- dovecot - dovecot.org

[Dovecot] service auth { client_limit=4096 } is lower than required under max. load (5720
by Frank Bonnet 30 Mar '11

30 Mar '11

Hello Since I started up dovecot2 this morning I get this kind of warning message when I start Dovecot Help appreciated thanks doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Stopping dovecot. Waiting for PIDS: 79978, 79978. doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Starting dovecot. doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (5720) Warning: service auth { client_limit=4096 } is lower than required under max. load (5720)

2 1

[Dovecot] migrating to dovecot
by Alexandre Chapellon 30 Mar '11

30 Mar '11

Hello, I am trying to setup a migration scenario from an proprietary solution to dovecot IMAP/POP3. Whereas am only at the strating point, things appear quite complicated because of the following reasons: - The proprietary solution uses special/own/proprietary mailbox format (wich is more like maildir but is not maildir) - I don't have direct access to the filesystem where the mails are stored. The best I could do would be a snapshots of the filesystem - I have about 1,5TB of mail data. - Having users to be forced to empty their mailbox before migration or re-download their whole mailbox after migration would be something hard for me to present as a correct option. Am looking for advices that would avoid me loosing time searching in bad directions. Or even point me to a miraculous tool thatdoes all magic while i have a beer :) Best regards. -- horoa: la voie est libre

4 6

[Dovecot] dovecot.conf settings vs 'dovecot-n' output
by Walt Shekrota 30 Mar '11

30 Mar '11

I am curious why these do not seem to match? It especially bothers me that the modes set are different. Am I missing something? Thanks. -Walt

2 1

[Dovecot] 1.2 problem 'dovecot -n' vs dovecot.conf
by Walt Shekrota 30 Mar '11

30 Mar '11

To elaborate, if there is a database associated with this setup it is really fubar. note: tail of dovecot -n lda: postmaster_address: postmaster mail_plugins: sieve quota_full_tempfail: yes deliver_log_format: msgid=%m: %$ rejection_reason: Your message to <%t> was automatically rejected:%n%r auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 504 socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve This in no way represents the settings in my dovecot.conf. It seems to have rembered old .conf settings and mixed them. At no time was mode 504 set or even 432. What am I doing wrong? Thanks. -Walt I'm also toying with the idea of loading 2.x if I can figure out the PPA stuff.

2 1

[Dovecot] doveadm
by Walt Shekrota 30 Mar '11

30 Mar '11

Hi Where does this utility reside for installation. I use Ubuntu and installed dovecot-imapd and dovecot-pop3d so far. Does it now ship in the regular dovecot installation packages? Thanks. -Walt

4 3

[Dovecot] Dovecot-2.0.11 searches in all LDAP directory
by Басов Евгений 29 Mar '11

29 Mar '11

Hello. I have some users IDs in different OUs with different passwords. Base OU for mail server is 'ou=Mail, dc=ph, dc=com' Trying manual search: # ldapsearch -b 'ou=Mail, dc=ph, dc=com' -D 'cn=bind, ou=Users, dc=ph, dc=com' -w XXX -s sub -h mainserv.ph.com '(&(objectClass=qmailUser)(uid=someuser))' uid mailMessageStore … # extended LDIF … uid: someuser mailMessageStore: /var/mail/someuser/Maildir/ # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 It works fine. My dovecot configuration: # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.36-gentoo-r5 x86_64 Gentoo Base System release 2.0.1 base_dir = /var/run/dovecot/ listen = * login_trusted_networks = 192.168.1.0/24 mail_location = maildir:~/.maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = * driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve protocols = imap ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lda { mail_plugins = sieve } My /etc/dovecot/dovecot-ldap.conf.ext: hosts = mainserv.ph.com dn = cn=bind, ou=Users, dc=ph, dc=com dnpass = XXX debug_level = 255 auth_bind = yes ldap_version = 3 base = ou=Mail, dc=ph, dc=com scope = subtree user_attrs = mailMessageStore=home user_filter = (&(objectClass=qmailUser)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=qmailUser)(uid=%u)) I tested IMAP over telnet: $ telnet mainserv.ph.com 143 Trying 192.168.1.252... Connected to mainserv.ph.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. a001 LOGIN someuser password1 Two passwords are tested: for uid from ou=Mail and ou=Users. LDAP logs of searches: slapd[1917]: filter: (&(objectClass=posixAccount)(uid=someuser)) slapd[1917]: attrs: slapd[1917]: uid slapd[1917]: userPassword slapd[1917]: uidNumber slapd[1917]: gidNumber… and etc after this: slapd[1917]: => access_allowed: search access to "cn=John Smith,ou=Mail,dc=ph,dc=com" "objectClass" requested slapd[1917]: => dn: [2] ou=mail,dc=ph,dc=com slapd[1917]: => acl_get: [2] matched slapd[1917]: => acl_get: [2] attr objectClass… and etc I have some questions: 1. Why is it searches in another LDAP places, not only ou=Mail, dc=ph, dc=com? 2. It not put mailMessageStore from ou=Mail, dc=ph, dc=com. Why? 3. How disable lookup in another LDAP places exept ou=Mail, dc=ph, dc=com? Thanks for answers.

2 3

[Dovecot] Upgrade to v2.0 conf file fails
by Nikolaos Milas 29 Mar '11

29 Mar '11

Hi, I am trying to use the command: doveconf -n -c dovecot-1.conf > dovecot-2.conf to upgrade my dovecot.conf file, but it fails (see below). Judging from the message that vsz_limit is the new setting for login_process_size, I have retried using login_process_size=256 rather than login_process_size=64 (which was the initial value), but the error persists. Please advise. Thanks, Nick Output of "doveconf -n -c" command: =========================================================================================================================== doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in dovecot.conf:1: protocols=imaps is no longer necessary, remove it doveconf: Warning: Obsolete setting in dovecot.conf:1: protocols=pop3s is no longer necessary, remove it doveconf: Warning: Obsolete setting in dovecot.conf:6: ssl_cert_file has been replaced by ssl_cert = <file doveconf: Warning: Obsolete setting in dovecot.conf:7: ssl_key_file has been replaced by ssl_key = <file doveconf: Warning: Obsolete setting in dovecot.conf:8: ssl_ca_file has been replaced by ssl_ca = <file doveconf: Warning: Obsolete setting in dovecot.conf:12: login_process_size has been replaced by service { vsz_limit } doveconf: Warning: Obsolete setting in dovecot.conf:13: login_process_per_connection has been replaced by service { service_count } doveconf: Warning: Obsolete setting in dovecot.conf:25: imap_client_workarounds=outlook-idle is no longer necessary doveconf: Warning: Obsolete setting in dovecot.conf:25: imap_client_workarounds=netscape-eoh is no longer supported doveconf: Warning: Obsolete setting in dovecot.conf:59: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in dovecot.conf:62: passdb ldap {} has been replaced by passdb { driver=ldap } doveconf: Warning: Obsolete setting in dovecot.conf:66: userdb ldap {} has been replaced by userdb { driver=ldap } doveconf: Warning: Obsolete setting in dovecot.conf:70: auth_user has been replaced by service auth { user } doveconf: Error: service(pop3-login): vsz_limit is too low doveconf: Fatal: Error in configuration file dovecot.conf: service(pop3-login): vsz_limit is too low ===========================================================================================================================

1 1

[Dovecot] global sieve not working
by Barry Kwok 29 Mar '11

29 Mar '11

My global sieve rule is not working and do not compile. But per-user sieve is working. Here is my dovecot -n: log_path: /var/log/dovecot.log protocols: imap pop3 ssl: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 501 mail_gid: 501 mail_location: maildir:/var/vmail/%u/Maildir/:INDEX=/var/vmail/%u/Maildir/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota acl imap_acl mail_plugins(imap): quota imap_quota acl imap_acl mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:%%Lh/Maildir:INDEX=%Lh/Maildir/shared/%%Lu list: children lda: postmaster_address: root mail_plugins: sieve quota autocreate expire auth_socket_path: /var/run/dovecot/auth-master sieve_global_path: /var/vmail/sieve/dovecot.sieve log_path: /var/log/sieve.log auth default: mechanisms: plain login default_realm: mydomain.net user: vmail username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_+@ passdb: driver: pam passdb: driver: sql args: /etc/dovecot-mysql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/dovecot-auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota: dict:user::proxy::quota quota: maildir quota_rule: *:storage=0 acl: vfile acl_shared_dict: file:/var/spool/dovecot/shared-mailboxes.db expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire sieve: /var/vmail/sieve/%Ld/%Ln/dovecot.sieve dict: quota: mysql:/etc/dovecot-dict-quota.conf expire: db:/var/lib/dovecot/expire.db By reading sieve.log, it simple ignore sieve_global_path: /var/vmail/sieve/dovecot.sieve but the per user sieve /var/vmail/sieve/%Ld/%Ln/dovecot.sieve is working --barry

4 6

[Dovecot] file permissions
by Walt Shekrota 29 Mar '11

29 Mar '11

Dovecot 1.2.12 maildir format using :LAYOUT=fs (my Mail dir came from KDE) I can't remember the permissions of the /Mail/ directory because I haven't been concerned with it too much until now. I think they were user:user or user:mail. Now a new mail ends up 600 root:mail. (in alternate directories) When I start my mutt client to the imap server it gets an error for any folder containing a root:mail new mail file. I think the root ownership is a procmail side effect? If I chmod 760 Mail/folder/* (then the new emails show in dovecot without the access error) It appears mail comes to the INBOX fine just not individual folders On the initial access, dovecot gets a "missing +r perm" or "+x" in the log. 1: What permission structure should permeate my Mail dir? 2: What might affect the incoming mail file getting wrong permissions/ownership? I'm thinking the later may be a procmail issue unless it is related to initial incorrect permissions? Thanks for any insight. -Walt

3 4

[Dovecot] Trouble with password scheme module
by Ian R. Justman 29 Mar '11

29 Mar '11

Hi, all. About two and a half years ago, I wrote a hack to add an additional MD5-based password scheme to Dovecot, but I wrote it as a hack to src/auth/password_scheme.c since it was relatively easy to do, and I needed to get a machine running since the machine I was replacing, a Sun Ultra 5 running Post.Office, had dying hard drives. Now, I'm actually sitting down and adapting it as a module and am having trouble getting it to work. The code tarball itself can be picked up here: http://www.ian-justman.com/code/dovecot/password_scheme_po_smd5.tar.gz Before I continued, I made sure that a system-level account worked: # telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <username> +OK pass <password> +OK Logged in. quit +OK Logging out. Connection closed by foreign host. I then enabled the module, which introduces the password scheme "PO-SMD5". I have Dovecot's default scheme set to SMD5. If I get a password hash whose value has a {PO-SMD5} tag on it, the session looks like the following: # telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <user with PO-SMD5 password> +OK pass <user's password> -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. The following entry is deposited into the system log: Mar 28 17:44:51 <hostname> dovecot: auth: Error: sql(<username>,<server IP>): Unknown scheme PO-SMD5 However, when I try using an account covered by the system (which does work when the plugin isn't loaded in dovecot.conf), the session looks like the following: mikuru# telnet <server IP> 110 Trying <server IP>... Connected to <server IP>. Escape character is '^]'. +OK Dovecot ready. user <user with system password> +OK pass <user's password> Connection closed by foreign host. The following entry is deposited into the system log: Mar 28 17:45:13 <hostname> dovecot: pop3: Error: dlopen(/usr/local/lib/dovecot/lib_password_scheme_po_smd5.so) failed: /usr/local/lib/dovecot/lib_password_scheme_po_smd5.so: Undefined symbol "password_scheme_unregister" Otherwise, the patch I developed under 1.x applies cleanly to 2.0.x's password_scheme.c and works perfectly as a builtin. This work was done under FreeBSD 8.1-RELEASE amd64. Any ideas? --Ian. -- Ian R. Justman UNIX hacker. Anime fan. Any questions? ianj (at) ian-justman.com

1 2

[Dovecot] xi.rename-it.nl problems
by Robert Schetterer 28 Mar '11

28 Mar '11

Hi , i know there were errors reported before with autobuild packs from xi.rename-it.nl , hint was purge and remove old dovecot packs, but at reinstall i ever get such ucfr: Attempt from package dovecot-pop3d to take /etc/dovecot/conf.d/20-pop3.conf away from package dovecot-common ucfr: Aborting. on a few packs ,any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 2

[Dovecot] dovecot auth password mismatch
by david＠davidwbrown.name 28 Mar '11

28 Mar '11

Hello dovecot gods, after using Postfix with webmail for 8 years the new gen of email smartphones forces me to consider using IMAP. Actually, for several months I was successfully using IMAP. I believe the reason why IMAP worked previously (before migrating to the Cloud) the hosting server and the client machines were considered local by the system. Now, I have moved everything to a Cloud service. And, now attempts to use my Ubuntu Evolution or iPhone generates the following error condition in my logs: dovecot: auth(default): client in: AUTH 1 PLAIN service=imap lip=xxx.yyy.www.zzz rip=75.214.160.72 lport=143 rport=59107 resp=AGRhdmlkAGx1dGVmaXNr dovecot: auth(default): passwd(kilroy,75.214.160.72): lookup dovecot: auth(default): passwd(kilroy,75.214.160.72): Password mismatch dovecot: auth(default): passwd(kilroy,75.214.160.72): CRYPT(mypass) != 'x' dovecot: auth(default): new auth connection: pid=15522 dovecot: auth(default): client out: FAIL 1 user=kilroy ******************* dovecot -n ******************* 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.1-rscloud x86_64 Ubuntu 10.04.2 LTS log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock auth default: realms: myname.name, hisname.name, hername.name default_realm: myrealm.com username_format: %n verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd userdb: driver: passwd

1 0

[Dovecot] Support not compiled in for passdb driver ldap
by Stéphane Wartel 28 Mar '11

28 Mar '11

Hello, From repo, the lastest release 2.0.11-0~auto+32 does not have ldap support :/ auth: Fatal: Support not compiled in for passdb driver 'ldap' Regards, Stephane

1 1

[Dovecot] Errors logged from 2.0.11
by Andreas Kossack 28 Mar '11

28 Mar '11

Hi all, we use dovecot 2.0.11 with local (LDAP based) users and see (occasionally) error messages like "Mar 15 09:29:26 MailServ local3:err|error dovecot: imap(xxxx): Error: creat(/dovecot.mailbox.log) failed: Permission denied (euid=1985(xxxx) egid=219(yyyy) stat() failed: No such file or directory, euid is not dir owner) but all (filesystem) permissions are correct and the user doesn't report any errors. All works as expected. What can be the reason for such messages? -- Mit freundlichen Grüßen A. Kossack _______________________________________________________________________________ Andreas Kossack Andreas.Kossack(a)TU-Cottbus.De BTU Cottbus, Brandenburg, Germany, Walther-Pauer-Str.2, 03046 Cottbus http://wwwca.telesec.de/cgi-bin/caservice/Common/InstallRoot/DT-Root-CA-2.d… _______________________________________________________________________________ Diese Nachricht wurde aus 100% wiederverwerteten Elektronen erstellt. _______________________________________________________________________________

2 4

[Dovecot] IMAP move extension support
by Nikolay Shopik 28 Mar '11

28 Mar '11

Hi Timo, Any chance we could get IMAP move extension support in Dovecot? http://tools.ietf.org/html/draft-krecicki-imap-move-01 This is now landed in Thunderbird trunk, so it will be great to have server to test and use with :). Thanks

2 3

[Dovecot] Regression in settings-parser.c (dovecot 2.0.11)
by Michal Hlavinka 28 Mar '11

28 Mar '11

Hi, one Fedora user sees regression in dovecot 2.0.11 (compared to prev. 2.0.9). There was change recently: http://hg.dovecot.org/dovecot-2.0/diff/bc77e80947c0/src/lib-settings/settin… which adds call to settings_find_key_nth(...., &parent_def,...). This function can set parent_def to NULL, but there is no check for this situation in the code. So on next line if (parent_def->type !=... dovecot crashes. We've tested simple fix: if (parent_def==NULL) return FALSE; and everything was working again. Michal Backtrace of the crash: Program received signal SIGSEGV, Segmentation fault. settings_find_key_nth (ctx=0x99e4050, key=0x99c4330 "plugin//etc", n=0xbff9bdac, def_r=0xbff9bda8, link_r=0xbff9bda4) at settings-parser.c:696 696 if (parent_def->type != SET_STRLIST) (gdb) p parent_def $1 = (const struct setting_define *) 0x0 (gdb) bt #0 settings_find_key_nth (ctx=0x99e4050, key=0x99c4330 "plugin//etc", n=0xbff9bdac, def_r=0xbff9bda8, link_r=0xbff9bda4) at settings-parser.c:696 #1 0x004f9ce5 in settings_find_key_nth (ctx=0x99e4050, key=0x99c4318 "plugin//etc/dovecot", n=0xbff9be1c, def_r=0xbff9be18, link_r=0xbff9be14) at settings-parser.c:693 #2 0x004f9ce5 in settings_find_key_nth (ctx=0x99e4050, key=0x99c42f8 "plugin//etc/dovecot/users", n=0xbff9beb4, def_r=0xbff9bebc, link_r=0xbff9beb8) at settings-parser.c:693 #3 0x004f94fd in settings_parse_keyvalue (ctx=0x99e4050, key=0x99c42f8 "plugin//etc/dovecot/users", value=0x99c42f2 "yes") at settings-parser.c:760 #4 0x004fa270 in settings_parse_line (ctx=0x99e4050, line=0x99c42d8 "plugin//etc/dovecot/users=yes") at settings-parser.c:862 #5 0x00dededa in set_line (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:134 #6 user_reply_handle (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:227 #7 mail_storage_service_lookup (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c04c, error_r=0xbff9c0fc) at mail-storage-service.c:843 #8 0x00deeaae in mail_storage_service_lookup_next (ctx=0x99cd468, input=0xbff9c100, user_r=0xbff9c0ac, mail_user_r=0xbff9c0a8, error_r=0xbff9c0fc) at mail-storage-service.c:968 #9 0x0805f2e7 in client_create_from_input (input=<value optimized out>, ---Type <return> to continue, or q <return> to quit--- login_client=0x99ce810, fd_in=11, fd_out=11, input_buf=0xbff9c0e0, error_r=0xbff9c0fc) at main.c:202 #10 0x0805f5dd in login_client_connected (client=0x99ce810, username=0x99c409b "sjoerd", extra_fields=0x99c4110) at main.c:267 #11 0x0051606f in master_login_auth_finish (client=0x99ce810, auth_args=<value optimized out>) at master-login.c:206 #12 0x005163c2 in master_login_auth_callback (auth_args=0x99c410c, errormsg=0x0, context=0x99ce810) at master-login.c:374 #13 0x00516d3e in master_login_auth_input_user (auth=0x99cdcd8) at master-login-auth.c:239 #14 master_login_auth_input (auth=0x99cdcd8) at master-login-auth.c:359 #15 0x0052cc72 in io_loop_call_io (io=0x99cea10) at ioloop.c:384 #16 0x0052ded3 in io_loop_handler_run (ioloop=0x99cc390) at ioloop-epoll.c:213 #17 0x0052cbf0 in io_loop_run (ioloop=0x99cc390) at ioloop.c:405 #18 0x005181fb in master_service_run (service=0x99cc2e0, callback=0x805f100 <client_connected>) at master-service.c:478 #19 0x0805fb0d in main (argc=1, argv=0xbff9c4c4) at main.c:375

2 4

[Dovecot] FTS Compound Search
by duonut 28 Mar '11

28 Mar '11

Hi I use roundcube as the webmail fronted to a dovecot server. It currently has squat enabled. When round cube performs a search, it does a compound search even if only one field is selected. >From another thread i read, dovecot in the v1 period did not support compound searches for squat. Does the latest version of V2 support compound searches with fts squat? If not, does fts with solr support compound searches? -- View this message in context: http://old.nabble.com/FTS-Compound-Search-tp31241908p31241908.html Sent from the Dovecot mailing list archive at Nabble.com.

2 2

Re: [Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy klaus 27 Mar '11

27 Mar '11

Hello, >> SSL ............ : yes (OpenSSL) > >So it should be there.. > >> so it looks like SSL support is included, but when I start dovecot the >> message is: >> >> doveconf: Error: SSL support not compiled in but ssl=yes > >Well, that's weird. Are you sure you're running the just-compiled >version of Dovecot (i.e. not a previously installed version that didn't >have OpenSSL compiled in)? > Yes, I think so. I tried to find every dovecot directory and files and deleted it. After "make" and "make install" there was a new file under "/usr/local/sbin/dovecot" this is the one I use. >What does dovecot --build-options say? output of "/usr/local/sbin/dovecot --build-options" Build options: ioloop=epoll notify=dnotify ipv6 io_block_size=8192 Mail storages: cydir maildir mbox mdbox raw sdbox shared SQL drivers: Passdb: checkpassword passwd passwd-file shadow Userdb: checkpassword nss passwd prefetch passwd-file This looks strange because there is no ssl support. >Do you have "#define HAVE_SSL" in config.h? No, I only can find "#define HAVE_OPENSSL" Regards, Markus -- NEU: FreePhone - kostenlos mobil telefonieren und surfen! Jetzt informieren: http://www.gmx.net/de/go/freephone

3 2

[Dovecot] Dovecot 2.0.9: Thunderbird 3.1.9: Very slow while open sent folder with many (4k>) mails
by Denny Schierz 27 Mar '11

27 Mar '11

hi, one customer told us, that he has performance problem in his Thunderbird 3.1.9, while open his sent folder, which has round about 4000 mails in it, and 20k in his Inbox. For example TB, tries to sync the sent-folder list (over SSL) from the sent folder for now over 15min. In the log, I can't see any strange things, so for me, Dovecot works ok. Maybe, I should use better cache options? Now he tries to move many messages to separate folders, but thats also a bit slow. So, is it a TB problem, with so many messages? Our config: auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = /var/log/dovecot-debug.log default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = no doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 500 hostname = xfire05.rbg.informatik.tu-darmstadt.de imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k info_log_path = /var/log/dovecot.log last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/dovecot/2.0.9/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = I'm alive login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = vmail mail_home = /imap/spool/%d/%1n/%n mail_location = maildir:/imap/spool/%d/%1n/%n:INDEX=/imap/spool/% d/indexes/%1n/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/dovecot/dovecot2/lib/dovecot/ mail_plugins = acl quota mail_privileged_group = vmail mail_save_crlf = no mail_temp_dir = /imap/spool/tmp mail_uid = vmail mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } namespace { hidden = no inbox = no list = yes location = maildir:/imap/spool/public prefix = public/ separator = / subscriptions = no type = public } passdb { args = /usr/local/dovecot/dovecot2/etc/dovecot/conf.d/dovecot-ldap.conf.ext deny = no driver = ldap master = no pass = no } plugin { acl = vfile:/imap/spool/%d/acl autocreate = Sent autocreate2 = Drafts autocreate3 = Trash autocreate4 = Spam autosubscribe = Sent autosubscribe2 = Drafts autosubscribe3 = Trash autosubscribe4 = Spam quota = maildir:User quota quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_warning = storage=80% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 80 quota_warning2 = storage=90% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 90 quota_warning3 = storage=95% % /usr/local/dovecot/dovecot/bin/quota-warning.sh 95 sieve = /imap/spool/%d/%1n/%n/sieve/default.sieve sieve_dir = /imap/spool/%d/%1n/%n/sieve sieve_extensions = +imapflags trash = /usr/local/dovecot/dovecot/etc/conf.d/dovecot-trash.conf } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = postmaster(a)rbg.informatik.tu-darmstadt.de protocols = imap pop3 lmtp sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postdrop mode = 0600 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postdrop mode = 0666 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2001 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no syslog_facility = mail userdb { args = /usr/local/dovecot/dovecot2/etc/dovecot/conf.d/dovecot-ldap.conf.ext driver = ldap } valid_chroot_dirs = verbose_auth = no verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol lda { mail_plugins = acl quota sieve quota } protocol imap { imap_idle_notify_interval = 2 mins mail_max_userip_connections = 10 mail_plugins = acl quota imap_acl imap_quota mail_log notify autocreate trash listescape } protocol lmtp { mail_plugins = acl quota sieve } protocol pop3 { mail_plugins = acl quota quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_reuse_xuidl = yes }

4 5

[Dovecot] How can I view these email files?
by Phill Edwards 27 Mar '11

27 Mar '11

I messed up my email today through a combination of stuff-ups with procmail and dovecot. The result was that I ended up delivering some email messages to the root Maildir folder instead of the sub-folders. The files are in the correct format but have names like msg.3BXE, msg.2BXE etc. Of course these don't show up in my IMAP client so I can't read them. Does anyone know a way I can point some sort of email client at these to read them? Or a way to transfer them under Maildir/new so that I can read them as part of my normal inbox? I know that some of them have attachments.

2 2

[Dovecot] Multiple versions of Dovecot installed
by Phill Edwards 26 Mar '11

26 Mar '11

I have had to rebuild my 64-bit CentOS 5 email server and after installing dovecot rpms (using yum) I seem to have multiple versions installed: dovecot-1.1.20-1_98.el5 - from ATrpms repo dovecot-1.0.7-7.el5 - from CentOS repo dovecot-sieve-0.1.18-6.1.el5 - from ATrpms repo I have tried to install just the ATrpms version but when I do "yum install dovecot" the CentOS one always gets pulled in as well. Is this normal, or does it indicate that something has gone wrong in the installation process? I'm having an issue with Dovecot sieve because it can't find a sieve plugin in /usr/lib64/dovecot/lda/. However, there is one in /usr/lib/dovecot/lda/. Do I have some sort or 32-bit/64-bit mismatch?

2 1

[Dovecot] Ignored proxy_maybe var and no local login when "host = Proxy FQDN"
by Olaf Reitmaier Veracierta 26 Mar '11

26 Mar '11

Hi help is preciated, PROBLEM The dovecot-ldap.conf of "proxy server A" is working when the "host" attribute is the FQDN of other server: pass_attrs = uid=user,userPassword={SSHA}password,\ =proxy_maybe=,maildrop=host,=port=143,=destuser=%u,=starttls=any-cert pass_filter = (&(objectClass=posixAccount)(uid=%u)) CASES When the "host" attribute is the "FQDN of server A" dovecot imap-login start and infinite loop which swallow all RAM, and process are showing many connections although is just 1 test user connected. It seems that connections are infinitely proxified to it self. When the "host" attribute is the "IP of server A" dovecot imap-login works OK, login the user locally in the server A. I include debug message int the source of "dovecot-2.0.11/src/auth/auth-request.c" which appears: Mar 25 14:10:49 debian dovecot: auth: Debug: ldap(steran,172.26.98.85): result: uid(user)=steran maildrop(host)=smtp2.tsj-dem.gob.ve Mar 25 14:10:49 debian dovecot: auth: Debug: BROKEN SETUP The modifications appears here and reveals problems with the call to net_addr2ip(host, &ip) in auth_request_proxy_is_self: static bool auth_request_proxy_is_self(struct auth_request *request) { const char *const *tmp, *host = NULL, *port = NULL, *destuser = NULL; struct ip_addr ip; tmp = auth_stream_split(request->extra_fields); for (; *tmp != NULL; tmp++) { if (strncmp(*tmp, "host=", 5) == 0) host = *tmp + 5; else if (strncmp(*tmp, "port=", 5) == 0) port = *tmp + 5; if (strncmp(*tmp, "destuser=", 9) == 0) destuser = *tmp + 9; } if (host == NULL || net_addr2ip(host, &ip) < 0) { /* broken setup */ T_BEGIN { i_debug("BROKEN SETUP %s", host); } T_END; return FALSE; } if (!net_ip_compare(&ip, &request->local_ip)){ T_BEGIN { i_debug("%s", "IPS NOT EQUAL"); }T_END; return FALSE; } if (port != NULL && !str_uint_equals(port, request->local_port)){ T_BEGIN { i_debug("%s", "PORTS DIFFERENT"); } T_END; return FALSE; } return destuser == NULL || strcmp(destuser, request->original_username) == 0; } -- "You don't know where your shadow will fall", Somebody.- ---------------------------------------------------------------- Olaf Reitmaier Veracierta <olafrv(a)gmail.com> ---------------------------------------------------------------- http://www.olafrv.com ----------------------------------------------------------------

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 26 Mar '11

26 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

2 1

[Dovecot] mdbox, quota, ns, maildir quota?
by Brandon Lamb 26 Mar '11

26 Mar '11

Hello, I pasted my config below, hoping someone can point out something obvious. In my dovecot.log I am seeing: Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota I am using mysql userdb_* and passing maildir:~/maildir or mdbox:~/mdbox for mail. When its maildir its fine, I had that originally then used dsync to convert to mdbox, updated mysql entry to point to mdbox:~/mdbox and now I keept getting those quota errors. It IS possible to have mixed environment still correct? Some users can be maildir and some can be mdbox since Im using the per-user userdb options? Any hints here? I would swear this was all working on a different server I had setup but Im no longer employed there so I cant peek at the config =P Thanks for any help or tips Brandon ------------------------------------------------------------------------------- root@mail1:~# dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37-2-amd64 x86_64 Debian wheezy/sid auth_cache_negative_ttl = 30 secs auth_cache_size = 4 k auth_cache_ttl = 30 secs auth_default_realm = greencrane.com auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes auth_worker_max_count = 60 base_dir = /var/run/dovecot debug_log_path = /var/log/dovecot/debug.log default_client_limit = 1024 default_internal_user = mail default_login_user = mail deliver_log_format = %s from %f %$ dict/expire = mysql:/etc/dovecot/conf.d/dovecot-dict-expire.conf.ext disable_plaintext_auth = no first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/info.log last_valid_gid = 8 last_valid_uid = 8 log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format = %s login_log_format_elements = (%u) (%r) mail_access_groups = mail mail_fsync = never mail_gid = 8 mail_location = maildir:~/maildir mail_log_prefix = "%Ls <%u>: " mail_max_userip_connections = 4 mail_plugins = quota expire mail_privileged_group = mail mail_uid = 8 mailbox_idle_check_interval = 1 mins maildir_very_dirty_syncs = yes passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin/auth_socket_path = /var/run/dovecot/auth-master plugin/autocreate = Trash plugin/autocreate2 = Sent plugin/autocreate3 = Drafts plugin/autocreate4 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Sent plugin/autosubscribe3 = Drafts plugin/autosubscribe4 = Spam plugin/quota = maildir:User quota plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u protocols = imap pop3 service auth { executable = /usr/local/libexec/dovecot/auth unix_listener auth-client { group = mail mode = 0666 user = mail } unix_listener auth-master { group = mail mode = 0666 user = mail } unix_listener auth-userdb { group = mail mode = 0666 user = mail } vsz_limit = 512 M } service dict { unix_listener dict { group = mail mode = 0666 } } service imap-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/imap-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service imap { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap vsz_limit = 512 M } service pop3-login { chroot = login client_limit = 512 executable = /usr/local/libexec/dovecot/pop3-login process_limit = 20 process_min_avail = 4 service_count = 0 user = dovecot vsz_limit = 128 M } service pop3 { drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/pop3 vsz_limit = 512 M } service quota-warning { executable = script /etc/dovecot/quota-warning.sh user = mail } ssl_cert = </etc/dovecot/ssl/dovecot-cert.pem ssl_key = </etc/dovecot/ssl/dovecot-key.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /mail verbose_proctitle = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb info_log_path = /var/log/dovecot/deliver.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/deliver.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire trash autocreate postmaster_address = postmaster(a)greencrane.com quota_full_tempfail = yes rejection_reason = Your message to <%t> with subject of <%s> was automatically rejected:%n%r rejection_subject = Mailbox Full: %s sendmail_path = /usr/sbin/exim } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_id_log = * imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 20 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire imap_quota autocreate trash } protocol pop3 { mail_max_userip_connections = 2 mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = quota expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = no pop3_lock_session = no pop3_logout_format = retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = yes pop3_reuse_xuidl = no pop3_save_uidl = yes pop3_uidl_format = %g }

2 1

[Dovecot] Restrict clients access during mailboxes convertion ?
by Frank Bonnet 26 Mar '11

26 Mar '11

Hello Is there a way to restrict access to Dovecot server during mailboxes convertion ? I need dovecot to be running to convert mailboxes from a format to another, but I would like to block all our LAN clients until the end of convertion. If there is no internal Dovecot mechanism I will use some firewall rule on the server. Thanks

2 2

[Dovecot] quota warning email to user
by upen 25 Mar '11

25 Mar '11

Hi, I am trying to use Quota in dovecot-2.0.11. I find as a sender(same user a receiver) I receive an email that receiver's Quota is exceeded , and receiver's mailbox is full . This is good, however the receiver whose MB is full isn't getting any quota-warning. Configuration is as below, dovecot -n # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35-gentoo-r8 x86_64 Gentoo Base System release 1.12.14 ext4 auth_mechanisms = plain login listen = * mail_location = maildir:/nfs1/mail/%u mail_plugins = " quota" passdb { args = * driver = pam } plugin/quota = maildir:User quota plugin/quota_rule = *:storage=5M plugin/quota_rule2 = Trash:storage=+1M plugin/quota_rule3 = Junk:storage=+1M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot } ssl_cert = </etc/postfix/ssl/smtpd.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/postfix/ssl/smtpd.pem userdb { driver = passwd } protocol imap { mail_plugins = " quota imap_quota" Mar 24 15:41:28 email_serverdovecot: imap(local_username): Error: quota: net_connect_unix(/var/run/dovecot/quota-warning) failed: Permission denied (euid=1002(local_username) egid=10(wheel) missing +r perm: /var/run/dovecot/quota-warning, euid is not dir owner) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: save failed to INBOX: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverdovecot: lda(local_username): msgid=<20110324154128.0df8855a(a)local_username_ots.domainname>: rejected: Quota exceeded (mailbox for user is full) Mar 24 15:41:28 email_serverpostfix/pickup[25550]: D25C121BB4: uid=1002 from=<> ls -al /var/run/dovecot/ total 20 drwxr-xr-x 4 root root 4096 Mar 24 15:35 . drwxr-xr-x 33 root root 4096 Mar 24 14:54 .. srw------- 1 root root 0 Mar 24 15:35 anvil srw------- 1 root root 0 Mar 24 15:35 anvil-auth-penalty srw------- 1 root root 0 Mar 24 15:35 auth-client srw------- 1 dovecot root 0 Mar 24 15:35 auth-login srw------- 1 root root 0 Mar 24 15:35 auth-master srw------- 1 root root 0 Mar 24 15:35 auth-userdb srw------- 1 dovecot root 0 Mar 24 15:35 auth-worker srw------- 1 root root 0 Mar 24 15:35 config srw------- 1 root root 0 Mar 24 15:35 dict srw------- 1 root root 0 Mar 24 15:35 director-admin srw------- 1 root root 0 Mar 24 15:35 director-userdb srw-rw-rw- 1 root root 0 Mar 24 15:35 dns-client srw------- 1 root root 0 Mar 24 15:35 doveadm-server lrwxrwxrwx 1 root root 25 Mar 24 15:35 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 Mar 16 13:24 empty srw-rw-rw- 1 root root 0 Mar 24 15:35 lmtp drwxr-x--- 2 root dovenull 4096 Mar 24 15:35 login -rw------- 1 root root 6 Mar 24 15:35 master.pid srw------- 1 root root 0 Mar 24 15:35 quota-warning ls -al /usr/local/bin/quota-warning.sh -rwxrwxrwx 1 root root 225 Mar 24 13:16 /usr/local/bin/quota-warning.sh cat /usr/local/bin/quota-warning.sh #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: postmaster(a)domain.com Subject: quota warning Your mailbox is now $PERCENT% full. EOF ### Any help is appreciated. Thanks.

1 1

[Dovecot] lda_mailbox_autocreate and lda_mailbox_autosubscribe
by Frank Bonnet 25 Mar '11

25 Mar '11

Hello I use real unix users on the mailhub and I would like to automate home directories creation for new users. I found lda_mailbox_autocreate and lda_mailbox_autosubscribe statements in 15-lda.conf file ( dovecot 2.0.11 ) which seem to be the right things for me :-) I use Postfix 2.8.1 with Dovecot LDA mailbox_command = /usr/local/libexec/dovecot/dovecot-lda All Mailboxes are located in /user/$USER/mail/ Does those two statements means that if a home directory does not exists it will be created at the first login of the new user ? I mean if new user "toto" has no homedir at all , dovecot will create /user/toto/mail at the very first successful connection ? Thanks a lot

3 3

[Dovecot] Issue with Dovecot v2.0 auto packages
by Stephan Bosch 25 Mar '11

25 Mar '11

Hi, Yesterday night I upgraded the automated packages built at Xi to the latest experimental Debian packages for v2.0. This unfortunately causes a problem upon upgrade. I've contacted the maintainer, so this issue should resolve itself soon. The issue manifests as follows: Setting up dovecot-imapd (2:2.0.11-0~auto+25) ... ucfr: Attempt from package dovecot-imapd to take /etc/dovecot/conf.d/20-imap.conf away from package dovecot-common ucfr: Aborting. dpkg: error processing dovecot-imapd (--configure): subprocess installed post-installation script returned error exit status 4 configured to not write apport reports The Debian maintainer split dovecot-common in various new packages and moved config files in the process. Use ucfr --purge --force dovoecot-imapd /etc/dovecot/conf.d/20-imap.conf ucfr --purge --force dovoecot-managesieved /etc/dovecot/conf.d/20-managesieve.conf ucfr --purge --force dovoecot-sieve /etc/dovecot/conf.d/90-sieve.conf to get rid of these errors as a workaround. I did this in combination with temporarily purging and removing Dovecot, but that is probably not necessary. Once you have upgraded, you will not encounter this problem again. And yes, if you are using Sieve, be sure to install the new dovecot-sieve and dovecot-managesieved packages. Regards, Stephan.

2 2

[Dovecot] try to compile dovecot 2.0.11 with ssl support
by easy 24 Mar '11

24 Mar '11

Hello, I try to compile dovecot in Version 2.0.11 with ssl support on a CentOS 4.5 system. Installed packages are openssl and openssl-devel. after "./configure --with-ssl=openssl" "make" "make install"the message is: (also tried with CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -ldl") Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : dnotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite so it looks like SSL support is included, but when I start dovecot the message is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-128.1.1.el5.028stab062.3ent i686 CentOS release 4.5 (Final) passdb { driver = pam } protocols = imap ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } doveconf: Error: SSL support not compiled in but ssl=yes doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: SSL support not compiled in but ssl=yes I also tried to use the source files of openssl and compile openssl by myself, but the error is the same. thanks Regards Markus

1 0

[Dovecot] Dotlock dovecot-uidlist errors / NFS / High Load
by list＠airstreamcomm.net 24 Mar '11

24 Mar '11

As of late our four node dovecot 1.2.13 cluster has been experiencing a massive number of these dotlock errors: Created dotlock file's timestamp is different than current time (1295480202 vs 1295479784): /mail/user/Maildir/dovecot-uidlist These dotlock errors correspond with very high load averages, and eventually we have to turn off all but one server to stop them from occurring. We first assumed this trend was related to the NFS storage, but we could not find a networking issue or NFS related problem to speak of. We run the mail storage on NFS which is hosted on a Centos 5.5 host, and mounted with the following options: udp,nodev,noexec,nosuid. Secondly we thought the issues were due to NTP as the time stamps vary so widely, so we rebuilt our NTP servers and found closer stratum 1 source clocks to synchronize to hoping it would alleviate the problem but the dotlock errors returned after about 12 hours. We have fcntl locking set in our configuration file, but it is our understanding from look at the source code that this file is locked with dotlock. Any help troubleshooting is appreciated. Thanks, Michael # 1.2.13: /etc/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5 x86_64 CentOS release 5.5 (Final) protocols: imap pop3 listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 128 login_processes_count: 4 login_max_processes_count: 256 login_max_connections: 386 first_valid_uid: 300 mail_location: maildir:~/Maildir mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: username_format: %Ln worker_max_count: 50 passdb: driver: pam userdb: driver: passwd

5 14

[Dovecot] pigeonhole and roundcube install problem
by Selcuk MIYNAT 24 Mar '11

24 Mar '11

Hi, I've installed sieve and managesieve(pigeonhole) on qmail and dovecot(v2.0.11). I've install sieverules on Roundcube. I can see the plugin on the webinterface, and i can add rules. But there is a problem: I've put this .qmail file on "deneme" user's home directory according to [1]. |/var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda -d $EXT@$USER Then I got this message on qmail log: deferral: /var/qmail/bin/preline:_line_1:_test:_too_many_arguments/ Incoming e-mail written to the disk but doesn't seen on inbox. If i have change my .qmail file to this: /usr/local/libexec/dovecot/dovecot-lda -d $EXT@$USER Plugin doesn't return a message to mail sender: Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib90_sieve_plugin.so Debug: auth input: deneme(a)example.com home=/home/vpopmail/domains/example.com/deneme uid=89 gid=89 Debug: Effective uid=89, gid=89, home=/home/vpopmail/domains/example.com/deneme Debug: fs: root=/home/vpopmail/domains/example.com/deneme/Maildir, index=, control=, inbox=/home/vpopmail/domains/example.com/deneme/Maildir Debug: none: root=, index=, control=, inbox= Debug: sieve: using sieve path for user's script: /home/vpopmail/domains/example.com/deneme/.dovecot.sieve Debug: sieve: opening script /home/vpopmail/domains/example.com/deneme/.dovecot.sieve Debug: sieve: script binary /home/vpopmail/domains/example.com/deneme/.dovecot.svbin successfully loaded Debug: sieve: binary save: not saving binary /home/vpopmail/domains/example.com/deneme/.dovecot.svbin, because it is already stored Debug: sieve: executing script from /home/vpopmail/domains/example.com/deneme/.dovecot.svbin Info: sieve: msgid=<4D80A733.8010906(a)test.com.tr>: discarded vacation reply to <> Info: sieve: msgid=<4D80A733.8010906(a)test.com.tr>: stored mail into mailbox 'INBOX' But i can forward the incoming mail to another address. Why doesn't work this plugin, any ideas? [root@mail ~]# dovecot -n # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) auth_debug = yes auth_default_realm = example.com auth_mechanisms = plain digest-md5 cram-md5 auth_socket_path = /usr/local/var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 0 last_valid_uid = 100 log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } plugin/sieve = ~/.dovecot.sieve plugin/sieve_dir = ~/sieve protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } ssl = no userdb { args = /usr/local/etc/dovecot-sql.conf driver = sql } protocol lda { info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver-errors.log mail_plugins = " sieve" postmaster_address = postmaster(a)example.com sendmail_path = /var/qmail/bin/sendmail } dovecot-sql.conf çıktısı: driver = mysql connect = host=localhost user=vpopmailuser password=vpopmailpassword dbname=vpopmail default_pass_scheme = PLAIN password_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, pw_clear_passwd AS password FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' user_query = SELECT pw_dir as home, 89 AS uid, 89 AS gid FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' [1]: http://wiki2.dovecot.org/LDA/Qmail -- Selcuk MIYNAT Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer Phone : +90 216-4709423 | Fax : +90 216-4709508 Web : http://www.endersys.com.tr Blog : http://blog.endersys.com Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com Endersys is the first Advanced Business Partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/ -- Selcuk MIYNAT Endersys Ltd. Sistem Destek Muhendisi / System Support Engineer Phone : +90 216-4709423 | Fax : +90 216-4709508 Web : http://www.endersys.com.tr Blog : http://blog.endersys.com Twitter : http://www.twitter.com/endersys LPI : The #1 Linux Certification for IT Professionals LPI (Linux Professional Institute) Turkey http://www.lpi-turkey.com Endersys is the first Advanced Business Partner of Red Hat in Turkey ! http://www.europe.redhat.com/partners/endersys/

2 3

[Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 24 Mar '11

24 Mar '11

Hello, I am running dovecot 2.0.9 with expire plugin, using the sqlite backend. The following command is executed every day by cron: doveadm expunge -A mailbox Trash savedbefore 30d I started to use the expire plugin about one month ago. Since then, using "doveadm search -A mailbox Trash savedbefore <days>" with different values for <days>, I could see every day how the messages were getting older. Yesterday was the first time that the expression "savedbefore 30d" became true for the oldest messages in the Trash mailbox and these messages were actually deleted from Trash. But today, all messages that were not deleted yesterday are new to "doveadm search", that means that "doveadm search -A mailbox Trash savedbefore 0d" shows all messages from Trash, but "doveadm search -A mailbox Trash savedbefore 1d" shows no messages from Trash, though during the last month I moved messages to Trash every day. Best Regards Christoph

4 13

[Dovecot] dsync warning/error - mailbox needs recreation
by Daniel L. Miller 23 Mar '11

23 Mar '11

What does this mean? These lines occur on subsequent runs of "dsync -u user backup target" dsync(dmiller(a)amfes.com): Warning: Destination mailbox INBOX has been modified, need to recreate it before we can continue syncing dsync(dmiller(a)amfes.com): Error: Can't delete mailbox INBOX: INBOX can't be deleted. -- Daniel

2 3

[Dovecot] Configure Dovecot For IMAP Only?
by Carlos Mennens 23 Mar '11

23 Mar '11

I've install Dovecot 2.0.11-1 on my Linux server and all the guides and tutorials I've found on Google don't work since I'm running 2.x and it seems most guides were done with 1.x. I've opened up the configuration file /etc/dovecot/dovecot.conf & from what I can see, this is all I could come up with: protocols = imap listen = * base_dir = /var/run/dovecot login_greeting = Server ready. mail_location = maildir:~/mail I obviously want / need IMAP4 access ONLY and not POP3. I've got only 12 local Linux shell users and all authentication is done by I think PAM. My friend sent me his configuration file to see if it would work on Dovecot 2.x however I don't think it does: auth_mechanisms = plain login mail_location = maildir:~/mail passdb { driver = pam } protocols = imap service auth { unix_listener auth-client { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/cert.pem ssl_key = </etc/ssl/private/key.pem userdb { driver = passwd } #protocol imap { # imap_client_workarounds = delay-newmail tb-extra-mailbox-sep #} Can anyone please tell me what I need to add to get this very basic IMAP server up and running?

4 4

[Dovecot] Mail Sync
by Scott Hughes 23 Mar '11

23 Mar '11

I am trying to sync my mail on two different servers as testing for converting our business over to a server using dovecot. I am currently running dovecot version 2.0.11 While trying to sync the messages using Thunderbird and a program named imapsync, I run into an error stating that the dovecot server does not know how to handle messages with the FORWARD flag set. Is the FORWARD flag some type of non-standard flag or is there something I need to do in dovecot to allow for this flag? Thanks

3 2

[Dovecot] Bug: Creating mbox folders
by Kelly Stephens 23 Mar '11

23 Mar '11

Hey, I had trouble this morning creating a folder to contain sub-folders. I am using the mbox format. Turns out that the .imap directory in the new folder (directory) was not being created. Anytime I tried to view a sub-folder (using Thunderbird) dovecot would dump. Once I manually created the .imap directory, it works fine. dovecot --version -> 2.0.9 dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.35.11-83.fc14.i686 i686 Fedora release 14 (Laughlin) listen = * mbox_write_locks = fcntl passdb { driver = pam } protocols = imap ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } The maillog dump... Mar 16 08:50:22 brinn dovecot: imap(kms): Panic: file mailbox-list.c: line 324 (mailbox_list_get_unexpanded_path): assertion failed: (*location == SETTING_STRVAR_UNEXPAND ED[0]) Mar 16 08:50:22 brinn dovecot: imap(kms): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0() [0x994051] -> /usr/lib/dovecot/libdovecot.so.0() [0x9940c0] -> /usr/lib /dovecot/libdovecot.so.0(i_fatal+0) [0x96a690] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_get_unexpanded_path+0x138) [0xa086d8] -> /usr/lib/dovecot/libdovec ot-storage.so.0(mailbox_list_mkdir+0x52) [0xa09b32] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_create_missing_index_dir+0x129) [0xa09fb9] -> /usr/lib/doveco t/libdovecot-storage.so.0(index_storage_mailbox_open+0xa4) [0xa23c24] -> /usr/lib/dovecot/libdovecot-storage.so.0() [0xa485de] -> /usr/lib/dovecot/libdovecot-storage.so.0 () [0xa04d25] -> dovecot/imap(cmd_select_full+0x1cf) [0x805310f] -> dovecot/imap(cmd_select+0x1a) [0x8053b3a] -> dovecot/imap() [0x80560ed] -> dovecot/imap() [0x80561ca] -> dovecot/imap(client_handle_input+0x12d) [0x805640d] -> dovecot/imap(client_input+0x60) [0x8056d10] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x9a18e2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd3) [0x9a2b43] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x9a1860] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2b) [0x98cfcb] -> dovecot/imap(main+0x33d) [0x805faad] -> /lib/libc.so.6(__libc_start_main+0xe6) [0x732e36] -> dovecot/imap() [0x804e111] Mar 16 08:50:22 brinn dovecot: master: Error: service(imap): child 9753 killed with signal 6 (core dumps disabled)

2 4

[Dovecot] different users with different quota
by Jim Knuth 23 Mar '11

23 Mar '11

Hello, How can one assign different users different Quota? So properly? quota_rule1 = userONE:storage=1G quota_rule2 = Trash:storage=100M quota_rule3 = SPAM:ignore quota_rule4 = userTWO:storage=5M quota_rule5 = Trash:storage=50M quota_rule6 = SPAM:ignore and so on ... Right or how? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! Zufallszitat: Die Geschichte wird freundlich mit mir umgehen, denn ich habe vor, sie zu schreiben. [Churchill]

3 8

[Dovecot] FETCH got too little data (+ wrong W value) with 1 byte offset
by Vincent Artzner 23 Mar '11

23 Mar '11

Hi there, I juste set up dovecot as local imap server last week, with maildir format. Things went fine with two "low volume" accounts, until I added another one. Then I see two different things with connected clients: 1/ Quite oftent well formed messages that appear... and disappear quite immediately. On the server, the messages concerned by 2/ seem to be there, I can open the files and it looks ok (header, content). The only error log I get is this: 2011-03-18 14:43:14 IMAP(info): Info: Disconnected: FETCH failed bytes=109363/174063195 2011-03-18 14:43:14 imap-login: Info: Login: user=<info>, method=PLAIN, rip=192.168.0.191, lip=192.168.0.10, TLS 2011-03-18 14:43:15 IMAP(info): Error: FETCH [] for mailbox Envois UID 11572 got too little data: 63454 vs 63455 2011-03-18 14:43:15 IMAP(info): Error: Maildir filename has wrong W value: /home/info/Maildir/.Envois/cur/1300450349.M120256P3108.Serveurlinux,S=460764,W=460768:2,S 2011-03-18 14:43:15 IMAP(info): Error: Corrupted index cache file /home/info/Maildir/.Envois/dovecot.index.cache: Broken virtual size for mail UID 11572 Please note the size: 63454 vs 63455: it's always like that: one byte difference. Here is the dovecot -n result: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-24-generic-pae i686 Ubuntu 10.04.2 LTS ext4 log_path: /home/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S listen: *:144 ssl_listen: *:10943 login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_process_per_connection: no mail_max_userip_connections: 20 mail_privileged_group: mail mail_location: maildir:/home/%u/Maildir:INBOX=/home/%u/Maildir/ mbox_write_locks: fcntl dotlock auth default: passdb: driver: pam userdb: driver: passwd The imap client used is thunderbird under windows XP/7. I also reproduced it with opera mail client. I tried to rename/delete dovecot.index.cache files as I have read about it, but doesn't changed anything. The incoming mails are provided to dovecot by procmail, so I think dovecot is responsible for settings the S, W params in the filenames. No other process should alter the messages (i still have to fully check this). I am a bit lost (not a system administrator at all) and would be grateful for any advice. Vincent

3 6

[Dovecot] DoveCot 2.0.9: Problem with some Clients and separator (migrate from Cyrus)
by Denny Schierz 23 Mar '11

23 Mar '11

hi, we had to move from a old dieing Sparc very quickly our Cyrus IMAP Users to Dovecot. Most things works, but some Clients (like Evolution or Thunderbird) are strange. Our separator in Dovecot2 is "^", the mailboxes on the filesystem are something like "INBOX.subfolder1.subfolder2", but in TB and Evo I see INBOX^subfolder1^subfolder^ In Roundcube Webmail, I have just a normal tree, as I expected. I used cyrus2dovecot.pl for converting. On Evolution I deleted the IMAP Profile and recreated it, and that was working, but it isn't a workaround for TB So, how can I fix it? namespace { type = private separator = ^ prefix = inbox = yes hidden = no subscriptions = yes } cu denny

3 6

[Dovecot] Master user creds for proxy stored statically/locally?
by Edward Carraro 22 Mar '11

22 Mar '11

I have successfully set up the master user on the destination server (2.0.11) and tests have worked. now I'm working on the proxy Before I had the proxy just forward everything to the backend and had the destination server do the authentication. My authentication is done via LDAP but not really sure how to append the master user and password to the users credentials after authentication is done. id rather not have the master user/pass in each users ldap entry and returned after doing a lookup or add a destuser field for each user... basically i prefer not having to add any new attributes to LDAP Can the information be stored locally in a file on the proxy? do i just make the same master user file that I have on the backend? Thanks!

3 14

[Dovecot] Change password cheme
by Pascal Nobus 22 Mar '11

22 Mar '11

We want to update our password scheme from crypt to SHA256. Because usernames/passwords are in MySQL I thought this wouldn't be a problem. We have about 3000 users that need to be updated, so make a new password for them isn't possible. I was thinking of an automated script that would update the database after every login. So we did this: dovecot.conf: mail_executable = /usr/local/etc/updatepwd.sh updatepwd.sh: #!/bin/sh $USER $PASSWORD|/usr/local/etc/do_updatepwd.pl exec /usr/local/libexec/dovecot/imap "$@" (do_updatepwd.pl is a perl script that makes a sha256 from the second argument, and then update the mysql-query) However: the password is not in the ENVIROMENT anymore. I changed in dovecot the settings: auth_debug = yes auth_debug_passwords = yes Anyone a solution for this? Best regards, Pascal

2 1

[Dovecot] Problem with sieve and delivery to folders with german umlauts.
by Micha Krause 22 Mar '11

22 Mar '11

Hi, I have a problem with sieve and german umlauts: error: msgid=unspecified: failed to store into mailbox 'INBOX.t&AOQ-st' (INBOX.t&-AOQ-st): Mailbox doesn't exist: t&-AOQ-st. The folder name is "täst", the filesystem folder is ".t&AOQ-st" , but sieve seems to look for a folder named ".t&-AOQ-st" Dovecot verstion is: 2.0.9 (7ecc5e10da57) Micha Krause

3 3

[Dovecot] http://wiki2.dovecot.org/MailServerOverview contains poppycock
by William Blunn 22 Mar '11

22 Mar '11

Just having another look at http://wiki2.dovecot.org/MailServerOverview , it seems to have some statements in it which are misleading, and some which are really ... well ... wrong. Quote: "With the possible, optional, exception of the deliver MDA, Dovecot is not involved with reception, delivery, and storage of mail. That function is provided by a MTA such as postfix <http://www.postfix.org>. It is the MTA that determines where and how mail is stored - Dovecot must then be configured to retrieve the mail accordingly." (Entered by user "amfes".) This contains a significant proportion of poppycock. Dovecot includes extensive functionality for the storage (as in the action of storing) of e-mail as well as retrieval, in the shape of the LDA. Using Dovecot's LDA is /required/ in the case of Dovecot-specific mail storage formats (sdbox, mdbox). With mbox, use of the Dovecot LDA is advisable since it will guarantee a locking strategy which is compatible with Dovecot's mail retrieval functionality. And in any case, use of the Dovecot LDA has merit in that it should guarantee line-up between the mailstore configurations used for storage and retrieval. It is NOT the MTA that determines where and how mail is stored. It is the PERSON who configures the system who decides this, and codifies that configuration into whatever systems carry out local delivery and retrieval. It IS true that use of Dovecot's LDA is optional, but to say that it is a "possible exception" is misleading. People /should/ use the Dovecot LDA if they are using Dovecot IMAP/POP, and the /option/ is to use the MTA's local delivery system /if/ it is so indicated on a particular system. Quote: "Again, it bears repeating, Dovecot /is not responsible for mail delivery or storage/. Any questions on these issues involve your MTA and MDA. Get those working first." (Entered by user "DanielMiller".) Again, contains quite a lot of misleading nonsense. "Mail delivery" includes the hand-off of the message by the MTA to the LDA, and the storage of the message by the LDA. The LDA should probably be Dovecot, so really Dovecot /is/ partially responsible for mail delivery. "Storage" involves that placing of message into the message store. This should be done by Dovecot, so Dovecot is responsible for this. Bill

2 2

[Dovecot] dsync inbox conversion problem (mbox -> mdbox)
by Sergiy Kyrylkov 22 Mar '11

22 Mar '11

Hi, We are trying to convert all mbox mail on our systems to mdbox using dsync, in order to be able to use email sub-folders in Thunderbird. Everything works fine for non-inbox folders, however the inbox folders are not getting converted. We used: *dsync -v convert mbox:~/mail:INBOX=/var/mail/%u* *dovecot --version* 2.0.beta6 (3156315704ef) (shipping with RHEL6/SL6) *dovecot -n* # 2.0.beta6 (3156315704ef): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.18.2.el6.i686 i686 Scientific Linux release 6.0 (Carbon) mail_location = mdbox:~/mdbox mbox_write_locks = fcntl passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } Sergiy

3 3

[Dovecot] Request - please uncomment !include_try /etc/dovecot/local.conf in example config
by Ng Oon-Ee 22 Mar '11

22 Mar '11

Hi, could I request that the example config in doc/dovecot/example-config/dovecot.conf be slightly altered to uncomment the last line? The point of include_try is that it only includes if such a file exists, and doesn't break anything if the file does not exist. My distro (Arch) has a policy not to apply non-essential patches, rather asking users to forward requests upstream, hence this email. It allows users to simply keep a local.conf with all their settings and not have to worry that it would not be used when the dovecot package gets upgraded (which mostly means /etc/dovecot/dovecot.conf gets replaced, depending on packaging standards). Thanks.

2 2

[Dovecot] Bug in xi.rename-it.nl/dovecot-2.0.11/debian/watch
by Mark Alan 21 Mar '11

21 Mar '11

If I am not wrong, debian/watch should be: --- old/dovecot-2.0.11/debian/watch 2011-03-07 17:24:51.000000000 +0000 +++ new/dovecot-2.0.11/debian/watch 2010-12-03 10:04:00.000000000 +0000 @@ -1,4 +1,4 @@ # watch control file for uscan version=3 # Site Version Script -http://dovecot.org/releases/1.2/dovecot-(.*\.[0-9]+)\.tar\.gz debian uupdate +http://dovecot.org/releases/2.0/dovecot-(.*\.[0-9]+)\.tar\.gz debian uupdate M.

1 0

[Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by Lorens Kockum 21 Mar '11

21 Mar '11

Hi, I have two load-balanced dovecot servers using a single NFS mount. The version is 1.2.11. I chose this so that if one server goes down the other will take up the load, and if my load is too much for one server I just have to add more identical servers. It works, but I wish to move to SAN storage because the NFS server is exhibiting irregular performance. (I spent a lot of time with tcpdump to check that it wasn't NFS locking problems). Performance is very important to me, not in the sense of many users but in the sense of quick response time, since the main use is as a webmail backend. That means that instead of load-balancing connections between servers I will have to partition users between servers (all on one to begin with) and direct users to the corresponding server. I expected to use perdition, but when reading up on that I found imapproxy, which could be interesting for performance reasons, and also that dovecot has an included proxy, and that its performance is better than perdition. However on http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 server with proxy feature" is noted as "This model is still a bit unfinished in current code." Is this still true? There's also a general note that "This page was written quite a long time ago and may not match reality anymore" . . .

3 2

[Dovecot] questions/problems virtual plugin pop3 leave copies on the server for x days then delete
by Robert Schetterer 21 Mar '11

21 Mar '11

Hi Timo, i allready asked about this , and did some fixes , but it isnt working yet ,as far i have a setup like namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } pop3_enable_last = yes pop3_reuse_xuidl = no pop3_uidl_format = %g pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_max_userip_connections = 100 mail_plugins = expire virtual quota mail_log fts fts_squat notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh RealMails/ RealMails/* -RealMails/Trash -RealMails/Trash/* -RealMails/Sent -RealMails/Sent/* -RealMails/Templates -RealMails/Templates/* -RealMails/Drafts -RealMails/Drafts/* -RealMails/Archives -RealMails/Archives/* unseen normally this works as expected some users want to use leave copies messages on the server for x days then delete via pop3 i tested this with thunderbird and looked into the maildir, it seems that the mails stay in "new" folder of the maildir after i downloaded via pop3 ( i am not sure is this expected ? , i would thought they get to cur ) thunderbird does not download this mails again ( good ), but it doesnt delete them from maildir new ever( bad ) , so the whole leave copy and delete after x days function pop3 is not working i am not quite sure if there is relation to virtual namespaces ( which i like to use in future too ) , but have to renable this feature working any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 14

[Dovecot] Virtual and system users with public mailboxes
by kshaw＠kendallshaw.com 21 Mar '11

21 Mar '11

Hi, I am running dovecot 1.2.9 and postfix, and I am trying to setup a public mailbox. My thought is that there would be one system user with a sieve script to deliver messages to the public mailbox. And, I would like to give virtual users access to the mailbox. On this list, I read how you can have both system and virtual users by using passdb and static userdbs. But, I don't understand how this can be combined with namespaces, where I specify the location. For all virtual users I had: mail_location = maildir:/var/somewhere/%u/maildir/ I think I need that for virtual users and: maildir:~/Maildir for the system users. namespace private { location = ? # how do I have the location be different for system and virtual users? } namespace public { location = ? # ditto (for the index)? } Kendall

3 3

[Dovecot] maildir location
by upen 21 Mar '11

21 Mar '11

Hello, I am trying to use dovecot (v. 2.0.11) and postfix (v. 2.7.3) together. The email server is an ldap client and user's home directories on NFS server are mounted using autofs. As I understand, Maildir performance is better than mbox type, so I'd like to use Maildir instead of mbox. However, when I checked conf.d/10-mail.conf file, there is mail_location = maildir:~/.maildir already configured in it which means user's email will reside in their home directories on the NFS server rather than being on Email server's local storage where plenty of space is available. I anticipate due to NFS there will again be a performance hit . Question : Can I change mail_location for maildir to be somewhere other than ~/.maildir. ( like /var/mail/%u/Maildir, where /var/mail is local storage). There are about 200 ldap users who will be using this email server through squirrel-mail or access them through email clients. By the way, I am confused about one setting in postfix : home_mailbox = .maildir/ in main.cf . Does this really play any role? If so, which parameter should be changed and to what and with what permissions to the new directory. Hope I was able to explain, if not please let me know for more details.. Thanks, U

4 9

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1

[Dovecot] Strange Dovecot Issue
by Scott Hughes 20 Mar '11

20 Mar '11

Greetings, I am trying to copy email from one server to another server using Thunderbird. The old server is a closed source ModusMail server and the new server is a Qmail server running Dovecot 1.2.3 (yes, I realize this is behind the times a bit). My issue is this: Whenever Thunderbird gets to a message that has been forwarded (has the forward flag set) an error is generated from the new server (dovecot) that it does not know how to handle the forward flag. Is this a known issue or is it simply that my version of Dovecot is behind? Thanks, Scott

1 0

[Dovecot] Question about "extracting" unwanted e-mails from mdbox
by Maria Arrea 20 Mar '11

20 Mar '11

Imagine the following scenario Last Saturday, 3:00 AM a big phishing attack hits our e-mail inboxes. Spamassassin does not mark them as spam, and our 50.000+ users have in their mdbox a very credible phishing attack. What doveadm-fu could I use to delete (or move to spam) that e-mail from each user INBOX (let´s imagine the Subject or a Header is known)? I repeat: already delivered e-mail, how to filter/prune it. Regards Maria

3 2

[Dovecot] remove old files
by Stéphane Guedon 20 Mar '11

20 Mar '11

Hello I use the dovecot 2.0.10 server and wonder how to clean up correctly the old mails (especially for spam folder). I use maildir storage, and wonder if deleting files with an rm and file command combinaison would be good or would corrupt indexes files/whatever. for exemple, the spam folder is in ~/.mail/.INBOX.spam/ Thus, can I "cd ~/.mail/.INBOX.spam/ && rm 'files older than 2 months' " or something else ? Thanks. -- Stéphane Guedon page web : http://www.22decembre.eu/ carte de visite : http://www.22decembre.eu/downloads/Stephane-Guedon.vcf clé publique gpg : http://www.22decembre.eu/downloads/Stephane-Guedon.asc

2 1

Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by jkrejci＠usinternet.com 20 Mar '11

20 Mar '11

We use proxy_maybe across several servers handling over 10,000 accounts with no problems. ------Original Message------ From: Dennis Guhl Sender: dovecot-bounces+jkrejci=usinternet.com(a)dovecot.org To: dovecot(a)dovecot.org ReplyTo: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or? Sent: Mar 19, 2011 4:32 PM On Sat, Mar 19, 2011 at 09:50:15PM +0100, Lorens Kockum wrote: > Hi, > > I have two load-balanced dovecot servers using a single NFS > mount. The version is 1.2.11. I chose this so that if one server [..] > reasons, and also that dovecot has an included proxy, and > that its performance is better than perdition. However on > http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 > server with proxy feature" is noted as "This model is still a > bit unfinished in current code." > > Is this still true? There's also a general note that "This page > was written quite a long time ago and may not match reality > anymore" . . . I use 1.2.15 from Debian Lennys backports in a proxy configuration for a medium three digit number of users without any problems. Dennis Sent via BlackBerry from T-Mobile

1 0

[Dovecot] Testing sieve
by Jim Knuth 20 Mar '11

20 Mar '11

Hi, I`ve now compiled sieve and have a globalsieverc in /etc/dovecot/sieve/globalsieverc. How can I testing the rules? 1. require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto :create "Spam"; stop; } The second rule not working, the first rule I do not know. 2. require "fileinto"; if header :contains "subject" "Stress" { fileinto "Ablage"; stop; } main.cf entry is mailbox_command = /usr/lib/dovecot/dovecot-lda -a "$RECIPIENT" Thanks in advance -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Ist das Leben nicht hundert Mal zu kurz, sich in ihm - zu langweilen? [Nietzsche]

1 0

[Dovecot] Sieve or not?
by Jim Knuth 19 Mar '11

19 Mar '11

Hello, I use V 2.11 and my question is: Is one present Sieve with this version or MUST this specially compiles? # 2.0.11 (31d8d43fa6b5): /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4 i686 Debian wheezy/sid -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Der Fanatismus ist die einzige 'Willensstärke', zu der auch die Schwachen gebracht werden können. [Nietzsche]

2 3

[Dovecot] Dovecot mirror down?
by Jim Knuth 18 Mar '11

18 Mar '11

Hello, http://xi.rename-it.nl/debian/ down? Does somebody know why? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Lache nie über die Dummheit der anderen. Sie kann deine Chance sein. [Churchill]

3 7

Re: [Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 18 Mar '11

18 Mar '11

Hello, > > Big surprise: Something bad must have happened after the messages were > > deleted from Trash; now all messages are zero days old. > > Are you using maildir? Did you run with those patches + mail_debug=yes? Today, the daily cronjob expired some messages. I have attached the output of the job. It seems that the error occurs not when expunging, but when deleting the first message after expunging. Before deleting a message, "doveadm search" showed me messages that were between zero and four days old, but directly after deleting a message, all messages were zero days old. Here is my log entry from when I deleted that message: Mar 18 09:50:28 joseph dovecot: imap(christoph): Debug: expire: Saving first message to Trash, updating timestamp to 1300438228 Regards Christoph

1 0

[Dovecot] Problem with recompiling sieve scripts after migrating to Dovecot 2.0 from 1.2
by Andrés Yacopino 18 Mar '11

18 Mar '11

I saw this in log file of dovecot: Error: sieve: binary save: failed to create temporary file: open(/usr/local/etc/sieve/after/after.dovecot.svbin.acamail.acasalud.com.ar.13528.) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +w perm: /usr/local/etc/sieve/after, euid is not dir owner) acamail dovecot: lda(xxxxx@xxxxxx): Error: sieve: the lda sieve plugin does not have permission to save global sieve script binaries; global sieve scripts like /usr/local/etc/sieve/after/after.dovecot.sieve need to be pre-compiled using the sievec tool So i tried to recompile script using sievec like: sievec /usr/lcaol/etc/sieve/after/after.dovecot.sieve but i get: sievec(root): Error: user root: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/root/Maildir) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +x perm: /root, euid is not dir owner) sievec(root): Fatal: Invalid user settings. Refer to server log for more information. What i must do to resolve this? My dovecot configuration is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux xxxxxx auth_master_user_separator = * auth_username_format = %Lu disable_plaintext_auth = no first_valid_gid = 40 first_valid_uid = 40 mail_gid = vmail mail_location = maildir:~/Maildir mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/passwd.masterusers driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } plugin/quota = maildir plugin/quota_rule = *:storage=614400 plugin/quota_rule2 = Trash:storage=+61440 plugin/sieve_after = /usr/local/etc/sieve/after/after.dovecot.sieve plugin/sieve_before = /usr/local/etc/sieve/before/spam.dovecot.sieve protocols = imap pop3 sieve service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_key = </usr/local/etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-master lda_mailbox_autocreate = yes mail_plugins = quota sieve postmaster_address = postmaster@xxxxxx sendmail_path = /usr/lib/sendmail Thanks a lot, -- Andrés Fernando Yacopino

2 1

Re: [Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

Forget it. I must have been crosseyed. Someone had put the log file in a non-standard place /home/vmail/dovecot-deliver.log. It told all. A plugin cmusieve was not found, possibly depreciated? I learned how to make the deliver command line work. ;) Sorry, David Koski dkoski(a)sutinen.com > Additional information: > > I created a script to get the return code from deliver: > > 1 #!/bin/bash > 2 > 3 cat "cur/1300037582.P7332Q0M221160.brusco-mail:2,S" | > /usr/lib/dovecot/deliver -f dkoski(a)somedomain.com -d > dkoski(a)domainhidden.com 4 > 5 case $? in > 6 0) echo "0" > 7 ;; > 8 64) echo "64" > 9 ;; > 10 67) echo "67" > 11 ;; > 12 78) echo "78" > 13 ;; > 14 77) echo "77" > 15 ;; > 16 75) echo "75" > 17 ;; > 18 *) echo "unknown" > 19 esac > 20 > > The file it is cat'ing is a valid email in an Maildir/cur file. It returns > 75 (EX_TEMP_FAIL) every time, even run as root. The logs reveal: > > /var/log/dovecot/lda-deliver: > > 2011-03-17 23:35:39 deliver(dkoski(a)somedomain2.com): Info: Loading modules > from directory: /usr/lib/dovecot/modules/lda > > /var/log/dovecot/deliver.info: > (nothing) > > /var/log/dovecot/deliver.err: > (nothing) > > I tried the script on another machine with Dovecot 1.0.15-2.3+lenny1 with > success if I run as root. > > Regards, > David Koski > dkoski(a)sutinen.com > > > This really has me stumped and desperate. I upgraded Debian from 5... > > <snip>

1 0

[Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

This really has me stumped and desperate. I upgraded Debian from 5 to 6 (squeeze) and now Dovecot LDA fails. I have checked permissions and the usual. Postfix SMTP, Dovecot POP3 and Dovecot IMAP work. Having to upgrade MySQL from 5.0 to 5.1 made me question that. Logging is of little help. I have turned on logging for LDA to a separate file. When I try to run the deliver command it returns nothing and appears to do nothing: ~$ cat /etc/hosts | /usr/lib/dovecot/deliver -f root@localhost -d dkoski(a)[domainhidden].com $ ..but then I don't know what to expect. The log files are owned by dovecot. I tried chmod'ing them to 777 in desperation. This was working before the upgrade to 1.2.15-4 from 1.0.15-2.3+lenny1. Postfix reports this stuff: Mar 17 22:37:38 host-mail postfix/smtpd[22160]: connect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/smtpd[22160]: 9D80C12AF610: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/cleanup[22163]: 9D80C12AF610: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:39 host-mail postfix/qmgr[21877]: 9D80C12AF610: from=<dkoski(a)[another-domainhidden].com>, size=1257, nrcpt=1 (queue active) Mar 17 22:37:39 host-mail postfix/smtpd[22160]: disconnect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: connect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: 480D912AF612: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/cleanup[22163]: 480D912AF612: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 480D912AF612: from=<dkoski(a)[another-domainhidden].com>, size=1873, nrcpt=1 (queue active) Mar 17 22:37:42 host-mail postfix/smtpd[22168]: disconnect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/pipe[22169]: 480D912AF612: to=<dkoski(a)[domainhidden].com>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure) Mar 17 22:37:42 host-mail postfix/smtp[22164]: 9D80C12AF610: to=<dkoski(a)[domainhidden].com>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.84/0.01/0/2.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=11197-13, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 480D912AF612) Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 9D80C12AF610: removed And /var/log/dovecot/deliver.info: 2011-03-17 22:43:43 auth(default): Info: new auth connection: pid=22232 2011-03-17 22:43:59 auth-worker(default): Info: sql(dkoski(a)[domainhidden].com,127.0.0.1): query: SELECT email as user, password FROM view_users WHERE email='dkoski(a)[domainhidden].com'; 2011-03-17 22:43:59 auth(default): Info: client out: OK 1 user=dkoski(a)[domainhidden].com 2011-03-17 22:43:59 auth(default): Info: master in: REQUEST 73 22061 1 2011-03-17 22:43:59 auth(default): Info: master out: USER 73 dkoski(a)[domainhidden].com uid=5000 gid=5000 home=/home/vmail/[domainhidden].com/dkoski 2011-03-17 22:44:00 auth(default): Info: new auth connection: pid=22234 I tried reinstalling the package dovecot-common. I downloaded it on another machine and compared the md5sum. # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 delay_warning_time = 1h inet_interfaces = all mailbox_size_limit = 0 mydestination = backup.host.localnet, backup.localnet, localhost.localnet, localhost myhostname = mail.[domainhidden].com mynetworks = 192.168.1.0/24, 127.0.0.1 myorigin = /etc/mailname recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${queue_directory}/cache/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_reverse_client_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dnsbl.njabl.org, reject_rbl_client combined.njabl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client spamguard.leadmon.net, reject_rbl_client korea.services.net, reject_rbl_client spamsources.fabel.dk, reject_rhsbl_sender rhsbl.ahbl.org smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${queue_directory}/cache/smtpd_scache smtpd_use_tls = yes virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,mysql:/etc/postfix/mysql-email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 From master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0 ext3 log_path: /var/log/dovecot/deliver.err info_log_path: /var/log/dovecot/deliver.info log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /var/log/dovecot/lda-deliver.err info_log_path: /var/log/dovecot/lda-deliver.info log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: info(a)[another-domainhidden].com mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail Regards, David Koski david(a)kosmosisland.com

2 2

Re: [Dovecot] segmentation fault with doveadm search
by Timo Sirainen 17 Mar '11

17 Mar '11

On Thu, 2011-03-17 at 17:54 +0100, Nick Rosier wrote: > Hope this is better: > > #1 0x000000080231ab21 in fts_build_deinit (_ctx=0x801ea2640) at > fts-storage.c:551 Yes, much better. Easy fix: http://hg.dovecot.org/dovecot-2.0/rev/3d48418b0501

2 1

[Dovecot] Unconfigured dictionary name 'quotadict'
by Simone Caruso 17 Mar '11

17 Mar '11

Currently i'm migrating an existing dovecot 1.2 server to dovecot 2.0.11, once configured the 2.0 server works, auth works... but i get these messages in mail.log: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:14 penny dovecot: imap(mailbox(a)example.com): Error: write(/var/run/dovecot/dict) failed: Broken pipe Mar 17 16:46:38 penny dovecot: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:38 penny dovecot: imap(mailbox(a)example.com): Error: read(/var/run/dovecot/dict) failed: Remote disconnected My quota configuration is the following (as wiki says): service dict { unix_listener dict { mode = 0600 user = vmail } } plugin { quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+55M } dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf } dovect-dict-sql.conf: connect = host=localhost dbname=ketna user=***** password=***** map { pattern = priv/quota/storage table = imap_quota username_field = email value_field = current } map { pattern = priv/quota/messages table = imap_quota username_field = email value_field = messages } Someone can tell me where's my fault? (Attached my "dovecot -n" output.) Thanks! -- Simone Caruso

2 2

[Dovecot] Migrating to mdbox
by Chris Wilson 17 Mar '11

17 Mar '11

Hi all, I think it would be a good idea for me to move from mbox to mdbox, as I have 57,000 messages in my inbox, and clients hang for a minute whenever they request a CHECK, or Dovecot feels the need to run one itself. Looking at past threads: http://www.mail-archive.com/dovecot@dovecot.org/msg35212.html http://comments.gmane.org/gmane.mail.imap.dovecot/53936 it seems that the safest way is to run: sudo dsync -v -u chris backup mdbox:/home/chris/mdbox eliminate any errors that it reports, test the new mdbox access temporarily, and then switch my config in Dovecot. Ideally I'd like to do that just for me, without disrupting other users of this server (that I help to admin). This error occurs every time I run dsync, and I understand it, so I've elided it: dsync(chris): Error: open() failed with mbox file /home/chris/mail/admin: Permission denied dsync(chris): Error: Failed to sync mailbox admin: Internal error occurred. Refer to server log for more information. [2011-03-09 15:50:10] dsync(chris): Info: spam: highest_modseq changed: 2 != 3 I don't understand the following errors from dsync (2.0.9): chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Error: Next message unexpectedly corrupted in mbox file /home/chris/mail/spam at 404513741 dsync(chris): Warning: Transaction log file /home/chris/mail/.imap/spam/dovecot.index.log was locked for 252 seconds dsync(chris): Info: spam: only in source dsync(chris): Info: temp: only in source dsync(chris): Info: Sent: only in source dsync(chris): Info: addressbook: only in source dsync(chris): Info: sent-mail-sep-2008: only in source dsync(chris): Info: sent-mail-oct-2010: only in source dsync(chris): Info: INBOX.Sent: only in source dsync(chris): Info: sent-mail: only in source dsync(chris): Info: INBOX.Trash: only in source chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: only in source dsync(chris): Info: spam: only in dest dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam Note: how is it possible for the same folder to be "only in source" and "only in dest"? chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 dsync(chris): Info: sent-mail: uidnext changed: 378 != 375 chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 Now the latter is all I get whenever I run dsync. Is it broken? Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

3 12

[Dovecot] SSL Compatibility? SNI vs SAN (Subject Alternative Names) and multiple domains
by Thomas Harold 17 Mar '11

17 Mar '11

Getting ready to redo our mail server setup and I'm trying to wrap my head around the ins and outs and pratfalls involved in SSL, multiple domains, and Dovecot. I've taken a look at: http://wiki2.dovecot.org/SSL/DovecotConfiguration My basic understanding at this point is that: - With SSL for IMAP/POP3, it is limited to one certificate per IP address, because the SSL process starts as soon as the client opens the socket to the IP address. In order to support multiple domains / server names, you have to rely on SAN (Subject Alternative Names) in the server's SSL certificate. - If I use STARTTLS for IMAP/POP3 and Dovecot 2.x, then the SNI process will allow the client to specify that they want to talk to mail server XYZ and Dovecot will hand the correct certificate to the client. However, a lot of devices don't support SNI yet so this is fraught with peril and incompatibilities. So it seems like if I have fewer IP addresses then mail server names, I should stick with a single SSL cert and use SANs. (Wildcard certs are not an option due to the top level domain being different.) How big of an issue is a cert with half a dozen or a dozen SANs attached? Do most mail clients handle that sort of certificate properly in order to access their mailboxes? Reference links: http://www.digicert.com/subject-alternative-name-compatibility.htm

7 8

[Dovecot] problems with public (sub)folders
by frederik.schmid＠gmx.net 17 Mar '11

17 Mar '11

Hi, i am trying to share a maildir++ mailbox to other users but i can only subscribe to the root directory. The subfolders of the public mailbox do not appear in the exported list. Does anyone has an idea how i can share the subfolders too without creating symlinks for every single folder? Best, Frederik >>>>> ls -lA /var/mail/public .user01 -> /var/mail/user01/Maildir >>>>> ls -A /var/mail/user01/Maildir/ (shortened) .Drafts,.Templates,.Sent,.Trash,.Spam new,cur,tmp dovecot.* .subfolder .subfolder.test1 .subfolder.test1.xyz .subfolder.test2 .subfolder.test3 >>>>> doveconf -n # 2.0.11 (2cb0fb910441): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 hostname = xxx last_valid_gid = 50000 last_valid_uid = 50000 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/autocreate = Trash plugin/autocreate2 = Spam plugin/autocreate3 = Sent plugin/autocreate4 = Drafts plugin/autocreate5 = Templates plugin/autocreate6 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Spam plugin/autosubscribe3 = Sent plugin/autosubscribe4 = Drafts plugin/autosubscribe5 = Templates plugin/autosubscribe6 = Spam plugin/sieve = ~/.main.sieve plugin/sieve_before = /etc/dovecot/sieve/move-spam.sieve plugin/sieve_dir = ~/sieve postmaster_address = postmaster@xxx protocols = imap lmtp sieve service anvil { client_limit = 2048 } service imap-login { client_limit = 1024 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1024 process_min_avail = 16 } service lmtp { inet_listener lmtp { address = * port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/dovecot/cert/xxx ssl_key = </etc/dovecot/cert/xxx userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 100 mail_plugins = " autocreate" } -- GMX DSL Doppel-Flat ab 19,99 Euro/mtl.! Jetzt mit gratis Handy-Flat! http://portal.gmx.net/de/go/dsl

2 1

[Dovecot] Dove cot+Kerberos
by Rostislav Matyusha 17 Mar '11

17 Mar '11

Hi All. I have a problem with authorization users AD via kerberos in Dovecot&Postfix. Windows SRV 2008 Standart - AD mail server: Gentoo + cyrus-sasl + postfix + dovecot with support ldap&kerberos. I am created a 4 keytabs on Windows box. C:\Users\Admin>ktpass -princ host/srv-mail.cn.energy(a)CN.ENERGY -mapuser ldapmail(a)CN.ENERGY -pass "superpasswd" -crypto RC4-HMAC-NT -ptype KRB5_NT_PRINCIPAL -out c:\mail.keytab etc... for all imap/srv-mail.cn.energy pop/srv-mail.cn.energy smtp/srv-mail.cn.energy host/srv-mail.cn.energy On Linux server: ktutils ktutils: rkt /root/Keytab/imap.keytab ktutils: rkt /root/Keytab/smtp.keytab ktutils: rkt /root/Keytab/pop.keytab ktutils: rkt /root/Keytab/host.keytab ktutils: wrt /etc/krb5.keytab ktutils: q kinit -V -k -t /etc/krb5.keytab host/srv-mail.cn.energy(a)CN.ENERGY Authenticated to Kerberos v5 KRB5_KTNAME=/etc/krb5.keytab ; export KRB5_KTNAME TESTING: imtest srv-mail ERROR: Mar 10 08:27:23 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:27:23 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f Why username "host/srv-mail.cn.energy(a)CN.ENERGY" ??? imtest -m GSSAPI -u ross -a ross -r cn.energy srv-mail ERROR: Mar 10 08:31:55 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:31:55 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f BUT if i create kinit ross(a)CN.ENERGY imtest srv-mail ERROR: srv-mail dovecot: auth(default): gssapi(ross(a)CN.ENERGY,10.0.0.5): Invalid response length So i am confusion, please help me. many thanks -- Best Regards Ross Remote Server Administration. e-mail: ross.sysadm(a)gmail.com skype: ross.sysadm icq: 317410068 Best Offers for a full range of server management services and effective on time solutions.

2 1

[Dovecot] dict crashes with multiple map definitions
by Birger Brunswiek 17 Mar '11

17 Mar '11

Hi, I get a crash in dict if I use multiple map sections. Each one of them works fine by their own. I managed to convince dovecot to create dump files to debug this, but I can't figure out how to do the same for dict. How can I do this? Anyway, perhaps someone already know's what's wrong by looking at what I do in the sql dict configuration. Mar 9 02:27:52 xxx dovecot: dict: pgsql: Connected to dovecot Mar 9 02:27:52 xxx dovecot: dict: Panic: file driver-pgsql.c: line 529 (do_query): assertion failed: (db->sync_result == NULL) Mar 9 02:27:52 xxx dovecot: dict: Raw backtrace: dict() [0x418a9a] -> dict() [0x418b03] -> dict() [0x418206] -> dict() [0x414124] -> dict() [0x414b07] -> dict() [0x40e0dc] -> dict() [0x40e20a] -> dict() [0x40b77f] -> dict() [0x40b8b9] -> dict() [0x40ba57] -> dict(io_loop_handler_run+0xbd) [0x41d87d] -> dict(io_loop_run+0x18) [0x41ccf8] -> dict(main+0x114) [0x40bda4] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f9a10cdbc4d] -> dict() [0x40ad69] Mar 9 02:27:52 xxx dovecot: IMAP(xxx): read(/var/run/dovecot/dict-server) failed: Remote disconnected Mar 9 02:27:52 xxx dovecot: IMAP(xxx): acl: dict iteration failed, can't update dict Mar 9 02:27:52 xxx dovecot: dovecot: child 11180 (dict) killed with signal 6 (core not dumped) # dovecot --version 1.2.15 # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen: [::] ssl_cert_file: /etc/ssl/certs/foo.bar.pem ssl_key_file: /etc/ssl/private/foo.bar.key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u/mailbox mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%n/ location: maildir:/var/mail/%%u/mailbox:INDEX=/var/mail/%u/mailbox/shared/%%u list: children lda: postmaster_address: postmaster(a)foo.bar mail_plugins: sieve acl auth default: mechanisms: plain gssapi passdb: driver: pam args: blocking=yes dovecot userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/%u allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: acl: vfile acl_shared_dict: proxy::acl sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: acl: pgsql:/etc/dovecot/dovecot-dict-sql.conf # cat /etc/dovecot/dovecot-dict-sql.conf connect = host=foo.bar dbname=dovecot user=dovecot password=xxx map { pattern = shared/shared-boxes/user/$owner/$user table = user_shares value_field = dummy fields { owner = $owner usr = $user } } map { pattern = shared/shared-boxes/anyone/$owner table = global_shares value_field = dummy fields { owner = $owner } } map { pattern = shared/shared-boxes/group/$group/$owner table = group_shares value_field = dummy fields { grp = $group owner = $owner } }

2 1

[Dovecot] dovecot 1.2 quota with local users
by iti＠promax.media.pl 17 Mar '11

17 Mar '11

Hello, I got problem with setting quota from mysql for local users. In database are only information with quota. Password are store in passwd/shadow. My database have only simple info like in wiki description. Table created with: CREATE TABLE quota ( username varchar(100) not null, bytes bigint not null default 0, messages integer not null default 0, primary key (username) ); In dovecot.conf like in description is: dict { quotadict = mysql:/etc/dovecot-dict-sql.conf } plugin { # v1.2 + SQL: quota = dict:user::proxy::quotadict # v1.2 + file: quota = dict:user::file:%h/Maildir/dovecot-quota quota_rule = *:storage=10M:messages=1000 } File dovecot-dict-sql.conf has: # v1.2+ only: connect = host=localhost dbname=mails user=sqluser password=sqlpass map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } With corrected values about databasename, user and password. Where should to add information about sql query when autorization is not via myqsl (only shadow/password). There are in description info about additional file with user_query: dovecot-mysql.conf. Can anybody know how it should it look like and where to add it in config?

2 3

[Dovecot] inetd config - dovecot doesn't exits
by kjonca＠o2.pl 17 Mar '11

17 Mar '11

Is there any option for dovecot to exit when is unneded? I mostly use dovecot via shell process (ie. something like /usr/sbin/dovecot --exec-mail imap) But sometimes I want to use it remotely via tcp and I run dovecot via inetd. --8<---------------cut here---------------start------------->8--- localhost:imap stream tcp nowait root /usr/sbin/tcpd /usr/lib/dovecot/imap-login --8<---------------cut here---------------end--------------->8--- in inetd.conf works good, but dovecot stays, even if all clients ended their connections. How can I make dovecot to exit after last client disconnects? KJ -- Http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… Wiesz, tryb tekstowy w Linuksie ma się tak do DOSu jak F-117A do paralotni. (c) Dawid Kuroczko

2 1

[Dovecot] Attachment file size error in SIS
by Daniel L. Miller 17 Mar '11

17 Mar '11

I've got an attachment that triggers a "smaller than expected" error. It was a pdf I received some time ago. I copied the file from the dovecot storage, renamed it to something close to the original name (I don't remember what that was), then created a new mail with this as an attachment and saved it to the server. This created a new file, identical file size to the other - but continues to have the "smaller than expected" error. -- Daniel

2 1

[Dovecot] search for attachment hash
by Daniel L. Miller 17 Mar '11

17 Mar '11

How can I determine what message(s) are linked to a given attachment hash? -- Daniel

2 1

[Dovecot] doveadm expunge info message in std.error
by Kui Zhang 17 Mar '11

17 Mar '11

Hello This command doveadm expunge -u "user@domain" mailbox ".namespace/*" savedbefore 7d writes these messages to std.error doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5932, msgid=<E1Puxwf-0001fD-Si@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5933, msgid=<E1Puy0N-0001fI-No@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5934, msgid=<E1Puy0Q-0001fM-I0@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5935, msgid=<E1Pv6CY-0001ge-H9@hostname>, size=1843 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5936, msgid=<E1Pv6Hm-0001gi-7R@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5937, msgid=<E1PvMRn-0001lm-A6@hostname>, size=1854 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5938, msgid=<E1PvZLN-0001p4-EF@hostname>, size=1832 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5939, msgid=<E1PvZN6-0001p8-IA@hostname>, size=1840 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5940, msgid=<E1PwMvo-0001xs-8w@hostname>, size=1835 Can we write these messages(informational) to std.out It would help reduce cron mails. Thanks KuiZ

3 3

[Dovecot] segmentation fault with doveadm search
by Nick Rosier 17 Mar '11

17 Mar '11

Configuration: Dovecot 2.0.11 on FreeBSD 8.2 When I run a search to generate the FTS search indexes I get following error: # doveadm search -A body dead_beef [1] 34789 segmentation fault doveadm search -A body dead_beef How can I (help) troubleshoot this? Rgds, N.

2 3

[Dovecot] Configuration of LMTP Reject Code
by Petter Urkedal 17 Mar '11

17 Mar '11

Is it possible to change the reject codes from the Dovecot LMTP agent? In particular I would like to change the "550 5.1.1 <...> User doesn't exist." to a temporary failure, since we already validate email addresses on the mail front-end, and such errors are most likely due to a temporary glitch in the user database lookup. We use Postfix on the front-end, which is very configurable in this respect. I don't see a way to override the error code from LMTP, though, but suggestions are welcome.

4 10

[Dovecot] Using dovecot with wordpress/phpass passwords?
by Joan 17 Mar '11

17 Mar '11

Good afternoon, I am trying to setup dovecot to authenticate using the userdata from wordpress. It's being a bit mor difficult than I thought. This is the relevant part of the dovecot-sql.conf default_pass_scheme = CRYPT password_query = SELECT user_pass AS password FROM wp_users WHERE user_email='%u'; user_query = SELECT 501 as uid, 501 as gid,'maildir:storage=51200' as quota FROM wp_users WHERE user_email = '%u' I can see that the query is being procecessed according to the logs. Wordpress and others are using phpass to authenticate (http://www.openwall.com/phpass/) it is basically a salted md5 hash. Basically, after the process, a hash like this is obtained. $P$BiWISc3IsqRHxeEjq4VJP1Vi8gy4mg1 (for test123 password) I would like to know if dovecot would be able to read this, otherwise I could still make a custom checkpassword function but that would be non-optimal. Could someone guide me on this? If you need more details just ask. Thanks a lot, joan

2 2

[Dovecot] Problems with pam+ldap + quota
by Antonio Perez-Aranda 17 Mar '11

17 Mar '11

I think that I need to modify "/etc/ldap.conf" to remap some attribute with mailQuota from ldap, and then, try to catch this as arg. Someone has pam+ldap+quota ? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 8

[Dovecot] exim and /var/run/dovecot/auth-client permissions
by John Connett 17 Mar '11

17 Mar '11

I am attempting to configure a dovecot 2.0 + exim + fetchmail (demon) combination on openSUSE 11.4, initially with the standard dovecot package (2.0.9-3.4-x86_64) and now with the later server:mail build service package (2.0.11-1.1-x86_64). I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL but despite the changes in conf.d/10-master.conf the permissions on /var/run/dovecot/auth-client remain unchanged: $ ls -l /var/run/dovecot/auth-client Srw------- 1 root root 0 Mar 14 13:11 /var/run/dovecot/auth-client $ This is probably the cause of authentication failures from exim. I suspect it is something trivial but haven't yet been able to find the answer.

2 4

[Dovecot] warnings from 2.0.11
by Mike Abbott 17 Mar '11

17 Mar '11

During a stress test dovecot-2.0.11 logs many warnings: Mar 8 06:19:52 gromit dovecot[59204]: imap(pid 68864 user user15): Warning: /Volumes/Mail/user15/dovecot-uidlist: Duplicate file entry at line 183: 1299556557.M571530P31883.gromit.example.com,S=21175,W=21549 (uid 67 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 230: 1299535329.M679065P61136.gromit.example.com,S=11040,W=11247 (uid 17 -> 240) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 240: 1299535329.M902424P61136.gromit.example.com,S=12843,W=13075 (uid 30 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 266: 1299547358.M587728P69303.gromit.example.com,S=13637,W=13772 (uid 108 -> 276) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 275: 1299558462.M498819P35210.gromit.example.com,S=15495,W=15663 (uid 160 -> 285) Mar 8 06:20:11 gromit dovecot[59204]: imap(pid 68864 user user36): Warning: /Volumes/Mail/user36/dovecot-uidlist: Duplicate file entry at line 281: 1299535339.M353973P61136.gromit.example.com,S=4498,W=4581 (uid 360 -> 604) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 105: 1299547390.M813768P69393.gromit.example.com,S=4773,W=4861 (uid 22 -> 164) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 106: 1299570075.M267312P49194.gromit.example.com,S=8041,W=8181 (uid 115 -> 165) Mar 8 06:28:24 gromit dovecot[59204]: imap(pid 69295 user user274): Warning: /Volumes/Mail/user274/dovecot-uidlist: Duplicate file entry at line 2020: 1299548064.M880781P67832.gromit.example.com,S=4976,W=5076 (uid 247 -> 2500) Mar 8 06:29:23 gromit dovecot[59204]: imap(pid 68973 user user115): Warning: /Volumes/Mail/user115/dovecot-uidlist: Duplicate file entry at line 526: 1299537039.M676050P61136.gromit.example.com,S=2485,W=2534 (uid 8 -> 1082) Mar 8 06:31:37 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: /Volumes/Mail/user114/dovecot-uidlist: Duplicate file entry at line 667: 1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707 (uid 229 -> 780) - retrying by re-reading from beginning Mar 8 06:32:14 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: Maildir /Volumes/Mail/user114: Expunged message reappeared, giving a new UID (old uid=229, file=1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707:2,S) Mar 8 06:39:22 gromit dovecot[59204]: imap(pid 68911 user user105): Warning: Maildir /Volumes/Mail/user105: Synchronization took 155 seconds (0 new msgs, 0 flag change attempts, 585 expunge attempts) Is there anything I need to reconfigure to prevent these? Thanks.

2 11

[Dovecot] rkhunter alert dovecot using port 1984
by Mark Adams 16 Mar '11

16 Mar '11

Hi all, Debian Lenny, dovecot 1.0.15 My rkhunter script has picked up dovecot using port 1984 temporarily. When I run it now however, it is gone. Warning: Network TCP port 1984 is being used by /usr/lib/dovecot/imap. Possible rootkit: Fuckit Rootkit Use the 'lsof -i' or 'netstat -an' command to check this. Does dovecot use this port for any reason? anyone seen this before? Regards, Mark

3 4

[Dovecot] Dict spams in my Log-File
by Jan Phillip Greimann 16 Mar '11

16 Mar '11

Hi there, i use dovecot 2.0.9 with mysql as backend. I've also configured dict to mysql, but after some time dict spams in my log-file, i don't know why. Hope someone can help me with this. Greetings from Germany Jan P. Greimann ==== mail.log ==== [...] Mar 16 10:29:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:31:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:33:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:45 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:37:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:39:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:41:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:43:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:45:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:47:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:49:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:51:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:53:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) [...] ==== dovecot.conf ==== listen = * dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } !include conf.d/*.conf ==== conf.d/90-quota.conf ==== plugin { quota = dict:User quota::proxy::quota }

2 1

[Dovecot] Error: write(auth socket) failed: Broken pipe
by Andre Nathan 16 Mar '11

16 Mar '11

Hello >From time to time I'm seeing errors like this in my logs: Mar 16 10:45:55 box5 dovecot: lmtp(5438): Error: write(auth socket) failed: Broken pipe This causes delivery from postfix to fail until I restart dovecot. There doesn't seem to be any other messages in the logs related to this error. Has anyone ever seen this error? Thanks Andre

3 2

[Dovecot] 2.0.7 - missing SORT/THREAD
by Rick Romero 15 Mar '11

15 Mar '11

Obviously I did something wrong, but I don't have SORT and THREAD Capabilities built into my 2.0.7 server (OpenSolaris 5.11 snv_134 i86pc i386 i86xpv Solaris) What do I need to do? * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] VFEmail.net ready. 1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc auth_mechanisms = plain login digest-md5 cram-md5 auth_username_translation = %@ auth_verbose = yes base_dir = /opt/csw/dovecot/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 login_greeting = VFEmail.net ready. mail_fsync = never mail_plugins = " quota zlib" mail_privileged_group = mail namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } passdb { driver = vpopmail } plugin { quota = maildir } protocols = imap pop3 service anvil { client_limit = 2000 } service auth { unix_listener auth-master { mode = 0600 user = vpopmail } user = vpopmail } service imap-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service imap-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-imap.sh user = vpopmail } service imap { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap imap-postlogin } service pop-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh user = vpopmail } service pop3-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service pop3 { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 pop-postlogin } shutdown_clients = no ssl_cert = </etc/ssl/ssl.pem ssl_key = </etc/ssl/ssl.key userdb { driver = vpopmail } verbose_proctitle = yes protocol imap { auth_socket_path = /opt/csw/dovecot/auth-master imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = " quota zlib imap_zlib quota imap_quota" } protocol pop3 { auth_socket_path = /opt/csw/dovecot/auth-master mail_max_userip_connections = 25 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } End of Configure: Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow pam checkpassword vpopmail : -bsdauth -sia -ldap -sql userdbs ........ : static prefetch passwd passwd-file checkpassword vpopmail : -ldap -sql -nss SQL drivers .... : : -pgsql -mysql -sqlite

2 2

[Dovecot] Duplicate suppression
by Thiago Henrique 15 Mar '11

15 Mar '11

Hello, In a Dovecot 2.0.6 server I have an account x@domain and an alias y@domain -> x@domain. When I send an email to x@domain with carbon copy to y@domain, X receives two messages on mailbox. Dovecot2 has any feature of duplicate suppression ? Thanks, Thiago Henrique

4 3

[Dovecot] LDA, postfix and multiple virtual users : postfix is still the MDA
by Antoine Souques 14 Mar '11

14 Mar '11

Hi, I have some trouble to use dovecot as MDA. I followed the instructions in http://wiki.dovecot.org/LDA and http://wiki.dovecot.org/LDA/Postfix I have multiple virtual users, stored in a LDAP server, and it look like postfix is still delivering the mails directly to the maildirs. Dovecot version : 1.2.15 (using the 1:1.2.15-4 squeeze packets) postfix version : 2.7.1 (using the 2.7.1-1 squeeze packet) dovecot configuration (dovecot -n): # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 4 login_max_processes_count: 512 login_max_connections: 1024 mail_privileged_group: mail mail_location: maildir:/var/mail/%u mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_capability(default): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(imap): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(pop3): lda: postmaster_address: postmaster(a)test.ecp.fr hostname: squeeze.test.ecp.fr sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: mail postfix configuration (postconf -n) append_dot_mydomain = no biff = no bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix mail_spool_directory = /var/mail/ message_size_limit = 10240000 myhostname = squeeze.test.ecp.fr mynetworks = 138.195.32.0/23, 127.0.0.1 recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, reject smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_sender_restrictions = reject_unknown_sender_domain, permit virtual_alias_maps = ldap:ldapxforward,ldap:ldapforward,ldap:ldapvalias virtual_mailbox_domains = test.ecp.fr virtual_mailbox_maps = ldap:ldapcanonical virtual_transport = dovecot /etc/postfix/master.cf dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} Sample from the logs Mar 14 13:22:59 squeeze postfix/pickup[17376]: A93DE49A55: uid=0 from=<root> Mar 14 13:22:59 squeeze postfix/cleanup[17543]: A93DE49A55: message-id=<20110314122259.A93DE49A55(a)squeeze.test.ecp.fr> Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: from=<root(a)squeeze.test.ecp.fr>, size=381, nrcpt=1 (queue active) Mar 14 13:22:59 squeeze postfix/local[17547]: A93DE49A55: to=<etutest(a)squeeze.test.ecp.fr>, orig_to=<etudiant.test(a)test.ecp.fr>, relay=local, delay=0.07, delays=0.04/0.01/0/0.02, dsn=2.0.0, status=sent (delivered to maildir) Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: removed During the mail delivery, I doesn't have any log from dovecot, and i didn't have set the bit_suid/sudo, so the deliver process can't deliver the mail to the maildir. Have someone any idea about what i did wrong ? -- Antoine SOouques

4 5

[Dovecot] Problems with dovecot 2.0, sieve and mdbox
by Patrick Westenberg 13 Mar '11

13 Mar '11

Hi guys, I tried to use a global sieve skript to sort spam mails into a subfolder of INBOX. I´m using mdbox. The log shows that the script is called and executed but it is not able to find or create the mailbox: Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/Spamverdacht Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/INBOX.Spamverdacht Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 My skript looks like this: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spamverdacht"; } I also tried: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "INBOX.Spamverdacht"; } How can I fix this? Regards Patrick

5 7

[Dovecot] Patch proposition to implement a new workaround: tb-lsub-flags
by Bruno Tréguier 12 Mar '11

12 Mar '11

Hi again Timo, As agreed earlier tonight, you'll find as attachments 4 diffs (diff -u) implementing the new workaround "tb-lsub-flags". The 4 impacted files are: ./src/imap/imap-settings.h ./src/imap/imap-settings.c ./src/imap/cmd-list.c ./src/config/all-settings.c Here is the proposed description for the dovecot.conf file: # tb-lsub-flags: # Usually IMAP servers don't bother returning the flags attached # to each mailbox, but Thunderbird presently needs them in order # to correctly process the "folders of folders" case. Please tell me if the patch format is suitable or if you expect something else. Best regards and thanks again for your responsiveness. Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

2 2

[Dovecot] Filtering attachements ?
by Frank Bonnet 12 Mar '11

12 Mar '11

Hello again Is there a way to filter some attachments with dovecot ? I don't want my users to keep video files in the IMAP folders anymore ( disk is almost full ) . Thank you.

4 3

[Dovecot] SASL abort causes 5s delay, triggered by UW libc-client
by Arne Nordmark 12 Mar '11

12 Mar '11

Since upgrding to Debian squeeze, the web mail system (Imp4/Horde3) suffers delays every time a new IMAP connection is needed. Tracing the authentication conversation, we find: 08:45:55.270609: 00000000 AUTHENTICATE GSSAPI 08:45:55.271277: + 08:45:55.271761: * 08:45:55.271782: 00000000 BAD Authentication aborted by client. 08:45:55.271815: 00000001 AUTHENTICATE PLAIN 08:46:00.271008: + and the PLAIN login succeeds. Imp4 is using php5-imap which is using libc-client, and the delays makes the interface so slow to hardly usable. For reasons best known to its authors, libc-client first initiates GSSAPI authentication, then checks if there is a Kerberos ticket it can use (there is none), then realizes its mistake and aborts SASL, and tries PLAIN. At this point dovecot delays for 5000ms. While not defending libs-client's odd behaviour of not checking for tickets first, it has probably done so for a long time, and dovecot from Debian lenny does not delay at this point. I am lost as how to get around this without changing the code. The "nodelay" parameter can not be used with PAM passdb, according to the documentation. I would be inclined to call always call client_auth_failed with nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case. Arne Nordmark Config: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *, [::] ssl_ca_file: /etc/ssl/certs/mechca_cert.pem ssl_cert_file: /etc/ssl/certs/ano4/ano4_crt.pem ssl_key_file: /etc/ssl/certs/ano4/ano4_key.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/maildir/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)ano.mech.kth.se mail_plugins: sieve auth default: mechanisms: plain gssapi failure_delay: 0 debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: root plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 1

[Dovecot] Dovecot 2.X, built from source, no extensions?
by Enright, Mike 10 Mar '11

10 Mar '11

Greetings list. Pardon the ignorance. I am working on CentOS 5.2. Unfortunately the repo version of Dovecot is 1.0.X. This works fine mind you but it doesn't have ORDEREDSUBJECT Threading support, which I need. I downloaded 2.0.11 and built from source, but now I don't see any Threading support, not even REFERENCES. I looked to see if I was missing a ./configure option but if I am, it has eluded me. Any guidance would be appreciated. # dovecot -n # 2.0.11: /usr/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.18.el5PAE i686 CentOS release 5.2 (Final) ext3 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/var/vmail/%d/%n/Maildir passdb { args = /usr/etc/dovecot/dovecot-mysql.conf driver = sql } plugin/quota = maildir:storage=10240:messages=1000 protocols = imap service auth { unix_listener /var/run/dovecot/auth-master { mode = 0600 user = vmail } user = root } service imap-login { client_limit = 256 process_min_avail = 10 service_count = 0 vsz_limit = 128 M } ssl = no userdb { args = uid=6000 gid=6000 home=/var/vmail/%d/%n allow_any_users=yes driver = static } # telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN 1 OK Capability completed. Cheers Mike Enright Senior Software Engineer Office: +1 239-425-9161 (Florida) Fax: +1 239-425-6845 [cid:C388744A-AA0D-4A0C-A96D-3038C56EC9E5] Interop Technologies 13500 Powers Court Fort Myers, FL 33912 www.interoptechnologies.com<http://www.interoptechnologies.com/>

3 3

[Dovecot] permission recomendation for dovecot configuration files and binaries
by Arkadiusz Miskiewicz 10 Mar '11

10 Mar '11

I'm trying to figure out which permissions will be the best to handle most of tasks (for use in rpm package) for configuration files. Basically /etc/dovecot/ dir /etc/dovecot/* files /etc/dovecot/conf.d/ dir /etc/dovecot/conf.d/files dovecot binaries, deliver mainly For example deliver needs to read configuration files and needs to write into destination. Doesn't seem to be sane to allow MTA user read dovecot configs but that is requires for deliver to work etc. Are there any sane/tested recommendations that would fit most situations (remember, that's going to be rpm package default config) ? -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

1 0

[Dovecot] Dovecot 2.0 - size of the mailbox
by Cristiane França 10 Mar '11

10 Mar '11

Hi, The Dovecot 2.0 has some limit size for the mailbox? The server is 64 bits and would like to have mailbox with bigger size that 2 GB.

2 1

Re: [Dovecot] POP3 error
by Thierry de Montaudry 10 Mar '11

10 Mar '11

On 08 Mar 2011, at 13:24, Chris Wilson wrote: > Hi Thierry, > > On Tue, 8 Mar 2011, Thierry de Montaudry wrote: >> On 07 Mar 2011, at 19:15, Timo Sirainen wrote: >>> On Mon, 2011-03-07 at 19:03 +0200, Thierry de Montaudry wrote: >>>>>>>>> Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable >>>>> .. >>>> As it is happening at least once a day, is there anything I can do to >>>> trace it? and whatever I'll do, will it slow down those machines? >>> >>> Set verbose_proctitle=yes (won't slow down) and get list of all >>> Dovecot processes when it happens. And check how much user and system >>> CPU it's using and what the load is. >> >> Got the same problem this morning, here is the CPU usage and ps aux for >> dovecot. plus the different error I could pick up in the log, most of >> them are repeated a couple of times. >> >> I suspect it a problem with system resources, but can find any message >> to tell me what. Mail are stored on 17 NFS servers (CentOS), plus 3 >> servers for indexes only. >> >> CPU load is very high, but mainly from httpd running our webmail >> interface, which uses the local imap server. > [...] >> top - 11:10:14 up 14 days, 12:04, 2 users, load average: 55.04, 29.13, 14.55 >> Tasks: 474 total, 60 running, 414 sleeping, 0 stopped, 0 zombie >> Cpu(s): 99.6%us, 0.3%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st >> Mem: 16439812k total, 16353268k used, 86544k free, 33268k buffers >> Swap: 4192956k total, 140k used, 4192816k free, 8228744k cached > > You're lucky this server is still alive and that you could even run top > and ps on it. > > There's nothing to debug in dovecot here. Your server is overloaded by > about 55 times. Buy 55 times as many servers or do something about your > webmail interface (maybe a separate webmail cluster). > > Cheers, Chris. > As you can see the numbers (55.04, 29.13, 14.55) the load was busy getting higher when I took this snapshot and this was not a normal situation. Usually this machine's load is only between 1 and 4, which is quite ok for a quad core. It only happens when dovecot start generating errors, and pop3, imap and http get stuck. It went up to 200, and I was still able to stop web and mail daemons, then restart them, and everything was back to normal.

7 20

[Dovecot] Dovecot + Sieve does not work
by Jimmi 10 Mar '11

10 Mar '11

Hi, On my Debian Squeeze server I installed Dovecot 1.2.16 from http://xi.rename-it.nl/debian/ and configured as follow: # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-110209 i686 Debian 6.0 ext3 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap sieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: postfix mail_location: maildir:/home/virtual/%d/%n mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle lda: postmaster_address: postmaster(a)7girello.net mail_plugins: sieve log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: virtual group: virtual plugin: sieve: /home/virtual/%d/%n/.dovecot.sieve sieve_dir: /home/virtual/%d/%n/sieve/ After that in Roundcube 0.5.1 downloaded from http://roundcube.net/ I enabled the managesieve plugin but when I go to the filter page RC says that he cannot connect the server. I then realized that the port 4190 is not open and I cannot understand why. In my dovecot.conf I have the section: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:4190 } that is not shown in the output of 'dovecot -n'. Did I missed something? Thanks in advance -- jimmi

3 6