- dovecot - dovecot.org

[Dovecot] questions/problems virtual plugin pop3 leave copies on the server for x days then delete
by Robert Schetterer 21 Mar '11

21 Mar '11

Hi Timo, i allready asked about this , and did some fixes , but it isnt working yet ,as far i have a setup like namespace default { # type = private separator = / prefix = "" list = yes # hidden = no subscriptions = yes } namespace virtual { # type = private prefix = "virtual/" separator = / location = virtual:/etc/dovecot/virtual:LAYOUT=maildir++:INDEX=~/virtual hidden = yes list = no subscriptions= no } namespace real { # type = private prefix = "RealMails/" separator = / list = no hidden = yes } pop3_enable_last = yes pop3_reuse_xuidl = no pop3_uidl_format = %g pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_max_userip_connections = 100 mail_plugins = expire virtual quota mail_log fts fts_squat notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh RealMails/ RealMails/* -RealMails/Trash -RealMails/Trash/* -RealMails/Sent -RealMails/Sent/* -RealMails/Templates -RealMails/Templates/* -RealMails/Drafts -RealMails/Drafts/* -RealMails/Archives -RealMails/Archives/* unseen normally this works as expected some users want to use leave copies messages on the server for x days then delete via pop3 i tested this with thunderbird and looked into the maildir, it seems that the mails stay in "new" folder of the maildir after i downloaded via pop3 ( i am not sure is this expected ? , i would thought they get to cur ) thunderbird does not download this mails again ( good ), but it doesnt delete them from maildir new ever( bad ) , so the whole leave copy and delete after x days function pop3 is not working i am not quite sure if there is relation to virtual namespaces ( which i like to use in future too ) , but have to renable this feature working any idea? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 14

[Dovecot] Virtual and system users with public mailboxes
by kshaw＠kendallshaw.com 21 Mar '11

21 Mar '11

Hi, I am running dovecot 1.2.9 and postfix, and I am trying to setup a public mailbox. My thought is that there would be one system user with a sieve script to deliver messages to the public mailbox. And, I would like to give virtual users access to the mailbox. On this list, I read how you can have both system and virtual users by using passdb and static userdbs. But, I don't understand how this can be combined with namespaces, where I specify the location. For all virtual users I had: mail_location = maildir:/var/somewhere/%u/maildir/ I think I need that for virtual users and: maildir:~/Maildir for the system users. namespace private { location = ? # how do I have the location be different for system and virtual users? } namespace public { location = ? # ditto (for the index)? } Kendall

3 3

[Dovecot] maildir location
by upen 21 Mar '11

21 Mar '11

Hello, I am trying to use dovecot (v. 2.0.11) and postfix (v. 2.7.3) together. The email server is an ldap client and user's home directories on NFS server are mounted using autofs. As I understand, Maildir performance is better than mbox type, so I'd like to use Maildir instead of mbox. However, when I checked conf.d/10-mail.conf file, there is mail_location = maildir:~/.maildir already configured in it which means user's email will reside in their home directories on the NFS server rather than being on Email server's local storage where plenty of space is available. I anticipate due to NFS there will again be a performance hit . Question : Can I change mail_location for maildir to be somewhere other than ~/.maildir. ( like /var/mail/%u/Maildir, where /var/mail is local storage). There are about 200 ldap users who will be using this email server through squirrel-mail or access them through email clients. By the way, I am confused about one setting in postfix : home_mailbox = .maildir/ in main.cf . Does this really play any role? If so, which parameter should be changed and to what and with what permissions to the new directory. Hope I was able to explain, if not please let me know for more details.. Thanks, U

4 9

[Dovecot] Can't disable chroot to 'empty' dir, but need to... how to do it?
by Tim Bessie 21 Mar '11

21 Mar '11

Hello all... I've installed dovecot on my ISP's shell server, and am using SSH tunnelling so that I can retrieve my mbox-format mail from procmail-processed mailboxes on that server (normally I just ssh there and read them locally with pine, but now that I have a phone with an IMAP client, I wanted to be able to read it more easily there). The problem I'm having is, although it's working, whenever dovecot starts up, or I try to log in, it attempts to chroot to /home/mydir/dovecot/var/run/dovecot/empty (where /home/mydir/dovecot is the path to my dovecot installation). I've turned off all chroot'ing in all the config files, but it still seems to want to chroot to that one directory. The message I see in the log is: Mar 19 02:09:43 master: Info: Dovecot v2.0.11 starting up (core dumps disabled) Mar 19 02:09:44 anvil: Fatal: chroot(/home/mydir/dovecot/var/run/dovecot/empty) failed: Operation not permitted Mar 19 02:09:44 master: Error: service(anvil): command startup failed, throttling This doesn't cause a problem accessing my mail, but it DOES seem to wait 60 seconds between attempts at chroot'ing, so logins to the server take that long (until the chroot fails). Is there any way I can disable this? Again, I've followed the instructions and set 'chroot=' (empty) for all services, but that hasn't helped. - Tim

2 1

[Dovecot] Problem with pam-auth and winbind
by pk10＠ksiaznica.torun.pl 21 Mar '11

21 Mar '11

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind Configuration of the dovecot is follows: log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 auth default: mechanisms: plain login use_winbind: yes passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix and configuration of the /etc/pam.d/dovecot is follows: #%PAM-1.0 auth required pam_env.so debug auth sufficient pam_winbind.so #auth sufficient pam_unix.so likeauth nullok use_first_pass auth required pam_deny.so # when I try logon from my console: # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR Authentication failed. quit +OK Logging out Connection closed by foreign host. Of course password is corret becouse #wbinfo -K tt1 Enter tt1's password: plaintext kerberos password authentication for [tt1] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 In the logs files I can find coresponding to the telnet command to dovecot: /var/log/auth.log Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): getting password (0x00000000) Mar 14 09:43:22 komp14 dovecot-auth: pam_winbind(dovecot:auth): user 'tt1' granted access /var/log/dovecot/info.log Mar 14 09:43:29 pop3-login: Info: Aborted login (auth failed, 1 attempts): user=<tt1>, method=PLAIN, rip=10.10.10.38, lip=10.10.10.38, secured I'll be apreciate for any hints. but in /var/log/dovecot/error.log we have information: Mar 14 09:43:29 auth-worker(default): Error: pam(tt1,10.10.10.38): pam_acct_mgmt() failed: Authentication failure This test was done with windbindd Version 3.5.3. When I test it on another machine with windbind Version 3.0.24 (config file are the same) authentication prosess is done properly. Any HINTS????

2 1

[Dovecot] DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER
by PARTH MONGA 21 Mar '11

21 Mar '11

Hi Friends IS IT POSSIBLE IN DOVECOT TO HAVE MULTIPLE AUTHENTICATION MECHANISM FOR A PARTICULAR USER as u provided me in the link http://wiki2.dovecot.org/Authentication/MultipleDatabases <http://wiki2.dovecot.org/Authentication/MultipleDatabases>The link is applied to all the users( system + virtual) , which increased my overhead of fetching data can i have the same for a particular user ( local + database ) auth mecahnism Thanks and Regards Parth Monga

2 1

[Dovecot] 2.0.11 segfault while can't access submission_host
by Maciej Uhlig 21 Mar '11

21 Mar '11

15-lda.conf: submission_host = 192.168.m.n:587 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.debug] lmtp(12354, user(a)us.edu.pl) Debug: mcQ1NitVh01CMAAAuqlTtQ: sieve: executing script from /mails/sieve/user(a)us.edu.pl.svbin 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] lmtp(12354, user(a)us.edu.pl) Error: smtp(192.168.m.n:587): RCPT TO failed: 554 5.7.1 <prac[192.168.x.y]>: Client host rejected: Access denied 2011-03-21T14:43:49+01:00 prac/p-prac dovecot: [ID 583609 mail.error] master: Error: service(lmtp): child 12354 killed with signal 11 (core not dumped) in case submission_host grants access there is no segfault; mail sent ok. Regards, MU

2 1

[Dovecot] Sieve problems (not matching emails expected to match)
by Michael Welsh Duggan 21 Mar '11

21 Mar '11

I have a sieve file that reads like this: require "fileinto"; # Emacs if header :contains "List-Id" "emacs-devel.gnu.org" { fileinto "mail.emacs-devel"; } elsif header :contains "List-Id" "emacs-bidi.gnu.org" { fileinto "mail.emacs-bidi"; } ... Unfortunately the List-Id based lines don't appear to be working, although some other ones do. The attached test message does not get delivered to the mail.emacs-devel list. Why? -- Michael Welsh Duggan (md5i(a)md5i.com)

3 7

[Dovecot] dovecot authentication Local + MySQL
by PARTH MONGA 20 Mar '11

20 Mar '11

Hi Friends I am facing an issue with dovecot configuration and i am describing it in a nutshell. We have a dovecot setup under ultramonkey load balancer and in loadbalancer we have a check defined for pop service which queries mysqldatabase for a particular user name/password after every 2 minutes to check if service is live or not.. Things are fine till here . Now The catch is if somehow that particular user info(either password or username) is mistakenly changed in mysql database whole of my pop gets down beacuse load balancer cant login and that is a single point of failure in my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

2 1

[Dovecot] Strange Dovecot Issue
by Scott Hughes 20 Mar '11

20 Mar '11

Greetings, I am trying to copy email from one server to another server using Thunderbird. The old server is a closed source ModusMail server and the new server is a Qmail server running Dovecot 1.2.3 (yes, I realize this is behind the times a bit). My issue is this: Whenever Thunderbird gets to a message that has been forwarded (has the forward flag set) an error is generated from the new server (dovecot) that it does not know how to handle the forward flag. Is this a known issue or is it simply that my version of Dovecot is behind? Thanks, Scott

1 0

[Dovecot] Question about "extracting" unwanted e-mails from mdbox
by Maria Arrea 20 Mar '11

20 Mar '11

Imagine the following scenario Last Saturday, 3:00 AM a big phishing attack hits our e-mail inboxes. Spamassassin does not mark them as spam, and our 50.000+ users have in their mdbox a very credible phishing attack. What doveadm-fu could I use to delete (or move to spam) that e-mail from each user INBOX (let´s imagine the Subject or a Header is known)? I repeat: already delivered e-mail, how to filter/prune it. Regards Maria

3 2

[Dovecot] remove old files
by Stéphane Guedon 20 Mar '11

20 Mar '11

Hello I use the dovecot 2.0.10 server and wonder how to clean up correctly the old mails (especially for spam folder). I use maildir storage, and wonder if deleting files with an rm and file command combinaison would be good or would corrupt indexes files/whatever. for exemple, the spam folder is in ~/.mail/.INBOX.spam/ Thus, can I "cd ~/.mail/.INBOX.spam/ && rm 'files older than 2 months' " or something else ? Thanks. -- Stéphane Guedon page web : http://www.22decembre.eu/ carte de visite : http://www.22decembre.eu/downloads/Stephane-Guedon.vcf clé publique gpg : http://www.22decembre.eu/downloads/Stephane-Guedon.asc

2 1

Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or?
by jkrejci＠usinternet.com 20 Mar '11

20 Mar '11

We use proxy_maybe across several servers handling over 10,000 accounts with no problems. ------Original Message------ From: Dennis Guhl Sender: dovecot-bounces+jkrejci=usinternet.com(a)dovecot.org To: dovecot(a)dovecot.org ReplyTo: dovecot(a)dovecot.org Subject: Re: [Dovecot] dovecot proxy, imapproxy, perdition . . . or? Sent: Mar 19, 2011 4:32 PM On Sat, Mar 19, 2011 at 09:50:15PM +0100, Lorens Kockum wrote: > Hi, > > I have two load-balanced dovecot servers using a single NFS > mount. The version is 1.2.11. I chose this so that if one server [..] > reasons, and also that dovecot has an included proxy, and > that its performance is better than perdition. However on > http://wiki.dovecot.org/HowTo/ImapProxy the feature "IMAP/POP3 > server with proxy feature" is noted as "This model is still a > bit unfinished in current code." > > Is this still true? There's also a general note that "This page > was written quite a long time ago and may not match reality > anymore" . . . I use 1.2.15 from Debian Lennys backports in a proxy configuration for a medium three digit number of users without any problems. Dennis Sent via BlackBerry from T-Mobile

1 0

[Dovecot] Testing sieve
by Jim Knuth 19 Mar '11

19 Mar '11

Hi, I`ve now compiled sieve and have a globalsieverc in /etc/dovecot/sieve/globalsieverc. How can I testing the rules? 1. require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto :create "Spam"; stop; } The second rule not working, the first rule I do not know. 2. require "fileinto"; if header :contains "subject" "Stress" { fileinto "Ablage"; stop; } main.cf entry is mailbox_command = /usr/lib/dovecot/dovecot-lda -a "$RECIPIENT" Thanks in advance -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Ist das Leben nicht hundert Mal zu kurz, sich in ihm - zu langweilen? [Nietzsche]

1 0

[Dovecot] Sieve or not?
by Jim Knuth 19 Mar '11

19 Mar '11

Hello, I use V 2.11 and my question is: Is one present Sieve with this version or MUST this specially compiles? # 2.0.11 (31d8d43fa6b5): /etc/dovecot/dovecot.conf # OS: Linux 2.6.29.4 i686 Debian wheezy/sid -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Der Fanatismus ist die einzige 'Willensstärke', zu der auch die Schwachen gebracht werden können. [Nietzsche]

2 3

[Dovecot] Dovecot mirror down?
by Jim Knuth 18 Mar '11

18 Mar '11

Hello, http://xi.rename-it.nl/debian/ down? Does somebody know why? -- Mit freundlichen Grüßen, Jim Knuth P.S.: Bitte senden Sie KEINE HTML-Mails! ##### Zufallszitat: Lache nie über die Dummheit der anderen. Sie kann deine Chance sein. [Churchill]

3 7

Re: [Dovecot] Problem with expire plugin and expunge
by Christoph Pleger 18 Mar '11

18 Mar '11

Hello, > > Big surprise: Something bad must have happened after the messages were > > deleted from Trash; now all messages are zero days old. > > Are you using maildir? Did you run with those patches + mail_debug=yes? Today, the daily cronjob expired some messages. I have attached the output of the job. It seems that the error occurs not when expunging, but when deleting the first message after expunging. Before deleting a message, "doveadm search" showed me messages that were between zero and four days old, but directly after deleting a message, all messages were zero days old. Here is my log entry from when I deleted that message: Mar 18 09:50:28 joseph dovecot: imap(christoph): Debug: expire: Saving first message to Trash, updating timestamp to 1300438228 Regards Christoph

1 0

[Dovecot] Problem with recompiling sieve scripts after migrating to Dovecot 2.0 from 1.2
by Andrés Yacopino 18 Mar '11

18 Mar '11

I saw this in log file of dovecot: Error: sieve: binary save: failed to create temporary file: open(/usr/local/etc/sieve/after/after.dovecot.svbin.acamail.acasalud.com.ar.13528.) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +w perm: /usr/local/etc/sieve/after, euid is not dir owner) acamail dovecot: lda(xxxxx@xxxxxx): Error: sieve: the lda sieve plugin does not have permission to save global sieve script binaries; global sieve scripts like /usr/local/etc/sieve/after/after.dovecot.sieve need to be pre-compiled using the sievec tool So i tried to recompile script using sievec like: sievec /usr/lcaol/etc/sieve/after/after.dovecot.sieve but i get: sievec(root): Error: user root: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/root/Maildir) failed: Permission denied (euid=40(vmail) egid=41(vmail) missing +x perm: /root, euid is not dir owner) sievec(root): Fatal: Invalid user settings. Refer to server log for more information. What i must do to resolve this? My dovecot configuration is: # 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: Linux xxxxxx auth_master_user_separator = * auth_username_format = %Lu disable_plaintext_auth = no first_valid_gid = 40 first_valid_uid = 40 mail_gid = vmail mail_location = maildir:~/Maildir mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/passwd.masterusers driver = passwd-file master = yes } passdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } plugin/quota = maildir plugin/quota_rule = *:storage=614400 plugin/quota_rule2 = Trash:storage=+61440 plugin/sieve_after = /usr/local/etc/sieve/after/after.dovecot.sieve plugin/sieve_before = /usr/local/etc/sieve/before/spam.dovecot.sieve protocols = imap pop3 sieve service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_key = </usr/local/etc/ssl/private/dovecot.pem userdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-master lda_mailbox_autocreate = yes mail_plugins = quota sieve postmaster_address = postmaster@xxxxxx sendmail_path = /usr/lib/sendmail Thanks a lot, -- Andrés Fernando Yacopino

2 1

Re: [Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

Forget it. I must have been crosseyed. Someone had put the log file in a non-standard place /home/vmail/dovecot-deliver.log. It told all. A plugin cmusieve was not found, possibly depreciated? I learned how to make the deliver command line work. ;) Sorry, David Koski dkoski(a)sutinen.com > Additional information: > > I created a script to get the return code from deliver: > > 1 #!/bin/bash > 2 > 3 cat "cur/1300037582.P7332Q0M221160.brusco-mail:2,S" | > /usr/lib/dovecot/deliver -f dkoski(a)somedomain.com -d > dkoski(a)domainhidden.com 4 > 5 case $? in > 6 0) echo "0" > 7 ;; > 8 64) echo "64" > 9 ;; > 10 67) echo "67" > 11 ;; > 12 78) echo "78" > 13 ;; > 14 77) echo "77" > 15 ;; > 16 75) echo "75" > 17 ;; > 18 *) echo "unknown" > 19 esac > 20 > > The file it is cat'ing is a valid email in an Maildir/cur file. It returns > 75 (EX_TEMP_FAIL) every time, even run as root. The logs reveal: > > /var/log/dovecot/lda-deliver: > > 2011-03-17 23:35:39 deliver(dkoski(a)somedomain2.com): Info: Loading modules > from directory: /usr/lib/dovecot/modules/lda > > /var/log/dovecot/deliver.info: > (nothing) > > /var/log/dovecot/deliver.err: > (nothing) > > I tried the script on another machine with Dovecot 1.0.15-2.3+lenny1 with > success if I run as root. > > Regards, > David Koski > dkoski(a)sutinen.com > > > This really has me stumped and desperate. I upgraded Debian from 5... > > <snip>

1 0

[Dovecot] dovecot LDA: "temporary failure"
by David Koski 18 Mar '11

18 Mar '11

This really has me stumped and desperate. I upgraded Debian from 5 to 6 (squeeze) and now Dovecot LDA fails. I have checked permissions and the usual. Postfix SMTP, Dovecot POP3 and Dovecot IMAP work. Having to upgrade MySQL from 5.0 to 5.1 made me question that. Logging is of little help. I have turned on logging for LDA to a separate file. When I try to run the deliver command it returns nothing and appears to do nothing: ~$ cat /etc/hosts | /usr/lib/dovecot/deliver -f root@localhost -d dkoski(a)[domainhidden].com $ ..but then I don't know what to expect. The log files are owned by dovecot. I tried chmod'ing them to 777 in desperation. This was working before the upgrade to 1.2.15-4 from 1.0.15-2.3+lenny1. Postfix reports this stuff: Mar 17 22:37:38 host-mail postfix/smtpd[22160]: connect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/smtpd[22160]: 9D80C12AF610: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:39 host-mail postfix/cleanup[22163]: 9D80C12AF610: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:39 host-mail postfix/qmgr[21877]: 9D80C12AF610: from=<dkoski(a)[another-domainhidden].com>, size=1257, nrcpt=1 (queue active) Mar 17 22:37:39 host-mail postfix/smtpd[22160]: disconnect from mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: connect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/smtpd[22168]: 480D912AF612: client=mail.kosmosisland.com[63.228.175.169] Mar 17 22:37:42 host-mail postfix/cleanup[22163]: 480D912AF612: message-id=<201103172237.29223.dkoski(a)[another-domainhidden].com> Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 480D912AF612: from=<dkoski(a)[another-domainhidden].com>, size=1873, nrcpt=1 (queue active) Mar 17 22:37:42 host-mail postfix/smtpd[22168]: disconnect from localhost[127.0.0.1] Mar 17 22:37:42 host-mail postfix/pipe[22169]: 480D912AF612: to=<dkoski(a)[domainhidden].com>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure) Mar 17 22:37:42 host-mail postfix/smtp[22164]: 9D80C12AF610: to=<dkoski(a)[domainhidden].com>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.84/0.01/0/2.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=11197-13, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 480D912AF612) Mar 17 22:37:42 host-mail postfix/qmgr[21877]: 9D80C12AF610: removed And /var/log/dovecot/deliver.info: 2011-03-17 22:43:43 auth(default): Info: new auth connection: pid=22232 2011-03-17 22:43:59 auth-worker(default): Info: sql(dkoski(a)[domainhidden].com,127.0.0.1): query: SELECT email as user, password FROM view_users WHERE email='dkoski(a)[domainhidden].com'; 2011-03-17 22:43:59 auth(default): Info: client out: OK 1 user=dkoski(a)[domainhidden].com 2011-03-17 22:43:59 auth(default): Info: master in: REQUEST 73 22061 1 2011-03-17 22:43:59 auth(default): Info: master out: USER 73 dkoski(a)[domainhidden].com uid=5000 gid=5000 home=/home/vmail/[domainhidden].com/dkoski 2011-03-17 22:44:00 auth(default): Info: new auth connection: pid=22234 I tried reinstalling the package dovecot-common. I downloaded it on another machine and compared the md5sum. # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 delay_warning_time = 1h inet_interfaces = all mailbox_size_limit = 0 mydestination = backup.host.localnet, backup.localnet, localhost.localnet, localhost myhostname = mail.[domainhidden].com mynetworks = 192.168.1.0/24, 127.0.0.1 myorigin = /etc/mailname recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${queue_directory}/cache/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_reverse_client_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dnsbl.njabl.org, reject_rbl_client combined.njabl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client spamguard.leadmon.net, reject_rbl_client korea.services.net, reject_rbl_client spamsources.fabel.dk, reject_rhsbl_sender rhsbl.ahbl.org smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${queue_directory}/cache/smtpd_scache smtpd_use_tls = yes virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf,mysql:/etc/postfix/mysql-email2email.cf virtual_gid_maps = static:5000 virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 From master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0 ext3 log_path: /var/log/dovecot/deliver.err info_log_path: /var/log/dovecot/deliver.info log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap pop3 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /var/log/dovecot/lda-deliver.err info_log_path: /var/log/dovecot/lda-deliver.info log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: info(a)[another-domainhidden].com mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail Regards, David Koski david(a)kosmosisland.com

2 2

Re: [Dovecot] segmentation fault with doveadm search
by Timo Sirainen 17 Mar '11

17 Mar '11

On Thu, 2011-03-17 at 17:54 +0100, Nick Rosier wrote: > Hope this is better: > > #1 0x000000080231ab21 in fts_build_deinit (_ctx=0x801ea2640) at > fts-storage.c:551 Yes, much better. Easy fix: http://hg.dovecot.org/dovecot-2.0/rev/3d48418b0501

2 1

[Dovecot] Unconfigured dictionary name 'quotadict'
by Simone Caruso 17 Mar '11

17 Mar '11

Currently i'm migrating an existing dovecot 1.2 server to dovecot 2.0.11, once configured the 2.0 server works, auth works... but i get these messages in mail.log: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:14 penny dovecot: imap(mailbox(a)example.com): Error: write(/var/run/dovecot/dict) failed: Broken pipe Mar 17 16:46:38 penny dovecot: dict: Error: dict client: Unconfigured dictionary name 'quotadict' Mar 17 16:46:38 penny dovecot: imap(mailbox(a)example.com): Error: read(/var/run/dovecot/dict) failed: Remote disconnected My quota configuration is the following (as wiki says): service dict { unix_listener dict { mode = 0600 user = vmail } } plugin { quota = dict:User quota::proxy::quotadict quota_rule2 = Trash:storage=+55M } dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf } dovect-dict-sql.conf: connect = host=localhost dbname=ketna user=***** password=***** map { pattern = priv/quota/storage table = imap_quota username_field = email value_field = current } map { pattern = priv/quota/messages table = imap_quota username_field = email value_field = messages } Someone can tell me where's my fault? (Attached my "dovecot -n" output.) Thanks! -- Simone Caruso

2 2

[Dovecot] Migrating to mdbox
by Chris Wilson 17 Mar '11

17 Mar '11

Hi all, I think it would be a good idea for me to move from mbox to mdbox, as I have 57,000 messages in my inbox, and clients hang for a minute whenever they request a CHECK, or Dovecot feels the need to run one itself. Looking at past threads: http://www.mail-archive.com/dovecot@dovecot.org/msg35212.html http://comments.gmane.org/gmane.mail.imap.dovecot/53936 it seems that the safest way is to run: sudo dsync -v -u chris backup mdbox:/home/chris/mdbox eliminate any errors that it reports, test the new mdbox access temporarily, and then switch my config in Dovecot. Ideally I'd like to do that just for me, without disrupting other users of this server (that I help to admin). This error occurs every time I run dsync, and I understand it, so I've elided it: dsync(chris): Error: open() failed with mbox file /home/chris/mail/admin: Permission denied dsync(chris): Error: Failed to sync mailbox admin: Internal error occurred. Refer to server log for more information. [2011-03-09 15:50:10] dsync(chris): Info: spam: highest_modseq changed: 2 != 3 I don't understand the following errors from dsync (2.0.9): chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Error: Next message unexpectedly corrupted in mbox file /home/chris/mail/spam at 404513741 dsync(chris): Warning: Transaction log file /home/chris/mail/.imap/spam/dovecot.index.log was locked for 252 seconds dsync(chris): Info: spam: only in source dsync(chris): Info: temp: only in source dsync(chris): Info: Sent: only in source dsync(chris): Info: addressbook: only in source dsync(chris): Info: sent-mail-sep-2008: only in source dsync(chris): Info: sent-mail-oct-2010: only in source dsync(chris): Info: INBOX.Sent: only in source dsync(chris): Info: sent-mail: only in source dsync(chris): Info: INBOX.Trash: only in source chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: only in source dsync(chris): Info: spam: only in dest dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: msg iteration failed: Couldn't open mailbox 407c272bc369304dbc210000d6a93087 dsync(chris): Error: Trying to open a non-listed mailbox with guid=407c272bc369304dbc210000d6a93087 dsync(chris): Error: Failed to sync mailbox spam: Mailbox doesn't exist: spam Note: how is it possible for the same folder to be "only in source" and "only in dest"? chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 dsync(chris): Info: sent-mail: uidnext changed: 378 != 375 chris@one-mail(~)$ sudo dsync -v -u chris backup mdbox:/home/chris/mdbox dsync(chris): Info: spam: highest_modseq changed: 2 != 3 Now the latter is all I get whenever I run dsync. Is it broken? Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

3 12

[Dovecot] SSL Compatibility? SNI vs SAN (Subject Alternative Names) and multiple domains
by Thomas Harold 17 Mar '11

17 Mar '11

Getting ready to redo our mail server setup and I'm trying to wrap my head around the ins and outs and pratfalls involved in SSL, multiple domains, and Dovecot. I've taken a look at: http://wiki2.dovecot.org/SSL/DovecotConfiguration My basic understanding at this point is that: - With SSL for IMAP/POP3, it is limited to one certificate per IP address, because the SSL process starts as soon as the client opens the socket to the IP address. In order to support multiple domains / server names, you have to rely on SAN (Subject Alternative Names) in the server's SSL certificate. - If I use STARTTLS for IMAP/POP3 and Dovecot 2.x, then the SNI process will allow the client to specify that they want to talk to mail server XYZ and Dovecot will hand the correct certificate to the client. However, a lot of devices don't support SNI yet so this is fraught with peril and incompatibilities. So it seems like if I have fewer IP addresses then mail server names, I should stick with a single SSL cert and use SANs. (Wildcard certs are not an option due to the top level domain being different.) How big of an issue is a cert with half a dozen or a dozen SANs attached? Do most mail clients handle that sort of certificate properly in order to access their mailboxes? Reference links: http://www.digicert.com/subject-alternative-name-compatibility.htm

7 8

[Dovecot] problems with public (sub)folders
by frederik.schmid＠gmx.net 17 Mar '11

17 Mar '11

Hi, i am trying to share a maildir++ mailbox to other users but i can only subscribe to the root directory. The subfolders of the public mailbox do not appear in the exported list. Does anyone has an idea how i can share the subfolders too without creating symlinks for every single folder? Best, Frederik >>>>> ls -lA /var/mail/public .user01 -> /var/mail/user01/Maildir >>>>> ls -A /var/mail/user01/Maildir/ (shortened) .Drafts,.Templates,.Sent,.Trash,.Spam new,cur,tmp dovecot.* .subfolder .subfolder.test1 .subfolder.test1.xyz .subfolder.test2 .subfolder.test3 >>>>> doveconf -n # 2.0.11 (2cb0fb910441): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 hostname = xxx last_valid_gid = 50000 last_valid_uid = 50000 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/public prefix = public. separator = . subscriptions = no type = public } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/autocreate = Trash plugin/autocreate2 = Spam plugin/autocreate3 = Sent plugin/autocreate4 = Drafts plugin/autocreate5 = Templates plugin/autocreate6 = Spam plugin/autosubscribe = Trash plugin/autosubscribe2 = Spam plugin/autosubscribe3 = Sent plugin/autosubscribe4 = Drafts plugin/autosubscribe5 = Templates plugin/autosubscribe6 = Spam plugin/sieve = ~/.main.sieve plugin/sieve_before = /etc/dovecot/sieve/move-spam.sieve plugin/sieve_dir = ~/sieve postmaster_address = postmaster@xxx protocols = imap lmtp sieve service anvil { client_limit = 2048 } service imap-login { client_limit = 1024 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1024 process_min_avail = 16 } service lmtp { inet_listener lmtp { address = * port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/dovecot/cert/xxx ssl_key = </etc/dovecot/cert/xxx userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 100 mail_plugins = " autocreate" } -- GMX DSL Doppel-Flat ab 19,99 Euro/mtl.! Jetzt mit gratis Handy-Flat! http://portal.gmx.net/de/go/dsl

2 1

[Dovecot] Dove cot+Kerberos
by Rostislav Matyusha 17 Mar '11

17 Mar '11

Hi All. I have a problem with authorization users AD via kerberos in Dovecot&Postfix. Windows SRV 2008 Standart - AD mail server: Gentoo + cyrus-sasl + postfix + dovecot with support ldap&kerberos. I am created a 4 keytabs on Windows box. C:\Users\Admin>ktpass -princ host/srv-mail.cn.energy(a)CN.ENERGY -mapuser ldapmail(a)CN.ENERGY -pass "superpasswd" -crypto RC4-HMAC-NT -ptype KRB5_NT_PRINCIPAL -out c:\mail.keytab etc... for all imap/srv-mail.cn.energy pop/srv-mail.cn.energy smtp/srv-mail.cn.energy host/srv-mail.cn.energy On Linux server: ktutils ktutils: rkt /root/Keytab/imap.keytab ktutils: rkt /root/Keytab/smtp.keytab ktutils: rkt /root/Keytab/pop.keytab ktutils: rkt /root/Keytab/host.keytab ktutils: wrt /etc/krb5.keytab ktutils: q kinit -V -k -t /etc/krb5.keytab host/srv-mail.cn.energy(a)CN.ENERGY Authenticated to Kerberos v5 KRB5_KTNAME=/etc/krb5.keytab ; export KRB5_KTNAME TESTING: imtest srv-mail ERROR: Mar 10 08:27:23 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:27:23 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f Why username "host/srv-mail.cn.energy(a)CN.ENERGY" ??? imtest -m GSSAPI -u ross -a ross -r cn.energy srv-mail ERROR: Mar 10 08:31:55 srv-mail dovecot: auth(default): auth(?,10.0.0.5): Invalid username: host/srv-mail.cn.energy(a)CN.ENERGY Mar 10 08:31:55 srv-mail dovecot: auth(default): gssapi(?,10.0.0.5): authn_name: Username contains disallowed character: 0x2f BUT if i create kinit ross(a)CN.ENERGY imtest srv-mail ERROR: srv-mail dovecot: auth(default): gssapi(ross(a)CN.ENERGY,10.0.0.5): Invalid response length So i am confusion, please help me. many thanks -- Best Regards Ross Remote Server Administration. e-mail: ross.sysadm(a)gmail.com skype: ross.sysadm icq: 317410068 Best Offers for a full range of server management services and effective on time solutions.

2 1

[Dovecot] dict crashes with multiple map definitions
by Birger Brunswiek 17 Mar '11

17 Mar '11

Hi, I get a crash in dict if I use multiple map sections. Each one of them works fine by their own. I managed to convince dovecot to create dump files to debug this, but I can't figure out how to do the same for dict. How can I do this? Anyway, perhaps someone already know's what's wrong by looking at what I do in the sql dict configuration. Mar 9 02:27:52 xxx dovecot: dict: pgsql: Connected to dovecot Mar 9 02:27:52 xxx dovecot: dict: Panic: file driver-pgsql.c: line 529 (do_query): assertion failed: (db->sync_result == NULL) Mar 9 02:27:52 xxx dovecot: dict: Raw backtrace: dict() [0x418a9a] -> dict() [0x418b03] -> dict() [0x418206] -> dict() [0x414124] -> dict() [0x414b07] -> dict() [0x40e0dc] -> dict() [0x40e20a] -> dict() [0x40b77f] -> dict() [0x40b8b9] -> dict() [0x40ba57] -> dict(io_loop_handler_run+0xbd) [0x41d87d] -> dict(io_loop_run+0x18) [0x41ccf8] -> dict(main+0x114) [0x40bda4] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f9a10cdbc4d] -> dict() [0x40ad69] Mar 9 02:27:52 xxx dovecot: IMAP(xxx): read(/var/run/dovecot/dict-server) failed: Remote disconnected Mar 9 02:27:52 xxx dovecot: IMAP(xxx): acl: dict iteration failed, can't update dict Mar 9 02:27:52 xxx dovecot: dovecot: child 11180 (dict) killed with signal 6 (core not dumped) # dovecot --version 1.2.15 # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve listen: [::] ssl_cert_file: /etc/ssl/certs/foo.bar.pem ssl_key_file: /etc/ssl/private/foo.bar.key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:/var/mail/%u/mailbox mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%n/ location: maildir:/var/mail/%%u/mailbox:INDEX=/var/mail/%u/mailbox/shared/%%u list: children lda: postmaster_address: postmaster(a)foo.bar mail_plugins: sieve acl auth default: mechanisms: plain gssapi passdb: driver: pam args: blocking=yes dovecot userdb: driver: static args: uid=vmail gid=vmail home=/var/mail/%u allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: acl: vfile acl_shared_dict: proxy::acl sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: acl: pgsql:/etc/dovecot/dovecot-dict-sql.conf # cat /etc/dovecot/dovecot-dict-sql.conf connect = host=foo.bar dbname=dovecot user=dovecot password=xxx map { pattern = shared/shared-boxes/user/$owner/$user table = user_shares value_field = dummy fields { owner = $owner usr = $user } } map { pattern = shared/shared-boxes/anyone/$owner table = global_shares value_field = dummy fields { owner = $owner } } map { pattern = shared/shared-boxes/group/$group/$owner table = group_shares value_field = dummy fields { grp = $group owner = $owner } }

2 1

[Dovecot] dovecot 1.2 quota with local users
by iti＠promax.media.pl 17 Mar '11

17 Mar '11

Hello, I got problem with setting quota from mysql for local users. In database are only information with quota. Password are store in passwd/shadow. My database have only simple info like in wiki description. Table created with: CREATE TABLE quota ( username varchar(100) not null, bytes bigint not null default 0, messages integer not null default 0, primary key (username) ); In dovecot.conf like in description is: dict { quotadict = mysql:/etc/dovecot-dict-sql.conf } plugin { # v1.2 + SQL: quota = dict:user::proxy::quotadict # v1.2 + file: quota = dict:user::file:%h/Maildir/dovecot-quota quota_rule = *:storage=10M:messages=1000 } File dovecot-dict-sql.conf has: # v1.2+ only: connect = host=localhost dbname=mails user=sqluser password=sqlpass map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } With corrected values about databasename, user and password. Where should to add information about sql query when autorization is not via myqsl (only shadow/password). There are in description info about additional file with user_query: dovecot-mysql.conf. Can anybody know how it should it look like and where to add it in config?

2 3

[Dovecot] inetd config - dovecot doesn't exits
by kjonca＠o2.pl 17 Mar '11

17 Mar '11

Is there any option for dovecot to exit when is unneded? I mostly use dovecot via shell process (ie. something like /usr/sbin/dovecot --exec-mail imap) But sometimes I want to use it remotely via tcp and I run dovecot via inetd. --8<---------------cut here---------------start------------->8--- localhost:imap stream tcp nowait root /usr/sbin/tcpd /usr/lib/dovecot/imap-login --8<---------------cut here---------------end--------------->8--- in inetd.conf works good, but dovecot stays, even if all clients ended their connections. How can I make dovecot to exit after last client disconnects? KJ -- Http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewsk… Wiesz, tryb tekstowy w Linuksie ma się tak do DOSu jak F-117A do paralotni. (c) Dawid Kuroczko

2 1

[Dovecot] Attachment file size error in SIS
by Daniel L. Miller 17 Mar '11

17 Mar '11

I've got an attachment that triggers a "smaller than expected" error. It was a pdf I received some time ago. I copied the file from the dovecot storage, renamed it to something close to the original name (I don't remember what that was), then created a new mail with this as an attachment and saved it to the server. This created a new file, identical file size to the other - but continues to have the "smaller than expected" error. -- Daniel

2 1

[Dovecot] search for attachment hash
by Daniel L. Miller 17 Mar '11

17 Mar '11

How can I determine what message(s) are linked to a given attachment hash? -- Daniel

2 1

[Dovecot] doveadm expunge info message in std.error
by Kui Zhang 17 Mar '11

17 Mar '11

Hello This command doveadm expunge -u "user@domain" mailbox ".namespace/*" savedbefore 7d writes these messages to std.error doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5932, msgid=<E1Puxwf-0001fD-Si@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5933, msgid=<E1Puy0N-0001fI-No@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5934, msgid=<E1Puy0Q-0001fM-I0@hostname>, size=1824 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5935, msgid=<E1Pv6CY-0001ge-H9@hostname>, size=1843 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5936, msgid=<E1Pv6Hm-0001gi-7R@hostname>, size=1822 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5937, msgid=<E1PvMRn-0001lm-A6@hostname>, size=1854 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5938, msgid=<E1PvZLN-0001p4-EF@hostname>, size=1832 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5939, msgid=<E1PvZN6-0001p8-IA@hostname>, size=1840 doveadm(user@domain): Info: expunge: box=.namespace/INBOX, uid=5940, msgid=<E1PwMvo-0001xs-8w@hostname>, size=1835 Can we write these messages(informational) to std.out It would help reduce cron mails. Thanks KuiZ

3 3

[Dovecot] segmentation fault with doveadm search
by Nick Rosier 17 Mar '11

17 Mar '11

Configuration: Dovecot 2.0.11 on FreeBSD 8.2 When I run a search to generate the FTS search indexes I get following error: # doveadm search -A body dead_beef [1] 34789 segmentation fault doveadm search -A body dead_beef How can I (help) troubleshoot this? Rgds, N.

2 3

[Dovecot] Configuration of LMTP Reject Code
by Petter Urkedal 17 Mar '11

17 Mar '11

Is it possible to change the reject codes from the Dovecot LMTP agent? In particular I would like to change the "550 5.1.1 <...> User doesn't exist." to a temporary failure, since we already validate email addresses on the mail front-end, and such errors are most likely due to a temporary glitch in the user database lookup. We use Postfix on the front-end, which is very configurable in this respect. I don't see a way to override the error code from LMTP, though, but suggestions are welcome.

4 10

[Dovecot] Using dovecot with wordpress/phpass passwords?
by Joan 17 Mar '11

17 Mar '11

Good afternoon, I am trying to setup dovecot to authenticate using the userdata from wordpress. It's being a bit mor difficult than I thought. This is the relevant part of the dovecot-sql.conf default_pass_scheme = CRYPT password_query = SELECT user_pass AS password FROM wp_users WHERE user_email='%u'; user_query = SELECT 501 as uid, 501 as gid,'maildir:storage=51200' as quota FROM wp_users WHERE user_email = '%u' I can see that the query is being procecessed according to the logs. Wordpress and others are using phpass to authenticate (http://www.openwall.com/phpass/) it is basically a salted md5 hash. Basically, after the process, a hash like this is obtained. $P$BiWISc3IsqRHxeEjq4VJP1Vi8gy4mg1 (for test123 password) I would like to know if dovecot would be able to read this, otherwise I could still make a custom checkpassword function but that would be non-optimal. Could someone guide me on this? If you need more details just ask. Thanks a lot, joan

2 2

[Dovecot] Problems with pam+ldap + quota
by Antonio Perez-Aranda 17 Mar '11

17 Mar '11

I think that I need to modify "/etc/ldap.conf" to remap some attribute with mailQuota from ldap, and then, try to catch this as arg. Someone has pam+ldap+quota ? -- Antonio Pérez-Aranda Alcaide aperezaranda(a)yaco.es Yaco Sistemas S.L. http://www.yaco.es/ C/ Rioja 5, 41001 Sevilla Teléfono +34 954 50 00 57 Fax +34 954 50 09 29

3 8

[Dovecot] exim and /var/run/dovecot/auth-client permissions
by John Connett 17 Mar '11

17 Mar '11

I am attempting to configure a dovecot 2.0 + exim + fetchmail (demon) combination on openSUSE 11.4, initially with the standard dovecot package (2.0.9-3.4-x86_64) and now with the later server:mail build service package (2.0.11-1.1-x86_64). I followed the instructions in http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL but despite the changes in conf.d/10-master.conf the permissions on /var/run/dovecot/auth-client remain unchanged: $ ls -l /var/run/dovecot/auth-client Srw------- 1 root root 0 Mar 14 13:11 /var/run/dovecot/auth-client $ This is probably the cause of authentication failures from exim. I suspect it is something trivial but haven't yet been able to find the answer.

2 4

[Dovecot] warnings from 2.0.11
by Mike Abbott 16 Mar '11

16 Mar '11

During a stress test dovecot-2.0.11 logs many warnings: Mar 8 06:19:52 gromit dovecot[59204]: imap(pid 68864 user user15): Warning: /Volumes/Mail/user15/dovecot-uidlist: Duplicate file entry at line 183: 1299556557.M571530P31883.gromit.example.com,S=21175,W=21549 (uid 67 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 230: 1299535329.M679065P61136.gromit.example.com,S=11040,W=11247 (uid 17 -> 240) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 240: 1299535329.M902424P61136.gromit.example.com,S=12843,W=13075 (uid 30 -> 250) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 266: 1299547358.M587728P69303.gromit.example.com,S=13637,W=13772 (uid 108 -> 276) Mar 8 06:20:10 gromit dovecot[59204]: imap(pid 68865 user user34): Warning: /Volumes/Mail/user34/dovecot-uidlist: Duplicate file entry at line 275: 1299558462.M498819P35210.gromit.example.com,S=15495,W=15663 (uid 160 -> 285) Mar 8 06:20:11 gromit dovecot[59204]: imap(pid 68864 user user36): Warning: /Volumes/Mail/user36/dovecot-uidlist: Duplicate file entry at line 281: 1299535339.M353973P61136.gromit.example.com,S=4498,W=4581 (uid 360 -> 604) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 105: 1299547390.M813768P69393.gromit.example.com,S=4773,W=4861 (uid 22 -> 164) Mar 8 06:21:00 gromit dovecot[59204]: imap(pid 68864 user user239): Warning: /Volumes/Mail/user239/dovecot-uidlist: Duplicate file entry at line 106: 1299570075.M267312P49194.gromit.example.com,S=8041,W=8181 (uid 115 -> 165) Mar 8 06:28:24 gromit dovecot[59204]: imap(pid 69295 user user274): Warning: /Volumes/Mail/user274/dovecot-uidlist: Duplicate file entry at line 2020: 1299548064.M880781P67832.gromit.example.com,S=4976,W=5076 (uid 247 -> 2500) Mar 8 06:29:23 gromit dovecot[59204]: imap(pid 68973 user user115): Warning: /Volumes/Mail/user115/dovecot-uidlist: Duplicate file entry at line 526: 1299537039.M676050P61136.gromit.example.com,S=2485,W=2534 (uid 8 -> 1082) Mar 8 06:31:37 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: /Volumes/Mail/user114/dovecot-uidlist: Duplicate file entry at line 667: 1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707 (uid 229 -> 780) - retrying by re-reading from beginning Mar 8 06:32:14 gromit dovecot[59204]: imap(pid 68971 user user114): Warning: Maildir /Volumes/Mail/user114: Expunged message reappeared, giving a new UID (old uid=229, file=1299564058.M124508P40871.gromit.example.com,S=1187940,W=1207707:2,S) Mar 8 06:39:22 gromit dovecot[59204]: imap(pid 68911 user user105): Warning: Maildir /Volumes/Mail/user105: Synchronization took 155 seconds (0 new msgs, 0 flag change attempts, 585 expunge attempts) Is there anything I need to reconfigure to prevent these? Thanks.

2 11

[Dovecot] rkhunter alert dovecot using port 1984
by Mark Adams 16 Mar '11

16 Mar '11

Hi all, Debian Lenny, dovecot 1.0.15 My rkhunter script has picked up dovecot using port 1984 temporarily. When I run it now however, it is gone. Warning: Network TCP port 1984 is being used by /usr/lib/dovecot/imap. Possible rootkit: Fuckit Rootkit Use the 'lsof -i' or 'netstat -an' command to check this. Does dovecot use this port for any reason? anyone seen this before? Regards, Mark

3 4

[Dovecot] Dict spams in my Log-File
by Jan Phillip Greimann 16 Mar '11

16 Mar '11

Hi there, i use dovecot 2.0.9 with mysql as backend. I've also configured dict to mysql, but after some time dict spams in my log-file, i don't know why. Hope someone can help me with this. Greetings from Germany Jan P. Greimann ==== mail.log ==== [...] Mar 16 10:29:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:31:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:33:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:35:45 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:37:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:39:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:41:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:43:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:45:36 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:47:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:49:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:51:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) Mar 16 10:53:35 s16 dovecot: dict: mysql: Connected to localhost (mail_backend) [...] ==== dovecot.conf ==== listen = * dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } !include conf.d/*.conf ==== conf.d/90-quota.conf ==== plugin { quota = dict:User quota::proxy::quota }

2 1

[Dovecot] Error: write(auth socket) failed: Broken pipe
by Andre Nathan 16 Mar '11

16 Mar '11

Hello >From time to time I'm seeing errors like this in my logs: Mar 16 10:45:55 box5 dovecot: lmtp(5438): Error: write(auth socket) failed: Broken pipe This causes delivery from postfix to fail until I restart dovecot. There doesn't seem to be any other messages in the logs related to this error. Has anyone ever seen this error? Thanks Andre

3 2

[Dovecot] 2.0.7 - missing SORT/THREAD
by Rick Romero 15 Mar '11

15 Mar '11

Obviously I did something wrong, but I don't have SORT and THREAD Capabilities built into my 2.0.7 server (OpenSolaris 5.11 snv_134 i86pc i386 i86xpv Solaris) What do I need to do? * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] VFEmail.net ready. 1 CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 1 OK Capability completed. # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc auth_mechanisms = plain login digest-md5 cram-md5 auth_username_translation = %@ auth_verbose = yes base_dir = /opt/csw/dovecot/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 login_greeting = VFEmail.net ready. mail_fsync = never mail_plugins = " quota zlib" mail_privileged_group = mail namespace { inbox = yes location = prefix = separator = . } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } passdb { driver = vpopmail } plugin { quota = maildir } protocols = imap pop3 service anvil { client_limit = 2000 } service auth { unix_listener auth-master { mode = 0600 user = vpopmail } user = vpopmail } service imap-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service imap-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-imap.sh user = vpopmail } service imap { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap imap-postlogin } service pop-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh user = vpopmail } service pop3-login { client_limit = 384 process_limit = 512 process_min_avail = 25 service_count = 0 vsz_limit = 256 B } service pop3 { executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/pop3 pop-postlogin } shutdown_clients = no ssl_cert = </etc/ssl/ssl.pem ssl_key = </etc/ssl/ssl.key userdb { driver = vpopmail } verbose_proctitle = yes protocol imap { auth_socket_path = /opt/csw/dovecot/auth-master imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = " quota zlib imap_zlib quota imap_quota" } protocol pop3 { auth_socket_path = /opt/csw/dovecot/auth-master mail_max_userip_connections = 25 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } End of Configure: Install prefix . : /usr/local File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow pam checkpassword vpopmail : -bsdauth -sia -ldap -sql userdbs ........ : static prefetch passwd passwd-file checkpassword vpopmail : -ldap -sql -nss SQL drivers .... : : -pgsql -mysql -sqlite

2 2

[Dovecot] Duplicate suppression
by Thiago Henrique 15 Mar '11

15 Mar '11

Hello, In a Dovecot 2.0.6 server I have an account x@domain and an alias y@domain -> x@domain. When I send an email to x@domain with carbon copy to y@domain, X receives two messages on mailbox. Dovecot2 has any feature of duplicate suppression ? Thanks, Thiago Henrique

4 3

[Dovecot] LDA, postfix and multiple virtual users : postfix is still the MDA
by Antoine Souques 14 Mar '11

14 Mar '11

Hi, I have some trouble to use dovecot as MDA. I followed the instructions in http://wiki.dovecot.org/LDA and http://wiki.dovecot.org/LDA/Postfix I have multiple virtual users, stored in a LDAP server, and it look like postfix is still delivering the mails directly to the maildirs. Dovecot version : 1.2.15 (using the 1:1.2.15-4 squeeze packets) postfix version : 2.7.1 (using the 2.7.1-1 squeeze packet) dovecot configuration (dovecot -n): # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 4 login_max_processes_count: 512 login_max_connections: 1024 mail_privileged_group: mail mail_location: maildir:/var/mail/%u mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_capability(default): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(imap): IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ CHILDREN NAMESPACE LOGIN-REFERRAL imap_capability(pop3): lda: postmaster_address: postmaster(a)test.ecp.fr hostname: squeeze.test.ecp.fr sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: mail postfix configuration (postconf -n) append_dot_mydomain = no biff = no bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib/postfix mail_spool_directory = /var/mail/ message_size_limit = 10240000 myhostname = squeeze.test.ecp.fr mynetworks = 138.195.32.0/23, 127.0.0.1 recipient_delimiter = + setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, reject smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_sender_restrictions = reject_unknown_sender_domain, permit virtual_alias_maps = ldap:ldapxforward,ldap:ldapforward,ldap:ldapvalias virtual_mailbox_domains = test.ecp.fr virtual_mailbox_maps = ldap:ldapcanonical virtual_transport = dovecot /etc/postfix/master.cf dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} Sample from the logs Mar 14 13:22:59 squeeze postfix/pickup[17376]: A93DE49A55: uid=0 from=<root> Mar 14 13:22:59 squeeze postfix/cleanup[17543]: A93DE49A55: message-id=<20110314122259.A93DE49A55(a)squeeze.test.ecp.fr> Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: from=<root(a)squeeze.test.ecp.fr>, size=381, nrcpt=1 (queue active) Mar 14 13:22:59 squeeze postfix/local[17547]: A93DE49A55: to=<etutest(a)squeeze.test.ecp.fr>, orig_to=<etudiant.test(a)test.ecp.fr>, relay=local, delay=0.07, delays=0.04/0.01/0/0.02, dsn=2.0.0, status=sent (delivered to maildir) Mar 14 13:22:59 squeeze postfix/qmgr[16038]: A93DE49A55: removed During the mail delivery, I doesn't have any log from dovecot, and i didn't have set the bit_suid/sudo, so the deliver process can't deliver the mail to the maildir. Have someone any idea about what i did wrong ? -- Antoine SOouques

4 5

[Dovecot] Problems with dovecot 2.0, sieve and mdbox
by Patrick Westenberg 13 Mar '11

13 Mar '11

Hi guys, I tried to use a global sieve skript to sort spam mails into a subfolder of INBOX. I´m using mdbox. The log shows that the script is called and executed but it is not able to find or create the mailbox: Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/Spamverdacht Sep 4 15:18:55 mercury dovecot: lmtp(6237, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Permission lookup failed from /var/mail/steulerfliesen.de/mail/mdbox/mailboxes/INBOX.Spamverdacht Sep 4 15:22:37 mercury dovecot: lmtp(6261, mail(a)steulerfliesen.de) Debug: Namespace : Using permissions from /var/mail/steulerfliesen.de/mail/mdbox: mode=0700 gid=-1 My skript looks like this: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spamverdacht"; } I also tried: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "INBOX.Spamverdacht"; } How can I fix this? Regards Patrick

5 7

[Dovecot] Patch proposition to implement a new workaround: tb-lsub-flags
by Bruno Tréguier 12 Mar '11

12 Mar '11

Hi again Timo, As agreed earlier tonight, you'll find as attachments 4 diffs (diff -u) implementing the new workaround "tb-lsub-flags". The 4 impacted files are: ./src/imap/imap-settings.h ./src/imap/imap-settings.c ./src/imap/cmd-list.c ./src/config/all-settings.c Here is the proposed description for the dovecot.conf file: # tb-lsub-flags: # Usually IMAP servers don't bother returning the flags attached # to each mailbox, but Thunderbird presently needs them in order # to correctly process the "folders of folders" case. Please tell me if the patch format is suitable or if you expect something else. Best regards and thanks again for your responsiveness. Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

2 2

[Dovecot] Filtering attachements ?
by Frank Bonnet 12 Mar '11

12 Mar '11

Hello again Is there a way to filter some attachments with dovecot ? I don't want my users to keep video files in the IMAP folders anymore ( disk is almost full ) . Thank you.

4 3

[Dovecot] SASL abort causes 5s delay, triggered by UW libc-client
by Arne Nordmark 12 Mar '11

12 Mar '11

Since upgrding to Debian squeeze, the web mail system (Imp4/Horde3) suffers delays every time a new IMAP connection is needed. Tracing the authentication conversation, we find: 08:45:55.270609: 00000000 AUTHENTICATE GSSAPI 08:45:55.271277: + 08:45:55.271761: * 08:45:55.271782: 00000000 BAD Authentication aborted by client. 08:45:55.271815: 00000001 AUTHENTICATE PLAIN 08:46:00.271008: + and the PLAIN login succeeds. Imp4 is using php5-imap which is using libc-client, and the delays makes the interface so slow to hardly usable. For reasons best known to its authors, libc-client first initiates GSSAPI authentication, then checks if there is a Kerberos ticket it can use (there is none), then realizes its mistake and aborts SASL, and tries PLAIN. At this point dovecot delays for 5000ms. While not defending libs-client's odd behaviour of not checking for tickets first, it has probably done so for a long time, and dovecot from Debian lenny does not delay at this point. I am lost as how to get around this without changing the code. The "nodelay" parameter can not be used with PAM passdb, according to the documentation. I would be inclined to call always call client_auth_failed with nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case. Arne Nordmark Config: # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap listen: *, [::] ssl_ca_file: /etc/ssl/certs/mechca_cert.pem ssl_cert_file: /etc/ssl/certs/ano4/ano4_crt.pem ssl_key_file: /etc/ssl/certs/ano4/ano4_key.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/var/mail/maildir/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: postmaster(a)ano.mech.kth.se mail_plugins: sieve auth default: mechanisms: plain gssapi failure_delay: 0 debug: yes passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: root plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve

2 1

[Dovecot] Dovecot 2.X, built from source, no extensions?
by Enright, Mike 10 Mar '11

10 Mar '11

Greetings list. Pardon the ignorance. I am working on CentOS 5.2. Unfortunately the repo version of Dovecot is 1.0.X. This works fine mind you but it doesn't have ORDEREDSUBJECT Threading support, which I need. I downloaded 2.0.11 and built from source, but now I don't see any Threading support, not even REFERENCES. I looked to see if I was missing a ./configure option but if I am, it has eluded me. Any guidance would be appreciated. # dovecot -n # 2.0.11: /usr/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.18.el5PAE i686 CentOS release 5.2 (Final) ext3 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/var/vmail/%d/%n/Maildir passdb { args = /usr/etc/dovecot/dovecot-mysql.conf driver = sql } plugin/quota = maildir:storage=10240:messages=1000 protocols = imap service auth { unix_listener /var/run/dovecot/auth-master { mode = 0600 user = vmail } user = root } service imap-login { client_limit = 256 process_min_avail = 10 service_count = 0 vsz_limit = 128 M } ssl = no userdb { args = uid=6000 gid=6000 home=/var/vmail/%d/%n allow_any_users=yes driver = static } # telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN 1 OK Capability completed. Cheers Mike Enright Senior Software Engineer Office: +1 239-425-9161 (Florida) Fax: +1 239-425-6845 [cid:C388744A-AA0D-4A0C-A96D-3038C56EC9E5] Interop Technologies 13500 Powers Court Fort Myers, FL 33912 www.interoptechnologies.com<http://www.interoptechnologies.com/>

3 3

[Dovecot] permission recomendation for dovecot configuration files and binaries
by Arkadiusz Miskiewicz 10 Mar '11

10 Mar '11

I'm trying to figure out which permissions will be the best to handle most of tasks (for use in rpm package) for configuration files. Basically /etc/dovecot/ dir /etc/dovecot/* files /etc/dovecot/conf.d/ dir /etc/dovecot/conf.d/files dovecot binaries, deliver mainly For example deliver needs to read configuration files and needs to write into destination. Doesn't seem to be sane to allow MTA user read dovecot configs but that is requires for deliver to work etc. Are there any sane/tested recommendations that would fit most situations (remember, that's going to be rpm package default config) ? -- Arkadiusz Miśkiewicz PLD/Linux Team arekm / maven.pl http://ftp.pld-linux.org/

1 0

[Dovecot] Dovecot 2.0 - size of the mailbox
by Cristiane França 10 Mar '11

10 Mar '11

Hi, The Dovecot 2.0 has some limit size for the mailbox? The server is 64 bits and would like to have mailbox with bigger size that 2 GB.

2 1

Re: [Dovecot] POP3 error
by Thierry de Montaudry 10 Mar '11

10 Mar '11

On 08 Mar 2011, at 13:24, Chris Wilson wrote: > Hi Thierry, > > On Tue, 8 Mar 2011, Thierry de Montaudry wrote: >> On 07 Mar 2011, at 19:15, Timo Sirainen wrote: >>> On Mon, 2011-03-07 at 19:03 +0200, Thierry de Montaudry wrote: >>>>>>>>> Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable >>>>> .. >>>> As it is happening at least once a day, is there anything I can do to >>>> trace it? and whatever I'll do, will it slow down those machines? >>> >>> Set verbose_proctitle=yes (won't slow down) and get list of all >>> Dovecot processes when it happens. And check how much user and system >>> CPU it's using and what the load is. >> >> Got the same problem this morning, here is the CPU usage and ps aux for >> dovecot. plus the different error I could pick up in the log, most of >> them are repeated a couple of times. >> >> I suspect it a problem with system resources, but can find any message >> to tell me what. Mail are stored on 17 NFS servers (CentOS), plus 3 >> servers for indexes only. >> >> CPU load is very high, but mainly from httpd running our webmail >> interface, which uses the local imap server. > [...] >> top - 11:10:14 up 14 days, 12:04, 2 users, load average: 55.04, 29.13, 14.55 >> Tasks: 474 total, 60 running, 414 sleeping, 0 stopped, 0 zombie >> Cpu(s): 99.6%us, 0.3%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st >> Mem: 16439812k total, 16353268k used, 86544k free, 33268k buffers >> Swap: 4192956k total, 140k used, 4192816k free, 8228744k cached > > You're lucky this server is still alive and that you could even run top > and ps on it. > > There's nothing to debug in dovecot here. Your server is overloaded by > about 55 times. Buy 55 times as many servers or do something about your > webmail interface (maybe a separate webmail cluster). > > Cheers, Chris. > As you can see the numbers (55.04, 29.13, 14.55) the load was busy getting higher when I took this snapshot and this was not a normal situation. Usually this machine's load is only between 1 and 4, which is quite ok for a quad core. It only happens when dovecot start generating errors, and pop3, imap and http get stuck. It went up to 200, and I was still able to stop web and mail daemons, then restart them, and everything was back to normal.

7 20

[Dovecot] Dovecot + Sieve does not work
by Jimmi 10 Mar '11

10 Mar '11

Hi, On my Debian Squeeze server I installed Dovecot 1.2.16 from http://xi.rename-it.nl/debian/ and configured as follow: # dovecot -n # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-110209 i686 Debian 6.0 ext3 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap sieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: postfix mail_location: maildir:/home/virtual/%d/%n mbox_write_locks: fcntl dotlock imap_client_workarounds: outlook-idle lda: postmaster_address: postmaster(a)7girello.net mail_plugins: sieve log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: virtual group: virtual plugin: sieve: /home/virtual/%d/%n/.dovecot.sieve sieve_dir: /home/virtual/%d/%n/sieve/ After that in Roundcube 0.5.1 downloaded from http://roundcube.net/ I enabled the managesieve plugin but when I go to the filter page RC says that he cannot connect the server. I then realized that the port 4190 is not open and I cannot understand why. In my dovecot.conf I have the section: protocol managesieve { # Specify an alternative address:port the daemon must listen on # (default: *:2000) listen = localhost:4190 } that is not shown in the output of 'dovecot -n'. Did I missed something? Thanks in advance -- jimmi

3 6

[Dovecot] Dovecot LDA and Postfix/local for local users.
by iti＠promax.media.pl 10 Mar '11

10 Mar '11

Hello, I would like to configure dovecot lda for local users. My dovecot vesion is 1.2.15. Dovecot documentation for System users says that only thing I should add to main.cf is: mailbox_command = /usr/local/libexec/dovecot/deliver (path to deliver) After that should I commented postfix/local process from master cf ? regards, Jarek

3 3

[Dovecot] Fatal: postmaster_address setting not given
by Richard Edmonds 09 Mar '11

09 Mar '11

Hi, I'm getting: "Fatal: postmaster_address setting not given" errors in my log file dovecot ver: 1.2.12 Recently I tried to follow: http://postfixmail.com/blog/index.php/postfixadmin-on-ubuntu-9-10/ on ubuntu 10.10 (which works fine on ubunto 9.10) I note that in 10.10 their is no dovecot-postfix.conf so I made the appropriate changes to dovecot.conf instead and changed master.cf dovecot transport line since I saw someone recently had the same problem: dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? vecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} I still have that problem however. Authentication seems ok but delivery fails. Any possibility of help on this one? </body> </html>

2 2

[Dovecot] ID command bug & patch
by Mike Abbott 09 Mar '11

09 Mar '11

When I set imap_id_log=* in dovecot-2.0.11 and a client sends, say, tag id ("a" "b" "c" "d") then dovecot logs: ID sent: a=b, b=c, c=d The following patch makes it log instead: ID sent: a=b, c=d --- a/dovecot/src/lib-imap/imap-id.c (revision 113366) +++ b/dovecot/src/lib-imap/imap-id.c (working copy) @@ -164,6 +164,7 @@ str_append_c(reply, '='); str_append(reply, str_sanitize(value, 80)); } + args++; } return str_len(reply) == 0 ? NULL : str_c(reply); }

2 1

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 09 Mar '11

09 Mar '11

Hello, > You should read Wietses post again. > > He told you to not rely on not documented settings since they can > silently disappear. > > With postfix you can rely on the documented behaviour. So it is > natural that there will be no warning for officially unsupported > features. > yes, i know that. nobody should use undocumented features. auth-service on tcp-socket was added by timo after my Suggestion last november. so when asking this on postfix's-side iam not really interested in current docs but wanted to suggest the update on implemention and docs to get it as official feature for next releases. as an user all i can do is telling some facts and ask... Hajo

2 1

[Dovecot] compressed mailboxes ?
by Frank Bonnet 09 Mar '11

09 Mar '11

Hello Is it possible to use compressed mailboxes ( MBOX format ) with dovecot using a plugin ? Thanks

3 4

Re: [Dovecot] compressed mailboxes ?
by Stan Hoeppner 09 Mar '11

09 Mar '11

Frank Bonnet put forth on 3/8/2011 2:07 PM: > disk space I need to gain a bit space > before migrate to the new server After you shut down the Dovecot daemons in preparation for copying the mailbox files to the new sever, simply delete all the index directories. That will free up a huge amount of space. The indexes will be automatically rebuilt when users log into the new server. -- Stan > Le 08/03/2011 17:39, Stan Hoeppner a écrit : >> Frank Bonnet put forth on 3/8/2011 9:54 AM: >>> Hello >>> >>> Is it possible to use compressed mailboxes ( MBOX format ) >>> with dovecot using a plugin ? >> >> What is your motivation? >>

2 1

[Dovecot] Interesting tool for debugging IMAP sessions
by Charles Marcus 08 Mar '11

08 Mar '11

For anyone who is interested: http://www.aboutmyip.com/AboutMyXApp/ImapProxy.jsp They also have one for troubleshooting smtp (smtpProxy)... -- Best regards, Charles

1 0

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, sorry, iam digest reader, always creating a new message... > > > there are some warnings in log: > > > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should > > > be a > > > socket pathname" > > > ( Datei src/xsasl/xsasl_dovecot_server.c ) > > > > file xsasl_dovecot_server.c is in postfix sources but was written by > > you, > > Timo > The initial version, yes, but it has been heavily modified since. I > never added that warning. > > Should there also made an update to support auth on tcp-socket without > > warnings from postfix side? > Looks like someone already added the inet: support, so I guess it should > work. You could ask on Postfix list to get the warning removed.. wietse dont wants to change anything until it is not documented http://archives.neohapsis.com/archives/postfix/2011-03/0356.html may be the developers should talk directly to each other, i dont like to get forwarded to each other list to ask for reliability of features... Thanks, Hajo

2 1

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Stan Hoeppner 08 Mar '11

08 Mar '11

Knute Johnson put forth on 3/5/2011 8:36 PM: > On 03/05/2011 12:24 PM, Stan Hoeppner wrote: >> Stan Hoeppner put forth on 3/5/2011 1:34 PM: >> Also, did you delete the sync copies and the GLODA sqlite index file >> from the user profile? IIRC, TB will still read the files if they >> exist, even after disabling their parent function. TB just won't write >> to them any more. Yes, it's stupid, I agree. But I recall running into >> this problem and needing to delete all the cached mbox files and the >> sqlite db to get everything working correctly. >> >> Specifically answering your "change" question, the one big difference >> between TB 3 and TB 2 is GLODA, and there have been a large number of >> problems with it. I noticed some of them on day one and disabled it. >> >> I use both TB and RoundCube. With both open, I can delete a group of >> messages in RC in an IMAP subfolder and the messages automatically >> disappear from my TB view in about 5 seconds, and remain gone. I just >> performed a test deleting a group of 8 messages via RC in an IMAP >> subfolder containing list mail from linux-ide. It works fine the other >> way around as well, though I must manually refresh RC as it's a >> stateless web app. I just deleted 6 messages in TB, and simply clicking >> the folder in RC showed the messages were gone. Deleting a message via >> RC in INBOX required punching the Get Mail button in TB to reveal the >> message had been deleted. Not sure why the INBOX case required a manual >> refresh. The messages are all is still gone, after closing and opening >> TB again. >> >> I don't recall ever having the problem you describe, using TB 3.0 >> through TB 3.1.9, and Dovecot 1.0.15 through 1.2.15. My point is that >> TB and Dovecot can be configured properly to eliminate this problem >> you're having. > > Thanks very much for this post as I have been having the same problems > with TB and my phone. I did the things you posted but when I delete a > message on my phone it doesn't always get deleted in TB. Sometimes it > disappears right a way and other times it never goes but it is better > than before when it would never delete on TB. If you're not doing local sync with TB and you have GLODA disabled, TB is going to show you exactly what's in your Dovecot mailbox. If the message doesn't disappear from your TB view sometime after deleting it on your smartphone, then I'd say it's very likely that Dovecot didn't receive the delete and/or expunge command from the phone. Check your Dovecot logs and see what the phone is actually sending, or not sending. Both of you mentioned problems specifically WRT smartphones. It's likely the IMAP implementation in these phones is simply buggy, or your network coverage is spotty. I don't use a smartphone so I can't really say. What smartphone are you each using? -- Stan

10 17

[Dovecot] logging sent messages
by Hajo Locke 08 Mar '11

08 Mar '11

Hello, i use plugin mail_log to see more activities like copy/delete/expunge caused by imap-users. unfortunately there is no log-line when a mail was sent and the copy was uploaded to "Sent-Folder". Isn't it a common imap-copy operation requested by client? How to log this? Thanks, Hajo

2 1

[Dovecot] Curious problem: Plaintext authentication disallowed on non-secure (SSL/TLS) [read: all] connections.
by Andrew Lewis 08 Mar '11

08 Mar '11

Hello all, I've set up a new instance of dovecot 2.0.9 to use as a POP3/IMAP proxy. On trying to login I am told '-ERR Plaintext authentication disallowed on non-secure (SSL/TLS) connections'. I have set 'disable_plaintext_auth = no' (see output of doveconf attached). More curious still is that *this happens for SSL connections too*. Something seems very wrong here. Yelp? -- Andrew Lewis <andrew(a)sybaweb.com> ______________________________________ < Uncompensated overtime? Just Say No. > -------------------------------------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || ||

1 1

[Dovecot] POP3 error
by Thierry de Montaudry 08 Mar '11

08 Mar '11

Hi, Since we upgraded to 2.0.9 (from 1.10 stock CentOS release), we are getting some errors with pop3. When the machines get busy, now and then it start with the following: > Mar 7 11:19:51 xxx dovecot: pop3-login: Error: net_connect_unix(pop3) failed: Resource temporarily unavailable And it generates hundreds of those before the machines dies, with the web server getting stuck as well on imap sessions, even though there is no imap error messages. I tried to lookup in the source where this is generated, but couldn't find it. Is it some resource limit on the machine? Please see bellow the dovecot -n output. Regards, Thierry # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) nfs auth_cache_negative_ttl = 0 auth_cache_size = 2 M auth_cache_ttl = 10 mins auth_mechanisms = plain login dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 25 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = vmail mail_fsync = always mail_gid = 25 mail_location = maildir:/var/virtual/%d/%1n/%2n/%n:INDEX=/var/indexes/%d/%1n/%2n/%n mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota expire mail_uid = 25 mbox_write_locks = fcntl mmap_disable = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash expire2 = Trash/* expire3 = Spam expire4 = Trash/* expire_dict = proxy::expire quota = dict:User quota::proxy::quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+100M sieve_global_path = /var/indexes/dovecot-default.sieve } postmaster_address = postmaster(a)XXXXXX.YY protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { address = 127.0.0.1 port = 143 } process_min_avail = 2 service_count = 0 vsz_limit = 256 M } service imap { process_limit = 768 } service pop3-login { inet_listener pop3 { address = 0.0.0.0 port = 110 } process_limit = 200 process_min_avail = 2 service_count = 0 } service pop3 { process_limit = 256 } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = uid=vmail gid=vmail driver = static } protocol lmtp { mail_plugins = quota expire sieve } protocol lda { mail_plugins = quota expire sieve } protocol imap { mail_plugins = quota expire imap_quota } protocol pop3 { mail_max_userip_connections = 2 pop3_fast_size_lookups = yes }

2 6

[Dovecot] Unable to view all folders
by Joy 08 Mar '11

08 Mar '11

Dear All, I have upgraded dovecot to v2.0.11 and now having one issue, i am unable to see all my folders only Inbox and Trash are visible while autocreate creating 5 more folders. What could be the issue checked via telnet as well. Thanks

1 1

[Dovecot] upgrading from old version 1.1.2 to version 2.0.11
by dhottinger＠harrisonburg.k12.va.us 07 Mar '11

07 Mar '11

Im getting ready to upgrade our production server from version 1.1.2 to version 2.0.11. Ive read through the upgrade info. Is there any other gotcha's I should be aware of? thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

4 4

[Dovecot] STARTTLS MITM in Postfix
by Timo Sirainen 07 Mar '11

07 Mar '11

http://marc.info/?l=postfix-users&m=129952854117623&w=2 Dovecot doesn't have this bug. It discards all buffered data when STARTTLS command runs. (Why do I think I've heard about this bug before? Or at least the same type of way to exploit it? Maybe there was another similarly exploitable bug.)

1 1

[Dovecot] tls bug
by Robert Schetterer 07 Mar '11

07 Mar '11

Hi Timo is dovecot affected in this ? http://www.kb.cert.org/vuls/id/555316 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 2

[Dovecot] Fwd: STARTTLS bug - background story
by Robert Schetterer 07 Mar '11

07 Mar '11

-------- Original-Nachricht -------- Betreff: STARTTLS bug - background story Datum: Mon, 7 Mar 2011 15:08:09 -0500 (EST) Von: Wietse Venema <wietse(a)porcupine.org> An: Postfix users <postfix-users(a)postfix.org> CERT/CC announces a flaw today in multiple STARTTLS implementations. This problem was silently fixed in Postfix 2.8 and 2.9. Updates for Postfix 2.[4-7] are made available via the usual channels. Wietse Plaintext injection in multiple implementations of STARTTLS =========================================================== This is a writeup about a flaw that I found recently, and that existed in multiple implementations of SMTP (Simple Mail Transfer Protocol) over TLS (Transport Layer Security) including my Postfix open source mailserver. I give an overview of the problem and its impact, technical background, how to find out if a server is affected, fixes, and draw lessons about where we can expect similar problems now or in the future. A time line is at the end. On-line information is/will be available at: http://www.kb.cert.org/vuls/id/555316 http://www.postfix.org/CVE-2011-0411.html Problem overview and impact =========================== The TLS protocol encrypts communication and protects it against modification by other parties. This protection exists only if a) software is free of flaws, and b) clients verify the server's TLS certificate, so that there can be no "man in the middle" (servers usually don't verify client certificates). The problem discussed in this writeup is caused by a software flaw. The flaw allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase (more on that below), such that the server will execute those commands during the SMTP-over-TLS protocol phase when all communication is supposed to be protected. The injected commands could be used to steal the victim's email or SASL (Simple Authentication and Security Layer) username and password. This is not as big a problem as it may appear to be. The reason is that many SMTP client applications don't verify server TLS certificates. These SMTP clients are always vulnerable to command injection and other attacks. Their TLS sessions are only encrypted but not protected. A similar plaintext injection flaw may exist in the way SMTP clients handle SMTP-over-TLS server responses, but its impact is less interesting than the server-side flaw. SMTP is not the only protocol with a mid-session switch from plaintext to TLS. Other examples are POP3, IMAP, NNTP and FTP. Implementations of these protocols may be affected by the same flaw as discussed here. Technical background: SMTP over TLS =================================== For a precise description of SMTP over TLS, see RFC 3207, on-line at http://www.ietf.org/rfc/rfc3207.txt. SMTP over TLS uses the same TLS protocol that is also used to encrypt traffic between web clients and web servers. But, there is a subtle difference in the way TLS is used, and that makes this flaw possible. SMTP sessions over TLS begin with an SMTP protocol handshake in plaintext. Plaintext means no encryption (thus no privacy), and no protection against modification (no integrity). The plaintext handshake is needed because SMTP has always worked this way. Simply skipping this plaintext phase would seriously break internet email. During the plaintext handshake phase, the SMTP server announces whether it is willing to use TLS. If both SMTP client and server support TLS, the client sends a "STARTTLS" request to turn on TLS. Once TLS is turned on, all further traffic is encrypted and protected from modification. The client and server repeat the entire SMTP protocol handshake, and the client starts sending mail. Demonstration ============= The problem is easy to demonstrate with a one-line change to the OpenSSL s_client command source code (I would prefer scripting, but having to install Perl CPAN modules and all their dependencies is more work than downloading a .tar.gz file from openssl.org, adding eight characters to one line, and doing "./config; make"). (The OpenSSL s_client command can make a connection to servers that support straight TLS, SMTP over TLS, or a handful other protocols over TLS. The demonstration here focuses on SMTP over TLS only.) The demonstration with SMTP over TLS involves a one-line change in the OpenSSL s_client source code (with OpenSSL 1.0.0, at line 1129 of file apps/s_client.c). Old: BIO_printf(sbio,"STARTTLS\r\n"); New: BIO_printf(sbio,"STARTTLS\r\nRSET\r\n"); With this change, the s_client command sends the plaintext STARTTLS command ("let's turn on TLS") immediately followed by an RSET command (a relatively harmless protocol "reset"). Both commands are sent as plaintext in the same TCP/IP packet, and arrive together at the server. The "\r\n" are the carriage-return and newline characters; these are necessary to terminate an SMTP command. When an SMTP server has the plaintext injection flaw, it reads the STARTTLS command first, switches to SMTP-over-TLS mode, and only then the server reads the RSET command. Note, the RSET command was transmitted during the plaintext SMTP phase when there is no protection, but the server reads the command as if it was received over the TLS-protected channel. Thus, when the SMTP server has the flaw, the s_client command output will show two "250" SMTP server responses instead of one. The first "250" response is normal, and is present even when the server is not flawed. The second "250" response is for the RSET command, and indicates that the SMTP server has the plaintext injection flaw. $ apps/openssl s_client -quiet -starttls smtp -connect server:port [some server TLS certificate details omitted] 250 some text here <=== Normal response, also with "good" server. 250 more text here <=== RSET response, only with flawed server. How would an attacker exploit this? It would play man-in-the-middle on the connection between SMTP client and server, perhaps using ARP spoofing at a public WIFI access point. Instead of adding a harmless RSET command, it could steal email or authentication credentials. Anatomy of the flaw =================== The flaw is made possible by two ingredients: I already discussed the switch mid-session from plaintext SMTP to SMTP over TLS. This allows an attacker to piggy-back commands onto the SMTP client's plaintext STARTTLS ("let's turn on TLS") request, such that the server may read those commands after the switch to TLS is completed, as if the commands arrived through the TLS-encrypted session. The second ingredient is a layered software architecture through which those piggy-backed commands bubble up from the network to the application. In the case of SMTP, we have the following major layers before and after the switch to TLS: Before switch to TLS After switch to TLS SMTP protocol engine SMTP protocol engine || || TCP/IP protocol engine TLS protocol engine || || Internet TCP/IP protocol engine || Internet Each layer hides details of what is happening inside. Layering makes it easy to switch from plaintext to TLS, with minimal changes to existing code. To insert the TLS layer between the SMTP engine and the O/S TCP/IP engine, simply adjust the plumbing between the layers, and make all information flow through the TLS layer. It's all about the plumbing =========================== Whether a program may have the plaintext injection flaw depends on how it adjusts the plumbing as it inserts the TLS protocol layer in-between the SMTP protocol layer and the O/S TCP/IP protocol layer. I illustrate this with examples from three open source MTAs: Postfix, Sendmail and Exim. The diagram below zooms in on the plumbing between the SMTP and TLS layers, and shows how different MTAs handle the switch from plaintext to TLS. It is best viewed with a fixed-width font (for example, from the Courier family). Postfix MTA Sendmail MTA Exim MTA before/after before/after before/after switch to TLS switch to TLS switch to TLS SMTP SMTP SMTP SMTP SMTP SMTP <= SMTP layer || || || || || || stream stream stream stream' || || buffers buffers buffers buffers' rw r'w' <= stream layer rw r'w' rw r'w' || || || || || || || || || TLS || TLS || TLS <= TLS layer || || || || || || O/S O/S O/S O/S O/S O/S <= TCP/IP layer As shown in the diagram, both Postfix and Sendmail use an application- level stream abstraction, where each stream has properties such as read/write buffers, read/write functions (indicated with rw), and other properties that are omitted for brevity. When Postfix switches to SMTP over TLS, it replaces the plaintext read/write functions (rw) with the TLS read/write functions (r'w'). Postfix does not modify any of the other stream properties including the read/write buffers. A patch for qmail that introduces TLS support uses the same approach. This approach of replacing only the stream read/write functions, but not the buffers or other stream properties, can introduce the plaintext injection flaw. When Sendmail switches to SMTP over TLS, it replaces the entire stream, along with its read/write buffers and read/write functions. Exim. on the other hand, does not have a stream abstraction like Postfix, Sendmail or qmail. Instead of replacing streams or stream properties, Exim replaces plaintext read/write functions with TLS read/write functions. Because of their program structure, Sendmail and Exim didn't suffer from the plaintext injection flaw. Switching world views ===================== When the switch from plaintext to TLS mode is made, all layers above the TLS layer need to purge all information that they have received through the plaintext session. This "world view switch" needs to be implemented consistently. Otherwise, information that was sent as unprotected plaintext may slip through the cracks. In the case of Postfix and other affected MTAs, this "world view switch" was incomplete. Postfix it did not account for information that lingered in stream buffers at the boundary between two layers. This allowed an attacker to piggy-back commands onto the plaintext "let's turn on TLS" request, such that the commands could be read after the switch to TLS was completed, as if they had arrived through the TLS-encrypted session. Fixing the problem ================== There are two solutions to address the flaw, and both solutions can be used together. - Report an error when unexpected plaintext is received after the STARTTLS command. As documented in RFC 3207, STARTTLS must be the last command in a pipelined group. If plaintext commands are received after STARTTLS, then that is a protocol violation. This measure can also be implemented outside the MTA, for example in a protocol-aware firewall. - If a program uses the same input buffer before and after the switch to TLS, it should discard the contents of the input buffer, just like it discards SMTP protocol information that it received during the plaintext protocol phase. Conclusion ========== This plaintext injection problem is likely to recur when some development moves the plaintext-to-ciphertext switch outside the application: for example, into the kernel, into the local hardware, into a proxy, or into other infrastructure. This encourages applications to use the same application-level streams and buffers and read/write functions before and after the switch to ciphertext. When this migration happens, plaintext injection becomes once more a possibility. Postfix did not reject plaintext commands that were piggy-backed onto the plaintext "let's turn on TLS" request. This reflects what once was the primary mission of Postfix: to deliver mail, not to force other systems to implement all the Internet RFCs correctly. Nowadays, strict protocol compliance is becoming a requirement for senders to get their email delivered. As this episode shows, stricter protocol enforcement by receivers can bring security benefits, besides blocking spambots. Time line ========= Jan 5 2011: While finishing Postfix for its annual release, I found this flaw in the server and client implementations of SMTP over TLS. It had been sitting there for six years ever since TLS support was adopted into Postfix. Not wanting to delay the release schedule, I silently fixed the problem and sent an email to co-developer Victor Duchovni. Jan 6-10 2011: As we investigated the scope of the problem, Victor discovered quickly that many other SMTP over TLS implementations were also affected. Among those affected were email service providers, email anti-spam/virus service providers, anti-spam/virus appliances, as well as other mail server implementations. It was clear that this problem's resolution was going to involve many organizations. Jan 11 2011: Contact CERT/CC to help coordinate with the problem's resolution. Mar 7 2011: Public announcement.

1 0

[Dovecot] POP3 with mdbox
by Patrick Domack 07 Mar '11

07 Mar '11

I converted all my box's over to mdbox, from maildir and ran into this issue, I knew exactly what it was and fixed it, but might want to log a config error or something for others to notice the issue. I was running with pop3_uidl_format = %f, and well, that doesn't work with mdbox very well, and when a user ran a UIDL command, it errored the user out. Simple fix, but would probably be nicer to log a config error when started dovecot instead.

1 0

[Dovecot] dovecot 1.2.3: TB fails to unsubscribe folder after deletion
by Max Dittrich 07 Mar '11

07 Mar '11

Hi, I'm running dovecot 1.2.3 with "imap_client_workarounds = tb-extra-mailbox-sep" and noticed that after deleting a folder (moving to Trash and emptying it on exit) that folder in Trash still keeps subscribed. I think the reason for that behavior is that the call for mailbox_list_set_subscribed() in imap/cmd-subscribe.c (line 84) is fed with the original mailbox name and not the stripped version in verify_name. Assigning verify_name to mailbox in the workaround-conditional fixes this issue for me. I'm not very familiar with C programming but while tracing cmd_subscribe_full() I stumbled upon another thing. In mail_namespace_find_mask() (lib-storage/mail-namespace.c at line 413) mailbox is reassigned with a local string (not t_strduped). I think this might be a problem when mailbox is dereferenced after returning from that function?! .max

3 10

[Dovecot] mdbox command line access howto request
by David Favor 07 Mar '11

07 Mar '11

Currently using Maildir in my config for 1.2.16 going to 2.0.11 and wondering about accessing files outside of dovecot. Many files require access by external programs. For example walking a list of receipt files from merchant processors verifying transaction amounts. This requires each file being read + parsed. With mdbox a file may contain multiple messages. Let me know the best command line tool to break mdbox files into a string of messages. Thanks. -- Love feeling your best ever, all day, every day? Click http://RadicalHealth.com for the easy way!

2 2

Re: [Dovecot] auth on tcp socket?
by Hajo Locke 07 Mar '11

07 Mar '11

Hello, > there are some warnings in log: > "when SASL type is "dovecot", SASL path "inet:localhost:1434" should be a > socket pathname" > ( Datei src/xsasl/xsasl_dovecot_server.c ) file xsasl_dovecot_server.c is in postfix sources but was written by you, Timo Should there also made an update to support auth on tcp-socket without warnings from postfix side? Thanks, Hajo

3 3

[Dovecot] Dovecot, Postfix and Dovecot LDA (LMTP) delivery
by Remy Zandwijk 07 Mar '11

07 Mar '11

Hi list, I am running a Debian Lenny machine with Postfix 2.5.5 and Dovecot 2.0.8. Up until now I ran Postfix with the Procmail delivery agent succesfully. The machine has only local users; I am not using virtual mailboxes. Due to obvious reasons I want to switch to Dovecot LDA delivery, through LMTP. I spend quite some time finding 'the' configuration for both Postfix and Dovecot, but without success. Find my current configuration below. Postfix receives the e-mail, but delivery through LMTP fails, resulting in Postfix sending an NDR. I just cannot figure out what's wrong and I am not sure whether it's a Postfix or Dovecot problem either. Some log output from Postfix: Mar 5 13:25:15 hostname postfix/smtpd[12442]: connect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/smtpd[12442]: CC47979071: client=otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/cleanup[12447]: CC47979071: message-id=<Pine.GSO.4.64.1103051324570.5319(a)otherhost.domain.tld> Mar 5 13:25:16 hostname postfix/qmgr[12372]: CC47979071: from=<remy(a)otherhost.domain.tld>, size=1037, nrcpt=1 (queue active) Mar 5 13:25:16 hostname postfix/smtpd[12442]: disconnect from otherhost.domain.tld[aa.bb.cc.dd] Mar 5 13:25:16 hostname postfix/lmtp[12448]: CC47979071: to=<remy(a)hostname.domain.tld>, relay=hostname.domain.tld[private/dovecot-lmtp], delay=1.2, delays=1.2/0.01/0.01/0.05, dsn=5.1.1, status=bounced (host hostname.domain.tld[private/dovecot-lmtp] said: 550 5.1.1 <remy(a)hostname.domain.tld> User doesn't exist: remy(a)hostname.domain.tld (in reply to RCPT TO command)) The only lines that Dovecot logs are: Mar 05 13:25:16 lmtp(12449): Info: Connect from local Mar 05 13:25:16 lmtp(12449): Info: Disconnect from local: Client quit Although LMTP should log to /tmp/dovecot-lmtp.log, the file remains empty. Anyone amongst you who is running the same kind of setup and can help? Thanks, Remy Postfix config (postfix -n output) alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix default_transport = smtp inet_interfaces = all local_transport = lmtp:unix:private/dovecot-lmtp mailbox_command = mailbox_size_limit = 0 message_size_limit = 31457280 mydestination = hostname.domain.tld, localhost.domain.tld, localhost myhostname = hostname.domain.tld mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relay_transport = error relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net,reject_unauth_pipelining smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname,reject_non_fqdn_helo_hostname,reject_unknown_helo_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unauth_destination, reject_unknown_recipient_domain smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes Dovecot config (dovecot -n output) # 2.0.8: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_master_user_separator = * listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/.maildir maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { hidden = no inbox = yes list = yes location = prefix = separator = / subscriptions = yes type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log } protocol imap { mail_plugins = }

2 3

[Dovecot] Dovecot 2.0 in Active-Standby configuration
by Yaron & Hani Nahum 07 Mar '11

07 Mar '11

Hi, I am planning to use Dovecot 2.0 as a Mail server for a Voicemail system. There is not much traffic so I am not concerend about scaling. However redudancy is an issue. I need to have two Dovecot servers installed on two different farms and setup HA between the two. I would prefer that the HA would be automatically. I have two different storage machines with SAN, and I can setup Layer 2 between the two farms. I am concerned with split brain scenario where the two farms are disconnected and both machines would become active. What cluster configuration would you recommend for such an enviroment?

1 0

[Dovecot] Problems with shared folders with Dovecot 1.2.12
by Pašek Ladislav 06 Mar '11

06 Mar '11

Hello, I'm trying to run shared folders with Dovecot 1.2.12. I'm managing ACLs from SOGo and it seemd that it successfully create dovecot-acl and dovecot-acl-list in user maildir. But I cannot see any of these shared folders. In Thunderbird I could see shared folder in Subscriptions but without option to subscribe. I was reading almost everything that was possible to google but without success. My config: [root@mail etc]# dovecot -n # 1.2.12: /etc/dovecot.conf # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final) xfs base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot-deliver.log info_log_path: /var/log/dovecot/dovecot-deliver.log log_timestamp: "%b %d %H:%M:%S protocols: imap imaps managesieve listen(default): *:143 listen(imap): *:143 listen(managesieve): *:2000 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(managesieve): ssl_cert_file: /etc/pki/tls/private/mail.valbek.cz.crt ssl_key_file: /etc/pki/tls/private/privkey.key version_ignore: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting: Welcome to Dovecot eMail Server. login_log_format: %$: %s %u login_process_size: 128 login_processes_count: 5 login_max_processes_count: 140 mail_max_userip_connections(default): 30 mail_max_userip_connections(imap): 30 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_uid: 306 last_valid_uid: 306 first_valid_gid: 306 last_valid_gid: 306 mail_uid: vmail mail_gid: vmail mail_location: maildir:/mnt/pole/mail/valbek.cz/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(managesieve): managesieve_logout_format(default): bytes=%i/%o managesieve_logout_format(imap): bytes=%i/%o managesieve_logout_format(managesieve): bytes ( in=%i : out=%o ) namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: sdilene/%%u/ location: maildir:/mnt/pole/mail/valbek.cz/%%u:INDEX=/mnt/pole/mail/valbek.cz/%%u/sdilene/%%u list: children lda: postmaster_address: it(a)valbek.cz mail_plugins: sieve acl auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: autocreate: Spam autocreate2: NoSpam autocreate3: Archiv sieve: /mnt/pole/mail/valbek.cz/%u/.dovecot.sieve sieve_storage: /mnt/pole/mail/valbek.cz/%u/sieve sieve_global_dir: /var/lib/dovecot/sieve/global/ fts: squat fts_squat: partial=4 full=10 acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes.db >From log: "Mar 05 15:25:16imap-login: Info: Login: user=<pasek(a)valbek.cz>, method=PLAIN, rip=192.168.1.221, lip=192.168.1.254 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Loading modules from directory: /usr/lib64/dovecot/imap "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib01_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Module loaded: /usr/lib64/dovecot/imap/lib02_imap_acl_plugin.so "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Effective uid=306, gid=306, home=(none) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir: data=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: maildir++: root=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz, index=, control=, inbox=/mnt/pole/mail/valbek.cz/pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: initializing backend with data: vfile "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: acl username = pasek(a)valbek.cz "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl: owner = 1 "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: Global ACL directory: (null) "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace: type=shared, prefix=sdilene/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: shared: root=, index=, control=, inbox= "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/dovecot-acl "Mar 05 15:25:16IMAP(pasek@valbek.cz): Info: Namespace : Using permissions from /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz: mode=0700 gid=-1 "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Trash.TuX/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Sent.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Spam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.NoSpam/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Prodex/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.dovecot/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Autodesk/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.ebay/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Hesla/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Intranet/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.&AX4-ivotopisy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.RIB-Service/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Po&AWE-ta &AWA-vejda/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Archiv.Osobn&AO0- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.spr&AOE-va-IT/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Blbosti/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.V&AWA-B/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SCST/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.PPP-R1/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: reading file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.SOGo/dovecot-acl "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Nexenta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.openldap/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.INBOX.Pron&AOE-jmy/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Drafts/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Archiv/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Nevy&AX4A4Q-dan&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odstran&ARs-n&AOE- po&AWE-ta/dovecot-acl not found "Mar 05 15:25:19IMAP(pasek@valbek.cz): Info: acl vfile: file /mnt/pole/mail/valbek.cz/pasek(a)valbek.cz/.Odeslan&AOE- po&AWE-ta/dovecot-acl not found Thanks in Advance Ladislav

2 1

[Dovecot] v2.0.11 released
by Timo Sirainen 06 Mar '11

06 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.11.tar.gz.sig Looks like v2.0.10 was a bit troublesome release. I expect this one to last longer. * dotlock_use_excl setting's default was accidentally "no" in all v2.0.x releases, instead of "yes" as in v1.1 and v1.2. Changed it back to "yes". - v2.0.10: LDAP support was broken - v2.0.10: dsyncing to remote often hanged (timed out in 15 mins)

1 0

[Dovecot] OT auto delete attachments with sieve
by Robert Schetterer 06 Mar '11

06 Mar '11

Hi , off topic , but anyone with an idea how to autodelete attachments from mail with sieve, as far i investigated this , it can only be done indirectly perhaps per size etc, but there is no direct auto way, am i right here ? or someone has magic...? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 06 Mar '11

06 Mar '11

Everything is ok, Thanks Timo ;)

1 0

Re: [Dovecot] Multiple Concurrent IMAP Connections For Same User
by Knute Johnson 06 Mar '11

06 Mar '11

On 03/05/2011 07:45 PM, Stan Hoeppner wrote: > If you're not doing local sync with TB and you have GLODA disabled, > TB is going to show you exactly what's in your Dovecot mailbox. If > the message doesn't disappear from your TB view sometime after > deleting it on your smartphone, then I'd say it's very likely that > Dovecot didn't receive the delete and/or expunge command from the > phone. Check your Dovecot logs and see what the phone is actually > sending, or not sending. > > Both of you mentioned problems specifically WRT smartphones. It's > likely the IMAP implementation in these phones is simply buggy, or > your network coverage is spotty. I don't use a smartphone so I can't > really say. What smartphone are you each using? I've got a Samsung Captivate running K-9 Mail. It could definitely have some bugs. Sometimes if I delete a message on my phone, I'll see it show up in the Trash folder but not disappear from the folder it was deleted from. It's just not consistent. but it is better than it was before. I'll look in the logs and see if I see anything interesting. Thanks again,

1 0

[Dovecot] Dovecot MySQL Schema
by Alokat 06 Mar '11

06 Mar '11

Hi, where can I find the MySQL schema for Dovecot on Debian? Regards, alokat

2 1

[Dovecot] Multiple Concurrent IMAP Connections For Same User
by Nigel Webber 05 Mar '11

05 Mar '11

Hi I've been using courier for some time, but have just built a new box and am using dovecot (V1.2.9), Ubuntu 10.04LTS. I have a question regarding multiple concurrent imap connections and how to get dovecot to behave in the same way that courier does. I have searched the wiki, but find little relevant to my specific issue. Courier-Imap Behaviour If I have thunderbird pointed at the 'Inbox' folder via IMAP, then connect another IMAP client to the same mail account (in this case an iPhone), and then delete an email using the iphone, then after a couple of seconds, the inbox shown by Thunderbird updates, removing the now deleted email. It does this without my having to touch Thunderbird. Dovecot behaviour Performing the same test on a different mailbox, this time hosted via Dovecot, I again see the two views, one in Thunderbird and one on the iPhone, but when I delete the email on the iPhone, the change is not reflected in the view on Thunderbird. If I select the email on Thunderbird, then it has no content. If I restart thunderbird, the deleted email is still shown. I have to delete (the already deleted) the email also in thunderbird before it finally dissapears. How can I get the courier behaviour where the inbox in one email client automagically reflects the changes made to that inbox in another client? If I am better sticking to Courier to get this functionality, thats fine, but if I can configure the behaviour I desire and still retail the benefits of dovecot then thats even better! Kind Regards Nigel

7 12

[Dovecot] 2.0.10 Auth failed while binding ldap
by Stéphane Wartel 05 Mar '11

05 Mar '11

Dear all, Since new release has been installed, auth process crash with io loop : 2011-03-05 11:22:44 auth: Panic: file db-ldap.c: line 1113 (db_ldap_result_change_attr): assertion failed: (ctx->vals == NULL) 2011-03-05 11:22:44 auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0xb76ceab1] -> /usr/lib/dovecot/libdovecot.so.0 [0xb76ceb2f] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0xb76cee04] -> dovecot/auth(db_ldap_result_iterate_next+0x3be) [0x806aa8e] -> dovecot/auth [0x806c857] -> dovecot/auth [0x806cd91] -> dovecot/auth [0x806c314] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x51) [0xb76db781] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xe0) [0xb76dc840] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xb76db700] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2a) [0xb76c73da] -> dovecot/auth(main+0x300) [0x805ea50] -> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5) [0xb7147455] -> dovecot/auth [0x8052a51] 2011-03-05 11:22:44 master: Error: service(auth): child 23136 killed with signal 6 (core dumps disabled) 2011-03-05 11:22:44 master: Error: service(auth): command startup failed, throttling dovecot --version 2.0.10 (d757b13d84ff) # 2.0.10 (d757b13d84ff): /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.8 auth_failure_delay = 5 secs auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log dict/acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_debug = yes mail_fsync = always mail_gid = mail mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota trash zlib" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mmap_disable = yes namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%n prefix = Shared.%%n. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin/acl = vfile plugin/acl_shared_dict = proxy::acl plugin/autocreate = Junk plugin/autosubscribe = Junk plugin/quota = maildir:User quota plugin/quota_rule2 = Trash:storage=+100M plugin/quota_warning = storage=95%% quota-warning 95 %u plugin/quota_warning2 = storage=80%% quota-warning 80 %u plugin/sieve = ~/.dovecot.sieve plugin/sieve_before = /etc/dovecot/global_script/dovecot.sieve plugin/sieve_dir = ~/sieve plugin/trash = /etc/dovecot/dovecot-trash.conf.ext plugin/zlib_save = bz2 plugin/zlib_save_level = 6 postmaster_address = postmaster protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-master { group = mail mode = 0660 user = vmail } unix_listener auth-userdb { group = mail mode = 0660 user = vmail } } service dict { unix_listener dict { group = mail mode = 0660 user = vmail } } service imap-login { process_min_avail = 10 service_count = 1 } service managesieve-login { process_min_avail = 3 service_count = 1 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_ca = </etc/ssl/certs/GandiStandardSSLCA.pem ssl_cert = </etc/ssl/certs/imap.zero-spam.fr.pem ssl_key = </etc/ssl/private/imap.zero-spam.fr.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = " quota trash zlib sieve autocreate acl" } protocol imap { mail_plugins = " quota trash zlib acl imap_quota imap_acl imap_zlib" } protocol sieve { managesieve_logout_format = bytes=%i/%o managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } dovecot-ldap.conf.ext hosts = 127.0.0.1 dn = "cn=sup,dc=domain,dc=com" dnpass = "**********" auth_bind = yes ldap_version = 3 base = dc=domain, dc=com user_attrs = mailbox=home,mailuserquota=quota_rule=*:storage user_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) iterate_attrs = mail=user iterate_filter = (&(objectClass=mailAccount)(mailenable=OK)) Hope this could help you ! Many thanks by advance, Stephane

3 3

[Dovecot] deleted messages not going away in Thunderbird?
by Dave McGuire 05 Mar '11

05 Mar '11

Hi folks. This may be a dumb question, but I can't seem to find a clue. I'm running Dovecot v1.2.9 and Thunderbird v3.1.7. If I delete messages using a different IMAP client (I also use an iPhone and occasionally SquirrelMail), I would expect those messages to disappear from Thunderbird the next time I start it or click on "Get Mail". In fact, they do...most of the time. Sometimes, however, they just stick around. If I do a "Repair Folder" on the inbox in Thunderbird, the messages go away. Is this a known issue? My gut tells me there's some Thunderbird option to make it follow inbox contents with more "attention" but I've not been able to find it. Thanks, -Dave -- Dave McGuire Port Charlotte, FL

2 1

[Dovecot] version difference understanding
by upen 05 Mar '11

05 Mar '11

Hello, I am in process of setting up an IMAP server (with postfix SMTP), I installed RHEL 5.5 on my server and found that version of dovecot is 1.x.x while when I checked online RHEL 6 is version is 2.x.x. Can someone please tell me if these two versions are still in development or 1.x.x is very old and must be replaced by 2.x.x version? Also are there any special features in 2.x.x or 1.x.x that makes it better than other? I see similar things for postfix package but I understand this is not the place to ask postfix Qns, Appreciate your help! ~A

2 2

[Dovecot] All mails unread after short while
by francwalter＠gmx.net 05 Mar '11

05 Mar '11

Hello, I have on Ubuntu 8.04 Postfix 2.5.1 and Dovecot 1.0.10. The mails are saved in maildir format. In one account on my server all mails are unread all the time. If i set them as read in my client (IMAP with Mac Mail 4.4 or IMAP with Squirrelmail, it doesn’t matter) they seem to be checked as read for some minutes or less, but very soon they are unread again, so i guess, only my client thinks that they are read, but after the next check, the client reads again that they are unread. Now i don’t know where to look or change the “Has been read”-Flag in the maildir-directory. Is it in some file or where is it, the flag? It is only one account, the other accounts on the same domain and on other domains are working quite well. Maybe it is only after a Squirrelmail update last week, but I am not sure. Thank you, Kind Regards, frank walter

4 7

[Dovecot] Is the trunk version of Pigeonhole still broken or am I missing something?
by interfaSys sàrl 05 Mar '11

05 Mar '11

Things broke a couple of months back and I thought I had caught the repository at a bad time, but trying again today, after having seen that people had been working on it recently, bore the same result. ../../../../libtool: line 2072: cmd-vacation.c: command not found I'm simply syncing with the repository and using autogen, configure and make. Are there any other steps required? Olivier

2 5

[Dovecot] v2.0.10 released
by Timo Sirainen 04 Mar '11

04 Mar '11

http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.10.tar.gz.sig I thought it was finally time to make a new v2.0 release. Or probably it was a while ago already, but I've been a bit lazy this year. Maybe it's because this is the first time in last 5 years when all branches of Dovecot have been quite stable and I haven't been stressing on it. Of course there are some v2.0 features that still have some bugs, but few people are complaining about them. v2.1 development branch also appears to be pretty good shape. I'm hopeful that v2.1.rc1 will be out before summer. * LMTP: For user+detail@domain deliveries, the +detail is again written to Delivered-To: header. * Skip auth penalty checks from IPs in login_trusted_networks. + Added import_environment setting. + Added submission_host setting to send mails via SMTP instead of via sendmail binary. + Added doveadm acl get/set/delete commands for ACL manipulation, similar to how IMAP ACL extension works. + Added doveadm acl debug command to help debug and fix problems with why shared mailboxes aren't working as expected. - IMAP: Fixed hangs with COMPRESS extension - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. - IMAP: Fixed hang/crash with SEARCHRES + pipelining $. - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet. - LMTP: Fixed sending multiple messages in a session. - doveadm: Fixed giving parameters to mail commands. - doveadm import: Settings weren't correctly used for the import storage. - dsync: Fixed somewhat random failures with saving messages to remote dsync. - v2.0.9: Config reload didn't notify running processes with shutdown_clients=no, so they could have kept serving new clients with old settings.

2 2

Re: [Dovecot] Error: FETCH [1] for mailbox badbox UID 1 got too little data: 2 vs 4 (fwd)
by Chris Wilson 04 Mar '11

04 Mar '11

Hi all, Any thoughts about this error? Should I file a bug report somewhere? Cheers, Chris. On Wed, 12 Jan 2011, Chris Wilson wrote: > Hi all, > > I can send myself a test message that causes Dovecot to crash when I open > it in Alpine, with the following error: > > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: FETCH [1] for > mailbox badbox UID 1 got too little data: 2 vs 4 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Error: Corrupted index > cache file /home/chris/mail/.imap/badbox/dovecot.index.cache: Broken > MIME parts for mail UID 1 > Jan 12 14:52:52 one-mail dovecot: imap(chris): Disconnected: FETCH failed > bytes=485/1394 > > I can do this as follows: > > $ touch ~/mail/badbox > $ echo test | /usr/libexec/dovecot/dovecot-lda -m badbox > $ cat ~/mail/badbox > > From MAILER-DAEMON Wed Jan 12 14:52:29 2011 > test > X-IMAPbase: 1294843949 0000000001 > X-UID: 1 > Status: > X-Keywords: > Content-Length: 1 > > And then when I try to open badbox in Alpine (over IMAP), and then open > this email, I get the error above, and the connection is aborted. > > I expect that the "test" line is not a valid header, but dovecot should > not crash when opening it. > > Cheers, Chris. > -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791.

2 1

[Dovecot] /etc/pam.d/dovecot missing? during high load
by Douglas Mortensen 04 Mar '11

04 Mar '11

This morning on our newly built server, the following was logged twice: auth: Error: pam(username,127.0.0.1): pam_authenticate() failed: Authentication failure (/etc/pam.d/dovecot missing?) This also happened to be during a time of 100+ imap-login processes, where we were seeing: master: Warning: service(imap-login): process_limit reached, client connections are being dropped The initial error was correct, in that I had not yet created /etc/pam.d/dovecot. I have since created the file. However, we brought this server into production yesterday & there were no complaints, nor was the error logged besides twice this morning within 3.5 minutes of eachother. In looking at pam documentation, it is my understanding that when a service (dovecot) does not have its own file existing under /etc/pam.d, then pam will instead use the settings from /etc/pam.d/others as defaults. This seems logical to me, and would explain why things have been working fairly well with no errors regarding pam (other than the 2 logged this morning). However, what this does not explain, is why dovecot auth logged about the file missing at all. I can only guess that it was related to logins being dropped due to high load, and was incorrectly logged?? For reference, my current /etc/pam.d/dovecot is: auth required pam_unix.so nullok account required pam_unix.so My current /etc/pam.d/other is: @include common-auth @include common-account @include common-password @include common-session Which results in (confirmed via : grep -v ^# common-auth common-account common-password common-session) auth [success=1 default=ignore] pam_unix.so nullok_secure auth requisite pam_deny.so auth required pam_permit.so account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so account requisite pam_deny.so password [success=1 default=ignore] pam_unix.so obscure sha512 password requisite pam_deny.so password required pam_permit.so session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session required pam_unix.so So there definitely is quite a difference between the dovecot pam file I created (based on the dovecot2 wiki), and the system default (other). I don't know whether this could have been related, so I figured I'd share. Otherwise, I'm running dovecot 2.0.9 compiled from source. dovecot -n at the time of the pam errors was probably: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] logging issues w/ login_max_processes_count on 1.x
by Douglas Mortensen 04 Mar '11

04 Mar '11

Today I found our dovecot 2.x gracefully logged: dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped I am confident that we had the very same problem on our previous dovecot 1.x box. Of course with dovecot 1.x, the same relative setting is login_max_processes_count. I believe that I turned up all dovecot logging & debugging to the max (also checked with the 1.x wiki), but nothing was ever logged relating to this. Does anyone know whether there is a way to get dovecot 1.x to log this type of error? Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

2 2

[Dovecot] penalty configuration and proxy servers
by Mark Zealey 04 Mar '11

04 Mar '11

Hi there, I've had a look through the wiki and a quick look through the source for penalty configurations (dovecot 2.0.9) but I've not found anything to do with configuration options for this functionality. I'm basically wanting to disable a particular host/subnet from the penalty setup. In our case we have some webmail servers that do get attacked however most of the traffic is legitimate so I'd rather that the user experience was faster (ie not having a few seconds of delay on login) than that we slowed down attacks from them. On a similar note; is it possible to do the per-ip login limit in the auth level rather than the imap/pop level? I ask this as we've just implemented a proxy setup whereby we have two frontend proxy servers that then dispatch to backend servers specified in the database. So, the backend servers do the actual imap/pop sessions however we now don't see the remote ip addresses so it becomes difficult to limit abusive users. The 'doveadm who'/process listing code also doesn't work on the proxy servers even though dovecot knows who logged in and forwards the connection through to the backend servers. None of these features/suggestions are show-stoppers; dovecot is a great program however they're more suggestions of ways it would be useful for us to improve the software. Thanks, Mark

2 1

[Dovecot] strange problem receiving mails
by deconya 04 Mar '11

04 Mar '11

Hi guys Im viewing how to repair a problem using a postfix platform with openldap and dovecot. This is the problem: -When I create a new user inside openldap with mail account appears correctly inside ldap but when I access first time appears inside /var/spool/dovecot/ the folder of account bad. Not appears the name of uid, appears the name of user mail, for ex: drwx------ 5 exemple Domain Users 4,0K 2011-03-04 13:28 exemple drwx------ 9 exemple Domain Users 4,0K 2011-03-04 13:29 exemple.usermail Log filteered: Mar 4 13:28:21 mailserver deliver(exemple): Loading modules from directory: /usr/lib/dovecot/modules/lda Mar 4 13:28:21 mailserver deliver(exemple): Module loaded: /usr/lib/dovecot/modules/lda/ lib10_quota_plugin.so Mar 4 13:28:21 mailserver dovecot: auth(default): master in: USER^I1^Iunesco^Iservice=deliver Mar 4 13:28:21 mailserver dovecot: auth(default): prefetch( exemple(a)mydomain.com) passdb didn't return userdb entries, trying the next userdb Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) lookup Mar 4 13:28:21 mailserver dovecot: auth(default): passwd( exemple(a)mydomain.com) unknown user Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): user search: base=ou=Users, dc=ldap, dc=es scope=subtree filter=(&(objectClass=posixAccount)(|(mail=exemple(a)mydomain.com)(uid= exemple(a)mydomain.com)(uid=exemple))) fields=homeDirectory,uidNumber,gidNumber,mailQuota Mar 4 13:28:21 mailserver deliver(exemple): auth input: home=/home/exemple Mar 4 13:28:21 mailserver deliver(exemple): auth input: uid=10017 Mar 4 13:28:21 mailserver deliver(exemple): auth input: gid=513 Mar 4 13:28:21 mailserver deliver(exemple): Home dir not found: /home/exemple Mar 4 13:28:21 mailserver deliver(exemple): Quota root: name=User quota backend=maildir args= Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:21 mailserver deliver(exemple): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:21 mailserver deliver(exemple): maildir: data=/var/spool/dovecot/exemple/ Mar 4 13:28:21 mailserver deliver(exemple): maildir++: root=/var/spool/dovecot/exemple, index=, control=, inbox=/var/spool/dovecot/exemple Mar 4 13:28:21 mailserver dovecot: auth(default): ldap(exemple(a)mydomain.com): result: homeDirectory(home)=/home/exemple uidNumber(uid)=10017 gidNumber(gid)=513 Mar 4 13:28:21 mailserver dovecot: auth(default): master out: USER^I1^ Iunesco(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:21 mailserver deliver(exemple): msgid=<1299241700.26848.1.camel@infolinux>: saved mail to INBOX Mar 4 13:28:21 mailserver postfix/pipe[29996]: 6191E26F95B: to=< exemple(a)mydomain.com>, orig_to=<exemplemail(a)admi.mydomain.com>, relay=dovecot, delay=0.09, delays=0.03/0/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service) Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) lookup service=dovecot Mar 4 13:28:26 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) #1/1 style=1 msg=Password: Mar 4 13:28:28 mailserver dovecot: auth-worker(default): pam( exemplemail(a)mydomain.com,10.0.0.4) pam_authenticate() failed: Authentication failure (password mismatch?) Mar 4 13:28:28 mailserver dovecot: auth(default): ldap( exemplemail(a)mydomain.com,10.0.0.4) bind search: base=ou=Users, dc=ldap, dc=es filter=(&(objectClass=posixAccount)(|(mail=exemplemail(a)mydomain.com )(uid=exemplemail(a)mydomain.com))) Mar 4 13:28:28 mailserver dovecot: auth(default): auth( exemplemail(a)mydomain.com,10.0.0.4) username changed exemplemail(a)mydomain.com -> exemple Mar 4 13:28:28 mailserver dovecot: auth(default): ldap(exemple,10.0.0.4): result: homeDirectory(userdb_home)=/home/exemple uid(user)=exemple uidNumber(userdb_uid)=10017 gidNumber(userdb_gid)=513 Mar 4 13:28:28 mailserver dovecot: auth(default): client out: OK^I1^Iuser=exemple Mar 4 13:28:28 mailserver dovecot: auth(default): prefetch(exemple,10.0.0.4): success Mar 4 13:28:28 mailserver dovecot: auth(default): master out: USER^I411619^ Iunescochair.lccc(a)mydomain.com^Ihome=/home/exemple^Iuid=10017^Igid=513 Mar 4 13:28:28 mailserver dovecot: imap-login: Login: user=<exemple>, method=PLAIN, rip=10.0.0.4, lip=10.0.0.5 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Loading modules from directory: /usr/lib/dovecot/modules/imap Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Effective uid=10017, gid=513, home=/home/exemple Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota root: name=User quota backend=maildir args= Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Quota rule: root=User quota mailbox=Trash ignored Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir: data=/var/spool/dovecot/exemplemail/ Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): maildir++: root=/var/spool/dovecot/exemplemail, index=, control=, inbox=/var/spool/dovecot/exemplemail Mar 4 13:28:28 mailserver dovecot: IMAP(exemplemail(a)mydomain.com): Disconnected: Logged out bytes=45/375 Any idea? Thanks and Best Regards

1 0

[Dovecot] unsubscribe
by Rob Coward 04 Mar '11

04 Mar '11

Please consider the environment before printing this email. Game Stores Group Limited, registered number 1937170, registered in England

2 1

[Dovecot] Dovecot and ManageSieve crash trace
by Samuel Hassine 04 Mar '11

04 Mar '11

Hi all, I am trying to deploy Dovecot with Sieve support and I choose the easy way: install ManageSieve. But I have a problem here, and I did not find how to deal with. I tested the communication to the server with the telnet command. Here the result: http://pastebin.com/dgvhEwxJ And I do not understand how to link IMAP authentification and Sieve authentification. I just want to allow creation of Sieve filters for any IMAP user (based on LDAP). Thanks for your answer. Best regards. Samuel Hassine

2 1

[Dovecot] sieve issue
by Informatik.hu 04 Mar '11

04 Mar '11

Hi All! I have got some problem with dovecot sieve. (from Debian Squeeze packages). I have already installed dovecot and postfix with mysql(postfix admin) virtual domains and users, configured dovecot deliver for delivery method in postfix. Dovecot sieve IS working, reads the global script, BUT it DOES NOT reads the user scripts from the users virtual home directory. If i place ".dovecot.sieve" in /home/vmail, and configure sieve for this location, it reads the script. If i put the file under /home/vmail/domain.com (/home/vmail/%d) or /home/vmail/domain.com/user(a)domain.com (/home/vmail/%d/%u) the sieve plugin does not read(compile) the script. Deliver log contains that the incoming mail (which has to be filtered) saved to INBOX, and there is no error in the deliver error log, nor dovecot logs. Can anybody help me out what am i doing wrong? Vuki

2 1

[Dovecot] Problem with sieve and namespace
by Patrick Westenberg 03 Mar '11

03 Mar '11

Hi guys, my default sieve script fails due to an unknown mailspace even I told him to use one. What's wrong? Patrick Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: msgid=<4D683DA5.7030505(a)gmx.de>: failed to store into mailbox mail(a)jasbafliesen.de': Unknown namespace Feb 26 00:39:25 endeavour dovecot: lmtp(6967, mail(a)jasbafliesen.de) Error: 1WYlBCE1aE03GwAA0CSSVw: sieve: script /usr/local/etc/dovecot/sieve/default.sieve failed with unsuccessful implicit keep This is what my sieve script looks like: require ["fileinto", "mailbox"]; if header :contains "X-Spam-Flag" "YES" { fileinto :create "INBOX.Spam"; } # 2.0.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-amd64 x86_64 Debian 5.0.8 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } protocols = lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota }

3 4

[Dovecot] process_min_avail being ignored?
by Douglas Mortensen 03 Mar '11

03 Mar '11

Today I found out we are having users w/ problems because: Mar 3 09:57:33 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 09:58:42 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:02:51 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:04:29 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:05:41 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped Mar 3 10:06:58 jlgray dovecot: master: Warning: service(imap-login): process_limit reached, client connections are being dropped So, based on the dovecot2 wiki, it would seem that the solution is to follow the recommendations at http://wiki2.dovecot.org/LoginProcess, and use them as a guide for our situation. I have done so. But unless I misunderstand their purpose, I don't think they're working. Maybe I don't have them in the correct place?? I am expecting the imap-login process count to immediately jump up to 200 (based on my config below). But instead, they just slowly gradually increase. But even an hour after changing the config & restarting dovecot, I only have 78 login processes. dovecot -n output is: # 2.0.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0 auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:~/ mail_privileged_group = mail passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = </etc/ssl/certs/jlgray.com.cer ssl_key = </etc/ssl/private/jlgray.com.key userdb { driver = passwd } This configuration was updated from a dovecot 1.x config, by following the instructions at: http://wiki2.dovecot.org/Upgrading/2.0 Namely: doveconf -n -c dovecot-1.conf > dovecot-2.conf Then we renamed dovecot-2.conf to dovecot.conf I'm pretty sure there were no problems with that part. We are running dovecot 2.0.9 compiled from source. OS is 64-bit Debian Squeeze (6.0), as shown by 'cat /proc/version': Linux version 2.6.32-5-amd64 (Debian 2.6.32-30) (ben(a)decadent.org.uk) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Wed Jan 12 03:40:32 UTC 2011 I really appreciate anyone helping me figure out why Thanks, - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

1 1

[Dovecot] TB, dovecot & trailing slash - again
by Bruno Tréguier 03 Mar '11

03 Mar '11

Hi there, I have been browsing the mailing list archives in search of a solution to my problem, related to the quite infamous "trailing slash" issue with Thunderbird, but I don't seem to have found any closely related discussion. Please forgive me if this problem has already found a solution. Here I go; We use a lot of TB clients (2.x and 3.x), and we are using Dovecot 1.2.4 on our production server (mbox format). As told in many places, including this list, I added the option "tb-extra-mailbox-sep" in my dovecot.conf file. The checkbox regarding the mix of mailbox/submailbox and mailbox/messages is unchecked in the advanced options of our TB standard config. I snooped the connection with "ngrep" when creating a folder meant for containing subfolders. Here is the trace: > 6 create "ABCDE/".. < 6 OK Create completed... > 7 subscribe "ABCDE/".. < 7 OK Subscribe completed... > 8 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..8 OK List completed... So far, so good. But when you have a look at the .subscriptions file, you can see that the ABCDE folder has no trailing slash: it has been stripped off, apparently due to an "enhancement" made in 2009: http://hg.dovecot.org/dovecot-1.2/rev/339be408f49a It may be intended, but the drawback is that TB then gets a bit confused, as it has no way, during a "LIST" operation, to distinguish between a "folder/subfolder" scheme and a "folder/message" scheme: consequently, you get an error message from TB whenever you click on the containing folder, stating that "the mailbox isn't selectable". The problem is not just cosmetic, though, as the subfolders of such folders are not synchronized when selected for offline reading. I made a test with another version of Dovecot, of the 1.1 branch, and it behaves a little bit differently: the trailing slash is kept in the .subscriptions file, and everything is ok. TB is able to make the distinction between both kinds of folders. For the moment, I simply erased the "tb-extra-mailbox-sep" from my config file, and this is what happens: > 306 create "ABCDE/".. < 306 OK Create completed... > 307 subscribe "ABCDE/".. < 307 NO Invalid mailbox name: ABCDE/.. > 308 list "" "ABCDE/".. < * LIST (\Noselect \HasChildren) "/" "ABCDE/"..308 OK List completed... In that case, the "subscribe" command fails, so the folder does not appear by itself in the .subscriptions file, but as it is not used (only "terminal" mailboxes, containing messages, which are files in the filesystem), this is not a problem. The directory is created on the disk, and you can then create subfolders without any problem... Sorry for this long message, I just wanted to explain precisely what happens. A last word: switching to maildir would be quite a hassle, as we use quite a lot of procmail-based tools. Rewriting everything using Sieve is not planned for the moment. Does anyone out there have a solution for this ? What am I doing wrong ? Is the "tb-extra-mailbox-sep" really necessary when using TB ? As far as I can tell, it rather got us into trouble here, than solved anything... Thanks for any info/pointer/else ! Best regards, Bruno -- - Service Hydrographique et Oceanographique de la Marine - DO/MGS/INF - 13, rue du Chatellier - CS 92803 - 29228 Brest Cedex 2, FRANCE - Phone: +33 2 98 22 17 49 - Email: Bruno.Treguier(a)shom.fr

1 0