSy4zsRUk5GUp58b70Wv_WgZxLbKuyLw(a)mail.gmail.com> Nov 6 06:48:22 localhost postfix/qmgr[17492]: E075280C52: from=< me(a)gmail.com>, size=3124, nrcpt=1 (queue active) *Nov 6 06:48:22 localhost postfix/virtual[20066]: E075280C52: to=<someone(a)mydomain.com <someone(a)mydomain.com>>, relay=virtual, delay=0.85, delays=0.7/0.02/0/0.13, dsn=2.0.0, status=sent (delivered to maildir)* Nov 6 06:48:22 localhost postfix/qmgr[17492]: E075280C52: removed Nov 6 06:48:22 localhost postfix/smtpd[20053]: disconnect from mail-ee0-f41.google.com[74.125.83.41] Postfix seems to deliver the mail to maildir instead of the home directory of the virtual user. Incase of the system user, the logs indicate that the mailbox_command was fired and I do get to see the mail in the inbox. My postfix *main.cf <http://main.cf>*: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix dovecot_destination_recipient_limit = 1 inet_interfaces = all *mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}"* mailbox_size_limit = 0 mydestination = localhost, localhost.localdomain, localhost myhostname = mydomain.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/dovecot-auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /root/certs/www.mydomain.com.pem smtpd_tls_key_file = /root/certs/www.mydomain.com.key smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_protocols = SSLv3, TLSv1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes tls_random_source = dev:/dev/urandom transport_maps = pgsql:/etc/postfix/transport.cf virtual_gid_maps = pgsql:/etc/postfix/gids.cf virtual_mailbox_base = /home virtual_mailbox_domains = mydomain.com *virtual_mailbox_maps = pgsql:/etc/postfix/mailboxes.cf <http://mailboxes.cf>* virtual_maps = pgsql:/etc/postfix/virtual.cf *virtual_transport = dovecot* virtual_uid_maps = pgsql:/etc/postfix/uids.cf I have included the virtual_transport parameter to indicate that dovecot is running as LDA. I have also included the pgsql query file in the virtual_mailbox_maps parameter. My *mailboxes.cf <http://mailboxes.cf> *file which points the email id of the virtual user to the appropriate mail path: user=mailreader password=secret dbname=mails table=postfix_mailboxes select_field=mailbox where_field=userid hosts=localhost My postfix *master.cf <http://master.cf>* file: smtp inet n - n - - smtpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - - - - smtp relay unix - - - - - smtp showq unix n - - - - showq error unix - - - - - error retry unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) *dovecot unix - n n - - pipe* * flags=DRhu user=vmailuser:vmailuser argv=/usr/lib/dovecot/deliver -f* * ${sender} -d ${recipient}* ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} I have included the dovecot LDA service line above so that postfix can deliver to virtual users as per: http://wiki2.dovecot.org/LDA/Postfix This is my *doveconf -n* output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-virtual i686 Ubuntu 12.04 LTS ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes mail_debug = yes *mail_location = maildir:/home/vmailuser/%d/%n/Maildir* managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </root/certs/www.mydomain.com.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </root/certs/www.mydomain.com.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } I have setup *mail_location *to point to the home directory of vmailuser under which for the given domain the virtual users mail dir is created. However, the mails clearly don't seem to get delivered for the virtual user. Any help to fix this would be appreciated. Thanks! :) Regards Tru Pheenix

1 1

[Dovecot] Missing i_stream_unref in imap_msgpart_crlf_seek()?
by Tomasz Potega 06 Nov '13

06 Nov '13

Hi, imap_msgpart_crlf_seek() returns an error stream in case of problems in message_skip_virtual(). The original input stream is not being unreferenced, preventing destroy callbacks from being executed. Shouldn't we have an i_stream_unref(&input) here: src/lib-imap-storage/imap-msgpart.c: 398 if (message_skip_virtual(input, virtual_skip, &cr_skipped) < 0) { 399 errinput = i_stream_create_error(errno); 400 i_stream_set_name(errinput, i_stream_get_name(input)); 401 return errinput; 402 } ? Best regards, Tomasz Potęga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] get_disconnect_reason() gets called with NULL ctx->litinput
by Tomasz Potega 06 Nov '13

06 Nov '13

Hi, I have found get_disconnect_reason() to be called with NULL ctx->litinput at times, making dovecot crash when accessing v_offset: src/imap/cmd-append.c: 83 switch (i_stream_read(client->input)) { 84 case -1: 85 /* disconnected */ 86 reason = get_disconnect_reason(ctx, ctx->litinput->v_offset); 87 cmd_append_finish(cmd->context); 88 /* Reset command so that client_destroy() doesn't try to call 89 cmd_append_continue_message() anymore. */ Best regards, Tomasz Potęga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] ssl-params regeneration with dovecot 2.2.7
by Frank Elsner 06 Nov '13

06 Nov '13

Hello, after switching from version 2.2.7 to 2.2.7 I miss the loglines which say: ssl-params: Generating SSL parameters ssl-params: SSL parameters regeneration completed The configuration has not been changed and reads: | # 2.2.7: /usr/local/dovecot/etc/dovecot/dovecot.conf | # OS: Linux 2.6.35.14-106.fc14.i686.PAE i686 Fedora release 14 (Laughlin) ext3 | auth_mechanisms = plain login | default_vsz_limit = 512 M | first_valid_uid = 200 | last_valid_uid = 65534 | listen = * | lmtp_save_to_detail_mailbox = yes | login_greeting = c64.shuttle.de - IMAPs Service (dovecot) ready. | login_log_format_elements = %u %r %c | mail_location = maildir:/var/spool/mail/%u | mail_log_prefix = "%Us(%u,%r): " | mail_plugin_dir = /usr/dovecot/lib/dovecot/ | mail_plugins = notify quota fts fts_squat | namespace inbox { | inbox = yes | list = yes | location = | mailbox Drafts { | special_use = \Drafts | } | mailbox Gesendet { | special_use = \Sent | } | mailbox SPAM { | special_use = \Junk | } | mailbox Sent { | special_use = \Sent | } | mailbox Trash { | special_use = \Trash | } | prefix = | subscriptions = yes | type = private | } | passdb { | args = dovecot | driver = pam | } | plugin { | fts = squat | fts_squat = partial=4 full=10 | mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append | mail_log_fields = uid box from subject msgid size flags | mail_log_group_events = yes | quota = maildir:User quota | quota_rule = *:storage=2G | quota_rule2 = Trash:storage=+100M | } | postmaster_address = postmaster(a)moltke28.b.shuttle.de | protocols = imap | service anvil { | client_limit = 1027 | } | service auth { | unix_listener auth-client { | group = exim | mode = 0660 | user = exim | } | } | service imap-login { | inet_listener imap { | port = 143 | } | inet_listener imaps { | port = 993 | ssl = yes | } | process_limit = 512 | process_min_avail = 10 | } | service imap-postlogin { | executable = script-login /usr/local/sbin/dovecot-imap-post-login | } | service imap { | executable = imap imap-postlogin | } | service lmtp { | inet_listener lmtp { | address = 0.0.0.0 | port = 24 | } | } | service pop3-login { | inet_listener pop3 { | port = 110 | } | inet_listener pop3s { | port = 995 | ssl = yes | } | } | service pop3 { | process_limit = 1024 | } | ssl_cert = </usr/local/etc/c64.shuttle.de.CRT | ssl_key = </usr/local/etc/c64.shuttle.de-dovecot.KEY | ssl_parameters_regenerate = 1 hours | userdb { | driver = passwd | } | verbose_proctitle = yes | protocol lmtp { | mail_plugins = notify quota fts fts_squat | } | protocol lda { | mail_plugins = notify quota fts fts_squat | } | protocol imap { | imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags | imap_logout_format = [%i/%o] | mail_max_userip_connections = 0 | mail_plugins = notify quota fts fts_squat quota mail_log imap_quota listescape fts fts_squat | } What's going on? No more logging or no regeneration? Greetings, Frank Elsner

2 2

[Dovecot] 2.2.6 auth process crash using LMTP and LDAP on director.
by Olivier Girard 06 Nov '13

06 Nov '13

I'm upgrading my configuration to use director and lmtp for delivery. (doveconf -n at end of the mail). I use the same config for auth on mail backends and see no errors. My setup seem to work nicely but i have some auth process crashing when using lmtp protocol. Everything is working a sexpected then i've got 5-6 errors like this in logs and a crach of the auth process: dovecot: lmtp(47269): Error: passdb lookup(_mail_): Disconnected unexpectedly pid 47406 (auth), uid 143: exited on signal 11 Actually, i didn't configure to core dump. Do you think seting up lmtp protocol to static auth adding something like folow will be better for this problem? protocol lmtp { passdb { args = proxy=y nopassword=y driver = static } } Please note that my configuration is actually listening on inet fot LMTP but that the goal is to configure postfix on the same server and switch to socket, this expain the configuration of the service auth to provide a socket to postfix. Here is my director config: % doveconf -n # 2.2.6: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.4-RELEASE-p4 amd64 auth_cache_negative_ttl = 0 auth_cache_size = 16 M auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 default_process_limit = 4000 director_mail_servers = 192.168.16.1 192.168.16.2 192.168.16.3 director_servers = 192.168.16.4 192.168.16.5 192.168.16.6 disable_plaintext_auth = no doveadm_port = 24245 info_log_path = syslog instance_name = director lmtp_proxy = yes mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } service anvil { client_limit = 12003 } service auth-worker { process_min_avail = 10 user = $default_internal_user } service auth { client_limit = 16000 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0666 user = $default_internal_user } user = $default_internal_user } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 192.168.16.4 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 24245 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = * :: port = 24 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { auth_socket_path = director-userdb } protocol doveadm { auth_socket_path = director-userdb } local 192.168.16.0/24/24 { doveadm_password = mysecret } Last thing, in my config file, there is only one /24 on local network but this is another problem.

1 0

[Dovecot] Best way from Mbox to Maildir using 2.17?
by Regan Yelcich 06 Nov '13

06 Nov '13

Can someone advise the best way to convert mailboxes from Mbox to Maildir for Dovecot 2.17 on Ubuntu? Thanks.

9 20

Re: [Dovecot] Issue with postfix not handing over e-mails to dovecot
by Joseph Tam 05 Nov '13

05 Nov '13

Tru Pheenix writes: > posftconf output: https://gist.github.com/anonymous/7318863 > doveconf output: https://gist.github.com/anonymous/7318896 > tail -f /var/log/mail.* output (when receiving mail): > https://gist.github.com/anonymous/7318945 Unless these are exceeding long, you probably should inline the contents to save people from having to jump around to get the information to help you. It will also properly archive the context to the solution. >From your logs, it appears your mail system does not know what user is mapped to "someone(a)mydomain.com": Nov 5 13:21:06 localhost postfix/local[11185]: 5716D8007B: to=<someone(a)mydomain.com>, relay=local, delay=0.59, delays=0.57/0.01/0/0.01, dsn=5.1.1, status=bounced (unknown user: "someone") I don't know whether this message is produced by postfix or by dovecot, but one thing I did notice is that your postfix configuration mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}" has upper-case "EXTENSION", whereas the Dovecot wiki uses lower case: http://wiki2.dovecot.org/LDA/Postfix If that's not it, maybe it's your SQL. You can also ask dovecot to look up user "somebody" and debug your way from there: doveadm user somebody Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] squat assertion result core dump with imap process
by Kui Zhang 05 Nov '13

05 Nov '13

Hello, Recently, we had a file system problem. After fsck we started to get some core dump with imap process. Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Panic: file squat-trie.c: line 293 (squat_trie_lock): assertion failed: (trie->fd != -1) Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4892a) [0x7fe8b7c9392a] -> /usr/lib/dovecot/libdovecot.so.0(+0x48976) [0x7fe8b7c93976] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fe8b7c66faf] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x4ef4) [0x7fe8b51d9ef4] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(squat_trie_build_deinit+0x9d2) [0x7fe8b51dcc02] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x4150) [0x7fe8b51d9150] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x41b1) [0x7fe8b51d91b1] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x6b7c) [0x7fe8b5a05b7c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_backend_update_deinit+0x2c) [0x7fe8b5a05bfc] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb65a) [0x7fe8b642765a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x419) [0x7fe8b7f22069] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync+0x46) [0x7fe8b7f224a6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x87) [0x7fe8b7f22587] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7fe8b7f614d1] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](imap_sync_init+0x67) [0x419397] -> dovecot/imap [user(a)domain.tld204.174.223.223 UID](cmd_sync_delayed+0x1c7) [0x419637] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](client_handle_input+0x1fd) [0x41131d] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](client_input+0x5f) [0x411b7f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fe8b7c9fb56] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7fe8b7ca0b8f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fe8b7c9faf8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fe8b7c8b413] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](main+0x2a4) [0x419dd4] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe8b78dfead] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Fatal: master: service(imap): child 28415 killed with signal 6 (core dumped) doveadm index -u user(a)domain.tld mailbox_name Removing index files and re index help with the crashes. From time to time we still get these in the log: Nov 5 10:52:53 mail_server1 dovecot: imap(user(a)domain.tld): Error: Corrupted squat uidlist file /media/drbd/user_name/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index.search.uids: wrong indexid Nov 5 11:40:00 mail_server1 dovecot: imap(user(a)domain.tld): Error: Corrupted squat uidlist file /media/drbd/user_name/mdbox/mailboxes/folder2/dbox-Mails/dovecot.index.search.uids: wrong indexid I am using: dovecot-dbg 2:2.1.16-0~auto+30 Thanks Kui.Z

1 0

[Dovecot] increased core dumps with v2.2.7
by Anand Kumria 05 Nov '13

05 Nov '13

Hi, After upgrading to v2.2.7 yesterday, I am starting to get a larger number of bugs occurring -- unfortunately I hadn't configured things to save core dumps (now done). But I am seeing things like: dovecot: imap(user(a)example.com): Fatal: master: service(imap): child 27931 killed with signal 11 (core dumped) kernel: [151706.763475] imap[4878]: segfault at 7fff53b0aff8 ip 00007fdc7ed65ece sp 00007fff53b0b000 error 6 in lib20_zlib_plugin.so[7fdc7ed61000+7000] dovecot: imap(user2(a)example.com): Fatal: master: service(imap): child 4870 killed with signal 11 (core dumped) As soon as I have more info., I'll let you know. A

2 2

[Dovecot] (Maybe stupid) question about selecting mailbox
by kjonca＠o2.pl 05 Nov '13

05 Nov '13

Does mailbox with "\NoSelect" can be select or examine? I'm not sure but IMVHO "select x" should not work. $/usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE COMPRESS=DEFLATE] Logged in as kjonca 2 LIST "x" "*" * LIST (\Noselect \HasChildren) "/" "x" * LIST (\HasNoChildren) "/" "x/y" 2 OK List completed. 3 SELECT x * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1376977764] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences 3 OK [READ-WRITE] Select completed. 4 logout IMAP(kjonca): Info: Disconnected: Logged out in=35 out=813 * BYE Logging out 4 OK Logout completed. doveconf -n # 2.1.17 (d463fab6db95): /etc/dovecot/dovecot.conf # OS: Linux 3.8.9+1 x86_64 Debian wheezy/sid auth_debug = yes auth_mechanisms = plain digest-md5 cram-md5 login auth_username_format = %n auth_verbose = yes listen = alfa log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Mail/1:LAYOUT=fs:INBOX=~/Mail/1/INBOX mail_log_prefix = "%Us(%u): " mail_plugins = zlib passdb { args = scheme=PLAIN /etc/security/dovecot.pwd driver = passwd-file } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_execute_bin_dir = %h/sieve/bin sieve_execute_exec_timeout = 86400s sieve_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute +vnd.dovecot.filter sieve_filter_bin_dir = %h/sieve/bin sieve_filter_exec_timeout = 86400s sieve_pipe_bin_dir = %h/sieve/bin sieve_pipe_exec_timeout = 86400s sieve_plugins = sieve_extprograms } protocols = " imap lmtp" service auth { user = root } ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = zlib sieve } protocol lda { deliver_log_format = msgid=%m: %$ log_path = ~/log/deliver.log mail_plugins = zlib sieve postmaster_address = root@localhost } protocol imap { mail_max_userip_connections = 20 mail_plugins = zlib imap_zlib mail_log notify acl } -- http://blogdebart.pl/2009/12/22/mamy-chorych-dzieci/ The goal of Computer Science is to build something that will last at least until we've finished building it.

2 2

[Dovecot] Message parser loops on certain messages (e.g. with a trailing CR character)
by Tomasz Potega 05 Nov '13

05 Nov '13

Hi, dovecot's message parser enters an endless loop when fed with certain multipart messages with stray CR characters. parse_next_body_to_boundary() assumes the '\r' might be the beginning of a boundary line, reducing the block size by one: src/lib-mail/message-parser.c: 404 /* no linefeeds in this block. we can just skip it. */ 405 ret = 0; 406 if (block_r->data[block_r->size-1] == '\r') { 407 /* this may be the beginning of the \r\n--boundary */ 408 block_r->size--; 409 } For a block size of 1 (e.g. the trailing '\r' character), dovecot ends up processing zero-sized blocks, calling message_parser_read_more() without skipping the input stream: ... #6 0x00007f94f49374c7 in i_stream_read (stream=0xbe2fc8) at istream.c:167 #7 0x00007f94f49383d5 in i_stream_read_data (stream=0xbe2fc8, data_r=0x7fff2141d6b0, size_r=0x7fff2141d6b8, threshold=1) at istream.c:497 #8 0x00007f94f4918c2b in message_parser_read_more (ctx=0xbe7c10, block_r=0x7fff2141d6a0, full_r=0x7fff2141d667) at message-parser.c:128 #9 0x00007f94f491af67 in message_parser_parse_next_block (ctx=0xbe7c10, block_r=0x7fff2141d6a0) at message-parser.c:1012 #10 0x00007f94f491b2fb in message_parser_parse_body (ctx=0xbe7c10, hdr_callback=0x7f94f4c69a75 <parse_bodystructure_part_header>, context=0xbf0450) at message-parser.c:1075 #11 0x00007f94f4c6a876 in index_mail_parse_body (mail=0xbecd00, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:895 #12 0x00007f94f4c6aedb in index_mail_parse_bodystructure (mail=0xbecd00, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1046 #13 0x00007f94f4c6b4a5 in index_mail_get_special (_mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at index-mail.c:1170 #14 0x00007f94f4bfab53 in maildir_mail_get_special (_mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at maildir-mail.c:570 #15 0x00007f94f4c36ea1 in mail_get_special (mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at mail.c:269 #16 0x000000000041c5d7 in fetch_bodystructure (ctx=0xbd6a48, mail=0xbecd00, context=0x0) at imap-fetch.c:678 ... You will find a sample message attached to this mail. I have added a check to see if the parser is past the EOF (and omit reducing the block size then) as a band-aid fix, but this might call for a more elegant solution. Best regards, Tomasz Potêga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] infinite loop (causing crash) whilst closing connection
by Anand Kumria 05 Nov '13

05 Nov '13

Hi Timo, As a follow-up to my earlier email, I've managed to get a few backtraces now. #305439 o_stream_close (stream=0x1680c10) at ostream.c:85 #305440 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305441 0x00007ff222f70fef in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:182 #305442 0x00007ff222f711cb in o_stream_zlib_flush (stream=<optimized out>) at ostream-zlib.c:222 #305443 0x00007ff2243f142d in o_stream_flush (stream=0x1680c10) at ostream.c:147 #305444 0x00007ff222f70ddf in o_stream_zlib_close (stream=0x1680b80, close_parent=true) at ostream-zlib.c:35 #305445 0x00007ff2243f12ce in o_stream_close_full (close_parents=true, stream=0x1680c10) at ostream.c:49 #305446 o_stream_close (stream=0x1680c10) at ostream.c:85 #305447 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305448 0x00007ff222f70fef in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:182 #305449 0x00007ff222f711cb in o_stream_zlib_flush (stream=<optimized out>) at ostream-zlib.c:222 #305450 0x00007ff2243f142d in o_stream_flush (stream=0x1680c10) at ostream.c:147 #305451 0x00007ff222f70ddf in o_stream_zlib_close (stream=0x1680b80, close_parent=true) at ostream-zlib.c:35 #305452 0x00007ff2243f12ce in o_stream_close_full (close_parents=true, stream=0x1680c10) at ostream.c:49 #305453 o_stream_close (stream=0x1680c10) at ostream.c:85 #305454 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305455 0x00007ff222f710ff in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:193 #305456 0x00007ff222f71491 in o_stream_zlib_sendv (stream=0x1680b80, iov=0x7fff6b3e1870, iov_count=1) at ostream-zlib.c:257 #305457 0x00007ff2243f1785 in o_stream_sendv (stream=0x1680c10, iov=0x7fff6b3e1870, iov_count=1) at ostream.c:229 #305458 0x00007ff2243f186f in o_stream_nsendv (stream=0x1680c10, iov=<optimized out>, iov_count=<optimized out>) at ostream.c:263 #305459 0x00007ff2243f189a in o_stream_nsend (stream=<optimized out>, data=<optimized out>, size=<optimized out>) at ostream.c:255 #305460 0x00000000004157f0 in client_send_tagline (cmd=<optimized out>, data=0x423c82 "OK Close completed.") at imap-client.c:388 #305461 0x000000000040c833 in cmd_close (cmd=0x167c4d0) at cmd-close.c:37 #305462 0x000000000041707d in command_exec (cmd=0x167c4d0) at imap-commands.c:158 #305463 0x0000000000416110 in client_command_input (cmd=0x167c4d0) at imap-client.c:780 #305464 0x00000000004161f5 in client_command_input (cmd=0x167c4d0) at imap-client.c:841 #305465 0x000000000041649d in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x167b8f0) at imap-client.c:879 #305466 client_handle_input (client=0x167b8f0) at imap-client.c:891 #305467 0x00000000004165de in client_continue_pending_input (client=0x167b8f0) at imap-client.c:715 #305468 0x000000000040ed89 in idle_client_input (ctx=<optimized out>) at cmd-idle.c:112 #305469 0x00007ff2243e8686 in io_loop_call_io (io=0x16e67e0) at ioloop.c:387 #305470 0x00007ff2243e953f in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:220 #305471 0x00007ff2243e8198 in io_loop_run (ioloop=0x165d730) at ioloop.c:411 #305472 0x00007ff224397b93 in master_service_run (service=0x165d5c0, callback=<optimized out>) at master-service.c:566 #305473 0x000000000040af18 in main (argc=1, argv=0x165d390) at main.c:400 Let me know if you need further information. This is with dovecot v2.2.7 (1:2.2.7.0-1) Thanks, Anand

1 0

[Dovecot] Config problem: want SSL + local roundcube
by Rich 05 Nov '13

05 Nov '13

Hi, Have used dovecot for many years, happy that it worked well without me needing to do anything much! But since the upgrade from v1 to v2.1.7-7 I've come across some config probs. I want IMAP and to force TLS for all internet connections. However, I run RoundCube on the same server (over https) and this needs access too, but this doesn't need to be TLS because it's local anyway. The auto-config update script made some changes, it added the following to force SSL. service imap-login { inet_listener imap { port = 0 } } ssl = required But this seems to forbid the local roundcube service from logging in. Can anyone help me with my config? I had a stab, adding the following, but it didn't work. Was a complete guess anyway! remote 127.0.0.1 { ssl = no service imap-login { inet_listener imap { port = 143 } } } Here's my full config: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 7.2 ext3 auth_default_realm = artfulrobot.com log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/virtual/%d/%n mail_privileged_group = mail passdb { args = username_format=%n /etc/exim4/virtual_domains/%d/passwords driver = passwd-file } protocols = imap service auth { unix_listener auth-client { group = Debian-exim mode = 0660 } user = root } service imap-login { inet_listener imap { port = 0 } } ssl = required ssl_cert = </etc/ssl/certs/mail.artfulrobot.com-with-chain.crt ssl_key = </etc/ssl/private/mail.artfulrobot.com.key userdb { args = uid=1001 gid=1001 driver = static } userdb { driver = passwd } Thanks, Rich

3 5

[Dovecot] [bug] ssl-params hangs when FIPS is enabled
by Michal Hlavinka 05 Nov '13

05 Nov '13

Hi, we found a bug in ssl-params. It calls openssl DH generator for 512 and 1024 bits, but in FIPS mode, openssl won't generate anything for less than 1024, so it fails with: error:0506A06E:Diffie-Hellman routines:DH_BUILTIN_GENPARAMS:key size too small but when DH generator fails, ssl-params hangs forever in io_loop_run: __epoll_wait_nocancel() io_loop_handler_run(..) at ioloop-epoll.c:176 io_loop_run(..) at ioloop.c:406 master_service_run(..) at master-service.c:566 main(..) at main.c:156 Getting system in FIPS mode can be a little tricky, but DH_generator simulated failure can do the trick. Just change ssl-params/ssl-params-openssl.c:generate_dh_paramaters:39 - if (dh == NULL) { + if (1 || dh == NULL) { and when you run ssl-params (with no ssl-parameters.dat), it hangs. Let me know if you need more information. Regards, Michal Hlavinka

2 3

[Dovecot] Issue with postfix not handing over e-mails to dovecot
by Tru Pheenix 05 Nov '13

05 Nov '13

Hello! I have installed postfix with dovecot and postgresql. I have set up SASL authentication for postfix and dovecot and been able to test them successfully. I am able to send sasl authenticated emails through smtpd on postfix using a mail client like Thunderbird. However, now I am unable to receive any e-mails. When I respond to the emails, I get a not delivered failure from postfix. I cannot figure out why postfix is not handing over the e-mails to dovecot. So here are some links to follow: posftconf output: https://gist.github.com/anonymous/7318863 doveconf output: https://gist.github.com/anonymous/7318896 tail -f /var/log/mail.* output (when receiving mail): https://gist.github.com/anonymous/7318945 Any help to solve this would be highly appreciated. Regards Tru Pheenix

1 0

Re: [Dovecot] dovecot Digest, Vol 127, Issue 7
by DV Henkel-Wallace 05 Nov '13

05 Nov '13

> Date: Tue, 5 Nov 2013 08:22:57 +0100 (CET) > From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> > >> >> My specific application: I am running spamassassin and would like users >> to be able to submit spam (and ham) directly by moving it into special >> folders. > I did this before switching to antispam. > I use antispam with spool2dir now, that central directory has a inotify > watcher that trains the messages instantly. This is a great idea. In my case I think I will get away with a five minute cron job since the pickup latency should be manageable to the users and there is less to install. But I like in principle the idea of an immediate, fs-driven trigger, which would probably use fewer CPU cycles in the aggregate. > [...]all my users moved messages into spam/yes, > but copied them into spam/no Unfortunately I can't rely on users getting this right, much less understanding the difference between copy and move semantics. And I'm probably not going to be able to upgrade my users. Thanks for your advice! -d

1 0

[Dovecot] s it safe to manipulate Maildir files directly?
by DV Henkel-Wallace 05 Nov '13

05 Nov '13

> Date: Tue, 5 Nov 2013 08:40:31 +0100 > From: Oli Schacher <dovecot(a)lists.wgwh.ch> > > On Mon, 4 Nov 2013 21:49:59 -0800 > David Henkel-Wallace <gumby(a)henkel-wallace.org> wrote: > >> Having the cron job find the messages and train spamassassin is no >> problem. The question is how to move the messages. Is it safe to >> simply rename the files from my cron job? > [...] >> If I have to go through to Dovecot I am afraid I'd need the user's >> credentials, which is not appropriate. > > you can do all this with doveadm scripts. Oli, thanks for the suggestion. It hadn't occured to me to consider doveadm. That's exactly the right tool. Regards, David

1 0

[Dovecot] Is it safe to manipulate Maildir files directly?
by David Henkel-Wallace 05 Nov '13

05 Nov '13

Dovecoters, is it safe to manipulate files in Maildir/xxx directly or will Dovecot become unstable if I don't make these changes by talking to Dovecot and having it make the changes? (I'm running 2.1.7 under Wheezy, IMAP only) My specific application: I am running spamassassin and would like users to be able to submit spam (and ham) directly by moving it into special folders. A cron job can then find it and take action: feed spam messages to the bayesian trainer and then delete them; feed ham messages to the trainer and then move them into ~/Maildir/cur/ Having the cron job find the messages and train spamassassin is no problem. The question is how to move the messages. Is it safe to simply rename the files from my cron job? The dovecot wiki implies that dovecot will notice a change in mtime and deal with it safely. Am I reading this correctly? Changing a message flags (i.e. name) and/or directory will change mtime. If I have to go through to Dovecot I am afraid I'd need the user's credentials, which is not appropriate. Thanks! -d

3 2

[Dovecot] Stuck with authentication for my dovecot installation.
by Tru Pheenix 04 Nov '13

04 Nov '13

Hello! I have been following instructions from here to setup dovecot along with postfix and postgresql and sasl2. I try to login but I keep getting the following messages in /var/log/mail.log Nov 2 19:51:39 localhost dovecot: ssl-params: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: config: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:44 localhost dovecot: master: Dovecot v2.0.19 starting up (core dumps disabled) Nov 2 19:53:11 localhost dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:53:11 localhost dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:53:11 localhost dovecot: master: Dovecot v2.0.19 starting up (core dumps disabled) Nov 2 19:53:29 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Nov 2 19:53:29 localhost dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Nov 2 19:53:29 localhost dovecot: auth: Debug: auth client connected (pid=12718) Nov 2 19:53:29 localhost dovecot: auth: pgsql(localhost): Connected to database mails Nov 2 19:53:41 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=58759#011resp=<hidden> Nov 2 19:53:41 localhost dovecot: auth: Debug: sql(someone(a)mydomain.com,127.0.0.1): query: SELECT userid as user, password FROM users WHERE userid = 'someone(a)mydomain.com' Nov 2 19:53:41 localhost dovecot: auth: sql(someone(a)mydomain.com,127.0.0.1): Password mismatch My doveconf -n gives the following output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-virtual i686 Ubuntu 12.04 LTS auth_debug = yes auth_verbose = yes passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { driver = passwd } Please let me know what is wrong. Regards Tru Pheenix

2 2

[Dovecot] backup maildir mailbox bugs
by Anand Kumria 04 Nov '13

04 Nov '13

Hi, Using dovecot v2.2.5.5, I get the following: $ doveadm -v backup -R -u user(a)example.com maildir:/home/rsync/ example.com/user/Maildir/ [...] dsync(user(a)example.com): Panic: file dsync-mailbox-export.c: line 228 (export_save_change_get): assertion failed: (change->type == DSYNC_MAIL_CHANGE_TYPE_FLAG_CHANGE) dsync(user(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x59e6a) [0x7f91ad185e6a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f91ad185f2a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f91ad144b89] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_mailbox_export_init+0x8b8) [0x434028] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_sync_mailbox_open+0x233) [0x42ba83] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_slave_recv_mailbox+0x125) [0x42c615] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_run+0x369) [0x42a929] -> doveadm [user(a)example.comPrinting Quotes send:mailbox recv:mailbox]() [0x42881b] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox]() [0x411ad7] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox](doveadm_mail_try_run+0x260) [0x4127a0] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](main+0x3f0) [0x4116c0] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f91acd8e76d] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox]() [0x4118bd] Other lines emitted were Info lines indicating what message was being processed. Unfortunately this appears to stop the backup dead in it's tracks. Suggestions on how to proceed? I was (originally) doing this as an IMAP to IMAP copy, and when that failed I managed to get the raw Maildir. Now I appear stuck with that too. Regards, Anand -- “Don’t be sad because it’s over. Smile because it happened.” – Dr. Seuss

2 4

[Dovecot] v2.2.7 released
by Timo Sirainen 04 Nov '13

04 Nov '13

http://dovecot.org/releases/2.2/dovecot-2.2.7.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.7.tar.gz.sig * Some usage of passdb checkpassword could have been exploitable by local users. You may need to modify your setup to keep it working. See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security + auth: Added ability to truncate values logged by auth_verbose_passwords (see 10-logging.conf comment) + mdbox: Added "mdbox_deleted" storage, which can be used to access messages with refcount=0. For example: doveadm import mdbox_deleted:~/mdbox "" mailbox inbox subject oops + ssl-params: Added ssl_dh_parameters_length setting. - master process was doing a hostname.domain lookup for each created process, which may have caused a lot of unnecessary DNS lookups. - dsync: Syncing over 100 messages at once caused problems in some situations, causing messages to get new UIDs. - fts-solr: Different Solr hosts for different users didn't work.

4 4

[Dovecot] Shared mailbox help needed
by Alex Ferrara 04 Nov '13

04 Nov '13

Hi everyone, I am in the middle of a migration from Cyrus 2.4 to Dovecot 2.1.7, and I have everything mostly working. I set up Dovecot to authenticate against Active Directory (Samba4) using PAM and SSSD, and have also used the fantastic cyrus2dovecot perl script to do a test migration of all our mail, and that is now working flawlessly. I have the issue of shared IMAP accounts to deal with, and I am a little stuck. I see that Dovecot is very flexible, and I think I am getting stuck in this flexibility. I thought that if I explain what I am trying to achieve, someone might point me in the right direction. In the Cyrus regime, we have several imap accounts that are shared with a group of people. These groups are actual unix groups that actual unix users are a member of. If we want a person to access a mailbox, we add them to the group and then at next login, it pops up in Thunderbird automatically. SSSD does, from what I can tell, a decent job of binding to AD and mapping AD users to unix users, but since not all of the users have an NIS uid in AD, I decided to use a static mapping. This might have been the wrong decision, I am not sure. userdb { driver = static args = uid=900 gid=900 home=/mnt/mail/%u allow_all_users=yes } It probably isn't important at this stage, but the mail spool is stored on an NFS server and the indexes are stored locally. Thanks in advance, Alex Ferrara Director Receptive IT Solutions

1 0

Re: [Dovecot] Doveadm with a 2nd Instance
by Chris Lasater 03 Nov '13

03 Nov '13

While testing some more I found out something else. I have an alias set for doveadm so it was running with sudo and that ended up being part of the issue. If doveadm is run as a regular user then the problem goes away [user@server ~]$ doveadm -i Director log find Debug: /home/user/apps/logs/director/director_debug.log Info: /home/user/apps/logs/director/director_info.log Warning: /home/user/apps/logs/director/director.log Error: /home/user/apps/logs/director/director.log Fatal: /home/user/apps/logs/director/director.log [user@server ~]$ sudo doveadm -i Director log find Debug: /home/user/apps/logs/dovecot_debug.log Info: /home/user/apps/logs/dovecot_info.log Warning: /home/user/apps/logs/dovecot.log Error: /home/user/apps/logs/dovecot.log Fatal: /home/user/apps/logs/dovecot.log Also if I run "sudo doveadm stop" to stop the main instance, I now have the ability to use the -i Director using sudo. Unfortunately this makes it difficult to manage two instances. Does anyone have an idea of getting this to work with sudo? Chris

2 2

[Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 03 Nov '13

03 Nov '13

Hi, We have clients with various security & compliance requirements. Although not required, it would be ideal to have messages encrypted at rest. We already use SSL/TLS to secure the transmission of most email. However, it would be nice to have them encrypted sitting on our server. Is anyone doing this? I think that ideally, rather than full-disk encryption, we should use an encryption that encrypts the actual email messages as they sit on our file system. This way even if we ever had our server breached by an attacker, they wouldn't be able to do anything with the messages. However, this would also mean that if the attacker can't decrypt the files, than dovecot and postfix still would need to. This means that the encryption key would need to be available to the dovecot deamon. We'd either need to have it in a file that is restricted to access only by dovecot (less secure), or use an encryption passphrase for the certificate which would have to be typed in manually each time that dovecot starts or restarts (more secure, but also more work and possibility of disruption because the server can't restart gracefully without a human being having to be present [although I don't think we have issues with unexpected restarts anyway]). Is anyone doing anything like this with dovecot? Thanks!! - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ A.A.S. Information Technology . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

6 6

[Dovecot] Assertion error in Dovecot 2.2.6
by Mark Sapiro 03 Nov '13

03 Nov '13

Background. A while back I upgraded my phone to one currently using Android 4.1.2 and K9 mail 4.409. This phone/MUA combination seems at times to go crazy making IMAP connections. At first, I had mail_max_userip_connections = 30 (my largest imap account has 19 folders). The issue I had at that time was multiple errors like Oct 14 17:45:16 sbh16 dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=30): user=<xxx>, method=PLAIN, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS, session=<c63x5bzowQBi0uQR> I then set mail_max_userip_connections = 50 This greatly reduced but didn't completely eliminate these messages, but then I would see multiple Oct 31 16:13:40 sbh16 dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped and Oct 31 16:13:40 sbh16 dovecot: imap-login: Disconnected: Connection queue full (no auth attempts in 4 secs): user=<>, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS handshaking, session=<s26xmRHqVQBi0uQR> followed finally by Oct 31 16:13:40 sbh16 dovecot: imap-login: Panic: file client-common.c: line 190 (client_destroy): assertion failed: (!client->authenticating) Oct 31 16:13:40 sbh16 dovecot: auth: Warning: auth client 19669 disconnected with 1 pending requests: EOF Oct 31 16:13:40 sbh16 dovecot: imap-login: Fatal: master: service(imap-login): child 19669 killed with signal 6 (core not dumped - add -D parameter to service imap-login { executable } I then set default_process_limit = 200, and things seem to have settled down, but I thought the panic should be reported. Possibly this is relevant - the above only seem to occur when the phone is connecting via wifi and possibly only when the phone has just switched from the phone data network to wifi. Current doveconf -n # 2.2.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-8.1.14.el5 i686 CentOS release 5 (Final) auth_mechanisms = plain apop login auth_worker_max_count = 5 default_process_limit = 200 mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl dotlock namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot.passwd driver = passwd-file } passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/httpd/conf/ssl/combined.crt ssl_key = </etc/httpd/conf/ssl/www.grizz.org.key userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 } -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 1

[Dovecot] METADATA for v2.2.7
by Timo Sirainen 02 Nov '13

02 Nov '13

In case someone wants to try: http://hg.dovecot.org/dovecot-2.2/rev/0a08efeb3f40 The commit message lists the TODO. So for example if you want to enable it just for webmail (because quota limits aren’t there yet): mail_attribute_dict = file:%h/dovecot-attributes local 10.0.0.0/24 { imap_metadata = yes } Compared to the old metadata plugin, there are some improvements: - Uses lib-storage attributes internally, which means: - dsync replicates METADATA - it will be easy to add support for untagged METADATA notifications to clients when they change - SETMETADATA atomically either updates all or none of the changes Things that work in the METADATA code, but still require lib-dict changes to work properly: - Values with unlimited sizes - Values with binary data (NULs)

1 0

[Dovecot] DH parameter length too small?
by Jörg Lübbert 02 Nov '13

02 Nov '13

Hello, from my understanding, using 1024bit DH parameters results in a not sufficiently secure key exchange for DH(E). Therefore I think it would be advisable to have parameters of at least 2048bit . In fact, I would see a great benefit in chosing parameter length arbitrarily. I also do not see the benefit of parameter regeneration. What were the design goals here? Thanks, Jörg Lübbert

2 1

[Dovecot] Error: Syncing mailbox virtual failed: Virtual mailbox missing configuration file
by Mike Constabel 02 Nov '13

02 Nov '13

Hi, if I use doveadm search -u xx(a)xx.de savedbefore 15w or other search queries i got as first line: doveadm(xx(a)xx.de): Error: Syncing mailbox virtual failed: Virtual mailbox missing configuration file The virtual Mailbox has a config file: # cat /mailspool1/xx.de/xx/Maildir/virtual/Alle\ eigenen\ E-Mails/dovecot-virtual * all root@srv-mail:~# doveconf -n # 2.2.6 (81aedacbb01f): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_mechanisms = plain login dict { expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot/dovecot.log mail_attachment_dir = /mailspool1/attachments mail_attachment_min_size = 64 k mail_location = mdbox:/mailspool1/%d/%n/mdbox:ALT=/mailspool2/%d/%n/mdbox mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = mdbox:/mailspool1/%%d/%%n/mdbox:INDEXPVT=~/mdbox/shared/%%u prefix = shared/%%u/ separator = / type = shared } namespace { list = children location = mdbox:/mailspool1/public-folders/mdbox:INDEXPVT=~/mdbox/public/public-folders prefix = public/ separator = / type = public } namespace { location = virtual:~/Maildir/virtual prefix = virtual/ separator = / } namespace inbox { inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { special_use = \All } mailbox virtual/Flagged { special_use = \Flagged } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/mailspool1/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_create mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_new3 = Gesendete Elemente mailbox_alias_new4 = Gelöschte Elemente mailbox_alias_new5 = Junk-E-Mail mailbox_alias_old = Sent mailbox_alias_old2 = Sent mailbox_alias_old3 = Sent mailbox_alias_old4 = Trash mailbox_alias_old5 = Junk quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } pop3_client_workarounds = outlook-no-nuls protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0660 } } service lmtp { inet_listener lmtp { address = 192.168.1.98 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service managesieve { process_limit = 1024 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual sieve } protocol lda { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual sieve } protocol imap { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual imap_quota imap_acl }

2 1

[Dovecot] Pre imap-session scripting
by azurIt 02 Nov '13

02 Nov '13

Hi, is it possible to run a script right after the IMAP/POP3 session was started? I know about post-login scripting but this is probably not what i'm looking for. I need to run a script which will know PID of process running IMAP session (so it must be already started). Thank you. azur

2 1

[Dovecot] Broken files?
by LuKreme 02 Nov '13

02 Nov '13

Getting a lot of these error for two specific mailboxes. They repeat many times a day, usually within less than 5 minutes. mail dovecot: imap(kremels): Error: Broken file /home/kremels/Maildir/.zz.x-tech.2010/dovecot-uidlist line 2: Invalid extended fields: : $ cat .zz.x-tech.2010/dovecot-uidlist 3 V1263241007 N56581 G11fe2118db236952f984010021d1a38d OI tried deleting the files that generated the errors, but they were recreated and the errors returned. (I’m using dovecot2 and Maildir) -- Death was familiar with the concept of the eternal, ever-renewed hero, the champion with a thousand faces. He'd refrained from commenting.

3 4

Re: [Dovecot] Logging in to a virtual users Maildir
by Joseph Tam 02 Nov '13

02 Nov '13

Steve Downes <steve(a)kingswayelec.co.uk> writes: > When I open a local mutt I get the following:- > 1) could not connect to vmail-s (connection refused) (vmail-s is the > mailserver host) Full stop, anything past here and you're debugging noise. You've configured out SSL/TLS on dovecot ... > /etc/dovecot/dovecot.conf > # disable ssl for now > ssl = no ... but your Mutt configuration has ... > ~/.mutt.muttrc > set spoolfile=imaps://steve@vmail-s/ ... and your debug logs state ... > [2013-10-31 14:35:23] Reading imaps://steve@vmail-s/... > [2013-10-31 14:35:23] Looking up vmail-s... > [2013-10-31 14:35:23] Connecting to vmail-s... > [2013-10-31 14:35:23] Connection failed. errno: 111... > [2013-10-31 14:35:23] Could not connect to vmail-s (Connection > refused). > [2013-10-31 14:35:25] Connected to vmail-s:993 on fd=-1 You configured dovecot to accept only plain IMAP (on port 143), but your mail reader is configured to connect to an IMAP/SSL service (port 993). Maybe it will start working if you configure Mutt set spoolfile=imap://steve@vmail-s/ (Just guessing -- I don't use Mutt.) Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Shared namespace, separator, username and dots.
by Marcio Merlone 02 Nov '13

02 Nov '13

Hi folks, I run a legacy mailserver that i had replaced courier-imap for dovecot 1.2. Everything is fine except for shared namespace. Maildir structure has been created using dot '.' as folder separator. It happens that all our users are created as name.surname as default. So when I want to select a shared folder, MUA end up with the following IMAP command: select shared.jhon.doe.folder.subfolder Obviously I took ages to figure why it won't work since it takes 'doe' as a folder and not a username part. When sharing a folder from 'sales' user, for example, it works fine. What do you suggest to make shared folders work for all without rebuilding hundreds of maildirs to change folder separator from '.' to '/'? Thanks for any hint. # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-52-server x86_64 Ubuntu 10.04.4 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve ssl_listen: * disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_process_per_connection: no login_max_processes_count: 1024 max_mail_processes: 1024 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(managesieve): 10 first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:~/Maildir:INDEX=/var/cache/dovecot/%n fsync_disable: yes maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota acl imap_acl mail_plugins(imap): quota imap_quota acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: shared separator: . prefix: shared.%%u. location: maildir:%%h/Maildir:INDEX=%u/Maildir/shared/%%u list: children subscriptions: yes lda: postmaster_address: postmaster(a)a1.ind.br mail_plugins: quota sieve acl quota_full_tempfail: yes auth_socket_path: /var/run/dovecot/auth-master fsync_disable: no auth default: mechanisms: plain login master_user_separator: * passdb: driver: pam args: session=yes blocking=yes dovecot passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes userdb: driver: nss args: service=ldap blocking=yes socket: type: listen client: path: /var/spool/postfix/private/dovecot mode: 436 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 plugin: sieve: ~/.dovecot.sieve acl: vfile acl_shared_dict: proxy::acl dict: acl: mysql:/etc/dovecot/acl-dict-sql.conf -- *Marcio Merlone* TI - Administrador de redes *A1 Engenharia - Unidade Corporativa* Fone: +55 41 3616-3797 Cel: +55 41 9689-0036 http://www.a1.ind.br/ <http://www.a1.ind.br>

3 2

[Dovecot] doveadm can't import his own mdboxes
by Peer Heinlein 02 Nov '13

02 Nov '13

We're running Dovecot 2.1.17 on Debian: # 2.1.17 (9efbc0731929): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab078.27.debug i686 Debian 7.1 simfs and we're having this namespace configuration: mail_location = mdbox:/var/mail/%Ld/%Ln/mdbox namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = prefix = separator = . subscriptions = yes type = private } As you can see, our namespace seperator is "." and not "/": a LIST "" "*" * LIST (\HasChildren) "." INBOX.test * LIST (\HasNoChildren) "." INBOX.test.huhu * LIST (\HasNoChildren \Trash) "." Trash * LIST (\HasChildren) "." INBOX a OK List completed. The problem is, that doveadm isn't able to import his own mdbox-directory: 1) delete the whole mdbox folder # rm -rf mdbox 2) create the new mdbox folder and create some subfolders in it # doveadm mailbox create -u max.muster INBOX.test # doveadm mailbox create -u max.muster INBOX.test.huhu 3) put a mail into a subfolder 4) try to re-import the whole mdbox: it doesn't work # doveadm import -u max.muster mdbox:mdbox BACKUP all doveadm(max.muster): Error: Couldn't create mailbox BACKUP.INBOX/test/huhu: Character not allowed in mailbox name: '/' Looks like there's something wrong in the namespace or like doveadm is working with a hardcoded internal namespace... Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 2

[Dovecot] Configuring SPECIAL-USE Dovecot 2.0.9
by Keith Mountifield 01 Nov '13

01 Nov '13

Hi All, I'm trying to configure Dovecot 2.0.9 to support Outlook 2013. As I understand it, I need to configure XLIST. I have added imap_capability = +XLIST to 20-imap.conf When I try to query the IMAP folders I get an error "An IMAP command Failed". Looking at the logs I get XLIST Command not found. I can only assume that I'm missing something in the configuration. Any help would be greatly appreciated Thanks Keith

2 1

[Dovecot] init script as provided http://wiki2.dovecot.org/DovecotInit
by Jess Portnoy 01 Nov '13

01 Nov '13

Hello list, I would add: # dovecot Startup script for the dovecot server # # chkconfig: - # processname: dovecot # config: /path/to/config # pidfile: /path/to/pid So that it supports the chkconfig used by RHEL and clones too. Also, maybe it should be installed by the Makefile's install target? it could then also set: DAEMON=/path/to/dovecot/daemon instead of: DAEMON=/usr/local/sbin/dovecot Cause naturally, it will know the prefix chosen. May the source be with you, Jess Portnoy

2 1

[Dovecot] Logging in to a virtual users Maildir
by Steve Downes 01 Nov '13

01 Nov '13

Trying to set up a mailserver to run exim4, dovecot2, (clamav procmail or similar not yet installed) on a virtual machine & access it from various hosts mostly using Mutt. So far no attempt at encryption although there are some pem files from a previous attempt & some evidence from the mutt debug file they may be being used . So far I have attempted to set up dovecot to by accessed by MUAs only & tried to access it from Mutt on on the mailserver virtual machine & on another on locally networked machine (no networking problems). When I open a local mutt I get the following:- 1) could not connect to vmail-s (connection refused) (vmail-s is the mailserver host) 2) mutt then opens, with a blank message screen 3) from mutt I then put C (open mailbox ? for list) & ?. 4) I then get a file list for the mailbox including all dovecot files but no mailbox files except cur. new, & tmp 5) if enter on ../ I get (presumably) /home/vmail/users/steve/ showing Maildir as the 2nd line 6) select Maildir gives me my inbox but continuing the process does not give me acces to any other folders. The files in my mailbox are from my previous version of Dovecot (V1*) but I have previously tried to start anew set of mailboxes with similar results. I enclose below:- my Dovecot.conf file My muttrc file a .muttdebug0 file Dovecot log files show nothing but Dovecot stop/start lines. Any pointers please? Steve --------------------------------- /etc/dovecot/dovecot.conf # based on Dovecot.org/HowTo/SimpleVirtualInstall # Dovecot version 2 # ASD 131028 protocols = imap # separate dovecot logging log_path = /var/log/dovecot.log # info_log_path = /var/log/dovecot-info.log info_log_path = /var/log/dovecot.log mail_debug=yes # disable ssl for now ssl = no disable_plaintext_auth = no # Maildir boxes mail_location = maildir:~/home/vmail/%u/Maildir # if your using pop3, you'll need this # pop3_uidl_format = %g # authentication configuration auth_verbose=yes auth_debug=yes auth_mechanisms=plain auth_debug_passwords=yes passdb { driver = passwd-file args = /etc/dovecot/passwd } userdb { driver = static args = uid=vmail gid=vmail home=/home/vmail/%u/Maildir } -------------------------------------------- ~/.mutt.muttrc # muttrc file started 131029 set mbox_type="Maildir" set spoolfile=imaps://steve@vmail-s/ set folder="/home/vmail/users/steve" unset mark_old set postponed="/home/vmail/users/steve/drafts/" set postpone=ask-yes set imap_check_subscribed set abort_nosubject=yes set include=yes set editor="emacsclient %s" set alias_file="/home/steve/.mutt/mutt-aliases --------------------------------------------- .muttdebug0 [2013-10-31 14:35:23] Mutt/1.5.21 (2010-09-15) debugging at level 2 [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc'. [2013-10-31 14:35:23] Reading configuration file '/usr/lib/mutt/source-muttrc.d|'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/charset.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/colors.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/compressed-folders.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/gpg.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/smime.rc'. [2013-10-31 14:35:23] Reading configuration file '/home/steve/.mutt/muttrc'. [2013-10-31 14:35:23] Reading imaps://steve@vmail-s/... [2013-10-31 14:35:23] Looking up vmail-s... [2013-10-31 14:35:23] Connecting to vmail-s... [2013-10-31 14:35:23] Connection failed. errno: 111... [2013-10-31 14:35:23] Could not connect to vmail-s (Connection refused). [2013-10-31 14:35:25] Connected to vmail-s:993 on fd=-1 [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... [2013-10-31 14:35:55] Scanning /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] Scanning /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] ../mh.c:728: queueing 1382383788.2292_0.mail-s:2,Sa [2013-10-31 14:35:55] ../mh.c:728: queueing 1381593772.6226_1.mail-s:2,S [2013-10-31 14:35:55] ../mh.c:728: queueing 1382022143.2719_1.mail-s:2,S [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0/54 (0%) [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0/54 (0%) [2013-10-31 14:35:55] parse_parameters: `boundary="==Multipart_Boundary_xc75j85x"' [2013-10-31 14:35:55] parse_parameter: `boundary' = `==Multipart_Boundary_xc75j85x' [2013-10-31 14:35:55] parse_parameters: `charset="us-ascii"' [2013-10-31 14:35:55] ../mh.c:773 maildir_add_to_context(): Considering [2013-10-31 14:35:55] ../mh.c:782 Adding header structure. Flags: OR [2013-10-31 14:35:55] ../mh.c:773 maildir_add_to_context(): Considering [2013-10-31 14:35:55] Sorting mailbox... (I have cut most of the repeated lines for each email out of this file)

2 1

[Dovecot] double login lines
by Andreas Meyer 31 Oct '13

31 Oct '13

Hi! Who can tell me why I have double login lines for some accounts? Oct 31 12:35:36 imap-login: Info: Login: user=<anmeyer(a)anup.de>, method=CRAM-MD5, rip=84.179.59.177, lip=78.47.3.18, mpid=29905, TLS, TLSv1 with cipher RC4-MD5 (128/128 bits) Oct 31 12:35:36 imap-login: Info: Login: user=<anmeyer(a)anup.de>, method=CRAM-MD5, rip=84.179.59.177, lip=78.47.3.18, mpid=29906, TLS, TLSv1 with cipher RC4-MD5 (128/128 bits) I can not think of any reason why this happens at the same time. Greetings Andreas

2 1

[Dovecot] dovecot-ldap : can't find user in OU subtree
by me＠electronico.nc 31 Oct '13

31 Oct '13

Hi all, Well, I've compiled and installed dovecot 2.2.6 with following options: > ./configure --prefix=/usr/ --sysconfdir=/etc/ --with-mysql > --libexecdir=/usr/lib/ --localstatedir=/var > --with-moduledir=/usr/lib/dovecot/modules --disable-rpath > --disable-static --with-zlib --with-bzlib --with-solr --with-ldap > --with-gssapi --with-nss doveconf -n: > # 2.2.6: /etc/dovecot/dovecot.conf > # OS: Linux 3.8.0-32-generic x86_64 Ubuntu 12.04.3 LTS ext4 > auth_debug = yes > auth_mechanisms = plain login > auth_verbose = yes > first_valid_gid = 20001 > first_valid_uid = 20001 > log_timestamp = %Y-%m-%d %H:%M:%S > mail_debug = yes > mail_gid = 20001 > mail_home = /media/data/email/%n > mail_location = maildir:/media/data/email/%n/mail > mail_plugins = fts fts_solr acl zlib mail_log notify > mail_uid = 20001 > managesieve_notify_capability = mailto > managesieve_sieve_capability = comparator-i;octet > comparator-i;ascii-casemap fileinto reject envelope encoded-character > vacation subaddress comparator-i;ascii-numeric relational regex > imap4flags copy include variables body enotify environment mailbox > date spamtest spamtestplus virustest > namespace { > list = no > location = > maildir:/media/data/email/%%n/mail:INDEX=/media/data/email/%n/mail/shared/%%n > prefix = shared/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace inbox { > inbox = yes > location = maildir:/media/data/email/%n/mail > mailbox Sent { > auto = subscribe > } > mailbox Spam { > auto = subscribe > } > mailbox SpamFalse { > auto = subscribe > } > mailbox SpamToLearn { > auto = subscribe > } > prefix = > separator = / > type = private > } > passdb { > args = /etc/dovecot/dovecot-ldap-passdb.conf.ext > driver = ldap > } > plugin { > acl = vfile > mail_log_events = delete undelete expunge copy mailbox_delete > mailbox_rename save mailbox_create > mail_log_fields = uid box msgid size > sieve = /media/data/email/%n/dovecot.sieve > sieve_after = /media/data/email/sieve/global.sieve > sieve_dir = /media/data/email/%n/sieve > zlib_save = bz2 > zlib_save_level = 9 > } > protocols = imap pop3 sieve lmtp > service auth { > unix_listener /var/spool/postfix/private/auth { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-master { > group = vmail > mode = 0660 > user = vmail > } > unix_listener auth-userdb { > group = vmail > mode = 0640 > user = vmail > } > } > service imap-login { > inet_listener imap { > address = * > port = 143 > } > inet_listener imaps { > address = * > port = 993 > ssl = yes > } > process_limit = 256 > } > service lmtp { > inet_listener lmtp { > address = * > port = 24 > } > user = vmail > } > service managesieve-login { > inet_listener sieve { > address = * > port = 4190 > } > process_limit = 256 > vsz_limit = 64 M > } > service pop3-login { > inet_listener pop3 { > address = * > port = 110 > } > inet_listener pop3s { > address = * > port = 995 > ssl = yes > } > } > ssl = required > ssl_ca = </etc/postfix/tls/cacert.pem > ssl_cert = </etc/postfix/tls/radiodjiido-cert.pem > ssl_key = </etc/postfix/tls/radiodjiido-key.pem > ssl_verify_client_cert = yes > userdb { > args = /etc/dovecot/dovecot-ldap-userdb.conf.ext > driver = ldap > } > protocol imap { > imap_client_workarounds = delay-newmail > imap_max_line_length = 64 k > mail_max_userip_connections = 20 > mail_plugins = acl imap_acl mail_log notify zlib > } > protocol pop3 { > mail_plugins = zlib mail_log notify > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_uidl_format = %08Xu%08Xv > } > protocol sieve { > managesieve_logout_format = bytes ( in=%i : out=%o ) > } > protocol lda { > info_log_path = > log_path = > mail_plugins = sieve zlib mail_log notify > quota_full_tempfail = yes > syslog_facility = mail > } > protocol lmtp { > info_log_path = > log_path = > mail_plugins = sieve fts zlib mail_log notify > quota_full_tempfail = yes > } /etc/dovecot/dovecot-ldap-passdb.conf.ext: > hosts = localhost > auth_bind = yes > auth_bind_userdn = cn=%u,OU=users,dc=domain,dc=lan > ldap_version = 3 > base = ou=users,dc=domain,dc=lan > scope = subtree > pass_filter = (&(objectClass=person)(cn=%u)(mail=*)) /etc/dovecot/dovecot-ldap-userdb.conf.ext: > hosts = localhost > dn = cn=ldap,cn=Users,DC=domain,DC=lan > dnpass = My_secret_pass > ldap_version = 3 > base = OU=users,DC=domain,DC=lan > scope = subtree > user_attrs = uid=20001, gid=20001, home=/media/data/email/%n, > mail=/media/data/email/%n/mail > user_filter = (&(objectClass=person)(cn=%n)(mail=*)) > iterate_attrs = cn=user > iterate_filter = (objectClass=person) All seems to work as expected up-to-now, but : If I move a user from OU 'users' to a sub-OU 'administrative' on Active Directory : -> The user can't login anymore to Dovecot I have added the "scope = subtree" to the userdb and passdb files but it doesn't change anything. Here is the debug part when user test3 (located in ou=users, ou=administrative) tries to login: > Oct 30 18:49:12 serveur dovecot: auth: Debug: auth client connected > (pid=4292) > Oct 30 18:49:12 serveur dovecot: auth: Debug: client in: > AUTH#0111#011PLAIN#011service=imap#011secured#011session=L6uskfDpKwAKChTQ#011lip=10.10.20.1#011rip=10.10.20.208#011lport=993#011rport=54827 > Oct 30 18:49:12 serveur dovecot: auth: Debug: client passdb out: > CONT#0111#011 > Oct 30 18:49:12 serveur dovecot: auth: Debug: client in: CONT<hidden> > Oct 30 18:49:12 serveur dovecot: auth: > ldap(test3,10.10.20.208,<L6uskfDpKwAKChTQ>): invalid credentials > Oct 30 18:49:14 serveur dovecot: auth: Debug: client passdb out: > FAIL#0111#011user=test3 As soon as I move user 'test3' back to ou=users, it can login ... > Oct 30 18:53:57 serveur dovecot: auth: Debug: Loading modules from > directory: /usr/lib/dovecot/modules/auth > Oct 30 18:53:57 serveur dovecot: auth: Debug: Read auth token secret > from /var/run/dovecot/auth-token-secret.dat > Oct 30 18:53:57 serveur dovecot: auth: Debug: auth client connected > (pid=4303) > Oct 30 18:53:57 serveur dovecot: auth: Debug: client in: > AUTH#0111#011PLAIN#011service=imap#011secured#011session=h+ypovDpUAAKChTQ#011lip=10.10.20.1#011rip=10.10.20.208#011lport=993#011rport=54864 > Oct 30 18:53:57 serveur dovecot: auth: Debug: client passdb out: > CONT#0111#011 > Oct 30 18:53:57 serveur dovecot: auth: Debug: client in: CONT<hidden> > Oct 30 18:53:57 serveur dovecot: auth: Debug: client passdb out: > OK#0111#011user=test3 Thanks in advance for your time and lights. Nicolas

3 5

[Dovecot] IMAP Dovecot unknown namespace creating root folders
by marcus lively 31 Oct '13

31 Oct '13

Hi, I hope someone can point me in the right direction here. I am migrating a mailbox from a non cPanel server, and the mailboxes have folders which seem to be at the same level as the Inbox. The users access these mailboxes using IMAP. The new server configuration is Exim > Dovecot 1.2.17 > Maildir with the standard cPanel install settings. dovecot -n output below I have created the new mailbox within cPanel however when I try to create a 'top level' folder in Outlook I receive the error 'Cannot create the folder: Unknown namespace' (Note I also tried this with the windows mail client to ensure it was not client side) I know that I can get round this by setting the root folder path on the client to 'Inbox' and therefore the folders would be created as sub-folders of Inbox, and this would not be visible to the user, but I was hoping to migrate without touching the clients. Should dovecot report the default root folder path automatically, or create a default top level namespace for each user so this can be done, or could I have just gone wrong and missed something. Any advice on getting this working appreciated, thanks for any help Maspry # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.4 (Final) protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/dovecot/ssl/dovecot.crt ssl_key_file: /etc/dovecot/ssl/dovecot.key ssl_cipher_list: ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_processes_count: 2 login_max_processes_count: 50 login_max_connections: 500 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(pop3): 3 maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): acl quota imap_quota mail_plugins(imap): acl quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(pop3): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com auth default: mechanisms: plain login cache_size: 1024 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+% passdb: driver: checkpassword args: /usr/local/cpanel/bin/dovecot-auth userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 plugin: quota: maildir quota_rule: Trash:ignore acl: vfile

2 2

Re: [Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 30 Oct '13

30 Oct '13

Currently our dovecot servers are on our webhosting linux boxes. We are using the LAMP stack to host websites, and also doing email with postfix & dovecot on these systems. We provide this as a hosting setup for 100+ accounts/websites on a single server (a multi-tenant setup). Each customer has anywhere between 1-100 email accounts which Dovecot services. If a customer has vulnerable PHP code on a website, some of these will allow a remote file upload. I have seen cases where they upload a PHP script that is a sort of web-based console/shell to the server (file-system, etc.). It provides several tools which all run through the uploaded PHP script to try to brute force and do other attacks. I've seen attempts at a root exploit. We've never had a root exploit and any such case of a customer's site being hacked has been easily contained by simple filesystem permissions being correct (and the fact that we have apache setup to run all scripts as the user who is the owner of the script files, which confines the script to that users' permissions). Still nobody loves the idea of bad guys trying to hack on your box. So.... given that type of scenario, if filesystem permissions weren't correct, or some new exploit surfaced that allowed someone bypass or elevate to root, then they could theoretically have access to the entire fileystem including where emails are stored. I hope to never have this sort of thing happen. We patch our systems regularly and have other security measures we follow to prevent this. We also are managing most of the PHP scripts customers use ourselves now and are updating those for the CMS' and other systems proactively. However, it would be nice to know that even if we were breached, the emails on the server were encrypted and would be completely useless to an attacker. This type of encryption is ideal and some regulations prefer (although don't require) it. - Doug Mortensen Network Consultant Impala Networks P: 505.327.7300 -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Michael Orlitzky Sent: Monday, October 28, 2013 11:52 AM To: dovecot Subject: Re: [Dovecot] Encryption solution for messages at rest On 10/28/2013 12:02 PM, Douglas Mortensen wrote: > Hi, > > We have clients with various security & compliance requirements. > Although not required, it would be ideal to have messages encrypted at > rest. You can rule out a lot of the crazier options by answering the questions, (a) What attack scenario do you have in mind? (b) How will encryption help?

11 15

[Dovecot] Right values for Antispam plugin
by Michael Neurohr 30 Oct '13

30 Oct '13

Hi! I'm currently configuring the Dovecot Antispam plugin for the use with Dspam. In general it works, but I'm not sure about one special config parameter: antispam_dspam_args At the moment I set it to: antispam_dspam_args = --source=error;--signature=%%s;--user;%u Is that the appropriate value for retraining? I'm not sure if "%%s" is correct to get the signature value. I was not able to find any documentation that describes that value. So I just want to know if my plugin config is correct for retraining. plugin { antispam_backend = dspam antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items;Deleted Messages antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --source=error;--signature=%%s;--user;%u } Thanks, Michael

1 0

Re: [Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 30 Oct '13

30 Oct '13

So I suppose you're not a fan of the email hosting systems on the planet that bundle many services onto 1 box. Thanks for the feedback. - Doug Mortensen Network Consultant Impala Networks P: 505.327.7300 -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Alan Brown Sent: Tuesday, October 29, 2013 10:05 AM To: dovecot Subject: [Dovecot] Encryption solution for messages at rest > Date: Tue, 29 Oct 2013 08:54:04 +0100 > From: Robert Schetterer <rs(a)sys4.de> > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Encryption solution for messages at rest > Message-ID: <526F699C.9080402(a)sys4.de> > Content-Type: text/plain; charset=ISO-8859-1 > > > you shouldnt host mail/imap services on the same servers with massive > http hosting, You shouldn't host anything else on a webserver FULLSTOP. Webservers are best treated as "disposable" and should be heavily sandboxed. Any resources they can use should be vetted and ideally set as "read only" Inbound external access should be firewalled down to the webserver ports and OUTBOUND traffic should be firewalled too (If it has no business initiating external connections then block all SYNs), in order to stop it becoming a DDoS zombie. It's foolish (at best) to have mail servers running on a webserver, because if it's compromised it can immediately be used as a spam engine without much further effort. At least if it has to hand mail off to another mailserver you have a chance to run outbound filtering on the emitted mail without worrying about that being compromised too.

1 0

[Dovecot] separate mail_location for system and normal users
by Andrzej A. Filip 30 Oct '13

30 Oct '13

How to configure dovecot to use different default mail_location for system (uid<1_000) and normal users (uid>=1_000)? I want to to use by default * classic mailbox in standard location for system users * maildir in $HOME subdirectory for normal users

2 3

[Dovecot] Disable unsecure POP3 at all (Dovecot 2.1)
by Андрей Кумыков 30 Oct '13

30 Oct '13

Hi to all. Is it possible to disable unsecure POP3 protocol at all in Dovecot 2.1? There was "protocols" option in 1.x version, and there was separate pop3 and pop3s modules. There is no "pop3s" in configuration files in 2.1.

3 2

[Dovecot] Problem with dovecot-lda
by Wolfgang Ganzert 29 Oct '13

29 Oct '13

Hello Ladies and Gentlemen, first of all I have to say that dovecot is really impressive. I seems to be a very goot IMAP server and has in general a good documentation. I'm a beginner regarding the administration so please excuse if my questions sound silly but I want to learn to administrate these sophisticated things. Now here's my configuration: Linux openSuSE 12.1 Postfix 2.8.8 Dovecot 2.0.16 Boundary condition: Postfix as smtp (Postfix is configured as relay server; mail is sent to smtp.web.de if mail is not locally distributed) Dovecot as IMAP server in my private network (192.168....) Situation: I want to store outgoing mail which is send by postfix also in a "SENT" folder in Dovecot. The SENT folder is available and created through the plugin "autocreate". The main.cf file from postfix contains the following mailbox command: mailbox_command = /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" -m SENT If I send a simple mail from the shell with the following command echo "Hello me" | mail -s "Dovecot test 50, shell nach SENT" $USER the mail is send to my mailbox and stored in the folder "SENT" as unread. Problem: 1. I would expect to have to mails coming in; one in my "SENT" folder because this is copy of the mail and another one which is the incoming folder because the mail was sent to me. But, there is no mail in the incoming folder. 2. If I use a mail client like kmail2 the same thing happens. The mail is distributed to the SENT folder but there's no copy in the incoming folder. 3. If I send a mail to my adress at @web.de with the postfix configuration from above I do not receive the mail at web.de. 4. If I send a mail to my adress at @web.de with a postfix simplified mailbox command NOT containing the mailbox with "-m", then mail is send to web.de and there I receive it in the incoming box. This is the simplified command: mailbox_command = /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" Summary: All examples from above show that I do not get a COPY of the outgoing mail in my "SENT" folder but it's the REAL mail. Can You please give me some advice what to do? Thank You! Wolfgang P.S.: In /var/log/mail and /var/log/dovecot.log I do not get any errors.

2 1

[Dovecot] Building the Antispam plugin fails
by Michael Neurohr 29 Oct '13

29 Oct '13

Hi! I'm running Dovecot 2.2.5 on a CentOS 6.4 server from the ATRPMs repository. Unfortunately this repo does not provide a packaged version of the Antispam Plugin. So I followed the steps outlined in the Dovecot Wiki [1]. But when running the command ./configure, I get stuck with the following error: checking for dovecot-config in "/usr/local/lib/dovecot"... not found configure: configure: Use --with-dovecot=DIR to provide the path to the dovecot-config file. configure: error: dovecot-config not found So I downloaded the dovecot-devel package and run the configure command again with the following command: ./configure --with-dovecot=/usr/include/dovecot but with the same result. I made sure the the directory "/usr/include/dovecot" does contain the Dovecot header files. What can I do next? Do I really also have to install Dovecot from the sources only to get the Antispam Plugin working? Thanks, Michael [1] http://wiki2.dovecot.org/Plugins/Antispam

2 2

[Dovecot] Encryption solution for messages at rest
by Alan Brown 29 Oct '13

29 Oct '13

> Date: Tue, 29 Oct 2013 08:54:04 +0100 > From: Robert Schetterer <rs(a)sys4.de> > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Encryption solution for messages at rest > Message-ID: <526F699C.9080402(a)sys4.de> > Content-Type: text/plain; charset=ISO-8859-1 > > > you shouldnt host mail/imap services on the same servers with massive > http hosting, You shouldn't host anything else on a webserver FULLSTOP. Webservers are best treated as "disposable" and should be heavily sandboxed. Any resources they can use should be vetted and ideally set as "read only" Inbound external access should be firewalled down to the webserver ports and OUTBOUND traffic should be firewalled too (If it has no business initiating external connections then block all SYNs), in order to stop it becoming a DDoS zombie. It's foolish (at best) to have mail servers running on a webserver, because if it's compromised it can immediately be used as a spam engine without much further effort. At least if it has to hand mail off to another mailserver you have a chance to run outbound filtering on the emitted mail without worrying about that being compromised too.

1 0

[Dovecot] recipient_delimiter deux
by LuKreme 29 Oct '13

29 Oct '13

OK, I've been banging my head on why my procmail setup for virtual users is no longer working (difficult to test, since enabling it breaks live user's mail). There are only a few virtual users who have any sort of filters in place anyway (the heavy procmail users are local, not virtual), and they are fairly simple, so I think I can recreate them with sieve. I think I have everything I need for sieve to work, but now what? The first thing I want to do is have sieve process recipient_delimiter into a separate mailbox (creating it, if needed). Googling just for example sieve scripts comes up empty (well, directing to the dovecot wiki which at least on the links that come up, does not have sample scripts). so, foo+bar(a)example.com will go into foo's mailstore in the folder .bar/new/ On 27 Sep 2013, at 00:24 , Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> wrote: > Dovecot LDA uses the "-m" option and only lda_mailbox_autocreate and lda_mailbox_autosubscribe, no need for recipient_delimiter to override the default mailbox. Which I still don't understand. recipient_delimiter = + is the default, so I shouldn't need to set it in my confs, I just need to setup a sieve recipe (is that what it is called? script?) that will process these messages, right? What would that look like? I have to setup the SQL users so that LMTP or LDA is used for deliver, but I want that to apply only to the sql users. Something like this, maybe? userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u sieve=/var/sieve/%u.sieve protocol_lda=$mailplugins sieve driver = sql } I'm sure that protoco_lda isn't the right syntax though. If I set sieve=/var/sieve/%u.sieve as above would users still be able to use sieve-manage to manage their own sieve files? And what MUAs support this? If I left that out, do I put ~/.dovecot.sieve in with the other mailboxes and {cur,new,tmp} and the index files, or will there be issues? If I put a dovecot.sieve file there will it just be seen, processed, and work? (SQL user's $HOME is their maildir) $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } -- 'He's mad, isn't he?' 'No, mad's when you froth at the mouth,' said Gaspode. ' He's insane. That's when you froth at the brain.'

2 4

[Dovecot] pigeonhole sources no more available
by me＠electronico.nc 29 Oct '13

29 Oct '13

Hi all, Please excuse me for this message but I can't find the pigeonhole sources available anymore. This page : http://pigeonhole.dovecot.org/download.html Points to (for latest sources) : http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz And it seems that : www.rename-it.nl is now : http://www.medicalbits.nl So we get 404 error ... Could someone point us the to right URL and, maybe, update pigeonhole.dovecot.org ? Thanks in advance for your time. Nicolas

5 4

[Dovecot] When imapc can't connect to remote IMAP prevents user login (and blocks LDA)
by Marcin Mirosław 28 Oct '13

28 Oct '13

Hi! I'm using dovecot 2.1.12-r1. When remote imap server rejects connections then I can't login into account and MTA can't deliver emails to maildir also. I'm attaching snippets of logs: 2012-12-15T18:05:43.072594+01:00 meteor dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=2001:470:1f0b:1ab3:50af:bef4:6918:78ad, lip=2001:470:1f15:1b61::2, mpid=32533, TLS, session=<T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit> 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:05:43] 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: Invalid user settings. Refer to server log for more information. And snippet when LDA tries to deliver email: 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:00:54] 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Fatal: Invalid user settings. Refer to server log for more information. I'd like to ask is this behavior correct? Thanks, Marcin doveconf -n: # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 3.6.8-hardened x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy incl ude variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = dict:User quota::proxy::quota quota_exceeded_message = Quota exceeded / Skrzynka odbiorcy jest przepelniona, wiadomosc nie zostala dostarczona sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 1M stats_refresh = 30 s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib }

2 5

[Dovecot] Dovecot replication - I'm stuck
by IT geek 31 28 Oct '13

28 Oct '13

Hi, I've been following the wiki document at http://wiki2.dovecot.org/Replication, but I've become stuck. I'm running version 2.1.3 on NetBSD 5.2 (v2.2+ isn't available as a package yet, and compiling my own is well outside my wheelhouse). I have a couple of questions: The wiki page keeps referring to "vmail". Is this a just system user I need to create? Presumably on both Dovecot boxes? If I don't use virtual users, do I need this? Here is my dovecot -n: # 2.1.3: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u listen = 192.168.1.1 login_greeting = Go on then, let's have it... mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = remote:vmail@server2.mydomain.com replication_full_sync_interval = 1 hours } protocols = imap service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/mail.mydomain.com.crt ssl_key = </etc/openssl/private/mail.mydomain.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)mydomain.com } Any help would be greatly appreciated, as I'd really love to get this working. Thanks, -Mark

3 4

Re: [Dovecot] Dbox group file permissions
by Chris Lasater 28 Oct '13

28 Oct '13

Just in case someone else has the same problem, I had to change the following two variables mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n to mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:~/ "When mail_location begins with%h or~/, its permissions are copied from the first existing parent directory if it has setgid-bit set. This isn't done when the path contains any other %variables."

1 0

[Dovecot] Blocking certain hostnames/clients
by Charles Marcus 28 Oct '13

28 Oct '13

Hello, As a result of learning of the new 'Intro' App introduced by LinkedIn, and discussing how to block SMTP access to my postfix server from these clients, I'm now interested in doing the same for dovecot. Bottom line desire is to avoid scraping/hijacking email stored on my dovecot server by any client other than a users client. This includes Intro (so, LinkedIn), Blackberry, GMail, Outlook, etc. The boss has expressed the desire to NOT block all email from them, just disallow any of their clients from AUTH'ing (either SMTP or IMAP/POP). I'd be interested if anyone has any kind of database of hostnames/IP blocks of the freemailers out there that support adding 3rd party accounts, especially ones supporting IMAP. Anyway, article raising the concern found here: http://www.bishopfox.com/blog/2013/10/linkedin-intro/ "LinkedIn released a new product today called Intro. They call it ?doing the impossible?, but some might call it ?hijacking email?. Why do we say this? Consider the following: Intro reconfigures your iOS device (e.g. iPhone, iPad) so that all of your emails go through LinkedIn?s servers. You read that right. Once you install the Intro app, all of your emails, both sent and received, are transmitted via LinkedIn?s servers. LinkedIn is forcing all your IMAP and SMTP data through their own servers and then analyzing and scraping your emails for data pertaining to?whatever they feel like." -- Best regards, */Charles/*

3 2

[Dovecot] Which MTA for a personal-use dovecot instance?
by Dan Langille 27 Oct '13

27 Oct '13

I'm planning to deploy a personal dovecot IMAP server (i.e. I am the only user) in a FreeBSD jail. At present, I have IMAP deployed on the same host as one of my mail servers, which is running Postfix. I do like Postfix, but it seems to be a bit overkill for this particular situation. All my incoming MX are provided by Google. They handle the incoming mail and forward to my private MX, and from there the mail for me goes into my ~/Maildir. With the move to IMAP in a jail, I need to get the mail from my private MX into that jail. All mail being sent to that jail will be destined for my ~/Maildir, with some massaging via procmail. Given that I've just started using mail/nullmailer, I was wondering if there was something simple that I could use. I was planning to use postfix, require TLS, lock things down tightly. But I'm open to suggestions for something simple. -- Dan Langille - http://langille.org/

2 2

[Dovecot] fts-solr indexer-worker connects to wrong solr host dovecot-2.2.4
by Richard Platel 26 Oct '13

26 Oct '13

Hello. We're setting up fts solr and want to have the solr server host be set per-user via UserDB. It looks like if a user connects and fts indexes mail, and then another user connects and indexes mail, indexer-worker is connecting to the first user's fts host: User1, hammer(a)rp-auth-test.com connects, does a SEARCH for the first time, indexer-worker gets UserDB settings and correctly indexes mail on ftsvs01: [...] auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): lookup shared/userdb/hammer(a)rp-auth-test.com auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"talk15_590ec6d100042","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs01:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 1 hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: auth input: hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: Added userdb setting: plugin/_session=talk15_590ec6d100042 indexer-worker: Debug: Added userdb setting: plugin/fts=solr indexer-worker: Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs01:8080/solr/ indexer-worker: Debug: Added userdb setting: mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/ha mmer(a)rp-auth-test.com/ indexer-worker: Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker: Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker: Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker: Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(hammer(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions =yes location=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, index=/mail/index01/215/ 573/hammer(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, alt= indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(hammer(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294685 vs 1380294612 ): /mail/index01/215/573/hammer(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(hammer(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] User1 index finishes and imap searches against ftsvs01 [...] imap(hammer(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs01:8080/solr/select?fl=uid,score&rows=2&sort=uid+asc&q=(hdr:%22…] Submitted [...] User2 grant(a)rp-auth-test.com connects and does a SEARCH, index worker gets gets UserDB settings, including fts host ftsvs02, but connects to ftsvs01 (also note index-worker initially shows wrong user in loglines) [...] auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): lookup shared/userdb/grant(a)rp-auth-test.com auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"cow80_609fed7600001","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs02:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 2 grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: auth input: grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/_session=cow80_609fed7600001 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts=solr indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs02:8080/solr/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(grant(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(grant(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(grant(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, index=/mail/index01/812/023/grant(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, alt= indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] indexer-worker indexes User2's mail on wrong fts host: [...] indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Sent header indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload [...] indexer-worker finishes and imap searches against correct fts host ftsvs02 [...] imap(grant(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs02:8080/solr/select?fl=uid,score&rows=194&sort=uid+asc&q=(hdr:%…] Submitted [...]

2 3

[Dovecot] Dovecot proxy hooks
by dac＠getodata.ro 26 Oct '13

26 Oct '13

I am interested in the possibility of using Dovecot IMAP/POP proxying capabilities to analyze emails that are passing through and possibly modify content on the fly. This subject has been discussed here [1] before. I have tried the mail-filter plugin [2], but the hooks it uses are only called in a non-proxy setup. Is there a practical way of doing this, or plans to add such a feature? Links: [1]: http://dovecot.org/list/dovecot/2006-February/011704.html [2]: http://www.dovecot.org/patches/2.2/mail-filter.tar.gz

2 1

[Dovecot] Plugin issue with update from 2.0.19 to 2.1.17
by Reinaldo Matukuma 26 Oct '13

26 Oct '13

Hello. Probably only Timo can help-me with this. I have a self-made plugin based on the zlib plugin that i use to cryptograph the messages at inbox. As a side-effect of the cryptography, my plugin changes the size of the message, but until 2.0.19 this works well with dovecot index and the W/S flags. But now, i'm going to upgrade to 2.1.17 and now i have these messages on log at my test ambiance: Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Cached message size smaller than expected (367 < 529) Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Maildir filename has wrong S value, renamed the file from /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=367,W=378:2,S to /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=529:2,S Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Corrupted index cache file /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 6 I understood with these messages that the dovecot is arguing to get the real size of the file now, overriding the return of size from my crypto plugin. But i don't understood if this is a consequence from the changes to correct the index issue (the dovecot.index.cache issue). So... I want know if the correct way to fix this would be change my plugin to return the real size of the file (that will be larger than the effective message that the plugin returne after the de-cryptography) or if i need use some new function to the plugin replace the expected size based on the real size of the message, not of the file. Thanks Reinaldo

3 4

[Dovecot] unusual dsync lines
by Anand Kumria 26 Oct '13

26 Oct '13

Hi, Another day, another dysnc attempt. Using Dovecot v2.2.5.4; I see: # doveadm -v -o imapc_user=user(a)example.com -o imapc_password=password -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u user(a)example.com imapc: dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8343, msgid=<4F387A25.5010900(a)example.com>, size=2954969 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8344, msgid=<5237B0BF.7030402(a)example.com>, size=3371710 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8345, msgid=<5237B588.6040009(a)example.com>, size=3266 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8346, msgid=<5237B6B4.2030203(a)example.com>, size=4201 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8347, msgid=<5237B888.7030807(a)example.com>, size=3371445 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8348, msgid=<5237C224.9010608(a)example.com>, size=3371745 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8349, msgid=<5237C350.5080608(a)example.com>, size=3371700 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8350, msgid=<5237C5EE.5030408(a)example.com>, size=3371619 dsync(user(a)example.com): Info: expunge: box=Drafts, uid=8209, msgid=< 4F387A25.5010900(a)example.com>, size=2954969 The interesting lines being uid=8209 and uid=8343; why would dsync both copy and then expunge the same message from the same mailbox? Regards, Anand

2 3

[Dovecot] Strange output from LIST command
by azurIt 26 Oct '13

26 Oct '13

Hi, i'm using Dovecot 2.1.7 (Debian Wheezy) and output from LIST command looks strange: C: 4 LIST () "" (INBOX INBOX.Karantena INBOX.Spam) RETURN (STATUS (UNSEEN)) S: * LIST () "." "INBOX" S: * LIST () "." "INBOX.Karantena" S: * STATUS "INBOX.Karantena" (UNSEEN 0) S: * LIST () "." "INBOX.Spam" S: * STATUS "INBOX.Spam" (UNSEEN 0) S: 4 OK List completed. The UNSEEN information for INBOX is completely missing. It is correct behavior? If not, is this a known bug in 2.1.7? Thank you. azur

9 21

[Dovecot] Login into other user's account // master user for non-master users // chroot to users.<user>
by Steffen Kaiser 26 Oct '13

26 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently some of our organizational roles uses shared secrets (aka the password) to access the mail account of an organizational role, say "sales" for example. For one, I don't like shared secrets, for second, there had been some changes to shared mailboxes, I can only say "user sales has deleted the message at then and then". Therefore I would like to access the mailboxes of organizational roles with the accounts of the humans performing the role currently. Using sharing and ACLs it is possible to map the mailboxes of "sales" to "users.sales" namespace for specific other users, actually the human ones, say userA and userB for example. However, userB does not like managing identities in its MUA and refuses to acknowledge the messages in users.sales for various reasons. One reason was that userB wants to visibly separate strictly both mail accounts, the private messages in "userB" and the role's ones in "sales". Now, I came into thinking that it would be good in such case, if userB could authentificate as, say "sales*userB" - much like a master user - and ends in "sales"'s home, but with access permissions of "userB", well, like a chroot. Would it be an interesting feature to add to Dovecot's core? If I simulate "sales*userB" with password of userB and let the userdb return the home of sales, userB would gain "owner" privilegues of sales implicitly. So there seems to exist no workaround. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUmDx3l3r2wJMiz2NAQLgVwgAw/RgAll9QPEwEPAY4hNHrTcieyZoCMUc iTGBDYcfaELnlLZJupbM4fRPyVYMe4uRmuy2pBKXwDplCriW9FIETQ36Jx6oppZn Ojf1+ZLjBUwr0OBpGMXyDd0XpNWgaEOiEzvvpOykO+pJJCKEJR7uR0usQ5cV6JRt z7qiY3t7n7H0j12Oas7w+IsRrTgMe9FsJ4D37SwxeZCpM12y17E2T2mX10ycvnTM 27/Gai8iyp/4dlO0NqBZ+qU/txqs2h+y5SARngj4Ru9YkmwutC9b8/4kBObTzzdx w1ahO3sYPTH0KmQ0Voc63H6T6U6CkBmYr9kqplkTdEiwtdg9AJSSfQ== =1arj -----END PGP SIGNATURE-----

5 7

[Dovecot] LMTP, TLS/SSL, authentication, proxy
by Jogi Hofmüller 26 Oct '13

26 Oct '13

Folks, Several questions packed into one email ;) Can dovecot use TLS/SSL on LTMP inet socket? Can I configure dovecot to only let an authenticated user deliver mail via LMTP? Can I tell dovecot to use a user/password for proxying LMTP connections? All this is related to my quest to move from cyrus to dovecot transparently to our users. And if any of the above questions can be answered with yes, I would appreciate the odd hint on howto configure that :) Thanks in advance! -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] Problems with userdb lookup
by Mario Arnold 26 Oct '13

26 Oct '13

Hello, since few days there are problems with the userdb lookup. The problem occur if the recipient user is unknown (here test(a)xtlv.cn) doveconf -n # 2.2.6 (f89e645cba90): /etc/dovecot/dovecot.conf # OS: Linux 3.2.45.stk32 i686 Debian jessie/sid ext3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = digest-md5 cram-md5 auth_username_translation = %Lu auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dov_debug.log hostname = kyoto.vtlx.cn login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_gid = vmail mail_home = /var/mail/vhosts/%Ld/%Ln mail_location = sdbox:/var/mail/vhosts/%Ld/%Ln:DIRNAME=DbOx-mAiLs mail_plugins = " quota mail_log notify expire zlib" mail_privileged_group = vmail mail_uid = vmail mailbox_list_index = yes ... passdb { args = scheme=PLAIN username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } postmaster_address = postmaster(a)xtlv.cn protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 84.38.75.44 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 84.38.75.44 port = 4190 } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = 84.38.75.44 port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status { group = postfix mode = 0660 user = postfix } } ... userdb { args = username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } ... > gdb /usr/lib/dovecot/auth core_dbg GNU gdb (GDB) 7.6 (Debian 7.6-5) Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/auth...Reading symbols from /usr/lib/debug/usr/lib/dovecot/auth...done. done. [New LWP 26466] warning: Could not load shared library symbols for linux-gate.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/auth'. Program terminated with signal 6, Aborted. #0 0xb779d424 in __kernel_vsyscall () (gdb) bt full #0 0xb779d424 in __kernel_vsyscall () No symbol table info available. #1 0xb74ec80f in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = <optimized out> resultvar = <optimized out> pid = -1218015232 selftid = 26466 #2 0xb74efcc3 in __GI_abort () at abort.c:90 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0xb7794ff4, sa_sigaction = 0xb7794ff4}, sa_mask = {__val = {0, 3077744103, 3216056844, 3078348800, 3078207408, 1, 3078184664, 3078275225, 3078207848, 3077070192, 1, 1, 0, 0, 159279448, 3077360220, 3077743598, 3078180852, 3075085960, 3077367868, 159354316, 3077744683, 3078186032, 3075227880, 3216056948, 3077897967, 0, 3078180852, 0, 0, 159354316, 3078300704}}, sa_flags = 1, sa_restorer = 0xb74efb80 <__GI_abort>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0xb772abf9 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:192 backtrace = 0x97e6978 "/usr/lib/dovecot/libdovecot.so.0(+0x67bcf) [0xb772abcf] -> /usr/lib/dovecot/libdovecot.so.0(+0x67c51) [0xb772ac51] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb76de1d6] -> /usr/lib/dovecot/libdo"... #4 0xb772ac51 in i_internal_fatal_handler (ctx=0xbfb122e4, format=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfb12304 "") at failures.c:653 status = 0 #5 0xb76de1d6 in i_panic (format=format@entry=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:264 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = 0xbfb12304 "" #6 0xb7751886 in p_strndup (pool=0xb7796544 <static_unsafe_data_stack_pool>, str=str@entry=0x0, max_chars=max_chars@entry=4294967295) at strfuncs.c:74 mem = <optimized out> len = <optimized out> __FUNCTION__ = "p_strndup" #7 0xb7751d7f in t_strndup (str=0x0, max_chars=4294967295) at strfuncs.c:236 No locals. #8 0x08057003 in auth_request_append_password (str=str@entry=0x97e68a8, request=0x97f8da8, request=0x97f8da8) at auth-request.c:1799 p = <optimized out> log_type = <optimized out> max_len = 4294967295 #9 0x08058cf2 in auth_request_log_unknown_user (request=request@entry=0x97f8da8, subsystem=subsystem@entry=0x807a0cc "passwd-file") at auth-request.c:1846 str = 0x97e68a8 #10 0x0806268c in db_passwd_file_lookup (db=0x97f4430, request=request@entry=0x97f8da8, username_format=0x97ef148 "%Lu") at db-passwd-file.c:466 pw = 0x97f4470 pu = <optimized out> table = <optimized out> username = 0x97e6598 dest = <optimized out> #11 0x0806d8bf in passwd_file_lookup (auth_request=0x97f8da8, callback=0x80599b0 <auth_request_userdb_callback>) at userdb-passwd-file.c:45 _module = <optimized out> module = <optimized out> pu = <optimized out> table = <optimized out> str = <optimized out> key = <optimized out> value = <optimized out> p = <optimized out> #12 0x08059c94 in auth_request_lookup_user (request=0x97f8da8, callback=callback@entry=0x8054ce0 <user_callback>) at auth-request.c:1072 userdb = 0x97ef150 cache_key = <optimized out> #13 0x08055612 in master_input_user (args=0x97f8751 "7\ttest(a)xtlv.cn\tservice=quota-status", conn=0x97f8b48) at auth-master-connection.c:314 auth_request = 0x97f8da8 error = 0xbfb125ac "\244\325s\267H\213\177\t" ret = <optimized out> -- 中華人民共和國

2 1

[Dovecot] Empty Mails from MAILER-DAEMON with Dovecot-Antispam and DSPAM
by Anna Christina Naß 26 Oct '13

26 Oct '13

Hallo, I've installed the dovecot-Antispam extension to my dovecot IMAP installation in conjunction with DSPAM. But when moving Mails from e.g. INBOX to Spam or vice versa, empty mails from MAILER-DAEMON appear after the original mail has been moved. This happens using Thunderbird 17esr, K-9 Mail on Android and Apple Mail (Mountain Lion). (Perhaps also when using a Webmail IMAP client) The source from one of these empty mails looks like this: ----snip---- Return-Path: <MAILER-DAEMON> X-Original-To: acn Delivered-To: acn(a)mydomain.name Received: from localhost (localhost.localdomain [127.0.0.1]) by <my host name> (Postfix) with SMTP id CB81B140011 for <acn>; Thu, 24 Oct 2013 09:23:33 +0200 (CEST) X-DSPAM-Reclassified: Spam Message-Id: <20131024072333.CB81B140011@<my host name>> Date: Thu, 24 Oct 2013 09:23:33 +0200 (CEST) From: MAILER-DAEMON ----/snip---- Do you have any idea why these mails appear and how I can prevent it? I'm using these Debian packages: ii dovecot-antispam 2.0+20120225-3 ii dovecot-core 1:2.1.7-7 ii dovecot-imapd 1:2.1.7-7 ii dovecot-ldap 1:2.1.7-7 ii dovecot-lmtpd 1:2.1.7-7 ii dovecot-managesieved 1:2.1.7-7 ii dovecot-sieve 1:2.1.7-7 ii dspam 3.10.1+dfsg-11 ii postfix 2.9.6-2 ii postfix-ldap 2.9.6-2 DSPAM is integrated in Postfix via master.cf: ----snip---- smtp inet n - - - - smtpd -o content_filter=dspam dspam unix - n n - - pipe flags=u user=vmail:vmail argv=/usr/bin/dspamc --deliver=innocent,spam --user $user Mails go to dovecot via this 'virtual'-transport: dovecot unix - n n - - pipe flags=ODRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -e -f ${sender} -d ${user} ----/snip---- The rest of my configuration follows: dovecot -n: ----snip---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 ext4 auth_cache_size = 1 M auth_mechanisms = plain login auth_worker_max_count = 5 listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%u/Maildir mail_privileged_group = mail mailbox_idle_check_interval = 15 secs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify passdb { args = /etc/dovecot/ldap-passdb.conf.ext driver = ldap } plugin { antispam_allow_append_to_spam = no antispam_backend = dspam antispam_dspam_args = --user;%Lu;--deliver=spam,innocent;--source=error antispam_dspam_binary = /usr/bin/dspamc antispam_dspam_notspam = --class=innocent antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam;Junk antispam_trash = Trash;Deleted Items;Deleted Messages sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve-before.d sieve_extensions = +notify +imapflags sieve_storage = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = $default_internal_user } service imap-login { process_min_avail = 2 service_count = 0 vsz_limit = 32 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/ssl/mycerts/my.imzadi.de.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3:!EXP:!aNULL:!ADH ssl_key = </etc/ssl/mycerts/my.imzadi.de.key userdb { args = /etc/dovecot/ldap-userdb.conf.ext default_fields = uid=vmail gid=vmail home=/var/vmail/%u driver = ldap } protocol imap { mail_max_userip_connections = 20 mail_plugins = antispam } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve postmaster_address = postmaster(a)my.imzadi.de } ----/snip---- My dspam.conf looks like: ----snip---- Home /var/spool/dspam StorageDriver /usr/lib/i386-linux-gnu/dspam/libmysql_drv.so DeliveryHost 127.0.0.1 DeliveryPort 10026 DeliveryIdent localhost DeliveryProto SMTP OnFail error Trust vmail Trust root Trust dspam TrainingMode teft TestConditionalTraining on Feature noise Feature whitelist Algorithm graham burton Tokenizer osb PValue bcr WebStats off Preference "trainingMode=TEFT" # { TOE | TUM | TEFT | NOTRAIN } -> default:teft Preference "spamAction=deliver" # { quarantine | tag | deliver } -> default:quarantine Preference "spamSubject=[SPAM]" # { string } -> default:[SPAM] Preference "statisticalSedation=5" # { 0 - 10 } -> default:0 Preference "enableBNR=on" # { on | off } -> default:off Preference "enableWhitelist=on" # { on | off } -> default:on Preference "signatureLocation=headers" # { message | headers } -> default:message Preference "tagSpam=off" # { on | off } Preference "tagNonspam=off" # { on | off } Preference "showFactors=off" # { on | off } -> default:off Preference "optIn=off" # { on | off } Preference "optOut=off" # { on | off } Preference "whitelistThreshold=10" # { Integer } -> default:10 Preference "makeCorpus=off" # { on | off } -> default:off Preference "storeFragments=off" # { on | off } -> default:off Preference "localStore=" # { on | off } -> default:username Preference "processorBias=on" # { on | off } -> default:on Preference "fallbackDomain=off" # { on | off } -> default:off Preference "trainPristine=off" # { on | off } -> default:off Preference "optOutClamAV=off" # { on | off } -> default:off Preference "ignoreRBLLookups=off" # { on | off } -> default:off Preference "RBLInoculate=off" # { on | off } -> default:off Preference "notifications=off" # { on | off } -> default:off AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride fallbackDomain AllowOverride ignoreGroups AllowOverride ignoreRBLLookups AllowOverride localStore AllowOverride makeCorpus AllowOverride optIn AllowOverride optOut AllowOverride optOutClamAV AllowOverride processorBias AllowOverride RBLInoculate AllowOverride showFactors AllowOverride signatureLocation AllowOverride spamAction AllowOverride spamSubject AllowOverride statisticalSedation AllowOverride storeFragments AllowOverride tagNonspam AllowOverride tagSpam AllowOverride trainPristine AllowOverride trainingMode AllowOverride whitelistThreshold AllowOverride dailyQuarantineSummary AllowOverride notifications IgnoreHeader DKIM-Signature IgnoreHeader X-Spam-Status IgnoreHeader X-Spam-Scanned IgnoreHeader X-Virus-Scanner-Result Notifications off PurgeSignatures 14 # Stale signatures PurgeNeutral 90 # Tokens with neutralish probabilities PurgeUnused 90 # Unused tokens PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hit LocalMX 127.0.0.1 SystemLog on UserLog on Opt out ClamAVPort 3310 ClamAVHost 127.0.0.1 ClamAVResponse spam ServerMode auto ServerPass.Relay1 "<pwd>" ServerParameters "--deliver=innocent,spam --user %u" ServerIdent "localhost.localdomain" ServerDomainSocketPath "/var/run/dspam/dspam.sock" ClientHost /var/run/dspam/dspam.sock ClientIdent "<pwd>@Relay1" ProcessorURLContext on ProcessorBias off StripRcptDomain off Include /etc/dspam/dspam.d/ ----/snip---- Thanks a lot! Kind regards, Anna Christina Naß

2 1

[Dovecot] UIDL conversion courier -> dovecot
by Will Yardley 25 Oct '13

25 Oct '13

I've got a weird split setup where POP3 is currently handled by Courier (courier-imap-3.0.2 distribution), and IMAP is currently handled by the RHEL 5 version of Dovecot (1.0.7) I'm trying to figure out a way to convert the POP3 UIDLs (in cases where the courierpop3dsizelist is newer than dovecot-uidlist, at least) to something that Dovecot will read, or to configure Dovecot's pop3 to use a UIDL format that will work, as mentioned in the migration wiki. We have some "squeaky wheel" users who don't have their POP clients set to delete messages, and are likely to complain about re-downloading their several GB of mail. Thus far, the migration scripts haven't seemed to work properly, maybe because of the versions I'm using. I'm not sure whether the Courier versions there refer to Courier MTA version or Courier IMAP version, but adjusting the UIDL format to %v-%u (as suggested for early Courier 3 / Dovecot 1.0) hasn't worked (I saw %u-%v online, but that also didn't work). Since the Courier system doesn't seem to report validity, I also tried just '%u' - this works *if* I delete the header line as well as rename the courierpop3dsizelist to dovecot-uidlist, but I still don't get the exact same UIDLs as before. I'm willing to write my own migration tool, or to adapt the existing one, but I could use some assistance knowing how to do the translation. Dovecot -n for that instance is below, slightly sanitized, obviously I can change pop3_uidl_format; I also tried getting rid of pop3_reuse_xuidl: Basically, to give a concreate example, the Courier system seems to use the filename as the UIDL, with this courierpop3dsizelist: /2 45 1382654636 1199751891.13891_0.water-ox:2,Sa 2412 0:1382654636 1199927364.22870_0.fire-ox:2,S 2440 0:1382654636 1199936486.3332_0.wood-ox:2,Sa 2074 0:1382654636 1199985712.27745_0.water-ox:2,RS 4007 0:1382654636 1199993867.23139_0.fire-ox:2,S 1550 0:1382654636 producing this UIDL output: UIDL +OK 1 1199751891.13891_0.water-ox 2 1199927364.22870_0.fire-ox 3 1199936486.3332_0.wood-ox 4 1199985712.27745_0.water-ox 5 1199993867.23139_0.fire-ox [...] Dovecot's dovecot-uidlist: 3 V1199747645 N606 562 W2412 :1199751891.13891_0.water-ox:2,Sa 563 W2440 :1199927364.22870_0.fire-ox:2,S 564 W2074 :1199936486.3332_0.wood-ox:2,Sa 565 W4007 :1199985712.27745_0.water-ox:2,RS 566 W1550 :1199993867.23139_0.fire-ox:2,S producing: UIDL +OK 1 1199747645-562 2 1199747645-563 3 1199747645-564 4 1199747645-565 5 1199747645-566 (or, if I change the format to just %u): +OK 1 650 2 651 3 652 4 653 5 654 # dovecot --version 1.0.7 # 1.0.7: /etc/dovecot.d/XXX.cfg base_dir: /var/run/dovecot/pop-its syslog_facility: local4 protocols: pop3 pop3s listen: *:110 ssl_listen: *:995 ssl_ca_file: /etc/pki/dovecot/certs/XX.pem ssl_cert_file: /etc/pki/dovecot/certs/XXXX.pem ssl_key_file: /etc/pki/dovecot/private/XXXX.key disable_plaintext_auth: yes login_dir: /var/run/dovecot/pop-its/login login_executable: /usr/libexec/dovecot/pop3-login login_greeting_capability: yes login_processes_count: 4 login_max_processes_count: 512 verbose_proctitle: yes mail_location: maildir:/var/spool/maildir/%1Ln/%Ln:INDEX=/var/spool/dovecot/indexes/%1Ln/%Ln mail_debug: yes mmap_disable: yes maildir_copy_with_hardlinks: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_reuse_xuidl: yes pop3_uidl_format: %v-%u pop3_client_workarounds: outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: Mail. inbox: yes auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot.conf-ldap userdb: driver: static args: uid=vmail gid=mail home=/var/spool/maildir/%1Ln/%Ln socket: type: listen master: path: /var/run/dovecot/pop-its/auth-master mode: 384 user: vmail group: mail TIA! /wby

1 1

[Dovecot] Replication (Mac OS X)
by Rusty Ross 25 Oct '13

25 Oct '13

Hello, I am taking a stab at setting up dovecot replication between two OS X Mavericks servers. (The dovecot version in Mavericks is 2.2.5.) The first question I have is in regards to userdb. The user accounts are Open Directory based. The output of: doveadm user ‘*' …yields only: # doveadm user ‘*' submit However, specific user accounts can be looked up explicitly, ie: # doveadm user 'mary' field value uid 214 gid 6 home mail maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F quota maildir:User quota:noenforcing quota_rule *:storage=0 mail_location maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F/dovecot.sieve sieve_dir /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve_storage /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F According to http://wiki2.dovecot.org/Replication, user listing via “doveadm user ‘*’” is required for replication. Any thoughts about how I can get that working (or work around it) in this environment? Thanks, Rusty

3 16

[Dovecot] dsync core dump
by Jogi Hofmüller 25 Oct '13

25 Oct '13

Dear all, We're slowly progressing towards migration, and now run into dscyn dumping core when trying to sync mailboxes from the old imap server. Needless to say that not one byte get's transferred. On the old.server all I see is a correct login. This is what we get for one example user: server:~# doveadm -v -D backup -R -u USER imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(USER): Debug: auth input: USER system_groups_user=USER uid=XXXX gid=YYYY home=/home/USER /etc/dovecot/proxy-userdb doveadm(USER): Debug: Unknown userdb setting: plugin//etc/dovecot/proxy-userdb=yes doveadm(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER doveadm(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir doveadm(USER): Debug: maildir++: root=/home/USER/Maildir, index=, control=, inbox=/home/USER/Maildir, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 1 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) doveadm(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u doveadm(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 0 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER dsync(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=imapc: dsync(USER): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(USER): Debug: imapc(old.server:PORT): Looking up IP address dsync(USER): Debug: imapc(old.server:PORT): Connecting to IP dsync(USER): Debug: imapc(old.server:PORT): Starting SSL handshake dsync(USER): Debug: imapc(old.server:PORT): SSL handshake successful dsync(USER): Debug: imapc(old.server:PORT): Server capabilities: IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=PLAIN ANNOTATEMORE dsync(USER): Debug: imapc(old.server:PORT): Authenticating as cyrus for user USER dsync(USER): Debug: imapc(old.server:PORT): Authenticated successfully dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 1 dsync(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u dsync(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 0 dsync(USER): Debug: acl vfile: Global ACL directory: (none) Segmentation fault (core dumped) Here is the output of dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10-3-amd64 x86_64 Debian jessie/sid auth_debug = yes imapc_features = rfc822.size imapc_host = old.server imapc_list_prefix = INBOX imapc_master_user = MASTERUSER imapc_password = MASTERPASS imapc_port = PORT imapc_ssl = imaps imapc_ssl_ca_dir = /etc/ssl/certs lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = acl namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ subscriptions = no type = shared } namespace inbox { hidden = yes inbox = yes list = no location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes type = private } passdb { args = session=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp pop3" service auth { unix_listener auth-userdb { mode = 0777 } } service lmtp { inet_listener lmtp { address = 172.16.16.78 port = 24 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/proxy-userdb driver = passwd } protocol lmtp { mail_plugins = acl } protocol imap { mail_plugins = acl autocreate imap_acl } -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] "Renaming not supported across conflicting directory permissions"
by Richard Platel 25 Oct '13

25 Oct '13

Is it possible to disable this check in 2.1.7? (without a patch and re-compile?)

3 2

[Dovecot] Replication not happening on 2.2
by Lucas Rothamel - Eye Catching Webdesign 24 Oct '13

24 Oct '13

Hello, first - thanks for the help in getting dovecot 2.2 compiled and installed on Debian. I have Dovecot 2.2 running now on two servers, and to test replication, I am polling mail on one server whilst the other creates mail regularly from crontab output. I have replication set up, but nothing at all is appearing on the other server, and I do not have any dsync / doveadm messages in /var/log/mail.log any more. With 2.1, these two used to spam many errors into mail.log. Any hints? Here is my dovecot-n output: # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/%d/%n/Maildir mail_plugins = " notify replication" mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@mydomain quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota postmaster_address = sysop@mydomain } Thanks, Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

1 0

[Dovecot] mailbox sharing with mdbox
by NOC WVNET 24 Oct '13

24 Oct '13

Hello, i want to know if it's possible to use mailbox sharing with mdbox. I have done a setup with maildir where it's working fine but with mdbox I'm only able to subscribe the shared folder but there are no messages in it. (maybe a problem with the namespace) I'm running dovecot 2.2.6 [deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2.patched main ] on Debian Wheezy Kind regards Stefan

1 0

[Dovecot] secure email server
by BONNET, Frank 23 Oct '13

23 Oct '13

Hello I have to setup a "secured" email server - encrypted filesystem - SSL or TLS only for SMTP and IMAPS - Talking only to some known other same-secured servers Any info/links welcome ! Please do not start some flame war around this ! I've been ordered to set up such server and I KNOW there are probably security holes but nothing's perfect so a starting point is necessary *Thank you for any infos*

6 7

[Dovecot] Odd Feature Request - RBL blacklist lookup to prevent authentication
by Marc Perkel 23 Oct '13

23 Oct '13

I would like to have a list of IPs (hacker list) that I can do a lookup on so that if anyone tries to authenticate to dovecot they always fail if they are on my list. I have the list - and the list is available as a DNS blacklist. I'd like to have it work with both local IP lists or RBL lookup. The idea is so hackers from known IP addresses never succeed. If Dovecot provides the feature I have about 1/2 million IP addresses of known current hackers to block. Anyone else interested in this?

8 7

[Dovecot] fstat() errors on /srv/mail/<username>/dovecot.index.log
by Zach La Celle 23 Oct '13

23 Oct '13

Dovecot version 2.1.7 Ubuntu 12.04.3 LTS Kernel 3.2.0-35-generic x86_64 I'm not sure exactly when this started occurring, but sporatically users report issues receiving email, having email saved to "Sent," etc. Looking in dovecot.log, I see the following errors: 2013-10-16 09:53:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27434, secured, session=<PnoiBtzoBgB/AAAB> 2013-10-16 09:53:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:53:21 imap(user2): Info: Disconnected: Logged out in=3616 out=495 2013-10-16 09:53:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27436, secured, session=<jE5kBtzoBwB/AAAB> 2013-10-16 09:53:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:41 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27438, secured, session=<UDJlB9zoCAB/AAAB> 2013-10-16 09:53:41 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:54:12 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27440, secured, session=<6bI5CdzoCQB/AAAB> 2013-10-16 09:54:12 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:12 imap(user5): Info: Disconnected: Logged out in=736 out=7064 2013-10-16 09:54:15 imap-login: Info: Login: user=<user6>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27442, secured, session=<t+FnCdzoCgB/AAAB> 2013-10-16 09:54:15 imap(user6): Info: Disconnected: Logged out in=95 out=902 2013-10-16 09:54:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27444, secured, session=<c/q1CdzoCwB/AAAB> 2013-10-16 09:54:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27446, secured, session=<nOb3CdzoDAB/AAAB> 2013-10-16 09:54:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 These errors are not confined to a single user, and do not occur with the same frequency. I originally was running the Dovecot shipped with the default Ubuntu repositories (don't remember which version, but it was 1.*) and used a backport to upgrade to 2.1.7 to see if that fixed it. It did not. Any ideas why this is happening?

2 4

[Dovecot] doveadm: Fatal: open(/dev/tty)
by Dan Langille 22 Oct '13

22 Oct '13

I received this message today, and remembered, you can't do that... $ doveadm pw -s SHA512-CRYPT Enter new password: doveadm(dan): Fatal: open(/dev/tty) failed: No such file or directory </pre> It seems if you have no tty, you can't create a password. Surely there is a better way to do this? Looking at the code, it's trying to open the tty and turn off echo. For the record: FreeBSD 8.4-RELEASE-p3 And yes, there is no console. I'm attached to a FreeBSD jail from the host system, directly via the ezjail-admin console command. # w 6:52PM up 18 days, 23:34, 0 users, load averages: 0.96, 0.57, 0.46 USER TTY FROM LOGIN@ IDLE WHAT # Ain't nobody there.. -- Dan Langille - http://langille.org/

2 3

[Dovecot] using dovecot in Asterisk imap storage
by Asmaa Ahmed 22 Oct '13

22 Oct '13

Hello, I am trying to use postfix/dovecot as mail server to be the imap storage for my voicemail system.For that I installed postfix and dovecot and trying to follow the instructions in this post http://etel.wiki.oreilly.com/wiki/index.php?title=Storing_Voicemail_on_an_I… I should add a master user for Asterisk to your IMAP server that has access to all user's mailboxes and as per the instructions, I should edit auth section in dovecot.conf which I can't find! Is there something wrong or should I add this section by myselfAlso I don't have dovecot.masterusers, should I create it? $/etc/dovecot$ /usr/sbin/dovecot -n# 2.0.19: /etc/dovecot/dovecot.conf# OS: Linux 3.2.0-31-virtual x86_64 Ubuntu 12.04.3 LTS mail_location = maildir:~/Maildirmanagesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavepassdb { driver = pam}plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve}protocols = imap pop3 sieveservice auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix }}ssl_cert = </etc/ssl/certs/dovecot.pemssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUMssl_key = </etc/ssl/private/dovecot.pemuserdb { driver = passwd}protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10}protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh}protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r} Thanks.

2 4

[Dovecot] Dbox group file permissions
by Chris Lasater 22 Oct '13

22 Oct '13

Hi everyone, I feel like I am missing something obvious here. I have dovecot up and running and every piece of mail is given user read/write permission. I see the option mail_gid, but I do not see anyplace to set the group permissions. I see the below wiki talking about new home directories getting their permission from the parent directory, but this does not seem to work. Any assistance would be appreciated. http://wiki2.dovecot.org/SharedMailboxes/Permissions I changed the group permissions on the parent directory, and used rm -rf to delete the user directories, then logged in again so it was recreated. [user@dovecot ~]$ sudo ls -la /mnt/home/imapd/domain.example.net/ total 24 drwxr-x--- 6 imapd imapd 4096 Oct 21 17:35 . drwxr-xr-x 46 imapd nagios 4096 Oct 21 16:55 .. drwx------ 3 imapd imapd 4096 Oct 21 16:59 user1 drwx------ 3 imapd imapd 4096 Oct 21 17:35 user2 Setup Mail is written in dbox format CentOS 5.9 dovecot 2.2.6 NFS with director Mail Configs mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n mail_uid = imapd mail_gid = imapd Thanks, Chris

1 0

[Dovecot] Mailboxes separated from IMAP server
by Reymer Antonio Vargas Solano 21 Oct '13

21 Oct '13

Hello folks, At my university we are trying to implement a distributed email backend, but I have some troubles, The topology: Server A: Postfix+LMTP # MTA Server B: Dovecot+LMTP # Just mailboxes Server C: Dovecot # POP3/IMAP Right now the Server A can leave a received email to the Server B, but I don't know how to communicate Server C to the Server B to retrieve the emails. I think that we should use IMAP protocol, but I am confused about how to connect them, I don't know if we have to use a proxy IMAP server, or another thing. Can anyone give me an idea? Regards, Reymer Antonio Vargas Solano

5 14

[Dovecot] dovecot dropbox plugin created another problem ?
by Benny Pedersen 21 Oct '13

21 Oct '13

http://blog.dynamoo.com/2013/10/dropbox-spam-leads-to-malware-on-errr.html

1 0

[Dovecot] bangkokmaco@gmail.com has indicated you're a friend. Accept?
by bangkokmaco＠gmail.com 21 Oct '13

21 Oct '13

Hi, bangkokmaco(a)gmail.com wants to follow you. ****** Is bangkokmaco(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=Dovecot+Mailing+List&… If No please follow the link below: http://invites.fliporamail.com/signup_e_no.html?fullname=Dovecot+Mailing+Li… Follow the link below to remove yourself from all such emails http://invites.fliporamail.com/uns.jsp?email=dovecot@dovecot.org&iid=3fa84c…

2 1

[Dovecot] Upgrade from 2.1 to 2.2 on Debian
by Lucas Rothamel - Eye Catching Webdesign 21 Oct '13

21 Oct '13

Hello, I am currently running Dovecot 2.1 on current Debian and need to upgrade to 2.2 to use the replication features. I understand that I therefore need to compile Dovecot myself. I am using a MySQL database for users authentication, therefore I need to compile Dovecot with mysql support: *./configure --with-mysql* Unfortunately this terminates with: *configure: error: Can't build with MySQL support: libmysqlclient not found* I installed libmysqlclient from debian repos, but it does not help. Also, how do I then connect the newly installed dovecot to my existing /etc/init.d/dovecot script? Thank you. Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

3 4

[Dovecot] Question to sieve symlink
by Andreas Meyer 20 Oct '13

20 Oct '13

Hello! A Server running openSUSE 12.3 and dovecot version 2.1.13. In the log I find Oct 19 00:23:23 managesieve(anmeyer(a)anup.de): Warning: sieve-storage: Active sieve script symlink /var/spool/vhosts/anup.de/anmeyer/.dovecot.sieve is broken: invalid/unknown path to storage (points to /var/spool/vhosts/anup.de/anmeyer/.sieve/managesieve.sieve). But the link is ok and when I login to roundcube I can manage the filters. What's the problem? Greetings Andreas

4 12

[Dovecot] patch for ssl_prefer_server_ciphers in dovecot 2.1
by Adi Kriegisch 20 Oct '13

20 Oct '13

Dear all, I tried to do a backport of 'ssl_prefer_server_ciphers' (http://hg.dovecot.org/dovecot-2.2/rev/897484f45a87/) to Dovecot 2.1 (namely the Debian version of Dovecot) and wanted to ask if there is any chance to integrate this feature into Dovecot 2.1 'upstream' as well. As the code structure changed quite a bit, I am not sure if my patch is complete. I tested it with pop3s and imaps in my test environment and it works just as expected and seemed to not have any unwanted effects. (Dovecot code is probably the most beautiful and easy to read C code I've seen, but there might also be some pitfalls I missed.) best regards, Adi Kriegisch PS: I need that feature to enable PFS while allowing Outlook to still connect and the others not to fall back to a different cipher; I was unable to find a PFS cipher that is supported by Outlook and OpenSSL.

3 7

[Dovecot] dovecot-metadata-plugin v14 patches
by Sergey Sidlyarenko 19 Oct '13

19 Oct '13

Please apply patches for dovecot-metadata-plugin v14. 1. dovecot-metadata-plugin-value_nil - fix plugin crach if entry->value == NULL (strlen(NULL) - segfault). 2. dovecot-metadata-plugin-utf7_support - add support metadata for UTF8 mailfolder. -- Sidlyarenko Sergey https://github.com/lefoyer

2 1

[Dovecot] Issues with configure script / Makefile
by Bret Jordan 19 Oct '13

19 Oct '13

Dear Dovecot, I have noticed that when you pass a --prefix in to the configure script and say specify a path of /local/dovecot-2.2.6 that when you install most of the subdirectories (etc, lib, include, libexec,etc) have a dovecot directory in them, like if you were installing to /. This is not typical of most *nix software. So I tried to specify the exact location with the following configure options, but they are not honored when it comes to installation. I have looked through the configure script to see if I can see where the problem is and can not see it. These are the ones that do not work. Some of the others, however to work. # Do not work --sysconfdir=/local/dovecot-2.2.6/etc \ --libdir=/local/dovecot-2.2.6/lib \ --includedir=/local/dovecot-2.2.6/include \ --libexecdir=/local/dovecot-2.2.6/libexec \ # Do work --docdir=/local/dovecot-2.2.6/share/doc \ --with-ssl=openssl --with-ssldir=/local/dovecot.2.2.6/ssl \ --with-statedir=/local/dovecot-2.2.6/lib \ --with-moduledir=/local/dovecot-2.2.6/lib \ --with-rundir=/run/dovecot Bret Bret Jordan CISSP | Sr Security Architect PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

1 0

[Dovecot] Having problem that e-mails for all users are grouped in the same "sent" file (same for "drafts").
by SiR 18 Oct '13

18 Oct '13

This is an urgent problem for us. Is this expected? the problem is that when users access their e-mail through web-mail (roundcubemail) users see each others messages in unified "Sent" folder We have used: joe /etc/postfix/virtual to enable managing e-mails on multiple domains by same Postfix server. Thank you -- View this message in context: http://dovecot.2317879.n4.nabble.com/Having-problem-that-e-mails-for-all-us… Sent from the Dovecot mailing list archive at Nabble.com.

2 3

[Dovecot] Public dovecot namespace visible only to some users
by Joachim Breitner 17 Oct '13

17 Oct '13

Hi, I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A and B, but not any other user. I tried to set up the namespace as follows: namespace { type = public separator = . prefix = INBOX.XFeeds. location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ subscriptions = no } together with a acl-file: /var/vhosts/feeds $ cat dovecot-acl user=A lrwstipekxa user=B lrwipk Now user C cannot access the contents of the XFeeds mailbox, but it still shows up in its IMAP client. How can I make sure that other users cannot observe that this namespace exists? Thanks, Joachim PS: If you collect serverfault reputation, feel free to answer on http://serverfault.com/questions/544061/public-dovecot-namespace-visible-on… as well :-) PPS: Relevant parts of my configuration: first_valid_uid = 109 last_valid_uid = 109 mail_gid = vhost mail_location = maildir:~/Maildir mail_privileged_group = mail mail_uid = vhost managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ prefix = INBOX.XFeeds. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/vhosts/dovecot-userdb driver = passwd-file } plugin { acl = vfile sieve = ~/dovecot.sieve sieve_dir = ~/sieve } userdb { args = uid=vhost gid=vhost home=/var/vhosts/%d/%n driver = static } protocol imap { mail_plugins = " acl" } -- Joachim “nomeata” Breitner mail(a)joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nomeata(a)joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nomeata(a)debian.org

2 3

Re: [Dovecot] Strange output from LIST command
by azurIt 17 Oct '13

17 Oct '13

> Od: Charles Sprickman <spork(a)bway.net> > Komu: azurIt <azurit(a)pobox.sk> > Dátum: 16.10.2013 23:20 > Predmet: Re: [Dovecot] Strange output from LIST command > >I just did a move from Courier to Dovecot 2.2, and also followed the namespace suggestions in the wiki. > >I've not had any issues, but if you want to drop me a note showing the IMAP commands and results you get for LIST, I'll compare locally and let you know if I see anything different… > >Charles >-- >Charles Sprickman >NetEng/SysAdmin >Bway.net - New York's Best Internet www.bway.net >spork(a)bway.net - 212.655.9344 > Thank you. I tried to upgrade to 2.1.17 just to see if it helps - it didn't. Looks like an unfixed bug in 2.1.. I will see tomorrow if i can rebuild Debian experimental packages so i can try version 2.2. azur

2 1

[Dovecot] "Perfect Forward Secrecy" on Redhat/Fedora
by Reindl Harald 16 Oct '13

16 Oct '13

RHEL/CentOS 6.5 will support ECDHE Fedora currently makes the turnaround no wonder that i burned down many hours: https://bugzilla.redhat.com/show_bug.cgi?id=1019390 https://bugzilla.redhat.com/show_bug.cgi?id=319901#c108 ______________________________ recent dovecot with also support older clients but perfer best possible encryption for modern ones ssl_prefer_server_ciphers = yes ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SSLv2:@STRENGTH ______________________________ the same for Apache: SSLHonorCipherOrder On SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

1 0

[Dovecot] Using dovecot as LDA for postfix
by Farzad Mahdikhani 15 Oct '13

15 Oct '13

Hi Here is my environment: Red Hat Enterprise Linux Server release 5.7 (Tikanga) postfix-2.9.1-1.rhel5 dovecot 1.0.7 I want to config a complete postfix-dovecot mail server. First I configured postfix to use procmail, its default LDA and dovecot for pop3 and imap. I didn't changed main.cf a lot, just myhostname and a few other properties. I didn't set home_mailbox. About dovecot.conf here is the output of dovecot -n : # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd As you can see mail_location is not set. At this time everything was OK and working. I was able to send email using SquirrelMail and thunderbird. I got two users, user1 and user2, in my linux machine and when I sent an email from user1(a)software.com to user2(a)software.com the sent mail was saved in /home/user1/mail/Sent and the received email was in /var/mail/user2. The log file for dovecot had entries like this for user1 and user2: dovecot: Oct 14 14:44:52 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 At this point I tried to change the LDA from procmail to dovecot by the following settings: I added/changed the following in the main.cf: mailbox_command = /usr/libexec/dovecot/deliver dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = software.com virtual_transport = dovecot I added the following in the master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} But it didn't work. When I send email from from user2 to user1 the sent email is correctly saved in /home/user2/mail/Sent but it seems that user1 doesn't receive the incoming email. dovecot.log had entries like the following: dovecot: Oct 14 14:54:04 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=::ffff:172.27.7.8, lip=::ffff:172.16.100.183, TLS dovecot: Oct 14 14:54:04 Info: IMAP(user1): Effective uid=504, gid=504, home=/home/user1 dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: access(/home/user1/Maildir, rwx): failed: No such file or directory dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 Setting home_mailbox = Maildir/ in main.cf and mail_location = maildir:~/Maildir in dovecot.cf didn't help. I have been googling and reading and testing for 4 or 5 days for this but there was no chance. Now, I am stuck and any help would be really really appreciated. Regards, Ferez

4 3

[Dovecot] how to handle logging
by Andreas Schulze 15 Oct '13

15 Oct '13

Hello, I plan a migration to dovecot and have concerns about the amount of logged data. On a testsystem dovecot produced 1TB syslog per day with a comparable amount of pop3 sessions. The current server log to STDOUT which is connected to multilog (circular buffer, http://cr.yp.to/daemontools/multilog.html) That way I can have a look at the last activities to any time. I like to have that in dovecot too. But since dovecot uses syslog it's not possible to adopt 1:1 Any ideas? Thanks -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

4 5

[Dovecot] POP3 Setup help - more info
by Thomas I Higgins 15 Oct '13

15 Oct '13

Well my last email went unaswered - I assume because I didn't provide enough detailed information. Not a surprise if that is the case. Anyway, I also noted that there is no dovecot/pop3 process like there is for IMAP. Not certain that is wrong, but I am guessing it is. I am enclosing the output from a doveconf -an query - hopefully you can see a screenshot, otherwise I have to figure out how to get it in text form (work disables cp & scp traffic). Hopefully this will provide information that will help define what I am missing? Thanks again, Thomas Higgins

5 4

[Dovecot] Analyzing and correlating Dovecot with Postfix logs
by Igor David 14 Oct '13

14 Oct '13

Hi All, I was wondering if anyone knows what are best practices for correlating logs between Postfix and Dovecot ? I am having setup with postfix + amavisd + spamassassin + dovecot and everything looks like a charm for few years now. However, when e-mail arrives to my system, postfix is sending it to amavisd on port 10024, which is returning back to postfix on 10025, and postfix is then delivering e-mail to Dovecot (which is acting as LDA), so I can find e-mail header via message-ID easily in Postfix logs. But after that I cannot find e-mail in my Dovecot Maildir list as a filename, as Dovecot is having it's own way of storing e-mails in Maildir format, and I can't see that messageID in directory. I can grep all e-mails which can take some time, so I was wondering if there is more appropriate work around or setup Postfix/Dovecot, e.g. to modify somehow dovecot Maildir naming convention or similar? I was trying to find answer around but could not so any help is appreciated! Versions: Dovecot: 2.1.13 Amavisd: amavisd-new-2.6.6 postfix: 2.3.3 Thanks in advance! -- Kind regards, Igor

1 0

[Dovecot] Email address with special characters in userdb
by Arnon Weinberg 14 Oct '13

14 Oct '13

Hi, I have a userdb file set up in passwd-file format containing the following entries: >doveadm user test1*test2(a)test.com test1-test2(a)test.com test1étest2(a)test.com test1@test2@test.com test1%test2(a)test.com I can access the 1st entry (no special characters) no problem: >doveadm user test1-test2(a)test.com -f home /var/vmail The 2nd entry (using UTF-8 encoding) doesn't come up: >doveadm user test1étest2(a)test.com -f home userdb lookup: user test1étest2(a)test.com doesn't exist The 3rd entry does come up: >doveadm user test1@test2@test.com -f home /var/vmail but Postfix escapes this case using quotes, and they don't work: >doveadm user '"'test1@test2'"'@test.com userdb lookup: user "test1@test2"@test.com doesn't exist The 4th entry does not come up at all: >doveadm user test1%test2(a)test.com -f home userdb lookup: user test1%test2(a)test.com doesn't exist I believe these are all valid characters for email addresses (per the RFC) except '@' (which ironically works without escaping). How can I get them working? >dovecot --version 2.1.16 -- Arnon Weinberg www.back2front.ca

2 1

[Dovecot] LMTP Proxy auth
by claus.r＠bayern-mail.de 14 Oct '13

14 Oct '13

Hi, i tried to use lmtp proxy to a cyrus-server where i need authentication. My passdb lookup gives me: user=mailbox(a)cyrus.serv.er host=192.168.1.1 proxy=Y pass=secret destuser=cyrus_lmtp_master As i see in packettrace to the lmtp-cyrus-server the dovecot-proxy didn't try any authentication. Could someone please confirm to me that LMTP proxy with auth isn't supported or is there any configuration issue i have missed?

1 0

[Dovecot] Questions about special_use mailboxes
by Florian Lindner 14 Oct '13

14 Oct '13

Hello, I am using using dovecot 2.1.7 from debian stable: namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Spam { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } I monitor IMAP traffic using the MUA trojita. When I select the mailbox Drafts: >>> y10 SELECT Drafts (QRESYNC (1381746443 1)) <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. Flag is \Draft instead of \Drafts? When I select Sent >>> y12 SELECT Sent (QRESYNC (1381746442 7 (2 2))) <<< * OK [CLOSED] Previous mailbox closed.␍␊ <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT \*)] Flags permitted. Why is the flag $SENT ? http://www.faqs.org/rfcs/rfc6154.html mentiones nothing like that. When I select Spam: >>> y14 SELECT Spam (QRESYNC (1381746444 1)) <<< * OK [CLOSED] Previous mailbox closed. <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. No flag at all? Or am I getting IMAP wrong? Thanks, Florian

1 0

[Dovecot] dovecot 2.2.x and replication with dsync and shared / public namespace
by romain 13 Oct '13

13 Oct '13

Hi, I'm trying to configure replication with dsync on Dovecot 2.2.5 (and latest nightly). I did followed the guide at http://wiki2.dovecot.org/Replication But I can get dsync-server working only if my users do not have access to shared mailboxes and / or public mailboxes which is problematic for our setup. dsync-server is trying to create folders in public/ namespace : ------------------------------------- 2013-09-23 20:34:04 dsync-server(adupont): Panic: file dsync-brain-mailbox-tree.c: line 384 (dsync_brain_mailbox_tree_add_delete): assertion failed: (other_node->ns == NULL || other_node->ns == node->ns) 2013-09-23 20:34:04 dsync-server(adupont): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x64faa) [0x7f7bf42dcfaa] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x64fee) [0x7f7bf42dcfee] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7bf4299299] -> dovecot/doveadm-server() [0x41ba52] -> dovecot/doveadm-server(dsync_brain_recv_mailbox_tree_deletes+0xbb) [0x41c39b] -> dovecot/doveadm-server(dsync_brain_run+0x37c) [0x41972c] -> dovecot/doveadm-server() [0x419bf8] -> dovecot/doveadm-server() [0x42ba20] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f7bf42ed3d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f7bf42ee23f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f7bf42ecf18] -> dovecot/doveadm-server() [0x416e59] -> dovecot/doveadm-server() [0x40cc77] -> dovecot/doveadm-server() [0x415ddd] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f7bf42ed3d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f7bf42ee23f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f7bf42ecf18] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7bf429e553] -> dovecot/doveadm-server(main+0x11b) [0x40c9eb] -> /lib64/libc.so.6(__libc_start_main+0xed) [0x7f7bf3f0932d] -> dovecot/doveadm-server() [0x40ca59] 2013-09-23 20:34:04 dsync-server(adupont): Fatal: master: service(doveadm): child 28131 killed with signal 6 (core dumped) ------------------------------------- dsync-server is trying to create folders in shared/ namespace : ------------------------------------- 2013-09-23 20:34:05 dsync-server(s.durant): Panic: file dsync-mailbox-tree-sync.c: line 1029 (sync_create_mailboxes): assertion failed: (node->ns == other_node->ns) 2013-09-23 20:34:05 dsync-server(s.durant): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x64faa) [0x7ffb6fd74faa] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x64fee) [0x7ffb6fd74fee] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7ffb6fd31299] -> dovecot/doveadm-server() [0x426025] -> dovecot/doveadm-server(dsync_mailbox_trees_sync_init+0x139) [0x427789] -> dovecot/doveadm-server(dsync_brain_recv_mailbox_tree_deletes+0xdd) [0x41c3bd] -> dovecot/doveadm-server(dsync_brain_run+0x37c) [0x41972c] -> dovecot/doveadm-server() [0x419bf8] -> dovecot/doveadm-server() [0x42ba20] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7ffb6fd853d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7ffb6fd8623f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7ffb6fd84f18] -> dovecot/doveadm-server() [0x416e59] -> dovecot/doveadm-server() [0x40cc77] -> dovecot/doveadm-server() [0x415ddd] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7ffb6fd853d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7ffb6fd8623f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7ffb6fd84f18] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7ffb6fd36553] -> dovecot/doveadm-server(main+0x11b) [0x40c9eb] -> /lib64/libc.so.6(__libc_start_main+0xed) [0x7ffb6f9a132d] -> dovecot/doveadm-server() [0x40ca59] 2013-09-23 20:34:05 dsync-server(s.durant): Fatal: master: service(doveadm): child 28137 killed with signal 6 (core dumped) ------------------------------------- If I run the command "doveadm -v sync -u my.user -f tcp:10.20.0.2:12345" mailboxes are sync correctly. No problem with public and shared mailboxes. If i run the command doveadm replicator replicate 's.durant' or doveadm replicator replicate '*', I get plenty of Panic / Error for all users that can access Public mailboxes or Shared mailboxes. Regards, MARIADASSOU Romain

1 1

[Dovecot] Problem with PAM, vpopmail and Roundcube
by ede＠ede.com.ec 13 Oct '13

13 Oct '13

Hello, I have a problem to which I have not been able to find a solution by myself or online. I have Dovecot running together with Qmail on a CentOS server. I need to be able to control which users are allowed IMAP access and at the same time allow IMAP access for all users when the requests are coming from a specific IP. My problem has two parts, detailed below. ----------------------------------------------------------- 1. PAM not working to allow access only for specified users ----------------------------------------------------------- Right now I am controlling IMAP access with [vmoduser -i] in Qmail which is not what I want. I need the IMAP access to be closed for everyone and then specify which users are allowed to access. I tried using [pam.d] for this as per http://wiki.dovecot.org/Authentication/RestrictAccess but although I am not getting any errors, all users are still allowed access unless I block them with [vmoduser -i]. In [dovecot.conf] I have: passdb pam { args = * } In [/etc/pam.d/imap] I have: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail And in [/etc/imapusers] I have specified the only users that should have access. Any ideas why this isn't working? ------------------------------------------------------- 2. Allow access for all users coming from a specific IP ------------------------------------------------------- I have a Roundcube installation running on an external server and I need *all* my users to be able to use the Webmail regardless if they have IMAP or only POP access from their computer or mobile devices. Using PAM I tried in [/etc/pam.d/imap]: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail allow_nets=127.0.0.0/8,192.168.0.0/16,1.2.3.4 ...where the webmail installation would be installed at IP [1.2.3.4]. But no luck! ------------------------------------------------------- Please - if there are anyone with ideas I could really use them. I have been going around in circles for the last couple of weeks and I don't know what to do! Sincerely, Daniel

2 2

[Dovecot] Problem with Dovecot after upgrade to Debian 7.0 (stable)
by Milan Milošević 13 Oct '13

13 Oct '13

Dear all, few days ago I updated Debian to the latest stable and since then Dovecot is not working. I use Dovecot as LDA for Postfix and also for IMAP access. Also I used SASL and everything was ok before update. After I updated to Dovecot 2.1.7 (it used to be 1.x before) it looks like that e-mail delever is working but I can not configure IMAP access to work. All users/passwords are stored as local users in /etc/passwd When I tried to connect to imap log file shows: Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user(a)mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out Also tested access opensasl clent and after I tried to log in I have received: * OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27] # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_location = maildir:/%h/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem syslog_facility = local0 userdb { driver = passwd } Please help, Milan ps. Sorry for my English.

3 4

[Dovecot] Transparent Migration from cyrus to dovecot
by Jogi Hofmüller 13 Oct '13

13 Oct '13

Hi dovecot people, We are in the process of preparing the migration from a cyrus 2.1 installation to dovecot. Dovecot will be installed on new hardware, so we have separated servers that can/will exist in parallel for a while. Our goal is to do the migration without interrupting the service for our users too much. Currently we tend to using dsync. So I am asking for best practice suggestions, tips and hints from people who have done such a thing before. Curiously awaiting your replies ;) Cheers! PS: I am subscribed to the list. So no need to include my address in replies. Thanks! -- j.hofmüller Optimism doesn't alter the laws of physics. - Subcommander T'Pol

7 9

[Dovecot] Dovecot 2.2.6 comression library build error
by Dimitri 12 Oct '13

12 Oct '13

Hi, I'm trying to build Dovecot 2.2.6 under Mageia Linux, and there are two issues. 1. I get the following errors during build, please see http://pastebin.com/RmSRZPip - the compression library requires dlopen/dlsym/etc functions, but the library providing them is not mentioned in the linking command. I've managed to workaround this by adding -ldl to the corresponding src/lib-compression/Makefile.in line. 2. The lib90_sieve_extprograms_plugin.so library gets installed into <libdir>/dovecot/sieve (and it's the only file to reside there), while all other modules are installed into <libdir>/dovecot/modules. Has this been done on purpose? For Mageia package, I've decided to move this file to the standard location. Thanks, Dimitri Mageia Linux packager

1 0