- dovecot - dovecot.org

[Dovecot] compiling issue 1.2.6 - Solaris
by Jernej Porenta 07 Oct '09

07 Oct '09

Heya, I am expiriencing compiling issues on Solaris 8 and Solaris 10 boxes with dovecot 1.2.6. On Solaris 8 the compiler is gcc 64bit 3.2.2, on Solaris 10 gcc 3.4.3. On both systems the compiling fails with: /bin/bash ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -L/opt/gcc-3.1-64bit/lib -R/opt/gcc-3.1-64bit/lib -L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib -R/opt/kerberos-heimdal/lib -o imap-login client.o client-authenticate.o imap-proxy.o ../login-common/liblogin-common.a ../lib-imap/libimap.a ../lib-auth/libauth.a ../lib/liblib.a -lssl -lcrypto -ldl -lrt -lnsl -lsocket -lrt libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o imap-login client.o client-authenticate.o imap-proxy.o -L/opt/gcc-3.1-64bit/lib -L/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib ../login-common/liblogin-common.a ../lib-imap/libimap.a ../lib-auth/libauth.a ../lib/liblib.a -lssl -lcrypto -ldl -lnsl -lsocket -lrt -R/opt/gcc-3.1-64bit/lib -R/usr/local/ssl/lib -R/opt/kerberos-heimdal/lib Undefined first referenced symbol in file SSL_COMP_get_name ../login-common/liblogin-common.a(ssl-proxy-openssl.o) SSL_get_current_compression ../login-common/liblogin-common.a(ssl-proxy-openssl.o) ld: fatal: Symbol referencing errors. No output written to imap-login collect2: ld returned 1 exit status The configure script is the same on both systems: CPPFLAGS='-I/usr/local/ssl/include -I/opt/kerberos-heimdal/include' LDFLAGS='-L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/opt/kerberos-heimdal/lib -R/opt/kerberos-heimdal/lib' ./configure --prefix=/opt/dovecot --with-ssldir=/usr/local/ssl/certs --with-ssl=openssl --without-passwd-file --with-passwd --with-shadow --without-bsdauth --without-static-userdb --without-prefetch-userdb --without-checkpassword --with-gssapi=yes --without-pgsql --without-sql --without-ldap --without-vpopmail --without-sia --enable-header-install Install prefix . : /opt/dovecot File offsets ... : 64bit I/O polling .... : poll I/O notifys .... : none SSL ............ : yes (OpenSSL) GSSAPI ......... : yes passdbs ........ : passwd shadow pam : -passwd-file -checkpassword -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : passwd : -static -prefetch -passwd-file -checkpassword -ldap -sql -vpopmail -nss SQL drivers .... : : -pgsql -mysql -sqlite Version 1.2.4 compiles with no problems... regards, Jernej

7 10

[Dovecot] IMAP fchown failed: Operation not permitted
by Juergen Obermann 07 Oct '09

07 Oct '09

Hello, today I switched from dovecot 1.1.17 to 1.2.6 and since then the following new error messages appeared. To me they seems to be harmless, as I noticed no problems so far. But can I be sure? Oct 7 08:39:13 smail dovecot: [ID 583609 local0.error] IMAP(sv4073): fchown(/home/smailw9/sv4073/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3229(smailw9), group based on /var/mail/sv4073) Oct 7 08:39:34 smail dovecot: [ID 583609 local0.error] IMAP(sv8785): fchown(/home/smail05/sv8785/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3265(smail05), group based on /var/mail/sv8785) Oct 7 08:41:32 smail dovecot: [ID 583609 local0.error] IMAP(sv7662): fchown(/home/smailz6/sv7662/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3256(smailz6), group based on /var/mail/sv7662) Oct 7 08:47:39 smail dovecot: [ID 583609 local0.error] IMAP(su8501): fchown(/home/smailt3/su8501/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3193(smailt3), group based on /var/mail/su8501) Oct 7 08:49:22 smail dovecot: [ID 583609 local0.error] IMAP(sv2131): fchown(/home/smailv4/sv2131/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3214(smailv4), group based on /var/mail/sv2131) Oct 7 08:49:22 smail dovecot: [ID 583609 local0.error] IMAP(sv2131): fchown(/home/smailv4/sv2131/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3214(smailv4), group based on /var/mail/sv2131) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.log.newlock, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:51:22 smail dovecot: [ID 583609 local0.error] IMAP(sw2109): fchown(/home/smail23/sw2109/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3283(smail23), group based on /var/mail/sw2109) Oct 7 08:56:53 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.cache.lock, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) Oct 7 08:57:42 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.tmp, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) Oct 7 08:57:42 smail dovecot: [ID 583609 local0.error] IMAP(sv2483): fchown(/home/smailv6/sv2483/Mail/.imap/INBOX/dovecot.index.log.newlock, -1, 6(mail)) failed: Operation not permitted (egid=3216(smailv6), group based on /var/mail/sv2483) This is a Solaris 9 system that acts as a NFS-Server for mailboxes in /var/mail and home directories under automounter control in /home/group/user. Thanks for any help. # 1.2.6: /opt/local/etc/dovecot.conf # OS: SunOS 5.9 sun4u syslog_facility: local0 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key disable_plaintext_auth: no version_ignore: yes login_dir: /opt/local/var/run/dovecot/login login_executable(default): /opt/local/libexec/dovecot/imap-login login_executable(imap): /opt/local/libexec/dovecot/imap-login login_executable(pop3): /opt/local/libexec/dovecot/pop3-login login_process_per_connection: no login_processes_count: 12 max_mail_processes: 4096 mail_location: mbox:~/Mail:INBOX=/var/mail/%u mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /opt/local/libexec/dovecot/imap mail_executable(imap): /opt/local/libexec/dovecot/imap mail_executable(pop3): /opt/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /opt/local/lib/dovecot/imap mail_plugin_dir(imap): /opt/local/lib/dovecot/imap mail_plugin_dir(pop3): /opt/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Mail/ hidden: yes list: no subscriptions: yes lda: postmaster_address: postmaster(a)hrz.uni-giessen.de auth default: passdb: driver: pam userdb: driver: passwd plugin: quota: fs:Home-Verzeichnis:noenforcing -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/~g033 Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

2 1

[Dovecot] Is it possible to authenticate against Active Direcotry using the whole e-mail?
by Δημήτριος Καραπιπέ ρης 07 Oct '09

07 Oct '09

Hi all! Is it possible to authenticate against Active Directory, using the whole e-mail address and not the user part (%n), so that if you support mutiple domains, all users should authenticate with their e-mail addresses. I use auth_bind_userdn = DOMAIN \ %u but somehow the *mail* attribute of Active/LDAP should be employed. thanks in advance Dimitrios Karapiperis

3 4

[Dovecot] Fwd: Re: "Time just moved backwards" in Dovecot in a Xen DomU
by Patrick Domack 07 Oct '09

07 Oct '09

Dunno, your email provider doesn't want to talk to me, heh, screw them :) They claim i'm on an rbl, no rbl checks verify this. Even tried to submit a request using their website, but it's broken and doesn't work (http://postmaster.ausics.net/pmg.php) ----- Forwarded message from patrickdk(a)patrickdk.com ----- Date: Tue, 06 Oct 2009 23:31:37 -0400 From: Patrick Domack <patrickdk(a)patrickdk.com> Subject: Re: [Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU To: Noel Butler <noel.butler(a)ausics.net> yes, using a pool server for that isn't good. but atleast it will let us know if it's just an internet path, or ALL internet paths for him that is causing issues, as it should give a good random sampling. I have a few servers in the pool set to gigabit speeds. If people configure their settings correctly, the dsl/cable ones shouldn't get selected very often. And the pool servers aren't the cause of his issues, as he isn't using any pools servers. I think he has a network issue personally. Quoting Noel Butler <noel.butler(a)ausics.net>: > On Tue, 2009-10-06 at 23:08 -0400, Patrick Domack wrote: > > >> >> Jitter stops ntp from doing it's job properly. I'm not sure what is >> causing you jitter to be so bad, but it's caused by the delay amount >> changing from packet to packet. The delay should stay consistant (like >> a ping time). If it keeps bouncing all over the place, ntp can't >> figure out what time it really is, cause it doesn't know how long that >> packet was on the network. You can safely ignore offset, it is just >> how much different your clock is from what the other computer is. >> >> Try adding some of the pool servers in there, like: >> server 0.us.pool.ntp.org >> server 1.us.pool.ntp.org >> server 2.us.pool.ntp.org >> > > > this can also be the cause of it all, there is no QA on hosts in pools, > I've seen DSL and cable connected hosts in pools causing all sorts of > problems for some, I'm lucky enough to be in a position where we have > access to atomic servers so I can avoid all that, but most people are > not. > > > -- > Kind Regards, > Noel Butler > L.C.P #251002 (http://counter.li.org) > > ________________________________________________________________________ > This Email, including any attachments, may contain legally privileged > information, therefor remains strictly confidential and is protected > under Australian Laws and international treaties. You may not > disseminate or reveal any part to anyone without the authors express > written authority to do so. If you are not the intended recipient, > please notify the sender and delete all relevance of this message > including attachments immediately. Confidentiality and legal privilege > are not waived or lost by reason of the mistaken delivery of this > message. Only PDF or ODF documents are accepted, do not send Microsoft > proprietary formatted documents - see > http://www.gnu.org/philosophy/no-word-attachments.html > > ________________________________________________________________________ > ----- End forwarded message -----

2 1

Re: [Dovecot] Samba AD and Dovecot
by Timo Sirainen 07 Oct '09

07 Oct '09

Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: > Timo Sirainen wrote: >> On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: >>> 1) I have seen how to configure for LDAP and Kerberos. AD uses both >>> together. All user information is in AD/LDAP and authentication is >>> AD/Kerberos. How can I configure Dovecot to use both appropriately? >> You could forget about the Kerberos part and just use AD as an LDAP >> server. > I really want to use kerberos/SPNEGO everywhere I can for various > reasons. The LDAP would be for the configuration. Do you actually want the IMAP/POP3 clients to use Kerberos? For plaintext auth I don't see any benefit in Dovecot using Kerberos rather than LDAP (and it doesn't support that, except via pam_kerberos or whatever I guess). But for clients to use Kerberos (GSSAPI) and authenticate against AD while Dovecot is in the middle... I've no idea. I guess that's possible somehow. >>> 2) For example if I have a directory /var/mail/domain/user. Can >>> I have Dovecot auto create (with proper permissions) the domain/user >>> part? These would be used for maildir. >> If you're using the same UNIX UID for all users, there's really >> nothing you need to do. Dovecot tries to create missing directories >> automatically. > No, I will be using the new Samba IDMAP stuff that hashes all the > parts > of the windows ID to a 32 bit UID. Anyway to do to this, or will I > need > to find another solution (not for mailing, but for directory > creation)? There's no great way to do this.. A couple of kludgy ways. Like chmod 01777 /var/mail. Or override mail_executable setting to a script that still runs as root and can create the directory with proper permissions. http://wiki.dovecot.org/PostLoginScripting

3 2

[Dovecot] Samba AD and Dovecot
by Trever L. Adams 07 Oct '09

07 Oct '09

Hello All, I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and authentication is AD/Kerberos. How can I configure Dovecot to use both appropriately? 2) I can cause Samba to create certain directories on login, etc. However, I am needing to do this for Dovecot (and Postfix using Dovecot deliver). I would prefer to use Dovecot functionality for this, not Samba.This is not the autocreate folder/subscribe stuff, at least I think not. For example if I have a directory /var/mail/domain/user. Can I have Dovecot auto create (with proper permissions) the domain/user part? These would be used for maildir. Thank you, Trever Adams

2 1

[Dovecot] "Time just moved backwards" in Dovecot in a Xen DomU
by PGNet Dev 07 Oct '09

07 Oct '09

i've dovecot --version 1.2.5 hg log | grep changeset | head -n 1 changeset: 9407:a3e16df805e3 in my logs, i'm seeing ... Oct 05 16:51:40 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:07:22 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:23:15 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards Oct 05 17:38:23 dovecot: Error: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards ... i'm running Dovecot in a Xen DomU, uname -a Linux mail 2.6.27.29-0.1-xen #1 SMP 2009-08-15 17:53:59 +0200 x86_64 x86_64 x86_64 GNU/Linux reading @, http://wiki.dovecot.org/TimeMovedBackwards Bugs/Issues * With Xen you should run ntpd only in dom0. Other domains should synchronize time automatically (see this Xen FAQ). @ my Dom0, ps ax | grep ntp\.conf 5696 ? Ss 1:05 /usr/sbin/ntpd -p /var/run/ntp/ntpd.pid -g -u ntp:ntp -i /var/lib/ntp -c /etc/ntp.conf and, grep localtime /etc/xen/vm/mail.cfg localtime = 0 looking at my ntp logs around the same time(s). ... 5 Oct 16:41:17 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 16:51:38 ntpd[5696]: time reset -2.140133 s 5 Oct 16:56:40 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:01:28 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:07:20 ntpd[5696]: time reset -2.137760 s 5 Oct 17:11:49 ntpd[5696]: synchronized to 204.152.184.72, stratum 1 5 Oct 17:15:01 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:20:49 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 5 Oct 17:23:14 ntpd[5696]: time reset -2.221749 s 5 Oct 17:27:57 ntpd[5696]: synchronized to 64.125.78.85, stratum 1 5 Oct 17:32:52 ntpd[5696]: synchronized to 207.200.81.113, stratum 1 5 Oct 17:38:22 ntpd[5696]: time reset -2.104476 s 5 Oct 17:42:48 ntpd[5696]: synchronized to 66.220.9.122, stratum 1 ... 1 second is not a terribly big deal, but it IS an error ... not clear to me as to what/where the problem actually is. i've not seen an other dameons report any time issues; of course, i'm not sure they're _checking_ :-/ any suggestions as to what/how to fix? thanks!

5 14

Re: [Dovecot] deliver stopped working
by vwc72283＠voicenet.com 07 Oct '09

07 Oct '09

Note to all: If you are running Dovecot on a system where any of the mailboxes are nfs v4 mounted from a RHEL (or derivative) server DO NOT upgrade that server to an unpatched 2.6.18-164 kernel, it is very broken at this time. Not only will Dovecot fail but you're likely to have a myriad of other problems. https://bugzilla.redhat.com/show_bug.cgi?id=523797 https://bugzilla.redhat.com/show_bug.cgi?id=524520 > On Mon, 2009-10-05 at 10:30 -0400, vwc72283(a)voicenet.com wrote: >> So, it is reproducible. Now, if you take O_EXCL out it works even for the user: > .. >> Why I suddenly get the behavior I don't know. Clearly its not deliver, but deliver >> tries >> to do something that behaves badly on this system. > > I've no idea. Never heard of O_EXCL failing in that way. You could > always just remove the O_EXCL uses from Dovecot sources, Dovecot doesn't > rely on them. > >

1 0

[Dovecot] OpenBSD and Dovecot (mysql support)
by jean-francois 06 Oct '09

06 Oct '09

Hello All, I am having difficulties in running dovecot with mysql accounts. The db worked but the config file is hardly something I could do to work properly as it should be, it does even not run saying various errors found in dovecot.conf Has anyone already built dovecot server to run with with a mysql base ? Could it be so that one sends me a conf file that shall work to help me ? Thanks. Jean-François

4 5

Re: [Dovecot] compiling issue 1.2.6 - Solaris
by Bruce Bodger 06 Oct '09

06 Oct '09

On Oct 6, 2009, at 8:26 AM, Bruce Bodger wrote: >>> >>> Same type of problem here on OS X 10.5.8 Server. >>> >>> Command line to configure: ./configure --with-ssldir=/System/ >>> Library/OpenSSL --with-ssl=openssl >>> >>> .. >>> Undefined symbols: >>> "_SSL_get_current_compression", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >>> "_SSL_COMP_get_name", referenced from: >>> _ssl_proxy_get_security_string in liblogin-common.a(ssl-proxy- >>> openssl.o) >> >> What OpenSSL version do you have? I thought those compression >> functions were new enough that everyone would have them by now.. > > > bash-3.2# /usr/bin/OpenSSL version > OpenSSL 0.9.7l 28 Sep 2006 A bit of oddity I just discovered by viewing source code at http://www.opensource.apple.com/ OS X 10.5.8 - OpenSSL 0.9.7l 28 Sep 2006 OS X 10.6.0 - OpenSSL 0.9.6l 04 Nov 2003 OS X 10.6.1 - OpenSSL 0.9.6l 04 Nov 2003 Looks like they moved back to 0.96l in later versions. B. Bodger

3 3

[Dovecot] Move messages marked as Spam
by Michel Bulgado 06 Oct '09

06 Oct '09

Hello I have implemented recently in my work bogofilter utility to mark messages as Spam or Ham, currently is working perfectly, but I want to move those messages marked as spam to a folder called spam. I installed dovecot-sieve with the intention of using fileinto to accomplish this. my question is: where I put this: require "fileinto"; if header :contains "X-Bogosity" "Spam" { fileinto "Spam"; } so that all messages that come to my users go into the spam folder? and how i handle messages that are marked as "Unsure" X-Bogosity: Unsure Thanks Michel

1 0

[Dovecot] Dovecot 1.2.4 - assertion crash in view_lookup_seq_range
by Brandon Davidson 06 Oct '09

06 Oct '09

Hi all, We have a number of machines running Dovecot 1.2.4 that have been assert crashing occasionally. It looks like it's occurring when the users expunge their mailboxes, but I'm not sure as I can't reproduce it myself. The error in the logs is: Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Panic: file mail-index-view.c: line 264 (view_lookup_seq_range): assertion failed: (first_uid > 0) Oct 6 07:33:09 oh-popmap3p dovecot: imap: user=<YYYY>, rip=XXXX, pid=11931: Raw backtrace: imap [0x49e130] -> imap [0x49e193] -> imap [0x49d816] -> imap [0x47e462] -> imap(mail_index_lookup_seq+0x12) [0x47e022] -> imap(mail_index_view_sync_begin+0x36a) [0x47ffba] -> imap(index_mailbox_sync_init+0x7f) [0x45e56f] -> imap(maildir_storage_sync_init+0x100) [0x43cb70] -> imap(imap_sync_init+0x67) [0x428177] -> imap(cmd_sync_delayed+0x174) [0x4283c4] -> imap(client_handle_input+0x19e) [0x420a0e] -> imap(client_input+0x5f) [0x4213ff] -> imap(io_loop_handler_run+0xf8) [0x4a5e98] -> imap(io_loop_run+0x1d) [0x4a4fad] -> imap(main+0x620) [0x428cc0] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x323dc1d994] -> imap [0x4199f9] Oct 6 07:33:09 oh-popmap3p dovecot: dovecot: child 11931 (imap) killed with signal 6 (core dumped) GDB stack information and some additional details are available here: http://uoregon.edu/~brandond/dovecot-1.2.4/stack.txt We are planning to go to 1.2.6 sometime in the next week or two, but I thought I'd try to track this particular error down just in case it's still an issue after the upgrade. -Brad

2 1

[Dovecot] dovecot 1.2.5 - can't create auth listener
by dovecot＠nro.ca 06 Oct '09

06 Oct '09

Hi. I have version 1.1.11 working fine with multiple servers. When I upgrade to 1.2.4 or 1.2.5 I keep getting an error 'can't create auth listener' (address in use) I have two ip addresses (lets call them 1.0.0.1 and 1.0.0.2). Each ip address has it's own certificate and set of servers with custom ports. I don't know how the configuration is supposed to work and it was a lot of google and trial and error to get it working. My configuration file is pretty basic so maybe someone can point out where I'm going wrong. I stripped out the few comments and unrelated settings. #listen = * disable_plaintext_auth = no ssl_ca_file = myca.crt protocol lda { postmaster_address = postmaster(a)example.com } server a1 { protocols = pop3 ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:110 1.0.0.2:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server a2 { protocols = pop3s ssl_cert_file = a1.crt ssl_key_file = a1.key listen = 1.0.0.2:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n1 { protocols = pop3 ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:110 127.0.0.1:111 1.0.0.1:110 1.0.0.1:111 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} server n2 { protocols = pop3s ssl_cert_file = n1.crt ssl_key_file = n1.key listen = 127.0.0.1:995 1.0.0.1:995 auth default { mechanisms = plain passdb pam { } userdb passwd { }}} ...and repeat for imap, imaps Thanks, Sean

2 1

[Dovecot] Debugging IMAP ACLs
by Kerem Erciyes 06 Oct '09

06 Oct '09

Hello, I upgraded my server to 1.2.4 and now I'm trying to implement ACL support to use with Bynari Insight Connector. Starting out with the wiki page on shared namespaces from http://wiki.dovecot.org/SharedMailboxes/Shared I tried to implement shared mailbox support so that my customers can enjoy more exhange-like qualities with outlook. However I am not sure if the ACLs or Shared Namespaces are really working. I sure would like some help debugging ACL requests by clients, and the configuration I did. Thanks, Kerem Here is the run down of my configuration, if I have screwed up somewhere. *dovecot -n* # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.2-STABLE i386 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-debug.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Kupyazilim IMAPS/POP3S Server - Dovecot ready. verbose_proctitle: yes first_valid_uid: 100 first_valid_gid: 6 mail_privileged_group: mail mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u list: children lda: postmaster_address: postmaster(a)kupyazilim.com.tr mail_plugins: quota log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: acl_shared_dict: proxy::acl dict: quota: maildir:storage=10240:messages=1000 trash: /usr/local/etc/trash.conf acl: mysql:/usr/local/etc/dovecot-dict-sql.conf * cat /usr/local/etc/dovecot-acl.conf * # mail_location copied from dovecot.conf for reference only # # mail_location: mbox:~/mail/:INBOX=/usr/home/vmail/%d/%u # note: it is %d/%u here but only %u in dovecot-sql.conf # You need to create also a private namespace: namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = shared/%%u/ #location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u location = mbox:/usr/home/vmail/%d/%u:INDEX=/usr/home/vmail/shared/%%u subscriptions = no list = children } # Set ACL to SQL Server and Reference sql-dictionary # Table implemented in mysql:/postfix/user_shares plugin { acl_shared_dict = proxy::acl } dict { acl = mysql:/usr/local/etc/dovecot-dict-sql.conf } *cat /usr/local/etc/dovecot-dict-sql.conf * map { pattern = shared/shared-boxes/user/$to/$from table = user_shares value_field = dummy fields { from_user = $from to_user = $to } } -- Kerem Erciyes Sistem Danismani http://proje.keremerciyes.com kerem.erciyes(a)gmail.com +90 532 737 05 83

3 6

[Dovecot] issues with ACL and Public Namespaces
by Anton Dollmaier 06 Oct '09

06 Oct '09

Hi all, after configuring dovecot to serve private and Public Namespaces per domain with ACLs per shared folder, everything worked great: In every shared folder I created a "dovecot-acl"-file with the permissions of every user: > user=user5(a)example.com > user=user6(a)example.com lrwstiea The subscriptions are handled with "subscriptions=no", so every local User can subscribe to shared folders as he likes. As the shared folders are managed via webinterface, the cronjob creating and deleting the folders also changes the subscriptions of every user, adding or removing the public folders as permissions are granted. RoundCube Webmail, Thunderbird and Outlook have no problems accessing and using the public folders, but a customer has problems with his Mac: In Apple Mail the folders are not visible, even when subscriptions are previously set in another mailclient. In RoundCube, I spottet another issue: subscribed public folders are usable in the "Mail"-area, but no public folder is listed in the "Folder"-settings - not even the already subscribed ones. Setting "list=yes" to the public namespace, RC lists only the prefix "shared" as a folder, but no subfolders - "list=children" shows no folder at all. As I checked the rawlog and debug-infos with "mail_debug=yes", I saw the possible cause for my problems: When checking the Folder Subscriptions in RoundCube, Dovecot tries to find an ACL file for the public folders, but does not check the public folders, but in the private Maildir: > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:24:16 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Sent/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Spam/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.Trash/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/user6//Maildir/dovecot-acl > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: file /var/mail/vmail/example.com/user6//Maildir/.shared.Transfer.Test1/dovecot-acl not found > Oct 6 15:24:16 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=73/819 (last three lines are important) When checking the Folder itself, Dovecot checks in the IMHO correct folder: > Oct 6 15:25:02 ipx02 dovecot: imap-login: Login: user=<user6(a)example.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Loading modules from directory: /usr/lib/dovecot/modules/imap > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib01_acl_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Module loaded: /usr/lib/dovecot/modules/imap/lib20_expire_plugin.so > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Effective uid=249, gid=249, home=/var/mail/vmail/example.com/user6/ > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: No acl_shared_dict setting - shared mailbox listing is disabled > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=INBOX backend=dict args=:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=* bytes=52428800 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=INBOX mailbox=Trash bytes=62914560 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=49807360 (95%) messages=0 command=/usr/local/bin/quota-warning.sh 95 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota warning: bytes=41943040 (80%) messages=0 command=/usr/local/bin/quota-warning.sh 80 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota root: name=shared backend=dict args=example.com:ns=shared.:proxy::quotadict > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Quota rule: root=shared mailbox=* bytes=524288000 messages=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Trash type=expunge secs=604800 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): expire: pattern=Spam type=expunge secs=2592000 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=user6(a)example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): dict quota: user=example.com, uri=proxy::quotadict, noenforcing=0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=~/Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/user6//Maildir, index=, control=, inbox=/var/mail/vmail/example.com/user6//Maildir > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 1 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace: type=public, prefix=shared., sep=., inbox=no, hidden=no, list=yes, subscriptions=no > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir: data=/var/mail/vmail/example.com/shared:INDEX=~/shared > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): maildir++: root=/var/mail/vmail/example.com/shared, index=/var/mail/vmail/example.com/user6//shared, control=, inbox= > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: initializing backend with data: vfile > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: acl username = user6(a)example.com > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl: owner = 0 > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: Global ACL directory: (null) > Oct 6 15:25:02 ipx02 dovecot: IMAP(user6(a)example.com): Namespace : Using permissions from /var/mail/vmail/example.com/user6//Maildir: mode=0700 gid=-1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): acl vfile: reading file /var/mail/vmail/example.com/shared/.Transfer.Test1/dovecot-acl > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): expire: No expiring in mailbox: shared.Transfer.Test1 > Oct 6 15:25:03 ipx02 dovecot: IMAP(user6(a)example.com): Disconnected: Logged out bytes=85/743 (last four lines are important) Is this a possible bug related to ACL and Public Namespaces, or do I have to create the public folders also in the local Maildir and symlink the dovecot-acl to the public folder? With the symlinks in place (per Folder), dovecot finds the ACL-files and lists the folders also in RoundCube's "Folder"-pane and Apple Mail finds the public folders too. Upgrading to 1.2.5 failed so far, as my build-server has problems with automake, have to look into this too. Thanks in advance! best regards, Anton Dollmaier Output of dovecot -n: > # 1.2.3: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.18-6-686 i686 Debian 5.0.3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3s pop3 > listen: *, [::] > ssl_cert_file: /etc/dovecot/dovecot.pem > ssl_key_file: /etc/dovecot/dovecot.pem > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_max_userip_connections(default): 25 > mail_max_userip_connections(imap): 25 > mail_max_userip_connections(pop3): 10 > first_valid_uid: 249 > mail_access_groups: poponly > mail_privileged_group: poponly > mail_location: maildir:~/Maildir > mail_debug: yes > mail_executable(default): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota acl autocreate expire > mail_plugins(imap): quota imap_quota acl autocreate expire > mail_plugins(pop3): quota expire > mail_plugin_dir(defamiult): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): netscape-eoh > imap_client_workarounds(imap): netscape-eoh > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > namespace: > type: private > separator: . > inbox: yes > list: yes > subscriptions: yes > namespace: > type: public > separator: . > prefix: shared. > location: maildir:/var/mail/vmail/%d/shared:INDEX=~/shared > list: yes > lda: > postmaster_address: postmaster(a)server.example.com > mail_plugins: quota expire > quota_full_tempfail: yes > auth_socket_path: /var/run/dovecot/auth-master > log_path: /var/log/dovecot-deliver.log > info_log_path: /var/log/dovecot-deliver.log > sieve_global_dir: /etc/dovecot/sieve/ > sieve_global_path: /etc/dovecot/default.sieve > auth default: > mechanisms: plain login > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql-master.conf > userdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: postfix > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: vmail > group: vmail > plugin: > quota: dict:INBOX::proxy::quotadict > quota2: dict:shared:%d:ns=shared.:proxy::quotadict > quota_rule: *:storage=50M:messages=1000 > quota_rule2: Trash:storage=50M:messages=100 > quota2_rule: *:storage=100M:messages=1000 > quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 > quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 > acl: vfile > expire: Trash 7 Spam 30 > expire_dict: proxy::expire > autocreate: Trash > autocreate2: Spam > autocreate3: Sent > autosubscribe: Trash > autosubscribe2: Spam > autosubscribe3: Sent > dict: > quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf > expire: mysql:/etc/dovecot/dovecot-dict-expire.conf

2 3

[Dovecot] v1.2.6 released
by Timo Sirainen 06 Oct '09

06 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.6.tar.gz.sig A couple of random things: - I decided to start using "hg sign" to gpg sign all releases in mercurial repository. - v2.0.alpha1 will hopefully be released in a week or two. Changes since 1.2.5: * Upgraded to Unicode 5.2.0 + Added authtest utility for doing passdb and userdb lookups. + login: ssl_security string now also shows the used compression. - quota: Don't crash with non-Maildir++ quota backend. - imap proxy: Fixed crashing with some specific password characters. - dovecot --exec-mail was broken. - Avoid assert-crashing when two processes try to create index at the same time.

2 1

[Dovecot] Proxy setup & upgrade from 1.0.3 to 1.1.7
by Adrian Wojcicki | Unternehmensberatung Wojcicki 06 Oct '09

06 Oct '09

Hi guys! I hope somebody can help me with my problem: We have a server running dovecot and proxying IMAPS connections to our internal network. This worked so far very good until we upgraded the server to a new SUSE Linux version and with it dovecot from version 1.0.3 to 1.1.7. My guess is that something changed in the way dovecot reads the user file as the configuration stayed the same: dovecot.conf: base_dir = /var/run/dovecot/ protocols = imaps disable_plaintext_auth = yes ssl_cert_file = /<pathtocertificate> ssl_key_file = /<pathtocertificate> ssl_disable = no ssl_listen = 80.149.64.98:993 log_path = /var/log/dovecot.log login_dir = /var/run/dovecot/login login_process_per_connection = yes login_processes_count = 3 login_greeting = main.xbdx.de IMAP What can we do for you? imap_client_workarounds = tb-extra-mailbox-sep mail_debug = no auth_debug = yes auth_cache_size = 4096 auth_cache_ttl = 7200 auth_worker_max_count = 30 auth default { userdb static { args = uid=5000 gid=5000 } passdb { driver = passwd-file args = /etc/dovecot/dovecot.passdb } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } mechanisms = plain login user = root count = 1 } dovecot.passdb: testuser1:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y testuser2:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y dovecot.log: dovecot: Oct 06 10:37:26 Info: Dovecot v1.1.7 starting up dovecot: Oct 06 10:37:26 Info: auth(default): passwd-file /etc/dovecot/dovecot.passdb: Read 2 users dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8135 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8136 dovecot: Oct 06 10:37:27 Info: auth(default): new auth connection: pid=8137 dovecot: Oct 06 10:37:39 Info: auth(default): new auth connection: pid=8139 dovecot: Oct 06 10:37:39 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=80.149.64.98 rip=217.91.33.32 lport=993 rport=61752 resp=<hidden> dovecot: Oct 06 10:37:39 Info: auth(default): cache(adrian.wojcicki,217.91.33.32): miss dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): lookup: user=testuser1 file=/etc/dovecot/dovecot.passdb dovecot: Oct 06 10:37:39 Info: auth(default): passwd-file(testuser1,217.91.33.32): Password mismatch dovecot: Oct 06 10:37:41 Info: auth(default): client out: FAIL 1 user=testuser1 host=<internalip> port=143 nologin proxy pass=<hidden> dovecot: Oct 06 10:37:41 Info: imap-login: Aborted login (auth failed, 1 attempts): user=<testuser1>, method=PLAIN, rip=217.91.33.32, lip=80.149.64.98, TLS Thanks! Adrian

2 2

[Dovecot] How to calculate auth_cache_size ?
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello Is there a way to calculate this parameter for my site which has approx 4000 users authenticating thru NIS ? Thanks a lot

2 1

[Dovecot] Delivery failure about update to 1.2.4 (Debian)
by William Witteman 06 Oct '09

06 Oct '09

Version: 1.2.4 Config: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian squeeze/sid ext3 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot-info.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_ca_file: /etc/ssl/certs/gd_intermediate_bundle2.crt ssl_cert_file: /etc/ssl/certs/theta.crt ssl_key_file: /etc/ssl/private/theta.key ssl_key_password: obfuscated disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%d/%n mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: log_path: /home/vmail/dovecot-deliver.log auth_socket_path: /var/run/dovecot/auth-master postmaster_address: obfuscated mail_plugins: cmusieve global_script_path: /home/vmail/globalsieverc auth default: mechanisms: plain login digest-md5 user: vmail debug: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail I recently updated Debian (testing). Now, no mail is getting from postfix to dovecot, but postfix didn't get upgraded. dovecot seems happy (after I fixed the "ssl = yes" change (speaking of which, that line is not in the dovecot -n output)), but postfix is unable to deliver email to it. Here is a sample mail.log entry: Oct 5 14:47:07 theta postfix/pipe[30972]: 451873B5B8: to=<obfuscated>, relay=dovecot, delay=168521, delays=168521/0.01/0/0.02, dsn=4.3.0, status=deferred (temporary failure) I cannot seem to figure out what changed and why things are now broken. Can anyone help? Thanks. -- yours, William

3 8

[Dovecot] Apple mail troubles
by Frank Bonnet 06 Oct '09

06 Oct '09

Hello I have an Apple computer user who has great problems using IMAP and Dovecot. Some same messages seems to stay in two or more folders and are impossible to erase from the Apple mail client Anyone has that kind of troubles ? Thanks

7 8

[Dovecot] Dovecot And ThunderBird
by Михаил Захаренко 05 Oct '09

05 Oct '09

Hello All! i`m using Dovecot 1.2.4 and Thunderbird 2.0.0.23 (Ubuntu) Trouble with shared folder and marks. For example: 1. first user set flag "important", other users can see it - all ok. 2. first user unset flag "important", other users see it yet, it`s don`t change. But with asterisk (\Flagged) all OK. Please help find - who are wrong? ThunderBird or dovecot? my conf: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-hardened-r9 i686 Gentoo Base System release 1.12.11.1 reiserfs log_path: /var/log/dovecot_err.log info_log_path: /var/log/dovecot_info.log protocols: imap pop3 imaps pop3s managesieve ssl_cert_file: /etc/dovecot/ssl/mail.proton-sss.ru.pem ssl_key_file: /etc/dovecot/ssl/mail.proton-sss.ru.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login mail_location: maildir:/home/%u/.maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:%%h/.maildir/:INDEX=%h/.maildir/shared/%%u list: children lda: postmaster_address: postmaster(a)example.com mail_plugins: acl mail_plugin_dir: /usr/lib/dovecot/lda auth default: passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: mail group: users plugin: acl: vfile acl_shared_dict: file:/var/lib/dovecot/shared-mailboxes sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: expire: db:/var/lib/dovecot/expire.db file dovecot-shared in shared maildir presents, and flag \Seen are private. -- С уважением Системный администратор ООО НПП "СПЕЦСТРОЙ-СВЯЗЬ" Захаренко Михаил тел. +78634 311562 доб. 478

2 3

[Dovecot] Dovecot fails when vpopmail is enabled
by Sherin George 05 Oct '09

05 Oct '09

Hello Friends, ===================================================== -bash-3.2# dovecot --version 1.2.5 -bash-3.2# dovecot -n # 1.2.5: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-128.4.1.el5xen x86_64 CentOS release 5.2 (Final) login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login lda: postmaster_address: postmaster(a)example.com auth default: passdb: driver: pam userdb: driver: passwd ===================================================== I am trying to enable vpomail support in dovecot. I modified default dovecot conf file as given below. =============================================== -bash-3.2# diff /etc/dovecot.conf /etc/dovecot.conf.original 691c691 < auth_cache_size = 1000 --- > #auth_cache_size = 0 886c886 < passdb vpopmail { --- > #passdb vpopmail { 888,890c888,890 < args = cache_key=%u%s * < } < --- > #args = > #} > =============================================== I am not able to run dovecot after this. ========================================= -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] -bash-3.2# ========================================= Could some one please help me to find what went wrong. -- Thanks, Sherin

2 2

[Dovecot] dovecot 1.0.15 upgrading to dovecot 1.1.x or 1.2.x, and POP3 UIDL issue
by Ariel Biener 05 Oct '09

05 Oct '09

Hi, We're upgrading a cluster of servers from v1.0.15 to v1.1.x or v1.2.x. It appears that the UIDL generation mechanism has changed, and thus we'll be getting POP3 dups with users that leave mail on server (which is a nasty practice, I know). From checking the sources, and performing a number of controlled tests in various scenarios, here is the outcome: upgrade from 1.0.15 to 1.1.x (latest), UIDLs change (no change to the mail backend, that is, mbox) However, the interesting part is that if for example I read a mailbox for the first time with the 1.1.x version, and then I migrate the mailbox to a different server, running 1.1.x or 1.2.x, with Maildir or mailbox the UIDL does *NOT* change. We do not have X-UIDL headers in the mailboxes. I did every possible permutation of these tests. It appears that the way UIDLs are created in 1.0.x is different than what is used in 1.1.x and 1.2.x. (I am not talking about the format, we're using the same format in both, that is, UW compatible). Since we're a largish site (university), and we have some >60k accounts, even the smallest percentage of users who use POP3 and "leave mail on server" is a large number of angry staff members landing on our helpdesk, which is the reason why we're not migrating. Has anyone ever ported the UIDL generation algorithm from 1.0.x to 1.1.x/1.2.x to maintain compatibility ? Is there some other option that I am missing ? --Ariel

2 2

[Dovecot] Quota exceeded delivery message
by michel＠casa.co.cu 05 Oct '09

05 Oct '09

Hi I have assigned quotas to my users and in turn use quota_warning for my users send them a message saying that the level of its quota is about to be exceeded. when the quota is exceeded, the script runs again sending a message to the user and is rejected by the server. there is any way to get the message when the postmaster, is delivered to the mailbox even when exceeded the quota or simply not send it once exceeded the quota level? quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 quota = maildir quota_rule = *:storage=40M Another question: I've implemented recently in my work Bogofilter to mark messages as SPAM or HAM. Using dovecot as IMAP and POP3 server and deliver, there is some way to move messages marked as SPAM to a folder called spam or junk? I've heard that can be done with sieve, is this true? fileinto? Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba.

2 1

[Dovecot] Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied
by Jerry 05 Oct '09

05 Oct '09

I am making my first attempt to get dovecot working with Postfix virtual users/domains. The following is the error log and the output of "dovecot -n". I am probably doing something really stupid; however, I do not know what. Oct 03 17:50:41 pop3-login: Info: Login: user=<user(a)mydomain.com>, method=PLAIN, rip=192.168.1.103, lip=192.168.1.103, TLS Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Effective uid=1001, gid=1001, home=/var/mail/virtual/mydomain.com/user Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: maildir: data=/var/mail/vhost/seibercom.net/budman Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: maildir++: root=/var/mail/vhost/seibercom.net/budman, index=, control=, inbox=/var/mail/vhost/mydomain.com/user Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Namespace : Using permissions from /var/mail/vhost/mydomain.com/user: mode=0755 gid=-1 Oct 03 17:50:41 POP3(user(a)mydomain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Oct 03 18:13:13 deliver(user(a)mydomain.com): Error: userdb lookup: connect(/var/run/dovecot/auth-master) failed: Permission denied # dovecot -n # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-STABLE i386 ufs log_path: /usr/home/gerard/tmp/dovecot.log protocols: pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot serving mydomain.net greets you! verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/%d/%n mail_debug: yes mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh dict_db_config: /usr/local/etc/dovecot-db.conf lda: postmaster_address: postmaster(a)mydomain.net sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login username_format: %Lu verbose: yes debug_passwords: yes passdb: driver: pam passdb: driver: passwd-file args: /usr/local/etc/dovecot_passwd userdb: driver: passwd args: blocking=yes userdb: driver: static args: uid=gerard gid=gerard home=/var/mail/virtual/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 -- Jerry gesbbb(a)yahoo.com "What do you do when your real life exceeds your wildest fantasies?" "You keep it to yourself." Broadcast News

2 2

[Dovecot] deliver stopped working
by vwc72283＠voicenet.com 05 Oct '09

05 Oct '09

Hi: I have been using Dovecot for well over a year now and it has always worked with few problems. The mail setup is not simple... Postfix+MailScanner+ClamAV+Docvecot+MySql+postfix.admin... just to mention the major things. The system is CentOS 5.3 on VMware. The maildir is on an NFS share, index and control is local. About a month ago I thought I upgraded from 1.1.x to 1.2.x. by doing an rpmbuild and deploying. I say thought because today I determined the binaries were still 1.1x. Today a reboot was done after a kernel upgrade (2.6.18-128.x -> 2.6.18-164). The mail system never came back up. My assumption is that the working binaries were in memory but the images on disk were changed. Anyway, the problem is with deliver writing to the mail dir. The error is: Oct 3 21:33:58 myserver dovecot: auth(default): master in: USER 1 myaccount(a)mydomain.net service=deliver Oct 3 21:33:58 myserver dovecot: auth(default): prefetch(myaccount(a)mydomain.net): passdb didn't return userdb entries, trying the next userdb Oct 3 21:33:58 myserver dovecot: auth-worker(default): sql(myaccount(a)mydomain.net): SELECT '/home/vmail/mydomain.net/myaccount' as home, 'maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain.net/…' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = 'myaccount(a)mydomain.net' AND active = '1' Oct 3 21:33:58 myserver dovecot: auth(default): master out: USER 1 myaccount(a)mydomain.net home=/home/vmail/mydomain.net/myaccount mail=maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain… uid=5000 gid=5000 quota=dirsize:storage=0 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: home=/home/vmail/mydomain.net/myaccount Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: mail=maildir:/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain… Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: uid=5000 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: gid=5000 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): auth input: quota=dirsize:storage=0 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): maildir: data=/home/vmail/mydomain.net/myaccount:INDEX=/var/indexes/mydomain.net/mya… Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): maildir++: root=/home/vmail/mydomain.net/myaccount, index=/var/indexes/mydomain.net/myaccount, control=/var/indexes/mydomain.net/myaccount, inbox=/home/vmail/mydomain.net/myaccount Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): Namespace : Using permissions from /home/vmail/mydomain.net/myaccount: mode=0770 gid=-1 Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): open(/home/vmail/mydomain.net/myaccount/tmp/1254620038.M241510P27678.myserv… failed: Permission denied Oct 3 21:33:58 myserver dovecot: deliver(myaccount(a)mydomain.net): msgid=<200910040116.n941GjtJ001913(a)nm2srvp01.mydomain.net>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2009-10-03 21:33:58] Oct 3 21:33:58 myserver postfix/pipe[27677]: 89A24914CB: to=<myaccount(a)mydomain.net>, orig_to=<server.ops(a)mydomain.net>, relay=dovecot, delay=1033, delays=1032/0.16/0/0.31, dsn=4.3.0, status=deferred (temporary failure) The files are being created: (root@myserver:/home/vmail/mydomain.net/myaccount/tmp)# ls -la total 156 drwxrwx--- 2 vmail vmail 4096 Oct 3 21:49 . drwxrwx--- 9 vmail vmail 4096 Oct 3 20:19 .. ---------- 1 vmail vmail 0 Nov 30 1970 1254620038.M241510P27678.myserver.mydomain.net The user does have permission: (root@myserver:/home/vmail/mydomain.net/myaccount/tmp)# su - vmail -bash-3.2$ pwd /home/vmail/mydomain.net/myaccount/tmp -bash-3.2$ ls -la total 160 drwxrwx--- 2 vmail vmail 4096 Oct 3 21:54 . drwxrwx--- 9 vmail vmail 4096 Oct 3 20:19 .. ---------- 1 vmail vmail 0 Nov 30 1970 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ rm 1254620038.M241510P27678.myserver.mydomain.net rm: remove write-protected regular empty file `1254620038.M241510P27678.myserver.mydomain.net'? y -bash-3.2$ echo this > 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ ls -la 1254620038.M241510P27678.myserver.mydomain.net -rw-r--r-- 1 vmail vmail 5 Oct 3 21:58 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ cat 1254620038.M241510P27678.myserver.mydomain.net this -bash-3.2$ rm 1254620038.M241510P27678.myserver.mydomain.net -bash-3.2$ If you delete the directory it does get recreated. I upgraded to 1.2.5 but it did not help. There were a lot of errors in the audit.log, however SELinux was already in permissive mode and switching it to disabled did no good. I created the following policy to get rid of all of the errors in the audit log: module local_postfix 1.0; require { type postfix_etc_t; type home_root_t; type apmd_t; type setrans_t; type port_t; type etc_mail_t; type snmpd_t; type tmp_t; type dovecot_deliver_t; type postfix_smtp_t; type nfs_t; type var_run_t; type usr_t; type httpd_t; type audisp_t; type postfix_cleanup_t; type inetd_t; type portmap_t; type postfix_pickup_t; type hald_t; type getty_t; type avahi_t; type etc_t; type sysctl_kernel_t; type unconfined_t; type init_t; type auditd_t; type lib_t; type dovecot_auth_t; type syslogd_t; type hostname_exec_t; type postfix_smtpd_t; type var_spool_t; type system_dbusd_t; type mysqld_etc_t; type initrc_t; type proc_t; type restorecond_t; type etc_runtime_t; type postfix_bounce_t; type ntpd_t; type kernel_t; type postfix_master_t; type rpcd_t; type dovecot_t; type klogd_t; type udev_t; type clamd_t; type mysqld_port_t; type initrc_var_run_t; type var_t; type postfix_qmgr_t; type postfix_pipe_t; type crond_t; class process ptrace; class unix_stream_socket connectto; class tcp_socket { name_bind name_connect }; class file { rename execute read lock create ioctl execute_no_trans write getattr link unlink }; class sock_file { setattr create write getattr unlink }; class lnk_file { read getattr }; class dir { search setattr read create write getattr remove_name add_name }; } #============= clamd_t ============== allow clamd_t proc_t:file { read getattr }; allow clamd_t sysctl_kernel_t:dir search; allow clamd_t sysctl_kernel_t:file read; allow clamd_t var_t:dir read; allow clamd_t var_t:file { read getattr }; #============= dovecot_auth_t ============== allow dovecot_auth_t mysqld_etc_t:file { read getattr }; allow dovecot_auth_t mysqld_port_t:tcp_socket name_connect; allow dovecot_auth_t var_run_t:dir { write remove_name add_name }; allow dovecot_auth_t var_run_t:sock_file { write create unlink setattr }; #============= dovecot_deliver_t ============== allow dovecot_deliver_t nfs_t:dir { write search add_name create getattr }; allow dovecot_deliver_t nfs_t:file create; allow dovecot_deliver_t postfix_master_t:file read; allow dovecot_deliver_t postfix_pipe_t:file read; allow dovecot_deliver_t var_run_t:sock_file write; allow dovecot_deliver_t var_t:file { read write getattr lock }; #============= dovecot_t ============== allow dovecot_t initrc_var_run_t:file read; allow dovecot_t lib_t:dir { write create add_name }; allow dovecot_t lib_t:file create; allow dovecot_t nfs_t:dir { write search read remove_name create add_name }; allow dovecot_t nfs_t:file { read rename getattr unlink link }; allow dovecot_t var_run_t:sock_file { write getattr unlink create setattr }; allow dovecot_t var_t:dir { write remove_name add_name setattr }; allow dovecot_t var_t:file { rename write getattr read lock create unlink }; #============= httpd_t ============== allow httpd_t apmd_t:dir { getattr search }; allow httpd_t apmd_t:file read; allow httpd_t audisp_t:dir { getattr search }; allow httpd_t audisp_t:file read; allow httpd_t auditd_t:dir { getattr search }; allow httpd_t auditd_t:file read; allow httpd_t avahi_t:dir { getattr search }; allow httpd_t avahi_t:file read; allow httpd_t clamd_t:dir { getattr search }; allow httpd_t clamd_t:file read; allow httpd_t crond_t:dir { getattr search }; allow httpd_t crond_t:file read; allow httpd_t dovecot_auth_t:dir { getattr search }; allow httpd_t dovecot_auth_t:file read; allow httpd_t dovecot_t:dir { getattr search }; allow httpd_t dovecot_t:file read; allow httpd_t etc_mail_t:dir { read search getattr }; allow httpd_t etc_mail_t:file { read getattr ioctl }; allow httpd_t etc_mail_t:lnk_file read; allow httpd_t etc_runtime_t:file { write rename unlink }; allow httpd_t etc_t:dir { write remove_name add_name }; allow httpd_t getty_t:dir { getattr search }; allow httpd_t getty_t:file read; allow httpd_t hald_t:dir { getattr search }; allow httpd_t hald_t:file read; allow httpd_t hostname_exec_t:file { read getattr execute execute_no_trans }; allow httpd_t inetd_t:dir { getattr search }; allow httpd_t inetd_t:file read; allow httpd_t init_t:dir { getattr search }; allow httpd_t init_t:file read; allow httpd_t initrc_t:dir { getattr search }; allow httpd_t initrc_t:file read; allow httpd_t kernel_t:dir { getattr search }; allow httpd_t kernel_t:file read; allow httpd_t klogd_t:dir { getattr search }; allow httpd_t klogd_t:file read; allow httpd_t mysqld_port_t:tcp_socket name_connect; allow httpd_t ntpd_t:dir { getattr search }; allow httpd_t ntpd_t:file read; allow httpd_t port_t:tcp_socket name_bind; allow httpd_t portmap_t:dir { getattr search }; allow httpd_t portmap_t:file read; allow httpd_t postfix_bounce_t:dir { getattr search }; allow httpd_t postfix_bounce_t:file read; allow httpd_t postfix_cleanup_t:dir { getattr search }; allow httpd_t postfix_cleanup_t:file read; allow httpd_t postfix_master_t:dir { getattr search }; allow httpd_t postfix_master_t:file read; allow httpd_t postfix_pickup_t:dir { getattr search }; allow httpd_t postfix_pickup_t:file read; allow httpd_t postfix_pipe_t:dir { getattr search }; allow httpd_t postfix_pipe_t:file read; allow httpd_t postfix_qmgr_t:dir { getattr search }; allow httpd_t postfix_qmgr_t:file read; allow httpd_t postfix_smtp_t:dir { getattr search }; allow httpd_t postfix_smtp_t:file read; allow httpd_t postfix_smtpd_t:dir { getattr search }; allow httpd_t postfix_smtpd_t:file read; allow httpd_t restorecond_t:dir { getattr search }; allow httpd_t restorecond_t:file read; allow httpd_t rpcd_t:dir { getattr search }; allow httpd_t rpcd_t:file read; allow httpd_t self:process ptrace; allow httpd_t setrans_t:dir { getattr search }; allow httpd_t setrans_t:file read; allow httpd_t snmpd_t:dir { getattr search }; allow httpd_t snmpd_t:file read; allow httpd_t syslogd_t:dir { getattr search }; allow httpd_t syslogd_t:file read; allow httpd_t system_dbusd_t:dir { getattr search }; allow httpd_t system_dbusd_t:file read; allow httpd_t udev_t:dir { getattr search }; allow httpd_t udev_t:file read; allow httpd_t unconfined_t:dir { getattr search }; allow httpd_t unconfined_t:file read; allow httpd_t var_spool_t:dir { read write remove_name }; allow httpd_t var_spool_t:file { read getattr unlink ioctl }; allow httpd_t var_t:file { read write getattr lock }; #============= postfix_master_t ============== allow postfix_master_t postfix_etc_t:lnk_file getattr; #============= postfix_pipe_t ============== allow postfix_pipe_t home_root_t:dir search; allow postfix_pipe_t initrc_t:unix_stream_socket connectto; allow postfix_pipe_t nfs_t:dir { write search add_name create getattr }; allow postfix_pipe_t nfs_t:file create; allow postfix_pipe_t tmp_t:dir search; allow postfix_pipe_t usr_t:file { read execute execute_no_trans }; allow postfix_pipe_t var_run_t:sock_file write; allow postfix_pipe_t var_t:file { read write getattr lock }; #============= postfix_smtpd_t ============== allow postfix_smtpd_t initrc_t:unix_stream_socket connectto; ...so now the audit.log is clean but no matter what I've tried I can't get deliver to deliver messages to the inboxes. Some of the system details: (root@myserver:/etc/dovecot)# dovecot -c /etc/dovecot/dovecot.conf -n # 1.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-164.el5 i686 CentOS release 5.3 (Final) base_dir: /var/run/dovecot/ log_timestamp: ¦%Y-%m-%d %H:%M:%S ¦ listen: 127.0.0.1:143 ssl_listen: *:993 ssl_ca_file: /etc/pki/mydomain/mailserver/certs/class3.crt ssl_cert_file: /etc/pki/mydomain/mailserver/certs/myserver.mydomain.net.crt ssl_key_file: /etc/pki/mydomain/mailserver/private/myserver.mydomain.net.key verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 5000 last_valid_uid: 5000 mail_access_groups: vmail mail_location: maildir:/var/vmail/%d/%u:INDEX=/var/indexes/%d/%n mail_debug: yes mail_nfs_storage: yes mbox_read_locks: dotlock mbox_write_locks: dotlock mail_executable: /usr/libexec/dovecot/imap imap_client_workarounds: outlook-idle, tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)mydomain.net sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth_executable: /usr/libexec/dovecot/dovecot-auth auth default: user: nobody verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail (root@myserver:/etc/dovecot)# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=mydatabaseserver.mydomain.net dbname=mydatabasename user=mydovecotuser password=********** default_pass_scheme = MD5 user_query = SELECT '/home/vmail/%d/%n' as home, 'maildir:/home/vmail/%d/%n:INDEX=/var/indexes/%d/%n:CONTROL=/var/indexes/%d/%n' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT password FROM mailbox WHERE username = '%u' AND active = '1' (root@ms1srvp01:/etc/dovecot)# ps -ef UID PID PPID C STIME TTY TIME CMD clamav 2138 1 0 12:49 ? 00:00:06 clamd root 26744 1 0 21:03 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf nobody 26745 26744 0 21:03 ? 00:00:00 dovecot-auth nobody 26747 26744 0 21:03 ? 00:00:00 dovecot-auth -w dovecot 26748 26744 0 21:03 ? 00:00:00 imap-login dovecot 26749 26744 0 21:03 ? 00:00:00 imap-login dovecot 26750 26744 0 21:03 ? 00:00:00 imap-login root 26888 1 0 21:03 ? 00:00:00 /usr/libexec/postfix/master postfix 26889 26888 0 21:03 ? 00:00:00 qmgr -l -t fifo -u postfix 26890 26888 0 21:03 ? 00:00:00 pickup -l -t fifo -u postfix 26910 1 0 21:03 ? 00:00:00 MailScanner: master waiting for children, sleeping postfix 26911 26910 0 21:03 ? 00:00:03 MailScanner: waiting for messages postfix 26915 1 0 21:03 ? 00:00:00 MailWatch SQL postfix 26918 26910 0 21:03 ? 00:00:03 MailScanner: waiting for messages postfix 26923 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26934 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26939 26910 0 21:04 ? 00:00:03 MailScanner: waiting for messages postfix 26950 26888 0 21:04 ? 00:00:00 tlsmgr -l -t unix -u nobody 27002 26744 0 21:08 ? 00:00:00 dovecot-auth -w vmail 27035 26744 0 21:09 ? 00:00:01 imap [myaccount(a)mydomain.net 192.168.2.151] vmail 27036 26744 0 21:09 ? 00:00:01 imap [myotheraccount1(a)myotherdomain.com 192.168.2.151] vmail 27037 26744 0 21:09 ? 00:00:01 imap [myaccount(a)mydomain.com 192.168.2.151] dovecot 27038 26744 0 21:09 ? 00:00:00 imap-login dovecot 27039 26744 0 21:09 ? 00:00:00 imap-login dovecot 27040 26744 0 21:09 ? 00:00:00 imap-login dovecot 27041 26744 0 21:09 ? 00:00:00 imap-login dovecot 27042 26744 0 21:09 ? 00:00:00 imap-login dovecot 27043 26744 0 21:09 ? 00:00:00 imap-login vmail 27044 26744 0 21:09 ? 00:00:01 imap [myotheraccount2(a)myotherdomain.com 192.168.2.151] nobody 28288 26744 0 22:09 ? 00:00:00 dovecot-auth -w nobody 28292 26744 0 22:09 ? 00:00:00 dovecot-auth -w postfix 28938 26888 0 22:19 ? 00:00:00 pipe -n dovecot -t unix flags=DRhu user=vmail vmail argv=/usr/libexec/dovecot/deliver -c /etc/dovecot/dovecot.conf -f ${sender} -d ${recipient} postfix 28672 26888 0 22:19 ? 00:00:00 bounce -z -n defer -t unix -u ONLY RELEVENT ENTRIES (root@ms1srvp01:~)# lsof | grep 28938 pipe 28938 postfix cwd DIR 253,0 4096 425985 /var/spool/postfix pipe 28938 postfix rtd DIR 253,0 4096 2 / pipe 28938 postfix txt REG 253,0 241092 589991 /usr/libexec/postfix/pipe pipe 28938 postfix mem REG 253,0 99028 210032 /usr/lib/libsasl2.so.2.0.22 pipe 28938 postfix mem REG 253,0 46680 394117 /lib/libnss_files-2.5.so pipe 28938 postfix mem REG 253,0 33680 210024 /usr/lib/libkrb5support.so.0.1 pipe 28938 postfix mem REG 253,0 190712 210027 /usr/lib/libgssapi_krb5.so.2.2 pipe 28938 postfix mem REG 253,0 610836 210026 /usr/lib/libkrb5.so.3.3 pipe 28938 postfix mem REG 253,0 157304 210025 /usr/lib/libk5crypto.so.3.1 pipe 28938 postfix mem REG 253,0 1009712 395616 /lib/libdb-4.3.so pipe 28938 postfix mem REG 253,0 1452412 492061 /usr/lib/mysql/libmysqlclient.so.15.0.0 pipe 28938 postfix mem REG 253,0 53756 207273 /usr/lib/liblber-2.3.so.0.2.31 pipe 28938 postfix mem REG 253,0 1296900 393267 /lib/libcrypto.so.0.9.8e pipe 28938 postfix mem REG 253,0 286748 393429 /lib/libssl.so.0.9.8e pipe 28938 postfix mem REG 253,0 240584 203611 /usr/lib/libldap-2.3.so.0.2.31 pipe 28938 postfix mem REG 253,0 125736 393228 /lib/ld-2.5.so pipe 28938 postfix mem REG 253,0 1606812 394139 /lib/libc-2.5.so pipe 28938 postfix mem REG 253,0 16428 394142 /lib/libdl-2.5.so pipe 28938 postfix mem REG 253,0 242880 394174 /lib/libsepol.so.1 pipe 28938 postfix mem REG 253,0 93508 394176 /lib/libselinux.so.1 pipe 28938 postfix mem REG 253,0 125612 394153 /lib/libpthread-2.5.so pipe 28938 postfix mem REG 253,0 208352 394166 /lib/libm-2.5.so pipe 28938 postfix mem REG 253,0 75028 210017 /usr/lib/libz.so.1.2.3 pipe 28938 postfix mem REG 253,0 45288 394144 /lib/libcrypt-2.5.so pipe 28938 postfix mem REG 253,0 101404 395613 /lib/libnsl-2.5.so pipe 28938 postfix mem REG 253,0 76400 395609 /lib/libresolv-2.5.so pipe 28938 postfix mem REG 253,0 7748 395610 /lib/libcom_err.so.2.1 pipe 28938 postfix mem REG 253,0 7880 395608 /lib/libkeyutils-1.2.so pipe 28938 postfix 0u CHR 1,3 1482 /dev/null pipe 28938 postfix 1u CHR 1,3 1482 /dev/null pipe 28938 postfix 2u CHR 1,3 1482 /dev/null pipe 28938 postfix 3r FIFO 0,6 236941 pipe pipe 28938 postfix 4w FIFO 0,6 236941 pipe pipe 28938 postfix 5u unix 0xc4edeb80 236939 socket pipe 28938 postfix 6u unix 0xc4ede980 236936 private/dovecot pipe 28938 postfix 7u unix 0xc2f27c80 255271 socket pipe 28938 postfix 8u REG 253,0 0 491707 /var/spool/postfix/pid/unix.dovecot pipe 28938 postfix 9u unix 0xc2f27080 255281 socket pipe 28938 postfix 10r 0000 0,11 0 255283 eventpoll pipe 28938 postfix 13r 0000 0,11 0 236827 eventpoll If anyone has an idea what to look at next it would be appreciated. Thanks, -Ted-

3 6

[Dovecot] Expire Plugin Configuration Question
by Roland Roberts 05 Oct '09

05 Oct '09

I am very confused looking at the expires plugin and its configuration. What is confusing me the most is that it appears that I have to configure expiration globally, meaning, for example, that the Trash mailbox expiration interval is the same regardless of the user. What I really am looking for is per-user configurable rules. Those would obviously not be able to be in a file configuration but would have to be in some shared/sharable resource. Is such a thing possible? What I really want is the ability to move my expiration rules out of my email client and into dovecot. That would be very useful for me since I access my mail from more than one host and via more than one client. roland -- PGP Key ID: 66 BC 3B CD Roland B. Roberts, PhD RL Enterprises roland(a)rlenter.com 6818 Madeline Court roland(a)astrofoto.org Brooklyn, NY 11220

3 5

[Dovecot] v1.1.19 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.19.tar.gz.sig This is hopefully the last v1.1.x release. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - ldap: Fixed hang when >128 requests were sent at once. - Fixed a crash in saving messages where message contained a CR character that wasn't followed by LF (and the CR happened to be the last character in an internal buffer). - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

2 1

[Dovecot] v1.2.5 released
by Timo Sirainen 04 Oct '09

04 Oct '09

http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.5.tar.gz.sig I'll be more or less gone for next two weeks. Tomorrow I'm heading to MacSysAdmin in Sweden to give a Dovecot talk, the next week I'll be in Finland on vacation. After that I'm hoping to get v2.0.alpha1 released in October. * Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login realm to be listed in auth_realms. It only made configuration more difficult without really providing extra security. * zlib plugin: Don't allow clients to save compressed data directly. This prevents users from exploiting (most of the) potential security holes in zlib/bzlib. + Added pop3_save_uidl setting. + dict quota: When updating quota and user isn't already in dict, recalculate and save the quota. - file_set_size() was broken with OSes that didn't support posix_fallocate() (almost everyone except Linux), causing all kinds of index file errors. - v1.2.4 index file handling could have caused an assert-crash - IMAP: Fixes to QRESYNC extension. - virtual plugin: Crashfix - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. - Maildir: Performance fixes, especially with maildir_very_dirty_syncs. - Maildir++ quota: Limits weren't read early enough from maildirsize file (when quota limits not enforced by Dovecot) - Message decoding fixes (mainly for IMAP SEARCH, Sieve).

4 3

[Dovecot] Configuring for virtual users in Postfix
by Jerry 03 Oct '09

03 Oct '09

FreeBSD-7.2 with Postfix-2.7x OK, this is my first attempt to configure Dovecot using Postfix and virtual users. In the LDA.Postfix.txt file, there is a reference to making the following setting: dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = your.domain.here virtual_transport = dovecot However, Postfix does not recognize the dovecot_destination_recipient_limit = 1 setting. There is a "virtual_destination_recipient_limit =" setting in Postfix. Is that the setting that I should tweak? -- Jerry gesbbb(a)yahoo.com There is no TRUTH. There is no REALITY. There is no CONSISTENCY. There are no ABSOLUTE STATEMENTS. I'm very probably wrong.

4 4

[Dovecot] Mailbox locking problem with iphone and POP3
by Bill Dunn - VCI Internet Services 03 Oct '09

03 Oct '09

I have a problem I can't seem to fix. I have dovecot configured to do POP3 with plain text authentication using a MySQL database. I am using Dovecot 1.0.7 with fcntl locking. My problem has been when an iPhone/iPod checks email. The iPhone/iPod doesn't disconnect with a TCP FIN packet and it leaves the mailbox in a locked state and prevents the user's desktop from checking email. I have tried changing the file locking method and other config file options without any luck. Oddly, I am using the last version of cucipop on another server with fcntl and lockf file locking and it doesn't have this problem. If someone could clue me in I'd be very grateful. Bill

3 6

[Dovecot] Dovecot LDAP Auth & Usernames with dashes
by Chris Jones 02 Oct '09

02 Oct '09

Hi All, We're seeing an issue with LDAP auth when the username contains a - char. We're using 1.0.15 as packaged for Debian Lenny Oct 2 12:29:02 silver dovecot: auth(default): LDAP: binding failed (dn (none)): Protocol error Oct 2 12:29:03 silver dovecot: imap-login: Aborted login (1 authentication attempts): user=<sci-fi(a)sucs.org>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured Setup works perfectly for the other 200 users, none of whom have a - in the username. Any suggestions? -- Chris Jones, SUCS Admin http://sucs.org Dovecot Conf dovecot -n # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s listen: [::] ssl_cert_file: /usr/local/sucs-pki/certs/sucs+subCA.crt ssl_key_file: /usr/local/sucs-pki/private/sucs.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: passdb: driver: pam args: dovecot passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd From /etc/dovecot/dovecot-ldap.conf hosts = localhost auth_bind = yes base = ou=People,dc=sucs,dc=org user_filter = (&(objectClass=posixAccount)(uid=%u))

2 1

[Dovecot] IMAP proxying for ALL users to internal mail server
by Vitaliy Vladimirovich 02 Oct '09

02 Oct '09

Hi! How must I adjust Dovecot for proxying all users from the Internet to the internal Exchange Mail Server? This is my config files (most important): dovecot.conf protocol imap { #listen = *:10143 ssl_listen = 194.0.148.10:993 auth default { mechanisms = plain login passdb passwd-file { args = /usr/local/etc/dovecot-%Ls.conf } } dovecot-imap.conf testmail1@example.org::0:0::::proxy host=10.0.10.3 port=143 nopassword With this configurations all works fine, but if I trying change dovecot-imap.conf as below %n@%d::0:0::::proxy host=10.0.10.3 port=143 nopassword I get an error: Oct 2 15:10:58 relay dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=199.10.149.10 rip=199.10.149.3 lport=993 rport=28316 resp=<hidden> Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): lookup: user=testmail1(a)example.org file=/usr/local/etc/dovecot-imap.conf Oct 2 15:10:58 relay dovecot: auth(default): passwd-file(testmail1(a)example.org,199.10.149.3): unknown user Oct 2 15:10:59 relay dovecot: auth(default): new auth connection: pid=62532 Oct 2 15:11:00 relay dovecot: auth(default): client out: FAIL 1 user=testmail1(a)example.org Any ideas??

4 10

[Dovecot] Problem with local pine after upgrade to 1.2.5
by Gerhard Wiesinger 02 Oct '09

02 Oct '09

Hello, I upgraded from dovecot 1.1.17 to 1.2.5. Works well so far with e.g. Thunderbird and SSL. One problem left: pine doesn't work any more with rsh: cat .pinerc (filtered): rsh-path= rsh-command=/usr/sbin/dovecot --exec-mail imap Starting pine: 1.) Opening INBOX 2.) [>SECURITY PROBLEM: insecure server advertised AUTH=PLAIN<] 3.) Afterwards I'm asked for a password: HOST: localhost (INSECURE) ENTER LOGIN NAME [user] : 3.) cancel: [IMAP protocol error: Authentication aborted by client.] Config: no changes at all. Any ideas why this is broken? Thnx. Ciao, Gerhard

2 2

[Dovecot] Folder Management Dovecot >1.2
by Carlos Candeias 02 Oct '09

02 Oct '09

Regardless of the mail client no user can modify, move, delete or subscribe an imap folder with Dovecot >1.2.1 (meanwhile 1.2.5). Dovecot apparently have some dotlock problems: (From dovecot.log) Oct 02 14:58:19 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:19 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:20 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:20 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted Oct 02 14:58:21 IMAP(jcci): Error: fchown(/candeias/home/jcci/.mail/Maildir/subscriptions.lock, -1, 0(root)) failed: Operation not permitted (egid=1003(management), group based on /candeias/home/jcci/.mail/Maildir) Oct 02 14:58:21 IMAP(jcci): Error: file_dotlock_open() failed with subscription file /candeias/home/jcci/.mail/Maildir/subscriptions: Operation not permitted This was an attemt of changing a subscription. Another weird point: I can create an IMAP folder although it does not show up in the folder list. But the new folder is in the subscription list, just marked as unsubscribed and there is no way to change that. This problem is safely reproducible and I wonder whether I should be really the only person having this trouble. I'm using MAILDIR and simple plain test authentification (internal mail server). The location is mail_location: maildir:~/.mail/Maildir which means a subfolder in each user's home directory. All homes are exported to NFS, but the Dovecot is just on the same server and thus accesses locally. Downgrade to version 1.1.17 solves all problems. Archlinux x86_64, Linux 2.6.30 It would be really great if somebody could understand the cause and suggest a solution!

3 4

[Dovecot] Problem with LSUB and public namespace
by Julien Danjou 02 Oct '09

02 Oct '09

Hi, I'd like to know if the following is normal. I've a setup with 2 namespace (private/public) where each user can use subscriptions. This problem is triggered by claws-mail, which uses LSUB to get subscribed mailboxes: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready. . login user password . namespace * NAMESPACE (("INBOX." ".")) NIL (("public." ".")) . OK Namespace completed. . subscribe public.Admin . OK Subscribe completed. . LSUB "" "%" * LSUB () "." "INBOX" . OK Lsub completed. LSUB does not return "public" as namespace :-( Is this a bug in dovecot, a bug in Claws mail, or a misconfiguration of my dovecot server? I can provide more info if needed. Cheers, -- Julien Danjou // ᐰ <julien(a)danjou.info> http://julien.danjou.info // 9A0D 5FD9 EB42 22F6 8974 C95C A462 B51E C2FE E5CD // There is nothing under this line.

2 3

[Dovecot] Timeout waiting for handshake from auth server
by Frank Bonnet 02 Oct '09

02 Oct '09

Hello I have that kind of messages in dovecot.log anyone has those troubles ? the machine is Debian etch 64 bits dovecot 1.2.5 has been compiled on the machine it run NIS client to a YPLDAPD server thank you Oct 02 12:15:27 auth(default): Error: do_ypcall: clnt_call: RPC: Timed out Oct 02 12:15:33 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16755, input bytes=0 Oct 02 12:15:46 auth(default): Error: YPBINDPROC_DOMAIN: Domain not bound Oct 02 12:15:46 pop3-login: Error: Timeout waiting for handshake from auth server. my pid=16760, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16761, input bytes=0 Oct 02 12:15:51 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16762, input bytes=0

2 2

[Dovecot] Disconnected: Too many invalid IMAP commands
by Gabriele 02 Oct '09

02 Oct '09

Greetings, I'm having big issues here, hope you can help me… Ubuntu Server 8.04, postfix 2.5.1, dovecot 1.0.10, postfixadmin (MySQL+ virtual users)… I am trying to move e-mails from an old IMAP account to my new dovecot IMAP server accounts. The old server is EIMS (Eudora Internet Mail Server, so a sort of mbox format)… I move messages by drag 'n' dropping in Mozilla Thunderbird. No problems with messages under 4MB size (there are huge messages, up to 25MB), but as soon as I try to move messages from 4MB and up, the connection hangs, nothing happens, the application becomes barely responsive, I have quit and re-open it to make it behave properly. In the logs, I read (user and IPs are fake, here): Sep 18 07:52:06 in dovecot: imap-login: Login: user=<user@my-domain>, method=PLAIN, rip=123.123.123.123, lip=123.123.123.123 Sep 18 07:52:06 in dovecot: IMAP(user@my-domain): Disconnected: Too many invalid IMAP commands. Could it be a client (Thunderbird) issue? I have tried with Apple Mail 4.1, same problem, same logs. Could it be a quota limit (googling around, I read that sometimes the error may be triggered by dovecot when exceeding the quota limit) Accout usage is actually at 1%… Could drag 'n' drop be the wrong way to have things done? I have also downloaded the huge e-mails from EIMS to Thunderbird Local Folders, the problem arises when I try to upload, so the culprit seems to be the new "system". I really need help at this point… any hints? Thanks in advance for any help you will offer. Gabriele

7 24

[Dovecot] Password and special caracter
by Gilles Albusac 02 Oct '09

02 Oct '09

Problem : I have a problem with special character in the password. Character like ! * é are deleted My configuration : - a smtp server with Postfix 2.6 and Dovcot 1.1.11. - a windows 2003 server with active directory for accounts and boxes I use SMTP / SASL on my postfix 2.6 to authenticate my remote laptop users (allow legitimate users to relay mail). To do that, I use SASL Dovecot fonctionnality and ldap request to verify login/password who are declared on a server in Windows 2003 (Active Directory). It works fine with simple password but not with complex password. I have a problem with special character in the password. Character like ! * é are deleted before comparaison. Any idea ? Regards

5 6

[Dovecot] I can acces my pop3 account but I can't send an email trough smtp
by Ricky Tompu Breaky 01 Oct '09

01 Oct '09

Dear my friends.... I use OpenSuSE 11.1, KMail and DoveCot version: " sussy:/etc/ssl/certs # dovecot --version 1.1.7 ". This is the configuration of my DoveCot: " sussy:/etc/ssl/certs # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27.29-0.1-default i686 openSUSE 11.1 (i586) base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log protocols: imap imaps pop3 listen(default): * listen(imap): * listen(pop3): *:110 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Dovecot of MyGoogle.Com ready. mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: debug_passwords: yes passdb: driver: pam userdb: driver: passwd ". I have created local linux user account on my Postfix+DoveCot server. I also can access the content of my mailbox from my KMail. I am so happy but once I try to send email (testing the smtp) than I realize that I can't send an email from my email client (KMail). I use this setting on my email client: 1. 'incoming mailserver' == 'outgoing mailserver' == 'mail.mygoogle.com' (pseudonome). Also username and password are all the same between incoming/outgoing mailserver, namely the local userlogin of LINUX. As the username, I put 'ricky' (but not 'ricky(a)mygoogle.com'). 2. smtp authentication: No encryption and plaintext. The error message on my KMail is: " Sending failed: Your SMTP server does not support The server responded: "5.7.8 Error: authentication failed: generic failure". Choose a different authentication method. The server responded: "5.7.8 Error: authentication failed: generic failure" The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder. The following transport was used: mygoogle.com Do you want me to continue sending the remaining messages? " and also: " Sending failed: Your SMTP server does not support The server responded: "5.7.8 Error: authentication failed: generic failure". Choose a different authentication method. The server responded: "5.7.8 Error: authentication failed: generic failure" The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder. The following transport was used: mygoogle.com ". I'm stucked again. Please help me. Tell me where my mistake. Thank you very much in advance.

2 2

[Dovecot] Encryption Plugin
by Patrick McLean 01 Oct '09

01 Oct '09

Hi, There was a discussion a few months ago about a plugin for encrypting email before it hit the disk on the server, and doing transparent decryption while serving data to the client, see: http://www.dovecot.org/list/dovecot/2009-July/041262.html We have a client/user who is interested in such a plugin, and I was wondering if there has been any progress on it yet. In our particular case, server-side on-the-fly decryption would be acceptable. This service is useful in the case of a somewhat paranoid user who does not want the IT staff to have direct access to their email, without going through some major hoops (http://hushmail.com actually offers both server and client side decryption for these reasons). The way I would imagine the plugin working is public-key encryption being done on the message as it was being delivered (plug in to dovecot's deliver). Then when a client connects, the private key is decrypted with the user's password and used to decrypt the messages on the fly. Depending on performance, it may be an idea to convert messages to use symmetric with rotating keys encrypted with the public key encryption. If this were going to be done, I would think an IMAP protocol extension may be an idea so client-side encryption would be an option as well, so there would be end-to-end security.

2 1

[Dovecot] OT: IMAP folder aliases
by Patrick Ben Koetter 01 Oct '09

01 Oct '09

It seems that there is no standard for folder names that deal with typical message classes such as drafts, outbox, sent, spam etc. At least there's no common sense on a naming convention that tells how client should handle this. Worse than this, most IMAP clients auto-create folders according to their own naming convention if they don't exist. Every client introduces its own view. Users OTOH expect a single view that makes it easy for them to find their messages. They are unwilling to search in "sent", "sent-mail" or "Sent items" for "messages that have been sent". I doubt that software producers will adopt a standard naming convention if it was introduced within a useful time span. Has anyone seen an approach or a solution that solves the problem from a users point of view? A server side alias list that maps to a server standard? p@rick -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

9 28

[Dovecot] Password and special caracter
by Gilles Albusac 01 Oct '09

01 Oct '09

Problem : I have a problem with special character in the password. Character like ! * é are deleted My configuration : - a smtp server with Postfix 2.6 and Dovcot 1.1.11. - a windows 2003 server with active directory for accounts and boxes I use SMTP / SASL on my postfix 2.6 to authenticate my remote laptop users (allow legitimate users to relay mail). To do that, I use SASL Dovecot fonctionnality and ldap request to verify login/password who are declared on a server in Windows 2003 (Active Directory). It works fine with simple password but not with complex password. I have a problem with special character in the password. Character like ! * é are deleted before comparaison. Any idea ? Regards

1 0

Re: [Dovecot] deliver: Fatal: setgid(114) failed with euid=8, gid=8, egid=8: Operation not permitted
by Fredriksson Turbo 01 Oct '09

01 Oct '09

On 1 okt 2009, at 14.42, Charles Marcus wrote: > Please always keep replies on list... Sorry. A 'Reply' didn't send it where I expected it to... > On 10/1/2009 7:18 AM, Fredriksson Turbo wrote: >>>> But it seems that all mails that was received between 16:52:19 >>>> and 11:07:52 (which was the last mail that couldn't be delivered) >>>> is lost! > >>> Without logs, it is impossible to say what happened to the mails... >>> >>> Were they accepted, then lost? Or were they simply rejected? > >> The error log say: >> >> deliver(<EMAIL>): 2009-09-30 11:07:52 Fatal: setgid(114) failed >> with >> euid=8, gid=8, egid=8: Operation not permitted >> >> The info log say that everything was a-ok... >> >> So the mail was accepted, put in the spool, picked up for local >> delivery, spamchecked etc and when it was supposed to be put in >> a file in the mail directory, lost... > > This may be enough for Timo, but its always better to give the full > logs > of one of these transactions - not just the dovecot error log, but > full > system logs, showing the message entering the system, each step of > processing, and ending with the final delivery (attempt)... Fair enough. But I never saved the tail when the problem occured. I can now extract this again from the info log (getting everything between 11:06 to 11:08 which should be within the problem time...). Who should I send it to? It's 181 lines to 'privatize' and I'd prefere not to send a unprivatized file to the list...

3 5

[Dovecot] imap crashed: (imap) killed with signal 11 in dovecot 1.2.5
by Robert Gabriel 01 Oct '09

01 Oct '09

Hi, I'm using dovecot 1.2.5 with mysql backend and seems in this new version I have issues when loggin in, especially if there are mails in Inbox folder. NOTE: version 1.2.4 worked perfectly and mysql was updated to version 5.0.86 from source code. Here is my configuration and core dump: > /applications/dovecot-mail/sbin/dovecot --version 1.2.5 > /applications/dovecot-mail/sbin/dovecot -n # 1.2.5: /applications/dovecot-mail/conf/dovecot.conf # OS: Linux 2.6.18-164.el5 i686 CentOS release 5.3 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3s login_dir: /var/run/dovecot/login login_executable(default): /applications/dovecot-mail/libexec/dovecot/imap-login login_executable(imap): /applications/dovecot-mail/libexec/dovecot/imap-login login_executable(pop3): /applications/dovecot-mail/libexec/dovecot/pop3-login login_greeting: Hi buddy, got an account? login_processes_count: 4 login_max_processes_count: 64 max_mail_processes: 1024 last_valid_uid: 10005 mail_privileged_group: mail mail_location: mbox:/srv/mail/vmail/%d/%n mail_debug: yes maildir_copy_preserve_filename: yes mbox_read_locks: dotlock fcntl mail_drop_priv_before_exec: yes mail_executable(default): /applications/dovecot-mail/libexec/dovecot/imap mail_executable(imap): /applications/dovecot-mail/libexec/dovecot/imap mail_executable(pop3): /applications/dovecot-mail/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /applications/dovecot-mail/lib/dovecot/imap mail_plugin_dir(imap): /applications/dovecot-mail/lib/dovecot/imap mail_plugin_dir(pop3): /applications/dovecot-mail/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login cache_size: 10240 cache_ttl: 1800 passdb: driver: pam args: cache_key=%u%r%l dovecot passdb: driver: sql args: /applications/dovecot-mail/conf/dovecot-mysql.conf userdb: driver: sql args: /applications/dovecot-mail/conf/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: mail > grep -v '^ *$#.*$\?$' /applications/dovecot-mail/conf/dovecot-mysql.conf driver = mysql default_pass_scheme = PLAIN-MD5 connect = host=localhost dbname=mail user=mail password=XXXXXXX password_query = SELECT password FROM mailbox WHERE username = '%u' user_query = SELECT '/srv/mail/vmail/%d/%n' as home, 'maildir:/srv/mail/vmail/%d/%n' as mail, 10005 AS uid, 12 AS gid, concat('dirsize:storage=',quota) AS quota FROM mailbox WHERE username ='%u' AND active ='1' > gdb /applications/dovecot-mail/libexec/dovecot/imap `pwd`/core.20557 GNU gdb Fedora (6.8-27.el5) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"... (no debugging symbols found) warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /applications/dovecot-mail/lib/dovecot/imap/lib10_quota_plugin.so... (no debugging symbols found)...done. Loaded symbols for /applications/dovecot-mail/lib/dovecot/imap/lib10_quota_plugin.so Reading symbols from /applications/dovecot-mail/lib/dovecot/imap/lib11_imap_quota_plugin.so...(no debugging symbols found)...done. Loaded symbols for /applications/dovecot-mail/lib/dovecot/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/gconv/ISO8859-1.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib/gconv/ISO8859-1.so (no debugging symbols found) Core was generated by `imap'. Program terminated with signal 11, Segmentation fault. [New process 20557] #0 0x00000000 in ?? () (gdb) backtrace #0 0x00000000 in ?? () (gdb) quit

3 5

Re: [Dovecot] deliver: Fatal: setgid(114) failed with euid=8, gid=8, egid=8: Operation not permitted
by Charles Marcus 01 Oct '09

01 Oct '09

Please always keep replies on list... On 10/1/2009 7:18 AM, Fredriksson Turbo wrote: >>> But it seems that all mails that was received between 16:52:19 >>> and 11:07:52 (which was the last mail that couldn't be delivered) >>> is lost! >> Without logs, it is impossible to say what happened to the mails... >> >> Were they accepted, then lost? Or were they simply rejected? > The error log say: > > deliver(<EMAIL>): 2009-09-30 11:07:52 Fatal: setgid(114) failed with > euid=8, gid=8, egid=8: Operation not permitted > > The info log say that everything was a-ok... > > So the mail was accepted, put in the spool, picked up for local > delivery, spamchecked etc and when it was supposed to be put in > a file in the mail directory, lost... This may be enough for Timo, but its always better to give the full logs of one of these transactions - not just the dovecot error log, but full system logs, showing the message entering the system, each step of processing, and ending with the final delivery (attempt)... -- Best regards, Charles Marcus I.T. Director Media Brokers International, Inc. 678.514.6200 x224 678.514.6299 fax

1 0

[Dovecot] Compile dovecot 1.2.5 with managesieve patch 0.11.9?
by Seba 01 Oct '09

01 Oct '09

Hi, is it possible to compile dovecot 1.2.5 with the managesieve patch 0.11.9 which is for dovecot 1.2.4 or is it better to wait if a new managesieve patch is released? Maybe 1.2.5 will work too? Thanks, Seba

3 2

[Dovecot] imap crashed, (imap) killed with signal 11
by Robert Gabriel 01 Oct '09

01 Oct '09

There is an error in dovecot 1.2.5 when loggin in: dovecot: Error: child 14816 (imap) killed with signal 11

1 0

[Dovecot] Some issues in Dovecot 1.2.5 after upgrade from 1.0.15
by Chris Wakelin 01 Oct '09

01 Oct '09

We upgraded from Dovecot 1.0.15 to 1.2.5 last night, on Solaris 10 using mboxes, mostly without issues. However I had to trash the index/cache files (too many folders were showing corruption issues which is especially bad for Prayer Webmail ".prayer" folders that store preferences; Prayer sees a disconnection as the folder being missing!). I've had one imap process panic in mailbox sync (as I mentioned above, the index files have been newly created in 1.2.5): > Sep 30 09:57:10 imap-login: Info: Login: user=<xxxxxxxx>, method=PLAIN, rip=134.225.xx.xx, lip=134.225.16.6 > Sep 30 09:57:10 imap-login: Info: Login: user=<xxxxxxxx>, method=PLAIN, rip=134.225.xx.xx, lip=134.225.16.6 > Sep 30 09:57:11 IMAP 25384 xxxxxxxx 134.225.xx.xx : Panic: file mail-index-sync-update.c: line 933 (mail_index_sync_map): assertion failed: (map->hdr.indexid == index->indexid || map->hdr.indexid == 0) > Sep 30 09:57:11 dovecot: Error: child 25384 (imap) killed with signal 6 (core dumped) This looks like it was the user's first connection since the upgrade, as well. Here's the backtrace: > #0 0xff21fe78 in _libc_kill () from /usr/lib/libc.so.1 > (gdb) bt > #0 0xff21fe78 in _libc_kill () from /usr/lib/libc.so.1 > #1 0xff1b5a3c in abort () from /usr/lib/libc.so.1 > #2 0xbe258 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:160 > #3 0xbeb14 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x0, args=0xffbee758) at failures.c:440 > #4 0xbe414 in i_panic (format=0xec7f0 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:207 > #5 0x98a00 in mail_index_sync_map (_map=0x1263e4, type=MAIL_INDEX_SYNC_HANDLER_HEAD, force=false) at mail-index-sync-update.c:802 > #6 0x8c618 in mail_index_map (index=0x1263a8, type=MAIL_INDEX_SYNC_HANDLER_HEAD) at mail-index-map.c:934 > #7 0x89e30 in mail_index_refresh (index=0x0) at mail-index.c:551 > #8 0x62bec in mbox_sync_header_refresh (mbox=0x1272d8) at mbox-sync.c:1586 > #9 0x62d28 in mbox_sync_has_changed_full (mbox=0x1272d8, leave_dirty=true, empty_r=0xffbeeab7) at mbox-sync.c:1644 > #10 0x62cb4 in mbox_sync_has_changed (mbox=0xffffffff, leave_dirty=true) at mbox-sync.c:1611 > #11 0x63428 in mbox_sync_int (mbox=0x1272d8, flags=0, lock_id=0xffbeee04) at mbox-sync.c:1701 > #12 0x634f4 in mbox_sync (mbox=0x1272d8, flags=0) at mbox-sync.c:1894 > #13 0x63674 in mbox_storage_sync_init (box=0x1272d8, flags=65) at mbox-sync.c:1936 > #14 0x7ebf4 in mailbox_sync_init (box=0x1272d8, flags=65) at mail-storage.c:562 > #15 0x7ecb8 in mailbox_sync (box=0x1272d8, flags=65, status_items=239, status_r=0xffbeefd0) at mail-storage.c:593 > #16 0x29fc0 in select_open (ctx=0x11ebf0, mailbox=0x1 <Address 0x1 out of bounds>, readonly=false) at cmd-select.c:273 > #17 0x2a294 in cmd_select_full (cmd=0x11eb60, readonly=false) at cmd-select.c:382 > #18 0x2a3d0 in cmd_select (cmd=0x11eb60) at cmd-select.c:389 > #19 0x2d064 in client_command_input (cmd=0x11eb60) at client.c:611 > #20 0x2cf08 in client_command_input (cmd=0x11eb60) at client.c:660 > #21 0x2d0ec in client_handle_next_command (client=0x11e8d8, remove_io_r=0xffbef2b7) at client.c:701 > #22 0x2d1e0 in client_handle_input (client=0x11e8d8) at client.c:713 > #23 0x2d318 in client_input (client=0x11e8d8) at client.c:752 > #24 0xc7ea4 in io_loop_handler_run (ioloop=0x11b370) at ioloop-poll.c:203 > #25 0xc7694 in io_loop_run (ioloop=0x11b370) at ioloop.c:335 > #26 0x36e34 in main (argc=1119232, argv=0xffbef4fc, envp=0xffbef50c) at main.c:327 I'm also seeing some other errors, e.g. : > Sep 30 10:37:06 auth(default): Error: Master request 15820.607 not found > Sep 30 10:51:27 dovecot: Error: child 29959 (login) killed with signal 11 (core not dumped) (latest ip=134.225.1.46) > Sep 30 10:51:38 dovecot: Error: child 11162 (login) killed with signal 11 (core not dumped) (latest ip=134.225.1.46) > Sep 30 10:54:03 imap-login: Warning: Error sending handshake to auth server: Transport endpoint is not connected How do I get the login (presumably imap-login) processes to dump core (or do I need to insert gdbhelper)? Dovecot -n output (%J is a local hash function and we don't use the lda; my start-up script sets the fd limit to 4096 once Dovecot has started): > # 1.2.5: /opt/RDGdovect/etc/dovecot.conf > Warning: fd limit 2048 is lower than what Dovecot can use under full load (more than 4352). Either grow the limit or change login_max_processes_count and max_mail_processes settings > # OS: SunOS 5.8 sun4u ufs > base_dir: /opt/RDGdovect/var/run/ > log_path: /opt/RDGdovect/var/log/dovecot.log > info_log_path: /opt/RDGdovect/var/log/dovecot.log > protocols: imap imaps pop3 pop3s > listen(default): 134.225.16.6:143 > listen(imap): 134.225.16.6:143 > listen(pop3): 134.225.16.6:110 > ssl_listen(default): 134.225.16.6:993 > ssl_listen(imap): 134.225.16.6:993 > ssl_listen(pop3): 134.225.16.6:995 > ssl_cert_file(default): /opt/RDGdovect/ssl/imap.reading.ac.uk.crt.pem > ssl_cert_file(imap): /opt/RDGdovect/ssl/imap.reading.ac.uk.crt.pem > ssl_cert_file(pop3): /opt/RDGdovect/ssl/pop.reading.ac.uk.crt.pem > ssl_key_file(default): /opt/RDGdovect/ssl/imap.reading.ac.uk.key.pem > ssl_key_file(imap): /opt/RDGdovect/ssl/imap.reading.ac.uk.key.pem > ssl_key_file(pop3): /opt/RDGdovect/ssl/pop.reading.ac.uk.key.pem > disable_plaintext_auth: no > shutdown_clients: no > login_dir: /opt/RDGdovect/var/run/login > login_executable(default): /opt/RDGdovect/libexec/dovecot/imap-login > login_executable(imap): /opt/RDGdovect/libexec/dovecot/imap-login > login_executable(pop3): /opt/RDGdovect/libexec/dovecot/pop3-login > login_greeting(default): University of Reading IMAP ready. > login_greeting(imap): University of Reading IMAP ready. > login_greeting(pop3): University of Reading POP3 ready. > login_process_per_connection: no > max_mail_processes: 4096 > verbose_proctitle: yes > mail_location: mbox:/export/folders/%13.h/mail/:INBOX=/export/mail/%13.h/INBOX:INDEX=/export/indexes/%13.h > mail_nfs_storage: yes > mbox_very_dirty_syncs: yes > mail_drop_priv_before_exec: yes > mail_executable(default): /opt/RDGdovect/libexec/dovecot/imap > mail_executable(imap): /opt/RDGdovect/libexec/dovecot/imap > mail_executable(pop3): /opt/RDGdovect/libexec/dovecot/pop3 > mail_plugins(default): zlib mail_log > mail_plugins(imap): zlib mail_log > mail_plugins(pop3): > mail_plugin_dir(default): /opt/RDGdovect/libexec/plugins > mail_plugin_dir(imap): /opt/RDGdovect/libexec/plugins > mail_plugin_dir(pop3): /opt/RDGdovect/lib/dovecot/pop3 > mail_log_prefix: %Us %p %u %r : > imap_client_workarounds(default): delay-newmail > imap_client_workarounds(imap): delay-newmail > imap_client_workarounds(pop3): > pop3_reuse_xuidl(default): no > pop3_reuse_xuidl(imap): no > pop3_reuse_xuidl(pop3): yes > pop3_uidl_format(default): %08Xu%08Xv > pop3_uidl_format(imap): %08Xu%08Xv > pop3_uidl_format(pop3): %08Xv%08Xu > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls > namespace: > type: private > separator: / > inbox: yes > list: yes > subscriptions: yes > namespace: > type: private > separator: / > prefix: mail/ > hidden: yes > list: no > subscriptions: yes > namespace: > type: private > separator: / > prefix: ~/mail/ > hidden: yes > list: no > subscriptions: yes > namespace: > type: private > separator: / > prefix: ~%u/mail/ > hidden: yes > list: no > subscriptions: yes > lda: > postmaster_address: postmaster(a)example.com > auth default: > mechanisms: plain login > username_format: %Lu > verbose: yes > passdb: > driver: passwd-file > args: /export/mailconfig/%Ju/%u/migrating > deny: yes > passdb: > driver: passwd-file > args: /export/mailconfig/%Ju/%u/proxy.%Ls > passdb: > driver: ldap > args: /opt/RDGdovect/etc/dovecot-ldap.conf > userdb: > driver: passwd-file > args: /opt/RDGdovect/etc/userdb Best Wishes, Chris -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin(a)reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094

2 9

[Dovecot] Virtual Plugin
by Darvin Denmian 01 Oct '09

01 Oct '09

I activated Dovecot's Virtual Plugin in my configuration and created dovecot-virtual file with the following content: [quote] # ~/Maildir/virtual/Flagged/dovecot-virtual * flagged [quote] When I flag some messages these messages automatically appears inside my Virtual Folder called "Flagged", but once inside this folder , when I "Unflag" the message, It doesn't disapear from my virtual folder. Is this expected? I'm using dovecot12-1.2.5-2.1 on a Opensuse 11.1 I hope you understand my brazilian english :) Thanks

2 1

[Dovecot] How many concurrent IMAP sessions?
by Patrick Ben Koetter 30 Sep '09

30 Sep '09

Has anybody ever bothered to measure how many concurrent IMAP sessions dovecot can handle? I know it depends on hardware, filesystem, mailbox type etc., but what exactly controls the number and what have people on the list measured? p@rick -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

5 10

[Dovecot] cant compile dsync
by joakim＠verona.se 30 Sep '09

30 Sep '09

I'm trying to compile dsync, but failing. What am I doing wrong? hg pull pulling from http://hg.dovecot.org/dovecot-2.0/ ... ./configure && make clean all ... make[5]: Entering directory `/mnt/data/build/dovecot-2.0/src/lib-storage/index/maildir' make[5]: *** No rule to make target `maildir-transaction.c', needed by `maildir-transaction.lo'. Stop. make[5]: Leaving directory `/mnt/data/build/dovecot-2.0/src/lib-storage/index/maildir' make[4]: *** [all-recursive] Error 1 make[4]: Leaving directory `/mnt/data/build/dovecot-2.0/src/lib-storage/index' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/mnt/data/build/dovecot-2.0/src/lib-storage' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/mnt/data/build/dovecot-2.0/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/mnt/data/build/dovecot-2.0' make: *** [all] Error 2 -- Joakim Verona

2 5

[Dovecot] deliver doesn't support !include directive, mail is bounced
by Christoph Berkemeier 30 Sep '09

30 Sep '09

Hello, dovecot deliver is used here as a LDA. When I add !include /usr/local/etc/$INCLUDE.FILE to my dovecot.conf I get this error in the maillog: relay=local, delay=0.04, delays=0.02/0/0/0.02, dsn=5.3.5, status=bounced (local configuration error. Command output: Fatal: Error in config file /usr/local/etc/dovecot.conf: deliver doesn't support !include directive /usr/local/etc/$INCLUDE.FILE contains: listen: $HOSTNAME ssl_cert_file: /etc/$FILE ssl_key_file: /etc/$FILE auth_krb5_keytab = /etc/$FILE It would be nice if this bug gets fixed or a comment add, that you can not use include, when you use deliver as your LDA. MfG Christoph dovecot -n: # 1.2.4: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.2-RELEASE-p2 amd64 log_path: /var/log/dovecot.log protocols: imaps pop3s managesieve listen: $HOSTNAME ssl_cert_file: /etc/$FILE ssl_key_file: /etc/$FILE login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_processes_count: 6 login_max_processes_count: 256 verbose_proctitle: yes first_valid_uid: $NUMBER first_valid_gid: $NUMBER mail_privileged_group: mail mail_location: maildir:~/maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail list: yes subscriptions: yes lda: postmaster_address: postmaster@$DOMAIN log_path: info_log_path: mail_plugins: sieve quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth default: mechanisms: gssapi plain login username_format: %Lu krb5_keytab: /etc/$FILE gssapi_hostname: $Hostname worker_max_count: 120 passdb: driver: pam args: session=yes failure_show_msg=yes max_requests=100 dovecot userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve

2 1

[Dovecot] pam_authenticate() failed
by Martijn de Munnik 30 Sep '09

30 Sep '09

Hi List, I have a problem with auth for just one user: dovecot: Sep 30 09:56:16 Info: auth(default): new auth connection: pid=3809 dovecot: Sep 30 09:56:17 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGoucnVpc0BtZXJreC12ZXJrZXJrLm5sAGJsb2VtMDEh dovecot: Sep 30 09:56:17 Info: auth(default): pam(j.ruis(a)merkx-verkerk.nl,127.0.0.1): lookup service=dovecot dovecot: Sep 30 09:56:17 Info: auth(default): pam(j.ruis(a)merkx-verkerk.nl,127.0.0.1): pam_authenticate() failed: Authentication failed dovecot: Sep 30 09:56:18 Info: auth(default): client out: FAIL 1 user=j.ruis(a)merkx-verkerk.nl dovecot: Sep 30 09:56:18 Info: imap-login: Disconnected: user=<j.ruis(a)merkx-verkerk.nl>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured this login attempt is done via webmail but also connections with mail clients fail. other users can login successful: dovecot: Sep 30 09:58:36 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AG1 hcnRpam5AeW91bmdndW5zLm5sADZtdW5zaG9l dovecot: Sep 30 09:58:36 Info: auth(default): pam(martijn(a)youngguns.nl,127.0.0.1): lookup service=dovecot dovecot: Sep 30 09:58:36 Info: auth(default): client out: OK 1 user=martijn(a)youngguns.nl dovecot: Sep 30 09:58:36 Info: auth(default): master in: REQUEST 72 4119 1 dovecot: Sep 30 09:58:36 Info: auth(default): passwd(martijn(a)youngguns.nl,127.0.0.1): lookup dovecot: Sep 30 09:58:36 Info: auth(default): master out: USER 72 martijn(a)youngguns.nl system_user=martijn(a)youngguns.nl uid=1063 gid=1062 home=/home/youngguns.nl/homes/martijn dovecot: Sep 30 09:58:36 Info: imap-login: Login: user=<martijn(a)youngguns.nl>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Loading modules from directory: /opt/csw/lib/dovecot/imap dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Module loaded: /opt/csw/lib/dovecot/imap/lib90_antispam_plugin.so dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Effective uid=1063, gid=1062, home=/home/youngguns.nl/homes/martijn dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): maildir: data=/home/youngguns.nl/homes/martijn/Maildir dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): maildir: root=/home/youngguns.nl/homes/martijn/Maildir, index=/home/youngguns.nl/home s/martijn/Maildir, control=, inbox= dovecot: Sep 30 09:58:36 Info: IMAP(martijn(a)youngguns.nl): Disconnected: Logged out How can I determine why pam_authenticate() failed? output of dovecot -n: # 1.0.13: /opt/csw/etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info.log protocols: imap pop3 imaps pop3s listen(default): * listen(imap): * listen(pop3): *:110 ssl_cert_file: /opt/csw/ssl/secure-youngguns-nl.crt ssl_key_file: /opt/csw/ssl/secure-youngguns-nl.key disable_plaintext_auth: no verbose_ssl: yes login_dir: /opt/csw/var/run/dovecot/login login_executable(default): /opt/csw/libexec/dovecot/imap-login login_executable(imap): /opt/csw/libexec/dovecot/imap-login login_executable(pop3): /opt/csw/libexec/dovecot/pop3-login login_greeting: Welkom bij de YoungGuns postbode. mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /opt/csw/libexec/dovecot/imap mail_executable(imap): /opt/csw/libexec/dovecot/imap mail_executable(pop3): /opt/csw/libexec/dovecot/pop3 mail_plugins(default): antispam mail_plugins(imap): antispam mail_plugins(pop3): mail_plugin_dir(default): /opt/csw/lib/dovecot/imap mail_plugin_dir(imap): /opt/csw/lib/dovecot/imap mail_plugin_dir(pop3): /opt/csw/lib/dovecot/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %v.%u auth default: mechanisms: login plain verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /opt/csw/var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: antispam_trash: Trash;trash;TRASH antispam_spam: spam antispam_mail_tmpdir: /tmp antispam_mail_sendmail: /opt/csw/bin/sa-learn antispam_mail_sendmail_args: antispam_mail_spam: --spam antispam_mail_notspam: --ham -- thanks, Martijn

2 1

[Dovecot] deliver: Fatal: setgid(114) failed with euid=8, gid=8, egid=8: Operation not permitted
by Fredriksson Turbo 30 Sep '09

30 Sep '09

I'm calling 'deliver' from Postfix and in some cases from Procmail. I set this system up more than six months ago and it's been working flawlessly until yesterday (16:52:19 local time) when it, without any apparent reason, just stopped delivering mails! Lots of checking and googling (I've forgot how exacly I setup the system :), I made 'deliver' SUID and it worked again... But it seems that all mails that was received between 16:52:19 and 11:07:52 (which was the last mail that couldn't be delivered) is lost! Is there any way to avoid mails being lost for reasons such as this? Is this a Postfix, Procmail or Dovecot thing? This system runs on a Ubuntu Intrepid: Postfix v2.5.5-1 Procmail v3.22-16ubuntu3 Dovecot v1:1.1.4-0ubuntu1.3 Thinking it over again (when double checking this mail), it might have been a automatic "de-SUID thingie or other" in Ubuntu. If memory serves me right, there used to be something like that in Debian long ago... But for whatever reason it DID happen, I'd appreciate an idea on how to avoid loosing mails if something happens to the delivery process...

3 2

[Dovecot] sieve & vacation - ignores "days" parameter
by Jacek Osiecki 30 Sep '09

30 Sep '09

Hi, I am going further with dovecot configuration. Finally managed to configure roundcube 0.3 with managesieve plugin. And it works, although... not perfectly :( For some issues probably roundcube-managesieve is guilty, but simply the sieve plugins seems to work wrong. Here is my sieve file: require ["vacation","fileinto"]; # rule:[wakacje] if anyof (true) { vacation :days 7 text: I am on vacation . ; } # rule:[silver-save] elsif allof (header :is "From" "joshua(a)hybrid.pl") { fileinto "myown"; stop; } And it seems, that sieve ignores ":days 7" parameter. Every time I send the email to this account, I receive the automatic answer. Maybe I misconfigured something? Where does vacation plugin store the information on emails that have already received the automatic answer? Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

2 4

[Dovecot] dbox: maildir migration
by Timo Sirainen 30 Sep '09

30 Sep '09

I'm trying to clean up the code for Dovecot v2.0 and I just keep coming back to the same thought: Is having the super-fast maildir -> single-dbox migration really actually a good idea? Some problems with it: 1. Makes the code more complex.. And I've already fixed many bugs related to that, maybe not all. 2. Having some mails in maildir format and others in dbox format isn't really good in long term. The super-fast migration was mainly meant to be used as a quick and easy way to start using dbox and then slowly convert maildir files to dbox files. 3. There's currently no way to actually convert the migrated maildir files to dbox format. And I'm not really sure how such a tool would even be used. "doveadm -u <username> dbox convert-old-maildir-files" run one user at a time?.. Maybe a better alternative would be to simply do a proper full migration to dbox format, a few users at a time so disk I/O wouldn't explode? dsync especially could be helpful here. convert plugin could be replaced with a dsync plugin and then a migration could be done with: 1. Run a "pre-migration" dsync for n users (not absolutely required, but a good idea to avoid login delays). 2. Enable dsync plugin for the users (or this could be enabled always). 3. Switch users to dbox format. 4. Run a "post-migration" dsync for the users. If any user logged in before the post-migration was finished, the dsync plugin would finish the migration for that user. 5. Goto 1 with another set of users, repeat until finished with all users.

1 0

[Dovecot] Problem with dict-quota, deliver killed by delivery attempt
by Jacek Osiecki 29 Sep '09

29 Sep '09

Hi, I can't get quota lda plugin working... When I enable quota plugin, the emails (delivered by exim + dovecot-lda) are instantly rejected: 2009-09-29 16:36:12 1MsdoI-0000aJ-2L ** jacek(a)my-domain.pl R=mysql_localuser T=dovecot_delivery: Child process of dovecot_delivery transport (running command "/usr/lib64/dovecot/deliver -d $local_part@$domain -f $sender_address -a $original_local_part@$original_domain") was terminated by signal 9 (Killed) I have checked, that neither restart of dovecot nor delivery attempt tries to read the quotadict file (/etc/dovecot/dovecot-dict-quota.conf) - the atime is unchanged. I even tried to strace deliver: strace deliver -d jacek(a)my-server.pl -f joshua(a)another-server.pl -a jacek(a)my-server.pl [...] and it dies like this: munmap(0x7f99011d7000, 4096) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0 stat("/var/mail/sieve/my-server.pl/jacek(a)my-server.pl.sieve", 0x79c66dd61140) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek/tmp", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek/dovecot-shared", 0x79c66dd61080) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/var/mail/mail/my-server.pl/jacek", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 time(NULL) = 1254235039 mmap(NULL, 200704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f990119c000 access("/var/mail/mail/my-server.pl/jacek/cur", W_OK) = 0 open("/var/mail/mail/my-server.pl/jacek/dovecot.index.log", O_RDWR) = 8 fstat(8, {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 pread(8, "\1\2(\0<\23\302J\2\0\0\0\1\0\0\0\0\0\0\0<\23\302J\0\0\0\0\0\0\0\0"..., 40, 0) = 40 stat("/var/mail/mail/my-server.pl/jacek/dovecot.index.log.2", 0x79c66dd61130) = -1 ENOENT (No such file or directory) open("/var/mail/mail/my-server.pl/jacek/dovecot.index", O_RDWR) = -1 ENOENT (No such file or directory) stat("/var/mail/mail/my-server.pl/jacek/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 fstat(8, {st_mode=S_IFREG|0600, st_size=420, ...}) = 0 pread(8, "\200\200\200\211@\0\0\20\377\377\377\377\0\0\0\0$\0\0\0\0\0\0\0\1\0\7\0mail"..., 1024, 40) = 380 pread(8, "", 1024, 420) = 0 brk(0x731000) = 0x731000 fstat(0, {st_mode=S_IFREG|0644, st_size=4, ...}) = 0 +++ killed by SIGKILL +++ I have completely no idea what is wrong - could anybody help? Here is my dovecot -n output: # 1.2.5: /etc/dovecot/dovecot.conf Warning: fd limit 1024 is lower than what Dovecot can use under full load (more than 1408). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Linux 2.6.30.5-grsec x86_64 ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info.log protocols: pop3 pop3s imap imaps managesieve listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): *:110 listen(managesieve): 127.0.0.1:2000 ssl_listen: * ssl_cert_file: /etc/ssl/server.crt ssl_key_file: /etc/ssl/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib64/dovecot/imap-login login_executable(imap): /usr/lib64/dovecot/imap-login login_executable(pop3): /usr/lib64/dovecot/pop3-login login_executable(managesieve): /usr/lib64/dovecot/managesieve-login max_mail_processes: 1024 first_valid_uid: 79 last_valid_uid: 79 first_valid_gid: 79 last_valid_gid: 79 mail_location: maildir:/var/mail/mail/%d/%u maildir_copy_with_hardlinks: no mbox_lazy_writes: no mail_executable(default): /usr/lib64/dovecot/imap mail_executable(imap): /usr/lib64/dovecot/imap mail_executable(pop3): /usr/lib64/dovecot/pop3 mail_executable(managesieve): /usr/lib64/dovecot/managesieve mail_plugins(default): autocreate quota imap_quota mail_plugins(imap): autocreate quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(imap): /usr/lib64/dovecot/plugins/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/plugins/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle imap_client_workarounds(imap): outlook-idle imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v.%u pop3_uidl_format(managesieve): %08Xu%08Xv lda: postmaster_address: postmaster(a)my-server.pl hostname: my-server.pl mail_plugins: sieve quota mail_plugin_dir: /usr/lib64/dovecot/plugins/lda sendmail_path: /usr/lib/sendmail auth_socket_path: /var/run/dovecot/auth-master auth default: verbose: yes passdb: driver: sql args: /etc/dovecot/auth-mysql.conf userdb: driver: sql args: /etc/dovecot/auth-mysql.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: exim group: exim master: path: /var/run/dovecot/auth-master mode: 432 user: root group: exim plugin: quota: dict:user::proxy::quotadict sieve: /var/mail/sieve/%d/%u.sieve autocreate: Trash autocreate2: Spam autocreate3: Sent autocreate3: drafts autosubscribe: Trash autosubscribe2: Spam autosubscribe3: Sent autosubscribe3: drafts dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

3 4

[Dovecot] getmail and Dovecot LDA deliver
by spacejam 29 Sep '09

29 Sep '09

Hello, my first post in this list. Hope it's the right place.:-) I'm having a problem running getmail together with Dovecot LDA for virtual users. To achive this I let getmail run under the user that owns the virtual email accounts-root. The problem is that getmail is running under the user vmail and therefore the emails received will be put into vmail's mailbox. But the emails getmail collected are actually for a virtual Dovecot user which has its maildir in a subdirectory of vmails home. The settings for the virtual users seem to be okay: I can login on Dovecot with virtual user account and I can send emails to Postfix for the virtual user. Postfix correctly uses devlier with the name of the virtual user and so the emails are going to the correct directory. For me it seems that getmail always uses the username under which getmail is currently running. As this must be a local user, getmails always announces this local user to deliver and deliver therefore puts the emails into the wrong account. My question is: How do I let deliver know that it should use a virtual user? I tried with the -d agrument in my getmail rc File, but deliver never accepts the parameter -d (always says unknown parameter -d). I tried as well to let getmail or deliver to be run as root, but then the emails will be delivered to roots home, which is not the goal too... Does anyone know a way how I can set getmail to handle emails for a virtual account properly? Any hint is appreciated as it already costed me hours of try-and-error Regards tobi -- View this message in context: http://www.nabble.com/getmail-and-Dovecot-LDA-deliver-tp24896318p24896318.h… Sent from the Dovecot mailing list archive at Nabble.com.

4 9

[Dovecot] Enabling security on POP3 and IMAP
by Richard Hobbs 29 Sep '09

29 Sep '09

Hello, Currently, on our new test server, I am offering IMAP on 143 and POP3 on 110. We would like to enable security on both of these protocols to attempt to eliminate the risk from an internal password-grabbing/content-grabbing attack. I presume this would mean enabling SSL, and a more securure authentication, right? Or are plain text passwords just sent over the SSL, and therefore perfectly secure? Also, what are the steps to enable security for these protocols on an already-configured server? Is it possible to offer encrypted and non-encrypted services simultaneously, so people have a choice of whether they want security or not? I know that's a bit weird, but for testing it would be useful. Finally, is there a way to monitor which users are connecting over the secure ports and which users are connecting over the non-secure ports? Thanks in advance! Richard. -- Richard Hobbs (IT Specialist) Toshiba Research Europe Ltd. - Cambridge Research Laboratory Email: richard.hobbs(a)crl.toshiba.co.uk Web: http://www.toshiba-europe.com/research/ Tel: +44 1223 436999 Mobile: +44 7811 803377

8 13

[Dovecot] Managesieve and Proxy
by Oliver Eales 29 Sep '09

29 Sep '09

Hello list, is it possible to use the dovecot proxy feature for the mangaesieve server also ? Regards, Oliver

3 2

[Dovecot] Root User to Access Mailboxes for Migration
by Faisal Jaffar 29 Sep '09

29 Sep '09

Dear All, Hi there. We're currently using Microsoft Transporter Suite to migrate emails from Dovecot to Exchange. One of the features available to migrate is using the IMAP server administrator account to access other users' mailboxes. How and what do I need to set this up? Any information is much appreciated. Faisal Jaffar

4 6

[Dovecot] compressed IMAP traffic
by Leonardo Rodrigues 29 Sep '09

29 Sep '09

Simply (and maybe stupid) question ...... is there anything that can be easily used to automatically compress IMAP traffic between client and server ? I was thinking if the SSL/TLS code enables some kind of compression as well. the idea is to reduce IMAP traffic between server and clients and not using VPN-like solutions, the idea is just some IMAP4 standard client (compatible with SSL/TLS if that's the case) and nothing else. can something like that be done ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

6 26

[Dovecot] problem with compilation of dovecot-antispam plugin with dovecot 1.2.5
by GanGan 29 Sep '09

29 Sep '09

hello all, y a use dovecot 1.2.5, compiled with : ./configure --prefix=/opt/dovecot125 --enable-header-install --with-mysql --with-ssl=openssl my error is : make install : cc -DHAVE_CONFIG_H -I/opt/dovecot125/include/dovecot/ -I/opt/dovecot125/include/dovecot/src/ -I/opt/dovecot125/include/dovecot/src/lib/ -I/opt/dovecot125/include/dovecot/src/lib-storage/ -I/opt/dovecot125/include/dovecot/src/lib-mail/ -I/opt/dovecot125/include/dovecot/src/lib-imap/ -I/opt/dovecot125/include/dovecot/src/lib-dict/ -I/opt/dovecot125/include/dovecot/src/lib-index/ -I/opt/dovecot125/include/dovecot/src/imap/ -o dovecot-version dovecot-version.c ./dovecot-version > dovecot-version.h cc -c -DCONFIG_DEBUG -DDEBUG_STDERR -DCONFIG_DEBUG_VERBOSE -fPIC -shared -Wall -Wextra -DPLUGINNAME=antispam -DHAVE_CONFIG_H -I/opt/dovecot125/include/dovecot/ -I/opt/dovecot125/include/dovecot/src/ -I/opt/dovecot125/include/dovecot/src/lib/ -I/opt/dovecot125/include/dovecot/src/lib-storage/ -I/opt/dovecot125/include/dovecot/src/lib-mail/ -I/opt/dovecot125/include/dovecot/src/lib-imap/ -I/opt/dovecot125/include/dovecot/src/lib-dict/ -I/opt/dovecot125/include/dovecot/src/lib-index/ -I/opt/dovecot125/include/dovecot/src/imap/ -o debug.o debug.c In file included from debug.c:5: antispam-plugin.h: In function 'string_dict_init': antispam-plugin.h:119: erreur: too few arguments to function 'dict_init' antispam-plugin.h:120: attention : control reaches end of non-void function make: *** [debug.o] Erreur 1 my .config : BACKEND=spool2dir DOVECOT=/opt/dovecot125/include/dovecot INSTALLDIR=/opt/dovecot125/lib/dovecot/imap USER=root GROUP=root DEBUG=stderr DEBUG_VERBOSE=1 PLUGINNAME=antispam any idea ? thanks in advance -- GanGan - www.system-linux.eu - !DSPAM:30,4abce8de71461752217160!

2 1

[Dovecot] dovecot & dspam
by Osvaldo Alvarez Pozo 29 Sep '09

29 Sep '09

Hi since several day ago I'am trying to deliver to dovecot from dspam but I hve several errors in /var/log/dovecot-deliver.log I have " Error: Can't connect to auth server at /var/run/dovecot/auth-master: Permission denied" in /var/log/mail.log I have Delivery agent returned exit code 75: /usr/lib/dovecot/deliver -d toto(a)domai.tld Sep 28 18:28:52 mx1 postfix/lmtp[23238]: 80222DE2ED: to=<toto(a)domain.tld>, relay=127.0.0.1[127.0.0.1]:2424, delay=15601, delays=15601/0.04/0.04/0.1, dsn=4.3.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 421 4.3.0 <toto(a)domain.tld> Auto-Whitelisted (in reply to end of DATA command)) My conf dovecot dovecot.conf ------------------------------------------------- base_dir = /var/run/dovecot/ disable_plaintext_auth = no protocols = imap pop3 imaps pop3s log_timestamp = "%Y-%m-%d %H:%M:%S " syslog_facility = mail mail_location = maildir:/var/vmail/%d/%u/Maildir mail_privileged_group = mail mail_debug = yes maildir_copy_with_hardlinks = yes first_valid_uid = 109 last_valid_uid = 150 first_valid_gid = 8 last_valid_gid = 8 ssl_cert_file = /etc/ssl/oc3n.net/mailserver/mail-cert.pem ssl_key_file = /etc/ssl/oc3n.net/mailserver/mail-key.pem protocol imap { # Login executable location. login_executable = /usr/lib/dovecot/imap-login mail_executable = /usr/lib/dovecot/imap imap_max_line_length = 65536 } protocol pop3 { login_executable = /usr/lib/dovecot/pop3-login mail_executable = /usr/lib/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv mail_plugin_dir = /usr/lib/dovecot/modules/pop3 } protocol lda { postmaster_address = postmaster(a)mydomain.com log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain login passdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-sql.conf } userdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-sql.conf } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } dict { } plugin { trash = /etc/dovecot-trash.conf } file /etc/dovecot/dovecot-sql.conf -------------------------------------------------------- driver = mysql connect = host=localhost dbname=postfixadmin user=postfixadmin password="secret" default_pass_scheme = MD5 user_query = SELECT '/var/vmail/%d/%n' AS home, 'maildir:/var/vmail/%d/%n' AS mail, 150 AS uid, 8 AS gid, CONCAT('dirsize:storage=', quota) AS quota FR OM mailbox WHERE username = '%u' AND active = '1' password_query = SELECT username AS user, password, '/var/vmail/%d/%n' AS userdb_home, 'maildir:/var/vmail/%d/%n' AS userdb_mail, 150 AS userdb_uid, 8 AS userdb_gid FROM mailbox WHERE username = '%u' AND active = '1' My conf dspam /etc/dspam/dspam.conf ----------------------------------------------------------------- Home /var/spool/dspam StorageDriver /usr/lib/dspam/libmysql_drv.so TrustedDeliveryAgent "/usr/lib/dovecot/deliver -d %u" UntrustedDeliveryAgent "/usr/lib/dovecot/deliver -d %u" QuarantineAgent "/usr/lib/dovecot/deliver -d %u -m SPAM" OnFail error Trust vmail Trust root Trust dspam Trust mail Trust mailnull Trust smmsp Trust daemon Debug * TrainingMode teft TestConditionalTraining on Tokenizer chained Feature whitelist Algorithm graham burton PValue graham Preference "spamAction=tag" Preference "signatureLocation=message" # 'message' or 'headers' Preference "showFactors=on" Preference "spamSubject=[SPAM]" AllowOverride trainingMode AllowOverride spamAction spamSubject AllowOverride statisticalSedation AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride signatureLocation AllowOverride showFactors AllowOverride optIn optOut AllowOverride whitelistThreshold HashRecMax 98317 HashAutoExtend on HashMaxExtents 0 HashExtentSize 49157 HashMaxSeek 100 HashConnectionCache 10 Notifications off PurgeSignatures 14 # Stale signatures PurgeNeutral 90 # Tokens with neutralish probabilities PurgeUnused 90 # Unused tokens PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hit LocalMX 127.0.0.1 SystemLog on UserLog on opt out ParseToHeaders on ChangeModeOnParse on ChangeUserOnParse full ServerPort 2424 ServerPID /var/run/dspam/dspam.pid ServerMode standard ServerParameters "--deliver=innocent" ServerIdent "localhost.localdomain" ProcessorBias on Include /etc/dspam/dspam.d/ Any Idea??? Thanks

2 1

[Dovecot] sieve vacation error
by Andre Rodier 28 Sep '09

28 Sep '09

Hello everybody, First, I want to thank the development team for the quality and the stability of dovecot. It's now running without problem since two years on my debian box. Next, I'd like you help me to solve the problem I have with vacation/sieve script. My configuration is debian lenny, with standard dovecot packages (1.0). I have setup the sieve plugin, using roundcube on another machine, and filter is working fine. fileinto is working, as well as forward and discard. However, vacation is not working at all, and I have no error message. The mails sent to the account marked as vacation are received, but the auto answer process is not working. Here the successful logs from the vacation reject script, that I temporary use: Sep 23 17:32:41 mail deliver(some.user): Loading modules from directory: /usr/lib/dovecot/modules/lda Sep 23 17:32:41 mail deliver(some.user): Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin.so Sep 23 17:32:41 mail deliver(some.user): maildir: data=/home//some.user/Maildir Sep 23 17:32:41 mail deliver(some.user): maildir: root=/home//some.user/Maildir, index=/home//some.user/Maildir, control=, inbox= Sep 23 17:32:41 mail deliver(some.user): cmusieve: Using sieve path: /home//some.user/sieve/dovecot.sieve Sep 23 17:32:41 mail deliver(some.user): cmusieve: Executing script /home//some.user/sieve/dovecot.sievec Sep 23 17:32:41 mail deliver(some.user): msgid=<72817c95458dbded987b82ec644f7dce(a)red2.co.uk>: rejectedReturn-Path: <andre.rodier(a)red2.co.uk> Here the headers of an email received, and supposed to be auto answered. X-Original-To: some.user(a)red2.co.uk Delivered-To: some.user@localhost Received: from webmail.red2.co.uk (webmail.red2.co.uk [84.45.46.48]) by mail.red2.co.uk (Postfix) with ESMTP id 0D1607E418D for <some.user(a)red2.co.uk>; Wed, 23 Sep 2009 17:30:44 +0100 (BST) Received: by webmail.red2.co.uk (Postfix, from userid 33) id 227E67FE5; Wed, 23 Sep 2009 17:16:30 +0100 (BST) To: Some User <some.user(a)red2.co.uk> Subject: vacation test MIME-Version: 1.0 Date: Wed, 23 Sep 2009 17:16:30 +0100 From: Andre Rodier <andre.rodier(a)red2.co.uk> Organization: Red2 Message-ID: <854f02eceb84d80d272212de405a1a0e(a)red2.co.uk> X-Sender: andre.rodier(a)red2.co.uk User-Agent: RoundCube Webmail/0.2 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 X-DSPAM-Result: Whitelisted X-DSPAM-Processed: Wed Sep 23 17:30:44 2009 X-DSPAM-Confidence: 0.9989 X-DSPAM-Probability: 0.0000 X-DSPAM-Signature: 4aba4d34317622670999051 Here my questions : * If the sieve vacation script had to use a counter for limits per day, where this counter is supposed to be stored ? I cant see any dovecot file. I have temporary try to use 0777 for home/sieve/maildir folders, but no file is created at all. * Is it the same process used to forward, discard and finally vacation ? * I use virtual file for users on postfix, and I also have a LDAP server for authentication. Do I have something to configure on dovecot to be sure that vacation is working with this configuration ? * As you may have noticed above, mails are redirected to localhost users. ( c.f X-Original-To: some.user(a)red2.co.uk and Delivered-To: some.user@localhost ) Is this can affect the process ? ( Remember that forward and reject is working ). * Is there a way to debug the vacation process ? Thanks for your help. André Rodier.

5 4

[Dovecot] Proxying Performance vs imapproxy
by Dan Poltawski 28 Sep '09

28 Sep '09

Hi, I'm planning on a new mail infrastructure which constists of multiple 'frontends' running webmail & public access pop/imap, which would communicate over imap/pop to 'backend mail stores'. My original idea was to run dovecot on the backends, use a predition on the frontends to proxy imap/pop and also run imapproxy in front of webmail [squirrelmail]. I've since read about the dovecot proxying features and it seems to make sense to replace predition in that above scenario. I'm unclear about the benefits of the auth_cache and how it compares to the using imapproxy in front of webmail client? Does it make sense to have authcaching switched on in the proxy and not on the backend server? (Doesn't the authentication just have to happen on the backend server?) Are there any performance benefits to using a proxying server, or is it just for splitting mailstores? thanks for your work, Dan Poltawski

4 6

[Dovecot] Upgrading Dovecot on CentOS 4 from 0.99 to 1.x
by Josep L. Guallar-Esteve 28 Sep '09

28 Sep '09

(sorry for my previous message, I sent it by mistake before finishing it) Hello, We have a production mail server running dovecot 0.99 (dovecot-0.99.14-1.rf). We are getting several errors corrected in dovecot 1.x versions: * corrupted inboxes (garbage at beggining of mbox files), * corrupted index files (Error: Corrupted file index /home/jsmith/.imap/Drafts/.imap.index: Sequence 6 not found from binary tree (6 msgs says header)), * others (Error: fcntl() failed with mbox file /var/mail/jsmith: Resource deadlock avoided), etc. I'm planning to upgrade using the instructions found at dovecot's wiki. On http://atrpms.net/dist/el4/ it is offered in 3 different versions: * dovecot 1..0.15-1_73.el4 * dovecot 1.1.19-1_96.el4 * dovecot 1.2.5-0_100.el4 I have a separated test system, where I'll test upgrading from 0.99 to final selected version, to discover any possible gotchas found while upgrading. Two questions: 1. Which version is the recommended to upgrade? I'd like stability and as little problems as possible over anything else, as we have a simple set up. 2. What is the preferred upgrade method? straight upgrade? (099 -> rpm -Fvh dovecot-1.2 ? Or upgrading one release at a time? (0.99 > 1.0 > 1.1 ...) Thank you in advance for any recommendation. Regards, Josep -- Josep L. Guallar-Esteve This transmission is intended for the use of the entity or individual to which or whom it is addressed. The transmission or any documents accompanying the transmission may contain confidential information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of the transmission or the documents is strictly prohibited. If you have received this confidential transmission in error, please destroy it and any accompanying documents and notify the sender immediately. Thank you.

3 5

[Dovecot] require SSL certs only for encrypted connections?
by Florin Andrei 28 Sep '09

28 Sep '09

# 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-14-server x86_64 Ubuntu 9.04 Here's the situation: I have several local clients (Thunderbird) which do not use TLS at all. It's plaintext completely, on port 143, because the connection is local and there are no unauthorized users on this network (it's a home network). I want to keep it that way to keep things simple. Tools / Account Settings / Server Settings: Use Secure Connection: Never Use Secure Authentication: unchecked Until now, this has worked very well. No problems so far. But now I am also setting up IMAPS for remote iPhone clients, with client/server certificates. This is how I generated the certs: http://impetus.us/~rjmooney/projects/misc/clientcertauth.html On the iPhone I uploaded the client.crt file (couldn't import client.p12 for some reason). For Dovecot I am using ca.crt, server.crt and server.key. ssl_listen: *:993 ssl_disable: no ssl_ca_file: /blah/ca.crt ssl_cert_file: /blah/server.crt ssl_key_file: /blah/server.key ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ALL:!LOW:!SSLv2 ssl_cert_username_field: commonName ssl_verify_client_cert: yes disable_plaintext_auth: no auth default: mechanisms: plain login ssl_require_client_cert: no ssl_username_from_cert: no I analyzed the connection on 993 with Wireshark and apparently all is good: it's encrypted, I see the certificate exchanges taking place. But I am worried about authenticating the connections from the iPhone and I would like to configure "ssl_require_client_cert: yes" so that a valid certificate is always required. But if I do that then Thunderbird fails to login because it's required a certificate. This is puzzling. I thought that setting would only influence SSL connections. But apparently it also affects plaintext logins from Thunderbird. Is there a way to require a cert from the iPhone TLS connections on port 993, but do not require it from clients connecting to port 143? -- Florin Andrei http://florin.myip.org/

2 6

[Dovecot] Segfault in quota-fs plugin
by Brandon Davidson 28 Sep '09

28 Sep '09

Hi all, We recently attempted to update our Dovecot installation to version 1.2.5. After doing so, we noticed a constant stream of crash messages in our log file: Sep 22 15:58:41 hostname dovecot: imap-login: Login: user=<USERNAME>, method=PLAIN, rip=X.X.X.X, lip=X.X.X.X, TLS Sep 22 15:58:41 hostname dovecot: dovecot: child 6339 (imap) killed with signal 11 (core dumps disabled) We rolled back to version 1.2.4, and installed 1.2.5 on a test system - something we'll have to make sure to do *before* rolling new versions into production. Anyway, after examining a few core files from the test system, it looks like the recent changes to the quota plugin (specifically the maildir backend's late initialization fix) have broken the other backends. Stack trace and further debugging are available here: http://uoregon.edu/~brandond/dovecot-1.2.5/bt.txt The relevant code seems to have been added in changeset 9380: http://hg.dovecot.org/dovecot-1.2/rev/fe063e0d7109 Specifically, quota.c line 447 does not check to see if the backend implements init_limits before calling it, resulting in a null function call for all backends that do not do so. Since this crash would appear to affect all quota backends other than maildir, it should be a pretty easy to reproduce. I've attached a patch which seems to fix the obvious code issue. I can't guarantee it's the correct fix since this is my first poke at the Dovecot source, but it seems to have stopped the crashing on our test host. Regards, -Brandon

3 2

[Dovecot] Running dovecot master processes across multiple IPs
by Steven F Siirila 28 Sep '09

28 Sep '09

We are running dovecot 1.1.8 and are currently running it with 4 master processes (one for each of the protocols: imap, imaps, pop3, pop3s). The idea was to spread out the load so as to not overwhelm any one master. This has worked well. To take it further, we're contemplating running masters across multiple IP addresses, where the host/service name DNS records would be something like this: imap-server.domain A 10.1.1.1 A 10.1.1.2 A 10.1.1.3 A 10.1.1.4 The default route would either be through the first address (10.1.1.1 in this example) or potentially across all of them in presumably a round-robin fashion. Do you see any problems with this? Has anyone done this? -- Steven F. Siirila Office: WBOB, 624J Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota

2 1

[Dovecot] Ubuntu 9.x segmentation fault with vpopmail auth
by Timothy Timmons 28 Sep '09

28 Sep '09

I've been trying for 24 hours now, to get an IMAP server which will autenticate off of vpopmail cdb database and the auth module always segfaults on login. I'm using vpopmail 5.5.0 only because it is the only version which seems to create a dynamically linked version of the library. I tried latest releases dovecot 1.0, 1.1, and 1.2. Also latest mercurial pulls of 1.1 and 1.2. Even old versions of courier-imap and courier-authlib do it, but with these I can try older versions of vpopmail cause they don't require the dynamically linked version of libvpopmail. So I'm thinking it is something with Ubuntu 9.04 and pretty much all third party vpopmail authentication code. Strangely qmail-pop3d works fine with vchkpwd, just I cannot find any IMAP server that will work no matter what combination of vpopmail and version of the IMAP server. If anyone can figure this out I'd greatly appreciate it. Sep 25 14:43:37 mail kernel: [41432.282133] dovecot-auth[14048]: segfault at 0 ip 00000000 sp bf88c8ec error 14 in dovecot-auth[8048000+40000] Sep 25 15:07:16 mail kernel: [42852.136667] dovecot-auth[21185]: segfault at 0 ip 00000000 sp bfdcce2c error 14 in dovecot-auth[8048000+40000] Sep 25 15:23:59 mail kernel: [43855.048512] dovecot-auth[6927]: segfault at 0 ip 00000000 sp bfd81ecc error 14 in dovecot-auth[8048000+40000] Sep 25 15:55:22 mail kernel: [45737.522566] dovecot-auth[12458]: segfault at 0 ip 00000000 sp bfcc8dfc error 14 in dovecot-auth[8048000+40000] Sep 25 16:14:15 mail kernel: [46870.968589] dovecot-auth[30127]: segfault at 0 ip 00000000 sp bff59f9c error 14 in dovecot-auth[8048000+3d000] Sep 25 16:23:26 mail kernel: [47421.947792] dovecot-auth[15832]: segfault at 0 ip 00000000 sp bf9121ec error 14 in dovecot-auth[8048000+31000] Sep 25 16:27:06 mail kernel: [47641.662788] authvchkpw[17265]: segfault at 0 ip 00000000 sp bf8f240c error 14 in authvchkpw[8048000+5000] etc.. Thanks, Tim P.S. I'm going nuts here, trying to get Squirrelmail back up for customers, but I'm absolutely stuck.

3 3

[Dovecot] Sieve: problems installing in different prefix
by Andreas Ntaflos 28 Sep '09

28 Sep '09

Hi list, but mainly Stephan :) when building and subsequently installing the new Sieve plugin I am coming across a small difficulty when it comes to "make install". The libraries lib90_sieve_plugin.* always get installed in the directory /usr/local/lib/dovecot/lda, no matter what "prefix" argument is supplied to "make install". Only the libraries seem affected, not the rest of the Sieve plugin distribution (i.e. sieve, sievec, sieve-test, ...). Background: I like using XStow [1] to manage packages built from source. With XStow one can configure and build software like Dovecot and Sieve as usual (./configure && make) but then install it under a custom directory/prefix, like /usr/local/stow/dovecot-1.2.5. The "prefix" argument for "make install" is used for this, i.e.: make install prefix=/usr/local/stow/dovecot-1.2.5 XStow is then used to create symlinks to the correct places in the file system. For example the Dovecot binary gets installed in /usr/local/stow/dovecot-1.2.5/sbin/dovecot and a symbolic link is created by XStow: /usr/local/sbin/dovecot -> ../stow/dovecot-1.2.5/sbin/dovecot The advantages are clear: installing a software package is a matter of configuring, building and then installing under a custom directory, and letting XStow create symlinks. Updating is as easy as installing the new version in a parallel custom directory and letting XStow update the symlinks. Removing a software package just involves letting XStow remove the symlinks and doing an rm -rf on the custom directory. No more accidentally orphaned files or the need to keep the compiled source distribution around to be able to issue a "make uninstall". Back to the problem: The Sieve source distribution seems to have some hard-coded setting to always install the libraries under /usr/local/lib/dovecot/lda and not honouring the "prefix" argument for "make install". This is probably a libtool issue, but I am not sure. I know my way around the Autotools but here I am a bit lost. Looking at the generated Makefile in dovecot-1.2-sieve-0.1.12/src I can see the following: moduledir = /usr/local/lib/dovecot/ It *should* look like this: exec_prefix = ${prefix} ... moduledir = ${exec_prefix}/lib/dovecot/ This explains why the install prefix is not honoured here. The "moduledir" has already been hardcoded, instead of prefixed. For comparison look at the Dovecot source distribution. Here all libraries are installed correctly under the specified prefix. An example is src/lib-sql. The generated Makefile includes these lines, which are correctly honouring the prefix: exec_prefix = ${prefix} ... moduledir = ${exec_prefix}/lib/dovecot ... #sql_moduledir = $(moduledir)/sql AM_CPPFLAGS = \ -I$(top_srcdir)/src/lib \ -DMODULEDIR=\""$(moduledir)"\" \ $(SQL_CFLAGS) The last few lines seems to make sure that gcc uses the defined moduledir, but as usual generated code is not immediately comprehensible for the casual viewer :) The top-level generated Makefile also contains a correctly defined moduledir: moduledir = ${exec_prefix}/lib/dovecot So, which knobs have to be turned to have the Sieve source distribution use a correct "moduledir" and not a hardcoded path? I hope I could explain the problem correctly and haven't drawn any wrong conclusions here. I will continue to investigate this and maybe even provide a patch if I find a solution but it is probably easier for the maintainer and author of the build system to look at this and determine what to do. Anyway, apologies for this lengthy post. I hope it wasn't too long to read. Andreas [1] http://xstow.sourceforge.net/ -- Andreas Ntaflos GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

2 1

[Dovecot] Sieve: redirect and keep action, possible bug
by Andreas Ntaflos 27 Sep '09

27 Sep '09

Hi, Using Dovecot 1.2.4 and the new Sieve implementation in version 0.1.12, I ran into a problem that could indicate a bug in Sieve. The following is a simple script (as generated by Horde's Ingo application) to redirect incoming mail and also keep a copy of the message in the local inbox: if true { redirect "foo(a)example.org"; } if true { keep; stop; } Problem is, it doesn't work as expected: no copy of the message is kept in the local inbox. However, if I explicitly tell Sieve to "fileinto" it works fine: require ["fileinto"]; if true { redirect "foo(a)example.org"; } if true { fileinto "INBOX"; stop; } Is this a bug in Sieve or am I wrong about how "keep" works? Thanks in advance! Andreas -- Andreas Ntaflos Vienna, Austria GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

3 6

[Dovecot] Dovecot + DRBD/GFS mailstore
by Guy 26 Sep '09

26 Sep '09

Hi guys, I'm looking at the possibility of running a pair of servers with Dovecot LDA/imap/pop3 using internal drives with DRBD and GFS (or other clustered FS) for the mail storage and ext3 for the root drive. I'm currently using maildrop for delivery and Dovecot imap/pop3 with the stores over NFS. I'm looking for better performance but still keeping the HA element I have now with shared storage over NFS. Has anyone had experience with a setup like the one I'm suggesting? What was performance like with Dovecot using GFS? Thanks Guy -- Don't just do something...sit there!

5 9

[Dovecot] lda protocol
by Darvin Denmian 25 Sep '09

25 Sep '09

Hello, why the output of command "dovecot -n" doesn't show anything about protocol lda? Bellow my lda configuration: protocol lda { mail_plugins = sieve quota expire log_path = /var/log/dovecot-local-deliver.log mail_debug = yes postmaster_address = postmaster(a)domain.com hostname = mail01.domain.com mail_plugin_dir = /usr/lib/dovecot/modules/lda } Thanks.

3 5

[Dovecot] Apparent corruption of dovecot.uidlist
by AnneWilson 25 Sep '09

25 Sep '09

I have been using Dovecot for about three years, and am currently using version 1.0.7 under CentOS. One of my users can no longer access his Inbox, although he can read mail in other folders. After a fair bit of log-viewing and looking for clues it suddenly began to make a sort of sense. The error message in the logs is Error: IMAP(david): unlink(/home/david/Maildir/cur/cur:2,ST) failed: Is a directory Eventually I came to /home/david/Maildir/dovecot-uidlist and compared it with my own. The second line in the problem account file is 'cur:2,ST. I backed up the file, then deleted that line. Sure enough, I could then open the messages. Unfortunately, when I close KMail I saw the line 'cur:2,ST' added to the end of dovecot-uidlist, and of course I'm back with the error. Can someone please explain to me what is causing this, and how I can correct it? Thanks Anne

2 2

[Dovecot] Feature request: 'dovecot-shared' files to be configurable
by Hendrik Pahl 24 Sep '09

24 Sep '09

Hi list, using dovecot in a more complex environment nearly always requires use of ACLs and shared mailboxes/folders. Now, to make life more easy for the users, we can use 'dovecot-shared' files to eable per-user \seen-flagging. Is it possible to make this issue configurable in the dovecot config, something like "always keep a 'dovecot-shared' file in users maildir, even if that mailbox is not shared"? That would be nice, since creating that files by hand is really time-consuming. Or are there any relations which avoid making this issue configurable? Thanks in advance, hendrik -- LWsystems GmbH & Co. KG ++ http://www.lw-systems.de/impressum Tel: +49 (0)5403 / 5556 ++ Fax: +49 (0)5403 / 7 95 89 97 LWsystems: Open Source IT Solutions - Linux Systemhaus - IT-Sicherheit ### ### LWsystems veranstaltet den LINUX SOLUTION DAY 2009 ### 29. Oktober 2009 ab 13.30 Uhr in Osnabrück ### Alle Details und Agenda unter: http://www.linux-solution-day.de ### ### Gleich anmelden: mailto:info@linux-solution-day.de?subject=Anmeldung ### ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ LWsystems GmbH & Co. KG Sitz der Gesellschaft: Tegelerweg 11, 49186 Bad Iburg Telefon +49 (0)5403 5556 Telefax +49 (0)5403 7958997 Handelsregister: Amtsgericht Osnabrück, HRA 110668 USt.-ID-Nr. DE244573220 Persönlich haftende Gesellschafterin: LWsystems Verwaltungs GmbH Sitz der Gesellschaft: Tegelerweg 11, 49186 Bad Iburg Handelsregister: Amtsgericht Osnabrück, HRB 111163 Geschäftsführer: Dipl.-Ing. Ansgar H. Licher, Bad Iburg Dipl.-Ing. Martin Werthmöller, Ibbenbüren Für weitere Firmendetails zu LWsystems siehe / For further company details please look at: http://www.lw-systems.de/impressum ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 0

[Dovecot] Upgrading Dovecot on CentOS 4, from 0.99 to 1.x
by Josep L. Guallar-Esteve 24 Sep '09

24 Sep '09

Hello, We have a production mail server running dovecot 0.99 (dovecot-0.99.14-1.rf). We are getting several errors corrected in dovecot 1.x versions: * corrupted inboxes (garbage at beggining of mbox files), * corrupted index files (Error: Corrupted file index /home/jsmith/.imap/Drafts/.imap.index: Sequence 6 not found from binary tree (6 msgs says header)), * others (Error: fcntl() failed with mbox file /var/mail/jsmith: Resource deadlock avoided), etc. I'm planning to upgrade using the instructions found at dovecot's wiki. -- Josep L. Guallar-Esteve This transmission is intended for the use of the entity or individual to which or whom it is addressed. The transmission or any documents accompanying the transmission may contain confidential information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of the transmission or the documents is strictly prohibited. If you have received this confidential transmission in error, please destroy it and any accompanying documents and notify the sender immediately. Thank you.

1 0

[Dovecot] Dovecot LDA, quota, sieve
by Jacek Osiecki 24 Sep '09

24 Sep '09

Hi, While moving services to a new server, I finally decided to switch from exim + procmail delivery to exim + dovecot-LDA (dovecot 1.2.5). All accounts are virtual - their settings are stored in mysql. This also includes configuring Quota and Sieve. So... there come some doubts: 1. Using "deliver" As I see, deliver uses auth-master socket to retrieve the mailbox settings (especially mailbox location). So, enabling dovecot-auth socket is everything I need to enable dovecot-LDA (apart from the exim configuration, which is explained quite clearly in wiki)? 2. Autocreation of mail folders Is it possible somehow to automatically create folders (like Trash, Sent-mail etc.)? 3. quota and its dict file. map { pattern = priv/quota/storage table = popbox username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } First - what is the "username_field" here? I'm running multiple domains, so will it be just username@domain? And - if so - is it possible to use the existing tables? I mean, that in my configuration I have a table named "popbox" with fields "local_part", "domain_name" and "quota". It would be perfect to make use of it, but either I could not find the solution or it simply requires an extra table... Hope someone will be able to help :) Best regards, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

1 0

[Dovecot] windows imap clients
by Charles Sprickman 23 Sep '09

23 Sep '09

All, This is slightly OT, but I figure a bunch of folks running IMAP servers should have some strong opinions on the topic. While working on a migration to Dovecot, I had the opportunity to move one account to a server running same. This is an in-house billing department box that 3-4 people share. In theory, this should work well - all the billing folks see the same email, save sent mail to the same place, have the same set of folders available, and concurrent access is no problem. In practice, I'm finding most clients kind of suck. They started with Outlook, and that did not work well. The list of problems is long. They've been using Thunderbird for some time and I'm finding the following issues there: -searches across 2GB+ of mail are painfully slow, since it's all server-side -while the inbox is checked regularly and automatically, other folders are not unless the user manually checks them. getting tbird to do this involves a fairly non-intuitive process, and there's also the issue of making sure everyone actually adds the folders they need to watch -the client does not deal well with large amounts of mail in general - some operations give no feedback, like expanding large sub-folders or doing large copy/move operations. this leads to the user quitting the app and starting the whole process again. dovecot deals with this more gracefully than the old server (Courier), but it's still an issue -offline operation would be handy sometimes, but tbird has no "hybrid" mode, and again, one must select every folder for offline access As much as people like to bash it, OS-X mail.app is basically what I'm looking for. It addresses all the shortcomings in Tbird. If I tell it to make messages available offline, it does that for all boxes. It always checks all my boxes, and when a search is performed it searches on the local copy rather than the server (which is quite polite, IMHO). It works quite well with no internet connection as well. I have about 50,000 messages in it now across 5 accounts and it only rarely gets laggy on me. I want this client on Windows, basically. :) I'm installing Mulberry now, but the manual seems to indicate it also will rely on the server-side search unless it's in offline mode (which has to be toggled - not a good solution). I must say, Dovecot has impressed the hell out of me. I had a chance to deal with the same mailbox in courier and dovecot, and everything is much faster, especially in mail.app and roundcube. Insanely fast... What else is out there for windows clients? Thanks, Charles ___ Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet - www.bway.net spork(a)bway.net - 212.655.9344

5 10

[Dovecot] The file doesn't contain a certificate.
by A M 23 Sep '09

23 Sep '09

Yesterday I upgraded dovecot from 1.1.16 to 1.2.4 using portupgrade I am now getting the following messages in the log file: Sep 23 12:00:41 imap-login: Fatal: Can't load certificate file /etc/ssl/imaps.example.org.csr: The file doesn't contain a certificate. The certificate file contains exactly what it did before: -----BEGIN CERTIFICATE REQUEST----- MIIBhTCB7wIBADBGMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFDASBgNVBAcT C0xvcyBBbmdlbGVzMRQwEgYDVQQKEwtCb3hJU1AsIExMQzCBnzANBgkqhkiG9w0B AQEFAAOBjQAwgYkCgYEAue0xYWcYcLHQoI/nQj2tG3AV0Mepx1pvHbCSqmKxelyo z5cToH9kFIPzxDJvL8ChQ21ftM7m79ChfiXgWsUhHuaoeNdwr12FQ+nbbZoaELGZ 3keZv93rYkGstkL8zxTIquDq1dKSp+3e1T7M0ktphlYWuNEv8vHa4zM3n5izdmcC AwEAAaAAMA0GCSqGSIb3DQEBBQUAA4GBAA1JnGM4A5HvRy+TFjMrUHoJr79DaMpj qmKT2R5uW0iQnRGjrSfMCaZgyEQqKU5eCAVx5xTih7iO7VKLP5zKRVMSAJ5kQW1o 7bM/NvbnI+Jdz749VkZtUXWWVNlIB0uVXp++moWN5+y94kj3f1VhHQke+pS8NWGG YxhXEZtBBUdO -----END CERTIFICATE REQUEST----- I even tried creating an new certificate and still get the same error NO changes were made to any config files I have tried to test the connection by: telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. (at this point it hangs and never responds, I have to kill the pid) ANY help would be appreciated

2 1

[Dovecot] Dovecot 1.2.5 segfaults.
by Tom Diehl 23 Sep '09

23 Sep '09

Hi, I just updated to dovecot 1.2.5 on centos5. 1.2.4 did not show this problem. I am going to roll back for the time being but I am willing to do whatever I need to to fix this. This is an x86_64 system. filesystem is ext3. I am now seeing the following in the logs: Sep 22 17:31:06 vfoggy kernel: imap[18644]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff83e31c88 error 14 Sep 22 17:31:06 vfoggy kernel: imap[18645]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffe70ee878 error 14 Sep 22 17:31:07 vfoggy kernel: imap[18682]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff3f95ac18 error 14 Sep 22 17:31:52 vfoggy kernel: deliver[18748]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007ffffd6d3aa8 error 14 Sep 22 17:32:07 vfoggy kernel: deliver[18782]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff89c022e8 error 14 Sep 22 17:32:07 vfoggy kernel: deliver[18784]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff40a23718 error 14 Sep 22 17:32:07 vfoggy kernel: deliver[18786]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007ffff66eedb8 error 14 Sep 22 17:32:26 vfoggy kernel: deliver[18896]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007ffffe99f0c8 error 14 Sep 22 17:33:07 vfoggy kernel: deliver[18994]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffb2b5ddc8 error 14 Sep 22 17:34:30 vfoggy kernel: deliver[19022]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffdfaac988 error 14 Sep 22 17:35:25 vfoggy kernel: deliver[19050]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff7865f198 error 14 Sep 22 17:35:26 vfoggy kernel: deliver[19052]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffb61b0f68 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19072]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffc7bd1118 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19073]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff9ceb4f48 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19074]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff7d762c78 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19075]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffefebafa8 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19076]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffe568c798 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19077]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffc2f2d2b8 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19078]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff6bb39a68 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19079]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fff5c3ae628 error 14 Sep 22 17:36:42 vfoggy kernel: imap[19081]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffb75b4958 error 14 As per http://dovecot.org/bugreport.html Dovecot -n follows: (vfoggy pts1) # dovecot -n # 1.2.5: /etc/dovecot.conf # OS: Linux 2.6.18-128.7.1.el5xen x86_64 CentOS release 5.3 (Final) protocols: imap imaps pop3 pop3sa managesieve listen: * login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login first_valid_uid: 512 last_valid_uid: 512 first_valid_gid: 512 last_valid_gid: 512 mail_location: maildir:~/ fsync_disable(default): yes fsync_disable(imap): yes fsync_disable(pop3): yes fsync_disable(managesieve): no mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): lda: postmaster_address: postmaster(a)tntechs.com mail_plugins: sieve quota fsync_disable: no auth default: mechanisms: plain login user: nobody worker_max_count: 50 passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: static args: uid=512 gid=512 home=/var/spool/vmail/domains/%d/%n userdb: driver: sql args: /etc/dovecot/sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: vmail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: quota: dict:user::proxy::quotadict sieve: ~/.dovecot.sieve sieve_storage: ~/sieve acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf (vfoggy pts1) # Please advise how to proceed. Regards, -- Tom Diehl tdiehl(a)rogueind.com Spamtrap address mtd123(a)rogueind.com

2 2

[Dovecot] Solr Plugin make only INBOX able to search
by rui.carneiro＠portugalmail.net 23 Sep '09

23 Sep '09

Hi all, I have downloaded and installed dovecot 1.2.4 with Solr plugin. After that, when I try to do some searches the results are weird. All messages that aren't on INBOX folder are ignored. For example, if I have a folder named "Test Folder", when I try to do ". search text <string>" the result is always empty. I tried TEXT, SUBJECT and BODY arguments and none of them returned any email. Any idea of the problem's source? Regards, Rui Carneiro

3 3

[Dovecot] SharedMailboxes in a distributed environment
by Christian Rohmann 23 Sep '09

23 Sep '09

Hello folks, I'd like your thoughts on the following problem: If one is using v1.2+ IMAP ACLs to allow users to share their mailbox and uses SQL as dictionary backend, every dovecot server would know which ACLs to enforce. But as the wiki states here "http://wiki.dovecot.org/SharedMailboxes/Shared" dovecot needs access to the other mailbox. Does that automatically mean that one dovecot machine needs to have filesystem access to the all mailboxes that are to be shared? Is there no way to share mailboxes (folders) between different servers? (apart from using NFS i.e.) -- Christian Rohmann Content Delivery Server u. Dienste Network Engineering & Design NETCOLOGNE Gesellschaft für Telekommunikation mbH Am Coloneum 9 | 50829 Köln Tel: 0221 2222-5751 | Fax: 0221 2222-75751 http://www.netcologne.de Geschäftsführer: Werner Hanf Dipl.-Ing. Karl-Heinz Zankel HRB 25580, AG Köln

2 2

[Dovecot] shared/public mailbox doesn't exist
by Eric Shubert 22 Sep '09

22 Sep '09

I have 3 servers running dovecot 1.0.10. 2 of them are configured with a shared/public namespace, but I'm having trouble getting it to work on the third, even with 2 working examples to go by. There's something I'm missing, and I'm hoping that someone here can see/tell what it is. I've created the maildir for sharing: # cd /home/vpopmail/domains/mydomain.com # maildirmake shared # chown -R vpopmail:vchkpw shared Then added the configuration to dovecot.conf: # shared namespace namespace shared { separator = . prefix = shared. location = maildir:/home/vpopmail/domains/mydomain.com/shared } Restarted dovecot: # service dovecot restart When I try to subscribe to the shared namespace though with Outlook, I get: "Failed to subscribe the folder. Server responded: 'Mailbox doesn't exist: shared'." When I try to subscribe with Squirrelmail I get: "ERROR: Could not complete request. Query: SUBSCRIBE "shared" Reason Given: [TRYCREATE] Mailbox doesn't exist: shared" I've tried various combinations of permissions to no avail. Suggestions welcome. I'm at my wits end. -- -Eric 'shubes'

2 5

[Dovecot] I need the install doc for dovecot on RHEL5.2
by daniel wang 22 Sep '09

22 Sep '09

Hi All, I need the install doc for dovecot on RHEL5.2, thanks a lot!! J Best Regards Daniel

2 1

[Dovecot] Problem with quota in maildir++
by Antonio Casado Rodríguez 22 Sep '09

22 Sep '09

Hi all. I have a problem with one user. His quota is upper of real quota. # cd /var/mail/problemuser/ # find . -name 'dovecot*' -exec rm -f {} \; # find . -name 'maildir*' -exec rm -f {} \; # echo test | mail problemuser -s test # more maildirsize 104857600S 104215602 1439 647 1 # du -h 4,0K ./.Borrador/new 4,0K ./.Borrador/cur 4,0K ./.Borrador/tmp 16K ./.Borrador 4,0K ./.Elementos enviados/new 6,7M ./.Elementos enviados/cur 4,0K ./.Elementos enviados/tmp 6,7M ./.Elementos enviados 44K ./new 32K ./cur 4,0K ./tmp 4,0K ./sieve/tmp 12K ./sieve 4,0K ./.null/new 948K ./.null/cur 4,0K ./.null/tmp 960K ./.null 8,0K ./home 4,0K ./.Deleted Items/new 13M ./.Deleted Items/cur 88K ./.Deleted Items/tmp 13M ./.Deleted Items 4,0K ./.Junk E-mail/new 372K ./.Junk E-mail/cur 4,0K ./.Junk E-mail/tmp 384K ./.Junk E-mail 21M . Does anyone know what can happen? Thanks you. # dovecot -n # 1.1.18: /etc/dovecot.conf # OS: Linux 2.6.9-89.0.11.ELsmp i686 Red Hat Enterprise Linux AS release 4 (Nahant Update 8) ext3 log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.info protocols: imaps managesieve ssl_cert_file: /etc/httpd/conf/ssl.crt/server.crt ssl_key_file: /etc/httpd/conf/ssl.key/server.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_log_format_elements: user=<%u> method=%m rip=%r rport=%b lip=%l lport=%a %c verbose_proctitle: yes mail_location: maildir:/var/spool/mail/%n mail_executable(default): /usr/sbin/post-login-dovecot mail_executable(imap): /usr/sbin/post-login-dovecot mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / location: maildir:/var/mail/%n inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)ual.es mail_plugins: quota cmusieve log_path: /var/log/dovecot/dovecot-deliver.log info_log_path: /var/log/dovecot/dovecot-deliver.log auth default: master_user_separator: * passdb: driver: passwd-file args: /etc/passwd.masterusers master: yes passdb: driver: pam userdb: driver: passwd plugin: quota: maildir quota_rule: *:storage=100M quota_rule2: Trash:storage=15M

2 2

[Dovecot] Dovecot versions and index compatibility
by Steven F Siirila 22 Sep '09

22 Sep '09

I realize these are older versions, but I'd like to know specifically whether dovecot 1.1.6 and dovecot 1.1.8 are compatible index-wise. In particular, if we downgraded from 1.1.8 to 1.1.6 would there be any issues with doing so? I realize there are later versions, but we've tested both of the above extensively, but recently loaded up a server with 1.1.8 and found that the 'imap' process core dumps frequently, so before we pursue later versions we thought it would be best to downgrade to 1.1.6. -- Steven F. Siirila Office: WBOB, 624J Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota

2 1

[Dovecot] Managesieve displays folder name (dovecot/sieve)
by Seba 21 Sep '09

21 Sep '09

Hi, I'm using Dovecot 1.2.4 with ManageSieve 0.11.9 and Sieve. All works fine but users can subscribe to the folder "dovecot/sieve" which is also displayed in the folders list. protocols = imap managesieve protocol managesieve { listen = ip_address:2000 managesieve_logout_format = bytes ( in=%i : out=%o ) } plugin { sieve=~/Maildir/.dovecot.sieve sieve_dir=/home/vmail/%d/%n/Maildir } In the maildir of the user I see this folders and files: .Drafts/ .Sent cur/ new/ temp/ sieve/ @.dovecot.sieve ingo.sieve The file "ingo.sieve" comes from Horde Ingo because users manage their scripts with ingo.The symlink "dovecot.sieve" is correct and point to ingo.sieve. When users browse their available IMAP folders they'll see a folder "dovecot/sieve". Can this be turned off or restricted with acl's? Without an symlink all folders are displayed normally without the "dovecot sieve" folder. Thanks.

2 1

[Dovecot] Maildir quota reporting
by David Kmoch 21 Sep '09

21 Sep '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm little confused with the way dovecot (1.2.4) is reporting quota. with this config protocols: imaps ssl: required ssl_ca_file: /root/cert/CA_Bundle_Trans.crt ssl_cert_file: /root/cert/mails.crt ssl_key_file: /root/cert/mails-key.pem.rsa disable_plaintext_auth: yes login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_location: maildir:%h/Maildir mail_debug: yes mail_plugins: quota imap_quota lda: postmaster_address: postmaster(a)example.com mail_plugins: quota cmusieve mail_plugin_dir: /usr/lib/dovecot/lda auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd plugin: quota: maildir:User quota quota_rule: ?:storage=20G sieve: ~/.dovecot.sieve everything works fine. TB says, there 20G quota. Command echo "1 GETQUOTAROOT INBOX" | USER=foo dovecot --exec-mail imap reports * QUOTAROOT "INBOX" "User quota" * QUOTA "User quota" (STORAGE 0 20971520) 1 OK Getquotaroot completed. Now I change the first line in foo's maildirsize file to "0S" to allow unlimited quota. Then I boost it's size to force recalculation (just to be sure) dd if=/dev/zero bs=1k count=6 >> ~foo/Maildir/maildirsize - From now, TB still reports 20GB quota for user foo, the above "echo" command still reports 20971520, but(!), quota is actually unlimited for user foo. OK, now I stop dovecot, delete maildirsize, change line in dovecot.conf quota_rule = ?:storage=0 and start dovecot again. The same result - TB still reports 20GB quota for user foo, the above "echo" command still reports 20971520, but(!), quota is actually unlimited for anyone. When I set some limit in ~foo/Maildir/maildirsize now, same values 20971520) are reported, although the limit works! Looks like LDA (deliver) works fine, but imap_quota plugin is doing something weird. Finally, the question ;-) Where does that value (20971520) come from? Is it a feature or a bug? - -- David Kmoch -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkqfhQoACgkQsUUM+N2AWobj7ACgh3yCU9LVfe1Pp2lO0nBG9iKf zbgAn15UvkVM0AeCxaUlDeYgFu++8TOn =CAoG -----END PGP SIGNATURE-----

2 3

[Dovecot] plugin development guide for non-FS backing store
by Chang Song 21 Sep '09

21 Sep '09

Hi, folks. I was wondering if anyone has some sort of guide or reference on plugin development. We are trying to develop a non-filesystem backing store. So basically we do not store mailboxes for users in local filesystem. We do RPC call to fetch from fileservers. Thank you in advance. Chang

2 3

[Dovecot] Override quota rules based on mail's content
by Andreas Calvo Gómez 21 Sep '09

21 Sep '09

Hi, I've a mail server with Postfix and Dovecot, using a LDAP backend to get the users. I've also configure quota rules, and I'm able to get the quota from LDAP. But I need the mails that come from the local domain to bypass the quota rule and be delivered to the users' inbox. Is there any way to do that? Information required by Dovecot's mailing list rules: +++ dovecot.conf +++ # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28-15-server x86_64 Ubuntu 9.04 ext4 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_user: postfix valid_chroot_dirs: /var/spool/dovecot first_valid_uid: 1000 first_valid_gid: 512 mail_privileged_group: mail mail_location: maildir:/var/spool/dovecot/%n/ mail_plugins: quota imap_quota imap_client_workarounds: delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep auth default: mechanisms: plain login default_realm: esci.es username_format: %Lu passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-userdb.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: mail group: mail plugin: quota: maildir:User quota quota_rule: *:storage=50M quota_rule2: Trash:ignore +++ dovecot-ldap.conf +++ hosts = ldap.esci.es auth_bind = yes ldap_version = 3 base = ou=Users, dc=esci, dc=es scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mailQuota=quota_rule=*:storage=%$M user_filter = (&(objectClass=posixAccount)(|(mail=%u)(uid=%u)(uid=%n))) pass_attrs = uid=user,userPassword=password,\ homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid,mailQuota=userdb_quota_rule=*:storage=%$M pass_filter = (&(objectClass=posixAccount)(|(mail=%u)(uid=%u))) default_pass_scheme = SSHA Thanks. --------------------- Andreas Calvo Gómez <andreas.calvo(a)admi.esci.es> Dept. Informàtica ESCI Pg. Pujades, 1 08003 Barcelona tel. (34) 932954710 ext.233 fax. (34) 932954720 http://www.esci.es --------------------

4 9

[Dovecot] Email box as mulitples files
by Ammad Shah 21 Sep '09

21 Sep '09

HI, i have configured Dovecot to save all emails (Sent/recieve) in multiple files (MailDir) but still emails are stored in single file (POP3 account) also a single file in /var/spool/mail. thanks

3 2

[Dovecot] Automatic fd limit changing
by Timo Sirainen 21 Sep '09

21 Sep '09

I just realized that Dovecot should probably be doing something different with how it handles fd limits. The way it currently works is: 1. It checks some settings and warns at startup if fd limit is lower than what master process might need. 2. For login processes it calculates how many fds are needed and then either increases or decreases it. So it's automatically and silently increasing fd limit for some processes, but not for others. Should it just automatically increase the limits to all processes when necessary, or never increase and just warn that the limit is too low?

2 1

[Dovecot] Sieve not fast enough after upgrade?
by Nikolay Shopik 21 Sep '09

21 Sep '09

I've upgraded mine Dovecot 1.0.15 to 1.2.4 also moved to new Sieve. I have simple sieve rule: if header :contains "Delivered-To" ["bcc(a)bcc.inblock.ru"] { setflag "\\Seen"; } It basically mark my own messages which are saved to Sent folder. When I was on 1.0.15 I never seen unread count in Thunderbird, but suddenly after upgrade I seen unread message in Sent folder just after I've sent message. If I open Sent folder it already marked as read. Me wonder if this is actually Dovecot much faster delivers and reports to MUA there is new unread message or Sieve not perform fast enough?

2 1

[Dovecot] sieve security problem
by Robert Schetterer 20 Sep '09

20 Sep '09

hi , anybody knows more about this ? http://secunia.com/advisories/36698/ http://secunia.com/advisories/36629/ http://secunia.com/advisories/36713/ -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

3 3

[Dovecot] Dovecot Sieve Vacation Messages
by Steven Murphy 20 Sep '09

20 Sep '09

I'm using a Postfix, Dovecot, MySQL setup with virtual domains. I have mail being delivered through Dovecot LDA working 100%. I'm trying to use sieve to handle vacation messages but dovecot is not reading the .dovecot.sieve file in the users maildir. I have a hunch it has to do with my dovecot-sql query but have had no success with what I found in the forums from Googling. Any help would be greatly appreciated. I've included my configs below: # 1.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.29-gentoo-r5 x86_64 Gentoo Base System release 1.12.11.1 ext3 protocols: imap imaps pop3 pop3s listen: *, [::] ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_user: postfix mail_privileged_group: vmail mail_location: maildir:/home/vmail/%d/%n/.maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster(a)example.com mail_plugins: quota sieve auth default: mechanisms: plain login user: vmail passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir sieve: /home/vmail/%d/%n/.dovecot.sieve ################################################## #dovecot-sql.conf driver = mysql connect = host=localhost dbname=mail user=mailuser password=[password] default_pass_scheme = PLAIN-MD5 user_query = SELECT homedir AS home, sieve, CONCAT('*:storage=', quota) AS quota_rule FROM users WHERE username = '%u' password_query = SELECT crypt AS password, CONCAT('*:storage=', quota) AS userdb_quota_rule FROM users WHERE username = '%u'

2 6

[Dovecot] Dovecot(-auth) crashes upon encountering a private key in .ssh
by atoth＠atoth.sote.hu 18 Sep '09

18 Sep '09

I've recently hit a bug after updating pam, while pam-ssh passphrase authentication become enabled. Dovecot-auth crashes as users having private a key stored in .ssh try to log in. I have a gentoo system with dovecot-1.1.7 installed. PAM: 1.1.0. Gentoo Bug: http://bugs.gentoo.org/show_bug.cgi?id=274924 Regards, Dw. -- dr Tóth Attila, Radiológus, 06-20-825-8057, 06-30-5962-962 Attila Toth MD, Radiologist, +36-20-825-8057, +36-30-5962-962

2 2

[Dovecot] simple feature request: IMAP logged out message
by Leonardo Rodrigues 18 Sep '09

18 Sep '09

i'd like to make a simple feature request on dovecot .... i'm using v1.2.4 (latest one) and IMAP logout message, by default is: Sep 18 14:26:27 correio dovecot: IMAP(user(a)domain.com): Disconnected: Logged out bytes=384/932222 the message can be a little customized with: # IMAP logout format string: # %i - total number of bytes read from client # %o - total number of bytes sent to client imap_logout_format = bytes=%i/%o The remote IP address, the IP which the user is coming from, can only be seen on the login message: Sep 14 09:09:12 correio dovecot: imap-login: Login: user=<user(a)domain.com>, method=PLAIN, rip=187.6.xx.xx, lip=200.140.yy.yy the feature request is that the remote IP address could be added on the Logout message too, that would make much easier to watch connections from some specific user and from some specific ip address, regarding traffic of the connection. For example, something like: Sep 18 14:26:27 correio dovecot: IMAP(user(a)domain.com): Disconnected: Logged out bytes=384/932222, rip=187.6.xx.xx, lip=200.140.yy.yy -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

2 2