- dovecot - dovecot.org

[Dovecot] Auth_username_format question
by Romer Ventura 05 Dec '08

05 Dec '08

Hello again, I have change authentication to LDAP from Kerberos due to recent changes to my plans and I am having a little problem getting the malbox created in desired path. At the moment the home folders are being created in: /home/vmail/DOMAIN.COM/%Ln and it worked great with kerberos, but with LDAP the domain part is missing so I did the following: Auth_username_format = %Ln Then I did: # telnet localhost pop3 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user test4(a)domain.com +OK pass password +OK Logged in. But I saw in the logs the following: dovecot: auth(default): master out: USER 1 test4 uid=1001 gid=1000 home=/home/vmail//test4 The domain was missing.. So does it mean that auth_username_format dictates what dovecot will use, not only for the authentication part, but for everything else as well..? To me it seems that once the username has been formatted it forgets everything that doesn¹t constitute part of the specified format. Or am I misunderstanding the entire concept..? How cant I preserve the domain part so that the homes can be placed in the desired location: /home/vmail/%d/%u...? Thanks

2 1

[Dovecot] Dovecot Proxy with MySQL auth
by Justin Krejci 05 Dec '08

05 Dec '08

We are looking at deploying several pop/imap servers to house the mail for 15,000 or more mailbox accounts. We are contemplating on the design and are looking at using MySQL auth (we already have a MySQL environment in place for our user auth to live) and proxy_maybe so each server can proxy for all the others and we just have a network load balancer distribute the incoming connections to all of the Dovecot servers. Each server would have its own local maildir storage for the users local to that server and all of the authentication and target backend pop/imap server data would be stored in the same MySQL database. The problem we are running into is the documentation is not very clear on this type of scenario. http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy At the bottom of this page it gives a query example of "SELECT NULL AS password, ." but that does not seem to allow for us to use the proxy_maybe if the destination server is localhost (and therefore do not proxy) it does not seem that the above query will actually send the real password for authentication. Is this a misunderstanding on our part or is the use of mysql auth + proxy_maybe not feasible? Assuming the latter we surmised using a separate instance of Dovecot on each machine to act solely as a proxy front end (use proxy instead of proxy_maybe) then on the second instance there is no proxy config and it listens on a separate TCP port like 80143 or whatever. Any input or suggestions would be appreciated. Justin Krejci

2 4

[Dovecot] Roadmap
by Jonathan Siegle 05 Dec '08

05 Dec '08

I've been running 1.2alpha3 for weeks now without issue. However, some people in my testing department object to even testing "alpha" code. Are there specific features/bugs that need resolved before alpha reaches beta? Thanks, Jonathan

2 1

[Dovecot] Dovecot authenticating to multiple kerberos realms
by Romer Ventura 04 Dec '08

04 Dec '08

Hello, I got Postfix, Dovecot 1.1.7 configure to use pam and the pam.d/dovecot file is configure to use pam_krb5 module. Everything is working with no problems, but I am finding that the user must type the domain part in uppercase in order to successfully authenticate. So I am wondering if there is any way for the user to login as user1(a)domain.com instead of user1@DOMAIN.COM...? Any ideas..? Thanks

2 2

[Dovecot] Antispam plugin + scriptsieve
by Allan Cassaro 03 Dec '08

03 Dec '08

Hi, I wrote a little python program that works with antispam plugin, to create or remove sieve rules based on "From:" of any e-mail that is moved to some folder configured in dovecot.conf. He works fine with "Felamimail" the email program of "eGroupware". After setup, is very simple: If an user move a message to "blocked" folder, is appended a rule in the script sieve of this user. If the message is deleted or moved out that folder, the rule is removed too. The setup is very simple: (after setup antispam plugin) Change this in dovecot.conf: protocol imap { mail_plugins = antispam } plugin { antispam_spam = Blocked antispam_mail_sendmail = /usr/libexec/dovecot/blockthis.py antispam_mail_sendmail_args = -u;%u antispam_mail_spam = -a antispam_mail_notspam = -d } Hooo... this script create a "include global script" statament in script sieve... If you don't want this feature, just comment this 2 lines: sievelist.append('require ["fileinto", "include"];\n') sievelist.append('include :global "global.sieve";\n') Here this is very useful! :D This script was created to suit my needs, so, have some paths in the code... It's not very "user friendly" yet... but if have intereting I will implement others features (like a config file). Download here: http://allan.cassaro.googlepages.com/blockthis.py Regards.

1 1

[Dovecot] Antispam plugin + scriptsieve
by Allan Cassaro 03 Dec '08

03 Dec '08

Hi, I wrote a little python program that works with antispam plugin, to create or remove sieve rules based on "From:" of any e-mail that is moved to some folder configured in dovecot.conf. He works fine with "Felamimail" the email program of "eGroupware". After setup, is very simple: If an user move a message to "blocked" folder, is appended a rule in the script sieve of this user. If the message is deleted or moved out that folder, the rule is removed too. The setup is very simple: (after setup antispam plugin) Change this in dovecot.conf: protocol imap { mail_plugins = antispam } plugin { antispam_spam = Blocked antispam_mail_sendmail = /usr/libexec/dovecot/blockthis.py antispam_mail_sendmail_args = -u;%u antispam_mail_spam = -a antispam_mail_notspam = -d } Hooo... this script create a "include global script" statament in script sieve... If you don't want this feature, just comment this 2 lines: sievelist.append('require ["fileinto", "include"];\n') sievelist.append('include :global "global.sieve";\n') Here this is very useful! :D Regards.

1 0

[Dovecot] my_vsnprintf crash on HP-UX
by Marc Beyer 03 Dec '08

03 Dec '08

Hi, sorry for the double post, I stupidly composed this as a reply to an earlier mail, which causes it to appear in an older thread. Posting again so it doesn't get lost in the archives: dovecot 1.1.7 reliably crashes every time I try to open a mailbox using IMAP. Error in the logs: dovecot: Dec 02 23:14:15 Error: setmntent(/etc/mtab) failed: No such file or directory dovecot: Dec 02 23:14:16 Panic: IMAP(arandomuser(a)example.com): my_vsnprintf(): Output string too big dovecot: Dec 02 23:14:16 Error: child 4815 (imap) killed with signal 6 dovecot: Dec 02 23:14:19 Panic: IMAP(arandomuser(a)example.com): my_vsnprintf(): Output string too big dovecot: Dec 02 23:14:19 Error: child 4816 (imap) killed with signal 6 ... (it goes on until the daemon is killed) # dovecot -n # 1.1.7: /opt/dovecot-1.1.7/etc/dovecot.conf Error: setmntent(/etc/mtab) failed: No such file or directory # OS: HP-UX B.11.31 ia64 base_dir: /var/run/dovecot log_path: /var/adm/syslog/dovecot/err.log info_log_path: /var/adm/syslog/dovecot/info.log protocols: imap imaps pop pops ssl_cert_file: /opt/dovecot/etc/dovecot.crt ssl_key_file: /opt/dovecot/etc/dovecot.key login_dir: /var/run/dovecot/login login_executable: /opt/dovecot/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 113 last_valid_uid: 113 first_valid_gid: 109 last_valid_gid: 109 mail_uid: exim mail_gid: exim mail_location: maildir:/maildir/%d/%n mail_debug: yes mail_drop_priv_before_exec: yes mail_executable: /opt/dovecot/libexec/dovecot/imap mail_plugin_dir: /opt/dovecot/lib/dovecot/imap/ namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login cram-md5 executable: /opt/dovecot/libexec/dovecot/dovecot-auth user: exim verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /opt/dovecot/etc/dovecot-mysql.conf userdb: driver: static args: uid=113 gid=109 home=/maildir/%d/%n gdb backtrace (this is the HP-UX gdb, not the GNU debugger, dovecot was compiled with the HP-UX cc): (gdb) bt #0 0x60000000c03ef990:0 in kill+0x30 () from /usr/lib/hpux32/libc.so.1 #1 0x60000000c02a0e60:0 in raise+0x120 () from /usr/lib/hpux32/libc.so.1 #2 0x60000000c03b0f70:0 in abort+0x170 () from /usr/lib/hpux32/libc.so.1 #3 0x42ab6a0:0 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:150 #4 0x42acd40:0 in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x409f750 "my_vsnprintf(): Output string too big", args=0x7ffff418) at failures.c:430 #5 0x42abb50:0 in i_panic ( format=0x409f750 "my_vsnprintf(): Output string too big") at failures.c:197 #6 0x4306fb0:0 in my_vsnprintf (str=0x7ffff4a0 "4935b742", size=9, format=0x4094998 "%08x", ap=0x7ffff478) at compat.c:276 #7 0x42f9a20:0 in i_snprintf (dest=0x7ffff4a0 "4935b742", max_chars=9, format=0x4094998 "%08x") at strfuncs.c:23 #8 0x41e6cd0:0 in mailbox_uidvalidity_write ( path=0x4001d400 "/maildir/example.com/arandomuser/dovecot-uidvalidity", uid_validity=1228257090) at mailbox-uidvalidity.c:42 #9 0x41e7ac0:0 in mailbox_uidvalidity_next_rescan ( path=0x4001d400 "/maildir/example.com/arandomuser/dovecot-uidvalidity") at mailbox-uidvalidity.c:154 #10 0x41e7de0:0 in mailbox_uidvalidity_next ( path=0x4001d400 "/maildir/example.com/arandomuser/dovecot-uidvalidity") at mailbox-uidvalidity.c:181 ---Type <return> to continue, or q <return> to quit--- #11 0x4110540:0 in maildir_get_uidvalidity_next (storage=0x40046698) at maildir-storage.c:1054 #12 0x4121c60:0 in maildir_uidlist_sync_update (ctx=0x40044e60) at maildir-uidlist.c:1219 #13 0x4124a70:0 in maildir_uidlist_sync_finish (ctx=0x40044e60) at maildir-uidlist.c:1609 #14 0x4114120:0 in maildir_sync_context (ctx=0x4001c220, forced=false, find_uid=0x0, lost_files_r=0x7ffff590) at maildir-sync.c:781 #15 0x41147b0:0 in maildir_storage_sync_init (box=0x4005ca28, flags=MAILBOX_SYNC_FLAG_FIX_INCONSISTENT|MAILBOX_SYNC_FLAG_FULL_READ) at maildir-sync.c:859 #16 0x41de2e0:0 in mailbox_sync_init (box=0x4005ca28, flags=MAILBOX_SYNC_FLAG_FIX_INCONSISTENT|MAILBOX_SYNC_FLAG_FULL_READ) at mail-storage.c:516 #17 0x41de4a0:0 in mailbox_sync (box=0x4005ca28, flags=MAILBOX_SYNC_FLAG_FIX_INCONSISTENT|MAILBOX_SYNC_FLAG_FULL_READ, status_items=STATUS_KEYWORDS|STATUS_FIRST_UNSEEN_SEQ|STATUS_UIDVALIDITY|STATUS_UIDNEXT|STATUS_RECENT|STATUS_MESSAGES, status_r=0x7ffff5c0) at mail-storage.c:545 #18 0x40bc200:0 in cmd_select_full (cmd=0x40054298, readonly=false) at cmd-select.c:39 #19 0x40bc640:0 in cmd_select (cmd=0x40054298) at cmd-select.c:88 #20 0x40c9c00:0 in client_command_input (cmd=0x40054298) at client.c:580 ---Type <return> to continue, or q <return> to quit--- #21 0x40ca340:0 in client_command_input (cmd=0x40054298) at client.c:629 #22 0x40ca6a0:0 in client_handle_next_command (client=0x40046da0, remove_io_r=0x7ffff610) at client.c:670 #23 0x40c9470:0 in client_handle_input (client=0x40046da0) at client.c:680 #24 0x40c6ec0:0 in client_input (client=0x40046da0) at client.c:725 #25 0x42cdb60:0 in io_loop_handler_run (ioloop=0x4002e9f0) at ioloop-poll.c:204 #26 0x42cb780:0 in io_loop_run (ioloop=0x4002e9f0) at ioloop.c:320 #27 0x40efa90:0 in main (argc=3, argv=0x7ffffa44, envp=0x7ffffa54) at main.c:293 (gdb) Doing a system call trace via tusc -p -v -o dovetrace -k -f dovecot I get the following for a crashed process (different pid since I didn't want to do the tusc on the same run). Lines start with the [5301]: [5301] open("/maildir/example.com/arandomuser", O_RDONLY|0x200000, 0152000) ................................................................................ = 8 [5301] fstat(8, 0x7ffff440) ................................................................................................................................ = 0 [5301] fcntl(8, F_SETFD, 0) ................................................................................................................................ = 0 [5301] getdents(8, 0x4007b3d0, 8192) ....................................................................................................................... = 312 [5301] getdents(8, 0x4007b3d0, 8192) ....................................................................................................................... = 0 [5301] close(8) ............................................................................................................................................ = 0 [5301] rename("/maildir/example.com/arandomuser/dovecot-uidvalidity.4935b740", "/maildir/example.com/arandomuser/dovecot-uidvalidity.4935b741") ............ = 0 [5301] open("/maildir/example.com/arandomuser/dovecot-uidvalidity", O_RDWR|O_CREAT|0x800, 0666) ............................................................ = 8 [5301] brk(0x400b1000) ..................................................................................................................................... = 0 [5301] brk(0x400c1000) ..................................................................................................................................... = 0 [5301] brk(0x400e1000) ..................................................................................................................................... = 0 [5301] brk(0x40121000) ..................................................................................................................................... = 0 [5301] brk(0x401a1000) ..................................................................................................................................... = 0 [5301] write(2, "01P m y _ v s n p r i n t f ( ) ".., 40) .................................................................................................. = 40 [5301] sigprocmask(SIG_UNBLOCK, NULL, 0x7ffff3a0) .......................................................................................................... = 0 [5301] sigaction(SIGABRT, NULL, 0x7ffff3c0) ................................................................................................................ = 0 [5301] close(1) ............................................................................................................................................ = 0 [5301] sigprocmask(SIG_BLOCK, 0x7ffff3a0, NULL) ............................................................................................................ = 0 [5301] sigaction(SIGABRT, 0x7ffff3c0, NULL) ................................................................................................................ = 0 [5301] sigprocmask(SIG_UNBLOCK, 0x7ffff3a0, NULL) .......................................................................................................... = 0 [5301] getpid() ............................................................................................................................................ = 5301 (5295) [5301] Received signal 6, SIGABRT, in kill(), [SIG_DFL], no siginfo [5301] kill(6, SIGABRT) .................................................................................................................................... [entry] [5301] exit(6) [implicit (kill failure)] ................................................................................................................... WIFSIGNALED(SIGABRT)|WCOREDUMP [5295] waitpid(-1, WIFSIGNALED(SIGABRT)|WCOREDUMP, WNOHANG) ................................................................................................ = 5301 [5302] kill(5301, SIG#0) ................................................................................................................................... ERR#3 ESRCH Anything you can think of that would help? Cheers, Marc

2 2

[Dovecot] Loginname - mapping
by Roald Amundsen 03 Dec '08

03 Dec '08

Hi! I have a server with a few thousand mailboxes (for a few hundred domains) on it. The usernames are following several naming conventions: username_domain domain_username username_domain.tld username-domain domain.username The reason for this chaos is that the accounts were set up on different mailservers, some imail, some linux, some with virtualmin and some manually and through aquisitons etc it has all ended up in one server. Now we are setting up atmail to replace imp. The loginprocess of atmail is a bit different in that you just type in your mail address and atmail tries a few combinations of loginnames to login. However, some of the combinations over atmail cant login to. Some of them works fine when using this line in dovecot.conf auth_username_translation = @_ Is there any facility to let dovecot do username mapping? If I eg have a file: usermapping that looks like this: user(a)domain1.com domain1_user user(a)domain2.com user_domain2 user(a)domain3.com domain3.user And yes, I know that the best way is to start again and use virtual domains and get all into one naming standard, but unfortunately, that is not going to happen. The other alternative is of course to hack into the source code of atmail, but I am not that confident in PHP. Any ideas? -- Regards Roald Amundsen

2 4

[Dovecot] Problem with sieve: Keep: Generic Error
by Thomas Siebert 03 Dec '08

03 Dec '08

Hi, i came across a strange error message in Ubuntu 8.10s package (Dovecot 1.1.4) regarding sieve: sieve runtime error: Keep: Generic Error sieve_execute_bytecode(/etc/dovecot/sieve/default.sievec) failed Note that the Sieve Scripts are basically executed fine and working fine. After a lot of testing I suppose the following: "keep" doesn't detect the private namespace I have to use (courier-compatibility...), thus sieve fails to do "keep", the message is handed back to dovecot-deliver which does a "keep"-similar action itself. If I have a script with "keep;" as the only command, I get this error message. If my script is totally blank (i.e. implicit keep only), I get the same error. But if there's no implicit or explicit "keep", e.g. "fileinto INBOX;" as only command, there's no error. Also IMAP-Folders, e.g. "fileinto INBOX.Test", work. Unfortunately, "fileinto INBOX" as default is no option for me, as I use a delimiter and want to let deliver put the mails into the according IMAP-Folders. Is this a known bug? Any Ideas? Thanks, Thomas Here's my dovecot -n output: log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/mail_cip.pem ssl_key_file: /etc/ssl/private/mail_cip.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login first_valid_uid: 501 last_valid_uid: 501 first_valid_gid: 501 last_valid_gid: 501 mail_privileged_group: mail mail_uid: 501 mail_gid: 501 mail_location: maildir:~/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): acl quota imap_quota mail_plugins(imap): acl quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh imap_client_workarounds(imap): delay-newmail netscape-eoh imap_client_workarounds(pop3): pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %f pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 384 user: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir:User quota quota_rule: *:storage=100M quota_rule2: *:messages=5000 quota_warning: storage=95%% /etc/dovecot/quota_warn_size.sh 95 quota_warning2: storage=90%% /etc/dovecot/quota_warn_size.sh 90 quota_warning3: storage=80%% /etc/dovecot/quota_warn_size.sh 80 quota_warning4: messages=95%% /etc/dovecot/quota_warn_count.sh 95 quota_warning5: messages=90%% /etc/dovecot/quota_warn_count.sh 90 quota_warning6: messages=80%% /etc/dovecot/quota_warn_count.sh 80 acl: vfile:/etc/dovecot/acls:cache_secs=300

1 0

[Dovecot] Dovecot auth-worker permission denied.
by Romer Ventura 03 Dec '08

03 Dec '08

Hello, I am trying to get dovecot to use virtual users and authenticate using PAM+kerberos against Active Directory and I am running into some problems. I followed the tutorials from the wiki page from: http://www.linuxmail.info/active-directory-dovecot-pam-authentication/ And here is what I get from the /var/log/mail log: Nov 26 15:12:27 housigma20 dovecot: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=36327 resp=AGxpbnV4dABob3VzdG9u Nov 26 15:12:27 housigma20 dovecot: auth-worker(default): pam(linuxt,127.0.0.1): lookup service=dovecot Nov 26 15:12:27 housigma20 dovecot: auth-worker(default): pam(linuxt,127.0.0.1): pam_authenticate() failed: Permission denied Nov 26 15:12:29 housigma20 dovecot: auth(default): client out: FAIL 1 user=linuxt Nov 26 15:12:31 housigma20 dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<linuxt>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Any ideas..? Other than this: http://www.dovecot.org/list/dovecot/2008-July/032455.html Thanks...! /etc/pam.d/dovecot: auth sufficient pam_krb5.so no_user_check validate account sufficient pam_permit.so Here is my dovecot n and version: # 1.1.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) protocols: pop3 pop3s imap imaps login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:~/Maildir/ mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: static args: uid=1004 gid=1002 home=/home/vmail/%d/%Lu socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

2 2

[Dovecot] Compilation of 1.1.6 fails on HP-UX 11.31
by Marc Beyer 03 Dec '08

03 Dec '08

Hi, $ uname -srv HP-UX B.11.31 U $ cc --version cc: HP C/aC++ B3910B A.06.20 [May 13 2008] Compilation fails, output of configure and make are given below. The cause of this is almost certainly that this version of HP-UX does define the QCMD macro in sys/quota.h (checked in the ifdef line 26 dovecot-1.1.6/src/plugins/quota/quota-fs.h) as well as the dqblk struct, but the latter with different fields than the Linux version. Older versions of HP-UX seem not to have contained this macro(? can't check this at the moment), which is probably why it was used to distinguish between HP-UX and Linux in quota-fs.h. Deleting lines 26-28 and 30 from dovecot-1.1.6/src/plugins/quota/quota-fs.h fixes the problem for HP-UX, but of course a real fix would need to add a more current method of distinguishing between Linux and HP-UX. If there's any more helfpul information you'd like let me know, cheers, Marc configure: ... Install prefix ...................... : /opt/dovecot-1.1.16 File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file Building with password lookup modules : passwd passwd-file pam checkpassword Building with SQL drivers ............: make: ... source='quota-fs.c' object='quota-fs.lo' libtool=yes \ DEPDIR=.deps depmode=hp2 /bin/sh ../../../depcomp \ /bin/sh ../../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -I/opt/openssl/include -g -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED -c -o quota-fs.lo quota-fs.c cc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-dict -I../../../src/lib-index -I../../../src/lib-mail -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/lib-storage/index/maildir -I/opt/openssl/include -g -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED -c +Maked quota-fs.c -DPIC -o .libs/quota-fs.o "quota-fs.c", line 469: error #2136: struct "dqblk" has no field "dqb_curinodes" *value_r = dqblk.dqb_curinodes; ^ "quota-fs.c", line 470: error #2136: struct "dqblk" has no field "dqb_isoftlimit" *limit_r = dqblk.dqb_isoftlimit; ^ 2 errors detected in the compilation of "quota-fs.c". *** Error exit code 1

2 2

[Dovecot] Using namespaces to duplicate mailboxes (Doable?)
by Julio C. Ortega 03 Dec '08

03 Dec '08

Greetings. As part of a new installation of dovecot, we are exploring backup options, and wondered if it's at all possible to define a couple of namespaces where messages get duplicated to be saved in another disk for fast recovery. (we do not intent to load balance between the two, all we would like is to see if it's possible to have duplicate mailboxes so to keep a fast working backup _besides_ normal methods: tape, external disk, etc.) The whole idea behind this would be that in case of a major failure of the array holding the mailboxes, a fast working backup can be put in place. Other thing we would like to know (and i reckon it's a long shot) if it's possible to "hide" this mailbox copy from the IMAP clients, so as to prevent any user from subscribing _again_ to the same folders. Naturally this last thing is to be considered only if the former (mailbox copy trough namespaces or other dovecot _internal_ method) it's at all possible. Any feedback or better ideas are totally welcome. -- --------------------------------- Julio C. Ortega Grupo de Infraestructura ONUVA | Integración de Sistemas http://www.onuva.com

4 6

[Dovecot] data retention and e-discovery rules
by Trever L. Adams 02 Dec '08

02 Dec '08

Hello All, I am in the United States where we have e-discovery rules. Some organizations have to retain data for a certain amount of time, others are required to have a data retention policy. This means that while it should probably be possible for a user to "delete" an email so they do not see it. The server needs to store it, possibly in a tree that mirrors the folder setup of the user (so if it is in "Sales" folder, it should move to namespace "hidden", or similar, in folder "Sales"). Is there anything like this in dovecot? Is it possible to use cron jobs to see when the message was deleted (Maildir) and erase it based on policy? (Python scripts are fine if the users password isn't needed.) Thank you, Trever Adams

3 4

[Dovecot] symlink() failure in 1.2 managesieve
by Bruce A. Mallett 02 Dec '08

02 Dec '08

I've been simultaneously learning about dovecot and experimenting with the 1.2.alpha4. To start I built an rpm under CentOS 5.2 from: dovecot-1.2.alpha4.tar.gz dovecot-1.2-managesieve-0.11.2.tar.gz dovecot-1.2.alpha4-managesieve-0.11.2.diff.gz dovecot-1.2.alpha4.tar.gz dovecot-1.2-sieve-0.1.2.tar.gz and then setup with mysql to use virtual users. Mail-wise, it all works. :) Where I'm having trouble is with the managesieve part. I find that when I activate a sieve script I get a symlink() failure message in /var/log/maillog similar to this: Dec 2 05:12:47 hostname dovecot: MANAGESIEVE(account(a)hostname.com): sieve-storage: Creating symlink() hostname.com/account//.dovecot.sieve to /usr/local/virtual/hostname.com/account/sieve/Test.sieve failed: No such file or directory I began to chase this first by inserting i_info() calls into various points of the managesieve build and later by attaching to the process with gdb. I can see that in sieve_storage_script_activate() the storage->active_path member is incomplete (i.e., is not a full, absolute path name) and the cwd is "/tmp", thus the symlink() call fails. Based on what I've been reading in the documentation, shouldn't the system have resolved the "home" area for the mail to be the same as what is determined for the virtual user mail area? Using the README in the alpha4 package I've found that I can get it to work by adding the following after the "protocol manageseive {}" section: plugin { sieve=/usr/local/virtual/%d/%n/.dovecot.sieve sieve_storage=/usr/local/virtual/%d/%n/sieve } While that helps, I'm a little confused as to why I need to do this. I believe that the documentation states that the sieve defaults to .dovecot.sieve under the MAIL_LOCATION directory. So it is not clear to me if I am doing something wrong, if there is an oversight in the software and/or documentation (or perhaps my reading of it), or is it really necessary to specify the same information multiple times? - Bruce Here is some output that may be of use: -bash-3.2# dovecot -n # 1.2.alpha4: /etc/dovecot.conf # OS: Linux 2.6.18-8.1.8.el5xen x86_64 CentOS release 5.2 (Final) ext3 info_log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s managesieve login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login max_mail_processes: 100 first_valid_uid: 150 last_valid_uid: 150 mail_location: maildir:/usr/local/virtual/%d/%n mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve auth default: mechanisms: plain digest-md5 debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf plugin: sieve: /usr/local/virtual/%d/%n/.dovecot.sieve sieve_storage: /usr/local/virtual/%d/%n/sieve ----- -bash-3.2# grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-mysql.conf driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix password=postfix default_pass_scheme = MD5-CRYPT user_query = \ SELECT maildir as home, 150 AS uid, 12 AS gid FROM mailbox WHERE username = '%u' password_query = select password from mailbox where username='%u'

3 2

[Dovecot] Panic 1.1.x
by Andre Hübner 02 Dec '08

02 Dec '08

Hi, its me again. I still cant use any 1.1 edition because of recurrent panics... At the moment i try 1.1.7, i have again panics and problems with Next message unexpectedly lost dovecot -n # 1.1.7: /etc/dovecot.conf # OS: Linux 2.6.24.4 i686 SUSE LINUX 10.1 (i586) protocols: imap imaps pop3 pop3s ssl_ca_file: /path/path/*.servername.com.bundle.crt ssl_cert_file: /path/path/*.servername.com.crt ssl_key_file: /path/path/*.servername.com.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: servername.com mailserver ready. login_process_per_connection: no login_processes_count: 1 max_mail_processes: 100 verbose_proctitle: yes mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_cache_min_mail_count: 30 mail_debug: yes lock_method: flock mbox_read_locks: dotlock mbox_very_dirty_syncs: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle netscape-eoh tb-extra-mailbox-sep delay-newmail imap_client_workarounds(imap): outlook-idle netscape-eoh tb-extra-mailbox-sep delay-newmail imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): oe-ns-eoh outlook-no-nuls auth default: verbose: yes passdb: driver: shadow userdb: driver: passwd i got some coredumps. first is pop3-panic 2nd imap-panic: gdb /usr/libexec/dovecot/pop3 /home/popuser/username/core GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i586-suse-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `pop3 [username 217.229.109.202]'. Program terminated with signal 6, Aborted. warning: Can't read pathname for load map: Eingabe-/Ausgabefehler. Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 #0 0xffffe410 in __kernel_vsyscall () (gdb) bt full #0 0xffffe410 in __kernel_vsyscall () No symbol table info available. #1 0xb7edb7d0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0xb7edcea3 in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080b71cd in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x80e3520 "pop3 [0x80b71c0] -> pop3 [0x80b721a] -> pop3 [0x80b6b1c] -> pop3(i_stream_read+0xda) [0x80bb69a] -> pop3 [0x80bd57b] -> pop3(i_stream_read+0x2d) [0x80bb5ed] -> pop3 [0x80ad32e] -> pop3(i_stream_read+0"... #4 0x080b721a in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80cac30 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfab4104 "\"\204\r\bQ") at failures.c:430 No locals. #5 0x080b6b1c in i_panic (format=0x80cac30 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 args = 0xbfab4104 "\"\204\r\bQ" #6 0x080bb69a in i_stream_read (stream=0x80f4590) at istream.c:81 _stream = (struct istream_private *) 0x80f4568 ret = 6 __PRETTY_FUNCTION__ = "i_stream_read" #7 0x080bd57b in i_stream_limit_read (stream=0x80f1c50) at istream-limit.c:59 left = <value optimized out> ret = 0 pos = 0 __PRETTY_FUNCTION__ = "i_stream_limit_read" #8 0x080bb5ed in i_stream_read (stream=0x80f1c78) at istream.c:78 _stream = (struct istream_private *) 0x80f1c50 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #9 0x080ad32e in i_stream_header_filter_read (stream=0x80f1d30) at istream-header-filter.c:313 mstream = <value optimized out> ret = 135208240 pos = 0 __PRETTY_FUNCTION__ = "i_stream_header_filter_read" #10 0x080bb5ed in i_stream_read (stream=0x80f1d58) at istream.c:78 _stream = (struct istream_private *) 0x80f1d30 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #11 0x080bb6fd in i_stream_read_data (stream=0x80f1d58, data_r=0xbfab4268, size_r=0xbfab4264, threshold=0) at istream.c:322 ret = 135205628 read_more = false __PRETTY_FUNCTION__ = "i_stream_read_data" #12 0x080b20fc in message_get_body_size (input=0x80f1d58, body=0x80f1380, has_nuls=0x0) at message-size.c:76 msg = (const unsigned char *) 0x0 i = <value optimized out> size = <value optimized out> missing_cr_count = <value optimized out> __PRETTY_FUNCTION__ = "message_get_body_size" #13 0x0807cc81 in index_mail_init_stream (mail=0x80f1280, hdr_size=0xbfab4340, body_size=0xbfab432c, stream_r=0xbfab4354) at index-mail.c:818 data = (struct index_mail_data *) 0x80f12fc #14 0x08064c82 in mbox_mail_get_stream (_mail=0x80f1280, hdr_size=0xbfab4340, body_size=0xbfab432c, stream_r=0xbfab4354) at mbox-mail.c:312 mail = <value optimized out> #15 0x0807b9c6 in index_mail_get_virtual_size (_mail=0x80f1280, size_r=0xbfab43f0) at index-mail.c:365 data = (struct index_mail_data *) 0x80f12fc hdr_size = {physical_size = 0, virtual_size = 0, lines = 0} body_size = {physical_size = 580703221134869339, virtual_size = 13811206796352623048, lines = 134770482} input = (struct istream *) 0xbfab43f0 old_offset = 0 __PRETTY_FUNCTION__ = "index_mail_get_virtual_size" #16 0x08058cf2 in client_create (fd_in=0, fd_out=1, namespaces=0x80ec478) at client.c:85 storage = <value optimized out> ---Type <return> to continue, or q <return> to quit--- inbox = 0x80cab79 "INBOX" client = (struct client *) 0x80ecf68 flags = <value optimized out> errmsg = <value optimized out> error = MAIL_ERROR_NONE __PRETTY_FUNCTION__ = "client_create" #17 0x0805aaf3 in main (argc=Cannot access memory at address 0x69fc ) at main.c:235 No locals. imap-core: gdb /usr/libexec/dovecot/imap /home/popuser/username1/core GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i586-suse-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `imap [username1 80.243.53.138]'. Program terminated with signal 6, Aborted. warning: Can't read pathname for load map: Eingabe-/Ausgabefehler. Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/lib/dovecot/imap/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/lib/dovecot/imap/lib20_mail_log_plugin.so Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 #0 0xffffe410 in __kernel_vsyscall () (gdb) bt full #0 0xffffe410 in __kernel_vsyscall () No symbol table info available. #1 0xb7e807d0 in raise () from /lib/libc.so.6 No symbol table info available. #2 0xb7e81ea3 in abort () from /lib/libc.so.6 No symbol table info available. #3 0x080c451d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:150 backtrace = 0x80f28b0 "imap [0x80c4510] -> imap [0x80c456a] -> imap [0x80c3e6c] -> imap [0x80ca8a4] -> imap(i_stream_read+0x2d) [0x80c893d] -> imap(i_stream_read_data+0x1d) [0x80c8a4d] -> imap(message_parse_header_next+0x7c"... #4 0x080c456a in i_internal_fatal_handler (type=LOG_TYPE_PANIC, status=0, fmt=0x80d7dcc "file %s: line %d (%s): assertion failed: (%s)", args=0xbfa4e634 "Cw\016\bT") at failures.c:430 No locals. #5 0x080c3e6c in i_panic (format=0x80d7dcc "file %s: line %d (%s): assertion failed: (%s)") at failures.c:197 args = 0xbfa4e634 "Cw\016\bT" #6 0x080ca8a4 in i_stream_limit_read (stream=0x810c4f0) at istream-limit.c:83 left = <value optimized out> ret = -1 pos = 30 __PRETTY_FUNCTION__ = "i_stream_limit_read" #7 0x080c893d in i_stream_read (stream=0x810c518) at istream.c:78 _stream = (struct istream_private *) 0x810c4f0 ret = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_read" #8 0x080c8a4d in i_stream_read_data (stream=0x810c518, data_r=0xbfa4e708, size_r=0xbfa4e704, threshold=30) at istream.c:322 ret = -1079711992 read_more = false __PRETTY_FUNCTION__ = "i_stream_read_data" #9 0x080bc75c in message_parse_header_next (ctx=0x811cc58, hdr_r=0xbfa4e760) at message-header-parser.c:89 msg = ( const unsigned char *) 0x8111564 "\t\t\t\t\t\t\tGefahrenquelle vermeiden/beseitigen/reduzieren\n\t\t\t\t\t\t\tD D \n\t\t\t\t\t\t\t \n\t\t\t\t\t\t\tSicherheitstechnische Maßnahmen\n\t\t\t\t\t\t\tB B \n\t\t\t\t\t"... i = 6 size = 30 startpos = 29 colon_pos = 0 parse_size = 29 value_pos = <value optimized out> ret = 6 continued = true continues = <value optimized out> crlf_newline = false __PRETTY_FUNCTION__ = "message_parse_header_next" #10 0x080b9de5 in read_header (mstream=0x8112318) at istream-header-filter.c:163 hdr = (struct message_header_line *) 0x0 highwater_offset = <value optimized out> pos = <value optimized out> ret = <value optimized out> matched = false hdr_ret = 1 __PRETTY_FUNCTION__ = "read_header" #11 0x080ba4e7 in i_stream_header_filter_read (stream=0x8112318) at istream-header-filter.c:293 mstream = (struct header_filter_istream *) 0x0 ret = <value optimized out> pos = <value optimized out> __PRETTY_FUNCTION__ = "i_stream_header_filter_read" #12 0x080ba634 in parse_header (mstream=0x8112318) at istream-header-filter.c:335 pos = 159 #13 0x080ba715 in i_stream_header_filter_seek (stream=0x8112318, v_offset=554, mark=false) at istream-header-filter.c:349 mstream = (struct header_filter_istream *) 0x0 ---Type <return> to continue, or q <return> to quit--- #14 0x080c88c9 in i_stream_seek (stream=0x8112340, v_offset=554) at istream.c:155 _stream = (struct istream_private *) 0x8112318 #15 0x080718e3 in mbox_mail_get_physical_size (_mail=0x810cb28, size_r=0xbfa4e908) at mbox-mail.c:255 mail = <value optimized out> data = (struct index_mail_data *) 0x810cba4 input = (struct istream *) 0x8112340 hdr_size = {physical_size = 552, virtual_size = 566, lines = 14} old_offset = 554 body_offset = 162775 body_size = <value optimized out> next_offset = 10982 #16 0xb7f83aec in mail_log_action (dest_trans=<value optimized out>, mail=0x810cb28, event=<value optimized out>, data=0x8108930 "Gel&APY-schte Elemente") at mail-log-plugin.c:305 lt = (struct mail_log_transaction_context *) 0x8115e50 msgid = 0x810d510 "<20081202003003.E428C68341EB4(a)servername.com>" size = <value optimized out> str = (string_t *) 0x80f2620 pool = <value optimized out> #17 0xb7f83d56 in mail_log_copy (t=0x810b0f8, mail=0x810cb28, flags=0, keywords=0x0, dest_mail=0x0) at mail-log-plugin.c:400 _data_stack_cur_id = 4 name = <value optimized out> #18 0x0805a202 in cmd_copy (cmd=0x80fc9d0) at cmd-copy.c:66 client = (struct client *) 0x80fb548 storage = (struct mail_storage *) 0x80fc108 destbox = (struct mailbox *) 0x8108780 t = (struct mailbox_transaction_context *) 0x810b0f8 search_arg = <value optimized out> messageset = 0x8100ad0 "10359" mailbox = 0x8100ad8 "Gel&APY-schte Elemente" src_uidset = <value optimized out> msg = <value optimized out> sync_flags = <value optimized out> imap_flags = <value optimized out> copy_count = 1 uid_validity = <value optimized out> uid1 = <value optimized out> uid2 = <value optimized out> ret = 1 __PRETTY_FUNCTION__ = "cmd_copy" #19 0x0805e529 in cmd_uid (cmd=0x80fc9d0) at cmd-uid.c:26 command = (struct command *) 0x6 cmd_name = 0x8100ac8 "COPY" #20 0x0805eecc in client_command_input (cmd=0x80fc9d0) at client.c:580 client = (struct client *) 0x80fb548 command = <value optimized out> __PRETTY_FUNCTION__ = "client_command_input" #21 0x0805ef75 in client_command_input (cmd=0x80fc9d0) at client.c:629 client = (struct client *) 0x80fb548 command = (struct command *) 0x4c54 __PRETTY_FUNCTION__ = "client_command_input" #22 0x0805f735 in client_handle_input (client=0x80fb548) at client.c:670 _data_stack_cur_id = 3 ret = <value optimized out> remove_io = <value optimized out> handled_commands = false #23 0x0805f94e in client_input (client=0x80fb548) at client.c:725 cmd = <value optimized out> output = (struct ostream *) 0x80fc90c bytes = 46 ---Type <return> to continue, or q <return> to quit--- __PRETTY_FUNCTION__ = "client_input" #24 0x080cc130 in io_loop_handler_run (ioloop=0x80fa9b0) at ioloop-epoll.c:203 ctx = <value optimized out> event = (const struct epoll_event *) 0x80faae8 list = (struct io_list *) 0x80fb5b8 io = (struct io_file *) 0x810caa0 tv = {tv_sec = 1799, tv_usec = 999911} t_id = 2 msecs = <value optimized out> ret = 1 i = 0 j = 0 call = <value optimized out> #25 0x080cb248 in io_loop_run (ioloop=0x80fa9b0) at ioloop.c:320 No locals. #26 0x0806748c in main (argc=Cannot access memory at address 0x4c54 ) at main.c:293 No locals. I did some bugreports in last time and also compiled dovecot with some changes in guidance from timo to let the bug be more understandable but so far nothing helped. i like dovecot but if these bugs not get solved i cannot upgrade my maschines to > 1.0.15 :( Thanks, Andre

1 0

[Dovecot] Quota & expire problem
by Kari Suomela (DC) 02 Dec '08

02 Dec '08

I have managed to get the master quota working, but cannot get individual user quota to do anything. Here is a line from /etc/dovecot/passwd: _kari@karico.ca:XXXXXXXXX:502:502::/var/mail/vhosts/karico.ca/kari::userdb_quota_rule=*:bytes=600M_ Also, based on this, the expire cron job says: Unknown dict module: db # 1.1.6: /etc/dovecot.conf # OS: Linux 2.6.18-92.1.18.el5.centos.plusxen i686 CentOS release 5.2 (Final) log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log protocols: imap pop3 imaps pop3s listen: 209.222.57.19 ssl_listen: 209.222.57.19 verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: mail.karico.ca ready. login_greeting_capability: yes verbose_proctitle: yes mail_access_groups: virtual mail_location: maildir:~/Maildir mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth external: verbose: yes debug: yes debug_passwords: yes socket: type: connect master: path: /var/run/dovecot/auth-master mode: 384 auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd userdb: driver: static args: uid=virtual gid=virtual home=/var/mail/vhosts/%d/%n socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 plugin: quota: maildir:User quota quota_rule: *:storage=1G quota_rule2: Trash:storage=20%% quota_rule3: Spam:storage=30%% quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=70%% /usr/local/bin/quota-warning.sh 70 expire: Trash 7 Spam 30 expire_dict: db:/var/lib/dovecot/expire.db dict: expire: db:/var/lib/dovecot/expire.db

2 9

[Dovecot] Autocreate plugin for 1.1 - trying to patch under FreeBSD
by Proskurin Kirill 02 Dec '08

02 Dec '08

Hello all. I try to add Autocreate plugin patch to my FreeBSD host. I think I make all wrong. Could you tell me how to patch it? What I do: cd /usr/ports/mail/dovecot make extract cd cd work/dovecot-1.1.6/src/ fetch http://www.dovecot.org/patches/1.1/autocreate-plugin.c sh -x /tmp/patch.sh + export DOVECOT=~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src + gcc -fPIC -shared -g -Wall -I~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src -I~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src/src/lib -I~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src/src/lib-storage -I~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src/src/lib-mail -I~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src/src/lib-imap -DHAVE_CONFIG_H autocreate-plugin.c -o autocreate_plugin.so autocreate-plugin.c:22:17: error: lib.h: No such file or directory autocreate-plugin.c:23:26: error: mail-storage.h: No such file or directory autocreate-plugin.c:24:28: error: mail-namespace.h: No such file or directory autocreate-plugin.c:28: error: 'PACKAGE_VERSION' undeclared here (not in a function) autocreate-plugin.c:31: warning: 'struct mail_namespace' declared inside parameter list autocreate-plugin.c:31: warning: its scope is only this definition or declaration, which is probably not what you want autocreate-plugin.c:33: warning: 'struct mail_namespace' declared inside parameter list autocreate-plugin.c: In function 'autocreate_mailboxes': autocreate-plugin.c:43: warning: implicit declaration of function 'mail_namespace_find' autocreate-plugin.c:43: warning: assignment makes pointer from integer without a cast autocreate-plugin.c:45: warning: implicit declaration of function 'mail_storage_mailbox_create' autocreate-plugin.c:45: error: dereferencing pointer to incomplete type autocreate-plugin.c:46: error: 'FALSE' undeclared (first use in this function) autocreate-plugin.c:46: error: (Each undeclared identifier is reported only once autocreate-plugin.c:46: error: for each function it appears in.) autocreate-plugin.c:49: warning: implicit declaration of function 'i_snprintf' autocreate-plugin.c: At top level: autocreate-plugin.c:54: warning: 'struct mail_namespace' declared inside parameter list autocreate-plugin.c: In function 'autosubscribe_mailboxes': autocreate-plugin.c:64: warning: assignment makes pointer from integer without a cast autocreate-plugin.c:66: warning: implicit declaration of function 'mailbox_list_set_subscribed' autocreate-plugin.c:66: error: dereferencing pointer to incomplete type autocreate-plugin.c:66: error: 'TRUE' undeclared (first use in this function) autocreate-plugin.c: At top level: autocreate-plugin.c:74: warning: 'struct mail_namespace' declared inside parameter list autocreate-plugin.c: In function 'autocreate_mail_namespaces_created': autocreate-plugin.c:77: warning: passing argument 1 of 'autocreate_next_hook_mail_namespaces_created' from incompatible pointer type autocreate-plugin.c:79: warning: passing argument 1 of 'autocreate_mailboxes' from incompatible pointer type autocreate-plugin.c:80: warning: passing argument 1 of 'autosubscribe_mailboxes' from incompatible pointer type autocreate-plugin.c: In function 'autocreate_plugin_init': autocreate-plugin.c:89: error: 'hook_mail_namespaces_created' undeclared (first use in this function) autocreate-plugin.c: In function 'autocreate_plugin_deinit': autocreate-plugin.c:95: error: 'hook_mail_namespaces_created' undeclared (first use in this function) + cp autocreate_plugin.so /usr/local/lib/dovecot/imap/autocreate_plugin.so cp: autocreate_plugin.so: No such file or directory P.S. cat /tmp/patch.sh # replace * with the correct version: export DOVECOT=~/usr/ports/mail/dovecot/work/dovecot-1.1.6/src gcc -fPIC -shared -g -Wall -I$DOVECOT -I$DOVECOT/src/lib \ -I$DOVECOT/src/lib-storage -I$DOVECOT/src/lib-mail \ -I$DOVECOT/src/lib-imap -DHAVE_CONFIG_H \ autocreate-plugin.c -o autocreate_plugin.so # $PREFIX is the installation directory, e.g. /usr/local or /usr: cp autocreate_plugin.so /usr/local/lib/dovecot/imap/autocreate_plugin.so -- Best regards, Proskurin Kirill

2 3

[Dovecot] Feature request: Force leave copy on server
by Bárður Háskor 02 Dec '08

02 Dec '08

It would be very nice, if I could force users to leave a copy on the server when using POP3. This is because users primarily use a web interface to access mail (the web interface uses IMAP), but users can also download messages using POP3. Users who forget to set the "Leave copy on server" get all their messages deleted in the web interface, and mostly they don't want (expect) this behavior. Isn't it possible to create another way to tag POP3 messages as deleted without these being deleted in IMAP? Sincerely, Bardur Haskor

2 2

[Dovecot] Panic in version 1.1.6
by Rob Mangiafico 01 Dec '08

01 Dec '08

Hello, We have seen a few of these panics in 1.1.6. It seems to happen when pine is being used and a POP3 check occurs at the same time (but not always), but I'm not positive this is always the case: --- Nov 22 11:10:32 lexiconn2 dovecot: Panic: POP3(techjm): file istream.c: line 76 (i_stream_read): assertion failed: (_stream-> skip != _stream->pos) Nov 22 11:10:32 lexiconn2 dovecot: POP3(techjm): Raw backtrace: pop3 [0x80c38f0] -> pop3 [0x80c394a] -> pop3 [0x80c324c] -> p op3(i_stream_read+0xda) [0x80c7dda] -> pop3 [0x80c9c6b] -> pop3(i_stream_read+0x2d) [0x80c7d2d] -> pop3 [0x80b9abe] -> pop3(i _stream_read+0x2d) [0x80c7d2d] -> pop3(i_stream_read_data+0x1d) [0x80c7e3d] -> pop3(message_get_body_size+0x5c) [0x80be85c] - > pop3(index_mail_init_stream+0x151) [0x8089571] -> pop3 [0x80717a2] -> pop3(index_mail_get_virtual_size+0x76) [0x80882b6] -> pop3(client_create+0x282) [0x8059c72] -> pop3(main+0x403) [0x805ba83] -> /lib/libc.so.6(__libc_start_main+0xdc) [0x492dec] - > pop3 [0x8059351] dovecot -n # 1.1.6: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-53.1.14.el5 i686 CentOS release 5.2 (Final) protocols: imap imaps pop3 pop3s ssl_cert_file: /usr/local/apache/conf/ssl.crt/lexiconn.com.cert ssl_key_file: /usr/local/apache/conf/ssl.key/lexiconn.com.key ssl_cipher_list: HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login mail_privileged_group: mail mail_location: mbox:~/:INBOX=/var/spool/mail/%u mail_full_filesystem_access: yes mmap_disable: yes fsync_disable: yes mbox_write_locks: fcntl mbox_very_dirty_syncs: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_process_size: 512 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_format: %Lu verbose: yes passdb: driver: shadow userdb: driver: passwd --- We've enabled core dumps to try and get a gdb backtrace the next time this happens. Rob

1 1

[Dovecot] help on MailLocation please!
by Li Wei Nan 01 Dec '08

01 Dec '08

Hi Everyone, I'm now using dovecot with a POP3&SMTP server called JAMES. I want dovecot and james to share the email location. Both dovecot and james can store email in mbox format. However, the james will only store mbox mail repo in a fixed dir, such as: /var/mail/ And it will naming each user's mbox repo by its name, such as /var/ mail/tom or /var/mail/peter, etc. So I have to config dovecot for it to fit the situation. So I config dovecot as: mail_location = mbox:/var/mail:INBOX=/var/mail/%u The inbox get worked now, dovecot can read the mbox file created by james correctly. However, dovecot make each user's Trash, Sent in same directory: /var/mail. So it means all the user just have one Trash, Sent. I've read the Wiki carefully and tried some different config and still cannot get it work. Can anyone gives me some advice on it? Thanks a lot! What I hope to achieve is: - Let dovecot read everyone's inbox at: /var/mail/%u (it's a mbox file, not dir) - Let dovecot store everyone's Trash, Sent in /var/mail/%u/mail Thanks in advance. - Li Wei Nan

2 2

[Dovecot] lda logging directive does'nt work...
by Jean-Claude Barbet 01 Dec '08

01 Dec '08

Hi all, I'm using Postfix + Dovecot with system users (/etc/passwd and NIS) + deliver + cmusieve; Here are some relevant lines in conf files : /etc/postfix/main.cf ... mailbox_command = /usr/lib/dovecot/deliver ... /etc/dovecot/dovecot.conf ... protocol lda { postmaster_address = postmaster(a)lri.fr mail_plugins = cmusieve deliver_log_format = msig=%m : Subject=%s : From=%f :%$ } ... I just want deliver to log more than default format...like procmail... but nothing happens...the line 'deliver_log_format' seems to be ignored. Any idea ?

2 3

[Dovecot] Dovecot POP3 problem: Authentication suddenly fails until dovecot gets restarted
by Carsten Buchenau 01 Dec '08

01 Dec '08

Hi, I am running dovecot with postfix and OTRS2 on a fresh Ubuntu 8.10 Server system. OTRS2 is configured to poll new email to otrs-incoming@localhost via POP3 every 5 minutes. It works, but after approximately 20 hours it suddenly stops working and only a restart of dovecot helps. The outage starts at different times during night (00:15 on Thursday, 1:15 on Friday, 3:20 on Saturday). I checked all cron-jobs, but couldn't find anything matching. Anyone any idea? Thanks, carsten Mail.log: Nov 29 07:10:13 wombat dovecot: auth-worker(default): pam(otrs-incoming,127.0.0.1): pam_start() failed: Critical error - immediate abort Nov 29 07:10:14 wombat dovecot: pop3-login: Aborted login (auth failed, 1 attempts): user=<otrs-incoming>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Dovecot.conf: protocols = pop3 pop3s log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail protocol imap { } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol managesieve { sieve=~/.dovecot.sieve sieve_storage=~/sieve } auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root } dict { } plugin { } /etc/pam.d/dovecot: #%PAM-1.0 @include common-auth @include common-account @include common-session Manual test of POP3 Authentication: root@localhost:/etc/pam.d# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user otrs-incoming +OK pass XXXXXX -ERR Temporary authentication failure.

2 3

[Dovecot] Relay-Ctrl, error message
by Wouter van der Schagt 30 Nov '08

30 Nov '08

Hi all, I'm trying to get Relay-Ctrl to work (as explained on http://wiki.dovecot.org/HowTo/PopBSMTPAndDovecot) however when i add: mail_executable: /usr/local/bin/envdir /etc/relay-ctrl /usr/local/bin/relay-ctrl-chdir /usr/local/bin/dovecot-settcpremoteip /usr/local/bin/relay-ctrl-allow /usr/local/libexec/dovecot/imap to /usr/local/etc/dovecot.conf I get the following error message when doing dovecot -n Error: Error in configuration file /usr/local/etc/dovecot.conf line 126: Expecting '=' Fatal: Invalid configuration in /usr/local/etc/dovecot.conf So I'm guessing i misplaced the line somewhere in the config file. Where should it be placed? Does it work for both pop3 and imap? Sincerely, - Wouter van der Schagt

2 1

[Dovecot] Cache details
by Warren Baker 30 Nov '08

30 Nov '08

Hi All, Is there any specific details we can extract from dovecots authentication cache (besides Authentication cache hits)? Reason i am asking is because we had a mysql user account which was returning a unknown user account. Fixing the one value in the sql result didnt have any affect and Dovecot was still returning an auth failure for the user after 24 hours had elapsed, even though auth_cache_negative_ttl was set to 120. Restarting Dovecot or a SIGHUP on dovecot-auth sorted out the problem. It would be useful if we could interrogate the cache somehow to see what cache entry is been hit. Auth cache settings are as follows: auth_cache_size = 51200 auth_cache_ttl = 2100 auth_cache_negative_ttl = 120 Any suggestions appreciated. Thanks, Warren

2 1

[Dovecot] INTERNALDATE call, timezone randomly changes
by Guy 30 Nov '08

30 Nov '08

Hi guys, I've run into an odd little problem. We use SquirrelMail as the basis for our webmail. Recently I've had a user complaining that the "Received" time on mail in the Sent folder has changed between logins. The change is always been by +1 hours or -5 hours. While checking, our developer had a time changed by +2 hours. On refresh it changed back. He poked through the code and it looks like SquirrelMail gets the received date via an IMAP command: A003 FETCH 1:10 (INTERNALDATE FLAGS BODY.PEEK[HEADER.FIELDS (To Content-Type Subject Date)]) I'm running dovecot 1.1.6, and I'm wondering how that function gets the date and time? If I can isolate the source of the timezone I can try and correct it. The server time shown by "date" is correct and /etc/localtime is /usr/share/zoneinfo/Europe/London (which is correct - I've also se the timezone in /etc/conf.d/clock is set to "Europe/London" now), so I'm wondering where else the information could be coming from? Thanks for any information you can give me to help isolate the problem. Guy -- Don't just do something...sit there!

2 1

[Dovecot] v1.2.alpha4 released
by Timo Sirainen 30 Nov '08

30 Nov '08

http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha4.tar.gz http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha4.tar.gz.sig Note that there are significant changes in this release from alpha3 and I haven't tested everything extensively. Be careful. The next release will hopefully be v1.2.beta1 with a feature freeze. Most importantly shared mailboxes and IMAP ACLs are finally supported. This is mainly thanks to the Kolab people (looks like I forgot your names from NEWS file, the next release will have them). I'll have to write a wiki page about ACLs, but the main thing you need to know is that if you want shared mailboxes to be LISTable by other users, you'll need to specify acl_dict. If you don't expect many shared mailboxes, a file backend is the easiest, but you could also use SQL or Berkeley DB. With a file backend you could also create per-domain files, which will improve performance if you don't need cross-domain shared mailboxes. You could do this with e.g.: acl_file = /home/virtual/%d/shared-mailboxes Also full text searching works now better with virtual mailboxes. Previously the fts would have duplicated the indexes for virtual mailboxes. Now with Solr backend it searches the original mailboxes directly. Although this is still missing some optimizations and also it doesn't check first if mails are missing from the original mailboxes, so it may not find everything. Also this still doesn't work with Squat backend.. Anyway, a bit more code and Dovecot will have fast full text searching from all mailboxes (virtual * mailbox). I implemented also draft-gulbrandsen-imap-response-codes-04, which adds some [codes] for all IMAP command failures, which should make it possible for clients to figure out more easily what caused the failure. Hopefully the draft won't change much anymore. :)

2 2

[Dovecot] Dovecot as proxy for M$ Exchange mailboxes
by Axel Schmalowsky 30 Nov '08

30 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, is there a way to use dovecot as proxy for m$ exchange mailboxes? Currently, our clients not only can login to their mailboxes with their e-mail address but also with their accountid. Both the clients e-mail address and accountid are stored in ldap. Now I need a way to let dovecot rewriting the client's accountid to the respective e-mail address. Is this possible with the proxy-feature of dovecot? Any hints would be appreciated. - -- Freundliche Grüße / Kind regards Axel Schmalowsky Platform Engineer ___________________________________ domainfactory GmbH Oskar-Messter-Str. 33 85737 Ismaning Germany Telefon: +49 (0)89 / 55266-356 Telefax: +49 (0)89 / 55266-222 E-Mail: aschmalowsky(a)df.eu Internet: www.df.eu Registergericht: Amtsgericht München HRB 150294, Geschäftsführer Tobias Marburg, Jochen Tuchbreiter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJL+JKsuqpduCyZM0RAoFUAJ9mPbv5eI5xP54YhwlmOs40F1RxDQCgir5l jCdaNeXKO8FnOCxaKSI7S4E= =m5WN -----END PGP SIGNATURE-----

3 2

Re: [Dovecot] Dovecot - Vpopmail subdirectories
by Yacoubi Mohamed 28 Nov '08

28 Nov '08

Hello, Thank you for this link, but this is not what I want. Dovecot is only used for imap. Currently, authentication works fine, but new fields are created in a subdirectory. Example: /var/vpopmail/domains/0/domain.com Once authenticated, I just want to be in chroot /var/vpopmail/domains/0/domain.com/user and not in /var/vpopmail/domains/domain.com/user I explained that vpopmail which manages the creation of areas and I can not influence the subdirectory. Sincerely, -- Mohamed YACOUBI

2 2

[Dovecot] ManageSieve and invalid scriptname
by Miguel Filho 28 Nov '08

28 Nov '08

Hello there, I have been using pysieved and avelsieve and it has been working great. I decided to do test with the ManageSieve patch and got this problem: Nov 27 17:21:29 cambui dovecot: MANAGESIEVE(miguel): sieve-storage: using active sieve script path: ~/.dovecot.sieve Nov 27 17:21:29 cambui dovecot: MANAGESIEVE(miguel): sieve-storage: using sieve script storage directory: ~/.sieve Nov 27 17:21:29 cambui dovecot: MANAGESIEVE(miguel): sieve-storage: relative path to sieve storage in active link: .sieve/ Nov 27 17:21:29 cambui dovecot: MANAGESIEVE(miguel): sieve-storage: Active sieve script symlink /home/admsis/miguel/.dovecot.sieve is broken: invalid scriptname (points to .sieve/phpscript). Well as you can see, a file without the .sieve is not welcome :-( I checked the RFC and there is no requirement for a .sieve file extension when considering scriptnames. http://tools.ietf.org/html/draft-martin-managesieve-12#section-1.6 Is this a misplaced restriction or it really should be enforced for any reason? I hope that this can be tolerable, or I will have to rename a lot of scripts and remove all hardcoded "phpscript" strings from avelsieve :-( Regards and thanks for the great work. Miguel

3 6

[Dovecot] Sieve and global scripts
by Allan Cassaro 28 Nov '08

28 Nov '08

Hi Stephan Bosch, there's any way to make the dovecot deliver agent (with sieve) load a "global sieve script" before load the user sieve file? I want to create some rules for every one, like: "if header contais: IS SPAM, move to SPAM BOX"... I made this today with a couple of "sed + awk" and a wraper for managesieve-login... but, this is definily not the best way to do this... This is possible to do? (Even with change in the code) Regards. -- "Não deixe a faculdade atrapalhar seus estudos." http://allan.cassaro.googlepages.com

4 3

Re: [Dovecot] UIDL question
by Timo Sirainen 28 Nov '08

28 Nov '08

On Nov 28, 2008, at 6:43 PM, Wouter van der Schagt wrote: >> This mixes v3 syntax with v1 syntax, won't work. > > You're right, after changing it to the v3 syntax i'm getting exactly > the same output in both servers after issuing the UIDL command in a > telnet session. So far so good. > > However, a 2nd copy of the files is still being downloaded. Is this > because the IP has changed? My steps are. > > - Download emails from IP.IP.IP.1 > - Migrate emails > - Confirm manually that UIDL output is the same > - If so, download emails from IP.IP.IP.2 > > And in the last step, im still getting a 2nd copy of all emails. > Where is the fault in my reasoning? Do i need to give dovecot a > message number that was last downloaded? If the UIDLs are exactly the same, I've no idea why the client would download a duplicate. I haven't heard before that a changed IP would be an issue. Of course that would still be a client-specific issue. Sounds a bit unlikely though. Ccing back to list in case someone else has an idea..

2 1

[Dovecot] Namespaces and shared folders
by bbell2000 28 Nov '08

28 Nov '08

I had a working dovecot install before I tried to implement shared folders using namespaces. I added the following to /etc/dovecot/dovecot.conf: namespace private { separator = prefix = inbox = yes } namespace public { separator = / prefix = location = maildir:/home/public/shared/Maildir } </pre> I created my shared folder using the maildirmake command that came with qmail: maildirmake -S /home/public/shared/Maildir maildirmake -s write -f online /home/public/shared/Maildir chown -R dovecot:shared /home/public/shared find /home/public/shared -type d -exec chmod 0777 {} \; find /home/public/shared -type f -exec chmod 0666 {} \; At this point, the online folder shows up as a subscribable folder in Thunderbird. I can subscribe to online and I can still access my Inbox. But I can't get to any of the folders in my Inbox (Trash, Drafts, etc.). I can access these folders if I comment out the namespaces and revert to the default behavior. There are no clues in mail.err, mail.info or mail.warn -- the only messages are the ones written when my client establishes a successful IMAP connection. What did I do wrong? -- View this message in context: http://www.nabble.com/Namespaces-and-shared-folders-tp20727713p20727713.html Sent from the Dovecot mailing list archive at Nabble.com.

3 4

[Dovecot] UIDL question
by Wouter van der Schagt 28 Nov '08

28 Nov '08

Hi all, I'm migrating a Postfix + Dovecot 1.0 server with mboxes to Qmail + Dovecot 1.4 with Maildirs and encounter the following the problem. Using perfect-maildir.pl from: http://perfectmaildir.home-dn.net/ i can relatively succesfully convert the mbox to a Maildir. The problem, however is that clients with "leave mail on server" set to on retrieve all email a 2nd time. I understand this must be because the email client "sees" a different UIDL and downloads the message again. Looking at the 1.0 configuration, i do not see a "pop3_uidl_format" setting. So was wondering how the UIDL is generated. Is anybody aware of a conversion script that properly maintains the UIDL? Or am I misisng something else here? Sincerely, - Wouter van der Schagt

3 8

[Dovecot] Dovecot - Vpopmail subdirectories
by Yacoubi Mohamed 28 Nov '08

28 Nov '08

Hello, I have several thousand domains on a server. I'm doing now migration to Dovecot to replace courier-authlib. Some email accounts are in subdirectories that are automatically created by vpopmail. Example: / var/vpopmail/domains/0/domain.com How do I configure Dovecot? ###################################################### # 1.1.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26.5-sdf103-nfsv4 i686 Gentoo Base System release 1.12.9 ext3 base_dir: /var/run/dovecot/ protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting: Imap ready. first_valid_uid: 89 mail_location: maildir:/var/vpopmail/domains/%d/%n/.maildir auth default: user: vpopmail passdb: driver: vpopmail userdb: driver: static args: uid=89 gid=89 mail=Maildir:/var/vpopmail/domains/%/%d/% n/.maildir ###################################################### Best regards, -- Mohamed YACOUBI

1 0

Re: [Dovecot] anti spam measures
by Johannes Berg 28 Nov '08

28 Nov '08

[please don't drop the list, somebody else might care] On Wed, 2008-11-26 at 07:02 -0700, Trever L. Adams wrote: > Johannes Berg wrote: > > Interesting. Somebody else was reporting the same errors, but I'm not > > seeing them. But I'm still using 1.1.2. I'll review the changes, I > > guess, but if I don't find anything quickly I won't get around to poking > > at it before Christmas. > > > > johannes > > > > I found out what the problem is. In your git tree you have the signature > option set for both dspam and crm114 with both uncommented. Oh, so it's looking for the crm signature? Well, I guess the man-page should have them both commented out, maybe. > Can you provide me with more information on your crm setup? Well, it's a bit complicated, but I'll leave out the SMTP part. When a mail is delivered locally, it's passed to crm114: basically: xfilter "/usr/local/bin/mailreaver" if ( /^X-CRM114-Status: UNSURE/:h ) { to $HOME/Maildir/.UNSURE/ } if ( /^X-CRM114-Status: SPAM/:h ) { to $HOME/Maildir/.SPAM/ } and then in dovecot, I have: plugin { crm114_spam = SPAM crm114_unsure = UNSURE crm114_signature = X-CRM114-CacheID crm114_crm_binary = /usr/local/bin/mailreaver } (I compile my plugin with the option to change the pluginname) johannes

3 6

[Dovecot] Does either version 1.2 or 1.4 support UIDPLUS?
by Robert Nicholson 28 Nov '08

28 Nov '08

My ISP currently runs version 1.2 and I'm looking to make use of UIDPLUS because I want to append and then move the message I've just appended to another folder so then I need the UID in order to address the new message. My ISP says they have plans to upgrade to version 1.4 soon. Do either of these versions support UIDPLUS? ie. give me the new UID as the response to an append?

3 8

[Dovecot] expire tool question
by Jakob Curdes 27 Nov '08

27 Nov '08

Hi, I try to get expire working, with the BDB backend and mbox mailboxes. If I try to invoke the expire-tool like /usr/local/sbin/dovecot --exec-mail ext /usr/local/libexec/dovecot/expire-tool --test I get [root@m ~]# /usr/local/sbin/dovecot --exec-mail ext /usr/local/libexec/dovecot/expire-tool --test Error: read(/var/run/dovecot/dict-server) failed: Remote disconnected Hmm. I searched for hints but could not find a related discussion or problem. Here are the relavant config parts: dict { expire = db:/var/lib/dovecot/expire.db } plugin { # expire plugin expire_dict = proxy::expire expire = backup 7 spam 30 # If you have a non-default path to auth-master, set also: auth_socket_path = /var/run/dovecot/auth-master } Any ideas? Has anybody got this working ? The file /var/lib/dovecot/expire.db doas not exit even though I restarted DC quite a while ago. Regards, Jakob

3 5

Re: [Dovecot] antispam plugin claims "antispam signature not found"
by Eugene 27 Nov '08

27 Nov '08

Jakob Curdes wrote > Some weeks ago I asked a question on the antispam plugin; obviously > nobody could help me. I just worked on it again but made no progress. > Is actually anybody out there running the antispam plugin with dspam?? I > am willing to write a Wiki page for configuring this as soon as I get it > to work. > ..... > - as soon as I move a message into the spam folder it gives an error > message saying "antispam signature not found" Just had this error myself. In my case, the cause was a large spam message (above the configured MaxMessageSize parameter for DSPAM) that was skipped during tests and thus no signature was added. Might this be true in your case? As a general suggestion for Johannes: maybe it is better to ignore this error silently, just move the message and don't call DSPAM? > I checked that the given location for the dspam executable is correct, > that the user executing it (dovecot?) is actually able to execute dspam > and that dspam trusts this user. I triple-checked that the signature is > configured correctly. I have lines like > X-DSPAM-Signature: 1,49084a24139132188715614 Another guess: if that comma is not a misprint, something is wrong in your setup. Regards Eugene

5 5

[Dovecot] Can I import RFC822 messages into Dovecot from file system
by bbell2000 27 Nov '08

27 Nov '08

I'm returning to qmail and dovecot after having suffered a complete failure with a different mail system and I'm now trying to figure out the easiest way to recover our messages from the failed system. The messages are stored as RFC822 in individual files and I can easily identify which message belongs to whom. I have qmail and dovecot configured to use Maildir format. I know I can probably write a script that resends the messages... but in addition to adding another layer of transport headers I really don't want, it's going to be way slow unless I disable my current content filters. I'm new to dovecot and what's got me hung up are the indexes that dovecot maintains in each user's directory. Otherwise, I'd probably try copying the messages into Maildir/cur just to see if it worked. I could sure use some ideas about an efficient, reliable means of getting our old messages back. Thanks. -- View this message in context: http://www.nabble.com/Can-I-import-RFC822-messages-into-Dovecot-from-file-s… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Antispam plugin + script sieve
by Allan Cassaro 27 Nov '08

27 Nov '08

Hi guys, I will start a little script that receive via antispam plugin an email, extract the "from" and "return-path" and create alter the sieve script of the user that send the e-mail. Well, I don't speak english very well (I speak like Borat!!!), but with some examples is better to understand: 1) Some user move an "undesirable" mail to "Automatic Block" folder 2) The antispam plugin call my script 3) The script parse the e-mail and extract the from and return-path mail 4) A rule is added to ~/.dovecot.sieve to dicard messages that came from that e-mail 5) If the user remove the mail from "Automatic Block" folder, the script remove this rule So, my question is: anyone is working on something similar with this? (I don't want to reinvent the wheel) Regards. -- "Não deixe a faculdade atrapalhar seus estudos." http://allan.cassaro.googlepages.com

1 0

[Dovecot] deliver segv on sieve redirect
by Andy Howell 27 Nov '08

27 Nov '08

Hello, I've been trying out the bleeding edge, 1.2.alpha4. I'm having a problem with deliver and dovecot-1.2-sieve-0.1.1. I get a segv on this sieve script: require ["fileinto", "reject", "vacation", "envelope", "regex"]; if header :contains "subject" ["urgent"] { redirect "someone(a)somewhere.net"; fileinto "test"; } Seems its happening on the "redirect". If I put the fileinto before the redirect, the fileinto works. I tried putting extra debug statements in plugins/lda-sieve/lda-sieve-plugin.c right after the sieve_execute in lda_sieve_run, but it never prints anything. I'm guessing thats the right place. Its quite possible there is something amiss in my setup. My logs show: Nov 26 02:51:12 marvin dovecot: deliver(andy(a)x.y.org): sieve: using sieve path: /var/mail/vhosts/x.y.org/andy/.dovecot.sieve Nov 26 02:51:12 marvin dovecot: deliver(andy(a)x.y.org): sieve: opening script /var/mail/vhosts/x.y.org/andy/.dovecot.sieve Nov 26 02:51:12 marvin dovecot: deliver(andy(a)x.y.org): sieve: executing compiled script /var/mail/vhosts/x.y.org/andy/.dovecot.sieve Nov 26 02:51:12 marvin postfix/pipe[17027]: 0CA895CB3A: to=<andy(a)x.y.org>, relay=dovecot, delay=0.41, delays=0.33/0.01/0/0.07, dsn=5.3.0, status=bounced (Command died with signal 11: "/usr/libexec/dovecot/deliver") Thanks, Andy

4 5

[Dovecot] Released Sieve v0.1.2 (important bug fixed)
by Stephan Bosch 26 Nov '08

26 Nov '08

Hello Dovecot users, Today, Andy Howell tripped an important bug in the Sieve interpreter that makes it crash when redirect is executed. That is why I quickly release yet another new version to provide a fix for this bug. I really should prevent this from happening again in the future by extending the test suite to test the execution of actions. Changelog v0.1.2: - Fixed important bug in the redirect action (and probably other actions like reject and vacation that only send messages). This was a bug in the handling of context information during the execution of actions. It caused the sieve interpreter to crash with a segfault when redirect was executed. The release is available here: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.2.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.2.tar.gz.sig Refer to the initial release mail for more information: http://www.dovecot.org/list/dovecot-news/2008-October/000087.html Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

1 0

[Dovecot] [OT] My appreciation for Dovecot
by Christoph Petersen 26 Nov '08

26 Nov '08

Hi guys! I recently switched to Dovecot from Courier with qmail+vpopmail backend. I'm really happy with the switch as all use-cases are more stable and much much faster than before. And the build process is much better as with Courier :) Just wanted to express my appreciation! BR Christoph

2 1

Re: [Dovecot] anti spam measures
by Johannes Berg 26 Nov '08

26 Nov '08

On Wed, 2008-11-26 at 06:30 -0700, Trever L. Adams wrote: > Trever L. Adams wrote: > > I believe it appears you have gone back to dspam, is this correct? No. > > What backend do you use? What version? I am using 3.8.1. I'm using crm114 still. > > I still have problems with your plugin with the hash driver and the > > sqlite3 driver seems to segfault all the time. > > > > Any ideas? Sorry, no. > I just realized it is the dovecot-antispam plugin that is returning the > error of not finding the signature. > > dovecot-1.1.6-2.fc10.i386 is the version of dovecot I am using. > > Looking at the message source, there is indeed an X-DSPAM-Signature line. Interesting. Somebody else was reporting the same errors, but I'm not seeing them. But I'm still using 1.1.2. I'll review the changes, I guess, but if I don't find anything quickly I won't get around to poking at it before Christmas. johannes

1 0

[Dovecot] Dovecot.1.1.6 Authentication problems using PAM+Kerberos
by Romer Ventura 26 Nov '08

26 Nov '08

Hello, This is my first post and it is to consult about an issue I am having. Here is the error I get in my logs: dovecot-auth: pam_krb5[22949]: error resolving user name 'mike' to uid/gid pair dovecot-auth: pam_krb5[22949]: error getting information about 'mike' If I use kinit to authenticate it works with no problems. Any ideas on the issue above..? Thanks..! Here is the dovecot related info: Dovecot n # 1.1.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.16.60-0.21-xenpae i686 SUSE Linux Enterprise Server 10 (i586) protocols: pop3 pop3s imap imaps login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:~/Maildir/ mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd userdb: driver: static args: uid=1002 gid=1002 home=/home/vmail/%d/%Lu socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

1 0

[Dovecot] Unable to use imapflags in sieve
by Guillaume Hilt 25 Nov '08

25 Nov '08

Hello, I'm using dovecot 1.1.6 with libsieve 2.2.5 and I can't use the imapflags extension. Here's the begginning of my .dovecot.sieve file : require ["fileinto"]; #require "imapflags"; #require "reject"; #if header :contains "X-DSPAM-Probability: 0.9" { # addflag "$label3"; #} # On déplace le spam dans le dossier Spam et on s'arrête là if header :contains "X-DSPAM-Result" "Spam" { fileinto "Spam"; # addflag "\\Seen"; stop; } # Si le destinataire est l'user apache, on discarde le mail if address :is "to" "ftp(a)shadowprojects.fr" { discard; } # Listes de diffusion if header :contains "List-Id" "dovecot.dovecot.org" { fileinto "Listes.Dovecot"; stop; } If i enable imapflags (require ["fileinto","imapflags"];) sieve won't work anymore (same with reject by the way). Only enabling it without using it (with addflag) is enough to stop sieve from working. All my emails will be delivered in my inbox despite the rules I use. If I remove imapflags, everything is working fine. And I don't see anything in my logs explaining the problem.

1 1

[Dovecot] [dovecot] Pre-populate index files for mbox
by Jonathan Siegle 25 Nov '08

25 Nov '08

Is there a program written that can be used to build the index files for a given mbox file without using IMAP/POP? If not I'll be happy to donate it when I'm done. The args would be the userid , the full path to the mbox and where to put the index files. -Jonathan

3 4

[Dovecot] Released Sieve v0.1.1 and ManageSieve v0.11.2 for Dovecot v1.2.alpha4
by Stephan Bosch 25 Nov '08

25 Nov '08

Hello Dovecot users, Since the first release of the new Sieve implementation, not that many bugs were reported. This is probably due to the fact that it is not tried yet by that many people. In the mean time, I did find and fix some more bugs myself, I adapted to changes in Dovecot, wrote some more documentation and started work on the enotify extension. Both Sieve and ManageSieve were changed to match API changes in Dovecot and therefore older versions will not compile against the new Dovecot release. Likewise, these new Sieve and ManageSieve releases will not compile for older Dovecot versions. Changelog Sieve v0.1.1: * Re-enabled support for compiling against dovecot headers. Much like cmusieve, command line tools like sievec and sieved are not compiled in this case. * Started implementation of enotify extension. Not anywhere near finished though. * Adapted to changes in Dovecot on various occasions, making this release dependent on Dovecot >= v1.2.alpa4. + Improved logging of errors at specific occasions and added debug messages to find script execution problems quicker. + Removed code duplication between command line tools and the test suite. Also restructured the sources of the tools. + Added UTF-8 to UTF-7 folder name conversion for compatibility with IMAP. + Created man pages for the command line tools. These are automatically installed upon 'make install' + Incorporated Valgrind support into the test suite and fixed a few memory leaks in the process. - Fixed compile error surfacing for gcc3.4. Forgot mask argument for the open() system call when the O_CREAT flag is specified. Bug found by Sergey Ivanov. - Fixed bug in the sievec tool. -d output was always written to stdout. - Fixed important bug in the imap4flags extension. When no :flags argument is specified, the previous version would always use the final value of the internal variable to set the flags. This means that modifications to the internal variable also affected the bare fileinto/keep actions executed earlier. This does not comply to the RFC. - Fixed bug in the include extension's import/export commands. Duplicate import/exports caused problems. - Fixed bug in the handling of non-existent scripts. Errors were sometimes ignored. - Dovecot omitted unfolding multi-line headers. This was added to the cmusieve plugin after the code was incorporated into the new implementation. This is now implicitly fixed by concurrent change in Dovecot. Changelog ManageSieve v0.11.2: * Adapted to changes in Dovecot, making this release dependent on Dovecot >= v1.2.alpa4 The following files are released: Sieve: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.1.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.1.tar.gz.sig ManageSieve package: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.2.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.2.tar.gz.s… ManageSieve patch: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.alpha4-managesieve-0.11.2.d… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.alpha4-managesieve-0.11.2.d… The full story of the new Sieve implementation is available in my previous posting: http://www.dovecot.org/list/dovecot-news/2008-October/000087.html I still need to update the wiki with pointers to the new Sieve implementation. I hope to have some time and motivation to do so in the next few days. Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

1 0

[Dovecot] v1.1.7 released
by Timo Sirainen 25 Nov '08

25 Nov '08

http://dovecot.org/releases/1.1/dovecot-1.1.7.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.7.tar.gz.sig I should have released this earlier since v1.1.6 had that annoying startup problem, but surprisingly few people complained about it so I kind of forgot about it then. BTW. v1.2 progresses nicely. Now that shared mailboxes are finally fully supported, there aren't any widely used IMAP features missing from Dovecot. v1.2.beta1 shouldn't be in too distant future anymore. * IMAP QUOTA extension now returns "MESSAGE" quota, not "MESSAGES". This makes Dovecot now RFC 2087 compliant. Hopefully this change doesn't break anyone's Dovecot-specific quota checking code.. + Added !include and !include_try directives to config file reader. Note that !include doesn't currently work with deliver. The main point here is that ssl_key_password can be placed to a different file with !include_try that deliver can just ignore. + More error/debug message logging improvements. - v1.1.6 gave "userdb didn't return a home directory" error at startup - Some config file parsers (deliver, passwd-file, acl, trash) ignored the file's last line if it didn't end with LF. - fts: SEARCH SUBJECT didn't search messages that weren't already in fts index. - fts-solr: Don't assert-crash if we couldn't connect to Solr. - IMAP: Mailbox deletion gave an error, but still worked, if mails' control directory wasn't the same as index directory. - Several fixes to rarely used mailbox list layout configurations.

6 11

[Dovecot] Panic from 1.1.7
by Mike Abbott 25 Nov '08

25 Nov '08

dovecot: Nov 24 12:49:06 Panic: IMAP(user): file ioloop-notify- kqueue.c: line 66 (event_callback): assertion failed: (io->refcount == 1) dovecot: Nov 24 12:49:06 Error: IMAP(user): Raw backtrace: 2 imap 0x0000000100068e82 default_fatal_finish + 41 -> 3 imap 0x0000000100068eed i_syslog_fatal_handler + 0 -> 4 imap 0x0000000100068687 i_info + 0 -> 5 imap 0x000000010006fc0a event_callback + 216 -> 6 imap 0x000000010006fdea io_loop_handler_run + 272 -> 7 imap 0x000000010006f1bf io_loop_run + 38 -> 8 imap 0x000000010006a319 dotlock_create + 532 -> 9 imap 0x000000010006ac0f file_dotlock_create + 177 -> 10 imap 0x000000010001a925 maildir_uidlist_lock_timeout + 169 -> 11 imap 0x000000010001aa14 maildir_uidlist_sync_init + 66 -> 12 imap 0x0000000100017d48 maildir_sync_context + 299 -> 13 imap 0x000000010001809a maildir_storage_sync_init + 104 -> 14 imap 0x000000010003e183 mailbox_sync + 31 -> 15 imap 0x000000010000bcca imap_status_get + 132 -> 16 imap 0x0000000100005355 cmd_status + 230 -> 17 imap 0x0000000100006cb5 client_command_input + 33 -> 18 imap 0x0000000100006e62 client_command_input + 462 -> 19 imap 0x0000000100006f61 client_handle_input + 239 -> 20 imap 0x00000001000070e8 client_input + 151 -> 21 imap 0x000000010006fdea io_loop_handler_run + 272 -> 22 imap 0x000000010006f1bf io_loop_run + 38 -> 23 imap 0x000000010000e046 main + 1671 -> 24 imap 0x0000000100001558 start + 52 -> 25 ??? 0x0000000000000001 0x0 + 1 Dovecot-1.1.7 on Mac OS X. Fixed by http://hg.dovecot.org/dovecot-1.2/rev/2c111b572eee ? (Just guessing.)

3 4

[Dovecot] PLAIN password scheme question
by Dmitri V. Ivanov 24 Nov '08

24 Nov '08

Hi, ppls There is some problem with using passwd-like file and plaintext passwords within it. Let's assume we have users speaking russian. They think and remember their passwords also within russian words (they just not change keyboard layout before entering their passwords). So if the user has password like ":jgf" (meaning "ass" in russian) and passwords are stored into passwd-like file within {PLAIN} scheme what will happen? ===== user:{PLAIN}:jgf:1234:1234:.... ===== Isn't it a reason to implement something like {HEX} and why? WBR Dmitri Ivanov

2 4

Re: [Dovecot] mbox file too large error with deliver
by Gokdeniz Karadag 24 Nov '08

24 Nov '08

> Timo Sirainen <tss(a)iki.fi> wrote: >> > Setting mailbox_size_limit to 0 made deliveries possible. a limit of >> > 2000000000 (<2GB) also did not show the errors. Thank you ! :) >> > >> > My issue is fixed but deliver might have a bug, so I will explain >> > things, sorry for not being clear previously. >> > >> > Old mail server was 32 bit(an old version of debian) and used >> > procmail for deliveries, that setup worked with the given limit of >> > 5GB and mailbox sizes above 1GB. >> > >> > After migrating to an 64 bit server (debian etch) and dovecot's >> > deliver, the stated delivery errors appeared for mailboxes above 1 >> > GB. As I stated at the beginning of my reply, setting >> > mailbox_size_limit below 2GB made deliveries possible. I tried with >> > edge values, mailbox_size_limit=2147483648 (exactly 2GB) would give >> > the following error in postfix logs: >> > >> > fatal: main.cf configuration error: mailbox_size_limit is smaller >> > than message_size_limit >> > >> > A limit of 2147483648 - 1 worked fine. >> > >> > There are two distinct bugs probably, one in postfix and one in >> > dovecot. > > Postfix clearly is using signed 32bit integer here, which could be > considered a bug. But why do you think there's a bug in Dovecot? Note > that Dovecot never even sees this value. It's the kernel that enforces > it, Dovecot simply reacts to a write() failure. The logs stating the "File too large" errors belong to dovecot's deliver process. While I was searching for a solution, I read that deliver honors mailbox_size_limit setting of postfix, I'm not sure if that is correct or not. Note that the destination mailboxes are smaller than 2GB here, but still gets "File too large" error. The machine is 64-bit, so no fs related kernel limits on file size. I have not dived into postfix and/or dovecot internals, but my guess is , dovecot gets the mailbox size limit and behaves accordingly. If that is the case, the problem can be fixed in dovecot's deliver code. If postfix sets file size limit with ulimit before execing deliver, OR uses a similar process which is out of deliver's control, then there is nothing concerning dovecot. If someone can clarify the issue I would be happy. -- Gokdeniz Karadag

2 1

[Dovecot] pam auth fail considered mail.error?
by David Halik 24 Nov '08

24 Nov '08

Hello all, Following the Dovecot wiki and migration help, we recently migrated our core IMAP systems from Courier to Dovecot on Solaris. So far it's been working great, but I have one issue that I'm curious about. Just as the docs mention, we also use "syslog_facility = mail" for logging. Unlike in the past, failed PAM auth attempts are now getting logged as mail.error: Nov 24 08:34:34 xxx.xxx.xxx.xxx dovecot: [ID 107833 mail.error] auth-worker(default): pam(dhalik,xxx.xxx.xxx.xxx): pam_authenticate() failed: Authentication failed Is there a reason for this, or a way to configure this behavior? mail.error is a little harsh for pam auth failures and I would think that the auth channel would be used instead similar to other processes (sshd, courier, etc) I'd like to continue using the mail facility, but if every time there is an auth error Dovecot reports to mail.error, my consoles and legitimate error logs are going to be full of something considered a non-issue by most. Any help is appreciated, thanks. -Dave -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

2 2

[Dovecot] two dovecot server using the same file system
by Osvaldo Alvarez Pozo 24 Nov '08

24 Nov '08

Hi all. I want to use two servers with dovecot using a common file system with drbd. So I have several questions. If one server write a mail to th file system he will use his name as part of the mail identification. the second server will use his own name. Each server will generate it own mail numbers . When an imap or pop user will consult the mails i shoul be confusion. Am I correct. is there a way of solving this issue?? Thanks

5 6

[Dovecot] Indexes recovery failed
by Daniel Watts 24 Nov '08

24 Nov '08

Hi Timo, Was getting the following error repeatedly in my mail client (squirremail) "error: connection dropped by IMAP server" Looked at the logs for this user and found the following: Nov 19 17:11:32 mink dovecot: IMAP(bobuser(a)maildom.com): broken sync positions in index file /virtual/store2/mail/s/bobuser_maildom.com/Maildir/dovecot.index Nov 19 17:11:32 mink dovecot: IMAP(bobuser(a)maildom.com): fscking index file /virtual/store2/mail/s/bobuser_maildom.com/Maildir/dovecot.index Nov 19 17:11:32 mink dovecot: IMAP(bobuser(a)maildom.com): Fixed index file /virtual/store2/mail/s/bobuser_maildom.com/Maildir/dovecot.index: log_file_tail_offset 2273345664 -> 996 Nov 19 17:11:32 mink dovecot: Panic: IMAP(bobuser(a)maildom.com): file mail-transaction-log.c: line 341 (mail_transaction_log_set_mailbox_sync_pos): assertion failed: (file_offset >= log->head->saved_tail_offset) Nov 19 17:11:32 mink dovecot: IMAP(bobuser(a)maildom.com): Raw backtrace: imap [0x46c772] -> imap [0x46c7e3] -> imap [0x46be56] -> imap [0x452d6d] -> imap(mail_index_sync_commit+0x42) [0x44e022] -> imap(maildir_sync_index_finish+0xdd) [0x42b59d] -> imap [0x42ada1] -> imap(maildir_storage_sync_init+0x64) [0x42af44] -> imap(mailbox_sync+0x1c) [0x43e96c] -> imap(cmd_select_full+0xce) [0x41a2be] -> imap(cmd_select+0xb) [0x41a44b] -> imap [0x41bb7c] -> imap [0x41bc32] -> imap [0x41c3ff] -> imap(client_input+0x63) [0x41c633] -> imap(io_loop_handler_run+0xf8) [0x472ed8] -> imap(io_loop_run+0x1d) [0x471ffd] -> imap(main+0x3c2) [0x423a92] -> /lib/libc.so.6(__libc_start_main+0xf4) [0x7f29213711c4] -> imap [0x416349] Looks like dovecot tried to fix the indexes but failed. I manually deleted all the dovecot.index* files and the account started working. Perhaps dovecot could try the fix but if it still fails just go and delete the indexes itself? Dovecot version 1.1.6 Using Maildirs Over NFS mount If you need any more info just let me know. Regards, Daniel

2 3

Re: [Dovecot] dovecot Digest, Vol 67, Issue 60
by Gokdeniz Karadag 24 Nov '08

24 Nov '08

dovecot-request(a)dovecot.org demis ki:: > Send dovecot mailing list submissions to > dovecot(a)dovecot.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://dovecot.org/cgi-bin/mailman/listinfo/dovecot > or, via email, send a message with subject or body 'help' to > dovecot-request(a)dovecot.org > > You can reach the person managing the list at > dovecot-owner(a)dovecot.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. mbox file too large error with deliver (Gokdeniz Karadag) > 2. Re: mbox file too large error with deliver (Charles Marcus) > 3. Re: mbox file too large error with deliver (Seth Mattinen) > 4. Re: core in lazy_expunge plugin (Timo Sirainen) > 5. Re: mbox file too large error with deliver (Timo Sirainen) > 6. v1.1.7 released (Timo Sirainen) > 7. Re: v1.1.7 released (Dave McGuire) > 8. Re: v1.1.7 released (Laurent Blume) > 9. v1.2.alpha4 released (Timo Sirainen) > 10. Re: v1.1.7 released (Timo Sirainen) > 11. Re: v1.1.7 released (Timo Sirainen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 23 Nov 2008 23:55:15 +0200 > From: Gokdeniz Karadag <gokdenizk(a)gmail.com> > Subject: [Dovecot] mbox file too large error with deliver > To: dovecot(a)dovecot.org > Message-ID: <4929D143.50300(a)gmail.com> > Content-Type: text/plain; charset=UTF-8; format=flowed > > Hi, > > I am using dovecot on debian, with version 1.0.rc15-2etch4. Along with postfix. > > The deliver binary cannot deliver to large mailboxes. I cannot state an exact > size limit but mbox mailboxes above 1GB seem to be affected. > > I have these in in postfix/main.cf > mailbox_command = /usr/lib/dovecot/deliver > mailbox_size_limit = 5120000000 > > The user.log file shows these (I believe if no logging is specified, deliver > binary tries to log with "logger" and they go to user ?) > > user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): write() failed with mbox > file /var/mail/dummy: File too large > user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): > msgid=<4915957C.8090606(a)ceng.metu.edu.tr>: save failed to INBOX > user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): sieve runtime error: > Keep: Generic Error > > The /var/mail/dummy file exists and is 1.9GB, so my filesystem certainly > supports files >1G > > What may be the problem ? > > > dovecot -n output follows : > ---------------------------------------- > > log_timestamp: %Y-%m-%d %H:%M:%S > syslog_facility: local1 > protocols: imaps pop3s > ssl_cert_file(default): /etc/ssl/certs/imap-cert.pem > ssl_cert_file(imap): /etc/ssl/certs/imap-cert.pem > ssl_cert_file(pop3): /etc/ssl/certs/pop-cert.pem > ssl_key_file(default): /etc/ssl/private/imap-key.pem > ssl_key_file(imap): /etc/ssl/private/imap-key.pem > ssl_key_file(pop3): /etc/ssl/private/pop-key.pem > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mail > mail_location: mbox:~/mail:INBOX=/var/mail/%u:INDEX=/var/spool/dovecot/indexes/%u > mbox_read_locks: fcntl dotlock > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle tb-extra-mailbox-sep > imap_client_workarounds(imap): outlook-idle tb-extra-mailbox-sep > imap_client_workarounds(pop3): outlook-idle > pop3_uidl_format(default): > pop3_uidl_format(imap): > pop3_uidl_format(pop3): %08Xv%08Xu > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > auth default: > mechanisms: plain login > passdb: > driver: pam > userdb: > driver: passwd > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: postfix > master: > > > ------------------------------ > > Message: 2 > Date: Sun, 23 Nov 2008 16:59:08 -0500 > From: Charles Marcus <CMarcus(a)Media-Brokers.com> > Subject: Re: [Dovecot] mbox file too large error with deliver > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Message-ID: <4929D22C.8060401(a)Media-Brokers.com> > Content-Type: text/plain; charset=UTF-8 > > On 11/23/2008, Gokdeniz Karadag (gokdenizk(a)gmail.com) wrote: >> dovecot -n output follows : >> ---------------------------------------- >> >> log_timestamp: %Y-%m-%d %H:%M:%S > > Either this is an old version or you snipped the version from the top of > the dovecot -n output... > > What version of dovecot? > > Also, OS/version info may help too... > > Message: 5 > Date: Mon, 24 Nov 2008 00:12:56 +0200 > From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] mbox file too large error with deliver > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Message-ID: <1227478376.20835.1017.camel@hurina> > Content-Type: text/plain; charset="us-ascii" > > On Sun, 2008-11-23 at 23:55 +0200, Gokdeniz Karadag wrote: >> > The deliver binary cannot deliver to large mailboxes. I cannot state an exact >> > size limit but mbox mailboxes above 1GB seem to be affected. >> > >> > I have these in in postfix/main.cf >> > mailbox_command = /usr/lib/dovecot/deliver >> > mailbox_size_limit = 5120000000 > > So this is 5 GB. I don't know how exactly the limits work with 32 bit > systems, but if you get the error with >1 GB files then my guess is that > this 5 GB gets wrapped to 1 GB (5 mod 4 = 1). > >> > user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): write() failed with mbox >> > file /var/mail/dummy: File too large > > Kernel gives this error when it reaches the maximum file size limit. > > If you don't want a limit, just set mailbox_size_limit = 0. Hi, Setting mailbox_size_limit to 0 made deliveries possible. a limit of 2000000000 (<2GB) also did not show the errors. Thank you ! :) My issue is fixed but deliver might have a bug, so I will explain things, sorry for not being clear previously. Old mail server was 32 bit(an old version of debian) and used procmail for deliveries, that setup worked with the given limit of 5GB and mailbox sizes above 1GB. After migrating to an 64 bit server (debian etch) and dovecot's deliver, the stated delivery errors appeared for mailboxes above 1 GB. As I stated at the beginning of my reply, setting mailbox_size_limit below 2GB made deliveries possible. I tried with edge values, mailbox_size_limit=2147483648 (exactly 2GB) would give the following error in postfix logs: fatal: main.cf configuration error: mailbox_size_limit is smaller than message_size_limit A limit of 2147483648 - 1 worked fine. There are two distinct bugs probably, one in postfix and one in dovecot. I guess this is result of using integer values for size limit. values greater than 2GB would wrap and cause warnings in postfix. Probably, my previous limit of 5GB would confuse things and no error was reported. (I don't know how, 5GB cannot be stored in an unsigned int, double overrun makes it within limit ? :) ) Maybe moving to "long long int" for mailbox file size is a possible solution. -- Gokdeniz Karadag

2 1

[Dovecot] mbox file too large error with deliver
by Gokdeniz Karadag 24 Nov '08

24 Nov '08

Hi, I am using dovecot on debian, with version 1.0.rc15-2etch4. Along with postfix. The deliver binary cannot deliver to large mailboxes. I cannot state an exact size limit but mbox mailboxes above 1GB seem to be affected. I have these in in postfix/main.cf mailbox_command = /usr/lib/dovecot/deliver mailbox_size_limit = 5120000000 The user.log file shows these (I believe if no logging is specified, deliver binary tries to log with "logger" and they go to user ?) user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): write() failed with mbox file /var/mail/dummy: File too large user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): msgid=<4915957C.8090606(a)ceng.metu.edu.tr>: save failed to INBOX user.log.3.gz:Nov 8 21:23:01 guvercin deliver(dummy): sieve runtime error: Keep: Generic Error The /var/mail/dummy file exists and is 1.9GB, so my filesystem certainly supports files >1G What may be the problem ? dovecot -n output follows : ---------------------------------------- log_timestamp: %Y-%m-%d %H:%M:%S syslog_facility: local1 protocols: imaps pop3s ssl_cert_file(default): /etc/ssl/certs/imap-cert.pem ssl_cert_file(imap): /etc/ssl/certs/imap-cert.pem ssl_cert_file(pop3): /etc/ssl/certs/pop-cert.pem ssl_key_file(default): /etc/ssl/private/imap-key.pem ssl_key_file(imap): /etc/ssl/private/imap-key.pem ssl_key_file(pop3): /etc/ssl/private/pop-key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/mail/%u:INDEX=/var/spool/dovecot/indexes/%u mbox_read_locks: fcntl dotlock mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xv%08Xu pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master:

4 3

[Dovecot] core in lazy_expunge plugin
by Anton Zakatov 24 Nov '08

24 Nov '08

Hello all! dovecot 1.1.6 Use lazy_expunge plugin call core on connect. Core: bt full #0 lazy_expunge_mail_expunge (_mail=0x2ac06e9b89e8) at lazy-expunge-plugin.c:103 lt = (struct lazy_expunge_transaction *) 0x2ac06e9b86e0 deststorage = <value optimized out> #1 0x000000000041cefc in imap_expunge (box=0x2ac06e988de8, next_search_arg=0x0) at imap-expunge.c:31 ctx = (struct mail_search_context *) 0x2ac06e9b87d0 t = (struct mailbox_transaction_context *) 0x2ac06e9aed10 mail = (struct mail *) 0x2ac06e9b89e8 search_arg = {next = 0x0, type = SEARCH_FLAGS, value = {subargs = 0x0, seqset = 0x0, str = 0x0, time = 0, size = 0, flags = MAIL_DELETED, keywords = 0x0}, context = 0x0, hdr_field_name = 0x0, not = 0, match_always = 0, result = -1} failed = <value optimized out> #2 0x00000000004171da in cmd_expunge (cmd=0x2ac06e982378) at cmd-expunge.c:62 client = (struct client *) 0x2ac06e982000 #3 0x000000000041b53c in client_command_input (cmd=0x2ac06e982378) at client.c:580 client = (struct client *) 0x2ac06e982000 command = <value optimized out> __PRETTY_FUNCTION__ = "client_command_input" #4 0x000000000041b5f2 in client_command_input (cmd=0x2ac06e982378) at client.c:629 client = (struct client *) 0x2ac06e982000 command = (struct command *) 0x0 __PRETTY_FUNCTION__ = "client_command_input" #5 0x000000000041bdaf in client_handle_input (client=0x2ac06e982000) at client.c:670 _data_stack_cur_id = 3 ret = <value optimized out> remove_io = <value optimized out> handled_commands = false #6 0x000000000041bfd3 in client_input (client=0x2ac06e982000) at client.c:725 cmd = <value optimized out> output = (struct ostream *) 0x2ac06e982298 bytes = 11 __PRETTY_FUNCTION__ = "client_input" #7 0x000000000048c568 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:203 ctx = <value optimized out> event = (const struct epoll_event *) 0x2ac06e93edc0 list = (struct io_list *) 0x2ac06e981cb0 io = (struct io_file *) 0x2ac06e981c50 tv = {tv_sec = 1799, tv_usec = 999456} events_count = <value optimized out> t_id = 2 msecs = <value optimized out> ret = 1 i = 0 call = <value optimized out> #8 0x000000000048b6ad in io_loop_run (ioloop=0x2ac06e93eb60) at ioloop.c:320 No locals. #9 0x0000000000423471 in main (argc=<value optimized out>, argv=0x0, envp=0x49a7f7) at main.c:293 Config: dovecot -n # 1.1.6: /etc/dovecot.conf # OS: Linux 2.6.18-92.1.13.el5 x86_64 CentOS release 5.2 (Final) base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.info.log protocols: imap imaps pop3 pop3s managesieve listen: * ssl_listen: * ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: yes verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no verbose_proctitle: yes mail_access_groups: vmail mail_uid: vmail mail_gid: vmail mail_location: maildir:~/:INBOX=~/.INBOX:INDEX=/data/maildata/dovecot/INDEX/%Lu/mail-indexes maildir_stat_dirs: yes maildir_copy_preserve_filename: yes mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/bin/dovecot-imap-proxy mail_executable(imap): /usr/local/bin/dovecot-imap-proxy mail_executable(pop3): /usr/local/bin/dovecot-pop3-proxy mail_executable(managesieve): /usr/local/bin/dovecot-managesieve-proxy mail_plugins(default): quota imap_quota expire fts fts_squat listescape acl antispam zlib autocreate trash mail_plugins(imap): quota imap_quota expire fts fts_squat listescape acl antispam zlib autocreate trash lazy_expunge mail_plugins(pop3): quota expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): dict_db_config: /etc/dovecot/dovecot-db.conf sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /data/maildata/dovecot/sieve/%u sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Archive/ location: maildir:~/archive:INDEX=/data/maildata/dovecot/INDEX/%Lu/archive-indexes:CONTROL=/data/maildata/dovecot/CONTROL/%Lu/archive-control list: yes subscriptions: yes namespace: type: private separator: / prefix: EXPUNGED/ location: maildir:~/expunged list: yes subscriptions: yes namespace: type: private separator: / prefix: DELETED/ location: maildir:~/deleted list: yes subscriptions: yes namespace: type: private separator: / prefix: DELETED/EXPUNGED/ location: maildir:~/deleted/expunged list: yes subscriptions: yes namespace: type: public separator: / prefix: Public/ location: maildir:/data/maildata/mailboxes/%d/public/:INDEX=/data/maildata/dovecot/INDEX/%Lu/public list: yes namespace: type: public separator: / prefix: Public/info/ location: maildir:/data/maildata/mailboxes/%Ld/info:INDEX=/data/maildata/dovecot/INDEX/%Lu/public-info list: yes namespace: type: public separator: / prefix: Public/fax/ location: maildir:/data/maildata/mailboxes/abn.ru/fax:INDEX=/data/maildata/dovecot/INDEX/%Lu/public-fax list: yes namespace: type: public separator: / prefix: Public/info/Archive/ location: maildir:/data/maildata/mailboxes/%Ld/info/archive:INDEX=/data/maildata/dovecot/INDEX/%Lu/public-info-archive list: yes namespace: type: public separator: / prefix: Admins/ location: maildir:/data/maildata/mailboxes/abn.ru/root/:INDEX=/data/maildata/dovecot/INDEX/%Lu/root-indexes list: yes namespace: type: public separator: / prefix: Users/ location: maildir:/data/maildata/mailboxes/%d/shared_users/:INDEX=/data/maildata/dovecot/INDEX/%Lu/shared_users list: yes subscriptions: yes auth default: mechanisms: plain login realms: abn.ru default_realm: abn.ru cache_size: 1000 cache_negative_ttl: 0 username_format: %Lu master_user_separator: * worker_max_request_count: 500 passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: passwd-file args: username_format=%Ln /etc/dovecot/passwd.static passdb: driver: pam args: cache_key=%u%r username=%Ln nochangeuser=yes dovecot userdb: driver: static args: allow_all_users=yes uid=501 gid=501 username=%Ln domain=%Ld home=/data/maildata/mailboxes/%Ld/%Ln socket: type: listen client: path: /var/spool/postfix/private/dovecot-smtp-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota: dict:user:%u:proxy::quotadict quota_rule: *:storage=5G quota_rule2: Trash:storage=500M quota_rule3: spam:ignore quota_rule4: Spam:ignore quota_warning: storage=95%% /usr/local/bin/quota-warn.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warn.sh 80 acl: vfile:/data/maildata/dovecot/dovecot-acls:cache_secs=300 trash: /etc/dovecot/trash.conf expire: Trash 7 Trash/* 7 Spam 14 spam 14 spam/* 14 expire_dict: proxy::expiredict lazy_expunge: EXPUNGED/ DELETED/ DELETED/EXPUNGED/ autocreate: spam autosubscribe: spam fts: squat fts_squat: partial=4 full=10 antispam_trash: trash;Trash;Deleted Items; antispam_spam: SPAM;spam;Spam;Junk;&BB0ENQQ2BDUEOwQwBE~E8- &BD8EPgRHBEIEMA-;junk antispam_mail_sendmail: /usr/local/bin/spam-train antispam_mail_sendmail_args: --for;%u antispam_mail_spam: spam antispam_mail_notspam: ham antispam_mail_tmpdir: /tmp dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf expiredict: mysql:/etc/dovecot/dovecot-dict-expire.conf

2 1

[Dovecot] OT: Run Sieve On A Mailbox Manually
by Neil 22 Nov '08

22 Nov '08

(Apologies for being offtopic.) The subject basically says it all...does anyone know of a tool to run a sieve script on a mailbox (in particular, Maildirs) manually? Ideally, I'd like to do it without adding a bunch of new headers to the mail. So, could I just do a find (or for-loop, if it was just one maildir) command and pipe all the mails into deliver..? Thanks, Neil.

2 3

[Dovecot] folder deletion response problem
by Amr Shahin 22 Nov '08

22 Nov '08

dovecot version: 1.1.6 dovecot -n output # 1.1.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-53.el5PAE i686 CentOS release 5.2 (Final) ext3 log_path: /usr/local/dovecot/log protocols: imap ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login last_valid_uid: 510 mail_location: maildir:/var/mails/%n:CONTROL=/var/no-quota/%n mail_executable: /usr/local/dovecot/libexec/dovecot/imap mail_plugins: quota imap_quota mail_plugin_dir: /usr/local/dovecot/lib/dovecot imap_capability: IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 AUTH=PLAIN auth default: executable: /usr/local/dovecot/libexec/dovecot/dovecot-auth debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir:User quota quota_rule: *:storage=1G quota_rule2: Trash:ignore quota_rule3: Spam:ignore sieve: /var/sieve-scripts/%n.sieve ============================================= grep -v '^ *$#.*$\?$' output: auth_debug=yes protocols = imap disable_plaintext_auth = no log_path = /usr/local/dovecot/log ssl_disable = yes login_user = dovecot mail_location = maildir:/var/mails/%n:CONTROL=/var/no-quota/%n first_valid_uid = 500 last_valid_uid = 510 first_valid_gid = 1 last_valid_gid = 0 protocol imap { login_executable = /usr/local/dovecot/libexec/dovecot/imap-login mail_executable = /usr/local/dovecot/libexec/dovecot/imap imap_capability = IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 AUTH=PLAIN mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/dovecot/lib/dovecot } protocol pop3 { } protocol lda { postmaster_address = amrnablus(a)gmail.com hostname=maktoob.com mail_plugins = quota cmusieve mail_plugin_dir = /usr/local/dovecot/lib/dovecot/lda/ sendmail_path=/usr/sbin/sendmail.postfix auth_socket_path = /var/run/dovecot/auth-master mode = 384 } auth_executable = /usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms = plain user = root passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 } client { path = /var/run/dovecot/auth-client mode = 0660 } } userdb passwd { } user = root } dict { } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:ignore quota_rule3 = Spam:ignore sieve = /var/sieve-scripts/%n.sieve } ================================== the problem is that when i try to delete an existing directory in a mailbox, it gets actually deleted, but the response says that the mailbox does not exist, please check this log: 1 login <username> <password> 1 OK Logged in. 1 Create AAA 1 OK Create completed. 1 list "" "*" * LIST (\HasNoChildren) "." "TestDir" * LIST (\HasNoChildren) "." "Contacts" * LIST (\HasNoChildren) "." "Calendar" * LIST (\HasNoChildren) "." "Notes" * LIST (\HasNoChildren) "." "Tasks" * LIST (\HasNoChildren) "." "Spam" * LIST (\HasNoChildren) "." "Draft" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Journal" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "AAA" * LIST (\HasNoChildren) "." "INBOX" 1 OK List completed. 1 Delete AAA 1 NO Mailbox doesn't exist: AAA 1 list "" "*" * LIST (\HasNoChildren) "." "TestDir" * LIST (\HasNoChildren) "." "Contacts" * LIST (\HasNoChildren) "." "Calendar" * LIST (\HasNoChildren) "." "Notes" * LIST (\HasNoChildren) "." "Tasks" * LIST (\HasNoChildren) "." "Spam" * LIST (\HasNoChildren) "." "Draft" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Journal" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "INBOX" 1 OK List completed. 1 logout * BYE Logging out 1 OK Logout completed.

3 2

[Dovecot] mail_privileged_group not working for dotlock files (1.1.6)
by Rob Mangiafico 22 Nov '08

22 Nov '08

Hello, Running dovecot 1.1.6 on centOS 5 and RHEL 5. With the settings: pop3_lock_session = yes mail_privileged_group = mail mail_location = mbox:~/:INBOX=/var/spool/mail/%u mbox_read_locks = fcntl mbox_write_locks = dotlock fcntl and /var/spool/mail permissions: drwxrwx--x 2 root mail 4096 Nov 19 10:16 mail/ Trying to connect via POP3 results in this error: --- Nov 19 09:31:01 lexiconn2 dovecot: child 32127 (pop3) killed with signal 11 Nov 19 09:31:01 lexiconn2 dovecot: POP3(cerberus): file_lock_dotlock() failed with mbox file /var/spool/mail/xxx: Permission denied Nov 19 09:31:01 lexiconn2 dovecot: pop3-login: Login: user=<xxx>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, secured --- The docs seem to indicate the above config / settings should work. Is this a bug? The reason we have dotlock as the primary format is due to procmail LDA from sendmail: --- procmail -v 2>&1|grep Locking Locking strategies: dotlocking, fcntl() --- I assume we have to make the "mbox_write_locks" match the procmail locking... Thanks. Rob

2 3

[Dovecot] expire-tool fails if mail_location contains %h
by Thorsten Vollmer 21 Nov '08

21 Nov '08

Hi Timo, not long ago you fixed a bug regarding the expansion of ~/ in mail_location that prevented expire-tool from working correctly. A similar problem exists if mail_location contains %h: expire-tool will use the wrong path to access the mailbox. After replacing %h with ~, expire-tool works as expected. Why are there two variables for the home directory? Maybe the use of %h could be discouraged, sparing you some problems. Regards, Thorsten

2 2

[Dovecot] Separate quotas not displayed correctly
by Laurent Blume 21 Nov '08

21 Nov '08

Hello all, My system is set up to have quotas both on /var/mail, where emails are received, and on /export/home, where users' homedirs are. But the client (Thunderbird) shows the same /export/home values both for the Inbox and for the folders in the homedir, so a user cannot know where she stands on her /var/mail use. This is Dovecot 1.1.5. As per the wiki, the dovecot.conf file contains this: quota = fs:INBOX:mount=/var/mail quota2 = fs:Others:mount=/export/home A sample user: # quota -v testimap Disk quotas for testimap (uid 1143): Filesystem usage quota limit timeleft files quota limit timeleft /export/home 6490 10000 15000 0 0 0 /var/mail 0 20000 25000 0 0 0 When Icheck the Quota tab in the Properties of the Inbox, the field contains "Others", and the value are 6490 out of 10000. Any idea why this doesn't display the value of /var/mail? Laurent -- / Leader de Projet & Communauté | I'm working, but not speaking for \ G11N http://fr.opensolaris.org | Bull Services http://www.bull.com / FOSUG http://guses.org |

2 5

[Dovecot] FW: nfs troubles
by Bas van Oosterum 21 Nov '08

21 Nov '08

Hi all, I upgraded to dovecot 1.1.6 to be able to use NFS. Got a little issue: I can't move mail to another IMAP folder (so I can't delete to: moving to .trash does not work. Error message Oct 31 11:07:45 jozua-mailserver dovecot: IMAP(nicolette(a)kerknet.org): fdatasync_path(/var/mail/kerknet.org/nicolette/Maildir/.Trash/cur) failed: Invalid Argument I tried to use ll sorts of locking: no difference Who can help? Regards, Bas

2 3

[Dovecot] Dovecot and Bogofilter
by Matthias-Christian Ott 21 Nov '08

21 Nov '08

Hi, on my small Xen-virtualised server with 48 MiB RAM I use Postfix and Dovecot, because the Debian administrators dislike qmail [1], which is in my opinion despite some maintainability and code quality issues a quite well designed software, because it mostly follows the UNIX principles. Postfix is not able to sort my E-Mail into different Maildir folders and after I looked at procmail's source code, I decided to use Dovecot's LDA, because it supports sieve via a plugin. All in all it worked after some tweaking and Dovecot is now responsible for authentication and delivery. Furthermore I want to setup a spam filter and due to the memory constraints I decided in favour of bogofilter (I made no real world tests, but the authors claim that it's fast and has a small memory footprint). My first idea was train bogofilter via a cronjob that runs bogofilter for each E-Mail in my spam folder and deletes them afterwards. Then I stumbled upon the dovecot antispam [2] plugin and quickly wrote a backend for bogofilter. During the development I realised that bogofilter has to update the X-Bogosity header of the reclassified E-Mails. Johannes Berg told me that he wasn't sure whether dovecot would be able to do this and recommended to ask this on the mailing list. An other problem is that each mail needs to be initially classified and due to the fact that sieve is not able to execute external programmes, deliver has to do this task. I'm currently thinking of possibilities to implement this, so far I came up with the following: 1. Write a generic pipe plugin which can execute an arbitrary number of programmes. The problem with this is that I'm not sure how to integrate this is in Dovecot's configuration file. I thought of something like this: pipe = prg1 | prg2 2. Write a bogofilter-specific plugin for this. Anyhow I would like to take this opportunity to criticise Dovecot for being a bloated (unnecessary abstractions, verbose, pseudo object-oriented, ...), non-suckless [3] and non-unixish (plugin architecture, monolithic design, ...) software which in return works quite well and stable so far. I appreciate any suggestions, ideas or criticism. I would really like to finish configuring my mail server as soon as possible. Regards, Matthias-Christian [1] http://smarden.org/pape/Debian/1215531259.4854_332.werc [2] http://johannes.sipsolutions.net/Projects/dovecot-antispam [3] http://www.suckless.org/common/

9 16

[Dovecot] nfs_flush_fcntl failed: No locks available
by Mark Zealey 21 Nov '08

21 Nov '08

Hi there, I've been seeing this error in our logs quite frequently on our nfs storage (v3): 2008-11-10T13:24:26+00:00 mail8 dovecot: IMAP(XXX(a)YYY.com): nfs_flush_fcntl: fcntl(/var/spool/mail/XXX/Maildir/dovecot.index.cache, F_RDLCK) failed: No locks available Which is because we don't run lockd on our servers. Why is dovecot trying to use fcntl() ? I explicitly set it to use dotlocks in the dovecot config: # 1.1.6: /etc/dovecot.conf # OS: Linux 2.6.18-92.el5 i686 CentOS release 5.2 (Final) base_dir: /var/run/dovecot/ protocols: imap pop3 mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock maildir_copy_preserve_filename: yes mbox_write_locks: dotlock This happens for both pop and imap (however more frequently with imap). Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 2

[Dovecot] For Configuration Help: per-user quota for virtual users.
by sales＠100n.org 21 Nov '08

21 Nov '08

Dear dovecot list: Could any experts help me on the configuration of per-user for dovecot on FreeBSD 7.x with postfix-2.5.4,1. I followed the howto of http://workaround.org/articles/ispmail-etch/, it is an excellent file, my mailserver worked very well. When I configured per-user quota plug-in, quota_rule with 20MB limits can not be overrided by the Mysql query statement, Although I followed the document at : http://wiki.dovecot.org/Quota. Below is the output of dovecot --version, dovecot -n and dovecot-sql.conf. Could any experts help me? Thanks in advance ! Best Regards, Forrest --------------------------------- ns1# dovecot --version 1.1.2 ns1# dovecot -n # 1.1.2: /usr/local/etc/dovecot.conf protocols: imap pop3 pop3s imaps login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:/home/vmail/%d/%n/Maildir mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir quota_rule: *:storage=20M quota_rule2: Trash:storage=10M quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 ns1# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=****** user=****** password=******** default_pass_scheme = PLAIN-MD5 password_query = SELECT email as user, password FROM view_users WHERE email='%u'; user_query = select 5000 as uid, 5000 as gid, '/home/vmail/%d/%n' as home, \ concat('*:bytes=', quota_bytes) as quota_rule \ from email_quota where email = '%u'

2 1

[Dovecot] Problem witch dovecot-auth continue
by Grzegorz Zalewski 21 Nov '08

21 Nov '08

I`m forgot paste rest of the log: dovecot: 2008-11-07 10:16:44 Panic: auth(default): file auth-worker-server.c: line 54 (auth_worker_idle_timeout): assertion failed: (array_count(&conn->requests) == 0)

2 1

[Dovecot] Per User Quotas
by Peter Fraser 21 Nov '08

21 Nov '08

HI All Asking for a little patience and a bit of help here. I'm using dovecot-1.1.3_1 with postfix and squirrelmail. I have implemented a global quota successfully. That works fine. I want to now implement per user quotas. So far I have read the howto in the documentation and searched several threads but can't seem to get it working properly. My LDAP server is Windows 2003 Active Directory. Is there any documentation specific to AD that I could look at or any other doc that could help me? My last effort was to put this in dovecot-ldap.conf user_attrs = streetAddress=quota_rule4=*:storage=%$M ,=uid=1002,=gid=1002,=home=/home/vmail/%u and this in dovecot.conf in addition to the other quota rules. quota_rule4 = *:bytes=%$ I then put the quota in the streetAddress area of AD. I'd certainly appreciate any help. Thanks.

2 4

[Dovecot] make archive emails undeletable?
by Rob Nichols 21 Nov '08

21 Nov '08

I've been using dovecot for a year or two now, and really like it. I have a fairly simple setup, but I think it's time to get a little more advanced. I keep an "archive" of all my email, both sent and received. Every once in a while I get confused, and accidentally delete something from my archive. I also worry that I'll misconfigure a mail client some day and accidentally wipe out my "trash" folder. I would like some way to prevent deletion in several mailboxes. Is that possible? It looks like ACL could do this, but I can't quite figure out where to start. Any pointers would be greatly appreciated. Thanks, Rob

2 1

[Dovecot] Disconnecting without unbinding?
by Maykel Moya 21 Nov '08

21 Nov '08

Timo Please have a look at this short thread[1]. That message stops appearing whenever I shutdown dovecot. I'm using dovecot 1.0.15. dovecot-ldap.conf ----------------- dn = ... dnpass = ... ldap_version = 3 auth_bind = no base = ... pass_filter = ... pass_attrs = ... user_filter = ... user_attrs = ... default_pass_scheme = MD5-CRYPT user_global_uid = vmail user_global_gid = vmail Regards, maykel [1] http://www.openldap.org/lists/openldap-software/200811/msg00078.html --------------------------------------- Red Telematica de Salud - Cuba CNICM - Infomed

2 1

[Dovecot] Auth Issues - Urgent - Help!
by David Cunningham 21 Nov '08

21 Nov '08

After a few hours of running, I get tons of the following errors in my logs: dovecot: Oct 08 07:41:50 Error: auth(default): ldap(user(a)domain,x.x.x.x): Request queue is full I removed the username and IP, obviously. Any idea how to stop this? I have about 5 Thousand users using horde that login ever 1-5 minutes to refresh their page. I assume it is a setting, but I am confused as to why it doesn't happen almost right away. It seems to take some time to build up. Please help! This is taking my webmail system down hourly.

6 20

[Dovecot] Error message in logs since 1.1.6 upgrade
by Guy 21 Nov '08

21 Nov '08

Hi, I've got two imap boxes, one is running 1.1.5 and hasn't exhibited the error below, but the one that's been upgraded to 1.1.6 is showing them. Nov 14 16:06:31 mink dovecot: imap-login: Disconnected (no auth attempts): rip=x.x.x.x, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac If this isn't already a known error, is there any extra data I can collect that would help diagnose what's causing it? I haven't a clue where to start with this sort of debugging I'm afraid. Thanks Guy -- Don't just do something...sit there!

2 1

[Dovecot] sieve-body extension support for deliver LDA's sieve plugin
by BrunoM 21 Nov '08

21 Nov '08

Hello, I just read your message about sieve and body-extension in Dovecot. Do you have news on that topic? I just have to filter mails containing a particular text fragment, and I cannot do without sieve body, I think.. Thank you for any clue you'd be able to give me ! Regards, Bruno --- Hi Timo & Co, Is there any time frame for updating the deliver LDA's sieve plugin code to that from Cyrus IMAPd v2.3.x? I ask as I'm looking for the functionality of the sieve-body extension, as described here: http://www.ietf.org/internet-drafts/draft-ietf-sieve-body-06.txt This requirement has come up as we're upgrading from a Courier-IMAP/maildrop configuration that has some filtering based on message body content. As an aside, if that time frame is undefined or will be long, if I use maildrop instead as my LDA, will I loose the instant delivery notification via IMAP IDLE? Thanks very much, Scott

2 1

[Dovecot] %d in deliver
by Mark Zealey 21 Nov '08

21 Nov '08

Hi there, I run a system that has a lot of virtual users. We invoke deliver from exim and pass the directory to deliver into using the HOME environment variable, so deliver doesn't do any database lookups during the delivery process. The exim pipe environment is described at http://exim.org/exim-html-current/doc/html/spec_html/index.html#toc0239, but basically I'd like to know the domain as well as the user, however deliver doesn't seem to pick this up. Is there any way that you could extend deliver to make it either pick up the domain (or correct username) from the command line, but not do an authdb lookup; or get it to read the domain from an environment variable (or be able to print the contents of an arbitrary environment variable in a formatted string)? Thanks, Mark -- Mark Zealey -- Shared Hosting Team Leader Product Development * Webfusion 123-reg.co.uk, webfusion.co.uk, donhost.co.uk, supanames.co.uk This mail is subject to http://www.gxn.net/disclaimer

2 1

[Dovecot] namespace public / namespace shared - question
by Michal Soltys 21 Nov '08

21 Nov '08

After looking through wiki/config/list I'm still not sure, what exactly is the difference between those two. Even all the examples in dovecot's wiki don't have a single "namespace shared" anywhere. And there's only short mention about the difference in dovecot.conf . Peeking into rfc2342 - would shared namespace relate to "Other Users' Namespace(s)" and public namespace to "Shared Namespace(s)" ? Does perhaps the difference only lie on the client side, depending on the namespace it's asking, while functionally it's the same from the perspective of dovecot ?

2 1

[Dovecot] userdb, Dovecot LDA not using mail_location config properly?
by k bah 21 Nov '08

21 Nov '08

I use Dovecot 1.0.5. I use LDAP for the user database and Dovecot LDA. --- dovecot.conf mail_location = maildir:/var/spool/mail/data/%Lu:INDEX=/var/spool/mail/index/%Lu auth default { mechanisms = plain (Note: TLS is used anyways..) userdb prefetch { } passdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf args = /etc/dovecot/dovecot-ldap.conf_passdb (symlink do dovecot-ldap.conf) } userdb ldap { # Path for LDAP configuration file, see doc/dovecot-ldap-example.conf args = /etc/dovecot/dovecot-ldap.conf_userdb (symlink do dovecot-ldap.conf) } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = maildeliver group = mail } } } --- dovecot-ldap.conf Q1: auth_bind_userdn (commented since it would avoid the use of passdb and userdb, right?) # auth_bind_userdn = ... # userdb user_filter = (&(objectclass=postfixuser)(mail=%u)) user_attrs = uid=user # passdb pass_filter = (&(objectclass=inetlocalmailrecipient)(uid=%u)) pass_attrs = uid=user,userPassword=password,uid=userdb_user --- mail log host postfix/smtpd[8923]: connect from localhost[127.0.0.1] host postfix/smtpd[8923]: 5B449EA2C6: client=localhost[127.0.0.1] host postfix/cleanup[8925]: 5B449EA2C6: message-id=<20081121103114.5B449EA2C6@host> host postfix/smtpd[8923]: disconnect from localhost[127.0.0.1] host postfix/qmgr[8894]: 5B449EA2C6: from=<sender(a)otherdomain.org>, size=368, nrcpt=1 (queue active) host deliver(person(a)mydomain.com): Loading modules from directory: /usr/lib/dovecot/modules/lda host deliver(person(a)mydomain.com): Module loaded: /usr/lib/dovecot/modules/lda/lib10_quota_plugin.so host dovecot: auth(default): master in: USER 1 person(a)mydomain.com service=deliver host dovecot: auth(default): prefetch(person(a)mydomain.com): passdb didn't return userdb entries (#0) host dovecot: auth(default): ldap(person(a)mydomain.com): user search: base=dc=mydomain,dc=com scope=subtree filter=(&(objectclass=postfixuser)(mail=person(a)mydomain.com)) fields=uid host deliver(person(a)mydomain.com): auth input: person(a)mydomain.com (#1) host deliver(person(a)mydomain.com): auth input: user=person~mydomain.com host deliver(person(a)mydomain.com): auth input: uid=501 host deliver(person(a)mydomain.com): auth input: gid=12 (#2) host deliver(person(a)mydomain.com): maildir: data=/var/spool/mail/data/person@mydomain.com:INDEX=/var/spool/mail/index/person@mydomain.com (#3) host deliver(person(a)mydomain.com): maildir: root=/var/spool/mail/data/person(a)mydomain.com, index=/var/spool/mail/index/person(a)mydomain.com, control=, inbox= host dovecot: auth(default): master out: USER 1 person(a)mydomain.com user=person~mydomain.com uid=501 gid=12 host deliver(person(a)mydomain.com): msgid=<20081121103114.5B449EA2C6@host>: saved mail to INBOX host postfix/pipe[8929]: 5B449EA2C6: to=<person(a)mydomain.com>, relay=dovecot, delay=0.69, delays=0.19/0.02/0/0.48, dsn=2.0.0, status=sent (delivered via dovecot service) host postfix/qmgr[8894]: 5B449EA2C6: removed What I don't get is that since I use userdb (read mail log lines marked (#0-3) and the "mail_location" option from dovecot.conf), mail should be saved to "person~mydomain.com" and not "person(a)mydomain.com" on the disk(?). Q2: Did I misunderstood the meaning of userdb/mail_location, is that right (this behavior)? Q3: Is it misconfigured? I want to save mail on the disk to person~mydomain.com, when I get that right (save mail to what line #1 tells is "user"), I'll use mailRoutingAddress (my mailroutingaddress = person~mydomain.com(a)mydomain.com, mail_location would use %Ln). The passdb and userdb prefetch are working ok on the user is checking mail. thanks = PathMaker for Six Sigma Complete low-cost Six Sigma toolset. Equip your black and green belts. http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=1198ebf9f950733925452d3… -- Powered by Outblaze

2 1

[Dovecot] CRAM-MD5 and proxy_maybe
by David Jonas 20 Nov '08

20 Nov '08

When using proxy_maybe CRAM-MD5 authentication fails when the connection is proxied. Is this expected behavior? Is proxy_maybe too simplified for this case? We're using SQL so I could rewrite the query with IFs to fake proxy_maybe and return the password as NULL and nologin as Y, but if it works that way couldn't it work with proxy_maybe? This works: password_query = \ SELECT NULL AS password, host, CONCAT(user,'@',domain) AS destuser \ 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy \ FROM accounts WHERE class='pop' AND domain='%d' This doesn't work if proxied and CRAM-MD5 auth: password_query = \ SELECT \ CONCAT(user,'@',domain) AS user, password, \ host, 'Y' AS proxy_maybe, \ target AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \ FROM accounts WHERE \ class='pop' AND domain='%d' AND user='%n' \ LIMIT 1 Thanks, David

2 3

[Dovecot] Sieve RFC5229 support?
by list_dovecot＠bluerosetech.com 20 Nov '08

20 Nov '08

I'd like to take advantage of RFC5229 match variables (it would reduce the number of rules I have by an order of magnitude); however, the required extension isn't supported yet. Am I mistaken? If not, are there plans to support it?

2 1

[Dovecot] Unbreakable NFS locking issues...
by Rod Treweek 20 Nov '08

20 Nov '08

Hello All, We are struggling to find a solution to a problem we are encountering with a load-balanced email setup. Currently, we have a Coyote loadbalancer, and 3 Postfix/Dovecot nodes that then get their information from a mysql database. The problem is that after a couple weeks, we start seeing NFS locking issues occur, which then takes email completely down, requiring a site visit to basically do an interactive mode reboot to shut off NFS so that we can remount the filesystem again. We have our mailstore on an Aberdeen NAS which is accessed over NFS v. 4. Dovecot version 1.1.2 Here's the relevant mysql string: grep -v '^ *$#.*$\?$' dovecot-mysql.conf driver = mysql connect = host=X.X.X.X dbname=Something user=Something password=Something password_query = SELECT username as user, password, concat('/NFS1MAILDIR/mailSysV2/', maildir) as userdb_home, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as userdb_mail, 143 as userdb_uid, 143 as userdb_gid, concat('*:bytes=', floor(quota*1024)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' user_query = SELECT concat('/NFS1MAILDIR/mailSysV2/', maildir) as home, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as mail, concat('maildir:/NFS1MAILDIR/mailSysV2/', maildir) as maildir, 143 AS uid, 143 AS gid, concat('*:bytes=', floor(quota*1024)) AS quota_rule FROM mailbox WHERE username = '%u' AND active = '1' And here's what our configuration is on each of the nodes: dovecot -n # 1.1.2: /usr/local/etc/dovecot.conf protocols: imap pop3 ssl_ca_file: /usr/local/etc/dovecot/certs/tdpserver.crt ssl_cert_file: /usr/local/etc/dovecot/certs/tdpserver.crt ssl_key_file: /usr/local/etc/dovecot/certs/tdpserver.key ssl_parameters_regenerate: 0 ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_user: postfix login_greeting: Something witty here.. login_process_per_connection: no login_max_connections: 512 max_mail_processes: 2048 mail_max_userip_connections: 50 verbose_proctitle: yes first_valid_uid: 69 last_valid_uid: 500 first_valid_gid: 69 last_valid_gid: 500 mail_access_groups: postfix mail_privileged_group: postfix mail_location: mbox:/NFS1MAILDIR/mailSysV2/%d/%u:INDEX=/usr/local/mail/indexes/%d/%1n/%n mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: login plain user: dovecot passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: dovecot group: dovecot plugin: quota: dict:user::proxy::quota imap_quota: dict:user::proxy::quota quota_rule: *:storage=528576 dict: quota: mysql:/usr/local/etc/dovecot/dovecot-dict-quota.conf Any help you can offer is greatly, greatly appreciated, as well as opinions on any other 'validated' postfix/dovecot email enterprise design solutions. Thanks Very Much In Advance, R.T

6 13

[Dovecot] New message notification
by Juan Asensio Sánchez 19 Nov '08

19 Nov '08

Hi What is the best option to notify a user that a message has arrived? The intention is to write a script that connects to a jabber server and checks if the user is online, so then a message is sent to user notifying him that he has received a new message. The solution should be compatible with Sieve filtering, so the script should not be executed when the message is moved to the SPAM folder, or pass to the script an argument specifying the folder where the message has been saved. Regards and thanks in advance. Juan Asensio Sánchez - http://www.nutum.es

2 1

[Dovecot] Solving CVE-2008-4870
by Michal Hlavinka 19 Nov '08

19 Nov '08

Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key, which is available for everyone since dovecot.conf has world readable permissions. (In CVE's description is note that it RHEL's/Fedora's problem, but it affects all systems imo) We was thinking about few ways how to fix it: 1) 0640 permissions for dovecot.conf - but it can became not readable for dovecot 2) 0640 root:mail and set deliver to group mail with sgid - possible security problem 3) don't store passphrase in dovecot.conf, just ask for it when dovecot's started - can hang boot process, not good As part of investigating, I've found dovecot is storing all variables in environment variables - it means even passphrase? I'm not completely sure, but all variables can be read via /proc/<pid>/environ (I don't know if it becomes readable in some circumstances.) Is there any plan to solve this problem? Cheers, Michal

3 3

[Dovecot] patch: list shared namespace
by Bernhard Herzog 19 Nov '08

19 Nov '08

Hi, I've been working on a patch for dovecot 1.2 from the Kolab branch (http://hg.intevation.org/kolab/dovecot-1.2_kolab-branch/) that implements listing of shared namespaces. I've got something that works in some basic way but is still missing some pieces. See the attached patch, which also contains some installation and configuration notes. Implementation notes: One of the main problems the patch addresses is getting a list of all users that have mailboxes the logged in user can see. The patch uses a dict to cache information about which users have at least one mailbox that is visible to other users. The dict doesn't cache which other users, though. The cache entry for a given user is updated whenever the dovecot-acl-list file in the maildir root directory is updated. This ties the implementation to a specific acl backend to an extent, but that shouldn't be a problem at the moment. Another problem is that namespaces for all those users have to be created. The patch does that in shared-storage.c when the shared storage is created. At this stage of development of the patch that works well enough, I think, but it might be better to update the namespaces whenever a list iterator is created. To avoid unnecessary coupling between the shared namespace code and the ACL plugin, the shared namespace code has a hook that it calls when it needs a list of all the users who may have mailboxes visible to the current user. The ACL plugin sets that hook and uses the dict to produce that list. This way, the ACL plugin depends on the shared namespace code but not the other way round and all the dict handling is in the ACL plugin. I'm not sure the new hook is really needed. The patch could perhaps just as well extend the acl_next_hook_mail_storage_created and acl_next_hook_mailbox_list_created functions to do the namespace creation when they're called for a shared storage or mailbox list. Problems: All of my tests so far involved a shared namespace of the form namespace shared { separator = / prefix = users/%%u/ location = maildir:.../var/mail/%%u:... subscriptions = no list = yes hidden = no } Also, let's assume two users, ford and arthur with ford's "INBOX/hhgttg" available to arthur as "users/ford/INBOX/hhgttg". Arthur may not list ford's INBOX, though. In the following the current user is always arthur. I found the following problems: - LIST response includes namespaces the user doesn't really have access to. E.g. if there's another user, zaphod who's made some mailbox available to somebody else, but not arthur, arthur still sees * LIST (\Noselect \HasChildren) "/" "users/zaphod" Not sure it's worth fixing this, though. - List with "%" doesn't list all intermediate mailboxes. On the one hand arthur sees this: x LIST "" "*" ... * LIST (\Noselect \HasChildren) "/" "users/ford" * LIST (\HasNoChildren) "/" "users/ford/INBOX/hhgttg" x OK List completed. OTOH, with "%" only this: x LIST "" "users/ford/%" x OK List completed. cyrus shows x LIST "" "users/ford/%" * LIST (\Noselect \HasChildren) "/" "users/ford/INBOX" x OK List completed. At least Kontact resp. KMail rely on this. - The dovecot-acl-list is not always rebuilt, even when it should have been, AFAICT. In particular, if the file exists but is empty, it's never updated, even when ACL later change. Maybe this is a bug in the Kolab branch. Cheers, Bernhard -- Bernhard Herzog | ++49-541-335 08 30 | http://www.intevation.de/ Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

2 16

[Dovecot] Bug in 1.1.4: New line required in ACL files
by sleeper-＠gmx.net 19 Nov '08

19 Nov '08

Hello, just wanted to notify you about a bug i found in 1.1.4 ACL handling: Global ACLs are ignored, when there is no line break (i.e. "owner lr" is ignored while "owner lr\n" works). I didn't track this down to see if the same happens for per-user ACLs, but it should be quite obvious in the source anyways. Regards -- Sensationsangebot nur bis 30.11: GMX FreeDSL - Telefonanschluss + DSL für nur 16,37 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a

2 1

[Dovecot] Mail.app & Subscriptions
by Neil 19 Nov '08

19 Nov '08

Client: Mail.app v.3.5 Server: Dovecot 1.1.6 I've noticed that when I go to "Account Info" in Mail.app, and then to the "Subscription List" tab, Mail.app will spin for a bit, and then give up, without showing any folders and all the buttons are grayed out. Does anyone know if this a Mail.app issue or a Dovecot issue, if there're any work-arounds, and/or if this is something I should be concerned about? Thanks, Neil.

2 1

[Dovecot] Password authentication and character set
by Fredrik Grönqvist 19 Nov '08

19 Nov '08

Hi, I've searched in the wiki and in the mailinglist archives but haven't found anything about password character sets within the dovecot authentication deamon. My problem is that we have users with passwords containing scandinavian characters (äöå, umlauts) and the debug log shows that different clients send the password in different charsets. The passwords are stored in a Mysql table, if that makes any difference. Outlook Express with LATIN 1 (ISO-8859-1): Nov 18 16:56:39 resilar dovecot: auth-worker(default): sql(fgr-1,193.64.206.190): Password mismatch Nov 18 16:56:39 resilar dovecot: auth-worker(default): sql(fgr-1,193.64.206.190): MD5(<E4><E4>kk<F6>si<E4>) != '$1$xMPPHRdL$I0mrlPi5FMtwauSf20vjz0' MacMail UTF8: Nov 18 17:23:37 resilar dovecot: auth-worker(default): sql(fgr-1,193.64.206.190): Password mismatch Nov 18 17:23:37 resilar dovecot: auth-worker(default): sql(fgr-1,193.64.206.190): MD5(ääkkösiä12) != '$1$xMPPHRdL$I0mrlPi5FMtwauSf20vjz0' Is there a setting that "forces" the authentication daemon to convert the provided password to a specific charset before the comparison takes place, or how should one handle this? dovecot -n # 1.1.4: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/ssl/certs/mail.crt ssl_key_file: /etc/ssl/private/mail.key ssl_cipher_list: ALL:!LOW disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting: mail ready. login_process_per_connection: no mail_privileged_group: mail mail_location: maildir:~/mail mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): delay-newmail outlook-idle imap_client_workarounds(imap): delay-newmail outlook-idle imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/ sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@+ verbose: yes debug: yes debug_passwords: yes worker_max_count: 50 passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: maildir Chears Fredrik -- ------------------------------------------------------------------------ Fredrik Grönqvist ------------------------------------------------------------------------

3 13

[Dovecot] pam_start() failed: system error
by Peter Orlowski 18 Nov '08

18 Nov '08

Hi, I'm using dovecot 1.1.3 on FreeBSD 6.3, x86, files are on NFS, except control and index files, which are local, on UFS2. It's moderately loaded, there are usually not more than 30 clients simultaneously. dovecot runs fine for 3-10 days, then people can't connect any more, and dovecot says: Nov 18 13:20:44 dizzy dovecot-auth: pam_ldap: ldap_simple_bind Can't contact LDAP server Nov 18 13:20:44 dizzy dovecot-auth: pam_ldap: reconnecting to LDAP server... Nov 18 13:20:44 dizzy dovecot-auth: pam_ldap: ldap_simple_bind Can't contact LDAP server Nov 18 13:20:44 dizzy dovecot-auth: pam_ldap: ldap_simple_bind Can't contact LDAP server Nov 18 13:20:44 dizzy dovecot-auth: pam_ldap: ldap_simple_bind Can't contact LDAP server Nov 18 13:21:46 dizzy dovecot: auth-worker(default): pam(xxxx,xxx.xxx.xxx.xxx): pam_start() failed: system error Nov 18 13:21:46 dizzy dovecot-auth: in openpam_load_module(): no pam_permit.so found Nov 18 13:22:12 dizzy dovecot-auth: in openpam_load_module(): no pam_login_access.so found Nov 18 13:22:31 dizzy dovecot-auth: in openpam_load_module(): no pam_unix.so found Nov 18 13:22:42 dizzy dovecot-auth: in openpam_load_module(): no /usr/local/lib/pam_ldap.so found After restarting dovecot things are back to normal. I have tried different settings for worker_max_count, and I had blocking=no in the passdb config until a few day ago; changing that didn't help either. Here's my current config: # 1.1.3: /usr/local/etc/dovecot.conf protocols: imaps pop3s ssl_cert_file: /etc/ssl/certs/mailitp-chain.pem ssl_key_file: /etc/ssl/certs/mailkey2.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_location: mbox:~/mail/:INDEX=/srv/dovecot/indexes/%u.oldmail:INBOX=/var/mail/%u mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): zlib mail_plugins(imap): zlib mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh namespace: type: private separator: / prefix: NEWmail/ location: maildir:~/Maildir/:INDEX=/srv/dovecot/indexes/%u:CONTROL=/srv/dovecot/control/%u list: yes subscriptions: yes namespace: type: private separator: / location: mbox:~/mail/:INBOX=/var/mail/%u:INDEX=/srv/dovecot/indexes/%u.oldmail:CONTROL=/srv/dovecot/control/%u.oldmail inbox: yes list: yes subscriptions: yes auth default: worker_max_count: 20 passdb: driver: pam args: blocking=yes userdb: driver: passwd Greetings, -- Peter Orlowski

2 2

[Dovecot] MESSAGE Quota not RFC2087 compliant
by Braun, Martin 18 Nov '08

18 Nov '08

Hi, the configuration of my Dovecot 1.1.3 quota plugin looks like this: quota_rule = *:storage=1G quota_rule2 = *:messages=1337 this leads to the following GETQUOTAROOT response: 01 GETQUOTAROOT INBOX * QUOTAROOT "INBOX" "mbraun quota" * QUOTA "mbraun quota" (STORAGE 6553 1048576 MESSAGES 122 1337) 01 OK Getquotaroot completed. RFC2087 (http://www.faqs.org/rfcs/rfc2087.html) describes the response like as: STORAGE: Sum of messages' RFC822.SIZE, in units of 1024 octets MESSAGE: Number of messages As you can see, the response "MESSAGES" differs from the specified "MESSAGE" which leads to parsing issues on RFC compliant IMAP client implementations. Using *:message=1337 throws a configuration error on Dovecot startup. dovecot-1.1.6/src/plugins/quota/quota.h /* Number of messages. */ #define QUOTA_NAME_MESSAGES "MESSAGES" Greetings, Martin

2 1

[Dovecot] [PATCH] dovecot-1.2: fix build with Sun C compiler
by Andrey Panin 18 Nov '08

18 Nov '08

This small patch fixes dovecot-1.2 build with Sun C compiler.

1 0

[Dovecot] ManageSieve SECURITY hole: virtual users can edit scripts of other virtual users (all versions)
by Stephan Bosch 17 Nov '08

17 Nov '08

Hello, While updating the ManageSieve implementation to the latest draft specification I noticed a major omission in the way script names are handled. Essentially, script names are directly appended to the sieve storage directory path and suffixed with '.sieve'. This does not take the use of '../' in script names into account. Therefore, clever virtual users that know the directory structure of the server can read and edit script files of other virtual users with the same system uid. The added '.sieve' suffix prevents further security breach, because only sieve scripts are accessible this way. Note that of course any publicly accessible sieve script is also affected. I am sorry to report that this bug was introduced pretty much from the start, meaning that all versions of the ManageSieve patch/package are affected. To quickly resolve this issue, I provide patches against the existing releases and I release new versions for Dovecot v1.1 through v1.2. The security patches against the existing releases are very small and should therefore also apply to older versions or can be adjusted to apply cleanly with relative ease. The security patches are available as follows: http://www.rename-it.nl/dovecot/1.0/dovecot-1.0.15-managesieve-v9.3-securit… http://www.rename-it.nl/dovecot/1.0/dovecot-1.0.15-managesieve-v9.3-securit… http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.3-security… http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.3-security… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.0-security… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.0-security… The security patch for v1.0 is applied against the patched Dovecot tree, while patches for v1.1 and v1.2 are applied against the ManageSieve package. The new releases are available as follows (v1.1 and v1.2 versions have additional changes, read the NEWS files for more info): http://www.rename-it.nl/dovecot/1.0/dovecot-1.0.15-MANAGESIEVE-v9.4.diff.gz http://www.rename-it.nl/dovecot/1.0/dovecot-1.0.15-MANAGESIEVE-v9.4.diff.gz… http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.4.tar.gz http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.4.tar.gz.s… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.1.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.1.tar.gz.s… Refreshed ManageSieve patches for v1.1 and v1.2 are available to avoid confusion, but an existing patched Dovecot should work fine. I hope package maintainers will quickly incorporate the security patches to get rid of this stupidity as soon as possible. Don't hesitate to notify me when there are problems! Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] Dovecot error with Symbian mail client
by jeeger＠thenybble.de 17 Nov '08

17 Nov '08

Greetings list, I have recently acquired an Nokia E71 (which comes with Symbian 3rd edition, feature pack 3 I believe). Accessing my emails has worked before, but now, I cannot connect to the mail server any longer. If I enable verbose_ssl, I get the following error in the log: SSL_accept() failed: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message [141.84.69.67] I cannot access my mail, the dialog just closes and the wireless connection ends. I am using dovecot version 1.0.13 and my config is # 1.0.13: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/dovecot/dovecot.crt ssl_key_file: /etc/dovecot/dovecot.pem verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login auth default: passdb: driver: pam userdb: driver: passwd Thanks for your answers! Regards, Jan Seeger PS: I have tested the symbian client with gmail, and it works. So the problem is probably a bug in the communication between the symbian client and dovecot.

7 8

[Dovecot] store sieve scripts with maildir
by Samuel HAMEAU 17 Nov '08

17 Nov '08

Hi, I am using dovecot 1.0.10 and pysieved, in a master/slave cluster with ldap (auth_bind=yes). For conceptuals reasons, i would like to keep on the same partition the mailstore + sieve scripts. I have try to set "sieve" and "home" variables under the "plugin" section with an absolute path, and i have tried to override home variable in user_attrs (dovecot-ldap.conf) as well with an absolute path, but in vain. Is there a solution ? sam

3 6

[Dovecot] OT: Counting emails in IMAP folders
by Nigel Allen 17 Nov '08

17 Nov '08

Greetings I have a customer who has mail server running dovecot with an IMAP account (Customers) which contains hundreds of folders (one per customer). Looks like this: Customers Fred Smith and Co Joe Blogss Cust-1 Cust-n They have a requirement to report monthly on the total number of emails added to each customers' folder during the month. Basically I need to be able to run some kind of command line query that will give me each of the sub-folder names and the number of emails added to the folder for that month (or other user-specified time period). Any ideas please? TIA Nigel.

3 3

Re: [Dovecot] antispam plugin claims "antispam signature not found"
by Guillaume HILT 15 Nov '08

15 Nov '08

I have the same problem and i'm wondering how should i use this patch ? I'm not familiar with the patch command. Thanks. PS: Sorry for the empty mail Johannes Berg a écrit > On Tue, 2008-11-11 at 11:42 +0100, Johannes Berg wrote: > > >> Not sure, I personally think that moving them silently makes errors >> harder to diagnose. I'll add an option since then you can set this >> option (antispam_missing_signature = [error|move]) to move after you've >> tested and verified that it works just fine. >> > > Try this patch please, I have only compiled it so far. (there might be > rejects in the signature-log.c file unless you update to the current git > tree but you don't care about that) > > diff --git a/antispam.7 b/antispam.7 > index d07c1d0..e26db69 100644 > --- a/antispam.7 > +++ b/antispam.7 > @@ -108,6 +108,13 @@ plugin { > # mail signature (used with any backend requiring a signature) > antispam_signature = X-DSPAM-Signature > > + # action to take on mails without signature > + # (used with any backend requiring a signature) > + # (we recommend only setting this to 'move' after verifying that the > + # whole setup is working) > + # antispam_signature_missing = move # move silently without training > + antispam_signature_missing = error > + > # semicolon-separated list of Trash folders (default unset i.e. none) > # antispam_trash = > # antispam_trash = trash;Trash;Deleted Items > diff --git a/signature-log.c b/signature-log.c > index ab8cd6d..5b7b306 100644 > --- a/signature-log.c > +++ b/signature-log.c > @@ -99,7 +99,12 @@ int backend_handle_mail(struct mailbox_transaction_context *t, > return -1; > } > > - signature = signature_extract(t, mail); > + ret = signature_extract(t, mail, &signature); > + if (ret) > + return ret; > + > + if (!signature) > + return 0; > > switch (wanted) { > case CLASS_SPAM: > diff --git a/signature.c b/signature.c > index 7f9d83b..7ad29d6 100644 > --- a/signature.c > +++ b/signature.c > @@ -5,6 +5,7 @@ > #include "mail-storage-private.h" > > const char *signature_hdr = "X-DSPAM-Signature"; > +static int signature_nosig_ignore = 0; > > void signature_init(void) > { > @@ -12,6 +13,16 @@ void signature_init(void) > if (tmp) > signature_hdr = tmp; > debug("signature header line is \"%s\"\n", signature_hdr); > + > + tmp = get_setting("SIGNATURE_MISSING"); > + if (!tmp) > + tmp = "error"; > + if (strcmp(tmp, "move") == 0) { > + signature_nosig_ignore = 1; > + debug("will silently move mails with missing signature\n"); > + } else if (strcmp(tmp, "error") != 0) { > + debug("invalid signature_missing setting '%s', ignoring\n", tmp); > + } > } > > int signature_extract_to_list(struct mailbox_transaction_context *t, > @@ -23,10 +34,14 @@ int signature_extract_to_list(struct mailbox_transaction_context *t, > > signatures = get_mail_headers(mail, signature_hdr); > if (!signatures || !signatures[0]) { > - mail_storage_set_error(t->box->storage, > - ME(NOTPOSSIBLE) > - "antispam signature not found"); > - return -1; > + if (!signature_nosig_ignore) { > + mail_storage_set_error(t->box->storage, > + ME(NOTPOSSIBLE) > + "antispam signature not found"); > + return -1; > + } else { > + return 0; > + } > } > > while (signatures[1]) > @@ -42,23 +57,30 @@ int signature_extract_to_list(struct mailbox_transaction_context *t, > return 0; > } > > -const char *signature_extract(struct mailbox_transaction_context *t, > - struct mail *mail) > +int signature_extract(struct mailbox_transaction_context *t, > + struct mail *mail, const char **signature) > { > const char *const *signatures; > > signatures = get_mail_headers(mail, signature_hdr); > if (!signatures || !signatures[0]) { > - mail_storage_set_error(t->box->storage, > - ME(NOTPOSSIBLE) > - "antispam signature not found"); > - return NULL; > + if (!signature_nosig_ignore) { > + mail_storage_set_error(t->box->storage, > + ME(NOTPOSSIBLE) > + "antispam signature not found"); > + return -1; > + } else { > + *signature = NULL; > + return 0; > + } > } > > while (signatures[1]) > signatures++; > > - return signatures[0]; > + *signature = signatures[0]; > + > + return 0; > } > > void signature_list_free(struct siglist **list) > diff --git a/signature.h b/signature.h > index e25d1b5..1384924 100644 > --- a/signature.h > +++ b/signature.h > @@ -16,8 +16,8 @@ void signature_init(void); > int signature_extract_to_list(struct mailbox_transaction_context *t, > struct mail *mail, struct siglist **list, > enum classification wanted); > -const char *signature_extract(struct mailbox_transaction_context *t, > - struct mail *mail); > +int signature_extract(struct mailbox_transaction_context *t, > + struct mail *mail, const char **signature); > void signature_list_free(struct siglist **list); > > extern const char *signature_hdr; > > This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 4

Re: [Dovecot] [dspam-users] mysql fetch row error
by Marko Weber 15 Nov '08

15 Nov '08

Hi Steve, MTA = Postfix I have amavis - spamassassin - dspam installed. i think spamassassin scnas after dspam, cuase in the mail headers dspam comes at first. I use Dovecot as Imap Server OS = Gentoo Linux i put the config of dspam here = http://rafb.net/p/VCX8XO97.html if u need more confs just tell me , i can paste then marko Steve schrieb: > Hallo Marko > > This is not normal. DSPAM does not add the encoding. It must be something else you are using/doing to get that tagged with the encoding in front of every DSPAM tag. And I don't see the DSPAM signature in your header. This is not normal. If you have the other DSPAM header lines, then you should have the result as well. > > What MTA are you using? > How is the integration between MTA and DSPAM? > Do you have other filters running before and after DSPAM? > What IMAP server are you using? > What OS are you using? > Could you post your DSPAM config? > > > (Grüsse aus Zürich) > > // Steve > > -------- Original-Nachricht -------- > >> Datum: Sat, 15 Nov 2008 10:37:38 +0100 >> Von: Marko Weber <weber(a)zackbummfertig.de> >> An: "dspam-users(a)lists.nuclearelephant.com" <dspam-users(a)lists.nuclearelephant.com> >> Betreff: Re: [dspam-users] mysql fetch row error >> > > >> Hello Steve this is the "full" Header of a spam mail where the training >> also fails. >> withe the mysql fetch error............. >> >> marko >> >> >> Return-Path: <RoxieastronomerMyrick(a)fightingbobfest.org> >> X-Original-To: weber(a)salonwebserver.de >> Delivered-To: weber(a)salonwebserver.de >> Received: from localhost (localhost [127.0.0.1]) >> by salonwebserver.de (Postfix) with ESMTP id 02C8613BC09B >> for <weber(a)salonwebserver.de>; Fri, 14 Nov 2008 21:38:09 +0100 >> (CET) >> X-DSPAM-Result: =?iso-8859-1?Q?Spam=0D?= >> X-DSPAM-Confidence: =?iso-8859-1?Q?0.7177=0D?= >> X-DSPAM-Probability: =?iso-8859-1?Q?1.0000=0D?= >> ?iso-8859-1?Q?491de1b0254959695846858=0D?= >> X-DSPAM-Factors: 15, >> X-Virus-Scanned: amavisd-new at salonwebserver.de >> X-Spam-Flag: NO >> X-Spam-Score: 2.415 >> X-Spam-Level: ** >> X-Spam-Status: No, score=2.415 tagged_above=-1000 required=2.5 >> tests=[DNS_FROM_SECURITYSAGE=0.127, RCVD_IN_BL_SPAMCOP_NET=2.188, >> RDNS_DYNAMIC=0.1] >> Received: from salonwebserver.de ([127.0.0.1]) >> by localhost (kraftwerk1.salonwebserver.de [127.0.0.1]) >> (amavisd-new, port 10024) >> with ESMTP id nOQQilMNvp-o for <weber(a)salonwebserver.de>; >> Fri, 14 Nov 2008 21:38:07 +0100 (CET) >> Received: from zackbummfertig.de >> (static.243.42.46.78.clients.your-server.de [78.46.42.243]) >> (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) >> (No client certificate requested) >> by salonwebserver.de (Postfix) with ESMTPS id E86BD13BC078 >> for <weber(a)salonwebserver.de>; Fri, 14 Nov 2008 21:38:06 +0100 >> (CET) >> Received: from localhost (localhost [127.0.0.1]) >> by zackbummfertig.de (Postfix) with ESMTP id BC4BDECC067 >> for <weber(a)salonwebserver.de>; Fri, 14 Nov 2008 21:37:46 +0100 >> (CET) >> X-Virus-Scanned: amavisd-new at zackbummfertig.de >> Received: from zackbummfertig.de ([127.0.0.1]) >> by localhost (weberweb.zackbummfertig.de [127.0.0.1]) >> (amavisd-new, port 10024) >> with ESMTP id xr6ayW0lyDGC for <weber(a)salonwebserver.de>; >> Fri, 14 Nov 2008 21:37:43 +0100 (CET) >> Received: from rachel22b12579 (unknown [78.146.113.186]) >> by zackbummfertig.de (Postfix) with SMTP id 3E83CECC040 >> for <tbmarcom(a)acidbunker.de>; Fri, 14 Nov 2008 21:37:43 +0100 >> (CET) >> Date: Fri, 14 Nov 2008 20:38:01 +0000 >> From: Chrystal Huddleston <RoxieastronomerMyrick(a)fightingbobfest.org> >> Subject: gambling slot machines >> To: tbmarcom(a)acidbunker.de >> Message-id: <7686026460.20081111151378(a)fightingbobfest.org> >> Organization: fightingbobfest.org >> MIME-version: 1.0 >> Content-type: text/plain; charset=us-ascii >> Content-transfer-encoding: 7bit >> X-Priority: 3 (Normal) >> >> Steve schrieb: >> >>> Can you post the full header of the message in question? >>> >>> >>> -------- Original-Nachricht -------- >>> >>> >>>> Datum: Fri, 14 Nov 2008 23:18:39 +0100 >>>> Von: Marko Weber <weber(a)zackbummfertig.de> >>>> An: "dspam-users(a)lists.nuclearelephant.com" >>>> >> <dspam-users(a)lists.nuclearelephant.com> >> >>>> Betreff: Re: [dspam-users] mysql fetch row error >>>> >>>> >>> >>> >>>> Hi Steve, >>>> this sed thing dont worked for me...... sorry >>>> how i can get dspam working without this mysql fetch error ? >>>> u have any hints ? >>>> >>>> marko >>>> >>>> >>>> Steve schrieb: >>>> >>>> >>>>> -------- Original-Nachricht -------- >>>>> >>>>> >>>>> >>>>>> Datum: Fri, 14 Nov 2008 18:11:55 +0100 >>>>>> Von: Marko Weber <weber(a)zackbummfertig.de> >>>>>> An: "dspam-users(a)lists.nuclearelephant.com" >>>>>> >>>>>> >>>> <dspam-users(a)lists.nuclearelephant.com> >>>> >>>> >>>>>> Betreff: [dspam-users] mysql fetch row error >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>>>> Hello to all in the Mailinglist, >>>>>> >>>>>> i installed dspam on our server and it works so far that incoming >>>>>> >> mails >> >>>>>> are tagged by dspam. >>>>>> i installed "dovecot-antispam" for retraining. >>>>>> when in try to retrain a mail i get this in the dspam.debug log = >>>>>> >>>>>> 9056: [11/14/2008 15:23:01] mysql_fetch_row() failed in >>>>>> >>>>>> >>>> _ds_get_signature >>>> >>>> >>>>>> in the /var/log/messages log i get this = >>>>>> >>>>>> Nov 14 15:29:25 kraftwerk1 imap: antispam: /usr/bin/dspam >>>>>> >>>>>> >>>> --source=error >>>> >>>> >>>>>> --class=spam --signature==?iso-8859-1?Q?491d76cb23581804284693=0D?= >>>>>> >> ... >> >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Signature retrieval for >>>>>> '=?iso-8859-1?Q?491d76cb23581804284693=0D?=' failed >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: Unable to find a valid >>>>>> signature. Aborting. >>>>>> Nov 14 15:29:25 kraftwerk1 dspam[9189]: process_message returned >>>>>> >> error >> >>>>>> -5. dropping message. >>>>>> >>>>>> >>>>>> but when i search for the signatur 491d76cb23581804284693 in the >>>>>> >> mysql >> >>>>>> database i can find it there. >>>>>> >>>>>> what is this ?iso-8859-1?Q? , is this causing the error ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>> This means, that the plugin developer used the signature from the body >>>>> >>>>> >>>> instead of the one found in the header. You can verify yourself what >>>> >> the >> >>>> proper signature would be. Just issue this small one liner in sed: >>>> >>>> >>>>> sed -e '/^$/q' -ne 's/^X\-DSPAM\-Signature: >>>>> >>>>> >>>> $\([1-9][0-9]*,$\{0,1\}$[a-f0-9]\{20,32\}$\)$/\1/p' >>>> >> /path/to/your/message >> >>>> >>>> >>>>> This should print out the proper signature DSPAM should receive from >>>>> >> the >> >>>>> >>>>> >>>> plugin. The iso-8859-1 part indicates to me that the message is taken >>>> >> from >> >>>> a iso8859-1 encoded message body. >>>> >>>> >>>>> >>>>> >>>>> >>>>>> do any1 need my dspam.conf , then i can paste it on web. >>>>>> >>>>>> thank for helping. >>>>>> >>>>>> marko >>>>>> >>>>>> >>>>>> >>>>>> >>>>> Steve >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >

2 1

[Dovecot] Mailbox Hashing
by Justin Krejci 14 Nov '08

14 Nov '08

First off, the website documentation is really good for Dovecot but while reading I was not able to find anything pertaining to inbox hashing for Maildirs. I saw plenty about hashing the directories that the user mailboxes live in but nothing about specifically hashing an individual user's inbox directory itself. Is there any method for hashing the inbox automatically after say 5,000 messages are stored? Example $Maildir/in/0/message0 $Maildir/in/0/message1 $Maildir/in/0/message2 . $Maildir/in/0/message4999 $Maildir/in/1/message5000 $Maildir/in/1/message5001 etc I am not currently using Dovecot but am interested to know if this is available or does running with 20,000+ messages in a single inbox not affect the performance much? I have looked into other file system tuning techniques such as enabling ext3 dir_index or using ReiserFS (maybe not ReiserFS anymore). There will likely be 15,000 to 20,000 accounts spread out on one or more servers using a 6-drive RAID10 setup. Most accounts are not expected to have high message quantities but there will be lots of concurrent connections via pop and imap (and webmail imap). Any suggestions or feedback would be appreciated.

3 6

Re: [Dovecot] Install Configuring and run.
by Marko Weber 14 Nov '08

14 Nov '08

Hello Thorsten, i got "dovecot-antispam" working now. also moving mails now fully work. but retraining dont seems to work fully. emails that are delivered to mailbox are scanned with user "clamav" 28799: [11/13/2008 23:26:25] DSPAM Instance Startup 28799: [11/13/2008 23:26:25] input args: /usr/bin/dspam --stdout --deliver=spam,innocent --mode=tum --tokenizer=chained,noise --enable-signature-headers --user clamav 28799: [11/13/2008 23:26:25] pass-thru args: --tokenizer=chained,noise --enable-signature-headers 28799: [11/13/2008 23:26:25] processing user clamav 28799: [11/13/2008 23:26:25] uid = 105, euid = 105, gid = 449, egid = 1000 28799: [11/13/2008 23:26:25] loading preferences for user clamav 28799: [11/13/2008 23:26:25] Loading preferences for uid 1 i dont have a maildrop filter ready yet that move spam tagged mails into SPAM folder. all is delivered to "incoming". when i now move the mail to SPAM; this is done by user "postfix" 28917: [11/13/2008 23:40:17] DSPAM Instance Startup 28917: [11/13/2008 23:40:17] input args: /usr/bin/dspam --source=error --class=spam --signature==?iso-8859-1?Q?1,491930ac25229173225906=0D?= 28917: [11/13/2008 23:40:17] pass-thru args: 28917: [11/13/2008 23:40:17] processing user postfix 28917: [11/13/2008 23:40:17] uid = 207, euid = 207, gid = 207, egid = 1000 28917: [11/13/2008 23:40:17] loading preferences for user postfix 28917: [11/13/2008 23:40:17] Loading preferences for uid 6 28917: [11/13/2008 23:40:17] Loading preferences for uid 0 28917: [11/13/2008 23:40:17] Loading preferences for uid 0 28917: [11/13/2008 23:40:17] default preferences empty. reverting to dspam.conf preferences. 28917: [11/13/2008 23:40:17] Loading preferences from dspam.conf 28917: [11/13/2008 23:40:17] using /var/spool/dspam/opt-in/local/postfix.dspam as path 28917: [11/13/2008 23:40:17] using /var/spool/dspam/opt-out/local/postfix.nodspam as path 28917: [11/13/2008 23:40:17] sedation level set to: 0 28917: [11/13/2008 23:40:17] DSPAM Instance Shutdown. Exit Code: 0 Now when i move the mail again into incoming (also done by user postfix), the mail dont get tagged with "innocent" , it is still tagged "spam". How do i get it work all under "clamav" and why are the removed mails from spam to incoming not tagged with "inncoent" ? (do you need any logs?) thank you marko Thorsten Vollmer schrieb: > On Thu, 2008-11-13 at 21:30 +0100, Marko Weber wrote: > >> Sorry to ask, >> so if dovecot-antispam-20080829 dont work for me you mean i should >> install the latest from webpage ? >> > > Yes, dovecot-antispam-1.1 should be sufficient. I already sent you the > link to an updated ebuild. Please be more proactive. > > Thorsten > >

2 6

[Dovecot] Folder aliases
by Daniel L. Miller 14 Nov '08

14 Nov '08

I don't if this has been discussed before - or already implemented - but it would be great if I could define one or more "aliases" for a folder. A particular example might be "Sent" where different (badly-written) clients might have hard-coded "Sent" folder locations like "Sent", "Sent Items", "Sent Mail", "Mail Delivered", etc. - and I'd love to get those consolidated. It would also be nice to show a different set of folders based on the client - or if that's not possible (if the client doesn't identify itself as part of the login sequence) then somehow via login name - maybe by an extension? So where my usual login might be "user(a)domain.com", and that would continue to be supported as the default login, I could now have "user(a)domain.com+thunderbird", "user(a)domain.com+mobile", etc.? -- Daniel

6 10

Re: [Dovecot] Install Configuring and run.
by Marko Weber 13 Nov '08

13 Nov '08

Sorry to ask, so if dovecot-antispam-20080829 dont work for me you mean i should install the latest from webpage ? Thorsten Vollmer schrieb: > On Thu, 2008-11-13 at 00:24 +0100, Marko Weber wrote: > >> Hello Thorsten thank you for taking time. >> I recompiled with -debug, but i also had to set -syslog >> otherwise gentoo dont compile. it says then , "useflag syslog enabled >> needs flag debug also set" >> >> we proceed further in the list then ? >> > > Yes, once you have new results. > > If dovecot-antispam-20080829 does not yet work for you, please try the > latest version and re-enable debugging. > > Thorsten > >

1 0

[Dovecot] New Dovecot server buildout review
by David Jonas 13 Nov '08

13 Nov '08

Hello Everyone, I have the opportunity to do a new mail system build out for about 20k email boxes over a few hundred domains. I already run a system like this, but this time I can do it right :). My thought on storage is to have a 12 drive JBOD system attached via SAS to a 3ware 9690SA raid controller. Drives would be RAID'd (10 or 5) to appear as one for message storage. Dovecot would run on that box and deliver directly from postfix. POP and IMAP connections would come in directly (no proxy). Postfix head boxes in front of this do anti-virus and spamassassin, so this box won't be doing any heavy crunching, just delivery and serving of messages. Does this sound reasonable? Is there details that I'm missing? An obvious bottleneck I'm overlooking? Is anyone running a similar config with success? It all sounds very standard, but I haven't run something like this before. Thanks for the help! David

1 0