- dovecot - dovecot.org

[Dovecot] LDAP documentation cleanups
by Timo Sirainen 22 Feb '09

22 Feb '09

I remember some people also complained how the LDAP documentation was messy. Here's my attempt at cleaning it up: http://wiki.dovecot.org/AuthDatabase/LDAP Anything still unclear? (Other than SSL/TLS setup. Someone who knows how it really works should write something there.)

1 0

[Dovecot] Problem with v1.1.10
by Cyrus Rahman 22 Feb '09

22 Feb '09

I've been using 1.1.8 successfully but tried out 1.1.10 this morning. I have a combination of system and virtual users. The system users were unaffected by the change, but the virtual users all lost access to their mail because their home directories, as interpreted by dovecot, moved from user@domain to user@user@domain. The location of the home directory is given to dovecot for virtual users using the static db as uid=vmail gid=vmail home=/var/vmail/%u mail=maildir:~/Inboxdir Were there any changes in this area that might have caused the problem? Cyrus dovecot -n output: # 1.1.10: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.1-RELEASE-p2 amd64 protocols: imaps managesieve ssl_cert_file: /etc/ssl/dovecot/certs/dovecot.pem ssl_key_file: /etc/ssl/dovecot/private/dovecot.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(managesieve): no verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: mbox:~/.dovecot:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): expire quota imap_quota trash fts fts_squat antispam autocreate mail_plugins(imap): expire quota imap_quota trash fts fts_squat antispam autocreate mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(managesieve): dict_db_config: /usr/local/etc/dovecot-db.conf sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): ~/.sieve sieve(default): sieve(imap): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / prefix: #mbox/ inbox: yes hidden: yes subscriptions: yes namespace: type: private separator: / location: maildir:~/Maildir list: yes subscriptions: yes auth default: mechanisms: plain login username_format: %Lu passdb: driver: pam args: session=yes dovecot passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: passwd args: blocking=yes userdb: driver: static args: uid=vmail gid=vmail home=/var/vmail/%u mail=maildir:~/Inboxdir socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

4 6

[Dovecot] dovecot 1.2 virtual folders question
by Robert Schetterer 21 Feb '09

21 Feb '09

Hi Timo is this possible a possible setup ? for downloading imap folders ( including inbox ) with pop3 controlled by a a dovecot-virtual file in usr/local/virtual/%d/%u/ with content something like that * -Trash -Trash/* -Sent -Sent/* -Drafts -Drafts/* all namespace private { separator = / prefix = "" location=maildir:/usr/local/virtual/%d/%u/:CONTROL=/usr/local/virtual/%d/%u/:INDEX=/usr/local/virtual/%d/%u/ inbox = yes subscriptions = yes list = yes } namespace private { prefix = virtual/ separator = / location = virtual:/usr/local/virtual/%d/%u:LAYOUT=maildir++ inbox = no } it doesnt work yet, but i am nearly sure that i havent understand http://wiki.dovecot.org/Plugins/Virtual perhaps you might bring me on the way background : i want to include a global sieve rule which sorts marked spam mails in a subfolder of inbox called Junk, so that users never can overide it and set perhaps an autoreply by an Sieve rule by incomming mail to inbox to make it possible that pop3 users may fetch sorted Spam mails outta the Junk folder too, i wanna use virtual setup folders Trash , Sent , Drafts are standart folders are standart and should be ignored with that -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 11

[Dovecot] DIGEST-MD5 user/realm mismatch with Postfix
by Darren Pilgrim 21 Feb '09

21 Feb '09

This is a follow-on to the "SQL field format for digest-md5?" thread. After some additional debugging, I've found the problem is a mismatch in what Dovecot expects and Postfix uses for the user and realm. For a username "user(a)example.com" and password "sekret", Dovecot expects: username = "user" realm = "example.com" but Postfix sends the checksum of: username = "user(a)example.com" realm = "" How do I fix this?

2 1

Re: [Dovecot] Concurrent POP3 Sessions Issues
by Timo Sirainen 21 Feb '09

21 Feb '09

Did you already solve this? If not, just mail the strace output to me privately and I'll take a look at it. On Fri, 2009-01-30 at 09:39 -0300, Mauricio López Riffo wrote: > Timo, > > What messages should be see? I execute the commands and shows a lot > of messages, i dont know what it means, i m not a programmer :) > > > Thanks > > ---- > > Mauricio López Riffo > Red Hat Certified Engineer > 804006455319519 > Netline Telecomunicaciones Chile > Los Conquistadores 2430, Providencia, Santiago. > Codigo Postal: 7530041 > Fono: +562 6560600 > Móvil: +569 90992366 > > > -----Mensaje original----- > > De: Timo Sirainen [mailto:tss@iki.fi] > > Enviado el: jueves, 29 de enero de 2009 20:46 > > Para: mauricio.lopez(a)netline.net; Dovecot Mailing List > > Asunto: Re: [Dovecot] Concurrent POP3 Sessions Issues > > > > On Jan 29, 2009, at 1:17 PM, Mauricio López Riffo wrote: > > > > > I have problems with dovecot + ldap + nfs, we could't have more than > > > 20 concurrent sessions of pop3, when user 21 comes, the auth process > > > takes more than 1 sec and is incresing (while most users arrives, more > > > delay in > > > autenticacion exists) and my customers complaint about the service. > > > We need > > > support about 200 concurrents pop3 users, here is my details > > > > Someone else was recently complaining about the same thing. Or was it you? > Anyway, > > dovecot-auth doesn't know how many users are logged in so if the problem > really is 21 > > *concurrent users* instead of n logins/ second, I find it highly unlikely > that the problem is > > with authentication. > > > > My guess is that this has something to do with NFS. Perhaps start Dovecot > with strace -tt -f > > dovecot and then when it's slowing down see what syscall it says is > blocking. >

1 0

[Dovecot] One Dovecot serving 2 domains - possible?
by k bah 21 Feb '09

21 Feb '09

I'm talking about Dovecot 1.0.x, since 1.1.x showed some problems on some of my servers. -- Is it possible to have Dovecot on one machine serving two different domains? How can I set the mailboxes root to one domain to /dir1/ and to the other domain to /dir2/ ? I want all mailboxes from one domain to reside on a different mailbox root. I use Dovecot LDA. Is is possible to set a LDAP config to one domain and another LDAP config to the other (the auth part, I wan't users to reside on different bases on my LDAP tree, so search bases need to be different) thanks in advance = Scrublade Wipers New, Heavy Duty, wiper design to remove bugs and road slime. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=2b9f0c9f1afcc5e7181028e… -- Powered by Outblaze

2 1

[Dovecot] auth-worker always opens PAM session
by Miguel Di Ciurcio Filho 21 Feb '09

21 Feb '09

I'm using Dovecot 1.1.7 on CentOS 5.2. I've changed my passdb from passwd to pam, it works fine, but I've found this messages on /var/log/secure: dovecot-auth: PAM adding faulty module: /lib64/security/pam_limits.so dovecot-auth: PAM unable to dlopen(/lib64/security/pam_limits.so) dovecot-auth: PAM [error: /lib64/security/pam_limits.so: failed to map segment from shared object: Cannot allocate memory] Latter I realized that my auth_process_size was 64. Changed it to 128 and problem solved. But I suspect that dovecot should not be opening sessions, because there is no session=yes on my passdb configuration. According to the docs: args = dovecot [session=yes] [setcred=yes] [failure_show_msg=yes] [cache_key=<key>] [<service name>] session=yes makes Dovecot open and immediately close PAM session. Some PAM plugins need this to work, such as pam_mkhomedir. I checked the source code in passdb-pam.c: struct pam_passdb_module { struct passdb_module module; const char *service_name, *pam_cache_key; unsigned int pam_setcred:1; unsigned int pam_session:1; unsigned int failure_show_msg:1; }; And this: /* -session for backwards compatibility */ if (strcmp(t_args[i], "-session") == 0 || strcmp(t_args[i], "session=yes") == 0) module->pam_session = TRUE; It seams to me that the session is going to be opened anyway, since pam_session is always TRUE. Regards, Miguel

2 3

[Dovecot] quota and dict quota
by Osvaldo Alvarez Pozo 21 Feb '09

21 Feb '09

Hi I am running dovecot with quota. as show in this part of dovecot.conf . protocols = imap pop3 protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle delay-newmail } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } Now I want to see the users's use of quota in postfixadmin, wich demende the use of dict quota. That is wath I do not understang. Can I have dict quota and mail_plugins=quota at the same time? How do I do? Thanks

2 5

[Dovecot] Dovecot 1.2.beta1 Backtrace POP3
by Steven King 21 Feb '09

21 Feb '09

I am testing out the new Dovecot 1.2.beta1 software. I am getting reports from people using POP3 that it randomly drops connections. Looking at the log file I see that the POP3 process they were connecting to panics and dumps a Raw bactrace. Below is a copy of the logs (IP addresses striped for security): dovecot: Feb 21 13:10:45 Info: auth(default): passwd-file(janna(a)jantics.com,x.x.x.x): lookup: user=janna(a)jantics.com file=/etc/postfix/passwd dovecot: Feb 21 13:10:45 Info: auth(default): master out: USER 3340 janna(a)jantics.com uid=1005 gid=102 home=/var/mail/vhosts/%d/%n quota=maildir quota_rule=*:storage=100M quota_rule2=Trash:storage=50M dovecot: Feb 21 13:10:45 Panic: POP3(janna(a)jantics.com): Trying to allocate 0 bytes dovecot: Feb 21 13:10:45 Error: POP3(janna(a)jantics.com): Raw backtrace: pop3 [0x80d18fc] -> pop3 [0x80d195a] -> pop3 [0x80d125b] -> pop3 [0x80db683] -> pop3(i_malloc+0x15) [0x80d5ee5] -> pop3(client_create+0x503) [0x805c573] -> pop3(main+0x3ce) [0x805e00e] -> /lib/libc.so.6(__libc_start_main+0xe0) [0xb7e39390] -> pop3 [0x805b7e1] dovecot: Feb 21 13:10:45 Error: child 26895 (pop3) killed with signal 6 dovecot: Feb 21 13:10:45 Info: pop3-login: Login: user=<janna(a)jantics.com>, method=PLAIN, rip=69.54.221.129, lip=x.x.x.x -- Steve King Network Engineer - Liquid Web, Inc. Cisco Certified Network Associate CompTIA Linux+ Certified Professional CompTIA A+ Certified Professional

2 2

[Dovecot] Maildir with INBOX and other folders at same level
by Seth Rhudy 21 Feb '09

21 Feb '09

Hello- I have set up Dovecot before and feel fairly comfortable with it but am having some issues with a new setup and have not been able to find a solution via Google or the list archives. I use offlineiimap to sync an IMAP account with an email provider. After the sync is complete, my ~/Maildir is set up with a folder called INBOX (with cur,new,tmp inside) and all my other folders set up at same level as INBOX (also with cur,new,tmp inside): ~/Maildir INBOX cur new tmp Otherfolder1 cur new tmp Otherfolder2 cur new tmp etc.. This email provider says that they use '/' as the IMAP folder separator so '.' can be used in folder names. Anyway, I am using Dovecot 1.0.15 on Debian Lenny and can't seem to get Dovecot to recognize this folder structure and display it in my MUA. In my dovecot.conf, I have: mail_location = maildir:~/Maildir When I fire up my MUA it connects fine but does not display anything -- the INBOX is empty and the other folders are not there. I have tried various configurations with the namespace private {} section but without success. What am I missing? Thank you in advance for your assistance.

2 2

[Dovecot] Sendmail + Deliver as an LDA probs
by ben 21 Feb '09

21 Feb '09

Hi, I'm having trouble setting up sendmail to be able to use dovecot deliver as an LDA... I don't want to be able to deliver mail locally, everything should go via deliver (virtual user setup)... And i'm confused about all the procmail/lda entry's in different sendmail config files... When using $# deliver -u testuser < testmail <-- he delivers my mail in the correct mailbox as stated in my dovecot passdb file homedir. So deliver is working fine ! ---- I used the dovecot.m4 from wiki.dovecot.org/LDA/sendmail sendmail.mc fragment (only lines affecting Local delivery) : DOMAIN(`blaat')dnl MODIFY_MAILER_FLAGS(`LOL', `-S')dnl FEATURE(`local_procmail')dnl define(`LOL_MAILER_PATH',`/usr/bin/procmail')dnl define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl dnl MAILER(`local')dnl MAILER(`smtp')dnl MAILER(`procmail')dnl MAILER(`dovecot')dnl dnl ------ blaat.m4 fragment : define(`LOCAL_MAILER_PATH',`/usr/bin/procmail') define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail') ------ more /usr/local/src/sendmail-x.x/cf/mailer/dovecot.m4 : ######################*****############## ### DOVECOT Mailer specification ### ##################*****################## Mdovecot, P=/opt/dovecot/libexec/dovecot/deliver, F=DFMPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, T=DNS/RFC822/X-Unix, A=deliver -d $u ------- virtusertable/virtusertable.db : test(a)testdomain.com blaatuser --------- aliases/aliases.db : blaatuser | /opt/dovecot/libexec/dovecot/deliver -d $u ---- sendmail.cw = empty ----- mailertable/mailertable.db : testdomain.com dovecot:dovecot ################# When I run #$ sendmail -bv test(a)testdomain.com sendmail gives : test(a)testdomain.com... deliverable: mailer local, user test (as a matter of fact the user test does exist on my machine, so what he does is stripping of the domainname and he delivers the mail in /var/spool/mqueue/test :-/ ) And I don't see anything in my deliver logfile of course... Help would be appreciated ! thx Ben

2 5

[Dovecot] v1.2.beta1 virtual plugin raw trace
by Robert Schetterer 20 Feb '09

20 Feb '09

Hi Timo, using 1.2 beta with virtual plugin testing parallel imap/pop3 download with dovecot-virtual virtual/INBOX -Trash -Trash/* all dovecot: Feb 11 07:03:08 Panic: POP3(.....@.....): file mailbox-list.c: line 420 (mailbox_list_iter_init_multiple): assertion failed: (*patterns != NULL) dovecot: Feb 11 07:03:08 Error: POP3(....@.....): Raw backtrace: pop3 [0x80ddb01] -> pop3 [0x80ddb82] -> pop3 [0x80dd529] -> pop3 [0x80a609c] -> pop3(mailbox_list_iter_init_namespaces+0xed) [0x80a623d] -> /usr/lib/dovecot/modules/pop3/lib20_virtual_plugin.so(virtual_config_read+0x706) [0xb7ddbec6] -> /usr/lib/dovecot/modules/pop3/lib20_virtual_plugin.so [0xb7ddda0b] -> /usr/lib/dovecot/modules/pop3/lib20_mail_log_plugin.so [0xb7de42ea] -> /usr/lib/dovecot/modules/pop3/lib10_quota_plugin.so [0xb7df014a] -> pop3(mailbox_open+0x52) [0x80a4772] -> pop3(client_create+0x16f) [0x805edcf] -> pop3(main+0x416) [0x8060e96] -> /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0) [0xb7e0b450] -> pop3 [0x805e3d1] as allready described * -Trash -Trash/* all produces Virtual mailbox loops: INBOX dovecot: Feb 11 07:02:00 Error: POP3(....@.....): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2009-02-11 07:02:00] whatever i tried setup cant get virtual plugin to work as awaited -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 1

[Dovecot] location of temporary files in deliver
by Stuart Henderson 20 Feb '09

20 Feb '09

deliver has the following: -- -- -- /* After buffer grows larger than this, create a temporary file to /tmp where to read the mail. */ #define MAIL_MAX_MEMORY_BUFFER (1024*128) ... static struct istream *create_raw_stream(int fd, time_t *mtime_r) ... input = i_stream_create_seekable(input_list, MAIL_MAX_MEMORY_BUFFER, "/tmp/dovecot.deliver."); -- -- -- On most of my systems, /tmp is relatively small (a few hundred MB, and sometimes on ramdisk), and I like to use /var/tmp for larger temp space. I just had a problem where I exceeded the space available in /tmp while delivering a (multi recipient) message and had to modify the above line to use an alternative location, and recompile. Would it be appropriate to make this a configurable option instead? Thanks. Feb 3 15:14:51 mh1-pl7 deliver(169(a)example.com): write_full(/tmp/dovecot.deliver....) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(149(a)example.com): write_full(/tmp/dovecot.deliver....) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(opx-cc(a)example.com): write_full(/tmp/dovecot.deliver....) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(142(a)example.com): write_full(/tmp/dovecot.deliver....) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(165(a)example.com): write_full(/tmp/dovecot.deliver....) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(152(a)example.com): stat(/tmp/Dovecot Delivery Mail) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(152(a)example.com): msgid=<49885EB9.60706(a)example.com>: save failed to INBOX: BUG: Unknown internal error Feb 3 15:14:51 mh1-pl7 deliver(152(a)example.com): sieve runtime error: Keep: Generic Error Feb 3 15:14:51 mh1-pl7 deliver(152(a)example.com): sieve_execute_bytecode(/home/vmail/example.com/152/.dovecot.sievec) failed Feb 3 15:14:51 mh1-pl7 deliver(125(a)example.com): stat(/tmp/Dovecot Delivery Mail) failed: No space left on device Feb 3 15:14:51 mh1-pl7 deliver(125(a)example.com): msgid=<49885EB9.60706(a)example.com>: save failed to INBOX: BUG: Unknown internal error Feb 3 15:14:51 mh1-pl7 deliver(125(a)example.com): sieve runtime error: Keep: Generic Error Feb 3 15:14:51 mh1-pl7 deliver(125(a)example.com): sieve_execute_bytecode(/home/vmail/example.com/125/.dovecot.sievec) failed

2 1

[Dovecot] How many namespaces for several groups of shared mailboxes ?
by Thomas Hummel 20 Feb '09

20 Feb '09

Hello Timo, let's say you want to implement several distinct groups of shared mailboxes via one (several) public namespace(s) with dovecot-1.1.x/Maildir. For instance, team1, team2 and team3 work on different projects (project1, project2, project3). Obviously, as many public namespaces (#team1, #team2, #team3) would do the trick, but then, any user (including users who don't belong to any above team) would 'see' useless non-selectionable folders #team*. So my idea would be to create only one public namespace (#Public) into which I'd store directories team1, team2, team3, into which I'd put the needed shared mailboxes. Something like /courriel/boites/public/team1/.shared-project1/ /team2/.shared-project2/ /team3/.shared-project3/ with something like namespace public { separator = / prefix = '#Public/' location = maildir:/courriel/boites/public inbox = no hidden = no list = yes subscriptions = yes } I guess if unix right and ACL are set up correctly, other people would only see non-selectionable '#Public'. The only problem is the subscription file : my understanding is that you have only one subscription file per namespace. Maybe unless you specify something like location = maildir:/courriel/boites/public:CONTROL=<some user dependent location> But wouldn't that induce another problem : such a CONTROL directive would put dovecot-uidlist and dovecot-keywords in the same user dependent location. As I want to share the \Seen flag, I have to . put a dovecot-shared file . not specify INDEX (or at least, not to some user dependent location) So I would end up with . uid lists in some user dependant location (as a side effect of having several subscriptions files) . but indexes shared as uid is listed in index : wouldn't that be a problem ? thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] trash plugin and LDA
by dovecot＠corwyn.net 20 Feb '09

20 Feb '09

I just switched from the default postfix LDA to the dovecot LDA, deliver, and am looking into what new features I have. The wiki references the trash plugin with imap. Can I also enable trash with the lda? Rick Rick Steeves http://www.sinister.net "The journey is the destination"

2 1

[Dovecot] Expire plugin does not delete expired mail
by Nicolas Letellier 20 Feb '09

20 Feb '09

Hello. I use expire plugin with dovecot 1.1.10. See my dovecot -n: # 1.1.10: /usr/local/etc/dovecot.conf # OS: FreeBSD 6.3-RELEASE-p9 i386 ufs syslog_facility: local6 protocols: imap imaps managesieve ssl_cert_file: /etc/ssl/mail/mail.domain.net.cert ssl_key_file: /etc/ssl/mail/mail.domain.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_user: dovecot-auth login_greeting: Domain mail server login_processes_count: 2 verbose_proctitle: yes first_valid_uid: 143 last_valid_uid: 143 first_valid_gid: 143 last_valid_gid: 143 mail_access_groups: mail mail_location: maildir:/var/mail/vmail/%u/ mail_debug(default): no mail_debug(imap): no mail_debug(managesieve): yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): quota imap_quota mail_log expire mail_plugins(imap): quota imap_quota mail_log expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(managesieve): sieve(default): sieve(imap): sieve(managesieve): ~/dovecot.sieve auth default: mechanisms: plain login master_user_separator: * passdb: driver: passwd-file args: /usr/local/etc/dovecot.masterusers master: yes passdb: driver: sql args: /usr/local/etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: mail plugin: quota: maildir quota_rule: *:storage=1000M quota_rule2: Trash:storage=50M quota_warning: storage=80%% /usr/home/scripts/mail_quota-warning.sh 80 quota_warning2: storage=90%% /usr/home/scripts/mail_quota-warning.sh 85 quota_warning3: storage=95%% /usr/home/scripts/mail_quota-warning.sh 90 quota_warning4: storage=95%% /usr/home/scripts/mail_quota-warning.sh 95 sieve: /var/mail/vmail/%u/dovecot.sieve expire: Trash 7 Pubs 15 Junk 1 expire_dict: proxy::expire dict: expire: mysql:/usr/local/etc/dovecot/dovecot-dict-expire.conf The expire plugin works with mysql database. The mysql table is used, and expire_stamp are written on it: user1(a)domain.net/Trash 1234701558 user1(a)domain.net/Junk 1234386055 user2(a)domain.net/Trash 1234874172 user2(a)domain.net/Junk 1234400921 user1(a)domain.net/Pubs 1235576243 I launch /usr/local/sbin/dovecot --exec-mail ext /usr/local/libexec/dovecot/expire-tool every 4 hours. For 3 days, no mails were deleted. However, I have date_stamp in mysql table. I dropped ALL my mails in Junk/Trash folder ; and delete all dovecot.index* in these folders. After, I restarted dovecot with expire plugin, and when a first mail arrived in one of these folder, a line is created in mysql table. But nothing is deleted in my Trash/Pubs/Junk folder. I'm waiting for 3 days. (first mail arrived in these folder on 2009/02/08). Any ideas? Have I to use cronjob/find to delete the expired mail? Regards, -- -Nicolas.

3 4

[Dovecot] Quota not reporting with getquotaroot
by dovecot＠corwyn.net 20 Feb '09

20 Feb '09

I'm running squirrelmail on top of dovecot, and noticed that some of my users display the quota (using the squirrelmail plugin check_quota) and some don't. So I did some digging. For those that do not display the quota, their account also doesn't provide any data with: . getquotaroot inbox * QUOTAROOT "inbox" . OK Getquotaroot completed. When I check the account /Maildir folder it has info in maildirsize 0S 12744423 10 334 1 483685 1 and when I delete the maildirsize file it recreates. any ideas? thx. Rick # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/agencymail_invtitle_com.crt ssl_key_file: /etc/httpd/certs/agencymail.invtitle.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M Rick Steeves http://www.sinister.net "The journey is the destination"

2 1

[Dovecot] NFS error, device busy
by Grandy Fu 20 Feb '09

20 Feb '09

> > On 2/16/2009 9:50 PM, Grandy Fu wrote: > >> > I am running dovecot 1.1.10 and 1.1.11 on Solaris 10, mailboxes are in >> > mbox format and served by Solaris 10 NFSv3, the dovecot cache is on >> > local disk. >> > >> > Some of my users always had above nfs error and their mailbox usually >> > very big, over 100M, 400M, or even 800M. >> > > Please don't put the entire error message in the subject. > > Sorry about that. > Please post output of dovecot -n and some logs exhibiting the problem. Here is some log entries. --------------- dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy dovecot: Feb 19 10:07:02 Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy ------------------------------------- part of dovecot -n output --------------------------- # 1.1.11: /usr/local/.dovecot1111/etc/dovecot.conf # OS: SunOS 5.10 sun4u log_path: /var/log/dovecot protocols: imaps pop3s imap listen(default): *:143 listen(imap): *:143 listen(pop3): * ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): login_dir: /usr/local/.dovecot1111/var/run/dovecot/login login_executable(default): /usr/local/.dovecot1111/libexec/dovecot/imap-login login_executable(imap): /usr/local/.dovecot1111/libexec/dovecot/imap-login login_executable(pop3): /usr/local/.dovecot1111/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u:INDEX=/localdisk/dovecot.cache/cache/%n mail_debug: yes mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes lock_method: dotlock mbox_read_locks: dotlock mbox_write_locks: dotlock mbox_dotlock_change_timeout: 30 plugin: quota: fs:INBOX:user:mount=/var/mail quota2: fs:home:noenforcing:mount=/home ---------------------------------------------------- The problem happens to users' with their inbox over 100M and it happens randomly. Grandy

2 1

[Dovecot] Different protocols with different auth-types
by Morton.Trust 20 Feb '09

20 Feb '09

Hello, I have installed dovecot with MySQL in which the users are stored. Now I want to separate IMAP-Users from POP3-Users. So I added two columns to the user table (imap / pop3) which indicates, whether the user has access to IMAP or not. In order to get dovecot recognizing this separation I put the auth-config into the two protocol-sections and wrote two different dovecot-sql.conf-files. In the dovecot-sql-pop3.conf the query searches for pop3=1 and in the dovecot-sql-imap.conf it searches for imap=1. Done that, I expected POP3-Only-Users getting an error while trying to connect to the IMAP-service. But dovecot first tries to authenticate for IMAP and then uses the POP3-auth as fallback. How can I do this separation? Thanks a lot, Morton -- View this message in context: http://www.nabble.com/Different-protocols-with-different-auth-types-tp22085… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] dict quota
by Osvaldo Alvarez Pozo 20 Feb '09

20 Feb '09

Hi Actually I use quota. But I would like to use dict quota car with dict quota it is possible to view the used quota. But I do not understand the configuration off dict quota. if the quota is stored in mysql wich do I have to specify quota values in plugin section as chown in the dovecot web site? exemples: dict { quotadict = mysql:/etc/dovecot-dict-quota.conf } plugin { # v1.0: 10MB and 1000 messages quota limit quota = dict:storage=10240:messages=1000 proxy::quotadict # v1.1 + SQL: quota = dict:user::proxy::quotadict quota_rule = *:storage=10M:messages=1000 Thanks

2 1

[Dovecot] deliver
by Il Neofita 20 Feb '09

20 Feb '09

I am new and for sure I did something stupid I trying to use dovecot with sendmail but I am receiving this error teststat deliver(usertest): net_connect(/var/run/dovecot/auth-master) failed: Permission denied stat=Deferred: local mailer (/usr/libexec/dovecot/deliver) exited with EX_TEMPFAIL on send mail I added FEATURE(`local_procmail', `/usr/libexec/dovecot/deliver',`deliver -d $u') MODIFY_MAILER_FLAGS(`LOCAL', `-f') MAILER(procmail)dnl I am using the nis, but I do not think that this is the problem since I am able to login with imaps # 1.0.5: /etc/dovecot.conf protocols: imaps login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_location: maildir:/var/mail/newmail/%u:INDEX=/var/indexes/newmail/%u mail_debug: yes auth default: passdb: driver: pam args: session=yes dovecot userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384

2 1

[Dovecot] ACL plugin when file in Maildir is not a directory
by Thomas Hummel 20 Feb '09

20 Feb '09

Hello Timo, On a production (by that I mean many users) dovecot-1.1.8/Maidir server where ACL plugin has been enabled, I ran on a log verbosity problem : For some reason (in fact, due to mbox -> Maildir migration script), some people have in their Maildir a .procmail.logfile file. The problem is that dovecot (or the ACL plugin) wants to find a dovecot-acl file in what it would like to be a directory, and then complains : dovecot: IMAP(xxxxxxxx): open(/courriel/boites/xxxxxxxx/.procmail.logfile/dovecot-acl) failed: Not a directory Such a behavior makes the log file grow too much too quickly. Note that my setup regarding log verbosity is at its minimal/default (except for proctitle) : verbose_ssl = no verbose_proctitle = yes auth_verbose = no mail_debug = no auth_debug = no auth_debug_passwords = no One more thing : would I have a log (or in what verbosity setup would I have one) line complaining about no-acl in the system wide acl directory : acl = vfile:/opt/dovecot/dovecot-acls:cache_secs=300 as a matter of fact, /opt/dovecot/dovecot-acls is empty for me (I don't need it for now). thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] LDA dovecot with Postfix not workin :-(
by Thorsten Reiser 20 Feb '09

20 Feb '09

Hi, tried to use postfix with virtual users and dovecot imaps/imap pop3/pop3s workin fine lokal smtp too, but a remote host is not able to send mail Debian Etch uname -a Linux mail 2.6.18-6-xen-amd64 #virtual user vmail:x:5000:8::/home/vmail:/bin/sh #master.cf added dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} #/var/log/mail.info Feb 19 12:37:51 mail postfix/master[6082]: daemon started -- version 2.3.8, configuration /etc/postfix Feb 19 12:37:58 mail postfix/smtpd[6106]: connect from XXX [XXX] Feb 19 12:37:58 mail postfix/smtpd[6106]: 9D150107C3C4: client=XXX [XXX], sasl_method=LOGIN, sasl_username=username(a)email.com thats all ...... here are my logs telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 localhost ESMTP Postfix (Debian/GNU) ehlo localhost.com 250-localhost 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN AUTH PLAIN aW5mb0BseC1ob3N0aW5nLmRlAGluZm9AbHgtaG9zdGluZy5kZQB0ZXN0 235 2.0.0 Authentication successful #master.cf added dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient} #postconf -n alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 10 debug_peer_list = 127.0.0.1 inet_interfaces = all mailbox_size_limit = 0 mydestination = mail.server.de, mail, localhost.localdomain, localhost myhostname = localhost mynetworks = 127.0.0.0/8 myorigin = /etc/mailname recipient_delimiter = + smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = Mail ESMTP smtpd_helo_required = no smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, permit smtpd_recipient_restrictions = reject_unauth_pipelining, permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem smtpd_tls_auth_only = no smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_gid_maps = static:8 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = /etc/postfix/vhosts.txt virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_minimum_uid = 100 virtual_transport = dovecot virtual_uid_maps = static:5000 #dovecot -n # /etc/dovecot/dovecot.conf log_path: /var/log/dovecot.info info_log_path: /var/log/dovecot.info log_timestamp: %d-%m-%Y %H:%M:%S protocols: imap pop3 imaps pop3s listen(default): *:10143 listen(imap): *:10143 listen(pop3): * disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_greeting: Mail POP3/IMAP verbose_proctitle: yes first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 8 last_valid_gid: 8 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh outlook-idle imap_client_workarounds(imap): delay-newmail netscape-eoh outlook-idle imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/userdb userdb: driver: passwd-file args: /etc/dovecot/userdb socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: mail

2 2

[Dovecot] v1.2 can't set ACL to empty string
by Sascha Wilde 20 Feb '09

20 Feb '09

Hi *, according to RfC4314 the rights argument to the setacl command might be an empty string ("zero right characters"): The third argument is a string containing an optional plus ("+") or minus ("-") prefix, followed by zero or more rights characters. existing clients (horde in particular) actually use this to remove all rights from an user. Currently dovecot 1.2 does not accept an empty rights string as argument to setacl. Bernhard Herzog will look into this. cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

3 2

[Dovecot] over quota + antispam crash
by Stéphane Cottin 20 Feb '09

20 Feb '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am using dovecot 1.1.11 , quota, imap_quota & antispam plugins. Dovecot crashes when saving a message to the Sent maildir and the account is over quota. gdb trace attached. Stéphane Cottin -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkmcQ1IACgkQNgQUYqHIqqsHYgCfdhLHt1KRQeoEOC5ddgFbD2mh 8UMAoIgXbD3ACqcKcftxUHeoPsgByp83 =V6Ch -----END PGP SIGNATURE----- GNU gdb 6.4.90-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1". Attaching to program: /usr/lib/dovecot/imap, process 8619 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/dovecot/modules/imap/lib90_antispam_plugin.so...done. Loaded symbols for /usr/lib/dovecot/modules/imap/lib90_antispam_plugin.so 0x00002af01c9af9ac in epoll_wait () from /lib/libc.so.6 (gdb) Signal Stop Print Pass to program Description SIGPIPE No Yes Yes Broken pipe (gdb) Signal Stop Print Pass to program Description SIGALRM No No Yes Alarm clock (gdb) Signal Stop Print Pass to program Description SIG32 No Yes Yes Real-time event 32 (gdb) Continuing. Program received signal SIGSEGV, Segmentation fault. 0x00002af01cd36a63 in antispam_save_init (t=0x5fe0c0, flags=MAIL_SEEN, keywords=0x0, received_date=-1, timezone_offset=0, from_envelope=0x0, input=0x601390, dest_mail=0x6014f8, ctx_r=0x5d92f0) at antispam-storage-1.1.c:170 170 (*ctx_r)->dest_mail = dest_mail; (gdb) #0 0x00002af01cd36a63 in antispam_save_init (t=0x5fe0c0, flags=MAIL_SEEN, keywords=0x0, received_date=-1, timezone_offset=0, from_envelope=0x0, input=0x601390, dest_mail=0x6014f8, ctx_r=0x5d92f0) at antispam-storage-1.1.c:170 ast = (struct antispam_internal_context *) 0x5fea60 asbox = (struct antispam_mailbox *) 0x5dff20 ret = -1 #1 0x0000000000457ce5 in mailbox_save_init (t=0x605cfa, flags=481489778, keywords=0x0, received_date=0, timezone_offset=1818845549, from_envelope=0x7265737520726f66 <Address 0x7265737520726f66 out of bounds>, input=0x601390, dest_mail=0x0, ctx_r=0x5d92f0) at mail-storage.c:728 No locals. #2 0x0000000000416289 in cmd_append_continue_parsing (cmd=0x5d9238) at cmd-append.c:330 uid2 = <value optimized out> msg = <value optimized out> sync_flags = <value optimized out> imap_flags = <value optimized out> uid_validity = <value optimized out> uid1 = <value optimized out> client = (struct client *) 0x5d8ec0 ctx = (struct cmd_append_context *) 0x5d92b0 args = (const struct imap_arg *) 0x5febb0 flags_list = <value optimized out> flags = MAIL_SEEN keywords_list = (const char * const *) 0x0 keywords = (struct mail_keywords *) 0x0 internal_date_str = 0x0 internal_date = -1 ret = <value optimized out> timezone_offset = 0 nonsync = true __PRETTY_FUNCTION__ = "cmd_append_continue_parsing" #3 0x0000000000416492 in cmd_append (cmd=0x5d9238) at cmd-append.c:502 storage = (struct mail_storage *) 0x5d87e8 box = <value optimized out> client = (struct client *) 0x5d8ec0 ctx = (struct cmd_append_context *) 0x5d92b0 mailbox = 0x5dd410 "Sent" #4 0x000000000041b45c in client_command_input (cmd=0x5d9238) at client.c:580 client = (struct client *) 0x5d8ec0 command = <value optimized out> __PRETTY_FUNCTION__ = "client_command_input" #5 0x000000000041b512 in client_command_input (cmd=0x5d9238) at client.c:629 client = (struct client *) 0x5d8ec0 command = (struct command *) 0x0 __PRETTY_FUNCTION__ = "client_command_input" #6 0x000000000041bccf in client_handle_input (client=0x5d8ec0) at client.c:670 _data_stack_cur_id = 3 ret = <value optimized out> remove_io = <value optimized out> handled_commands = false #7 0x000000000041bef3 in client_input (client=0x5d8ec0) at client.c:725 cmd = <value optimized out> output = (struct ostream *) 0x5d9158 bytes = 488 __PRETTY_FUNCTION__ = "client_input" #8 0x000000000048ce48 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:203 ctx = <value optimized out> event = (const struct epoll_event *) 0x5d4fa0 list = (struct io_list *) 0x5d7c80 io = (struct io_file *) 0x5d7c40 tv = {tv_sec = 1799, tv_usec = 900117} events_count = <value optimized out> t_id = 2 msecs = <value optimized out> ret = 1 i = 0 call = <value optimized out> #9 0x000000000048bd1d in io_loop_run (ioloop=0x5d4d40) at ioloop.c:336 No locals. #10 0x0000000000423441 in main (argc=<value optimized out>, argv=0x0, envp=0x7fff8e3dbb58) at main.c:293 No locals. (gdb) Detaching from program: /usr/lib/dovecot/imap, process 8619

3 4

[Dovecot] Autocreate plugin
by Harry Lachanas 20 Feb '09

20 Feb '09

I've tried to use the autocreate plugin in order to autosubscribe users to public namespaces. namespace public { prefix = Public2/ separator = / location = maildir:/var/Public2:INDEX=~/Maildir/p-idx:CONTROL=~/Maildir/p-crtl hidden=no subscriptions=no inbox = no list=no } with plugin { autocreate = Spam autosubscribe = Spam autosubscribe1 = Public2/News autosubscribe2 = Public2/Shorewall } the plugin works alright with the Spam maildir, but not with the namespaces. Is this possible ??? Thanks Harry.

1 1

[Dovecot] deliver: Panic: file sieve-cmu.c: line 90 (unfold_header): assertion failed: (str[i] == ' ' || str[i] == '\t')
by Anton Yuzhaninov 19 Feb '09

19 Feb '09

I use dovecot-1.1.10 and dovecot-sieve-1.1.6 /usr/local/libexec/dovecot/deliver coredups several times per day with bt like this: (gdb) bt #0 0x0000000800a3a91c in kill () at kill.S:2 #1 0x0000000800a3a88a in __raise (s=6) at /usr/src/lib/libc/gen/raise.c:46 #2 0x0000000800a38f83 in abort () at /usr/src/lib/libc/stdlib/abort.c:65 #3 0x00000000004a7de5 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:151 #4 0x00000000004a8777 in i_syslog_fatal_handler (type=Could not find the frame base for "i_syslog_fatal_handler". ) at failures.c:309 #5 0x00000000004a80ca in i_panic (format=Could not find the frame base for "i_panic". ) at failures.c:198 #6 0x0000000800e0b265 in unfold_header ( str=0x800c55a40 "\"firm ru\nÐ\217Ð\201Ð±ÐŒÂ¬Â® Ñ\236Ò\220Ð\216Â¬Â Ð±Ð²Ò\220Ð°Ð³\" <our_email@ example.ru>") at sieve-cmu.c:90 #7 0x0000000800e0b381 in unfold_multiline_headers (headers=0x800c55a30) at sieve-cmu.c:119 #8 0x0000000800e0b406 in getheader (v=0x7fffffffeab0, phead=0x800c5a160 "to", body=0x7fffffffc048) at sieve-cmu.c:132 #9 0x0000000800e1affc in eval_bc_test (interp=0x800c2d380, body_cache=0x0, m=0x7fffffffeab0, bc=0x800c5a000, ip=0x7fffffffc300) at bc_eval.c:541 #10 0x0000000800e1ac96 in eval_bc_test (interp=0x800c2d380, body_cache=0x0, m=0x7fffffffeab0, bc=0x800c5a000, ip=0x7fffffffd8e4) at bc_eval.c:445 #11 0x0000000800e1c131 in sieve_eval_bc (exe=0x800c240b0, is_incl=0, i=0x800c2d380, body_cache=0x0, sc=0x7fffffffeb60, m=0x7fffffffeab0, imapflags=0x7fffffffda20, actions=0x800c660f0, notify_list=0x800c13a40, errmsg=0x7fffffffda38) at bc_eval.c:1009 #12 0x0000000800e23ece in sieve_execute_bytecode (exe=0x800c240b0, interp=0x800c2d380, script_context=0x7fffffffeb60, message_context=0x7fffffffeab0) at script.c:868 #13 0x0000000800e0dee4 in cmu_sieve_run (namespaces=0x800c0b848, storage_r=0x7fffffffec98, mail=0x800c1d848, script_path=0x800c02d28 "/home/public/.dovecot.sieve", destaddr=0x7fffffffef3e "user_xxxxx", username=0x800c1ce35 "user_xxxxx", mailbox=0x4c581c "INBOX") at sieve-cmu.c:1038 #14 0x0000000800e0ae6d in cmusieve_deliver_mail (namespaces=0x800c0b848, storage_r=0x7fffffffec98, mail=0x800c1d848, destaddr=0x7fffffffef3e "user_xxxxx", mailbox=0x4c581c "INBOX") at cmusieve-plugin.c:81 #15 0x0000000000417d7f in main (argc=3, argv=0x7fffffffedc8) at deliver.c:1084 I log messages: deliver(user_xxxxx): Panic: file sieve-cmu.c: line 90 (unfold_header): assertion failed: (str[i] == ' ' || str[i] == '\t') -- Anton Yuzhaninov

2 2

[Dovecot] Effects of going read-only on dovecot & pop/imap clients
by Mark Zealey 19 Feb '09

19 Feb '09

Hi all, We need to set our filestore to read-only for quite a while, and I want to mitigate the effects for our clients. First issue; dovecot. If we just change the nfs mounts to read-only, dovecot complains: 2009-02-19T14:03:19+00:00 mail2 dovecot: pop3-login: Login: user=<test2(a)markandruth.co.uk>, method=PLAIN, rip=10.15.10.95, lip=10.15.10.102:11002 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): open() failed with file /var/spool/mail/supplier_2/ma/rk/an/markandruth.co.uk/te/st/2_/test2/Mai ldir/dovecot.index.log: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): open(/var/spool/mail/supplier_2/ma/rk/an/markandruth.co.uk/te/st/2_/test 2/Maildir/dovecot-uidlist.lock) failed: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): file_dotlock_create(/var/spool/mail/supplier_2/ma/rk/an/markandruth.co.u k/te/st/2_/test2/Maildir/dovecot-uidlist) failed: Read-only file system 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): Couldn't init INBOX: Internal error occurred. Refer to server log for more information. [2009-02-19 14:03:19] 2009-02-19T14:03:19+00:00 mail2 dovecot: POP3(test2(a)markandruth.co.uk): Mailbox init failed bytes=0/95, top=0/0, retr=0/0, del=0/0, size=0 Even when I use :INDEX=MEMORY, it's still complaining about creating .lock's or uidlist files and just issuing internal errors. Is there any way to make dovecot just do as much as it can under the circumstances ie allow read access to mails? Also, has anyone got experience of how clients handle mailboxes being read-only? My guess is that pop clients would probably break and download the same messages over and over? Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 3

[Dovecot] UNSUBSCRIBE
by Eric B. Schorvitz, Ph.D. 19 Feb '09

19 Feb '09

2 1

[Dovecot] limiting authentication failures
by Eric B. Schorvitz, Ph.D. 19 Feb '09

19 Feb '09

In my log files I occasionally get a huge number of Dovecot authentication failures (see clip below). I wanted to know if there's a way to limit the number of times an IP address can attempt to authenticate, if there's a way to have a timeout between attempted authentications, or if there is a way to limit authentication attempts by a specific username within a certain period of time. My current solution is to permanently block the specific IP, an IP range, or an entire country from accessing my server AFTER I notice the huge number of authentication failures. This is too ad-hoc a process and was hoping dovecot has something more proactive built in. Thank you in advance for spending time considering this inquiry, Eric --------------------- pam_unix Begin ------------------------ dovecot: Authentication Failures: rhost=::ffff:200.111.39.219 : 764 Time(s) root: 25 Time(s) mysql: 6 Time(s) smmsp: 6 Time(s) --SNIP-- Unknown Entries: check pass; user unknown: 764 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user info --SNIP--

2 1

[Dovecot] sieve filters
by Ian P. Christian 19 Feb '09

19 Feb '09

Hi all, I'm trying to figure out a way of filtering mail from a commercial anti-spam platform. Unfortunately you need to compare part of one header against part of another header. I figured I could solve this using sieve variables and pattern matching, however I'm having little luck and don't know how to debug sieve issues. # example headers: must compare 0.00799 against 1:0000 (the 2nd number in the 2nd header) # X-pstn-levels: (S: 0.00799/98.42547 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 ) # X-pstn-settings: 3 (1.0000:1.0000) s cv gt3 gt2 gt1 r p m c if header :matches "X-pstn-levels" "(S: */*" { set "score" "${1}"; if header :matches "X-pstn-settings" " ? (*:*) *" { fileinto "somewhere"; } } The first if appears to match, as if I move the fileinto up there it works - however it doesn't work as it shown here. Can anyone suggest why? Can I achieve what I'm trying to do with sieve? How can I go about debugging scripts? Thanks, Ian

2 2

[Dovecot] kerberos trying to obtain credentials for wrong machine
by Nikolay Shopik 18 Feb '09

18 Feb '09

Hi, I'm currently trying to configure Dovecot to use kerberos. My KDC is Windows 2003 and I successful generated keytab file for Dovecot machine. Problem is when I'm trying to use GSSAPI it told me Obtaining credentials for imap@debian5 - and of course this fails because debian5 isn't KDC, it should look for imap/debian5.inblock.local(a)INBLOCK.LOCAL. What I'm missing?

2 1

[Dovecot] Time moved backwards ....
by Harry Lachanas 18 Feb '09

18 Feb '09

OK.. So I synced the clock.... and got .... dovecot: Time just moved backwards by 1 seconds. I'll sleep now until we're back in present. http://wiki.dovecot.org/TimeMovedBackwards ( The first time I did this the clock moved backwards 2 hours after a timezone change and dovecot suicided ) I think I understand the concept ... However a mail server should probably be synchronized to the local time ..... Suggestions ...??? Harry.

8 10

[Dovecot] mbox snarf plugin + idle
by Jonathan Siegle 18 Feb '09

18 Feb '09

I'm having a problem with mbox snarf not looking at /var/spool/mail/ when in idle mode thus never giving me a RECENT line even though there are new messages in /var/spool/mail/ . Here are the imap commands to reproduce the problem: 1 login userid password 2 select inbox 3 idle When I run "select inbox" it does see my messages in /var/spool/mail/ and moves them over fine. When I truss the process, I see it only running stat calls on my "mbox- snarf" file. To get new messages I issue DONE, CLOSE, and SELECT INBOX. I'm not sure why it is reporting alpha5 two lines below. I did an hg pull just the other day and see 1.2.beta1 in the output of hg tags. # /usr/ladmin2/sbin/dovecot -n # 1.2.alpha5: /usr/ladmin2/etc/dovecot.conf Warning: fd limit 2000 is lower than what Dovecot can use under full load (more than 4224). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: AIX 3 0001112AD300 syslog_facility: local0 protocols: imap listen: *:2222 ssl: no disable_plaintext_auth: no login_dir: /usr/ladmin2/var/run/dovecot/login login_executable: /usr/ladmin2/libexec/dovecot/imap-login login_greeting: Dovecot ready. login_processes_count: 30 max_mail_processes: 4096 mail_location: mbox:%h/new:INBOX=/var/spool/mail/14/%u mmap_disable: yes dotlock_use_excl: no mbox_write_locks: fcntl mbox_lazy_writes: no mail_plugins: mbox_snarf imap_client_workarounds: delay-newmail auth default: mechanisms: plain gssapi krb5_keytab: /etc/krb5/dovecot.keytab gssapi_hostname: $ALL verbose: yes debug: yes passdb: driver: pam userdb: driver: passwd plugin: mbox_snarf: /gpfs/inbox/14/%u Thanks, Jonathan

2 2

Re: [Dovecot] from postfix deliver to dovecot deliver
by dovecot＠corwyn.net 18 Feb '09

18 Feb '09

you're using maildir? (I only ask because I am). In that case, no making the change doesn't require changes in the mailboxes. I made the appropriate changes (just a few days ago) to main.cf and I was good to go. Rick At 08:01 AM 2/18/2009, Johan Hendriks wrote: >Hello all. >I use dovecot in combination with postfix, postfixadmin for virtual users. >Deliver to the mailbox now is done by postfix >Now i want to enable quota's and therefor i need dovecot deliver. >Can i just switch to dovecot deliver? >Or must i first do some prrperations in the mailboxes. > >regards >-- >_______________________ >*Johan Hendriks* >*Schavemaker Transport* > >Tel: +31 (0)251 229098 >Fax: +31 (0)251 212016 >email: j.hendriks(a)schavemaker.com <mailto:j.hendriks@schavemaker.com> >web: http://www.schavemaker.com >_______________________ >/Confidentiality Notice: The information in this document may be >confidential. It is intended only for the use of the named recipient. >If you are not the intended recipient, please notify me immediately >and then delete this document. Do not disclose the contents of this document >to any other person, nor take any copies. Violation of this notice >may be unlawful. / >_______________________

1 0

[Dovecot] assertion failed
by Ian P. Christian 18 Feb '09

18 Feb '09

Does anyone know what might cause this? # dovecot --version 1.1.7 Feb 17 18:21:51 imap-proxy-temp dovecot: Panic: auth(default): file passdb-cache.c: line 121 (passdb_cache_lookup_credentials): assertion failed: (*scheme_r != NULL || *password_r == NULL) Feb 17 18:21:51 imap-proxy-temp dovecot: auth(default): Raw backtrace: dovecot-auth [0x42c0ea] -> dovecot-auth [0x42c143] -> dovecot-auth [0x42b7f6] -> dovecot-auth [0x41acb6] -> dovecot-auth(auth_request_lookup_credentials+0x6f) [0x411cdf] -> dovecot-auth [0x416caf] -> dovecot-auth(auth_request_handler_auth_continue+0xc9) [0x4128e9] -> dovecot-auth [0x40e40a] -> dovecot-auth(io_loop_handler_run+0xf8) [0x42fb48] -> dovecot-auth(io_loop_run+0x1d) [0x42ea4d] -> dovecot-auth(main+0x2f7) [0x416367] -> /lib/libc.so.6(__libc_start_main+0xda) [0x7f83990e54ca] -> dovecot-auth [0x40cdba] Feb 17 18:21:51 imap-proxy-temp dovecot: child 20579 (auth) killed with signal 6

2 4

[Dovecot] Maildir hierarchy sep bug ?
by Thomas Hummel 17 Feb '09

17 Feb '09

Hello Timo, I'm experiencing the following different behaviors with dovecot-1.1.8/Maildir. My Maildir hierarchy separator is the "." (dot) character. My namespaces, when I use them, separator is "/". When I run the server without any namespaces, I can create mailboxes named something like first.name which, of course, are shown to the client as first/ (non selectionnable) first/name For instance in Mutt, if I save a message (the "s" key) from first.name(a)some.domain dovecot happilly creates the .first.name/ Maildir But if I create a public Namespace, then I have to create a private default namespace as well and the server doesn't behave the same way : They're set up like this : namespace private { separator = / prefix = location = maildir:/courriel/boites/%u:CONTROL=/courriel/meta/%u:INDEX=/var/dovecot/indexes/%1u/%u inbox = yes hidden = no list = yes subscriptions = yes } namespace public { separator = / prefix = '#Foo/' location = maildir:/courriel/boites/public/foo inbox = no hidden = yes list = no subscriptions = no } Then users cannot create mailboxes with a dot in it : Character not allowed in mailbox name: '.' which seems normal but can be confusing since, a user used to saving his mail in first.name (in Mutt for instance) wouldn't be able to do so anymore if the server goes from the first to the second setting described above. Granted, a user which does so, probably doesn't do what he thinks he does (he probably thinks he save his message in a folder named "first.name" while instead he actually saves it in a subfolder of "first" named "name"). Still it can be confusing. Is that difference of behavior normal ? Which is the correct behavior ? And is there still no way (except to patch the source) to allow dots in mailbox names in Maildir ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 7

[Dovecot] Error: IMAP(user): nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy
by Grandy Fu 17 Feb '09

17 Feb '09

Hi, I am running dovecot 1.1.10 and 1.1.11 on Solaris 10, mailboxes are in mbox format and served by Solaris 10 NFSv3, the dovecot cache is on local disk. Some of my users always had above nfs error and their mailbox usually very big, over 100M, 400M, or even 800M. Grandy

2 1

[Dovecot] dbox redesign
by Timo Sirainen 17 Feb '09

17 Feb '09

This is about how to implement multiple msgs/file dbox format. The current v1.1's one msg/file design would stay pretty much the same and it would be compatible with this new design. dbox directories with multiple msgs/file would be like: ~/dbox/storage/ has the actual mail data for all mailboxes ~/dbox/mailboxes/ has subdirectories containing mailboxes and their indexes Also since dbox supports already the single msg per file, those files would be stored in the mailboxes/ directory. So the idea would be that either you use multiple msgs per file using a global storage, or you use single msg per file without a global storage (or it's also possible to be in a mixed setup with some mails in storage/ and some in mailboxes/, mainly to allow migration between those configurations). The storage/ directory would have a new "map index" which is a regular dovecot index (dovecot.index and dovecot.index.log). So the mailbox index would point to mails using an intermediary "map UID". This way if mails are moved to another file only the map index needs to be updated. GUID would be a globally unique 128 bit ID for messages. So if map indexes get corrupted for any reason it's possible to rebuild it by finding the mails using GUIDs. v1.1 dbox has this "dbox.index" file which I was originally planning on using with multiple msgs/file. It had complex file range locking stuff. Now I'm thinking that it's pretty much useless. The only reason for its existence with the new design is for listing metadata for files converted from Maildir. Map index record would contain: - 32 bit map UID - 8 bit flags (MAIL_DELETED flag = message marked as expunged) - 8 bit unused wasted space - 16 bit refcount - 32 bit file sequence - 32 bit file offset --> total 128 bits/msg Mailbox index: - IMAP UID, flags, keywords, etc. - 32 bit map UID - 128 bit GUID dbox file metadata: - 128 bit GUID - size, vsize, received time, saved time, etc. - initial mailbox name (if all indexes get trashed, we can still figure out at least one mailbox where to put the mail. copies would get lost though.) (- no map UID, no imap UID) How to save a message with multiple msgs/file: 1. Find dbox file where to append to: 1.1. Look up the last message from map index 1.2. Is the file "too old"? (or doesn't exist at all) - Yes -> Create new dbox file 1.3. Is the file "too large"? - Yes -> Look at the previous file (one sequence less) and goto 1.2. 1.4. Try to lock the file. - Fail -> Look at prev file and goto 1.2. Now we have a locked/new dbox file where we can write to. Because 1.4. step only tries to lock the file, there's no waiting on locks. This also means that if e.g. two processes are writing new messages rapidly they may be appending actively to two different files. I don't think that's a problem, better than waiting for locks. 2a) We're using an existing file and we need to find the append offset. Since we found the file by finding the last msg in the file, we also know the last message's offset. I wasn't really planning on saving the message sizes in the index file, so to get the append offset I guess it needs to do an extra read on the last msg's header to find the size and skip over it. Hmm. Or would it be less disk I/O to store the size on the index so it could be found directly? I'm not really sure.. In any case, after we find the append offset, check to see if it's at EOF. If not, that means that either another process just saved a new message there or a process crashed previously and left garbage lying around. Refresh the map index to see if this file+offset exists in it. If not, truncate the file and just continue writing there. If it exists, figure out the new append offset and see again if the file limit would be reached. If the file would become too large, unlock the file and goto step 1. 2b) We're writing to a new file. No need to worry about anything in 2a) 3. Write the message and its metadata to dbox file (including generated 128 bit GUID). 4. Assign map UIDs for the written mails and write APPEND records to map index's transaction log. The record would contain the map UID, file seq, offset, refcount=1. The transaction is saved with a "weak" flag (wonder if there's a better name for this) and its offset is remembered. - If we're creating a new dbox file, it's assigned the file seq and rename()d to the final file name while the map index is locked. 5. Write APPEND record to mailbox index's transaction log with IMAP UID, map UID and GUID (and flags, keywords, etc). 6. Write "commit offset=x" record where x is the offset remembered in step 4. This marks the 4's weak transaction as being fully finished. 7. dbox file is unlocked (if we weren't creating a new file). When reading the index and we see a weak transaction without a commit record, call a resolve() function in dbox code. It finds the dbox file in the weak transaction and tries to lock it. If it can't lock it, it (probably) means that there's still a process that's going to finish the save. If a locking succeeded, run a fixup code that goes through all files that are referenced in weak transactions and makes sure all the refcounts and such are valid. Then it writes commit records for each such transaction. Copying can be done by locking source dbox file, writing a weak "refcount++" transaction and continuing from saving step 5. The only step I can think of where there's a small problem is if data is written to dbox file, then process dies, but no saving is attempted to the same file later. The data is left there as garbage until maybe some day later when a message is expunged from that file and cleanup code notices that there's extra data. I thought about reordering steps so that the records are written to map index first, but that's less efficient when writing multiple messages, because each one would need to be saved separately to the map index (where each save would be lock + fstat (+ read) + write + unlock). This is probably a rare problem which doesn't really matter.. Expunging: The "expunge" and "cleanup to remove deleted space" are separate steps. Preferably the cleanup would be done when the server is "less busy", but I guess it could also be configured to happen either immediately or during logout (or once an hour or so). 1. Write "want to expunge" record to mailbox's transaction log. 2. Write a weak "refcount--" to map index's transaction log. 3. Write "expunged" record to mailbox's transaction log. 4. Write "commit" for the weak refcount--. (The two-stage want-to-expunge(1)/expunged(3) is already done for maildir/mbox also.) I was also thinking maybe this could be just 3 steps without a weak transaction. Especially since without a fsync() between 2 and 3 there's really no guarantee about the order in which 2 and 3 happen. And fsync()s are kind of annoying. But then again if that isn't done and it crashes between 2 and 3 the expunge is tried again later which now decrements the refcount again. If the message's original refcount was 1 it would now be negative. That's not really a problem. More problematic is if the message had been copied to another mailbox and refcount=2, now the refcount would be 0 and the message in the other mailbox would get unexpectedly lost. Not good. Space deletion cleanup: 1. Check from map index header to see there are any refcount=0 mails. Although having this step probably requires some annoying dbox-specific code in index handling code. I guess I'll have to see later if there's a non-horribly-ugly way to do this. 2. Go through all records in the map index. Get a list of files that have refcount=0 records. Also make a copy of file seq+offsets and sort them (so at step 3 we can easily find what mails exist). 3. For each file that has refcount=0 records: 3.1. Try to lock the file. -> Fail: Skip to next file. Either someone's appending to it or cleaning it up already. 3.2. Refresh map index. Add any newly added records to the sorted records list (rare). 3.2. Find the first refcount=0 mail. 3.3. Copy all mails after that with refcount>0 to a new file. 3.4. Lock map index, assign new file seq for the new file, rename() it, for each mail we just copied, using a weak transaction write the seq +offset updates to map index's transaction log. Unlock map index. 3.5. Depending on if first refcount=0 mail was the first mail, either unlink() the file or ftruncate() it. 3.6. Write "commit" record to finish the weak transaction. That's a bit inefficient when cleaning up multiple dbox files, but I'm not sure if there's a much better way unless the map index is locked for the entire time. Since the copying might take a while, a long map index lock is bad since it prevents messages from being saved. Reading mails can be done without locking. But since a file can be truncated unexpectedly, the code must be able to find the new file and offset in that situation and continue reading from there. If the message we were reading was just expunged+cleaned up, the client will have to be just disconnected. Since the cleanup shouldn't normally happen immediately after expunge, this should happen rarely/never. Oh and about all these new temp files that are created. When dbox is opened the dir is stat()ed and if its atime is older than 1 week (currently hardcoded) it readdir()s through the dir to see if there are any old temp* files and then unlinks them. With the new design flags/keywords would never be written to actual dbox files. This helps with backups and also avoids the horribleness of having to increase metadata area. To avoid complete data loss due to index corruption (which really shouldn't be happening nowadays), the indexes are also once in a while backed up to e.g. dovecot.index.backup file. If Dovecot detects missing/broken index, it uses this backup copy to rebuild the index as well as it can. I'm also wondering if it's better for each mailbox to have its separate dovecot.index.cache file or if there should be one cache file for the map index. The upside with one index is that if a mail is copied there's no need to duplicate its cached data. The downside is that I'm worried it would cause more disk I/O, since mailboxes are typically accessed separately, so it might be better that the cache data for one mailbox is stored together rather than all around one bigger cache file.

5 7

[Dovecot] Changing level an error logs at
by Thomas M Goerger 16 Feb '09

16 Feb '09

Hi, I'd like to change the log levels of a few of the errors that Dovecot throws. Our servers throw errors at the console above the 'Error' level, and there are a few that I'd like to change to 'Warn' so that they don't do so. Has anyone out there attempted this and can give me a few pointers? Or is there a doc somewhere about how to do this? Thanks, ************************************************************************* * Tom Goerger - Email/Unix System Administrator * * * * University of Minnesota Email: tmg(a)umn.edu * * Operations, Infrastructure and Architecture Phone: 4-5804 * * Internet Services Office: 626J WBOB * * * *************************************************************************

3 3

[Dovecot] Replication status
by Asheesh Laroia 16 Feb '09

16 Feb '09

I remember last year we discussed Dovecot replication a bit on this list, e.g. http://www.dovecot.org/list/dovecot/2008-May/030446.html . Has there been any development related to this, and can I help at all? The more I think about the hacks I'm employing to synchronize mail, the more I realize I want this. So hopefully I can put either some money or some time where my mouth is. -- Asheesh. -- Its name is Public Opinion. It is held in reverence. It settles everything. Some think it is the voice of God. -- Mark Twain

7 10

[Dovecot] Access denied when client is connecting
by Florian Wörter 16 Feb '09

16 Feb '09

Hello! I'm having a problem with dovecot on my gentoo linux box. it would be great if you could help me. i'm planing to use dovecot as imap server. the incoming mails for the different useres are fetched by getmail. for every user a script should be called, which fetches the e-mails of this user from a pop3 server and puts them in ~/mailbox/new. this allready works. now i installed dovecot but everytime a client connects, i find these lines in my dovecot logfile (/var/log/dovecot.log) dovecot: Feb 16 09:08:09 Fatal: chdir(/home/woefl81) failed with uid 1001: Permission denied dovecot: Feb 16 09:08:09 Error: child 16211 (imap) returned error 89 (Fatal failure) the username of the connected user is woefl81, his user id is 1001 and his home directory is /home/woefl81/. i can't figure out why this user has no permission for his own files. well, for testing i now adjusted the directory permissions: in /: drwxr-xr-x 5 root root 152 Feb 10 09:19 home in /home: drwxr-xr-x 6 woefl81 users 296 Feb 11 08:27 woefl81 in /home/woefl81: drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 mailbox in /home/woefl81/mailbox: drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 . drwxr-xr-x 6 woefl81 users 296 Feb 11 08:27 .. drwxrwxrwx 2 woefl81 users 48 Feb 9 13:09 cur drwxrwxrwx 2 woefl81 users 120 Feb 9 13:13 new drwxrwxrwx 2 woefl81 users 48 Feb 9 13:13 tmp and finally in /home/woefl81/mailbox/new i find the email which was retrieved by getmail: drwxrwxrwx 2 woefl81 users 120 Feb 9 13:13 . drwxrwxrwx 5 woefl81 users 120 Feb 9 13:09 .. -rwxrwxrwx 1 woefl81 users 4.6K Feb 9 13:13 1234181629.M605602P32438Q0R5b6a645fa35278a9.proxystu as i said before i adjusted the rights for the mailbox subdir for testing to 0777, so everyone really should be able to do everything... my dovecot version is 1.1.11 my config: # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-gentoo-r7 i686 Gentoo Base System release 1.12.11.1 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot_info.log protocols: imap ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_chroot: no verbose_proctitle: yes mail_location: maildir:~/mailbox auth default: passdb: driver: pam args: * userdb: driver: passwd the user woefl81 is a "normal" system user (from /etc/passwd): woefl81:x:1001:100::/home/woefl81:/bin/bash his main group is users. on the client i installed mozilla tunderbird.. the user connects to the ip of the linux box with his username (woefl81) and the same password as his account pwd on the linux box. it would be great if somebody had an idea what else i should try to get dovecot to work as imap server. thank you very much in advance! best regards, Florian

2 1

[Dovecot] LDAP, MD5-CRYPT, invalid credentials, BUG or config issue?
by Guenther Falk 16 Feb '09

16 Feb '09

Hi, I read a lot of howto's and I got problems with LDAP and Dovecot to work together. I'm using: Gentoo Linux 2008.0 hardened Dovecot 1.1.7 Kernel 2.6.26 OpenLDAP 2.3.43 My dovecot-ldap.conf is: uris = ldaps://auth.mydomain.com:636 auth_bind = yes auth_bind_userdn = uid=%u,ou=People,dc=mydomain,dc=com ldap_version = 3 base = ou=People,dc=mydomain,dc=com deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT I also tried default_pass_scheme = MD5-CRYPT In the logs I find smething like this: Feb 16 12:20:49 mail dovecot: Dovecot v1.1.7 starting up Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30582 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30583 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30584 Feb 16 12:20:53 mail dovecot: auth(default): new auth connection: pid=30585 Feb 16 12:20:58 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 Feb 16 12:20:58 mail dovecot: auth(default): client out: CONT 1 Feb 16 12:20:58 mail dovecot: auth(default): client in: CONT 1 AGd1ZW50aGVyADE*********= Feb 16 12:20:58 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:00 mail dovecot: auth(default): client out: FAIL 1 user=guenther Feb 16 12:21:00 mail dovecot: auth(default): client in: AUTH 2 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 resp=AGd1ZW50aGVyADE*********= Feb 16 12:21:00 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:02 mail dovecot: auth(default): client out: FAIL 2 user=guenther It seems dovecot ignores the CRYPT password scheme. The password seems to be encrypted in SSHA. What am I doing wrong please?? I am sure, the password is correct as I can login into the machine via nss_ldap and pam_ldap. Regards Günther

2 1

[Dovecot] LDAP, MD5-CRYPT, invalid credentials, BUG or config issue?
by guenther 16 Feb '09

16 Feb '09

Hi, I read a lot of howto's and I got problems with LDAP and Dovecot to work together. I'm using: Gentoo Linux 2008.0 hardened Dovecot 1.1.7 Kernel 2.6.26 OpenLDAP 2.3.43 My dovecot-ldap.conf is: uris = ldaps://auth.mydomain.com:636 auth_bind = yes auth_bind_userdn = uid=%u,ou=People,dc=mydomain,dc=com ldap_version = 3 base = ou=People,dc=mydomain,dc=com deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%u)) default_pass_scheme = CRYPT I also tried default_pass_scheme = MD5-CRYPT In the logs I find smething like this: Feb 16 12:20:49 mail dovecot: Dovecot v1.1.7 starting up Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30582 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30583 Feb 16 12:20:50 mail dovecot: auth(default): new auth connection: pid=30584 Feb 16 12:20:53 mail dovecot: auth(default): new auth connection: pid=30585 Feb 16 12:20:58 mail dovecot: auth(default): client in: AUTH 1 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 Feb 16 12:20:58 mail dovecot: auth(default): client out: CONT 1 Feb 16 12:20:58 mail dovecot: auth(default): client in: CONT 1 AGd1ZW50aGVyADE*********= Feb 16 12:20:58 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:00 mail dovecot: auth(default): client out: FAIL 1 user=guenther Feb 16 12:21:00 mail dovecot: auth(default): client in: AUTH 2 PLAIN service=imap secured lip=172.30.0.10 rip=172.30.0.254 lport=993 rport=51269 resp=AGd1ZW50aGVyADE*********= Feb 16 12:21:00 mail dovecot: auth(default): ldap(guenther,172.30.0.254): invalid credentials Feb 16 12:21:02 mail dovecot: auth(default): client out: FAIL 2 user=guenther It seems dovecot ignores the CRYPT password scheme. The password seems to be encrypted in SSHA. What am I doing wrong please?? I am sure, the password is correct as I can login into the machine via nss_ldap and pam_ldap. Regards Günther

1 0

[Dovecot] quota warning issue
by Alex 16 Feb '09

16 Feb '09

Hello to all, I'm using version 1.1.11 of dovecot. I set the quota using the following configuration: in /etc/dovecot/dovecot.conf quota = maildir:%u quota_warning = storage=75%% /root/quota-warning.sh 75 %u in /etc/dovecot/dovecot-sql.conf user_query = SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 1000 AS uid, 12 AS gid, concat('*:storage=', ROUND(quota/1000)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' ## password_query = SELECT username as user, password, concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 1000 AS uid, 12 AS gid, concat('*:storage=', ROUND(quota/1000)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.25-hardened-r11 x86_64 Gentoo base_dir: /var/run/dovecot/ log_path: /var/log/mail.log info_log_path: /var/log/mail.log protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 1000 last_valid_uid: 1000 mail_location: maildir:/var/vmail/%d/%u mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %v.%u pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: user: nobody verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail plugin: quota: maildir:%u quota_warning: storage=75%% /root/quota-warning.sh 75 %u sieve: /var/vmail/%d/%n/.dovecot.sieve The warning is not delivered to users. In my logs the user quota's percentage is calculated right dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Loading modules from directory: /usr/lib64/dovecot/imap dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Module loaded: /usr/lib64/dovecot/imap/lib10_quota_plugin.so dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Module loaded: /usr/lib64/dovecot/imap/lib11_imap_quota_plugin.so dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Effective uid=1000, gid=12, home=/var/vmail/foo.org/alex/ dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota root: name=alex(a)foo.org backend=maildir args= dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota rule: root=alex(a)foo.org mailbox=* bytes=52428800 messages=0 dovecot: Feb 15 23:42:33 Info: imap-login: Login: user=<alex(a)foo.org>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 15 23:42:33 Info: IMAP(alex(a)foo.org): Quota warning: bytes=39321600 (75%) messages=0 command=/root/quota-warning.sh 75 alex(a)foo.org but also overcoming the space defined on quota warning, the command is not performed. The command does not contain errors because if performed by cli correctly sends the alert. Any ideas? Regards. Alex

3 7

[Dovecot] unkillable imap process(es) with high CPU-usage
by Arno Wald 15 Feb '09

15 Feb '09

Hello, I am having a problem with my dovecot-daemon. It is forking one or more (I saw up to perhaps 8 of them) imap processes under my user name. These processes are consuming a lot of CPU time and are not killable: > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > 8616 arno 20 0 2900 1600 1204 R 98 0.2 1196:38 imap Stopping dovecot does not quit these processes. Killing them (even "kill -9" as root) is not possible. The only solution to get rid of them is to reboot. I have found a mailing list post of one who seemed to have the same problem. He solved it by upgrading to version 1.1. But in my case this did not help. Is this a known problem? What could I check or do? My system: very up to date debian/sid (sidux) kernel 2.6.27-8.slh.1-sidux-686 CPU: Intel(R) Core(TM)2 CPU 4300 @ 1.80GHz Filesystem: ext3fs tried dovecot from sid: 1:1.0.15-2.3 tried dovecot from experimental: 1:1.1.2-3 My dovecot.conf is the original debian configuration with only one line changed into: protocols = imaps # dovecot -n # 1.1.2: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail auth default: passdb: driver: pam userdb: driver: passwd I am using dovecot locally on my system with me as the only user. As client I am using thunderbird alias icedove 2.0.0.17-1. Icedove retrieves the Mails from another imap server and sorts them into Maildir-folders in dovecot. I do not know when the imap-process are going mad. It happens after the system (and the mail-client) is up for a while. Do you need more information? Thanks, Arno

10 35

Re: [Dovecot] unkillable imap process(es) with high CPU-usage
by Robert Schetterer 15 Feb '09

15 Feb '09

just again to the list wasnt in reply Robert Schetterer schrieb: > Hi Gene , small tips depending suse > > Gene Steinberg schrieb: >> On Feb 14, 2009, at 9:57 AM, agent59624285 wrote: >> >>> I have this EXACT same problem after upgrading to SuSE 11.1, which >>> uses this >>> exact kernel version!! >>> >>> After reading this, I was excited to think that if I killed the nfsserver >>> daemon (which I had running for no good reason), that it would sort my >>> problem.... >>> >>> Sure enough, my computer - which up to now had been going unresponsive >>> every >>> 24 hours - was running fine for 72 hours and then BOOM... it happened >>> again. >>> >>> Just wanted to let people know that it seems that at the minute, the >>> dovecot >>> that ships with SuSE and the kernel they are using in 11.1 exhibit this >>> problem. ---my reply > > Suse kernels are not like vanilla kernels, > they are deeply patched an mostly have stuff from the next kernel > version allready in > you might use yast for upgrading latest suse kernel it might fixed allready > a short look gives > http://download.opensuse.org/repositories/home:/tristanhoffmann/openSUSE_11… > gives dovecot 1.1.11 which is latest > also loadable by yast or just download rpm and upgrade wtih rpm -u > > standart rep for mail stuff is > http://download.opensuse.org/repositories/server:/mail/openSUSE_11.1/ > but here dovecot is not at latest > but it shouldnt be any big problem downloading src and > prepare the spec with latest src dovecot > and compile by yourself > which is the best way and gives you the suse splitted packs > too and the advantage to see compile stuff > for sure you need some others libs etc cause of dependencies > befor but they are mostly downloadable also by yast > > be aware that suse sometimes splits up funktions > in own packs like > dovecot-autocreate11, dovecot-antispam11 > etc this musnt be the same by versions compile from home suse users > > also help full send a mail to the build service, > normally it takes only days and the newest version gets compiled > > > use http://software.opensuse.org/search > if looking for newer versions of software ----- > >>> Gino >>> >> This is sounding similar to the problem I have with my setup: >> >> 1. High CPU usage. >> >> 2. Can't kill IMAP. >> >> 3. Server becomes unresponsive. >> >> I'm using CentOS 5.2 64-bit version with the latest cPanel. >> >> So what am I missing, other than the problem nobody else is having is >> clearly something they ARE having? >> >> Peace, >> Gene > > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

1 0

[Dovecot] digest-md5 problem
by Nigel Kukard 15 Feb '09

15 Feb '09

Info: v1.1.11 OS = Linux 32bit, custom build CPU Arch = i686 Filesystem = NFSv4 Problem: Digest-md5 not working. Tested plain, login and cram-md5 with pop3, imap and smtp/sasl fine. Using digest-md5 doesn't authenticate with the below error.... *** Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client in: AUTH^I1^IDIGEST-MD5^Iservice=pop3^Ilip=10.0.2.134^Irip=10.0.2.1^Ilport=110^Irport=41579^Iresp=<hidden> Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client out: CONT^I1^IcmVhbG09IiIsbm9uY2U9IktvMkFoK0lyeVhHRWtmY1k5TjM1TXc9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI= Feb 15 12:46:45 s03-400-134 dovecot: auth(default): client in: CONT<hidden> Feb 15 12:46:47 s03-400-134 dovecot: auth(default): client out: FAIL^I1 Feb 15 12:46:47 s03-400-134 dovecot: pop3-login: Disconnected (auth failed, 1 attempts): method=DIGEST-MD5, rip=10.0.2.1, lip=10.0.2.134 *** The decoded reply is ... authzid="USERNAME_HERE",charset=utf-8,cnonce="32d669a1334164b3362bff5f809acf12",digest-uri="pop/SERVER_URL_HERE",nc=00000001,nonce="rDWjRuMzuvbr5TLsinsE0A==",qop=auth,realm="",response=5c7c2ff3284f350fc62c5a2a80d2be64,username="USERNAME_HERE" On the same database cyrus imap & sasl is working 100%. All passwords are in plaintext format. Maybe I"m doing something wrong? Below my dovecot config... # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27.10 i686 none protocols: imap imaps pop3 pop3s listen: 10.0.2.134 shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: s03-400-134 Secure server ready. max_mail_processes: 100 verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_location: maildir:/var/vmail/%h mail_debug: yes mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota trash mail_plugins(imap): quota imap_quota trash mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_enable_last(default): no pop3_enable_last(imap): no pop3_enable_last(pop3): yes pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: digest-md5 cram-md5 login plain cache_size: 256 user: nobody master_user_separator: * verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: sql args: /etc/dovecot/sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: dovecot group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: vmail plugin: quota: maildir trash: /etc/dovecot/trash.conf

1 0

[Dovecot] great disappearing email mystery
by dhottinger＠harrisonburg.k12.va.us 14 Feb '09

14 Feb '09

Have there been any issues with dovecot and using outlook express (imap) as an email client? I have had a couple of users come up with random missing emails. Im trying to figure out if it is user error, or something wacky in my mailserver. I cant find anything telling in maillog files or my messages. Dovecot version is 1.0.3. Its ok to reply to me, I get list messages digest. thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools "Everything should be made as simple as possible, but not simpler." -- Albert Einstein "The hottest places in Hell are reserved for those who, in times of moral crisis, preserved their neutrality." -- Dante

10 25

Re: [Dovecot] pop3_lock_session question
by Alan Ferrency 14 Feb '09

14 Feb '09

Rob Mangiafico <rmang(a)lexiconn.com> wrote: >On Wed, 4 Feb 2009, Timo Sirainen wrote: >> On Wed, 2009-02-04 at 11:17 -0700, Mark Costlow wrote: >>> Hello, I'm preparing to convert from qpopper + UW-IMAP to dovecot. >>> So far testing has gone very well. One problem we haven't figured >>> out is that long-running POP sessions keep the mailbox locked, so that >>> the MDA times out while trying to deliver. >> .. >> >> Switch to Maildir and the problem goes away. > > We see this as well with mbox and pop3 accesses where some pop3 clients do > not logout (iphone's are the worst offenders) for 30-90 minutes it seems. > Timeout settings in dovecot.conf do not seem to help. procmail backs up > waiting to get access to the inbox to deliver mail. We are having the same problem. It's not a problem with imap, only with pop3. We're using deliver as the MDA. We're also using flock() locking for the mbox: is that what everyone else is using as well? Migrating our servers to maildir globally is also not an option for us. In some cases, even convincing customers to use IMAP isn't going to work. One problem which might be making this worse than it needs to be, is the fact that mbox_lock_flock in mbox-lock.c is not using a blocking flock(); instead, it's polling for a non-blocking lock. This technique can cause lock starvation, if another process is dropping the lock and picking it back up again frequently: other processes will only see the lock as being available if they happen to poll for the lock at just the right instant. A better technique to use here, if it's adequately cross-platform, would be to set an alarm() for the max_wait_time, and use a blocking flock(). If the alarm times out and you don't have a lock, it's a timeout. In the meantime, you're guaranteed to eventually get the lock, if it is dropped. That said: I'm not sure whether this will solve our problem in practice. Why doesn't this happen with imap? Why can't we make pop3 do what imap does? Even if it's inefficient, it's better than hanging all incoming mail delivery while deliver eats up our local concurrency limits. Thanks! Alan Ferrency pair Networks, Inc. alan(a)pair.com

11 33

[Dovecot] Expire failing with error Remote Disconnected
by dovecot＠corwyn.net 14 Feb '09

14 Feb '09

I'm trying to follow the instructions from: http://wiki.dovecot.org/Plugins/Expire for the BDB backend. Everything is set up as indicated, but when I run: dovecot --exec-mail ext /usr/libexec/dovecot/expire-tool I get back: Error: read(/var/run/dovecot/dict-server) failed: Remote disconnected I'm sure it's something simple.... Thx rick dovecot -n: # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/_com.crt ssl_key_file: /etc/httpd/certs/.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota expire trash mail_plugins(imap): quota imap_quota expire trash mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M trash: /etc/dovecot-trash.conf expire: Trash 14 Trash/* 14 Spam 14 expire_dict: proxy::expire dict: expire: db:/var/lib/dovecot/expire.db Rick Steeves http://www.sinister.net "The journey is the destination"

4 9

[Dovecot] Smooth mailbox to maildir migration
by Luciano Mannucci 14 Feb '09

14 Feb '09

Hi all, I have a postfix+procmail+dovecot installation, now running basicaly on pop3 hence mailbox format, with few thousand users and less than twenty gigabytes mail. I need to move all of them to maildir, to take advantage of IMAP subfolders that do not work with mbox format (so I'm told :). Of course I cannot safely stop the service for more than a bunch of seconds... What I'm about to do: create a second dovecot instance to cope with imap client configured for maildir (and possibly pop3 on another port for those using both), which means a dovecot launched with -c /path/to/alternate.conf and a new /etc/init.d/dovecot2-theRevenge having the proper -i option given to startproc in order to make it ignore the other instance. for each user: convert the mailbox with some sort of mb2mb (which is the better one?) create a .procmailrc with a proper DEFAULT= bearing the magic trailing slash indicating maildir to procmail for each converted user. And I'm done... Have I forgotten something? Is there a better way? Any one else tryed such a thing? Cheers to all, luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.mannucci.ORG/

4 6

[Dovecot] Weird Dovecot 1.1.6 + pop3s certificate issues
by Bernhard Schmidt 14 Feb '09

14 Feb '09

Hello everyone, I've been asked by a colleague to have a look at some extremely weird dovecot SSL issue they are seeing on one of the student mailservers. They are running dovecot 1.1.6 (yes, I know, a bit old ...) on SLES 10.2 x86_64 with imap(+starttls), imaps, pop3(+starttls) and pop3s enabled. Every couple of weeks the pop3s and pop3+starttls part bail out out. Clients can't connect, when you try openssl s_client you get this: 15960:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 15960:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:699: 15960:error:1408D07B:SSL routines:SSL3_GET_KEY_EXCHANGE:bad signature:s3_clnt.c:1414: server logs don't show much except for various SSL_accept() errors, including TLS handshaking: SSL_accept() failed: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac TLS handshaking: SSL_accept() syscall failed: Connection reset by peer TLS handshaking: SSL_accept() failed: error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1 alert decrypt error imaps and imap+starttls work fine during the whole time (and always have), although they are much more used. Restarting dovecot fixes the issue for a couple of weeks. Does anyone have an idea where to start debugging? As far as I understand the whole SSL_accept() thing is a giant blackbox for Dovecot, but how comes it only affects POP3? dovecot -n (paths and addresses altered, not sure how much I can reveal without getting shot): # 1.1.6: /mnt//usr/local/etc/dovecot.conf # OS: Linux 2.6.16.60-0.25-smp x86_64 SUSE Linux Enterprise Server 10 # (x86_64) protocols: imap imaps pop3 pop3s listen(default): [ipv6]:143, ipv4:143 listen(imap): [ipv6]:143, ipv4:143 listen(pop3): [ipv6]:110, ipv4:110 ssl_listen(default): [ipv6]:993, ipv4:993 ssl_listen(imap): [ipv6]:993, ipv4:993 ssl_listen(pop3): [ipv6]:995, ipv4:995 disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /mnt//usr/local/libexec/dovecot/imap-login login_executable(imap): /mnt//usr/local/libexec/dovecot/imap-login login_executable(pop3): /mnt//usr/local/libexec/dovecot/pop3-login login_process_per_connection: no login_max_connections: 128 max_mail_processes: 2500 mail_uid: campus mail_gid: lmu mail_location: maildir:~/Maildir:INDEX=/home/something/indexes/%-1.1n/%n mmap_disable: yes mail_nfs_index: yes mail_executable(default): /mnt//usr/local/libexec/dovecot/imap mail_executable(imap): /mnt//usr/local/libexec/dovecot/imap mail_executable(pop3): /mnt//usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /mnt//usr/local/lib/dovecot/imap mail_plugin_dir(imap): /mnt//usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /mnt//usr/local/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: worker_max_request_count: 500 passdb: driver: ldap args: /mnt//usr/local/etc/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /mnt//usr/local/etc/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: campus group: lmu plugin: quota: maildir quota_rule: Trash:ignore quota_rule2: *:storage=512M Anyone having an idea? bernhard

1 0

Re: [Dovecot] Dovecot-antispam does not work
by Jehan Pagès 14 Feb '09

14 Feb '09

Hi all, just to say that finally the patch of Marcin worked great. Just my configuration is different from yours to get it work: antispam_signature = X-DSPAM-Signature antispam_trash = trash;Trash;Deleted Items antispam_spam = SPAM;Junk antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --client;--source=error;--user;%u antispam_mail_tmpdir = /tmp The difference here is in the syntax. You write "--user=somemail" though in the manual, it is written "--user somemail". But also you were proposing 2 lines "antispam_dspam_args" though in all my tests, when I was doing such a thing, the second line seemed to override the first (in the launch logs, only the second line was displayed, so I guess...). Are you sure that it works exactly the way you intend to, Marcin? And that the "--source=error" (your first line) is indeed added as a parameter to the call of dspam? For the patch to the dovecot-antispam, probably it should not be integrated "as is", but I guess that the return code of call_dspam function must probably be checked and fixed if the call can succeed but still give a failure return code. I set Johannes as a main recipient, maybe you will see this email. Bye and thanks all. Jehan On Wed, Feb 4, 2009 at 12:45 PM, Jehan Pagès <jehan.marmottard(a)gmail.com>wrote: > Hi, > > On Wed, Feb 4, 2009 at 12:40 PM, Marcin Rzepecki <m.rzepecki(a)iem.pw.edu.pl > > wrote: > >> Wed, Feb 04, 2009 at 12:12:44PM +0100, Jehan Pag?s wrote: >> > I saw this piece of code and did the same as you in my change of course. >> > Unfortunately, it didn't work (no logged "marked as SPAM", nor change in >> my >> > stats. I have dovecot 1.1.7-r1 though, so it is probably the reason. >> >> Logging '...markes as SPAM..' lines to syslog is my idea, I can send some >> dspam patches, to make it work. It's usefull for me. > > > Ok. Anyway the stats don't change... > > >> >> Are you using mbox or maildir? If you are using mbox, try to upgrade to >> Dovecot >=1.1.8 - it contains several mbox bug fixes (e.g 'Next message >> unexpectedly lost') which are needed to make antispam plugin work. > > > No maildir... > I am doing some stuffs about another way to interact dspam/dovecot/postfix > and will go back to this issue soon. > > Jehan >

2 1

[Dovecot] "failed to map segment from shared object: Cannot allocate memory"
by Vegard Svanberg 13 Feb '09

13 Feb '09

>From /var/log/auth.log (Dovecot 1.1.4 on Ubuntu 8.10): Feb 10 08:29:06 home dovecot-auth: PAM unable to dlopen(/lib/security/pam_ck_connector.so): libdbus-1.so.3: failed to map segment from shared object: Cannot allocate memory Feb 10 08:29:06 home dovecot-auth: PAM adding faulty module: /lib/security/pam_ck_connector.so English, please? :) Strangely, it seemed to disappear after increasing login_processes_count, login_max_processes_count and/or auth_worker_max_count. -- Vegard Svanberg <vegard(a)svanberg.no> [*Takapa@IRC (EFnet)]

2 3

[Dovecot] Production server migration from mbox to maildir ( need advice )
by Frank Bonnet 13 Feb '09

13 Feb '09

Hello I'm going to change the raid array of my mailhub in fews days/weeks and I wonder if it would be a good idea to take the opportunity of this migration to also change the storage method from mailbox to maildir. I've never used maildir on my production server only on small satellites. So I really need advice of admins that use maildir format on prod servers. My server has approx 3500 users/mailboxes that is approx 450 Gb of data. The OS is Debian etch amd64 but could change also during the migration Opensuse X86_64, CAOS-NSA, FreeBSD 64 are some options. Any infos/experiences welcome, I'll summarize answers. Thanks a lot.

4 8

[Dovecot] Corrupted index cache file
by Proskurin Kirill 13 Feb '09

13 Feb '09

Hello all. I run on a problems? dovecot: Feb 13 08:36:13 Error: IMAP(logistic(a)fxclub.org): Maildir filename has wrong W value: /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/1135926892.Re1a4ad89Q1436.newmail.fxclub.org,S=24630,W=2 4849:2, dovecot: Feb 13 08:36:13 Error: IMAP(logistic(a)fxclub.org): Corrupted index cache file /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/dovecot.index.cache: Broken virtual size for mail UID 332 dovecot: Feb 13 08:36:13 Info: IMAP(logistic(a)fxclub.org): Disconnected: Disconnected bytes=435/135596 dovecot: Feb 13 08:36:14 Info: imap-login: Login: user=<logistic(a)fxclub.org>, method=PLAIN, rip=194.87.53.162, lip=78.129.148.74, TLS dovecot: Feb 13 08:36:15 Info: IMAP(chief(a)omsk.fxclub.org): Disconnected: Logged out bytes=349/5517 dovecot: Feb 13 08:36:15 Info: IMAP(chief(a)omsk.fxclub.org): Disconnected: Logged out bytes=63/280 dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): FETCH for mailbox fxclub UID 332 got too little data: 318 vs 319 dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): Maildir filename has wrong W value: /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/1135926892.Re1a4ad89Q1436.newmail.fxclub.org,S=24630,W=2 4849:2, dovecot: Feb 13 08:36:15 Error: IMAP(logistic(a)fxclub.org): Corrupted index cache file /var/spool/dovecot/domains/fxclub.org/logistic/.fxclub/dovecot.index.cache: Broken virtual size for mail UID 332 dovecot: Feb 13 08:36:15 Info: IMAP(logistic(a)fxclub.org): Disconnected: Disconnected bytes=395/135319 It got then reconfigure MS Outlook 2007 SP1 to make a full download of email - not only headers. Then I reconfig it back to headers only - all work fine. How can I fix it? It is safe to delete index files? Self healing seems to not work here. #dovecot -n mail# dovecot -n # 1.1.8: /usr/local/etc/dovecot.conf # OS: FreeBSD 7.0-RELEASE-p9 i386 ufs base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log protocols: imap imaps pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): *:2000 ssl_ca_file: /usr/local/etc/certs/GlobalSignCA.crt ssl_cert_file: /usr/local/etc/certs/fxclub_org.crt ssl_key_file: /usr/local/etc/certs/fxclub_org.key ssl_cipher_list: ALL:!LOW:!SSLv2 login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no login_process_size: 128 login_processes_count: 20 login_max_processes_count: 512 mail_max_userip_connections(default): 256 mail_max_userip_connections(imap): 256 mail_max_userip_connections(pop3): 20 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_uid: dmail mail_gid: dmail mail_location(default): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(imap): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(pop3): maildir:/var/spool/dovecot/domains/%d/%n/ mail_location(managesieve): mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_process_size: 512 mail_plugins(default): quota imap_quota autocreate mail_plugins(imap): quota imap_quota autocreate mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_client_workarounds(default): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail tb-extra-mailbox-sep imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): % sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login user: dovecot-auth username_format: %Lu verbose: yes worker_max_count: 100 passdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf userdb: driver: ldap args: /usr/local/etc/dovecot-ldap.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: exim master: path: /var/run/dovecot/auth-master mode: 384 user: dmail plugin: quota: maildir quota_rule: *:storage=1024M quota_rule2: Trash:storage=1256M quota_rule3: SPAM:ignore quota_warning: storage=80%% /usr/local/bin/quota-warning.sh 80 quota_warning2: storage=95%% /usr/local/bin/quota-warning.sh 95 autocreate: Trash autocreate2: Sent autocreate3: Spam autosubscribe: Trash autosubscribe2: Sent autosubscribe3: Spam -- Best regards, Proskurin Kirill

3 3

[Dovecot] Bynari Insight connector
by Maarten Bezemer 13 Feb '09

13 Feb '09

Hi, Since IMAP support in Outlook is 'somewhat broken', and Bynari has some promising specifications on their website, I might want to try their product. Does anyone here have any experience with their software? Would you recommend it? Or maybe point me at alternatives? (If there are any.. aside from ditching Outlook of course :-P ) Regards, Maarten Bezemer

3 3

[Dovecot] Google Summer of Code
by Charles Marcus 13 Feb '09

13 Feb '09

On another list, someone wrote: > Google Summer of Code is on it's Way. Start collecting students to > throw at projects now! This sounds like a great idea for dovecot too... Timo, maybe there are a few dovecot enhancements that would be good candidates for this? Maybe the test suite? Replication? LMTP server? Anyway, its just a thought... -- Best regards, Charles

1 0

[Dovecot] Corrupted index cache file
by Frank Bonnet 13 Feb '09

13 Feb '09

Hello I got this error yesterday dovecot: Feb 11 16:07:27 Error: IMAP(dumontj): FETCH for mailbox Sent UID 7139 got too little data: 11112 vs 11160 dovecot: Feb 11 16:07:27 Error: IMAP(dumontj): Corrupted index cache file /user/dumontj/.imap/Sent/dovecot.index.cache: Broken virtual size for mail UID 7139 Does remove the cache will cure the problem ? Thanks

4 5

Re: [Dovecot] Mapping usernames [RESOLVED]
by Henry 13 Feb '09

13 Feb '09

Resolved. For others, this is the simple solution which works for me: /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/passwd } passdb passwd-file { args = scheme="MD5-CRYPT" /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vhost.com:$1$yAOjs09l$...::::::userdb_user=vabc_bob (the encrypted password "$1$yAOjs09l$..." comes from /etc/shadow) /etc/passwd: vabc_bob:x:20838:2362:bob:/home/mailusers/vabc_bob:/sbin/nologin "abc" could also be the domain ("vhost"), but this might be too large for really long domain names. So we rather use a short unique prefix for each domain. Cheers Henry -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

1 0

[Dovecot] file name missing component in error message
by Mike Abbott 13 Feb '09

13 Feb '09

Hi, we occasionally see this error message from maildir_mail_set_cache_corrupted(): "Maildir filename has wrong W value: %s/%s" but the path it prints is missing a component, specifically, the new/cur/tmp component. For example: /Volumes/Spool/user/maildir/12345.M123P123.example.com.... should be /Volumes/Spool/user/maildir/cur/12345.M123P123.example.com.... This is using dovecot-1.1.10. Now I just have to figure out why the file is corrupted in the first place.

2 3

[Dovecot] quota - implement via dovecot or postfix? which is easier ?
by Linux Advocate 13 Feb '09

13 Feb '09

Guys, i m new to dovecot. I m setting up a new mailserver and planning to run dovecot and postfix of a centos 5.2 box. I have been reading of quota management from various sources and understand that mail box quota can be implemented either thru postfix ( with vda patch ) or thru dovecot. i rather not patch postfix and m therefore leaning towards quota via dovecot. But after reading some posts ,etc, it seems that the information on the dovecot wiki is inaccurate. A.Any comments on this? B. Am i right in concluding that its easier and better in the long run to implement and enforce quotas thru dovecot instead of postfix? C. The right instructions for implementing quota thru dovecot? Regards, marco.

5 6

[Dovecot] CentOS 5 ... again
by Roderick A. Anderson 12 Feb '09

12 Feb '09

At this point I don't think I can do anymore damage to my mail server but I'd like to know if anyone else is using the pre-built RPM files from ATrpms before I install them? http://dl.atrpms.net/all/dovecot-1.1.11-0_90.el5.i386.rpm http://dl.atrpms.net/all/dovecot-sieve-1.1.6-9.el5.i386.rpm Or is there a dovecot-sieve for 1.0.7 from the rpmforge repo? I haven't found it yet but could have sworn I had it before. Thanks, Rod --

6 9

[Dovecot] Released Sieve v0.1.3 and ManageSieve v0.11.3 for Dovecot v1.2.beta1
by Stephan Bosch 12 Feb '09

12 Feb '09

Hello Dovecot users, It has been about two months since the last release of the new Sieve implementation and the ManageSieve service for Dovecot v1.2. Therefore, this release contains quite a few changes. It adds new sieve features like the enotify extension and multiscript support. Also, quite a few (user-reported) bugs were fixed since the last release. Changelog Sieve v0.1.3: * Adapted to changes in Dovecot, making this release dependent on Dovecot >= 1.2.beta1 * Made mail address comparison fully case-insensitive. This is particularly noticeable for the :addresses argument of the vacation command. + Finished enotify extension. Currently, only the mailto notification method is implemented. All still needs to be tested thoroughly. + Implemented multiscript support. It is now possible to execute multiple Sieve scripts sequentially. Administrator-controlled scripts can be executed before and after the user's script. Still needs to be tested thoroughly. + Implemented support for configuring the available Sieve extensions. + Made the subaddress extension (partially) configurable using the sieve_subaddress_sep setting, which allows specifying a (multi-charater) separator other than '+'. + Compiler now warns about invalid header field names used for the header and address tests. + Vacation extension now properly generates a References header for the response message. + Added testing of basic result execution to the test suite. Also added support for testing the outgoing messages produced by the Sieve interpreter. + Included execution of the actual result in the sieve-test command line tool. The undocumented sieve-exec tool that existed for this is now removed as planned. + Added support for the now obsolete 'imapflags' extension for backwards compatibility with CMUSieve. This also implements the mark/unmark commands. - Fixed bugs in the regex extension: 1) if an optional match value did not in fact match, subsequent match values would get unexpected indexes. 2) fixed segfault bug occuring when regex is freed. - Fixed bug in the use of the :from agrument for the vacation command. If this address included a phrase part, the response would not be a valid RFC822 message. - Plugged a theoretical security hole occuring when a directory is opened as a Sieve binary. - Cleaned up and fixed various log messages. - Fixed bug in the outgoing address verification. Addresses ending in ',' were erroneously accepted. Changelog ManageSieve v0.11.3: * Changed the SASL service name from "managesieve" into "sieve" as required in the protocol specification. Don't forget to adjust your configuration if your authentication mechanism depends on this service name. * Adapted to changes in Dovecot, making this release dependent on Dovecot >= v1.2.beta1. * Adapted to changes in the new Sieve implementation, making this release dependent on Dovecot Sieve >= v0.1.3 if used. The old cmusieve plugin is still supported. + Implemented making the SIEVE and NOTIFY capability fully dynamic, meaning that the sieve_extensions setting that was introduced for the new Sieve plugin properly affects the ManageSieve daemon as well. + Added support for the CHECKSCRIPT command. In terms of the supported commands, the ManageSieve daemon now complies with protocol VERSION 1.0 as listed in the CAPABILITY response. - Fixed maximum permissions for uploaded scripts; was 0777. This was shielded however by the default umask (not documented to be configurable), so the actual permissions would never have been 0777. - Fixed a segfault bug in the authentication time-out. Bug report and trace provided by Wolfgang Friebel. - Fixed handling of ~/ in use of mail-data for script location. - Fixed small problems in the login proxy support. The following files are released: Sieve: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz.sig ManageSieve package: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz.s… ManageSieve patch: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] delivering to folder based on recipient_delimiter?
by dovecot＠corwyn.net 12 Feb '09

12 Feb '09

I'm currently running postfix + dovecot, with virtual users In postfix I have set recipient_delimiter = + so that postfix accepts mail for user(a)example.com, user+foo(a)example.com, and user+spam(a)example.com all deliver to inbox. what I would like is to have email directed to user+foo(a)example.com delivered to the IMAP folder foo (and, in the context of amavisd, have amavis configured for recipient_delimited, and add addr_extension_spam_maps add +spam to each mail identified as spam, and thus the mail would go to the spam folder on delivery. The postfix guys say I should be able to do this. can someone point me to how to implement this with dovecot? (as I don't see how to even start). Thx Rick Rick Steeves http://www.sinister.net "The journey is the destination"

3 3

[Dovecot] Can't remove folder (no thunderbird issue)
by Jan Niggemann 12 Feb '09

12 Feb '09

Hi, first of all: yes, I already dug the internet but didn't find a solution - that's why I'm asking you. My provider uses dovecot, although I can't tell you more about the version - sorry. Mail is stored in mbox format. My trouble: I was unable to create subfolders and googled a bit. A proposed solution was to append a slash at the end of the folder name. I used Thunderbird to create a folder and called it "test/" (yes, with a slash). Now, in both, Thunderbird and Mulberry, I'm unable to delete that folder (that contains neither messages nor subfolders). Mulberry doesn't give an error message, and in Thunderbird I can't find an option to remove this folder (no matter if subscribed or not). My provider uses roundcube as a webmail interface. Trying to delete the folder there seems to work OK, but after refreshing the folder-view it re-appears. I have no (ssh|telnet|...) access to the server, so I can't remove the folder using the shell.. Do I have other options than calling support? Thank you already jan

4 5

Re: [Dovecot] Mapping usernames
by Henry 12 Feb '09

12 Feb '09

On Thu 12/02/09 18:36 , Timo Sirainen tss(a)iki.fi sent: > abc(a)123.com:. > ...:user=realnamea_abc Thanks Timo, Unfortunately this is still not working. Any further comments would be appreciated. I've tried it two ways:- ATTEMPT 1 ---------------- /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = scheme=plain-md5 username_format=%u /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vh1.com:$1$Vh6a...::::::userdb_user=vh1_bob Error: auth(default): passwd-file(bob@vh1.com,::ffff:127.0.0.1): no passwd file: scheme=plain-md5 username_format=bob(a)vh1.com /etc/dovecot.passwd ATTEMPT 2 ---------------- /etc/dovecot.conf: auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = /etc/dovecot.passwd } } /etc/dovecot.passwd: bob@vh1.com:{PLAIN-MD5}$1$Vh6a...::::::userdb_user=vh1_bob Error: auth(default): passwd-file(bob@vh1.com,::ffff:127.0.0.1): unknown user I'm missing something obvious, I'm sure of it. Any pointers appreciated. Thanks -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

1 0

[Dovecot] sendmail smtp auth using client socket
by EQX 12 Feb '09

12 Feb '09

Hi list I searched the net, but could not find something related. Is it possible to export the client socket to sendmail for smtp auth? What would be the sendmail.mc configuration for this? #client { # The client socket is generally safe to export to everyone. Typical use # is to export it to your SMTP server so it can do SMTP AUTH lookups # using it. #path = /var/spool/postfix/private/auth #mode = 0660 #user = postfix #group = postfix #} It can also be the other way round: can Dovecot use Cyrus SASL for user authentication? I need to use sendmail, ip based solutions like pop-before-smtp or poprelay are not an option. Thanks, Mike

4 4

[Dovecot] Mapping usernames
by Henry 12 Feb '09

12 Feb '09

Greets, We're using Dovecot 1.0.7 (which comes with CentOS 5.x). I have successfully configured dovecot to change a username from abc(a)123.com to realname1_abc for a machine which only has a single domain (using auth_username_format=realname1_%Ln). However, I'm pulling my hair out trying to get dovecot to handle multiple domains (the machine has existing /etc/passwd /etc/shadow and /etc/mail/virtusertable users). On an older machine, I simply hacked the source code to perform a berkeley DB lookup in /etc/mail/virtusertable.db for the realname[a-z0-9]_xx. This time round, though, I'm trying to do this cleanly. I've been reading the docs/wiki/etc but I now can't see the forest for the trees. This is what I've got so far: In /etc/dovecot.conf: ... auth default { userdb passwd-file { args = /etc/dovecot.passwd } passdb passwd-file { args = /etc/shadow #args = /etc/dovecot.passwd } } /etc/dovecot.passwd contains: realnamea_abc:{PLAIN-MD5}$1$Vjkfhaa....::::::userdb_user=abc@123.com I've been fiddling around blindly with all kinds of settings in userdb {} above, but I always get the error: "passwd-file(abc@123.com,::ffff:127.0.0.1): unknown user", amongst others. In a nutshell, I want to allow a user to login with abc(a)123.com, this name must be mapped to a real system user (eg, using /etc/dovecot.passwd), then authenticated against /etc/shadow or the MD5 password in /etc/dovecot.passwd I would appreciate any kind of pointers or advise here. It would have been nice if vpopmail allowed me to call an external perl script where I could perform the username mapping, but alas, this is not possible. Thanks Henry -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mOIESXlwDRECAOycneJPOwSkETRkjJZdArag8V2rKOR2IUwlDOydIZXv/ITDlWDU dookzEdWh7Ektf1Jlh+YbPNEGoPpQunL8O8AoJbWmNkpoX7jP0Sw/5rDN2eKGHR7 Af9mxTqQ/j3C5LkrTRo9iCTt1TxoqPi6R/w0KkIAuTXBq6j+vIFJcOFgABlMQoXs V2crh1BUCmXVsV1puRJsLWKbAf4uL0V+N8WF4rvWHmJiYjgDn6exv3XHS0F6NhRz n1KVnV0XDWMDq/B/tmj4L2JYxEzWzeNulC5yQBOdx/dLU12XtCNIZW5yeSAoemVu LmNvLnphKSA8aGVucnlAemVuLmNvLnphPohgBBMRAgAgBQJJeXANAhsjBgsJCAcD AgQVAggDBBYCAwECHgECF4AACgkQCHhhdg2iQafVGACdEMtEuUGIW2XJyn9Fig7n sX4qzb4An0PGStBZvAP2qtzYP3SGlzsllzLjuI0ESXlwDRACAMsi4nl8/Yar2m9F ex4dFDgWylLgScQrEhhb2xN0Upcglm60nHQD7c1rP+63Iu+lU0eWvyr8o3JTCN4y PpoGMOMAAwUCAIUnLDMW/tz+qsYaOPyoh7HdAYqcrvVar7t+eKpihNBqfP4CT2Py aRVMN6cSJj9NKZDW6b0QQSCGgN7PpzrLqf6ISQQYEQIACQUCSXlwDQIbDAAKCRAI eGF2DaJBpxeiAJ9cNiuaftSoWke75RT1pn7qoibFfgCdHl6BgP9f450/oziDwaMM w49UeHQ= =qgmL -----END PGP PUBLIC KEY BLOCK-----

2 1

[Dovecot] v1.2: Can't subscribe to shared user folder
by Sascha Wilde 12 Feb '09

12 Feb '09

Hi *, I stumbled across a small bug (missing feature?) in the new shared name space stuff: a001 list "" "*" * LIST (\Noselect \HasChildren) "/" "user" * LIST (\Noselect \HasChildren) "/" "user/bob(a)example.com" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/bar" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/brooklebookle" * LIST (\HasNoChildren) "/" "user/bob(a)example.com/foobar" a001 OK List completed. a002 lsub "" "*" a002 OK Lsub completed. a003 subscribe "user/bob(a)example.com/foobar" a003 NO Unknown subscription namespace. I'm quite sure this once worked in our original code (but of cause I could be mistaken). cheers sascha -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

2 2

[Dovecot] (Somewhat urgent) Problem with maildir++ quota
by Santiago Romero 12 Feb '09

12 Feb '09

Hi. I have an strange problem with dovecot's maildir quota and postfix. I've tested quota and it works fine but sometimes there are users that having their Maildir/ empty, they trigger the "quota exceeded" message when someone sends email to them. Some config / version info: ### Versions: ii dovecot-common 1:1.0.10-1ubuntu5.1 ii dovecot-imapd 1:1.0.10-1ubuntu5.1 ii dovecot-pop3d 1:1.0.10-1ubuntu5.1 ### From dovecot.conf: (...) # SQL database <doc/wiki/AuthDatabase.SQL.txt> userdb sql { # Path for SQL configuration file args = /etc/dovecot/dovecot-mysql.conf } (...) dict { #quota = mysql:/etc/dovecot-dict-quota.conf } (...) plugin { quota = maildir:storage=51200 } ### dovecot-mysql.conf (splitted to be readable): user_query = SELECT maildir, 5000 AS uid, 5000 AS gid, concat('maildir:storage=', floor(quota/1024)) AS quota FROM mailbox WHERE username = '%u' AND active = '1' ### Database "mailbox" record example: | prueba(a)domain.com | Password | prueba | domain.com/prueba/ | 51200000 | domain.com | 2009-02-02 10:01:24 | 2009-02-02 10:07:46 | 1 | The symptons: users are working nicely, and quota works (If I create a new user and set it a quota of, say, 1MB, I can send him msgs until Maildir reachs 1MB, after that I get "quota exceeded" messages). But sometimes there are users with the Maildir empty that can't receive messages and trigger the "quota exceeded" warning. Users always download messages by POP. Removing "maildirsize" file in their folder fixes the problem. Also fixes it changing the quota to any value (maildirsize is then removed and recreated after a new message arrives for the user). Sometime that I don't know if it's strange is that I don't see "removing" messages in the maildirsize file after user downloads messages. I mean that I can't see "-1" lines in maildirsizes: # cat prueba/maildirsize 51200000S 0 0 615 1 1540 1 11446 1 46085 1 2623 1 21218 1 2815301 1 15110 1 21289 1 18330 1 (and so). Any idea of what's going on? Shouldn't appear "MSGSIZE -1" lines in maildirsize file to "restore" space in Maildir after POP RETRs? Currently I'm fixing the problem with a regular: # find /home/vmail/vhosts -name "maildirsize" -exec rm {} \; But there must exist a better solution (or maybe my config is wrong). Thanks a lot for any help. -- Santiago Romero

2 3

[Dovecot] dovecot 1.2.beta1: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor
by e-frog 11 Feb '09

11 Feb '09

I'm currently trying out 1.2.beta1 and get the following error in 'mail.err' log file as soon as I stop dovecot: Feb 11 20:28:30 server dovecot: Fatal: io_loop_handle_add: epoll_ctl(1, 11): Bad file descriptor Is that anything critical? Thanks, e-frog -------------------------------------------------------------------------------- >: dovecot -n # 1.2.beta1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-11-server i686 Ubuntu 8.10 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap managesieve disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/.mail mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota expire fts fts_squat mail_plugins(imap): quota imap_quota expire fts fts_squat mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: dovecot group: Debian-exim master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir quota_rule: *:storage=1GB quota_rule2: Trash:storage=10%% expire: Trash 10 expire_dict: proxy::expiredict sieve: ~/.dovecot.sieve sieve_dir: ~/.sieve fts: squat fts_squat: partial=4 full=10 dict: expiredict: mysql:/etc/dovecot/dovecot-dict-sql.conf

1 0

[Dovecot] Panic in dovecot 1.2.beta1
by Mark Sapiro 11 Feb '09

11 Feb '09

I tried Dovecot 1.2.beta1 yesterday. I had been using 1.1.11. I started getting "Panic: POP3(xxx): Trying to allocate 0 bytes" There are two kinds of pop3 users. In the attached log.txt file, user u1 is using a pop3 MUA. For users u2, u3, u4 and u5 fetchmail is coming through an ssh tunnel and retrieving their mail. u1 is able to interact normally with dovecot, but the fetchmail users encountered the panics in the log. dovecot -n is attached as dovecot-n.txt. At first I thought it was a locking issue as .lock files were being left behind, so I changed pop3_lock_session to no, and restarted dovecot, but this didn't help so I reverted to 2.1.11. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 2

[Dovecot] Dovecot 1.1.11 imap namespaces .... access rights
by Harry Lachanas 11 Feb '09

11 Feb '09

Hi all, Is there a way to prohibit users of creating subfolder(s) under a Public Namespace ??? Here is my conf #------------------------------------------------------------------------------------------ log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_ca_file: /etc/postfix/sasl/cacert.pem ssl_cert_file: /etc/postfix/sasl/cert.pem ssl_key_file: /etc/postfix/sasl/key.pem login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot-1.1.11/libexec/dovecot/imap-login valid_chroot_dirs: /var/mail mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes imap_client_workarounds: outlook-idle namespace: type: private separator: / location: maildir:~/Maildir inbox: yes list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/home/Public:INBOX=~/Maildir:INDEX=~/Maildir/p-idx:CONTROL=~/Maildir/p-ctrl list: yes auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix #---------------------------------------------------------------------------------------------------------------- Cheers Harry.

4 6

[Dovecot] Adding new storage
by Romer Ventura 11 Feb '09

11 Feb '09

Hello, I am about to add more storage to the mail server and would like to know if it is as simple as it sounds..? I have: dovecot.conf mail_location: maildir:~/Maildir/ and /etc/dovecot/dovecot-ldap.conf with: user_attrs = sAMAccountName=mail=maildir:/home/vmail/%Ud/%Ln/Maildir/ So all the mail gets stored at /home/vmail/%Ud/%Ln/Maildir/ so if i add a new volume to the VM lets say /dev/disk3 and mount it to /srv/ vmail and then change the user_attrs = sAMAccountName=mail=maildir:/ home/vmail/%Ud/%Ln/Maildir/ to user_attrs = sAMAccountName=mail=maildir:/srv/vmail/%Ud/%Ln/Maildir/ would it work with no problem..? I would also need to move all the mailboxes already in the old location... I just want to make sure before i do anything.. Thanks

2 1

[Dovecot] Understanding dovecot ACLs
by Achim Hut 11 Feb '09

11 Feb '09

Hello List I am running a Cyrus IMAP that needs to be replaced. Geting a Dovecot IMAP up and running was surprisingly simple. My configuration is close to Johnny Chaddas Howto at http://johnny.chadda.se/2007/04/15/mail-server-howto-postfix-and-dovecot-wi… Its a Dovecot 1.1.10 on FreeBSD 6.4 Anyway, while basic setup was easy, i stuck in a couple of details like quota, managesieve, etc. Actual major problem and showstoper is understanding the ACLs the confuses me. So i need a hint to be guided in the right direction. What i need is a scenario, where user1 can get (for example) full access to the folders of user2, read-only access to user3 etc. A real world example: Secretary has full access to the mailfolders of her boss, boss has read-only acces to the sales-department folder. My questions: 1) is the possible? 2) can it be done with dovecot-acl files? 3) Namespaces: is it enough to have the private namespace for the job or do i need another namespace? 4) if yes, how should this namespace look like? Thanks for the help Achim

2 1

Re: [Dovecot] [Dovecot-news] v1.2.beta1 released
by Timo Sirainen 11 Feb '09

11 Feb '09

On Feb 10, 2009, at 10:45 PM, Reuben Farrelly wrote: > Feb 11 14:34:41 tornado dovecot: pop3-login: Login: user=<htperham>, > auth-method=PLAIN, remote=203.29.67.56 > Feb 11 14:34:41 tornado dovecot: Panic: POP3(htperham): Trying to > allocate 0 bytes .. > I can replicate this buy just telnetting to port 110, entering the > user and pass commands - as soon as I hit enter it dies :-( Fixed: http://hg.dovecot.org/dovecot-1.2/rev/22d70947597c

1 0

[Dovecot] dovecot logs to audit.log not to maillog
by Ralf Heidenreich 11 Feb '09

11 Feb '09

Hello, I have a curious phenomenon. Dovecot logs normally to /var/log/maillog. If I restart my server, dovecot loggs to /var/log/audit/audit.log. If I restart dovecot, dovecot loggs to /var/log/maillog again. And I think, wenn logrotate is restarting, dovecot logs to audit.log. But I don't know why. Any Ideas? greetings Ralf

2 3

[Dovecot] mailing lists and Dovecot deliver (lda)
by Roderick A. Anderson 11 Feb '09

11 Feb '09

I'm trying to figure out a way, or if it is even possible, to use mailing list software (majordomo2) on a Postfix + Dovecot + virtual mailboxes system. And where I should be looking. The examples on the Postfix site don't seem to address a purely virtual mailboxes system and I haven't found anything about doing it with deliver. I think I'm at the wrong tree (Dovecot deliver) and should be pestering the Postfix list. FTR, I host some sites for not-for-profits and they have asked about setting up lists. So far I've dodged the question but would like to attempt it now. Thanks, Rod --

2 2

[Dovecot] I've moved to US
by Timo Sirainen 10 Feb '09

10 Feb '09

I thought about saying this in v1.2.beta1 release annoouncement, but looks like it'll take a few more days. So I've moved to Blacksburg, Virginia and I'm now working for Mailtrust the rest of this year. Here's some talk about it: http://mailtrust.com/blog (A bit stupid looking picture, but then again all my pictures seem to be that way so I didn't bother getting a new one taken.) And if it's not clear from that blog: Pretty much everything I do here will be Dovecot improvements that will be released as open source. Mailtrust has actually been paying for Dovecot features for about 3 years now.

20 23

[Dovecot] redelivered mail results in mail-forwarding-loop
by Reto Glauser 10 Feb '09

10 Feb '09

I try to redeliver mail for the following reason: Once in a while a user receives a mail which isn't correctly recognised as SPAM/HAM. He'll move the mail into a specific folder (say: retrain-as-spam/retrain-as-ham) and a script will retrain the mail. What I'd like to do is to redeliver the mail in order for correct (re)delivery (e.g. sieve scripts). Using sendmail to redeliver the mail I'm able to re-run the spam tests which will add it's SPAM headers and dovecot/sieve will be able to correctly file the message. I tried to just resend the mail: # /usr/sbin/sendmail -f foo@bar -v -oi foo@bar < mail but this results in a Diagnostic-Code: X-Postfix; delivery via dovecot: mail forwarding loop for foo@bar The problem is that the mail already has a "Delivered-To: foo@bar" line. The above is working when the "Delivered-To" line is being removed, and my question is if this can't be done automatically?

2 3

[Dovecot] [Fwd: Re: dovecot logs to audit.log not to maillog]
by Ralf Heidenreich 10 Feb '09

10 Feb '09

Hello, now I have done this: under http://wiki.dovecot.org/Logging?highlight=(logging) Rotating Logs is the following string ----------------------- /bin/kill -USR1 `cat /var/run/dovecot/master.pid 2>/dev/null` 2> /dev/null || true ------------------------ This string I have insert in /etc/logrotate.d/syslog under the lines: postrotate /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true So Dovecot will be restarted, after the log rotates. I hope, the phenomenon is now solved. greetings ralf -------- Original-Nachricht -------- Betreff: Re: [Dovecot] dovecot logs to audit.log not to maillog Datum: Tue, 10 Feb 2009 09:07:26 +0100 Von: Ralf Heidenreich <ralf(a)lx-work.de> An: Timo Sirainen <tss(a)iki.fi>, dovecot(a)dovecot.org Referenzen: <499035E7.8090506(a)lx-work.de> <1234228183.6132.134.camel@timo-desktop> Hello, here is my dovecot.conf ------snip---------- log_path = /var/log/maillog info_log_path = /var/log/maillog -------snip------------- Is it possible, than logrotate rotates the maillog, and dovecot wants to write to it, if the maillog is not available at the moment, dovecot writes to audit.log? I don't know. Have you any ideas? greetings ralf Timo Sirainen schrieb: > On Mon, 2009-02-09 at 14:55 +0100, Ralf Heidenreich wrote: >> Hello, >> >> I have a curious phenomenon. >> Dovecot logs normally to /var/log/maillog. >> If I restart my server, dovecot loggs to /var/log/audit/audit.log. >> If I restart dovecot, dovecot loggs to /var/log/maillog again. >> And I think, wenn logrotate is restarting, dovecot logs to audit.log. >> But I don't know why. >> Any Ideas? > > By default Dovecot logs to syslog. Maybe your syslog configuration > changes after boot? >

1 0

[Dovecot] Dovecot / Exim with Multiple Domiains
by Marc Perkel 10 Feb '09

10 Feb '09

I'm using a very old scheme for doing multiple domains using an old Linuxconf based setup. Each domain has it's own passwd/shadow file. It works but I need something new and modern and has a web interface and perhaps a mysql backend or something else good. So - what are people using out there for managing email users and domains? Thanks in advance.

2 1

[Dovecot] Imap unlink "failed, is a directory".
by Dovecot＠corwyn.net 10 Feb '09

10 Feb '09

Dovecot 1.1.8-0_85.el5 I'm seeing this set of messages repeat every 15 min. My best guess is the user tried to delete an imap folder and is failing? Feb 9 20:05:58 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=10.0.0.1, lip=192.168.250.80, TLS Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/cur:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): unlink(/var/spool/mail/example.com/user/Maildir/cur/new:2,ST) failed: Is a directory Feb 9 20:05:58 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=66/623 From here: http://wiki.dovecot.org/VirtualUsers#homedirs I suspect it's a problem with access to the home directory. The users have a home directory: /var/spool/mail/domain/user (or at least that's where Maildir ends up). vuser has 700 access to that entire structure (everything under var/spool/mail/). Users log in with mysql accounts. /etc/passwd: ... dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin vacation:x:65501:65501::/var/spool/vacation:/sbin/nologin vuser:x:1015:105:,,,:/home/vuser:/bin/false ... dovecot-sql.conf driver = mysql connect = host=localhost dbname=postfix user=postfix password=xxxxxxx default_pass_scheme = MD5-CRYPT password_query = SELECT username, domain, password FROM mailbox WHERE username = '%u' AND domain = '%d' AND active = '1' user_query = SELECT 1015 as uid, 105 as gid, '/var/spool/mail/%d/%n' as home, 'maildir:/var/spool/mail/%d/%n/Maildir' as mail, concat('*:storage=', quota, 'B') as quota_rule FROM mailbox WHERE username = '%u' AND domain = '%d' and active = '1' dovecot -n # 1.1.8: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 Red Hat Enterprise Linux Server release 5.2 (Tikanga) ext3 ssl_cert_file: /etc/httpd/certs/example_invtitle_com.crt ssl_key_file: /etc/httpd/certs/example.com.key.no.password login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 1015 mail_gid: 105 mail_location: maildir:/var/spool/mail/%d/%n/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: sql args: /etc/dovecot-sql.conf userdb: driver: static socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vuser group: vuser plugin: quota: maildir quota_rule: *:storage=102400000 quota_rule2: Trash:storage=100M Rick Steeves http://www.sinister.net "The journey is the destination"

3 3

[Dovecot] Authentication woes.
by Roderick A. Anderson 10 Feb '09

10 Feb '09

I'm still searching but hoping someone can offer a clue-stick. Long story short! I had a server crash suddenly and all I can get at are the files. Built a new host and copied the data and config files over, correcting ownership and permissions (hopefully) as I went. But now I can't get logged in. Messages in /var/log/dovecot/dovecot-info.log, without saslauthd running, are like this. dovecot: Feb 03 08:55:46 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:48 Info: auth(default): client out: FAIL 1 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:48 Info: auth(default): client in: AUTH 2 PLAIN service=IMAP secured lip=216.64.180.226 rip=66.193.34.88 resp=AHJhYW5kZXJzQGFlc29mdC1zYmNzLmNvbQBrNnpiZTQy dovecot: Feb 03 08:55:48 Info: auth(default): passwd-file(raanders(a)aesoft-sbcs.com,66.193.34.88): no passwd file: username_format=raanders /var/mail/vhosts/aesoft-sbcs.com/passwd dovecot: Feb 03 08:55:50 Info: auth(default): client out: FAIL 2 user=raanders(a)aesoft-sbcs.com dovecot: Feb 03 08:55:54 Info: imap-login: Aborted login: user=<raanders(a)aesoft-sbcs.com>, method=PLAIN, rip=66.193.34.88, lip=216.64.180.226, TLS The passwd file exists and I'm using the correct password. dovecot -n as an attachment. More info this is a semi-good attempt at a mail server for virtual domains. _It was working._ Any ideas as to why dovecot says the file doesn't exist? TIA, Rod # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log protocols: imap imaps listen: *:143 ssl_listen: *:993 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes valid_chroot_dirs: /var/mail first_valid_uid: 5000 last_valid_uid: 5000 first_valid_gid: 5000 last_valid_gid: 5000 mail_access_groups: mail mail_location: maildir:~/Maildir mail_debug: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes auth default: mechanisms: plain login CRAM-MD5 default_realm: aesoft-sbcs.com master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /var/mail/vhosts/%d/passwd.masterusers pass: yes master: yes passdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd userdb: driver: passwd-file args: username_format=%n /var/mail/vhosts/%d/passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail plugin: sieve: /var/mail/vhosts/%d/%n/dovecot.sieve

2 1

[Dovecot] Dovecot 1.1.11 segfaults on auth configuration error
by Sebastian Kayser 10 Feb '09

10 Feb '09

Hi, i have compiled & packaged Dovecot 1.1.11 on Solaris 8 x86 with Sun Studio 11 and installed the result on Solaris 10 x86 zone. When i now configure auth mechanisms other than "login" or "plain" while only providing pam as the passdb, Dovecot segfaults on startup. I know that my configuration is wrong here, but i guess this still qualifies as a bug. Remedy would be appreciated. # /opt/csw/sbin/dovecot -F dovecot: Feb 06 22:56:24 Info: dovecot v1.1.11 starting up dovecot: Feb 06 22:56:25 Error: child 26870 (auth) returned error 89 (Fatal failure) Segmentation Fault (core dumped) # /opt/SUNWspro/bin/dbx -f /opt/csw/sbin/dovecot core (dbx) where =>[1] hash_lookup(table = (nil), key = 0x68f6), line 159 in "hash.c" [2] child_process_lookup(pid = 26870), line 31 in "child-process.c" [3] log_it(log_io = 0x80b8598, line = 0x80b7d4a "DIGEST-MD5 mechanism can't be supported with given passdbs", continues = 0), line 129 in "log.c" [4] log_write_pending(log_io = 0x80b8598), line 52 in "log.c" [5] log_read(log_io = 0x80b8598), line 191 in "log.c" [6] log_deinit(), line 331 in "log.c" [7] auth_process_destroy(p = 0x80b86f8), line 357 in "auth-process.c" [8] auth_process_input(process = 0x80b86f8), line 244 in "auth-process.c" [9] io_loop_handler_run(ioloop = 0x80b3518), line 204 in "ioloop-poll.c" [10] io_loop_run(ioloop = 0x80b3518), line 336 in "ioloop.c" [11] main(argc = 2, argv = 0x80478dc), line 599 in "main.c" # /opt/csw/sbin/dovecot -n # 1.1.11: /etc/opt/csw/dovecot/dovecot.conf # OS: SunOS 5.10 i86pc log_path: /dev/stderr login_dir: /var/opt/csw/run/dovecot/login login_executable: /opt/csw/libexec/dovecot/imap-login auth default: mechanisms: plain digest-md5 debug: yes passdb: driver: pam userdb: driver: passwd Please let me know in case there is any other information required to nail down the culprit. Thanks. Sebastian

2 2

[Dovecot] [patch] 'c' and 'd' in setacl
by Sascha Wilde 09 Feb '09

09 Feb '09

Hi Timo, Hi *, I just recognized that the new imap-acl plugin in dovecot 1.2 does not know the obsolete rights 'd' and 'c' when setting. According to RFC 4314 section 2.1.1.: If a client includes the "d" right in a rights list, then it MUST be treated as if the client had included every member of the "delete" right. and If a client includes the "c" right in a rights list, then it MUST be treated as if the client had included every member of the "create" right. Unfortunatly there are actually clients which depend on this behavior. I attached a rather rough[0] patch which implements this. cheers sascha [0] I don't like the use of static indexes witch imap_acl_letter_map but currently I wasn't able to decide on a more elegant solution. -- Sascha Wilde OpenPGP key: 4BB86568 http://www.intevation.de/~wilde/ http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück; AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

4 5

[Dovecot] Rebuild folder listing?
by Roderick A. Anderson 09 Feb '09

09 Feb '09

I don't know what to call what I'm trying to do so I'll explain the situation. I had a total complete crash of the Linux-Vserver system that was hosting a Postfix+Dovecot guest with a three domains and 1-5 accounts per domain. Lots of mail though. Before it completely melted down I as able to get to the data (messages) and save them and the configuration files for both Dovecot and Postfix. I now have a replacement system up and running and have copied the directories onto it. I can log in to the accounts but I don't see the folders (I use Thunderbird as a MUA). Attempts to "subscribe" and "refresh" the list give me no results. No list of folders. What should I do? I'm thinking I could delete the dovecot files: dovecot.index, dovecot.index.cache, dovecot.index.log, dovecot-uidlist, subscriptions, and while I'm at it possibly dovecot-keywords. Then access the account(s) and Dovecot will rebuild them with the true/correct information. Am I heading anywhere near the right direction? TIA, Rod --

2 3

Re: [Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I understand what the log message means. I currently have dovecot logging flipped up about as high as I can have it set in about every way that I can. What I'd like to know is which logging setting can I lower to not see this message (or if there is one), and what OTHER things won't log if I decrease that logging setting. thx. rick At 08:43 AM 2/9/2009, Steffen Kaiser wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Mon, 9 Feb 2009, dovecot(a)corwyn.net wrote: > >>Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): >>Disconnected: Logged out bytes=479/51185 > >Search the archive for a mail from Timo few times ago, it just means >that the user logges out (LOGOUT command). > >Bye, > >- -- Steffen Kaiser >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.6 (GNU/Linux) > >iQEVAwUBSZAzIHWSIuGy1ktrAQKQDQf/S0zCmCuQ+xtJI0o3goUdDo0++yGXRyCp >fGdDKQ7YnOL1VOM1FnBjGJkhfYs/K6WuVFqQzqVrBjCoItsFWIvZCoeGWeHYPQf1 >6qRYngFSJLfdFDg9Ift5UvCnIS9W5jYv6otkJlddoH0SHeypSb9RZbPR20Ywf2da >whV4bB41W8ys/upUkaBd7+gKKcYcbSp+l3ZBXCrLnDbj7pCISnv2sENkTz2df1eE >wQSgpnbazmr9ePCx1cWDdvN5Wy9RN5KoGc+H0axtI7Uav5tkP7nVJ8GSmqBBH54r >nkvOrtmAjTMwp4MbYh6x2wejZJAY8lp72wQOeg3sJak32f3la0ZLgw== >=mLed >-----END PGP SIGNATURE-----

3 2

[Dovecot] Disconnected Log messages I'd like to disable?
by dovecot＠corwyn.net 09 Feb '09

09 Feb '09

I regularly get this message in my logs: Feb 9 08:03:59 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:04:49 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=189/468 Feb 9 08:06:09 mailserver dovecot: imap-login: Login: user=<user(a)example.com>, method=PLAIN, rip=24.213.158.249, lip=192.168.250.80, TLS Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 (which I think is from my blackberry users) I'd like to not log Feb 9 08:06:52 mailserver dovecot: IMAP(user(a)example.com): Disconnected: Logged out bytes=479/51185 Suggestions? rick Rick Steeves http://www.sinister.net "The journey is the destination"

2 1

[Dovecot] v1.1.11 released
by Timo Sirainen 09 Feb '09

09 Feb '09

http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz.sig Hopefully this v1.1 release will last a few months. - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients not to save keywords. - dbox: INTERNALDATE and save date was returned wrong for converted maildir files. - auth: Using "username" or "domain" passdb fields caused problems with cache and blocking passdbs in v1.1.8 .. v1.1.10. - userdb prefetch + blocking passdbs was broken with non-plaintext auth in v1.1.8 .. v1.1.10. - If mail_chroot is set, don't fail at startup in dump-capability.

10 16

[Dovecot] Maildir structure question
by Nicolas KOWALSKI 08 Feb '09

08 Feb '09

Hello, About the INBOX location when using maildir, in the wiki, http://wiki.dovecot.org/MailboxFormat/Maildir, I can read: " Directory Structure ~/Maildir/new, ~/Maildir/cur and ~/Maildir/tmp directories contain the messages for INBOX. The tmp directory is used during delivery, new messages arrive in new and read shall be moved to cur by the clients. " But in my Maildir, I see this: niko@petole:~$ ls -la Maildir/ total 144 drwxr-xr-x 35 niko niko 4096 2009-02-06 08:37 . drwxr-xr-x 25 niko niko 4096 2009-02-06 10:26 .. drwxr-xr-x 5 niko niko 4096 2009-02-06 09:16 .INBOX ... There are no 'cur', 'new' and 'tmp' directories in ~/Maildir, as written in the wiki, but instead this .INBOX directory which contains these 'cur', 'new' and 'tmp'. Is this expected ? Thanks. My configuration: petole:~# dovecot -n # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.28.3 i686 Debian 4.0 ssl_cert_file: /etc/ssl/certs/petole.demisel.net.pem ssl_key_file: /etc/ssl/private/petole.demisel.net.pem login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_location: maildir:~/Maildir namespace: type: private separator: / list: yes subscriptions: yes auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 -- Nicolas

3 8

[Dovecot] Best Imap Transfer Tool?
by Neil 08 Feb '09

08 Feb '09

So I'm looking to do a migration of my IMAP mailboxes, and I'm looking for the best tool to use. I used to use the uw-mailutil tool, a while ago, but that was a bit coarse of a tool. More recently I've used imapsync, but that was giving me some errors. I've sort of tracked those down; but I was wondering if anyone else had any other recommendations...? Thanks.

2 2

[Dovecot] Migrating mail between servers
by Knute Johnson 07 Feb '09

07 Feb '09

I've currently got dovecot running on a Fedora server and I want to move all my mail to my new server running ubuntu. Both use mbox and I have IMAP working in both. Can I just copy the ~user/mail directory and /var/mail/user file and replace them in the new server? Thanks, -- Knute Johnson "The urge to save humanity is almost always a false front for the urge to rule." H.L. Mencken

3 2

[Dovecot] FreeBSD pam auth problems
by Dmitry Samersoff 06 Feb '09

06 Feb '09

I'm impressed by dovecto and try to upgrade my home system from wu-imapd running there for last 5 years to dovecot. It's straghtforward FreeBSD setup with ssl-only auth, inboxes in /var/mail and user mail under %h/Mail But I get some strange error: Fatal: userdb didn't return a home directory, but mail location used it (%h): %h/Mail:INBOX=/var/mail/%u Thank you in advance! -Dmitry mircat:dovecot#./sbin/dovecot -n # 1.1.10: /usr/local/dovecot/etc/dovecot.conf # OS: FreeBSD 6.2-RELEASE i386 base_dir: /var/run/dovecot log_path: /var/log/dovecot_main.log info_log_path: /var/log/dovecot_info.log listen: *:143 ssl_listen: *:993 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_user: nobody login_chroot: no login_max_processes_count: 30 max_mail_processes: 30 first_valid_uid: 1 mail_uid: smmsp mail_gid: smmsp mail_location: mbox:%h/Mail:INBOX=/var/mail/%u mail_debug: yes mbox_lazy_writes: no auth default: failure_delay: 1 verbose: yes debug: yes worker_max_request_count: 1 passdb: driver: pam args: imap -- Dmitry Samersoff dms(a)samersoff.net, http://devnull.samersoff.net * There will come soft rains ...

2 4

[Dovecot] Info regarding conversion of mbox to maildir
by Scott Silva 06 Feb '09

06 Feb '09

When I finally decide to convert to maildir, will I have to set up namespaces during the conversion, or will dovecot figure out where everything is by itself? Should I set up deliver to go to maildir/ globally, or per user? I have considered using the convert plugin, if there are not a lot of negatives. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

2 3

[Dovecot] Public namespace permissions documentation/questions
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, In my trials to setup a shared namespace with dovecot-1.1.8/LDAP passdb/userdb (prefetch)/Maildir, I found out that : 1) ACL are mandatory (at least if the acl plugin is triggered in dovecot.conf) Am I correct ? I'm still not sure if we can do without ACL at all (only with unix permissions and system_user userdb extra field). 2) the system_user userdb extra field is supposed to be ...the logname of the user the secondary groups of whom we want to check ! i.e. if user foobar belongs to secondary groups foogid, zgid, wgid and doveshared uid=xxx(foobar) gid=yyy(foogid) groups=zzz(zgid),www(wgid),vvv(doveshared) and we dovecot to take them into account, we have to make the usedb return the system_user extra field with the value foobar. Seems obvious now and said this way, but looking at the wiki : "system_user: If this is given, the user's groups are read from /etc/group (or wherever NSS is configured to taken them from)." I thought 'system_user' was a flag (a boolean) which, when triggered made dovecot look for the secondaries group of the user (user whose name is already known). a) am I correct ? b) why isn't system_user such a boolean ? Is there a case where we'd want system_user to be different than the user dovecot runs as at the moment the check takes place ? 3) same idea with acl_groups : since this extra_field holds a list of groups for the ACL plugin, why not rely on the native unix groups of the system the user belong to ? Thanks (and sorry for the 2 previous threads where I was blindly confused by the system_user thing). -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] dovecot-shared file
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello Timo, About the dovecot-shared file, the wiki says : "Unless you're using a single UID for all the users, you'll need to have a dovecot-shared file in each shared maildir. The group and the file permissions for new files inside the maildir are taken from the dovecot-shared file." but says the following too : "With Maildir dovecot-shared file controls if the \Seen flags are shared or private. If you don't have the file, they're shared." The question is "does it make sense (or is it even possible) not to have the file ?". Why would one not have the file and how would it work then ? By relying on the set-gid bit and umask ? Finally, the wiki says : "If you do have the file, the \Seen flag state is stored only in the user's index files. By making each user have their own private index files, you can make the \Seen flag private for the users." So, my undersanding is that : 1) you have the file 1.a) if INDEX points to the same place, flags are shared but are lost if indexes are lost 1.b) if INDEX points to some user dependant place, flags are private but are lost if indexes are lost 2) you don't have the file flags are shared, whatever INDEX points to and, since they're stored in filename, survive indexes lost. but does shared-mailboxes even work if we don't have that file ? maybe only if the set-gid bit and umask does what the file would have done ? So maybe, if you want to share flags, 2) is safer dans if you want them private, 1.b) is the only choice ? thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 1

[Dovecot] Shared subscription, acl-list and uidvalidity(s)
by Thomas Hummel 06 Feb '09

06 Feb '09

Hello, I'm running dovecot-1.1.8/Maildir/ACL plugin. I sucessfully set up a Maildir shared between users of the unix group 'doveshared' via a public namespace, unix permissions and ACL files. The location of my public namespace is /path/to/public. I tried 2 sub-setups : First setup ---------- drwxrws--- 4 root doveshared 4096 Jan 30 13:39 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions I first connect (in Thunderbird) to dovecot with user 'hummel', then with user 'doveimap'. The following files are created in /path/to/public/ : -rw------- 1 doveimap doveshared 40 Jan 30 14:03 dovecot-acl-list -rw------- 1 hummel doveshared 8 Jan 30 14:03 dovecot-uidvalidity -rw------- 1 hummel doveshared 0 Jan 30 14:02 dovecot-uidvalidity.4982fa7a I've got my own idea about what they're used for, but can you explain what they are supposed to be ? I guess the uidvalidity files are UIDVALIDITY, not for the mailboxes the namespace holds (since my understanding is that the uidvalidities of mailboxes are stored in the first line of dovecot-uidlist files), but for the namespace itself (in case it is destroyed and then recreated for instance). Am I right ? Why 2 files ? Second setup ------------- I follow the 'Shared subscriptions' section of the wiki : drw-r-s--- 4 root doveshared 4096 Jan 30 14:19 public -rw-r----- 1 root doveshared 18 Jan 30 13:38 public/subscriptions As expected, dovecot (and it shows in the logs), has not sufficient permissions to create the files above (dovecot-acl-list, dovecot-uidvalidity, dovecot-uidvalidity.4982fa7a). What are the consequences ? Thanks. -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

2 3