- dovecot - dovecot.org

[Dovecot] dovecot crashing?
by Eric 30 Dec '12

30 Dec '12

Happy holidays! I am experiencing an issue when trying to check my mail using IMAP. with Dovecot I have tried checking my mail using a full GUI client (Thunderbird) and telnet. Both times I get disconnected before all of my messages can be downloaded and I see an error in my mail log. Here are the details: [root@cust19-1-prod-domain userqa]# dovecot --version 2.0.9 [root@cust19-1-prod-domain userqa]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.11.1.el5 x86_64 CentOS release 5.4 (Final) disable_plaintext_auth = no login_trusted_networks = 172.19.136.0 mail_location = maildir:~/Maildir mail_max_userip_connections = 100 mbox_write_locks = fcntl mmap_disable = yes passdb { args = scheme=plain username_format=%n /etc/dovecot/users driver = passwd-file } protocols = imap ssl = no userdb { args = username_format=%n /etc/dovecot/users driver = passwd-file } [root@cust19-1-prod-domain userqa]# i try to check my mail: username@ops1-1-domain:~$ telnet cust19-1-prod-domain imap Trying 172.19.136.223... Connected to cust19-1-prod-domain.domain.net (172.19.136.223). Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 1 LOGIN userqa mypassword 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in 3 EXAMINE INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 1 EXISTS * 0 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1356130761] UIDs valid * OK [UIDNEXT 5] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 3 OK [READ-ONLY] Select completed. 4 FETCH 1 BODY[] I get some binary output and some mail headers, but then it crashes.. Not sure if you guys want to see all of the extremely verbose output, so I put it at the end of this message. The last messages that it processes is a message with an Excel spreadsheet attached to it (a .xlsx file) i enabled core dumps: echo 'DAEMON_COREFILE_LIMIT="unlimited"' >> /etc/sysconfig/dovecot Now I see this in /var/log/maillog: 2012-12-25T17:53:47-08:00 cust19-1-prod-domain dovecot: master: Error: service(imap): child 11265 killed with signal 11 (core dumped) core dumps are being written here, but they're empty: [root@cust19-1-prod-domain userqa]# pwd /mnt/mail/userqa [root@cust19-1-prod-domain userqa]# ls -lh total 20K -rw------- 1 userqa userqa 0 Dec 25 17:52 core.11111 -rw------- 1 userqa userqa 0 Dec 25 17:53 core.11265 -rw------- 1 userqa userqa 0 Dec 25 17:58 core.11812 drwx------ 7 userqa userqa 4.0K Dec 25 17:58 Maildir [root@cust19-1-prod-domain userqa]# What should I try now? Is it possible that Dovecot is having difficulty processing the attachment file? If I delete this user's mailbox file and send basic text e-mail to the user I can read/retrieve them just fine.. there only seems to be an issue when this message with its attachment arrives. The attachment seems small in size: Content-Disposition: attachment; filename="report_amex.xlsx"; size=20527; That means the attachment is 20527 bytes, correct? Thank you for any suggestions/help you can offer! Here's the message that it seems to be having issues with: Return-Path: <user(a)company.com> Received: from mxout.mailprovider.com (slb1-prod-domain.domain.net[172.19.136.4]) by cust19-1-prod-domain.domain.net (8.13.8/8.13.8) with ESMTP id qBOM8oIE029715 for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 14:08:50 -0800 Received: from mxout.mailprovider.com (localhost [127.0.0.1]) by mxout.mailprovider.com (Postfix) with ESMTP id 017E455325B for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 17:08:51 -0500 (EST) X-Virus-Scanned: by SpamTitan at mail.lan Received: from HUB025.mail.lan (unknown [10.110.2.1]) by mxout.mailprovider.com (Postfix) with ESMTP id 63DA0553132 for <userqa_2938(a)integration.company.com>; Mon, 24 Dec 2012 17:08:50 -0500 (EST) Received: from MAILR001.mail.lan ([10.110.18.28]) by HUB025.mail.lan ([10.110.17.25]) with mapi; Mon, 24 Dec 2012 17:08:48 -0500 From: User Name <user(a)company.com> To: "userqa_2938(a)integration.company.com" <userqa_2938(a)integration.company.com> Date: Mon, 24 Dec 2012 17:08:47 -0500 Subject: Thread-Index: Ac3fx0lCAoza6rTzQTSh8g52mx84GwAC2GGwAAH1lkAAkiyekA== Message-ID: <0370E60157CA7E4097D81B9E09728A941CB269A29D(a)MAILR001.mail.lan> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_" MIME-Version: 1.0 --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: multipart/alternative; boundary="_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_" --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable From: User Name Sent: Friday, December 21, 2012 6:23 PM To: 'userqa_2938(a)integration.company.com' Subject: FW: With Best Regards, User Name From: User Name Sent: Friday, December 21, 2012 5:27 PM To: 'userqa_2938(a)integration.company.com' Subject: FW: With Best Regards, User Name From: User Name Sent: Friday, December 21, 2012 4:05 PM To: 'userqa_2938(a)integration.company.com' Subject: With Best Regards, User Name --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT= =3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros= oft Word 12 (filtered medium)"><style></style></head><body lang=3DEN-US link=3Dblue vli= nk=3Dpurple><div class=3DWordSection1><o:p> </o:p><o:p> </o:p><div><s= pan style=3D'color:#1F497D'>With Best Regards,<o:p></o:p>User Name<o:p></o:p></= p>______________________= _<o:p></o:p>s= kype: user<o:p></o:p>cell phone: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div= ><div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in= 0in 0in'>From: User Name Sent: Friday, Dec= ember 21, 2012 6:23 PM To: 'userqa_2938(a)integration.aggregateknow= ledge.com' Subject: FW: <o:p></o:p></div></div><o:p> </o:p><o:p> </o:p><div>With Best Regards,<o:p></o:p>User Name<o:p></o:p>_______________________<o:p></= o:p>skype: eg= irik<o:p></o:p>cell phone: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div><div styl= e=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>= From: User Name Sent: Friday, December 21, = 2012 5:27 PM To: 'userqa_2938(a)integration.company.com'= Subject: FW: <o:p></o:p></div></div><o:p> </o:p><o:p> </o:p><div>With Best Regards,<o:p></o:p><spa= n style=3D'color:#1F497D'>User Name<o:p></o:p>_______________________<o:p></o:p></span= >skype: user<o:p><= /o:p>cell pho= ne: +1 224 600 0072<o:p></o:p></div><o:p> </o:p><div><div style=3D'borde= r:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>From: User Name Sent: Friday, December 21, 2012 4:0= 5 PM To: 'userqa_2938(a)integration.company.com' S= ubject: <o:p></o:p></div></div><o:p>&nb= sp;</o:p><o:p> </o:p><o:p> </o:p>With Best Regards,<o:p></o:p></p= >User Name<o:p></o:p>______= _________________<o:p></o:p>skype: user<o:p></o:= p>cell phone: +1 224 600 0072<o:p></o:p><o:p> </o:p></div></body></html>= --_000_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_-- --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_ Content-Type: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet; name="report_company.xlsx" Content-Description: report_company.xlsx Content-Disposition: attachment; filename="report_company.xlsx"; size=20527; creation-date="Thu, 11 Oct 2012 22:38:14 GMT"; modification-date="Mon, 24 Dec 2012 22:08:22 GMT" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQDretKTYgEAAJAEAAATANwBW0NvbnRlbnRfVHlwZXNdLnhtbCCi2AEooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAArFTLTsMwELwj8Q+RryhxywEh1LQHHkeoBHyAsTeNVce2vNvS/j2bhFaASqSq vSSKop2ZnRl7Mts0LltDQht8KcbFSGTgdTDWL0rx/vaU34oMSXmjXPBQii2gmE0vLyZv2wiY8bTH UtRE8U5K1DU0CosQwfOfKqRGEX+mhYxKL9UC5PVodCN18ASecmoxxHTywgKSNZDNVaJn1TCP3DhJ jAb9c1wwnsju+8GWuxQqRme1IlYu1978Yc1DVVkNJuhVw1xFB3bVosh/CZG2DvBkKowJlMEagBpX 9KA75geo1MpR9rhhB3rTEzg8brVvMwue7NbH2kYcYBj2btiTz5CWHyEsz+1K607RKOt3ug+VgNOb pxBRctYnC4DWcgMmjwwJiSzsPTvEzQVsd+9iRNm9Tm/h72rs8Yc8YB1YqwTmlRKfyrPX8yf2kI59 FjokOD6MXWfb6QMJyO4+mX4BAAD//wMAUEsDBBQABgAIAAAAIQC1VTAj9QAAAEwCAAALAM4BX3Jl bHMvLnJlbHMgosoBKKAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlDAAAeGwv c3R5bGVzLnhtbFBLAQItABQABgAIAAAAIQDppiW4ggYAAFMbAAATAAAAAAAAAAAAAAAAALIUAAB4 bC90aGVtZS90aGVtZTEueG1sUEsBAi0AFAAGAAgAAAAhAOhJXyi8LAAAyx8BABgAAAAAAAAAAAAA AAAAZRsAAHhsL3dvcmtzaGVldHMvc2hlZXQxLnhtbFBLAQItABQABgAIAAAAIQAU45/9UAEAAGMC AAARAAAAAAAAAAAAAAAAAFdIAABkb2NQcm9wcy9jb3JlLnhtbFBLAQItABQABgAIAAAAIQBxujxc hQEAAAMDAAAQAAAAAAAAAAAAAAAAAN5KAABkb2NQcm9wcy9hcHAueG1sUEsFBgAAAAAKAAoAgAIA AJlNAAAAAA== --_004_0370E60157CA7E4097D81B9E09728A941CB269A29DMAILR001maill_-- Connection closed by foreign host.

3 5

Re: [Dovecot] question
by Simon Brereton 29 Dec '12

29 Dec '12

On Dec 29, 2012 3:46 PM, "Matt K" <mattk(a)kraner.us> wrote: > > At 08:40 PM 12/28/2012, Simon Brereton wrote: >> >> On Dec 28, 2012 8:28 PM, <mattk(a)kraner.us> wrote: >> > >> > I just install Dovecot and postfix. When I'm pull dovecot I see in the log >> > that its checking for mail. if a put a test message locally on the server >> > I can pull the message down to my cell phone and other computers. But when >> > I try to a message from gmail or aol it doesn't come in to the server. >> > >> > >> > it always bounces back to the place were I sent it from >> >> That would indicate a postfix issue since it would seem you are not getting >> mail from outside your network/host. >> >> But either way you'll need config and log files of you'd like real help. >> >> Simon > > > here is what i was able to find in /var/log/mail.err > Dec 28 18:02:36 kraner postfix/smtpd[26226]: fatal: no SASL authentication mechanisms > Dec 28 18:09:17 kraner postfix/smtpd[26229]: fatal: no SASL authentication mechanisms > Dec 28 18:29:15 kraner postfix/smtpd[26395]: fatal: no SASL authentication mechanisms > Dec 28 18:43:18 kraner postfix/smtpd[26736]: fatal: no SASL authentication mechanisms > Dec 28 18:48:59 kraner postfix/smtpd[26741]: fatal: no SASL authentication mechanisms > Dec 29 18:06:06 kraner postfix[27406]: fatal: usage: postfix [-c config_dir] [-Dv] command > Dec 29 18:19:38 kraner postfix/smtpd[27511]: fatal: no SASL authentication mechanisms > Dec 29 18:22:48 kraner postfix/smtpd[27514]: fatal: no SASL authentication mechanisms > Dec 29 20:20:43 kraner postfix/smtpd[27862]: fatal: no SASL authentication mechanisms > Dec 29 20:42:03 kraner postfix/smtpd[27969]: fatal: no SASL authentication mechanisms > > Postfix config file > > alias_database = hash:/etc/aliases > alias_maps = hash:/etc/aliases > body_checks = regexp:/etc/postfix/body_checks > command_directory = /usr/sbin > config_directory = /etc/postfix > daemon_directory = /usr/lib/postfix > data_directory = /var/lib/postfix > debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 > header_checks = regexp:/etc/postfix/header_checks > home_mailbox = Maildir/ > inet_protocols = ipv4 > local_recipient_maps = proxy:unix:passwd.byname $alias_maps > mailbox_size_limit = 1073741824 > mailq_path = /usr/bin/mailq > message_size_limit = 10485760 > mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain > mydomain = kraner.org > myhostname = kraner.org > mynetworks = 127.0.0.0/8 > myorigin = $mydomain > newaliases_path = /usr/bin/newaliases > sendmail_path = /usr/sbin/postfix > setgid_group = postdrop > smtpd_banner = $myhostname ESMTP $mail_name (@@DISTRO@@) > smtpd_client_restrictions = permit_mynetworks,reject_unknown_client,permit > smtpd_recipient_restrictions = permit_mynetworks,permit_auth_destination,permit_sasl_authenticated,reject > smtpd_sasl_auth_enable = yes > smtpd_sasl_local_domain = $myhostname > smtpd_sasl_path = private/auth > smtpd_sasl_security_options = noanonymous > smtpd_sasl_type = dovecot > unknown_local_recipient_reject_code = 550 > fatal: no SASL authentication mechanisms is pretty clear. Postfix doesn't allow external hosts to connect & relay mail, which explains what you're seeing. Why you're seeing that is better addressed on the postfix list, although you seem to have told postfix to use Dovecot for sasl auth, so maybe, since this is the Dovecot list you should send your Dovecot conf so we can see why it's not working. Also, if you ask on the postfix list you will be asked for the out-put of postfinger which can diagnose sasl problems. Simon

1 0

Re: [Dovecot] question
by Matt K 29 Dec '12

29 Dec '12

At 08:40 PM 12/28/2012, Simon Brereton wrote: >On Dec 28, 2012 8:28 PM, <mattk(a)kraner.us> wrote: > > > > I just install Dovecot and postfix. When I'm pull dovecot I see in the log > > that its checking for mail. if a put a test message locally on the server > > I can pull the message down to my cell phone and other computers. But when > > I try to a message from gmail or aol it doesn't come in to the server. > > > > > > it always bounces back to the place were I sent it from > >That would indicate a postfix issue since it would seem you are not getting >mail from outside your network/host. > >But either way you'll need config and log files of you'd like real help. > >Simon here is what i was able to find in /var/log/mail.err Dec 28 18:02:36 kraner postfix/smtpd[26226]: fatal: no SASL authentication mechanisms Dec 28 18:09:17 kraner postfix/smtpd[26229]: fatal: no SASL authentication mechanisms Dec 28 18:29:15 kraner postfix/smtpd[26395]: fatal: no SASL authentication mechanisms Dec 28 18:43:18 kraner postfix/smtpd[26736]: fatal: no SASL authentication mechanisms Dec 28 18:48:59 kraner postfix/smtpd[26741]: fatal: no SASL authentication mechanisms Dec 29 18:06:06 kraner postfix[27406]: fatal: usage: postfix [-c config_dir] [-Dv] command Dec 29 18:19:38 kraner postfix/smtpd[27511]: fatal: no SASL authentication mechanisms Dec 29 18:22:48 kraner postfix/smtpd[27514]: fatal: no SASL authentication mechanisms Dec 29 20:20:43 kraner postfix/smtpd[27862]: fatal: no SASL authentication mechanisms Dec 29 20:42:03 kraner postfix/smtpd[27969]: fatal: no SASL authentication mechanisms Postfix config file alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases body_checks = regexp:/etc/postfix/body_checks command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix data_directory = /var/lib/postfix debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 header_checks = regexp:/etc/postfix/header_checks home_mailbox = Maildir/ inet_protocols = ipv4 local_recipient_maps = proxy:unix:passwd.byname $alias_maps mailbox_size_limit = 1073741824 mailq_path = /usr/bin/mailq message_size_limit = 10485760 mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain mydomain = kraner.org myhostname = kraner.org mynetworks = 127.0.0.0/8 myorigin = $mydomain newaliases_path = /usr/bin/newaliases sendmail_path = /usr/sbin/postfix setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name (@@DISTRO@@) smtpd_client_restrictions = permit_mynetworks,reject_unknown_client,permit smtpd_recipient_restrictions = permit_mynetworks,permit_auth_destination,permit_sasl_authenticated,reject smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550

2 1

[Dovecot] Update 1.2 -> 2.0 ... INBOX away?
by Martin Rabl 29 Dec '12

29 Dec '12

Hi, yesterday I did an update from dovecot 1.2 to 2.0.19 (Ubuntu 10.04 -> 12.04). After fixing the configuration dovecot startups as it should, but with one error, I don't understand: the INBOX will not be delivered to the Mailclient and will not be filled by "deliver". Instead, dovecot create the two dirs "new" and "cur" directly in "Maildir". the filesystem looks now like: domain/user1/Maildir/INBOX # official INBOX domain/user1/Maildir/new # new mail domain/user1/Maildir/cur # read mail We have searched for an configuration error, but didn't found anything - or did not see one ;-) Maybe there is someone in the list, which see our error in a moment? We are using only imap/s and managesieve, no pop3. Maildir-Layout is FS. Here a snippet of our configuration: ------------ mail_home = mail_location = maildir:~/Maildir:LAYOUT=fs namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { list = yes location = maildir:%%h/Maildir/:INDEX=%%h/Maildir/shared/%u:LAYOUT=fs prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { list = yes location = maildir:/srv/vmail/public:LAYOUT=fs prefix = public/ separator = / subscriptions = no type = public } protocol lda { mail_plugins = sieve autocreate } protocol imap { imap_client_workarounds = delay-newmail tb-lsub-flags tb-lsub-flags mail_max_userip_connections = 10 mail_plugins = acl autocreate imap_acl } ------------ Hope you can help! Thank you! Martin

2 3

[Dovecot] question
by mattk＠kraner.us 29 Dec '12

29 Dec '12

I just install Dovecot and postfix. When I'm pull dovecot I see in the log that its checking for mail. if a put a test message locally on the server I can pull the message down to my cell phone and other computers. But when I try to a message from gmail or aol it doesn't come in to the server. it always bounces back to the place were I sent it from

3 2

[Dovecot] mdbox: more then one altstorage
by Peer Heinlein 28 Dec '12

28 Dec '12

The mdbox-format with the altstorage-feature is quite nice and important. But we're having much more then >> 30 TB of maildata and doing an fsck on huge partitions takes too much (down-) time for our mailsystem. It would be much easier, if Dovecot would be able to use at least THREE storage-paths for his m-Files (and not just TWO like now). Having an altstorage1 and altstorage2, we would be able to move away all mails from on altstorage-mountpoint, we could put this storage-moungpoint into "maintenance" and do an fsck without Downtime for Dovecot. It would be nice having a doveadm-feature to put a altstorage-path in "maintenance-mode", so to move easily away all m-files to other alt-storage-paths and to let Dovecot know not to use this locked partition. Having even more then 3 storage-paths would be nice for huge setups: In this case we could easily use different SMALLER partitions without having just two or three huge partitions > 15 TB. The architecture of the altstorage-system is nice and simple. Wouldn't it be easily possible to look (at least) in three, then just in two places for a m-file? What about a "hash_dir"-system for the storage? What about a configuration-parameter like altstorage_dirs=4 which would mean, that there are 4 storage-mountpoints that could be addressed by "%m": mail_location = mdbox:/vmail/%d/%n/mdbox:altstorage/alt/%m/%d/%n In this case, Dovecot could easily use all existing partitions automatically "round-robin". Or maybe it would be better to tell Dovecot the partitions by: altstorage_dirs_existing = 1,2,3,4 altstorage_dirs_newmail = 1,4 so it would be very easy to tell Dovecot in which partitions he has to look for m-files and where he is allowed to save round-robin new e-mails. With this setup it's easy to put a partition in maintenance mode. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

4 5

[Dovecot] dovecot 2.1.12 panic in mbox-sync.c
by "Antje Miederhöfer" 28 Dec '12

28 Dec '12

Hello! I use dovecot 2.1.12 locally on a 32bit Linux with an ext4 filesystem and after deleting a lot of emails from a mbox folder, I now get the following messages in the log: dovecot: imap(amied): Panic: file mbox-sync.c: line 1351 (mbox_sync_handle_eof_updates): assertion failed: (offset == 0 || offset > 31) dovecot: imap(amied): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4559a) [0x6f68959a] -> /usr/lib/dovecot/libdovecot.so.0(+0x45611) [0x6f689611] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x6f658fa0] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x2d707) [0x6f708707] -> /usr/lib/dovecot/libdovecot-storage.so.0(mbox_sync+0x53) [0x6f7091d3] -> /usr/lib/dovecot/libdovecot-storage.so.0(mbox_storage_sync_init+0x6d) [0x6f70936d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x3b) [0x6f72333b] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3f) [0x6f72347f] -> dovecot/imap(cmd_select_full+0x16b) [0x805529b] -> dovecot/imap(cmd_select+0x17) [0x8055c57] -> dovecot/imap(command_exec+0x32) [0x80596f2] -> dovecot/imap() [0x80586fd] -> dovecot/imap() [0x805880d] -> dovecot/imap(client_handle_input+0x125) [0x8058a05] -> dovecot/imap(client_input+0x60) [0x80592f0] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x44) [0x6f6981f4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xce) [0x6f6991ce] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x6f697cd0] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2e) [0x6f680dbe] -> dovecot/imap(main+0x279) [0x804fdd9] -> /lib/libc.so.6(__libc_start_main+0xf5) [0x6f49bad5] -> dovecot/imap() [0x804ff51] The mbox file seems to be unchanged and a .lock file remains even after stopping dovecot. The folder is not accessible any more. A fix would be nice. :-) dovecot config: listen = 127.0.0.1 mail_fsync = never mail_location = maildir:/var/mails/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = no location = mbox:/var/mails/mbox/%u prefix = mbox/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = * driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = passwd } protocol lda { mail_plugins = sieve } Greetings Antje

1 0

[Dovecot] Mixing v2.1 and 2.0 directors ?
by Jan-Frode Myklebust 28 Dec '12

28 Dec '12

I'm preparing to set up a new set of directors on dovecot-ee-2.1.10.3-1, but would prefer to do this a bit gradually. Will it be OK to set up a ring of directors with 2x dovecot-ee-2.1.10.3-1 and 2x dovecot-2.0.14 ? -jf

2 2

[Dovecot] Help Regarding Multiple Base DN
by Joy 28 Dec '12

28 Dec '12

Dear Expert, Can i specify multiple Base DN for user lookup in dovecot like :- dc=abc,dc=com dc=abc,dc=net dc=xzy,dc=com dc=xyz,dc=net Thanks

3 3

[Dovecot] dovecot testinstallation does not tell how to quit
by Robert Moskowitz 28 Dec '12

28 Dec '12

I am having problems logging in with RoundCube, so thought I should see if there were instructions for testing Dovecot login, and sure enough I found some at: wiki.dovecot.org/Testinstallation Well it works, so the problem is probably all RoundCube's, but this wiki page is missing an important line about how to end the Telnet session without killing Telnet! What is the quit/exit command? And please add this to the wiki! Oh, I just guessed it: a logout

3 3

[Dovecot] Missing Emails
by David Morsberger 28 Dec '12

28 Dec '12

I reported a problem with disappearing emails on my Apple Mountain Lion server. Not sure if it ever stopped but I do know it is happening again. Help!!!! This is a company email server. They live and die by their emails. Emails show up in inbox and then disappear. Anyone know why our emails are disappearing? I see a reference to it in the dovecot.index.cache file (last item) ^@^@^@Q^@^@^@0^@^@^@^@^@^@^@Message-ID: <1356660917.93498.YahooMailNeo(a)web163605.mail.gq1.yahoo.com> ^@^@^@^M^@^@^@7^@^@^@4^@^@^@^@^@^@^@Subject: Funeral program for Eileen Zbignewich ^@^E^@^@^@^@^@^@^@^F^@^@^@Z^@^@^@7^@^@^@^@^@^@^@Content-Type: multipart/mixed; boundary="-1578497492-264297203-1356660917=:93498" ^@^@^G^@^@^@4^@^@^@1^@^@^@^@^@^@^@Date: Thu, 27 Dec 2012 18:15:17 -0800 (PST) ^@^@^@^@^@^@^@^K^@^@^@^@^@^@^@^L^@^@^@^@^@^@^@^N^@^@^@8^@^@^@5^@^@^@^@^@^@^@To: "info(a)mmpcrofton.com" <info(a)mmpcrofton.com> I searched the filesystem and cannot find them. bash-3.2# find . -exec grep Zbignewich {} \; -print Dec 04 00:30:26 master: Info: Dovecot v2.0.19apple1 starting up (core dumps disabled) I believe I turned on all debug and info messages. Here is what I see in postfix log: Dec 27 21:15:39 mini.mmpcrofton.com postfix/smtpd[20081]: 3CE164F4420: client=pascal.junkemailfilter.com[184.105.182.188] Dec 27 21:15:39 mini.mmpcrofton.com postfix/cleanup[20086]: 3CE164F4420: message-id=<1356660917.93498.YahooMailNeo(a)web163605.mail.gq1.yahoo.com> Dec 27 21:15:40 mini.mmpcrofton.com postfix/qmgr[95]: 3CE164F4420: from=<hagermary(a)yahoo.com>, size=307659, nrcpt=1 (queue active) Dec 27 21:15:40 mini.mmpcrofton.com postfix/smtpd[20081]: disconnect from pascal.junkemailfilter.com[184.105.182.188] Dec 27 21:15:40 mini.mmpcrofton.com postfix/smtpd[20106]: connect from localhost[127.0.0.1] Dec 27 21:15:40 mini.mmpcrofton.com postfix/smtpd[20106]: 5168E4F4447: client=localhost[127.0.0.1] Dec 27 21:15:40 mini.mmpcrofton.com postfix/cleanup[20086]: 5168E4F4447: message-id=<1356660917.93498.YahooMailNeo(a)web163605.mail.gq1.yahoo.com> Dec 27 21:15:40 mini.mmpcrofton.com postfix/smtpd[20106]: disconnect from localhost[127.0.0.1] Dec 27 21:15:40 mini.mmpcrofton.com postfix/qmgr[95]: 5168E4F4447: from=<hagermary(a)yahoo.com>, size=308299, nrcpt=1 (queue active) Dec 27 21:15:40 mini.mmpcrofton.com postfix/smtp[20102]: 3CE164F4420: to=<info(a)mmpcrofton.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.85/0.01/0/0.27, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5168E4F4447) Dec 27 21:15:40 mini.mmpcrofton.com postfix/qmgr[95]: 3CE164F4420: removed Dec 27 21:15:40 mini.mmpcrofton.com postfix/pipe[20110]: 5168E4F4447: to=<graphicartist(a)mini.mmpcrofton.com>, orig_to=<info(a)mmpcrofton.com>, relay=dovecot, delay=0.39, delays=0.03/0.01/0/0.35, dsn=2.0.0, status=sent (delivered via dovecot service) Dec 27 21:15:41 mini.mmpcrofton.com postfix/qmgr[95]: 5168E4F4447: removed dovecot_info.log Dec 27 21:15:40 lda(pid 20111 user graphicartist): Info: msgid=<1356660917.93498.YahooMailNeo(a)web163605.mail.gq1.yahoo.com>: saved mail to INBOX Dec 27 21:15:40 lda(pid 20111 user graphicartist): Info: push-notify: push notification enabled Dec 27 21:15:40 lda(pid 20111 user graphicartist): Info: push-notify: notify: graphicartist Dec 27 21:15:40 lda(pid 20111 user graphicartist): Info: push-notify: data sent: 1680 dovecot_debug.log Dec 27 21:15:40 lda: Debug: Loading modules from directory: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib10_quota_plugin.so Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib20_fts_plugin.so Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib20_push_notify_plugin.so Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib20_zlib_plugin.so Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib21_fts_sk_plugin.so Dec 27 21:15:40 lda: Debug: Module loaded: /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot/lib90_sieve_plugin.so Dec 27 21:15:40 lda: Debug: auth input: graphicartist uid=214 gid=6 quota=maildir:User quota:noenforcing quota_rule=*:storage=0 mail=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 mail_location=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 sieve=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6/dovecot.sieve sieve_dir=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 sieve_storage=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda: Debug: Added userdb setting: plugin/quota=maildir:User quota:noenforcing Dec 27 21:15:40 lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=0 Dec 27 21:15:40 lda: Debug: Added userdb setting: mail=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda: Debug: Added userdb setting: mail_location=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda: Debug: Added userdb setting: plugin/sieve=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6/dovecot.sieve Dec 27 21:15:40 lda: Debug: Added userdb setting: plugin/sieve_dir=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda: Debug: Added userdb setting: plugin/sieve_storage=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Effective uid=214, gid=6, home= Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Quota root: name=User quota backend=maildir args=noenforcing Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-exceeded graphicartist Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: maildir++: root=/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6, index=, control=, inbox=/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6, alt= Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Quota root: name=User quota backend=maildir args= Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-exceeded graphicartist Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: none: root=, index=, control=, inbox=, alt= Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: fts_sk: Disabled with in-memory indexes Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: fts: No backends enabled by the fts setting Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: Destination address: graphicartist(a)mini.mmpcrofton.com (source: user@hostname) Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: auth input: graphicartist uid=214 gid=6 quota=maildir:User quota:noenforcing quota_rule=*:storage=0 mail=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 mail_location=maildir:/Library/Server/Mail/Data/mail/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 sieve=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6/dovecot.sieve sieve_dir=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 sieve_storage=/Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6 Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: sieve: user's script path /Library/Server/Mail/Data/rules/B5E3E436-DEA0-4D5A-A5DF-34D6AB56FED6/dovecot.sieve doesn't exist (using global script path in stead) Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: sieve: user has no valid personal script Dec 27 21:15:40 lda(pid 20111 user graphicartist): Debug: sieve: no scripts to execute: reverting to default delivery. Anyone know why our emails are disappearing?

2 2

[Dovecot] Using -module flag on sieve libs
by Dimitri 26 Dec '12

26 Dec '12

Some modern distros (Mageia, Mandriva) use -no-undefined as a default linker flag for building software. However, undefined symbols are OK if the binary being linked is a plugin. To detect plugins, build system looks for presence of "-module" libtool flag in makefiles. There are two libraries in Pigeonhole that couldn't be linked with -no-undefined: src/lib-sieve/plugins/mailbox/libsieve_ext_mailbox.la src/lib-sieve/libdovecot-sieve.la These modules do contain undefined symbols, but they are not linked against library that provides them. It would be good if corresponding makefiles contained "-module" flags, so that build system could selectively turn off that -no-undefined linker flag. Please see proposed patch (attached). Thanks, Dimitri Mageia Linux packager

2 4

Re: [Dovecot] Dovecot 1.2.7 and Roundcube LIST-EXTENDED commands
by Aristidis Fesarlis 25 Dec '12

25 Dec '12

Anyone?

1 0

[Dovecot] Postfix/mysql/dovecot - Understanding password encryption
by Robert Moskowitz 25 Dec '12

25 Dec '12

I am switching from a fedora/postfix/mysql/couriermail/squirrelmail to Centos/.../dovecot/roundcubemail and adding postfixadmin to the mix. My tutorial before was an earlier version (on F14) of: http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-my… Now I am using http://www.campworld.net/thewiki/pmwiki.php/LinuxServersCentOS/Cent6VirtMai… to get me started. I am up to roundcubemail setup and am stumbling to understand what the author here is doing with encrypted passwords, so felt it was time to delve deeper into this. My old setup uses mysql-crypt for the password. MYSQL_CRYPT_PWFIELD password and users could be added to the table with: INSERT INTO `users` (`email`, `password`, `quota`) VALUES ('sales(a)example.com', ENCRYPT('secret'), 10485760); But where this was all simple and no choices, I get to figure out what to do with my dovecot setup. Some of the 'secret' is hinted at in postfixadmin's config.inc.php: // Encrypt // In what way do you want the passwords to be crypted? // md5crypt = internal postfix admin md5 // md5 = md5 sum of the password // system = whatever you have set as your PHP system default // cleartext = clear text passwords (ouch!) // mysql_encrypt = useful for PAM integration // authlib = support for courier-authlib style passwords // dovecot:CRYPT-METHOD = use dovecotpw -s 'CRYPT-METHOD'. Example: dovecot:CRAM-MD5 $CONF['encrypt'] = 'md5crypt'; Where is there information on the different choices and how to choose. Is it as 'simple' as setting up postfixadmin to control the password encryption format then 'inform' dovecot in the dovecot-mysql.conf with default_pass_scheme = MD5-CRYPT Thank you for any pointers.

2 3

[Dovecot] Undeserved permissions error with g+s folder permissions
by tlhackque 24 Dec '12

24 Dec '12

I have a (mbox/IMAP) directory under my mail directory with these permissions: drwxrws--- 4 tlhackque mail 4096 Dec 1 10:34 Vendors/ It contains a subdirectory: -rw-rw---- 1 thlackque mail 84805345 Dec 1 10:34 Vendors/AVendor If I try to rename the AVendor folder (client is Thunderbird 17.0), I get this error: Unable to rename across conflicting directory permisssions If I chmod g-s Vendors, the RENAME command succeeds. I shouldn't have to do this... Version and configuration information: dovecot --version 2.1.10 # OS: Linux 2.6.22.14-72.fc6 i686 Fedora Core release 6 (Zod) first_valid_gid = 4000 first_valid_uid = 4000 hostname = example.net login_greeting = Dovecot ready. Unauthorized access is prohibited. mail_access_groups = mail mail_location = mbox:~/mail:INBOX=/var/mail/%n mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } plugin { autocreate = Trash autocreate2 = Train As Spam autocreate3 = Train As Ham autocreate4 = Train As Forgotten autosubscribe = Trash autosubscribe2 = Train As Spam autosubscribe3 = Train As Ham autosubscribe4 = Train As Forgotten } service imap-login { inet_listener imap { address = imap.v4.example.net imap.v6.example.net port = 143 } inet_listener imaps { address = imap.v4.example.net imap.v6.example.net port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { address = pop.v4.example.net pop.v6.example.net port = 110 } inet_listener pop3s { address = pop.v4.example.net pop.v6.example.net port = 995 ssl = yes } } ssl_ca = </etc/pki/tls/certs/example_net_ca-cert-crl.pem ssl_cert = </etc/pki/tls/certs/servers-example-net.pem ssl_key = </etc/pki/tls/private/servers-example-net.pmk userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_plugins = " autocreate" } protocol pop3 { mail_plugins = " autocreate" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } -- This communication may not represent my employer's views, if any, on the matters discussed.

3 5

[Dovecot] Understanding Sockets
by Tim Smith 22 Dec '12

22 Dec '12

Hi, Just trying to consolidate my knowledge of Dovecot and I want to understand various things rather than just key out lines of config in dovecot.conf with the hope of it working. What I wanted to clarify is my understanding the "socket listen" section of the config file. From my limited understanding, this section details how other processes can access the userdb defined in Dovecot. The master socket is used for "internal" processes which is mainly dovecot-lda so that when Dovecot receives mail it knows where to deliver it and client is defined for "external" processes, for example Postfix who would use the info to determine if a user existed. Would you say this is a fair (albeit) dumbed down!!) synopsis of sockets and their purpose? Thanks in advance! Tim

6 10

[Dovecot] [Antispam]rev 990a43d44c73 breaks compilation for dovecot 2.1
by Simone Caruso 22 Dec '12

22 Dec '12

Dovecot 2.1.12 and antispam-plugin 0319240072d8 bash-# make Entering directory src. signature-log.c: In function 'signature_log_transaction_begin': signature-log.c:122: error: too many arguments to function 'dict_init' Failed to compile signature-log.c (plugin)! make[3]: *** [signature-log.plugin.o] Error 1 make[2]: *** [all] Error 2 make[1]: *** [src] Error 2 make: *** [all] Error 2 Reversing the deff the builing process ends with no error. -- Simone Caruso IT Consultant +39 349 65 90 805

1 0

Re: [Dovecot] migration to dovecot pop3
by Joseph Tam 21 Dec '12

21 Dec '12

Rajesh M writes: > i am planning to migrate from qmail pop3 to dovecot pop3 > > the number of users on the server is large over 5000 > ... > also data volume is large - over 3.5 tb -- ie many users several 1000s of > emails in their inbox If you stay on the list, you might find some people here whose mail metrics are several orders of magnitude larger than this. > 1) will the migration cause all the emails on the server to re-download > ... > 4) has anybody migrated from qmail pop3 to dovecot pop3 successfully > without emails being downloaded again A proper migration will avoid this. Google is your friend http://lmgtfy.com/q=POP+qmail+to+dovecot+migration The top hits provide exactly what you're looking for. > 2) can dovecot be configured to allow only one download at a time - pop3 > locking with time out setting that can be customized > > 3) can dovecot pop3 be configured so that it will allow download of emails > only of the last say 15 days ie even if the same pop3 user is configure on > another machine it will download only messages of the last 15 days I can't answer this, but if this is an attempt to prevent mass download, the answer to 1+4 makes these questions irrelevant. Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: [Dovecot] dovecot Digest, Vol 116, Issue 38
by Douglas Mortensen 21 Dec '12

21 Dec '12

Austinator, What's the JLG maintenance schedule? I should show you how to setup a CW Service Template & then you can have it as a weekly ticket. :-) - Doug Mortensen Impala Networks Sent from my Windows Phone ________________________________ From: dovecot-request(a)dovecot.org<mailto:dovecot-request@dovecot.org> Sent: ‎12/‎21/‎2012 1:44 AM To: dovecot(a)dovecot.org<mailto:dovecot@dovecot.org> Subject: dovecot Digest, Vol 116, Issue 38 Send dovecot mailing list submissions to dovecot(a)dovecot.org To subscribe or unsubscribe via the World Wide Web, visit http://dovecot.org/cgi-bin/mailman/listinfo/dovecot or, via email, send a message with subject or body 'help' to dovecot-request(a)dovecot.org You can reach the person managing the list at dovecot-owner(a)dovecot.org When replying, please edit your Subject line so it is more specific than "Re: Contents of dovecot digest..."

1 0

[Dovecot] Non-dovecot user looking for feedback
by Chris Ross 21 Dec '12

21 Dec '12

I've been using UW-IMAPd for neigh on forever (at least since 2001). But, as it's basically stalled, and I'm about to update the hardware that is my mail server, I thought it was time to review existing open-source IMAP servers. Dovecot is the top three in my looking. The other of the top three candidates, because I know of people who've used it, is Cyrus IMAP. So, I should note that my thoughts are "uw-imapd, because I already know how to use it", "Cyrus, because someone I know/trust liked it years ago", and dovecot, because "it seems stable, professional, and to meet all of my needs". I guess the biggest question I have is how files/folders are stored in the filesystem. uw-imapd has a "mbx" format that all of my folders are in, and also has support for mbox and maildir (i think). mbx had some advantages for speed access, which would be unimportant I assume with dovecot's indexes, but IIRC there was also some reason the mbox format coped poorly with multiple clients accessing the same folder at the same time. So, am I right that dovecot supports only the "one big full file" mbox format, and the maildir format? And if so, is it known to allow multiple simultaneous IMAP clients to access and monitor and/or modify the same folder simultaneously? After those questions, it's just a "what do you think the pros and cons of each are?" I know asking in this forum, that I will get most if not all votes for Dovecot. And that's fine, as long as you have specific reasons why it would be better for someone with only a handful of users and minimal time available to administer the systems in question. Thanks! I appreciate any and all feedback. - Chris

5 5

[Dovecot] doveadm-lda - segfault
by kjonca＠o2.pl 20 Dec '12

20 Dec '12

I have simple old message: --8<---------------cut here---------------start------------->8--- X-Mozilla-Status: 0011 X-Mozilla-Status2: 00000000 Date: Wed, 26 Jan 2000 13:38:41 +0100 From: Kamil Jonca <kjonca(a)localhost.localdomain> To: Somebody X <xx(a)tiger.com.pl> Subject: Re: Opisy Message-ID: <20000126133839.B2888(a)localhost.localdomain> References: <Pine.LNX.4.05.10001261335010.19250-100000(a)aa.bbb.ccc> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 8bit X-Mailer: Mutt 0.95.5us In-Reply-To: <Pine.LNX.4.05.10001261335010.19250-100000(a)xxx.yyy.cc>; from Somebody X on Wed, Jan 26, 2000 at 01:37:52PM +0000 X-Operating-System: 'Linux localhost.localdomain 2.2.9-27mdk #1 Mon Jan 24 15:49:34 CET 2000 i686 unknown' X-Geek: GIT d s+:- a-- C++ UL P+ L++ E W N+ w- PS+ PE++ PGP t-- X-- R- tv- b+ D+ G e h-- r- z? Lines: 30 X-KJONCA-Clamav-Status: No jd;fladflsd;lc dfgn;sdhgfad abffhahgl fadn;al sdfnad;hfa fna;lhfla -- shfkah --8<---------------cut here---------------end--------------->8--- When I try to dovecot-lda < message.txt (for sieve refiltering) I got segmentation fault. Does it is bug in lda, or message does not keep standards? KJ -- http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… Sanity and insanity overlap a fine grey line.

4 7

[Dovecot] backtrace from postgres dict
by Steffen Kaiser 20 Dec '12

20 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since I enabled ACLs I get following backtrace. It looks like that it happens if the ACLs had been changed only. Also, it looks like that it always happens 1 minute after last "dict: Info: pgsql(localhost): Connected to database dovecot", no matter if the user is logged in (and idle) or logged off. Postgres logs: "could not receive data from client: Connection reset by peer" and "unexpected EOF on client connection". Is there some TCP keep alive issue? Postgres is using the "system default" for TCP keep alive. I'm currently testing ACLs via telnet, so the activity with the ACL dict is pretty low, hence, an idle timeout would make much sense. # ../../sbin/dovecot --version 2.1.10 (a4f02f6c0d32) dict connect string: connect = host=localhost dbname=db user=user 2012-11-28 10:03:39 dict: Info: pgsql(localhost): Connected to database dovecot 2012-11-28 10:03:39 dict: Info: pgsql(localhost): Connected to database dovecot 2012-11-28 10:03:39 dict: Info: pgsql(localhost): Connected to database dovecot 2012-11-28 10:03:58 IMAP(user) [22922]: Info: Disconnected: Logged out in=23 out=763 2012-11-28 10:04:41 dict: Panic: file driver-pgsql.c: line 84 (driver_pgsql_set_state): assertion failed: (state == SQL_DB_STATE_BUSY || db->cur_result == NULL) 2012-11-28 10:04:41 dict: Error: Raw backtrace: /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x4857a) [0x7f91f511157a] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(+0x485c6) [0x7f91f51115c6] -> /usr/local/dovecot-2.1.10/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f91f50e4eaf] -> dovecot2.1/dict() [0x40aa36] -> dovecot2.1/dict() [0x40aa91] -> dovecot2.1/dict() [0x40bed3] -> dovecot2.1/dict() [0x409504] - -> dovecot2.1/dict(sql_db_cache_deinit+0x20) [0x408a60] -> dovecot2.1/dict(main+0x169) [0x405a59] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f91f4b5cc8d] -> dovecot2.1/dict() [0x404bb9] 2012-11-28 10:04:41 dict: Fatal: master: service(dict): child 22923 killed with signal 6 (core not dumped) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBULXbiGoxLS8a3A9mAQI9Ywf/YItPO4fFT70HcuwCkDXgx0Sn7CEyXu2j +1VzOu3R/TMs1rcxYJIvWiei6Nk3wXywzQl84POadJn61Yf2NuT80nMxwBsBbgio e+0oRE9JNVSjtvX5l7kehEdUDQjqRRKyrhWG9KDlpjWidGsYh7pQg0rDtp3UwG57 HuSBMiBAZ9t9sC2DXjn9wT9vweH3gMIhc/K5U0BLF5JG/K8UAKc5QBUgezjIYzvn KP90TJ4RoZ2vnPzmWfeIsjffRBvvC6UUgWmU02e2H9xJxzF32Nix0s8YWi7G91sH Ei057HW5NsKNDtp6B5fYk+xCpC6ucQiwFSr/ZG+uZCAdtTd2qmf60g== =tQYK -----END PGP SIGNATURE-----

1 2

[Dovecot] setting mail_home and vacation
by Andreas Meyer 20 Dec '12

20 Dec '12

Hello! dovecot version 2.1.7 I set up vacation with sieve. We have mboxes and maildirs and in dovecot.conf mail_location = mbox:/var/spool/vhosts/%d/dovecotprivate/%n:INBOX=/var/spool/vhosts/%d/%n Error: User archiv(a)xyz.de doesn't have home dir set, disabling duplicate database Dec 19 20:37:03 lda(archiv(a)xyz.de): Error: sieve: sieve script file path ~/.dovecot.sieve is relative to home directory, but home directory is not available. Dec 19 20:37:03 lda(archiv(a)xyz.de): Error: sieve: failed to access user's sieve script ~/.dovecot.sieve (using default script location instead) When I set mail_home = mbox:/var/spool/vhosts/%d/%n:INBOX=/var/spool/vhosts/%d/%n I get this for mboxes in the log: Error: user archiv(a)xyz.de: Relative home directory paths not supported: mbox:/var/spool/vhosts/xyz.de/archiv:INBOX=/var/spool/vhosts/xyz.de/archiv The .dovecot.sieve script of the user seems to be found, a vacation response is sent and the email is stored mail into mailbox 'INBOX' What is wrong? Andreas

3 8

[Dovecot] Problems trying to add dspam delivery to dovecot LDA to working Postfix/Dovecot server. No passdb.
by Brian Jarrett 20 Dec '12

20 Dec '12

Hello list, I'm really hoping someone can point me in the right direction on this. I set up a server using Postfix with LDAP lookups to Active Directory. Postfix delivers to maildir. Dovecot IMAP and POP are working correctly using PAM Kerberos to authenticate via Active Directory. I want to add spam filtering, so I'm trying to set up Postfix to use dspam which is then supposed to use Dovecot LDA to deliver messages to the mailbox instead of having Postfix deliver to the Maildir. I can't get any deliveries to Dovecot LDA to get past passdb lookup. When I run /usr/lib/dovecot/deliver -f bjarrett(a)garfield16.org -d bjarrett(a)metcalfexcavation.com I get: Dec 19 20:57:55 mxserver2 dovecot: auth: Debug: master in: USER#0111# 011bjarrett(a)metcalfexcavation.com#011service=lda Dec 19 20:57:55 mxserver2 dovecot: auth: Debug: password( bjarrett(a)metcalfexcavation.com) passdb doesn't support credential lookups Dec 19 20:57:55 mxserver2 dovecot: auth: Error: static( bjarrett(a)metcalfexcavation.com) passdb doesn't support lookups, can't verify user's existence Dec 19 20:57:55 mxserver2 dovecot: auth: Debug: master out: FAIL#0111 Dec 19 20:57:55 mxserver2 dovecot: lda: Error: user bjarrett(a)metcalfexcavation.com: Auth USER lookup failed Dec 19 20:57:55 mxserver2 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. so it doesn't even look like it's attempting to find the user. Here's my doveconf -n: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS ext4 auth_debug = yes mail_gid = 1001 mail_location = maildir:/home/mailbox/%Lu/Maildir mail_uid = 1001 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mailbox mode = 0600 user = mailbox } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=1001 gid=1001 home=/home/mailbox/%Lu/Maildir allow_all_users=yes driver = static } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 } protocol pop3 { mail_max_userip_connections = 20 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = bjarrett(a)metcalfexcavation.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } I have tried several configurations, but nothing seems to get me past the "passdb doesn't support.." errors.

1 0

Re: [Dovecot] dovecot-lda (2.1.12) segfaults
by Joseph Tam 20 Dec '12

20 Dec '12

Timo Sirainen writes: Date: Wed, 19 Dec 2012 12:59:54 +0200 > Could you send me those files? Would be the easiest and quickest way to > get it fixed :) Date: Wed, 19 Dec 2012 15:02:25 +0200 > Okay, fixed: http://hg.dovecot.org/dovecot-2.1/rev/32ce915e046a Yes it is does, and it stops crashing for the other 5 sets of indices. A 2-hour turnaround, of which an hour was spent packing up the index files. Amazing. Thanks. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] mail_log_events seem to be broken in HG 2.2
by Thomas Leuxner 19 Dec '12

19 Dec '12

It seems along the way of 2.2alpha1 'mail_log_events' quietly stopped working. They don't log expunges etc. anymore. […] mail_log_events = expunge mailbox_delete Tested with latest HG. Regards Thomas

2 2

[Dovecot] Maildir hardlinks with sieve
by Benedetto Vassallo 19 Dec '12

19 Dec '12

Hi all, First of all, excuse me for my previous posts (Maildir hardlinks). Today I realized the following issue. Maildir hardlinks works OK on dovecot 2.1.10 without sieve. If set sieve plugin in dovecot-lmtp hardlinks stop working. Is there a way to have both sieve and hardlinks working? Thank you -- Benedetto Vassallo Sistema Informativo di Ateneo Settore Gestione Reti Hardware e Software U.O.B. Sviluppo e manutenzione dei sistemi Università degli studi di Palermo Phone: +3909123860056 Fax: +390916529124 ------------------------------------------------------------------------- This message was sent using the University of Palermo web mail interface.

3 6

[Dovecot] namespace subscription problem
by Holger Hegmanns 19 Dec '12

19 Dec '12

Hi all, my problem seems to be a cosmetic one (again). According to the docs: subscriptions: "yes" (default) if this namespace should handle its own subscriptions. If "no", then the first parent namespace with subscriptions=yes will handle it. Therefore is no way to create the following scenario: three namespaces (private, shared, public) the private namespace has to handle its own subscriptions the private namespace setup with "prefix = INBOX." the both shared and public namespace setup with "subscriptions = no" cause there is no so called "parent" namespace. Private namespace setup with "prefix = " works fine, but that's not what I want. namespace { type = public separator = . prefix = public. location = maildir:/var/spool/dovecot/vmail/public subscriptions = no } namespace inbox { type = private separator = . prefix = INBOX. inbox = yes } namespace { type = shared separator = . prefix = user.%%u. location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = children } Any chance that the private namespace can subscribe to shared mailboxes with the principals above? ... Few hours later. Added a default namespace without any prefix: namespace { prefix = separator = . hidden = yes subscriptions = yes } Subscriptions works as expected, but when I telnet to dovecot now the LSUB command shows all boxes beneath the INBOX as well as without the prefix: b lsub "" * * LSUB () "." "Sent" * LSUB () "." "Templates" * LSUB () "." "Trash" * LSUB () "." "Drafts" * LSUB () "." "INBOX.Sent" * LSUB () "." "INBOX.Templates" * LSUB () "." "INBOX.Trash" * LSUB () "." "INBOX.Drafts" * LSUB () "." "INBOX.user.bar.Sent" * LSUB () "." "user.bar.Sent" b OK Lsub completed. Completely stuck Holgert

2 2

[Dovecot] migration to dovecot pop3
by Rajesh M 19 Dec '12

19 Dec '12

hi i am planning to migrate from qmail pop3 to dovecot pop3 the number of users on the server is large over 5000 also data volume is large - over 3.5 tb -- ie many users several 1000s of emails in their inbox email clients used are outlook / outlook express / windows mail, etc my questions 1) will the migration cause all the emails on the server to re-download 2) can dovecot be configured to allow only one download at a time - pop3 locking with time out setting that can be customized 3) can dovecot pop3 be configured so that it will allow download of emails only of the last say 15 days ie even if the same pop3 user is configure on another machine it will download only messages of the last 15 days 4) has anybody migrated from qmail pop3 to dovecot pop3 successfully without emails being downloaded again thankyou very much in advance rajesh

1 0

[Dovecot] environment variables not set
by Nikolai Tsvetkov 19 Dec '12

19 Dec '12

hi, all! I try to use relay-ctrl with dovecot's imap, but with no luck. I think that the problem is with environment variables. Here are some information: dovecot --version 2.1.12 dovecot -n # 2.1.12: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.29-smp i686 Slackware 14.0 auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no first_valid_uid = 89 info_log_path = /var/log/dovecot-info.log listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap service imap { executable = /usr/local/bin/envdir /etc/relay-ctrl /usr/local/bin/relay-ctrl-chdir /usr/local/bin/dovecot-settcpremoteip /usr/local/bin/relay-ctrl-allow /usr/local/libexec/dovecot/imap } ssl = no userdb { driver = passwd } /usr/local/bin/dovecot-settcpremoteip: #!/bin/sh # # Wrapper for relay-ctrl-allow that sets TCPREMOTEIP. TCPREMOTEIP="${IP}"; export TCPREMOTEIP exec "$@"

2 3

[Dovecot] Upload / migrate old mails: iPhone shows oldest mails first
by Denny Schierz 19 Dec '12

19 Dec '12

hi, I've got a very strange behavior: I uploaded old mails from a local folder (thunderbird / osx) to my Dovecot (Debian Squeeze) and now, the iphone (ios6) show the oldest mails first. The only thing I can imagine is, that Dovecot got from Thunderbird the newest mails first and last the old mails, so that in the last mdbox are the old one. So, if it is correct, how can I fix it? cu denny

2 1

[Dovecot] Path for fixing sequence lookup of newly created mails in transaction view
by Potapov Sergey 19 Dec '12

19 Dec '12

Hi! It seem that tview_lookup_seq_range works incorret, if I request uids from 3 to 3, and I have new uids 1,2,4,5 it will return seq for uid=4. Fixing patch is included as attach. ------ Sergey Potapov

2 1

Re: [Dovecot] dovecot-lda (2.1.12) segfaults
by Joseph Tam 19 Dec '12

19 Dec '12

Timo Sirainen writes: > Can you still reproduce this in any way? Yes, I have 6 sets of user INBOX index caches that will crash dovecot-lda. The actual content of the INBOX is irrelevant (crash probably happens before INBOX is opened). > I found two bugs, would be nice to know if they solve it: > > http://hg.dovecot.org/dovecot-2.1/rev/2f848393f78e > http://hg.dovecot.org/dovecot-2.1/rev/bded819417d9 No, these patch don't help. It crashes in the same place with the same value of field_hdr. Here's the full backtrace: #0 0xff2a0474 in mail_cache_header_fields_read (cache=0x5c250) at mail-cache-fields.c:325 field_hdr = (const struct mail_cache_header_fields *) 0x20 field = {name = 0x402 <Address 0x402 out of bounds>, idx = 4282351288, type = MAIL_CACHE_FIELD_VARIABLE_SIZE, field_size = 4282335628, decision = MAIL_CACHE_DECISION_TEMP, last_used = -14558816} last_used = (const uint32_t *) 0x64584 sizes = (const uint32_t *) 0xc types = (const uint8_t *) 0x64888 "" decisions = (const uint8_t *) 0x64900 "" p = 0x24a38 "�\035\212@��" names = 0x0 end = 0x64a50 "" orig_key = (void *) 0xffbfee38 orig_value = (void *) 0x64550 fidx = 411784 new_fields_count = 4280126016 dec = MAIL_CACHE_DECISION_NO max_drop_time = 376804 offset = 32 i = 4282348464 #1 0xff29e8cc in mail_cache_compress_locked (cache=0x5c250, trans=0x645e0, unlock=0xffbfeeef) at mail-cache-compress.c:361 dotlock = (struct dotlock *) 0x2ea00 st = {st_dev = 235718347, st_pad1 = {874, 0, 0}, st_ino = 0, st_mode = 0, st_nlink = 0, st_uid = 0, st_gid = 0, st_rdev = 3720, st_pad2 = {0, 0}, st_size = 3720, st_atim = { tv_sec = 410816, tv_nsec = -12631336}, st_mtim = {tv_sec = 514, tv_nsec = -12631336}, st_ctim = {tv_sec = 65536, tv_nsec = 0}, st_blksize = 0, st_blocks = 1621028016851520, st_fstype = "\000\000\000\004\000\000\000\003\212\000\000\000\000\005�P", st_pad4 = {-4198784, -14028952, 39394339, 377424, 0, 16777216, 3, 4}} old_mask = 4282348464 file_seq = 4 old_offset = 4290768372 ext_offsets = {arr = {buffer = 0xffbfee10, element_size = 4280930288}, v = 0xffbfee10, v_modifiable = 0xffbfee10} offsets = (const uint32_t *) 0x0 data = (const void *) 0xff3f4380 i = 0 count = 1 fd = 0 ret = 377424 #2 0xff29efe0 in mail_cache_compress (cache=0x5c250, trans=0x645e0) at mail-cache-compress.c:489 unlock = false ret = 411764 __FUNCTION__ = "mail_cache_compress" #3 0xff2a3e28 in mail_cache_transaction_compress (ctx=0x5e3b8) at mail-cache-transaction.c:180 cache = (struct mail_cache *) 0x5c250 view = (struct mail_index_view *) 0x644c0 trans = (struct mail_index_transaction *) 0x645e0 ret = 2424 #4 0xff2a40b8 in mail_cache_transaction_open_if_needed (ctx=0x5e3b8) at mail-cache-transaction.c:241 cache = (struct mail_cache *) 0x5c250 ext = (const struct mail_index_ext *) 0x1e idx = 154968 i = 1 __FUNCTION__ = "mail_cache_transaction_open_if_needed" #5 0xff2a6e94 in mail_cache_field_want_add (ctx=0x5e3b8, seq=1, field_idx=12) at mail-cache-transaction.c:1048 decision = 153968 #6 0xff27e8e8 in index_mail_parse_header_register_all_wanted (mail=0x5efa8) at index-mail-headers.c:175 _mail = (struct mail *) 0x5efa8 all_cache_fields = (const struct mail_cache_field *) 0x25970 i = 12 count = 26 #7 0xff27ec90 in index_mail_parse_header_init (mail=0x5efa8, headers=0x0) at index-mail-headers.c:230 _data_stack_cur_id = 2 data = (struct index_mail_data *) 0x5f058 match = (const uint8_t *) 0x641a0 "" i = 0 field_idx = 4290769328 match_count = 2155905152 __FUNCTION__ = "index_mail_parse_header_init" #8 0xff27f5c8 in index_mail_cache_parse_init (_mail=0x5efa8, input=0x64058) at index-mail-headers.c:376 mail = (struct index_mail *) 0x5efa8 input2 = (struct istream *) 0x641a0 __FUNCTION__ = "index_mail_cache_parse_init" #9 0xff2299cc in mbox_save_get_input_stream (ctx=0x5e6e0, input=0x637c8) at mbox-save.c:411 filter = (struct istream *) 0x0 ret = (struct istream *) 0x5edd0 cache_input = (struct istream *) 0x25990 streams = {0x20202020, 0x2e938, 0xa202020} #10 0xff22a084 in mbox_save_begin (_ctx=0x5e6e0, input=0x637c8) at mbox-save.c:520 ctx = (struct mbox_save_context *) 0x5e6e0 t = (struct mbox_transaction_context *) 0x5de88 save_flags = MAIL_RECENT offset = 0 __FUNCTION__ = "mbox_save_begin" #11 0xff24e9c0 in mailbox_save_begin (ctx=0xffbff514, input=0x637c8) at mail-storage.c:1652 box = (struct mailbox *) 0x594e8 ret = 0 #12 0xff23f138 in mail_storage_try_copy (_ctx=0xffbff514, mail=0x54cd8) at mail-copy.c:68 ctx = (struct mail_save_context *) 0x5e6e0 pmail = (struct mail_private *) 0x54cd8 input = (struct istream *) 0x637c8 from_envelope = 0x13d90 "MAILER-DAEMON" guid = 0xff2f0ec0 "" received_date = -1 #13 0xff23f23c in mail_storage_copy (ctx=0x5e6e0, mail=0x54cd8) at mail-copy.c:93 No locals. #14 0xff24ec28 in mailbox_copy (_ctx=0xffbff670, mail=0x54cd8) at mail-storage.c:1721 ctx = (struct mail_save_context *) 0x5e6e0 box = (struct mailbox *) 0x594e8 keywords = (struct mail_keywords *) 0x0 ret = 389032 #15 0xff24ec98 in mailbox_save_using_mail (ctx=0xffbff670, mail=0x54cd8) at mail-storage.c:1730 No locals. #16 0xff388070 in mail_deliver_save (ctx=0xffbff8a8, mailbox=0x13fe8 "INBOX", flags=0, keywords=0x0, storage_r=0xffbff83c) at mail-deliver.c:317 open_ctx = {user = 0x3d3a8, lda_mailbox_autocreate = true, lda_mailbox_autosubscribe = false} box = (struct mailbox *) 0x594e8 trans_flags = MAILBOX_TRANSACTION_FLAG_EXTERNAL t = (struct mailbox_transaction_context *) 0x5de88 save_ctx = (struct mail_save_context *) 0x0 headers_ctx = (struct mailbox_header_lookup_ctx *) 0x0 kw = (struct mail_keywords *) 0x0 error = MAIL_ERROR_NONE mailbox_name = 0x13fe8 "INBOX" errstr = 0x0 guid = 0xff3f73b0 "" changes = {pool = 0x13e38, uid_validity = 0, saved_uids = {arr = {buffer = 0x13e28, element_size = 1}, v = 0x13e28, v_modifiable = 0x13e28}, ignored_modseq_changes = 4282350008, changed = false} range = (const struct seq_range *) 0xff1d3580 default_save = true ret = 0 __FUNCTION__ = "mail_deliver_save" #17 0xff38869c in mail_deliver (ctx=0xffbff8a8, storage_r=0xffbff83c) at mail-deliver.c:403 ret = -1 #18 0x00012d08 in main (argc=3, argv=0xffbff964) at main.c:434 set_roots = {0x24b48, 0x0} ctx = {pool = 0x2eaf0, set = 0x30440, session = 0x2eb00, dup_ctx = 0x0, session_id = 0x0, src_mail = 0x54cd8, src_envelope_sender = 0x0, dest_user = 0x3d3a8, dest_addr = 0x25828 "testuser@domain", final_dest_addr = 0x25828 "testuser@domain", dest_mailbox_name = 0x13fe8 "INBOX", dest_mail = 0x5efa8, var_expand_table = 0x0, tried_default_save = true, saved_mail = false, save_dest_mail = false, mailbox_full = false, dsn = false} service_flags = 1027 user = 0xffbffad0 "testuser" errstr = 0xff3f48e8 "" path = 0x0 storage_service = (struct mail_storage_service_ctx *) 0x2f650 service_user = (struct mail_storage_service_user *) 0x2fe88 service_input = {module = 0x13fd0 "lda", service = 0x13fd0 "lda", username = 0xffbffad0 "testuser", session_id = 0x0, local_ip = {family = 0, u = {ip6 = { _S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = {S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, remote_ip = {family = 0, u = {ip6 = { _S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = {S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} storage = (struct mail_storage *) 0x39330 user_source = 0x13f30 "" destaddr_source = 0x13f30 "" process_euid = 0 stderr_rejection = false ret = 1 c = -1 error = MAIL_ERROR_NONE Joseph Tam <tam(a)math.ubc.ca>

2 2

[Dovecot] Too many imap connections in state "idling"
by 3.listas＠adminlinux.com.br 19 Dec '12

19 Dec '12

Hi, I have a "Ubuntu12.04 + dovecot-2.0.19" configuration in my server. My mailbox server is shared by ~ 10k domains. It works fine with ~50k accounts. On average, my server has about 6K simultaneous imap connections during office hours. But I've noticed that this server has an average of approximately 4k connections in state "idling". On other Dovecot servers the average connections in state "idling" is only 10%. My doveconf -n: http://thiagoh.prv.digirati.com.br/doveconf-n.txt Can someone help me? Thanks -- Thiago Henrique adminlinux.com.br

4 5

[Dovecot] Dsync help, new attempt
by Torbjorn Astlind 19 Dec '12

19 Dec '12

I observe that dsync fills Maildir correctly incl. cur, if I delete Maildir just before dsync runs. Can the failed mbox to Maildir conversion be caused by dovecot creating Maildir automatically if a client connects to dovecot? Should dovecot be shutdown when running dsync? All the best, Torbjörn 9. dsync help? (Torbjorn Astlind) ------------------------------ Message: 9 Date: Mon, 10 Dec 2012 16:33:08 +0100 From: Torbjorn Astlind <torbjorn(a)dbb.su.se> To: dovecot(a)dovecot.org Subject: [Dovecot] dsync help? Message-ID: <50C600B4.4040603(a)dbb.su.se> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Hi all, I have dovecot serving aprox 200 users through mbox, but the time has come to migrate to a new server, and to use Maildir. Using rsync from the old server I get all user data, i.e /home/*, and inboxes i.e /var/mail/* to a new server. This has worked well for some time as backup. The dsync should convert everything to Maildir, and it does... to an extent. (linebrakes for easy viewing) What I see, is that often, the /home/mail/xxx is NOT resulting in /home/xxx/Maildir/cur All mailboxes from /home/xxx, are properly converted to /home/xxx/Maildir/.name_of_ box Am I misunderstanding something? I get it to work sometimes if I delete the ~/Maildir completely before doing the dsync. All, and any help most welcome, Torbj?rn for i in `cat /home2/torbjorn/SCRIPTS/userlist.txt`; do dsync -D -v -f -u $i -c /etc/dovecot/alt_config/10-mail.MBOX.conf backup maildir:~/Maildir; done > /home2/torbjorn/SCRIPTS/mb2mdRES.txt 2>&1 the -c 10.mail.MBOX.conf contains, the parts I think are relevant for the dsync operation: mail_location = mbox:~/home:INBOX=/home/mail/%u namespace { type = private separator = '/' inbox = yes } dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/home:INBOX=/home/mail/torbjorn dsync(root): Debug: fs: root=/home/torbjorn/home, index=, control=, inbox=/home/mail/torbjorn, alt= dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir dsync(root): Debug: maildir++: root=/home/torbjorn/Maildir, index=, control=, inbox=/home/torbjorn/Maildir, alt= dsync(root): Debug: Namespace : /home/torbjorn/Maildir doesn't exist yet, using default permissions dsync(root): Debug: Namespace : Using permissions from /home/torbjorn/Maildir: mode=0700 gid=-1 dsync(torbjorn): Debug: Namespace : Using permissions from /home/torbjorn/home: mode=0700 gid=-1 ------------------------------ _______________________________________________ dovecot mailing list dovecot(a)dovecot.org http://dovecot.org/cgi-bin/mailman/listinfo/dovecot End of dovecot Digest, Vol 116, Issue 16 ****************************************

1 0

[Dovecot] Advice on sieve vacation for aliases
by Marcio Merlone 19 Dec '12

19 Dec '12

Greetings, I have a working mail server with sieve 1:1.2.9-1ubuntu6.5 working just fine. My commercial dept. has asked me to set a vacation message for comercial(a)domain.tld, but this is an alias to jhon(a)domain.tld and meggie(a)domain.tld. I have created a sieve_global_path = /etc/dovecot/global.sieve and it works, but not the intended way: it sends two vacation messages, each From: each employee, and not From: comercial(a)domain.tld alias. Is there how to make dovecot send only one vacation message From: comercial(a)domain.tld or will I have to survive with one message from jhon and another from meggie? Also, is there how to have a dovecot.lda-dupes for the alias instead the users? /etc/dovecot/global.sieve: require ["vacation"]; # rule:[Ferias coletivas] if anyof (header :contains "To" "comercial(a)domain.tld") { vacation :days 7 :subject "Férias coletivas de 20/12/2012 a 07/01/2013" text: bla bla bla. ; stop; } Thanks in advance and nice holidays. -- Marcio Merlone

2 1

[Dovecot] Adding a parameter to dovecot's deliver to get a meaningful return value
by Cyril RUSSO 18 Dec '12

18 Dec '12

Hi, First, please forgive me as I'm not subscribed to the list. I'm using Dovecot 2 (2.1.7) for serving my local maildir. This maildir is filled by an external process, fetching & merging mails from different sources that's outside this scope (but it's working). Dovecot is thus acting as a MTA, but more as a MDA. I've a web client running on the server, and it connects to Dovecot to get the mails. I've configured this web client & dovecot to use sieve to filter the mails. I know that since Dovecot does not actually deliver the messages, it's not the expected behavior. Anyway, I can use the "deliver" software in your suite for passing sieve's rules on each message in my maildir, and it's almost working. I've a cron job that run deliver on each message of my maildir, but I'm a bit puzzled now. Basically, I'm not able to figure out if a message was matched by a sieve filter or not. I'm a bit disappointed by two things: 1) Sieve's reject doesn't make "deliver" to return an error, so a sieve rule chain ending in "reject" can't be detected from my cron's script. I wonder it's due to the step deliver is supposed to be run (after a mail is already accepted). 2) "deliver" doesn't have a method to find out if it processed the given mail as input. Basically, would it be possible to either add a parameter to "deliver" (for example: "--fail-on-discarding") so it would fail if the sieve rules discard or reject (/ereject) the mail ? That way, I could detect the failure in my script, and know that I don't need to delete the initial mail since it was not filtered. Or, thought differently, I wonder if "deliver" could open a socket/pipe/file whatever, and write the number of processed mails in there (or using a "--return-processed-mail"), so a sieve rule ending with "delete", would be detectable by my script. Best regards, -- Cyril

2 1

Re: [Dovecot] Undeserved permissions error with g+s folder permissions
by tlhackque 18 Dec '12

18 Dec '12

> It's an MBox file that I'm trying to rename, not a directory. > | file Vendors/|| > ||Vendors/: setgid directory|| > || file Vendors/Test|| > ||Vendors/Test: empty|| > | > (Perhaps you missed that I said I created it "messages only", and the > config I originally posted showed the file storage is mbox...) > > So perhaps dovecot is confused - expecting an mbox file to have > directory permissions, when the directory it's in is setgid? At least > that's how it has seemed to me all along... > > Thanks. > > This communication may not represent my employer's views, > if any, on the matters discussed. > On 18-Dec-12 14:28, Reindl Harald wrote: >> Am 18.12.2012 19:39, schrieb Timo Sirainen: >>> On Sat, 2012-12-01 at 10:59 -0500, tlhackque wrote: >>>> It contains a subdirectory: >>>> >>>> -rw-rw---- 1 thlackque mail 84805345 Dec 1 10:34 Vendors/AVendor >>>> >>>> If I try to rename the AVendor folder (client is Thunderbird 17.0), I >>>> get this error: >>>> >>>> Unable to rename across conflicting directory permisssions >> this is 660 which is simply wrong for a directrory >> in case of diretcories you need the excue flag means 770 >> > -- This communication may not represent my employer's views, if any, on the matters discussed.

1 0

[Dovecot] Clear-text ldap passwords: {CLEAR} scheme?
by Kristof Bajnok 18 Dec '12

18 Dec '12

Hi, if I read the documentation correctly, the clear-text password storage scheme in Dovecot is called PLAIN. Unfortunately, in Sun LDAP Directory Server I have to specify them as "{CLEAR}" [1]. Is it somehow possible to make Dovecot recognise "{clear}foobar" passwords as plaintext? Now I get: auth: Error: ldap(username): Unknown scheme clear Thanks, Kristof [1]: http://docs.oracle.com/cd/E19850-01/816-6699-10/confattr.html#passwordStora…

2 1

[Dovecot] dovecot-lda (2.1.12) segfaults
by Joseph Tam 18 Dec '12

18 Dec '12

We uograded our dovecot from version 2.1.10 -> 2.10.12, but within the first hour of use, dovecot-lda would segfault during delivery. This left a lock file lying around causing the user's mail readers to hang; much hilarity ensues. All further deliveries to the same user will result in a crash. The only thing that fixes this condition is to blow away the user's INBOX cache index. Reindexing with "doveadm index" does not fix anything. I've installed a test version with one user's problematic INBOX cache indices and ran gdb dovecot-lda (gdb) run -t testuser </dev/null and it crashes with the following backtrace Program received signal SIGSEGV, Segmentation fault. 0xff2a0440 in mail_cache_header_fields_read (cache=0x5c120) at mail-cache-fields.c:323 323 if (field_hdr->size < sizeof(*field_hdr) + (gdb) bt #0 0xff2a0440 in mail_cache_header_fields_read (cache=0x5c120) at mail-cache-fields.c:323 #1 0xff29e8bc in mail_cache_compress_locked (cache=0x5c120, trans=0x63ce8, unlock=0xffbfeeef) at mail-cache-compress.c:361 #2 0xff29efd0 in mail_cache_compress (cache=0x5c120, trans=0x63ce8) at mail-cache-compress.c:489 #3 0xff2a3df4 in mail_cache_transaction_compress (ctx=0x5dac0) at mail-cache-transaction.c:180 #4 0xff2a4084 in mail_cache_transaction_open_if_needed (ctx=0x5dac0) at mail-cache-transaction.c:241 #5 0xff2a6e60 in mail_cache_field_want_add (ctx=0x5dac0, seq=1, field_idx=12) at mail-cache-transaction.c:1048 #6 0xff27e8e8 in index_mail_parse_header_register_all_wanted (mail=0x5e6b0) at index-mail-headers.c:175 #7 0xff27ec90 in index_mail_parse_header_init (mail=0x5e6b0, headers=0x0) at index-mail-headers.c:230 #8 0xff27f5c8 in index_mail_cache_parse_init (_mail=0x5e6b0, input=0x63760) at index-mail-headers.c:376 #9 0xff2299cc in mbox_save_get_input_stream (ctx=0x5dde8, input=0x62ed0) at mbox-save.c:411 #10 0xff22a084 in mbox_save_begin (_ctx=0x5dde8, input=0x62ed0) at mbox-save.c:520 #11 0xff24e9c0 in mailbox_save_begin (ctx=0xffbff514, input=0x62ed0) at mail-storage.c:1652 #12 0xff23f138 in mail_storage_try_copy (_ctx=0xffbff514, mail=0x54cd8) at mail-copy.c:68 #13 0xff23f23c in mail_storage_copy (ctx=0x5dde8, mail=0x54cd8) at mail-copy.c:93 #14 0xff24ec28 in mailbox_copy (_ctx=0xffbff670, mail=0x54cd8) at mail-storage.c:1721 #15 0xff24ec98 in mailbox_save_using_mail (ctx=0xffbff670, mail=0x54cd8) at mail-storage.c:1730 #16 0xff388070 in mail_deliver_save (ctx=0xffbff8a8, mailbox=0x13fe8 "INBOX", flags=0, keywords=0x0, storage_r=0xffbff83c) at mail-deliver.c:317 #17 0xff38869c in mail_deliver (ctx=0xffbff8a8, storage_r=0xffbff83c) at mail-deliver.c:403 #18 0x00012d08 in main (argc=3, argv=0xffbff964) at main.c:434 I dumped the value of field_hdr, and it has some bogus value (gdb) p field_hdr $1 = (const struct mail_cache_header_fields *) 0x20 Other observations - blowing away the indices does not fix it permanantly. The the LDA will eventually start crashing again. - the problematic indices do not cause problems with 2.1.10. Reverting to 2.1.10 restores proper mail delivery. Is this enough debug info to work your magic, Timo? I can supply the cache data if you neded it. It's compiled on a Solaris10. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] NFS, deleting folder issue
by Catalin Petrescu 18 Dec '12

18 Dec '12

Hi there, I use dovecot on a server with some Nightmare File Systerm (aka NFS) storage. When I delete a folder, its content gets deleted, but the folder itself does not. Here's what I found: #### Step 1: From a shell, telnet to imap, then create a folder cpetrescu@cpetrescu-mobile:~$ telnet server1.localdomain 143 Trying 10.200.28.36... Connected to server1.localdomain. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 01 login testuser1 Password 01 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS] Logged in 02 create INBOX/F1 02 OK Create completed. #### Step2: On the server, everything is OK, the folder is there [server1: testuser1]# ls -lrtA Maildir/INBOX/ total 4 drwxr-xr-x 5 root root 4096 Dec 5 10:28 F1 [server1: testuser1]# ls -lrtA Maildir/INBOX/F1/ total 12 drwxr-xr-x 2 root root 4096 Dec 5 10:28 tmp drwxr-xr-x 2 root root 4096 Dec 5 10:28 new drwxr-xr-x 2 root root 4096 Dec 5 10:28 cur #### Step3: in the telnet session, delete the folder 03 delete INBOX/F1 03 OK Delete completed. #### Step4: On the server, the content of the folder is gone, but the folder is still there [server1: testuser1]# ls -lrtA Maildir/INBOX/ total 4 drwxr-xr-x 2 root root 4096 Dec 5 10:29 F1 [server1: testuser1]# ls -lrtA Maildir/INBOX/F1/ total 0 #### Debugging: I defined my own my_delete_dir and added it to the delete_dir list in mailbox_list_vfuncs In my_delete_dir I just call readdir on that folder, and print the files via syslog. Here's the content of F1 before calling delete_dir: Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: "new" inode: 843617 Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: "tmp" inode: 843623 Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: "cur" inode: 843616 Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: "dovecot.index.log" inode: 2363059 Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: "." inode: 843612 Dec 05 10:29:14 imap(testuser1): my_delete_dir: d_name: ".." inode: 807717 And here's its content after calling delete_dir Dec 05 10:29:15 imap(testuser1): my_delete_dir: name: INBOX/F1 Dec 05 10:29:15 imap(testuser1): my_delete_dir: path: /data/testuser1/Maildir/INBOX/F1 Dec 05 10:29:15 imap(testuser1): my_delete_dir: ret: -1 Dec 05 10:29:15 imap(testuser1): my_delete_dir: error: "Directory not empty" trying again Dec 05 10:29:15 imap(testuser1): my_delete_dir: d_name: "." inode: 843612 Dec 05 10:29:15 imap(testuser1): my_delete_dir: d_name: ".." inode: 807717 Dec 05 10:29:15 imap(testuser1): my_delete_dir: d_name: ".nfs0000000000240eb3000000e0" inode: 2363059 Dec 05 10:29:15 imap(testuser1): my_delete_dir: ret: -1 So, the dovecot.index.log was deleted, but it's still open, and the folder can't be deleted because of the pesky .nfs* file. Now, the question: Is there a *magic* function that closes "dovecot.index.log" that I can call before delete_dir()? I tried mailbox_log_close() but it didn't help. Thanks a lot. p.s. Please don't suggest that I should not use NFS! I know that, and I don't really like NFS, but I have no other choice. Catalin Petrescu <catalin.petrescu gmail com>

2 2

[Dovecot] SPECIAL-USE and mailbox names in various IMAP clients
by Timo Sirainen 18 Dec '12

18 Dec '12

http://imapwiki.org/SpecialUse Please fill out for all clients with all languages you know of. Knowing the mailbox names can be helpful with Dovecot's mailbox_alias plugin.

2 2

[Dovecot] Manually creating dovecot- files after isync/mbsync mirror
by Dale Gallagher 18 Dec '12

18 Dec '12

Hi everyone I'm using isync 1.0.5 patched to do recursive folder listing and mirroring mail from an external party's IMAP server to a local Maildir, which will be accessed by Dovecot 2.0.9. In order to prevent IMAP clients from re-downloading their mail, when connecting to Dovecot, I'm busy writing a script to generate appropriate dovecot-uidlist and dovecot-uidvalidity files, per Maildir. isync stores the uid in the filename, so that's extractable, per message, and the uidvalidity and current max uid are stored in a file .uidvalidity, in each Maildir. I've read the docs here: http://wiki2.dovecot.org/MailboxFormat/Maildir Regarding the dovecot-uidlist header (first line) - I've tried to search for and figure out what exactly is meant by the "mailbox global uid" and once I do, how to manually generate the 128 bit hex variation of it? Could someone elaborate on this, please. How would omitting the global uid field, beginning with G, affect remote clients' syncing of mail? Is this field mandatory? I also see that Dovecot's uidvalidity is of the form 4df8a4e2, whereas isync uses an integer. I'd appreciate it if someone could elaborate on what Dovecot uses and whether I can convert one to the other? I'll post the full solution, once complete, and working. Thanks. Dale

2 1

Re: [Dovecot] Automatically Cleaning Kerberos Credential Cache Files
by Joseph Tam 18 Dec '12

18 Dec '12

Ben Morrow writes: > In any case, it's likely that the delivery process looks in the user's > home directory even if delivery is to a separate mail spool, unless > you've taken steps to prevent this. I can confirm this. I think the reason is that dovecot changes to the user's home directory so that it has a place to dump core. This causes problem for my setup since I user per-user NFS mounts, so a delivery to an internal mailing list caused hundreds of NFS automounts. I patched this behaviour out, but there is probably a more elegant solution (unset MAIL_STORAGE_SERVICE_FLAG_ENABLE_CORE_DUMPS? How?). Joseph Tam <jtam.home(a)gmail.com> --- ./src/lib-storage/mail-storage-service.c~ Sat May 19 08:42:12 2012 +++ ./src/lib-storage/mail-storage-service.c Mon Jun 25 22:00:57 2012 @@ -615,21 +615,21 @@ - if ((user->flags & MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP) != 0 && - (user->flags & MAIL_STORAGE_SERVICE_FLAG_ENABLE_CORE_DUMPS) == 0) { - /* we don't want to write core files to any users' home - directories since they could contain information about other - users' mails as well. so do no chdiring to home. */ - } else if (*home != '\0' && - (user->flags & MAIL_STORAGE_SERVICE_FLAG_NO_CHDIR) == 0) { - /* If possible chdir to home directory, so that core file - could be written in case we crash. */ - if (chdir(home) < 0) { - if (errno == EACCES) { - i_error("%s", eacces_error_get("chdir", - t_strconcat(home, "/", NULL))); - } if (errno != ENOENT) - i_error("chdir(%s) failed: %m", home); - else if (mail_set->mail_debug) - i_debug("Home dir not found: %s", home); - } - } +// if ((user->flags & MAIL_STORAGE_SERVICE_FLAG_TEMP_PRIV_DROP) != 0 && +// (user->flags & MAIL_STORAGE_SERVICE_FLAG_ENABLE_CORE_DUMPS) == 0) { +// /* we don't want to write core files to any users' home +// directories since they could contain information about other +// users' mails as well. so do no chdiring to home. */ +// } else if (*home != '\0' && +// (user->flags & MAIL_STORAGE_SERVICE_FLAG_NO_CHDIR) == 0) { +// /* If possible chdir to home directory, so that core file +// could be written in case we crash. */ +// if (chdir(home) < 0) { +// if (errno == EACCES) { +// i_error("%s", eacces_error_get("chdir", +// t_strconcat(home, "/", NULL))); +// } if (errno != ENOENT) +// i_error("chdir(%s) failed: %m", home); +// else if (mail_set->mail_debug) +// i_debug("Home dir not found: %s", home); +// } +// }

2 1

[Dovecot] Removing configured SSL certificate file from disk while Dovecot is running spams syslog
by Nils 18 Dec '12

18 Dec '12

Hi! [root@mikan ~]# dovecot --version 2.1.12 When I remove the SSL certificate from disk while Dovecot is running, it spams syslog with the following log message over and over: Dec 6 17:41:41 mikan dovecot: config: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 12: ssl_cert: Can't open file /etc/ssl/private/dovecot.pem: No such file or directory Dec 6 17:41:41 mikan dovecot: config: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 12: ssl_cert: Can't open file /etc/ssl/private/dovecot.pem: No such file or directory Dec 6 17:41:41 mikan dovecot: config: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 12: ssl_cert: Can't open file /etc/ssl/private/dovecot.pem: No such file or directory [...] Reporting that the certificate went away is fine and useful, but spamming the syslog over and over with hundreds of entries per second(!) is annoying. :( I know what I'm doing, so reporting it once per connection attempt or something is enough. Even if Dovecot just decides to terminate, that would be fine. But a denial of service attack on syslog is not nice. Configuration output follows below. All the best, Nils [root@mikan ~]# dovecot -n # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 3.5.4-1-ARCH x86_64 auth_failure_delay = 5 secs auth_mechanisms = plain login auth_verbose = yes listen = *,:: login_greeting = mail_location = maildir:~/.maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = pop3 service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 10 } ssl_cert = </etc/ssl/private/dovecot.pem ssl_key = </etc/ssl/private/dovecot.key userdb { driver = passwd } protocol imap { imap_idle_notify_interval = 2 mins mail_max_userip_connections = 5 } protocol pop3 { mail_max_userip_connections = 5 pop3_logout_format = pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] During FTS reindexing, search commands unceremoniously exit
by Dave Abrahams 18 Dec '12

18 Dec '12

Is this intentional? Closing the connection without warning doesn't seem like the best response... --8<---------------cut here---------------start------------->8--- % printf "1 select \"INBOX\"\n2 search body quack\n3 logout\n" | /opt/local/libexec/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE SEARCH=FUZZY] Logged in as dave * FLAGS (\Answered \Flagged \Deleted \Seen \Draft gnus-forward gnus-expire) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft gnus-forward gnus-expire \*)] Flags permitted. * 31 EXISTS * 0 RECENT * OK [UIDVALIDITY 1349969399] UIDs valid * OK [UIDNEXT 1376] Predicted next UID * OK [HIGHESTMODSEQ 2908] Highest 1 OK [READ-WRITE] Select completed. imap(dave): Info: Connection closed in=45 out=2027404 % --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 1

[Dovecot] Documentation of Redis and Memcache Backends
by Urban Loesch 18 Dec '12

18 Dec '12

Hi, in the release notes of 2.1.9 I read that dovecot supports memcache and redis backends for userdb/passdb authentication. This is very interesting for me and should reduce queries and database load of our mysql servers. My idea is to use memcache or redis in our IMAP/POP3 proxies in front of our backend servers. So I would like to try out if it's possible to store proxy information of our backends. For example the backend ip adress. But in the wiki I found only a few configuration settings for redis backend. http://master.wiki2.dovecot.org/AuthDatabase/Dict Also the mentioned example config file "dovecot-dict-auth.conf.ext" with full list of configuration options does not exits in the source of 2.1.11. Have you any idea where I can find the full info or any howtos? Many thanks and regards Urban

2 1

[Dovecot] Error: unlink_directory(.../lucene-indexes) with doveadm index
by Fred Kilbourn 18 Dec '12

18 Dec '12

Hi, Per discussion on this previous thread: http://dovecot.org/pipermail/dovecot/2012-October/068849.html I am updating search indexes on all my mailboxes via a nightly cronjob that runs: doveadm index -A '*' The problem we're running into is that random mailboxes will throw the following error during the update (sanitized to conceal actual domain name): doveadm(user(a)domain.com): Error: unlink_directory(/var/spool/mail/domain.com/user/sdbox/lucene-indexes) failed: Permission denied We have around 250 domains on the server, with a handful of mailboxes on average in each domain. We get this for a varying number of total mailboxes (1 to 6 every night). It is common for the same mailbox to show up a few days in a row and then stop throwing the error. The script is running as root, so there shouldn't be any file level permissions. Any thoughts on the root cause of these errors? What can I provide to help further diagnose? Thanks, Fred Kilbourn

2 2

[Dovecot] indexer-worker Panic
by Dave Abrahams 18 Dec '12

18 Dec '12

I just found this in my logs. Any idea? --8<---------------cut here---------------start------------->8--- 12/4/12 12:33:43.831 PM dovecot[2660]: indexer-worker(dave): Panic: file mailbox-list-fs.c: line 156 (fs_list_get_path): assertion failed: (mailbox_list_is_valid_pattern(_list, name)) 12/4/12 12:33:43.831 PM dovecot[2660]: indexer-worker(dave): Error: Raw backtrace: 2 libdovecot.0.dylib 0x000000010840e6c4 default_fatal_finish + 36 -> 3 libdovecot.0.dylib 0x000000010840f3e1 i_internal_fatal_handler + 49 -> 4 libdovecot.0.dylib 0x000000010840e98e i_panic + 158 -> 5 libdovecot-storage.0.dylib 0x0000000108340693 fs_list_get_path + 467 -> 6 indexer-worker 0x00000001082e7341 master_connection_input + 513 -> 7 libdovecot.0.dylib 0x000000010841b5 12/4/12 12:33:43.831 PM dovecot[2660]: indexer-worker(dave): Error: ce io_loop_call_io + 46 -> 8 libdovecot.0.dylib 0x000000010841c737 io_loop_handler_run + 215 -> 9 libdovecot.0.dylib 0x000000010841b7e8 io_loop_run + 88 -> 10 libdovecot.0.dylib 0x00000001084079c8 master_service_run + 24 -> 11 indexer-worker 0x00000001082e7001 main + 321 -> 12 libdyld.dylib 0x00007fff93d117e1 start + 0 -> 13 ??? 0x0000000000000001 0x0 + 1 12/4/12 12:33:44.035 PM dovecot[2660]: indexer: Error: Indexer worker disconnected, discarding 5 requests for dave 12/4/12 12:33:44.036 PM dovecot[2660]: indexer-worker(dave): Fatal: master: service(indexer-worker): child 2665 killed with signal 6 (core dumps disabled) 12/4/12 12:34:17.094 PM dovecot[2660]: indexer-worker(dave): Panic: file mailbox-list-fs.c: line 156 (fs_list_get_path): assertion failed: (mailbox_list_is_valid_pattern(_list, name)) 12/4/12 12:34:17.094 PM dovecot[2660]: indexer-worker(dave): Error: Raw backtrace: 2 libdovecot.0.dylib 0x000000010d1dd6c4 default_fatal_finish + 36 -> 3 libdovecot.0.dylib 0x000000010d1de3e1 i_internal_fatal_handler + 49 -> 4 libdovecot.0.dylib 0x000000010d1dd98e i_panic + 158 -> 5 libdovecot-storage.0.dylib 0x000000010d10d693 fs_list_get_path + 467 -> 6 indexer-worker 0x000000010d0b7341 master_connection_input + 513 -> 7 libdovecot.0.dylib 0x000000010d1ea5 12/4/12 12:34:17.094 PM dovecot[2660]: indexer-worker(dave): Error: ce io_loop_call_io + 46 -> 8 libdovecot.0.dylib 0x000000010d1eb737 io_loop_handler_run + 215 -> 9 libdovecot.0.dylib 0x000000010d1ea7e8 io_loop_run + 88 -> 10 libdovecot.0.dylib 0x000000010d1d69c8 master_service_run + 24 -> 11 indexer-worker 0x000000010d0b7001 main + 321 -> 12 libdyld.dylib 0x00007fff93d117e1 start + 0 -> 13 ??? 0x0000000000000001 0x0 + 1 12/4/12 12:34:17.286 PM dovecot[2660]: indexer: Error: Indexer worker disconnected, discarding 5 requests for dave 12/4/12 12:34:17.286 PM dovecot[2660]: indexer-worker(dave): Fatal: master: service(indexer-worker): child 2677 killed with signal 6 (core dumps disabled) 12/4/12 12:35:48.633 PM dovecot[2660]: indexer-worker(dave): Panic: file mailbox-list-fs.c: line 156 (fs_list_get_path): assertion failed: (mailbox_list_is_valid_pattern(_list, name)) 12/4/12 12:35:48.633 PM dovecot[2660]: indexer-worker(dave): Error: Raw backtrace: 2 libdovecot.0.dylib 0x0000000107b606c4 default_fatal_finish + 36 -> 3 libdovecot.0.dylib 0x0000000107b613e1 i_internal_fatal_handler + 49 -> 4 libdovecot.0.dylib 0x0000000107b6098e i_panic + 158 -> 5 libdovecot-storage.0.dylib 0x0000000107a95693 fs_list_get_path + 467 -> 6 indexer-worker 0x0000000107a3d341 master_connection_input + 513 -> 7 libdovecot.0.dylib 0x0000000107b6d5 12/4/12 12:35:48.634 PM dovecot[2660]: indexer-worker(dave): Error: ce io_loop_call_io + 46 -> 8 libdovecot.0.dylib 0x0000000107b6e737 io_loop_handler_run + 215 -> 9 libdovecot.0.dylib 0x0000000107b6d7e8 io_loop_run + 88 -> 10 libdovecot.0.dylib 0x0000000107b599c8 master_service_run + 24 -> 11 indexer-worker 0x0000000107a3d001 main + 321 -> 12 libdyld.dylib 0x00007fff93d117e1 start + 0 -> 13 ??? 0x0000000000000001 0x0 + 1 12/4/12 12:35:48.838 PM dovecot[2660]: indexer: Error: Indexer worker disconnected, discarding 5 requests for dave 12/4/12 12:35:48.838 PM dovecot[2660]: indexer-worker(dave): Fatal: master: service(indexer-worker): child 2694 killed with signal 6 (core dumps disabled) --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 1

[Dovecot] Dovecot version 1.2.17
by Philip Coackley 17 Dec '12

17 Dec '12

Hello, I am currently performing retrospective upgrades to an old ubuntu 9.10 Karmic Kola server. I need to upgrade dovecot 1.1.11 to 1.2.17 then to 2.0 etc. I have downloaded the binaries and run ./configure make make install. Dovecot compiles OK however I can not get the ./configure options to install at the following locations: executable: /usr/sbin/ config: /etc/dovecot/ Question: What are the ./configure options to do this? What are the ./configure options used to create the executable for unbuntu? (especially 9.10 if different). Reason for upgrade is auth-login errors every 2-3 weeks with 1.1.11 - looking at the release descriptions, this should fix this and the memory leaks! Phil Coackley

2 1

[Dovecot] Possible bug not sure on which end
by joshua.trier＠hostrocket.com 17 Dec '12

17 Dec '12

Hello Serveral of our clients are running into a problem relating to Gmails change in their "Check mail from other accounts (using POP3):". It seems related to the response dovecot sends back on a connection. Gmail is checking for a +OK in the header, however dovecot is sending OK without a prefix of +. Here is the response from Gmail webmail "Missing +OK response upon connecting to the server: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready." Here is dovecot header on a pop3-ssl connection * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. Who's end is this problem on? Google's, dovecots? Anyway to enable the response to include a +? Thanks Josh

3 2

Re: [Dovecot] Non-dovecot user looking for feedback
by Joseph Tam 17 Dec '12

17 Dec '12

On Mon, 17 Dec 2012, Chris Ross wrote: > I've been using UW-IMAPd for neigh on forever (at least since 2001). > But, as it's basically stalled, and I'm about to update the hardware > that is my mail server, I thought it was time to review existing > open-source IMAP servers. Dovecot is the top three in my looking. I converted a few years ago and never looked back. > So, am I right that dovecot supports only the "one big full file" mbox > format, and the maildir format? And if so, is it known to allow > multiple simultaneous IMAP clients to access and monitor and/or modify > the same folder simultaneously? I still run using mbox, and have not had a problem with corruption, however, this is probably owing to our modest IMAP demand and careful coordination of file locks among all the different MUAs. You're better off with Maildir and other formats, that are better designed for simultaneous access. There are other good reasons to switch formats. Dovecot also supports its own mdbox/sdbox for high performance: its a hybrid that tries to incorporate the best of both words. More info http://wiki2.dovecot.org/MailboxFormat > After those questions, it's just a "what do you think the pros and cons > of each are?" I can't speak to the other software you are looking at, but two factors I found to be particularly good: - flexibility: you can get almost every oddball setup to work. Migration from uw-imapd is fairly easy, but then again, uw-imapd didn't have a lot of knobs to turn. Plugins are available that extends its functionality. - support: this mailing list is great, and Timo is an absolute wizard in getting bugs fixed. (Note: I am shamelessly buttering him up so that he fixes the outstanding bug I reported!) Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] more than one password_query
by goffer 15 Dec '12

15 Dec '12

Hello, I use dovecot + postfix with postfix sasl authentication by dovecot auth service. I have one question. Is it possible to have separate password_query only for auth service. I have two fields in database, one permits login to imap pop, second I want to use to permit login to smtp. Please explain how to set this (if it is possible) or give me some direction and sorry my English. -- View this message in context: http://dovecot.2317879.n4.nabble.com/more-than-one-password-query-tp39282.h… Sent from the Dovecot mailing list archive at Nabble.com.

1 1

[Dovecot] need help with dovecot-lda
by Andreas Meyer 15 Dec '12

15 Dec '12

Hello all! Some month ago I upgraded our dovecot installation from version 1.0.5 to version 2.1.7 without having any trouble. Postfix is delivering email directly per virtual transport to the maildirs and mailboxes of the users in /var/spool/vhosts/domains/.... Now I want to use dovecot-lda and created a new entry in the master.cf of postfix. dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/dovecot-lda -f ${sender} -d ${recipient} It is not clear to me, how the dovecot-lda is started bei dovecot and you it finds the socket dovecot postfix created. The dovecot.conf looks like this; # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.22.5-31-bigsmp i686 openSUSE 10.3 (i586) ext3 auth_verbose = yes disable_plaintext_auth = no log_path = /var/log/dovecot1 mail_location = mbox:/var/spool/vhosts/%d/dovecotprivate/%n:INBOX=/var/spool/vhosts/%d/%n !include /etc/dovecot/conf.d/*.conf passdb { args = /etc/dovecot/passwd driver = passwd-file } userdb { args = /etc/dovecot/passwd driver = passwd-file } ssl_cert = < /etc/dovecot/ssl/hostcert.pem ssl_key = < /etc/dovecot/ssl/hostkey.pem #verbose_ssl = yes plugin { quota = maildir:User quota quota_rule = *:storage=500MB # 10% of 1GB = 100MB quota_rule2 = Trash:storage=+10%% # 20% of 1GB = 200MB # quota_rule3 = Spam:storage=+20%% autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent } I set soft_bounce = yes in main.cf of postfix and delivery of mail fails with Dec 14 16:13:34 delta postfix/virtual[14082]: BBC0F1B31294: to=<xyz(a)anup.de>, relay=virtual, delay=395, delays=395/0.01/0/0.13, dsn=4.1.1, status=SOFTBOUNCE (unknown user: "xyz(a)anup.de") This is the relevant part of the main.cf: dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = anup.de bit-corner.de bitcorner.de baubetreuung-meyer.de saxelektro.de virtual_mailbox_base = /var/spool/vhosts #virtual_mailbox_maps = hash:/etc/postfix/vmailbox #virtual_minimum_uid = 100 #virtual_uid_maps = static:5000 #virtual_gid_maps = static:5000 virtual_mailbox_limit = 524288000 virtual_transport = dovecot I don't get it right. As far as I understand postfix uses virtual_transport = dovecot and hands the mail over to the socket dovecot. But how does dovecot know where to look for the socket. I am missing somthing but don't know what. Any help is appreciated! Andreas

3 27

[Dovecot] Dovecot "sleep" for short snapshots
by Peer Heinlein 15 Dec '12

15 Dec '12

Making consistent backups from Dovecot with mdbox requires a snapshoted filesystem with (at least) a short Downtime for Dovecot. I'd like to avoid killing several thenthousand IMAP-sessions for 60 seconds. Users don't like that... And the admin dislakes that too... What about a "short sleep" mechanism for Dovecot, where all writes are finished and new writes are easily delayed? I'd like to following process: *) "doveadm sleep" puts Dovecot in sleep-Mode: -- All existing writes are finished (before "doveadm sleep" is allowed to exit) -- All new writes are simply delayed -- All readonly-operations could work normally, so users can fetch and read mails *) The the admin can create a LVM-/SAN-snapshot of the filesystems *) "doveadm unsleep" will finish the magic Overall the whole process will take just some seconds. Users will recognize a simple write-delay, but they can work normally and the aren't unconnected at all. If the snapshot is really fast the users won't recognize the whole situation at all. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] BUG: mishandling of username if it's a keyword?
by Jack Bates 14 Dec '12

14 Dec '12

Dec 14 14:33:03 test2 dovecot: auth: Debug: auth client connected (pid=24143) Dec 14 14:33:14 test2 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011session=D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB#011lip=::1#011rip=::1#011lport=110#011rport=38004#011resp=<hidden> Dec 14 14:33:14 test2 dovecot: auth: Debug: static(home,::1,<D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB>): lookup Dec 14 14:33:14 test2 dovecot: auth: Debug: client passdb out: OK#0111#011user=home Dec 14 14:33:14 test2 dovecot: auth: Debug: master in: REQUEST#0112033451009#01124143#0111#011243997dcca92c2dc1d1e401c78b4ea4f Dec 14 14:33:14 test2 dovecot: auth: Debug: master userdb out: USER#0112033451009#011uid=503#011gid=503#011home=/nfs/maildir/vmail/home#011mail_location=maildir:~/Maildir Dec 14 14:33:14 test2 dovecot: pop3-login: Login: user=<home>, method=PLAIN, rip=::1, lip=::1, mpid=24145, secured, session=<D6dl6dDQdAAAAAAAAAAAAAAAAAAAAAAB> Dec 14 14:33:14 test2 dovecot: pop3: Debug: Added userdb setting: mail_location=maildir:~/Maildir Dec 14 14:33:14 test2 dovecot: pop3(uid=503): Error: user uid=503: Couldn't drop privileges: User is missing UID (see mail_uid setting) Dec 14 14:33:14 test2 dovecot: pop3(uid=503): Error: Internal error occurred. Refer to server log for more information. compared to: Dec 14 14:37:25 test2 dovecot: pop3-login: Login: user=<home2>, method=PLAIN, rip=::1, lip=::1, mpid=24190, secured, session=<5Zdb+NDQdQAAAAAAAAAAAAAAAAAAAAAB> Dec 14 14:37:25 test2 dovecot: pop3: Debug: Added userdb setting: mail_location=maildir:~/Maildir Dec 14 14:37:25 test2 dovecot: pop3(home2): Debug: Effective uid=503, gid=503, home=/nfs/maildir/vmail/home2 userdb { args = uid=vmail gid=vmail home=/nfs/maildir/vmail/%u mail_location=maildir:~/Maildir driver = static } This was tested on a static passdb/userdb on a test server as well as production. version 2.1.10. When I have time, I'll dig into it myself after an upgrade to 2.1.12. Jack

2 5

[Dovecot] can't connect to server
by Bernics Gábor | Penta Unió Zrt. 14 Dec '12

14 Dec '12

Hello, I can't connect to a dovecot server (Debian 6.0, default version of Dovecot), I started the daemon but I didn't see errors on console. dovecot-lda works. logs: 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Loading modules from directory: /usr/lib/dovecot/modules/lda 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Module loaded: /usr/lib/dovecot/modules/lda/lib10_quota_plugin.so 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so 2012-12-14 12:47:10 auth(default): Info: master in: USER<------>1<----->bernics.gabor(a)penta.hu<>service=deliver 2012-12-14 12:47:10 auth-worker(default): Info: sql(bernics.gabor(a)penta.hu): query: SELECT email AS user, password FROM users WHERE email 2012-12-14 12:47:10 auth(default): Info: password(bernics.gabor(a)penta.hu): Credentials: 54617661737a69737a656c 2012-12-14 12:47:10 auth(default): Info: master out: USER<----->1<----->bernics.gabor(a)penta.hu 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Quota root: name=user backend=dict args=:proxy::quotadict 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: dict quota: user=bernics.gabor(a)penta.hu, uri=proxy::quotadict, noenforcing=0 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: maildir: data=/home/vmail/mail/penta.hu/bernics.gabor(a)penta.hu/Maildir 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: maildir++: root=/home/vmail/mail/penta.hu/bernics.gabor(a)penta.hu/Maildir, inde 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: dict quota: user=bernics.gabor(a)penta.hu, uri=proxy::quotadict, noenforcing=0 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: user's script path /home/vmail/penta.hu/bernics.gabor(a)penta.hu/Maildir/ 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: using sieve path for user's script: /etc/dovecot/dovecot.sieve 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: executed before user's script(1): /etc/dovecot/dovecot.sieve.before 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: opening script /etc/dovecot/dovecot.sieve.before 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: opening script /etc/dovecot/dovecot.sieve 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: Namespace : Using permissions from /home/vmail/mail/penta.hu/bernics.gabor@pen 2012-12-14 12:47:10 deliver(bernics.gabor(a)penta.hu): Info: sieve: msgid=<20121214114708.5BD7917402D(a)mail2.penta.hu>: stored mail into mai config: http://pastebin.com/4imMFZSi Best Regards, Gabor

2 1

[Dovecot] Copying just the folders to new Dovecot server?
by Bjørn T Johansen 14 Dec '12

14 Dec '12

I am setting up a new Dovecot server and I want to start from scratch, i.e. with an empty mailbox. But I want to have the same folders in my new mailbox that I have in my old. Is there a way to create these folders without manually creating one by one? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 2

[Dovecot] Dovecote Warnings
by anarchos78 13 Dec '12

13 Dec '12

Greetings, I have setup Postfix/Dovecote on Ubuntu 12.04 (apt-get install mail-stack-delivery). While everything is working fine in the mail server I have niticed the following errors: srv dovecot: config: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:13: listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:13: protocol { listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:14: protocol { ssl_listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:14: ssl_listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:21: listen=..:port has been replaced by service { inet_listener { port } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:21: protocol { listen } has been replaced by service { inet_listener { address } }: 2 Time(s) srv dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/01-mail-stack-delivery.conf:22: protocol { ssl_listen } has been replaced by service { inet_listener { address } }: 2 Time(s) *The "01-mail-stack-delivery.conf" file looks like this:* # Some general options protocols = imap pop3 sieve disable_plaintext_auth = yes ssl = yes ssl_cert = </etc/ssl/certs/ssl-mail.pem ssl_key = </etc/ssl/private/ssl-mail.key ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM mail_location = maildir:~/Maildir auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # IMAP configuration protocol imap { listen = *:143 ssl_listen = *:993 mail_max_userip_connections = 10 imap_client_workarounds = delay-newmail } # POP3 configuration protocol pop3 { listen = *:110 ssl_listen = *:995 mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } # LDA configuration protocol lda { postmaster_address = postmaster mail_plugins = sieve quota_full_tempfail = yes deliver_log_format = msgid=%m: %$ rejection_reason = Your message to <%t> was automatically rejected:%n%r } # Plugins configuration plugin { sieve=~/.dovecot.sieve sieve_dir=~/sieve } # Authentication configuration auth_mechanisms = plain login service auth { # Postfix smtp-auth unix_listener /var/spool/postfix/private/dovecot-auth { mode = 0660 user = postfix group = postfix } } What is going wrong with Dovecote. I am a newcomer and i need little help. Many thanks, Tom Greece -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecote-Warnings-tp39221.html Sent from the Dovecot mailing list archive at Nabble.com.

2 3

[Dovecot] More detail re dovecot-uidlist and -uidvalidity files
by Dale Gallagher 13 Dec '12

13 Dec '12

Regarding the dovecot-uidlist header (first line) - I've tried to search for and figure out what exactly is meant by the "mailbox global uid" and once I do, how to manually generate the 128 bit hex variation of it? Could someone elaborate on this, please. How would omitting the global uid field, beginning with G, affect remote clients' syncing of mail? Is this field mandatory? Would "3 V$uid_validity N$next_uid" be sufficient to ensure that clients don't re-download everything? I also see that Dovecot's dovecot-uidvalidity is of the form 4df8a4e2, whereas the IMAP syncing utility which I'm using (isync) uses an integer. I'd appreciate it if someone could elaborate on what Dovecot uses and whether I need to convert one to the other (ie. after syncing with isync, do I need to convert it to work with Dovecot? Thanks.

2 1

Re: [Dovecot] number of imap connection
by Joseph Tam 13 Dec '12

13 Dec '12

<klimenko.n(a)theitidea.ru> writes: > how to calculate the expected number of imap processes? Set your mail_max_userip_connections to a large value (~20) and run "doveadm who" periodically to look at your user's actual connection counts. > how many imap processes must be used for each user? > i have 6-7 connection for each one user > is it normal behavior? It's typical. Some popular mail readers open about 5, some more, some less. I set my mail_max_userip_connections at 12 even though there are some users who regularly bump up against this. They don't seem to notice -- dovecot probably bumps off the least recently used connection and their mail reader reconnects if it needs to open that mailbox again. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] number of imap connection
by Николай Клименко 13 Dec '12

13 Dec '12

Hi to all. how to calculate the expected number of imap processes? how many imap processes must be used for each user? i have 6-7 connection for each one user is it normal behavior? thx.

3 2

[Dovecot] rare ssl issue
by Eduardo Casarero 12 Dec '12

12 Dec '12

I'am having a rare situation with ssl connections. I can connect to 993/995 but the connection never starts. >From the client side i test with: $ openssl s_client -connect example.com:993 CONNECTED(00000003) and stays like that... waiting. In the other side i see in dovecot logs: Disconnected: Inactivity (no auth attempts): rip=x.x.x.x, lip=x.x.x.x, TLS handshaking this happens from some networks only, so i think that mi isp (where the server is hosted) is doing some kind of shaping. But if i try to connect to port 465 for example, or 443 it works like a charm. i am talking to my isp, but i thougth that someone may have a hint or any comment that could help. regards, eduardo.

1 0

[Dovecot] [vnd.dovecot.pipe] - timeout settings
by kjonca＠o2.pl 11 Dec '12

11 Dec '12

In install file we can read that: sieve_<extension>_exec_timeout = 10s set timeout for executing program. But regardless of setting this value (say sieve_pipe_exec_timeout=86000) I got: --8<---------------cut here---------------start------------->8--- 2012-12-10 20:55:33 LDA(kjonca): Debug: sieve: action pipe: running program: maildrop.sh 2012-12-10 20:55:43 LDA(kjonca): Debug: program `/home/kjonca/sieve/bin/maildrop.sh' execution timed out: sending TERM signal --8<---------------cut here---------------end--------------->8--- What am I doing wrong? KJ -- http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… When does summertime come to Minnesota, you ask? Well, last year, I think it was a Tuesday.

2 1

[Dovecot] dovcot+offlineimap+gmail: INBOX empty, mail doubled
by Uwe Brauer 11 Dec '12

11 Dec '12

Hello I have used for years offlineimap-6.2.0 dovecot-imapd 1:1.2.9 in Kubuntu 10.04 Together with a imap server of my university. Yesterday we switched to google, which I know, is not a real imap server. I have 2 problems and the first I think has to do with either an old version of offlineimap or a bad configuration file: - All folders are downloaded+ Gmail[All Mail] so doubling my mail. - My INBOX folder is empty, however this is the only folder for which offlinemap gives the following warning: Syncing INBOX: Gmail -> MappedIMAP WARNING: UID validity problem for folder INBOX (repo UniLocal) (saved 1309334376; got 1355232397); skipping it So maybe this is also a offlineimap fault. In any case I have googled around and found out that I am not the only person suffering this problem. I have attached my configuration file in the hope that may be somebody could give me a hint. Thanks in advance Uwe Brauer --8<------------------------schnipp------------------------->8--- [general] accounts = Uni ui = Noninteractive.Basic maxsyncaccounts = 1 [Account Uni] localrepository = UniLocal remoterepository = UniRemote [Repository UniLocal] type = IMAP ssl = no remotehost = localhost remoteuser = myuser remotepass = mypasswd maxconnections = 2 [Repository UniRemote] type = Gmail # ssl =no ssl =yes #remotehost = ucimap.ucm.es remotehost = imap.gmail.com remoteuser = myuser remotepass = mypasswd # nametrans = lambda foldername: re.sub ('^\[gmail\]', 'bak', # re.sub ('sent_mail', 'sent', # re.sub ('starred', 'flagged', # re.sub (' ', '_', foldername.lower())))) folderfilter = lambda foldername: foldername in ['INBOX'] idlefolders = ['INBOX'] folderfilter = lambda foldername: foldername not in '[Gmail]/All Mail' sslcacertfile = /etc/ssl/certs/ca-certificates.crt maxconnections = 1 realdelete = yes # Don't sync shared folders # folderfilter = lambda foldername: not re.search('Shared Folders', foldername) # automatic stuff maxsyncaccounts = 1 quick = 10 autorefresh = 5 keepalive = 60 holdconnectionopen = yes # This will suppress anything but errors ui = quiet --8<------------------------schnapp------------------------->8--- --8<------------------------schnipp------------------------->8--- version_ignore=yes first_valid_uid = 1 log_path = /var/log/dovecot.log ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem # mail_location = maildir:/var/spool/mail/%u # not sure about the following mail_location = maildir:/var/spool/mail/%u:INBOX=/var/spool/mail/%u maildir_copy_with_hardlinks = yes protocol imap { listen = 127.0.0.1:143 ssl_listen = 127.0.0.1:943 } auth default { mechanisms = plain # defines users/passwords passdb passwd-file { args = /etc/dovecot/passwd } userdb static { args = uid=mail gid=mail home=/var/spool/mail/%u } } --8<------------------------schnapp------------------------->8---

1 0

Re: [Dovecot] Automatically Cleaning Kerberos Credential Cache Files
by Maura Dailey 11 Dec '12

11 Dec '12

On 12/10/2012 05:31 PM, Ben Morrow wrote: > At 3PM -0500 on 10/12/12 you (Maura Dailey) wrote: >> I'm in a situation here at work where I'm trying to support a mixed >> network of OS X and RHEL desktop machines with a Postfix/Dovecot >> combination. >> - user account information is stored in LDAP >> - user credentials are in MIT Kerberos >> - server is running RHEL 6/Dovecot 2.0.9/Postfix 2.6.6 >> >> I am currently using the PAM passdb module to authenticate my users (I >> began to have trouble with using GSSAPI directly). After I implemented >> it, a few weeks later, I noticed that some users were no longer getting >> their mail if they hadn't logged in during the past day. Postfix's mailq >> showed that hundreds of messages were backing up in the queue. I >> eventually tracked it down to leftover Kerberos credential cache files >> (/tmp/krb5cc_????) sitting in /tmp on the mail server. The presence of >> expired credential files was preventing Postfix from delivering mail to >> those users' mail spools. If I delete the credential files manually, >> Postfix immediately delivers the queued emails. > This is rather odd. Is krb5-authenticated NFS involved here, or does > Postfix's delivery make any other use of Kerberos? The only other thing > I can think of is that so many expired ccaches are accumulating that the > user goes over their inode quota. Each user has one credential cache file in /tmp on the mail server after logging into Dovecot. We aren't using randomized names, so everything is in the standard format /tmp/krb5cc_uid. We do use KRB5 authenticated (and encrypted) NFS, but we don't deliver mail to home directories. Since all users are "real" users, and our office size is small, everyone has a mail spool directory on the mail server. Postfix is configured to use Dovecot for Kerberos. The relevant lines in its /etc/postfix/main.cf are as follows: smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject smtpd_sasl_security_options = noanonymous >> Currently, I have a cron job deleting the files manually every night. >> Obviously, this is a cruddy solution. > Well, I don't know about that: obviously, it would be a good idea to > work out what's going on here, in case it causes anything else to go > wrong, but a cronjob clearing out /tmp is a good idea in any case. Fair enough. And of course, I get a cache file every time I use sudo or log in through a GUI. Those aren't cleaned up either! Maybe I should be deleting credential cache files on all the machines every night. Those cache files have never given me a problem, though. >> I have Dovecot configured on a >> RHEL 6 box. The Pam stack on a RHEL 6 machine uses sssd (pam_sss.so) for >> authentication with Kerberos, not pam_krb5.so. I'm trying to track down >> which piece of the puzzle is responsible for cleaning up leftover >> credential caches. Is there a configuration option I can pass to >> Dovecot's passdb directly to clean up these cache files? > There are two relevant Dovecot settings: passing setcred=yes to the pam > passdb will make Dovecot call pam_setcred, and passing session=yes will > make it open and immediately close a PAM session. (Probably it ought to > wait until the IMAP user logs out to close the session, but currently it > can't do that because of the way the passdb lookups are done.) Changing > either of these may have an effect, depending on when exactly your PAM > module creates and destroys ccaches. I've tried session=yes by itself, but I don't think I've tried it with setcred=yes. I'll throw it in there and give it a try after I send this email. >> Do others >> generally have more success using a custom PAM stack with pam_krb5.so >> instead of pam_sss.so? > Well, I don't use RH (I use FreeBSD), but I use and would recommend Russ > Allbery's pam_krb5.so, which may or may not be the same as the normal > pam_krb5.so provided by your system. It has options to control whether > and where ccaches are created; assuming Dovecot doesn't need krb5 creds > (say, for NFS), you would probably be better off telling it not to > create a permanent ccache at all. > > http://www.eyrie.org/~eagle/software/pam-krb5/ I haven't had to configure pam_krb5.so directly before (we use the Red Hat/Fedora configured default, pam_sss.so, which claims to be a one stop shop for LDAP/Kerberos/NIS,etc.), but it does seem to have more options. We certainly don't need credential caches to stick around for email users. All the mail spools are stored on locally mounted storage on the mail server. >> Poring over sssd's configuration options didn't >> reveal anything useful. I'm still not sure why Postfix even cares if >> there are expired credential cache files in /tmp at all. >> >> I'm back to trying GSSAPI directly again as well in the meantime on a >> few test clients. When I used that in the past, users were getting >> issued duplicate Kerberos tickets and users were forced to log into the >> mail server directly using SSH after a day in order to get their mail to >> work (seemingly a related issue). If I get those same errors again, I'll >> start another thread. > This certainly does all sound related. What are the ccache files called: > are they just /tmp/krb5cc_UID or is there a random portion as well? Are > they being created with the correct permissions, and are there any > security policies (SELinux or ACLs of some kind) set up which might > interfere with their creation or destruction? No random portion (the only application we have configured with random ccache names is SSH), just the usual /tmp/krb5cc_uid. Permissions appear correct, they belong to the appropriate user and group accounts. The SELinux permissions are set to: system_u:object_r:user_tmp_t:s0. This is different from the machine's credential cache (system_u:object_r:gssd_tmp_t:s0), but I've disabled and re-enabled SELinux during different parts of my testing and didn't notice any errors. Using GSSAPI directly doesn't create any cached credential files on the server. However, I just verified that I'm still sporadically getting the duplicate tickets (two lines for imap/hostname.server.com(a)SERVER.COM, with identical expiration dates). It comes and goes. I have a few users testing it for me, and they'll let me know if their logins break tomorrow like they have in the past once the normal log in period elapses. Since the "fix" for that problem is to log into the mail server, I have a hard time testing for the problem myself (being logged into the mail server nearly continuously just now). > What happens if you log in as an ordinary user (preferably using the > same PAM stack as Dovecot uses), use klist to find the ccache name and > 'ls -i' to find its inode number, then manually kinit again? Does the > kinit succeed, and does the new ccache have a different inode number > from before? Does the ccache file get removed when you log out? I've noticed that the ccache files for regular users do not get deleted when they log out. On another user's workstation, I found a ccache file for my account from a week ago (my current session was using a randomly generated SSH ccache file). I ran a command with sudo to force it to reauthenticate with pam_sss, and the timestamp on the ccache file was updated and the inode changed. My best guess is that pam_sss.so just doesn't do ccache cleanup. > Ben > Thanks for taking a look, I appreciate all the suggestions. This problem's been driving me up a wall for weeks now. I only just managed to narrow down the cause in the last few days. If I can't get a fix working in Dovecot, I'll try tackling it from a different perspective. I understand why Dovecot might not be cleaning up credential files (especially if it's just calling PAM normally), but I definitely do not understand why Postfix is behaving the way it does. If I can just get GSSAPI to work, I could probably bypass the problem as well. - Maura Dailey maura(a)eclipse.ncsc.mil

2 2

[Dovecot] Switch from MySQL/CourierMail to MySQL/Dovecot
by Robert Moskowitz 11 Dec '12

11 Dec '12

Hello, new here. I am a Centos/Fedora user, and for the past 3 years have been running my mail server using Postfix/MySQL/CourierMail/Squirrelmail on Fedora. The current incantation of the tutorial is at: http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-my… Well it is time to rebuild my mailserver; this time on Centos 6.3. My goal is to use supplied rpms, not to build my own (and rebuild everytime there is an important update). So I am pulling quotas which has been a pain anyway, and I am investigating using Dovecot in place of CourierMail. In Centos 6.3, the version of Dovecot is: 2.0.9-2 I am looking for a tutorial to assist in the setup, as I am nowhere an expert on any of this (I am a communications security expert in the IETF and IEEE 802). There are a couple items that I have come to depend on in my current setup that are musts in anything new: Virtual user/domain That is, not only virtual domains, but also users defined by domain. So in the MySQL user table, the email value is set to user@domain. Thus a user can receive/send mail from multiple domains with the same addr and only those domains defined for the user in the user table. Obviously there is no coupling of Linux user accounts and email accounts. CourierMail is storing mail under /home/vmail/domain/user/... Encrypted passwords The passwords in the user table in MySQL are encrypted. This will be used to auth the user for POPing or IMAPing and sending their mail. I have encountered a few tutorials where it seems like passwords are stored in the clear? Anyway, not much else! Well as far as the user interface is concerned. Postfix with clamav and spamassassin and maybe one or two extras. And SquirrelMail for Webmail. A better gui than phpMyAdmin for maintaining the tables would be nice, but I don't have a lot of users, so it works well enough. Can someone point me to a tutorial best suited to my needs? Also any firewall rules, as I don't want to turn off iptables (and ip6tables) and any SELinux policy rules to add. Oh, and IPv6 will be a must in the near future, so anything needed to ensure IPv6 working right as well. Thanks

2 3

[Dovecot] Automatically Cleaning Kerberos Credential Cache Files
by Maura Dailey 10 Dec '12

10 Dec '12

I'm in a situation here at work where I'm trying to support a mixed network of OS X and RHEL desktop machines with a Postfix/Dovecot combination. - user account information is stored in LDAP - user credentials are in MIT Kerberos - server is running RHEL 6/Dovecot 2.0.9/Postfix 2.6.6 I am currently using the PAM passdb module to authenticate my users (I began to have trouble with using GSSAPI directly). After I implemented it, a few weeks later, I noticed that some users were no longer getting their mail if they hadn't logged in during the past day. Postfix's mailq showed that hundreds of messages were backing up in the queue. I eventually tracked it down to leftover Kerberos credential cache files (/tmp/krb5cc_????) sitting in /tmp on the mail server. The presence of expired credential files was preventing Postfix from delivering mail to those users' mail spools. If I delete the credential files manually, Postfix immediately delivers the queued emails. Currently, I have a cron job deleting the files manually every night. Obviously, this is a cruddy solution. I have Dovecot configured on a RHEL 6 box. The Pam stack on a RHEL 6 machine uses sssd (pam_sss.so) for authentication with Kerberos, not pam_krb5.so. I'm trying to track down which piece of the puzzle is responsible for cleaning up leftover credential caches. Is there a configuration option I can pass to Dovecot's passdb directly to clean up these cache files? Do others generally have more success using a custom PAM stack with pam_krb5.so instead of pam_sss.so? Poring over sssd's configuration options didn't reveal anything useful. I'm still not sure why Postfix even cares if there are expired credential cache files in /tmp at all. I'm back to trying GSSAPI directly again as well in the meantime on a few test clients. When I used that in the past, users were getting issued duplicate Kerberos tickets and users were forced to log into the mail server directly using SSH after a day in order to get their mail to work (seemingly a related issue). If I get those same errors again, I'll start another thread. The output of doveconf -N: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.3 (Santiago) ext4 auth_cache_size = 10 k auth_cache_ttl = 5 hours auth_default_realm = server.com auth_gssapi_hostname = hostname.server.com auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = gssapi plain auth_realms = server.com auth_username_format = %n auth_verbose = no disable_plaintext_auth = yes listen = * mail_location = maildir:/var/spool/mail/%u mail_privileged_group = mail mbox_read_locks = fcntl mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = yes ssl_cert = </usr/share/ssl/private/mail.server.com.pem ssl_key = </usr/share/ssl/private/mail.server.com.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = " listescape" } Thanks for any pointers, Maura Dailey maura(a)eclipse.ncsc.mil

2 1

[Dovecot] dsync help?
by Torbjorn Astlind 10 Dec '12

10 Dec '12

Hi all, I have dovecot serving aprox 200 users through mbox, but the time has come to migrate to a new server, and to use Maildir. Using rsync from the old server I get all user data, i.e /home/*, and inboxes i.e /var/mail/* to a new server. This has worked well for some time as backup. The dsync should convert everything to Maildir, and it does... to an extent. (linebrakes for easy viewing) What I see, is that often, the /home/mail/xxx is NOT resulting in /home/xxx/Maildir/cur All mailboxes from /home/xxx, are properly converted to /home/xxx/Maildir/.name_of_ box Am I misunderstanding something? I get it to work sometimes if I delete the ~/Maildir completely before doing the dsync. All, and any help most welcome, Torbjörn for i in `cat /home2/torbjorn/SCRIPTS/userlist.txt`; do dsync -D -v -f -u $i -c /etc/dovecot/alt_config/10-mail.MBOX.conf backup maildir:~/Maildir; done > /home2/torbjorn/SCRIPTS/mb2mdRES.txt 2>&1 the -c 10.mail.MBOX.conf contains, the parts I think are relevant for the dsync operation: mail_location = mbox:~/home:INBOX=/home/mail/%u namespace { type = private separator = '/' inbox = yes } dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/home:INBOX=/home/mail/torbjorn dsync(root): Debug: fs: root=/home/torbjorn/home, index=, control=, inbox=/home/mail/torbjorn, alt= dsync(root): Debug: Effective uid=501, gid=501, home=/home/torbjorn dsync(root): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir dsync(root): Debug: maildir++: root=/home/torbjorn/Maildir, index=, control=, inbox=/home/torbjorn/Maildir, alt= dsync(root): Debug: Namespace : /home/torbjorn/Maildir doesn't exist yet, using default permissions dsync(root): Debug: Namespace : Using permissions from /home/torbjorn/Maildir: mode=0700 gid=-1 dsync(torbjorn): Debug: Namespace : Using permissions from /home/torbjorn/home: mode=0700 gid=-1

1 0

[Dovecot] IMAP instead of Maildir on Ubuntu Precise
by Thufir 10 Dec '12

10 Dec '12

Why is dovecot using Maildir and not IMAP. Or is it using even using Maildir at all? Currently I'm using mailman, postfix and dovecot to manage a mailing list. Mail is sent to thufir(a)dur.bounceme.net which the "mail server delivery agent stack provided by Ubuntu server team" of dovecot-postfix handles fine, keeping it locally, so far as it goes. The mail ends up in /home/thufir/Maildir, which the balsa mail client reads fine, as it handles Maildir fine. However, I would like to use dovecot-imapd which is installed. However, it's not clear quite how to switch over to IMAP. I see: root@dur:~# root@dur:~# nl /usr/share/dovecot/protocols.d/imapd.protocol 1 protocols = $protocols imap root@dur:~# root@dur:~# grep protocol /etc/dovecot/dovecot.conf # Enable installed protocols !include_try /usr/share/dovecot/protocols.d/*.protocol root@dur:~# which indicates to me that IMAP is configured. So, why is mail showing up using Maildir? I'm looking at: "Once you have chosen, amend the following line in the file /etc/dovecot/dovecot.conf: protocols = pop3 pop3s imap imaps" https://help.ubuntu.com/community/Dovecot Admittedly, I've not looked too closely into Dovecot man pages as I don't want to get too deep into the weeds on that if it's not even Dovecot I need to configure. I'm assuming that it's dovecot which is using Maildir: root@dur:/etc/postfix# root@dur:/etc/postfix# grep dovecot main.cf smtpd_sasl_type = dovecot smtpd_sasl_path = private/dovecot-auth mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}" root@dur:/etc/postfix# Can I force dovecot to only ever use IMAP and never use anything else? Is it maybe postfix which is using Maildir, and this is why my mail shows up as Maildir type mail? thanks, Thufir thufir@dur:~$ thufir@dur:~$ head .balsa/config -n 20 [mailbox-Inbox] Path=/var/mail/thufir Type=LibBalsaMailboxMbox Name=Inbox [mailbox-Outbox] Path=/home/thufir/Maildir/outbox Type=LibBalsaMailboxMbox Name=Outbox [mailbox-Sentbox] Path=/home/thufir/Maildir/sentbox Type=LibBalsaMailboxMbox Name=Sentbox [mailbox-Draftbox] Path=/home/thufir/Maildir/draftbox Type=LibBalsaMailboxMbox Name=Draftbox thufir@dur:~$

3 5

[Dovecot] Copying mailbox from one mailserver to another?
by Bjørn T Johansen 10 Dec '12

10 Dec '12

I see there is a tool called dsync that can do this but what are the cons of using dsync compared to just package the mailbox using tar and then untar the mailbox on the new server? Regards, BTJ -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[Dovecot] Performance problems while running doveadm purge
by Jost Krieger 08 Dec '12

08 Dec '12

I have a rather large and active mdbox (28 GB, 3M mess, 1200 deliveries/day). I usually have no problems working with those mails, and there is some batch processing going on (via doveadm). Every few weeks I try my luck running doveadm purge, and this a) crunches about 5GB (to be expected), b) takes rather long (ok), c) leads to long stretches of blocked mdbox, which is the problem. I always turn off the batch processing, but deliveries take so long that they sometimes give up after timeout (they will come back later), and the IMAP clients get blocked for long minutes. Sometimes even the purge run aborts because of 3-minute-timeouts. What could be going on here (2.1.10)? Jost -- | Jost.Krieger+sig(a)ruhr-uni-bochum.de Please help stamp out spam! | | Postmaster, JAPH, resident answer machine at RUB Comp. Center | | Sincere words are not sweet, sweet words are not sincere. | | Lao Tse, Tao Te King 81 |

3 2

[Dovecot] Dovecot director doveadm with switch "-A" error
by Ramon Frontera 08 Dec '12

08 Dec '12

Hi, we have a problem with our director proxy configuration. When we run on proxy server the doveadm command with -A switch, fails with the error: # doveadm -D quota get -A doveadm(user1): Debug: auth input: user=user1 proxy starttls=any-cert doveadm(user1): Error: Proxy is missing destination host doveadm: Error: Failed to iterate through some users If we execute the command with a single user, director assigns host and goes well, Example: # doveadm -D quota get -u user1 doveadm(user1): Debug: auth input: user=user1 proxy starttls=any-cert host=xx.xx.xx.xx proxy_refresh=450 Quota name Type Value Limit % User quota STORAGE 159401 2621440 6 User quota MESSAGE 341 - 0 We have tried different configurations and all goes wrong with this "-A" switch, Timo please, could you tell us if we have a missconfiguration or its a possible director bug ?? We really want execute the expire plugin on ours directors and them redirect to the backends servers of every user. thanks in advance. Our doveconf -n: # dovecot -n # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_cache_size = 3 k auth_cache_ttl = 15 mins auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ default_client_limit = 30000 default_process_limit = 5000 dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } director_doveadm_port = 990 director_mail_servers = mailserver1 mailserver2 director_servers = proxy1 doveadm_proxy_port = 24245 lmtp_proxy = yes mail_debug = yes mail_plugins = expire quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap } plugin { expire = Trash expire2 = Trash/* expire_dict = proxy::expire } postmaster_address = postmaster<at>company protocols = imap pop3 lmtp sieve service auth { client_limit = 27048 unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = dovecot mode = 0660 } } service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0660 } unix_listener login/director { mode = 0666 } } service doveadm { executable = doveadm-server director inet_listener doveadm-server { port = 24245 } } service imap-login { executable = imap-login director inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service ipc { unix_listener ipc { user = dovecot } } service lmtp { client_limit = 1 inet_listener lmtp { port = 30025 } } service managesieve-login { executable = managesieve-login director } service pop3-login { executable = pop3-login director inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/pki/tls/certs/imap.crt ssl_key = </etc/pki/tls/private/imap.uib.es_privatekey.pem syslog_facility = local1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap-users.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { auth_socket_path = director-userdb mail_plugins = expire quota sieve quota passdb { args = /etc/dovecot/dovecot-ldap-pass.conf.lmtp driver = ldap } } protocol doveadm { auth_socket_path = director-userdb } protocol imap { mail_max_userip_connections = 20 mail_plugins = expire quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } local ip/24/24 { doveadm_password = supersecretpassword } -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

2 9

[Dovecot] Dovecot G+ community
by Patrick Ben Koetter 07 Dec '12

07 Dec '12

For those who own a G+ account and don't mind seeing colors in a browser once in a while instead of staring at a black/white terminal all day long, join the Dovecot G+ community <https://plus.google.com/communities/112967413753095884716> p@rick -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

1 0

Re: [Dovecot] imap-login - where does the user get filled in from?
by Ben Morrow 07 Dec '12

07 Dec '12

At 3PM -0800 on 6/12/12 Jeff Lacki wrote: > Ben Morrow <ben(a)morrow.me.uk> wrote: > > > > imap-login: Disconnected (no auth attempts in 60 secs): user=<>, > > > rip=192.168.1.1, lip=192.168.1.22, TLS handshaking: Disconnected > > > > Just to be sure: you have replaced the self-signed certificate Dovecot > > installs with one which is signed by a public CA? > > I created my own self-signed certificate with mkcert.sh that comes with > dovecot. Changed my hostname to mail.myhostname.com and the other > stuff, installed etc. An iPhone won't accept a self-signed certificate unless you install it in the system trusted certificate list. I don't know how you do that, or even if it's possible... Ben

3 3

[Dovecot] Cannot STORE \Seen flag on some mails
by Frerich Raabe 07 Dec '12

07 Dec '12

Hi, I'm running Dovecot 1.2.17 on FreeBSD (exact output of 'dovecot -n' is atttached to this mail). The machine is serving a public mailinglist archive which is read-only; all mail arriving for the archive is marked as \Seen using Sieve script. This setup works well most of the time, but I noticed that for *some* mails, the \Seen flag doesn't seem to be stored. Right now I have 31255 mails in one of my folders and I can't seem to mark five of them as \Seen - the others work just fine. I first suspected a client issue so I did a little IMAP session by hand: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. . LOGIN "xxxxxx" "yyyyyy" . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk] Logged in . SELECT "Lists/Archive/squish" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $NotJunk) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 31250 EXISTS * 0 RECENT * OK [UNSEEN 27126] First unseen. * OK [UIDVALIDITY 1350573750] UIDs valid * OK [UIDNEXT 31265] Predicted next UID * OK [HIGHESTMODSEQ 9512] Highest . OK [READ-ONLY] Select completed. . SEARCH UNSEEN * SEARCH 27126 27127 28484 29835 29838 . OK Search completed (0.000 secs). . STORE 27126 FLAGS \SEEN . OK Store completed. . SEARCH UNSEEN * SEARCH 27126 27127 28484 29835 29838 . OK Search completed (0.000 secs). . LOGOUT * BYE Logging out . OK Logout completed. Note how the first 'SEARCH UNSEEN' command shows that '27126' is unseen, the subsequent 'STORE' command succeeds - but then 'SEARCH UNSEEN' still shows 27126 as unseen! I have all four logging levels being piped to /var/log/maillog (I verified this by running dovecot --log-error) but the file does not show any problems. I checked the file permissions of the Maildir directories, and it all looks dandy to me. Does anybody have some suggestions how to debug this further, or what the reason for this may be? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

2 4

[Dovecot] dsync: error with hierarchy separator
by Jakub Jedelsky 07 Dec '12

07 Dec '12

Hi list! I have a problem with transfering mails from mbox to maildir format. On dovecot wiki I found a dsync tool, which looks good, but returns me an error: # dsync -u mail(a)example.com mirror mbox:~/mail:INBOX=/var/mail/virtuser_808 dsync(root): Fatal: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace) I found a solution with namespaces, but it doesn't work for me, there is still same error - I tried to add "-o separator=/" as option or add it to config file as mentioned there [1]. Can you push me to any solution? My dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.5.2.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login digest-md5 cram-md5 disable_plaintext_auth = no mail_location = maildir:~/.maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = scheme=CRYPT username_format=%Lu /etc/dovecot/dovecot.passwd driver = passwd-file } plugin { autocreate = Spam autosubscribe = Spam sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%Lu /etc/dovecot/dovecot.passwd driver = passwd-file } protocol imap { mail_plugins = autocreate } [1] http://www.dovecot.org/list/dovecot/2010-September/053186.html Thanks a lot. -jj

1 1

[Dovecot] imap-login - where does the user get filled in from?
by jeep＠rahul.net 06 Dec '12

06 Dec '12

Sorry to ask such a basic question, but I finally got some major hurdles working for imaps on port 993 and Im getting the following when I try to connect from my iphone: imap-login: Disconnected (no auth attempts in 60 secs): user=<>, rip=192.168.1.1, lip=192.168.1.22, TLS handshaking: Disconnected Im using SQL and SSL over 993. I cant seem to find where my user comes from that its blank? Your help is appreciated. Thanks /mf/home/jeep/shell/.signature

3 5

[Dovecot] Message Flag definitions
by Chris Dutton 06 Dec '12

06 Dec '12

Hello, I am in charge of migrating our mail system from dovecot to another server, and I am having to write a script to do this as tools like imapsync are too slow. What I am trying to find is the definitions of the flags that dovecot adds to the Maildir file name it uses for the IMAP messages. For example what the a and b mean in the following: 1176236036.P7260Q1438.sucia:2,RSab I am looking for all definitions not just a and b. Thanks Chris chris(a)rosepointnav.com

2 1

[Dovecot] How can I force FTS reindexing?
by Dave Abrahams 06 Dec '12

06 Dec '12

I threw out my lucene-indexes folder because it seemed to be missing something, and I figured it would get regenerated. Unfortunately, dovecot is only FTS-indexing new mails that come in. Is there a way to get it to reindex everything? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

1 1

Re: [Dovecot] dovecot Digest, Vol 116, Issue 11
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 5, 2012 2:07:14 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 1AM -0800 on 5/12/12 Erik A Johnson wrote: >> FYI, the tcpdump I sent previously was with one of our >> previously-discussed patches in place: >> >> if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { >> >> I'm attaching that dump again (as >> tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without >> any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in >> case there is any difference. > > Well, they're certainly different. Are you sure the second trace > (withoutpatches) was of a session which went into an infinite loop? > The only thing peculiar about that trace is that the server closes the > connection after receiving the first packet from the client, but it does > so perfectly properly: it ACKs the client's data packet, and does the > FIN-FIN/ACK exchance properly. You will notice there are no [R] packets, > which indicate something odd is happening at the server end. I'm pretty sure, but I've run it again, confirmed that the imap-login process is using 100% of a CPU until I kill it, and have attached the tcpdump. Looks like one packet from SERVER to CLIENT shifted slightly in chronology, but otherwise the same. >>> #ifdef SO_ISDEFUNCT >>> + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, >>> + (void *)&err, sizeof(err)) == 0 && err) { >>> + errstr = t_strdup_printf( >>> + "%s: socket is defunct", func_name); >>> + break; >>> + } >>> +#endif >> >> Nope, SO_ISDEFUNCT isn't defined. > > Oh, sorry, that needs > > #include <sys/socket.h> > > at the top. If that doesn't work, then which version of the OS are you > building for? AFAICT the DEFUNCT socket flag has been present since at > least 10.5, but the SO_ISDEFUNCT option was only introduced in 10.7. > This is irritating, actually: it means that to properly fix this on all > versions of Mac OS Dovecot would need to include the previous ENOTCONN > code #ifndef SO_ISDEFUNCT. I've got both 10.7 and 10.8 SDKs in Xcode and neither have SO_ISDEFUNCT defined in sys/socket.h (or anywhere else in the usr/include directories) -- there's a SS_DEFUNCT mask defined in sys/socketvar.h -- is that what you're looking for?

2 2

[Dovecot] Update configuration for separate mail directory
by eehmke 06 Dec '12

06 Dec '12

I have a small mail server with virtual users. In my /etc/dovecot/conf.d/10- mail.conf I have this setting: mail_location = maildir:/var/mail/vhosts/%d/%u which is also the home location of each user. Now I learned that this is not the prefered configuration, and in fact some of my sieve subdirectories are mistaken as mail directories. While I understand that I have to create separate mail subdirectories in each user folder, I am not sure where I have to adapt the dovecot configuration files. I could not find a guide, only some scattered hints and of course http://wiki2.dovecot.org/VirtualUsers/Home I guess I have to shut down the server for the reconfiguration, or is there a way to do it on a life system? Eggert -- View this message in context: http://dovecot.2317879.n4.nabble.com/Update-configuration-for-separate-mail… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] When are search indexes updated?
by David Abrahams 06 Dec '12

06 Dec '12

I noticed that occasionally searching in my huge archive mailbox can be really slow, so I tried doveadm index on it and it seemed to do a lot of work, which seemed strange given, for example, that dovecot-lda says it keeps Dovecot index files up-to-date. Then I thought, "maybe these are different files than the search indices." If so, that's not entirely clear from the docs and Wiki. So, questions: * When are search indexes updated? * Are they updated incrementally? * If not, why not? * If so, why would a mailbox's index drift out-of-date, as mine had? BTW, I'm using the clucene search backend. -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

6 16

[Dovecot] "no longer mounted" warnings
by Dave Abrahams 06 Dec '12

06 Dec '12

Dovecot seems to be warning about every volume it's ever seen in the past. Is this normal? Can I make it stop? --8<---------------cut here---------------start------------->8--- 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/fs is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.148 PM dovecot[2658]: master: Warning: /Volumes/dave is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Groups is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Public is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/Users is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /Volumes/GPGTools is no longer mounted. See http://wiki2.dovecot.org/Mountpoints 12/4/12 12:33:38.149 PM dovecot[2658]: master: Warning: /private/tmp/ccc_dmg_mount.weHZmz is no longer mounted. See http://wiki2.dovecot.org/Mountpoints --8<---------------cut here---------------end--------------->8--- -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

4 4

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 06 Dec '12

06 Dec '12

On December 4, 2012 at 4:43:53 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > So, it looks to me as though you have a firewall problem. You may be > able to get more information by setting the kern.ipc.sodefunctlog sysctl > to 1: this should make the kernel log to syslog (or wherever the OSX > kernel logs go) when sockets are made DEFUNCT and when reads fail for > that reason. sudo sysctl -w kern.ipc.sodefunctlog=1 gives the following in the log: 12/5/12 9:10:00.000 PM kernel[0]: sosetdefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] marked as defunct 12/5/12 9:10:00.000 PM kernel[0]: sodefunct[60169]: (target pid 60169 level 0) so 0xffffff803159c738 [2,1] is now defunct [rcv_si 0x0, snd_si 0x0, rcv_fl 0x9400, snd_fl 0x1400] 12/5/12 9:10:00.000 PM kernel[0]: soreceive[60169]: defunct so 0xffffff803159c738 [2,1] (57) The last line is repeated about once every 4 microseconds until I kill it.

1 0

[Dovecot] log_path - expansion possible?
by Robert Blayzor 05 Dec '12

05 Dec '12

Does (or can) the ability to use expansion variables in Dovecot's log_path exist? ie: log_path = /var/log/dovecot/dovecot-%Y%m%d -- Robert Blayzor INOC, LLC rblayzor(a)inoc.net http://www.inoc.net/~rblayzor/

3 5

[Dovecot] dotlock error
by Muhammad Yousuf Khan 05 Dec '12

05 Dec '12

i finally manage to control access on public folder by File system permission. i have 3 test users. 1. tom 2. fmaster 3 . testmail tom and fmaster are a group called "news-own" and testmail user is a readonly one. here is my folder structure ill share dovecot -n output at the end of this email. drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 tmp drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:08 new -rwxrwxrwx 1 tom news-own 68 Dec 4 19:08 dovecot-uidlist -rw-rw-r-T 1 fmaster news-own 16K Dec 4 19:10 dovecot.index.cache drwxrwxr-t 2 tom news-own 4.0K Dec 4 19:15 cur -rw-rw-r-T 1 tom news-own 1.1K Dec 4 19:16 dovecot.index.log everything works fine as far as user fmaster and tom is concern as they are member of "news-own" and this group own the mailbox now the problem i face with readonly users. i am getting this error in /var/log/mail.info (against user testmail) file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News at first point i saw this error and i could not subscribe to the folder. and the said log has been generated. now on second stage i change the dovecot-uidlist file permission to "1666" so that testmail user can also write to the file. now problem starts from here, i see two folder one is News and second one is News-1 and i don't know from where the second folder showed up. and when i click on any of the folder my /var/log/mail.info start to show below massage continuously. until i restart the dovecot service. file_dotlock_create(/public/.News/dovecot-uidlist) failed: Permission denied (euid=1002(testmail) egid=1002(testmail) missing +w perm: /public/.News i search google and i saw that people suggested to set stickey bit on which i already did or suggested to stop "dot locking" so i am here to ask is there any way to solve my said problem with out disabling dot locking? or if i stop dot locking what are the consequences? here i my dovcecot -n root@mailsrv:/public/.News# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 log_timestamp: %Y-%m-%d %H:%M:%S ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/index mail_debug: yes mbox_write_locks: fcntl dotlock namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Shared folders/ location: maildir:/public list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix Thanks in advance, any help or suggestion would be highly appreciated.

2 5

[Dovecot] dovecot backend on director ?
by Thomas Hummel 05 Dec '12

05 Dec '12

Hello Timo, The last time I checked my understanding about director was that : 1. backend/"real" imap servers should not be on the same host (or the same dovecot instance) to avoid proxying loops. Is it still the case with the latest 2.1 stable release ? Is there a plan to be able to run director and real server on the same host, thus requiring only 2 hosts instead of 4 to have load balancing and a redundant director ? 2. director itself was not able or meant to check if one of the real server was down (some script was pointed long time ago in this list). Same questions. 3. you'll have to use dovecot lmtp instead of let's say procmail. Would deliver be still a choice or is lmtp the only deliver compatible choice ? In what case would lmtp be more useful than deliver ? To have some sort of "remote LDA" ? By the way, what gets indexed on deposit on the mailbox since, by definition, the user has not done any request yet ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 2

Re: [Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 05 Dec '12

05 Dec '12

FYI, the tcpdump I sent previously was with one of our previously-discussed patches in place: if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { I'm attaching that dump again (as tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in case there is any difference. On December 4, 2012 6:18:23 AM PST, Ben Morrow <ben(a)morrow.me.uk> wrote: > At 12PM +0000 on 4/12/12 Ben Morrow wrote: >> Well, it looks to me as though xnu/bsd/kern/uipc_socket.c:soreceive will >> indeed return ENOTCONN for a socket which was once successfully >> connected but has now been disconnected. This happens when the socket is >> in the DEFUNCT state, which is a state that doesn't exist in FreeBSD; >> it's not completely clear but I suspect firewalls may be able to put >> arbitrary sockets into that state. > > Investigating a little further, it should be possible to test for this > situation directly. Assuming I'm correct about what's going on here, > this should be both cleaner and safer than mucking about looking for > ENOTCONN and guessing about what's happening. > > Erik, does this make the problem go away? I left out the > proxy->client_proxy test, since AFAICT this is just as likely to happen > on a client socket. > > Ben > > #ifdef SO_ISDEFUNCT > + if (getsockopt(proxy->fd_ssl, SOL_SOCKET, SO_ISDEFUNCT, > + (void *)&err, sizeof(err)) == 0 && err) { > + errstr = t_strdup_printf( > + "%s: socket is defunct", func_name); > + break; > + } > +#endif Nope, SO_ISDEFUNCT isn't defined.

2 1

[Dovecot] Quotas 2.1clarification
by Nick Edwards 05 Dec '12

05 Dec '12

Timo, I have much suspicion that our quota system is not working correctly since we migrate to 2.1 Currently using 2.1.10 Previously we had for issue of warnings quota_warning = storage=90%% /scripts/dqwarn-90.sh quota_warning2 = storage=75%% /scripts/dqwarn-75.sh worked great, these lines also migrated to new conf upon conversion. But quota conf example shows plugin { #quota_warning = storage=95%% quota-warning 95 %u #quota_warning2 = storage=80%% quota-warning 80 %u } # Example quota-warning service. The unix listener's permissions should be # set in a way that mail processes can connect to it. Below example assumes # that mail processes run as vmail user. If you use mode=0666, all system users # can generate quota warnings to anyone. #service quota-warning { # executable = script /usr/local/bin/quota-warning.sh # user = dovecot # unix_listener quota-warning { # user = vmail # } #} So this seems to indicate /scripts/dqwarn-75.sh should be a service name, which then calls the service quota-warning with that script in it etc etc etc surely this old 4 line method has not been replaced into a 20 line mess? Is this old way still functioning as I suspect it is not, and we need to write up two separate new quota warning services given our warnings are worded differently, or should the old methods still be working as they did in 1.2 and we have an error elsewhere? Niki

2 2

[Dovecot] [OT] MS Exchange Alternative?
by Marc Perkel 04 Dec '12

04 Dec '12

Just wondering if there's an open source Linux alternative to MS Exchange so that all the features of outlook work?

12 14

[Dovecot] doveadm fts optimize undocumented
by Dave Abrahams 04 Dec '12

04 Dec '12

Subject says all. Timo, would you write something up where the world will find it? Also, it would be great if doveadm fts was covered in the doveadm manpage. Thanks, -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 6

[Dovecot] Maidir layout : why and how ?
by Thomas Hummel 04 Dec '12

04 Dec '12

Hello Timo, I've been using dovecot from many years now using Maildir mailbox format with default layout (Maildir++, everthing in a single directory). What would be the reason(s) to convert to Layout=fs ? I can only think of one : to allow dots in mailbox names. And even in that case, I guess I still have the option to use the litescape plugin. Besides, how would one process to do the conversion ? Using dsync ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

2 1

[Dovecot] CVE-2012-5620
by Timo Sirainen 04 Dec '12

04 Dec '12

This CVE isn't worthy of existence. A user can crash his/her own IMAP session by issuing a specific SEARCH command, which is just slightly worse than user issuing a LOGOUT command. It took years for people to notice this bug, because just about no IMAP client issues such a command.

1 0

[Dovecot] imap-login hanging when firewall blocks ssl handshaking
by Erik A Johnson 04 Dec '12

04 Dec '12

imap-login processes are hanging (using 100% of CPU) when connected from a client that is partially blocked by a firewall. It appears that imap-login is stuck in a loop trying to complete an ssl handshake. imap-login is working fine for other clients not blocked by the firewall (including localhost). This is dovecot 2.1.10 under Mac OS X 10.8.2 (compiled from sources); the firewall is Little Snitch 3.0.1 blocking port 993, which appears to let the connection initiate but then squashes and disconnects the socket during ssl handshaking. gdb backtrace and Activity Monitor's "Sample Process" show that imap-login is stuck calling ioloop-kqueue's io_loop_handler_run -> io_loop_call_io -> ssl_step repeatedly; dtruss shows that it is repeatedly making system calls to kevent and read, the latter returning -1 with errno 57=ENOTCONN="Socket is not connected". (I also tried ./configure --with-ioloop=poll and --with-iopoll=select instead of the default best = kqueue but the results were the same; --with-iopoll=epoll didn't work because epoll is not available on this machine.) The client, initiated by the command "openssl s_client -connect SERVER:993", first responds "CONNECTED(00000003)" but then immediately the error "60278:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/SourceCache/OpenSSL098/OpenSSL098-44/src/ssl/s23_lib.c:182:". The infinite loop is in src/lib/ioloop.c in the function "io_loop_run" where the statement "while (ioloop->running) io_loop_handler_run(ioloop)" is executed. While I think the firewall is not doing the right thing (i.e., it lets a connection start but then kills it), it seems that imap-login should fail gracefully when the socket is no longer connected. Ideas? Thanks. ----------------------------------- /usr/local/sbin/dovecot -n # 2.1.10: /usr/local/etc/dovecot/dovecot.conf # OS: Darwin 12.2.0 x86_64 default_internal_user = _dovecot default_login_user = _dovenull namespace { hidden = no list = yes location = mbox:/Users/%u/Documents/Mailboxes prefix = mbox/ separator = / type = private } namespace { inbox = yes location = maildir:/Users/%u/Documents/Maildir mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { driver = pam } protocols = imap lmtp ssl = required ssl_cert = </usr/local/etc/dovecot/dovecot.pem ssl_key = </usr/local/etc/dovecot/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = " zlib imap_zlib" } ----------------------------------- gdb's "bt full" gives various results depending on where in the loop, but they are they same from ssl23_accept on down. (gdb) bt full #0 0x00007fff92d19f63 in sha1_block_data_order () #1 0x00007fff92d1a4ae in SHA1_Final () #2 0x00007fff92d45430 in EVP_DigestFinal_ex () #3 0x00007fff92d17d7a in ssleay_rand_add () #4 0x00007fff974529be in ssl23_accept () #5 0x000000010cac0729 in ssl_handshake [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/ssl-proxy-openssl.c:465 ret = -949939536 #6 0x000000010cac0729 in ssl_step (proxy=0x7fff53152b90) at ssl-proxy-openssl.c:528 ret = -949939536 #7 0x000000010cb11bd1 in io_loop_call_io (io=0x7f7fa0c1c240) at ioloop.c:379 ioloop = (struct ioloop *) 0x7f7fa0c03b00 t_id = 2 #8 0x000000010cb12c69 in io_loop_handler_run (ioloop=0x0) at ioloop-kqueue.c:148 tv = { tv_sec = 130, tv_usec = 124797 } ctx = (struct ioloop_handler_context *) 0x7f7fa0c1a890 ret = 1 ts = { tv_sec = 130, tv_nsec = 124797000 } events = (struct kevent *) 0x10cb4ee78 #9 0x000000010cb11b88 in io_loop_run (ioloop=0x7fff53152b90) at ioloop.c:398 No locals. #10 0x000000010cafde9b in master_service_run (service=0x7f7fa0c039f0, callback=0x7f7fa0c1c2d8) at master-service.c:543 No locals. #11 0x000000010cabdcd1 in main_deinit [inlined] () at /private/tmp/johnsone/dovecot-2.1.10/src/login-common/main.c:406 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #12 0x000000010cabdcd1 in login_binary_run (argc=1, argv=0x7f7fa0c037c0, binary=0x7fff53152b90) at main.c:407 set_pool = (pool_t) 0x7f7fa100b420 login_socket = 0x10cb4f7f8 "?9??" #13 0x00007fff8ac847e1 in start () (gdb) bt full #0 0x00007fff96e4c110 in malloc_zone_malloc () #1 0x00007fff96e4cba7 in malloc () #2 0x00007fff92d2c9e2 in CRYPTO_malloc () #3 0x00007fff92d4535f in EVP_DigestInit_ex () #4 0x00007fff92d17caa in ssleay_rand_add () #5 0x00007fff974529be in ssl23_accept () ... #0 0x00007fff94775ffa in read () #1 0x00007fff92cf41e6 in sock_read () #2 0x00007fff92d15598 in BIO_read () #3 0x00007fff9745294a in ssl23_read_bytes () #4 0x00007fff97452c3e in ssl23_get_client_hello () #5 0x00007fff97452b4d in ssl23_accept () ... -----------------------------------

4 14

[Dovecot] clucene (in)stability
by Dave Abrahams 04 Dec '12

04 Dec '12

Considering two crashing bugs, which have got no response (https://sourceforge.net/tracker/?func=detail&aid=3587525&group_id=80013&ati… and https://sourceforge.net/tracker/?func=detail&aid=3592291&group_id=80013&ati…) and the lack of activity in its Git repository, I am inclined to think that CLucene's current release series (e.g. 2.3.3.4) should be considered unsuitable for serious use (including with Dovecot). I'm going to try CLucene 0.9.21, which they claim has been "proven to be stable over time" (see http://clucene.sourceforge.net) and see how it works out. I wonder if there's a future envisioned for FTS with Dovecot that's suitable for small installations (i.e. doesn't require a Solr server) and has a good chance of correctness and stability? -- Dave Abrahams BoostPro Computing Software Development Training http://www.boostpro.com Clang/LLVM/EDG Compilers C++ Boost

2 2

[Dovecot] Store mailbox usage in mysql not just the limit
by tibby＠tibby.hu 03 Dec '12

03 Dec '12

Hello! I have dovecot working using mysql for auth and mailbox quota. in the mail database I have a user table with colums for: email, password, quota_kb, quota_messages I want to make a php script that would get the quota_kb and substract the usage to display the total free space left for mail usage. How can I do this? Is there a function in dovecot to store the current usage per mailbox ? Thanks!

2 1

[Dovecot] Gmail style conversations
by Romer Ventura 03 Dec '12

03 Dec '12

Hello, I am wondering if there is any way to support Gmail style conversation when using Dovecot? Someway of associating all inbound and sent emails..? I know that some clients let you display the emails in "conversation" which kinda does what Gmail does, however, it does not associate the Sent emails with it. Thanks for any information. <hr style="border: 1px solid #CCC;"> This document and attachments may contain technical data controlled under the U.S. International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR) and may not be exported to a Foreign Person, either in the U.S. or abroad, without the proper authorization by the U.S. Department of State or Department of Commerce, whichever is applicable. CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. The recipient should check this e-mail and any attachments for the presence of viruses. Houston Sigma Technologies L.P. accepts no liability for any damage caused by any virus transmitted by this e-mail.

3 2

[Dovecot] pop3-login: Error: SSL: Stacked error:
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello again I have few messages in dovecot.log like the following : Dec 03 15:52:07 pop3-login: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10 Anyone could tell what does this means ? Thank you

1 0

[Dovecot] conversion MBOX -->Maildir
by Frank Bonnet 03 Dec '12

03 Dec '12

Hello I would like to start MBOX to Maildir conversion at 2.1.12 what would be the safest method to perform this ? wiki2 says the following , is it up to date ? mbox -> maildir migration. Set mail_location=maildir:~/Maildir and run dsync -u username mirror mbox:~/mail:INBOX=/var/mail/username thank you

1 0