- dovecot - dovecot.org

[Dovecot] ManageSieve with SSL/TLS only
by Karol Babioch 08 Sep '11

08 Sep '11

Hi, I'm quite new to Dovecot and ManageSieve, so probably I've missed something, although I couldn't find any hints in the wiki. I'm interested in running ManageSieve with SSL/TLS only. So is there any way to reject any non encrypted connections? I couldn't find any parameter for this purpose. I'm currently using dovecot 1.2.15 provided with Debian Squeeze, but I couldn't find any parameter in the 2.0 branch neither. Best regards, Karol Babioch

2 1

[Dovecot] Shared Mailboxes with VirtualUsers and mail_location retrieved from ldap
by mailing lists 07 Sep '11

07 Sep '11

Hello, I spend a couple of days configurating a new installation of dovecot 2.0.14 with virtual accounts and NFS storage for maildir home/mail directories. At this point I need shared mailboxes but since user mail/home locations are ldap attributes, how is it supposed I must configure this for shared mailboxes? for the users' mail/home directories I set this line: user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home creating a namespace like the below one for shared mbx throw a lot of errors: namespace { type = shared separator = / prefix = shared/%%u/ subscriptions = no list = children #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mailbox=mail=maildir:/var/maildir/%$ } I would like to hear if anyone has this configuration running. Thank you. /--------------/ uris = ldap://ldap.example.com dn = cn=user,ou=People,dc=example,dc=com dnpass = secret sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=example,dc=com deref = never scope = subtree user_attrs = mailbox=mail=maildir:/var/maildir/%$,homeFilter=home user_filter = (&(objectClass=CourierMailAccount)(uid=%u)) pass_filter = (&(objectClass=CourierMailAccount)(uid=%u)) # dovecot -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.7-xen x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_fsync = always mail_gid = 5000 mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = acl mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { list = children location = mailbox=mail=maildir:/var/maildir/%$ prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 100 mail_plugins = acl imap_acl autocreate }

2 1

[Dovecot] Quota fs (ignore mount)
by Peter Ignatov 07 Sep '11

07 Sep '11

Hi, I set "quota: fs:INBOX:noenforcing:mount=/var/spool/mail", but receive: "fs quota add storage dir = /home/pit/mail"... Why ? In fstab: /dev/mapper/mpath1p1 /var/spool/mail ext2 usrquota 0 0 In dovecot.log: Sep 06 15:02:00 pop3-login: Info: Login: user=<pit>, method=PLAIN, rip=192.168.3.10, lip=192.168.6.3, TLS Sep 06 15:02:00 POP3(pit): Info: Loading modules from directory: /usr/lib64/dovecot/pop3 Sep 06 15:02:00 POP3(pit): Info: Module loaded: /usr/lib64/dovecot/pop3/lib10_quota_plugin.so Sep 06 15:02:00 POP3(pit): Info: Effective uid=500, gid=500, home=/home/pit Sep 06 15:02:00 POP3(pit): Info: Quota root: name=INBOX backend=fs args=noenforcing:mount=/var/spool/mail Sep 06 15:02:00 POP3(pit): Info: Quota rule: root=INBOX mailbox=* bytes=10485760 messages=0 Sep 06 15:02:00 POP3(pit): Info: Quota warning: bytes=9961472 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 Sep 06 15:02:00 POP3(pit): Info: mbox: data=~/mail:INBOX=/var/spool/mail/pit Sep 06 15:02:00 POP3(pit): Info: fs: root=/home/pit/mail, index=, control=, inbox=/var/spool/mail/pit Sep 06 15:02:00 POP3(pit): Info: fs quota add storage dir = /home/pit/mail Sep 06 15:02:00 POP3(pit): Info: fs quota block device = /dev/cciss/c0d0p3 Sep 06 15:02:00 POP3(pit): Info: fs quota mount point = / Sep 06 15:02:00 POP3(pit): Info: fs quota mount type = ext3 Sep 06 15:02:01 POP3(pit): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/2, size=1249 dovecot --version 1.2.17 dovecot -n # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.18-274.el5.asp121 x86_64 Red Hat Enterprise Linux Server release 5.6 (Tikanga) log_path: /var/log/dovecot.log protocols: pop3 pop3s listen: * login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login verbose_proctitle: yes mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_debug: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugins: quota mail_plugin_dir: /usr/lib64/dovecot/pop3 auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: fs:INBOX:noenforcing:mount=/var/spool/mail quota_rule: *:storage=10240 quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95

2 1

[Dovecot] Sieve "header :value" test does not work
by Tom Hendrikx 07 Sep '11

07 Sep '11

hi, After following some examples and searching for sieve samples in this ml history, I'm quite sure that the following sieve snippet should give no surprises: if header :value "ge" :comparator "i;ascii-numeric" "X-Header-Name" "0.99" { /* do something */ } However the Pigeonhole Sieve 0.2.3 on dovecot 2.0.14 gives me following error: test: line 3: error: unknown tagged argument ':value' for the header test (reported only once at first occurence). test: error: validation failed. What obvious mistake am I failing to see here? -- Tom

2 5

[Dovecot] is it necessary lmtp and director to avoid index corruption in mail delivery?
by mailing lists 07 Sep '11

07 Sep '11

Hello all, If I have several postfix/dovecot-lda boxes with shared nfs storage, how director helps in this scenario? is it necesary to use lmtp instead of dovecot-lda? With postfix/dovecot-lda boxes incoming mail happens at the smtp layer but director redirects are working in the lmtp/imap/pop3 layer.

2 1

Re: [Dovecot] error in logs, but system appears to work
by Joseph Tam 07 Sep '11

07 Sep '11

Chris Hoogendyk writes: > So, looking at my other system that has been running dovecot for over a > year, I see that the entries are mostly 0600, but there are a few 0660. > The system I was just implementing has mostly 0660, but some 0600. We > had seen occasional similar errors on the other system. Been there, done that. Timo already gave an explanation of why 0600 gets rid of the problem. I'll add a reminder that you'll need to track down the reason why mailboxes are created user:mail/0660 in the first place. It's usually done by the LDA when creating a brand new mailbox (for example, Solaris's mail.local). If you've replaced your LDA with Dovecot's deliver, then this won't be a problem anymore. You may also have to scour your userbase's personal mail collection for mailboxes that has 1) mode 0660, and 2) group membership the user is not a part of, and fix up the permissions. Such a thing could happen if you've reassigned a user's GID. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Quotas not recalculating
by Kyle Brantley 07 Sep '11

07 Sep '11

Hello all -- I have an interesting issue, where the quotas are refusing the recalculate for anyone on my server. # doveadm quota get -u kyle(a)averageurl.com Quota name Type Value Limit % storage=540672 STORAGE 0 - 0 storage=540672 MESSAGE 0 - 0 # doveadm quota recalc -u kyle(a)averageurl.com # doveadm quota get -u kyle(a)averageurl.com Quota name Type Value Limit % storage=540672 STORAGE 0 - 0 storage=540672 MESSAGE 0 - 0 # du -sh /var/mail/vhosts/averageurl.com/kyle 512M /var/mail/vhosts/averageurl.com/kyle The IMAP client (Thunderbird) state that the user has no quotas in place at all. Now, if I copy the maildirsize file from another user to this user account, the quotas display in the IMAP client. At this point, however, trying to recalc the quota does nothing. Any help with this would be appreciated, config below... --Kyle # doveconf -n # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) ext4 auth_gssapi_hostname = imap.mail.averageurl.com auth_krb5_keytab = /etc/dovecot/krb5.keytab auth_mechanisms = plain login gssapi digest-md5 cram-md5 first_valid_uid = 502 last_valid_uid = 502 mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n mail_plugins = $mail_plugins quota mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:Quota sieve = /var/mail/vhosts/%d/%n/.sieve sieve_dir = /var/mail/vhosts/%d/%n/sieve/ } protocols = imap lmtp sieve service auth { unix_listener auth-userdb { group = mailstore mode = 0660 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 128 } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 } ssl_ca = </etc/pki/tls/certs/AverageURL.crt ssl_cert = </etc/pki/dovecot/certs/imap.mail.averageurl.com.crt ssl_key = </etc/pki/dovecot/private/imap.mail.averageurl.com.pem.insecure userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = $mail_plugins sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = $mail_plugins imap_quota } protocol lmtp { mail_plugins = $mail_plugins sieve } protocol sieve { mail_max_userip_connections = 2 managesieve_max_line_length = 65536 } # cat /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=/var/lib/mysql/mysql.sock user=<snip> password=<snip> dbname=<snip> user_query = SELECT 502 AS uid, 502 AS gid, "/var/mail/vhosts/%d/%n" AS home, concat("maildir:storage=", floor(m.quota/1024)) AS quota FROM vmailboxes m, vhosts h WHERE `m`.`username` = '%n' AND `m`.`domain` = `h`.`UUID` AND `h`.`vhost` = '%d' default_pass_scheme = PLAIN password_query = SELECT aes_decrypt(`m`.`password`, <snip>) AS password FROM vmailboxes m, vhosts h WHERE `m`.`username` = '%n' AND `m`.`domain` = `h`.`UUID` AND `h`.`vhost` = '%d'

3 6

[Dovecot] dumb Q: how to search for email hack attempts ?
by Voytek 06 Sep '11

06 Sep '11

one of the users thinks someone hacked his email, I don't have time this morning to analyze mail logs in detail, but does some one has some tips to simply searching mail logs for multiple log in attempts, etc, I'd appreciate some grepping for failed logins show give some clues ?

2 1

[Dovecot] error in logs, but system appears to work
by Chris Hoogendyk 06 Sep '11

06 Sep '11

I'm bringing up a system with dovecot that has been running for years with uw-imap. In making the switch, I put a tail on the log file, made the switch, and sent a test mail and received it. I was able to receive mail with no apparent difficulties, but the log file was disconcerting. A number of users connected during the few minutes I had it running, and for each of them there was an error, e.g., "chown ~user/mail/.imap/INBOX failed: Operation not permitted" and "mkdir ~user/mail/.imap/INBOX failed: not owner". But those directories and files appeared to have been made. The first of those errors finishes with "group based on /var/mail/user". That makes no sense. I'm hoping someone can give me an idea what might cause this. Here are the log entries in debug mode and the directories for one such user: Sep 2 17:31:33 eclogite dovecot: [ID 583609 local2.info] auth(default): new auth connection: pid=7248 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=128.119.45.20 rip=128.119.45.9 lport=995 rport=53865 resp=AGVicmFkbGV5AFJvd2luZzEzKg== Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): shadow(ebradley,128.119.45.9): lookup Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): client out: OK 1 user=ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): master in: REQUEST 37 7248 1 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): passwd(ebradley,128.119.45.9): lookup Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] auth(default): master out: USER 37 ebradley system_groups_user=ebradley uid=6633 gid=100 home=/u1/home/grad/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): Effective uid=6633, gid=100, home=/u1/home/grad/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): mbox: data=~/mail:INBOX=/var/mail/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): fs: root=/u1/home/grad/ebradley/mail, index=, control=, inbox=/var/mail/ebradley Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] POP3(ebradley): Namespace : Using permissions from /u1/home/grad/ebradley/mail: mode=0700 gid=-1 Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.error] POP3(ebradley): chown(/u1/home/grad/ebradley/mail/.imap/INBOX, -1, 6(mail)) failed: Operation not permitted (egid=100(geolgrad), group based on /var/mail/ebradley) Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.error] POP3(ebradley): mkdir(/u1/home/grad/ebradley/mail/.imap/INBOX) failed: Not owner Sep 2 17:31:43 eclogite dovecot: [ID 583609 local2.info] pop3-login: Login: user=<ebradley>, method=PLAIN, rip=128.119.45.9, lip=128.119.45.20, TLS When I looked at their home directory, I found: drwx------ 4 ebradley geolgrad 512 Jul 28 2009 /u1/home/grad/ebradley drwx------ 4 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail drwx------ 3 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail/.imap drwxrwx--- 2 ebradley geolgrad 512 Sep 2 17:31 /u1/home/grad/ebradley/mail/.imap/INBOX -rw-rw---- 1 ebradley mail 9484323 Sep 6 15:16 /var/mail/ebradley My dovecot configuration is at the end. The other pieces are sendmail, milter-greylist, mimedefang, etc. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology& Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk(a)bio.umass.edu> --------------- Erdös 4 # dovecot -a # 1.2.17: /usr/local/etc/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 768). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: SunOS 5.9 sun4u base_dir: /var/run/dovecot/ log_path: info_log_path: log_timestamp: %b %d %H:%M:%S syslog_facility: local2 protocols: imaps pop3s listen: * ssl_listen: * ssl: required ssl_ca_file: /etc/mail/certs/ca-bundle.crt ssl_cert_file: /etc/mail/certs/sendmail.pem ssl_key_file: /etc/mail/certs/sendmail.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: yes verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: dovecot login_greeting: ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_trusted_networks: login_process_size: 64 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 512 mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 verbose_proctitle: no first_valid_uid: 1000 last_valid_uid: 0 first_valid_gid: 98 last_valid_gid: 0 mail_access_groups: mail_privileged_group: mail mail_uid: mail_gid: mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_cache_fields: mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: yes mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mmap_disable: no dotlock_use_excl: yes fsync_disable: no mail_nfs_storage: no mail_nfs_index: no mailbox_list_index_disable: yes lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: no maildir_very_dirty_syncs: no mbox_read_locks: fcntl mbox_write_locks: dotlock fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 mail_drop_priv_before_exec: no mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_process_size: 256 mail_plugins: mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 10 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: imap_logout_format: bytes=%i/%o imap_id_send: imap_id_log: imap_idle_notify_interval: 120 pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl(default): no pop3_reuse_xuidl(imap): no pop3_reuse_xuidl(pop3): yes pop3_save_uidl: no pop3_lock_session: no pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s dict_db_config: dict_process_count: 1 auth default: mechanisms: plain realms: default_realm: cache_size: 0 cache_ttl: 3600 cache_negative_ttl: 3600 executable: /usr/local/libexec/dovecot/dovecot-auth user: root chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: gssapi_hostname: winbind_helper_path: /usr/bin/ntlm_auth failure_delay: 2 verbose: yes debug: yes debug_passwords: yes ssl_require_client_cert: no ssl_username_from_cert: no use_winbind: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: shadow args: deny: no pass: no master: no userdb: driver: passwd args: #

2 3

[Dovecot] Extdata plugin, MySQL
by Steve Fatula 06 Sep '11

06 Sep '11

Does someone have an example of configuring the Pigeonhole Sieve Extdata plugin with MySQL dict? Particularly, the map and what key might be used in this? The doc in the wiki isn;t clear at all to me when one wants to use MySQL store. The file in the doc folder of the mercurial repository is basically what I want to do, in that RFC, it's bascially looking for a discard_spam setting, I presume by user whose Sieve script is running. So, what would the sql mapping file look like? What lookup key is used? I can't really find any map documentation for the syntax, can a special key be used, perhaps, I need to append a value to the user if that is the key? Can this data be accessed via the dictionary proxy to make access more efficient? While I don't want to discard spam based on the setting in the database, I DO want to not move to the spam folder based on a setting stored in an existing MySQL database. So, very similar idea. I want to use an existing database, but, the key is username + a certain constant value for another field. Am hoping this can be mapped as well. Steve

1 0

[Dovecot] Mail files?
by Knute Johnson 05 Sep '11

05 Sep '11

I have a Ubuntu server running dovecot 1.2.9 with mail in mbox. There are mail files in /var/mail/user and there are mail files in /home/user/mail that correspond to the IMAP folders. In the config file details below it shows mail_location: mbox:~/mail:INBOX=/var/mail/%u, does that put the INBOX in /var/mail? Is INBOX in /var/mail/user to allow local delivery or something? If I was using POP3 instead would all the mail be in the INBOX? Can I backup these files by just copying and if a file is destroyed, copy them back? # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-33-generic i686 Ubuntu 10.04.3 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/ssl/certs/ssl-cert-snakeoil.pem ssl_key_file: /etc/ssl/private/ssl-cert-snakeoil.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_max_userip_connections: 16 mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks: fcntl dotlock imap_capability: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS auth default: passdb: driver: pam userdb: driver: passwd Thanks, -- Knute Johnson knute2011(a)knutejohnson.com

3 4

[Dovecot] 2.1.alpha1: SIGSEGV on EXPUNGE
by Lutz Preßler 05 Sep '11

05 Sep '11

Hi, I upgraded my test installation from Debian lenny with latest 2.0.14 auto builds to squeeze with v2.1.alpha1 (amd64) auto builds. (From /var/log/mail.log: Sep 5 12:34:45 pressler dovecot: master: Dovecot v2.1.alpha1 starting up (core dumps disabled) No hg hash tag in log output anymore?) Now the imap processes segfault on every EXPUNGE command: Excerpt from telnet session: 0 store 1585:1585 flags \Deleted * 1585 FETCH (FLAGS (\Deleted)) 0 OK Store completed. 0 expunge Log output: Sep 5 15:40:59 pressler dovecot: imap(2580, lpmail): delete: box=INBOX, uid=34722, msgid=<E1R0ZJW-00FrF7-0U(a)intern.SerNet.DE>, size=1980, vsize=2031, from=Lutz Pressler <Lutz.Pressler(a)SerNet.DE>, flags=(\Deleted) Sep 5 15:41:22 pressler dovecot: imap(2580, lpmail): expunge: box=INBOX, uid=34722, msgid=<E1R0ZJW-00FrF7-0U(a)intern.SerNet.DE>, size=1980, vsize=2031, from=Lutz Pressler <Lutz.Pressler(a)SerNet.DE>, flags=(\Deleted) Sep 5 15:41:22 pressler dovecot: master: Error: service(imap): child 2580 killed with signal 11 (core dumps disabled) Also happens with mail_log plugin disabled. Any idea? Configuration on request (or tests with core dumps enabled). Regards, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 1

[Dovecot] v2.1.alpha1 released
by Timo Sirainen 05 Sep '11

05 Sep '11

http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha1.tar.gz http://dovecot.org/releases/2.1/alpha/dovecot-2.1.alpha1.tar.gz.sig So it's time for the first alpha version of Dovecot v2.1. There are no huge intrusive changes, so I expect v2.1.0 to be released this year (maybe even in a few months?) The biggest changes are related to full text search handling. I'll probably still make some changes to it and its configuration. Also it wouldn't be difficult to add more backends, does anyone want to add Xapian support for Dovecot? :) Mailbox list indexes are intended to improve performance of IMAP STATUS command lookups, since they could be simply looked up from the index without even opening the mailbox. TODO related to this: 1) optimize virtual mailbox handling so that it doesn't need to actually open all of the mailboxes' index files, it can simply look at the mailbox list index for changes. 2) Implement IMAP NOTIFY extension using this. Statistics tracking can be used to look at what's happening currently in your system and also its history. You can look at what's happening in command/session/user/domain/ip level. "doveadm stats top" gives a list of currently running sessions and sorts them by whichever is using the most disk io/cpu/whatever. "doveadm stats dump" followed by one of the levels shows you a raw dump of everything stored in that level. It would be nice if someone wrote a pretty Ajaxy HTML stats browser where you could zoom in/out of levels. I'd also like to hear if anyone has suggestions on how to improve what stats are gathered or how they could be exported. (I've thought about SNMP, but I'm not entirely sure how to export the data nicely using it.) Finally here's the NEWS file: * Plugins now use UTF-8 mailbox names rather than mUTF-7: acl, autocreate, expire, trash, virtual * auth_username_format default changed to %Lu. If you really want case sensitive usernames, set it back to empty. * Solr full text search backend changed to use mailbox GUIDs instead of mailbox names, requiring reindexing everything. solr_old backend can be used with old indexes to avoid reindexing, but it doesn't support some newer features. + imapc (= IMAP client) storage allows using a remote IMAP server to be used as storage. This allows using Dovecot as a smart (caching) proxy or using dsync to do migration from remote IMAP server. + Mailbox indexing via queuing indexer service (required for Lucene) + Lucene full text search (FTS) backend rewritten with support for different languages + FTS finally supports "OR" search operation + FTS supports indexing attachments via external programs + IMAP FUZZY extension, supported by Lucene and Solr FTS backends + Mailbox list indexes + Statistics tracking via stats service. Exported via doveadm stats. + Autocreate plugin creates/subscribes mailboxes physically only when the mailbox is opened for the first time. Mailbox listing shows the autocreated mailboxes even if they don't physically exist. + Password and user databases now support default_fields and override_fields settings to specify template defaults/overrides. - listescape plugin works perfectly now

7 28

[Dovecot] Possible signed/unsigned bug in libdovecot-storage (2:2.0.14 )
by Kui Zhang 05 Sep '11

05 Sep '11

Hello We are getting following errors when moving mail from inbox to any folder. "Message has been copied too many times (32767+1)" lazy_expunge is enabled. Error messages seems to be from libdovecot-storage. Any one can confirm the bug? or knows of a work around? Thanks K.Z

2 5

[Dovecot] User tries to move folder, then looses it
by Spyros Tsiolis 05 Sep '11

05 Sep '11

Hello, Well, this is kind of difficult to explain. I have this user that keeps making mistakes on his pc and sometimes I don't know if I should believe her or not. Anywhoo, this time round, she managed to loose a whole folder on Thunderbird. She claims she tried to move the folder from a tree directory structure (see : sub-sub-folder) she created for herself to another place underneath "root". Additionaly, she managed to mangle things up since she used on TB characters like "/" "\" and "&" . So thunderbird refuses to access those sub-folders on the folder tree and I cannot rename them (in order to have later access). Here's dovecot info : -------------------------------------------------------------------------- # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 64 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd -------------------------------------------------------------------------- TIA, s. ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] Trash Plugin
by Aydın Demirel 05 Sep '11

05 Sep '11

ReHi; I have a question about trash plugin. I added following lines into dovecot.conf: quota_rule = *:storage=2048000 quota_rule2 = Trash:storage=1MB quota_rule3 = SPAM:ignore When I set *:storage line as default quota_rule , There is no problem.. But when I removed this line and set Trash:storage as default quota_rule, plugin is not working.. That I said, Do I have to add *:storage line as first default line in config line? Regards.. -- *Aydın Demirel Endersys Ltd. Sistem Destek Mühendisi/ System Support Engineer* * *<<Endersys is the first Advanced Business Partner of Red Hat in Turkey! http://www.europe.redhat.com/partners/endersys/>> Phone : +90 216 470 9423 | GSM : +90 530 401 8203 Fax : +90 216 470 9508 | Web : http://www.endersys.com <http://www.endersys.com/> Blog : http://blog.endersys.com <http://blog.endersys.com/> Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com <http://www.lpi-turkey.com/>

2 2

[Dovecot] v2.1 stats documentation
by Timo Sirainen 04 Sep '11

04 Sep '11

http://wiki2.dovecot.org/Statistics

1 0

[Dovecot] Thunderbird caching problem
by Chris Cappuccio 03 Sep '11

03 Sep '11

Using a fairly simple dovecot config (which obviously needs some max limit tweaking) we have problems with IMAP synchronization between thunderbird clients. Two TB clients in the same IMAP mailbox will, from time to time, show different views of the same INBOX folders, when TB caching is enabled. The only fix is to right-click on the folder, go to "Properties" and use the "Repair Folder" option which repairs the local TB .msf cache file. Is there any server-side fix/workaround that would keep TB from regularly going out-of-sync ? This happens with TB3 and newer versions, in concert with either dovecot 1 or 2. The obvious fix is to disable TB local caching, which unfortunately also disables certain search features and can be a pain for large mailboxes. # dovecot -n # 2.0.13: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (7168) doveconf: Warning: service anvil { client_limit=2048 } is lower than required under max. load (3075) # OS: OpenBSD 5.0 amd64 ffs auth_default_realm = dovecot.org auth_mechanisms = plain digest-md5 cram-md5 apop auth_username_translation = :@ default_client_limit = 2048 default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 1024 disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 mail_location = maildir:/mail/%d/%n/ managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /etc/dovecot/default.sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { user = mail } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/balls/balls-cert.pem ssl_key = </etc/balls/balls-key.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 50 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_save_uidl = yes pop3_uidl_format = %v-%u }

4 4

[Dovecot] Control of \Seen flags dovecot 1.2.9
by Kristen J. Webb 03 Sep '11

03 Sep '11

Hi All, I have public mailboxes working with ACL's now, and I'm testing the ACL behavior. I've added lrws to two users so they can check off the messages they have read. I'm using CONTROL and INDEX in the location parameter for the namespace. It appears that if one user marks a message as read, all users see that message read. Is there any way to configure dovecot, so that each user maintains their own view of read messages? Relevant config (i think): namespace private { separator = / prefix = location = maildir:/home/vmail/%d/%n/Maildir:LAYOUT=fs inbox = yes } namespace public { separator = / prefix = Public/ location = maildir:/home/vmail/Public:LAYOUT=fs:CONTROL=/home/vmail/%d/%n/Maildir/Public:INDEX=/home/vmail/%d/%n/Maildir/Public subscriptions = no } -- Mr. Kristen J. Webb Teradactyl LLC. PHONE: 1-505-242-1091 EMAIL: kwebb(a)teradactyl.com VISIT: http://www.teradactyl.com Home of the True incremental Backup System

1 1

[Dovecot] Can't got mail by OUTLOOK for a half million mails account
by Dong Ding 02 Sep '11

02 Sep '11

Hi, I used postfix always_bcc to backup mail. And up to now the backup account has half million mails in cur/, when I first time tried to receive the mail by outlook, it failed , no responds. Does any one has some good idea to deal with this problem? Thanks

4 3

[Dovecot] Kerberos GSSAPI - proper item name in keytab
by Stanislav Klinkov 02 Sep '11

02 Sep '11

Hello, ALL. I am trying to organize a transparent single sign-on concept for my Active Directory users into Dovecot via IMAP. On the user's desktop I use Thunderbird 6.0 as a mail client (MUA), Windows XP as an operating system. Domain is controlled by Windows 2008 Server SP2 with Active Directory. I have installed on my Mail server Debian GNU/Linux 6.0.2 (Squeeze) and Dovecot 2.0.13 from official "wheezy" repositories of it with all dependencies. I ran into in a problem with generating proper "/etc/krb5.keytab" file for successful kerberos authentication against AD controller. I has performed all the steps described in official dovecot wiki here: http://wiki2.dovecot.org/Authentication/Kerberos I have generated a service ticket with name "imap/efim.test.local(a)MYORG.LAN" exactly as described in wiki. ("MYORG.LAN" is my kerberos realm.) But this does not work. I see in debug logs something like this: ******** main service logs ******** Aug 29 16:05:14 auth: Info: gssapi(?,192.168.4.12): While processing incoming data: Unspecified GSS failure. Minor code may provide more information Aug 29 16:05:14 auth: Info: gssapi(?,192.168.4.12): While processing incoming data: Wrong principal in request ************************************* ******** auth debug logs ********* Aug 29 16:05:14 auth: Debug: gssapi(?,192.168.4.12): Obtaining credentials for imap(a)efim.test.local Aug 29 16:05:14 auth: Debug: client out: CONT 1 Aug 29 16:05:14 auth: Debug: client in: CONT<hidden> Aug 29 16:05:16 auth: Debug: client out: FAIL 1 ************************************* But (!). If I define << auth_gssapi_hostname = "$ALL" >> instead of << auth_gssapi_hostname = efim.test.local >> then everything works fine. I decided to find out where is the problem, so I dig into source code of gssapi module, "mech-gssapi.c". For versions 2.0.13 and 2.0.14 of dovecot I see there the following: ********* mech-gssapi.c ********* static OM_uint32 obtain_service_credentials(struct auth_request *request, gss_cred_id_t *ret_r) /* blah-blah-blah */ principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); str_append(principal_name, request->set->gssapi_hostname); auth_request_log_debug(request, "gssapi", "Obtaining credentials for %s", str_c(principal_name)); inbuf.length = str_len(principal_name); inbuf.value = str_c_modifiable(principal_name); major_status = gss_import_name(&minor_status, &inbuf, GSS_C_NT_HOSTBASED_SERVICE, &gss_principal); ********************************* So, according to source code, Dovecot tries to find in krb5.keytab a principal named "imap@hostname". However wiki says to create the principal named "imap/hostname@REALM". Please, clarify where is the error: in source code, in wiki, or I have misunderstood something. Respectfully, Stanislav Klinkov.

7 19

[Dovecot] OT - small hd recommendation
by Daniel L. Miller 02 Sep '11

02 Sep '11

A little OT - but I've seen a few opinions voiced here by various admins and I'd like to benefit. Currently running a single combined server for multiple operations - fileserver, mailserver, webserver, virtual server, and whatever else pops up. Current incarnation of the machine, after the last rebuild, is an AMD Opteron 4180 with a Supermicro MB using ATI SB700 chipset - which means it supports SATA 3.0. Current storage is one o/s drive, and a 4-drive RAID10 array. The RAID10 is using the Linux softraid via mdadm. The drives are Seagates - ST3160811AS. So it's 320GB of storage, and SATA 1.5. I'm seeing some warnings & errors in my logs & dmesg - and Google tells me this can the result of several factors, including the hard drives. I haven't seen any SMART warnings as yet - but I am getting a little nervous and thinking about upgrading the storage. At this time, I'm just interested in recommendations for hard drives & partitioning strategy. At the time I created the RAID10 array - I was still in the early stages of learning these technologies (not that I know that much more now!) so I probably didn't take advantage of any of the advanced settings such as stripe size, cluster size, etc. I am using XFS. As part of the potential upgrade, I'm considering changing to RAID6 - seems a bit more efficient use of space. I see no reason for SSD - I think a set of reasonable 7200rpm drives should be just fine. What I don't know is, compared to my current 4 drive RAID10 with SATA 1.5, would even a single SATA 3 drive be comparable in terms of seek performance? Should I stick with the RAID-10? -- Daniel

6 7

[Dovecot] thunderbird and subscriptions with sieve
by Kristen J. Webb 02 Sep '11

02 Sep '11

Hi All, I'm a newbie trying to move mail out of my ISP onto a ubuntu (lucid) dovecot 1.2.9 server. Is there any way to automatically add folders created by sieve (GNU Mailutils 2.1) to the subscriptions file for a user? I'm currently testing spam, and if sieve created the folder with the first message, the thunderbird user does not see the new folder. Even more interesting, if the user then tries to create the Spam directory it thunderbird seems to quietly ignore the request and the user still cannot see the folder, but I digress... I can manually subscribe with thunderbird, but this won't scale for more complex sieve later by making the user responsible for finding everything. I can turn off subscription view in advanced settings on thunderbird, but we are trying to wean ourselves of of individual mail clients and I don't want to have to test this everywhere. Many thanks in advance! Kris -- Mr. Kristen J. Webb Teradactyl LLC. PHONE: 1-505-242-1091 EMAIL: kwebb(a)teradactyl.com VISIT: http://www.teradactyl.com Home of the True incremental Backup System

6 6

[Dovecot] dovecot imap permission denied
by Daminto Lie 02 Sep '11

02 Sep '11

Hi, I received the following error from mail.log Aug 31 13:50:57 server1 dovecot: IMAP(mike_lee): mkdir(/home/mike_lee/Maildir/.INBOX.Sent/cur) failed: Permission denied (euid=1004 egid=1003(companyusergroup) missing +w perm: /home) What I have tried to do is changing the permission for /home by typing "sudo chmod 755 /home" and this does not work. What does it mean by missing +w perm: /home? and wonder how to get around it? This is what I have in main.cf from Postfix myhostname = server1 myorigin = /etc/mailname relayhost = mynetworks = 127.0.0.0/8, 192.168.1.0/24 inet_interfaces = all inet_protocols = ipv4 home_mailbox = Maildir/ smtpd_sasl_type = dovecot #smtpd_sasl_path = private/auth-client smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination #smtpd_sender_login_maps = ldap:/etc/postfix/ldap_senders.cf broken_sasl_auth_clients = yes #dovecot_destination_recipient_limit = 1 debug_peer_list = 127.0.0.1 debug_peer_level = 5 Any help is very much appreciated. Thank you

2 6

[Dovecot] sieve vacation problem (discarding)
by Lampa 02 Sep '11

02 Sep '11

Hello, i'm using 1.2.15 version on debian. I'm getting "discarding vacation response for message implicitly delivered to <user(a)domain.com>" I have domain domain.com which has alias do-main.com. When sending email to main domain (domain.com) seems to be ok, but for aliased domain getting discard ;( I tried "scary things" from http://www.dovecot.org/list/dovecot/2009-August/042360.html require ["vacation", "variables", "envelope"]; if envelope :matches "to" "*" { set "envto" "${1}"; vacation :days 1 :addresses ["${envto}"] :subject "Out of order..." "Body message"; } Is implemented :addresses ["*"] in later 1.2 version ? Where is problem? What i must to do to get this thing working ? Upgrading to version 2.x isn't solution for me now. Thank you for advices and help. -- Lampa

2 1

Re: [Dovecot] Password query returned multiple matches
by Arne K. Haaje 01 Sep '11

01 Sep '11

Wednesday 31. August 2011 11.44.03 skrev Simon Brereton : > > -----Original Message----- > > From: Timo Sirainen [mailto:tss@iki.fi] > > > > On 31.8.2011, at 18.19, Simon Brereton wrote: > > > Aug 30 22:41:45 mail dovecot: auth-worker(default): > > sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned > > multiple matches > > .. > > > > > password_query = SELECT EmailAdd AS user, Password AS password, > > > > concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as > > userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' > > AND active = '1'; > > > > > Since the EmailAdd is unique I don't see how it can return multiple > > > > matches. > > > > You're querying with Username, not with EmailAdd, and apparently > > there are multiple rows where Username='sbrereton(a)domain.co.uk'. > > Well, what do you know - there are two Usernames that at the same! I have > no idea how that happened. You could change or add the index for Username column to UNIQUE. That will ensure it does not happen again :) Arne -- Arne K. Haaje - Dr Linux http://www.drlinux.no/ ::: arne(a)drlinux.no LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb

1 0

[Dovecot] Segmentation fault in dovecot director lmtp service
by Reinhard Vicinus 01 Sep '11

01 Sep '11

Hi, the lmtp service of our dovecot director installation quits with a segmentation fault if a lot of mails are simultaneously delivered. For example if the postfix mailqueue is filled (for whatever reason) and postqueue -f is run the lmtp service quits with a segmentation fault: Program terminated with signal 11, Segmentation fault. #0 o_stream_cork (stream=0x0) at ostream.c:75 75 if (unlikely(stream->closed)) (gdb) backtrace #0 o_stream_cork (stream=0x0) at ostream.c:75 #1 0x00007fa6e6af45d9 in lmtp_client_send_more (client=0x2435870) at lmtp-client.c:596 #2 0x0000000002434170 in ?? () #3 0x00000000004070d9 in proxy_send_more (proxy=0x2435870) at lmtp-proxy.c:390 #4 lmtp_proxy_data_input (proxy=0x2435870) at lmtp-proxy.c:444 #5 0x00007fa6e6af456f in lmtp_client_send_data (client=0x24347a0) at lmtp-client.c:306 #6 0x0000000002434f98 in ?? () #7 0xffffffffe6af73c5 in ?? () #8 0x0000000002434840 in ?? () #9 0x0000000000000000 in ?? () I don't have any ideas why the stream is 0. The configuration of the dovecot director installation is attached. Please let me know if i shall provide any more information or test something. Kind regards Reinhard

4 5

[Dovecot] Crash in director/lmtp-proxy (lmtp_proxy_output_timeout)
by Jan-Frode Myklebust 01 Sep '11

01 Sep '11

FYI, we saw one panic on our director/lmtp-proxy yesterday. It's running dovecot v2.0.13, so it very well might have been fixed already.., but here it is anyway: Aug 31 11:33:31 loadbalancer1 dovecot:: lmtp(4119): Panic: file lmtp-proxy.c: line 370 (lmtp_proxy_output_timeout): assertion failed: (proxy->data_input->eof) Aug 31 11:33:31 loadbalancer1 dovecot:: lmtp(4119): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3bb70] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3bbc6] -> /usr/lib64/dovecot/libdovecot.so.0 [0x3aabc3b083] -> dovecot/lmtp [0x406c90] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0xcd) [0x3aabc46a8d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x68) [0x3aabc47a48] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x2d) [0x3aabc466fd] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x3aabc34fe3] -> dovecot/lmtp(main+0x144) [0x404034] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x32ae81d994] -> dovecot/lmtp [0x403e39] Aug 31 11:33:31 loadbalancer1 dovecot:: master: Error: service(lmtp): child 4119 killed with signal 6 (core dumps disabled) On postfix side at the same time, we saw a few different messages about: postfix/lmtp[5178]:: 849FD1C024: lost connection with loadbalancers.example.com[192.168.42.15] while sending end of data -- message may be sent more than once so I suspect this crash took down all active lmtp-proxyed connections. -jf

1 0

[Dovecot] lmtp bouncing -- Invalid parameters (in reply to MAIL FROM command)
by Jan-Frode Myklebust 01 Sep '11

01 Sep '11

I just configured postfix' virtual_transport to point at my dovecot director, but am seeing occational problems like this: Aug 31 11:50:06 smtpgw postfix/lmtp[5339]: 69E2F5410D: to=<email(a)example.net>, relay=loadbalancers.example.net[192.168.42.17]:24, delay=0.15, delays=0.14/0.01/0/0, dsn=5.5.4, status=bounced (host loadbalancers.example.net[192.168.42.17] said: 501 5.5.4 Invalid parameters (in reply to MAIL FROM command)) but can't find anything interesting in the dovecot logs.. Anybody have ideas for how to make postfix play nice with dovecot's lmtp ? smtpgws% rpm -q postfix postfix-2.3.3-2.1.el5_2 loadbalancers% rpm -q dovecot dovecot-2.0.13-2 backendmailstorers% rpm -q dovecot dovecot-2.0.13-2 -jf

2 3

[Dovecot] Proprietary mail storage.
by Alex Cherniak 01 Sep '11

01 Sep '11

I have a large existing read-only collection of mails packaged in individual zip files as <rfc822 file>+<some additional info>. Is it possible (and how difficult) to create a proprietary plugin (like gzip) which will open a zip file, extract mail and pass it back to Dovecot? Where do I start? If plugin is not the right approach, what is? Another question is how will this affect Dovecot performance and how to avoid any significant degradation. Any help is appreciated.Thanks.

3 9

Re: [Dovecot] Multiple domains to one inbox and temporary redirects...
by Nick Rosier 01 Sep '11

01 Sep '11

Simon Brereton wrote: > Hi > > Can anyone point me to a howto to arrange for multiple domains to deliver to one inbox with Dovecot? For example, user1(a)example.com and user1(a)example.net should both be delivered to /var/spool/mail/virtual/example.net/user1 > > Currently, I have the dovecot LDA set as: > > dovecot unix - n n - - pipe > flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} > > > and in dovecot.conf: > > mail_location: maildir:/var/spool/mail/virtual/%d/%n > > For some domains only, I need to override that mail_location. > > > Related to that, when user1 leave and user2 would like to receive user1's email, how can I get it so that email to user1(a)example.com is delivered to user2(a)example.com? Previously when I was using Postfix to deliver the mails, I could change the maildirloc in the DB - but I’m not sure how to accomplish this with dovecot LDA. > > I'm using Postfixadmin to manage users and have server alias-domains. All mail sent to an alias-domain is delivered to the other domain. Quite easy if you've got postfixadmin already setup. Otherwise I think you could configure virtual_alias_maps in postfix to something like hash:virtual_domains virtual_domains: @example.net @example.com N.

4 3

[Dovecot] sorting order changed during migration from courier
by Micah Anderson 31 Aug '11

31 Aug '11

Hello, I've been working to migrate to dovecot (debian stable: 1:1.2.15-7) from courier (debian old-stable: 4.4.0-2). I've setup everything and migrated a test user over to the new system, and ran the courier-dovecot-migrate.pl script. The user is using alpine (the free version of pine) and their sort order changed on move to dovecot. Originally it was the default in alpine, which is to sort based on arrival. If he changes the sort order in alpine to sort based on date, then things are back to how he expects it. I noticed that there are no known issues with pine (http://wiki.dovecot.org/Clients#Pine) Ideally, I would prefer if all the users who are migrated aren't presented with a different sort order than they were used to, as the support burden will be quite high. What is it about this migration that could have caused that, and more importantly, how can I fix it? I moved the mail from the original system to this system via rsync -a. The old system was an i686 machine and ext3, this new one is amd64 and ext4. thanks for any ideas! micah # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 protocols: imap imaps pop3 pop3s disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: howdy, ready. login_processes_count: 10 login_max_processes_count: 256 first_valid_uid: 8 last_valid_uid: 8 first_valid_gid: 8 last_valid_gid: 8 mail_uid: 8 mail_gid: 8 mail_location: maildir:~/ maildir_copy_preserve_filename: yes maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /maildir/postlogin_imap mail_executable(imap): /maildir/postlogin_imap mail_executable(pop3): /maildir/postlogin_pop mail_process_size: 512 mail_plugins(default): expire quota imap_quota mail_plugins(imap): expire quota imap_quota mail_plugins(pop3): expire quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): tb-extra-mailbox-sep delay-newmail imap_client_workarounds(imap): tb-extra-mailbox-sep delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)riseup.net auth default: default_realm: riseup.net verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf --

1 0

[Dovecot] mail spool filesystem
by Julio Cesar Covolato 31 Aug '11

31 Aug '11

Hi! I´m about to migrate a system whith 5000 accounts whith (~ 500GB) from "postfix/courier-imap/maildrop/mysql" to a new hardware whith "postfix/dovecot/dovecot/mysql". I´ll make a separate partition (raid 1) for the mail spool (/var/spool/vmail) and want to now what type of filesystem to use on it to increase performance. I read that XFS is a good choice, but is not too reliable... Any sugestions? Thanks in advance, -- ----------------------------- _ Julio Cesar Covolato 0v0<julio(a)psi.com.br> /(_)\ F: 55-11-3129-3366 ^ ^ PSI INTERNET -----------------------------

15 19

[Dovecot] Multiple domains to one inbox and temporary redirects...
by Simon Brereton 31 Aug '11

31 Aug '11

Hi Can anyone point me to a howto to arrange for multiple domains to deliver to one inbox with Dovecot? For example, user1(a)example.com and user1(a)example.net should both be delivered to /var/spool/mail/virtual/example.net/user1 Currently, I have the dovecot LDA set as: dovecot unix - n n - - pipe flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} and in dovecot.conf: mail_location: maildir:/var/spool/mail/virtual/%d/%n For some domains only, I need to override that mail_location. Related to that, when user1 leave and user2 would like to receive user1's email, how can I get it so that email to user1(a)example.com is delivered to user2(a)example.com? Previously when I was using Postfix to deliver the mails, I could change the maildirloc in the DB - but I’m not sure how to accomplish this with dovecot LDA. Again, any pointers would be welcome. Thanks. Simon

1 0

Re: [Dovecot] Password query returned multiple matches
by Timo Sirainen 31 Aug '11

31 Aug '11

On 31.8.2011, at 18.19, Simon Brereton wrote: > Aug 30 22:41:45 mail dovecot: auth-worker(default): sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned multiple matches .. > password_query = SELECT EmailAdd AS user, Password AS password, concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' AND active = '1'; > > Since the EmailAdd is unique I don't see how it can return multiple matches. You're querying with Username, not with EmailAdd, and apparently there are multiple rows where Username='sbrereton(a)domain.co.uk'.

2 1

[Dovecot] Password query returned multiple matches
by Simon Brereton 31 Aug '11

31 Aug '11

Hi After successfully setting up dovecot, I see this error in the logs. Aug 30 22:41:45 mail dovecot: auth-worker(default): sql(sbrereton(a)domain.co.uk,64.88.168.84): Password query returned multiple matches Aug 30 22:41:52 mail dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<sbrereton(a)domain.co.uk>, method=PLAIN, rip=64.88.168.84, lip=127.0.0.1, TLS Can you tell me what it means or what I should look for? In my dovecot-sql.conf I have this query: password_query = SELECT EmailAdd AS user, Password AS password, concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u' AND active = '1'; Since the EmailAdd is unique I don't see how it can return multiple matches. Thanks. Simon

1 0

[Dovecot] [PATCH] Indexing mail attachments with Dovecot + Solr
by Antonio Perez-Aranda 31 Aug '11

31 Aug '11

Indexing mail attachments with Dovecot + Solr. This patch has been tested with these versions: * dovecot 2.0.9 * apache-solr 1.4.1 This is a patch for the fts-solr plugin (that indexes mail messages for Dovecot with Solr). In main stream, the plugin does not index attachments; With this patch, you can index mails and their attachments (pdf, docs, openoffice docs...) . You can get others goodies with this patch and the Solr Config provided, like Synonyms and Stemming (Spanish by default). Attachment indexing is provided by Solr Cell and Tika (ExtractingRequestHandler) * http://wiki.apache.org/solr/ExtractingRequestHandler Synonyms and Stemming are provided by SnowballPorterFilterFactory from Solr Language Analysis: * http://wiki.apache.org/solr/LanguageAnalysis We have tested Solr with Tomcat and Jetty. Tomcat is better to handle UTF-8 and bigger POSTS. Attachments file format supported * http://tika.apache.org/0.9/formats.html At present, attachments in attachments (like, for example, attachments in fordwarded "eml" attachments) are not indexed. Also, keep in mind that there are many types of files, and many variants of the same file type. Per Example, some pdf files are "not readable" by solr pdf reader. Config: There are two new options added to fts_solr property: * index-attachments Enable attachments indexing. * manual-update Avoid index on user search. You can trigger indexing using doveadm search or doveadm index commands. There is a new property for the section plugin to filter the mimetypes that you want to index. * fts_solr_mimetype files with this mimetype will be sent to solr. After integrating solr directory in your solr config, and building Dovecot with fts-solr support and with fts-solr-attachments-r885.patch applied, you can update your dovecot config by adding to your dovecot.conf: ... mail_pluings = $mail_plugins fts fts_solr plugin { fts = solr fts_solr = url=http://solrhost:8983/solr/ break-imap-search index-attachments fts_solr_mimetype = application/x-pdf application/vnd.openxmlformats-officedocument.wordprocessingml.document } ... -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 5

[Dovecot] auth: Error: LDAP: Connection lost to LDAP server, reconnecting
by Angel L. Mateo 31 Aug '11

31 Aug '11

Hello, I continue debugging my problems with my update to dovecot 2.x :-( I have dovecot 2.0.13 running in ubuntu 10.04 (lucid) x64. My users are in a ldap directory. The problem is that I have a lot of errors like: Aug 24 23:07:32 myotis28 dovecot: auth-worker(default): LDAP: Connection lost to LDAP server, reconnecting I have seen in the mail list a patch for 1.2 (http://hg.dovecot.org/dovecot-1.2/rev/355d5a40f7a7) to ignore these logs when the disconnection is because of idle timeouts. As far as I could see in this patch and 2.0.13 source code, this patch is already applied in 2.0. So I guess that the disconnection is for other problem, isn't it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 11

Re: [Dovecot] : error while loading shared libraries: libdovecot.so.0 (arm cross compile)
by Joseph Tam 31 Aug '11

31 Aug '11

"Stephen Feyrer" <stephen.feyrer(a)btinternet.com> writes: > I've made a new attempt at build Dovecot. The build and then install > processes appeared to work find. Then when I try to run Dovecot it > reports the error: > > /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared > libraries: libdovecot.so.0: cannot open shared object file: No such file > or directory In cases like this where I have no clue where an executable is trying to load a library from, run a process trace tool (strace, truss, etc.) and you can see all the library run paths it's trying before failing. Joseph Tam <jtam.home(a)gmail.com>

3 7

[Dovecot] Message flags
by Ralf Hildebrandt 30 Aug '11

30 Aug '11

How do I set message flags in sieve rules in such a way that e.g. Thunderbird is displaying the mail as "important"? Is there a list of hwo flags are interpreted by different IMAP clients? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

5 5

[Dovecot] Sub-folder outside of the mail store
by Simon Brereton 30 Aug '11

30 Aug '11

Hi How do I create an IMAP folder that links to a folder outside of the mail store? For example, I have all domains under /var/spool/mail/virtual/domains.net/ and users under /var/spool/mail/virtual/domains.net/user Amavis delivers quarantine mail to /var/spool/mail/quarantine I would like one user (postmaster) to have a folder /var/spool/mail/virtual/domains.net/postmaster/.Quarantine and link it to that folder - is that possible? Is it safe? The client the postmaster uses can then reinject and deliver the mail if need be (i.e. it's safe or the attachment has been stripped). Thanks. Simon

1 0

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 30 Aug '11

30 Aug '11

On Mon, 2011-08-29 at 11:14 -0400, Simon Brereton wrote: > Aug 29 15:59:14 mail dovecot: deliver(simon(a)lydiard.net): stat(/var/spool/mail/virtual/domain.net/simon/tmp) failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: /var/spool/mail/virtual) > > Even if I make EVERTHING under /var/spool/mail/virtual/* owned by mailsystem:mailsystem - and reload postfix and restart doevcot. But you didn't change the /var/spool/mail/virtual directory itself? (Like the error message says.)

2 1

[Dovecot] Virtual user and post-login 2.0.13
by Pelle Svensson 30 Aug '11

30 Aug '11

Hi I tried several variants of suggestions but I can't get it working dovecot-info.log: =========== Aug 25 17:37:48 imap-login: Info: Login: user=<vuser>, method=PLAIN, rip=192.168.1.xx, lip=192.168.1.xx, mpid=11264 Aug 25 17:37:48 imap(vuser): Info: Post-login script denied access to user vuser dovecot.log ======== Aug 25 17:31:28 imap-postlogin: Error: script-login: Error: user pmp(a)bredband.net: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Aug 25 17:31:28 imap-postlogin: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Aug 25 17:31:28 log: Error: service(imap-postlogin): child 11082 returned error 89 (Fatal failure) dovecot.conf ======== protocols = imap pop3 base_dir = /var/run/dovecot/ log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot-info.log ssl = no # v1.2+, for older versions use: ssl_disable = yes disable_plaintext_auth = no mail_location = maildir:/home/fetchmail/mailroot/dummy pop3_uidl_format = %08Xu%08Xv !include conf.d/*.conf !include_try local.conf mail_uid=500 mail_gid=500 auth_verbose = yes auth_debug=yes auth_debug_passwords=yes mail_debug=yes # Optional tried with this!!! service config { unix_listener config { group = dovecot mode = 0660 } } service imap { # tell imap to do post-login lookup using a socket called "imap-postlogin" executable = imap imap-postlogin # Optional tried with this!!! user=dovecot } # The service name below doesn't actually matter. service imap-postlogin { # all post-login scripts are executed via script-login binary executable = script-login /home/fetchmail/dovecot-postlogin.sh # the script process runs as the user specified here (v2.0.14+): # Optional tried with this!!! # user=dovecot # user = $default_internal_user # this UNIX socket listener must use the same name as given to imap executable # Optional tried with this!!! #unix_listener imap-postlogin { #} } users ==== vuser:{PLAIN}pass:500:500::/home/fetchmail::userdb_mail=maildir:/home/fetchmail/mailroot/vuser-root allow_nets=192.168.1.0/24 ls -l /home/fetchmail/dovecot-postlogin.sh -rwxrwxrwx. 1 dovecot root 108 Aug 25 17:08 dovecot-postlogin.sh Any suggestions are very welcome!! /Thanks

3 4

[Dovecot] Dovecot service needs a second restart after boot - euid is not dir owner
by Pelle Svensson 30 Aug '11

30 Aug '11

After reboot dovecot service need a restart. dovecot service starts as S99dovecot with only S99rc-local coming up. After boot following error is filled up in dovecot.log Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot.index.log) failed: Permission denied (euid=500(vuser) egid=500(vuser) missing +r perm: /home/fetchmail/mailroot/map/dovecot.index.log, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: file_dotlock_create(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied (euid=500(fetchmail) egid=500(fetchmail) missing +w perm: /home/fetchmail/mailroot/map, euid is not dir owner) Aug 28 11:33:12 imap(vuser): Error: open(/home/fetchmail/mailroot/map/dovecot-uidlist) failed: Permission denied After Linux has booted you just issue service dovecot restart And everything is back to normal and no error. Running on a Pentium 800MHz not too fast pc

2 2

[Dovecot] ldap authentication
by Daminto Lie 30 Aug '11

30 Aug '11

Hi, I have got Postfix, Dovecot IMAP and squirrelmail up and running on my ubuntu server 10.04 for a testing purpose. My question is in order to be able to login, do I need to create user accounts for each users on the server? I have about 20 users at the moment, and it's going to take time. I was thinking of using LDAP and have the dovecot authentication through LDAP. This way, I do not have to create accounts for 20 users on the server. The dovecot can just authenticate users by looking them up against the LDAP. I wonder if anyone would be able to share some guides as to how to set it up to work with Postfix and Dovecot. Thank you

1 0

[Dovecot] dovecot w/ libwrap on fbsd
by Gelu Lupas 30 Aug '11

30 Aug '11

Dovecot with libwrap doesn't work on FreeBSD for some reason or another. I have these lines in my /etc/hosts.allow: ALL: LOCAL 127.0.0.1: allow pop3: ALL: allow ALL: ALL: deny Yet when you try to telnet to localhost, port 110 this is what happens: Aug 29 22:48:38 dodo dovecot: pop3-login: Error: connect(tcpwrap) failed: Permission denied I also tried auth_debug=yes to see what's wrong but it only shows the processes which handled the connection, no extra info with the reason why it failed. Here's the config: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 7.4-RELEASE i386 auth_mechanisms = plain login base_dir = /var/run/dovecot/ disable_plaintext_auth = no dotlock_use_excl = no first_valid_uid = 1000 listen = * login_access_sockets = tcpwrap login_greeting = login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mbox:~/Mail/:INBOX=/var/mail/%u mail_log_prefix = "%Us(%u): " mail_privileged_group = mail maildir_copy_with_hardlinks = no passdb { driver = pam } protocols = pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root vsz_limit = 64 M } service imap-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service imap { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service pop3-login { chroot = login client_limit = 128 process_limit = 32 process_min_avail = 3 service_count = 1 user = dovecot vsz_limit = 32 M } service pop3 { drop_priv_before_exec = no process_limit = 128 vsz_limit = 256 M } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { postmaster_address = postmaster(a)europrima.ro sendmail_path = /usr/sbin/sendmail }

2 1

[Dovecot] : error while loading shared libraries: libdovecot.so.0 (arm cross compile)
by Stephen Feyrer 29 Aug '11

29 Aug '11

Hi. I've made a new attempt at build Dovecot. The build and then install processes appeared to work find. Then when I try to run Dovecot it reports the error: /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory To get a better idea of what's going on, I added --enable-devel-checks at ./configure and then ran gdb: # gdb --args dovecot -F GNU gdb 6.8 [snip] This GDB was configured as "arm-none-linux-gnueabi"... (no debugging symbols found) (gdb) run Starting program: /share/MD0_DATA/optware/opt/sbin/dovecot -F (no debugging symbols found) /share/MD0_DATA/optware/opt/sbin/dovecot: error while loading shared libraries: libdovecot.so.0: cannot open shared object file: No such file or directory Program exited with code 0177. (gdb) bt full No stack. (gdb) quit By the way on a separate but related note, adding --enable-maintiner-mode introduced a new problem also relating to libdovecot.so.0.0.0 I'll refer to that in the post script. # ls -alh /opt/lib/dovecot/ drwxr-xr-x 8 admin administ 4.0k Aug 27 16:31 ./ drwxr-xr-x 37 admin administ 16.0k Aug 27 16:27 ../ drwxr-xr-x 2 avahi avahi 4.0k Nov 26 2009 .debug/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:27 auth/ drwxr-xr-x 2 admin administ 4.0k Aug 27 16:31 doveadm/ -rw-r--r-- 1 admin administ 678 Aug 27 16:27 dovecot-config drwxr-xr-x 3 admin administ 4.0k Aug 26 18:01 imap/ drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 lda/ -rw-r--r-- 1 admin administ 527.6k Jan 6 2011 lib01_acl_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib01_acl_plugin.la* -rwxr-xr-x 1 admin administ 56.3k Aug 27 16:27 lib01_acl_plugin.so* -rw-r--r-- 1 admin administ 70.5k Jan 6 2011 lib02_imap_acl_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_imap_acl_plugin.la* -rwxr-xr-x 1 admin administ 13.1k Aug 27 16:27 lib02_imap_acl_plugin.so* -rw-r--r-- 1 admin administ 69.9k Jan 6 2011 lib02_lazy_expunge_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib02_lazy_expunge_plugin.la* -rwxr-xr-x 1 admin administ 13.0k Aug 27 16:27 lib02_lazy_expunge_plugin.so* -rw-r--r-- 1 admin administ 51.3k Jan 6 2011 lib05_snarf_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib05_snarf_plugin.la* -rwxr-xr-x 1 admin administ 7.4k Aug 27 16:27 lib05_snarf_plugin.so* -rw-r--r-- 1 admin administ 443.4k Jan 6 2011 lib10_quota_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib10_quota_plugin.la* -rwxr-xr-x 1 admin administ 51.5k Aug 27 16:27 lib10_quota_plugin.so* -rw-r--r-- 1 admin administ 23.6k Jan 6 2011 lib11_imap_quota_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_imap_quota_plugin.la* -rwxr-xr-x 1 admin administ 8.3k Aug 27 16:27 lib11_imap_quota_plugin.so* -rw-r--r-- 1 admin administ 56.9k Jan 6 2011 lib11_trash_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib11_trash_plugin.la* -rwxr-xr-x 1 admin administ 9.9k Aug 27 16:27 lib11_trash_plugin.so* -rw-r--r-- 1 admin administ 71.8k Jan 6 2011 lib15_notify_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib15_notify_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib15_notify_plugin.so* -rw-r--r-- 1 admin administ 14.4k Jan 6 2011 lib20_autocreate_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_autocreate_plugin.la* -rwxr-xr-x 1 admin administ 5.3k Aug 27 16:27 lib20_autocreate_plugin.so* -rw-r--r-- 1 avahi avahi 10.9k Nov 26 2009 lib20_convert_plugin.a -rw-r--r-- 1 admin administ 62.7k Jan 6 2011 lib20_expire_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_expire_plugin.la* -rwxr-xr-x 1 admin administ 10.6k Aug 27 16:27 lib20_expire_plugin.so* -rw-r--r-- 1 admin administ 161.0k Jan 6 2011 lib20_fts_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_fts_plugin.la* -rwxr-xr-x 1 admin administ 29.4k Aug 27 16:27 lib20_fts_plugin.so* -rw-r--r-- 1 admin administ 59.4k Jan 6 2011 lib20_listescape_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_listescape_plugin.la* -rwxr-xr-x 1 admin administ 9.4k Aug 27 16:27 lib20_listescape_plugin.so* -rw-r--r-- 1 admin administ 62.8k Jan 6 2011 lib20_mail_log_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib20_mail_log_plugin.la* -rwxr-xr-x 1 admin administ 10.1k Aug 27 16:27 lib20_mail_log_plugin.so* -rw-r--r-- 1 avahi avahi 54.4k Nov 6 2010 lib20_mbox_snarf_plugin.a -rw-r--r-- 1 admin administ 450.8k Jan 6 2011 lib20_virtual_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_virtual_plugin.la* -rwxr-xr-x 1 admin administ 47.6k Aug 27 16:27 lib20_virtual_plugin.so* -rw-r--r-- 1 admin administ 115.1k Jan 6 2011 lib20_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 lib20_zlib_plugin.la* -rwxr-xr-x 1 admin administ 18.4k Aug 27 16:27 lib20_zlib_plugin.so* -rw-r--r-- 1 admin administ 181.7k Jan 6 2011 lib21_fts_squat_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib21_fts_squat_plugin.la* -rwxr-xr-x 1 admin administ 48.8k Aug 27 16:27 lib21_fts_squat_plugin.so* -rw-r--r-- 1 admin administ 22.0k Jan 6 2011 lib30_imap_zlib_plugin.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 lib30_imap_zlib_plugin.la* -rwxr-xr-x 1 admin administ 6.5k Aug 27 16:27 lib30_imap_zlib_plugin.so* -rw-r--r-- 1 admin administ 101.3k Jan 6 2011 libdovecot-lda.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-lda.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so -> libdovecot-lda.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-lda.so.0 -> libdovecot-lda.so.0.0.0* -rwxr-xr-x 1 admin administ 35.2k Aug 27 16:27 libdovecot-lda.so.0.0.0* -rw-r--r-- 1 admin administ 241.7k Jan 6 2011 libdovecot-login.a -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-login.la* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so -> libdovecot-login.so.0.0.0* lrwxrwxrwx 1 admin administ 25 Aug 27 16:31 libdovecot-login.so.0 -> libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 65.5k Aug 27 16:27 libdovecot-login.so.0.0.0* -rwxr-xr-x 1 admin administ 1.0k Aug 27 16:27 libdovecot-sql.la* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so -> libdovecot-sql.so.0.0.0* lrwxrwxrwx 1 admin administ 23 Aug 27 16:31 libdovecot-sql.so.0 -> libdovecot-sql.so.0.0.0* -rwxr-xr-x 1 admin administ 19.3k Aug 27 16:27 libdovecot-sql.so.0.0.0* -rw-r--r-- 1 admin administ 6.2M Jan 6 2011 libdovecot-storage.a -rwxr-xr-x 1 admin administ 1.1k Aug 27 16:27 libdovecot-storage.la* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so -> libdovecot-storage.so.0.0.0* lrwxrwxrwx 1 admin administ 27 Aug 27 16:31 libdovecot-storage.so.0 -> libdovecot-storage.so.0.0.0* -rwxr-xr-x 1 admin administ 737.5k Aug 27 16:27 libdovecot-storage.so.0.0.0* -rw-r--r-- 1 admin administ 1.8M Jan 6 2011 libdovecot.a -rwxr-xr-x 1 admin administ 1011 Aug 27 16:27 libdovecot.la* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so -> libdovecot.so.0.0.0* lrwxrwxrwx 1 admin administ 19 Aug 27 16:31 libdovecot.so.0 -> libdovecot.so.0.0.0* -rwxr-xr-x 1 admin administ 440.8k Aug 27 16:27 libdovecot.so.0.0.0* drwxr-xr-x 2 admin administ 4.0k Aug 26 18:01 pop3/ Everything seems to be in the right place. So I don't know what's wrong. Now on to my post script. This issue first appears when I try to package my freshly built Dovecot for installation on my arm powered nas. #make dovecot-ipk [...] test -z "/opt/include/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot" /usr/bin/install -c -m 644 settings.h settings-parser.h '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/include/dovecot' make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-settings' Making install in lib-dovecot make[4]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[5]: Entering directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' test -z "/opt/lib/dovecot" || /usr/bin/mkdir -p "~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot" /bin/sh ../../libtool --mode=install /usr/bin/install -c -s libdovecot.la '~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot' libtool: install: /usr/bin/install -c .libs/libdovecot.so.0.0.0 ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 libtool: install: strip --strip-unneeded ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0 strip: Unable to recognise the format of the input file `~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/libdovecot.so.0.0.0' make[5]: *** [install-pkglibLTLIBRARIES] Error 1 make[5]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[4]: *** [install-am] Error 2 make[4]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src/lib-dovecot' make[3]: *** [install-recursive] Error 1 make[3]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot/src' make[2]: *** [install-recursive] Error 1 make[2]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make[1]: *** [install-strip] Error 2 make[1]: Leaving directory `~/Projects/nslu2/optware/tsx09/builds/dovecot' make: *** [~/Projects/nslu2/optware/tsx09/builds/dovecot_2.0.13-2_arm.ipk] Error 2 So I went looking for libdovecot.so.0.0.0 and found, ls -ahl ~/Projects/nslu2/optware/tsx09/builds/dovecot-2.0.13-ipk/opt/lib/dovecot/: total 1.3M drwxr-xr-x 2 leonidis leonidis 4.0K Aug 27 17:07 . drwxr-xr-x 3 leonidis leonidis 4.0K Aug 27 17:07 .. -rw-r--r-- 1 leonidis leonidis 678 Aug 27 17:07 dovecot-config -rwxr-xr-x 1 leonidis leonidis 1.3M Aug 27 17:07 libdovecot.so.0.0.0 The other libraries appear to have been built and are waiting to be packaged up but ipackage doesn't seem to get that far. What this says about ipackage and how it might relate to my first problem I don't know. I apologise this all seems a bit like a broken record to me. -- Kind regards Stephen Feyrer.

3 2

Re: [Dovecot] File Permissions and delivery
by Timo Sirainen 29 Aug '11

29 Aug '11

On Fri, 2011-08-26 at 13:10 -0400, Simon Brereton wrote: > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the mails from courier seem to have all been 0770 as you can see). If I manually change the permission (to 0660) then I can see the mail in the MUA. If /var/spool/mail/virtual/domain.net/simon has 0770 permissions, the new mails should be delivered with 0660 permissions. (I don't remember if having g+s makes any difference in the directory like you have in the domain dir.) In any case, it would be better if mails were delivered as mailsystem:mailsystem 0600 since that's what you're reading them as. Unless you have some other good reason for requiring mailsystem group to be able to read them.

2 1

Re: [Dovecot] File Permissions and delivery
by Patrick Domack 29 Aug '11

29 Aug '11

My guess is your delivering email with postfix to the inbox, instead of using dovecot-lda. And something odd is going on with that postfix to get odd permissions like that. You probably needed to edit the postfix virtual deliever transport, or maybe you just forget to active the dovecot-lda (deliever) transport. Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: > Hi > > I'm very new to Dovecot (been using Courier for 5 years), but I've > been persuaded of the merits of Dovecot and since the server needs > upgrading that seems like the perfect time/excuse. > > On a test server, I set up postfix and installed Dovecot (running > 32-bit Debian Squeeze, installed from apt-get). I mirrored the mail > store (Maildirs, for historical reasons located under > /var/spool/mail/virtual/domain.com/user). Then I ran the courier > migration perl script and everything was fine and dandy. > > However, when I can to do the production migration, things weren't > as smooth. The new server is 64-bit (not that I think it makes a > difference, but if you're going to help me you should have all the > information :) > > Again, I installed Postfix and Dovecot > Took down the old server > Mirrored the Maildirs > Ran the migration script > Restarted everything > > At this point everything looked like it was ok. Mail was being > received and delivered to the Maildirs and the IMAP login was fine. > However, I noticed errors in the logs when retreiving mail with the > MUA along the lines of: > > Aug 26 16:59:48 mail dovecot: IMAP(simon(a)lydiard.net): > open(/var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM7… failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +r perm: > /var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM756462.mail.net,S=2461:2,) > > After messing around with the chown and chmod (even though these > were exactly the same as the test server) I finally discovered the > issue. > > mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 > 1314326000.V801I1666018M803015.mail.net,S=2461:2, > -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 > 1314326209.V801I1666019M447273.mail.net,S=2460:2, > -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 > 1314327630.V801I166601aM308173.mail.net,S=2477:2, > -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 > 1314328966.V801I166601bM756462.mail.net,S=2461:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 > 1314372534.V801I166601cM615258.mail.net,S=1097:2, > -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 > 1314372685.V801I166601dM264242.mail.net,S=1097:2, > > Mails are being delivered with 0600 permissions and not 0660 (the > mails from courier seem to have all been 0770 as you can see). If I > manually change the permission (to 0660) then I can see the mail in > the MUA. > > After thinking for a while it occurred to me that this is covered in > the LDA section. But making changes to the config file (either > permissions or UID/GID) doesn't seem to make a difference. (Yes, I > did restart postfix and dovecot after the changes). > > Anyway, here is my dovecot -n: > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_ca_file: /etc/ssl/keys/ca.crt > ssl_cert_file: /etc/ssl/keys/mail.net.crt > ssl_key_file: /etc/ssl/private/mail.net.key > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mailsystem > mail_location: maildir:/var/spool/mail/virtual/%d/%n > maildir_very_dirty_syncs: yes > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster@net > mail_plugins: quota > log_path: > info_log_path: > deliver_log_format: msgid=%m: %f: %$ > auth default: > mechanisms: plain login > user: mailsystem > verbose: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: static > args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n > allow_all_users=yes > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mailsystem > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: mailsystem > group: mailsystem > plugin: > quota: maildir > > As you can see, I tried to go 0660 in both client and master. > > The portion of my master.cf > 81 # SPB - Attempt to deliver with Dovecot LDA > 82 dovecot unix - n n - - pipe > 83 flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f > ${sender} -d ${user}@${nexthop} > > Is there anything else I should include? > > I'm pretty sure it's an error on my part. I'm just not clued up > enough to know where. > > My second problem is that I thought I had things back to where they > were before I messed with chown and chmod, but now I get this in the > logs > > dovecot: dovecot: Fatal: > chdir(/var/spool/mail/virtual/domain.net/simon//) failed: Permission > denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: > /var/spool/mail/virtual) > > But the ls on that is exactly the same as on the test server: > ls /var/spool/mail/virtual/ > total 44K > drwxrwS--- 11 postfix mailsystem 4.0K Aug 25 23:07 ./ > drwxrwsr-x 5 amavis mailsystem 4.0K Oct 19 2009 ../ > drwxrws--- 5 mailsystem mailsystem 4.0K Aug 26 02:33 domain.net/ > > So, now I'm stumped. I hope someone can spot the simple thing I've missed! > > Thanks. > > > Simon

2 3

[Dovecot] limiting number of incorrect logins per connection
by Alex 29 Aug '11

29 Aug '11

Hi Guys, Running Dovecot 2 on my server. It is regularly getting dictionary auth attacked. What I have noticed is that once connected to a pop3/imap login session, you can send endless incorrect usernames+passwords attempts. This is a problem for me... I use fail2ban to try and stop these script kiddies. The problem is that fail2ban detects the bad auths, firewalls the IP, however, since it's an "established" session, the attacker can keep authing away... It's only on a subsequent (new) connection that the firewalling will take effect. Why is there no configuration option such as "max auth attempts per connection"? This would be useful, so once the limit is reached, the connection is dropped. is there a patch/workaround?

7 11

Re: [Dovecot] Catch22: user needs space to fix out of space condition
by Joseph Tam 29 Aug '11

29 Aug '11

Thanks to all who've made suggestions. It seems removing dotlocks as a locking method is the way to go. There is another dotlock locking variant mentioned in 10-mail.conf that seems to address this situation for those that can't get away from dotlocks: # dotlock_try: Same as dotlock, but if it fails because of permissions or # because there isn't enough disk space, just skip it. mbox_write_locks = dotlock_try fcntl Joseph Tam <jtam.home(a)gmail.com>

3 4

[Dovecot] v2.0.14 released
by Timo Sirainen 29 Aug '11

29 Aug '11

http://dovecot.org/releases/2.0/dovecot-2.0.14.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.14.tar.gz.sig It's been a while since the previous release.. I've been a bit busy with my newly created Dovecot support company, but it was also summer and I wasted some time doing nothing useful. :) Most of my recent time has gone to adding new features to v2.1 branch. I'm planning on releasing v2.1.alpha1 somewhat soon and the final v2.1.0 sometimes later this year. This v2.0.14 release also contains one larger new feature: Ability to list and kick imap/pop3 proxy connections. This is done via a new "ipc" process where all proxying login processes connect to, which allows doveadm to communicate with them. If you're not using these features, this change (and its potential bugs) should be pretty much invisible. BTW. I know there are still mails I haven't read & replied to. I'll try to get to them eventually, but you may as well re-send anything you want me to read sooner rather than 6 months from now. Some of the largest changes since v2.0.13: + doveadm: Added support for running mail commands by proxying to another doveadm server. + Added "doveadm proxy list" and "doveadm proxy kick" commands to list/kick proxy connections (via a new "ipc" service). + Added "doveadm director move" to assign user from one server to another, killing any existing connections. + Added "doveadm director ring status" command. + userdb extra fields can now return name+=value to append to an existing name, e.g. "mail_plugins+= quota". - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied". - lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO. - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes. - ldap: Fixed random assert-crashing with with sasl_bind=yes. - Fixes to handling mail chroots - Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths. - zlib: Fixed reading concatenated .gz files.

1 0

[Dovecot] unlink_directory failed with 'Device or resource busy' on NFS
by 김기태 29 Aug '11

29 Aug '11

Hi, I'm getting some errors while I'm trying to move mailboxes from IMAP server to Outlook client. The error message is "IMAP command is failed" and I think it is useless. Here are the error messages written to server's syslog. imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/direct/.nfs00000000000033fd000… failed: Device or resource busy imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/IDC/.nfs000000000000709d000000… failed: Device or resource busy imap(name(a)domain.com<mailto:name@domain.com>): Error: unlink_directory(/data/domain.com/name/INBOX/OSSEC/.nfs000000000000709f0000… failed: Device or resource busy How can I solve this problem? I'm using Dovecot 2.0.13 and my configurations are: # 2.0.13: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.38-11-server x86_64 Ubuntu 11.04 listen = * mail_fsync = always mail_location = maildir:~:LAYOUT=fs mail_nfs_index = yes mail_nfs_storage = yes mmap_disable = yes passdb { args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ssl_cert = </etc/postfix/tls/smtpd.cert ssl_key = </etc/postfix/tls/smtpd.key userdb { args = uid=65534 gid=65534 home=/data/%Ld/%Ln driver = static }

2 1

[Dovecot] Pop3 hanging up after login.
by Fabio Catunda 29 Aug '11

29 Aug '11

Hi, I'm trying to implement a second dovecot server on a second machine to try to load balance IMAP/POP3 services. The first machine is already running and is working pretty well with dovecot-pop3d 1:1.0.15-2.3+lenny1. The new machine is running dovecot-pop3d 1:1.2.15-7 and accessing the existing maildirs over a NFS share on /mnt/mail. When I try to telnet localhost 110 on the new machine it just freezes after the "pass MySecret", like this: # telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Bem Vindo. user my.user(a)mydomain.com.br +OK pass MySecret ... (Nothing else happens) If I try to stop Dovecot with /etc/init.d/dovecot stop it stops, but the pop3 process keep running and the only way to stop it is with kill -9. On my log I only can see this: Aug 27 15:03:40 radamante dovecot: auth(default): client in: AUTH#0112#011PLAIN#011service=pop3#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=110#011rport=60421#011resp=<hidden> Aug 27 15:03:40 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): lookup service=dovecot Aug 27 15:03:40 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): #1/1 style=1 msg=Password: Aug 27 15:03:42 radamante dovecot: auth-worker(default): pam(my.user(a)mydomain.com.br,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) Aug 27 15:03:42 radamante dovecot: auth(default): cache(my.user(a)mydomain.com.br,127.0.0.1): miss Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): pass search: base=ou=Users, dc=mydomain, dc=com, dc=br scope=subtree filter=(&(mail=my.user(a)mydomain.com.br)) fields=mail,userPassword Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): result: mail(user@domain)=my.user@mydomain.com.br userPassword(password)=<hidden> Aug 27 15:03:42 radamante dovecot: auth(default): client out: OK#0112#011user=my.user@mydomain.com.br#011user@domain=my.user@mydomain.com.br Aug 27 15:03:42 radamante dovecot: auth(default): master in: REQUEST#0111#01130330#0112 Aug 27 15:03:42 radamante dovecot: auth(default): passwd(my.user(a)mydomain.com.br,127.0.0.1): lookup Aug 27 15:03:42 radamante dovecot: auth(default): passwd(my.user(a)mydomain.com.br,127.0.0.1): unknown user Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): user search: base=ou=Users, dc=mydomain, dc=com, dc=br scope=subtree filter=(&(mail=my.user(a)mydomain.com.br)) fields=homeDirectory,uidNumber,gidNumber Aug 27 15:03:42 radamante dovecot: auth(default): ldap(my.user(a)mydomain.com.br,127.0.0.1): result: uidNumber(uidNumber)=3478 gidNumber(gidNumber)=513 homeDirectory(homeDirectory)=/home/samba/my.user Aug 27 15:03:42 radamante dovecot: auth(default): master out: USER#0111#011my.user@mydomain.com.br#011uidNumber=3478#011gidNumber=513#011homeDirectory=/home/samba/my.user Aug 27 15:03:42 radamante dovecot: pop3-login: Login: user=<my.user(a)mydomain.com.br>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Aug 27 15:03:42 radamante dovecot: auth(default): new auth connection: pid=30330 Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): Effective uid=8, gid=8, home=(none) Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): maildir: data=/mnt/mail/mydomain.com.br/my.user/Maildir Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): maildir++: root=/mnt/mail/mydomain.com.br/my.user/Maildir, index=, control=, inbox=/mnt/mail/mydomain.com.br/my.user/Maildir Aug 27 15:03:42 radamante dovecot: POP3(my.user(a)mydomain.com.br): Namespace : Using permissions from /mnt/mail/mydomain.com.br/my.user/Maildir: mode=0700 gid=-1 By now I have no clue whats going on, any help is appreciated. I don't understand if the problem is the NFS share or if it's something with the new version of Dovecot on Debian. Some more info: # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 nfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Bem Vindo. login_process_per_connection: no login_chroot: no login_process_size: 128 login_processes_count: 8 max_mail_processes: 2048 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 1 last_valid_uid: 9999 last_valid_gid: 9999 mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:/mnt/mail/%Ld/%Ln/Maildir mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes maildir_copy_preserve_filename: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_process_size: 512 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail imap_client_workarounds(imap): delay-newmail imap_client_workarounds(pop3): imap_idle_notify_interval(default): 30 imap_idle_notify_interval(imap): 30 imap_idle_notify_interval(pop3): 120 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: default_realm: mydomain.com.br cache_size: 1024 cache_negative_ttl: 0 username_format: %Lu failure_delay: 3 debug: yes passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf root@radamante:/etc/dovecot# egrep -v '^#|^$' dovecot-ldap.conf hosts = 192.168.5.37 192.168.5.124 sasl_bind = no tls = no auth_bind = no ldap_version = 3 base = ou=Users, dc=mydomain, dc=com, dc=br deref = never scope = subtree user_attrs = homeDirectory=homeDirectory,uidNumber=uidNumber,gidNumber=gidNumber user_filter = (&(mail=%u)) pass_attrs = mail=user@domain,userPassword=password pass_filter = (&(mail=%u)) default_pass_scheme = CRYPT Thanks in advance.

2 1

[Dovecot] occasional dovecot crash, core captured but no symbol table info?
by John Clements 27 Aug '11

27 Aug '11

Dovecot is crashing occasionally for me. Today it crashed six times in quick succession, as I fired up a computer (Mac) I hadn't used in a while, and my mail application (Apple Mail) tried to synchronize many large mailboxes. The log entries look like this: Aug 26 10:26:15 computer dovecot: dovecot: child 23223 (imap) killed with signal 6 (core dumped) Aug 26 10:26:30 computer dovecot: IMAP(granitemon): Panic: file istream-raw-mbox.c: line 583 (istream_raw_mbox_get_body_size): assertion failed: (rstream->body_offset != (uoff_t)-1) Aug 26 10:26:30 computer dovecot: IMAP(granitemon): Raw backtrace: imap() [0x80f0e1e] -> imap() [0x80f0e82] -> imap() [0x80f0809] -> imap(istream_raw_mbox_get_body_size+0x407) [0x8092f47] -> imap(istream_raw_mbox_next+0x25) [0x8093025] -> imap(istream_raw_mbox_seek+0x1f3) [0x8093323] -> imap(mbox_file_seek+0x55) [0x8093745] -> imap() [0x8095852] -> imap() [0x8095c8d] -> imap(index_mail_set_seq+0x153) [0x80a35c3] -> imap() [0x8095fb9] -> imap(index_storage_search_next_nonblock+0x13b) [0x80a763b] -> imap(mailbox_search_next_nonblock+0x2a) [0x80b5c1a] -> imap(mailbox_search_next+0x28) [0x80b5c68] -> imap(imap_fetch_more+0x274) [0x806a4c4] -> imap() [0x8062665] -> imap() [0x806753f] -> imap(client_output+0xeb) [0x806862b] -> imap() [0x810007e] -> imap(io_loop_handler_run+0xd6) [0x80f9aa6] -> imap(io_loop_run+0x20) [0x80f8f20] -> imap(main+0x5b4) [0x8070f24] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe6) [0xb75f3c76] -> imap() [0x80603a1] Aug 26 10:26:30 computer dovecot: dovecot: child 23228 (imap) killed with signal 6 (core dumped) Here's the output of dovecot -n: clements@computer:/home/granitemon$ sudo dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.2 log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)brinckerhoff.org mail_plugins: sieve auth default: passdb: driver: pam userdb: driver: passwd ... this is the version associated with debian stable. Finally, since I had coredumps enabled, I'm in a position to provide 'bt full', but it looks like my binaries are stripped, so I'm not getting source code line numbers. granitemon@computer:~$ gdb /usr/lib/dovecot/imap ./core GNU gdb (GDB) 7.0.1-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/imap...(no debugging symbols found)...done. warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/i686/cmov/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libdl.so.2 Reading symbols from /usr/lib/libldap_r-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libldap_r-2.4.so.2 Reading symbols from /lib/i686/cmov/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/librt.so.1 Reading symbols from /lib/i686/cmov/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libc.so.6 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/liblber-2.4.so.2 Reading symbols from /lib/i686/cmov/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libresolv.so.2 Reading symbols from /usr/lib/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libsasl2.so.2 Reading symbols from /usr/lib/libgnutls.so.26...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgnutls.so.26 Reading symbols from /lib/i686/cmov/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libpthread.so.0 Reading symbols from /usr/lib/libtasn1.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libtasn1.so.3 Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /usr/lib/libgcrypt.so.11...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgcrypt.so.11 Reading symbols from /usr/lib/libgpg-error.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libgpg-error.so.0 Reading symbols from /lib/i686/cmov/libnss_compat.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_compat.so.2 Reading symbols from /lib/i686/cmov/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnsl.so.1 Reading symbols from /lib/i686/cmov/libnss_nis.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_nis.so.2 Reading symbols from /lib/i686/cmov/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/i686/cmov/libnss_files.so.2 Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `imap'. Program terminated with signal 6, Aborted. #0 0xb7788424 in __kernel_vsyscall () (gdb) bt full #0 0xb7788424 in __kernel_vsyscall () No symbol table info available. #1 0xb7607751 in raise () from /lib/i686/cmov/libc.so.6 No symbol table info available. #2 0xb760ab82 in abort () from /lib/i686/cmov/libc.so.6 No symbol table info available. #3 0x080f0e2e in ?? () No symbol table info available. #4 0x080f0e82 in ?? () No symbol table info available. #5 0x080f0809 in i_panic () No symbol table info available. #6 0x08092f47 in istream_raw_mbox_get_body_size () No symbol table info available. #7 0x08093025 in istream_raw_mbox_next () No symbol table info available. #8 0x08093323 in istream_raw_mbox_seek () No symbol table info available. #9 0x08093745 in mbox_file_seek () No symbol table info available. #10 0x08095852 in ?? () No symbol table info available. #11 0x08095c8d in ?? () No symbol table info available. #12 0x080a35c3 in index_mail_set_seq () No symbol table info available. #13 0x08095fb9 in ?? () No symbol table info available. #14 0x080a763b in index_storage_search_next_nonblock () No symbol table info available. #15 0x080b5c1a in mailbox_search_next_nonblock () No symbol table info available. #16 0x080b5c68 in mailbox_search_next () No symbol table info available. #17 0x0806a4c4 in imap_fetch_more () No symbol table info available. #18 0x08062665 in ?? () No symbol table info available. #19 0x0806753f in ?? () No symbol table info available. #20 0x0806862b in client_output () No symbol table info available. #21 0x0810007e in ?? () No symbol table info available. #22 0x080f9aa6 in io_loop_handler_run () ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #23 0x080f8f20 in io_loop_run () No symbol table info available. #24 0x08070f24 in main () No symbol table info available. (gdb) q Does anyone have any suggestions, here? Many thanks in advance; let me know if I can provide more information! All the best, John Clements

3 2

Re: [Dovecot] limiting number of incorrect logins per connection
by alex＠ahhyes.net 27 Aug '11

27 Aug '11

Thanks for that. I will change it and recompile. Sorry for the grumpyness yesterday in my posts. Was having a bad day. Is there any chance of there being an option on future versions that allow a number of failed auth attempts to be specified before dropping the connection? The other thread you mentioned, I see someone devised a small patch in c to add this functionality. It didnt look like a lot of code to do it. What are your thoughts? ----- Reply message ----- From: "Timo Sirainen" <tss(a)iki.fi> Date: Sat, Aug 27, 2011 02:30 Subject: [Dovecot] limiting number of incorrect logins per connection To: "Alex" <alex(a)ahhyes.net> Cc: <dovecot(a)dovecot.org> login-common/client-common.h : #define CLIENT_LOGIN_TIMEOUT_MSECS (MASTER_LOGIN_TIMEOUT_SECS*1000) So set it to (45*60*1000) But I don't think there's much of a practical difference between these. On 26.8.2011, at 12.07, Alex wrote: > 3 minutes! I think that's too long, how can I drop that down to about 45 seconds? > > > On Fri, 26 Aug 2011 11:44:45 +0300, Timo Sirainen wrote: >> On 26.8.2011, at 10.25, Alex wrote: >> >>> Running Dovecot 2 on my server. It is regularly getting dictionary auth attacked. What I have noticed is that once connected to a pop3/imap login session, you can send endless incorrect usernames+passwords attempts. This is a problem for me... I use fail2ban to try and stop these script kiddies. The problem is that fail2ban detects the bad auths, firewalls the IP, however, since it's an "established" session, the attacker can keep authing away... It's only on a subsequent (new) connection that the firewalling will take effect. >> >> Umm. If client hasn't managed to log in in 3 minutes, it's >> disconnected (no matter what it does with the connection). >

1 0

Re: [Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 26 Aug '11

26 Aug '11

Found it. :) Not a dovecot problem but a field in Icedove (Thunderbird variant) that had been automatically filled in by the software "to serve you better". It's on the Server Settings page as "User Name". "Never mind..." :) --hobie > Recapping: I'm working to set up Dovecot 2.0.13 along with some additional software (qmail, vpopmail, squirrelmail). It's working fine with squirrelmail now, but trying to connect over SSL with a Thunderbird variant and using IMAP, authentication fails because Dovecot is trying to match only the front part of the name (the user part), ignoring the domain name part of what it's being sent. So, instead of seeking to match virtual user: > > joe_blow(a)some_domain.com > > ...it's trying to match: > > joe_blow > > ...and failing, since joe_blow is not a system user but is a virtual host user. With Squirrelmail, connecting from localhost via non-SSL IMAP, the match is handled correctly, no problem. I've run the runtbird.sh script but no light was shed on this by the resulting output, all it said was that authentication was failing. > > Has anyone else encountered this problem? Any suggestions on how to fix it or where to look for additional info? Thanks kindly. > > --hobie > >> I tried the runtbird.sh script, hoping for more info - all it did was > show that auth is failing. I don't understand why Dovecot is separating the username from the domain name, and trying to match only on the username. Seems like there must be a config setting that affects this and that I'm overlooking. Thanks ahead for any help with this. >> >> --hobie >> >> hobie wrote earlier: >> >> ===== >> >> Attempting IMAP SSL login on new installation, using Icedove (Debain > Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? >> >> Log shows: >> >> Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug > 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth >> Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP > redacted]): lookup user=postmaster domain= >> >> Current config: >> >> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf >> # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 >> auth_debug = yes >> auth_verbose = yes >> disable_plaintext_auth = no >> first_valid_gid = 89 >> first_valid_uid = 89 >> mail_debug = yes >> mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir >> maildir_very_dirty_syncs = yes >> passdb { >> driver = vpopmail >> } >> protocols = imap pop3 >> ssl_cert = </etc/ssl/certs/dovecot.pem >> ssl_key = </etc/ssl/private/dovecot.pem >> userdb { >> args = quota_template=quota_rule=*:backend=%q >> driver = vpopmail >> } >> >> --hobie >> >> ===== >> > > > > > > >

1 0

[Dovecot] performance with 100k messages per folder
by Florin Andrei 26 Aug '11

26 Aug '11

dovecot-2.0-0.10.beta6.20100630.el6.x86_64 on CentOS 6. Virtual machine with 1 GB of RAM on VMWare. The configuration is more or less stock. Postfix receives then delivers to Dovecot. IMAP with mbox. Only one user account, but shared by several people via webmail (Roundcube webmail in Apache on the same machine). No other MUAs. 100k new messages per month, inbox is rotated monthly into a YYYYMM folder by a cron job. Only one monthly folder so far. Messages are never deleted (but I may start deleting old folders a year or two from now). This is mostly for reading, with occasional messages being forwarded. The email was pretty sluggish when logging in to the webmail interface. I asked the admin to increase the RAM from 0.5 to 1 GB. I changed mbox_very_dirty_syncs to yes. These measures seemed to accelerate it a lot. There's still a 1 sec pause when logging in, during which time the dovecot/imap process is using a lot of CPU. It looks like, as long as I give it enough RAM to keep the folders in memory, the whole thing should be fast enough, which is great. Any other tips-n-tricks to keep the email server speedy and the users happy? Should I worry about mbox_very_dirty_syncs as long as there are no other MUAs? -- Florin Andrei http://florin.myip.org/

2 1

[Dovecot] File Permissions and delivery
by Simon Brereton 26 Aug '11

26 Aug '11

Hi I'm very new to Dovecot (been using Courier for 5 years), but I've been persuaded of the merits of Dovecot and since the server needs upgrading that seems like the perfect time/excuse. On a test server, I set up postfix and installed Dovecot (running 32-bit Debian Squeeze, installed from apt-get). I mirrored the mail store (Maildirs, for historical reasons located under /var/spool/mail/virtual/domain.com/user). Then I ran the courier migration perl script and everything was fine and dandy. However, when I can to do the production migration, things weren't as smooth. The new server is 64-bit (not that I think it makes a difference, but if you're going to help me you should have all the information :) Again, I installed Postfix and Dovecot Took down the old server Mirrored the Maildirs Ran the migration script Restarted everything At this point everything looked like it was ok. Mail was being received and delivered to the Maildirs and the IMAP login was fine. However, I noticed errors in the logs when retreiving mail with the MUA along the lines of: Aug 26 16:59:48 mail dovecot: IMAP(simon(a)lydiard.net): open(/var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM7… failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +r perm: /var/spool/mail/virtual/domain.net/simon/cur/1314328966.V801I166601bM756462.mail.net,S=2461:2,) After messing around with the chown and chmod (even though these were exactly the same as the test server) I finally discovered the issue. mail:~# ls /var/spool/mail/virtual/domain.net/simon/new/ -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:33 1314326000.V801I1666018M803015.mail.net,S=2461:2, -rwxrwx--- 1 postfix mailsystem 2.5K Aug 26 03:36 1314326209.V801I1666019M447273.mail.net,S=2460:2, -rw-rw---- 1 postfix mailsystem 2.5K Aug 26 04:00 1314327630.V801I166601aM308173.mail.net,S=2477:2, -rw------- 1 postfix mailsystem 2.5K Aug 26 04:22 1314328966.V801I166601bM756462.mail.net,S=2461:2, -rw------- 1 postfix mailsystem 1.1K Aug 26 16:28 1314372534.V801I166601cM615258.mail.net,S=1097:2, -rw------- 1 postfix mailsystem 1.1K Aug 26 16:31 1314372685.V801I166601dM264242.mail.net,S=1097:2, Mails are being delivered with 0600 permissions and not 0660 (the mails from courier seem to have all been 0770 as you can see). If I manually change the permission (to 0660) then I can see the mail in the MUA. After thinking for a while it occurred to me that this is covered in the LDA section. But making changes to the config file (either permissions or UID/GID) doesn't seem to make a difference. (Yes, I did restart postfix and dovecot after the changes). Anyway, here is my dovecot -n: mail:~# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/keys/ca.crt ssl_cert_file: /etc/ssl/keys/mail.net.crt ssl_key_file: /etc/ssl/private/mail.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mailsystem mail_location: maildir:/var/spool/mail/virtual/%d/%n maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster@net mail_plugins: quota log_path: info_log_path: deliver_log_format: msgid=%m: %f: %$ auth default: mechanisms: plain login user: mailsystem verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: static args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mailsystem master: path: /var/run/dovecot/auth-master mode: 432 user: mailsystem group: mailsystem plugin: quota: maildir As you can see, I tried to go 0660 in both client and master. The portion of my master.cf 81 # SPB - Attempt to deliver with Dovecot LDA 82 dovecot unix - n n - - pipe 83 flags=DRhu user=mailsystem argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} Is there anything else I should include? I'm pretty sure it's an error on my part. I'm just not clued up enough to know where. My second problem is that I thought I had things back to where they were before I messed with chown and chmod, but now I get this in the logs dovecot: dovecot: Fatal: chdir(/var/spool/mail/virtual/domain.net/simon//) failed: Permission denied (euid=999(mailsystem) egid=115(mailsystem) missing +x perm: /var/spool/mail/virtual) But the ls on that is exactly the same as on the test server: ls /var/spool/mail/virtual/ total 44K drwxrwS--- 11 postfix mailsystem 4.0K Aug 25 23:07 ./ drwxrwsr-x 5 amavis mailsystem 4.0K Oct 19 2009 ../ drwxrws--- 5 mailsystem mailsystem 4.0K Aug 26 02:33 domain.net/ So, now I'm stumped. I hope someone can spot the simple thing I've missed! Thanks. Simon

1 0

Re: [Dovecot] limiting number of incorrect logins per connection
by alex＠ahhyes.net 26 Aug '11

26 Aug '11

Hi, I saw that thread already, however it does not offer any solution that can be applied to dovecot directly. That thread has also been asleep for well over a year. It couldnt be that hard for the author to implement this function. It would only require a few lines of code. ----- Reply message ----- From: "Robert Schetterer" <robert(a)schetterer.org> Date: Fri, Aug 26, 2011 17:59 Subject: [Dovecot] limiting number of incorrect logins per connection To: <dovecot(a)dovecot.org> Am 26.08.2011 09:25, schrieb Alex: > Hi Guys, > > Running Dovecot 2 on my server. It is regularly getting dictionary auth > attacked. What I have noticed is that once connected to a pop3/imap > login session, you can send endless incorrect usernames+passwords > attempts. This is a problem for me... I use fail2ban to try and stop > these script kiddies. The problem is that fail2ban detects the bad > auths, firewalls the IP, however, since it's an "established" session, > the attacker can keep authing away... It's only on a subsequent (new) > connection that the firewalling will take effect. > > Why is there no configuration option such as "max auth attempts per > connection"? This would be useful, so once the limit is reached, the > connection is dropped. > > is there a patch/workaround? > there where equal questions in the past i.e read http://comments.gmane.org/gmane.mail.imap.dovecot/46204 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

Re: [Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 26 Aug '11

26 Aug '11

Recapping: I'm working to set up Dovecot 2.0.13 along with some additional software (qmail, vpopmail, squirrelmail). It's working fine with squirrelmail now, but trying to connect over SSL with a Thunderbird variant and using IMAP, authentication fails because Dovecot is trying to match only the front part of the name (the user part), ignoring the domain name part of what it's being sent. So, instead of seeking to match virtual user: joe_blow(a)some_domain.com ...it's trying to match: joe_blow ...and failing, since joe_blow is not a system user but is a virtual host user. With Squirrelmail, connecting from localhost via non-SSL IMAP, the match is handled correctly, no problem. I've run the runtbird.sh script but no light was shed on this by the resulting output, all it said was that authentication was failing. Has anyone else encountered this problem? Any suggestions on how to fix it or where to look for additional info? Thanks kindly. --hobie > I tried the runtbird.sh script, hoping for more info - all it did was show that auth is failing. I don't understand why Dovecot is separating the username from the domain name, and trying to match only on the username. Seems like there must be a config setting that affects this and that I'm overlooking. Thanks ahead for any help with this. > > --hobie > > hobie wrote earlier: > > ===== > > Attempting IMAP SSL login on new installation, using Icedove (Debain Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? > > Log shows: > > Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth > Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP redacted]): lookup user=postmaster domain= > > Current config: > > # 2.0.13: /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > auth_debug = yes > auth_verbose = yes > disable_plaintext_auth = no > first_valid_gid = 89 > first_valid_uid = 89 > mail_debug = yes > mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir > maildir_very_dirty_syncs = yes > passdb { > driver = vpopmail > } > protocols = imap pop3 > ssl_cert = </etc/ssl/certs/dovecot.pem > ssl_key = </etc/ssl/private/dovecot.pem > userdb { > args = quota_template=quota_rule=*:backend=%q > driver = vpopmail > } > > --hobie > > ===== >

1 0

[Dovecot] Dovecot 2.0.13 How to use POP3 order
by Nick Celebic 26 Aug '11

26 Aug '11

I saw a few commits for 2.0.13 that added MAIL_FETCH_POP3_ORDER, but I haven't been able to find any information on how to use it. I'm migrating from a Merak mail server into dovecot and all the email can be copied directly into a Maildir/cur directory. The filenames are just the timestamps. When I check with dovecot pop3, they seem to be randomly ordered. I'm hoping this provides a solution where it will look at the file list or stat order. If this isn't possible, can someone tell me how I can change the order in which dovecot lists mails in a UIDL in POP3? Thanks, Nick Celebic

2 1

[Dovecot] Catch22: user needs space to fix out of space condition
by Joseph Tam 25 Aug '11

25 Aug '11

A mail user reported that he filled up his INBOX (despite reminders he was approaching his filesystem quota), and furthermore, he could not fix the situation because he couldn't expunge message he marked for deletion. The dovecot logs revealed the cause dovecot: imap(user): Error: open(/var/mail/user.lock) failed: Disc quota exceeded This created an impasse where a user cannot free space because he needs to create a lock file that cannot be created because he needs free space. Is there any way out of this without administrator intervention? Joseph Tam <jtam.home(a)gmail.com>

5 4

[Dovecot] dovecot and maillists problem
by Костырев Александр Алексеевич 25 Aug '11

25 Aug '11

Hello there! I have a little trouble with using dovecot as lmtp and maillists. I use dovecot 2.0.13 with exim 4.72 on Debian 6.0. (All stuff at one host). info of maillists is store in mysql table, for example: +---------+-------------------------------------------------------------------------------------------------+ | name | recipients | +---------+-------------------------------------------------------------------------------------------------+ | Hab_Tax | 2504000067-253601001.253809737993@25.example.org,2721097514-272101001.271300057673@.example.org | +---------+-------------------------------------------------------------------------------------------------+ The problem is: When I send a letter to short maillist (as above) it get the same ID and stored only once in the maildir of one user who is the member of that maillist - that's ok, but When I send a letter to maillist with a large number of recipients it occurred that it's saved more than one, because of the headers added by dovecot lmtp (I've changed host name): diff letter_in_one_user/1314238006.M841940P6916.pink\,S\=12778136\,W\=12953189 letler_in_second_user/new/1314237993.M460165P6916.pink\,S\=12778136\,W\=12953189 3,4c3,4 < by pink.atlas-2.ru (Dovecot) with LMTP id 6UiGJBWuVU4EGwAA1nFjLA < ; Thu, 25 Aug 2011 13:06:46 +1100 --- > by pink.atlas-2.ru (Dovecot) with LMTP id VUeGJBWuVU4EGwAA1nFjLA > ; Thu, 25 Aug 2011 13:06:29 +1100 It's the same letter accept the date and id. What I get in logs is: I see that exim send letters in maillist with one and the same id: ...skipped... 13:06:46 1QwPKe-0001nU-U5 <2502(a)example.org> ... 13:06:47 1QwPKe-0001nU-U5 <2502(a)example.org> ... But in logs of dovecot I see: 13:06:14 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: wUWGJBWuVU4EGwAA1nFjLA: 13:06:18 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: wEWGJBWuVU4EGwAA1nFjLA: 13:06:22 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: JkaGJBWuVU4EGwAA1nFjLA: 13:06:26 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: i0aGJBWuVU4EGwAA1nFjLA: 13:06:30 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: 8EaGJBWuVU4EGwAA1nFjLA: 13:06:34 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: VUeGJBWuVU4EGwAA1nFjLA: 13:06:37 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: ukeGJBWuVU4EGwAA1nFjLA: 13:06:42 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: H0iGJBWuVU4EGwAA1nFjLA: 13:06:46 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: hEiGJBWuVU4EGwAA1nFjLA: 13:06:47 msgid=<E1QwPKe-0001nU-U5(a)pink.example.org>: 6UiGJBWuVU4EGwAA1nFjLA: Also in dovecot log I've noticed that: at first auth is searching info in sql for 200 users then log continues with lmtp's info then auth is searching info in sql for another portion of users and this loop in log continues. Dovecot.conf: http://pastebin.com/ueCBU3bP dovecot.sql: http://pastebin.com/kqCq52mC dovecot.log http://pastebin.com/YiyMWpx1 exim.conf: http://pastebin.com/F4MNQkAx exim.log: http://pastebin.com/wn83TZpX

2 6

[Dovecot] On IMAP vhost login, only Username being used
by hobie＠rumormillnews.com 25 Aug '11

25 Aug '11

Attempting IMAP SSL login on new installation, using Icedove (Debain Thunderbird variant), login fails. Logs show Dovecot attempting to match username only, not username with domain name, on Vpopmail user, so of course no match. Tried with '@' in full username, also with '%'. What's missing? Log shows: Aug 24 19:30:48 debian dovecot: auth: Debug: client in: CONT<hidden> Aug 24 19:30:48 debian dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Aug 24 19:30:48 debian dovecot: auth: Debug: vpopmail(postmaster,[IP redacted]): lookup user=postmaster domain= Current config: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 auth_debug = yes auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 mail_debug = yes mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir maildir_very_dirty_syncs = yes passdb { driver = vpopmail } protocols = imap pop3 ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } --hobie

2 1

[Dovecot] Post-login scripting with virtual users
by Mark Willcox 25 Aug '11

25 Aug '11

I am running Dovecot 2.0.13 on Fedora 15. I have migrated from a bincimap installation using checklocalpwd. All email is in folders owned by a unprivileged user, popuser. The email users are entirely virtual and have no relationship to actual linux users. My userdb calls return the UID and GID of popuser and all goes well retrieving the mail via POP3 and IMAP. I am trying to implement a Post-login script to register the IP address that the authentication came from. Dovecot seems to be trying to execute the script as the email non-user, which does not work. I have specified that the script should be run as popuser, but it still runs as devnull(a)dhzone.com for instance. Everything up top that point seems to be happening happily under popuser. I added a "user = popuser" directive and it had no effect that I could see. I know that dovecot read the directive because I changed it to "user = 555" and dovecot would not run because "555" is not a user. I tried adding a "User = popuser" within the unix_listener but that also had no effect. Any ideas? Thank you! ------------------------------ Here is my dovecot -n: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.40.3-0.fc15.x86_64 x86_64 Fedora release 15 (Lovelock) auth_debug = yes disable_plaintext_auth = no mail_debug = yes mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocols = imap pop3 service imap-postpop { executable = script-login /usr/local/bin/set_postpop unix_listener imap-postpop { } user = popuser } service imap { executable = imap imap-postpop } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } ----------------------------------------------------- The dovecot-sql.conf.ext looks like this: driver = mysql connect = host=localhost dbname=webmail user=xxxx password=xxxx password_query = SELECT id AS user, IF( clear IS NULL, CONCAT('{CRYPT}',crypto), CONCAT('{PLAIN}',clear)) AS password \ FROM users WHERE id = '%u' user_query = SELECT home, uid, gid \ FROM users WHERE id = '%u' ------------------------------- >From the maillog: Aug 24 13:01:57 callisto dovecot: auth: Debug: client out: OK#0111#011user=devnull(a)dhzone.com Aug 24 13:01:57 callisto dovecot: auth: Debug: master in: REQUEST... Aug 24 13:01:57 callisto dovecot: auth: Debug: sql(devnull(a)dhzone.com,75.221.209.232): SELECT home, uid, gid FROM users WHERE id = 'devnull(a)dhzone.com' Aug 24 13:01:57 callisto dovecot: auth: Debug: master out: USER#0114007264257#011devnull@dhzone.com#011home=/var/qmail/popbox/dhzone-com/devnull#011uid=555#011gid=555 Aug 24 13:01:57 callisto dovecot: imap-login: Login: user=<devnull(a)dhzone.com>, method=PLAIN, rip=75.221.209.232, lip=76.76.59.241, mpid=667 Aug 24 13:01:57 callisto dovecot: imap-postpop: Error: script-login: Error: user devnull(a)dhzone.com: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied Aug 24 13:01:57 callisto dovecot: imap-postpop: Error: script-login: Fatal: Internal error occurred. Refer to server log for more information. Aug 24 13:01:57 callisto dovecot: imap(devnull(a)dhzone.com): Post-login script denied access to user devnull(a)dhzone.com Aug 24 13:01:57 callisto dovecot: log: Error: service(imap-postpop): child 668 returned error 89 (Fatal failure) Aug 24 13:02:03 callisto dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) -- _________________ Mark Willcox Data Helper, Inc.

3 9

[Dovecot] Dovecot rejecting Vpopmail User 89
by hobie＠rumormillnews.com 24 Aug '11

24 Aug '11

I'm working to get Dovecot 2.0.13 working along with qmail, Vpopmail and Squirrelmail on a Debian 6.0.2 system, Dovecot compiled, not from a package. Vpopmail has a widely known assigned user/group ID of 89 and is the owner of all the mail folders. Regardless of value of first_valid_uid (1, 89, other), Dovecot denies Squirrelmail connection, saying it can't allow access to UID 89. "Couldn't drop privileges", it says. I'd be grateful for fixes, suggestions, or a pointer to an existing answer to this problem. Thanks ahead. :) Presently dovecot -n shows: # 2.0.13: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 auth_debug = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir maildir_very_dirty_syncs = yes passdb { driver = vpopmail } protocols = imap pop3 ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } --hobie

3 5

Re: [Dovecot] Dovecot rejecting Vpopmail User 89
by Rick Romero 24 Aug '11

24 Aug '11

Enable auth_verbose and check the logs. But I'm pretty sure that means Dovecot can't change to the Maildir folder. I assume the user's folder is owned by vpopmail:vchkpw? Is the Maildir NFS mounted or local? Rick Quoting hobie(a)rumormillnews.com: > Thanks, Rick. :) Changed first/last uid/gid so all show 89 and restarted > Dovecot, no change. Telnetting from remote or from localhost, Dovecot > closes the connection immediately after password is sent. (?) > > --hobie > >> Quoting hobie(a)rumormillnews.com: >> >>> I'm working to get Dovecot 2.0.13 working along with qmail, Vpopmail and >>> Squirrelmail on a Debian 6.0.2 system, Dovecot compiled, not from a >>> package. >>> >>> Vpopmail has a widely known assigned user/group ID of 89 and is the >>> owner >>> of all the mail folders. >>> >>> Regardless of value of first_valid_uid (1, 89, other), Dovecot denies >>> Squirrelmail connection, saying it can't allow access to UID 89. >>> "Couldn't >>> drop privileges", it says. I'd be grateful for fixes, suggestions, or a >>> pointer to an existing answer to this problem. Thanks ahead. :) >>> >> >> Here's mine - I set first and last uid AND gid. >> Can you telnet to port 110 and test? >> >> USER username >> PASS password >> LIST >> >> >> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf >> # OS: FreeBSD 8.2-RELEASE amd64 >> auth_mechanisms = plain login digest-md5 cram-md5 >> auth_username_translation = %@ >> auth_verbose = yes >> base_dir = /var/run/dovecot/ >> default_login_user = vpopmail >> disable_plaintext_auth = no >> first_valid_gid = 89 >> first_valid_uid = 89 >> last_valid_gid = 89 >> last_valid_uid = 89 >> # run under tcpserver >> log_path = /dev/stderr >> login_greeting = Ready. >> mail_fsync = never >> mail_plugins = " quota zlib" >> mail_privileged_group = mail >> namespace { >> inbox = yes >> location = >> prefix = >> separator = . >> } >> namespace { >> hidden = yes >> inbox = no >> list = no >> location = >> prefix = INBOX. >> separator = . >> } >> passdb { >> driver = vpopmail >> } >> plugin { >> quota = maildir >> } >> protocols = imap pop3 >> service anvil { >> client_limit = 2000 >> } >> service auth { >> unix_listener auth-master { >> mode = 0600 >> } >> } >> service imap-login { >> client_limit = 384 >> process_limit = 512 >> process_min_avail = 25 >> service_count = 0 >> } >> service imap-postlogin { >> executable = script-login rawlog >> /usr/local/etc/dovecot/lastauth-imap.sh >> user = vpopmail >> } >> service imap { >> executable = /usr/local/libexec/dovecot/imap >> } >> service pop-postlogin { >> executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh >> user = vpopmail >> } >> service pop3-login { >> client_limit = 384 >> process_limit = 512 >> process_min_avail = 25 >> service_count = 0 >> } >> service pop3 { >> executable = /usr/local/libexec/dovecot/pop3 >> } >> shutdown_clients = no >> ssl_cert = </etc/ssl/mail.pem >> ssl_key = </etc/ssl/mail.key >> ssl_key_password = password >> userdb { >> driver = vpopmail >> } >> verbose_proctitle = yes >> protocol imap { >> auth_socket_path = /var/run/dovecot/auth-master >> imap_client_workarounds = delay-newmail tb-extra-mailbox-sep >> mail_max_userip_connections = 10 >> mail_plugins = " quota zlib imap_zlib quota imap_quota" >> } >> protocol pop3 { >> auth_socket_path = /var/run/dovecot/auth-master >> mail_max_userip_connections = 10 >> mail_plugins = quota >> pop3_client_workarounds = outlook-no-nuls oe-ns-eoh >> pop3_uidl_format = %08Xu%08Xv >> >> >>

1 0

[Dovecot] BUG - lmtp multiple recipients fail - setuid issue?
by Boris Lordis 24 Aug '11

24 Aug '11

Hello, I am not having much luck on this particular issue so I wanted to make sure that this is registered as a potential bug. The essence of the problem is that for a given message addressed to multiple users, lmtp writes the message correctly to the first addressed user only, then subsequent user writes fail as the lmtp process doesn't run with the proper permissions and tries to link files from different users as part of its message writing. Below you can see that lmtp (running with steve's id, who was the first listed recipient) is trying to link a file in jerry's inbox meeting with failure: Jul 27 11:24:42 testmailserver dovecot: lmtp(12412, steve): Error: link(/spool/mail/j/jerry/mail/INBOX/u.20423, /spool/mail/s/steve/mail/INBOX/.temp.1311791081.P12412Q2M989550.testmailserver.) failed: Permission denied Jul 27 11:24:42 testmailserver dovecot: lmtp(12412, steve): +1IXBeVXME58MAAARoVNxQ: msgid <201107271824.p6RIOPa5020900 at backup.>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2011-07-27 11:24:41] Best regards, -Boris I am using version 2.0.13. dovecot -n shows this: # 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.i686 i686 CentOS Linux release 6.0 (Final) ext4 auth_debug = yes auth_master_user_separator = * auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes mail_debug = yes mail_location = sdbox:/spool/mail/%1Ln/%Ln/mail:INBOX=/spool/mail/%1Ln/%Ln/mail/INBOX mbox_write_locks = fcntl passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = failure_show_msg=yes driver = pam } plugin { autocreate = INBOX autosubscribe = INBOX } service lmtp { inet_listener ltmp { port = 24 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = home=/spool/mail/%1Ln/%Ln driver = passwd } protocol lmtp { mail_plugins = " autocreate" }

2 2

[Dovecot] SiS
by Guy Deleeuw 24 Aug '11

24 Aug '11

Hello, SiS is implemented and stable in the last version ? Best Regards Guy

1 0

[Dovecot] Attachments not removed from single store
by Karsten Becker 24 Aug '11

24 Aug '11

Hi. Well, I've the next problem. I turned on the new attachment de-duplication stuff in the configuration. If I send an attchment between two accounts on my test system, the attment gets saved ion the configured mail_attachment_dir. But... if I delete it from the senders Send folder and the receivers Inbox (and of course empty Trash afterwards in both cases), the hashes and the attachment are not deleted in mail_attachment_dir (as I would expect). Is this a bug, or have I misunderstood the concept of storing attachments? Regards Karsten ------------------------------------------------ > # 2.0.13: /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-33-server x86_64 Ubuntu 10.04.3 LTS ext4 > doveconf: Warning: Dovecot was last started using /etc/dovecot/dovecot.conf, but this config is /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > auth_cache_negative_ttl = 0 > auth_cache_size = 10 M > auth_mechanisms = plain login > base_dir = /usr/local/dovecot/var/run/dovecot > dict { > acl = mysql:/etc/dovecot/dovecot-dict-shared-mailboxes-mysql.conf > expire = mysql:/etc/dovecot/dovecot-dict-expire-mysql.conf > quota = mysql:/etc/dovecot/dovecot-dict-quota-mysql.conf > } > log_timestamp = "%Y-%m-%d %H:%M:%S " > login_greeting = Company Institute > mail_attachment_dir = /srv/vmail/attachments > mail_attachment_hash = %{sha256} > mail_cache_min_mail_count = 2 > mail_debug = yes > mail_location = mdbox:/srv/vmail/user-mailboxes/%d/%n > mail_plugins = acl expire quota > mailbox_idle_check_interval = 1 mins > namespace { > inbox = yes > location = > prefix = > separator = / > subscriptions = yes > type = private > } > namespace { > list = children > location = mdbox:/srv/vmail/user-mailboxes/%%d/%%n > prefix = Users/%%d/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace { > list = children > location = maildir:/srv/vmail/public_folders:INDEX=/srv/vmail/user-mailboxes/%d/%n/public_folders-seen:LAYOUT=fs > prefix = Folders/ > separator = / > subscriptions = no > type = public > } > passdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = proxy::acl > expire = Trash > expire2 = Trash/* > expire3 = Spam > expire4 = Spam/* > expire5 = Junk > expire6 = Junk/* > expire_dict = proxy::expire > quota = dict:User quota::proxy::quota > quota_rule = *:storage=10485760 > quota_rule2 = Trash:storage=+1048576 > quota_warning = storage=95%% quota-warning 95 %u > quota_warning2 = storage=80%% quota-warning 80 %u > } > postmaster_address = postmaster(a)company.eu > protocols = imap pop3 > service auth { > unix_listener /var/spool/postfix/private/auth_dovecot { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-master { > mode = 0600 > user = vmail > } > user = root > } > service dict { > unix_listener dict { > mode = 0600 > user = vmail > } > } > service imap-login { > inet_listener imaps { > port = 993 > ssl = yes > } > process_min_avail = 2 > } > service imap { > vsz_limit = 512 M > } > service pop3-login { > inet_listener pop3s { > port = 995 > ssl = yes > } > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > user = vmail > } > ssl = required > ssl_cert = </etc/postfix/ssl/mail01.compdmz.local.crt > ssl_key = </etc/postfix/ssl/mail01.compdmz.local.key > userdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > verbose_proctitle = yes > protocol lda { > auth_socket_path = auth-master > postmaster_address = postmaster(a)company.eu > } > protocol imap { > imap_client_workarounds = delay-newmail tb-lsub-flags tb-extra-mailbox-sep > imap_max_line_length = 128 k > mail_plugins = acl expire quota imap_acl imap_quota > } > protocol pop3 { > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > }

2 2

[Dovecot] Bug report v2.0.13 - CentOS x86_64 - NFS - mbox
by Kostas Zorbadelos 24 Aug '11

24 Aug '11

Greetings to all. It's my first post to the list. We just completed a migration from qpopper to dovecot for our IMAP and POP3 services. We have a rather large mail environment (we are the biggest provider in Greece). So, here are the details: - Keep getting errors like these in our production environment Jul 22 00:18:21 pop01 dovecot: master: Error: service(pop3): child 4078 killed with signal 11 (core dumps disabled) Jul 22 00:19:31 pop03 dovecot: master: Error: service(pop3): child 18849 killed with signal 11 (core dumps disabled) --------------------------------------------------------------------- dovecot -n output --------------------------------------------------------------------- /opt/dovecot/sbin/dovecot -n # 2.0.13: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.22.el5 x86_64 CentOS release 5.5 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 5 M auth_cache_ttl = 10 mins auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 disable_plaintext_auth = no first_valid_uid = 200 listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = <COMPANY> ready mail_access_groups = mail otemail disk root mail_fsync = always mail_location = mbox:INDEX=/var/index/dovecot/%2.16Hn/%2.254Hn/%u mail_nfs_storage = yes mbox_lock_timeout = 2 mins mbox_min_index_size = 200 k mbox_read_locks = dotlock_try fcntl mbox_write_locks = dotlock_try fcntl passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap pop3 service auth-worker { user = dovenull } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl = no userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv } I enabled core dumps in one of our backend servers and here is the relevant gdb trace: [root@pop08 ~]# gdb /opt/dovecot/libexec/dovecot/pop3 <path_to_core_file>/core.9273 GNU gdb (GDB) Red Hat Enterprise Linux (7.0.1-32.el5_6.2) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /opt/dovecot/libexec/dovecot/pop3...(no debugging symbols found)...done. Reading symbols from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0...(no debugging symbols found)...done. Loaded symbols for /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /opt/dovecot/lib/dovecot/libdovecot.so.0...(no debugging symbols found)...done. Loaded symbols for /opt/dovecot/lib/dovecot/libdovecot.so.0 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpthread.so.0 Core was generated by `dovecot/pop3'. Program terminated with signal 11, Segmentation fault. #0 0x00002b52e1027e54 in istream_raw_mbox_get_start_offset () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 (gdb) bt full #0 0x00002b52e1027e54 in istream_raw_mbox_get_start_offset () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #1 0x00002b52e102b759 in ?? () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0x00002b52e100a2c0 in index_mail_expunge () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0x0000000000405e9c in client_update_mails () No symbol table info available. #4 0x00000000004061c1 in client_command_execute () No symbol table info available. #5 0x00000000004045b9 in client_handle_input () No symbol table info available. #6 0x00002b52e12df698 in io_loop_call_io () from /opt/dovecot/lib/dovecot/libdovecot.so.0 No symbol table info available. #7 0x00002b52e12e09d5 in io_loop_handler_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 No symbol table info available. #8 0x00002b52e12df62d in io_loop_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 No symbol table info available. #9 0x00002b52e12cdf13 in master_service_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 No symbol table info available. #10 0x0000000000403994 in main () No symbol table info available. (gdb) All traces of the crashes are identical, that is #0 0x00002b52e1027e54 in istream_raw_mbox_get_start_offset () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 #1 0x00002b52e102b759 in ?? () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 #2 0x00002b52e100a2c0 in index_mail_expunge () from /opt/dovecot/lib/dovecot/libdovecot-storage.so.0 #3 0x0000000000405e9c in client_update_mails () #4 0x00000000004061c1 in client_command_execute () #5 0x00000000004045b9 in client_handle_input () #6 0x00002b52e12df698 in io_loop_call_io () from /opt/dovecot/lib/dovecot/libdovecot.so.0 #7 0x00002b52e12e09d5 in io_loop_handler_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 #8 0x00002b52e12df62d in io_loop_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 #9 0x00002b52e12cdf13 in master_service_run () from /opt/dovecot/lib/dovecot/libdovecot.so.0 #10 0x0000000000403994 in main () We have mboxes over NFS and we also have an ldap user backend. For now, I do not have a scenario that reproduces the problem. Any idea, or input are highly appreciated. Of course I can provide any information requested (without exposing restricted company or client data) to help trace the problem and lead to the solution. Thanks and keep up the good work! Regards, Kostas Zorbadelos

3 8

[Dovecot] Cannot delete subfolder in public folder
by Karsten Becker 24 Aug '11

24 Aug '11

Hi there, I have the problem that I'm unable to delete a subfolder (again) I created within a public folder. I've already read about configuring Thunderbird to delete immediately - which I did. But it still doesn't work. I delete -> the folder is gone -> I get a TB error message saying "The folder doesn't exist" -> after restarting TB the folders appear again. Maybe someone has a hint. My tip is that I may have a wrong understanding of the ACL mechanism... :-( Regards from Berlin/Germany Karsten ------------------------ Log: > Aug 24 00:01:37 mail01 dovecot: imap(karsten.becker(a)company.eu): Debug: acl vfile: file /etc/dovecot/global-acls//.DEFAULT not found > Aug 24 00:01:37 mail01 dovecot: imap(karsten.becker(a)company.eu): Debug: acl vfile: file /srv/vmail/user-mailboxes/company.eu/karsten.becker/mailboxes/dovecot-acl not found > Aug 24 00:01:37 mail01 dovecot: imap(karsten.becker(a)company.eu): Debug: acl vfile: file /etc/dovecot/global-acls/Folders/test01/aaa not found > Aug 24 00:01:37 mail01 dovecot: imap(karsten.becker(a)company.eu): Debug: acl vfile: reading file /srv/vmail/public_folders/test01/aaa/dovecot-acl Here's the filesystem structure in /srv/vmail: > root@mail01.compdmz.local:/srv/vmail# ls -l public_folders/test01/ > total 20 > drwxr-xr-x 5 vmail vmail 4096 2011-08-23 23:50 aaa > drwxr-xr-x 2 vmail vmail 4096 2011-08-23 21:45 cur > -rw-r--r-- 1 vmail vmail 25 2011-08-23 22:19 dovecot-acl > drwxr-xr-x 2 vmail vmail 4096 2011-08-23 21:45 new > drwxr-xr-x 2 vmail vmail 4096 2011-08-23 21:45 tmp > root@mail01.compdmz.local:/srv/vmail# Here's the content of dovecot-acl (there are another ones in subfolder aaa with the same content, inherited during creation): > authenticated lrwstipekx Here's my configuration of Dovecot: > # 2.0.13: /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-33-server x86_64 Ubuntu 10.04.3 LTS ext4 > doveconf: Warning: Dovecot was last started using /etc/dovecot/dovecot.conf, but this config is /usr/local/dovecot-2.0.13/etc/dovecot/dovecot.conf > auth_cache_negative_ttl = 0 > auth_cache_size = 10 M > auth_mechanisms = plain login > base_dir = /usr/local/dovecot/var/run/dovecot > dict { > acl = mysql:/etc/dovecot/dovecot-dict-shared-mailboxes-mysql.conf > expire = mysql:/etc/dovecot/dovecot-dict-expire-mysql.conf > quota = mysql:/etc/dovecot/dovecot-dict-quota-mysql.conf > } > log_timestamp = "%Y-%m-%d %H:%M:%S " > login_greeting = Company Institute > mail_attachment_dir = /srv/vmail/attachments > mail_attachment_hash = %{sha256} > mail_cache_min_mail_count = 2 > mail_debug = yes > mail_location = mdbox:/srv/vmail/user-mailboxes/%d/%n > mail_plugins = acl expire quota > mailbox_idle_check_interval = 1 mins > namespace { > inbox = yes > location = > prefix = > separator = / > subscriptions = yes > type = private > } > namespace { > list = children > location = mdbox:/srv/vmail/user-mailboxes/%%d/%%n > prefix = Users/%%d/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace { > list = children > location = maildir:/srv/vmail/public_folders:INDEX=/srv/vmail/user-mailboxes/%d/%n/public_folders-seen:LAYOUT=fs > prefix = Folders/ > separator = / > subscriptions = no > type = public > } > passdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = proxy::acl > expire = Trash > expire2 = Trash/* > expire3 = Junk > expire4 = Junk/* > expire_dict = proxy::expire > quota = dict:User quota::proxy::quota > quota_rule = *:storage=10485760 > quota_rule2 = Trash:storage=+1048576 > quota_warning = storage=95%% quota-warning 95 %u > quota_warning2 = storage=80%% quota-warning 80 %u > } > postmaster_address = postmaster(a)company.eu > protocols = imap pop3 > service auth { > unix_listener /var/spool/postfix/private/auth_dovecot { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-master { > mode = 0600 > user = vmail > } > user = root > } > service dict { > unix_listener dict { > mode = 0600 > user = vmail > } > } > service imap-login { > inet_listener imaps { > port = 993 > ssl = yes > } > process_min_avail = 2 > } > service imap { > vsz_limit = 512 M > } > service pop3-login { > inet_listener pop3s { > port = 995 > ssl = yes > } > } > service quota-warning { > executable = script /usr/local/bin/quota-warning.sh > user = vmail > } > ssl = required > ssl_cert = </etc/postfix/ssl/mail01.compdmz.local.crt > ssl_key = </etc/postfix/ssl/mail01.compdmz.local.key > userdb { > args = /etc/dovecot/dovecot-mysql.conf > driver = sql > } > verbose_proctitle = yes > protocol lda { > auth_socket_path = auth-master > postmaster_address = postmaster(a)company.eu > } > protocol imap { > imap_client_workarounds = delay-newmail > imap_max_line_length = 128 k > mail_plugins = acl expire quota imap_acl imap_quota > } > protocol pop3 { > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > }

2 3

[Dovecot] acl with hierarchy separators mismatched config
by YAEGASHI Takeshi 24 Aug '11

24 Aug '11

Hi there, I'm testing dovecot 2.0.13 on Debian squeeze (deb from http://xi.rename-it.nl/debian) with the following doveconf -n. -------- # 2.0.13 (1449a2e2c1f5): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-openvz-amd64 i686 Debian 6.0.2 first_valid_uid = 8 mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = listescape mail_log notify acl namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/var/mail/public:INDEX=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public } passdb { driver = pam } plugin { acl = vfile } protocols = " imap" ssl = no userdb { args = uid=mail gid=mail home=/var/mail/private/%u driver = static } protocol imap { mail_plugins = listescape mail_log notify acl imap_acl } -------- My primary interest is acl and listescape enabled folders in the public namespace. I've chosen "/" as the hierarchy separator to support folder names with dots ("."). /var/mail/public is a maildir with the maildir++ layout where the separator is a dot ("."). So I set up intial acls and folders as follows: -------- # mkdir /var/mail/public # echo 'anyone lra' >/var/mail/public/dovecot-acl # maildirmake.dovecot /var/mail/public/.aaa # echo 'anyone lrwstipekxa' >/var/mail/public/.aaa/dovecot-acl # chown -R mail.mail /var/mail/public -------- But my attempt to create a mailbox under Public/aaa fails with "Permission denied". -------- # imtest -a yaegashi localhost S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. C: C01 CAPABILITY S: * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN S: C01 OK Pre-login capabilities listed, post-login capabilities have more. Please enter your password: C: A01 AUTHENTICATE PLAIN ?????????????????/ S: * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS ACL RIGHTS=texk S: A01 OK Logged in Authenticated. Security strength factor: 0 . getacl Public * ACL "Public" "anyone" alr . OK Getacl completed. . getacl Public/aaa * ACL "Public/aaa" "anyone" akxeilprwtscd . OK Getacl completed. . create Public/aaa/bbb . NO [NOPERM] Permission denied -------- If the layout of /var/mail/public switched to "fs" where the separator is "/", mailbox creation succeeds as expected. -------- namespace { list = children location = maildir:/var/mail/public:INDEX=~/Maildir/public:LAYOUT=fs prefix = Public/ separator = / subscriptions = no type = public } -------- -------- # maildirmake.dovecot /var/mail/public/aaa # echo 'anyone lrwstipekxa' >/var/mail/public/aaa/dovecot-acl # chown -R mail.mail /var/mail/public # imtest -a yaegashi localhost .... . getacl Public * ACL "Public" "anyone" alr . OK Getacl completed. . getacl Public/aaa * ACL "Public/aaa" "anyone" akxeilprwtscd . OK Getacl completed. . create Public/aaa/bbb . OK Create completed. . getacl Public/aaa/bbb * ACL "Public/aaa/bbb" "anyone" akxeilprwtscd . OK Getacl completed. . create Public/aaa/1.2.3 . OK Create completed. . create Public/aaa/cur . NO Invalid mailbox name: Public/aaa/cur -------- Is this behavior expected? Misconfiguration or dovecot bug? I prefer the maildir++ layout with listescape as it's reserved-folder-name free (eg. cur new tmp). Regards, -- YAEGASHI Takeshi <yaegashi(a)debian.org>

2 2

[Dovecot] LDA and auth-userdb socket permissions
by a.smith＠ukgrid.net 24 Aug '11

24 Aug '11

Hi, just wanted to check this as the wiki seems to have contradictory information. With respect to running the LDA as multiple UIDs the wiki says: [QUOTE]If you're using more than one UID for users, you're going to have problems running dovecot-lda, as most MTAs won't let you run dovecot-lda as root[/QUOTE] But in the example for the config file the text reads: [QUOTE] service auth { unix_listener auth-userdb { mode = 0600 user = vmail # User running dovecot-lda #group = vmail # Or alternatively mode 0660 + dovecot-lda user in this group } } [/QUOTE] So it says you can stick the LDA user just in the (vmail or whatever) group and that is enough. So you aren't restricted to a single UID for access anymore... I tested this and the later did not work, that is if I put my LDA user in the group for the auth-userdb socket with permissions 0660 I got an error back from dovecot saying that the owner was incorrect. So, as it stands I guess the bit about setting group should be removed from the wiki? Secondly, why doesn't this currently work? Why is the owner all important? thanks Andy.

3 13

[Dovecot] dovecot and tcpwrappers
by Kees Lemmens 23 Aug '11

23 Aug '11

Hi, I used dovecot 1.x for quite a while and it worked fine. However, I used it through inetd and used hosts.allow/deny to restrict access to only certain groups of systems. Since yesterday I have dovecot 2.0.13. But in version 2.0.13 it seems that starting using inetd doesn't work anymore : I only get a strange error message if I try to connect using telnet : telnet localhost imap doveconf: Fatal: execvp(imap-login) failed: No such file or directory I tried a lot of things but couldn't get it going over inetd so I decided to start it directly using an init script, also because you say in the wiki this is (now) the preferred method. That indeed works fine, but I realised today that dovecot is now completely ignoring all my hosts.allow/deny settings and so is worldwide accessible ! Is dovecot indeed ignoring hosts.allow/deny ? And if so, how can I have the same amount of protection as I previously had with dovecot 1.x over inetd ? BTW: I tried to post on the mailinglist but it seems I can't access them it the moment, altough I did subscribe and login. Is there anything wrong ? Thanks for your reply ! -- With best regards, Kees Lemmens. ----------------------------------------------------------------------- Delft Institute of Applied Mathematics (DIAM), Faculty Electrical Engineering, Mathematics and Computer Science, Delft University of Technology, Delft, The Netherlands,

3 5

[Dovecot] zlib plugin doesn't read concatenated .gz mailbox
by Dmitry Nezhevenko 23 Aug '11

23 Aug '11

Hi, I've observed that dovecot doesn't displays all mails from compressed via gzip mailbox (mbox). At the same time "mutt -f mailbox.gz" displays it correctly with all messages. I'm using archivemail to archive old mails. Internally it creates new "gzip" archive with "expired" messages and then concatenates it with archive. The easiest way to reproduce it without archivemail is to create two mailboxes, gzip them independently and then concatenate to one gzip archive. mutt, gunzip and other tools understands such archives. Also I've shared such mbox: http://dion.org.ua/uploads/2011/07/dovecot_test_gzip.gz It should contains ~20 messages. dovecot will "see" only two first. PS. % sudo dovecot --version 2.0.13 -- WBR, Dmitry

2 1

[Dovecot] dovecot's documentation dearth
by Postmaster 23 Aug '11

23 Aug '11

Hello. The first thing for me to say is thanks! I've been using dovecot since test 61 and it has basically performed flawlessly for me from day number 1. Dovecot makes me look like a genius sysadmin, especially compared to my colleagues struggling with exchange. So thanks, gracias, obrigado!! I'm working on a configuration for 2.0 and I'm finding the documentation somewhat difficult. I think it would be very helpful to me to have encountered a single page that detailed all available configuration sections. I don't know how to find out what the sections are, when to use them or what specifically they control. So far I've encountered... passdb plugin service protocol userdb local_name (and I think there is another one of these for ips) The service section itself would benefit from a single page detailing all of the possible types of service sections available. The next problem I've had is discovering that several parts of dovecot have no documentation at all even though they are standalone executables run by root. config, log, and ssl_params all run as root but there is also anvil and they look to me like they could support listening on a port if inet_interfaces is defined. You can say, "Relax fella, trust me. These programs are all part of dovecot and are run only if they're needed." Then I'll say, "Yes but I'm the administrator. I need to know how the parts fit together to know if the system's broken." Then you say, "Well that makes sense, but the things you're talking about aren't really configured. They are mostly internal to dovecot, they just happen to be broken out into external programs. You may as well be asking for documentation on a specific function in a library. If that's what you want, you can read through the source code." Well I guess that would be one solution. The bottom line is that it gives me an uncomfortableness to not be able to control or explain the operation of the software I'm supposedly administering. Take the program named log (which should be named dovecot-log or something less generic), it is launched even though I've specified syslog in the configuration. Logging is not interrupted when the process is killed. So, why is it running? What is it doing? Why does it need root? How do I control it? I think these are all good questions for an administrator to ask. That's my feedback for what it's worth, but mostly, thanks again for dovecot!

2 1

[Dovecot] Default and per-User sieve script
by Patrick Westenberg 23 Aug '11

23 Aug '11

Hi guys, is there any way to configure Dovecot to process the default sieve script and, after that, a user specific script? I have a default script to sort spam into a spam folder but if a user specific script is present, the default script is ignored. sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve Regards Patrick

3 2

[Dovecot] dovecot deadlock with procmail
by kunal verma 23 Aug '11

23 Aug '11

I m using dovecot 1.0.7. I m having problems in mail delivery to my mail server locally. When a user sends a mail few mails are in mail Q for longer period of time. The local delivery agent(*procmail*) is trying to deliver the mail at regular interval but it is unable to deliver. But as soon as I *restart* *dovecot* the mails in the Q are delivered immediately. I suspect it is because of locking of *mbox* file of users by dovecot. How to overcome this problem as mails are some mails are taking hours to be delivered?? please let me know the solution. Kunal Verma

2 1

[Dovecot] Large Mailbox Slow
by Matt 23 Aug '11

23 Aug '11

Doubt if there is any answer to this but will ask anyway. Have a few pop3 accounts with thousands of messages. Its slow when checking email naturally. Are there any tweaks to speed it up? I imagine there is an exchange of the message and header list which is the slow down. Too bad the list could not be compressed with gzip or something first. I think http has an option similar to that. Just asking.

3 3

[Dovecot] Dovecot Postfix and ssl_require_client_cert
by mezzo 23 Aug '11

23 Aug '11

Hi, I have a working mail system with postfix 2.7 and dovecot 1.2.15. I use secure connections for imap and smtp. When I try to use client certificate authorisation I have some problems. As soon as I enable the dovecot feature ssl_require_client_cert I have to present a valid certificate to receive or send email. Receiving emails works fine, but I can not send emails any more. The only way I could get this to work was to disable smtpd_sasl_auth_enable so postfix did not tries to get authorisation from dovecot. This way I can not have sasl authorisation for localnet and client certificate authorisation from extern. The reson seams to be that postfix does not sent the valid-client-cert along with the other parameter that are needed to satisfy the auth-process of dovecot. I found a few threads from 2008 where this problem is discussed but without a final solution. Is there a way to enable ssl_require_client_cert in dovecot and have smtpd_sasl_auth_enable=yes in postfix? Better would be a way to tell dovecot only to use ssl_require_client_cert during the imap autorisation. I did not get it to work. I miss something? Cheers mezzo -- View this message in context: http://old.nabble.com/Dovecot-Postfix-and-ssl_require_client_cert-tp3230766… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Update indexes with dovecot 1.1
by Angel L. Mateo 23 Aug '11

23 Aug '11

Hello, I have a farm of dovecot 1.1 servers (debian lenny). Mailboxes are in Maildir format. Is there any way to manually update indexes? Does it worth? I mean... Our problem is that mail is delivered via dovecot lda, but, because we have a farm of servers, we don't guarantee that mail is delivered through the same server that the user is using for his imap connection, so the imap server could have this index unupdated. So I want to force an update (or at least nearly updated) in order to have the index updated in all servers at the time the user get to work. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

3 5

[Dovecot] Disconnected: Too many invalid IMAP commands
by Steve Fatula 23 Aug '11

23 Aug '11

Using current Apple mail 4.5 as client to Dovecot 2.0.13 I see lots of these messages in the log file for one machine and account. Near as I can tell, the client still works (it's mine), but, the messages concern me. Is there some known issue with Apple mail, or, if not, how to capture the information needed to debug? Sample log entires for my user matching on the message: Aug 20 16:28:36 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=3242/14672 Aug 20 16:28:43 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=14219/231327 Aug 20 16:29:50 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=640/1968 Aug 20 16:29:57 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=3521/2024 Aug 20 16:30:04 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=6690/3415 Aug 20 16:30:05 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=5098/15294 Aug 20 16:30:06 host2 dovecot: imap(soho.steve): Disconnected: Too many invalid IMAP commands. bytes=706/15684 Steve

3 2

[Dovecot] Duplicate Email with Dovecot Sieve
by Holden Hao 22 Aug '11

22 Aug '11

I am trying to use Dovecot Sieve after upgrading Dovecot from 1.0.15 to 1.2.17. I used the same config file from the old version but I added some entries to make sieve work. In my initial tests, sieve works and is able to do the actions that I set it to do. However, I get 2 copies of incoming emails. The inbox would always preserve a copy even if the sieve filter is set to transfer emails to another folder or redirect it to another address. The logs do not seem to report any issues. I don't know what causes the problem and I would appreciate some pointers. Here are some more details of my setup: OS: Linux 2.6.24.2 Dovecot: 1.2.17 Dovecot Sieve:0.1.19 Manage Sieve:0.11.13 MTA: Qmail 1.03 dovecot -n ---------------------------------------------------------------------------- # 1.2.17: /usr/local/etc/dovecot.conf # OS: Linux 2.6.24.2 i686 Debian lenny/sid log_path: /var/log/dovecot.log log_timestamp: protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /var/dir/etc/certificates/server.crt ssl_key_file: /var/dir/etc/certificates/server.key disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_greeting: Welcome login_process_size: 32 verbose_proctitle: yes first_valid_uid: 1000 mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): outlook-idle imap_client_workarounds(imap): outlook-idle imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_uidl_format(managesieve): %08Xu%08Xv managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: . prefix: INBOX. location: maildir:~/Maildir inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)xxxxxxxxxx.org mail_plugin_dir: /usr/local/lib/dovecot/lda mail_plugins: quota sieve sendmail_path: /var/qmail/bin/sendmail log_path: /var/log/dovecot-deliver-errors.log info_log_path: /var/log/dovecot-deliver.log auth default: verbose: yes passdb: driver: checkpassword args: /var/qmail/bin/auth_pop userdb: driver: prefetch plugin: quota: maildir sieve: ~/.dovecot.sieve sieve_dir: ~/sieve -------------------------------------------------------------------- from: dovecot-deliver.log -------------------------------------------------------------------- deliver(user): Info: Loading modules from directory: /usr/local/lib/dovecot/lda deliver(user): Info: Module loaded: /usr/local/lib/dovecot/lda/lib10_quota_plugin.so deliver(user): Info: Module loaded: /usr/local/lib/dovecot/lda/lib90_sieve_plugin.so deliver(user): Info: Quota root: name= backend=maildir args= deliver(user): Info: Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=1, subscriptions=yes deliver(user): Info: maildir: data=/home/user/Maildir deliver(user): Info: maildir++: root=/home/user/Maildir, index=, control=, inbox=/home/user/Maildir deliver(user): Info: sieve: using sieve path for user's script: /home/user/.dovecot.sieve deliver(user): Info: sieve: opening script /home/user/.dovecot.sieve deliver(user): Info: sieve: executing compiled script /home/user/.dovecot.sieve deliver(user): Info: sieve: msgid=< CAJNnNYmQpmEopFfT3+_qHvXYxf3v-4bzv9ojJqGfRtcddnTg8g(a)mail.gmail.com>: stored mail into mailbox 'Inbox.Test' Thanks in advance for your replies. Holden

2 5

[Dovecot] Help With 'No SASL Authentication Mechanisms' Error
by research＠the10thfloor.com 22 Aug '11

22 Aug '11

Hi, I'm trying to configure a new server with dovecot 2.0 and postfix 2.6.6. My previous servers have all been dovecot 1.x. Trying to port over my previous configurations has been a real headache. Currently, I'm getting the following errors when trying to connect with: openssl s_client -starttls smtp -connect localhost:25 Aug 21 19:08:46 localhost postfix/smtpd[26252]: connect from localhost[::1] Aug 21 19:08:46 localhost postfix/smtpd[26252]: warning: SASL: Connect to private/auth failed: Permission denied Aug 21 19:08:46 localhost postfix/smtpd[26252]: fatal: no SASL authentication mechanisms Aug 21 19:08:47 localhost postfix/master[26226]: warning: process /usr/libexec/postfix/smtpd pid 26252 exit status 1 Aug 21 19:08:47 localhost postfix/master[26226]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling If someone could help me out I'd really appreciate it. My Dovecot and Postfix configuration changes are below... Thanks, slevytam --------------------------------------------------------------------------- DOVECOT: # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_debug = yes auth_verbose = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl passdb { args = username_format=%u /etc/dovecot/passwd driver = passwd-file } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0600 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/pki/tls/certs/mail_the10thfloor_com.crt ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/pki/tls/private/mail_the10thfloor_com-nopass.key userdb { args = username_format=%u /etc/dovecot/passwd driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes POSTFIX: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no inet_interfaces = localhost inet_protocols = all mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = localhost mydomain = the10thfloor.com myhostname = mail.the10thfloor.com myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/pki/tls/certs/mail_the10thfloor_com.crt smtpd_tls_key_file = /etc/pki/tls/private/mail_the10thfloor_com-nopass.key smtpd_tls_security_level = may soft_bounce = no tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_gid_maps = static:502 virtual_mailbox_base = /home/vmail/ virtual_mailbox_domains = the10thfloor.com virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_uid_maps = static:502

3 2

[Dovecot] Dovecot 1.2.16 and Thunderbird 5 - pop3 mails not getting deleted
by Ian Evans 22 Aug '11

22 Aug '11

I run a Dovecot 1.2.16 pop3 server and have just started using the Thunderbird 5 email client. Thunderbird is set to leave the messages on the server unless they are over 91 days old. However, I'm not seeing it delete any of the older messages. I'll run a debug run of Thunderbird when I get back home, but I'm just wondering if there's any gotcha's I should be aware of with Thunderbird and Dovecot in a pop3 environment. The Thunderbird folks are wondering if it's the server not the client. Thanks.

3 2

[Dovecot] ot: iPhone crashed, re-downloading all messages
by voytek＠sbt.net.au 22 Aug '11

22 Aug '11

I have a 'problem', after iPhone lockup/reset, iPhone now wanting to re-download hundreds of messages of Dovecot 1.x server, is there any fix to reset iPhone counter or ??

4 3

Re: [Dovecot] Update indexes with dovecot 1.1
by Joseph Tam 19 Aug '11

19 Aug '11

Angel L. Mateo writes: > I have a farm of dovecot 1.1 servers (debian lenny). Mailboxes are in > Maildir format. > > Is there any way to manually update indexes? > > Does it worth? I mean... Our problem is that mail is delivered via > dovecot lda, but, because we have a farm of servers, we don't guarantee > that mail is delivered through the same server that the user is using > for his imap connection, so the imap server could have this index > unupdated. So I want to force an update (or at least nearly updated) > in order to have the index updated in all servers at the time the user > get to work. Upgrading to Dovecot2 would allow you to solve this in various ways: - use "doveadm force-resync" - user director to bind to a particular server You could put the indices on a shared filesystem. If neither an update nor shared indices are feasible, maybe you can enable the master user feature, and run a script that logs in as each user and do an IMAP operation that will force a resync of the INBOX indices. For example, # On IMAP server with a localhost interface for u in $users; do echo "1 login $u*master masterpw\n2 SELECT INBOX\n3 logout" | \ nc 127.0.0.1 143 done Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Sharing all mailboxes and userdb LDAP attrs
by Felipe Scarel 19 Aug '11

19 Aug '11

Hello all, I'm setting up a Dovecot environment here, version 1.2.15 on Debian 6.0.2 "squeeze". This is actually a complete revamp of the previous setup we have in-place here, built from the ground up with updated versions of all involved software. The operators have told me that they use some scripts hacked up by a previous sysadmin to give a single "admin" account full access to all user mail. That is, if any user runs into problems, they: 1. Call in; 2. The operator logs in as the admin user; 3. Operator performs maintenance duties on user email. I've been researching the possibility of using Dovecot shared namespaces to perform that very same task in a better fashion in this new server. So far, I've been able to globally share users' INBOXes and view them from a single admin account (through user= entries on global acl's). My ultimate goal, however, is to have access to all user mailboxes with any user that's a member of a particular group, adding all operators to that group as needed. - - - - - First question, then, is this one: how can I give global access to all user mailboxes? I've read that it's possible to give access to all subfolders of a particular folder throught the use of a .DEFAUL acl. That didn't seem to work with the uppermost directory, however. Here's what I tried: root@mail:/etc/dovecot# dovecot -a | grep acl: acl: vfile:/etc/dovecot/acl:cache_secs=300 root@mail:/etc/dovecot# cat acl/.DEFAULT owner lrwstipekxa user=admin lrwstipekxa Renaming .DEFAULT to INBOX does achieve the intended goal, but only for the INBOX folder evidently. - - - - - Second question is somewhat simpler. So far I've been using a single admin user, but I'd like to switch to using an admin group in the future. I've read that the best way to do that would be to use the user_attrs entry in my dovecot-ldap.conf file, while using a userdb ldap. The groups should be strings separated by commas in the appropriate attribute, from what I understand. Is there any readily-available or recommended schema I can use to fill up that attribute? I'm using the default ones (plus samba.schema) but I've seen mostly space to fit GID's, not group names. Thanks in advance, fbscarel PS: Here's my dovecot -a output, should it be needed. - - - - - root@mailaluno:~# dovecot -a # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 base_dir: /var/run/dovecot log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: imap pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): localhost:2000 ssl_listen: 127.0.0.1 ssl: yes ssl_ca_file: ssl_cert_file: /etc/ssl/certs/dovecot.pem ssl_key_file: /etc/ssl/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: yes shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: dovecot login_greeting: Server ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: no login_chroot: yes login_trusted_networks: login_process_size: 64 login_processes_count: 5 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 512 mail_max_userip_connections: 10 verbose_proctitle: no first_valid_uid: 108 last_valid_uid: 0 first_valid_gid: 112 last_valid_gid: 0 mail_access_groups: mail_privileged_group: mail mail_uid: mail_gid: mail_location: mail_cache_fields: mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: yes mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mmap_disable: no dotlock_use_excl: yes fsync_disable: no mail_nfs_storage: no mail_nfs_index: no mailbox_list_index_disable: yes lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: no maildir_very_dirty_syncs: no mbox_read_locks: fcntl mbox_write_locks: fcntl dotlock mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 mail_drop_priv_before_exec: no mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_process_size: 256 mail_plugins(default): quota imap_quota trash mail_log acl imap_acl mail_plugins(imap): quota imap_quota trash mail_log acl imap_acl mail_plugins(pop3): quota mail_log mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve mail_log_prefix: %Us(%u): mail_log_max_lines_per_sec: 0 imap_max_line_length: 65536 imap_capability: imap_client_workarounds: imap_logout_format: bytes=%i/%o imap_id_send: imap_id_log: imap_idle_notify_interval: 120 pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_save_uidl: no pop3_lock_session: no pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s dict_db_config: dict_process_count: 1 managesieve_max_line_length: 65536 managesieve_logout_format: bytes=%i/%o managesieve_implementation_string: dovecot namespace: type: private separator: / prefix: location: maildir:/vmail/%Ln/Maildir alias_for: inbox: yes hidden: no list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%n/ location: maildir:/vmail/%%n/Maildir:INDEX=/vmail/%n/Maildir/shared/%%n alias_for: inbox: no hidden: no list: yes subscriptions: no lda: postmaster_address: xxx@xxx mail_plugins: quota sieve trash acl auth default: mechanisms: plain login realms: default_realm: cache_size: 0 cache_ttl: 3600 cache_negative_ttl: 3600 executable: /usr/lib/dovecot/dovecot-auth user: vmail chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: %Lu master_user_separator: * anonymous_username: anonymous krb5_keytab: gssapi_hostname: winbind_helper_path: /usr/bin/ntlm_auth failure_delay: 2 verbose: no debug: no debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no use_winbind: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers deny: no pass: no master: yes passdb: driver: shadow args: deny: no pass: no master: no passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf deny: no pass: no master: no userdb: driver: passwd args: userdb: driver: static args: uid=vmail gid=vmail home=/vmail/%Ln allow_all_users=yes socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir:User quota quota_rule: *:storage=1G quota_rule2: Trash:storage=100M acl: vfile:/etc/dovecot/acl:cache_secs=300 acl_shared_dict: file:/vmail/shared_mboxes trash: /etc/dovecot/dovecot-trash.conf mail_log_events: delete mailbox_delete mail_log_fields: uid box msgid size sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_before: /vmail/default.sieve

2 2

[Dovecot] segfault in dovecot 2.0.9
by Morten P.D. Stevens 18 Aug '11

18 Aug '11

Hi folks, I noticed the following in the dovecot log files: /var/log/maillog Jun 9 00:12:34 mail dovecot: master: Error: service(imap): child 8970 killed with signal 11 (core dumps disabled) Jun 9 00:12:34 mail dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=IP, lip=IP, mpid=8987, TLS Jun 9 00:12:34 mail dovecot: master: Error: service(imap): child 8987 killed with signal 11 (core dumps disabled) /var/log/messages Jun 9 00:12:34 mail kernel: imap[8970]: segfault at 0 ip 00007fe4b2fe432d sp 00007fff29383740 error 4 in libdovecot-storage.so.0.0.0[7fe4b2fb8000+d1000] Jun 9 00:12:34 mail kernel: imap[8987]: segfault at 0 ip 00007f949de1532d sp 00007fff120721b0 error 4 in libdovecot-storage.so.0.0.0[7f949dde9000+d1000] # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.29.1.el6.x86_64 OS: Scientific Linux 6.0 (Red Hat Enterprise Linux 6.0) Filesystem: ext4 I think this is a bug. Any ideas? Best regards, Morten

3 2

[Dovecot] mdbox and doveadm purge
by Morten P.D. Stevens 18 Aug '11

18 Aug '11

Hi, We are currently testing Dovecot 2.0.13 with mdbox. If I delete large objects with refcount=0 the index is not updated apparently. Here's an example: [root@mail-004 storage]# ls -l total 194776 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4584 Jul 9 16:06 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 mdbox]# du storage/ 194788 storage/ [root@mail-004 mdbox]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) [root@mail-004 mdbox]# doveadm purge -A [root@mail-004 mdbox]# du storage/ 142072 storage/ [root@mail-004 mdbox]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) - ext 3 ref : 0 (0000) [root@mail-004 mdbox]# cd storage/ [root@mail-004 storage]# ls -l total 142060 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4584 Jul 9 16:06 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 mdbox]# doveadm purge -A [root@mail-004 mdbox]# cd storage/ [root@mail-004 storage]# ls -l total 142060 -rw------- 1 vmail vmail 482960 Jul 9 14:58 dovecot.map.index -rw------- 1 vmail vmail 4936 Jul 9 16:12 dovecot.map.index.log -rw------- 1 vmail vmail 32856 Jul 9 14:50 dovecot.map.index.log.2 [root@mail-004 storage]# doveadm dump /var/vmail/example.org/user/mdbox/storage/ | grep 'ref.*\b0\b' [root@mail-004 storage]# The index is updated only after the second run of doveadm purge -A ? Best regards, Morten

3 2

[Dovecot] dovecot with pam - ldap
by Daniel Aschauer 18 Aug '11

18 Aug '11

I am running dovecot v1.2.10 on a FreeBSD server and I am facing problems authenticating using pam. I always get the error message, although I do provide the right password: pam_authenticate() failed: authentication error (password mismatch?) I use /etc/pam.d/imap: # # PAM configuration for the "imap" service # # auth auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass auth required pam_unix.so no_warn try_first_pass # account account required pam_unix.so and my config: srvfbsd01# dovecot -n # 1.2.10: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.0-RELEASE-p2 amd64 protocols: imap ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 0 mail_location: maildir:~/Maildir namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: public separator: . prefix: Public. location: maildir:/home/vmail/public list: yes auth default: debug: yes passdb: driver: pam args: failure_show_msg=yes cache_key=%u imap passdb: driver: passwd-file args: /usr/local/etc/dovecot/vmail userdb: driver: passwd userdb: driver: passwd-file args: /usr/local/etc/dovecot/vmail Logging: Aug 18 12:48:10 srvfbsd01 dovecot: auth(default): passwd-file /usr/local/etc/dovecot/vmail: Read 6 users Aug 18 12:48:10 srvfbsd01 dovecot: auth-worker(default): passwd-file /usr/local/etc/dovecot/vmail: Read 6 users Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3690 Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3688 Aug 18 12:48:11 srvfbsd01 dovecot: auth(default): new auth connection: pid=3689 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=10.0.10.150 rip=10.0.10.71 lport=143 rport=3583 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client out: CONT 1 Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): client in: CONT<hidden> Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): lookup service=imap Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): #1/1 style=1 msg=Password: Aug 18 12:48:14 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): pam_authenticate() failed: authentication error (password mismatch?) Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): lookup: user=daniel file=/usr/local/etc/dovecot/vmail Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): unknown user Aug 18 12:48:14 srvfbsd01 dovecot: auth(default): new auth connection: pid=3691 Aug 18 12:48:16 srvfbsd01 dovecot: auth(default): client out: FAIL 1 user=daniel Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): client in: AUTH 2 PLAIN service=imap lip=10.0.10.150 rip=10.0.10.71 lport=143 rport=3583 resp=<hidden> Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): lookup service=imap Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): #1/1 style=1 msg=Password: Aug 18 12:48:21 srvfbsd01 dovecot: auth-worker(default): pam(daniel,10.0.10.71): pam_authenticate() failed: authentication error (password mismatch?) Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): lookup: user=daniel file=/usr/local/etc/dovecot/vmail Aug 18 12:48:21 srvfbsd01 dovecot: auth(default): passwd-file(daniel,10.0.10.71): unknown user Aug 18 12:48:23 srvfbsd01 dovecot: auth(default): client out: FAIL 2 user=daniel

1 0

[Dovecot] sender for Sieve vacation message
by Florian Effenberger 18 Aug '11

18 Aug '11

Hello, is it possible to define the sender for the Dovecot Sieve implementation's vacation extension? It seems to be impossible to add, e.g., a name, or choose a different sender address. Thanks, Florian

2 3

[Dovecot] Dovecot-Antispam 2.0 with SpamAssassin (sa-learn)
by Nick Rosier 18 Aug '11

18 Aug '11

Hi, has anyone figured out how to use the dovecot-antispam plugin with sa-learn? I need to pass the username (user(a)domain.tld) to sa-learn and --ham or --spam depending on the move. I was thinking of using the CRM14 option and replace the command and arguments but cannot find anything about the ability to pass the username. Any pointers would be welcome. N.

3 4

[Dovecot] May Dovecot help in users education
by Alexandre Chapellon 18 Aug '11

18 Aug '11

Hello, I was wondering if dovecot could help me in my project to smoothly make all my users switch to TLS encrypted POP / IMAP sessions and forget about cleartext. My first idea was to setup dovecot as a POP/IMAP proxy for my mailhosts and ask dovecot to display a warning message or slowdown non TLS sessions. Is there any way to achieve this with dovecot? Does anybody have another idea smoothly force used to switch to TLS? Regards. -- <http://www.horoa.net>

4 6

[Dovecot] invalid credential using openldap
by Daminto Lie 17 Aug '11

17 Aug '11

Hi, What I have been trying to achieve is to be able to authenticate users through openLDAP while using Postfix, Dovecot as IMAP server and squirrelmail. I keep getting the following error messages when trying to login to squirrelmail 2011-08-17 12:27:59 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=57794 resp=AGFkbWluAGFwbXg2c3Bu 2011-08-17 12:27:59 auth(default): Info: ldap(myuser,127.0.0.1): invalid credentials (given password: xxx) 2011-08-17 12:28:00 auth(default): Info: new auth connection: pid=1921 2011-08-17 12:28:01 auth(default): Info: client out: FAIL 1 user=myuser 2011-08-17 12:28:06 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<myuser>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured This seems to be trivial but I just could not figure out what else went wrong. I wonder if anyone might be able to give me a bit of help as I'm still learning my way around under linux system environment. The following is what I have in /etc/dovecot/dovecot-slapd.conf hosts = localhost dn = cn=myadmin,dc=mycompany,dc=com dnpass = secrets auth_bind = yes auth_bind_userdn = cn=%u,ou=people,dc=mycompany,dc=com ldap_version = 3 base = ou=people, dc=pbj, dc=com, dc=au scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) Thank you in advance

1 0

[Dovecot] Dovecot-2.0.14?
by David Favor 17 Aug '11

17 Aug '11

ETA on 2.0.14? -- Love feeling your best ever, all day, every day? Click http://RadicalHealth.com for the easy way!

2 1

[Dovecot] maildirsize not always present
by Jean-Max Reymond 16 Aug '11

16 Aug '11

hi, I have a dovecot 1.2.9 and all is runnig fine except for quotas. Some accounts have a maildirsize file in the mail directory. If I delete the file, it is automatically rebuild: OK But other accounts does not have the maildirsize file even after access from dovecot server. All is OK for theses accounts except quota service. what's wrong ? -- Jean-Max Reymond Éruption de l'Etna: http://jmreymond.free.fr/Etna2002

3 7

[Dovecot] dovecot 2.0.13 fd_send(imap, 15) failed, dovecot 1.2.16 fd_send(10) failed
by Spod Letela 16 Aug '11

16 Aug '11

Hi, I am reinstalling my server and i have encoutered a strange problem, both dovecot 2.0.13 and 1.2.16 are reporting me a problem with fd_send Invalid argument on imap login. I am running dragonfly bsd 2.10.1., compiled dovecot from pkgsrc. Can someone help me out or at least point me in some direction, i am a bit lost... :( Aug 15 10:01:00 master: Info: Dovecot v2.0.13 starting up Aug 15 10:01:10 auth: Debug: Loading modules from directory: /usr/pkg/lib/dovecot/auth Aug 15 10:01:10 auth: Debug: auth client connected (pid=1206) Aug 15 10:01:10 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=1032 resp=x Aug 15 10:01:10 auth: Debug: Loading modules from directory: /usr/pkg/lib/dovecot/auth Aug 15 10:01:10 auth: Debug: passwd(y,127.0.0.1): lookup Aug 15 10:01:10 auth: Debug: client out: OK 1 user=y Aug 15 10:01:10 imap-login: Error: fd_send(imap, 15) failed: Invalid argument Aug 15 10:01:10 auth: Debug: client in: CANCEL 1 Aug 15 10:01:10 imap-login: Info: Internal login failure (pid=1206 id=1) (auth failed, 1 attempts): user=<y>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Aug 15 11:01:27 master: Warning: Killed with signal 15 (by pid=0 uid=0 code=kill) Aug 16 01:55:45 dovecot: Info: Dovecot v1.2.16 starting up Aug 16 01:56:35 imap-login: Fatal: fd_send(10) failed: Invalid argument Aug 16 08:22:29 dovecot: Warning: Killed with signal 15 (by pid=0 uid=0 code=kill) Aug 16 08:22:31 dovecot: Info: Dovecot v1.2.16 starting up Aug 16 08:22:48 imap-login: Fatal: fd_send(10) failed: Invalid argument

2 1