- dovecot - dovecot.org

[Dovecot] LSUB and namespaces - how to get rid of multible prefixes
by Henrik Ostergaard Madsen 28 Oct '06

28 Oct '06

I'm using dovecot 1.0.rc7 and Squirrelmain 1.4.8 using IMAP on a Debian 3.1 Testing system, and I'm having a problem. When Squirrelmail (or other IMAP clients) submits an LSUB "" "*%", dovecot responds with: Request: A004 LSUB "" "*%" Response: * LSUB () "/" "INBOX.Sent" * LSUB () "/" "INBOX.Trash" * LSUB () "/" "INBOX.Drafts" * LSUB () "/" "mail/Sent" * LSUB () "/" "mail/Trash" * LSUB () "/" "mail/Drafts" * LSUB () "/" ".mail/Sent" * LSUB () "/" ".mail/Trash" * LSUB () "/" ".mail/Drafts" * LSUB () "/" "Sent" * LSUB () "/" "Trash" * LSUB () "/" "Drafts" * LSUB () "/" "INBOXSent" * LSUB () "/" "INBOXTrash" * LSUB () "/" "INBOXDrafts" * LSUB () "/" "./INBOX.Sent" * LSUB () "/" "./INBOX.Trash" * LSUB () "/" "./INBOX.Drafts" * LSUB () "/" "Test" Lsub completed. This is in spite of that only INBOX.Sent, INBOX.Trash, INBOX.Drafts and Test actually exists. I have tried with no explicit namespaces, only one with no prefix or with prefix "/", and with that again and all the above prefixes marked as hidden, but with absolutely no change in the LSUB repons. Due to this, Squirrelmail shows up a whole bunch of folders, but only the correct ones (without prefixes) works.. This has been the same with a few prior versions of dovecot 1.0 , but not with dovecot 0.99. It is the same for Squirrelmail 1.4.7, but I do not think the client matters.. Is there a setting or way to deal with this - or is it a bug? Regards, Henrik

2 2

[Dovecot] "dovecot dead but subsys locked" problem
by Carla Tironi Farinati 27 Oct '06

27 Oct '06

Hi, Following the advice of someone really helpfull here, I just installed Postfix/Dovecot (from rpms). I'm running CentOs 4.4. I followed this guide: http://www.howtoforge.com/linux_postfix_virtual_hosting I've got two problems, a)my server is now listed as RCB, whatever that means, I suppose that's close to spamming. "0: Connection refused. Your IP address is blocked(Spamhaus XBL) - see http://www.spamhaus.org/query/bl?ip=216.32.68.90 " b)[root@server ssl]# /etc/init.d/dovecot restart Stopping Dovecot Imap: [FAILED] Starting Dovecot Imap: [ OK ] [root@server ssl]# /etc/init.d/dovecot status dovecot dead but subsys locked I deleted the sybsys file and tried to restart it. It crashes and show the error agsin. The logs don't show up anything unusual. I also see in the logs: Oct 25 22:50:07 server postfix/virtual[24712]: 48BA5904990: to=<carlatf(a)ithaki.net>, relay=virtual, delay=1, status=deferred (mailbox /var/spool/vmail/ithaki.net/carlatf: cannot open file: Is a directory) Of course it's a directory!. I created it following the guide! I reinstalled Dovecot with the latest sources and nothing. I also turn off SSL from dovecot's config file, nothing. Any ideas dovecot gurus!? Best regards, Carla

4 4

[Dovecot] Clustering (replication and proxying) plans for the future
by Timo Sirainen 27 Oct '06

27 Oct '06

I wrote this mostly so that I won't forget my thoughts. Most likely won't be implemented anytime soon. I haven't thought through all the locking issues. It would require a distributed lock manager in any case. I think there are already several existing ones, so one of them could probably be used for Dovecot. Each mail server would consult a master server for getting namespace configuration and location for shared/public mailboxes. If the data is stored in some central SQL server there could just as well be multiple master servers (or even each server be their own master). Whenever trying to open a shared mailbox that doesn't exist in the current server, the imap process would automatically create a new connection for the destination server and start proxying the data. The proxy would be a somewhat dummy proxy, which just forwards the client's commands to it and doesn't even try to understand the replies from the remote server. So admin will have to be careful to use only servers which have all the capabilities that were announced by the original server. So, then the replication. Each namespace could be configured to be available either by proxying or by replication: namespace public { prefix = example/ location = proxy:imap.example.com } namespace public { prefix = example/ replicated_to = host1.example.com host2.example.com # If multi-master, we'll need to use global locking. If not, the # replicated_to servers contain only slaves. multi_master = yes location = maildir:~/Maildir } The way this would work is that each imap process connects via UNIX socket to a replication process, which gets input from all the imap processes. The replication process keeps track of how much has been sent to each other server and also the acks it has received from them. So if the network dies temporarily it'll start writing the changes to the disk until it reaches some limit, after which a complete resync will be necessary. Dovecot already writes all the changes to a mailbox first to a transaction log file and and only afterwards it updates the actual mailbox. The contents of the new mails aren't stored there though. The replication could work simply by sending the transaction logs' contents to the replicatio process which passes it onto other servers, which finally sync their local mailboxes based on that data. Since Dovecot already is able to sync mailboxes based on the transaction log's contents this should be pretty easy to implement. Of course the new mails' contents also have to be sent. This could be prioritized lower than the transaction traffic, so that each server always has very up-to-date view of the mailbox metadata, but not necessarily the contents of all the mails. If the server finds itself in a situation that it doesn't have some specific mail, it'll send a request to the replication process to fetch it ASAP from another server. The reply will then take the highest priority in the queue. Normally when opening or reading the mailbox there's really no need to do any global locking. The server will show the mailbox's state to be what it has last received from the replication process. Whenever modifying the mailbox a global lock is required. Here's also the problem that if the network is down between two servers, they both think that they got the global lock. If they did any conflicting changes, they'll have to be resolved when both of them again see each others. Dovecot's transactions in general aren't order-dependent so most of the conflicts can be resolved by just having the replication master decide which way the transactions were done and then sending the transactions back to all of the servers in that order. Adding new messages is a problem however. UIDs must be always growing and they must be unique. I think Cyrus solved this by having 64bit global UIDs which really uniquely identify the messages (ie. first 32bits contain server-specific UID), and then the 32bit IMAP UIDs. If there are any conflicts with the IMAP UIDs, they're given new UIDs (which invalidates clients' cache for those messages, but that can't be helped). Resyncing works basically by requesting a list of all the mailboxes, opening each one of them and requesting new transactions from the log files with <UID validity>, <log file sequence>, <log file offset> triplet. If UID validity has changed or log file no longer exists, a full resync needs to be done. Also if the log file contains a lot of changes, it's probably faster to do a full resync. Full resync would then be just sending the whole dovecot.index file. Conflict resolving could also require a full resync if transaction logs were lost. That'd work again by the master receiving everyone's dovecot.index files, deciding what to do with them and sending the modified version back to everyone. Each server has different transaction logs, so the log file sequences can't be directly used between servers. So the replication process probably will have to keep track of every server's log seq/offset. Also when receiving full dovecot.index files they'll have to be updated in some way. Then there's the problem of how to implement the receiving side. If the user already has a process connected to the replication process it could be instructed to update the mailboxes. But since this doesn't happen all that often, there also needs to be some replication-writer process which writes all the received transactions to the mailboxes. Now, when exactly should these replication-writer processes be created then? If all users have the same UNIX user ID, then there could be a spool of processes always running and doing the writing. Although this worries me a bit since the same process is handling different users' data. More secure way, and the only way if users have different UNIX UIDs, is to launch a separate writer process for each user. It probably isn't a great idea to do that immediately when receiving data for a user, but to queue data for the user for a while and then once enough has been received or some timeout has occurred, the writer process would be executed. There probably should be some shared in-memory cache with a memory limit of some megabytes, after which data is written to disk up to a configurable amount. Only after that is full or timeout for the user is reached, the writer process is executed and the data is sent to it. All this replication stuff could also be used to implement a remote mail storage (ie. smarter proxying). The received indexes/transactions could simply be kept in memory, and all the mails that aren't already cached in memory could just be requested from the master whenever needed. I'm not sure if there's much point in doing this over dummy proxying though.

2 2

[Dovecot] dovecot.org not resolving!
by /dev/rob0 27 Oct '06

27 Oct '06

I had to bypass my unknown sender/recipient domain restrictions to receive list mail and send this. It's hard to say without a whois server for .fi, but it appears that the problem might be with the procontrol.fi. domain. Action to fix the problem is needed ASAP! I've emailed Timo offlist; also tried to get him in IRC. -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header

2 1

[Dovecot] POP 23 problem
by Manoj Fernandez 27 Oct '06

27 Oct '06

Hi there I am using Dovecot on Ubuntu 6 LTS forPOP3 services. The user account created at installation works fine and Iam able to log to POP3 services by telnetr. When I created a another user and tried tologin via telnet this is what happens telnet XXX.XXX.XXX.XXX 10 + OK Dovecot ready user XXXX + OK pass XXX +OK logged in Connection tohost lost and session terminates. Pls advise what could be the problem Tks Manoj Sri Lanka

1 0

[Dovecot] SpamAssassin training plugin
by Chad Parry 26 Oct '06

26 Oct '06

I found a plugin for dSPAM on this mailing list (http://thread.gmane.org/gmane.mail.imap.dovecot/4632/focus=4632) that was very useful to me. I just modified the code to work for SpamAssassin instead. The purpose of this plugin is to watch the mail that is in the user's spam folder. If the user manually moves a piece of mail into the spam folder then the mail must have been spam that was incorrectly classified. This plugin causes SpamAssassin to relearn that mail as spam. Anyone else who finds this functionality useful is welcome to follow the link below. . http://chad.parry.org/software/dovecot/ - Chad Parry

3 4

[Dovecot] i386->amd64: tls-certificate cannot be read anymore
by Andreas Barth 26 Oct '06

26 Oct '06

Hi, after rsyncing a tls-certificate from an i386-host to an amd64-one, I got this error message; Oct 25 21:13:23 alius dovecot: imap-login: Can't load private key file /etc/ssl/private/dovecot.pem: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch This happened with dovecot 1.0.rc7-1 (Debian etch) - the version on the i386 was 1.0.rc2-1bpo1. Any hints for me what to do? Cheers, Andi -- http://home.arcor.de/andreas-barth/

2 1

[Dovecot] mail_extra_groups and home directory permissions
by Joe Cooper 26 Oct '06

26 Oct '06

Hi all, I've got a virtual hosting environment, where each user lives in /home/domain/homes/user, and the mailbox is Maildir within that directory. I've been running into a permissions problem, because it seems Dovecot doesn't get the users group membership (which seems odd, but I'm not confident enough of my comprehension of Dovecot to call say it looks like a bug). In short, when Dovecot hits the /home/domain directory which is owned by domain:domain and set to 750 permissions, it gets a permission denied, despite the user having the needed group membership to traverse these directories. So, in an effort to work around this problem, I came upon the mail_extra_groups option, which seems to allow me to drop dovecot into additional groups. If I add the domain group to this list, dovecot is able to traverse to the correct directory and all works exactly as I want it to with the domain directories being set to 750 permissions. Hooray! My only question, since this is not the documented purpose of this option, is: Is it safe to do this? Am I opening up some other kind of security problem by setting this option to include all domain groups? Thanks for any thoughts anyone might have on this...

2 2

[Dovecot] "Real" users AND Virtual users
by Muhamad A. Martoprawiro 25 Oct '06

25 Oct '06

Dear all, How can I use dovecot for both "real" users and virtual users? I could configure dovecot for real users, by using these lines in /etc/dovecot.conf: default_mail_env = maildir:%h/Maildir auth default { passdb pam { } userdb passwd { } } To accept virtual users, I used these lines: default_mail_env = maildir:/usr/local/virtual/%u/ auth default { passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } } But, again, how to accept both kind of users? I use Postfix as mail server, and use LDAP/PAM for real users that have home-directory on the system. My OS is Mandriva 2007, and I use dovecot that is bundled as an RPM package (dovecot 1.9 rc7) in the OS. The content of file /etc/pam.d/dovecot: #%PAM-1.0 auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth Thanks. Regards, Muhamad

4 6

[Dovecot] P0P3 problems
by Nick 25 Oct '06

25 Oct '06

Hi, I'm setting up Dovecot on a Linux (Ubuntu) server and IMap works but P0P3 doesn't. When I try to get the eMail, it appears to do everything it should (no errors) but nothing gets downloaded. I'm also a little confused with this: If I select either "Password authentication source" Unix passwd or shadow file (using WEBmin or text edit the config file) Dovecot errors: Unknown setting: line 648: and yet, if I take it out it works fine. How does Dovecot get the passwords if no source is included ??? Please advise, Thanks, Nick. . . 1(973)614-8385 _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ . . . . . . . . Please visit my Web Hosting/Design Business at: http://MyHost.org -=[ The prices are great - as is the service ]=- . . . . . . . . _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/

9 10

[Dovecot] performance problems with rc10 and solaris 10
by Dominik Saar 25 Oct '06

25 Oct '06

Hi, i have 2 dovecot imap server running on solaris 10 The primary server with dovecot 1.0.alpha4 is running with best performance on Sun Sparc E4k5 with 8x 450MHz The secondary with rc10 has ugly performanceproblems on Sun E450 wth 4x 450MHz. Every new imap process takes permanent 25% cpu usage List the folder and fetch message are both slowy! Both servers are configred with ldap backend preventive i deleted for rc10 the complet index and controlfiles, because the spooldir is a sync from the masterserver with dovecot alpha4. I thought its a little bit slowy because of my 30.000 mails. the indexfiles are created now, but the still ugly slow .... For debugging i compiled rc10 again --with-debug=yes and start dovecot with solaris truss truss tells nothing to explain this behavor logentrys from dovecot has this warnings: --> dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing pool 'storage' with: 1024 dovecot: Oct 18 14:51:47 Info: IMAP(saar): dirsize quota limit = 750000kB dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 32768 dovecot: Oct 18 14:51:47 Warning: IMAP(saar): Growing data stack with: 65536 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing data stack with: 131072 dovecot: Oct 18 14:51:48 Warning: IMAP(saar): Growing pool 'uidlist record_pool' with: 32768 <-- also i compiled rc10 --with-notify=none, no result to ensure it isn´t the solaris system, i compiled alpha4. Result: good performance Any ideas? Cheers Dominik

3 10

[Dovecot] Unsolved : mbox-sync-rewrite.c : assertion failed
by Jakob Curdes 25 Oct '06

25 Oct '06

Some days ago I wrote about an inaccessible mailbox after an upgrade from 0.99.14 to 1.0rc10. Today I get this problem with another mailbox but it seems to be it is not only related to the upgrade : - user comes back from holiday, does not see his inbox : dovecot: Oct 24 18:51:09 Error: IMAP(abcd): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) (he accessed it last with the old dc version) Solution : moving account to other server, copy everything over to the old account and it worked. This is what I did and afterwards the mailbox was readable. Now the user goes back to his PC (I made my work from another machine) and opens his mailclient (with the still existing account) and BINGO dovecot crashes again on the mailbox as berfore. Once ist has crashed on it, it than crashes always, even if you make a new account or remove the index. So I suppose it has rather to do with cached information in the client than with the upgrade itself. But nothing the client sends should be able to crash the server ! Hoping for an idea, Jakob Curdes

3 3

[Dovecot] Status of Shared Folders?
by Charles Marcus 24 Oct '06

24 Oct '06

Hi Timo, I'm just curious... is the Wiki up to date regarding the status of Shared Folder support for Dovecot? Specifically, does Dovecot still have a problem with Read-only (for certain users) maildirs using Shared folders defined via namespaces? I'm about ready to start testing a rollout, but wanted to find out what to expect with regard to Shared Folders - we use them extensively right now (Courier-imap), so it is important for us. Having per-user read/unread flags will be a very nice bonus, but I don't see anything about support for those... -- Best regards, Charles Marcus I.T. Director Media Brokers International 678.514.6200 x224 678.514.6299 fax

3 8

[Dovecot] LDAP Dovecot Configuration Problem
by kleiton＠pcs.com.br 24 Oct '06

24 Oct '06

Good Morning I have a problem with my dovecot configuration, somepeople can help-me sending me a example of a dovecot with ldap configuration ? dovecot.conf slapd.conf I'm have - dovecot-1.0-0.beta8.2.fc5 - kernel-smp-2.6.17-1.2157_FC5 - openldap-2.3.19-4 - Fedora Core 5 Today we connect using PAM but we like connect by LDAP because we have some problems. Thanks !

2 1

[Dovecot] converting from courier questions
by Aaron P. Martinez 24 Oct '06

24 Oct '06

I currently run postfix and courier on my mail servers with squirrelmail. The problem with courier is it seems to run so slow. The webmail takes forever to load if you have many mails. I have this set up in virtual domains with all longin and path info in an mysql database. I just joined the list and DID google before asking, hope this isn't a common question. With courier it looks for a "homedir" and then a "maildir".. I tried doing a query as such: user_query = SELECT Homedir and Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' to no avail, is my sql wrong or can you not cat the homedir and maildir fields together to create the complete path to home? . i got around the homedir problem by setting mail_chroot = /var/spool/postfix/virtuals (is this the general way, only way?) and then in my dovecot-mysql.conf i have user_query = SELECT Maildir AS home, VUID AS uid , VGID AS gid FROM users WHERE Email_address = '%u' This almost worked but as i was watching the logs it was looking for /var/spool/postfix/virtuals/<somedomainname>/Maildir//Maildir In courier the "Maildir" is not implied, it has to be spicified in the database. I have a LOT of users and would love to avoid chaning every line in my database. or add another filed just for dovecot. I would also like the ability to switch back and forth for testing with courier.. Is there anyway that this can be done? Thanks in advance, Aaron

2 1

[Dovecot] LDAP authentication blank password
by Matheus Antonio Oliveira 24 Oct '06

24 Oct '06

People, I have a situation: when use a passwd LDAP module against "microsoft active directory" and one user send a blank password the authentication module returns: "ERR [IN-USE] Internal login failure. Refer to server log for more information."; after this the authentication module never authenticate again "ERR Temporary authentication failure." Thanks in advanced. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass <BLANK> -ERR [IN-USE] Internal login failure. Refer to server log for more information. Connection closed by foreign host. Trying 0.0.0.0... Connected to 0 (0.0.0.0). Escape character is '^]'. +OK Dovecot ready. user xyz@domain +OK pass correct-password -ERR Temporary authentication failure. -- Matheus Antonio Oliveira

3 2

[Dovecot] Creating MySQL db
by Gerard Seibert 24 Oct '06

24 Oct '06

I was just wondering if anyone was using or aware of a program to create MySQL Data Bases for use with Dovecot. For Postfix, there is the 'Postfixadmin' application. I have not seen anything similar for Dovecot and was wondering if one existed. My system consists of all virtual users. -- Gerard Never attribute to malice what can adequately be explained by incompetence.

2 1

[Dovecot] problems with authentication
by Paul Aguirre 24 Oct '06

24 Oct '06

Hi, I have some problems I'm using fetchmail to get my mail from the server to a local server, but the problem is that my user name of the mail is "user@virtualdomain" and I can't make a system user with "@" on centos. So, I want to know how can I tell to dovecot the user "user@virtualdomain" is associate to a sistem user "user.virtualdoman". Or if any one knows another solution. Thanks Paul __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Dovecot] Dovecot still failing with RC10...
by Brent Spencer 24 Oct '06

24 Oct '06

Are you getting a "chdir (null)" type of message just prior to the Error: Maximum number of mail processes exceeded"? Thanks, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

1 0

[Dovecot] Proxy using passd file
by Clayton Epp 23 Oct '06

23 Oct '06

I'm trying to create a proxy using passwd files. Can I use the existing passwd files created by the system (ie passwd and shadow) or do I have to create new passwd files for the email proxy users? How would the passwd and shadow files for a proxy using passwd files look? I've tried the example on the wiki but I'm not getting anywhere, pop and imap requests are not getting sent to the other server.

3 4

Re: [Dovecot] any idea why the mail downloading is slow?
by LeVA 23 Oct '06

23 Oct '06

2006. October 23. 18:46, Ejay Hire: > What client are you using? I've found Outlook to be a huge > bottleneck compared to Tbird. I'm using KMail 1.9.5. Indeed, with Tbird, the download is faster with KMail. Any idea what could be the problem? I don't think this is a "bug" in KMail; maybe a configuration issue? Daniel > > -ejay > > -----Original Message----- > From: dovecot-bounces(a)dovecot.org > [mailto:dovecot-bounces@dovecot.org] On Behalf Of LeVA > Sent: Saturday, October 21, 2006 4:37 AM > To: dovecot(a)dovecot.org > Subject: [Dovecot] any idea why the mail downloading is slow? > > Hi! > > I'm using rc10, but had this problem with previous releases too. Not > sure if this is a dovecot problem, but I can not think of anything > else. The mail downloading with pop3 is ~very slow, approx. 20 Kbyte > / sec. no matter how many mails I've got in my mailbox, or how big > are the mails. My ISP provides me a dedicated 100mbit line, and > everything else works as fast as expected eg. http, ftp, scp... > The OS is OpenBSD 3.9-stable and the system is not under heavy load > at all. I've tried to turn off TLS but there was no change. > > Is the pop3 protocol this slow by design or there is something wrong > with my setup? > > Thanks! > > Daniel > > -- > LeVA -- LeVA

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

>> Axel Thimm wrote: >> >>> On Mon, Oct 23, 2006 at 11:04:18AM +0300, "????????? >>> ????????????? (Apostolis Papagiannakis)" wrote: >>> >>> >>>> I've had similar "User unknowns" with nscd in the past. I was using >>>> dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. >>>> >>>> >>> Are you using ldapi? >>> >>> >> Oops, I think I sent my previous post with unreadable HTML formating. I >> hope this one is OK. >> >> In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as >> "ldaps" URIs. >> >> # /etc/ldap.conf >> uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/ >> >> apap >> >> > > You need to make sure that the user nscd is running as has proper > permissions to the required resources (r/w on ldapi sockets, read on > ldaps' ca certs and the like). Turn on the debug level in ldap.conf > (nss_ldap's, not openssl's) and sudo to the nscd user/group to test > the access. > > Also nscd doesn't use rootbinddn, it uses binddn. > I think file permissions have always been ok because nscd and nss_ldap usually work ok. The problem appears only when the ldap connection breaks (e.g. remote ldap server restart). We don't use rootbinddn at all. Anyway I just checked the latest version of nss_ldap and now I see interesting new relevant options are available (e.g. nss_connect_policy persist/oneshot). I will give it a try and respond back in a few days. Definately nss_ldap's bad behaviour is not really a dovecot problem. Dovecot has been rock solid here serving 30000 users (4000 different active users every day) on a single server. apap

1 0

Re: [Dovecot] 1.0.rc10 status report
by "Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)" 23 Oct '06

23 Oct '06

dovecot-request(a)dovecot.org wrote: > Date: Fri, 20 Oct 2006 13:26:03 +0100 (BST) > From: David Lee <t.d.lee(a)durham.ac.uk> > Subject: [Dovecot] 1.0.rc10 status report > > > 1. "User unknown": We use NIS for our passwd information. On the earlier > rc8 test we had had several occurences of "User unknown" (from "deliver") > giving "dsn=5..." for perfectly valid users. So for this rc10 test I > applied a local patch so these were reduced to "EX_TEMPFAIL" (dsn=4...). > (This was triggered, as epected, a few times and subsequent delivery > attemtps succeeded.) I strongly suspect that this is some sort of issue > with FC5, probably "nscd" and nothing to do with dovecot. Hints would be > nice, but from the dovecot perspective you may probably ignore this item. > > I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP. I found out that whenever the ldap server got restarted, nscd did not restart properly and immediately its permanent ldap connection, and was giving 'user unknown' replies at least for a few minutes. Restarting nscd would fix the problem immediately. Running without nscd would also fix the problem. There was no problem with pam_ldap authentication. As a result, the system got ignorant of its uncached users for a few moments. My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files' (cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd > So should I have the indexes on the fileserver (one instance), or should they > be on each cluster machine's private storage (possibly several instances; > one per cluster machine)? The suggestion is that if you need to have mailboxes over NFS, use local disk for indexes. If you read the complete list archive you will find too many people that have had troubles with indexes over NFS. Local indexes have a performance penalty, only when you have access from different imap servers (especially concurrent) . apap

3 4

[Dovecot] mysql-5.0.26 stored procedure authorization, take 2
by Chaos Engine 22 Oct '06

22 Oct '06

Last time I came up with a problem with concernin MySQL authorization with stored procedures. Timo helped me get going by with modified client_flags (MULTISTATEMENT keyword). Now all it happened again but from another way. My stored proce for MySQL is causing fillowing error: "Oct 21 12:39:22 haos dovecot: auth-worker(default): sql(user,192.168.X.X): Password query fai led: Commands out of sync; you can't run this command now" Looks like it is partly mysql-5.0.26 thing because of this: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html On the other hand with my previous mysql installation (mysql-5.0.24-r1) this error is gone (I checked by downgrading). My dovecot-sql.conf: driver = mysql connect = host=/var/run/mysqld/mysqld.sock dbname=mailbase user=mailuser password=******** client_flags=65536 #655536 is equivalent of CLIENT_MULTI_STATEMENTS flag #yes, I still insist on using stored proc for authorization. This gives me few usefull features I like. password_query = call Authenticat('%u', '%n', '%d') With this config on mysq-5.0.26 I get "...Commands out of sync; you can't run this command now..." but not on mysql-5.0.24-r1. Personally I think mysql guys changed something; I can't tell what and why (changelog review?) Maybe you guys know what it was? -- Chaos greets U

2 1

[Dovecot] Using saslauthd with dovecot
by Gerard Seibert 21 Oct '06

21 Oct '06

FreeBSD 6.1 STABLE Postfix-2.4-20061006 Dovecot-1.0.rc7 I am using 'saslauthd -a sasldb -c' for authentication with Postfix. Since Dovecot and Postfix are using the same users and passwords, I was wondering if it would be possible to use this mechanism with Dovecot also. -- Gerard "There is nothing wrong with making love with the light on. Just make sure the car door is closed." George Burns

2 3

[Dovecot] Virtual Users
by Gerard Seibert 20 Oct '06

20 Oct '06

Dovecot 1.0.rc7 Postfix 2.4-20061006 FreeBSD 6.1 STABLE I have dovecot up and running with postfix. I now want to switch over to a system using purely virtual users. I have gotten postfix configured to deliver the mail to virtual mailboxes correctly. The problem I am having is with dovecot. After configuring the dovecot.conf file, dovecot will POP mail from the virtual mailboxes. However, that is only for users who are in the /etc/password file. I will have a large number of users who are truly virtual and therefore not be in that file. I know I am dumb, but I do not know how to set up either a MySQL data base, or just a plain flat file with the required information. I tried Googling, but I cannot find the exact syntax to use. Perhaps someone could point me in the right direction or give me a brief example of how to go about this. Thanks! -- Gerard "It is not the OS's job to stop you from shooting your foot. If you so choose to do so, then it is OS's job to deliver Mr. Bullet to Mr Foot in the most efficient way it knows."

2 1

[Dovecot] md5 password storage
by Andrey Bibiano Jardim 20 Oct '06

20 Oct '06

Hi List. I've got a dovecot running with mysql. All my users data are there. But I intend to use MD5 instead of clear passwords at MySQL. Someone can help-me? []s; Andrey Here's my dovecot-mysql.conf: # Dovecot queries db_host = localhost db_unix_socket = /var/lib/mysql/mysql.sock db_port = 3306 db = mail db_user = my_conn_user db_passwd = my_conn_passwd # # Pehapes i need to change this, but I tryied changing it do md5 with no success. # default_pass_scheme = PLAIN # # This I changed for own reasons, but works. # password_query = SELECT clear FROM postfix_users WHERE user=substring_index('%u', "@", 1) user_query = SELECT concat('/var/spool/mail/', maildir) AS mail, uid, gid FROM postfix_users WHERE user=substring_index('%u', "@", 1)

2 1

[Dovecot] 1.0.rc10 in inetd mode
by Phil Oleson 20 Oct '06

20 Oct '06

Hey.. I'm finding that I can force dovecot (setup in inetd mode) into a wedged state by spamming it with carrage returns. As I've not had enough time to familiarize myself with the code.. I thought I'd ping the list before 1.0 is christened. -Phil.

2 3

[Dovecot] Problem with indexes
by crs 20 Oct '06

20 Oct '06

Hello. Dovecot is really good software but I have one big problem with indexes. I have server with a lot of mailboxes - filesystem has quota enabled and I can't resign it from different reasons. When mailbox achieve quota size and user wants to pick mails via pop3, error "-ERR Mailbox is in inconsistent state, please relogin." is given. I know it's because dovecot can't write indexes. Is it possible to force dovecot to write indexes with definite owner/group f.e dovecot/dovecot and not owner/group of mailbox? I can set quotas for user dovecot to unlimited and problem would disappear. Thanks in advance for any answers. Best regards - Chris. ---------------------------------------------------------------------- PS. >>> http://link.interia.pl/f19a6

3 2

[Dovecot] POP State
by LDB 20 Oct '06

20 Oct '06

I upgraded Dovecot and it was smooth except some of my users using POP3 and leaving their mail on the server, are getting all their mail again. Is there a way to prevent this from happening in the future? /var/run/dovecot was kept during the upgrade ... Thanks, LDB

2 2

[Dovecot] Subscription file
by Steven F Siirila 19 Oct '06

19 Oct '06

Background: We are a UW-IMAP shop, using mbox format. (!) We are in the process of upgrading to Dovecot, hopefully to 1.0 proper. :) One of the modifications we have been using in test versions of Dovecot involve the move of the user subscription file from: IMAP-root/.subscriptions to: $HOME/.mailboxlist Rather than having to make changes to Dovecot source code each time a new release comes out, it would seem to make sense to have a way to configure this from dovecot.conf. Something like: # Default (%i denotes IMAP root): #imap_subscription_file = %i/.subscriptions # UW-imap-style (%h denotes home directory): #imap_subscription_file = %h/.mailboxlist While it makes sense to me to have the subscription file where it is in Dovecot by default, it would be a substantial undertaking to determine where to move the .mailboxlist to in our environment for each user, since there is no easy way to determine what a user's IMAP root directory is set to in their client. Thoughts? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

3 3

Re: [Dovecot] open-folder limit
by Bill Boebel 19 Oct '06

19 Oct '06

On Thu, October 19, 2006 11:57 am, "T. Horsnell" <tsh(a)mrc-lmb.cam.ac.uk> said: > Is there a way to limit the number of folders a user can > have open simultaneously? I am fairly certain that there is no way to do this. Bill

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] open-folder limit
by T. Horsnell 19 Oct '06

19 Oct '06

Is there a way to limit the number of folders a user can have open simultaneously? I seem to remember a config option which would only permit one imap process per user, and would share this between his folders, but I cant find anything relevant in the docs now. Am I talking nonsense here? I'm new to Dovecot. Cheers, Terry.

1 0

[Dovecot] Urgent - Inconsistent Inboxes
by Jakob Curdes 19 Oct '06

19 Oct '06

Hi, An urgent problem that I have : runninng dc 0.99.14 w mbox on local ext3 , nothing special, no nfs, nothing. For this machine we have a backup server rsyncing everything over. Now the main server went down and we started DC on the backup machine some day ago. Everything went well, besides one problem : people complained about missing mails that they had seen beforehand. When looking in the inbox, they were all there. After recreating the imap account (outlook express) or deleting the cache file (thunderbird .msf files) everything was well. But you can't really recreate all accounts after switching to the backup machine every time.... today we went back to the main server and in advance I deleted all .imap.index files hoping that they might have been the eventual cause of the problem, but no, same thing happens again. It now seems to me that this is a pure client issue, but nevertheless two questions : a) who knows a way to tell the client (OE or TB in this case) to disregard all local information and get everything fresh from the server ? b) Can this behavior be influenced from the server side? I know I'm behind with 0.99.14 but up to now there was no problem and "never change a running system". If upgrading could help, I would do it immediately. Any hints welcome, especially fast ones as tomorrow morning I have to get the clients running. Yours, Jakob Curdes

2 5

[Dovecot] Assertion failure with Dovecot 1.0rc10
by David Schweikert 19 Oct '06

19 Oct '06

Hi, I am seeing the following (with Dovecot 1.0 rc10): Oct 18 07:35:58 dovecot: IMAP(user): UIDs broken with partial sync in mbox file /var/mail/user Oct 18 07:35:58 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Oct 18 07:35:59 dovecot: IMAP(user): file mbox-sync-rewrite.c: line 405 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) Oct 18 07:37:42 dovecot: IMAP(user): mbox sync: UID inserted in the middle of mailbox /var/mail/user (15314 > 9604, seq=5, idx_msgs=224) Any idea of what this could be? The user is reporting that he is seeing multiple times the same mails and that the new flag is not being unset after he reads a mail. Cheers David -- David Schweikert | phone: +41 44 632 7019 System manager ISG.EE | walk: ETH Zentrum, ETL F24.1 ETH Zurich, Switzerland | web: http://people.ee.ethz.ch/dws

1 1

[Dovecot] LDAP Username Change
by Todd Johnson 19 Oct '06

19 Oct '06

I have a virtual setup using LDAP where the a user has an email address at 2 domain names. The want the mail kept separate but want to use the same password. I use the mail attribute and insert both email addresses. This works perfectly with deliver but opens the wrong Inbox when I IMAP. Is there a way to disable this in the conf file? host dovecot: auth(default): auth(jeff@idom.net,::ffff:127.0.0.1): username changed jeff(a)idom.net -> jeff(a)jdom.net

1 1

[Dovecot] Logging authentication failures?
by dri 19 Oct '06

19 Oct '06

I use a script that watches log files looking for failed ssh login attempts and adds firewall rules when there are enough login failures within a certain amount of time. I would like to apply this to Dovecot to automatically firewall attackers trying to brute-force an IMAP account. Is there a way to make Dovecot log authentication failures (I'm running 1.0.rc10)? In other words, can I configure Dovecot to put something in the log the instant "NO Authentication failed" is sent to the IMAP user? With "auth_verbose = yes" I can see individual authentication mechanisms fail, but I have multiple passdb sections so a failure in one mechanism doesn't mean a complete login failure. Thus, configuring the script to watch for individual mechanism failures may result in the firewalling of legitimate users. Thanks for any info!

1 0

[Dovecot] Proxy not working using passwd-file
by Clayton Epp 18 Oct '06

18 Oct '06

I've been having problems setting up my proxy using dovecot. I'm using the passwd-file for authentication as well as the regular unix passwd file. Can someone provide me with a complete example of how this should be done, I'm finding that the documentation on http://wiki.dovecot.org/AuthSpecials is sparse on the details. Please do not assume anything as I am new to both Dovecot as well as Linux (FC5).

1 0

[Dovecot] Dovecot-compatible web-based sieve configurator
by Koen Vermeer 18 Oct '06

18 Oct '06

Hi, I've set up dovecot with postfix and I'm using the dovecot LDA. It seems that sieve works, but I'm not that good at writing sieve scripts and I'd like to install something more user-friendly anyway. So: Does anyone know of a web-based sieve configurator that works with the dovecot implementation? I haven't been able to find one yet... Koen

3 4

[Dovecot] trash plugin causes crashes in quota plugin?
by Mike Horwath 18 Oct '06

18 Oct '06

I just lost my scrollback - so I'll have to recreate it the issue. Using both 1.0r7 and 1.0r10 on FreeBSD 6.1-STABLE. For the: mail_plugins = quota imap_quota that works fine (using maildir for quota plugin) But... mail_plugins = quota imap_quota trash will cause the quota plugin to die at line 156 of quota.c: root->v.deinit(root); I haven't dug through the code enough to find the actual area for this piece of code to add some debugging. Once I can generate a new traceback, I'll drop another email. -- Mike Horwath drechsau(a)iphouse.net ipHouse - Welcome home!

2 1

[Dovecot] passdb checkpassword and lastauth
by Max A 18 Oct '06

18 Oct '06

Hi. If checkpassword interface is used for working with vpopmail, function vpopmail "Record time and ip of last auth attempt" (--enable-auth-logging option for configure) won't work - the file "lastauth" is created in Maildir, but does not contain ip-address. If I had correctly understood, dovecot woldn't have set a enviroment variable TCPREMOTEIP for vchkpw. If changes are made in auth/passdb-checkpassword.c (a patch in attachment), everything will work. Probably, the patch is incorrect and does not solve all problems, however the request is to pay attention to existence of the problem. Also it is possible, that a similar problem exists with other variables TCP UCSPI protocol (http://cr.yp.to/proto/ucspi-tcp.txt) P.S. If use the interface vpopmail instead of checkpassword, the file "lastauth" will not be created at all, that is a little bit inconvenient. ********************************** System: dovecot-1.0.rc10 vpopmail-5.4.17 ASP Linux Server II (RHEL3 clone) kernel 2.4.21-47.EL.aspsmp CPU architecture: x86 (IBM xSeries 336) Filesystem: ext3 ********************************** dovecot configuration: base_dir = /var/run/dovecot/ protocols = imap pop3 disable_plaintext_auth = no ssl_disable = yes login_greeting = Ready. first_valid_uid = 89 last_valid_uid = 89 first_valid_gid = 89 last_valid_gid = 89 protocol imap { listen = 81.26.136.8:144 mail_executable = /usr/local/libexec/dovecot/imap mail_plugins = quota imap_quota mail_plugin_dir = /usr/local/lib/dovecot/imap imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { listen = 81.26.136.8:112 login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %f mail_plugins = quota mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain login passdb checkpassword { args = /var/qmail/vpopmail/bin/vchkpw } userdb prefetch { } user = root } dict { } plugin { quota = maildir } *************************************** dovecot configure options: ./configure \ --disable-ipv6 \ --prefix=/usr/local \ --sysconfdir=/etc/dovecot \ --without-passwd \ --without-passwd-file \ --without-shadow \ --without-pam \ --without-bsdauth \ --with-checkpassword \ --with-vpopmail \ --without-static-userdb \ --with-prefetch-userdb \ --without-sql \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-ssl=openssl \ --with-pop3d \ --without-deliver \ --with-storages=maildir \ --with-docs ***************************************** vpopmail configure options: ./configure \ --enable-auth-module=cdb \ --enable-logging=p \ --enable-md5-passwords \ --enable-make-seekable \ --enable-file-sync \ --enable-ip-alias-domains \ --enable-clear-passwd \ --disable-roaming-users \ --disable-learn-passwords \ --disable-passwd \ --enable-auth-logging diff -ur dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c dovecot-1.0.rc10/src/auth/passdb-checkpassword.c --- dovecot-1.0.rc10.orig/src/auth/passdb-checkpassword.c 2006-08-22 06:37:56.000000000 +0400 +++ dovecot-1.0.rc10/src/auth/passdb-checkpassword.c 2006-10-17 16:47:09.000000000 +0400 @@ -226,6 +226,10 @@ env_put(t_strconcat("REMOTE_IP=", net_ip2addr(&request->remote_ip), NULL)); + env_put(t_strconcat("TCPREMOTEIP=", + net_ip2addr(&request->remote_ip), + NULL)); + } if (request->master_user != NULL) { env_put(t_strconcat("MASTER_USER=",

1 0

[Dovecot] 1.0.rc10 released
by Timo Sirainen 18 Oct '06

18 Oct '06

http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz.sig I've finally read all the mails in the mailing list and in my INBOX. If I haven't replied to some of your mail, please resend it. Remember that since 1.0.rc9 release dovecot.index.cache files will get rebuilt in 64bit systems, and it's probably better to delete them manually so you don't get errors in log files. There are only a couple of issues left in my v1.0-TODO list: - Master process appears to be leaking log fds with kqueue. Could someone again give me access to a system where this happens? - Login process problems. How well does it work now? Hopefully well enough that v1.0 could be released. - LDAP authentication is leaking memory? Can anyone confirm this? Even better, can someone figure out what exactly is leaking? :) Not a v1.0 blocker though. I think v1.0 will be released once no-one has reported any major problems for a Dovecot release in 2-4 weeks. I think login process handling is the only potentially major problem left. There are a few patches from people that I haven't forgotten, but I've decided not to put them into v1.0 anymore: - Filesystem quota group. I don't think it's that important feature, and it might break something. - HFS+ hardlink avoiding - Managesieve - vmailmgr support And finally the changes in this release: * When matching allowed_nets IPs, convert IPv6-mapped-IPv4 addresses to actual IPv4 addresses first. + IMAP: Try to avoid sending duplicate/useless message flag updates + Added support for non-plaintext authentication for vpopmail if it returns plaintext passwords. Based on patch by Remi Gacogne. + Added %D modified to return "sub.domain.org" as "sub,dc=domain,dc=org" (for LDAP queries). Patch by Andrey Panin. - rc9 broke cache files in 64bit systems - deliver works now with mail_chroot - auth cache didn't work properly with multiple passdbs - Fixes to handling CRLF linefeeds in mboxes.

13 22

[Dovecot] autoconf check for ldap not linking with -lber
by Jorgen Lundman 18 Oct '06

18 Oct '06

Maybe not a big deal, but generally you (used to?) link against both: configure:31276: checking for ldap_init in -lldap configure:31311: gcc -o conftest -std=gnu99 -I/usr/local/include -Wall -W -Wmiss ing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat =2 -Wbad-function-cast -I/usr/sfw/include -L/usr/local/lib conftest.c -lldap -lsocket -lnsl -lrt -lsendfile >&5 Undefined first referenced symbol in file ber_sockbuf_io_readahead /usr/local/lib/libldap.so ber_sockbuf_alloc /usr/local/lib/libldap.so ber_sockbuf_io_fd /usr/local/lib/libldap.so But could be special situation as my LDAP version is fixed, due to production environment using it. It also failed when OpenLDAP was linked against OpenSSL, since it does not try with the SSL libraries. Lund -- Jorgen Lundman | <lundman(a)lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)

2 3

[Dovecot] defunct processes
by LDB 18 Oct '06

18 Oct '06

I am using SuSE 10.1 and dovecot version 0.99.14-5. dovecot 6267 660 0 14:45 ? 00:00:00 imap-login dovecot 6285 660 0 14:45 ? 00:00:00 pop3-login dovecot 6371 660 0 14:45 ? 00:00:00 imap-login postfix 6454 12811 0 14:46 ? 00:00:00 smtp -t unix -u dovecot 6511 660 0 14:46 ? 00:00:00 pop3-login postfix 6550 12811 0 14:46 ? 00:00:00 showq -t unix -u dovecot 6576 660 0 14:46 ? 00:00:00 imap-login dovecot 6579 660 0 14:46 ? 00:00:00 pop3-login root 6580 666 1 14:46 ? 00:00:00 [dovecot-auth] <defunct> ldb 6581 660 0 14:46 ? 00:00:00 pop3 After dovecot has been up and running for a while (1 month or so), it tends to get hung up and unresponsive. I do a "ps" and I have a whole host of defunct processes. To restore service, I have to manually kill all dovecot processes and start it up again. Is this a symptom of my version or my configuration? Thanks, LDB

3 8

[Dovecot] Strange POP3 problem...
by Mike Cisar 18 Oct '06

18 Oct '06

I've been having this problem for a long time now. It started when I first began to use Dovecot (0.9x) and seems to have been occurring more and more frequently as we've progressed through the betas and now into RC7. I have been kind of chaulking it up to a "user issue" since the problem only seems to occur for one user (who has one machine at his office, and one at his weekend cabin... problem occurs with equal frequency on both of his machines). Lately it's been occurring about once every couple of days, but still nothing that I have been able to reproduce with any particular email or frequency. However as luck would have it the problem occurred today while I was onsite at the client's office so I was at least able to see that end of things at the same time. Essentially the user will have a number of messages in their mailbox (today for example 13) the download of mail will go just fine until one particular message and then the download will just stop, eventually returning an error message. Trying to receive mail again will retrieve messages 1-9 again and fail in the same spot. If you log in via IMAP and delete the following message (ie. the message after the one that was last received) you can then POP for mail again and the remaining messages in the mailbox will download. In the log all we see is the following (over and over)... Aug 28 16:14:51 mail dovecot: pop3-login: Login: user=<xxxxx>, method=PLAIN, rip=vvv.www.xxx.yyy, lip=vvv.www.xxx.yyy Aug 28 16:15:32 mail dovecot: POP3(xxxxx): Disconnected top=0/0, retr=9/170375, del=0/13, size=1349520 >From the client side I get the following in Outlook Express... "Your server has unexpectedly terminated the connection..." "...POP3, Server Response: '+OK 795 octets'..." Interestingly 795 bytes is the size of the "bad" email (the one that won't download). Any thoughts? Cheers, >>>>> Mike <<<<<

8 9

[Dovecot] Index files
by Steven F Siirila 17 Oct '06

17 Oct '06

I am doing some testing with Dovecot and wondered if it was normal for the deliver program to create index files for an Inbox (the test Inbox is over 7MB), but to not update the index files after the initial creation, even though messages continue to come into the mailbox. Note that during this testing, no IMAP or POP accesses are being made. Would it matter if a command-line program such as mutt were reading/updating the Inbox in question? Shouldn't Dovecot delivery be continually updating the index files as new messages arrive in the Inbox? -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 4

[Dovecot] dovecot tpop3d UIDL mbox
by antencek＠volja.net 17 Oct '06

17 Oct '06

Hello All! I am new to this list so I hope I'm not in the wrong list with my question. First, I have to say that dovecot is (in my opinion) one of the best POP3/IMAP servers arround. I especialy like its' simplicity (configuration) and powerfullness (speed, auth mechs). In my production environment I would like to cange from tpop3d to dovecot, but I have only one little problem :). This is my situation: pop3 server: tpop3d mail fromat: mbox (/var/mail/username) UIDL: tpop3d UIDL format Since there are users who let mail on server, I need to keep UIDL. The problem is that the patch which gives dovecot the capability to replay with tpop3d UIDL format apparently works only on maildir mailboxes. Is there any resonable solution to my problem? TIA. Regards, Antencek

3 2

[Dovecot] allow_nets and mysql question
by Alex Samorukov 17 Oct '06

17 Oct '06

Hi. I want to use allow_nets in my configuration, but i have some troubles which i cant resolve. To use allow_nets i creates `allow_nets` text field in my mysql users table. My query is: from: dovecot/sql.conf: password_query = SELECT crypt as password, maildir as userdb_mail, 6 AS userdb_uid,6 AS userdb_gid, allow_nets FROM users WHERE id = '%u' from dovecot.conf: auth default { mechanisms = plain passdb sql { args = /usr/local/etc/dovecot/sql.conf } userdb prefetch { } user = root } To check this i added address 193.193.193.100/32 (which is not my address) and tried to connect from localhost (using telnet). And it allow me to connect! May be i did something wrong, but i cant explain this, so i`m asking for your help. Here is debug information: Dovecot v1.0.rc10 starting up auth-worker(default): mysql: Connected to localhost (maildb) auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=10.0.0.1 rip=10.0.0.1 resp=<hidden> auth-worker(default): sql(testuser(a)example.com,10.0.0.1): query: SELECT allow_nets,crypt as password, maildir as userdb_mail, 1005 AS userdb_uid,6 AS userdb_gid FROM users WHERE id = 'testuser(a)example.com' auth-worker(default): auth(testuser(a)example.com,10.0.0.1): allow_nets: Matching for network 193.193.193.100/32 auth-worker(default): passdb(testuser(a)example.com,10.0.0.1): allow_nets check failed: IP not in allowed networks auth(default): client out: OK 1 user=testuser(a)example.com auth(default): master in: REQUEST 1 65787 1 auth(default): master out: USER 1 testuser(a)example.com mail=/usr/local/vdomains/example.com/users/testuser/Maildir/ uid=1005 gid=6 pop3-login: Login: user=<testuser(a)example.com>, method=PLAIN, rip=10.0.0.1, lip=10.0.0.1, secured POP3(testuser(a)example.com): Effective uid=1005, gid=6 POP3(testuser(a)example.com): maildir: data=/usr/local/vdomains/example.com/users/testuser/Maildir/ POP3(testuser(a)example.com): maildir: root=/usr/local/vdomains/example.com/users/testuser/Maildir, index=/usr/local/vdomains/example.com/users/testuser/Maildir, control=, inbox= POP3(testuser(a)example.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/7, size=1362269

2 3

[Dovecot] auth problem
by Lampa 17 Oct '06

17 Oct '06

hello, i new to list but i need little help. I need only imap (later pop3),i have own checkpassword and own user/password database. i'm using last version v1.0.rc10 But i have problem with auth, user is authorized but cannot login, here is log: dovecot: Oct 17 15:00:36 Info: Dovecot v1.0.rc10 starting up dovecot: Oct 17 15:00:40 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=10.0.0.1 rip=10.0.0.13 resp=AG1kdgBza29sYTY2Ng== dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Executed: /usr/local/checklocalpwd/checkpassword.pl /usr/local/dovecot/bin/dovecot/checkpassword-reply dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Received input: userdb_user=lampa userdb_home=/home/_mail/lampa userdb_uid=65534 userdb_gid=65534 dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): Received no input dovecot: Oct 17 15:00:40 Info: auth(default): checkpassword(lampa,10.0.0.13): exit_status=0 dovecot: Oct 17 15:00:40 Info: auth(default): client out: OK 1 user=lampa dovecot: Oct 17 15:00:40 Info: auth(default): master in: REQUEST 1 17950 1 dovecot: Oct 17 15:00:40 Info: auth(default): master out: USER 1 lampa user=lampa home=/home/_mail/lampa uid=65534 gid=65534 dovecot: Oct 17 15:00:40 Info: imap-login: Internal login failure: user=<lampa>, method=PLAIN, rip=10.0.0.13, lip=10.0.0.1 dovecot: Oct 17 15:00:40 Error: Logins with UID 65534 (user lampa) not permitted (see first_valid_uid in config file) i think that problem is that uid and gid is set to user nobody instead 508 and 502 (user lampa , end of message is passwd file) uid 65534 is user nobody (used in auth section in conf, if i set it to root everyhting is ok) this is my config: base_dir = /var/run/dovecot/ protocols = imap listen = 10.0.0.1 disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log info_log_path = /var/log/dovecot/dovecot.info log_timestamp = "%b %d %H:%M:%S " ssl_disable = yes login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot mail_debug = yes mail_log_prefix = "%Us(%u): " verbose_proctitle = yes first_valid_uid = 508 last_valid_uid = 508 first_valid_gid = 502 last_valid_gid = 502 protocol imap { login_executable = /usr/local/dovecot/bin/imap-login mail_executable = /usr/local/dovecot/bin/imap } auth_executable = /usr/local/dovecot/bin/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb checkpassword { args = /usr/local/checklocalpwd/checkpassword.pl } userdb prefetch { } user = nobody } in file i must comment out chdir $home (program was unable to chdir) i think due to chroot /usr/local/checklocalpwd/checkpassword.pl: #!/usr/bin/perl use POSIX; use strict qw(vars); my $PASSWD_FILE = "/usr/local/qmail/control/passwd2"; %ENV=(); my($len, $buf); open (USER, "<&=3") || _exit(2); $len = read(USER, $buf, 512); close USER; _exit(2) if $len < 4; my($user, $pass) = split /\x00/, $buf; $user = lc $user; $buf = "\x00" x $len; my $cwd = getcwd; my ($passwd, $uid, $gid, $gcos, $home, $shell) = ""; open F, $PASSWD_FILE || _exit(111); while (<F>) { if (/^$user:/) { ($user, $passwd, $uid, $gid, $gcos, $home, $shell) = split(/:/); } } close F; _exit(2) unless $uid; if (crypt($pass, $passwd) ne $passwd) { _exit(1); } $ENV{USER} = $user; $ENV{UID} = $uid + 0; $ENV{HOME} = $home; $ENV{SHELL} = $shell; _exit(111) unless $ENV{UID}; #chdir $home || _exit(111); $) = $gid; $( = $gid; $> = $uid; $< = $uid; exec @ARGV; _exit(0); here is passwd/user file: lampa:HSExFJNuwlKvk:508:502::/home/_mail/lampa:/bin/false

1 0

Re: [Dovecot] File isn't in mbox format: /home/foo/mail/Trash
by Phil Roffe 17 Oct '06

17 Oct '06

> On Mon, 2006-10-16 at 05:40 -0500, James Lupolt wrote: >> > Hello, >> > >> > I'm seeing the following error on a server: >> > >> > File isn't in mbox format: /home/foo/mail/Trash >> > >> > The Trash file is full of the following at the beginning: >> > >> > ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^ >> > >> > I've repaired the file several times, but this keeps happening. Would >> > any of you mind offering me some insight into what could be causing this >> > and how to fix it? >> > > This is a known problem with v0.99.x. The mbox code has been rewritten > in 1.0rc versions and it doesn't have this problem, so I'd just suggest > upgrading. We had a problem with this several months ago. The alarming aspect of the corruption is when it occurs at the beginning of an email (i.e. ^@^@^@From:...). Emails can be lost/appended to the bottom of the previous email. I've seen this problem several times on our deployment and tracked it down to what appears to be NFS locking issues. Are you storing mails on an NFS mounted filesystem? If so check the following... http://wiki.dovecot.org/NFS We're running dovecot-1.0 beta5 (admittedly not an rc version but >beta4 which is mentioned in the NFS wiki section) so I'm not sure the mbox rewrite from v0.99.x has fixed the problem. We had several applications accessing the mbox (Dovecot and Pine mainly). Reconfiguring Pine to use IMAP (using Dovecot) rather than write to the mbox directly appears to have fixed the problem and we have had no corruption for several months now. So, my question is am I wrong to assume NFS locking/corruption? Does anyone know if this is really a Dovecot or NFS issue? Phil

3 4

[Dovecot] plugin to delete spam/virus/junk/trash mail after 30 days of life
by Beber 17 Oct '06

17 Oct '06

Hi, Is there a plugin or a way in dovecot to delete any mails older that 30 days in certain maildir ? Just something like find maildir:%h/.Spam maildir:%h/.Virus maildir:%h/.Junk maildir:%h/.Trash -type f -ctime 30 -exec rm {} \; -- Beber -- Email / Jabber (+GMail) : beber(a)meleeweb.net http://www.meleeweb.net

2 4

[Dovecot] 1.0.rc9 released
by Timo Sirainen 17 Oct '06

17 Oct '06

http://dovecot.org/releases/dovecot-1.0.rc9.tar.gz http://dovecot.org/releases/dovecot-1.0.rc9.tar.gz.sig Most importantly this should fix the login process problems that people have been reporting. There were also some bugs in the proxying feature. Also note the 64bit change in dovecot.index.cache files. Unless you delete dovecot.index.cache files manually, you'll these kind of error messages into your logs: Error: Corrupted index cache file ...dovecot.index.cache: registered field date.sent size changed They'll get fixed automatically of course, but it might be a bit annoying to see them. * 64bit systems: dovecot.index.cache file will be rebuilt because some time fields have been changed from 64bit fields to 32bit fields. Now the same cache file can be used in both 32bit and 64bit systems without it being rebuilt. * Added libmysqlclient workaround to conflicting sha1_result symbol, which caused Dovecot to fail logging into MySQL. + dovecot.index.cache file opening is delayed until it's actually needed. This reduces disk accesses a bit with eg. STATUS commands. + auth_cache: Try to handle changing passwords automatically: If password verification fails, but the last one had succeeded, don't use the cache. This works only with plaintext auth. - dovecot.index.cache: We didn't properly detect if some fields were different length than we expected, which caused assert crashes - Lots of fixes to login/master process handling - mbox: Fixed a bug causing "X-IMAPbase uid-last unexpectedly lost in mbox file" errors, and possibly others.

12 19

[Dovecot] Separate auth for pop and imap
by Hr. Daniel Mikkelsen 17 Oct '06

17 Oct '06

Hi. Is it possible to set up separate authentication backends for POP and IMAP for a single Dovecot instance? Or does this require two separate dovecot instances with separate config files? Specifically, I want to have one database query for IMAP and one for POP so that I can let these be separate features that I can flag in a database. -- Daniel Mikkelsen Copyleft Software AS

3 2

[Dovecot] Ignore leave on server
by Hr. Daniel Mikkelsen 17 Oct '06

17 Oct '06

Hi. Is it possible to ignore "leave on server" for POP3 clients? That is, always delete all downloaded mail automatically? -- Daniel Mikkelsen Copyleft Software AS

2 1

[Dovecot] MBox path
by Rick 17 Oct '06

17 Oct '06

Hi, I'm having great difficulty pointing Dovecot to my MBox files. They are all in /var/spool/mail/username as textfiles.. not directories. So my guess was: default_mail_env = /var/spool/mail/%u Since %u is user. If the user is "server" I would expect it to go to /var/spool/mail/server exactly what I want. But it doesn't /var/spool/mail///home/server. If I create the directory home in /var/spool/mail and make a symlink of the username pointing to /var/spool/mail it does work. But that's a very dirty workaround I rather not use, also because we have a lot of users.. a lot of symlinks. If I set default_mail_env = /var/spool/mail, it also searches for /var/spool/mail///home/server. I feel like I've tried everything. What am I doing wrong? I'm using version 1.0.beta8, included in Fedora Core 5. Thanks, Rick

2 1

[Dovecot] Dovecot still failing with RC10...
by Timothy Meader 16 Oct '06

16 Oct '06

Hello, I mentioned back with version RC8 that dovecot was having an issue with the first login working, but all subsequent attempts failing with the error message: "Error: Maximum number of mail processes exceeded" in the dovecot log file. This is with an unchanged working conf file from RC7 (which, aside from comments, nothing has changed config-wise in the conf from version RC7). Now, the max mail processes were already set at 1024 (and I'm the only person using this server while testing), but just for the heck of it, I tried bumping the number up to 4096 and giving it another shot. No such luck. You can login once, but any subsequent attempts come back with the error I mentioned. This is making all versions above RC7 unusable for me unfortunately. I was hoping to get buy-off on switching from QPopper/UWImap to an all Dovecot solution with the pending 1.0 final, but I doubt they'll go for allow and RC being run on the production side. Two notes that might help(?): -I'm running this on Solaris 9, not a Linux box -Dovecot is not running in daemon mode, it's running through xinetd Here are the xinetd.conf sections that are relevant: defaults { #The maximum number of requests a particular service may handle # at once. instances = UNLIMITED # The type of logging. This logs to a file that is specified. # Another option is: SYSLOG syslog_facility [syslog_level] log_type = FILE /var/log/servicelog # What to log when the connection succeeds. # PID logs the pid of the server processing the request. # HOST logs the remote host's ip address. # USERID logs the remote user (using RFC 1413) # EXIT logs the exit status of the server. # DURATION logs the duration of the session. log_on_success = HOST PID DURATION EXIT # What to log when the connection fails. Same options as above log_on_failure = HOST # The maximum number of connections a specific IP address can # have to a specific service. per_source = 50 } service pop3 { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/pop3-login port = 110 flags = REUSE IPv4 rlimit_cpu = 150 instances = 80 cps = 110 10 no_access = xxx.xxx.xxx.xxx log_type = FILE /var/log/POPlog disable = no } service imap { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/imap-login port = 143 flags = REUSE IPv4 rlimit_cpu = 120 only_from = xxx.xxx.xxx.xxx log_type = FILE /var/log/IMAPlog disable = no } Thanks in advance for any help with this. --- Tim Meader CNE ISG Security NetCommerce Corporation Tim.Meader(a)gsfc.nasa.gov (301) 286-8013

2 1

[Dovecot] Stuck on RC7
by Brent Spencer 16 Oct '06

16 Oct '06

I am not able to upgrade to anything above RC7. I am receiving the following errors when trying to connect to the IMAP server if I upgrade. Oct 15 18:40:36 servername imap-login: chdir((null)) failed: No such file or directory Oct 15 18:40:36 servername dovecot: Maximum number of mail processes exceeded My mail directory variable in dovecot.conf is "default_mail_env = mbox:%h/mail/:INBOX=/var/mail/%u". Is "%h" still supported? Thank you, Brent Spencer XsiteDesigns _________________________________________________ This email has been scanned for viruses by ClamAV

2 1

[Dovecot] indexes?
by David Lee 16 Oct '06

16 Oct '06

Picture: A set of very similar UN*X IMAP servers all NFS-mounting their INBOX area (traditional Unix format) from a common "/var/spool/mail" area; activity for any given user ought to be within one box although this cannot be 100% guaranteed. There is the risk of multiple simultaneous access (e.g. simultaneous LDA/delivers; simultaneous LDA/deliver and user-driven IMAP update; etc.). So locking is an important consideration. Decent "noac,actimeo=0" seems to address this succcessfully. But indexes... What is the best place for the index files? Logically alongside the INBOX area on the shared-NFS area? Or within each UN*X machine? (Or something else?) And why? Is there documentation of what functionality the index files provide, and how, if at all, this interacts with the locking of INBOXes (and folders). Thanks. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

2 1

Re: [Dovecot] Received dates problem in Outlook after migration
by James Wyper 16 Oct '06

16 Oct '06

>From: Timo Sirainen <tss(a)iki.fi> >Subject: Re: [Dovecot] Fwd: Received dates problem in Outlook after > migration > >On Thu, 2006-10-12 at 07:49 +0100, James Wyper wrote: >> Having looked at this again, I think I have a hypothesis: >> >> 1. Outlook is ignoring the date/timestamps on the files in my Maildirs > >Outlook should use IMAP's INTERNALDATE, which are taken from >maildir >files' mtime timestamps. If these timestamps are correct but they're not >showing correctly in Outlook, I'd guess Outlook is caching them >internally. One way to fix this would be to change UIDVALIDITY to force >a coplete resync. You can do this by modifying the second number in >dovecot-uidlist file. tried this without any luck (& it made Outlook crash the first time it ran after the change). However, deleting the 192.168.xx.xxxxxx.pst file in c:\windows\application manager\microsoft\outlook did work, so my problem is now resolved. Thanks, James. Send instant messages to your online friends http://uk.messenger.yahoo.com

1 0

[Dovecot] Dovecot rc9 error
by Daniel 16 Oct '06

16 Oct '06

Hi Am getting this error with Dovecot rc9 on a imap account. Oct 15 10:55:28 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:28 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:28 bajor dovecot: child 27632 (imap) killed with signal 6 Oct 15 10:55:28 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:29 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:29 bajor dovecot: child 27636 (imap) killed with signal 6 Oct 15 10:55:29 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:29 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:29 bajor dovecot: child 27638 (imap) killed with signal 6 Oct 15 10:55:30 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:30 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:30 bajor dovecot: child 27641 (imap) killed with signal 6 Oct 15 10:55:30 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:31 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:31 bajor dovecot: child 27645 (imap) killed with signal 6 Oct 15 10:55:31 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:31 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:31 bajor dovecot: child 27649 (imap) killed with signal 6 Oct 15 10:55:31 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:32 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:32 bajor dovecot: child 27653 (imap) killed with signal 6 -- Regards Daniel ----------------------------- Registered Linux user #234279

2 2

[Dovecot] quota dict (mysql)
by Peter Veerman 16 Oct '06

16 Oct '06

Hi, I have dovecot configured to make use of the dict (mysql) plugin in order to keep track of the used quota. First, as you can see in the mysql table output below it seems that values aren't stored correctly. Secondly I get all kinds of database related errors in my mail logs. The (relevant) sections of the configuration files are also included below. My question is, what am I doing wrong? Peter mysql> select * from quota; +------------------+-------+---------+ | username | path | current | +------------------+-------+---------+ | userc@domain1 | 0 | 0 | | usera@domain1 | 0 | 0 | | userb@domain1 | 0 | 0 | | userb@domain1 | 5417 | 0 | | userb@domain1 | 937 | 0 | | userb@domain1 | 3724 | 0 | | userb@domain1 | -9141 | 0 | | userb@domain1 | 4887 | 0 | | userb@domain1 | -4887 | 0 | | usera@domain2 | 0 | 0 | | usera@domain1 | 3134 | 0 | | usera@domain1 | 2177 | 0 | | usera@domain1 | 5137 | 0 | | usera@domain1 | 4953 | 0 | +------------------+-------+---------+ 14 rows in set (0.03 sec) dovecot.conf: dict { quotadict = mysql:/usr/local/etc/dovecot/dovecot-dict-quota.conf } plugin { quota = dict:storage=10240 proxy::quotadict } dovecot-dict-quota.conf: connect = host=localhost dbname=postfix user=postfix password=******* table = quota select_field = current where_field = path username_field = username dovecot.log gives: Oct 02 23:25:49 Info: imap-login: Login: user=<user(a)domain.net>, method=plain, rip=88.211.149.123, lip=10.0.0.4, TLS Oct 02 23:25:49 Info: IMAP(user(a)domain.net): Effective uid=125, gid=125 Oct 02 23:25:49 Info: IMAP(user(a)domain.net): Loading modules from directory: /usr/local/lib/dovecot/imap Oct 02 23:25:49 Info: IMAP(user(a)domain.net): Module loaded: /usr/local/lib/dovecot/imap/lib01_quota_plugin.so Oct 02 23:25:49 Info: IMAP(user(a)domain.net): Module loaded: /usr/local/lib/dovecot/imap/lib02_imap_quota_plugin.so Oct 02 23:25:49 Info: IMAP(user(a)domain.net): Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, subscriptions=no Oct 02 23:25:49 Info: IMAP(user(a)domain.net): maildir: data=/data/postfix/virtual/domain.net/user Oct 02 23:25:49 Info: IMAP(user(a)domain.net): maildir: root=/data/postfix/virtual/domain.net/user, index=/data/postfix/virtual/domain.net/user, control=, inbox= Oct 02 23:25:49 Info: IMAP(user(a)domain.net): dict quota: uri = proxy::quotadict Oct 02 23:25:49 Info: IMAP(user(a)domain.net): dict quota: byte limit = 524288000 Oct 02 23:25:49 Info: IMAP(user(a)domain.net): dict quota: count limit = 0 Oct 02 23:25:49 Info: dict: mysql: Connected to localhost (postfix) Oct 02 23:25:55 Info: dict: mysql: Connected to localhost (postfix) Oct 02 23:25:56 Info: dict: mysql: Connected to localhost (postfix) Oct 02 23:26:37 Info: dict: mysql: Connected to localhost (postfix) Oct 02 23:27:07 Info: imap-login: Aborted login: rip=10.0.0.25, lip=10.0.0.22, TLS Oct 02 23:27:11 Info: dict: mysql: Connected to localhost (postfix) mail.debug gives: Oct 2 23:26:39 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:39 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:39 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:39 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:40 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:41 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:42 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:42 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:42 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:48 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:48 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota Oct 2 23:26:48 bubbles dovecot: IMAP(user(a)domain.net): dict_quota: Couldn't update quota

3 6

[Dovecot] Conf parsing error
by Adnae Mac Uthidir 16 Oct '06

16 Oct '06

Dear Timo, I have found a conf-parse bug in rc10. If the last line in the configuration-file a }, the parser ignore this. Example: ----------------------------- brugh ~ # cat /etc/dovecot/dovecot.conf [...] plugin { trash = /etc/dovecot/trash.conf } brugh ~ # dovecot -c /etc/dovecot/dovecot.conf Error: Missing '}' ----------------------------- Add a empty line at the end of file and you can start without errors ;) -- Mit freundlichen Grüßen Adnae Mac Uthidir mailto:adnaeuthidir@gmail.com

2 1

[Dovecot] Segfault in in rc7 when index does not exists
by Marco Nenciarini 16 Oct '06

16 Oct '06

This is the trace (gdb) run Starting program: /root/tmp/dovecot-1.0.rc7/src/imap/imap x select inbox Program received signal SIGSEGV, Segmentation fault. mail_index_write_base_header (index=0x80e2a28, hdr=0xaff66028) at mail-index.c:1313 1313 memcpy(index->map->mmap_base, hdr, hdr_size); (gdb) bt #0 mail_index_write_base_header (index=0x80e2a28, hdr=0xaff66028) at mail-index.c:1313 #1 0x080902eb in mail_index_mark_corrupted (index=0x80e2a28) at mail-index.c:1839 #2 0x0809ca30 in mail_transaction_log_file_create (log=0x80e3928, path=0x80d2130 "/dovecot.index.log", dev=0, ino=0, file_size=0) at mail-transaction-log.c:575 #3 0x0809e138 in mail_transaction_log_file_open_or_create (log=0x80e3928, path=0x80d2130 "/dovecot.index.log") at mail-transaction-log.c:803 #4 0x0809e65c in mail_transaction_log_open_or_create (index=0x80e2a28) at mail-transaction-log.c:240 #5 0x08092f21 in mail_index_open (index=0x80e2a28, flags=MAIL_INDEX_OPEN_FLAG_CREATE, lock_method=MAIL_INDEX_LOCK_FCNTL) at mail-index.c:1489 #6 0x0808aa52 in index_storage_mailbox_init (ibox=0x80e3548, index=0x80e2a28, name=0x80c32e4 "INBOX", flags=0, move_to_memory=false) at index-storage.c:362 #7 0x08064d68 in maildir_open (storage=0x80dd420, name=0x80c32e4 "INBOX", flags=<value optimized out>) at maildir-storage.c:487 #8 0x08065628 in maildir_mailbox_open (_storage=0x80dd420, name=0x80c32e4 "INBOX", input=0x0, flags=0) at maildir-storage.c:560 #9 0x08059917 in _cmd_select_full (cmd=0x80dd62c, readonly=false) at cmd-select.c:32 #10 0x08059af7 in cmd_select (cmd=0x80dd62c) at cmd-select.c:92 #11 0x0805b3d4 in _client_input (context=0x80dd5e8) at client.c:377 #12 0x080b7f96 in io_loop_handler_run (ioloop=0x80db9c0) at ioloop-poll.c:199 #13 0x080b7348 in io_loop_run (ioloop=0x80db9c0) at ioloop.c:281 #14 0x0806316e in main (argc=Cannot access memory at address 0x0 ) at main.c:280 (gdb) p index->map $1 = (struct mail_index_map *) 0x0 (gdb) the envisonment is: DBOX_ROTATE_DAYS="1" DBOX_ROTATE_MIN_SIZE="16" DBOX_ROTATE_SIZE="2048" DOVECOT_VERSION="1.0.rc7" HOME="/srv/vmbox/spool/test/" IMAP_CLIENT_WORKAROUNDS="outlook-idle" IMAP_MAX_LINE_LENGTH="65536" IP="::ffff:127.0.0.1" LOCK_METHOD="fcntl" LOGGED_IN="1" LOG_TO_MASTER="1" MAIL="maildir:/" MAILBOX_IDLE_CHECK_INTERVAL="30" MAIL_CACHE_FIELDS="flags" MAIL_CACHE_MIN_MAIL_COUNT="0" MAIL_MAX_KEYWORD_LENGTH="50" MAIL_NEVER_CACHE_FIELDS="imap.envelope" MBOX_DIRTY_SYNCS="1" MBOX_DOTLOCK_CHANGE_TIMEOUT="120" MBOX_LAZY_WRITES="1" MBOX_LOCK_TIMEOUT="300" MBOX_MIN_INDEX_SIZE="0" MBOX_READ_LOCKS="fcntl" MBOX_WRITE_LOCKS="dotlock fcntl" POP3_CLIENT_WORKAROUNDS="" POP3_LOGOUT_FORMAT="top=%t/%p, retr=%r/%b, del=%d/%m, size=%s" POP3_UIDL_FORMAT="" RESTRICT_CHROOT="/srv/vmbox/spool/test" RESTRICT_GID_FIRST="1" RESTRICT_SETEXTRAGROUPS="mail" RESTRICT_SETGID="200" RESTRICT_SETUID="200" STDERR_CLOSE_SHUTDOWN="1" SYSLOG_FACILITY="16" USER="test(a)prato.linux.it" The directory /srv/vmbox/spool/test contains: # find /srv/vmbox/spool/test /srv/vmbox/spool/test /srv/vmbox/spool/test/cur /srv/vmbox/spool/test/new /srv/vmbox/spool/test/tmp I hope this is enougth Please keep me on CC because i'm not subscribed. Ciao P.S: the rc8 do exactly the same. -- --------------------------------------------------------------------- | Marco Nenciarini | Debian/GNU Linux Developer - Plug Member | | mnencia(a)prato.linux.it | http://www.prato.linux.it/~mnencia | --------------------------------------------------------------------- Key fingerprint = FED9 69C7 9E67 21F5 7D95 5270 6864 730D F095 E5E4

2 5

[Dovecot] File isn't in mbox format: /home/foo/mail/Trash
by James Lupolt 16 Oct '06

16 Oct '06

Hello, I'm seeing the following error on a server: File isn't in mbox format: /home/foo/mail/Trash The Trash file is full of the following at the beginning: ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^ I've repaired the file several times, but this keeps happening. Would any of you mind offering me some insight into what could be causing this and how to fix it? Below is some information about the system: [root@server1 mail]# uname -a Linux server1.example.com 2.6.9-42.0.2.EL #1 Thu Aug 17 17:36:53 EDT 2006 i686 athlon i386 GNU/Linux [root@server1 mail]# cat /etc/redhat-release Red Hat Enterprise Linux ES release 4 (Nahant Update 4) [root@server1 mail]# rpm -qa|grep -i dovecot dovecot-0.99.11-4.EL4 [root@sever1 mail]# rpm -qa|grep -i sendmail sendmail-cf-8.13.1-3.RHEL4.5 sendmail-8.13.1-3.RHEL4.5 Here's everything that isn't a comment or blank line in dovecot.conf: [root@server1 mail]# grep -v ^# /etc/dovecot.conf|grep -v ^$ protocols = imap imaps pop3 pop3s imap_listen = [::] pop3_listen = [::] login_dir = /var/run/dovecot-login login = imap login = pop3 mbox_locks = flock auth = default auth_mechanisms = plain auth_userdb = passwd auth_passdb = pam auth_user = root Any advice would be appreciated. Best Regards, James Lupolt

2 1

[Dovecot] System-wide sieve script?
by Ty! Boyack 16 Oct '06

16 Oct '06

In the dovecot LDA documentation, it mentions having sieve scripts located in ~/.dovecot.sieve, which works great for per-user sieve code. I was trying to find out if there was a system-wide sieve script (maybe /etc/dovecot.sieve?) that would hopefully be run first, followed by any per-user sieve code. Anyone know if this is already possible, or if not, if there are any plans to implement this? I'm assuming one could make a kludgey fix by having every .dovecot.sieve include a system-wide file, but that would allow a user to remove that "include" if they choose. I'd like to have a centrally controlled, immutable set of rules that all mail goes through. If I missed something in the wiki or archives, I offer my apologies in advance. Thanks! -Ty!

5 7

[Dovecot] LDAP Memory Leak
by Daniel 16 Oct '06

16 Oct '06

Hi Timo I use LDAP auth on a system with around 2000 email account. I use dual OpenLDAP servers. I haven't noticed a leak of memory. Is there any more information and I will have a look to see if I can see anything that might help. Is it only affecting certain machines or all? Regards Daniel Rowe Date: Mon, 16 Oct 2006 02:39:26 +0300 From: Timo Sirainen <tss(a)iki.fi> Subject: [Dovecot] 1.0.rc10 released To: dovecot-news(a)dovecot.org, dovecot(a)dovecot.org Message-ID: <1160955566.5448.126.camel@hurina> Content-Type: text/plain; charset="us-ascii" http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz.sig I've finally read all the mails in the mailing list and in my INBOX. If I haven't replied to some of your mail, please resend it. Remember that since 1.0.rc9 release dovecot.index.cache files will get rebuilt in 64bit systems, and it's probably better to delete them manually so you don't get errors in log files. There are only a couple of issues left in my v1.0-TODO list: - Master process appears to be leaking log fds with kqueue. Could someone again give me access to a system where this happens? - Login process problems. How well does it work now? Hopefully well enough that v1.0 could be released. - LDAP authentication is leaking memory? Can anyone confirm this? Even better, can someone figure out what exactly is leaking? :) Not a v1.0 blocker though. I think v1.0 will be released once no-one has reported any major problems for a Dovecot release in 2-4 weeks. I think login process handling is the only potentially major problem left. There are a few patches from people that I haven't forgotten, but I've decided not to put them into v1.0 anymore: - Filesystem quota group. I don't think it's that important feature, and it might break something. - HFS+ hardlink avoiding - Managesieve - vmailmgr support And finally the changes in this release: * When matching allowed_nets IPs, convert IPv6-mapped-IPv4 addresses to actual IPv4 addresses first. + IMAP: Try to avoid sending duplicate/useless message flag updates + Added support for non-plaintext authentication for vpopmail if it returns plaintext passwords. Based on patch by Remi Gacogne. + Added %D modified to return "sub.domain.org" as "sub,dc=domain,dc=org" (for LDAP queries). Patch by Andrey Panin. - rc9 broke cache files in 64bit systems - deliver works now with mail_chroot - auth cache didn't work properly with multiple passdbs - Fixes to handling CRLF linefeeds in mboxes.

2 1

[Dovecot] Dovecot and CRAM-MD5 authentication (brief) HOWTO
by James Turnbull 16 Oct '06

16 Oct '06

Hi all, I just finished configuring CRAM-MD5 for Dovecot and noted there were not a lot of resources out there that described the process. I've written up a rough and brief HOWTO at: http://www.kartar.net/weblog/cram-md5-authentication-with-dovecot/ Comments welcome and hope it helps someone. Regards James Turnbull -- James Turnbull <james(a)lovedthanlost.net> --- Author of Pro Nagios 2.0 (http://www.amazon.com/gp/product/1590596099/) Hardening Linux (http://www.amazon.com/gp/product/1590594444/) --- PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)

1 0

[Dovecot] LDAP Memory Leak
by Daniel 16 Oct '06

16 Oct '06

Hi Timo I use LDAP auth on a system with around 2000 email account. I use dual OpenLDAP servers. I haven't noticed a leak of memory. Is there any more information and I will have a look to see if I can see anything that might help. Is it only affecting certain machines or all? Regards Daniel Rowe Date: Mon, 16 Oct 2006 02:39:26 +0300 From: Timo Sirainen <tss(a)iki.fi> Subject: [Dovecot] 1.0.rc10 released To: dovecot-news(a)dovecot.org, dovecot(a)dovecot.org Message-ID: <1160955566.5448.126.camel@hurina> Content-Type: text/plain; charset="us-ascii" http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz http://dovecot.org/releases/dovecot-1.0.rc10.tar.gz.sig I've finally read all the mails in the mailing list and in my INBOX. If I haven't replied to some of your mail, please resend it. Remember that since 1.0.rc9 release dovecot.index.cache files will get rebuilt in 64bit systems, and it's probably better to delete them manually so you don't get errors in log files. There are only a couple of issues left in my v1.0-TODO list: - Master process appears to be leaking log fds with kqueue. Could someone again give me access to a system where this happens? - Login process problems. How well does it work now? Hopefully well enough that v1.0 could be released. - LDAP authentication is leaking memory? Can anyone confirm this? Even better, can someone figure out what exactly is leaking? :) Not a v1.0 blocker though. I think v1.0 will be released once no-one has reported any major problems for a Dovecot release in 2-4 weeks. I think login process handling is the only potentially major problem left. There are a few patches from people that I haven't forgotten, but I've decided not to put them into v1.0 anymore: - Filesystem quota group. I don't think it's that important feature, and it might break something. - HFS+ hardlink avoiding - Managesieve - vmailmgr support And finally the changes in this release: * When matching allowed_nets IPs, convert IPv6-mapped-IPv4 addresses to actual IPv4 addresses first. + IMAP: Try to avoid sending duplicate/useless message flag updates + Added support for non-plaintext authentication for vpopmail if it returns plaintext passwords. Based on patch by Remi Gacogne. + Added %D modified to return "sub.domain.org" as "sub,dc=domain,dc=org" (for LDAP queries). Patch by Andrey Panin. - rc9 broke cache files in 64bit systems - deliver works now with mail_chroot - auth cache didn't work properly with multiple passdbs - Fixes to handling CRLF linefeeds in mboxes.

1 0

[Dovecot] Apple Mail quota display
by Timothy Martin 15 Oct '06

15 Oct '06

I know this isn't necessarily a dovecot issue, but I was wondering if anyone has the quota displaying correctly in Apple Mail? I have it set up and working and displaying properly in thunderbird, roundcube (webmail), and squirrelmail. But for some reason Apple's Mail doesn't show the values or its nice thermometer bar. Are there additional configuration options for quota not documented on the wiki? .tim

2 3

[Dovecot] Duplicate mails
by Vegar Nilsen 15 Oct '06

15 Oct '06

Hi, one of our customers reported a problem after we moved her maildir to another disk. (Jail in FreeBSD 6, moved to another disk with rsync.) For some reason she's seeing duplicates of almost every message from November, 2005 until June, 2006 (the move happened in September, 2006.) It seems like these mails have been respooled somehow and been inserted into the maildir with the same date and time as the original: root#loc [</var/gopostal/maildirs/wow/lina/cur>] diff 1158863410.P19488Q34M511758.locusts.copyleft.no:2,STbf 1132869216.H332479P92237.mail9.copyleft.no,S=7755:2,STac root#loc [</var/gopostal/maildirs/wow/lina/cur>] ls -l 1158863410.P19488Q34M511758.locusts.copyleft.no:2,STbf -rw------- 1 mailnull mail 7755 Nov 24 2005 1158863410.P19488Q34M511758.locusts.copyleft.no:2,STbf root#loc [</var/gopostal/maildirs/wow/lina/cur>] ls -l 1132869216.H332479P92237.mail9.copyleft.no,S=7755:2,STac -rw------- 1 mailnull mail 7755 Nov 24 2005 1132869216.H332479P92237.mail9.copyleft.no,S=7755:2,STac As the diff command shows these mails are identical, except that one was created about 10 months after the other. 1132869216.H332479P92237.mail9.copyleft.no,S=7755:2,STac was written by Exim in November (we've configured Exim to add the size (",S=7755") to the file name), but I have no idea where the other file comes from. Could this be Dovecot that has recreated these mails for some reason? (Since the file names are different I doubt that this happened during the rsync, instead it must come from some program that conforms to the maildir standard of naming files. The mailserver had a different name back in November, mail9 was the old name, locusts is the new one.) Originally this file 1158863410.P19488Q34M511758.locusts.copyleft.no:2,STbf was named 1158863410.P19488Q34M511758.locusts.copyleft.no:2,bf which, if I understand it correctly, means it's unread. (The customer has deleted it since reporting this problem.) root#loc [</var/gopostal/maildirs/wow/lina/cur>] uname -r ; dovecot --version ; exim -bV 6.1-RELEASE 1.0.beta3 Exim version 4.60 #0 (FreeBSD 6.0) built 22-Feb-2006 13:01:52 If anybody has an idea as to what caused this I would really appreciate any pointers or info. Thanks in advance, Vegar Nilsen -- Copyleft Software AS < http://www.copyleft.no/ >

2 1

[Dovecot] Authenticating dovecot against Active Directory using bsdauth and login_ldap
by Martin Croker 15 Oct '06

15 Oct '06

All, I'm working in a multi-platform environment where user accounts are already held in Active Directory. I'm been trying to setup dovecot to perform user authentication against Active Directory using ldap. My Environment is: Platform OpenBSD 3.9 Dovecot Version 1.0.rc7 Active Directory Windows 2003 The approach I've taken (being the only one I was able to make work) is to use login_ldap to perform bind authentication against Active Directory/LDAP and authenticate dovecot using bsdauth. As far as I can tell the dovecot ldap authentication module requires access to the encrypted password field to which Active Directory does not permit access. Simulated LDAP login fails and when debug is enabled writes the following to /var/log/maillog ==== /var/log/maillog ================ Oct 15 20:12:27 server dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=***********************== Oct 15 20:12:27 server dovecot: auth(default): bsdauth(mcrokerx,127.0.0.1): invalid password field Oct 15 20:12:28 server dovecot: auth(default): client out: FAIL 1 user=mcrokerx Oct 15 20:12:38 server dovecot: imap-login: Aborted login: user=<mcrokerx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ======================================= It appears that the cause of these log messages are the following lines of code in src/auth/passdb-bsdauth.c ==== src/auth/passdb-bsdauth.c ======== 29 if (!IS_VALID_PASSWD(pw->pw_passwd)) { 30 auth_request_log_info(request, "bsdauth", 31 "invalid password field"); 32 callback(PASSDB_RESULT_USER_DISABLED, request); 33 return; 34 } ======================================= These lines seem to require that the pw structure contains the encrypted password in pw->pw_passwd. Where login_ldap is used against Active Directory the encrypted password is not available to bsdauth and instead pw->pw_passwd contains '*'. If auth_userokay is called independently it is however able to authenticate the user correctly, as such I wonder if the IS_VALID_PASSWD check is actually necessary. It could be that my entire approach is wrong in which case I'm happy to be put right; however it seems that lines 29-34 need modification to correctly support this behaviour of bsdauth. This is beyond my limited ability in c but temporarily removing these lines of code from passdb-bsdauth.c has enabled me to authenticate dovecot against login_ldap (and thereby against Active Directory). My config files are: ==== /etc/dovecot.conf ================ base_dir = /var/dovecot/ ssl_cert_file = /etc/ssl/certs/server.crt ssl_key_file = /etc/ssl/private/server.key disable_plaintext_auth = no login_dir = /var/dovecot/login login_user = _dovecot mmap_no_write = yes protocol imap { imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep } protocol pop3 { pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth default { mechanisms = plain passdb bsdauth { } userdb passwd-file { args = /etc/passwd } user = root } plugin { } ======================================= ==== /etc/login.conf (exert) ========== staff:\ :auth=-ldap:\ :x-ldap-server=10.0.0.23:\ :x-ldap-port=389:\ :x-ldap-noreferrals:\ :x-ldap-uscope=subtree:\ :x-ldap-basedn=dc=my,dc=domain,dc=co,dc=uk:\ :x-ldap-binddn=cn=UnixUser,cn=Users,dc=my,dc=domain,dc=co,dc=uk:\ :x-ldap-bindpw=mypassword:\ :x-ldap-filter=(&(objectClass=user)(mail=%u)):\ :datasize-cur=512M:\ :datasize-max=infinity:\ :maxproc-max=256:\ :maxproc-cur=128:\ :requirehome@:\ :tc=default: ======================================= Note: for login_ldap to work it is necessary that the user information (minus password) is replicated on the localhost. I've done this using a relatively inelegant script which for completeness is below. I guess adding some error checking would be a good idea. ==== ldapsync.ksh ===================== #!/bin/ksh ldapsearch -h 10.0.0.23 \ -D cn=UnixUser,cn=Users,dc=my,dc=domain,dc=co,dc=uk \ -b cn=Users,dc=my,dc=domain,dc=co,dc=uk \ -w mypassword \ -v \ -x "(objectClass=user)" | while read key value ; do if [ "$key" == name: ]; then ldap_name="$value" fi # User Mail field as Unix name - remove @my.domain.co.uk if necessary if [ "$key" == mail: ]; then ldap_mail=$( echo "$value" | sed 's/@.*//g' ) if ( id 2>/dev/null >/dev/null $ldap_mail ); then usermod -c "$ldap_name" -s osbin/nologin -g staff -L staff $ldap_mail else useradd -d /home/$ldap_mail -c "$ldap_name" -s /sbin/nologin -m -g staff -L staff $ldap_mail fi ldap_name="" ldap_mail="" fi done ======================================= Martin

2 1

[Dovecot] unknown dovecot error. imap or logging rate?
by OpenMacNews 15 Oct '06

15 Oct '06

hi, i've dovecot cvs 10branch installed on OSX 10.4.7. when i login from my MUA (in this example, Mulberry), functionally all looks OK. BUT, i *do* see one error in the log output, dovecot: Aug 27 20:43:25 Error: IMAP(testuser(a)mydomain.com): Sending log messages too fast, throttling.. Is this an imap error? or is it 'just' the error of logging too fast? if the latter, what to do about it? or, is the throttling normal behavior? the complete context follows: dovecot: Aug 27 20:43:25 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=10.0.0.6 rip=10.0.0.6 dovecot: Aug 27 20:43:25 Info: auth(default): client out: CONT 1 dovecot: Aug 27 20:43:25 Info: auth(default): client in: CONT<hidden> dovecot: Aug 27 20:43:25 Info: auth(default): client out: OK 1 user=testuser(a)mydomain.com quota=maildir:storage=4096 dovecot: Aug 27 20:43:25 Info: auth(default): master in: REQUEST 27335 1 dovecot: Aug 27 20:43:25 Info: auth(default): master out: USER 2 testuser(a)mydomain.com static uid=301 gid=301 home=/var/Mail/Dovecot/Domains/mydomain.com/Accounts/testuser nice=10 dovecot: Aug 27 20:43:25 Info: imap-login: Login: user=<testuser(a)mydomain.com>, method=PLAIN, rip=10.0.0.6, lip=10.0.0.6, TLS dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Effective uid=301, gid=301 dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Loading modules from directory: /usr/local/dovecot-plugins/imap dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Module loaded: /usr/local/dovecot-plugins/imap/lib01_quota_plugin.so dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Module loaded: /usr/local/dovecot-plugins/imap/lib02_imap_quota_plugin.so dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Namespace: type=private, prefix=Private/, sep=/, inbox=yes, hidden=no, subscriptions=no dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): maildir: data=/var/Mail/Dovecot/Domains/mydomain.com/Accounts/testuser/Maildir:INDEX… dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): maildir: root=/var/Mail/Dovecot/Domains/mydomain.com/Accounts/testuser/Maildir, index=/var/Mail/Dovecot/Indexes/mydomain.com/testuser, control=, inbox= dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Namespace: type=public, prefix=Public/, sep=/, inbox=no, hidden=no, subscriptions=no dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): maildir: data=/var/Mail/Dovecot/Domains/mydomain.com/Public dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): maildir: root=/var/Mail/Dovecot/Domains/mydomain.com/Public, index=/var/Mail/Dovecot/Domains/mydomain.com/Public, control=, inbox= dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): Namespace: type=shared, prefix=Shared/, sep=/, inbox=no, hidden=no, subscriptions=no dovecot: Aug 27 20:43:25 Error: IMAP(testuser(a)mydomain.com): Sending log messages too fast, throttling.. dovecot: Aug 27 20:43:25 Info: IMAP(testuser(a)mydomain.com): maildir: data=/var/Mail/Dovecot/Domains/mydomain.com/Shared dovecot: Aug 27 20:43:26 Info: IMAP(testuser(a)mydomain.com): maildir: root=/var/Mail/Dovecot/Domains/mydomain.com/Shared, index=/var/Mail/Dovecot/Domains/mydomain.com/Shared, control=, inbox= thanks, richard -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6

2 1

[Dovecot] Messages not expunged
by Jackie Hunt 15 Oct '06

15 Oct '06

Hi all, I'm doing some testing between U of Washington IMAP server (which we currently run) and Dovecot on a IBM AIX system. I created a 50M mailbox, made up of 262 msgs. I'm using a Perl Script with the imap::client module to fetch each message and then flag it for deletion. At the end of the test, I run an expunge to delete all the messages. UofW imap server ran fine, messages gone. With dovecot I found the messages were not being expunged. The log indicated they were, but then said 262 messages existed at the end. After more checking, I found the file system I was using was low on disk space (<50M). As soon as I added more disk space, and reran the test with dovecot the messages were indeed expunged. Is this normal imap protocol behavior? I thought I would see an error message or something in the dovecot log. Does dovecot duplicate the mailbox before expunge? There wasn't room on our system to do that. Thanks much for any insights/info. Jackie --- Jackie Hunt ACNS Voice: (970) 663-3789 Colorado State University FAX: (970) 491-1958 Fort Collins, CO 80523 Email: jackie.hunt(a)colostate.edu

2 3

[Dovecot] Make user name CaSe Insensitive
by FlashWebHost.com 15 Oct '06

15 Oct '06

Hi, I have mail box info(a)mydomain.com stored in MySQL db. But dovecot is allowing me to login as both INFO(a)MYDOMAIN.COM info(a)mydomain.com Shows two mail boxes. The small letter account is the one mail server really deliver all mails. Is there any way i can specify all login names are small letters, so that user always access real mail box ? Regards, Yujin ------------------------------------ http://www.flashwebhost.com

4 6

[Dovecot] Restricting Services (POP or IMAP)
by Odhiambo WASHINGTON 15 Oct '06

15 Oct '06

It would be great to have a HOWTO in the wiki, on how to restrict services by username in dovecot, so some users are allowed IMAP and others not allowed. As concerns restricting users by IP, I believe that is a bad idea. It's almost a useless idea, imnsho, because they can connect from another IP. It's easy to restrict services by IP using a firewall or by using inetd. -Wash http://www.netmeister.org/news/learn2quote.html DISCLAIMER: See http://www.wananchi.com/bms/terms.php -- +======================================================================+ |\ _,,,---,,_ | Odhiambo Washington <wash(a)wananchi.com> Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +======================================================================+ Don't take life too seriously -- you'll never get out of it alive.

5 8

Re: [Dovecot] Out of memory errors
by Bill Boebel 15 Oct '06

15 Oct '06

On Tue, October 10, 2006 1:03 pm, Timo Sirainen <tss(a)iki.fi> said: > I think I remember someone else also talking about memory leaks with > LDAP.. Unless it was also you. :) I guess I'll have to try find it, or > at least create some debugging/statistics patch which could be used to > figure out where the problem is.. > Wasn't me, but I would definitely run such a patch to help track down the source. Bill

2 1

[Dovecot] failed authentication with digest-md5 (rc9)
by LeVA 15 Oct '06

15 Oct '06

Hi! I'm using rc9 and DIGEST-MD5 passwords. Sometimes it works, sometimes it's not... When failed, I get this in the logs: 12:45:11 Info: auth(default): client in: AUTH 1 DIGEST-MD5 \ service=POP3 secured lip=<lip> rip=<rip> resp=<something_long> 12:45:11 Info: auth(default): client out: CONT 1 <something_long> 12:45:11 Info: auth(default): client in: CONT 1 <something_long> 12:45:11 Info: auth(default): digest-md5(?,<rip>): Unknown QoP value 12:45:12 Info: auth(default): client out: FAIL 1 12:45:12 Info: pop3-login: Aborted login: method=DIGEST-MD5, rip=<rip>, lip=<lip>, TLS Using KMail 1.9.4. Daniel -- LeVA

3 9

[Dovecot] Dovecot rc9 error (More information)
by Daniel 15 Oct '06

15 Oct '06

Hi This happens when email is copied/moved from the inbox to another folder on the same imap account. The mail client goes into a loop with the below errors logged. This is on a 64bit Linux machine using the Maildir storage format. After doing a 'rm dovecot*' from the Maildir folder of the account having the problem the client can log in again but if the client tries to copy again it gets the same error. RC9 appears to be broken on this box. I have tested connecting form a windows machine and I get the same with thunderbird. I have tried with different accounts and they get the same problem. I have down graded to RC8 and all is working OK so seems to be a problem introduced with RC9. I have a 32bit Linux server with RC9 installed which has around 2000 accounts on it and this has no problems so maybe not affecting 32bit machines. If I can give any more information please let me know. Am getting this error with Dovecot rc9 on a imap account. Oct 15 10:55:28 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:28 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:28 bajor dovecot: child 27632 (imap) killed with signal 6 Oct 15 10:55:28 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:29 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:29 bajor dovecot: child 27636 (imap) killed with signal 6 Oct 15 10:55:29 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:29 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:29 bajor dovecot: child 27638 (imap) killed with signal 6 Oct 15 10:55:30 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:30 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:30 bajor dovecot: child 27641 (imap) killed with signal 6 Oct 15 10:55:30 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:31 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:31 bajor dovecot: child 27645 (imap) killed with signal 6 Oct 15 10:55:31 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:31 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:31 bajor dovecot: child 27649 (imap) killed with signal 6 Oct 15 10:55:31 bajor dovecot: imap-login: Login: user=<rachele>, method=plain, rip=192.168.1.1, lip=192.168.1.254 Oct 15 10:55:32 bajor dovecot: IMAP(rachele): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) Oct 15 10:55:32 bajor dovecot: child 27653 (imap) killed with signal 6 -- Regards Daniel ----------------------------- Registered Linux user #234279

1 0

[Dovecot] request to have dovecot authenticator driver 'officially' included/supported
by OpenMacNews 14 Oct '06

14 Oct '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi all, per the exim docs @: http://exim.org/exim-html-4.62/doc/html/spec_html/ch36.html a cyrus_sasl authenticator driveer is 'included' in exim core. given that Dovecot has become a very attractive alternative for an increasing number of folks, and there's a patch against exim 4.43 here: http://www.exim.org/eximwiki/AuthenticatedSmtpUsingDovecot that allows use of Dovecot's native sasl implementation as an authenticator, and that is _seems_ to apply against 4.63 ok, might it be possible to get this integrated into exim core, and have it become 'official'? thanks, richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEARECAAYFAkUC+eIACgkQlffdvTZxCMbG4wCgnczsi9zX6Xkg5MLi6JTez5d+ a+YAn0MIYI7gHW//8N5bxani1CoEAcJm =ZN2w -----END PGP SIGNATURE-----

5 16

[Dovecot] MySQL stored proc authorization
by Chaos Engine 14 Oct '06

14 Oct '06

On my Gentoo box until today I had dovecot-1.0_rc7 and used following entry in /etc/dovecot/dovecot-sql.conf password_query = call Authorize('%u', '%n', '%d') Simply put dovecot is calling my mysql stored routine which handles authorization. Until today, when I updated dovecot to dovecot-1.0_rc8 it worked flawlessly. With this version executing stored proc dies with: Password query failed: PROCEDURE mailsql.Authorize can't return a result set in the given context Replacing stored proc call with select .... statement does the thing, but it's stored procedures are ... generally better to do things on DB imvho :-) Downgrading to dovetot-1.0_rc7 fixes the problem immediately. Of course /etc/dovecot/dovecot.conf remains the same in either case. Is this a bug or change made on purpose? -- Chaos greets U

2 6

[Dovecot] MySQL "access denied" problems
by Timo Sirainen 14 Oct '06

14 Oct '06

Now that I was able to debug it myself, I found that it's caused by the same problem as before: Conflicting sha1_result symbol. This time only linking succeeded without errors, but at runtime it was still using the wrong one. So I updated the wiki page: http://wiki.dovecot.org/MysqlProblems

1 1

[Dovecot] child 29480 (auth) returned error 89, FC5, Postfix, MySql, mbox....arghhhh
by Kent Iverson 13 Oct '06

13 Oct '06

Hi all, I have been putting a small (simple?)dedicated email server together to (ultimately) host a couple of domains. I am currently getting the configuration to work with one domain w/local mbox users and then plan to extend it to virtual users and an additional domain. Dovecot has been a problem to integrate in the configuration. The basic pieces are FC5, Postfix, Dovecot, with Cyrus-sasl and MySql user/password databases. I have installed, configured, and verified Postfix, Cyrus-sasl, and MySql both separately and working together. All applications are standard Yum sourced FC5 binaries. Dovecot, however, stubbornly refuses to join the party. I have searched for clues on-line and have not found anything that has helped, thus this message. The problem seems to be tied tightly to using mySQL as an access mechanism for passdb/userdb information since if I remove that access mechanism Dovecot runs fine. The reason I am looking to use mySQL is that it seemed an easy way to have a common database for user name and domain identification with a single common FQDN login authentication format for current local users and future virtual users. As I understand it, the default PAM passwd doesn't support FQDN user names. The symptom: =========== Dovecot starts and immediately exits. Maillog shows the following immediately after executing /sbin/service dovecot start Oct 12 21:36:24 Playtime dovecot: Dovecot v1.0.beta8 starting up Oct 12 21:36:25 Playtime dovecot: child 29479 (auth) returned error 89 Oct 12 21:36:25 Playtime dovecot: child 29480 (auth) returned error 89 Oct 12 21:36:25 Playtime dovecot: Auth process died too early - shutting down Oct 12 21:36:25 Playtime dovecot: auth(default): net_connect_unix(/var/run/dovecot/auth-worker.29480) failed: Permission denied Oct 12 21:36:25 Playtime dovecot: auth(default): net_connect_unix(/var/run/dovecot/auth-worker.29479) failed: Permission denied It appears that the dovecot-auth process is immediately exiting with a non-specific error (89) and no collateral info. There are two sets of error 89's because the process count is set to 2 in dovecot.conf (see below). Looking at the messages log, you find a line reflecting the empty sockets as below: Oct 12 21:36:25 Playtime kernel: audit(1160714185.460:373): avc: denied { write } for pid=29479 comm="dovecot-auth" name="auth-worker.29479" dev=dm-0 ino=692358 scontext=user_u:system_r:dovecot_auth_t:s0 tcontext=user_u:object_r:dovecot_var_run_t:s0 tclass=sock_file There is nothing in the auth log other than happy noises from Postfix about its mySQL accesses. I am unaware of any other logs that might shed some light. Troubleshooting: ============= --- I have been using standard FC5 compiled binaries sourced through YUM for all applications. To the best of my knowledge, the package that Yum pulled for Dovecot is built --with-mysql and thus should support mysql access. I found this tidbit of info in the /usr/src/redhat/SPECS/dovecot.spec document. -- I have rolled back the dovecot.conf to remove the mysql passwd/userdb configuration leaving the default PAM configuration and found that Dovecot behaves correctly and joins the party. However, since Postfix is using mySQL data, the client FQDN login user names it uses don't match up with the simple UNIX user names that Dovecot's default PAM password mechanism is supporting (thus my attempt to get them both to use the mySql database.) So from this I know that the problem appears to be basic to startup of dovecot-auth and the mysql configuration. -- I have verified the location of the dovecot-sql.conf file as configured in dovecot.conf -- I have verified that the 'connect' parameters in the dovecot-sql.conf.work from a command line and the password_query syntax from inside mysql. Configuration details: dovecot.conf: ======================================================================= # things uncommented from defaults: base_dir = /var/run/dovecot protocols = imap imaps pop3 pop3s listen = * shutdown_clients = yes #for debug...seems to have made no difference. mail_debug = yes mbox_very_dirty_syncs = yes # authentication section # this next was left at default and I checked the ownership and it is correct. #auth_executable = /usr/libexec/dovecot/dovecot-auth #more debug auth_verbose = yes auth_debug = yes auth_debug_passwords = no # auth-worker process limit auth_worker_max_count = 30 #and into auth default: auth default { mechanisms = plain # default PAM passdb pam { } # SQL passdb sql { args = /etc/dovecot-sql.conf } # userdb userdb static { args = uid=690 gid=768 home=/var/mail/%n } #note there is no SQL userdb access defined. We will always use userdb static for now user = root count = 2 } ============================= dovecot-sql.conf ============================================================================== # Our mysql table actually is: (defined to support postfix password db) # CREATE TABLE users ( # id int(11) unsigned NOT NULL auto_increment, #table index # username varchar(255) NOT NULL default '0', #user part in user@userrealm # userrealm varchar(255) NOT NULL default 'firstdomain.com', #domain part in user@userrealm # userpassword varchar(255) NOT NULL default '94go283xc', #email password # auth tinyint(1) default '1', #Relay authority 1 = yes # active char(1) NOT NULL default 'y' #active Dovecot user? #}; driver = mysql connect = host=127.0.0.1 dbname=user_db user=dovecot password=xxxyy0x0 default_pass_scheme = PLAIN password_query = SELECT password FROM users WHERE username='%n' AND userrealm='%d' AND active='y' # there is no userdb sql access mechanism defined so this is left null user_query = ========================================================================================= Thats about it. I'm stumped....any thoughts or debug suggestions would be appreciated. Thanks -Kent I.

3 3

[Dovecot] fcntl Bad file descriptor
by Bill Boebel 13 Oct '06

13 Oct '06

I've seen a couple of these in the log while testing the proxy too. Do you know what would cause this? Aug 10 23:30:29 director5 dovecot: imap-login: fcntl(-1, F_GETFL) failed: Bad file descriptor Aug 10 23:30:29 director5 dovecot: imap-login: fd_set_nonblock(-1) failed: Bad file descriptor Aug 10 23:30:29 director5 dovecot: child 14016 (login) returned error 89

2 1

Re: [Dovecot] Dovecot LDA
by Steven F Siirila 13 Oct '06

13 Oct '06

On Sun, Oct 08, 2006 at 10:25:53PM +0300, Timo Sirainen wrote: > On Fri, 2006-10-06 at 21:00 -0500, Steven F Siirila wrote: > > I am running Dovecot 1.0-rc6 along with dovecot-sieve from 2006-10-05 CVS. > > I am calling dovecot deliver from Postfix (main.cf): > > > > mailbox_command = /opt/dovecot/libexec/dovecot/deliver > > > > Upon switching to dovecot deliver, I observed two problems: > > > > 1) An extraneous "From " header now appears at the top of each message > > delivered, e.g.: > > > > From dovecot.deliver Fri Oct 06 19:59:57 2006 > > From sfs(a)tc.umn.edu Fri Oct 6 19:59:57 2006 > > Return-Path: <sfs(a)tc.umn.edu> > > > > Using Postfix delivery the first of these lines does not appear. > > This, of course, confuses MUAs. > > Don't give F flag to Postfix's pipe command. In looking into this further, I see what you're getting at. There are commands in postfix/master.cf which specify different flags depending on what external delivery program is used. However, I haven't touched that and none of the entries that came with the standard master.cf file reference Dovecot, so I'm not sure if any of those entries even apply. What I changed to cause Dovecot delivery to be initiated was simply the mailbox_command in postfix/main.cf: mailbox_command = /opt/dovecot/libexec/dovecot/deliver I have been unable to determine what, if any, changes are necessary in the master.cf file to customize what parameters are sent to Dovecot deliver. Anyone? > Although this reminds me that the "dovecot.deliver" is wrong in there.. > Hmm. I think I'll add a maildrop-compatible -f <envelope> parameter > here. Great. Now if I could only figure out how to get Postfix to specify that. :) > There, done in CVS. I'll also make 1.0rc8 release today. > > > 2) The "Content-Length:" header appears after a blank line, essentially > > putting it into the RFC822 body, e.g.: > > > > User-Agent: Mutt/1.4.2.1i > > X-UID: 11510 > > Status: > > X-Keywords: > > > > Content-Length: 200 > > > > test > > Are you sure it's a blank line? Dovecot adds lots of spaces after > X-Keywords which could just make it look like that. > > If it really is a blank line, then it's most likely something else than > Dovecot that changes the spaces that way. -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

4 12

[Dovecot] you got chocolate in my peanut butter?!
by Logan Shaw 13 Oct '06

13 Oct '06

Hey everyone, Ran into something positively perplexing today. A user came to me and said that this morning when they checked their mail, they got about 120 strange new messages. Upon further inspection, it seems the "new" messages are all addressed to a certain other different user and are all 3 or 4 months old. And looking in that other user's /var/mail/(username) mailbox, I see the same messages that arrived mistakenly. And they're not in the /var/mail mailbox of the user whose desktop computer they ended up on. So it would appear that, possibly, when this user connected to the server, they got someone else's messages! Messages that, in fact, came from an account they don't even have the password to! I'm really curious if anyone has seen something like this before. We're using dovecot-1.0.beta9, and have been since mid-June. I've never seen anything happen like this before. I'm perfectly willing to upgrade to the latest release candidate, but it's hard for me to "upgrade and see if that fixes it", because it happens so rarely and it won't be easy to know empirically. So what I'm really hoping for is confirmation that this is/was a known problem, if in fact it is. Of course, I don't know that this is a dovecot bug, but I could imagine that it might be (maybe a daemon forgets to switch users after one session is closed and another is opened?), so I thought I'd ask. I did see what looked like TLS fixes and login fixes in the changelogs, so it doesn't seem out of the question that such a bug could've existed. Some more information: I checked the user's settings on their desktop computer, where the unexpected messages appear, and sure enough, there is only one POP server account configured there, and it has the correct username. What's more, I asked them what time this happened, and they said probably at 7:00am or maybe a little earlier. Looking at my dovecot logs, I see this (where 'theuser' is the user who received the messages): Sep 28 06:59:49 myhostname dovecot: pop3-login: Disconnected: user=<theuser>, method=PLAIN, rip=192.168.1.245, lip=192.168.1.20, TLS Sep 28 06:59:55 myhostname dovecot: pop3-login: Login: user=<theuser>, method=PLAIN, rip=192.168.1.245, lip=192.168.1.20, TLS Sep 28 06:59:55 myhostname dovecot: POP3(theuser): Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=130585 So, it would seem that the user did login at the time they claimed and it was at that time (or close to it) that the weird messages appeared. Also, I checked the logs for logins from the person whose messages accidentally got downloaded, and it doesn't show them logging in until several hours later. Oh, and there are no log entries for either of the two users in question before that, at least not for over 12 hours before that. The user is running Outlook 2003, with POP3 + TLS access to the mailbox. My dovecot.conf has nothing fancy in it: base_dir = /var/run/dovecot/ ssl_cert_file = /etc/mail/certs/server.crt ssl_key_file = /etc/mail/certs/server.key protocols = imap imaps pop3 pop3s disable_plaintext_auth = no login_dir = /var/run/dovecot/login syslog_facility = local0 first_valid_uid = 100 protocol imap { } protocol pop3 { pop3_lock_session = yes pop3_uidl_format = %08Xv%08Xu } auth default { mechanisms = plain user = root passdb shadow { } userdb passwd { } } The accounts are all coming out of LDAP via nsswitch (and this is all happening on Slackware 10.2), but I'm fairly sure that's irrelevant since "getent passwd", etc. all show the right stuff. Thanks for any help anyone can give... - Logan

5 9

[Dovecot] Login process died before initialization - FIX
by Timo Sirainen 13 Oct '06

13 Oct '06

I think this should do it: http://dovecot.org/list/dovecot-cvs/2006-October/006504.html

1 0

[Dovecot] parser bug
by DINH Viêt Hoà 13 Oct '06

13 Oct '06

hello Timo (and maybe other Dovecot developers), It looks like the MIME parser won't parse this correctly : Content-type: text/html Note the lower-case '-type' in 'Content-type'. -- DINH V. Hoa

2 1

[Dovecot] Feature req: auth_cache_relookup
by Bill Boebel 13 Oct '06

13 Oct '06

With auth_cache_size set to a value greater than zero, when our users change passwords their accounts stop working for a few minutes, because they are trying to log in with their new password, but Dovecot is comparing that against the cached old password. It would be nice if an option could be added so that if the login password does not match the cached password, the cache value is dropped and dovecot-auth queries the userDB, but only if the previous login was successful (to avoid frequent queries for bad logins). Maybe this option could be called "auth_cache_relookup" Bill

2 1

[Dovecot] default_mail_env renaming
by Timo Sirainen 13 Oct '06

13 Oct '06

I was thinking about renaming default_mail_env to something that is more understandable. I'll keep it working for backwards compatibility anyway. How about: # Location for users' mailboxes. This is the same as the old default_mail_env # setting. The default is empty, which means that Dovecot tries to find the # mailboxes automatically. This won't work if the user doesn't have any mail # yet, so you should explicitly tell Dovecot the full location. # # If you're using mbox, giving a path to INBOX file (eg. /var/mail/%u) isn't # enough. You'll also need to tell Dovecot where the other mailboxes are and # where Dovecot can place its index files. # # There are a few special variables you can use, eg.: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if there's no domain # %h - home directory # # See doc/variables.txt for full list. Some examples: # # mail_location = maildir:/var/mail/%1u/%u/Maildir # mail_location = mbox:~/mail/:INBOX=/var/mail/%u # mail_location = mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # # http://wiki.dovecot.org/MailLocation # #mail_location =

2 2

[Dovecot] Todo page?
by Francisco Reyes 13 Oct '06

13 Oct '06

Is there a Todo list? Looking for it in search function I think I saw one in CVS.. Is there a web CVS interface? I found the changelog in http://dovecot.org/nightly/, but did not see a Todo.

2 2

[Dovecot] 1.0.rc8 released
by Timo Sirainen 13 Oct '06

13 Oct '06

I've still over 200 mails unread in the mailing list, and important things left in TODO. This release is an improvement over rc7 anyway, hopefully I'll have time to fix the rest soon. http://dovecot.org/releases/dovecot-1.0.rc8.tar.gz http://dovecot.org/releases/dovecot-1.0.rc8.tar.gz.sig * GSSAPI: Changed POP3 service name to "pop", which is what the standard says * "mbox:/var/mail/%u" no longer works as the mail location. You'll have to specify the mail root explicitly, just like the examples always have: "mbox:~/mail:INBOX=/var/mail/%u" + SHA1, LDAP-MD5, PLAIN-MD5, PLAIN-MD4: The password can be now either hex or base64 encoded. The encoding is detected automatically based on the password string length. + Allow running only Dovecot master and dovecot-auth processes with protocols=none setting + deliver: -f <envelope sender> parameter can be used to set mbox From_-line's sender address + deliver: Log all mail saves and failures + Tru64 SIA passdb support. Patch by Simon L Jackson. - INBOX was listed twice in mailbox list if namespace prefix was used - INBOX-prefixed namespaces were a bit broken - kqueue: Fix 100% CPU usage - deliver: Duplicate storage was a bit broken - dictionary code was broken (ie. dict quota) - SIGHUP caused crashes sometimes

3 14

[Dovecot] 1.0rc8: another problem? Possibly 64-bit index?
by David Lee 13 Oct '06

13 Oct '06

Yesterday I gave a status report about 10.rc8 in production, which mentioned a problem about "Login process died too early..." Timo suggested a patch for logging error messages. I've applied this. Others suggested increasing "login_max_processes_count". That was already way above our likely maximum, but I've doubled it anyway. Today, I've just repeated the trial, but with one significant difference and one significant new problem. The significant difference is that today's machine is not a 32-bit i686 but a 64-bit (and faster) x86_64. The new problem is lots of occurences of: [...]: IMAP([...]): file ../../../src/lib-index/mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size) [...]: child 4365 (imap) killed with signal 6 and: [...]: IMAP([...]): file ../../../../src/lib-storage/index/index-mail.c: line 105 (index_mail_get_fixed_field): assertion failed: (buffer_get_used_size(buf) == data_size) [...]: child 15009 (imap) killed with signal 6 Naturally, I've backed off quickly. Theoretically, this problem could be attributed to any of the three changes: logging, max processes, different (64-bit) machine. I suspect it's not the "login_max_processes_count" increase. Is it a side-effect of the better logging? (That is, was it always happening but the information simply not getting logged?) Note that our index files (and mail spool (INBOX, folder) areas) are on an NFS (NetApp) shared area accessed by all three classes of our machines: o existing UW-IMAP (which doesn't use the indexes) o yesterday-dovecot (32-bit) o today-dovecot (64-bit) My sneaky suspicion is that this is a subtle 64-bit-ism, either on its own, or in some sort of interaction with an indexes created from yesterday's 32-bit client. (Yes, theoretically, I could try another test to attempt to confirm or eliminate the 32/64 difference. But these issues didn't show up under testing, but only when we began trial service; I can't experiment on the users!) -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : Durham University : : http://www.dur.ac.uk/t.d.lee/ South Road : : Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

8 10

[Dovecot] Received dates problem in Outlook after migration
by James Wyper 13 Oct '06

13 Oct '06

Hello everyone, I've just started using 1.0-beta3 on Ubuntu Dapper, having migrated from an mbox / UW-IMAP combination to a Maildir / Dovecot one. For some reason the mb2md tool failed to recognise some of my mbox files as valid ones, so I migrated my email by running UW-IMAP, copying my folders to local storage in Evolution, then running Dovecot instead and copying the folders back. All seems OK, except that in Outlook 98 all the emails now have the date/time of their migration, not when they were received. This isn't a problem in Thunderbird or Evolution - but my wife uses Outlook and doesn't wish to switch. I've tried using touch to change the timestamps of the mails in my inbox (in ~/Maildir/cur) but this hasn't had any effect. I've also tried deleting ~/Maildir/dovecot.index and ~/Maildir/dovecot.index.cache but this hasn't made any difference either. Something else in dovecot must be being sent to Outlook as the date / time on these emails. Can anyone suggest what it would be and how I might go about changing it (to, for example, the Received: date on the email header?). Thanks in advance, James. ___________________________________________________________ Try the all-new Yahoo! Mail. "The New Version is radically easier to use" The Wall Street Journal http://uk.docs.yahoo.com/nowyoucan.html

3 2

[Dovecot] problem from beta7 to rc7
by Roberto Tagliaferri 13 Oct '06

13 Oct '06

Hi, today i've upgrade from beta7 to rc7; i've pop3 with real user (no db or other thing). The config file remain the same. After few hours the master process hang without any messages in log.. Is there a problem on config file? (I've upgraded because sometime i've a duplicated messages in pop3.. one deliver by postfix but 2 messages) -- Roberto Tagliaferri Responsabile Progettazione & Produzione TosNet s.r.l. - Internet Service Provider r.tagliaferri(a)tosnet.it www.tosnet.it

2 1

[Dovecot] Dovecot freeze - 1.0 rc7 - FreeBSD 6.1
by Floris van den Berg 13 Oct '06

13 Oct '06

Hi, One of my customers currently experiences a dovecot freeze on random accassions. Trying to figure out what's wrong with no luck. Dovecot is running fine, up until it suddenly stops responding. The log file says: dovecot: Oct 05 10:12:26 Info: pop3-login: Disconnected: Inactivity: rip=82.217.29.*, lip=85.17.42.165 dovecot: Oct 05 10:12:29 Info: pop3-login: Disconnected: Inactivity: rip=86.87.152.*, lip=85.17.42.165 dovecot: Oct 05 10:12:30 Info: pop3-login: Disconnected: Inactivity: rip=62.131.94.*, lip=85.17.42.165 dovecot: Oct 05 10:12:30 Info: pop3-login: Disconnected: Inactivity: rip=62.131.94.*, lip=85.17.42.165 dovecot: Oct 05 10:13:17 Info: pop3-login: Disconnected: Inactivity: rip=86.88.180.*, lip=85.17.42.165 No other errors are logged. When i restart dovecot it runs fine again for some time. Sometimes it works for a few days, sometimes just a few hours. There's always a point where it freezes again. Reinstalled dovecot. Fiddled a bit with the auth_worker_max_count and auth_process_size settings. No change in behavior was observed. There's no out of the ordinary cpu or memory use. Any ideas? Floris

2 1

Re: [Dovecot] Dovecot LDA
by Timo Sirainen 13 Oct '06

13 Oct '06

[repost] On Fri, 2006-10-06 at 21:00 -0500, Steven F Siirila wrote: > I am running Dovecot 1.0-rc6 along with dovecot-sieve from 2006-10-05 CVS. > I am calling dovecot deliver from Postfix (main.cf): > > mailbox_command = /opt/dovecot/libexec/dovecot/deliver > > Upon switching to dovecot deliver, I observed two problems: > > 1) An extraneous "From " header now appears at the top of each message > delivered, e.g.: > > From dovecot.deliver Fri Oct 06 19:59:57 2006 > From sfs(a)tc.umn.edu Fri Oct 6 19:59:57 2006 > Return-Path: <sfs(a)tc.umn.edu> > > Using Postfix delivery the first of these lines does not appear. > This, of course, confuses MUAs. Don't give F flag to Postfix's pipe command. Although this reminds me that the "dovecot.deliver" is wrong in there.. Hmm. I think I'll add a maildrop-compatible -f <envelope> parameter here. There, done in CVS. I'll also make 1.0rc8 release today. > 2) The "Content-Length:" header appears after a blank line, essentially > putting it into the RFC822 body, e.g.: > > User-Agent: Mutt/1.4.2.1i > X-UID: 11510 > Status: > X-Keywords: > > Content-Length: 200 > > test Are you sure it's a blank line? Dovecot adds lots of spaces after X-Keywords which could just make it look like that. If it really is a blank line, then it's most likely something else than Dovecot that changes the spaces that way.

1 0

Re: [Dovecot] Automatically deleting Trash a la Courier
by Francisco Reyes 13 Oct '06

13 Oct '06

Timo Sirainen writes: > #expire = Trash 7 Spam 30 Does the above mean one will be able to indicate multiple folders to expire? That is great! Any thoughts on having a per mailbox setting? For ISPs , one may want to give users the option to enable/disable the feature and perhaps give them a choice of dates.. ie Trash 7 days or 30 days. Spam 1 day or 7 days.

2 1

[Dovecot] Client giving "Alert: still here" with dovecot
by Francisco Reyes 13 Oct '06

13 Oct '06

I use Cone as my primary mail client and after some inactivity I keep getting "Alert: still here" when connected to my home/test dovecot server. Have tried with thunderbird leaving a connection inactive for a while and thunderbird gets no warnings. Any ideas what this may be?

2 1

[Dovecot] oops
by Timo Sirainen 13 Oct '06

13 Oct '06

I forgot to install gpg to new dovecot.org, so some of my mails haven't reached this list. Will report them. But still some of mails did reach the list, so apparently there's a bug in my filtering scripts. Lets see if I can get that fixed now..

1 0