- dovecot - dovecot.org

[Dovecot] courier-imap to dovecot-imap migration: missing TLS_TRUSTCERTS feature
by Uffe Jakobsen 10 Feb '11

10 Feb '11

Hi, I'm attempting an one-to-one migration from courier-imap to dovecot-imap. current state: Imap-server has a self signed certificate Every client/user has a self signed client certificate that is used for SSL/TLS client authentication. All certificates are self signed "standalone" cerfificates - no CA hierarchy/structure is made. With courier-imap we could just put every client certificate into a trusted cert file (or hashed directory for a larger number of clients) and courier-imap would check that through TLS_TRUSTCERTS. I would like to keep the current appproach and avoid the whole mini CA setup - that way I can also avoid reissuing new certs to all existing users. Question: can a similar setup be achieved with dovecot-imap ? I've already made numerous attempts with no luck. As far as I can see dovecot-imap does not seem to implement the concept of checking trusted (self signed standalone client) certs - even though it is based on openssl like courier-imap is - but I may be wrong here. I'm using dovecot-2.0.7 (from ports) on FreeBSD Thanks in advance. Kind regards Uffe Jakobsen

2 1

[Dovecot] dovecot not delivering emails in the right folder
by paulino＠calderonpale.com 10 Feb '11

10 Feb '11

Hello everyone, I'm having trouble getting postfix + dovecot to work correctly. It seems like Postfix is receiving and delivering the emails correctly but dovecot is placing/looking for them in the wrong folder therefore the clients aren't receiving any new emails. I switched from courier and followed a tutorial found here: http://library.linode.com/email/postfix/dovecot-mysql-debian-5-lenny Dovecot's log: deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: adomain.com/test/@adomain.com deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: uid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: gid=5000 deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: auth input: home=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: data=/home/vmail/adomain.com/adomain.com/test/ deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: maildir: root=/home/vmail/adomain.com/adomain.com/test, index=/home/vmail/adomain.com/adomain.com/test, control=, inbox= deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Using sieve path: /home/vmail/globalsieverc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: cmusieve: Executing script /home/vmail/globalsievercc deliver(adomain.com/test/@adomain.com): 2011-02-04 21:48:04 Info: msgid=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com>: saved mail to INBOX It seems like is using a wrong folder value since it should be using /home/vmail/adomain.com/test. Another odd thing is that postfix is replacing the email address with /folder/user(a)adomain.com. Postfix after receiving an email: 3:48:04 domain postfix/smtpd[29365]: 8FDC1A339: client=mail-yx0-f169.google.com[209.85.213.169] Feb 5 03:48:04 domain postfix/cleanup[29369]: 8FDC1A339: message-id=<AANLkTimZi7pD2eSFNipHtmS5HZVstk9UF6kjWEyqynz-(a)mail.gmail.com> Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: from=<xxx(a)gmail.com>, size=1815, nrcpt=1 (queue active) Feb 5 03:48:04 domain postfix/pipe[29370]: 8FDC1A339: to=<adomain.com/test/@adomain.com>, orig_to=<test(a)adomain.com>, relay=dovecot, delay=0.21, delays=0.2/0.01/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Feb 5 03:48:04 domain postfix/qmgr[27253]: 8FDC1A339: removed My config files: main.cf ============================== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 message_size_limit = 30720000 mydestination = localhost, localhost.localdomain myhostname = adomain.com mynetworks = 127.0.0.0/8 myorigin = /etc/mailname proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_tls_cert_file = /etc/postfix/cert.ca.crt smtpd_tls_key_file = /etc/postfix/cert.ca.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_transport = dovecot virtual_uid_maps = static:5000 dovecot.conf: ====================== protocols = imap imaps log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/vmail/%d/%n/Maildir mail_debug = yes disable_plaintext_auth = no ssl_cert_file = /etc/postfix/cert.crt ssl_key_file = /etc/postfix/cert.key namespace private { separator = . prefix = INBOX. inbox = yes } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)adomain.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { user = root mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } dovecot version: 1.0.15 # grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=mail user=mail_admin password=xxx default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; Thanks, any help/pointers will be greatly appreciated.

2 1

[Dovecot] pop3 index virtual question
by Robert Schetterer 10 Feb '11

10 Feb '11

Hi @ll, Timo, on 2.0.9 i have a user reporting pop3 leaving mails on the server does not work as desired i have namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ #location = virtual:/etc/dovecot/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } and pop3_uidl_format = %08Xu%08Xv before it was pop3_uidl_format = %g ( not sure what best ) # Permanently save UIDLs sent to POP3 clients, so pop3_uidl_format changes # won't change those UIDLs. Currently this works only with Maildir. #pop3_save_uidl = no my guess is that location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++ isnt enough should be location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/ to store/use indexes in the local maildir which is physical under /usr/local/virtual/domain/user@domain any meanings to this -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] Using -s in "doveadm mailbox create"
by Christoph Pleger 10 Feb '11

10 Feb '11

Hello, it seems that "doveadm mailbox create" does not handle the mailbox parameters correctly if used with the "-s"-Parameter. I am using the following command in a script for adding new users: doveadm mailbox create -u "${ACCOUNT}" -s INBOX Drafts Sent Trash Spam Templates This creates mailboxes Drafts, Sent, Trash, Spam and Templates, but not INBOX. Likewise, when I omit INBOX in the command, only Sent, Trash, Spam and Templates are created, but not Drafts. With only one mailbox parameter, I get an error message about incorrect usage. When I enter the command without the "-s"-Parameter, all given mailboxes are created. As a workaround, I have to use the command without "-s" first and then call "doveadm mailbox subscribe". Regards Christoph

2 1

[Dovecot] Force STARTTLS on port 143 for !internalnetwork
by Ralf Hildebrandt 09 Feb '11

09 Feb '11

Hi! How can I force users which are connecting from OUTSIDE our newtworks to user STARTTLS on Port 143? Right now we resort to IMAPS on port 993, but an additional STARTTLS enabled login on the default port would make things easier! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 5

[Dovecot] Dovecot + Solr does not index without break-imap-search?
by Jose Álvaro Domínguez Díaz 09 Feb '11

09 Feb '11

Hi folks, We are working with Dovecot 2.0.9 with Solr support and there is a thing, a little strange for us. Let me explain. We have this conf for Solr: plugin { ... fts = solr fts_solr = url=http:// solr.domain:8983/solr/ break-imap-search quota = maildir ... } With 'break-imap-search', Dovecot connects with solr, solr indexes all, searchs are fast and all works fine. BUT if we don't add 'break-imap-search', solr doesn't index anything. Logs don't report errors with debug/verbose options enabled. Somebody has any idea about this?. Thank you very much for all. Regards. -- Jose Álvaro Domínguez adominguez(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 1

[Dovecot] dsync problem
by Frank Bonnet 09 Feb '11

09 Feb '11

hello I try to convert from mbox to mdbox using dsync i get the followin error using the following command dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto I get this error message : mail3# dsync mirror -u toto mbox:/user/toto:INBOX=/var/mail/toto dsync(root): Fatal: execvp(-u) failed: No such file or directory dsync-local(root): Error: read() from worker server failed: EOF any infos welcome thanks

3 4

[Dovecot] Permissions in shared folders
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, On my mail server I want to implement shared folders for each workgroup where there are many workgroups. One way would be to create a separate namespace for each workgroup. However, this does not scale well so I decided to use a single Shared mailbox and use ACLs: namespace public { separator = . prefix = Shared. location = maildir:/var/mail/shared:CONTROL=~/Maildir/shared } Each workgroup should get a subfolder in "Shared". Until now, this works, I create .Group1, .Group2 and assign correct group permissions and ACL files. However, now a user from group1 wants to create a subfolder in his IMAP folder. Since the permissions for /var/mail/shared/.Group1 are correct (writeable to group1 and the user is member of group1 and 'k' ACL permissions are active) I would expect it to work. However, for obvious reasons, the *sub*folder is created as /var/mail/shared/.Group1.Subfolder so it is actually not a subfolder in sense of the filesystem but rather a folder inside /var/mail/shared However, the user does (and should) not have write permissions to /var/mail/shared (only to /var/mail/shared/.Group1). Is there a way to overcome this problem? Why can't dovecot just use /var/mail/shared/.Group1/.Subfolder? Is there an option to do so? It would make everything a lot easier. The one option is to make /var/mail/shared world-writeable - which is not really a good option. A second option might be to use ACLs and give each group write permissions to /var/mail/shared. However, not even this seems very "clean" to me. What is the best way to handle this? Best regards, Luke

3 9

[Dovecot] ldap: LDAP attribute used multiple times. This is currently unsupported
by Lukas Haase 09 Feb '11

09 Feb '11

Hi, I have a problem when migrating from dovecot 1.0 to dovecot 1.2 (Debian lenny to Debian squeeze). In my dovecot-ldap.conf I have: user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,uid=system_groups_user I use the last parameter for the groups which I need for shared folders. If I only use this, everything works. However, I also use LDAP as passdb with prefetch: pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,uid=userdb_system_groups_user In this configuration I get the error in the subject line that uid is used multiple times. I know, but the message is somehow "weird" since it says it is *currently* unsupported. However, it seems to me that it is not supported any more. Is this true? Is there a reason for this? How can I fix this problem? Until now my shared folders do not works anymore because the group memberships are not assigned any more because of the missing system_groups_user parameter. Best regards, Luke

2 4

[Dovecot] critical feature from version 1 not migrated to version 2 = authentication configuration database per IP
by DaLiV＠apollo.lv 09 Feb '11

09 Feb '11

not possible make operation with dovecot version 2.x as was possible in version 1.x: requisites description: connect to dovecot service on IP1 - dovecot must serve users that related to domain1 located in database1 connect to dovecot service on IP2 - dovecot must serve users that related to domain2 located in database2 login must be with username that form not as "user@domain" but simple "user" databases may contain identical username, but they have different passwords existing version 1 config file, that allow such configuration: -------- /etc/dovecot.conf BEGIN ---------------- server mail.domain1.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert1.pem ssl_key_file = /etc/pki/cert1.key listen = 123.123.123.1 ssl_listen = 123.123.123.1 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain1.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } userdb ldap { args= /etc/dovecot-ldap.conf.domain1.tld1 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } server mail.domain2.tld { protocols = imaps pop3s pop3 ssl_cert_file = /etc/pki/cert2.pem ssl_key_file = /etc/pki/cert2.key listen = 123.123.123.2 ssl_listen = 123.123.123.2 default_mail_env = mbox:/tmp:INBOX=/var/mail/domain2.tld/%n:INDEX=MEMORY pop3_uidl_format = %08Xu%08Xv auth default { mechanisms = plain passdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } userdb ldap { args= /etc/dovecot-ldap.conf.domain2.tld2 } } login_process_per_connection = yes login_max_processes_count = 4 login_processes_count = 1 } -------- /etc/dovecot.conf END ---------------- /etc/dovecot-ldap.conf.domain1.tld and /etc/dovecot-ldap.conf.domain2.tld refers to different ldap databases

2 2

[Dovecot] Great time savings backing a mdbox versus Maildir
by Javier Miguel Rodríguez 09 Feb '11

09 Feb '11

Hello I am writing to this mailing list to thanks Timo for dovecot 2 & mdbox. We have almost 30.000 active users and our life was sad with Maildir & backup: 24 hours for a full backup with bacula (zlib enabled maildirs, 1.4 TB). After switching to mdbox, the backup time is under 12 hours ! Instead of backing 17 millions files, with mdbox our backup is only of 1 million files, and that speeds up a lot the backup operation. Timo, here you have detailed info about the bacula backup jobs, you can use them in the wiki if you desire. If you need aditional info (hardware specs, dovecot config, etc) I can share it. *Maildir:* |//Job: Backup_Linux_buzon_us.2011-01-21_19.03.26_38 Backup Level: Full Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 21-ene-2011 19:03:20 Start time: 21-ene-2011 19:03:29 End time: 22-ene-2011 19:46:45 Elapsed time:*1 day 43 mins 16 secs* Priority: 10 FD Files Written: 16,903,801 SD Files Written:*16,903,801* FD Bytes Written: 1,445,943,227,706 (1.445 TB) SD Bytes Written: 1,448,983,971,450 (1.448 TB) Rate:*16247.3 KB/s* Software Compression: None VSS: no Encryption: no Accurate: no Volume name(s): Buzones_US_2 Volume Session Id: 26 Volume Session Time: 1295511704 Last Volume Bytes: 1,450,628,892,676 (*1.450 TB*) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK//| *mdbox with mdbox_rotate_size=10m:* |Build OS: x86_64-redhat-linux-gnu redhat Enterprise release JobId: 3587 Job: Backup_Linux_buzon_us.2011-02-07_08.13.52_53 Backup Level: Full (upgraded from Incremental) Client: "buzon_us" 2.0.3 (06Mar07) x86_64-redhat-linux-gnu,redhat,Enterprise release FileSet: "Full Buzon" 2011-01-21 19:03:26 Pool: "Pool_Linux_Buzones_US" (From Job resource) Catalog: "MyCatalog" (From Client resource) Storage: "File" (From command line) Scheduled time: 07-feb-2011 08:13:44 Start time: 07-feb-2011 08:13:54 End time: 07-feb-2011 19:43:50 Elapsed time:*11 hours 29 mins 56 secs* Priority: 10 FD Files Written:*1,148,780* SD Files Written: 1,148,780 FD Bytes Written:*1,537,062,152,773 (1.537 TB)* SD Bytes Written: 1,537,218,147,402 (1.537 TB) Rate:*37130.7 KB/s* Software Compression: None VSS: no Encryption: no Accurate: yes Volume name(s): Buzones_US_4|Buzones_US_5 Volume Session Id: 101 Volume Session Time: 1296724657 Last Volume Bytes: 438,873,898,586 (438.8 GB) Non-fatal FD errors: 0 SD Errors: 0 FD termination status: OK SD termination status: OK Termination: Backup OK| Regards Javier de Miguel University of Seville

4 8

[Dovecot] sieve not working if i have override
by Paul A 08 Feb '11

08 Feb '11

Hi, I have a few domain that I'm overriding the mail_plugins, see password query below, however when I use this password query everything is working expect sieve gives me an error. How can I get around this problem? password_query = SELECT username as user, password, \ if('%d' IN ('virttest1.xxx.net', 'test2000.com'), \ 'quota imap_quota trash expire autocreate acl imap_acl',null) as userdb_mail_plugins, \ 101 as userdb_uid, 502 as userdb_gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib11_trash_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib20_expire_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Added userdb setting: mail_plugins=quota imap_quota trash expire autocreate acl imap_acl Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Loading modules from directory: /usr/local/lib/dovecot Feb 7 18:28:20 testip5 dovecot: managesieve: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Feb 7 18:28:20 testip5 dovecot: managesieve: Error: dlopen(/usr/local/lib/dovecot/lib02_imap_acl_plugin.so) failed: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so: undefined symbol: client_send_tagline Feb 7 18:28:20 testip5 dovecot: managesieve: Error: Can't load plugin imap_acl_plugin: Plugin is intended to be used only by imap binary (we're managesieve) Feb 7 18:28:20 testip5 dovecot: managesieve: Fatal: Couldn't load required plugins It also complains about imap_quota. Dovecot 2.x Thanks, paul

4 5

[Dovecot] converting from maildir to mdbox ?
by Jan-Frode Myklebust 08 Feb '11

08 Feb '11

I´m considering moving from maildir to mdbox, but don´t quite see how I should do the conversion with minimal downtime. Our userdb is ldap, and the we use this setting to point to the users maildirectory: user_attrs = mailMessageStore=mail=maildir:%$:INDEX=/indexes/%1u/%1.1u/%u,mailQuota=quota_rule=*:storage=%$ i.e. every user has a "mailMessageStore" attribute in LDAP that points to his INBOX. Any ideas for how we can migrate user by user to mdbox? Can we add a mailboxFormat attribute to LDAP, and somehow get that used in the user_attrs lookup ? Ideally have it default to maildir if not set, so that the current setup isn´t changed and only migrated users are affected. Or should we be keeping the mailboxFormat as a prefix in all mailMessageStore strings ? -jf

2 1

[Dovecot] How to recover a mail box from an assertion failure
by Michael Durket 08 Feb '11

08 Feb '11

I'm running Dovecot version 1.2.11 and getting this assertion error on a user's mail: Panic: file /home/durket/dovecot-1.2.11/src/lib-index/mail-transaction-log-view.c: line 290 (mail_transaction_log_view_set): assertion failed: (min_file_seq != max_file_seq || max_file_seq != view->head->hdr.file_seq || max_file_offset != (uoff_t)-1 || min_file_offset <= view->head->sync_offset) I realize that there are newer releases of Dovecot (that even may fix this bug) but what I need to know is if there's anything I can do (like having Dovecot recreate indexes or whatnot) that will recover the user's mail (short of having to reconstruct it from backups).

2 1

[Dovecot] Auto rebuild indexes?
by Willie Gillespie 08 Feb '11

08 Feb '11

Here's an easy question for you. I'm restoring some emails from a backup. Do I need to delete or otherwise manually rebuild the indexes? dovecot.index.cache dovecot.index.log dovecot-uidlist Or will Dovecot itself detect that something is amiss and handle it on first folder access? Using Maildir with Dovecot 1.2.9

3 3

[Dovecot] lmtp error at domains containing "-" sign
by ckubu 08 Feb '11

08 Feb '11

hallo, I have running dovecot 2.0.9. I want to deliver mail with rcipient prameter "-", we spoked about that at thread "LMTP with address extension" and after your patch and version 2.0.8 that works. But now, there's an another much greater problem. No mails to adresses, which domain-part contains an "-" sign wil be delivered (i.e. test(a)aku-punkt-berlin.de) lmtp is looking about the user "test@aku" instead of "test(a)aku-punkt-berlin.de" and the following logentries appears: Feb 3 10:46:36 vserver08 dovecot: auth: Debug: sql(test@aku): SELECT '/var/vmail/' || maildir as home, '5000' AS uid, '5000' AS gid, '*:bytes=' || quota as quota_rule FROM mailbox WHERE username = 'test@aku' and active = true Feb 3 10:46:36 vserver08 dovecot: auth: sql(test@aku): Unknown user Greatings Christoph

4 9

[Dovecot] best fine tune for 2.0.9
by fakessh ＠ 08 Feb '11

08 Feb '11

Hi Timo and the other directors of the following pigeonhole dovecot sieve I wonder what are the strengths and weaknesses of my config, and what do I need to change to stick more to a best configuration r13151 ~]# /usr/sbin/dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-grs-ipv6-32 i686 CentOS release 5.5 (Final) auth_mechanisms = plain login base_dir = /var/run/dovecot/ imap_capability = +IDLE listen = [::] log_path = /var/log/maillog log_timestamp = %Y-%m-%d %H:%M:%S login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = maildir:~/Maildir mail_max_userip_connections = 20 managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest namespace { inbox = yes location = prefix = separator = . } passdb { driver = pam } plugin { plugin = autocreate managesieve sieve sieve = ~/.dovecot.sieve sieve_before = /var/sieve-scripts/roundcube.sieve sieve_dir = ~/sieve sieve_global_path = whatever } protocols = sieve imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } vsz_limit = 64 M } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = * , [::] port = 993 } process_limit = 128 vsz_limit = 64 M } service imap { client_limit = 5 service_count = 0 } service managesieve-login { inet_listener managesieve-login { address = * port = 2000 } process_limit = 128 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = * , [::] port = 995 } process_limit = 128 vsz_limit = 64 M } ssl_ca = </etc/pki/tls/certs/root.crt ssl_cert = </etc/pki/tls/certs/r13151.ovh.net.crt ssl_key = </etc/pki/tls/private/r13151.ovh.net.key ssl_verify_client_cert = yes userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = autocreate } protocol pop3 { mail_plugins = autocreate pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s } protocol lda { hostname = r13151.ovh.net mail_plugins = autocreate sieve postmaster_address = postmaster(a)fakessh.eu sendmail_path = /usr/lib/sendmail } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 } -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7

2 2

[Dovecot] dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable
by Kurt Hockenbury 08 Feb '11

08 Feb '11

We recently switched over mail servers to one running dovecot and postfix on RedHat Enterprise 6. The mail store is NFS on a NetApp filer, the index files are on local disk. We have about 6000 total active users, though not all of them access the system at the same time. All goes well for a while, then we start seeing errors like this in the log: dovecot: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable imap-login: Internal login failure (auth failed, 1 attempts) And at this point, users can't log in. I don't know what Resource dovecot is running out of. The machine is a 12-core Xeon 2.27Ghz, with 24GB RAM. I have removed the 1024 nproc limit in /etc/security/limits.d/90-nproc.conf, and upped the nproc and nofile limits to 16384 and 65535 respectively, both in limits.conf, as well as adding ulimit statements in /etc/init.d/dovecot (belt and suspenders). I have tried adjusting dovecot.conf, but I'm obviously missing something. dovecot -n follows: # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.14.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.0 (Santiago) auth_master_user_separator = * auth_mechanisms = plain login default_client_limit = 5000 default_process_limit = 5000 disable_plaintext_auth = no mail_fsync = always mail_gid = 501 mail_location = maildir:~/Maildir:INDEX=/var/indexes/%n mail_nfs_storage = yes mail_plugins = quota mail_uid = 501 passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=200M } service auth { client_limit = 32768 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { process_min_avail = 12 service_count = 0 } service pop3-login { service_count = 0 } shutdown_clients = no ssl_cert = </etc/pki/postfix/certs/nexus.pem ssl_key = </etc/pki/postfix/private/nexus_key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = $mail_plugins imap_quota } Thanks, -Kurt Hockenbury

5 17

[Dovecot] Outlook 2010 IMAP disconnected
by Luigi Rosa 08 Feb '11

08 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A customer moved from a previous version of Outlook to 2010. When he forces the synchronization of the IMAP folders he gets this error: Disconnected for inactivity. Protocollo: IMAP Server: mail.xxxxxxxxxxxxxxxxxxx Porta: 143 Codice errore: 0x800CCCDD Dovecot simply logs this: Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=2488/534485 Feb 3 09:20:34 server dovecot: imap(xxxx): Disconnected: Logged out bytes=63/815 Where can I search to solve this issue? Ciao, luigi - -- / +--[Luigi Rosa]-- \ I'd be a vegetarian if bacon grew on trees. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk1KZj8ACgkQ3kWu7Tfl6ZQtHwCfTZPpFC5iHvL1+5EuxKAFlqWD DjcAn3rYU0Uwc13arHirb/5G3NuYcWX/ =LkGi -----END PGP SIGNATURE-----

5 9

[Dovecot] vpopmail passdb deadlock if tcprules binary is missing
by Teodor Milkov 07 Feb '11

07 Feb '11

Hello, I've just found that if vpopmail is compiled with --enable-roaming-users=y, but tcprules binary is missing there is kind of denial of service situation, which is not very obvious for debugging. I know this is result of misconfiguration and I suppose this is more of a vpopmail() bug, but it is somewhat hard to debug and causes greater harm to dovecot long running auth process than vpopmail's short living vchkpw process. Symptoms -------- Login to dovecot imap takes very long time. There are auth processes in D state: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 9873 0.0 0.0 2884 1396 ? D 14:04 0:00 dovecot/auth -w root 11292 0.0 0.0 2884 1396 ? S 14:25 0:00 \_ dovecot/auth -w Cause ----- When new user has to be authenticated from vpopmail, the sequence of events goes something like this: * libexec/dovecot/auth -w process is doing the authentication (passdb-vpopmail.c) * passdb-vpopmail.c: at some point user is authenticated and open_smtp_relay() is called * vpopmail.c: open_smtp_relay() gets a write lock on ~vpopmail/etc/open-smtp.lock adds new IP to ~vpopmail/etc/open-smtp and calls update_rules() etc. to rebuild the tcp.cdb file * vpopmailc: tcprules_open() is called and it fork()s and tries to execv() tcprules * if tcprules is not found, execv() fails silently, and we are left with a forked libexec/dovecot/auth instance, which runs all over again up to the open_smtp_relay() point where it tries to obtain write lock on ~vpopmail/etc/open-smtp.lock again (it is already locked by parent) Hope this helps someone.

1 0

[Dovecot] maildrop and multi-dbox
by Manfred Lotz 07 Feb '11

07 Feb '11

Hi there, I'm using Dovecot 2.0.9-1 under Arch Linux. Currently, I have Maildir configured, and I move all my emails into dovecot by using this sequence: 1) cron starts fetchmail periodically under user manfred to collect my mails from various email accounts. 2) In ~/.fetchmailrc I have configured /usr/bin/maildrop as MDA. 3) In ~/.mailfilter (used by maildrop) I have extensive filtering in place and call bogofilter (by using xfilter) to classify spam mails. This works fine so far. Now I'd like to migrate to dovecot's new format multi-dbox. My question now: Is it correct that then I cannot longer use maildrop and would need to switch do dovecot-lda? -- Thanks, Manfred

3 4

[Dovecot] DoveCot 2.0.19: Problem compiling Solaris 10u9 x86 with dbox storage enabled
by Denny Schierz 07 Feb '11

07 Feb '11

hi, I can't compile DoveCot 2.0.19 with dbox enabled on our Solaris 10/U9: LDFLAGS="-L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/" ./configure --prefix=/usr/local/dovecot/2.0.19 --with-ssl=openssl --with-rundir=/var/run/dovecot --with-storages=maildir,mbox,dbox --with-ldap=yes gmake -> ========================== [... ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/mail-storage-callbacks.Tpo .deps/mail-storage-callbacks.Po gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-dict -I../../src/lib-master -I../../src/lib-mail -I../../src/lib-imap -I../../src/lib-index -I../../src/lib-storage -I/opt/csw/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -MT main.o -MD -MP -MF .deps/main.Tpo -c -o main.o main.c In file included from ../../src/lib-storage/mail-storage.h:10, from imap-commands.h:6, from imap-client.h:4, from imap-common.h:17, from main.c:3: ../../src/lib-storage/mailbox-list.h:250: warning: parameter has incomplete type mv -f .deps/main.Tpo .deps/main.Po /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -export-dynamic -L/opt/csw/lib -L/usr/lib -R/opt/csw/lib/ -o imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o ../../src/lib-storage/libdovecot-storage.la ../../src/lib-dovecot/libdovecot.la -export-dynamic -lrt -lnsl -lsocket -lrt -lsendfile libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o .libs/imap cmd-append.o cmd-capability.o cmd-cancelupdate.o cmd-check.o cmd-close.o cmd-copy.o cmd-create.o cmd-delete.o cmd-enable.o cmd-examine.o cmd-expunge.o cmd-fetch.o cmd-id.o cmd-idle.o cmd-list.o cmd-logout.o cmd-lsub.o cmd-namespace.o cmd-noop.o cmd-rename.o cmd-search.o cmd-select.o cmd-sort.o cmd-status.o cmd-store.o cmd-subscribe.o cmd-thread.o cmd-uid.o cmd-unselect.o cmd-unsubscribe.o cmd-x-cancel.o imap-client.o imap-commands.o imap-commands-util.o imap-expunge.o imap-fetch.o imap-fetch-body.o imap-search.o imap-search-args.o imap-settings.o imap-status.o imap-sync.o mail-storage-callbacks.o main.o -L/opt/csw/lib -L/usr/lib ../../src/lib-storage/.libs/libdovecot-storage.so /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so ../../src/lib-dovecot/.libs/libdovecot.so -liconv -lnsl -lsocket -lrt -lsendfile -R/usr/local/dovecot/2.0.19/lib/dovecot -R/opt/csw/lib/ ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /usr/local/dovecot/v2/dovecot-2.0.9/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file dbox_storage ../../src/lib-storage/.libs/libdovecot-storage.so ld: fatal: Symbol referencing errors. No output written to .libs/imap collect2: ld returned 1 exit status gmake[3]: *** [imap] Error 1 gmake[3]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src/imap' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/usr/local/dovecot/v2/dovecot-2.0.9' gmake: *** [all] Error 2 ============================ compiling without dbox works. # pkgutil -a | grep iconv libiconv CSWiconv 1.9.2 1.3 MB cu denny

2 2

[Dovecot] Dovecot Or Debian, Boot-Time Error "Can't assign requested address"
by Sabahattin Gucukoglu 06 Feb '11

06 Feb '11

Hi all, I have a really weird problem, which for now I have solved by just binding to the IPv6 wildcard address "::". Using the latest packages from Debian unstable (1.x series), I set up a tunnel with tunnelbroker.net for IPv6. I assign two of the delegated addresses in my /48 using IP aliases in /etc/network/interfaces to my ethernet interface (eth0 and eth0:1). All other servers start and run, binding to the primary address (eth0) assigned. The packet forwarder is not necessary, so it isn't turned on using sysctl. But Dovecot will only start if I launch it using the init script after boot. Until then, in syslog there is always: Fatal: listen(2001:470:xxxx::1): Can't assign requested address Anybody have the slightest clue what's going on here? Debian bug, or Dovecot? I suspect some problem with initscript order, yet inspection shows no apparent problem; network starts up before services. Very, very odd. Cheers, Sabahattin

1 0

[Dovecot] Splitting up mail_location setting?
by Timo Sirainen 06 Feb '11

06 Feb '11

mail_location setting has started becoming a bit bloaty. I'm not actually even sure why I've kept adding more parameters to it rather than just adding new settings. It's also caused confusion, because people try things like: mail_location = mbox:/var/mail/%u mail_location = mbox:INBOX=/var/mail/%u Although the first one has been giving ok enough error message for a long time now and the second one also will give in v2.0.10, it still would be nicer if there wasn't any need for such confusion at all. The settings could instead be: mail_format = mbox mail_inbox_path = /var/mail/%u Then Dovecot could complain about mail_root_path being empty, which would be more understandable.. The mail_location setting itself would keep working probably forever for backwards compatibility (and also in some setups it would be difficult to split it when it comes from LDAP/SQL), although some of its parameters could maybe be dropped after a while (SUBSCRIPTIONS, DIRNAME, MAILBOXDIR). So if you did e.g.: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_root_path = ~/mail2 The result would be same as mbox:~/mail2:INBOX=/var/mail/%u. Although this can also result in probably unwanted situation: mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_format = maildir mail_root_path = ~/Maildir Now the result would be maildir:~/Maildir:INBOX=/var/mail/%u. This can be avoided by setting mail_inbox_path="" explicitly. Or the other way around: mail_inbox_path = /var/mail/%u mail_location = maildir:~/Maildir:INBOX= Without the INBOX= the mail_inbox_path would be in use. Below are the setting names I thought about using: a) mail_location = maildir:~/Maildir:INBOX=~/Maildir/.INBOX:INDEX=~/indexes:CONTROL=~/control:LAYOUT=fs:SUBSCRIPTIONS=courier-subscriptions mail_format = maildir mail_root_path = ~/Maildir mail_inbox_path = ~/Maildir/.INBOX mail_index_path = ~/indexes mail_control_path = ~/control mail_directory_layout = fs mail_subscriptions_fname = courier-subscriptions b) mail_location = mdbox:~/mdbox:ALT=/alt/%u:LAYOUT=fs:DIRNAME=dbox-Mails:MAILBOXDIR=mailboxes mail_format = mdbox mail_root_path = ~/mdbox mail_alt_path = /alt/%u mail_dir_name = dbox-Mails mail_mailboxes_dir_name = mailboxes Thoughts?

3 2

Re: [Dovecot] Samba AD and Dovecot
by Jason Gunthorpe 06 Feb '11

06 Feb '11

On Fri, Feb 04, 2011 at 01:47:31PM -0700, Trever L. Adams wrote: > > There was a thread a month or so ago on how to do GSSAPI with AD and > > dovecot kerberos. It works great, and I highly recommend it for AD > > sites. Check the archives, it isn't really too hard. > I am not finding this. Do you happen to remember the subject? No, but it is pretty simple using latest everything (well, Debian squeeze).. Basically from scratch.. Notice this also sets up NTLM, which is supported by many roaming devices (ie phones). 1) Put this or similar in /etc/samba/smb.conf [global] workgroup = $NT_WORKGROUP$ realm = $REALM$ security = ads kerberos method = secrets and keytab 2) Confirm that hostname gives an unqualified name and hostname -f gives a fully qualified name. Confirm you have DNS setup properly (eg dig -t SRV _kerberos._udp.$REALM$ works OK) 3) Join the machine to AD $ net ads join -U 'user with AD privs' $ kinit AD_USER $ kvno host/`hostname -f` 4) Setup imap SPN: $ net ads keytab add imap $ net ads search cn=`hostname` | grep servicePrincipalName $ klist -k $ kvno imap/`hostname -f` The last three should report imap/`hostname -f` entries. 5) Setup dovecot.. Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi gss-spnego login ntlm 6) Setup exim.. $ net ads keytab add smtp Use these in the dovecot config: client { path = /var/run/dovecot/auth-client mode = 0660 group = Debian-exim } } And this at the end of the exim.conf: dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id=PLAIN-${quote:$auth1} dovecot_ntlm: driver = dovecot public_name = NTLM server_socket = /var/run/dovecot/auth-client server_set_id=NTLM-${quote:$auth1} dovecot_gssapi: driver = dovecot public_name = GSSAPI server_socket = /var/run/dovecot/auth-client server_set_id=GSSAPI-${quote:$auth1} dovecot_gssapi_spnego: driver = dovecot public_name = GSS-SPNEGO server_socket = /var/run/dovecot/auth-client server_set_id=GSS-SPNEGO-${quote:$auth1} 7) Setup openssh in sshd_config GSSAPIAuthentication yes GSSAPICleanupCredentials yes GSSAPIStrictAcceptorCheck yes Jason

2 2

[Dovecot] Best filesystem?
by Monika Janek 05 Feb '11

05 Feb '11

Hi everyone! What's the best filesystem to use for the mail spool? I'm debating between Debian with xfs or FreeBSD with zfs. I'm not sure which way to go. I'm migrating from cyrus. I have about 50 users so it's not a large setup. Cheers! Monika -- Monika Janek Systems Administrator, Side Effects Software Toronto, Ontario Canada 416-504-9876 x207 www.sidefx.com

14 43

[Dovecot] Question about managing multiple domains
by Sergio Moscoso 04 Feb '11

04 Feb '11

Actually we have configured a server (postfix,dovecot,mysql) with multiple domains, but the problem resides in that we don't want to login via POP3 using "user@domain" just using "user", because we'll migrate our actual platform (Qmail) to dovecot. Our users are logging to their mail boxes, using only user name. We want to ask if that's posible to use a function like a "vipmap" in qmail, that allow to map an IP address to a domain. We're using the dovecot 1.0.7, the configuration shows as follows: login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 100 mail_location: maildir:~/Maildir/ mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: username_format: %Lu passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: static args: uid=101 gid=102 home=/home/vmail/%d/%n We'll apreciate your response, 'cause we coulnd't find information about this issuet and we didn't to find any clue that shows how can realize it. Thank you in advance. Sergio Moscoso

1 0

[Dovecot] EUID not changing when delivering to a mailbox
by rastik＠tereus.eu 04 Feb '11

04 Feb '11

Hello, I've set up virtual mailboxes and I'm using one uid/gid pair (mail/mail) to deliver almost all messages. Some accounts I'd like to have accessible by local Linux accounts as well, so postfix is delivering them using separate uids (gid stays the same). But I run into a problem when dovecot auth correctly fetches uid/gid from MySQL database, but still uses general mail uid to access the mailbox instead of user uid. This is what I have in dovecot log: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=myipaddr rip=myipaddr lport=143 rport=55513 dovecot: auth(default): client out: CONT 1 dovecot: auth(default): client in: CONT<hidden> dovecot: auth-worker(default): sql(joe(a)mydomain.com,myipaddr): query: SELECT CONCAT('/var/mail/', maildir) AS userdb_home, username as user, password, CONCAT('*:bytes=', quota) AS userdb_quota_rule, uid, gid FROM mailbox WHERE username = 'joe(a)mydomain.com' AND active = 1 dovecot: auth(default): client out: OK 1 user=joe(a)mydomain.com uid=1000 gid=12 dovecot: auth(default): master in: REQUEST 11 17252 1 dovecot: auth(default): prefetch(joe(a)mydomain.com,myipaddr): success dovecot: auth(default): master out: USER 11 joe(a)mydomain.com home=/var/mail/mydomain.com/joe/ quota_rule=*:bytes=-1 dovecot: imap-login: Login: user=<joe(a)mydomain.com>, method=PLAIN, rip=myipaddr, lip=myipaddr, TLS dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): stat(/var/mail/mydomain.com/joe/indexes/.INBOX) failed: Permission denied (euid=8(mail) egid=12(mail) missing +x perm: /var/mail/mydomain.com/joe/indexes) dovecot: IMAP(joe(a)mydomain.com): file_dotlock_create(/var/mail/mydomain.com/joe/Maildir/dovecot-uidlist) failed: Permission denied (euid=8(mail) egid=12(mail) missing +w perm: /var/mail/mydomain.com/joe/Maildir) ricola dovecot: IMAP(joe(a)mydomain.com): opendir(/var/mail/mydomain.com/joe/Maildir/new) failed: Permission denied (euid=8(mail) egid=12(mail) missing +r perm: /var/mail/mydomain.com/joe/Maildir/new) dovecot: IMAP(joe(a)mydomain.com): Disconnected: Logged out bytes=171/775 My configuration is: # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-hardened-r6 x86_64 Gentoo Base System release 2.0.1 ext4 listen: *, [::] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login first_valid_uid: 8 last_valid_uid: 1999 first_valid_gid: 12 last_valid_gid: 12 mail_privileged_group: mail mail_uid: 8 mail_gid: 12 mail_location: maildir:/var/mail/%d/%n/Maildir/:INDEX=/var/mail/%d/%n/indexes lda: postmaster_address: postmaster(a)mydomain.com mail_plugins: quota auth default: mechanisms: plain login user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail I'm not sure if I got the concept correctly, but I was expecting that dovecot will use uid from the database. I was not able to find any relevant information in the archives. If it was explained already in the past, please send me some keywords that would help me find it. Thank you, Rastislav Wartiak

2 1

[Dovecot] INBOX in mbox format and IMAP folders in maildir format ?
by Frank Bonnet 04 Feb '11

04 Feb '11

Hello Would it be possible to setup such configuration ? INBOX in /var/mail/ using MBOX format IMAP folders in Maildir format Thanks a lot !

2 1

[Dovecot] Dovecot 2 multiple address/port binding
by Thomas Hummel 04 Feb '11

04 Feb '11

Hello, Sorry, I know the topic has been talked about already but I searched the archives and I'm still unsure of the proper way to have dovecot (imap-login) listen to several addresses and/or several ports. 1. how do I translate dovecot-1 protocol imap { listen = xx.xx.xx.xx:143 yy.yy.yy.yy:143 ssl_listen = xx.xx.xx.xx:993 yy.yy.yy.yy:939 } I started by service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } but I don't know if I should add multiple "address" lines, other inet_listener {} sections, or multiple address on the same "address" line. 2. besides I don't know if it's possible to listen on the same address to several ports for the same "subservice" : for instance could I have an inet_listener imap {} listen on zz:zz:zz:zz:port1 and zz:zz:zz:zz:port2 ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Ldap and secondary PosixGroups
by Matthieu Ambrosy 04 Feb '11

04 Feb '11

Hello all, I'm using "Pam Ldap" for my users (Debian Lenny). getent passwd : *m.ambrosy:x:2000:100:m.ambrosy:/home/m.ambrosy:/bin/bash* getent group : *l_admin:*:2000:m.ambrosy l_personnel:*:2001:m.ambrosy l_mail:*:2003:m.ambrosy* As you can see, in LDAP, user "m.ambrosy" (PosixAccount) is defined with gidNumber = 100 (local group "users") and uidNumber = 2000. Furthermore this user belongs to 3 secondary Ldap PosixGroup (l_admin 2000, l_personnel 2001, l_mail 2003). If /var/mail belongs to the primary group (100), no problem. If /var/mail belongs to l_mail (2003) : *mkdir(/var/mail/m.ambrosy) failed: Permission denied (euid=2000(m.ambrosy) egid=100(users) missing +w perm: /var/mail, euid is not dir owner* In fact, Dovecot seems to not see secondary groups for my user. It just checks the primary group (gidNumber). If I modify my Ldap user like this, getent passwd : *m.ambrosy:x:2000:2003:m.ambrosy:/home/m.ambrosy:/bin/bash *It works fine but my "l_mail" group must be secondary (like an option for some users), not the primary gidNumber. Can I do it in the conf file?* * Am I making myself clear? Regards, Matthieu.

3 2

[Dovecot] Improving lmtp performance
by Joseba Torre 04 Feb '11

04 Feb '11

Hi, yesterday I migrated and old version with sendmail + courier to a virtual machine (vmware) with postfix and dovecot 2.0.9. Everything worked fine, but with a more or less default setup for both dovecot and postfix, lmtp performance was pretty bad: a message was written to an inbox every 2 or 3 seconds. With that rate and a 5000+ and growing mail queue mail delivery was really slow. After searching both the wiki and this list I didn't find anything related to this. I tried a couple of things, and finally added process_min_avail = 10 to service lmtp entry in 10-master.conf and local_destination_concurrency_limit = 10 in postfix's main.cf Now mail delivery is really fast, and my mail queue was delivered in a very sort time. Is this the right solution, or there's a better setup to improve mail delivery performance? Also, if this is a common problem, may be something should appear in http://wiki2.dovecot.org/LMTP Thanks. -- Joseba Torre. Vicegerencia de TICs, área de Explotación

2 3

[Dovecot] disabling outgoing mail ?
by Per Jessen 03 Feb '11

03 Feb '11

We're using roundcube as a method of access to a read-only email archive served via imap/dovecot. I was thinking of disabling outgoing mails by fiddling with the roundcube code, but thought it might be possible to disable the outgoing functionality from dovecot? /Per Jessen, Zürich

2 2

[Dovecot] Quota ignore issue
by Tim Traver 03 Feb '11

03 Feb '11

Hi Timo, ok, in my dovecot setup, I have a setting to ignore messages in the Spam folder (I will put my dovecot -n at the end of the message), and a strange thing appears to be happening. If I do a quota recalc on an account, It creates the maildirsize file correctly, without the contents of the Spam folder calculated into the total used. But, it looks like when a new spam email is delivered, before the sieve rules in the lda can move it into the spam folder, it is added to the maildirsize file. Then, once it is moved into the Spam folder, if it is directly expunged from the folder, it isn't subtracted from maildirsize file. I am using roundcube as a webmail solution, and it recognizes the Spam folder and lets users directly empty the Spam folder instead of moving it to the trash, and then removing it. If I do move the mail from the Spam folder to the Trash folder, and then empty the trash, it then puts the subtraction in the maildirsize folder. So, either it shouldn't add it in the first place, or even though it is deleted directly from the Spam folder, it should be subtracted from the maildirsize folder, right? Hmmm...maybe its the structure of the default sieve command that I have that is making it want to add it? here is the default sieve script that I use in the sieve_after field : require "fileinto"; # rule:[Spam and Virus Tag] if anyof (header :contains "Subject" "[VIRUS-TAG]", header :contains "Subject" "[SPAM-TAG]") { fileinto "Spam"; stop; } Essentially, what is happening is that users are getting their quota filled up for messages that were in their Spam folder... Thanks, Tim. and here is my dovecot -n output : # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-STABLE i386 auth_username_format = %Lu auth_username_translation = %@ auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = yes first_valid_uid = 100 listen = * lock_method = dotlock log_path = /local/logs/dovecot.errors mail_fsync = always mail_gid = 100 mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 100 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mmap_disable = yes passdb { args = /bin/checkpassword_dovecot_auth driver = checkpassword } plugin { quota = maildir:User quota quota_rule = Trash:storage=+100M quota_rule2 = Spam:ignore sieve = ~/.dovecot.sieve sieve_after = /home/mailboxes/sieve/to_spam_folder.sieve sieve_dir = ~/Maildir/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = sn mode = 0600 user = sn } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /bin/checkpassword_dovecot_deliver driver = checkpassword } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { info_log_path = /local/logs/dovecot-deliver.log log_path = /local/logs/dovecot-deliver-errors.log mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_sieve_capability = comparator-i;ascii-numeric fileinto reject vacation imap4flags notify include envelope body relational regex subaddress copy }

2 2

[Dovecot] Reproducable hang caused by IMAP server
by Matthias Scheler 03 Feb '11

03 Feb '11

Hello, I have problems with Dovecot 2.0.9 (and 2.0.8) under NetBSD/amd64 5.1. "mutt" hangs when I try to quit it after accessing a folder via IMAP. I can reproduce the problem with these steps: 1.) I run "mutt -f =foo" to access folder "foo" via IMAP. The folder contains about 10 messages in my case. 2.) I tag two of the messages and then save them to a *non existent* folder. When "mutt" asks whether the folder should be created I confirm the action. 3.) Finally I exit "mutt" and confirm the question whether the messages marked as deleted (by the save in step 2) should be deleted. 4.) "mutt" now hangs indefinitely. I've attached a packet capture of the above steps to this e-mail. As far as I can tell from the packet capture and debugging "mutt" with "gdb" it waits for the IMAP server to confirm the logout which never happens. I've never seen this problem with Dovecot 1.2.16. Here is the requested debugging information: Output of "dovecot --version": 2.0.9 Output of "doveconf -n": # 2.0.9: /etc/pkg/dovecot/dovecot.conf # OS: NetBSD 5.1_STABLE amd64 auth_mechanisms = cram-md5 digest-md5 plain login listen = *, [::] mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u passdb { args = /etc/pkg/dovecot/passwd driver = passwd-file } pop3_uidl_format = %08Xv%08Xu protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/openssl/certs/dovecot.pem ssl_key = </etc/openssl/private/dovecot.pem userdb { driver = passwd } Kind regards -- Matthias Scheler http://zhadum.org.uk/

2 3

[Dovecot] Resource temporarily unavailable
by Len7hir 03 Feb '11

03 Feb '11

On very high traffic in POP3 I have flood of messages in my log: Feb 2 16:32:17 pp4 dovecot: pop3: Error: net_connect_unix(/var/run/dovecot/auth-master) failed: Resource temporarily unavailable What a Terrible Failure (WTF)? Can You help me resolve this problem? I've not found any info about auth-master problem :/ My settings: default_process_limit = 2000 default_client_limit = 4096 service pop3-login { service_count = 0 vsz_limit = 128M process_min_avail = 8 } FD limit in system = 32000 8 cpu, 28GB RAM about 50 login per second Different Error messages I've when set service_count = 1. Feb 2 10:21:29 pp4 dovecot: pop3-login: (5052) Disconnected: Connection queue full (no auth attempts) -- Len7hir

2 1

[Dovecot] STARTTLS problem
by Lucas -LandM- 03 Feb '11

03 Feb '11

Hi, We try to configure dovecot as usual (all our servers have dovecot+vpopmail+qmail or postfix). We set up dovecot with the next outcome: - imap ok - imaps ok - imap STARTTLS NOT OK Debug: root@s13:/home/lucas# gnutls-cli --starttls -p 143 ip Resolving 'ip'... Connecting to 'ip'... - Simple Client Mode: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready. *** Starting TLS handshake *** Non fatal error: Resource temporarily unavailable, try again. *** Fatal error: A TLS packet with unexpected length was received. *** Handshake has failed Same result with thunderbird and openssl. Log: Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:26:58 s13 dovecot: imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [83.61.13.57] Feb 2 20:27:34 s13 dovecot: imap-login: Disconnected (no auth attempts): rip=83.61.13.57, lip=109.200.5.221, TLS handshaking: Disconnected My config: # 2.0.9: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-server x86_64 Ubuntu 8.04 auth_mechanisms = plain login cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 listen = ip mail_debug = yes mail_gid = 89 mail_uid = 89 passdb { driver = vpopmail } plugin { quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u setting_name = quota, trash } protocols = imap pop3 service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = vpopmail } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { mail_max_userip_connections = 3 pop3_client_workarounds = outlook-no-nuls ,oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Any clue? Thank you in advanced, Lucas

2 5

[Dovecot] Signal 11 on deliver
by Matt 02 Feb '11

02 Feb '11

I just installed Postfix, MySQL, and Dovecot. Everything is working great (IMAP, POP, SMTP) except that I can't get incoming mail to deliver properly. Incoming mail logs the following: Feb 2 13:23:52 mail postfix/qmgr[2187]: CE0D41F0263: from=<mhoppes@[redacted]>, size=650, nrcpt=1 (queue active) Feb 2 13:23:52 mail postfix/pipe[3594]: CE0D41F0263: to=<mhoppes@[redacted]>, relay=dovecot, delay=0.32, delays=0.3/0/0/0.01, dsn=5.3.0, status=bounced (Command died with signal 11: "/usr/libexec/dovecot/deliver") Running /usr/libexec/dovecot/deliver -d mhoppes@[redacted] results in an e-mail being delivered to the recipient. Any thoughts on what my issue is?

2 2

[Dovecot] Can´t move folders in Outlook
by Mult´Moldes - Informatica 02 Feb '11

02 Feb '11

Hi, this is my first time in a mailing list, so I don´t know if I´m doing it right. My problem is that I cannot move a folder into another one, I can create them, move messages, etc, but I can´t move a folder, no matter what folder. It works fine With Thunderbird, but in Outlook Express or WLive Mail2009 it just doesn´t go! Must be something wrong with my .conf. I hope someone can help me please. dovecot --version 1.0.15 dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: 192.168.10.2:210 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u auth default: passdb: driver: pam userdb: driver: passwd

1 0

[Dovecot] override not working
by Paul A 02 Feb '11

02 Feb '11

Hi, I'm using dovecot 2.x and I'm using override so that only certain domains are allowed to use ACLs, however it does seem to be working even though I see the mail_plugins override in the logs. In the config file I have protocol imap { mail_plugins = quota imap_quota trash expire autocreate } Using the following password/user queries: password_query = SELECT username as user, password, if('%d'='virttest2.xxx.net', 'acl imap_acl',null) as mail_plugins, concat('/var/vmail/%d/', maildir) as userdb_home, concat('maildir:/var/vmail/%d/', maildir) as userdb_mail, 101 as userdb_uid, 502 as userdb_gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' user_query = SELECT maildir, if('%d'='virttest2.xxx.net', 'acl imap_acl',null) as mail_plugins, 101 AS uid, 502 AS gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' Now in n the log I do see the mail_plugins override but for some reason I get an IMAP error when trying to share folders. out: OK 1 user=user20(a)virttest2.xxx.net mail_plugins=acl imap_acl quota_rule=*:bytes=512000000 ERROR: IMAP server does not support the ACL capability, sorry.

1 2

[Dovecot] UIDPLUS in the wiki
by Peter Mogensen 02 Feb '11

02 Feb '11

Hi, Isn't the stuff in the wiki about UIDPLUS being disabled because of maildir outdated? http://wiki.dovecot.org/FeatUIDPLUS http://wiki2.dovecot.org/FeatUIDPLUS /Peter

3 3

[Dovecot] Logging on syslog and selected dovecot files at the sametime
by Antonio Perez-Aranda 02 Feb '11

02 Feb '11

Is it possible to send logs to syslog and files set by log_path and log_info_path on config? Just two logs at the same time (not realtime). -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

2 2

[Dovecot] automated mailbox trimming?
by Monique Y. Mudama 02 Feb '11

02 Feb '11

Hello all, If this is answered in the wiki, I apologize. Please point me to it and I'll be on my way ... This may be more of a MailDir-generic question, except that as I understand it there's some wiggle room in the naming of the message files. I've just switched from an mbox-based mail system to Dovecot with MailDir. With mbox, I used logrotate to keep some of my mailboxes (spam, sent, stuff like that) down to only the most recent messages. What's the best way to go about mailbox trimming with dovecot's implementation of maildir? I was thinking of writing a script to simply move or delete old files, but would I mess up dovecot's expectations for directory/file structure that way? My mail directories are in my user's home directory. I'm fine with writing a script or application (time permitting, of course), but before I do so, is there already a solution out there? In case it's relevant: $ dovecot --version 1.2.15 $ dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37 x86_64 Debian 6.0 log_timestamp: %Y-%m-%d %H:%M:%S ssl: required login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: passdb: driver: passwd-file args: /etc/dovecot/passwords userdb: driver: passwd userdb: driver: passwd-file args: /etc/dovecot/passwords

4 3

[Dovecot] Plugin delete-to-trash on Dovecot 2.0
by Antonio Perez-Aranda 01 Feb '11

01 Feb '11

There are some body using delete-to-trash on any version of Dovecot 2.0? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

4 8

[Dovecot] Cannot authenticate with new Red Hat/Fedora SHA512
by John Cooper 01 Feb '11

01 Feb '11

RHEL6 and Fedora 14 use an improved password algorithm of SHA512 on a brand new install of the OS (:$6$ in shadow file). cat /etc/shadow user1:$6$<salt>$<password>:15006:0:99999:7::: I cannot get dovecot to authenticate. I've search for a way to change the default algorithm in dovecot and found you should use CRYPT but I don't know what to put in the /etc/dovecot/dovecot.conf or /etc/dovecot/conf.d/* Can this be done or do you need to use an alternate password file with MD5? Thanks, John.

3 5

[Dovecot] cgroup support
by Andreas Pelme 01 Feb '11

01 Feb '11

Hi, I am setting up a system that enforces cgroup restrictions when a user logs in via SSH, and for all the services that are run by a particular user. I am also running dovecot to give users IMAP/POP access to their mailboxes. However, to be part of a cgroup, PIDs must be explicitly added to the cgroup tasks file. So for now, all my processes are run with resource restrictions, except for Dovecot processes. It would be really cool if dovecots child/worker processes could be added the a cgroup in addition to the usual setuid/chroot protections that already exists. Adding a process to a cgroup is a matter of writing the PID to the correct cgroup tasks file. If this were implemented as an extra field in userdb, it could be very powerful, and allow for all kinds of resource management/accounting of dovecot processes. This would obviously not be cross-platform, since cgroups are a feature of the Linux kernel. Would that be a problem? Is support for cgroups something that could be considered for dovecot at all? Are there other ways to put dovecot processes in cgroups? I do not really have a patch or a plan for how everything would work out in detail. If this would be useful for dovecot, I would be happy to start hacking on a patch. Cheers Andreas

3 7

[Dovecot] cross compile dovecot with openssl
by kylixboy 01 Feb '11

01 Feb '11

hello everyone: i can configue dovecot with the following: ./configure --build='i686-pc-linux-gnu' --host='arm-openwrt-linux' --with-ssl=openssl --with-storages=maildir i_cv_epoll_works=yes i_cv_inotify_works=yes i_cv_posix_fallocate_works=yes i_cv_signed_size_t=no i_cv_gmtime_max_time_t=32 i_cv_signed_time_t=yes i_cv_mmap_plays_with_write=yes i_cv_fd_passing=yes i_cv_c99_vsnprintf=yes lib_cv_va_copy=yes lib_cv___va_copy=yes lib_cv_va_val_copy=yes CFLAGS="-gdwarf-2 -msoft-float" CFLAGS="-I/sdk-comcerto-openwrt-6.0/staging_dir/target-arm_glibc-2.7/usr/include" LDFLAGS="-L/sdk-comcerto-openwrt-6.0/staging_dir/target-arm_glibc-2.7/usr/lib" And can compile && make the dovecot binary, but except the following warnings and errors: configure: WARNING: openssl/ssl.h: accepted by the compiler, rejected by the preprocessor! configure: WARNING: openssl/ssl.h: proceeding with the compiler's result configure: WARNING: openssl/err.h: accepted by the compiler, rejected by the preprocessor! configure: WARNING: openssl/err.h: proceeding with the compiler's result configure: WARNING: zlib.h: accepted by the compiler, rejected by the preprocessor! configure: WARNING: zlib.h: proceeding with the compiler's result ./configure: line 22927: /sdk-comcerto-openwrt-6.0/staging_dir/toolchain-arm_gcc-4.1.2_glibc-2.7/usr/bin/rpcgen: cannot execute binary file Sorry about that i want to know why the warnings be happened and how to work out that. Best regards.

1 0

[Dovecot] Permissions issues after dovecot reload
by Matt Rude 01 Feb '11

01 Feb '11

Hello, Today while looking at a different issue (one user couldn't retrieve mail; DNS issue) I set 'mail_debug=yes' then ran `dovecot reload` on our mail server. After running the reload, dovecot started complaning about permission issues with the dict file, and preceded to try to kill it's self. The self reload didn't seem to work, and since this is a production system, I was forced to restart the dovecot service. After the restart of the service, everything seemed to go back to normal. Dovecot is currently working as expected, no other permission errors in the logs. Dovecot Version: 2.0.9 (3582271a897e) running on Fedora 14 running with a mySQL setup including dict tables (quota, expire). The virtual user's mail has a local user and group id of 1000. Below is the expert from the log: Jan 25 18:00:01 milly postfix/smtpd[9418]: connect from odin.example.com[174.143.172.159] Jan 25 18:00:01 milly postfix/smtpd[9418]: disconnect from odin.example.com[174.143.172.159] Jan 25 18:01:05 milly dovecot: dict: mysql: Connected to localhost (postfix) Jan 25 18:01:17 milly dovecot: master: Warning: SIGHUP received - reloading configuration Jan 25 18:01:27 milly postfix/anvil[6470]: statistics: max connection rate 2/60s for (submission:192.168.10.12) at Jan 25 17:57:19 Jan 25 18:01:27 milly postfix/anvil[6470]: statistics: max connection count 1 for (smtp:168.100.1.4) at Jan 25 17:52:25 Jan 25 18:01:27 milly postfix/anvil[6470]: statistics: max cache size 3 at Jan 25 17:55:23 Jan 25 18:01:59 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:01:59 milly dovecot: imap(matt): Error: Internal quota calculation error Jan 25 18:02:02 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:02:02 milly dovecot: imap(matt): Error: Internal quota calculation error Jan 25 18:02:14 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:02:14 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:02:14 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:02:14 milly dovecot: imap(matt): Error: net_connect_unix(/usr/var/run/dovecot/dict) failed: Permission denied (euid=1000(virtualmail) egid=1000(virtualmail) missing +r perm: /usr/var/run/dovecot/dict, euid is not dir owner) Jan 25 18:02:17 milly dovecot: master: Warning: Processes aren't dying after reload, sending SIGTERM. Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=73545/124557 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=9609/127653 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=2836/8394 Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=9335/53756 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=2449/6084 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=1000/2416 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=52000/12276 Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=3796/86595 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=557/2333 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=2003/6833 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=60624/207831 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=103883/195056 Jan 25 18:02:17 milly dovecot: imap: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: imap: Server shutting down. bytes=68919/371893 Jan 25 18:02:17 milly dovecot: config: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) Jan 25 18:02:17 milly dovecot: dict: Warning: Killed with signal 15 (by pid=5922 uid=0 code=kill) ( I manually restarted the dovecot service ) Jan 25 18:03:09 milly dovecot: lda: Debug: Loading modules from directory: /usr/lib/dovecot/ Jan 25 18:03:09 milly dovecot: lda: Debug: Module loaded: /usr/lib/dovecot//lib10_quota_plugin.so Jan 25 18:03:09 milly dovecot: lda: Debug: Module loaded: /usr/lib/dovecot//lib20_expire_plugin.so Jan 25 18:03:09 milly dovecot: lda: Debug: Module loaded: /usr/lib/dovecot//lib90_sieve_plugin.so Jan 25 18:03:09 milly dovecot: auth: mysql: Connected to localhost (postfix) Jan 25 18:03:09 milly dovecot: lda: Debug: auth input: lists maildir=lists uid=1000 gid=1000 home=/var/spool/virtualmailboxes/lists quota_rule=*:storage=4194304 mail=mdbox:/var/spool/virtualmailboxes/lists Jan 25 18:03:09 milly dovecot: lda: Debug: changed username to lists Jan 25 18:03:09 milly dovecot: lda: Debug: Added userdb setting: plugin/maildir=lists Jan 25 18:03:09 milly dovecot: lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=4194304 Jan 25 18:03:09 milly dovecot: lda: Debug: Added userdb setting: mail=mdbox:/var/spool/virtualmailboxes/lists Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Effective uid=1000, gid=1000, home=/var/spool/virtualmailboxes/lists Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=* bytes=4294967296 messages=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=Trash bytes=+858993459 (20%) messages=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=Junk bytes=+858993459 (20%) messages=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: dict quota: user=lists, uri=proxy::quota, noenforcing=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/var/spool/virtualmailboxes/lists Jan 25 18:03:09 milly dovecot: lda(lists): Debug: fs: root=/var/spool/virtualmailboxes/lists, index=, control=, inbox= Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Namespace : Using permissions from /var/spool/virtualmailboxes/lists: mode=0700 gid=-1 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/ Jan 25 18:03:09 milly dovecot: lda(lists): Debug: shared: root=/usr/var/run/dovecot, index=, control=, inbox= Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Namespace : type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=mdbox:/var/spool/virtualmailboxes//public Jan 25 18:03:09 milly dovecot: lda(lists): Debug: fs: root=/var/spool/virtualmailboxes//public, index=, control=, inbox= Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Namespace Public/: Using permissions from /var/spool/virtualmailboxes//public: mode=0700 gid=-1 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=* bytes=1073741824 messages=100000 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=Trash bytes=+214748364 (20%) messages=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: Quota rule: root=User quota mailbox=Junk bytes=+214748364 (20%) messages=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: dict quota: user=lists(a)example.com, uri=proxy::quota, noenforcing=0 Jan 25 18:03:09 milly dovecot: lda(lists): Debug: none: root=, index=, control=, inbox= I can provide my doveconf -n output and any other info you may need. Thanks -Matt

2 2

[Dovecot] disable_plaintext_auth = no ignored by dovecot in Ubuntu 10.04
by David Mattox 31 Jan '11

31 Jan '11

Help!! I have been trying to get Dovecot configured to allow plaintext auth with no success. After some testing with the mail system I discovered the >dovecot -a commant to dump the config file values from the program. Gee, changing the value of disable_plaintext_auth had no effect on what the program reported this value to be! To eliminate possible errors caused by other config file entries I finally restored the /etc/dovecot/dovecot.conf file that was created by installing the package. I then changed the one line to uncomment disable_plaintext_auth and set it equal to no. restart the box and execute dovecot -a The value is still set to the default value of yes... Help! What is happening and how to I get this system to allow plain text auth without TLS? I did also try setting different ports for imap, imaps, pop3, pop3s inside the seperate protocol blocks with no effect. Below you will find a partial of the config file. Below that you will find the output of >dovecot -a and >dovecot -n Thank you in advance for any help with this problem. Dave dave@mail:~$ cat /etc/dovecot/dovecot.conf ## Dovecot configuration file # If you're in a hurry, see http://wiki.dovecot.org/QuickConfiguration # "dovecot -n" command gives a clean output of the changed settings. Use it # instead of copy&pasting this file when posting to the Dovecot mailing list. # '#' character and everything after it is treated as comments. Extra spaces # and tabs are ignored. If you want to use either of these explicitly, put the # value inside quotes, eg.: key = "# char and trailing whitespace " ... #listen = * disable_plaintext_auth = no dave@mail:~$ sudo dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-generic i686 Ubuntu 10.04.1 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dave@mail:~$ dave@mail:~$ sudo dovecot -a # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-generic i686 Ubuntu 10.04.1 LTS base_dir: /var/run/dovecot log_path: info_log_path: log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: mail protocols: imap pop3 imaps pop3s managesieve listen: * ssl_listen: ssl: yes ssl_ca_file: ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_cert_username_field: commonName ssl_verify_client_cert: no disable_plaintext_auth: yes verbose_ssl: no

3 4

[Dovecot] Particular user post-login hang
by Henry C. 31 Jan '11

31 Jan '11

Greets, I'm using dovecot 2.0.9 (also tried rolling back to 2.0.8 which does the same - the output below is from 2.0.8), and this problem is imap specific. The following is a recurring problem with a specific user - as far as we can tell, other users are working just fine (there are thousands); but I bet there are others. In a nutshell: User authenticates OK, then the imap process hangs. It's almost as if something in the user's inbox is causing the problem, since if I clear all emails (and cache), then things work fine. The user will then receive emails OK for some random period (maybe a few days) and be able to read/write OK via imap, and the problem will re-occur. The debug output shows nothing untoward: auth: Debug: auth client connected (pid=20774) auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=144 rport=41641 resp=<hidden> auth: Debug: shadow(username,127.0.0.1): lookup auth: Debug: client out: OK 1 user=username auth: Debug: master in: REQUEST 1938161665 20774 1 238230058d076a9af1cd4405244d33ba auth: Debug: passwd(username,127.0.0.1): lookup auth: Debug: master out: USER 1938161665 username system_groups_user=username uid=17286 gid=300 home=/home/mailusers/username imap-login: Info: Login: user=<username>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=20775, secured imap(username): Debug: Effective uid=17286, gid=300, home=/home/mailusers/username imap(username): Debug: fs: root=/home/mailusers/username/., index=, control=, inbox=/var/mail/username Rawlog looks good: IN: A002 CAPABILITY A003 NAMESPACE C64 EXAMINE "" A002 STATUS "INBOX" (MESSAGES UNSEEN RECENT) A003 SELECT "INBOX" A004 EXPUNGE A005 SELECT "INBOX" A006 EXPUNGE A007 UID SEARCH UNSEEN A008 UID FETCH 2533:2588 (FLAGS BODY.PEEK[HEADER.FIELDS (RECEIVED)]) OUT: ... * 15 FETCH (UID 2536 FLAGS () BODY[HEADER.FIELDS (RECEIVED)] {944} ... * 67 FETCH (UID 2588 FLAGS () BODY[HEADER.FIELDS (RECEIVED)] {945} ... A008 OK Fetch completed. It's at this point that nothing happens for a short while and the user gets a blank screen. I tried running it through gdb (ie, "Talk IMAP Directly" - as described at http://dovecot.org/bugreport.html) but that fails with "Cannot find user-level thread for LWP nnnn: generic error", which is probably specific to our old box/installation. strace hangs with: Process 6574 attached - interrupt to quit gettimeofday({1296472202, 318955}, NULL) = 0 gettimeofday({1296472202, 319073}, NULL) = 0 epoll_wait(0x8, 0x806c4f8, 0x6, 0x1b708d gdb backtrace gives: 0xb7e2bff9 in epoll_wait () from /lib/tls/libc.so.6 (gdb) bt full #0 0xb7e2bff9 in epoll_wait () from /lib/tls/libc.so.6 No symbol table info available. #1 0xb7eed4eb in io_loop_handler_run (ioloop=0x806c390) at ioloop-epoll.c:181 ctx = (struct ioloop_handler_context *) 0x806c4b8 list = (struct io_list *) 0x8082850 io = (struct io_file *) 0x806c4f8 tv = {tv_sec = 1696, tv_usec = 510098} msecs = 8 ret = -1 i = 0 j = -1208929836 call = 8 #2 0xb7eec249 in io_loop_run (ioloop=0x806c390) at ioloop.c:404 No locals. #3 0xb7ed8e15 in master_service_run (service=0x806c2e0, callback=0xfffffffc) at master-service.c:484 No locals. #4 0x0805ee75 in main (argc=1, argv=0x806c1d8) at main.c:375 set_roots = {0x8061d80, 0x0} service_flags = 6 storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT postlogin_socket_path = 0x806c2e0 "\220�\006\bp�\006\b\200�\006\b\b" username = 0x0 c = -4 (gdb) lsof shows: COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME imap 6574 username cwd DIR 9,0 4096 30130787 /home2/home/mailusers/username imap 6574 username rtd DIR 3,1 4096 2 / imap 6574 username txt REG 9,0 941700 35836003 /home2/local/libexec/dovecot/imap imap 6574 username mem REG 0,0 0 [heap] (stat: No such file or directory) imap 6574 username mem REG 9,0 109568 30130578 /home2/home/mailusers/username/.imap/INBOX/dovecot.index.cache imap 6574 username mem REG 3,1 41351 13749135 /lib/tls/libnss_files-2.3.5.so imap 6574 username mem REG 3,1 41583 13749137 /lib/tls/libnss_nis-2.3.5.so imap 6574 username mem REG 3,1 92501 13749132 /lib/tls/libnsl-2.3.5.so imap 6574 username mem REG 3,1 35866 13749133 /lib/tls/libnss_compat-2.3.5.so imap 6574 username mem REG 3,1 87827 13749140 /lib/tls/libpthread-2.3.5.so imap 6574 username mem REG 3,1 1366940 13749126 /lib/tls/libc-2.3.5.so imap 6574 username mem REG 3,1 34582 13749142 /lib/tls/librt-2.3.5.so imap 6574 username mem REG 3,1 13120 13749129 /lib/tls/libdl-2.3.5.so imap 6574 username mem REG 9,0 17380 6897709 /home2/home/mailusers/username/.imap/INBOX/dovecot.index.log imap 6574 username mem REG 9,0 1980063 35835914 /home2/local/lib/dovecot/libdovecot.so.0.0.0 imap 6574 username mem REG 9,0 4911010 35835915 /home2/local/lib/dovecot/libdovecot-storage.so.0.0.0 imap 6574 username mem REG 3,1 27274 654816 /lib/libsafe.so.2.0.16 imap 6574 username mem REG 3,1 99790 654754 /lib/ld-2.3.5.so imap 6574 username 0w CHR 1,3 327760 /dev/null imap 6574 username 1w CHR 1,3 327760 /dev/null imap 6574 username 2w FIFO 0,5 1548069248 pipe imap 6574 username 3w FIFO 0,5 1548064788 pipe imap 6574 username 4r FIFO 0,5 1548414049 pipe imap 6574 username 5w FIFO 0,5 1548069260 pipe imap 6574 username 6u unix 0xe481b180 1548069218 /usr/local/var/run/dovecot/login/imap imap 6574 username 7w FIFO 0,5 1548414049 pipe imap 6574 username 8u 0000 0,6 0 9 unknown inode type imap 6574 username 9u REG 9,0 17380 6897709 /home2/home/mailusers/username/.imap/INBOX/dovecot.index.log imap 6574 username 10u IPv4 1548412828 TCP localhost:144->localhost:38067 (ESTABLISHED) imap 6574 username 11u REG 9,0 2632 30130623 /home2/home/mailusers/username/.imap/INBOX/dovecot.index imap 6574 username 12u REG 9,0 109568 30130578 /home2/home/mailusers/username/.imap/INBOX/dovecot.index.cache imap 6574 username 13u REG 9,0 10472498 9257043 /home2/var/spool/mail/username Any pointers? Thanks Henry ---------------------- CONFIG: ------- auth_debug = yes auth_mechanisms = plain login default_login_user = nobody first_valid_uid = 200 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = mbox:~/.:INBOX=/var/mail/%u passdb { driver = shadow } protocols = imap service imap-login { inet_listener imap { port = 144 # 143 is for imap proxy } } ssl = no userdb { driver = passwd }

2 4

[Dovecot] dovecot can't see mail that is there
by Joachim Ferreira 31 Jan '11

31 Jan '11

Hi list, I've yet to figure out what's the issue with my installation, why I can't see the mails that are definitely there. I've updated with last package: dovecot-2.0.9-1.fc14.x86_64.rpm and performed the following test: 1) send a simple 2 lines test mail from "root" to user "testdvct" with alpine 2) login under "testdvct" + run alpine + list (only list, not read) the mail: +------------------------------ Alpine Output --------------------------------------+ | ALPINE 2.02(1266) MESSAGE INDEX Folder: INBOX Message 1 of 1 NEW | | | | + N 1 17:43 root (881) | +--------------------------------------------------------------------------- --------+ so it tells me I've got one mail from root 3) I issue the command: "strace -o strace-dovecot.txt -p 2218" where 2218 is the /usr/sbin/dovecot PID 4) telnet into pop3: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user testdvct +OK pass <my-password> +OK Logged in. list +OK 0 messages: . quit +OK Logging out. Connection closed by foreign host. 5) kill strace Still no joy! Is there anything else I can do to debug this issue? Thanks, JF ------------------------------------------- There are not dovect entries in the syslog ------------------------------------------- # ls -lhR /var/run/dovecot /var/run/dovecot: total 12K srw------- 1 root root 0 Jan 19 17:38 anvil srw------- 1 root root 0 Jan 19 17:38 anvil-auth-penalty srw------- 1 root root 0 Jan 19 17:38 auth-client srw------- 1 dovecot root 0 Jan 19 17:38 auth-login srw------- 1 root root 0 Jan 19 17:38 auth-master srw------- 1 root root 0 Jan 19 17:38 auth-userdb srw------- 1 dovecot root 0 Jan 19 17:38 auth-worker srw------- 1 root root 0 Jan 19 17:38 config srw------- 1 root root 0 Jan 19 17:38 dict srw------- 1 root root 0 Jan 19 17:38 director-admin srw------- 1 root root 0 Jan 19 17:38 director-userdb srw-rw-rw- 1 root root 0 Jan 19 17:38 dns-client srw------- 1 root root 0 Jan 19 17:38 doveadm-server lrwxrwxrwx 1 root root 25 Jan 19 17:38 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4.0K Dec 18 12:30 empty srw-rw-rw- 1 root root 0 Jan 19 17:38 lmtp drwxr-x--- 2 root dovenull 4.0K Jan 19 17:38 login -rw------- 1 root root 5 Jan 19 17:38 master.pid /var/run/dovecot/empty: total 0 /var/run/dovecot/login: total 0 srw-rw-rw- 1 root root 0 Jan 19 17:38 dns-client srw-rw-rw- 1 root root 0 Jan 19 17:38 imap srw-rw-rw- 1 root root 0 Jan 19 17:38 login srw-rw-rw- 1 root root 0 Jan 19 17:38 pop3 srw-rw-rw- 1 root root 0 Jan 19 17:38 ssl-params --------------------------------------------------------- # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.10-74.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) auth_debug = yes auth_debug_passwords = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh service imap-login { group = dovenull } service pop3-login { group = dovenull } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } -------------------------------------------------------- -----Original Message----- From: dovecot-bounces+joach_ferr=yahoo.co.uk(a)dovecot.org [mailto:dovecot-bounces+joach_ferr=yahoo.co.uk@dovecot.org] On Behalf Of Joachim Ferreira Sent: 06 January 2011 19:46 To: dovecot(a)dovecot.org Subject: [Dovecot] dovecot can't see mail that is there I used to install dovecot on any Fedora fresh installation and I could fetch my internal mail few minutes later. Now I've been struggling for two days and I haven't got my mail working yet. I have Fedora 14 with sendmail. Some application on the same machine send mail to an account on the same machine (hence all is confined to one machine) and I want to retrieve it from a laptop on the same LAN via Outlook. If I login into the account and check the mail with the alpine (ex pine) client, I see that there are 10 mails. When I "telnet localhost pop3" and login into the account, the "list" command says there are 0 mails. Various suggestions found on the internet for slightly different configuration did not help. All the help will be very much appreciated. Thanks, Joachim ++++++++++++++++++++++++++++++++++++++++++++ The output of dovecot -n ------------------------ # dovecot -n # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.10-74.fc14.x86_64 x86_64 Fedora release 14 (Laughlin) auth_debug = yes auth_debug_passwords = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } NOTE - I don't use ssl, but disabling ssl + certificate did not change behaviour. THE OUTPUT OF /var/log/maillog ----------------------------------------- Jan 6 19:14:26 BEATLES dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jan 6 19:14:26 BEATLES dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jan 6 19:14:26 BEATLES dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jan 6 19:14:26 BEATLES dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jan 6 19:14:26 BEATLES dovecot: auth: Debug: pam(joachim,192.168.0.88): lookup service=dovecot Jan 6 19:14:26 BEATLES dovecot: auth: Debug: pam(joachim,192.168.0.88): #1/1 style=1 msg=Password: Jan 6 19:14:26 BEATLES dovecot: auth: Debug: client out: OK#0111#011user=joachim Jan 6 19:14:26 BEATLES dovecot: auth: Debug: master in: REQUEST#0113019243521#01112409#0111#0116f7f83729469c6158f08283ec2e20067 Jan 6 19:14:26 BEATLES dovecot: auth: Debug: passwd(joachim,192.168.0.88): lookup Jan 6 19:14:26 BEATLES dovecot: auth: Debug: master out: USER#0113019243521#011joachim#011system_groups_user=joachim#011uid=500#011gi d=500#011home=/home/joachim Jan 6 19:14:26 BEATLES dovecot: pop3-login: Login: user=<joachim>, method=PLAIN, rip=192.168.0.88, lip=192.168.0.2, mpid=12414 Jan 6 19:14:26 BEATLES dovecot: pop3(joachim): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0

2 2

[Dovecot] Duplicate messages when moving message to inbox
by Ron Garret 31 Jan '11

31 Jan '11

Hello, I am encountering a strange problem but I'm not sure if it's a dovecot problem or a Mac Mail problem. The symptom is that if I move a message from a folder into my inbox the message ends up showing up as a duplicate in Mac Mail. On the server it's still just one message. This ONLY happens when I move a message IN to the inbox. It does not happen when I move a message out of my inbox into a folder, or when I move a message between folders. I can force a sync on Mac Mail and the duplicate is still there. If however I quit Mac Mail and start it up again, the duplicate disappears. I can move one of the duplicated messages out of my inbox into a folder and then back into my inbox repeatedly and end up with (apparently) an arbitrary number of copies of the same message. On the server, though, there is still only one file. Surely I'm not the first person to have encountered this behavior? Does anyone happen to know if this is a dovecot bug or a Mac Mail bug (or, hopefully, a configuration problem)? Thanks, rg

2 1

[Dovecot] Thunderbird doesn't popup on new mail
by Adrian Stoica 31 Jan '11

31 Jan '11

I have a question : i've upgrade dovecot from 1.1.4 to 2.0.9 and everything is fine except thunderbird clients , that no longer show a popup when new mail arrives. Anyone know why ? doveconf -n: # 2.0.9: /usr/dovecot2/etc/dovecot/dovecot.conf # OS: Linux 2.6.35.4 i686 auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 1 mins auth_mechanisms = plain login cram-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose_passwords = plain base_dir = /var/run/dovecot/ default_client_limit = 5000 default_internal_user = vmail default_login_user = nobody default_process_limit = 200 deliver_log_format = mail from=%f subject=%s msgid=%m: %$ dict { acl = mysql:/usr/dovecot2/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 1 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = maildir:~/Maildir mail_plugins = " quota acl trash notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / subscriptions = yes type = private } namespace { hidden = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } passdb { args = /usr/dovecot2/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = INBOX autosubscribe4 = Sent mail_log_events = delete mailbox_delete mailbox_rename mail_log_group_events = yes quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=95%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve trash = /usr/dovecot2/etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)dacris.net protocols = imap rejection_subject = Rejected: %s: %r service auth { unix_listener auth-userdb { mode = 0660 user = vmail } } service dict { unix_listener dict { user = vmail } } service imap-login { process_min_avail = 16 service_count = 1 } service imap { process_limit = 2048 vsz_limit = 512 M } service quota-warning { executable = script /bin/quota_warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/dovecot2/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota acl trash notify mail_log sieve autocreate" } protocol imap { mail_plugins = " quota acl trash notify mail_log imap_quota imap_acl" }

3 3

Re: [Dovecot] Cooperating with dovecot in its Maildir
by Timo Sirainen 30 Jan '11

30 Jan '11

On 29.1.2011, at 19.05, Rob Browning wrote: Oops, I accidentally added you to discard list rather than accept list :) > Timo Sirainen <tss(a)iki.fi> writes: > >> If you're only changing the standard maildir flags (not a..z = >> keywords) then you don't really need to lock anything. The uidlist >> locking could prevent a mail from being temporarily lost, but this >> happening is highly >> unlikely. http://wiki2.dovecot.org/MailboxFormat/Maildir#Locking >> explains. > > I saw that, but I wasn't sure if the fact that a message might "receive > a new UID" could be a problem. It's a theoretical problem mostly, especially in your case. It's mainly visible when doing stress testing with large maildirs. I doubt in regular use it matters. Courier doesn't try to prevent it in any way and it seems to have worked mostly ok. > Or is the UID supposed to change when the flags change? No.

2 3

[Dovecot] dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): method=PLAIN
by John Espiro 30 Jan '11

30 Jan '11

First, my problem. Settings are below that... Everything works fine - I can login to webmail (users are tied to LDAP). I can send and receive email via my Thunderbird Client. However in my mail.err log I see lots of messages that say: dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): method=PLAIN 1.) What does that mean, and how can I solve it? 2.) With regards to pop3s I am not altogether sure that I am using the right config in my dovecot.conf file (also below). Can someone let me know? Version: ================== dovecot --version = 1.2.12 System: ================== Ubuntu Server 10.10 (64bit) dovecot -n ================== # 1.2.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.4-rscloud x86_64 Ubuntu 10.10 log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3 pop3s imap imaps login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: pam userdb: driver: passwd Dovecot.conf ================== egrep -v "^[[:space:]]*#|^$" /etc/dovecot/dovecot.conf protocols = pop3 pop3s imap imaps log_timestamp = "%Y-%m-%d %H:%M:%S " ssl = yes ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem login_dir = /var/run/dovecot/login mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail protocol imap { login_executable = /usr/lib/dovecot/imap-login mail_executable = /usr/lib/dovecot/imap } protocol pop3 { login_executable = /usr/lib/dovecot/pop3-login mail_executable = /usr/lib/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv } protocol managesieve { } auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root !include_try /etc/dovecot/auth.d/*.auth } dict { } plugin { } !include_try /etc/dovecot/conf.d/*.conf

4 13

[Dovecot] dovecot@dovecot.org
by Veronese Claudio 30 Jan '11

30 Jan '11

I apologize, but I can not find a complete list of directives in dovecot.conf possible. where can I find? thanks excuse my for my orrible english -- Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP autenticato? GRATIS solo con Email.it http://www.email.it/f Sponsor: Apri Conto Corrente Arancio entro il 28 febbraio 2011 e ricevi 100 euro da spendere su Media World compra online. Aprilo adesso! Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=11255&d=29-1

5 4

Re: [Dovecot] sql : uid, gid, home ignored ?
by Hurricane 30 Jan '11

30 Jan '11

> > > > Hello, > > > > I'm trying to setup a dovecot imap server. > > > > version is 2.0.9 > > I've setup a mysql database using: > > > > user_query = \ > > SELECT home, uid, gid, home as userdb_home, uid as userdb_uid, > > gid as userdb_gid, \ > > FROM user WHERE username = '%n' AND domain = '%d' AND active = > > 'Y' > > > > Your SQL statement is incorrect, try: > > user_query = SELECT userdb_home as home, userdb_uid as uid, userdb_gid > as gid, \ > FROM user WHERE username = '%n' AND domain = '%d' AND active = 'Y' > > > > nick > (I sent the first mail with an address not registred with the mailing list) Thank you Nick, but it didn't changed a thing. (I guess dovecots ignores columns with unknown names) When I connect I still get: ==> mail.err <== Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: user theuser: Couldn't drop privileges: User is missing UID (see mail_uid setting) Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: Internal error occurred. Refer to server log for more information. ==> mail.info <== Jan 30 11:06:12 mail.mysite.com dovecot: imap-login: Login: user=<theuser>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, mpid=9298, TLS Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: user theuser: Couldn't drop privileges: User is missing UID (see mail_uid setting) Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: Internal error occurred. Refer to server log for more information. ==> mail.log <== Jan 30 11:06:12 mail.mysite.com dovecot: imap-login: Login: user=<theuser>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, mpid=9298, TLS Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: user theuser: Couldn't drop privileges: User is missing UID (see mail_uid setting) Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: Internal error occurred. Refer to server log for more information. ==> mail.warn <== Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: user theuser: Couldn't drop privileges: User is missing UID (see mail_uid setting) Jan 30 11:06:12 mail.mysite.com dovecot: imap(theuser): Error: Internal error occurred. Refer to server log for more information. ==> dovecot-debug.log <== 2011-01-30 11:06:12auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=5.6.7.8 rip=1.2.3.4 lport=143 rport= 9863 2011-01-30 11:06:12auth: Debug: client out: CONT 1 2011-01-30 11:06:12auth: Debug: client in: CONT 1 AGh1cnJpY2FuZQBka3NtdDExJA== 2011-01-30 11:06:12auth: Debug: sql(theuser(a)mysite.com,1.2.3.4): query: SELECT username AS user, password, home AS userdb_home, uid AS userdb_uid, id AS userdb_gid, home, uid, gid FROM user WHERE username = 'theuser' AND domain = 'mysite.com' AND active = 'Y' 2011-01-30 11:06:12auth: Debug: auth(theuser(a)mysite.com,1.2.3.4): username changed theuser(a)mysite.com -> theuser 2011-01-30 11:06:12auth: Debug: auth(theuser(a)mysite.com,1.2.3.4): username changed theuser(a)mysite.com -> theuser 2011-01-30 11:06:12auth: Debug: client out: OK 1 user=theuser home=/home/theuser uid=2000 gid=1000 2011-01-30 11:06:12auth: Debug: master in: REQUEST 1628045313 9246 1 926873f8d25265e8b06ad56f5ac8ba9d 2011-01-30 11:06:12auth: Debug: master out: USER 1628045313 theuser The debug shows the right home, uid, gid for the user but it seems it does not cares about that afterwards. The error only disappears when I set the global mail_uid and mail_gid but that's not what I need. I need to be able to use a specific uid/gid/home for each account. Weird. Regards, Eric

2 1

[Dovecot] inform users's about new spam
by ckubu 30 Jan '11

30 Jan '11

Hallo evryone! Mailsetup: postfix+dovecot2 with postgres database backend - about 2,000 virtual mailboxes, growing.. New possible spam will be sorted into a users directory named "spam", emails older than 30 day's in that folder will be deleted by using expunge. I would like to inform my users evry two day's (or something like that) about new emails in the spam folder. Can you give me a hint how to handle that ? Are there helpful tools , or have i to wrote my own script, walking through the folders, checking for new emails since last check and finally inform the user if needed. Best wishes Christoph

1 0

[Dovecot] Copying sieve scripts
by Christoph Pleger 30 Jan '11

30 Jan '11

Hello, I am using squirrelmail with avelsieve to edit my filter rules. The filter rules are like this: 1. If the message contains a virus, delete the mail and notify me by email. 2. If the message is spam, deliver it to my spam folder. 3. If the message is from the dovecot mailing list, deliver it to my dovecot folder Yesterday, I created a new user and wanted to let him have rules 1 and 2 like above, only with another destination for email notification. So, I copied my sieve script into the sieve directory of the new user, deleted rule 3, changed the destination for email notification and then called sievec to compile the rule set. But this did not work like expected: Using squirrelmail, I saw that the new user had only rules 1 and 2, but the destination in rule 1 still contains my email address. My own account still has three rules. So, this simple way of copying sieve scripts does not work. Is there another way to copy sieve rules from one user to another? Regards Christoph

3 2

[Dovecot] sql : uid, gid, home ignored ?
by Eric Diaz Fernandez 30 Jan '11

30 Jan '11

Hello, I'm trying to setup a dovecot imap server. version is 2.0.9 I've setup a mysql database using: user_query = \ SELECT home, uid, gid, home as userdb_home, uid as userdb_uid, gid as userdb_gid, \ FROM user WHERE username = '%n' AND domain = '%d' AND active = 'Y' password_query = \ SELECT username AS user, password, home as userdb_home, uid as userdb_uid, gid as userdb_gid, home, uid, gid \ FROM user WHERE username = '%n' AND domain = '%d' AND active ='Y' (I get the information with and without the userdb_ prefix since I was not sure what was needed) When I login, I see the password_query in the debug log and it says: client out: OK 1 user=theuser home=/home/theuser uid=1000 gid=1000 master in: REQUEST 547880961 10068 1 e6...(hexadecimal stuff) master out: USER 547880961 theuser But in the mail.err log i see: dovecot: imap(theuser): Error: user theuser: Couldn't drop privileges: User is missing UID (see mail_uid setting) dovecot: imap(theuser): Error: Internal error occurred. Refer to server log for more information. The same two lines are also displayed in mail.info and mail.log Further testing (setting mail_uid & mail_gid to a nobody) shown that the home setting was ignored too. The sql example says that uid and gid are supposed to be an override of the mail_uid and mail_gid settings. Any idea of why the columns are ignored ? Thanks in advance, Eric

3 3

[Dovecot] Cooperating with dovecot in its Maildir
by Rob Browning 29 Jan '11

29 Jan '11

Is it possible to cooperate with dovecot within its Maildir, and if so, what's required? In this particular case, we're thinking of trying to allow notmuch to operate directly on the dovecot Maildir, and at the moment, the only modifications notmuch makes are to change maildir flags. Would locking dovecot-uidlist.lock be sufficient, perhaps via liblockfile? Also, is there some reliable way to detect a dovecot Maildir? For example, are any of the dovecot-* files guaranteed to exist all the time? Thanks -- Rob Browning rlb @defaultvalue.org and @debian.org GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4

2 1

[Dovecot] How do I do this with mdbox?
by Odhiambo Washington 29 Jan '11

29 Jan '11

In my life with Maildir, mails were stored as single files, each mail per file. It was pretty easy to resend an e-mail from a Maildir folder to another address, by causing the mail to be re-injected into my MTA (Exim) queue for processing: I'd use a very simple shell script to achieve the above: #!/bin/sh email=$(find $*) { for x in ${email}; do sendmail president(a)egypt.gov < ${x}; done } Now, with mdbox container/storage, it beats me how to achieve the same. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

2 1

[Dovecot] bsdauth + dovecot-sieve
by Gonzalo Rodriguez 28 Jan '11

28 Jan '11

Hi all, I have a problem with my dovecot/postfix configuration: here is my dovecot -n # /usr/local/sbin/dovecot -n # 1.1.20: /etc/dovecot.conf Warning: fd limit 128 is lower than what Dovecot can use under full load (more than 768). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: OpenBSD 4.7 amd64 ffs base_dir: /var/dovecot/ log_path: /var/log/dovecot protocols: imaps pop3s ssl_cert_file: /etc/ssl/dovecotcert.pem login_dir: /var/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: _dovecot mail_location: maildir:/var/www/datos/correo/qbit.com.ar/%n:LAYOUT=fs mail_debug: yes mbox_write_locks: fcntl mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: mail_plugins: cmusieve postmaster_address: postmaster(a)bla.com log_path: /var/log/dovecot-deliver-errors.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: login plain verbose: yes debug: yes debug_passwords: yes passdb: driver: bsdauth userdb: driver: static args: uid=vmail gid=vmail home=/var/www/datos/correo/bla.com/%n socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: _postfix group: _postfix master: path: /var/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve_global_dir: /var/sieve sieve_global_path: /var/sieve/global-default.sieve sieve: /var/sieve/%n.sieve I use bsdauth to system users auth againts Active-Directory, now I want to create vacation mails with dovecot-sieve, but have issues. Can I use in dovecot deliver (master.cf) with parameters -d if I use bsdauth to auth without passdb (the are system users)? if I put this in my master.cf dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/local/libexec/dovecot/deliver -f ${sender} -d ${recipient} I get: deliver(prueba2(a)bla.com): Jan 25 15:17:24 Error: Auth lookup returned failure If I change the -d ${recipient} for -a ${recipient} dovecot use the user (vmail) who run dovecot to storage the storage: /var/www/datos/correo/bla.com/vmail/INBOX, so I get... deliver(vmail): Jan 25 15:54:46 Info: maildir: data=/var/www/datos/correo/qbit.com.ar/vmail:LAYOUT=fs deliver replace %n for the user who run dovecot, so don't save the mail in deliver(vmail): Jan 25 15:54:46 Info: maildir: data=/var/www/datos/correo/qbit.com.ar/prueba2:LAYOUT=fs This works properly if a use virtual_transport = virtual. some idea? cheers.

2 5

[Dovecot] Sharing user folders doesn't work when users have periods in names.
by ian+dovecot＠comtek.co.uk 28 Jan '11

28 Jan '11

I am using period as an IMAP separator with Maildir directories and I cannot share folders where the user has a period in their name. Suppose I log in as 'some.user' and do: SETACL INBOX mailtest(a)example.co.uk +lrwstipekxacd /var/mail/virtual/users/some.user/Maildir/dovecot-acl is created, with appropriate contents and shared-mailboxes.db gains an entry for 'shared/shared-boxes/user/mailtest@example.co.uk/some.user@example.co.uk'. mailtest is simply unable to see a new folder. As mailtest 'a LIST "" "Users.*" ' is empty. If I do ' a MYRIGHTS Users.some.user.INBOX ' I get 'NO [NONEXISTENT] Mailbox doesn't exist: Users.some.user.INBOX' and, oddly, a new maildir appears: '* LIST (\Noselect \HasChildren) "." "Users.some" ' -- it also creates an empty folder structure with a single file /var/mail/virtual/users/some/Maildir/dovecot-acl-list too! Is there a workaround that does not involve rebuilding every user's Maildir with backslash as a separator? Thanks, Ian

3 4

[Dovecot] Dovecot2 + Sieve
by Philipp v. Strobl-Albeg 28 Jan '11

28 Jan '11

Hi, i'm new on sieve, but want to use ist with sogo. The Problem is, that when i set a redirect or vacation rule like: redirect "email(a)example.com"; (real Adress is different) the sieve says the mail would be forwarded, but no mail is sent. (No Action in /var/log/maillog) And because there is no Error-Message it's difficult to search for... Dovecot log ------- Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Debug: sieve: using sieve path for user's script: /var/mail/vhosts/test/.dovecot.sieve Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Debug: sieve: opening script /var/mail/vhosts/test/.dovecot.sieve Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Debug: sieve: script binary /var/mail/vhosts/test/.dovecot.svbin successfully loaded Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Debug: sieve: binary save: not saving binary /var/mail/vhosts/test/.dovecot.svbin, because it is already stored Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Debug: sieve: executing script from /var/mail/vhosts/test/.dovecot.svbin Jan 28 10:53:46 lda(ptest(a)pilarkto.com): Info: sieve: msgid=<4D429227.3000004(a)pilarkto.net>: forwarded to <email(a)example.com> ----- Everything else works fine, except the program "mail". I dont know if there is a coherence but a typical Mailserver-Test "date|mail -s test email(a)example.com" also don't sent a message to postfix. I hope you will held me out or even say me, if this is a bug or a misconfiguration. thanks a lot Philipp

4 7

[Dovecot] dovecot ACL
by PA 28 Jan '11

28 Jan '11

Hi in Dovecot 2.x with virtual domains, is there a way specify what domains can create shared directories and who can't? For example I have 3 domains, domain1.com, domain2.com and domain3.com. Let's say I only want domain1.com's users to create shared folders how can I go about doing this. Thanks, Paul

2 5

[Dovecot] Telnet access creates new maildir folders
by Seasoul 28 Jan '11

28 Jan '11

Hi, I am running Dovecot Version 1.0.15on a Debian server, with postfix and postfixadmin. My mailbox base is /var/mail/vmail When I send an email to a user1(a)domain.com for the first time, the user "mail" creates a set of dovecot folders under /var/mail/vmail/ user1(a)domain.com/ and my new emails are found in /var/mail/vmail/ user1(a)domain.com/new When I test my server using telnet (telnet domain.com 110), I can log in fine as a user1, but when I type "LIST", it tells me there are no emails. And I realize a new set of dovecot folders were created under /var/mail/vmail/user1/ ! The folders are created by the user "user1". Obviously the folder "new" under that is empty, since my emails received are in /var/mail/vmail/user1(a)domain.com/new and not /var/mail/vmail/user1/new . Therefore, connecting with an email client via POP also shows an empty inbox. I am lost as to what to do to fix this, and how to let the server know that pop access should be looking into /var/mail/vmail/user1(a)domain.com/ instead of /var/mail/vmail/user1/ . Hopefully someone on this list will be able to save me from my misery :) Cheers Sea

7 20

[Dovecot] migration dovecot 1 --> dovecot 2
by Frank Bonnet 28 Jan '11

28 Jan '11

Hello I plan to migrate my mailhub from 1 to 2 , is it a good idee to remove all indexes .imap directories from the new server before starting it in production state ? Thanks

3 2

[Dovecot] Best way to calculate concurrent users?
by Henrique Fernandes 28 Jan '11

28 Jan '11

Well, i am having some problens to figure out how many concurrent users into the server! In my envoriment now, most people are using the webmail interface, and it just conect and disconct pretty quickly so i can not get it with "doveadm who" doveadm who only gets the ones that are connect with clients. O use ipvs to balance betwaeen 2 servers does anyone have an ideia ? With ipvs i get this results: IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP XXX.XX.X.XX:143 lblcr -> 10.0.2.10:143 Masq 1 16 228 -> 10.0.2.11:143 Masq 1 16 184 There is others ports and stuff. Does any one have an ideia how to get this number ? []'sf.rique

2 3

[Dovecot] Storing Dovecot index files on sql
by list＠airstreamcomm.net 28 Jan '11

28 Jan '11

We have been communicating with the mailling list on another thread regarding dotlocking on the dovcot-uidlist over an NFS share, and I was hoping to get some ideas on whether or not a sql database would be a suitable location for storing the dovecot index files. Our though process so far has been that storing the index files on NFS with the maildir has not worked very effectively when we are using multiple Dovecot servers (even using sticky IPs in our load balancer), and using local storage is not possible with a cluster of machines, so we got to thinking about what type of storage platform would be suitable for these index files that would provide native locking of the data while multiple servers accessed and wrote to it. Our question to the community is whether sql storage for index files has ever been considered, what issues would this introduce, and if it's even feasible? Thanks everyone! Michael

3 2

[Dovecot] Differenft INBOX for IMAP/POP with checkpassword passdb
by Peter Mogensen 27 Jan '11

27 Jan '11

Hi, I'm trying to do a setup where IMAP and POP users see different INBOX' Like described on the virtual folder wiki page: http://wiki.dovecot.org/Plugins/Virtual However, for now, I'm stuck with the checkpassword passdb and prefetch userdb So I can't parameterize the result on %s like the example with MySQL does. So I thought of having to different checkpassword scripts: passdb checkpassword { args = /usr/bin/checkpassword-%s } However, Dovecot (1.2.15) doesn't seem to expand %s even though the Wiki says it should be available everywhere: http://wiki.dovecot.org/Variables Is this a bug, or am I missing something. /Peter

1 1

[Dovecot] Iphone IMAP access
by Frank Bonnet 27 Jan '11

27 Jan '11

Hello When I use my iphone to access my IMAP folders I can see ALL folders in my userland and not only those listed in .subscriptions file ... Anyone has an explaination of this ? Might be a security/confidentiality hole isn't it ?

13 30

[Dovecot] Best Cluster Storage
by Jonathan Tripathy 27 Jan '11

27 Jan '11

Hi Everyone, I wish to create a Postfix/Dovecot active-active cluster (each node will run Postfix *and* Dovecot), which will obviously have to use central storage. I'm looking for ideas to see what's the best out there. All of this will be running on multiple Xen hosts, however I don't think that matters as long as I make sure that the cluster nodes are on different physical boxes. Here are my ideas so far for the central storage: 1) NFS Server using DRBD+LinuxHA. Export the same NFS share to each mail server. Which this seems easy, how well does Dovecot work with NFS? I've read the wiki page, and it doesn't sound promising. But it may be outdated.. 2) Export block storage using iSCSI from targets which have GFS2 on DRBD+LinuxHA. This is tricky to get working well, and it's only a theory. 3) GlusterFS. Easy to set up, but apparently very slow to run. So what's everybody using? I know that Postfix runs well on NFS (according to their docs). I intend to use Maildir Thanks

17 75

[Dovecot] Can't get it working
by llwyble＠suddenlink.net 26 Jan '11

26 Jan '11

I get dovecot to work and answer when telnet to 110 both local and from another computer. But it shows nothing in the log files except it's running. Here's the log and other info: /var/log/maillog: Jan 25 16:49:32 widgeteye dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) dovecot --version 2.0.9 dovecot -n output # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.33.4-smp i686 Slackware 13.1.0 default_internal_user = myusername default_login_user = myusername disable_plaintext_auth = no listen = * mail_location = maildir:~/mail mail_privileged_group = mail passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/passwd.dovecot driver = passwd-file } protocols = pop3 service pop3-login { inet_listener pop3 { port = 110 } } ssl = no userdb { args = username_format=%u /usr/local/etc/dovecot/passwd.dovecot driver = passwd-file } When I try get mail from my machine from another computer I get nothing What's up? Thanks

5 6

[Dovecot] Questiosn about dbox
by Javier de Miguel Rodríguez 26 Jan '11

26 Jan '11

Hello I have read carefully about dbox (/http://wiki2.dovecot.org/MailboxFormat/dbox/) and I have some questions: - One of the main advantages (speed wise) of dbox over maildir is that index files are the only storage for message flags and keywords. What happens when we want to recover some messages from backup? With maildir we can rebuild message indexes, but I am not sure about dbox. Should we also restore "old indexes" and merge with the "new indexes" in order to restore the deleted messages? - The previous question applies to sdbox and mdbox. In the case of mdbox, we can configure rotation of files using /mdbox_rotate_size/ . We would like to rotate daily, not based in size (our users ask us for yesterday's backup). How can we accomplish this? We have now 17.000.000 messages in our maildir, almost 1.5 TB (zlib compresssion enabled). Our backup time with bacula is rather bad: 24 hours for a full backup, most of the time the backup is busy fstat'ing all those little messages. We think that mdbox can help us in this. Does anybody has good experiences migrating from maildir->mdox in "large" enviroments? What about mdox performance & reliability? Thank you for your support Javier

5 10

[Dovecot] Offtopic: Mac Mail Autoconfigure
by stefan novak 26 Jan '11

26 Jan '11

Hello, i know its a little bit Offtopic, but i know many Mailadmins are reading here ;) Does anybody know howto autoconfigure Mac Mail als ISP Provider. We have troubles with the default Settings of Mac Mail (POP3s with APOP) and want to change them via autodiscover. Is there something simular to Thunderbirds Config Site: https://developer.mozilla.org/en/Thunderbird/Autoconfiguration google just offers similar problems, but no solutions :( http://groups.google.com/group/macenterprise/browse_thread/thread/a88294331… thx for your help Stefan

3 3

[Dovecot] authentication methods : pam, passwd and then backup question. How to restrict the methods
by J4K 25 Jan '11

25 Jan '11

Dear all, I noticed that incoming users were attempting to authenicate using several methods like pam sql. Eventually, they logged in. Is there a way for dovecot to only query a mysql backup for users, and skip the other methods? Examples from logs (via Roundcube webmail in this case, but the same messages appear with port 993) Jan 25 17:22:17 srv dovecot: auth-worker(default): pam(aa(a)bb.co.uk,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) Jan 25 17:22:17 srv dovecot: auth(default): passwd(aa(a)bb.co.uk,127.0.0.1): unknown user Jan 25 17:22:17 srv dovecot: imap-login: Login: user=<aa(a)bb.co.uk>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured As shown above, the user uses pam, passwd and then finally the user account fetched from mysql. The distribution is Debian Squeeze. Regards, s

2 7

[Dovecot] dovecot ocf resource script
by jeroen＠intuxicated.org 25 Jan '11

25 Jan '11

Hi, I created a dovecot resource script for pacemaker. I think it's done, but I wanted to ask if some people could examine it before I send it to the pacemaker people. Thanks in advance. Best regards, Jeoren Koekkoek

1 0

[Dovecot] Panic in 2.0.9 imap-client
by Thierry de Montaudry 25 Jan '11

25 Jan '11

Hi, Yesterday I upgraded one of our system from 2.0.7 to 2.0.9, I've got about 5 panic since then. It is using the exact same config (see attached) and was compiled the same way. Any clue on the reason? And how can I fix that? Jan 17 12:06:20 server dovecot: imap(XXXX@YYYYYYY): Panic: file imap-client.c: line 570 (client_continue_pending_input): assertion failed: (!client->handling_input) Jan 17 12:06:20 server dovecot: imap(XXXX@YYYYYYY): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x382be3b620] -> /usr/lib64/dovecot/libdovecot.so.0 [0x382be3b676] -> /usr/lib64/dovecot/libdovecot.so.0 [0x382be3ab33] -> dovecot/imap [0x40f766] -> dovecot/imap(cmd_idle+0xc5) [0x40a825] -> dovecot/imap [0x40f2ec] -> dovecot/imap [0x40f3a2] -> dovecot/imap(client_handle_input+0x3f) [0x40f4ef] -> dovecot/imap(client_input+0x62) [0x40fe62] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x382be45e78] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xd5) [0x382be471b5] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x2d) [0x382be45e0d] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x382be34c33] -> dovecot/imap(main+0x1d8) [0x417948] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x3ac341d994] -> dovecot/imap [0x408179]

3 5

[Dovecot] shared namespace subscription
by adrian.stoica＠dacris.net 25 Jan '11

25 Jan '11

I test dovecot 2.0.9 and i use a shared namespace. I use this to see inbox for user2 in shared namespace for user1. When user2 unsubscribe for inbox , the shared inbox disapear too from shared namespace in user1 list. This is normal ? I believe that whatever subscription has user2 , if the director is shared , only the indexes will be copyied from the original place, not along with the subscription.

2 1

[Dovecot] custom maildir location mapping
by Vlad Mazek 25 Jan '11

25 Jan '11

Greetings, I'm migrating from a sendmail/dovecot setup with system users to a postfix/dovecot maildir setup with virtual users. To simplify the mess we've gotten into by having users that can't remember their username, we've switched to email address being the username. In order to allow for a smooth migration, I need to allow users to be able to login with their email address as well as their (old) username for about a month or so. I have all the usernames, email addresses and passwords stored in SQL and I'm generating the userdb and passworddb manually. Is there any way to create a userdb and passworddb so that users can login with either username or email address and have dovecot locate their maildir without an issue? For example, I'd like to be able to login as either vlad or vlad(a)vladville.com and have dovecot locate my maildir:/var/spool/mail/%d/%n; I'd really appreciate any thoughts, ideas and examples anyone is willing to share. I'm really looking to avoid a shotgun approach ("On Feb 1, your new username is your email address"). Here are some notes on the currently functioning setup: I'm running dovecot 1.0.7 on CentOS 5.5 x64 with Postfix 2.3.3 mail_location = maildir:/var/spool/mail/%d/%n userdb static { args = uid=virtual gid=virtual home=/var/mail/%d/%u } passdb passwd-file { args = /etc/dovecot/passwd } user@domain.com:{HMAC-MD5}1b05f379...

2 2

[Dovecot] PAM problem with virtual domain/user ownership
by Mauricio Tavares 25 Jan '11

25 Jan '11

I am running dovecot 1.2.9 (ubuntu package, not from source) and wanted to use pam to authenticate my mail users who have no local accounts. I've done that before in an earlier release of dovecot and ubuntu, so I would not need to do set dovecot to ask LDAP directly. So, I have in dovecot.conf: # Authentication processes mechanisms = plain login passdb pam { args = "*" } userdb static { args = allow_all_users uid=virtual gid=virtual home=/var/spool/vmail/domain.com/%n } i.e. /var/spool/vmail/domain.com/ is owned by virtual:virtual, drwxr-x--- 4 virtual virtual 4.0K 2011-01-23 11:45 domain.com and that is how I would hope dovecot would be trying to login as. When I tried to login as user raub, the log file seems to tell me that it is trying to create /var/spool/vmail/domain.com/raub/cur as raub:users, not as virtual:virtual Jan 22 06:35:02 mail dovecot: imap-login: Login: user=<raub>, method=PLAIN, rip=216.155.101.90, lip=216.155.101.94, TLS Jan 22 06:35:02 mail dovecot: IMAP(raub): mkdir(/var/spool/vmail/domain.com/raub/cur) failed: Permission denied (euid=5016(raub) egid=100(users) missing +w perm: /var/spool/vmail/domain.com) What am I missing here?

2 1

[Dovecot] SSD drives are really fast running Dovecot
by Marc Perkel 24 Jan '11

24 Jan '11

I just replaced my drives for Dovecot using Maildir format with a pair of Solid State Drives (SSD) in a raid 0 configuration. It's really really fast. Kind of expensive but it's like getting 20x the speed for 20x the price. I think the big gain is in the 0 seek time. Here's what I bought. Crucial RealSSD C300 CTFDDAC256MAG-1G1 2.5" 256GB SATA III MLC Internal Solid State Drive (SSD) <http://www.newegg.com/Product/Product.aspx?Item=N82E16820148349> * 2.5" * 256GB * SATA III * *Sequential Access - Read:* 355MB/sec (SATA 6Gb/s) 265MB/sec (SATA 3Gb/s) * *Sequential Access - Write:* 215MB/sec (SATA 6Gb/s) 215MB/sec (SATA 3Gb/s) * *Power Consumption (Active):* 2.1W READ, 4.3W WRITE * *Power Consumption (Idle):* 0.094W Running it on an Asus motherboard that supports SATA III - 6 core AMD CPU and 16 gigs of ram. Might be slightly off topic but this server screams!

30 82

[Dovecot] How to enable COPY and APPEND commands separately
by Alex Cherniak 24 Jan '11

24 Jan '11

I'd like to allow a user to move messages between his folders on Dovecot IMAP account, but prevent move/copy from different accounts (Exchange in particular). Outlook uses "xx UID COPY 1 folder" and then "xx UID STORE 1 +FLAGS (\Deleted \Seen)" for internal moves and "xx APPEND folder" for external ones. I tried to achieve this with ACL, but i (insert) seems to control both. Do I miss something? Should I look somewhere else? Please help.

3 3

[Dovecot] Initial Maildir directories
by Mauricio Tavares 24 Jan '11

24 Jan '11

Is there a way to specify additional directories to be created when a new user account is, well, created?

2 1

[Dovecot] Dovecot Update on Ubuntu from 1.0.10 to 1.2 doesn't work
by franc walter 24 Jan '11

24 Jan '11

Hello, i have an ubuntu 8.04 LTS Virtual Server with Dovecot 1.0.10 and postfix. Now i tried to update Dovecot because i need Quota, which is not possible in 1.0 but in 1.2 So i added the packages to my /etc/apt/sources.list: deb http://codex.xiaoka.com/apt hardy main restricted deb http://archive.ubuntu.com/ubuntu hardy-backports main universe multiverse restricted and updated dovecot with aptitude. After this i killed the proc master and restarted postfix and dovecot but now dovecot is running but doesn't get any more mails from postfix. I had to downgrade back to 1.0.10 and after this all is working again. I immediately looked into the mail.log, but i didn't see any clear errors. I uploaded the mail.log here, maybe someone could give me a hint, what it could be: http://7fw.de/tmp/2011-01-24-23-38-mail.log I started the update at 2011-01-23 at 23:00 and downgraded back at 2011-01-24 at 00:26. In the error.log i only have errors about inotify, which is not available on the ubuntu server (old kernel version, cannot be updated by provider). I set in dovecot.conf: mail_debug=yes auth_debug=yes auth_debug_passwords=yes but this didn't help me. Thank you, Kind regards, franc walter

2 3

[Dovecot] Using dsync+imapc for migration from other IMAP servers to Dovecot
by Timo Sirainen 24 Jan '11

24 Jan '11

Dovecot v2.1 hg (http://hg.dovecot.org/dovecot-2.1) now supports doing e.g.: dsync -o plugin/imapc_user=remote.user(a)example.com -o plugin/pass=remote-password mirror imapc:imap.example.com dsync will preserve message UIDs and UIDVALIDITY/UIDNEXT values for mailboxes, just like with all other storage backends. A couple of bad things: 1) It currently fetches one message at a time from server. Very slow.. Will be fixed some day. 2) You can't do incremental sync, because dsync relies on message GUIDs, which aren't available in IMAP protocol. This could be fixed some day. Also a support for Dovecot extension could be added some day to make this work for Dovecot as remote IMAP server.

1 0

[Dovecot] Does dsync handle client-side deletions?
by Patrick Schoenfeld 21 Jan '11

21 Jan '11

Hi there, I'm currently evaluating the idea of a multi-master setup where each node shall hold a full copy of the mailboxes. Basically the idea is to use NFS and dsync to keep those copies in sync. So I did some tests with dsync and ran into a problem. Consider the following scenario: 1) Location1 and Location2 are in sync 2) A mail gets deleted on Location1 (via IMAP) 3) dsync mirror run to sync the two locations Expected behaviour: dsync notices that the mail was deleted on Location1 and also deletes it on Location2 to get the locations in sync. What I experience, however, is: dsync notices that the mail is missing on Location2 and copies it from Location1 to get the locations in sync. (At least) In debug mode it will spit a warning: dsync(test2): Info: INBOX: highest_modseq changed: 8 != 11 dsync(test2): Info: INBOX: Couldn't keep all uids dsync(test2): Info: INBOX: Ignored 1 modseq changes dsync(test2): Warning: Mailbox changes caused a desync. You may want to run dsync again. Now the question is: Doesn't dsync handle deletions or is there something I missed? Dovecot version is 2.0.9. Thanks in advance and best Regards, Patrick

3 2

[Dovecot] utility to update indexes ?
by Jan-Frode Myklebust 21 Jan '11

21 Jan '11

We have both dovecot and a webmail application that are both modifying our users maildirs, so dovecot indexes can be out of sync when the webmail has been messing with the maildirs. We also have a webservice that report how many unread messages a user has in his inbox, which is simply counting files in the maildirs (plus caching the result, and present old values if the directory timestamps hasn´t changed). I think this checking of unread messages webservice would be much nicer on the filesystem if it instead used the dovecot indexes, so I created a small utility based on utils/idxview.c that do that: http://blag.tanso.net/code/unread.c But this woun´t work if the maildir has been modified outside of dovecot (i.e. webmail usage). Are there any simple interface I can use in this short snippet for noticing that the index is out of sync, and update it ? -jf

3 6

[Dovecot] LMTP & home, chroot, mail userdb fields.
by Lev Serebryakov 21 Jan '11

21 Jan '11

Hello, Dovecot. I'm using postfix + dovecot with pure virtual users. postfix uses standard virtual transport, and dovecot fetches such fields from userdb: chroot: "/usr/home/hosted/v-mail/%d/%n" home: "/" mail: "maildir:." Everything works Ok -- dovecot founds users' mail. Now, after upgrade to dovecot2, I want to use it LMTP server as virtual_transport in postifx. I've changed virtual_transport setting to "lmtp:unix:/var/run/dovecot/lmtp". dovecot's LMTP can not deliver messages, because it seems that it uses userdb fields in some OTHER way. Errors look like this: Jan 20 12:19:25 lmtp(38939): Info: Connect from local Jan 20 12:19:25 auth: Info: mysql: Connected to /tmp/mysql.sock (mailhost) Jan 20 12:19:25 lmtp(38939, lev(a)domain.com) Error: mkdir(./cur) in directory /var/run/dovecot failed: Permission denied (euid=30000(v-mail) egid=30000(v-mail) missing +w perm: ., euid is not dir owner) Jan 20 12:19:25 lmtp(38939, lev(a)domain.com) Error: Opening INBOX failed: Mailbox doesn't exist: INBOX Jan 20 12:19:25 lmtp(38939, lev(a)domain.com) Error: mkdir(./cur) in directory /var/run/dovecot failed: Permission denied (euid=30000(v-mail) egid=30000(v-mail) missing +w perm: ., euid is not dir owner) Jan 20 12:19:25 lmtp(38939, lev(a)domain.com) Info: XXVtE00oOE0bmAAAWL5c8Q: msgid=unspecified: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2011-01-20 12:19:25] Jan 20 12:19:25 lmtp(38939, lev(a)domain.com) Error: BUG: Saving failed to unknown storage Jan 20 12:19:25 lmtp(38939): Info: Disconnect from local: Client quit How should I change my userdb output to make both POP/IMAP and LMTP processes happy? -- // Black Lion AKA Lev Serebryakov <lev(a)serebryakov.spb.ru>

3 8

[Dovecot] Feature request - statistics for the COMPRESS imap protocol
by Ed W 21 Jan '11

21 Jan '11

Unless I have failed to read the manual for the second time in two days (?), it doesn't seem to be possible to get COMPRESS statistics at logout time from the IMAP protocol? Assuming not, then can I make a feature request that this might become available in some future version (pretty please?) Can I also just check that the meaning (as of today) of the "imap logout" statistics "%i/%o", presumably they refer to bytes over the wire, ie they are the compressed data sizes? Thanks - Dovecot 2 adds a fantastic bag of new features! Ed W

2 12

[Dovecot] Delivered-To header without +extension ?
by Per Jessen 21 Jan '11

21 Jan '11

I'm running postfix 2.6.2 and dovecot 2.0.9, and I've just switched to delivering mails to dovecot via lmtp. It looks like the Delivered-To: header is slightly different - it doesn't seem to include the +extension? Is this intentional or does the +extension somehow get in the way? /Per Jessen, Zürich

5 17

[Dovecot] Fwd: Re: Dotlock dovecot-uidlist errors / NFS / High Load
by list＠airstreamcomm.net 21 Jan '11

21 Jan '11

Stan, Thanks for the reply. In our case we have actually already done most of the work you suggested to no avail. We had rebuilt two new ntp servers that sync against two stratum 1 sources, and all our nfs clients, regardless of using dovecot, sync to those two machines. You bring up the difference between bare metal and hypervisor, and we are running these machines on vmware 4.0. All the vmware knowledge base articles tend to push us towards ntp, and since we are using centos 5.5 there are no kernel modifications that need to be made regarding timing from what we can find. I will give the ntpdate option a try and see what happens. I was also hoping to understand why the uidlist file is the only file that uses dotlock, or if there was plans to give it the option to use other locking mechanisms in the future. Thanks again! Michael -------- Original Message -------- Subject: Re: [Dovecot] Dotlock dovecot-uidlist errors / NFS / High Load Date: Thu, 20 Jan 2011 10:57:24 -0600 From: Stan Hoeppner <stan(a)hardwarefreak.com> To: dovecot(a)dovecot.org list(a)airstreamcomm.net put forth on 1/20/2011 8:32 AM: > Secondly we thought the issues were due to NTP as the time stamps vary so > widely, so we rebuilt our NTP servers and found closer stratum 1 source > clocks to synchronize to hoping it would alleviate the problem but the > dotlock errors returned after about 12 hours. We have fcntl locking set in > our configuration file, but it is our understanding from look at the source > code that this file is locked with dotlock. > > Any help troubleshooting is appreciated. >From your description it sounds as if you're ntpd syncing each of the 4 servers against an external time source, first stratum 2/3 sources, then stratum 1 sources in an attempt to cure this problem. In a clustered server environment, _always_ run a local physical box/router ntpd server (preferably two) that queries a set of external sources, and services your internal machine queries. With RTTs all on your LAN, and using the same internal time sources for every query, this clock drift issue should be eliminated. Obviously, when you first set this up, stop ntpd and run ntpdate to get an initial time sync for each cluster host. If after setting this up, and we're dealing with bare metal cluster member servers, then I'd guess you've got a failed/defective clock chip on one host. If this is Linux, you can work around that by changing the local time source. There are something like 5 options. Google for "Linux time" or similar. Or, simply replace the hardware--RTC chip, mobo, etc. If any of these cluster members are virtual machines, regardless of hypervisor, I'd recommend disabling using ntpd, and cron'ing ntpdate to run once every 5 minutes, or once a a minute, whatever it takes to get the times to remain synced, against your local ntpd server mentioned above. I got to the point with VMWare ESX that I could make any Linux distro VM of 2.4 or 2.6 stay within one minute a month before needing a manual ntdate against our local time source. The time required to get to that point is a total waste. Cron'ing ntpdate as I mentioned is the quick, reliable way to solve this issue, if you're using VMs. -- Stan

3 3

Re: [Dovecot] Problems with Upgrade from Courier
by Aaron Pettitt 21 Jan '11

21 Jan '11

I was looking at my dovecot.deliver log and it's showing that it's delivering it to the Inbox: deliver(samantha.freeze(a)mybridemail.com): 01/20/2011 10:44:27 Info: auth input: home=/home/vmail/mybridemail.com/samantha.freeze deliver(samantha.freeze(a)mybridemail.com): 01/20/2011 10:44:27 Info: maildir: data=/home/vmail/mybridemail.com/samantha.freeze/ deliver(samantha.freeze(a)mybridemail.com): 01/20/2011 10:44:27 Info: maildir++: root=/home/vmail/mybridemail.com/samantha.freeze, index=, control=, inbox=/home/vmail/mybridemail.com/samantha.freeze deliver(samantha.freeze(a)mybridemail.com): 01/20/2011 10:44:27 Info: msgid=<001a01cbb8b8$eabe89c0$c03b9d40$@net>: saved mail to INBOX However, if I login as her through Telnet, it shows that she has no mail: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1295474980] UIDs valid * OK [UIDNEXT 1] Predicted next UID b OK [READ-WRITE] Select completed. If I look in the new folder under her folder, it shows the last emails I sent this morning: -rw------- 1 vmail vmail 3564 Jan 20 10:21 1295536875.M679042P20187.mybridemail.com,W=3672 -rw------- 1 vmail vmail 3540 Jan 20 10:27 1295537272.M522196P26548.mybridemail.com,W=3649 -rw------- 1 vmail vmail 3554 Jan 20 10:39 1295537952.M462095P9353.mybridemail.com,W=3662 -rw------- 1 vmail vmail 3540 Jan 20 10:44 1295538267.M893549P15392.mybridemail.com,W=3649 It's really strange why dovecot can deliver the mail to the inbox but cannot see the inbox when trying to retrieve the mail???? From: Aaron Pettitt [mailto:apettitt@comcast.net] Sent: Thursday, January 20, 2011 10:02 AM To: 'dovecot(a)dovecot.org' Subject: Problems with Upgrade from Courier I inherited a server from a previous employee. The server crashed so it was time to move everything over to another server. We have a web mail site and I installed everything running dovecot, postfix and roundcube. After I installed it, everything worked great when I created a new user. The new user could send and receive emails with no issues. I then copied the home directory over from the other server and ran the courier-dovecot migration script. It created the subscription files and the dovecot-uidlist files in each user (about 1000 total users). When I login as one of the existing users, it says that there is no mail in the mailbox. However, if I look at the user's cur and new folders, there is mail in those folders. If I send a new mail to the user, it does not show up in their inbox. If I look in their new folder, the new mail that I sent was delivered to that folder but it does not show up in their inbox. I've tried going to dovecot directly through telnet with the same results. I've been stuck for 2 days now so any help is greatly appreciated. Below is my dovecot.conf with all the comments removed. Thanks all! protocols = imap imaps disable_plaintext_auth = no log_path = '/var/log/dovecot/error.log' info_log_path = '/var/log/dovecot/info.log' log_timestamp = "%m/%d/%Y %H:%M:%S " #mail_location = maildir:~/ mail_location = maildir:/home/vmail/%d/%n/ mail_privileged_group = mail mail_debug = yes protocol imap { } protocol pop3 { } protocol managesieve { sieve_storage=~/sieve } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)mybridemal.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } auth_verbose = yes auth_debug = no auth_debug_passwords = no auth default { passdb sql { args = /etc/dovecot/dovecot-sql.conf } args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } user = root path = /var/run/dovecot/auth-master mode = 0600 user = vmail #group = } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } }

2 4

[Dovecot] Populating mailbox dir
by Mauricio Tavares 20 Jan '11

20 Jan '11

Let's say you created a (virtual) mail user but have not created the user mail directory. When you first try to access it, the mail directory is created and populated: ls -a /var/spool/vmail/domain.com/raub/ . dovecot.index.log dovecot-uidvalidity.4d375a39 tmp .. dovecot-uidlist new .Trash cur dovecot-uidvalidity subscriptions Who populates/creates the initial files and folders in the user mailbox? Dovecot? The mail client accessing it through imap? Elvis? If dovecot, is there a way to customize it a bit, so a few extra folders will also be thrown there?

3 2

[Dovecot] Imap Error
by Jason Liedtke 20 Jan '11

20 Jan '11

This morning I have a Outlook 2007 user who getting the error and I am unsure how to fix it. Cannot open this item. The server responded: "Error in IMAP command UID FETCH: Invalid uidset' DoveCot v 1.2.9 # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-27-generic-pae i686 Ubuntu 10.04.1 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): *:2000 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/ mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): tb-extra-mailbox-sep imap_client_workarounds(imap): tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(pop3): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: / inbox: yes list: yes subscriptions: yes lda: postmaster_address: hostname: auth_socket_path: /var/run/dovecot/auth-master mail_plugins: quota sieve log_path: info_log_path: syslog_facility: mail auth default: username_format: %Lu passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: maildir quota_rule: *:bytes=20M sieve: ~/sieve/.dovecot.sieve sieve_dir: ~/sieve sieve_global_path: /var/mail/default.sieve sieve_before: /var/mail/sieve/global sieve_extensions: +imapflags

2 1

[Dovecot] ldap auth error
by pch0317 20 Jan '11

20 Jan '11

Hi, I have dovecot 2.0.beta6 and I'm newbie with dovecot. I try authenticate user via LDAP (MS ActiveDirectory). I have errors in log: mail dovecot: auth: Error: LDAP: binding failed (dn cn=administrator,ou=users,dc=my,dc=domain): Invalid credentials, 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece This is my dovecot.conf file: protocols = imap disable_plaintext_auth = no listen = * ssl = no auth_mechanisms = plain base_dir = /var/run/dovecot/ mail_location = mbox:/home/vmail/%n/ passdb { driver = ldap args =/etc/dovecot/dovecot-ldap.conf } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf } And this is my dovecot-ldap.conf: hosts = 192.168.0.19 dn = cn=administrator,ou=users,dc=my,dc=domain dnpass = password base = ou=myuser,dc=my,dc=domain scope = subtree ldap_version = 3 auth_bind = yes auth_bind_userdn = ou=myuser,dc=my,dc=domain user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) Should I have any file in /etc/pam.d ? Thanks

3 4

[Dovecot] domain stripping
by PA 20 Jan '11

20 Jan '11

Hi, using dovecot 2.0 and I'm using a couple of user DBs, sql/prefetch and pam. Currently if the user logins with username@domain it authenticates off the sql DB and works fine. If the user logins with username with no @domain it fails on the sql lookup and succeeds on the pam user DB. However I was wondering if I can have another sql DB lookup that says when the user logins and fails against the first two user DBs, sql/pam db, to try this last sql user DB and appends a default domain to it, because the sql DB lists username with the domain. Currently I have all users login in with no realm on the older mail server and I wanted to migrate these users to dovecot 2.x with minimal impact and wanted to have the ability for these virtual users to login with and without a realm. Thanks paul.

2 2

[Dovecot] Problems with Upgrade from Courier
by Aaron Pettitt 20 Jan '11

20 Jan '11

I inherited a server from a previous employee. The server crashed so it was time to move everything over to another server. We have a web mail site and I installed everything running dovecot, postfix and roundcube. After I installed it, everything worked great when I created a new user. The new user could send and receive emails with no issues. I then copied the home directory over from the other server and ran the courier-dovecot migration script. It created the subscription files and the dovecot-uidlist files in each user (about 1000 total users). When I login as one of the existing users, it says that there is no mail in the mailbox. However, if I look at the user's cur and new folders, there is mail in those folders. If I send a new mail to the user, it does not show up in their inbox. If I look in their new folder, the new mail that I sent was delivered to that folder but it does not show up in their inbox. I've tried going to dovecot directly through telnet with the same results. I've been stuck for 2 days now so any help is greatly appreciated. Below is my dovecot.conf with all the comments removed. Thanks all! protocols = imap imaps disable_plaintext_auth = no log_path = '/var/log/dovecot/error.log' info_log_path = '/var/log/dovecot/info.log' log_timestamp = "%m/%d/%Y %H:%M:%S " #mail_location = maildir:~/ mail_location = maildir:/home/vmail/%d/%n/ mail_privileged_group = mail mail_debug = yes protocol imap { } protocol pop3 { } protocol managesieve { sieve_storage=~/sieve } protocol lda { log_path = /home/vmail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)mybridemal.com mail_plugins = cmusieve global_script_path = /home/vmail/globalsieverc } auth_verbose = yes auth_debug = no auth_debug_passwords = no auth default { passdb sql { args = /etc/dovecot/dovecot-sql.conf } args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes } user = root path = /var/run/dovecot/auth-master mode = 0600 user = vmail #group = } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } }

1 0

[Dovecot] Bug found, assertion failed
by Tobias Daucher 20 Jan '11

20 Jan '11

Hi there, We're running dovecot 2.06, with mdbox. Following message was in our syslog: Jan 20 09:26:48 servername dovecot: [ID 583609 mail.crit] imap(user): Panic: file istream-limit.c: line 79: assertion failed: (v_offset <= lstream->v_size) The problem could be solved on client side, by just deleting the ImapMail-Folder in Thunderbird. Why? Thunderbird tried to move a message, that obviously wasn't there. Dovecot got killed and the message above was in the syslog. Connection was closed and Thunderbird told me the server is dead. Thunderbird tried this every few seconds, and there was no way to say thunderbird "stop try moving". So the only way was to delete thunderbirds mail cache. I think it would be very nice, if dovecot doesn't die, just because the client tries to move a message, which isn't there. Thanks, Tobias Daucher -- Dr. Nagler & Company GmbH Hauptstraße 9 92253 Schnaittenbach Tel : 09622-7197-38 Fax : 09622-7197-50 Web : http://www.nagler-company.com E-Mail : tobias.daucher(a)nagler-company.com Hauptsitz: Schnaittenbach Handelregister: Amberg HRB 4653 Gerichtsstand: Amberg Steuernummer: 201/118/51825 USt.-ID-Nummer: DE 273143997 Geschäftsführer: Dr. Martin Nagler, Dr. Dr. Karl-Kuno Kunze

1 0