- dovecot - dovecot.org

[Dovecot] re-sorting emails in chrono order
by voytek＠sbt.net.au 12 Oct '13

12 Oct '13

dovecot 2.1.1 I access my IMAP folders through SquirrelMail as a result of 'part copying' (probably through web client ? not sure), that is copying/moving some emails, later, the rest, I have a sub folder where I have maybe 30 emails from 2012 appear at the very end like so 2013/2012/2010/.../2006/2005/2012 how can I re-sort ? thanks Voytek

1 0

[Dovecot] Doveadm with a 2nd Instance
by Chris Lasater 12 Oct '13

12 Oct '13

Hi Guys, I am trying to use 2 instances of Dovecot on the same server so I can have a Director managing my connections, everything appears to be working, but I can not use doveadm to control my 2nd instance, but doveconf seems to work fine. [user@server logs]$ doveconf -i Director | grep logs debug_log_path = /home/user/apps/logs/director/director_debug.log info_log_path = /home/user/apps/logs/director/director_info.log log_path = /home/user/apps/logs/director/director.log info_log_path = /home/user/apps/logs/director/director_lmtp.log [user@server logs]$ doveadm -i Director log find Debug: /home/user/apps/logs/dovecot_debug.log Info: /home/user/apps/logs/dovecot_info.log Warning: /home/user/apps/logs/dovecot.log Error: /home/user/apps/logs/dovecot.log Fatal: /home/user/apps/logs/dovecot.log I have stopped and started both my instances so the config running is what is in the config file, but when I use -i Director with doveadm it uses the other instances config. [user@server logs]$ doveadm instance list path name last used running /home/user/apps/dovecot/var/run/dovecot Dovecot 2013-09-26 00:39:14 yes /home/user/apps/dovecot/var/run/director Director 2013-09-26 00:32:31 yes Any ideas, or does anyone have any experience with the Dovecot instance feature? Chris

4 6

[Dovecot] Solr issue with Zlib
by Ricardo Branco 11 Oct '13

11 Oct '13

I have found that if you the fts_solr plugin is listed after Zlib it will cause an indexing problem where any message that was compressed with Zlib is submitted to solr without being uncompressed. The order of the plugins is important. Not sure if this can be fixed but im trying to add a wiki note. -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] ./configure not checking solr deps
by Ricardo Branco 11 Oct '13

11 Oct '13

It seems that when you run ./configure with --with-solr it does not check for deps libcurl and libexpat. When we compiled it silently went though and still compiled without a problem then missed installing solr. Maybe im missing something? -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] Sieve and Namespace in dovecot 2.0.X
by Mauricio Tavares 11 Oct '13

11 Oct '13

Based on what I read in http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage, if I have a namespace defined as tail conf.d/10-mail.conf namespace inbox { inbox = yes location = prefix = INBOX. separator =. type = private } A global script like cat /etc/dovecot/sieve/global-spam.sieve require ["fileinto", "regex"]; # Must use regex here as 'contains' may not be valid, it erroneously # moved: # X-Spam-Status: No, score=-4.0 required=8.0 tests=ALL_TRUSTED,BAYES_00, # DCC_CHECK_NEGATIVE,HTML_MESSAGE,T_TM2_M_HEADER_IN_MSG,UNTRUSTED_Relay, # XM_SPF_Neutral autolearn=disabled version=3.2.5, No # # Due to the 'YES' in BAYES, let's just make sure YES is at the # _beginning_ of X-Spam-Status, while ignoring anything past it. #if header :regex "X-Spam-Status" "^[Yy][Ee][Ss].*" { if header :matches "X-Spam-Status" "Yes*" { fileinto "INBOX.Spam"; stop; } should put spam in bob/.Spam. But, I am getting an error message stating that INBOX.Spam does not exist: Oct 11 09:57:33 mail dovecot: lda(bob(a)domain.com): Error: sieve: msgid=<0.0.0.71C.1CEC689A21CFF08.7068B7(a)ip.aidolip.us>: failed to store into mailbox 'INBOX.Spam': Mailbox doesn't exist: INBOX.Spam How come?

2 5

[Dovecot] Optimisation opportunity for IMAP searches
by Rick van Rein (OpenFortress) 11 Oct '13

11 Oct '13

Hello, I love Dovecot, but when developing a small IMAP tool, I ran into searching behaviour can easily be optimised. Please forgive a rather detailed suggestion. This was on Dovecot 1.2.15 on Debian Squeeze. My tool? It's called "midget" and retrieves documents from an IMAP box based on their mid: or cid: identifier, as per RFC 2392. I thought this would be useful to retrieve email attachments into a remote shell environment. When using Kerberos, the credentials and a strong hint of one's mail address are already present anyway, DNS SRV does the rest. If you want to see the early code, I'll be happy to share it here. The three formats of the URIs in RFC 2392 are: * mid:messageid * cid:contentid * mid:messageid/contentid Searching for a mid: with only a Message-ID part is quick and probably indexed, (HEADER Message-ID <messageid>) Searching for a cid: meant ploughing through body text to get to the attachments, so it was a slow and costly and needed checking of the outcome: (TEXT <contentid>) The quicker URI form to get to a Content-Id should be to mention it at the end of a mid: URI, and search for (HEADER Message-ID <messageid>)(TEXT <conentid>) Much to my surprise, this took about as long as the cid: query -- ploughing through lots of body text while it only needed to look through a one message bodies! As a human, I can see a straightforward improvement. However, it is more difficult to find a general solution -- but that is what I'm describing below, in the hope that it will help to improve Dovecot's search performance. 0. In general, searches are Boolean expressions composed with implied AND and explicit (NOT …) and (OR ….) constructs. 1. Using the theorems of The Morgan, push all (NOT …) constructs inside as far as possible, until they surround elementary statements. Some may have a trivial solution, such as (NOT (ALL)). Others will retain the NOT but that might be handled with a different use of the indexes. In general, this phase turns all AND and OR constructs into positive logic, without duplicating search terms. 2. Estimate the effort involved in every part of the calculation. (HEADER) is lighter than (TEXT) and headers may be further split into with / without index. Larger sets could be more work to search than smaller ones. In general, an estimate of the number of comparisons could be a good metric for work to be done. 3. For AND compositions, start with the simplest one in the AND compostition, and continue with increasingly heavier ones. Apply later conditions only on the output of the previous conditions, either after collecting all of it or everytime something is found. Whatever is optimal -- bulk operations are more efficient, but may collect large sets to handle. 4. For OR compositions, either start a thread for each part, or switch focus and collect sorted streams into one collectively sorted stream. I've been doing this stuff all through my PhD thesis work, so it come easy to me :-) But this optimisation does not appear to be implemented yet, so I thought I'd suggest it. I hope this is useful to Dovecot! Best wishes, Rick van Rein

2 2

[Dovecot] Questio about replication
by Patrick Westenberg 11 Oct '13

11 Oct '13

Hi everyone, this article (http://blog.dovecot.org/2012/02/dovecot-clustering-with-dsync-based.html) describes the situation for director/NFS-based clusters and SSH-based clusters. Right now I'm running the first setup with one proxy/director and two backends (all 2.2.x) mounting an NFS-share but I'd like to get rid of NFS (it's slow) and, if one backend is down, the proxy still sends the user to that backend. The article says: "High-availability non-NFS setup One possibility is to use Dovecot proxies, which know which servers are down. Instead of directing users to those servers, it would direct them to replica servers." My question is, if I can still use my proxy/direcot setup but every backend having it's local (or iSCSI-backed) ext4 storage and not using the SSH-based replication method? Regards Patrick

2 1

[Dovecot] SSL with startssl.com certificates
by Dan Langille 11 Oct '13

11 Oct '13

I'm using Dovecot 2.2.5. I'm setting up and new IMAPS server for personal use (i.e. only me). I have success with self-signed certificates but not with others (e.g. StartSSL.com) With StartSSL certs: I've been able to connect and test commands via: openssl s_client -connect imaps.unixathome.org:993 Can you configure your iPhone or Macbook to access the above? Authentication isn't the issue. Connection is the issue. I've been able to get Thunderbird to connect and access my mail. However, I've been unable to get my iPhone or my Mac configured to use the same IMAP server. On the iPhone, adding the new Mail account causes the Settings app to crash on a persistently consistent basis when adding the new account. The crash occurs when connecting to the IMAPS server. Configuration never completes. I suspect the problem is SSL because in both cases (iPhone and Mac), I see these messages I see in the logs: *** /var/log/debug.log *** Sep 13 11:50:32 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: auth: Debug: auth client connected (pid=31647) Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [166.137.84.11] *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [166.137.84.11] Sep 13 11:50:46 imaps dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=166.137.84.11, lip=199.233.228.197, TLS handshaking: Disconnected, session=<a7AJd0LmWwCmiVQL> /usr/local/etc/ssl/imaps.unixathome.org.crt contains only the cert issued by StartSSL /usr/local/etc/ssl/imaps.unixathome.org.nopassword.key contains a no-password key generated by myself. Output of doveconf -n: # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE-p6 amd64 auth_debug = yes auth_verbose = yes first_valid_gid = 1001 first_valid_uid = 1001 mail_debug = yes mail_location = maildir:~/Maildir mail_privileged_group = mail passdb { args = scheme=BLF-CRYPT /var/db/dovecot.users driver = passwd-file } protocols = imap service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 199.233.228.197 } } ssl = required ssl_cert = </usr/local/etc/ssl/imaps.unixathome.org.crt ssl_key = </usr/local/etc/ssl/imaps.unixathome.org.nopassword.key userdb { args = /var/db/dovecot.users driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } -- Dan Langille - http://langille.org/

10 53

[Dovecot] cached message size errors
by Charles Sprickman 11 Oct '13

11 Oct '13

Hello, We recently moved from courier to dovecot, and I'm seeing a handful of errors that prevent people from retrieving email. Below is a snippet of the log sequence I see when this happens: Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Cached message size smaller than expected (1759 < 1830) Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Maildir filename has wrong S value, renamed the file from /home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xena.bway.net,S=1759:2,b to /home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xena.bway.net,S=1830:2,b Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Corrupted index cache file /home/vpopmail/domains/bway.net/1/xxx/Maildir/dovecot.index.cache: Broken physical size for mail UID 447401 Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: read(/home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xen… failed: Invalid argument Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Disconnected: Internal error occurred. Refer to server log for more information. [2013-10-10 13:44:24] in=784 out=3017 Basically it looks like dovecot detects a mismatch in the file size vs. the file size embedded in the maildir filename, tries to fix it and then has issues reading the fixed file. Removing the file in question allows the user to retrieve email. The "invalid argument" error seems especially strange, as I'm able to view the file by hand with no problems. Blowing away the indexes and letting them get recreated seems to not help at all. This was an old vpopmail setup with both maildrop and vdelivermail doing the final delivery both now and prior to the migration to dovecot. For a quick fix, is there a way to have dovecot ignore the error and present the rest of the mailbox? Longer term fix, I'm not even sure where to start I've used dovecot elsewhere for quite some time (with maildirs) and I've never had an issue like this. 'doveconf -n' below... Thanks, Charles -- Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet www.bway.net spork(a)bway.net - 212.655.9344 # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.4-RELEASE-p1 amd64 auth_default_realm = bway.net auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ default_process_limit = 300 disable_plaintext_auth = no first_valid_uid = 89 instance_name = dovecot1 last_valid_uid = 90 listen = 127.0.0.1,216.220.96.26,216.220.96.25 login_greeting = Dovecot ready - bway.net. mail_plugins = " quota" mailbox_list_index = yes namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = Inbox.Trash:storage=+100M quota_rule2 = Inbox.Spam:storage=+100M } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %v-%u protocols = imap pop3 ssl_cert = </usr/local/etc/ssl/bwaynet.pem ssl_key = </usr/local/etc/ssl/bwaynet.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 40 mail_plugins = " quota imap_quota" } protocol pop3 { mail_max_userip_connections = 20 }

1 1

[Dovecot] Maildir and home location
by Florian Lindner 10 Oct '13

10 Oct '13

Hello! My current mail setup looks like that: MTA is postfix, MDA is maildrop. Each system user configures mail delivery using the .mailfilter of maildrop to arbitrary maildirs in his home. For each maildir a POP3/IMAP account can be configured, currently I use courier-imap/-pop and think about replacing it by dovecot. AFAIK with dovecot each account has a home and maildir assigned which should not be equal neither should a home dir be used for mulitple accounts. My problem is where to put these homedirs? System users have full SSH access on the machine. I would really prefer to put them somewhere where the users could delete them (if they need to reset or delete their account). Optimal would be in the maildir itself, but... What are your suggestions? Regards, Florian

1 0

[Dovecot] v2.2: Fix to slow process creation in some setups
by Timo Sirainen 10 Oct '13

10 Oct '13

Especially some imap/pop3 login bursts could have caused errors like: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable Fix in http://hg.dovecot.org/dovecot-2.2/rev/69179ca6007d Explanation & workaround in http://wiki2.dovecot.org/SocketUnavailable : Dovecot v2.2.0 - v2.2.6 were attempting to optimize host.domain lookups by doing them only once in the master process. Unfortunately they were actually doing the lookup every time when creating a new process. In some configuration this lookup could have done a somewhat slow DNS lookup, causing the process creation to become very slow and triggering this message. The fix is in v2.2.7 and you can also workaround this: • Add to dovecof.conf: import_environment = TZ DEBUG_OUTOFMEM DOVECOT_HOSTDOMAIN • Before "dovecot" binary is started, run: export DOVECOT_HOSTDOMAIN=mailserver.example.com (of course changing the value)

1 0

[Dovecot] smartsieve managesieve-login failure with dovecot 2.1.7
by Wouter Berkepeis 09 Oct '13

09 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just subscribed to the mailing list because I am stuck trying to solve a problem getting smartsieve to work with a new version of dovecot. But let me first explain the situation shortly. I am running a mail server at home for personal use, and for fun. At this moment this is an old, slow machine running Debian Squeeze, Dovecot 1.2.15 and Exim 4.72. Authentication is done with LDAP, running OpenLDAP 2.4.23. For managing mail filtering I use Smartsieve 1.0.0-RC2 in conjunction with Dovecot's Managesieve plugin. It's all working properly. But because this machine is slow, I'm now busy upgrading building a new machine running Debian Wheezy, Dovecot 2.1.7 and Exim 4.80. I've got it all running and working now (that is: locally in my lan): imap with dovecot, smtp with exim, Dovecot's sieve plugin working properly, authentication done through LDAP backend. But what I can't get to work is Smartsieve. Looking at the logs on my server I can tell managesieve-login is not working well with Smartsieve. As far as I understand authentication is always done over a secure connection using TLS. Here is some logged output, Dovecot as well as Smartsieve. dovecot-info.log: 2013-10-06 21:16:20 managesieve-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure: SSL alert number 40, session=<NkXdXhfodwB/AAAB> syslog: Oct 6 21:51:40 jingo smartsieve[12168]: getCryptLib: using rc4 Oct 6 21:51:40 jingo smartsieve[12168]: getCryptLib: using rc4 Oct 6 21:51:40 jingo smartsieve[12168]: FAILED LOGIN: jingo [192.168.2.12] {Private Lotus}: starttls: TLS initialization failed: socket timed out while reading server response: #002 Oct 6 21:51:40 jingo smartsieve[12168]: 2Z#027#015141003200542Z0??1#0130#011#006#003U#004#006#023#002NL1#0230#021#006#003U#004#010#014#012Overijssel1#0200#016#006#003U#004#007#014#007Hengelo1#0!#006#003U#004#012#014#032Private Lotus Organization1#0230#021#006#003U#004#013#014#012Jingo Mail1&0$#006#003U#004#003#014#035jingo.private-lotus.no-ip.net1&0$#006#011*?H?÷#015#001#011#001#026#027amigo(a)private-lotus.org0?#001"0#015#006#011*?H?÷#015#001#001#001#005 Oct 6 21:51:40 jingo smartsieve[12168]: #003#001 Oct 6 21:51:40 jingo smartsieve[12168]: èm¬NþgHÁßt#021×?Ð#011$?f+»#013?#021?ø#013yùZd#032Òí}Ì#012ù?#003xPË What is clear is that somehow no user information is being negotiated. Issuing a manual TLS login give the following results: root@amigos:~# gnutls-cli --starttls -p 4190 jingo.private-lotus.no-ip.net Resolving 'jingo.private-lotus.no-ip.net'... Connecting to '82.161.181.183:4190'... - - Simple Client Mode: "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." STARTTLS OK "Begin TLS negotiation now." *** Starting TLS handshake - - Ephemeral Diffie-Hellman parameters - Using prime: 1024 bits - Secret key: 1022 bits - Peer's public key: 1024 bits - - Certificate type: X.509 - Got a certificate list of 1 certificates. - Certificate[0] info: - subject `C=NL,ST=Overijssel,L=Hengelo,O=Private Lotus Organization,OU=Jingo Mail,CN=jingo.private-lotus.no-ip.net,EMAIL=amigo(a)private-lotus.org', issuer `C=NL,ST=Overijssel,L=Hengelo,O=Private Lotus Organization,OU=Private Lotus Certificate Authority,CN=private-lotus.no-ip.net,EMAIL=amigo(a)private-lotus.org', RSA key 2048 bits, signed using RSA-SHA, activated `2013-10-03 20:05:42 UTC', expires `2014-10-03 20:05:42 UTC', SHA-1 fingerprint `85ff6b5846a53e7eb5d46c3c4ebfd7beb253ba15' - - The hostname in the certificate matches 'jingo.private-lotus.no-ip.net'. - - Peer's certificate issuer is unknown - - Peer's certificate is NOT trusted - - Version: TLS1.1 - - Key Exchange: DHE-RSA - - Cipher: AES-128-CBC - - MAC: SHA1 - - Compression: NULL Everything OK I guess. Especially the first part of the output is interesting: "IMPLEMENTATION" "Dovecot Pigeonhole" This is what Smartsieve is looking at. With the former version the string was 'dovecot', so I changed this in the 'Managesieve.php' file. This file was already patched as stated on the site. Furthermore I changed everything referring to port 2000 to port 4190. But it still ain't working. Am I doing something wrong? Or is Smartsieve just becoming too outdated to work with newer versions of Dovecot? To get the picture complete, hereby my used config of Dovecot, generated with 'dovecot -n' : root@jingo:~# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_fields = uid box msgid size flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ } protocols = " imap sieve" service auth-worker { user = $default_internal_user } service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } service managesieve-login { executable = /usr/lib/dovecot/managesieve-login inet_listener sieve { port = 4190 } } service managesieve { executable = /usr/lib/dovecot/managesieve } ssl_cert = </etc/pki_jingo/private-lotus_CA/certs/server.crt ssl_cipher_list = HIGH:+TLSv1:+SSLv3:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/pki_jingo/private-lotus_CA/private/server.key ssl_protocols = !SSLv2 SSLv3 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { info_log_path = /var/log/dovecot/deliver.log log_path = /var/log/dovecot/deliver-errors.log mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = sieve postmaster_address = amigo(a)private-lotus.org } protocol imap { mail_max_userip_connections = 50 } protocol sieve { mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave } Any help would be appreciated. Thanks in advance. Greetings Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSUeueAAoJEHmiGeisoomH6LEH/irXWxa7kRDB1Gy929Z7E1p6 sZR7pk3tfDPz5PUPNVro+8AG5a+mjUhlVVsxi7pHfadgqGmXZmbbpQLBKQcAbtHI WzY//0t6Dvnn/ywBloWIarWO10SGFRrMBKEBJp/5glUJu0XMnB1PLEZjpFKobwuo WBHjynIEs9fzPjPk7/Kc74LysbtQ931OSeKFsLfqMfP3/Iem75CLGgNg8QFuzZj3 yTv/Kk2D8gMkvSNsP1dmZ8i2B3p75kV6hTvbU9Z8fS2P1rqi3DpbRilKXxw0wMdi gRE3r8yfcRCOhA7vjRe6o63DbadeDm0ZTepIcf8cjFtd9Bsq3cdS9TqUH//jMPI= =Rv4p -----END PGP SIGNATURE-----

4 12

[Dovecot] dovecot: ssl-params
by Frank Elsner 09 Oct '13

09 Oct '13

Hello *, what is the reason for this strange behaviour? May I ignore it? Oct 8 19:32:20 seymour dovecot: ssl-params: Generating SSL parameters Oct 8 19:32:29 seymour dovecot: ssl-params: SSL parameters regeneration completed Oct 9 07:01:05 seymour dovecot: ssl-params: Generating SSL parameters Oct 9 07:01:06 seymour dovecot: imap-login: Login: frank, 192.168.28.1, TLS Oct 9 07:01:06 seymour dovecot: ssl-params: SSL parameters regeneration completed Oct 9 07:01:07 seymour dovecot: ssl-params: Error: epoll_ctl(del, 7) failed: No such file or directory Oct 9 07:01:07 seymour dovecot: ssl-params: Error: epoll_ctl(del, 8) failed: No such file or directory Kind regards, Frank Elsner

1 0

[Dovecot] shared or acl or etc
by John Smith 09 Oct '13

09 Oct '13

Hello, I need help: [root@dovecot]# dovecot -n # 2.1.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login auth_use_winbind = yes auth_username_format = %u auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = * mail_access_groups = vmail mail_debug = yes mail_gid = 5000 mail_location = maildir:~/:LAYOUT=fs mail_plugins = " quota acl" mail_privileged_group = vmail mail_uid = 5000 mbox_write_locks = fcntl namespace { list = children location = maildir:%%h:INDEX=~/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 autocreate = Sent autocreate2 = Trash autocreate3 = Drafts autosubscribe = Sent autosubscribe2 = Trash autosubscribe3 = Drafts quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+100M quota_rule3 = Sent:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0666 user = vmail } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=5000 gid=5000 driver = static } valid_chroot_dirs = /home/vmail/ protocol imap { mail_plugins = " quota acl autocreate imap_quota imap_acl" } [root@dovecot]# grep -v '^ *$#.*$\?$' dovecot-ldap.conf.ext hosts = dc1.domain.local dc2.domain.local dn = CN=ldapsearch,OU=Service Accounts,DC=domain,DC=local dnpass = ****** auth_bind = yes auth_bind_userdn = %Lu base = OU=GroupOfCompanies,DC=domain,DC=local deref = never scope = subtree user_filter = (&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(|(mail=%Lu)(otherMailbox=%Lu)(sAMAccountName=%Lu))) user_attrs = sAMAccountName=home=/home/vmail/%L$, maxStorage=quota_rule=*:bytes=%$M pass_filter = (&(sAMAccountType=805306368)(sAMAccountName=%Lu)) pass_attrs = sAMAccountName=user,userPassword=password With these settings the domain users successfully authenticate and can receive mail from their mail_localtion, however there are a few users with the same email address, but different sAMAccountName These users use the same e-mail on all connected by imap. Tell me how to beat this situation?

2 1

[Dovecot] POP3 Setup help
by Thomas I Higgins 09 Oct '13

09 Oct '13

I am lost as to what I am missing. I am setting up dovecot 2.0.9 on a RHEL 6.4 machine as provided by my provider. I have IMAP up and running, and I have POP3 up and running. Testing confirms this. Also, if it makes a difference, I enabled dovecot as my LDA. Sendmail was setup as well due to our 1.x version using it and I though I had to. Anyway, everything is working perfectly with the services, except the mail is sending to the wrong location for POP. I am trying to use Maildir for both services, but it keeps delivering the POP3 mail to /var/spool/mail/u% instead of to Maildir as specified in the configuration files. I have rechecked every setting at least twice and still can't see what I am doing wrong. I suppose I can use mbox and redirect after making the appropriate namespace changes, but that has it's own potential drawbacks and seems more like a kludge than the correct way around this (unless I misunderstand how it should work). Can anyone point me in the right direction on how to fix this? Thanks in advance, Thomas Higgins

3 2

[Dovecot] cas proxy ticket as password
by b m 08 Oct '13

08 Oct '13

Hi everybody. Hi I'm tryingto use CAS for authenticating in dovecot. I have installed pam_cas and when I try castest i get "<cas:authenticationSuccess>" for my service (imaps://mywebmail.com) But when I actually try to login, dovecot uses the PT from the cas server as password. Any ideas what I'm missing? Thanks a lot.

1 0

Re: [Dovecot] Proxy to gmail not working
by Joseph Tam 08 Oct '13

08 Oct '13

On Mon, 7 Oct 2013, Alex Wanderley writes: > passdb { > args = proxy=y nopassword=y user=remotemail destuser=remotemail(a)gmail.comhost= > pop.gmail.com port=995 proxy_timeout=15 starttls=y > driver = static > } > ... > Oct 7 09:33:13 dserver dovecot: auth: Debug: client passdb out: OK > 2 user=remotemail proxy nopassword=y destuser= > remotemail(a)gmail.com host=pop.gmail.com port=995 proxy > _timeout=15 starttls=y hostip=74.125.142.108 pass=123456789 > Oct 7 09:33:13 dserver dovecot: pop3-login: Debug: Ignoring unknown passdb > extra field: nopassword > Oct 7 09:33:28 dserver dovecot: pop3-login: Error: proxy(remotemail): > Login for pop.gmail.com:995 timed out in state=0 (after 15 secs, > local=162.106.yyy.zzz:59282) Idle speculation, but remote port 995 usually means SSL type connection (i.e. dive right into SSL protocol), whereas "starttls=y" starts out in plaintext, and SSL negotiations starts after a STARTTLS directive. Looking at http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy methinks you want to replace "starttls=y" with "ssl=yes". Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Proxy to gmail not working
by Alex Wanderley 07 Oct '13

07 Oct '13

Hi, I've been trying to build a password forwarding proxy to Gmail without success... The SSL connection to Dovecot is happening no problem (as far as I can tell), but for some reason the conversation between Dovecot and Gmail is getting timed out. I know this is supposed to be simple... :-( But could somebody please give me some help by pointing what I'm not doing right? No matter how much I've been researching about this, I can't find the solution. Thanks a lot, Alex # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ listen = 162.106.yyy.zzz login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = proxy=y nopassword=y user=remotemail destuser=remotemail(a)gmail.comhost= pop.gmail.com port=995 proxy_timeout=15 starttls=y driver = static } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dserver port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } ssl = required ssl_ca = </etc/pki/tls/certs/ca-bundle.crt ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_client_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_client_key = </etc/pki/dovecot/private/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 7 09:32:51 dserver dovecot: auth: Debug: auth client connected (pid=25878) Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [162.106.xxx.yyy] Oct 7 09:33:13 dserver dovecot: auth: Debug: client in: AUTH 2 PLAIN service=pop3 secured session=oePRXijoMQCiat/X lip=162.106.yyy.zzz rip=162.106.xxx.yyy lport=995 rport=502 25 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 7 09:33:13 dserver dovecot: auth: Debug: static(remotemail,162.106.xxx.yyy,<oePRXijoMQCiat/X>): lookup Oct 7 09:33:13 dserver dovecot: auth: Debug: static(remotemail,162.106.xxx.yyy,<oePRXijoMQCiat/X>): Allowing any password Oct 7 09:33:13 dserver dovecot: auth: Debug: client passdb out: OK 2 user=remotemail proxy nopassword=y destuser= remotemail(a)gmail.com host=pop.gmail.com port=995 proxy _timeout=15 starttls=y hostip=74.125.142.108 pass=123456789 Oct 7 09:33:13 dserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 7 09:33:28 dserver dovecot: pop3-login: Error: proxy(remotemail): Login for pop.gmail.com:995 timed out in state=0 (after 15 secs, local=162.106.yyy.zzz:59282) Oct 7 09:33:34 dserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): remotemail, 162.106.xxx.yyy, PLAIN, TLS Oct 7 09:33:34 dserver dovecot: pop3-login: Debug: SSL alert: close notify [162.106.xxx.yyy]

3 2

[Dovecot] Replication: long detalys
by Lucas Rothamel - Eye Catching Webdesign 07 Oct '13

07 Oct '13

Hello everybody, I am running dovecot 2.1.7 on Debian Wheezy on two servers with replication set up, MTA is postfix. The idea is to have a redundant mail system so that when one server fails, users can continue using the other server (failover of POP/IMAP through DNS redirection). Servers are called srv06 and srv07: Below is the dovecot config, both servers have identical config, only the replica srv0x address is different. I read to put this line into 10-mail.conf and I did: mail_plugins = $mail_plugins notify replication My Problem: When E-Mail arrives on one server, it is only available on the other server many hours later. Same behaviour in both directions. This means I see different mailboxes via IMAP depending on which server I connect to - in theory I want the client not to be able to tell which server it is connected to. dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/%d/%n/Maildir mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@srv07.xxx quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota postmaster_address = mk@xxx } output of cat /var/log/mail.log | grep dsync: Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1522, file=1381075321.V902I19a2a66M626453.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1523, file=1381075381.V902I19a2bb2M737865.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1524, file=1381075441.V902I19a3185M959529.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1525, file=1381075501.V902I19a3187M989935.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1526, file=1381075561.V902I19a3188M971187.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1527, file=1381075622.V902I19a3189M60093.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1528, file=1381075682.V902I19a318aM231725.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1529, file=1381075741.V902I19a318bM353115.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1530, file=1381075801.V902I19a318cM609633.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1531, file=1381075861.V902I19a318dM392514.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1532, file=1381075921.V902I19a318eM521040.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1533, file=1381075981.V902I19a318fM611775.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1534, file=1381076041.V902I19a3190M734263.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1535, file=1381076101.V902I19a3191M850303.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1536, file=1381076881.V902I19a3192M362845.srv07.xxxxx:2,S) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1537, file=1380998413.V902I19a315bM206668.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1538, file=1380999043.V902I19a315cM413578.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1539, file=1380574384.V902I19a3146M616434.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1540, file=1381110251.V902I19a3186M993173.srv07.xxxxx) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Warning: Mailbox changes caused a desync. You may want to run dsync again. However, I cannot understand what this log wants to tell me? Please advise. Thanks. Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

2 1

[Dovecot] retr errors
by Bill Morgan 07 Oct '13

07 Oct '13

My ISP uses Dovecot and I have had an ongoing problem for a while using several email clients. Sometimes the response to a retr request is mal-formed. The expected response "+OK nnn octets" is not returned. The response looks like it started somewhere in the message headers. Sometimes a retry can clear the problem but I usually need to delete the first message via a putty session. The problem, when present, is always on the first message. Never seen it in the middle of a series of messages. This problem has been seen on different machines, different versions of Windows, at home and on the road. I have wireshark traces showing good and bad sessions.... ====================== stat +OK 93 1000437 retr 1 +OK 6946 octets Return-path: ..... ========================= retr 1 of blahblah(a)blah.com designates 2607:f8b0:4001:c03::235 as permitted sender) smtp.mail=blahblah(a)blah.com; dkim=pass header.i=(a)blah.com Reply-To: android-developers(a)googlegroups.com Precedence: list Mailing-list: ...... ================== My ISP has been non-helpful. Any ideas how I can track down the problem? Thanks Bill

5 6

[Dovecot] Yet another going from 1.2 to 2.X question: authentication
by Mauricio Tavares 07 Oct '13

07 Oct '13

So in 1.2.9 I had something like this: [...] socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtual # User running Dovecot LDA's deliver } } # Dovecot as SASL Auth socket listen { client { path = /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } } I see I can, per http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL, setup the sasl entry as # Dovecot as SASL Auth service auth { unix_listener /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } what about the lda? From http://wiki2.dovecot.org/LDA I take it would be as simple as service auth { unix_listener auth-userdb { mode = 0600 user = virtual # User running Dovecot LDA's deliver } } Am I correct?

2 3

[Dovecot] couple of errors on new setup
by Dean Guenther 07 Oct '13

07 Oct '13

I have stood up a new test mail server as an upgraded version of my existing mail server. I have been fairly consistently getting two types of error messages. I'm thinking they may be related permissions issues, but I can't figure out what their problem is. Oct 4 12:45:47 digory dovecot: imap(guenther): Error: file_dotlock_open() failed with file /home/guenther/mail/ForUs/.imap/Home/dovecot.index.log: Resource temporarily unavailable Oct 4 12:46:16 digory dovecot: imap(guenther): Error: file_dotlock_open(/home/guenther/mail/ForUs/PCS/.imap/PCS misc/dovecot.index.log) failed: Permission denied (euid=500(guenther) egid=500(guenther), access(/home/guenther/mail/ForUs/PCS/.imap/PCS misc/dovecot.index.log, 4) failed: No such file or directory) Here are my specifics: OS: CentOS 6.4 - 2.6.32-358.11.1.el6.x86_64 MailScanner: 4.84.6 Postfix: 2.6.6 DoveCot: 2.2.4 NFS v4 (both the mail spool and /home are NVS v4 mounts to file server) Here are the non-default settings: dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Fina auth_verbose = yes disable_plaintext_auth = no mail_access_groups = users,guenther mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/postfix/ssl/xxxxxxxxxx.crt ssl_key = </etc/postfix/ssl/xxxxxxxxxx.key userdb { driver = passwd } verbose_ssl = yes Thanks -- Dean Guenther

3 3

[Dovecot] Problems getting Squirrelmail and Avelsieve to connect to Pigeonhole
by Steve 06 Oct '13

06 Oct '13

Hi, I have been going around in circles trying to find the solution. Many others appear to have the same problem, but never a solution or explanation. I am running Dovecot 2.0.21 under Fedora 16. All components are running on the same server, whose IP address is shown as '192.168.x.y'. The dovecot -n output is: <quote> /SSH Secure Shell 3.2.0 (Build 267)/ /Copyright (c) 2000-2002 SSH Communications Security Corp - http://www.ssh.com// /This copy of SSH Secure Shell is a non-commercial version./ /This version does not include PKI and PKCS #11 functionality./ /Last login: Sun Oct 6 17:00:08 2013 from 192.168.2.196/ /[root@nsi-server2 ~]# /usr/sbin/dovecot -n/ /# 2.0.21: /etc/dovecot/dovecot.conf/ /# OS: Linux 3.6.11-4.fc16.x86_64 x86_64 Fedora release 16 (Verne) / /auth_debug_passwords = yes/ /auth_verbose = yes/ /auth_verbose_passwords = plain/ /log_path = /var/log/mail/dovecot.log/ /mail_access_groups = mail/ /mail_location = mbox:~/mail:INBOX=/var/mail/%u/ /managesieve_notify_capability = mailto/ /managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave/ /mbox_write_locks = fcntl/ /passdb {/ / driver = pam/ /}/ /passdb {/ / args = /etc/dovecot/users/ / driver = passwd-file/ /}/ /plugin {/ / sieve = ~/.dovecot.sieve/ / sieve_dir = ~/sieve/ / sieve_global_path = /var/lib/dovecot/sieve/default.sieve/ /}/ /protocols = imap pop3 sieve sieve/ /service imap-login {/ / inet_listener imap {/ / address = 192.168.x.y,localhost/ / }/ / inet_listener imaps {/ / address = 192.168.x.y/ / }/ /}/ /service managesieve-login {/ / inet_listener sieve {/ / port = 4190/ / }/ /}/ /service pop3-login {/ / inet_listener pop3 {/ / address = 192.168.x,y,localhost/ / }/ / inet_listener pop3s {/ / address = 192.168.x.y/ / }/ /}/ /ssl_cert = </etc/pki/dovecot/certs/dovecot.pem/ /ssl_key = </etc/pki/dovecot/private/dovecot.pem/ /userdb {/ / driver = passwd/ /}/ /userdb {/ / args = /etc/dovecot/users/ / driver = passwd-file/ /}/ </quote> On attempting to connect to the managesieve port from Squirrelmail, using the 'Filter' button i get the following error message: /*Could not log on to timsieved daemon on your IMAP server localhost.*/ /*Please contact your administrator*/ Running/*# /usr/sbin/ngrep -d lo port 4190 */produces the following trace: <quote> /[root@nsi-server root]# /usr/sbin/ngrep -d lo port 4190/ /interface: lo (127.0.0.0/255.0.0.0)/ /filter: (ip or ip6) and ( port 4190 )/ /####/ /T 127.0.0.1:4190 -> 127.0.0.1:35495 [AP]/ / "IMPLEMENTATION" "Dovecot Pigeonhole".."SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator/ / -i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave".."NOTIFY/ / " "mailto".."SASL" "PLAIN".."STARTTLS".."VERSION" "1.0"..OK "Dovecot ready.".. / /##/ /T 127.0.0.1:35495 -> 127.0.0.1:4190 [AP]/ / AUTHENTICATE "PLAIN" \{28+}.. / /##/ /T 127.0.0.1:35495 -> 127.0.0.1:4190 [AP]/ /c3RldmUAc3RldmUAbWFnaWNsaWs=.. / /##/ /T 127.0.0.1:4190 -> 127.0.0.1:35495 [AP]/ / NO "Invalid characters in atom"..NO "Error in MANAGESIEVE command received by server.".. / /###/ </quote> I hope that someone can provide a way to get the filter management working as I am more that happy with the way Dovecot and Squirrelmail are working, but just want to add server-side filtering, especially tagged mail produced by Spamassassin :) Many thanks Steve

2 1

[Dovecot] State of the FTS modules and packaging
by Benjamin Podszun 06 Oct '13

06 Oct '13

Hi there. I'm running a small (VPS) mail system just for myself for quite a while and want to support some friends and family now. For that I'm improving / documenting the setup. One thing I never cared to implement was FTS support. Looking at the options [1] now, I'm stuck. I don't want solr (no Java bashing here, I'm sure that's working awesome. But I don't want to pull all these dependencies in on my tiny VPS: Memory and disk will be as small as I can get away with). With that out of the way: What are my options? Squat: Why's squat deprecated? Did it stop working? Can someone shed some light on the original reasons for the deprecation? What are the risks to go with squat anyway? Clucene: That seems .. unusable. It would be my prefered choice (not deprecated, little dependencies), but .. it isn't packaged in deb based distributions (Debian, Ubuntu). It doesn't even _build_, because it doesn't use pkg-config to find the clucene includes (at least for 2.1.17) in these environments. Centos is even more out of date with 2.0.9. Given the experience above, is solr my only option to offer FTS? Can you guys share how you're having a stable base/os with a somewhat recent (and complete!) dovecot package? Thanks a lot & regards, Ben 1: http://wiki2.dovecot.org/Plugins/FTS

1 0

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 06 Oct '13

06 Oct '13

Since I still have to send mail from web, I may not be able to get this message as a reply to my previous mail, but it belongs to this same thread: http://www.dovecot.org/list/dovecot/2013-October/092810.html Some of the work I have now done. I can now easily, lest some hurdle shows up, use a script based on the one I mentioned (here it is again: http://wiki.dovecot.org/HowTo/RefilterMail ), but I used maildrop, having harkened to the advice by the author of Debian Reference, Osamu Aoki: http://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_the_remote… http://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_mail_deliv… So while, after connecting with the password, I wait some 5 or 10 minutes (the machines I install/clone Debian onto are old machines) for all the mail from the other Dovecot on the other machine, same MBO and all, as I explained in the previous message, again; I am preparing this before going online, I haven't see if there are any replies in the last maybe 40 hours)... me@mybox2:~$ getmail getmail version 4.43.0 Copyright (C) 1998-2012 Charles Cazabon. Licensed under the GNU GPL version 2. SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: read_all and not delete -- all messages will be retrieved each time getmail is run SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: Enter password for SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: The: me@mybox2:~$ getmail command that I issued has just churned out all the 2945 messages into my homefolder here. And this is the previously prepared ----%<-------------------------------------------------------- $ cat ~/.getmail/getmailrc [retriever] type = SimpleIMAPSSLRetriever server = mybox1.myfantasydomain username = mr mailboxes= ALL [destination] type = MDA_external path = /usr/bin/maildrop unixfrom = True [options] verbose = 2 delete = False read_all = True delivered_to = False message_log = ~/.getmail/Mrinet_refilter.log ----%<-------------------------------------------------------- Not much talk needed about the getmailrc above, because it's all in the getmail manual, faq, and places. Sure, I also, prepared .mailfilter, for the maildrop, the fine program that nicely put all mails where I decided I wanted them! ----%<-------------------------------------------------------- $ cat ~/.mailfilter # ~/.mailfilter # based on: # http://www.wonkity.com/~wblock/docs/html/maildrop.html TYPE="maildir" logfile "$HOME/.mailfilter.log" ECHO="/bin/echo" MAIL="/usr/bin/mail" MAILDIRMAKE="/usr/bin/maildirmake" REFORMAIL="/usr/bin/reformail" MBOX=($TYPE =~ /mbox/) MAILDIR=($TYPE =~ /maildir/) # use mbox by default DEFAULT="$HOME/mail" FOLDERS="$DEFAULT/" if ( $MAILDIR ) { DEFAULT="$HOME/Maildir" FOLDERS="$DEFAULT/." } if ( $MAILDIR ) { `${MAILDIRMAKE} "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS} folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # filter out duplicate messages `${REFORMAIL} -D 8192 $HOME/.duplicate.cache` if ( $RETURNCODE == 0 ) { log "File: (duplicate) ($SIZE)\n" exit } if (/^(To|Cc|Envelope-To|Delivered-To):.*(miro\.rovis@croatiafidelis\.hr)/) { MYFOLDERDOT="$MATCH2" MYFOLDER=`echo $MYFOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # handle mailing list messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\.\-]+)/ ) { LISTNAMEDOT="$MATCH1" LISTNAME=`echo $LISTNAMEDOT|sed 's/\.//g'` # don't create a folder for Mailman status messages, just deliver them if ( $LISTNAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER.$LISTNAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER.$LISTNAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}$MYFOLDER.$LISTNAME } to ${FOLDERS}$MYFOLDER } if (/^(To|Cc|Envelope-To|Delivered-To):.*(m.rovis@inet\.hr)/) { MYFOLDERDOT="$MATCH2" MYFOLDER=`echo $MYFOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } if (/^Return-Path:.*@(facebookmail\.com)/) { MY2FOLDERDOT="$MATCH1" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # handle Facebook groups/lists messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\-]+)\.+/ ) { LIST2NAME="$MATCH1" # don't create a folder for Mailman status messages, just deliver them if ( $LIST2NAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}.$LIST2NAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER}.$LIST2NAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.${MY2FOLDER}.$LIST2NAME } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } if (/^(To|From):.*(childrenofmedugorje@gmail\.com)/) { MY2FOLDERDOT="$MATCH2" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } if ( /^From:\s*EWTN\s*<(wings(a)ewtn.com)>/ ) { MY2FOLDERDOT="$MATCH1" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } # handle mailing list messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\.\-]+)/ ) { LISTNAMEDOT="$MATCH1" LISTNAME=`echo $LISTNAMEDOT|sed 's/\.//g'` # don't create a folder for Mailman status messages, just deliver them if ( $LISTNAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER.$LISTNAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER.$LISTNAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}$MYFOLDER.$LISTNAME } to ${FOLDERS}$MYFOLDER } ----%<-------------------------------------------------------- Here is my .muttrc, to show nearly all the components of my setup, which I hope to be using for mail.. I really understand only now, that the basis is really e-mail, not the browsers, or other things, for the life on the internet... That the basis is really e-mail these days on Russia Today said also Ladar Levison, the Lavabit.com founder that fought for his users' privacy all the way to losing his business. I admire people of such integrity and humanity! Not like the Canadian Hushmail which sold NSA's whistleblower Thomas Drake... Who says I don't like people from NSA. I highly regard him, and Ross Tice, and some others! It's the usual perception most of people have, that email is less important/less advanced, whatnot, not just me, but not delving into it here. I'm yet to see if my "broader picture" provoked any angry reactions... (Note while proofreading: No reactions, neither good nor bad, I just saw.) But I hope this will be technical enough now and to the completion of this thread... I haven't found anywhere other then on the www.wonkity.com, the address that I gave above, examples for maildrop, so I hope other users will find mine useful, which will be source of content for me... I invested time and effort to arrange those lines. Just let me give you the .muttrc (and completely without the unrelated settings for this story), because the dominant talk is about the maildrop, not the other two configuration files. ----%<-------------------------------------------------------- $ cat ~/.muttrc set mbox_type="maildir" set spoolfile=imaps://me@mybox2/ set folder=imaps://me@mybox2/ set ssl_starttls=yes set ssl_force_tls=yes set imap_passive ----%<-------------------------------------------------------- What I got with that maildrop in my Dovecot, and it would need some functions set, because I used too much pastion to get same work repeated on different input, but I don't know hot to do it, and it is by no means urgent, since I achived all the refiltering and in the way I wanted it, is I decided I wanted all mail in folders by the e-mail address by which I recieve them, and used the usual List-Id header to sort mails into up to two levels deeper, exactly for the famous yukky Stasimail, oh, sorry! I meant zucky Facebookmail. Also it would be great to check for existance of a foled before attemting to create it... It hasn't been yet urgent to me, and I am rather exhausted now, not only from this coding, but also because I got the tumbleweed pollen allergy (American native plant, brought here as ornamental plant in Columbo's time, but nauseating/suffocating (but rarely to death), fever causing to lots of people in Europe, through allergy, so I was also bed-ridden much of the time... and I am not well neither as I am writing this, so not much of proofreading before sending this. And to check for existance I guess it's with ... ~= ( some expression) of folders, so not to get an error on every fail attempt at creating folders as Warren Block explained here: http://www.wonkity.com/~wblock/docs/html/maildrop.html#_em_maildir_em_compa… , and maybe improve those lines by using some foreach loop or some such means... Ah, notice that I start with no folder whatsoever, neither mbox not maildir type, I let the script do it all in my /home/mr! The .mailfilter settings above for maildrop upon completion of refiltering gave me, in my mutt, not going back to no GUIs no more, thanx so kindly!, but no love lost there, with all your Java and Javascript and stinking popup windows out of nowhere and rummiging in my machine which I in no way provoked, let alone initiated, and most certainly not acquiesced to... So this is, with a few copy-pastes (just the Mutt fine colors will be missing): y:Exit c:Chdir m:Mask ?:Help 1 IMAP + INBOX/ 2 IMAP + mirorovis@croatiafidelishr/ 3 IMAP + mirovis@inethr/ 4 IMAP + mrovis@inethr/ /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [imaps://me@mybox2/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP dovecotdovecotorg /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mirorovis@croatiafidelishr/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP dmo-discussiondeb-multimediaorg 3 IMAP gnewsense-usersnongnuorg 4 IMAP helpdeskiskonhr /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mirovis@inethr/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP alsa-userlistssourceforgenet 3 IMAP blfs-supportlinuxfromscratchorg 4 IMAP childrenofmedugorje@gmailcom 5 IMAP cinelerraskolelinuxno 6 IMAP cjeniklosthr 7 IMAP dailydavelistsimmunityinccom 8 IMAP debburn-devellistsaliothdebianorg 9 IMAP + facebookmailcom/ 10 IMAP ffmpeg-userffmpegorg 11 IMAP gnewsense-usersnongnuorg 12 IMAP listalosthr 13 IMAP mencoder-usersmplayerhqhu 14 IMAP mplayer-usersmplayerhqhu 15 IMAP userslistsclaws-mailorg 16 IMAP wings@ewtncom 17 IMAP wireshark-announcewiresharkorg 18 IMAP wireshark-userswiresharkorg /\ /\ /\ /\ /\ /\ /\ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mrovis@inethr/], File mask: !^\.[^.] It's this last directory, i.e. this e-mail address that has the most of the folders. So I'll show how I got all the Facebookmail in one folder, and devided by its' groups/lists you name what they are. y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP 109806486481 3 IMAP 114674985270726 4 IMAP 116954758434576 5 IMAP 132773866800887 6 IMAP 141591592620540 7 IMAP 147623871992079 8 IMAP 148721478521575 9 IMAP 158927160843505 10 IMAP 166374096744320 11 IMAP 177486422318814 12 IMAP 178566045493622 13 IMAP 191938787541916 14 IMAP 195731330459694 15 IMAP 199083346818377 16 IMAP 203424869671315 17 IMAP 248203298232 18 IMAP 259057640810411 19 IMAP 312893169439 20 IMAP 37080471529 21 IMAP 77789534513 22 IMAP australiacroatiaunited 23 IMAP domovinausrcu 24 IMAP hrperoistine 25 IMAP hrvatirimokatolici 26 IMAP hrvatskastraza 27 IMAP nacionalist 28 IMAP stopkrscanofobiji 29 IMAP zakonoovrsi -- Mutt: Directory [=mrovis@inethr/facebookmailcom/], File mask: !^\.[^.] I didn't need any rudimentary ASCII drawing to represent the blank lines cut out, because this is all the Stasi lists/groups here. The fact that some are named in numbers and not in [a-z] is only because that is the first part of the address, before @facebookmail.com part. Not touching that, no need to spend time on those... If there is some user who would like to have any more explanaion on this, I can try and tell more, but I know most of the users here know more and can do better that I, so I leave the talk now. I'll take a few looks back to see if I got any replies, just I can't do it in very frequent periods at all. I also have a few issues probably for the Mutt people to solve, the issues I suspect are with Mutt, but they are not urgent either. And also, not major issue, I tried sticking :DIRNAME=mAildir to the end of my mail_location line, but it simply didn't work, I mean, as per: http://wiki2.dovecot.org/MailLocation/Maildir I will try and get the stunnel to get my outgoing mail on the 465 port with TLS, but that is not an issue related here at all I think. Thanks again to you fine developers for these great programs. Timo Sirainen, you are greatly appreciated here, and my respect for your fine country Finland, and for your nation! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] fail2ban
by Nick Edwards 05 Oct '13

05 Oct '13

For dovecot 2.1 as per wiki2, is this still valid? noticed a problem before and saw it does seem to be triggering, I use: maxretry = 6 findtime = 600 bantime = 3600 and there was like, 2400 hits in 4 minutes, it is pointing to the correct log file, but I am no expert with fail2ban, so not sure if the log format of today is compatible with the wiki2 entry filter.d/dovecot.conf [Definition] failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ignoreregex =

4 7

[Dovecot] Fixing Timestamps
by LuKreme 05 Oct '13

05 Oct '13

I have a user with a lot of email (A LOT of email, probably over 500,000 emails). Recently, several thousand messages of his were lost, and I pulled them out of the backup archives (zip files containing each days emails in an mbox) that are created on his account and fed them into his procmail scripts and they were all processed just fine and ended up in the right directories. Except. The messages were from 6 months back, and the messages now show up in his mail client with the time stamp of the date they were restored, and not the date that shows up in the headers of the message. Anything I can do? -- I AM NOT A LICENSED HAIRSTYLIST Bart chalkboard Ep. AABF04

5 8

[Dovecot] Dovecot sending quota warning to MAILER-DAEMON
by Mathieu R. 05 Oct '13

05 Oct '13

Hello, i'm testing quota now, and dovecot is not sending quota warning to the user, but to MAILER-DAEMON, wich obviously give me an error. here is my 90-quota.conf http://paste.debian.net/50580/ dovecot 2.1.7, on debian stable any idea ? -- Mathieu R.

1 1

[Dovecot] On mailboxes, separators, and dovecot2
by Mauricio Tavares 04 Oct '13

04 Oct '13

While I was running dovecot 1.2.9, I had my mailboxes using the old Courier IMAP format. i.e. my mailboxes would look like INBOX.Orders.Scams Going to dovecot 2 (but not 2.1), I see to have a few questions: 1) It seems I would device my mailbox thingies in 10-mail.conf: namespace inbox { inbox = yes separator = . location = prefix = INBOX. type = private mailbox SPAM { auto=subscribe special_use = \Junk } mailbox Trash { auto=subscribe special_use = \Trash } mailbox Sent { auto=subscribe special_use = \Sent } } but how would I prepresent my INBOX.Orders.Scams folder? Something like mailbox Orders.Scams { auto=subscribe } perhaps? 2) Reading (am I literate?) through http://wiki2.dovecot.org/Namespaces, it seems having separator = . is not only outdated but also a bad idea (but, I had child mailboxes as shown above). Could anybody elaborate one that? And which clients still do LSUB *?

1 0

[Dovecot] version 2.2.6 breaks compiling on Solaris 10 sparc
by Jake Goerzen 04 Oct '13

04 Oct '13

Hello, I maintain the dovecot package at opencsw.org. The latest release of dovecot verison 2.2.6 has some changes to lib-http which is breaking compiling on Solaris 10 sparc (though x86 builds successfully). Here is part of the compiler output while building: libtool: compile: /opt/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-dns -I../../src/lib-ssl-iostream -I/opt/csw/include/mysql -I/opt/csw/include/postgresql -I/opt/csw/include -xO3 -m32 -xarch=sparc -I/opt/csw/include -c http-header-parser.c -KPIC -DPIC -o .libs/http-header-parser.o "http-header-parser.c", line 264: warning: statement not reached "http-header-parser.c", line 281: warning: argument #3 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/istream.h", line 152 argument : pointer to unsigned long long "http-header-parser.c", line 317: warning: argument #2 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/buffer.h", line 93 argument : pointer to unsigned long long and then later on a linking error: /bin/bash ../../libtool --tag=CC --mode=link /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -no-undefined -m32 -xarch=sparc -L/opt/csw/lib -o test-http-url test-http-url.o http-url.lo ../lib-test/libtest.la ../lib/liblib.la -export-dynamic -lrt -lnsl -lsocket -lsendfile libtool: link: /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -m32 -xarch=sparc -o test-http-url test-http-url.o .libs/http-url.o -L/opt/csw/lib ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -lrt -lnsl -lsocket -lsendfile Undefined first referenced symbol in file http_header_field_find .libs/http-url.o http_header_field_get .libs/http-url.o http_header_get_fields .libs/http-url.o ld: fatal: symbol referencing errors. No output written to test-http-url version 2.2.5 and previous releases of dovecot have compiled successfully on both Solaris sparc & x86. Regards, jgoerzen(a)opencsw.org

3 4

[Dovecot] Can sieve filter mail based on emails earlier in the thread?
by Hugh Davenport 03 Oct '13

03 Oct '13

Basically I want the following scenario: Subscribe to lots of mailing lists - each filtered into separate folders When I participate in a thread (by starting it, replying to it, or ... setting a flag on an email in the thread) - filter into the particular mailing list folder - AND filter into INBOX (or another folder of my choosing) I'm thinking for this, the first two can have rules that take into account In-Reference-To and using my domain. But the third case of using a flag... that seems to require referencing earlier emails in the thread. Is this possible in sieve? Or am I barking up the wrong tree? I believe gmail can do it, but who knows what they use for their filtering... Thanks for any help anyone provides! Cheers, Hugh

2 1

[Dovecot] Proxy to gmail help
by Alex Wanderley 03 Oct '13

03 Oct '13

Hello, I understand the matter of using Dovecot as a forward proxy to Gmail is very popular (and even trivial), but my lack of Dovecot experience took me to at point where I truly need your help... I'm starting my task by trying to have something simple, where I can test connectivity to Gmail by sending a telnet to our Dovecot server. The Dovecot server accepts the telnet request, but for some reason (and here I guess is something related to SSL/TLS), I can't get to Gmail. Here my configuration and logs/outputs: ==> OS: * I'm using an old Centos 5.8 server as a proof of concept. ############################################################# ==> Dovecot configuration: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = XXX.XXX.XXX.XXX login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = /etc/dovecot/sql.conf driver = sql } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dovecotserver.<full domain> port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } shutdown_clients = no ssl_ca = /etc/pki/dovecot/certs/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes ############################################################# ==> sql.conf file driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=mysql user=root password=xxxxxx password_query = SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = '%u' ############################################################# ==> DovecotProxy table mysql> select * from DovecotProxy where user = 'MYUSER'; +-------------+---------------+-----------------------+------------------------------------------------+-------+ | user | host | destuser | password | proxy | +-------------+---------------+-----------------------+------------------------------------------------+-------+ | MYUSER | pop.gmail.com | MYUSER(a)gmail.com | {MD5-CRYPT}$1$L824LVh4$r.hyZ icsE5tmGaeJrY/dw/ | Y | +-------------+---------------+-----------------------+------------------------------------------------+-------+ ##>> I understand "proxy" and "password" are not required there. That happened for testing. ############################################################# ==> Telnet session: xxxxxx [/tmp] > telnet dovecotserver 110 Trying XXX.XXX.XXX.XXX... Connected to dovecotserver. Escape character is '^]'. +OK Dovecot Ready <6111.1.524dad13.VYOVkhqfe1Ox7Wz+VfogMg==@dovecotserver> user MYUSER +OK pass PASSWD -ERR Account is temporarily unavailable. quit +OK Logging out Connection to dovecotserver closed by foreign host. ############################################################# ==> Logged messages in /var/log/mailllog: Oct 3 12:23:02 dovecotserver dovecot: master: Warning: Killed with signal 15 (by pid=26790 uid=0 code=kill) Oct 3 12:23:53 dovecotserver dovecot: master: Dovecot v2.2.5 starting up (core dumps disabled) Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: auth client connected (pid=26810) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=/IH8S9rnzACiat/X lip=162.106.XXX.YYY rip=162.106.XXX.ZZZ lport=110 rport=37836 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: cache(MYUSER,162.106.223.215,</IH8S9rnzACiat/X>): miss Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: sql(MYUSER,162.106.XXX.ZZZ): query: SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = 'MYUSER' Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client passdb out: OK 1 user=MYUSER host=pop.gmail.com destuser= MYUSER(a)gmail.com proxy starttls=Y port=995 nopassword=Y hostip=74.125.142.108 pass=XXXXXXXXX Oct 3 12:24:30 dovecotserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 3 12:25:00 dovecotserver dovecot: pop3-login: Error: proxy(MYUSER): Login for pop.gmail.com:995 timed out in state=0 (after 30 secs, local=162.106.XXX.YYY:51196) Oct 3 12:25:12 dovecotserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): MYUSER, 162.106.XXX.ZZZ, PLAIN ==> Something that caught my attention here: "....proxy starttls=Y..." shouldn't look like "...proxy=Y starttls=Y..." ??? I didn't see "...proxy=Y..." even after setting the sql query like "...'Y' as proxy...". ############################################################# If you had the patience to read this far, thanks a lot for trying to help... Alex

1 0

[Dovecot] How to configure statistics tracking
by Bruce Marriner 03 Oct '13

03 Oct '13

I'm trying to configure the dovecot statistics tracking option with Dovecot 2.1.12 on FreeBSD 9.1-RELEASE. I've seen on the wiki page the configuration settings needed for this but it does not say which configuration file these settings should be added to. http://wiki2.dovecot.org/Statistics I was hoping someone could tell me which file these settings should be added to? Do they all just go into the same file or different files? I have a primary dovecot.conf file then inside conf.d/ there are dozens of files that hold the configuration settings for all the different parts of dovecot. Would I just add all of these settings into a conf.d/stats.conf file that would be pulled into the main configuration? Does it matter what order the (10-stats.conf, 20-stats.conf, etc) the file is set for? Thanks.

3 2

[Dovecot] Username issue with Dovecot LDA, IMAP and Winbind Authentication
by Laz Peterson 03 Oct '13

03 Oct '13

Hi there Dovecot community -- I'll try to make this short. Here's the setup … Ubuntu 12.04, Postfix, Dovecot, along with Amavis/Clamd/Spamassassin. Postfix is currently receiving emails for virtual users in multiple domains, all of which are authenticating through Winbind to Windows AD servers. The users log in to the POP/IMAP/SMTP services using the format user(a)domain.corp (the internal domain, not the external mail domain). The domains are all in the same forest, but there are many different domains to authenticate against. Dovecot is currently handling POP, IMAP, and authentication. Postfix uses a MySQL database to map the external email domain to the internal AD domain, for example domain.com -> domain.corp. Postfix also queries the same SQL database for where to save the messages -- /home/vmail/domain\user -- I have the SQL query strip off the ".corp". I had to do this because pam_winbind returns the usernames as "DOMAIN\user" upon successful Dovecot authentication, instead of "user(a)domain.corp", which ends up invalidating all of the %u, %n, and %d variables. On the user side, after successful auth, I can only define %u and %n in my Dovecot configuration -- %d is null, %u is "DOMAIN\user", and %n is "DOMAIN\user". (I use %Lu or %Ln to make it all lower-case.) With this, I am able to authenticate users off of multiple domains, have the mail delivered to a folder that is also accessible to the user when they log in. It serves its purpose. Here's my problem. I am trying to now integrate Pigeonhole and ManageSieve using Dovecot-LDA specified by "virtual_transport", and this is where things get confusing. Dovecot IMAP/POP/SMTP auth notes the user account to be "DOMAIN\user", while Dovecot-LDA receives the email to user(a)domain.com, noting the user account to be "user(a)domain.corp". The same arguments for userdb in "auth-system.conf.ext" are used by both Dovecot when user is logging in for IMAP/POP/SMTP and Dovecot-LDA when it is storing the mail. Because of the way pam_winbind returns the usernames without being able to use %d anymore, I cannot seem to get the same behavior for both sides of Dovecot. For example, if I set home and maildir to "/home/vmail/%Ln", Dovecot-LDA delivers emails into the folder "/home/vmail/user(a)domain.corp" and Dovecot IMAP/POP looks in "/home/vmail/domain\user". If I set the home/maildir to "/home/vmail/%Ld/%Lu", Dovecot-LDA delivers emails into the folder "/home/vmail/domain.corp/user" and Dovecot IMAP/POP looks in "/home/vmail/\/domain\user". So, I seem to be thoroughly unable to get something here that works … The closest I can get is setting home/maildir to "/home/vmail/%Ld\%Lu", but that now gives the LDA side "/home/vmail/domain.corp\user" and the IMAP/POP/SMTP side "/home/vmail/\\domain\user". If I am able to get pam_winbind to return "user(a)domain.corp" instead of "DOMAIN\user", I'd be fine. Or, if I could set the home and maildir locations separately for Dovecot-LDA and Dovecot, I would also be okay. Any suggestions? I know this is probably a Winbind limitation, but I do not know a thing about working with PAM authentication. I tried to compile and install a pam_regex module (which seems to not be offered as a native package in Ubuntu), but it gives errors after adding that to my PAM configuration. I'm stumped. Please let me know if I can include my configuration for either Postfix or Dovecot. Thank you so much for any help. ~ Laz Peterson

1 2

[Dovecot] understanding user_attrs and mail_uid/gid
by Vincent Zakofski 03 Oct '13

03 Oct '13

Hello, I'm trying to understand what's the difference between those parameters. In my dovecot.conf in the global section I have a definition of mail_uid and mail_gid. In my LDAP configuration used by passdb and userdb, I have a definition for user_attrs= uidNumber=500,gidNumber=8. Here is a part of my configuration files (dovecot version: 2.1.7) dovecot.conf mail_gid = 8 mail_uid = 500 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } dovecot-ldap.conf user_filter = (&(objectClass=posixAccount)(mailLocalAddress=%n)) user_attrs = uidNumber=500,gidNumber=8 So everything works fine when all those parameters are present in my configuration files. If I suppress one of them nothing is working (mail reading or delivering). Can someone tell me where I can find a definition of those arguments, if found nothing relevant on the wiki. Thanks,

1 0

[Dovecot] sieve notify and lmtp
by Lampa 02 Oct '13

02 Oct '13

Hello, i've setup sieve script which send notify to user (user(a)domain.com) But user(a)domain.com is alias user(a)domain.com and user(a)anotherdomain.com. LMTP delivers notification only to user(a)domain.com but not to user(a)anotherdomain.com. How to force send notification over smtp (which will be delivered to both) or i must use to=user(a)anotherdomain.com in notify ? Thank you for your advices. Lampa

2 1

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 02 Oct '13

02 Oct '13

Hi! My plea to readers: =================== Pls., people who only want strictly technical issues to read, and frown at any broader context regardless how intrinsically related, but not strictly technically related, it might be, skip all the way, all the way to, search for exact words: "strictly technical" or visually, find two lines of sole "===" characters. Thank you! Upon umptieth failure, and having cloned the system onto another same arch, much more: same MBO-model box (cloning and restoring clean is my defence to get the system into as clean a state as can be, after any longer time online --I had had systems comprimised, and now I am a little paranoid)... So, after weeks of some failures in some phases of installations of dovecot and friends (as explained further in this text), I cloned the same system, but from previously taken clean backup, used it some time, and now I want to update the mailbox back because now the first system is in clean state, having I restored from clean backup... This is a Debian weekly testing install, which I clone btwn two same MBO-model boxes to keep it as clean as a non-expert user like me can have it... To a large extent I do trust installing and update/upgrading my systems from the weekly builds (but hey, why don't they PGP-sign those as kernel tarballs and as Grsecurity or Tor-browser tarballs are signed? any Debian developer reading this, why not?)... because I can check with some trust the weekly builds' sums for integrity, but how and why could or would I trust simply installing anything straight from the internet? By cloning (I used to dd disk dump when cloning, but nowadays it seems faster and reliable enough with Sysresccd's fsarchiver, so I dd just the small boot partition), by cloning I keep the system as close to clean as those non-pgp-signed weekly builds allow... Now add to that that the real FFmpeg is not allowed into Debian, and I am a fan of it (I very much use it, it's running almost all the time, on some or other of my systems), but you have to get it through deb-multimedia.org if you want it on Debian (what freedom is that, banning programs from official repositories?!)... and add to that that I want Grsecurity/Pax at all cost, in my system, and not: http://www.nsa.gov/research/selinux/ which I don't want in my system, at all cost, but to which the Debian current leadership seems to be total-blind-fidelity bound to... Add those and you get pretty much all the basic ingredients of my fight for freedom and true privacy which are layed siege onto in the GNU/Linux Operating System and the few related other free OS's, in most of its flavors and branches and deployments of the day, from the outside and also from the inside. Because even with the long-delayed-in-updating gNewSense, for insufficient developer power (I mean: too few), probably, what's the use of the fine deblobbed kernel if they put SELinux into it? Where's freedom with what I suspect can not be other than fake security with surreptitious surveillance? (BTW, go and ask people, but not loudly, who compile their Gentoo's --there' a link to my short post on forums.gentoo.org a few lines below-- like I compile (on other systems of mine), only a minority of very uninformed or some special entities' aficionados use anything other than Grsecurity on their Hardened Gentoos --and Gentoo is unquestionably the leader in hardening-- it's not just me, it's only that I am loud about it)... But I also tried to call this issue to GNU-freedom seeking people's attention such as here: https://lists.nongnu.org/archive/html/gnewsense-users/2013-09/msg00001.html and entire thread: Grsecurity on gNewSense, but for real? I didn't mean to dwell on these issues here, and it is not the reason I write my messege to dovecot-mailing list, but this is the broad perspective of my, and I am sure not only my case, of my deployment of dovecot and broadly these are the reasons why I deploy it on my system. No, this broader picture I don't think is not off-topic. I did think hard about it... No, I believe it is good to mention these issues in this post-Snowden era when the scale and scope of total surveillance can not be successfully sneered and scoffed at and dismissed, like some "exceptional" (Obama talking to the U.S. of A. nation in September 2013, in his quest for support, thankfully lacking, of then being planned Iraq-2003-like-in-pretence-and-lies attack-to-be on Syria)... like some "exceptional" people would want it (that's the Gentoo Forum's link mentioned above)... http://forums.gentoo.org/viewtopic-t-967806.html A case of actual protection of my Gentoo box by Grsecurity At least these issues should not be anymore successfully sneered and scoffed at and dismissed, but we're all less and less free as mankind... And, since I don't connect to my SOHO network the box which I open to the internet, I have mails to refilter into the very probably clean cloned box... And I need to refilter using dovecot (which I finally got to work)... These lines, all the dozen or so paragraphs from the beginning up unto here, do appear first for reading, but are written just about all the very last, after the rest of the text below has already been written, except the final proofreading notes intersparsed). ============================================================================= ============================================================================= Now nearly only strictly technical I go, for the sake of people who prefer so. That maildir mailbox being all poorly sorted (I must have made other mistakes, I am just still new and generally lack expertise in all these true mailer tools; but very impressed I am with them! thanks Sirainen, thanks Varshavchik, thanks MuttDude, thanks Venema, and all, I admire you people!), so I removed the old Maildir and I made this scriptlet: This is my configuration: me@mybox:# dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10.9-grsec-130827 x86_64 Debian jessie/sid auth_debug = yes mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / } namespace { location = maildir:~/Maildir prefix = separator = / } passdb { args = dovecot driver = pam } protocols = " imap" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify } me@mybox:# cd ~ maildirmake Maildir maildirmake -f Drafts Maildir/ maildirmake -f Sent Maildir/ maildirmake -f someFolder1 Maildir/ maildirmake -f someFolder2 Maildir/ maildirmake -f someFolder2.Facebk Maildir/ One note: pls. don't get me wrong, I hate Stasibook (Facebk above is less typing, but it's for Facebook mail), I just would like to learn enough to teach and get at least some of my friends who "socialize" there out of reach of those stasi-like entities that Zuck and his Gang serve all the "socializing" users' data to, which is so hard a task for me to do, but which desire keeps me moving in this steep-learning-curve quest of mine that got me this far where I am now, with dovecot and other tools. That is the reason I am still subscribed there, to be able to follow what my people do, occasionally. I'm not logging into that walled-off sewage-like stasi hole featuring as virtual garden! I saved that scriplet as maildirmake_00.sh, then $ chmod 755 maildirmake_00.sh and ran it. me@mybox:~$ ./maildirmake_00.sh And I have, I guess so far, all correct: me@mybox:~$ ls -la Maildir/ total 40 drwx------ 10 mr mr 4096 Oct 1 23:06 . drwxr-xr-x 33 mr mr 4096 Oct 1 23:06 .. drwx------ 2 mr mr 4096 Oct 1 23:06 cur drwx------ 5 mr mr 4096 Oct 1 23:06 .Drafts drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder1 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2.Facebk drwx------ 2 mr mr 4096 Oct 1 23:06 new drwx------ 5 mr mr 4096 Oct 1 23:06 .Sent drwx------ 2 mr mr 4096 Oct 1 23:06 tmp me@mybox:~$ I really hope no mistake I made so far. someFolder1 and someFolder2 are for two different servers I get my mail from. Will probably need to tell some more about them later if the thread develops, when the problems I have are more fully explained/solved/expanded. Now the dovecot. It has, in Debian, and I'm on weekly testing branch, currently up to date, actually last week's, that's just a little behind... It has 15-mailboxes.conf like this (only pasting non-commented lines), /etc/dovecot/conf.d/15-mailboxes.conf namespace inbox { mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Trash { special_use = \Trash } mailbox Sent { special_use = \Sent } } [ here is a time lapse of cca 5-10 hours ] Well, since I began writing, I realized that I can get the namespace to work properly, but exactly only without the above: /etc/dovecot/conf.d/15-mailboxes.conf (I mean with all the lines above commented out) It kept telling me this (in the logs I find): Error: user me: Initialization failed: namespace configuration error: Duplicate namespace prefix Let me first say that it's I finally got closer to solution, and saw directories with mutt as ~/Maildir/this/that instead of what maildirs are: ~/Maildir/.this.that only after getting the following in the 10-mail.conf /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota namespace { separator = / location = mbox:~/mail:INBOX=/var/mail/%u inbox = yes hidden = yes list = no } namespace { separator = / prefix = location = maildir:~/Maildir } It's what is recommended in <Namespaces.txt> on the wiki and maybe other places. But only after the 15-mailboxes.conf was completely commented out. Now I can view my mailbox from anywhere on my network, I guess (tried from the other box and from the same box with mutt, it works!). So namespace is solved I guess. However, for my mail system to completely function in the right GNU/Linux way, I have to get more GNU good things together in harmony. Naming some of the other dovecot friends: *getmail*, which hands on to *maildrop* for delivery... And *postfix* with TLS for sending mail, via 465 port, *stunnel*... That bit feels daunting to me, really... This namespace thing also cost me a few ounces of raw nerves and some occasional darkness in feelings... The worse is still before my mind constantly: still not being able to send mail the normal way, since the normal way is simply not in cleartext anymore... I probably could just fine sent to port 25, but after all the political persecution and censorship that as homeland-living dissident I suffered and still suffer, I don't see that as a solution at all... The obscured morale that I was upon me for a while is due to that stunnel connection not being yet set up... So, sending this from the web yet, I guess (prepared upfront, jealous of my time fixing systems that suffer from strange behavior or break whenever I'm longer online)... However, since I have been writing this not really hoping to get the namespace working in the process (quite a few days I spent on it, and weeks on mail system altogether, I can only hope to get the stunnel right if I really study it as if attending university classes, I'm afraid, just like the hurdles that I went finally past cost me real studying your manuals, my GNU freedom heros!)... ...And this message I having had started some five or ten hours ago [ before the final broader picture paragraphs that are all in the beginning part of the message; this very note is at the time of the very last proofreading ], now I see that I went different direction before discovering the setup for namespace that worked for me. How I used maildirmake (it's the maildrop's not the dovecot's one) I thought but now see doesn't probably have much to do with the solution for namespace I found. I leave it there though, because I need to fix the mailbox by refiltering it, with the aid of the dovecot server, similar to how it is explained in: http://wiki.dovecot.org/HowTo/RefilterMail Because I got some syntax wrong in ~/.mailfiler for the maildrop MDA, and then I got some of those wrongly named (numbered, no a-z, only 0-9 digits in names) fake mailing-list folders that can be seen in my post on mutt mailing-list: http://marc.info/?l=mutt-users&m=138021971816188&w=2 (the .muttrc however is completely different now, sure, than in that link) I hope the main, the namespace dovecot part of this message may elicit someone's advice, if they got past that phase with the 15-mailboxes.conf at its default. Or it is explained in the manuals I need to give a second or a third read to understand them... And I'll be back to report if I made ordered mails in my Maildir right with the refiltering. Just pls. allow time, I'm a late adopter, I'm 56 years of age, can't make these things as quick as you youngsters do it. Thanks for the fine Dovecot mail server! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] LDAP for passdb and SQL for userdb
by Bambero 02 Oct '13

02 Oct '13

Hello Is it possible to setup double backend ? ldap for auth only and SQL for userdb information(quota,maildir etc) ? Now I'm using SQL backend and configuration looks like this: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Can I do something like: passdb { driver = sql args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Should I leave: userdb { driver = prefetch } Bambero

2 1

[Dovecot] Older messages not showing up after reinstall
by dclist 02 Oct '13

02 Oct '13

I reinstalled Ubuntu, keeping my maildir directories. Messages older than the date of reinstall are not being served by dovecot. The messages show up normally in my MUA if I load the maildir directory directly. I assume there is a file somewhere where dovecot is keeping a list of seen messages which I need to reset. The old messages appear to be in dovecot-uidlist. I tried moving dovecot.index* to no effect. How do I get the pre-reinstall messages to be served by dovecot? # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-31-generic x86_64 Ubuntu 13.04 auth_debug = yes auth_debug_passwords = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/password driver = passwd-file } passdb { driver = pam } plugin { fts = squat fts_squat = partial=4 full=4 } protocols = imap service auth { user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } userdb { driver = passwd } protocol imap { mail_plugins = fts fts_squat } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] Dovecot disconnecting while downloading large attachments
by Marc Casas - Girotec 01 Oct '13

01 Oct '13

Hi, We're using Dovecot 1.2.15 with Debian Squeeze. The mail server is working properly (we use both POP3 and IMAP) with normal messages, but if we try to download a large message (more than 20mb) using POP3, the server disconnects and our application fails. It's possible to change this behavior? How can we setup Dovecot so it disconnects after 20 or 30 minutes (I think now is disconnecting after 10 minutes) of "inactivity"? Regards, Marc

1 0

[Dovecot] Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed
by Kamil Andrusz 01 Oct '13

01 Oct '13

Hello List! I've encountered an error after upgrading my system and dovecot. I guess it's probably a result of a configuration problem, however after quite some tinkering with configuration I am still missing the source of the problem. Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Fatal: master: service(imap): child 23203 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) The problem above appears with both dovecot 2.2.5 and 2.2.6. It did not happen while using dovecot 2.1.12. Operating system is OpenBSD 5.4-current and AMD64. FS type is FFS (default for OpenBSD). Output of dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.4 amd64 auth_mechanisms = plain login default_process_limit = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mmap_disable = yes namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = inbox/ type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh protocols = imap pop3 lmtp sieve service auth { unix_listener /var/run/dovecot/auth-master { group = virtuals mode = 0600 user = virtuals } unix_listener /var/spool/postfix/private/auth { mode = 0660 user = _postfix } user = root } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/ssl.crt ssl_key = </etc/ssl/private/ssl.key userdb { driver = passwd override_fields = mail_home=/home/%u } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 64 } Thanks in advance for any pointers to a resolution. Best regards, Kamil Andrusz -- It's just a matter of opinion.

2 2

[Dovecot] New install not working.
by Rhorer, Leslie 30 Sep '13

30 Sep '13

Hello. I need some help. I was running uw-imap on my IMAP server (so I am using mbox email files), but I was having trouble with Outlook 2013, so I decided to move to dovecot. At first things were looking much better, except that most of my folders, other than the Inbox, were not showing up. I started changing both the dovecot configuration and the folder structure of my mail files, but now I can't even get the Inbox to populate. Outlooks says it is there, along with any folders I create new in Outlook, plus the Trash folder, which is the only non-local folder with anything in it. Try what I might, I can't get my Inbox to populate or any of the existing folders to show up at all. Here is the current output from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 xfs mail_location = mbox:/RAID/home/%u/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } I have the mail files on a RAID array (separate from the boot arrays) at /RAID/home/<User>/mail. Here is a snapshot of one of t he directories: drwx------ 2 lrhorer lrhorer 59 Sep 26 21:32 Amazon -rw------- 1 lrhorer lrhorer 118889 Jul 23 09:57 CPS Energy -rw------- 1 lrhorer lrhorer 58343 Dec 26 2011 Craigs List -rw------- 1 lrhorer lrhorer 105676 Aug 24 2011 DAR Support -rw------- 1 lrhorer lrhorer 351546 Sep 20 11:21 Drafts -rw------- 1 lrhorer lrhorer 5767297 Jun 24 2012 eBay -rw------- 1 lrhorer lrhorer 50503746 Nov 27 2012 Family -rw------- 1 lrhorer lrhorer 109653 Apr 14 2012 Helipal -rw------- 1 lrhorer lrhorer 144094265 Sep 27 22:50 inbox -rw------- 1 lrhorer lrhorer 549 Jun 16 11:05 Junk E-mail -rw------- 1 lrhorer lrhorer 499 Jul 27 09:09 Junk E-mail1 -rw------- 1 lrhorer lrhorer 499 Aug 18 13:27 Junk E-mail2 -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:41 Junk E-mail3 -rw------- 1 lrhorer lrhorer 144094265 Sep 26 21:30 lrhorer -rw------- 1 lrhorer lrhorer 178218 Jan 11 2013 Mdadm -rw------- 1 lrhorer lrhorer 1022804 Dec 21 2011 NewEgg -rw------- 1 lrhorer lrhorer 6102422 Sep 17 2012 NUT -rw------- 1 lrhorer lrhorer 1588992 May 28 2010 RAID Halting -rw------- 1 lrhorer lrhorer 139695 Dec 13 2009 Rebuild an Array -rw------- 1 lrhorer lrhorer 3657762 Jul 26 10:24 Save -rw------- 1 root root 3657762 Sep 27 22:48 Save.sav -rw------- 1 lrhorer lrhorer 44458963 Jun 21 2011 Sent Items -rw------- 1 lrhorer lrhorer 10349 Jan 3 2010 SMART -rw-rw-rw- 1 lrhorer lrhorer 238 Sep 27 22:46 subscriptions -rw------- 1 lrhorer lrhorer 2732568 Jun 5 2011 tempAmazon -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:11 testing -rw------- 1 lrhorer lrhorer 19152044 Sep 27 22:42 Trash -rw------- 1 lrhorer lrhorer 536 Sep 5 01:14 Unsent -rw------- 1 lrhorer lrhorer 58550 Apr 8 2012 Wine -rw------- 1 lrhorer lrhorer 105015 Apr 2 2012 Xheli Since the home directories are on a subdirectory of a separate array, I have the following: lrwxrwxrwx 1 root root 10 Sep 27 21:22 /home -> /RAID/home /var/mail: total 140724 lrwxrwxrwx 1 root mail 30 Sep 27 21:31 ljrhorer -> /RAID/home/ljrhorer/mail/inbox lrwxrwxrwx 1 root mail 29 Sep 27 21:31 lrhorer -> /RAID/home/lrhorer/mail/inbox ------------- The content contained in this electronic message is not intended to constitute formation of a contract binding tw telecom. tw telecom will be contractually bound only upon execution, by an authorized officer, of a contract including agreed terms and conditions or by express application of its tariffs. This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail or by telephone.

2 2

[Dovecot] Using MailDir but local messages still save in mbox format
by Mike Edwards 30 Sep '13

30 Sep '13

I am using MailDir format for all my virtual users and it is working well. However, if email comes in to a unix system user, it delivers in Mbox format. This is mostly cron jobs that do this. Mail addressed to my virtual users goes to the MailDir locations just fine. None of these mailboxes have ever been created, they are just incorrect assumed addresses. There should NEVER be any email to username(a)my.host.name because everything is virtual. Does anyone know how to fix this? Here is my config. # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login cram-md5 ntlm auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no listen = * mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Sent autocreate5 = Archives autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Sent autosubscrube5 = Archives sieve = ~/.dovecot.sieve sieve_before = /home/vmail/movespam.sieve sieve_dir = ~/sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } } ssl_ca = /etc/pki/dovecot/ca/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /home/vmail/dovecot-deliver.log mail_plugins = " sieve sieve" postmaster_address = postmaster(a)zeus.deltatechnicalservices.com } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = autocreate } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

4 9

[Dovecot] pop3-login problem
by Oleksii Krykun 30 Sep '13

30 Sep '13

Hi! I have dovecot-2.2.5 installed as part of postfix+dovecot+mysql+amavisd. My server has two NICs (Internet and local). /etc/resolv.conf point to ISP DNS. Local names are not resolved. If ISP link goes to down state I see (after about 1minute) a following error: Sep 26 15:44:29 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) and following informational message: Sep 26 15:44:29 pop3-login: Info: Internal login failure (pid=12809 id=17815) (internal failure, 1 successful auths): user=<xxx(a)xxx.xxx> ..... If link is restored (even for a short time) all works fine again. After next down errors are repeated. I suppose that this is dns issue. Am I wrong? And I have a following question. Is it possible to disable dns requests? I haven't external clients. Or I must fix a name resolution e.g. to use a caching dns server? Thanks.

3 4

[Dovecot] proxy: can I use the password returned from passdb to log in to the back-end?
by Justin McAleer 30 Sep '13

30 Sep '13

I am hoping to support encrypted passwords, which I know is generally not allowed in a proxy setup. However, I can return the password in clear-text out of the password database, so I was hoping for something similar to the destuser field. I have successfully used the master password functionality to support encrypted passwords (users impersonating themselves), as long as the back-end server supports that. However, I need to proxy POP3 to Gmail, which does not.

2 2

[Dovecot] Processing sent items
by Bruce Markey 29 Sep '13

29 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 How does dovecot handle sent items and is it possible to "process" them befor they get saved in the sent item folder? My scenario is that I'm running postifx + dovecot with all incoming and outgoing mail passed to a script that encrypts the mail with the public key of the recipient. The only place now that has unencrypted mail sitting on the server is the sent items, I'd like to fix that. What would be the best way to proceed here? - -- Encrypt everything. Public key: https://www.secryption.com/BruceMarkey.asc I believe that any violation of privacy is nothing good. Lech Walesa -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v.1.20130420 Comment: http://openpgpjs.org wsFcBAEBCAAQBQJSR+odCRDIVcS4Lgc6WAAAIOYP/AqT3HWNbZZnoRXgeq27 n8id40wWemf+IgXGEe1fCTX7d/x+Zinj7bZw5EVq8WlLDxwpOhJGDNUAfA2+ 2z+6J7H0dAHk8rSJZqZfNaGWQQhY3ZehwJnojGJnM5ORuHHH/9WsY91jq26u 4Bzg54tUo+aIoWJHLWlVdqiDjJsW4n536UaHcKlVQx0JCe1byt4eXAmJP9dh Dc9YkP3lKUdW9oxgusJRLOxGfaN++nIFHSBDV6wGp0gEdCuzkgphdEFMnUX9 mD1dwPrDMlEmqHkiyHFH9RGGFvHRaTmdREW8eX9vnHp2PBXthbqd3RKWs7Q4 FmnfoS18inSbTM9Cp79HgQBMKBu66/qtdI6q5q45An9lmQAGf2ElvApSj8b+ ZI5GklVGSyrkxwRTOSRij57SDcRexNhlHg1jsDwSFvNjW5CzH0cB+mVU98eB TqfbIPKvGuqKzpdgf7SNJhZXmmkRrtsL/pI3xCheaZVh34Jxx6N/mP01pDEv d4IrajaTS+0mv6cM4z5f6k62YypHNB9fSTTjIKIqAvLgWMyQIFdjd9BQ1PQK pPiu+btbhhb4RgKa3LFSTp2xJVZlKXd2bqTaRkv63eUgF9NUIr3RYM98I75z mMnxfR5QDZIS6s5tlmZXF7zvCzXoRj30xEp8IsTMrfA4GzLpfAVsJaSUZlSo j5I3 =5Tw/ -----END PGP SIGNATURE-----

2 2

[Dovecot] How to authenticate against SQL DB with custom-ciphered passwords?
by Nicolay Vizovitin 29 Sep '13

29 Sep '13

Hello, I'm about to start developing authentication/password-scheme module for Dovecot. So I would like to get some advice before actually committing to doing things in particular way. Hope somebody will be able to help me :) For the record, I am currently targeting latest stable Dovecot version 2.2.5. I have an SQL DB with mail users' authentication data. Passwords are stored either encrypted via system crypt(3) or ciphered with some custom algorithm (think something symmetrical like AES, so passwords can be decrypted into plain form). I want to use this DB as both userdb and passdb backend. The issue, of course, is with ciphered passwords support. 1) Is it feasible to just implement a new password scheme for ciphered passwords support and still use stock passdb driver in Dovecot for SQL DB access? So that passwords in this scheme would be treated as PLAIN (in a sense that both cleartext and shared secret authentication methods would work). 2) Provided I implement custom password scheme for ciphered passwords, what is the best way to be capable to perform authentication against both ciphered and encrypted passwords? Ciphered and encrypted passwords are stored in different fields of SQL table (one of them is NULL when the other one is set). a) Do I define two passdb clauses with their own default_pass_scheme (equal to my new scheme or CRYPT for encrypted passwords) and use fallback to effectively check both of them? b) Do I modify SQL query so that it prefixes existing password with correct scheme (I'm not sure this will be easy enough to do)? 3) Is it mandatory to provide password generation routine for custom password scheme? When it will be used? 4) Maybe it's better to just implement a plugin that serves as both userdb and passdb driver (in other words a kind of generic authentication module)? What are advantages and disadvantages of each method - custom password scheme + stock SQL driver VS. custom userdb and passdb driver? Fortunately, I already have all the required credentials lookup and verification code. So in any case the question is only in figuring out suitable Dovecot APIs and integrating the existing code. 5) I have previously implemented similar custom authentication module for Courier-IMAP (Courier-Authlib to be precise) to use the same SQL DB. And I will need to support both IMAP servers for some time. So it is only natural to expect some generic solution to be possible. I'd like to remind that I need to be able to supply either encrypted password or deciphered plain password, or just check against them. Is it possible to do so in a common way? If so, what method should I use? I would expect SASL helping me out here, but AFAIK, both Dovecot and Courier-IMAP can only serve as SASL servers (providing authentication services), not clients. 6) I obviously care about providing enhanced security, especially against stealing mail passwords. So any additional advice or related guidelines are welcome. 7) Somewhat unrelated question: what is the best way to test IMAP (and maybe POP3 as well) server performance and compare it to another server? I'm interested in both login performance (the part I will influence) and performance with many mails in mailbox. I heard imaptest is suitable for this task. Are there any recipes or example testing scenarios you might share? ;) I would be grateful for any insight in these issues. If I chose a wrong mailing list to post to, please feel free to correct me. Thanks for your time! :) -- Best regards, Nick

2 2

[Dovecot] Conditional jump or move depends on uninitialised value(s)
by Tamsy 28 Sep '13

28 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Timo, Dovecot 2.2.6 compiled on Ubuntu 10.04 fails on "make check" with the following errors. "make install" is finishing just fine and Dovecot itself works flawlessly so far. - ----- 8< ----- http header invalid [0]: parse failure ............................... : ok: Expected ':' after header field name 'Server', but found ' ' http header invalid [0] .............................................. : ok http header invalid [1]: parse failure ............................... : ok: Expected ':' after header field name 'X', but found ' ' http header invalid [1] .............................................. : ok http header invalid [2]: parse failure ............................... : ok: Expected LF after CR at end of header, but found 'A' http header invalid [2] .............................................. : ok http header invalid [3]: parse failure ............................... : ok: Expected line end after header field 'Accept', but found 0x7f http header invalid [3] .............................................. : ok http header invalid [4]: parse failure ............................... : ok: Expected ':' after header field name 'Suhosin-Patch', but found ' ' http header invalid [4] .............................................. : ok http header invalid [5]: parse failure ............................... : ok: Excessive header size http header invalid [5] .............................................. : ok http header invalid [6]: parse failure ............................... : ok: Excessive header field size http header invalid [6] .............................................. : ok http header invalid [7]: parse failure ............................... : ok: Excessive number of header fields http header invalid [7] .............................................. : ok 0 / 66 tests failed ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F987: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F98D: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B0: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FC92: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B2: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F361: test_http_header_parse_valid (test-http-header-parser.c:181) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F987: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F98D: http_header_parse_next_field (http-header-parser.c:294) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B0: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FC92: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804F9B2: http_header_parse_next_field (http-header-parser.c:296) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== ==15579== Conditional jump or move depends on uninitialised value(s) ==15579== at 0x804FCDF: http_header_parse_next_field (http-header-parser.c:320) ==15579== by 0x804F225: test_http_header_parse_invalid (test-http-header-parser.c:325) ==15579== by 0x8050251: test_run_funcs (test-common.c:228) ==15579== by 0x80503D1: test_run (test-common.c:236) ==15579== by 0x804F164: main (test-http-header-parser.c:343) ==15579== make[2]: *** [check-test] Error 1 make[2]: Leaving directory `/usr/local/src/dovecot-2.2.6/src/lib-http' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/usr/local/src/dovecot-2.2.6/src' make: *** [check-recursive] Error 1 - ----- >8 ----- Is it just me? Cheers, Tamsy -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (MingW32) iQEcBAEBAgAGBQJSQ9FeAAoJEKYXVM1dyOfZVsoIAOM1z1aULWvVqGJScmd8uNXz EG1gRnG6vlrjdUa+8mYQq7RPZZbZ2Cvxd73rkWtptPFAQX+gKsHsh53HS2GKohle W6dJWnEdR7cvUk1UC7FHK3KR5+Z2pdbxhwGB0G26jHKf2OM7dyNcrmtXgkvb3Mwp 4AHrRHVYnPDkcF4Mc9mCnlGdHGsG1bA2BMtI6eR1vbAMKlUy9v11EfunDJHwqkwf 9A5vWAqCnNT9QewJctrHubnN+Rzz5ZLA0cc5ngTL+hsSknIKzH/bj1R99Orca7VN AzBYkWRQ2GqKWxdSBs8RSGv/bVojW1SLjp04xEea+zUeV6sg3RMGkou/pK+lfj4= =o8pw -----END PGP SIGNATURE-----

2 3

Re: [Dovecot] New install not working.
by Joseph Tam 28 Sep '13

28 Sep '13

"Rhorer, Leslie" <Leslie.Rhorer(a)twtelecom.com> writes: > At first things were looking much better, except that most of my > folders, other than the Inbox, were not showing up. I started changing > both the dovecot configuration and the folder structure of my mail > files, but now I can't even get the Inbox to populate. Outlooks says > it is there, along with any folders I create new in Outlook, plus the > Trash folder, which is the only non-local folder with anything in it. > Try what I might, I can't get my Inbox to populate or any of the > existing folders to show up at all. Here is the current output from > dovecot -n: > .... > mail_location = mbox:/RAID/home/%u/mail Maybe try mail_location = mbox:/RAID/home/%n/mail:INBOX=/RAID/home/%n/mail/inbox (%n does not include the domain part, but it might be the same as %u). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] service anvil and ssl-params not starts with dovecot started
by Dewey Du 28 Sep '13

28 Sep '13

Hi My dovecot started with the error below. What's the most possible reason for the error? “2013-08-28 11:41:40 ”master: Info: Dovecot v2.2.5 starting up (core dumps disabled) “2013-08-28 11:42:00 ”anvil: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(anvil): command startup failed, throttling for 2 secs “2013-08-28 11:42:00 ”ssl-params: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(ssl-params): command startup failed, throttling for 2 secs Actually, After dovecot starts, I can telnet 110, but it takes 30seconds or so to get through the authentication. I suspect whether the error above cause the issue or not. Other information: dovecot version v2.2.5 use posfix, dovecot sasl, and mysql Attached my dovecot.conf: #auth_debug = yes auth_mechanisms = plain login #debug_log_path = /var/log/dovecot.debug default_internal_user = postfix default_login_user = postfix disable_plaintext_auth = no first_valid_uid = 1000 last_valid_uid = 1000 mail_gid = 1000 mail_uid = 1000 log_path = /var/log/dovecot.log mail_location = maildir:/var/vmail/%d/%u mail_privileged_group = vmail protocols = imap pop3 listen = * base_dir = /var/run/dovecot/ service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } user = root } ssl = no userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 2

Re: [Dovecot] recipient_delimiter
by voytek＠sbt.net.au 28 Sep '13

28 Sep '13

>> $recipient_delimiter = ‘+’ ahem, dumb question coming: //I often read various threads here, and, look at my own setup, with a view of optimizing or understanding things I should...// I have working dovecot 2.1.1 with postfix, only have virtual domains, all users in mysql; '+' delimiter is enabled in postfix, and, works OK postfix]# grep _delimiter main.cf # The recipient_delimiter parameter specifies the separator between recipient_delimiter = + BUT, I seem to have nothing in dovecot.conf: postfix]# cd /etc/dovecot dovecot]# grep delimiter * dovecot]# cd conf.d conf.d]# grep delimiter * 15-lda.conf:#recipient_delimiter = + 20-lmtp.conf:# the mail to the detail mailbox. See also recipient_delimiter and 20-lmtp.c_org:# the mail to the detail mailbox. See also recipient_delimiter and should I also enter $recipient_delimiter = ‘+’ in my /etc/dovecot/dovecot.conf ? what will it add to this working setup, what am I missing? thanks for all pointers

6 10

[Dovecot] Truncated emails
by David LEROUX 27 Sep '13

27 Sep '13

Hi, I'm running Dovecot IMAP and some times receive truncated emails. Don't understand why. Here are my settings: /dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-48-server x86_64 Ubuntu 10.04.4 LTS log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log log_timestamp: Â« %Y-%m-%d %H:%M:%S Â» login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_max_userip_connections: 11 mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock imap_client_workarounds: tb-extra-mailbox-sep auth default: passdb: driver: pam userdb: driver: passwd/ Hop you can help. Thanks, David

2 3

[Dovecot] v2.2.6 released
by Timo Sirainen 27 Sep '13

27 Sep '13

http://dovecot.org/releases/2.2/dovecot-2.2.6.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.6.tar.gz.sig I didn't have time to look into the latest reported dsync replication bugs, but this release should have been done a long time ago already and I'm busy for next few days, so no more waiting. Things seem to be working quite well in general though. * acl: If public/shared namespace has a shared subscriptions file for all users, don't list subscription entries that are not visible to the user accessing it. + doveadm: Added "auth lookup" command for doing passdb lookup. + login_log_format_elements: Added %{orig_user}, %{orig_username} and %{orig_domain} expanding to the username exactly as sent by the client (before any changes auth process made). + Added ssl_prefer_server_ciphers setting. + auth_verbose_passwords: Log the password also for unknown users. + Linux: Added optional support for SO_REUSEPORT with inet_listener { reuse_port=yes } - director: v2.2.5 changes caused "SYNC lost" errors - dsync: Many fixes and error handling improvements - doveadm -A: Don't waste CPU by doing a separate config lookup for each user - Long-running ssl-params process no longer prevents Dovecot restart - mbox: Fixed mailbox_list_index=yes to work correctly

3 3

[Dovecot] Index error copying compressed message
by Richard Platel 27 Sep '13

27 Sep '13

Hi. Dovecot 2.2, with the zlib plugin, I think we're getting bad index entries on IMAP COPY. On copying a message to an empty folder, in the dovecot error log I see: Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: Cached message size smaller than expected (615 < 971) Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: Corrupted index cache file /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup/dovecot.index.cache: Broken physical size for mail UID 0 Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: read() failed: Invalid argument (uid=0) (Note this happens from the copy operation, not a subsequent access. Also note the UID is always 0). The filename for the message is: -rw------- 2862 mail mail 615 Aug 29 15:38 1379622865.M228140P11548.imap01,S=971,W=988:2,S S= size looks correct: $ zcat 1379622865.M228140P11548.imap01\,S\=971\,W\=988\:2\,S |wc 17 51 971 doveadm dump says: $ sudo -u mail doveadm -c /he/dovecot/conf/dovecot.conf dump /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup/ Detected file type: index -- INDEX: /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup//dovecot.index version .................. = 7.3 base header size ......... = 120 header size .............. = 208 record size .............. = 12 compat flags ............. = 1 index id ................. = 1379605150 (2013-09-19 15:39:10) flags .................... = 0 uid validity ............. = 1377629137 (2013-08-27 18:45:37) next uid ................. = 14309 messages count ........... = 1 seen messages count ...... = 1 deleted messages count ... = 0 first recent uid ......... = 14308 first unseen uid lowwater = 14309 first deleted uid lowwater = 14308 log file seq ............. = 6 log file tail offset ..... = 204 log file head offset ..... = 204 day stamp ................ = 1379548800 (2013-09-19 00:00:00) day first uid[0] ......... = 1 day first uid[1] ......... = 0 day first uid[2] ......... = 0 day first uid[3] ......... = 0 day first uid[4] ......... = 0 day first uid[5] ......... = 0 day first uid[6] ......... = 0 day first uid[7] ......... = 0 -- Extension 0 -- name ........ = maildir hdr_size .... = 36 reset_id .... = 0 record_offset = 0 record_size . = 0 record_align = 0 header - new_check_time .... = 2013-09-19 20:34:10 - new_mtime ......... = 2013-09-19 20:08:51 - new_mtime_nsecs ... = 792530000 - cur_check_time .... = 2013-09-19 20:35:38 - cur_mtime ......... = 2013-09-19 20:35:38 - cur_mtime_nsecs.... = 227710000 - uidlist_mtime ..... = 2013-09-19 20:35:38 - uidlist_mtime_nsecs = 254613000 - uidlist_size ...... = 1025178 -- Extension 1 -- name ........ = cache hdr_size .... = 0 reset_id .... = 1379605174 record_offset = 8 record_size . = 4 record_align = 4 -- Keywords -- -- CACHE: /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup//dovecot.index.cache major version ........ = 1 minor version ........ = 1 indexid .............. = 1379605150 (2013-09-19 15:39:10) file_seq ............. = 1379605174 (2013-09-19 15:39:34) (24 compressions) continued_record_count = 0 record_count ......... = 0 used_file_size (old) . = 108 deleted_record_count . = 0 field_header_offset .. = 32 (0x88808080 nontranslated) -- Cache fields -- # Name Type Size Dec Last used 0: flags bit 4 tmp 2013-09-19 20:07 1: hdr.Message-ID hdr - tmp 2013-09-19 20:07 2: hdr.X-HE-Tag hdr - tmp 2013-09-19 20:07 -- RECORDS: 1 RECORD: seq=1, uid=14308, flags=0x08 (Seen) - ext 3 cache : 0 (00000000) $ sudo -u mail dovecot -c /he/dovecot/conf/dovecot.conf -n # 2.2.4.3 (12e60e803a54+): /he/dovecot/conf/dovecot.conf # OS: Linux 3.4.46-dom0-2.0.0 x86_64 Debian 7.0 debug_log_path = syslog disable_plaintext_auth = no first_valid_uid = 8 info_log_path = syslog lock_method = dotlock log_path = /var/run/dovecot/log-fifo log_timestamp = mail_fsync = always mail_gid = mail mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = zlib quota tc_mail_log notify tc_proc stats mail_uid = mail maildir_very_dirty_syncs = yes mmap_disable = yes namespace inbox { inbox = yes location = prefix = } passdb { args = host=localhost port=1143 username=%L{user}::%L{service}::%L{rip}::%L{session} driver = imap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid flags hetag memcached_servers = 10.5.47.223,10.5.47.222 quota = dict:User quota::proxy:/var/run/auth_proxy_dovecot/quotasocket:quota stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service imap-login { inet_listener imap { address = 0 } inet_listener imaps { port = 0 } process_limit = 29 process_min_avail = 14 service_count = 0 } service imap-postlogin { executable = script-login -d /he/dovecot/utils/post_login.sh } service imap { executable = imap imap-postlogin process_limit = 1270 vsz_limit = 0 } service pop3-login { inet_listener pop3 { address = 0 } inet_listener pop3s { port = 0 } process_limit = 29 process_min_avail = 14 service_count = 0 } service pop3-postlogin { executable = script-login -d /he/dovecot/utils/post_login.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 206 vsz_limit = 512 M } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl = no userdb { args = /he/dovecot/conf/dovecot-tc-dict-auth.conf driver = dict } verbose_proctitle = yes protocol imap { mail_plugins = zlib quota tc_mail_log notify tc_proc stats imap_stats imap_quota }

2 2

[Dovecot] Released Pigeonhole v0.4.2 for Dovecot v2.2.6 and Pigeonhole v0.3.6 for Dovecot v2.1.17.
by Stephan Bosch 27 Sep '13

27 Sep '13

Hello Dovecot users, Now that Dovecot v2.2.6 is released, I can release a new Pigeonhole. Due to the SO_REUSEPORT changes in Dovecot, this Pigeonhole release will not compile cleanly against older Dovecot releases. This release is mainly about bugfixes. I also made a new release for Dovecot v2.1.17 that includes most of these fixes and some older ones. A word of warning for people using doveadm sync in combination with sieve: make sure you update both sides of the replication to avoid problems after upgrade. The attribute sub-tree under which Sieve scripts are replicated has moved to a different root. Since we expect that very few people are affected, there is no facility for backwards compatibility. This is no problem as long as both sides are upgraded. There is one new feature for the Sieve vacation extension. Normally vacation replies are sent with <> sender to prevent mail loops. A setting is provided to override this behavior (doc/extensions/vacation.txt), as requested on the mailing list. This is not a violation of the specification, but use this with care. Changelog v0.4.2: * Incompatible change in Sieve doveadm plugin: the root attribute for Sieve scripts is changed. Make sure that you update both sides of a dsync setup simultaneously when Sieve is involved, otherwise synchronization will likely fail. + Added support for sending Sieve vacation replies with an actual sender, rather than the default <> sender. Check the updated doc/extensions/vacation.txt for more information. - Fixed a binary code read problem in the `set' command of the Sieve variables extension. Using the set command with a modifier and an empty string value would cause code corruption problems while running the script. - Various fixes for doveadm-sieve plugin, mostly crashes. These include a fix for the `Invalid value for default sieve attribute' problem. - Various fixes for compiler and static analyzer warnings, e.g. as reported by CLang and on 32 bit systems. - Fixed the implementation of the new :options flag for the Sieve include extension. - Fixed potential segfault bug at deinitialization of the lda-sieve plugin. - Fixed messed up hex output for sieve-dump tool. Changelog v0.3.6: - Fixed a binary code read problem in the `set' command of the Sieve variables extension. Using the set command with a modifier and an empty string value would cause code corruption problems while running the script. - Various fixes for compiler and static analyzer warnings, as reported by CLang. - ManageSieve: Fixed '[' ']' stupidity for response codes (only happened before login). - Fixed setting name in example-config/conf.d/20-managesieve.conf. - Fixed messed up hex output for sieve-dump tool. The releases are available as follows: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz.sig http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.6.tar.gz http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.6.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1

[Dovecot] Strange errors with imapc+acl in 2.2.x
by René Neumann 27 Sep '13

27 Sep '13

Hi, after migrating to 2.2 (currently using 2.2.5), I see strange error messages when using imapc + public namespace + acl My setup: I create a public shared mailbox with imapc as location. Then I restrict this mailbox to one user only using ACLs. This works for this one special user, but for all others an error gets logged and they can't access their mailbox anymore: Sep 24 18:09:46 [dovecot] imap(other(a)my.domain): Error: user other(a)my.domain: Initialization failed: Namespace 'Gemeinsam.': Ambiguous mail location setting, don't know what to do with it: yes (try prefixing it with mbox: or maildir:) Sep 24 18:09:46 [dovecot] imap(other(a)my.domain): Error: Invalid user settings. Refer to server log for more information. My config (relevant parts): ------------------ Dovecot conf ---------------- imapc_host = some_host imapc_port = 143 imapc_user = some_user imapc_password = some3$pwd imapc_ssl = starttls imapc_ssl_verify = no namespace gemeinsam { type = public separator = . location = imapc: prefix = Gemeinsam. subscriptions = no } # I also tried different combinations of hidden and list plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 } ------------- /etc/dovecot/global-acls/Gemeinsam ------- anyone user=special(a)my.domain lrwstipekxa -------------------------------------------------------- Does anyone have any thoughts about this? Thanks, René

2 2

[Dovecot] recipient_delimiter
by LuKreme 27 Sep '13

27 Sep '13

Can I enable $recipient_delimiter = ‘+’ for only the virtual sql users? $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } === My pam users all have .procmailrc, and I do not want to interfere with those.

2 3

[Dovecot] Dovecot extremely slow!
by Patricio Rojo 27 Sep '13

27 Sep '13

Please help, Dovecot is running extremely slow for the last couple of weeks and it seems to be getting worse (or my patience running short). I attach the 10-master configuration and the log file after running strace according to: http://wiki.dovecot.org/Debugging/ProcessTracing I can click on an email and wait for a minute or more before receiving a connection dropped or no error at all. I use many clients (thunderbird, windows 8 mail, maildroid for android, squirrelmail) and they all have similar behavior. It happens both in the inbox and on imap subfolders. Sometimes it helps changing subfolders back and forth. I have many imap folders organized in up to 3 levels of subfolders and use postfix for delivery. Let me know any other info you require. Thanks! Patricio

6 8

[Dovecot] Courier migration and vpopmail with dovecot-lda
by Charles Sprickman 27 Sep '13

27 Sep '13

I've been using Dovecot in some fresh installs lately and have found it fairly easy to configure. However I'm starting on a migration that involves moving from some very old software (ancient vpopmail, qmail and Courier). On the Courier front, I've reviewed the migration page in the wiki, and it looks like the main concerns are just matching the namespace and then using the migration script to create new subscription and uidlist files. Given that my Courier IMAP setup is so old (4.0.6), is there anything to be aware of that's not covered in the wiki due to the age of Courier here? Are there any other general issues to be aware of as far as interactions with MUAs are concerned? For example, if Courier has been presenting the user's MUA with a given set of IMAP capabilities and then the MUA sees a bunch of extra capabilities on a subsequent login, will that trigger any strange behavior? And lastly on this subject, I will obviously be doing some testing before cutting over to the other server. Is it valid in something like Thunderbird to have it pointed to "imap.domain.com" and then change the imap server to point to something like "testimap.domain.com" for testing whether subscriptions and the uidlists are working as expected or should I fully replicate the move as an end user would see it by making the change in my local hosts file? Now, assuming that portion of the move goes alright, I'm incredibly confused about getting Dovecot and Vpopmail working together. I assume that initially I can stick with the Maildir++ mailbox format and let vpopmail's vdelivermail continue working as my LDA - vdelivermail understands how to find the user's Maildir, it can check quotas, and it can update the maildirsize file (which I'm assuming dovecot can also read and then report quota/usage to an IMAP client). However it does look like the Dovecot-only mailbox format(s) will offer much better performance than Maildir as the two dbox formats are the only supported mailbox formats with separate index files, correct? Is there any guidance on how to use dovecot's LDA with a virtual mail system such as vpopmail? From what I've read so far, I probably don't want to use the vpopmail extension supplied with dovecot, but query the mysql vpopmail db directly. I'm finding a ton of info while searching for this, but most deals with older versions of dovecot, and there are also many "this works but I don't know why" tutorials on combining dovecot and vpopmail and dovecot's own LDA. I'm not even able to guess how one handles the per-user .qmail files in vpopmail if not using vdelivermail (this is where we enable/disable spam filtering by piping the message through spamc). Any input on the overall migration process is appreciated. It's a bit overwhelming as I have to deal with a big jump in the vpopmail version, rebuilding qmail with a ridiculous number of patches, and then on top of that a migration to new imap/pop server software. eek. Thanks, Charles -- Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet www.bway.net spork(a)bway.net - 212.982.9800

2 2

[Dovecot] sieve gone mad ---help
by Rob 26 Sep '13

26 Sep '13

managesieve has gone mad. One person went on holiday when he came back his out of office would not switch off, then it replicated it's self into two other users (the vacation noticE) and started to be sent out for them and those users had never set up an out of office or looted into round cube. even deleting the vacation notice did not stop it, but if we put another vacation notice in then the new one is sent out, if we disable the new one then the old one is sent out…. mad…. how can I refresh the whole thing and start again… ? I am running this on 10.8.4 mountain lion server and I can't stop sieve… I have looked in the /Library/Server/Mail/Data/rules/USERFOLDER and removed all sieve files I have looked in each users mailbox but no seve files there… I have restarted and still sieve will not stop sending out emails…. yesterday it went crazy sending a mail a second from one mailbox back to it's self…. help….. osx 10.8 server using latest roundcube with managesieve plugin.... bash-3.2# ps -aef|grep dovecot 0 27481 1 0 12:07am ?? 0:00.36 /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -F 214 27490 27481 0 12:07am ?? 0:00.58 dovecot/anvil [4 connections] 0 28237 27481 0 12:07am ?? 0:01.69 dovecot/log 0 28239 27481 0 12:07am ?? 0:00.20 dovecot/config 227 28309 27481 0 12:08am ?? 0:42.33 dovecot/imap-login [28 connections (28 TLS)] 214 28311 27481 0 12:08am ?? 0:08.65 dovecot/auth [0 wait, 0 passdb, 0 userdb] 214 40746 27481 0 6:54am ?? 0:06.33 dovecot/imap [3 connections] 214 40747 27481 0 6:54am ?? 0:01.89 dovecot/imap [reply 192.168.5.134 IDLE] 214 45378 27481 0 8:36am ?? 0:01.73 dovecot/imap [3 connections] 214 46125 27481 0 9:03am ?? 0:00.75 dovecot/imap [2 connections] 214 46127 27481 0 9:03am ?? 0:01.84 dovecot/imap [3 connections] 214 47385 27481 0 9:35am ?? 0:01.29 dovecot/imap [3 connections] 214 56274 27481 0 1:15pm ?? 0:00.25 dovecot/imap [3 connections] 214 56275 27481 0 1:15pm ?? 0:00.36 dovecot/imap [5 connections] 214 56276 27481 0 1:15pm ?? 0:00.45 dovecot/imap [4 connections] 214 56367 27481 0 1:18pm ?? 0:00.10 dovecot/imap [liam 192.168.5.130 IDLE] 0 62854 9637 0 4:37pm ttys000 0:00.00 grep dovecot bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -n # 2.0.19apple1: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 12.4.0 x86_64 hfs aps_topic = com.apple.mail.XServer.68f48c72-274a-48f9-beed-71096afe3fa6 auth_mechanisms = cram-md5 x-plain-submit plain login apop gssapi digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 mail_access_groups = mail mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/roundcube.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)server.risk.gg protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl = required ssl_ca = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.chain.pem ssl_cert = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.key.pem ssl_key_path = /etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.key.pem syslog_facility = local6 userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk push_notify sieve } protocol lda { mail_plugins = quota zlib fts fts_sk push_notify sieve } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 50 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts urlauth } protocol pop3 { mail_max_userip_connections = 6 } bash-3.2#

1 0

[Dovecot] login_log_format_elements does not appear to be changing log format 2.2.5
by Chris 26 Sep '13

26 Sep '13

Hi, login_log_format_elements does not seem to change the login logs. I have it set to the below setting and the word "home" does not even appear. Is there something I have to do to for this? Also I use ldap for authentication. [user@MB1 logs]$ doveconf -n | grep -i log debug_log_path = /home/user/apps/logs/dovecot_debug.log info_log_path = /home/user/apps/logs/dovecot_info.log log_path = /home/user/apps/logs/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c home=%h service imap-login { chroot = login executable = imap-login type = login user = $default_login_user [user@MB1 dovecot]$ tail -1 ~/apps/logs/dovecot_info.log Sep 04 18:19:55 imap-login: Info: Login: user=<test2(a)domain.local>, method=PLAIN, rip=10.100.5.6, lip=10.100.5.103, mpid=6571 [user@MB1 dovecot]$ dovecot --version 2.2.5

3 2

[Dovecot] Lot of connections IMAP
by Davide 26 Sep '13

26 Sep '13

Hi to all, i have dovecot 2.2.5 when i digit doveadm who i see a lot of connections IMAP for single user liker the example below xxxxx.yyyyyy(a)mail.cgilfe.it 9 imap (20572 20614 19120 20653 19136 20655 19138 20661 20471) (192.168.x.xxx) Why so many IMAP? -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

3 3

[Dovecot] Grant access for Unix-User _and_ virtual Users
by marco 26 Sep '13

26 Sep '13

Hi group, I have installed a postfix as an MTA and configured two "main" domains as well as two virtual mailbox domains. Normal unix users have their maildir in their homes (/home/%u) and the virtual mailboxes are located in /var/mail/vhosts. It works well, I only have a problem configuring dovecot. I wondered if it's possible to configure it in a way that both, unix users and virtual users, can access their mailboxes. I found some tutorials but they either give access to the "normal" unix users or to virtual users who are defined in a text file. Here some system infos: - Ubuntu 12.04.2 LTS (Kernel Version: 3.2.0-23) - Dovecot Version: 2.0.19 Hope you understand my problem. Cheers, Marco PS: It's the very first time I use a mailing list, so I hope you can forgive me possible beginner's mistakes.

2 2

[Dovecot] Dsync: Mailbox changes caused a desync.
by Aleksey Tsvetkov 26 Sep '13

26 Sep '13

Hi! Here such synchronization error: dovecot: dsync-local(alex(a)aaa.com): Warning: Mailbox changes caused a desync. You may want to run dsync again. dovecot: dsync-remote(alex(a)aaa.com): Warning: /var/mail/virtual/aaa.com/alex/.INBOX.System/dovecot-uidlist: Duplicate file entry at line 2298: 1380157263.M585262P25253.mail1.aaa.com,S=2476,W=2553 (uid 3645 -> 3662) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3650, file=1380157264.M261919P17392.mail2.aaa.com,S=2476,W=2553) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3651, file=1380157263.M586977P17315.mail2.aaa.com,S=3119,W=3175) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3652, file=1380157264.M261920P17392.mail2.aaa.com,S=2476,W=2553) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3653, file=1380157264.M261921P17392.mail2.aaa.com,S=3119,W=3175) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3654, file=1380157263.M819006P25260.mail2.aaa.com,S=2476,W=2553:2,) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3655, file=1380157264.M261922P17392.mail2.aaa.com,S=3119,W=3175:2,) As a result, synchronization was, but there were duplicate emails. After this synchronization is working fine, no more errors. dovecot --version 2.2.5 dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword pam passwd passwd-file sql Userdb: checkpassword nss passwd prefetch passwd-file sql Thanks! -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

1 0

[Dovecot] Passing info from mail process to mail_filter plugin script?
by Charles Cazabon 26 Sep '13

26 Sep '13

Hi, all, The mail_filter plugin allows you to pass messages through an external script/command on the way into and out of the Maildir/mbox/etc mail store. With the recent/new version of the plugin, this seems to work correctly. However, my mail-filter script (for filtering messages on the way from the mail store through the IMAP process to a remote client) needs some extra info from the IMAP mail process. I'm having difficulty figuring out how this can be accomplished. Ideally, I'd like to pass another open file descriptor (opened in the IMAP process) to the script, but I'm not sure if this is possible. Opening the file in the IMAP main.c fails, presumably due to file descriptor limits, but I don't see where restrict_fd_limit() is called there. My second choice for passing this info would be in an environment variable or argument to the mail filter script. Adding env_put() to the IMAP code doesn't seem to get the value passed to the script, presumably because the environment is getting cleared, but again I'm not certain where the list of env vars to keep is set here. There may be another way to accomplish this that I'm not thinking of? Any assistance would be appreciated. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------

2 5

[Dovecot] "service_count = 0" for "service dict" (High-performance mode)
by Alessio Cecchi 25 Sep '13

25 Sep '13

Hi, I'm running dovecot 2.1.17 with "Login processes" in "High-performance mode" as explained here: service imap-login { service_count = 1 http://wiki2.dovecot.org/LoginProcess but i thinks I should also set "service dict" in high-performance mode since sometimes the number of dict processes reach the limit of 100 (from default_process_limit=100) and I find these errors in the logs: Sep 25 15:32:24 imap(info@xxxx), session=<z9N2SDXnIQCy71XC>: Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Connection reset by peer Sep 25 15:32:24 imap(service@xxxx), session=<xKxSSDXnwABb/1Ql>: Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Connection reset by peer or Sep 25 15:33:48 imap(info@xxxx), session=<M8FITTXnwABb/CM9>: Warning: read(/usr/local/dovecot-2.1/var/run/dovecot/dict): dict lookup took 5 seconds Sep 25 15:33:48 imap(editoria@xxxx), session=<3LpHZTTnDgBdJwmm>: Warning: read(/usr/local/dovecot-2.1/var/run/dovecot/dict): dict lookup took 5 seconds Do you think will be better set: service dict { service_count = 0 or default_process_limit=200 (instead of 100) Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 1

[Dovecot] proxy: get rid of redundant log-informations
by Reindl Harald 25 Sep '13

25 Sep '13

Hi login_log_format_elements = user=<%u> method=%m rip=%r %k is it possible to get rid of the "proxy(test(a)testserver.rhsoft.net): started proxying to 127.0.0.1:143: " part because on a proxy-only server i know that and it is explicitly not listed in "login_log_format_elements" as well as for the "TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA" it would be enough "TLSv1 DHE-RSA-CAMELLIA256-SHA" the reason is simple: * all needed informations are present * smaller logfiles * nicer "tail -f" on the syslog without breaks _____________________________________________ Aug 14 16:31:46 testserver dovecot: imap-login: proxy(test(a)testserver.rhsoft.net): started proxying to 127.0.0.1:143: user=<test(a)testserver.rhsoft.net>, method=CRAM-MD5, rip=91.118.73.99, TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)

2 9

[Dovecot] unable to lock for exclusive access: Resource temporarily unavailable
by Nikos Papadopoulos 25 Sep '13

25 Sep '13

Dears, We have a mail server (RHEL 6.0, Postfix and Dovecot 1.0.7). The output of dovecot -n is the following: # 1.0.7: /etc/dovecot.conf protocols: pop3 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd During the last days we face the following problem: There is great delay in the delivery of the emails. Some seem to not be delivered at all. Issuing the mailq command we get the following message for almost all the email accounts: (cannot update mailbox /var/mail/xyz for user xyz. unable to lock for exclusive access: Resource temporarily unavailable) Please send to me any suggestions, because I cannot resolve it and I receive a lot of pressure. Best Regards, Nikos

4 3

[Dovecot] (no subject)
by Greg Ryman 25 Sep '13

25 Sep '13

Hello, I've been out of the sysadmin game for some time and I've recently setup a mail server. Everything is working except for the quota, which I believe is likely an error in how I'm using my SQL queries. Any guidance, pointers, or advice would be greatly appreciated. root@mail:/etc/dovecot/conf.d# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab079.6 x86_64 Ubuntu 12.04.3 LTS reiserfs auth_mechanisms = plain login dict { sqldomainquota = mysql:/etc/dovecot/dovecot-sql-domain.conf sqluserquota = mysql:/etc/dovecot/dovecot-dict-sql-user.conf } first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = maildir:/var/vmail/%d/%n mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = YES antispam_backend = dspam antispam_dspam_args = --user;%u;--deliver=;--source=error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam;Junk antispam_trash = trash;Trash autocreate = Trash autocreate2 = Junk autocreate3 = Sent autocreate4 = Drafts autocreate5 = Archive quota = dict:User Quota::proxy::sqluserquota quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_after = /etc/sieve/conf.d/after sieve_before = /etc/sieve/conf.d/before sieve_dir = ~/sieve } postmaster_address = admin(a)gryman.com protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " sieve autocreate quota" } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota antispam autocreate quota imap_quota } root@mail:/etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=localhost dbname=mail user=mail password=mailpassword default_pass_scheme = MD5-CRYPT password_query = \ SELECT username as user, password, '/var/vmail/%d/%n' as userdb_home, \ 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid \ FROM mailbox WHERE username = '%u' AND active = '1' user_query = \ SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, \ 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota \ FROM mailbox WHERE username = '%u' AND active = '1' root@mail:/etc/dovecot# tail -n 8 /etc/postfix/master.cf # DSPAM dspam unix - n n - 10 pipe flags=Ru user=dspam argv=/usr/bin/dspam --deliver=innocent,spam --user $recipient -i -f $sender -- $recipient # Integration with Dovecot - hand mail over to it for local delivery, and # run the process under the vmail user and mail group. dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/dovecot-lda -d $(recipient) -- Greg Ryman

6 9

[Dovecot] 2048-bit Diffie-Hellman parameters
by Marios Titas 25 Sep '13

25 Sep '13

Currently, dovecot generates two primes for Diffie-Hellman key exchanges: a 512-bit one and a 1024-bit one. In light of recent events, I think it would be wise to add support for 2048-bit primes as well, or even better, add a configuration option that lets the user select a file (or files) containing the DH parameters In recent years, there has been increased interest in DH especially in its ephemeral version (DHE) because it provides perfect forward secrecy. In that context, the use of 1024-bit parameters might not seem such a terrible idea: if someone cracks the ephemeral key then they will only gain access to the data exchanged during that particular session. Therefore, it might not be worth the effort to crack such a key. But this is certainly not the case for IMAPS: it is quite likely that the session data will include the user's credentials.

9 11

[Dovecot] Delete to Archive?
by James E. Pace 25 Sep '13

25 Sep '13

Hi, I recently switched from being a Gmail user to running Dovecot [2.1.10] on my server. Thank you for an easy to use piece of software that solves problems! I am trying (unsuccessfully) to replicate something from GMail. When I delete a message on my iPhone (or other client), I would like to have it moved to an "All Mail" or Archive folder, instead of actually deleting it. Is this possible? Thanks, James

5 7

[Dovecot] Apple IOS 7 Mail APP uses multi body searches by default
by Urban Loesch 25 Sep '13

25 Sep '13

Hi, today we found this blogpost: http://blog.fastmail.fm/2013/09/17/ios-7-mail-app-uses-multi-folder-body-se… Have you any idea if this could impact performance of dovecot using mdbox format with 10MB per file size and zlib enabled? Thanks and regards Urban Loesch

2 1

[Dovecot] still having dsync issues after upgrading to latest
by Matthew Kaufman 25 Sep '13

25 Sep '13

Trying to migrate a bunch of users with mbox format to maildir format. dsync creates some directories, but otherwise does nothing. (Complained about the lack of "/" as separator until I added that to config, now is silent when running dsync except with the -D flag) I have tried dumping all the dovecot that came with my OS and built the latest sources, hoping I'd at least get a little better debug information out... but no luck. Lots of hopefully useful output below. What am I doing wrong? Matthew Kaufman # dovecot -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login first_valid_uid = 4999 mail_gid = 5000 mail_location = maildir:/var/mail/%d/%n mail_privileged_group = mail mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = YES antispam_backend = dspam antispam_dspam_args = --user;%u;--deliver=;--source=error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam;Junk antispam_trash = trash;Trash sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)eeph.com protocols = imap lmtp service auth-worker { user = mail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = mail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } user = mail } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/ssl/local/....crt ssl_key = </etc/ssl/local/....key userdb { args = uid=5000 gid=5000 home=/var/mail/%d/%n driver = static } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = " antispam" } # rm -r /var/mail/matthew.at # /usr/local/bin/dsync -D -u matthew(a)matthew.at mirror mbox:./Mail:INBOX=./matthew doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(matthew(a)matthew.at): Debug: Effective uid=5000, gid=5000, home=/var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: Home dir not found: /var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: maildir++: root=/var/mail/matthew.at/matthew, index=, indexpvt=, control=, inbox=/var/mail/matthew.at/matthew, alt= doveadm(matthew(a)matthew.at): Debug: Namespace : /var/mail/matthew.at/matthew doesn't exist yet, using default permissions doveadm(matthew(a)matthew.at): Debug: Namespace : Using permissions from /var/mail/matthew.at/matthew: mode=0700 gid=default dsync(matthew(a)matthew.at): Debug: Effective uid=5000, gid=5000, home=/var/mail/matthew.at/matthew dsync(matthew(a)matthew.at): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:./Mail:INBOX=./matthew dsync(matthew(a)matthew.at): Debug: fs: root=./Mail, index=, indexpvt=, control=, inbox=./matthew, alt= dsync(matthew(a)matthew.at): Debug: Namespace : ./Mail doesn't exist yet, using default permissions dsync(matthew(a)matthew.at): Debug: Namespace : Using permissions from ./Mail: mode=0700 gid=default dsync(matthew(a)matthew.at): Debug: brain M: in state=master_recv_handshake dsync(matthew(a)matthew.at): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=send_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=send_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=send_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain M: out state=recv_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=send_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain S: out state=recv_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=recv_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain M: out state=recv_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=recv_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain S: out state=recv_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=recv_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain M: out state=master_send_mailbox changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=recv_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=master_send_mailbox dsync(matthew(a)matthew.at): Debug: brain M: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=slave_recv_mailbox dsync(matthew(a)matthew.at): Debug: brain S: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=done dsync(matthew(a)matthew.at): Debug: brain M: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=done dsync(matthew(a)matthew.at): Debug: brain S: out state=done changed=1 # # ls -l /var/mail/matthew.at total 4 drwx--S--- 3 vmail vmail 4096 Sep 24 17:50 matthew # ls -l /var/mail/matthew.at/matthew total 4 drwx--S--- 2 vmail vmail 4096 Sep 24 17:50 Mail # ls -l /var/mail/matthew.at/matthew/Mail total 0

2 2

[Dovecot] imaptest-20130617 seems to be reporting spurious header changes
by Mark Weaver 25 Sep '13

25 Sep '13

I'm trying to use this to test an IMAP server I'm developing (I picked the nightly up from the link on the wiki page at http://www.imapwiki.org/ImapTest/Installation) With one client using the mailbox dovecot-crlf (http://www.dovecot.org/tmp/dovecot-crlf) I get messages like: Error: test(a)npsl.co.uk[67]: 1035253882.5041.34.camel@hurina: Header From changed 'Timo Sirainen <tss(a)iki.fi> Timo Sirainen <tss(a)iki.fi' (len 52) -> 'Timo Sirainen <tss(a)iki.fi>' (len 26): * 1 FETCH (UID 2093 FLAGS () BODY ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 913 0) BODY[HEADER.FIELDS (From From Delivered-To) ] "From: Timo Sirainen <tss(a)iki.fi> From: Timo Sirainen <tss(a)iki.fi> Delivered-To: dovecot(a)procontrol.fi " ENVELOPE ("22 Oct 2002 05:31:22 +0300" "[dovecot] Re: Architectural questions" (("Timo Sirainen" NIL "tss" "iki.fi")) (("" NIL "dovecot-bounce" "procontrol.fi")) (("Timo Sirainen" NIL "tss" "iki.fi")) (("" NIL "dovecot" "procontrol.fi")) NIL NIL "<1035249894.5044.28.camel@hurina>" "<1035253882.5041.34.camel@hurina>") BODY[HEADER.FIELDS (Cc Cc From) ] "From: Timo Sirainen <tss(a)iki.fi> ") (I added the dump of the string length by modifying the code). As I am reading it the test program has got the wrong string rather than the server -- the From header in the mbox file is From: Timo Sirainen <tss(a)iki.fi> which is 26 characters long, not 52, and includes the closing angle bracket, and the code that prints the header out is in src/mailbox-state.c, line 377: client_state_error(client, "%s: Header %s changed '%.*s' (len %d) -> '%.*\ s' (len %d)", msg->message_id, fetch_headers[i].name, (int)orig_headers[j].value_len, (const char *)orig_headers[j].value, (int)orig_headers[j].value_len, (int)fetch_headers[i].value_len, (const char *)fetch_headers[i].value, (int)fetch_headers[i].value_len); Have I read this upside down or is there an issue with the tests? If it is an issue with the tests, any pointers as to where to start looking for the issue would be helpful. Thanks, Mark

2 1

Re: [Dovecot] Problem getting a dovecot proxy to connect to another dovecot machine via STARTTLS
by Arnoud van Heuvelen 24 Sep '13

24 Sep '13

I've solved the issue by setting ssl to 'any-cert' and starttls to NULL. This does a proper SSL request to the node. I still don't understand why Dovecot does a non-SSL request on an SSL port whenever I enable starttls, but I'm happy using normal SSL. Regards,

1 0

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 24 Sep '13

24 Sep '13

> If doveadm says it's invalid UTF-8, it's invalid UTF-8. I guess your > terminal isn't actually using UTF-8 then, but something else. ("locale" > output should say something about UTF-8.) I guess doveadm could also > automatically translate parameters to UTF-8, but that's a bit annoying > to implement. You were absolutely right. After thorough testing I could make up the problem to the SSH-Client PuTTY I was using on a Windows machine while testing. The default "remote character setting" is "ISO-8859-1:1998 (Latin-1, West Europe)", when re-setting to "UTF-8", opening a new shell and testing the "doveadm mailbox rename ..." with german umlauts just works fine then. (Just for the sake of completeness, the "locale" settings were set to (LANG=de_DE.utf-8) globally in /etc/sysconfig/i18n per default.) > The problem here is that * is expanded by your shell, not doveadm. > And it expands into Tr&-AOQ-sh as it's in the filesystem, but that's > only the mUTF-7 encoding of it. The UTF-8 version of the name is > Tr&AOQ-sh. So doveadm only sees that you attempted to resync a > nonexistent mailbox. Using '*' with quotes would work, since doveadm > would do the expansion then. Thanks for pointing that * / '*' issue out. I now unterstand that the "doevadm mailbox rename" converts the input to UTF _before_ applying it in the filesystem. Now it makes sense that doveadm mailbox rename -u user 'Trash' 'Tr&AOQ-sh' must be expanded to Tr&-AOQ-sh. The "-" character directly after the "&"in Tr&-AOQ-sh comes from a special mUTF-Specification (as stated in RFC 3501, section 5.1.3): "In modified UTF-7, printable US-ASCII characters, except for "&", represent themselves; that is, characters with octet values 0x20-0x25 and 0x27-0x7e. The character "&" (0x26) is represented by the two-octet sequence "&-"." So e.g. if I wanted a german umlaut to be encoded in the filesystem, I must enter it directly into dovedm instead of the UTF encoded value. One small point left... > The UTF-8 version of the name is Tr&AOQ-sh Just for understanding - "Tr&AOQ-sh" is IMHO UTF-7, not UTF-8. Accordingly to what stated before, "Tr&-AOQ-sh" and "Tr&AOQ-sh" are encoded both the same (UTF-7), the first seen in clients as "Tr&AOQ-sh" and the second as "TrÃ¤sh". Thanks for all your help! Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] Linux SO_REUSEPORT
by Timo Sirainen 24 Sep '13

24 Sep '13

I just read about Linux v3.9's SO_REUSEPORT feature and decided to implement it for Dovecot. Would be interesting to know how it works for people :) It's going to be in v2.2.6, which I'm planning on releasing tomorrow. Note especially the warning about the bug: http://hg.dovecot.org/dovecot-2.2/rev/a991a0547daa So the idea is that you'd do something like: service imap-login { inet_listener imap { reuse_port = yes } process_min_avail = 4 # number of CPU cores } And the load should be distributed more evenly to the processes.

4 4

[Dovecot] Fwd: lmtp
by Lampa 24 Sep '13

24 Sep '13

Hello, using dovecot with postfix with mysql. Some domains have alias. Local delivery is realized over lmtp. When lmtp delivery to aliased domains, it takes bad mail_location - it takes aliased instead real domain, so lmtp is creating domain and user directory. Lmtp doesn't make sql lookup. I need lmtp delivery to real domain and i don't want to create symlinks. mail_location = maildir:/home/mail/%d/%n/Maildir real domain: domain1.com aliased domain: domain2.com rcpt: user(a)domain2.com lmtp deliver message to /home/mail/domain2.com/user/Maildir instead /home/mail/domain1.com/user/Maildir -- Lampa

3 9

[Dovecot] Permission error
by Koenraad Lelong 24 Sep '13

24 Sep '13

Hi, I'm migrating an existing dovecot (1. series) to new hardware. The new dovecot is a 2. series. I copied the old config and did a doveconf -n -c /etc/dovecot/dovecot.conf > dovecot-2.conf Then I moved the dovecot-2.conf to dovecot.conf and restarted dovecot. When Postfix tries to deliver a message I get this error : 2013-09-16 11:00:10 auth: Fatal: net_connect_unix(auth-worker) in directory /run/dovecot failed: Permission denied (euid=65534(nobody) egid=65534(nogroup) missing +r perm: /run/dovecot/auth-worker, dir owned by 0:0 mode=0755) 2013-09-16 11:00:10 master: Error: service(auth): command startup failed, throttling I tried different things with /run/dovecot/auth-worker, but the error remains. I tried to chmod 777 the socket, I chown-ed to dovecot:dovecot, vmail:vmail. What am I missing ? AFAIK the sql-tables are OK. Thanks. doveconf -n is this : # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-39-generic x86_64 Ubuntu 12.04.3 LTS auth_debug = yes auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 499 info_log_path = /var/log/dovecot.debug last_valid_uid = 499 log_path = /var/log/dovecot log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/var/vmail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } user = nobody } service imap-login { executable = /usr/lib/dovecot/imap-login inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } service imap { executable = /usr/lib/dovecot/imap } service pop3-login { executable = /usr/lib/dovecot/pop3-login inet_listener pop3 { address = * port = 110 } } service pop3 { executable = /usr/lib/dovecot/pop3 } ssl_ca = </etc/postfix/certificate/cacert.org.pem ssl_cert = </etc/postfix/certificate/mailbox.pem ssl_key = </etc/postfix/certificate/mailboxkey.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_ssl = yes protocol imap { imap_max_line_length = 64 k } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-err.log mail_plugins = sieve postmaster_address = some-one(a)ace-electronics.be sendmail_path = /usr/lib/sendmail }

2 4

[Dovecot] doveadm mailbox create error codes
by Micah Anderson 24 Sep '13

24 Sep '13

Hello, I'm trying to find out what the different 'doveadm mailbox create' error codes are. I've been looking through the source, but I can't seem to find them. I did determine that '65' happens when "Error: Can't create mailbox x: Mailbox already exists", but I've also received error 67, and the more mysterious error code 16640. Thanks for any pointers! micah

2 1

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 24 Sep '13

24 Sep '13

Hi there Timo, first of all thank you for taking your time for support! > Forget about mUTF-7 with Dovecot. It's an IMAP-protocol relic, and > Dovecot is trying to get rid of it in as many places as possible. > Although by default the filesystem users mUTF-7, but that can also > be changed with a setting. Thanks for clarifying this. > I suspect your shell is breaking the 8bit chars into invalid UTF-8. I > just tried and it works fine with me. Sorry, we got confusion here... apparently my (lousy) freemail provider which I use to post on this mailinglist doesn't send some special characters etc. unaltered exactly as I typed - so I made a console screenshot of the doveadm rename problem to make things clear. Please have a look here, it will reveal the doveadm rename problem (and that my shell is working fine): http://i.imgur.com/08wKji4.png > > To get things worse, when renaming the mailfolder in Thunderbird to > > "geschÃÂ¤ftliches" it gets correctly written in the filesystem as > > "gesch&AOQ-ftliches"- but afterwards it's NOT found anymore in the > > dovecot index, e.g. when trying doveadm force-resync -u user it is > > not listed anymore (untilback-renaming in fs to the name it was > > indexed before). > Folders aren't indexed by default (mailbox_list_index=no) and > force-resync doesn't affect them. Are you saying > "doveadm mailbox list -u user" doesn't show some folder? I'm not > aware of any bugs related to this. No, the "doveadm mailbox list -u user" works just fine. BUT - I'm still wondering about the resync issue - As I understand the "doveadm force-resync -u user *" command rebuilds the index for the MAILS within the mailfolders? If so, how can the resync be done if the mailfolder itself is not found by doveadm anymore? > I'd need to get some more specifics. Show show exists in filesystems > and what commands don't produce expected results (and what they > produce instead). For clearing up my point, I made another console screenshot with red markings to point out the problem (bug). Please have another look here: http://i.imgur.com/icPfys9.png Thanks for your support, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] can't dovecot tls/ssl to openldap
by 牧原 24 Sep '13

24 Sep '13

Hi, I want to dovecot connect to openldap with ssl/tls, and got error. When without tls/ssl, it works ok. from /var/log/maillog got: Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:05 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<muyuan>, method=PLAIN, rip=192.168.100.99, lip=10.10.120.20, TLS: Disconnected, session=<wSvD1RPnWwDAqGRj> Sep 24 05:38:11 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:13 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<muyuan>, method=PLAIN, rip=192.168.100.99, lip=10.10.120.20, TLS: Disconnected, session=<2T761RPnXADAqGRj> But when I use ldapsearch, it seems also ok I use this from dovecot host ldapsearch -D "cn=dovecot,ou=bindusers,dc=smuy,dc=net" -W -H ldap://ldap.sv. hm -b "ou=accounts,dc=smuy,dc=net" �CZZ it works ok So I have no idea where to check? Or how can I got more detailed log from dovecot for that connection Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Because I use ldapsearch both tls/ssl works well, why dovecot connect error? What��s the detail happen in this connection? Here is my dovecot-ldap.conf.ext: # This file is commonly accessed via passdb {} or userdb {} section in # conf.d/auth-ldap.conf.ext # Space separated list of LDAP hosts to use. host:port is allowed too. #hosts = ldap.sv.hm #uris = ldaps://ldap.sv.hm:636/ uris = ldap://ldap.sv.hm:389/ dn = cn=dovecot,ou=bindusers,dc=smuy,dc=net dnpass = 1qaz2wsx #sasl_bind = no #sasl_mech = #sasl_realm = #sasl_authz_id = # Use TLS to connect to the LDAP server. tls = yes #tls = no tls_ca_cert_file = /etc/ssl/certs/ca/signing-ca.crt tls_ca_cert_dir = /etc/ssl/certs/ca #tls_cipher_suite = # TLS cert/key is used only if LDAP server requires a client certificate. #tls_cert_file = /etc/ssl/certs/mail.crt #tls_key_file = /etc/ssl/private/mail.key # Valid values: never, hard, demand, allow, try #tls_require_cert = never See some suggestions! Great thanks! muyuan

1 0

[Dovecot] dovecot 2.2.5 with plugin listescape and shared mailbox with dot in INBOX
by romain 23 Sep '13

23 Sep '13

Hi list, I have a problem with dovecot 2.2.5 and nightly (latest 20130923) with : * plugin listescape enabled * shared mailbox * and mail_shared_explicit_inbox = no Problem is I can't get list of mails in INBOX of my shared users. For example : ---------------------------------------------------------- 2013-09-23 22:20:06 imap-login: Info: Login: user=<roms>, method=PLAIN, rip=192.168.0.203, lip=192.168.20.200, mpid=6127, TLS, session=<R8D9vhLn3ADAqADL> 2013-09-23 22:20:06 imap: Debug: Loading modules from directory: /usr/local/lib/dovecot 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_autocreate_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_listescape_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_zlib_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib30_imap_zlib_plugin.so 2013-09-23 22:20:06 imap: Debug: Added userdb setting: plugin/acl_groups=Exchange Services,Exchange Domain Servers,Propriétaires créateurs de la stratégie de groupe,Administrateurs du schéma,Admins du domaine,Administrateurs de l'entreprise,Administrators,Users,roms 2013-09-23 22:20:06 imap(roms): Warning: autocreate plugin is deprecated, use mailbox { auto } setting instead 2013-09-23 22:20:06 imap(roms): Debug: Effective uid=471, gid=471, home=/home/dovecot/dovecot//mail/roms 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/dovecot/dovecot//mail/roms/Maildir 2013-09-23 22:20:06 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/roms/Maildir, index=, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/roms/Maildir, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 1 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=shared, prefix=Other Users/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Other Users/%u 2013-09-23 22:20:06 imap(roms): Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=public, prefix=Shared Folders/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/home/dovecot/dovecot//public:INDEX=~//public 2013-09-23 22:20:06 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//public, index=/home/dovecot/dovecot//mail/roms//public, indexpvt=, control=, inbox=, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: auth input: l.dupont system_groups_user=l.dupont uid=471 gid=471 home=/home/dovecot/dovecot//mail/l.dupont 2013-09-23 22:20:07 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/l.dupont/Maildir, index=/home/dovecot/dovecot//mail/l.dupont/Other Users/l.dupont, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/l.dupont/Maildir, alt= 2013-09-23 22:20:07 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:07 imap(roms): Debug: acl: acl username = l.dupont 2013-09-23 22:20:07 imap(roms): Debug: acl: owner = 1 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/l.dupont/Maildir, index=/home/dovecot/dovecot//mail/roms/Other Users/l.dupont, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/l.dupont/Maildir, alt= 2013-09-23 22:20:07 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:07 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:07 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: file /home/dovecot/dovecot//mail/l.dupont/Maildir/.Other Users.l\2edupont/dovecot-acl not found ---------------------------------------------------------- Last line see that the Shared Mailbox "Other Users/l.dupont" is converted to "Other Users.l\2edupont" Note, that this does not append when I trie to access a subfolder like "Other Users/l.dupont/Sent" If I set "mail_shared_explicit_inbox = yes" with plugin listescape, I can access "Other Users/l.dupont/INBOX" If I remove "listescape" from my plugin directive, I can access the INBOX of "Other Users/l.dupont" Thanks for any help :) Regards, Romain

1 0

[Dovecot] Vacation message and DMARC validation
by Gerson Moraes 23 Sep '13

23 Sep '13

Greetings, I have found an issue in the interaction between sieve vacation messages and the SPF, DKIM and DMARC email validation systems. For example, let's say we have a message coming from a(a)a.com to b(a)b.com at a server imap.mydomain.com. The account b(a)b.com has a vacation rule in sieve, and that generates an autoresponse to a(a)a.com. Our problem begins with the definition of section-5.1 in RFC5230 <https://tools.ietf.org/html/rfc5230#section-5.1>. It says that the envelope-from in vacation messages should be set to <>. This is the behavior currently implemented in Dovecot. We have recently added DMARC's authentication to our e-mail servers. DMARC needs one of the two authentication to pass, either SPF or DKIM. SPF works, but not the way DMARC needs it to. DMARC needs a valid SPF record that also matches the "From:" header. In this message, there are no envelope-from, so there are no domain to validate. This is the reason we use SRS to rewrite envelope-from (to do that we use the server address). The last option is to use DKIM authentication. We have clustered SMTP servers. So, in order to make a DKIM signature, the vacation message needs to be sent to the right server. That is, the server where the key to account b(a)b.com is available. To do that, we are implementing a modification to Dovecot source allowing the use of the envelope-from. The modified envelope-from will be used with the Postfix option "sender_dependent_relayhost_maps" in order to choose the right cluster. This does not break RFC5230, because the use of null sender is only a recommendation. I would like to know if a patch to the main project would be appreciated. Could you also please confirm if there are any future plans involving this feature, like an optional configuration for custom envelope-from? Thanks in advance, Gerson Moraes Digirati

3 5

[Dovecot] default client_limit
by Micah Anderson 23 Sep '13

23 Sep '13

I recently upgraded my dovecot from 2.1 to 2.2, and when I started, I received this message: doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (1024) Searching through my configs, I do not have 1024 set anywhere. In order to stop this I set client_limit=1024 in my auth{} block... this seemed odd that the defaults disagreed with each other. However, it made me realize that my system could probably handle more, if it were properly tuned, and the different limit settings at their defaults are probably smaller than they could be for my server and the load it is under. So, I'm wondering how I can accurately set some of these values? The different possible things that can be set are: default_process_limit (for some reason I have this set to 256) default_client_limit (default) default_vsz_limit (I have this set to 512M) for the imap-login service, I have: service_count = 0 process_min_avail = 10 vsz_limit = 512M for service pop3-login, these are set: service_count = 0 process_min_avail = 10 vsz_limit = 512M for service imap, process_limit = 2048 service auth, I've just set the client_limit=1024 I've also got a ulimit -n set to 2048 and in my sysctl.conf, I have the following: fs.inotify.max_user_instances = 2048 because I was seeing this in the logs: Warning: Inotify instance limit for user 8 (UID mail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances What I am looking for is a few things: . is there a formula for setting a proper value for some of these? . will dovecot warn me when I've reached a limit, so I can adjust these? thanks for any suggestions or improvements, I'm pretty sure this system can handle a lot more than it is doing right now, I just am unclear on how to tune it up to do that. micah

1 0

[Dovecot] Expunged message reappeared, giving a new UID
by Simon Fraser 23 Sep '13

23 Sep '13

I am running dovecot 2.2.2 with tcp based replication, and experiencing some duplicated emails. `doveconf -n` output is below. I have narrowed it down to the following scenario: An email arrives, and is successfully replicated to both nodes. It is in INBOX/new/ at this point on both servers. Connect with a mail client, and delete the message - without delayed expunge. So, for example, mutt (press 'd' then '$' to sync the mailbox), or Evolution set to immediately delete. The following log entry appears on the server the client is connected to: Jul 26 10:40:55 intmail3a dovecot: imap(srf): Warning: /mail/spool/s/srf/mail/INBOX/dovecot-uidlist: Duplicate file entry at line 5: 1374831638.M830754P11591.intmail3a,S=1289,W=1321 (uid 733481 -> 733482) - retrying by re-reading from beginning Jul 26 10:40:55 intmail3a dovecot: imap(srf): Warning: Maildir /mail/spool/s/srf/mail/INBOX: Expunged message reappeared, giving a new UID (old uid=733481, file=1374831638.M830754P11591.intmail3a,S=1289,W=1321) The email reappears in the mailbox, although this time it is in INBOX/new on one node and INBOX/cur on the other. As best I can tell it's always in 'new' on the server the client was connected to and in 'cur' on the other. If any other mailbox operation occurs before the delete (Marking the message in question as 'read', receiving a new message into the mailbox in a different lmtp session, marking as read or deleting & expunging some other message) then this prevents the duplication from happening. What can I do to prevent this happening? Is there a synchronisation interval I can adjust, perhaps? Although the message does get synchronised initially. Thanks in advance, Simon. # 2.2.2: /mail/etc/dovecot/dovecot.conf # OS: Linux 3.5.0-23-generic x86_64 Ubuntu 12.04.2 LTS disable_plaintext_auth = no doveadm_password = secret first_valid_uid = 100 lda_mailbox_autocreate = yes mail_gid = dovecot mail_home = /mail/spool/%1n/%n mail_location = maildir:~/mail:INBOX=~/mail/INBOX mail_plugins = notify replication mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /mail/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_replica = tcps:intmail3b:12345 sieve_dir = ~/sieve } protocols = imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = dovecot } unix_listener replication-notify { mode = 0600 user = dovecot } } service config { unix_listener config { user = dovecot } } service doveadm { inet_listener { port = 12345 ssl = yes } user = dovecot } service replicator { process_min_avail = 1 } ssl_cert = </mail/etc/certs/mail-cert.pem ssl_client_ca_dir = /etc/ssl/certs ssl_key = </mail/etc/certs/mail-key.pem userdb { args = /mail/etc/dovecot/dovecot-ldap.userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = notify replication sieve } protocol lda { mail_plugins = notify replication sieve } protocol imap { mail_max_userip_connections = 30 } -- The Wellcome Trust Sanger Institute is operated by Genome Research Limited, a charity registered in England with number 1021457 and a company registered in England with number 2742969, whose registered office is 215 Euston Road, London, NW1 2BE.

8 30

[Dovecot] Dsync error: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default
by Aleksey Tsvetkov 23 Sep '13

23 Sep '13

Hi, Introduction: There are two domains, for example (aaa.com, bbb.com) In the aaa.com domain two users (bob(a)aaa.com, alex(a)aaa.com) In the bbb.com domain there are no users. In time full sync replication (replication_full_sync_interval) operations in logs appear errors: dovecot: dsync-local(bob(a)aaa.com): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default: Invalid value for default sieve attribute dovecot: dsync-remote(bob(a)aaa.com): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default: Invalid value for default sieve attribute One more error: dovecot: auth-worker(46263): sql(bob(a)bbb.com): unknown user dovecot: auth-worker(46263): sql(bob(a)bbb.com): Unknown user dovecot: auth-worker(46263): sql(bob): unknown user dovecot: auth-worker(46263): sql(bob): Unknown user dovecot: auth-worker(46263): sql(alex(a)aaa.com): unknown user dovecot: auth-worker(46263): sql(alex(a)aaa.com): Unknown user dovecot: auth-worker(46263): sql(alex): unknown user dovecot: auth-worker(46263): sql(alex): Unknown user Command: doveadm user '*' bob(a)aaa.com alex(a)aaa.com dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword pam passwd passwd-file sql Userdb: checkpassword nss passwd prefetch passwd-file sql dovecot --version 2.2.5 Somebody faced this problem? -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

4 4

[Dovecot] mdbox index directories: bug?
by Holecz Endre 22 Sep '13

22 Sep '13

Hi, I'm using mdbox now (Dovecot 2.2.4), with indexes on a separate disk. Works fine, but the directories for indexes are also present in the storage folder, and are empty. Userdb (sql) returns this: home /var/vmail/domains/somedomain/someuser mail mdbox:~/mdbox:INDEX=/mnt/spool/dovecot/index/somedomain/s/someuser And the created directory structure is: /var/vmail/domains/somedomain/someuser /mdbox /mailboxes /INBOX /dbox-Mails /storage /mnt/spool/dovecot/index/somedomain/s/someuser /mailboxes /INBOX /storage /var/vmail/domains/somedomain/someuser/mdbox/mailboxes/* is always empty. Am I doing something wrong, or is this by design? :) Regards, Endre

3 3

[Dovecot] doveadm sync only creates directories, don't sync messages?
by Matthew Kaufman 22 Sep '13

22 Sep '13

Running Dovecot 2.1.7. I'm trying to migrate from an environment with mbox files to a maildir configuration. I remove all vestiges of my maildir over in /var/mail I put my old mailboxes in ./Mail and my old inbox in ./matthew. I issue this command: doveadm sync -u matthew(a)matthew.at mbox:./Mail:INBOX=./matthew Initially it gave me errors about separator, so I set the separator in the inbox namespace to "/" explicitly. Now that I've done that, and re-run it, over in the right place /var/mail, it creates "matthew" and a subdirectory "Mail". That's it. Doesn't take long to do it, either. But it doesn't copy any messages at all. I must be doing something wrong... but what? Matthew Kaufman matthew(a)eeph.com

1 0

[Dovecot] pop3c migration?
by Gedalya 22 Sep '13

22 Sep '13

Hi, I'm running dsync migrations using imapc and the source IMAP server is just too slow. It has taken 8 hours to migrate a mailbox with 47,000 messages. It seems most of the mailboxes are never accessed with IMAP, so it would be just as good to migrate them via POP3 which should work faster in my case. Is this actually meant to work? doveadm -D -o pop3c_user=xxxxxx(a)example.com -o 'pop3c_password=*******' -o pop3c_host=120.121.122.123 backup -u yyyyy(a)example.com -R pop3c: gives: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_init (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(yyyyy(a)example.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy doveadm(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: maildir++: root=/stor/real/domains/example.com/yy/yyyyy/Maildir, index=, control=, inbox=/stor/real/domains/example.com/yy/yyyyy/Maildir, alt= dsync(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy dsync(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= Segmentation fault remembering something about that... : # mkdir /tmp/pop3c # chown vmail:vmail /tmp/pop3c/ # doveadm -D -o pop3c_user=xxxxxx(a)example.com -o 'pop3c_password=*******' -o pop3c_host=120.121.122.123 backup -u yyyyy(a)example.com -R pop3c:/tmp/pop3c doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_init (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(yyyyy(a)example.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy doveadm(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: maildir++: root=/stor/real/domains/example.com/yy/yyyyy/Maildir, index=, control=, inbox=/stor/real/domains/example.com/yy/yyyyy/Maildir, alt= dsync(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy dsync(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=pop3c:/tmp/pop3c dsync(yyyyy(a)example.com): Debug: fs: root=/tmp/pop3c/., index=/tmp/pop3c, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /tmp/pop3c/.: mode=0755 gid=-1 dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /stor/real/domains/example.com/yy/yyyyy/Maildir: mode=0700 gid=-1 dsync(yyyyy(a)example.com): Debug: Namespace : /tmp/pop3c/./INBOX doesn't exist yet, using default permissions dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /tmp/pop3c/.: mode=0755 gid=-1 dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Looking up IP address dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Connecting to 120.121.122.123:110 dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Authenticating as xxxxxx(a)example.com dsync(yyyyy(a)example.com): Panic: file mail-storage.c: line 1311 (mailbox_get_metadata): assertion failed: ((items & MAILBOX_METADATA_GUID) == 0 || !guid_128_is_empty(metadata_r->guid)) dsync(yyyyy(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x45caa) [0xb761ccaa] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x47) [0xb761cdc7] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb761d647] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_metadata+0x120) [0xb76f3040] -> doveadm() [0x80740bc] -> doveadm(dsync_worker_mailbox_iter_next+0x21) [0x8071c11] -> doveadm() [0x806c1f7] -> doveadm(dsync_brain_sync+0x6c0) [0x806b890] -> doveadm(dsync_brain_sync_all+0x18) [0x806c4f8] -> doveadm() [0x806961b] -> doveadm() [0x8069bbf] -> doveadm() [0x80541ec] -> doveadm(doveadm_mail_try_run+0x257) [0x8054ee7] -> doveadm(main+0x391) [0x805d0c1] -> /lib/i386-linux-gnu/i686/cmov/libc.so.6(__libc_start_main+0xe6) [0xb748ae46] -> doveadm() [0x8054001] Aborted Now I'm lost... Am I in the right direction? Thanks, Gedalya # dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 auth_default_realm = example.com auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain default_client_limit = 8096 dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imapc_host = mail01.example.com mail_gid = vmail mail_plugins = listescape mail_prefetch_count = 50 mail_uid = vmail namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash expire2 = Trash.* expire3 = Junk expire_dict = proxy::expire pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX sieve = ~/.dovecot.sieve sieve_before = /var/local/lib/dovecot/sieve/global/fileinto-spam.sieve sieve_dir = ~/sieve } pop3c_host = 120.121.122.123 postmaster_address = postmaster(a)example.com service auth-worker { user = $default_internal_user } service auth { client_limit = 20480 } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 10240 } service lmtp { inet_listener lmtp { address = 0.0.0.0 port = 7025 } } service pop3-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service pop3 { process_limit = 4096 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol doveadm { mail_plugins = listescape pop3_migration } protocol lmtp { mail_plugins = listescape sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = listescape imap_quota ssl_cert = </etc/dovecot/imap.example.com.crt ssl_key = </etc/dovecot/imap.example.com.key } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = listescape pop3_fast_size_lookups = yes pop3_no_flag_updates = yes pop3_reuse_xuidl = no pop3_save_uidl = yes pop3_uidl_format = %08Xu%08Xv ssl_cert = </etc/dovecot/pop.example.com.crt ssl_key = </etc/dovecot/pop.example.com.key } /etc/dovecot/dovecot-sql.conf.ext : driver = mysql connect = ..... default_pass_scheme = PLAIN password_query = SELECT password, \ '/stor/real/domains/%d/%2n/%n' AS userdb_home, \ 'maildir:/stor/real/domains/%d/%2n/%n/Maildir' as userdb_mail, \ concat('*:storage=', quota_mb, 'M') as userdb_quota_rule, \ 'vmail' AS userdb_uid, 'vmail' AS userdb_gid \ FROM email WHERE userid = '%n' AND domain = '%d' and deleted=0 user_query = SELECT '/stor/real/domains/%d/%2n/%n' AS home, \ 'maildir:/stor/real/domains/%d/%2n/%n/Maildir' as mail, \ concat('*:storage=', quota_mb, 'M') as quota_rule, \ 'vmail' AS uid, 'vmail' AS gid \ FROM email WHERE userid = '%n' AND domain = '%d' and deleted=0 iterate_query = SELECT userid as user, domain FROM email where deleted=0

2 2

[Dovecot] Attachment file larger than expected
by Angel L. Mateo 22 Sep '13

22 Sep '13

Hello, I'm using dovecot 2.1.16 with SiS configured as: mail_attachment_dir = <mypath> mail_attachment_min_size = 128 k mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} I'm having a few errors like: Sep 18 15:46:32 myotis51 dovecot: imap(igd): Error: Attachment file /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 larger than expected (235866) They are really few and users haven't reported any problem, but the errors are there. In this case, actual file size of the attachment is: amateo_adm@myotis51:~$ sudo stat /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 Fichero: «/mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514» Tamaño: 174476 Bloques: 344 Bloque E/S: 4096 fichero regular Dispositivo: fc00h/64512d Nodo-i: 152334473 Enlaces: 2 Acceso: (0600/-rw-------) Uid: ( 2012/ vmail) Gid: ( 204/ vmail) Acceso: 2013-09-18 15:46:20.540728654 +0200 Modificación: 2013-09-18 15:46:20.556728948 +0200 Cambio: 2013-09-18 15:46:20.556728949 +0200 Creación: - and file is identified as: amateo_adm@myotis51:~$ sudo file /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514: MIME entity, UTF-8 Unicode text, with very long lines, with CRLF line terminators Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] problem with dovecot replication over tcp
by nik600 22 Sep '13

22 Sep '13

Dear all i'm following the wiki at this page http://wiki2.dovecot.org/Replication but i'm getting this errors: #doveadm -v sync tcp:dst_hostname #doveadm(root): Fatal: Failed to start dsync-server command: 75 If i look at the dst dovecot.log file i get: Sep 16 12:42:18 auth: Error: passdb(root,xx): Auth client doesn't have permissions to do a PASS lookup: /var/run/dovecot/auth-userdb mode=0666, but not owned by UID 1002(vmail) Sep 16 12:42:18 doveadm(xx,root): Error: user root: Auth PASS lookup failed Sep 16 12:42:18 doveadm(xx,root): Debug: auth input: Sep 16 12:42:18 doveadm(xx,root): Error: dsync-server: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_proxy_port is set) I've also tried to perform a #chown vmail /var/run/dovecot/auth-userdb But the error is the same. If i do the #doveadm user * I get a list of users loaded from the database i've added these line to my dovecot-sql.conf iterate_query = SELECT username from mailbox where active=1 Any idea? Thanks -- /*************/ nik600 http://www.kumbe.it

2 1

[Dovecot] DH Parameter
by Dimi - 22 Sep '13

22 Sep '13

Hi! Is there any possibility to let dovecot serve >1024 Bit DH Parameters at SSL/TLS-connections? Is it possible to replace /var/lib/dovecot/ssl-parameters.ssl with DH-parameter generated by openssl? If not: Are there any plans to implement that? Thank you!

2 1

[Dovecot] Error: BUG: Worker sent reply with id 393, expected 394
by 刘莹莹 22 Sep '13

22 Sep '13

hi dovecot: when i login 100 users with imap protocol ,Someusers appeared a BUG in maillog like : Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 393, expected 394 Sep 10 09:05:22 auth(default): Error: worker-server(q82(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 31, expected 32 Sep 10 09:05:22 auth(default): Error: worker-server(q95(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 32, expected 33 Sep 10 09:05:22 auth(default): Error: worker-server(q99(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 29, expected 30 Sep 10 09:05:22 auth(default): Error: worker-server(q22(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 imap-login: Info: Internal login failure (auth failed, 1 attempts): user=<q3(a)t.com>, method=PLAIN, rip=10.12.80.3, lip=10.12.80.6

2 1

[Dovecot] Dovecot 2.0, 2.1 and 2.2.5 core dump when Quota Plugin (FS) is enabled
by Harald Strack 22 Sep '13

22 Sep '13

Hi, we are actually deploying a new IMAP-Server, targeting dovecot 2.1.17. Unfortunately, our tests with imaptest did not succeed, were ending in core dumps. We did this test: ./imaptest host=example.com port=143 user=strack pass=secret disconnect_quit no_pipelining mbox=dovecot-crlf That's what we get in dovecot's log: Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22810, session=<EurP9wPmVgCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22811, session=<mSXT9wPmWgCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22812, session=<1GbR9wPmWACBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22813, session=<JKbQ9wPmVwCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22814, session=<USLS9wPmWQCBu/Qf> Sep 10 11:17:04 imap(strack): Panic: file mbox-storage.c: line 712 (mbox_transaction_unlock): assertion failed: (mbox->box.transaction_count > 0 || mbox->mbox_lock_type == F_UNLCK) Sep 10 11:17:04 imap(strack): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3c7824660a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78246656] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78219eaa] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c786600c0] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb7e7) [0x7f113b5427e7] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb218) [0x7f113b542218] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mbox_sync+0x88) [0x3c7865fea8] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mbox_transaction_save_commit_post+0x27) [0x3c78657c07] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c786a5313] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x9f) [0x3c786b3cdf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x8a) [0x3c786a4f5a] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c78660121] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb8af) [0x7f113b5428af] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3e) [0x3c7867aa9e] -> dovecot/imap() [0x408b3a] -> dovecot/imap() [0x4088e4] -> dovecot/imap() [0x408d3c] -> dovecot/imap(cmd_append+0x139) [0x408f99] -> dovecot/imap(command_exec+0x3d) [0x41155d] -> dovecot/imap() [0x41046e] -> dovecot/imap() [0x41055a] -> dovecot/imap(client_handle_input+0x135) [0x410785] -> dovecot/imap(client_input+0x5f) [0x4110af] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x3c78252c16] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x3c78253c9f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x3c78252bb8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x3c7823e083] -> dovecot/imap(main+0x29d) [0x4195bd] Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22826, session=<KyHU9wPmWwCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22827, session=<kxTY9wPmXACBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22828, session=<CXXg9wPmXQCBu/Qf> Sep 10 11:17:05 imap(strack): Fatal: master: service(imap): child 22806 killed with signal 6 (core dumped) Sep 10 11:17:05 imap(strack): Info: Connection closed in=49 out=3832 Sep 10 11:17:05 imap(strack): Info: Connection closed in=49 out=3832 That's the backtrace of the coredump: Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_sss.so.2...Reading symbols from /usr/lib/debug/lib64/libnss_sss.so.2.debug...done. done. Loaded symbols for /lib64/libnss_sss.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.107.el6_4.2.x86_64 keyutils-libs-1.4-4.el6.x86_64 krb5-libs-1.10.3-10.el6_4.4.x86_64 libcom_err-1.41.12-14.el6_4.2.x86_64 libgcc-4.4.7-3.el6.x86_64 libselinux-2.0.94-5.3.el6_4.1.x86_64 openssl-1.0.0-27.el6_4.2.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 #1 0x0000003bc0234085 in abort () from /lib64/libc.so.6 #2 0x0000003c78246618 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 #3 0x0000003c78246656 in i_internal_fatal_handler (ctx=0x7fff1c87efa0, format=<value optimized out>, args=<value optimized out>) at failures.c:649 #4 0x0000003c78219eaa in i_panic (format=0x2c1e <Address 0x2c1e out of bounds>) at failures.c:263 #5 0x0000003c786600c0 in mbox_transaction_unlock (box=0x1a51270, lock_id=<value optimized out>) at mbox-storage.c:711 #6 0x00007f95c08c77e7 in quota_mailbox_transaction_rollback (ctx=0x1a589e0) at quota-storage.c:142 #7 0x00007f95c08c7218 in quota_mailbox_sync_notify (box=0x1a51270, uid=0, sync_type=0) at quota-storage.c:301 #8 0x0000003c7865fea8 in mbox_sync (mbox=0x1a51270, flags=<value optimized out>) at mbox-sync.c:2006 #9 0x0000003c78657c07 in mbox_transaction_save_commit_post (_ctx=0x1a53e20, result=<value optimized out>) at mbox-save.c:807 #10 0x0000003c786a5313 in index_transaction_index_commit (index_trans=0x1a5a530, result_r=0x7fff1c87f190) at index-transaction.c:50 #11 0x0000003c786b3cdf in mail_index_transaction_commit_full (_t=0x7fff1c87f1b8, result_r=0x7fff1c87f190) at mail-index-transaction.c:251 #12 0x0000003c786a4f5a in index_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at index-transaction.c:132 #13 0x0000003c78660121 in mbox_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at mbox-storage.c:729 #14 0x00007f95c08c78af in quota_mailbox_transaction_commit (ctx=0x1a5a390, changes_r=0x7fff1c87f260) at quota-storage.c:124 #15 0x0000003c7867aa9e in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fff1c87f260) at mail-storage.c:1515 #16 0x0000000000408b3a in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:284 #17 0x00000000004088e4 in cmd_append_continue_message (cmd=0x1a4ea50) at cmd-append.c:466 #18 0x0000000000408d3c in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:399 #19 0x0000000000408f99 in cmd_append (cmd=0x1a4ea50) at cmd-append.c:519 #20 0x000000000041155d in command_exec (cmd=0x1a4ea50) at imap-commands.c:148 #21 0x000000000041046e in client_command_input (cmd=0x1a4ea50) at imap-client.c:684 #22 0x000000000041055a in client_command_input (cmd=0x1a4ea50) at imap-client.c:735 #23 0x0000000000410785 in client_handle_next_command (client=0x1a4e240) at imap-client.c:776 #24 client_handle_input (client=0x1a4e240) at imap-client.c:788 #25 0x00000000004110af in client_input (client=0x1a4e240) at imap-client.c:827 #26 0x0000003c78252c16 in io_loop_call_io (io=0x1a4cb70) at ioloop.c:379 #27 0x0000003c78253c9f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 #28 0x0000003c78252bb8 in io_loop_run (ioloop=0x1a35670) at ioloop.c:398 #29 0x0000003c7823e083 in master_service_run (service=0x1a35520, callback=<value optimized out>) at master-service.c:544 #30 0x00000000004195bd in main (argc=1, argv=0x1a35370) at main.c:389 That's the full backtrace of the coredump: #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.107.el6_4.2.x86_64 keyutils-libs-1.4-4.el6.x86_64 krb5-libs-1.10.3-10.el6_4.4.x86_64 libcom_err-1.41.12-14.el6_4.2.x86_64 libgcc-4.4.7-3.el6.x86_64 libselinux-2.0.94-5.3.el6_4.1.x86_64 openssl-1.0.0-27.el6_4.2.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003bc0234085 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x0000003c78246618 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1a2d3a8 "/usr/lib64/dovecot/libdovecot.so.0() [0x3c7824660a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78246656] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78219eaa] -> /usr/lib64/dovecot/libdovecot-stora"... #3 0x0000003c78246656 in i_internal_fatal_handler (ctx=0x7fff1c87efa0, format=<value optimized out>, args=<value optimized out>) at failures.c:649 status = 0 #4 0x0000003c78219eaa in i_panic (format=0x2c1e <Address 0x2c1e out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff1c87f070, reg_save_area = 0x7fff1c87efb0}} #5 0x0000003c786600c0 in mbox_transaction_unlock (box=0x1a51270, lock_id=<value optimized out>) at mbox-storage.c:711 mbox = 0x1a51270 __FUNCTION__ = "mbox_transaction_unlock" #6 0x00007f95c08c77e7 in quota_mailbox_transaction_rollback (ctx=0x1a589e0) at quota-storage.c:142 qbox = 0x1a51858 qt = 0x1a66a90 #7 0x00007f95c08c7218 in quota_mailbox_sync_notify (box=0x1a51270, uid=0, sync_type=0) at quota-storage.c:301 qbox = 0x1a51858 uids = <value optimized out> sizep = <value optimized out> i = <value optimized out> count = <value optimized out> size = <value optimized out> #8 0x0000003c7865fea8 in mbox_sync (mbox=0x1a51270, flags=<value optimized out>) at mbox-sync.c:2006 lock_id = 11 ---Type <return> to continue, or q <return> to quit--- ret = 0 __FUNCTION__ = "mbox_sync" #9 0x0000003c78657c07 in mbox_transaction_save_commit_post (_ctx=0x1a53e20, result=<value optimized out>) at mbox-save.c:807 ctx = 0x1a53e20 __FUNCTION__ = "mbox_transaction_save_commit_post" #10 0x0000003c786a5313 in index_transaction_index_commit (index_trans=0x1a5a530, result_r=0x7fff1c87f190) at index-transaction.c:50 t = 0x1a5a390 ret = 0 __FUNCTION__ = "index_transaction_index_commit" #11 0x0000003c786b3cdf in mail_index_transaction_commit_full (_t=0x7fff1c87f1b8, result_r=0x7fff1c87f190) at mail-index-transaction.c:251 t = 0x1a5a530 index = 0x1a4ccc0 index_undeleted = <value optimized out> #12 0x0000003c786a4f5a in index_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at index-transaction.c:132 box = 0x1a51270 itrans = 0x0 result = {log_file_seq = 17, log_file_offset = 6032, commit_size = 196, ignored_modseq_changes = 0} ret = <value optimized out> #13 0x0000003c78660121 in mbox_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at mbox-storage.c:729 mt = <value optimized out> box = 0x1a51270 lock_id = 11 ret = <value optimized out> #14 0x00007f95c08c78af in quota_mailbox_transaction_commit (ctx=0x1a5a390, changes_r=0x7fff1c87f260) ---Type <return> to continue, or q <return> to quit--- at quota-storage.c:124 qbox = 0x1a51858 qt = 0x1a5a1e0 #15 0x0000003c7867aa9e in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fff1c87f260) at mail-storage.c:1515 _data_stack_cur_id = 4 t = 0x1a5a390 ret = <value optimized out> #16 0x0000000000408b3a in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:284 sync_flags = <value optimized out> imap_flags = <value optimized out> changes = {pool = 0x1a61fe0, uid_validity = 1268835246, saved_uids = {arr = {buffer = 0x1a62000, element_size = 8}, v = 0x1a62000, v_modifiable = 0x1a62000}, ignored_modseq_changes = 0, changed = true, no_read_perm = false} msg = <value optimized out> client = 0x1a4e240 ctx = 0x1a4eb48 args = 0x1a59a98 flags_list = <value optimized out> flags = <value optimized out> keywords_list = <value optimized out> keywords = <value optimized out> internal_date_str = <value optimized out> msg = <value optimized out> internal_date = <value optimized out> ret = <value optimized out> timezone_offset = <value optimized out> save_count = <value optimized out> nonsync = <value optimized out> ---Type <return> to continue, or q <return> to quit--- fatal = <value optimized out> __FUNCTION__ = "cmd_append_continue_parsing" #17 0x00000000004088e4 in cmd_append_continue_message (cmd=0x1a4ea50) at cmd-append.c:466 all_written = true client = 0x1a4e240 ctx = 0x1a4eb48 size = 0 ret = <value optimized out> #18 0x0000000000408d3c in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:399 client = 0x1a4e240 ctx = 0x1a4eb48 args = 0x1a59a98 flags_list = 0x0 flags = 0 keywords_list = 0x3c782426aa keywords = 0x0 internal_date_str = <value optimized out> msg = <value optimized out> internal_date = -1 ret = 0 timezone_offset = 0 save_count = <value optimized out> nonsync = true fatal = <value optimized out> __FUNCTION__ = "cmd_append_continue_parsing" #19 0x0000000000408f99 in cmd_append (cmd=0x1a4ea50) at cmd-append.c:519 client = 0x1a4e240 ctx = 0x1a4eb48 mailbox = 0x1a38910 "INBOX" ---Type <return> to continue, or q <return> to quit--- #20 0x000000000041155d in command_exec (cmd=0x1a4ea50) at imap-commands.c:148 hook = 0x1a36cd0 ret = <value optimized out> #21 0x000000000041046e in client_command_input (cmd=0x1a4ea50) at imap-client.c:684 client = 0x1a4e240 command = <value optimized out> __FUNCTION__ = "client_command_input" #22 0x000000000041055a in client_command_input (cmd=0x1a4ea50) at imap-client.c:735 client = 0x1a4e240 command = <value optimized out> __FUNCTION__ = "client_command_input" #23 0x0000000000410785 in client_handle_next_command (client=0x1a4e240) at imap-client.c:776 size = 1320 #24 client_handle_input (client=0x1a4e240) at imap-client.c:788 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #25 0x00000000004110af in client_input (client=0x1a4e240) at imap-client.c:827 cmd = <value optimized out> output = 0x1a4ca88 bytes = 1320 __FUNCTION__ = "client_input" #26 0x0000003c78252c16 in io_loop_call_io (io=0x1a4cb70) at ioloop.c:379 ioloop = 0x1a35670 t_id = 2 #27 0x0000003c78253c9f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x1a359e0 ---Type <return> to continue, or q <return> to quit--- events = <value optimized out> event = 0x1a35a50 list = 0x1a4cbc0 io = <value optimized out> tv = {tv_sec = 1799, tv_usec = 999319} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> #28 0x0000003c78252bb8 in io_loop_run (ioloop=0x1a35670) at ioloop.c:398 No locals. #29 0x0000003c7823e083 in master_service_run (service=0x1a35520, callback=<value optimized out>) at master-service.c:544 No locals. #30 0x00000000004195bd in main (argc=1, argv=0x1a35370) at main.c:389 set_roots = {0x41c460, 0x0} login_set = {auth_socket_path = 0x1a2d078 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x419710 <login_client_connected>, failure_callback = 0x418f30 <login_client_failed>} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> c = <value optimized out> That's our configuration: # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.4 (Santiago) xfs auth_debug = yes auth_verbose = yes debug_log_path = /var/log/dovecot/dovecot-debug.log default_client_limit = 3000 default_process_limit = 8192 disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log login_greeting = Server ready. mail_debug = yes mail_location = mbox:/var/spool/fhmrz_imap/% u/dovecot-home:LAYOUT=maildir++:INBOX=/var/spool/mail/% u:INDEX=/var/opt/index/%u/dovecot-indexes:CONTROL=/var/opt/index/% u/dovecot-control mail_plugin_dir = /usr/lib/dovecot mail_plugins = listescape quota mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size flags quota = fs:User quota:user:noenforcing quota_exceeded_message = Quota exceeded, please go to http://www.timbuktu.edu/over_quota_help for instructions on how to fix this. } protocols = imap pop3 service anvil { client_limit = 16744 } service auth { client_limit = 16800 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 8192 process_min_avail = 8 } service imap { process_limit = 16084 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 16084 } ssl_cert = </etc/pki/tls/certs/example.pem ssl_key = </etc/pki/tls/private/example-key.pem userdb { driver = passwd } protocol imap { mail_max_userip_connections = 30 mail_plugins = listescape quota imap_quota } protocol pop3 { mail_max_userip_connections = 10 pop3_uidl_format = %08Xu%08Xv } The problem occurs with dovecot-2.0.9 and dovecot-2.1.17 and also dovecot-2.2.5! From the stacktrace I could see that the problem origins from the quota plugin. Thus, when I disabled the quota plugin the problem went away. The problem did only occur on a high concurrency level on one mbox/folder, running imaptest with only one user and 10 clients. When we run imaptest in a more real-world fashion with several thousand of users and clients=100, the error did not occur. Because of this I am not sure how problematic this bug will be in a production environment? What do you think? Any help is greatly appreciated! br Harald Strack -- Harald Strack, Dipl.Inf.(FH) IT Development ssystems c/o berliner gazette Danziger Str. 31 10435 Berlin Tel: +49 30 2023 6071 - 1 http://www.ssystems.de

2 1

[Dovecot] Read-only account through INDEX=MEMORY:CONTROL=MEMORY and non-writable Unix-permissions
by Steffen Kaiser 22 Sep '13

22 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, my goal is to provide a special mailbox for some mail accounts. The user should get the information, to look somewhere else. The user must not change anything at all. I also don't want to provide a mailbox for each user. I got the setup below, which seems to run with Dovecot v2.2; however, "CONTROL=MEMORY" is not documented. Is the setup stable for next versions of Dovecot or is CONTROL=MEMORY not a feature, but a bug? ====== user settings: home=/home/nomailbox mail=maildir:/home/nomailbox/Maildir:INDEX=MEMORY:CONTROL=MEMORY uid=vmail gid=vmail The structure of the directory: /home/nomailbox/: total 12 drwxr-xr-x 3 root root 4096 Oct 24 2007 ./ drwxr-xr-x 18 root root 4096 Sep 9 10:36 ../ dr-xr-xr-x 5 root root 4096 Oct 24 2007 Maildir/ /home/nomailbox/Maildir: total 20 dr-xr-xr-x 5 root root 4096 Oct 24 2007 ./ drwxr-xr-x 3 root root 4096 Oct 24 2007 ../ dr-xr-xr-x 2 root root 4096 Oct 24 2007 cur/ dr-xr-xr-x 2 root root 4096 Sep 9 08:23 new/ dr-xr-xr-- 2 root root 4096 Oct 24 2007 tmp/ /home/nomailbox/Maildir/cur: total 8 dr-xr-xr-x 2 root root 4096 Oct 24 2007 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -rw-r--r-- 1 root root 0 Oct 24 2007 .placeholder /home/nomailbox/Maildir/new: total 12 dr-xr-xr-x 2 root root 4096 Sep 9 08:23 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -r--r--r-- 1 root root 804 Sep 9 08:24 no-mailbox-for-you /home/nomailbox/Maildir/tmp: total 8 dr-xr-xr-- 2 root root 4096 Oct 24 2007 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUi22kF3r2wJMiz2NAQLJEAf/WM0jXqVmZ6HtEvoKTB4grE2xFfN4Ylig imhPVf/yufYLzQw+w98fhrozEcm7UK0mUWpiJQzMowYyLNdF8tVwhgTdAfFa6fhK +L0+GxVcCuvRq/YjIivhgQ7gwZlhjLWa43Fo65HAqude4nnuyb5/RuVb0aPBlB73 1V5nMB5f9PSrlAjtK4kLOq1VRNp2SCVfBem/ESqhYSZ+O51gGZ8JRm7skWr82GmZ tdeYDa52h8CWm67S1lzNK42yNoElkLrH5MZJLCBmjg/hLjD99aMCAdgWRL5zyg/h bZzoOZNztQq0CwBHTB+KY9YBkfMmXzFtse3C0a2Eg9m5bmJmNblPGw== =iYWU -----END PGP SIGNATURE-----

2 1

[Dovecot] fdatasync -- Error -- bad file descriptor
by Vijay Rajah 22 Sep '13

22 Sep '13

Hello list, I have a dovecot 2.2.5 instance configured to use mdbox as mailbox format. I configured to use separate storage attachments and use SIS.. (doveconf -n below) I get this error Sep 6 12:29:52 vrajah.mydomain.tld dovecot: lmtp(14258, email(a)mydomain.tld) Error: fdatasync(/apps/mail/mailbox/attachments/23/12/2312039008db057a1c75-2efc2d00687d2952b2370000f89409f1) failed: Bad file descriptor I'm using centos 6.4 on a KVM with ext4 as fs. Can someone tell me why i'm getting this error? and how to fix this? -Thanks in advance Vijay ##########doveconf -n # 2.2.5: /apps/mail/dovecot/2.2.5/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.14.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login digest-md5 cram-md5 auth_socket_path = /apps/mail/var/dovecot/run/auth-userdb base_dir = /apps/mail/var/dovecot/run/ debug_log_path = /var/log/dovecot-debug.log dict { sqlquota = mysql:/apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/sqlquota.dict.ext } hostname = mail1(a)mydomain.tldmydomain.tld mail_attachment_dir = /apps/mail/mailbox/attachments mail_attachment_hash = %{sha256:80} mail_debug = yes mail_location = mdbox:/apps/mail/mailbox/%d/%n/mdbox mail_plugin_dir = /apps/mail/dovecot/2.2.5/lib/dovecot/ mail_plugins = " virtual quota zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl dotlock mdbox_rotate_size = 1 M namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::sqlquota quota_grace = 10%% quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 450 4.2.2 Mailbox is full. Try again later quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_before = /apps/mail/var/dovecot/sieve/ sieve_dir = ~/sieve sieve_global_dir = /apps/mail/var/dovecot/sieve zlib_save = bz2 zlib_save_level = 9 } protocols = imap lmtp sieve service auth { unix_listener /apps/mail/var/postfix/dovecot-auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /apps/mail/var/postfix/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 10 vsz_limit = 64 M } service managesieve { process_limit = 1024 } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } shutdown_clients = no ssl_ca = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mayca.crt.pem ssl_cert = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.mydomain.tld.pem ssl_key = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.mydomain.tld.key ssl_parameters_regenerate = 30 hours submission_host = 127.0.0.1:587 userdb { driver = prefetch } userdb { args = /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " virtual quota zlib sieve zlib" } protocol imap { mail_plugins = " virtual quota zlib imap_quota imap_zlib" } protocol lmtp { debug_log_path = /var/log/dovecot-lmtp-debg.log mail_plugins = " virtual quota zlib sieve zlib" }

2 2

[Dovecot] permission problem when using public namespace and "subscription = yes"
by Lars Uhlmann 22 Sep '13

22 Sep '13

I have configured an public namespace "Test" for a group of users: | namespace public { | separator = . | prefix = Test. | location = maildir:/mailroot/public/Test | hidden = no | list = yes | subscriptions = yes | } Using each users own subscription file for a public mailbox doesn't make sense when the mailbox is heavily used. Every directory operation (create/rename) needs to be synced between all subscribers automatically and immediately. So I set "subscriptions = yes". My ACLS look like this: | user=mark lrwstiekx | user=tim lrwstiekx | user=max lr | user=jenny lrwstiekx | user=louis lr Nevertheless _all_ my mail users still have access to the namespace's directory tree. It is my understanding that when a user doesn't has 'lookup' access, he should not be able to subscribe to this mailbox. In my opinion this is a security problem. ACLs must be processed _before_ a shared subscrition file is parsed. regards Lars

2 1

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets
by Joseph Tam 22 Sep '13

22 Sep '13

"Michael Smith (DF)" writes: > Or another option, is there any good DNS based RBLs for botnet IPs, and > is there any way to tie that in to the dovecot auth system? I've been > looking for botnet rbls, but what I've found so far doesn't seem to > work very well. Most of the IPs that I've had to firewall don't exist > in them. /dev/rob0 writes: > The problem with using XBL, anyway, is that you might have legitimate > logins from listed hosts. Example: a traveler using hotel wifi. We > (TINW) really would need a new DNSBL type (or a special result) for > this sort of abuse. > > It's a nice idea, worth building upon, if someone can fund it (or > find the time to develop it, which really amounts to the same thing.) > Imagine also a Dovecot network of reporters, where brute force > attempts worldwide are reported from Dovecots to the DNSBL, not > merely a one-way tie in. > > I'd also suggest listing SSH brute force attacks in the same DNSBL, > possibly with a different result (127.0.0.$port, so IMAP attackers > list as 127.0.0.143, SSH attackers as 127.0.0.22. Yes, we'd have to > incorporate the third quad for ports > 255, but the general idea is > for result codes to be both machine and human readable as much as > possible.) I use bl.blocklist.de as a DNSRBL for ssh BFD, but I think it also detects BFD for other protocols: http://www.blocklist.de/en/index.html The nice thing about this RBL is that you can also contribute by configuring your Fail2Ban/DenyHost to forward logs to the maintainers, to widen the detection network. I get about a 60% hit on ssh BFD attacks. I also found http://openbl.org but they distribute it as a downloadable file rather than as a DNSRBL. Maybe I can introduce the latter to the former. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Solved: startup failures "net_listen_unix(...) failed: Invalid argument"
by C. Mills 22 Sep '13

22 Sep '13

I ran into this and had a bit of trouble tracking a diagnosis down, so here it is for the archives in case anyone else runs into this. A new installation of dovecot was failing to start, with these messages: $ ./sbin/dovecot Error: service(imap-urlauth): net_listen_unix(.../var/run/dovecot/token-login/imap-urlauth) failed: Invalid argument Error: service(auth): net_listen_unix(.../var/run/dovecot/token-login/tokenlogin) failed: Invalid argument Fatal: Failed to start listeners Some of the other processes seemed to be starting up fine, and they created sockets in the expected dir, but the above two wouldn't. stracing the processes didn't show a lot, but eventually I checked the length of the installation path, and found the above two socket paths were exceeding the maximum path length limit for Unix sockets -- 108 chars on my Linux boxen. I haven't checked SuS or Posix to see what the standards say the actual minimum required size for the maximum path length is -- it might be shorter yet on other systems. Moving the installation to a less deeply nested hierarchy fixed the problem. I hope this saves someone else a headache someday. C. C. -- ----------------------------------------------------------------------- C. Mills -----------------------------------------------------------------------

2 1