- dovecot - dovecot.org

[Dovecot] RHEL 3 and quota problems...
by alan premselaar 18 Jun '06

18 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've just installed 1.0beta9 on my RHEL 3 system and am still getting the problems with the quota-fs returning "invalid argument". I think i've traced the problem down to differences in the quota versions based on the <sys/quota.h> files on RHEL 3 compared to FC3. on the system itself i'm using v2 quotas (with aquota.user and aquota.group files) however a diff of sysquota.h (copied from FC3 /usr/include/sys/quota.h) and <sys/quota.h> produces only the following: diff -u sysquota.h /usr/include/sys/quota.h - --- sysquota.h 2006-06-16 23:48:03.000000000 +0900 +++ /usr/include/sys/quota.h 2005-11-22 21:57:15.000000000 +0900 @@ -31,7 +31,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - - * Version: $Id: quota.h,v 1.7.6.1 2005/07/18 02:07:37 roland Exp $ + * Version: $Id: quota.h,v 1.7 1999/10/19 03:05:21 drepper Exp $ */ #ifndef _SYS_QUOTA_H @@ -42,10 +42,10 @@ /* * Select between different incompatible quota versions. - - * Default to the version used by Linux kernel version 2.4.22 - - * or later. */ + * Default to the version used by Linux kernel version 2.4.21 + * or earlier (in RHEL version 1 is AS2.1, version 2 is RHEL3 and later). */ #ifndef _LINUX_QUOTA_VERSION - -# define _LINUX_QUOTA_VERSION 2 +# define _LINUX_QUOTA_VERSION 1 #endif /* if I edit the quota-fs.h file to load "sysquota.h" instead of <sys/quota.h> for the linux quotas, it won't compile. (i tried this instead of editing system header files directly) so I suspect the problem lies deeper than just the _LINUX_QUOTA_VERSION number being set incorrectly. incidently, the error I get compiling is this: quota-fs.c: In function `fs_quota_get_resource': quota-fs.c:214: structure has no member named `dqb_curblocks' make: *** [quota-fs.lo] Error 1 I haven't done any C programming in more than 20 years so I think I'm pushing the boundaries of my capabilities here, but I'm hoping this might just be enough information to help someone more qualified easily fix the problem and allow me to start using the FS based quota plugins to dovecot on my mail server. here are some details of my system if they're useful: # uname -a Linux <hostname_goes_here> 2.4.21-40.ELsmp #1 SMP Thu Feb 2 22:22:39 EST 2006 i686 i686 i386 GNU/Linux # more /etc/redhat-release Red Hat Enterprise Linux ES release 3 (Taroon Update 7) Thanks, Alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEkshYE2gsBSKjZHQRAgrZAJ0cbZjSuPLV0T8C432EniCrkNw6tACgwKkz UZiSXsgXRb8w1Cc1XXXHWXs= =3CGX -----END PGP SIGNATURE-----

2 2

[Dovecot] [PATCH] Better detection for ioloop and notify
by Roy Marples 18 Jun '06

18 Jun '06

Hi List! Attached is a patch to configure.in to test that epoll, poll, inotify, kqueue and dnotify actually work. It also attempts to select the best one for you if none specified. This supercedes my previous patch in the re beta9 thread. Hopefully get this in Gentoo's beta9 ebuild soon. Thanks -- Roy Marples <uberlord(a)gentoo.org> Gentoo/Linux Developer (baselayout, networking)

3 3

[Dovecot] Plain and MD5 passwd for the same user?
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I'm running dovecot 1.0-0_12.beta8. Since I have only a very small number of user on that server, I have their names and password in text files, no databases. imap works both via webmail and via Kmail Is it possible to have, for the same user, a plain unencrypted password when connecting via imap on the local interface (needed, as I understand it, to be squirrelmail compatible) and a DIGEST-MD5 one when connecting via pop3s or imaps remotely? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We are drowning in information but starved for knowledge. -- John Naisbitt, Megatrends

2 1

[Dovecot] Server CommonName mismatch: localhost.localdomain
by M. Fioretti 18 Jun '06

18 Jun '06

Hello, I have seen via google that this very problem was already discussed on this and other lists some months ago, but the archives report no solution. I have dovecot 1.0-0_12.beta8 on Centos 4.3. IMAP works just fine: I can read email from both Squirrelmail via web and Kmail. Now I have created an ssl certificate and I'm trying to use it via pop3. When I launch fetchmail I get the error below. Is it caused by dovecot? If not, where is the problem, on the server or here in my home PC? TIA, Marco marco@polaris:~> fetchmail -vv fetchmail: 6.3.2 querying my.vps.fqdn.name (protocol POP3) at Tue 13 Jun 2006 05:22:50 PM CEST: +poll started fetchmail: Issuer Organization: SomeOrganization fetchmail: Issuer CommonName: localhost.localdomain fetchmail: Server CommonName: localhost.localdomain fetchmail: Server CommonName mismatch: localhost.localdomain != my.vps.fqdn.name fetchmail: my.vps.fqdn.name key fingerprint: 20:93:B4:D8:CB:75:AD:72:F6:00:A8:DC:CE:F2:53:6E fetchmail: my.vps.fqdn.name fingerprints do not match! 23942:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify +failed:s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from remoteuser(a)my.vps.fqdn.name -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Only boring people ever get bored Anonymous

2 2

[Dovecot] 1.0 beta 9 problems
by Peter Chiu 18 Jun '06

18 Jun '06

Two problems with this new beta not found in beta 8. 1. mbox_from_create error This is the configure string I use, and I paste the make error message below. I have to use "--with-storages=maildir,mbox" to get around the error. ./configure \ --prefix=/opt1/dovecot \ --localstatedir=/var \ --without-shadow \ --without-cyrus-sasl2 \ --without-pop3d \ --without-gssapi \ --disable-ipv6 \ --disable-debug \ --with-storages=maildir \ --with-ssl=openssl mkdir .libs gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o deliver auth-client.o deliver.o duplicate.o mail-send.o smtp-client.o ../lib/mountpoint.o ../lib/str-sanitize.o -Wl,--export-dynamic ../lib-storage/register/libstorage-register.a ../../src/lib-storage/index/maildir/libstorage_maildir.a ../../src/lib-storage/index/libstorage_index.a ../../src/lib-index/libindex.a ../lib-storage/libstorage.a ../lib-storage/subscription-file/libstorage_subscription_file.a ../lib-imap/libimap.a ../lib-mail/libmail.a ../lib-dict/libdict.a ../lib-charset/libcharset.a ../lib/liblib.a deliver.o(.text+0xa28): In function `main': /opt1/source/dovecot-1.0.beta9/src/deliver/deliver.c:301: undefined reference to `mbox_from_create' *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src/deliver. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9/src. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. *** Error code 1 Stop in /opt1/source/dovecot-1.0.beta9. 2. I have to specify the following in the dovecot.conf or server wont start as others have pointed out alreay. protocol imap { ssl_listen = *:993 }

2 1

[Dovecot] APPEND command truncates message
by Chris Rodgers 18 Jun '06

18 Jun '06

Hi, I have been debugging a small perl script (see ShowBug2) that I use. In doing so, I think that I may have uncovered a problem with the dovecot IMAP server. Attached are two packet traces for connections to two different IMAP servers. On both servers I run the script: i.e. I login, select a folder, search for messages and append a message. On the fvs5 server (Courier IMAP?), everything works as expected. However, on the dovecot server, the message that is saved into my mailbox has been truncated at the end of the line containing "26". I attach a copy of the saved message in MessageAsOnIMAPServer.txt. I hope that this report might be useful. Please let me know if you require any further information. Chris. * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=LOGIN] fvs5 IMAP4rev1 2003.339p-cpanel at Tue, 18 Apr 2006 21:50:06 +0000 (GMT) 1 Login "*******" {7} + Ready for argument ******* 1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User Rodgers authenticated 2 SELECT IT-Lilac * 0 EXISTS * NO Trying to get mailbox lock from process 32317 * 0 RECENT * OK [UIDVALIDITY 1145396966] UID validity status * OK [UIDNEXT 1] Predicted next UID * FLAGS (\Answered \Flagged \Deleted \Draft \Seen) * OK [PERMANENTFLAGS (\* \Answered \Flagged \Deleted \Draft \Seen)] Permanent flags 2 OK [READ-WRITE] SELECT completed 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK UID SEARCH completed 4 APPEND IT-Lilac {717} + Ready for argument >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 1 EXISTS * 1 RECENT 4 OK APPEND completed 5 LOGOUT * BYE fvs5.freevirtualservers.com IMAP4rev1 server terminating connection 5 OK LOGOUT completed * OK dovecot ready. 1 Login "*******" {8} + OK ******** 1 OK Logged in. 2 SELECT IT-Lilac * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk \*)] Flags permitted. * 117 EXISTS * 1 RECENT * OK [UNSEEN 116] First unseen. * OK [UIDVALIDITY 1136428693] UIDs valid * OK [UIDNEXT 344] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID SEARCH HEADER Subject "lilac gpg message" * SEARCH 3 OK Search completed. 4 APPEND IT-Lilac {717} + OK >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 * 118 EXISTS * 2 RECENT 4 OK Append completed. 5 LOGOUT * BYE Logging out 5 OK Logout completed. >From chris(a)rodgers.org.uk Tue Apr 18 21: 49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test Content-Length: 113 Status: O X-UID: 344 X-Keywords: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 #! /usr/bin/perl use strict; use Mail::IMAPClient; use Term::ReadPassword; # Check that username, password and server have been provided my $Server = "imap.pcl.ox.ac.uk"; my $User = `whoami`; chomp $User; my $Password = read_password('Mail password: '); my $INBOX = "IT-Lilac"; unless ($Server) { die "You must provide a server!"; } unless ($User) { die "You must provide a user!"; } unless ($Password) { die "You must provide a password!"; } print "Connecting to $User\@$Server\n\n"; my $IMAP = Mail::IMAPClient -> new (Server => $Server, User => $User, Password => $Password, Debug => 1) or die "Could not connect to your IMAP server, stopping"; if (!$IMAP->IsAuthenticated()) { die "Could not log in to your IMAP server, stopping"; } $IMAP -> Uid(1); # Use UID's for messages. $IMAP -> select($INBOX); my @msgs = $IMAP -> search("HEADER","Subject","lilac gpg message"); my $MessageBody = <<'EOM'; >From chris(a)rodgers.org.uk Tue Apr 18 21:49:09 2006 Return-Path: <chris(a)rodgers.org.uk> Received: from lilac.home (localhost.localdomain [127.0.0.1]) by lilac.home (8.13.4/8.13.4) with ESMTP id k3IKn8cK004092 for <chris(a)lilac.home>; Tue, 18 Apr 2006 21:49:08 +0100 Received: (from chris@localhost) by lilac.home (8.13.4/8.13.4/Submit) id k3IKn8Cm004091 for chris; Tue, 18 Apr 2006 21:49:08 +0100 Date: Tue, 18 Apr 2006 21:49:08 +0100 From: Chris Rodgers <chris(a)rodgers.org.uk> Message-Id: <200604182049.k3IKn8Cm004091(a)lilac.home> To: chris(a)lilac.home Subject: test 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 EOM print "Length is: {" . length($MessageBody) . "}"; $IMAP -> append("IT-Lilac",$MessageBody); # BUG: For some reason, we lose a bit of the message! print "\n"; $IMAP = $IMAP -> disconnect(); exit;

2 1

[Dovecot] Dovecot's as ip/user based login filter?
by Sysadmin 18 Jun '06

18 Jun '06

Hello. I'm facing a problem, I need to give access to internal mailserer for some people only, but can't figure out how to do it. Opening the 993 port for whole word gives access to everyone who have account. Can Dovecot act as login filter or etc for that purpose. Or does anybody have idea how to do it? -- Sysadmin

4 9

[Dovecot] Dovecot not responding to CAPABILITY command
by Ryan Hinton 17 Jun '06

17 Jun '06

Thank you for the patch, my mail server is up and running again. Now I am back to my previous problem: I am not able to log in with Thunderbird. Thunderbird issues the capability command which is not answered by Dovecot. Here is a session transcript using openssl s_client. * OK Dovecot ready. 1 capability * OK Waiting for authentication process to respond.. 2 CAPABILITY * OK Waiting for authentication process to respond.. quit * OK Waiting for authentication process to respond.. QUIT DONE The first time I tried it worked fine. * OK Dovecot ready. 1 capability * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS AUTH=PLAIN 1 OK Capability completed. QUIT DONE But every other time I tried it failed like the first example. Any suggestions? --- Ryan Hinton iobass(a)email.com

2 1

[Dovecot] Plugin Docs (Trash)
by Timothy White 17 Jun '06

17 Jun '06

I searched, and couldn't find much in the wiki, or the mailing list... What is the trash plugin? How do we use it? I notice that none of the plugins have much documentation, other that bits on the wiki, which is getting out of date. When I get the chance, I'll make sure the wiki quota stuff, is right, and post working examples. Thanks Tim -- Linux Counter user #273956

2 1

[Dovecot] Dovecot+NFS: Copying messages causes failures (possible SIGABRT)
by Tony Kay 16 Jun '06

16 Jun '06

Environment: Dovecot 1.0beta8 Host: 64 bit Red Hat AS4 Linux (2.6.9-34.0.1) Disks: NFS netapp In the case below, the two connections were going through two separate servers sharing disks via an NFS NetApp. Here is the sequence of operations: 1. Open a connection to a folder (say mail/Trash) 2. Open a connection to another folder (say Inbox) 3. Move messages from Inbox to Trash using this sequence on Inbox: uid copy #,# "mail/Trash" uid store #,# +flags (\Deleted) check expunge 4. Next, access open connection to Trash: noop (completes OK, but does not see new messages) ...wait a few seconds... noop (connection drops...no response) Attempt to reconnect: mailbox locked. Will override in 270 seconds. The dovecot logs contain the following for the exact time when the connection drops: dovecot: IMAP(tkay): file mail-index-sync-update.c: line 686 (mail_index_sync_update_index): assertion failed: (view->hdr.messages_count == map->hdr.messages_count) I cannot correlate this to the user/folder, but this message is usually nearby: child 22915 (imap) killed with signal 6 -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Perfection uncanned Like a beautiful redhead Fresh from her trailer from Spam-Ku : Tranquil Reflections on Luncheon Loaf by John Cho

2 1

[Dovecot] check pass; user unknown in logs
by james edwards 16 Jun '06

16 Jun '06

I am seeing lots of these in my logs and there are often a hundered or so imap/dovecat process running. I am running RC Core3. Can anyone shead some light on how to correct this ? Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27653]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27657]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: check pass; user unknown Jun 16 08:38:24 jidmail dovecot(pam_unix)[27658]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: check pass; user unknown Jun 16 08:38:26 jidmail dovecot(pam_unix)[27684]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27690]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: check pass; user unknown Jun 16 08:38:27 jidmail dovecot(pam_unix)[27693]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: check pass; user unknown Jun 16 08:38:29 jidmail dovecot(pam_unix)[27712]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27713]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: check pass; user unknown Jun 16 08:38:30 jidmail dovecot(pam_unix)[27716]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= -- James H. Edwards Network Systems Administrator Judicial Information Division jedwards(a)nmcourts.com

1 0

[Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

Our setup is ok with Postfix / Dovecot. I just need to add dovecot LDA. I use the 1.0beta9 LDA Configuration: protocol lda { postmaster_address = postmaster(a)clm.net4all.ch #hostname = #mail_plugins = #mail_plugin_dir = /usr/lib/dovecot/imap #sendmail_path = /usr/lib/sendmail auth_socket_path = /var/run/dovecot/auth-master } auth default-socket { mechanisms = plain login passdb sql { args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf } userdb sql { args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } user = dovecot count = 1 } Postfix configuration, like the dovecot LDA wiki page Master.cf: dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d ${recipient} Main.cf default_destination_recipient_limit = 1 Log: Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver Jun 15 19:15:43 mail2 dovecot: auth(default-socket): sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 Jun 15 19:15:43 mail2 dovecot: auth(default-socket): Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") The status 89 is for default error ... so no more informations with this. Permision on deliver is setuid (we use a different UID per domain) mail2:/etc/dovecot# stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' Size: 2507575 Blocks: 4912 IO Block: 4096 fichier r�gulier Device: 805h/2053d Inode: 65010 Links: 1 Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2006-06-15 19:15:43.314434576 +0200 Modify: 2006-06-15 13:46:15.000000000 +0200 Change: 2006-06-15 19:18:32.821665560 +0200 Can anyone help me ? Thanks, -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

2 2

Re: [Dovecot] Problem with Dovecot LDA / Postfix
by Dominique Feyer 16 Jun '06

16 Jun '06

I have only postfix log (in syslog mail facility), no dovecot log from the LDA deliver binary (with mail_debug = yes), this is strange ... Jun 16 14:37:58 mail2 postfix/pickup[6014]: 5407F7FF3: uid=0 from=<root> Jun 16 14:37:58 mail2 postfix/cleanup[6073]: 5407F7FF3: message-id=<20060616123758.5407F7FF3(a)mail2.clm.net4all.ch> Jun 16 14:37:58 mail2 postfix/qmgr[6015]: 5407F7FF3: from=<root(a)localhost.localdomain>, size=326, nrcpt=1 (queue active) Jun 16 14:37:58 mail2 postfix/pipe[6076]: 5407F7FF3: to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced (Command died with status 89: "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") Can i activate log for the LDA in the configuration file or deliver command argument in master.cf ? Thanks Le vendredi 16 juin 2006 à 08:24 -0400, My BSD a écrit : > On Thu, 15 Jun 2006 19:18:40 +0200 > Dominique Feyer <dfeyer(a)net4all.ch> wrote: > > > Our setup is ok with Postfix / Dovecot. > > > > I just need to add dovecot LDA. > > > > I use the 1.0beta9 > > > > LDA Configuration: > > > > protocol lda { > > postmaster_address = postmaster(a)clm.net4all.ch > > #hostname = > > #mail_plugins = > > #mail_plugin_dir = /usr/lib/dovecot/imap > > #sendmail_path = /usr/lib/sendmail > > auth_socket_path = /var/run/dovecot/auth-master > > } > > auth default-socket { > > mechanisms = plain login > > passdb sql { > > args = /usr/local/dovecot-1.0-beta9/etc/dovecot-pgsql.conf > > } > > userdb sql { > > args = /usr/local/dovecot-1.0-beta8/etc/dovecot-pgsql.conf > > } > > socket listen { > > master { > > path = /var/run/dovecot/auth-master > > mode = 0660 > > user = vmail > > group = mail > > } > > } > > user = dovecot > > count = 1 > > } > > > > Postfix configuration, like the dovecot LDA wiki page > > > > Master.cf: > > dovecot unix - n n - - pipe > > flags=DRhu user=mail:mail > > argv=/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver -d > > ${recipient} > > > > Main.cf > > default_destination_recipient_limit = 1 > > > > Log: > > > > Jun 15 19:15:43 mail2 postfix/qmgr[4226]: 31FA27FF2: > > from=<root(a)localhost.localdomain>, size=343, nrcpt=1 (queue active) > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master in: > > USER^I1^Iinfo(a)lda.net4all.ch^Iservice=deliver > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > sql(info(a)lda.net4all.ch): SELECT '/var/spool/mail/'||home AS home, > > uid, gid FROM users WHERE userid = 'info(a)lda.net4all.ch' > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): master out: > > USER^I1^Iinfo@lda.net4all.ch^Ihome=/var/spool/mail/lda.net4all.ch/mails/info^Iuid=1999^Igid=1999 > > Jun 15 19:15:43 mail2 dovecot: auth(default-socket): > > Jun 15 19:15:43 mail2 postfix/pipe[4314]: 31FA27FF2: > > to=<info(a)lda.net4all.ch>, relay=dovecot, delay=0, status=bounced > > (Command died with status 89: > > "/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver") > > > > The status 89 is for default error ... so no more informations with > > this. > > > > Permision on deliver is setuid (we use a different UID per domain) > > mail2:/etc/dovecot# > > stat /usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver > > File: `/usr/local/dovecot-1.0-beta9/libexec/dovecot/deliver' > > Size: 2507575 Blocks: 4912 IO Block: 4096 fichier > > r�gulier > > Device: 805h/2053d Inode: 65010 Links: 1 > > Access: (6755/-rwsr-sr-x) Uid: ( 0/ root) Gid: ( 0/ > > root) Access: 2006-06-15 19:15:43.314434576 +0200 > > Modify: 2006-06-15 13:46:15.000000000 +0200 > > Change: 2006-06-15 19:18:32.821665560 +0200 > > > > Can anyone help me ? Thanks, > > > > -- > > Dominique Feyer > > Administrateur Système > > Ch. de la Colline 5bis > > CH-1007 Lausanne > > dfeyer(a)net4all.ch > > > > > > What are the corresponding "dovecot" log entries? > > (I use exim and was finally able to get "deliver" working by studying > "dovecot" log entries.) > -- Dominique Feyer Administrateur Système Ch. de la Colline 5bis CH-1007 Lausanne dfeyer(a)net4all.ch

1 0

[Dovecot] Broken on upgrade, "Protocol not supported"
by Ryan Hinton 16 Jun '06

16 Jun '06

Hello, and thanks in advance for your help. I was having trouble with dovecot-1.0beta2 after it worked flawlessly since January. Thunderbird was complaining that dovecot was not returning proper mail server capabilities (its log seems to confirm this). I checked the dovecot site and saw a new beta (beta9) with lots of bug fixes, so I downloaded it and installed it. The configure and make ran without incident. Before running 'sudo make install' I stopped the dovecot process with a SIGTERM. I installed and tried to restart the server, but now I get the two following errors: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported I went back and re-configured without IPv6 support, recompiled, and reinstalled. I even rebooted, but still the same result. Any help is greatly appreciated. I am running OpenBSD 3.5 i386. <time passes...> After some printf's, I found Error: socket() failed: Protocol not supported Error: section 2 port = 993 my_ip.family = 0 so.sin.family = 0 SOCK_STREAM = 1 AF_UNIX = 1 AF_INET = 2 AF_INET6 = 24 Fatal: listen(993) failed: Protocol not supported in function net_listen(...) in src/lib/network.c. My socket programming is a little rusty, but don't we want an address family of AF_INET or AF_INET6? Moving up into src/master/main.c I found set->protocols = imap imaps set->listen_ip.family = 2 set->listen_port = 143 set->ssl_listen_ip.family = 0 set->ssl_listen_port = 993 These print statements start at line 361, right after if (set->ssl_listen_ip.family == 0 && set->ssl_listen == NULL) set->ssl_listen_ip = set->listen_ip; Is there something going wrong in resolve_ip? I'm out of time tonight trying to track this down. Hopefully someone else will have more knowledge to pinpoint the problem. Let me know if I can provide more information. OK, one more tidbit. I hard-coded set->ssl_listen_ip.family to 2 and it seems to work beautifully. My mail server is back up. Why? --- Ryan Hinton iobass(a)email.com

3 2

[Dovecot] LDAP with Active Directory
by B Hatoum 16 Jun '06

16 Jun '06

Hello, I have successfully used dovecot 1.0 Beta 9 to do SASL authentication for postfix using the unix passwd/shadow files. I need to authenticate with a windows 2003 server using active directory. My system does not support PAM (I'm using slackware) so I cannot take that route. I do not need to use dovecot for POP or IMAP at the present time and so I would like to avoid modifying my active directory schema. Dovecot seems to be communicating with the active directory server, however it is sending an authentication failure to postfix: postfix/smtpd[24540]: warning: unknown[XXX.XXX.XXX.X]: SASL LOGIN authentication failed: UxxvcmxxQ6 I don't see any messages in the log from dovecot. Here is my dovecot-ldap.conf: hosts = 192.168.1.2:389 dn = "cn=dovecot,cn=Users,dc=DOM,dc=local" dnpass = "password" auth_bind = yes ldap_version = 3 base = cn=Users,dc=DOM,dc=local deref = never scope = subtree default_pass_scheme = CRYPT user_global_uid = 900 user_global_gid = 900 Can someone point out what I am missing? I can't find documentation on this type of setup. Thanks in advance. B Hatoum

4 3

[Dovecot] fedora directory server
by Alfonso Sparano 16 Jun '06

16 Jun '06

Hi all someone is successful to use fedora directory server as an ldap server for user/password and also with the LDA? I'm testing protocol smtp: sendmail + dovecot lda + fedora directory server and also: protocol pop3 and imap: dovecot + fedora directory server Thanks a lot folks Alfonso

1 0

[Dovecot] Dovecot-auth relicensing to BSD/MIT
by Timo Sirainen 15 Jun '06

15 Jun '06

Bcc'd to everyone who have sent me patches to dovecot-auth or related code. Once in a while people ask me if Dovecot's authentication server code could be relicensed to BSD so they could use it for their project. Usually they have been other BSD-licensed open source projects which just prefer not to use LGPL code. Now there's again this company asking me to give them a bit less restrictive license (they want to link it statically to a closed source program). They'd want to move the code to a separate SASL package and create a library out of it. They want SASL client code too, so they'd apparently write it for the package as well. I've been thinking about separating the dovecot-auth to be a separate package for a while too, although only around the time when Dovecot v2.0 is released (certainly not before v1.0). So, I think changing the Dovecot-auth's license from LGPL to BSD or MIT wouldn't really hurt and it could get it more widely used. Most of Dovecot's lib/ code is already MIT-licensed, so MIT would be more consistent. But I don't think there really is any real difference between BSD and MIT, so either one is fine for me. :) Now, this mail is mostly meant for asking people who have sent me patches to dovecot-auth if they allow the license change for their patch. If not, I'll either rewrite the part of the code, or for larger code parts (eg. NTLM auth) I'll just leave it LGPL licensed but so that it can be compiled out optionally. So, bcc'd people, please reply to me which one of these you're okay with: 1) I allow license change to either BSD or MIT 2) I allow license change to BSD 3) I allow license change to MIT 4) I don't allow license change

2 2

[Dovecot] SASL AUTH LOGIN mechanism problems
by Anders Karlsson 15 Jun '06

15 Jun '06

Hi all, Have anyone had problems with Exhange 2003 servers trying to use sasl against Postfix+Dovecot SASL using the AUTH LOGIN Mechanism ? I've done some smtp debugging, and it seems that Exchange sends the usename at the same time as AUTH LOGIN i.e: AUTH LOGIN <base64_username> It then expects to be able to send the password. mech-login.c silently discards all data after AUTH LOGIN and just prompts the username prompt whetever the username has already been supplied during initial AUTH LOGIN request. I've attached a patch to make mech-login.c check if additional data has been sent along with AUTH LOGIN, and in this case skip ahead directly to the Password: prompt. Cheers Anders

2 1

[Dovecot] nfs, dovecot, and maildirs
by bofh list 15 Jun '06

15 Jun '06

Hello - I know I am not the only one that will be trying, or has tried this before. Here are my questions! NFS Clients, multiple servers running dovecot - linux with 2.6 kernel with relevant patches (utime, etc) Backend - netapp filer End users - various clients all running IMAP It looks like 1.0.beta8 is definately the way to go. I have a few questions with regards to setup. Is it now possible to reliably store index files over nfs? If not, the alternative is keeping index files in memory, or on local disk - on each server. How big of a performance hit is this if imap connections are round-robined between imap servers? I've seen various people using different actimeo settings, some set at 0, some slightly higher - as much as 30. Can anyone speak on experience they have had with netapps on this subject? The following sound like they are required: mmap_disable=yes lock_method=dotlock Has anyone been successful with fnctl() on netapps with dovecot? Thanks in advance!

3 2

[Dovecot] How to open only these dovecot ports?
by M. Fioretti 15 Jun '06

15 Jun '06

Hello, I have not clear, due to the new syntax, how to configure dovecot 1.0 to listen only for the following combinations of ports and services: no pop3, from whatever host accept imap connections only if coming from localhost (since I understand this is secure _and_ the only way to make squirrelmail talk to dovecot) listen on the internet only for imaps and pop3s connections, accept them only if DIGEST-MD5 authentication succeeds. Thanks in advance for any explanation, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ We shall serve God, family and country, in that order, because without the one before it, each would perish.

2 2

[Dovecot] Error: socket() failed: Protocol not supported ERROR in dovecot-1.0.beta9
by Jeff Gardiner 14 Jun '06

14 Jun '06

I'm trying to get IMAPS working with dovecot-1.0.beta9. I'm building it on a Solaris 10 box, with openssl-0.9.8b installed. Here is the results of my ./configure: Install prefix ...................... : /usr/local/dovecot-1.0.beta9 File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : none Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: I've attached a copy of my dovecot.conf file (striped of comments). When I try running dovecot I get the following error: Error: socket() failed: Protocol not supported Fatal: listen(993) failed: Protocol not supported When I change ssl_disable = no to ssl_disable = yes, everything works. Anyone have any suggestions? Cheers Jeff protocols = imap imaps listen = * disable_plaintext_auth = no log_path = /var/log/dovecot ssl_disable = no ssl_cert_file = /usr/local/ssl/certs/Imaging_Dovecot_cert.pem ssl_key_file = /usr/local/ssl/private/Imaging_Dovecot_key.pem ssl_parameters_regenerate = 168 verbose_ssl = yes default_mail_env = maildir:%h/.email protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth default { mechanisms = plain digest-md5 cram-md5 passdb pam { args = dovecot } userdb passwd { } user = root } plugin { }

5 5

[Dovecot] Problems with dovecot.beta9
by Adnae Mac Uthidir 14 Jun '06

14 Jun '06

Dear all :) I have been upgraded dovecot today and I get following errors: Jun 14 12:08:54 [dovecot] IMAP(adnae(a)xxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(auftrag(a)xxxxxxx.xxx): inotify_init() failed: Function not implemented Jun 14 12:08:54 [dovecot] IMAP(swolf(a)xxxxxx.xxx): inotify_init() failed: Function not implemented I have a 64 bit system (Gentoo [amd64]) and I have enabled this function on my kernel: Kernel: 2.6.16-gentoo-r9: [*] Inotify file change notification support thx for your help :)

1 0

Re: [Dovecot] Quick thanks for wonderful ACLS!
by Gavin Henry 14 Jun '06

14 Jun '06

<quote who="Marc Perkel"> > Looks cute but - why do I want it? What's it good for? I must be missing > something .... > > Well, in a big company, you might not want users to delete any e-mails they have sent out of the company. Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 1

[Dovecot] 1.0 roadmap
by Timo Sirainen 14 Jun '06

14 Jun '06

I've read about one month back this list's messages. I've still 216 messages from this year marked as "unread" which I should look into more (+258 older ones). Also I've 180 "unread" messages in my INBOX also which might contain something useful. So those messages could still contain something that should be added to this list. Anyway looking at my current TODO, I think the following things should be fixed before v1.0. Additions, comments, patches and such welcome. :) Help would be welcome in checking if these bugs are still there: - Thunderbird+POP3 DELE error. Was this fixed already? Could someone try this? See http://www.dovecot.org/list/dovecot/2005-June/007497.html and the rest of the thread. Basically put thousands of messages into mailbox, start downloading them and see if error comes. - Solaris sendfile is broken? Is it? Can someone try? You can test it with maildir by setting mail_save_crlf=yes, saving a somewhat large mail and FETCHing it (and truss that it really uses sendfile) - passdb passwd + passdb shadow -> passdb_password isn't reset to NULL (ie. probably doesn't allow logging in if the shadow password is correct?) - maildir: rename foo foo.xyz -> infinite loop possible? (doesn't seem so? why did I think it could be? look at the code) Important: - dict-server should have some config file which lists the allowed dicts - LDA: empty mail gives an error. - deliver: delivering mail to box smaller than mbox_min_index_size give close() errors - mbox: CRLFs in headers break the mbox - index: when mailbox is deleted/renamed and someone else had it open, we get stat() error messages in log file. Handle at least the most common places where it happens. - lib-storage - limit folder hierarchy levels? user can now create eg. a/a/a/a/... and then start renaming them from end to beginning, which probably will at some point start causing syscall failures which will fill up logs. Probably should be done: - mbox: dirty mode should be stored to index - quota code should probably be always doing some quota_set_critical() instead of using mail_storage_set_critical(), so that quota_last_error() would work properly - rfc2557 support for BODYSTRUCTURE, as specified by RFC3501 - keywords: add some limits to how many there can be - don't return \* in PERMANENTFLAGS when we're full - mbox: how well does dirty sync + status work? it reads the last mail every time? not very good.. - maildir: we probably shouldn't do duplicate detection/fixing?.. or at least stat() the old file before trying, because we might have just previously seen the old file and then new file and then we try to fix it..

18 37

[Dovecot] b8 fails with ACL plugin on
by Fintec 14 Jun '06

14 Jun '06

After upgrading to b8 using the ATrpm with the ACL plugin on it fails: # /etc/init.d/dovecot start Starting Dovecot Imap: Edlopen(/usr/lib/dovecot/imap/lib01_acl_plugin.so) failed: /usr/lib/dovecot/imap/lib01_acl_plugin.so: cannot open shared object file: No such file or directory Error: imap dump-capability process returned 22784 [FAILED] Anyone able to help be troubleshoot this? Gavin

1 0

[Dovecot] question about upgrade
by Ivan Arteaga 14 Jun '06

14 Jun '06

HI, First time posting here. can someone do let me know if there is a specific upgrade procedure from 0.99x to 1.x? Any comment will be appreciated. --Ivan.

2 1

Re: [Dovecot] Error: socket() failed: Protocol not supported ERROR
by Marcus Rueckert 14 Jun '06

14 Jun '06

On 2006-06-13 17:20:11 -0700, Jack Bailey wrote: > The bug seems to be in dovecot.conf. Uncomment ssl_listen and set it to * works for me: SuSE Linux 10.0 i386 1.0.beta9 with imap and pop3 enabled with listen and ssl_listen set to either "*" or "[::]". maybe run the process under truss/strace to see which call exactly fails. darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org

1 0

[Dovecot] Re: [Dovecot-news] 1.0.beta9 released
by Timo Sirainen 13 Jun '06

13 Jun '06

On Tue, 2006-06-13 at 18:49 +0200, Geert Hendrickx wrote: > On Tue, Jun 13, 2006 at 07:16:50PM +0300, Timo Sirainen wrote: > > Fixes a lot of bugs. The next release will be the first "release > > candidate" instead of a beta. > > Timo, > > thanks for another release. I noticed one thing though: ./configure now > checks for c++ and f77 compilers, even though dovecot doesn't seem to use > any C++ nor Fortran. Could this check be removed again? (unless it's > necessary, of course) I've no idea how to remove them. Autoconf for some reason just wants to add checks for them. I once tried looking into it how they could be removed but couldn't figure out anything. Cc'd the mailing list, maybe someone here knows how to do that?

2 1

[Dovecot] POP3 notice if password expired
by Vaidas Pilkauskas 13 Jun '06

13 Jun '06

Hi, We just migrated our IMAP service to Dovecot and it performs very well. We also want to migrate our POP3 service (qpopper) to Dovecot. The problem is that Dovecot and Qpopper differently act on expired passwords: Qpopper: -ERR "user": password expired. Dovecot: -ERR Authentication failed. Are there any way to tell Dovecot to report about expired passwords? We have about 30000 users and 84 days password lifecycle. "Password expired" notifications highly reduce the number of support calls from our users. Server setup info: Solaris 9 SPARC, PAM authentication. Thanks, Vaidas Pilkauskas Vilnius University

2 3

[Dovecot] ssl-proxy: client certificates and crl check
by HenkJan Wolthuis 13 Jun '06

13 Jun '06

Hi, I've attached a new version of my patch against ssl_proxy-openssl.c which: - disconnects when no clientcertificate is presented - checks the clientcertificate against the crl for our root cert. (so you can't use a revoked client cert.) - returns the CommonName from the client cert. in ssl_proxy_get_peer_name (this way it's easier to use dovecot as imap-proxy with a passwd-like userdb + ssl_require_client_cert + ssl_username_from_cert, it "binds" the emailuser to the clientcertificate, so a user / clientcert. can access only the account from the userdb) In order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) changes in this version: - found the proper way to extract the CommonName from a certificate! - code cleanup there are some issues with the patch: - it needs openssl > 0.9.7. the way I do CRL loading/checking is new in 0.9.7. There are some examples on the openssl-devel list, but not much documentation. - ssl_verify_client_cert now returns 0 in case of an invalid cert. was there a reason why it always returned 1? - ssl_proxy_get_peer_name is changed, code depending on this function returning "X509_NAME_oneline" can break.. (at the moment it is only used for the ssl_username_from_cert config option, i think) I'd like comments / ideas etc. -- groeten, HenkJan Wolthuis --- ssl-proxy-openssl.c.orig 2006-04-04 10:32:58.000000000 +0200 +++ ssl-proxy-openssl.c 2006-06-01 09:24:57.000000000 +0200 @@ -498,7 +498,7 @@ const char *ssl_proxy_get_peer_name(struct ssl_proxy *proxy) { X509 *x509; - char buf[1024]; + char buf[256]; const char *name; if (!ssl_proxy_has_valid_client_cert(proxy)) @@ -508,10 +508,16 @@ if (x509 == NULL) return NULL; /* we should have had it.. */ - X509_NAME_oneline(X509_get_subject_name(x509), buf, sizeof(buf)); - name = t_strndup(buf, sizeof(buf)); + /* HJHJ */ + /* the X509_N_gtbN can return -1 without 0-terminating buf */ + /* if the call succeeds buf is 0-terminated (openssl 0.9.7e / 0.9.8b src) */ + buf[0] = '\0'; + if( X509_NAME_get_text_by_NID(X509_get_subject_name(x509),NID_commonName,buf,sizeof(buf)) < 0 ) + { buf[0] = '\0'; } + name = t_strndup(buf, sizeof(buf) ); X509_free(x509); - + /* HJHJ */ + return *name == '\0' ? NULL : name; } @@ -582,10 +588,22 @@ proxy = SSL_get_ex_data(ssl, extdata_index); proxy->cert_received = TRUE; + + /* HJHJ */ + char buf[1024]; + X509_NAME_oneline( X509_get_subject_name(ctx->current_cert),buf,sizeof(buf)); + if (!preverify_ok) + { proxy->cert_broken = TRUE; + i_warning("BAD CERT %s: %s",X509_verify_cert_error_string(ctx->error),buf); + } + else + { i_warning("CERT: %s",buf); } /* logging */ - return 1; + return preverify_ok; + /* HJHJ */ + } static int @@ -666,10 +684,20 @@ if (getenv("SSL_VERIFY_CLIENT_CERT") != NULL) { SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER | - SSL_VERIFY_CLIENT_ONCE, + SSL_VERIFY_FAIL_IF_NO_PEER_CERT, ssl_verify_client_cert); } + /* HJHJ */ +#if OPENSSL_VERSION_NUMBER >= 0x00907000L + X509_STORE *store; + if( (store=SSL_CTX_get_cert_store(ssl_ctx)) != NULL ) + { X509_STORE_set_flags( store, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL); } + else + { i_warning("X509 get cert store failed..."); } +#endif + /* HJHJ */ + /* PRNG initialization might want to use /dev/urandom, make sure it does it before chrooting. We might not have enough entropy at the first try, so this function may fail. It's still been

2 5

[Dovecot] Using MySQL to store email?
by Marc Perkel 13 Jun '06

13 Jun '06

So Timo, Have you considered the idea of storing all the email in a MySQL database? Seems to me that MySQL could somplify all the backend stuff that everyone struggles with and with replication one could create very massive and reliable systems. What would it take to use MySQL that way?

26 62

[Dovecot] Multiple quota roots
by Timo Sirainen 13 Jun '06

13 Jun '06

IMAP RFC defines a way to have multiple quota roots. For example with filesystem quota the first quota root would be "available disk space in filesystem" and second quota root would be the user's normal quota. I guess this could similarly be useful for example to have a per-domain quota (eg. 10GB) and each user have their own separate quota (eg. 1GB), so that 20 the users together still couldn't use more than the 10GB. Anyway the most important reason why I need to implement them now is to allow a configuration where you could have eg. 1GB quota normally, but also extra 100MB allowed for Trash mailbox. So even when you're over quota your IMAP client can still do its copy-to-Trash operations. I guess with Maildir++ quota backend this should need to be implemented in a backwards compatible way so that the main maildirsize file contains the 1GB quota limit but still tracks the entire usage so it can grow to 1,1GB there. Now, anyone have suggestions how all of this should be configured in config file to make it as useful for different purposes as possible? :)

1 1

[Dovecot] strange behaviour: connecting to mysql, but no queries after upgrade on ubuntu...
by Nikolaus Schlemm 13 Jun '06

13 Jun '06

hi all, I'm having trouble using dovecot with mysql after upgrading to 1.0.beta3 on ubuntu. according to the mysql log, dovecot connects but doesn't issue any queries.. any hints what might be wrong or where I should look? -- Cheers, Nikl

1 0

[Dovecot] what is the correct password file format?
by M. Fioretti 13 Jun '06

13 Jun '06

Hello, I'm trying to set up dovecot installed from RPM (version dovecot-0.99.11-2.EL4.1, the one included in Centos 4.3). I get this error: dovecot-auth: passwd-file(user@domail): unknown user even if user@domain exists: auth_userdb = passwd-file /etc/imap.virtual_users auth_passdb = passwd-file /etc/imap.virtual_users -bash-3.00# cat /etc/imap.v_users user@domain:{DIGEST-MD5}thepassword:uid_value:gid_value::/absolute/path/to/virtual/mailboxes why do I get this error? and what is the correct config format for this version of dovecot? TIA, Marco -- Marco Fioretti mfioretti, at the server mclink.it Fedora Core 3 for low memory http://www.rule-project.org/ Furious activity is no substitute for understanding. -- H.H. Williams

1 0

Re: [Dovecot] Dovecot fails to start after enabling "deliver" executable settings to config file
by infowolfe 12 Jun '06

12 Jun '06

On 6/12/06, My BSD <MyBSD(a)comcast.net> wrote: > The directory should have been "/opt/local/var/run/dovecot/". > > However, when "user" and "group" are set to "9999" dovecot will not > start with the following error log entries: > > ------------------------------------------- > dovecot: Jun 12 12:52:36 Error: auth(default): User doesn't exist: 9999 > dovecot: Jun 12 12:52:36 Error: Auth process died too early - shutting > down dovecot: Jun 12 12:52:36 Error: child 29585 (auth) returned error > 89 > ------------------------------------------- cat /etc/passwd | grep 9999 if you don't see any output, then cat /etc/passwd | more and pick a different uid/gid to launch dovecot as ;-)

1 0

[Dovecot] ./configure and /or Makefile problem
by B.O.F.H. 12 Jun '06

12 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is on OpenBSD 3.x. I'll fully admit not being a savvy programmer and therefore unable to suggest a decent resolution. It seems that _something_ in either the main "configure" script or one of the Makefile.in templates is causing the Makefiles in src/auth and src/util to add two variables named "AUTH_CFLAGS" and "AUTH_LIBS", which on first look makes sense. Looking a bit deeper, they both contain variables in the format "@VARNAME@" which I'm presuming _should_ have been replaced with actual paths and/or "-l" statements during the configure process. Those being: AUTH_CFLAGS = -I@includedir@ @INCLUDE_des@ AUTH_LIBS = -L@libdir@ -lgssapi -lkrb5 -lasn1 @LIB_des_appl@ - - -lroken @LIB_crypt@ @LIB_dbopen@ @LIBS@ -L/usr/local/lib -lpq - - -L/usr/local/lib/mysql -lmysqlclient -lz -lm Two issues become apparent: 1 - Somehow, the unexpanded "@" variables are making it to the command line 2 - "-lroken" is a Linux specific library and is not found in most *BSD's. Generally configure scripts replace it with "-lcrypto" on host OS detection. This can be displayed by looking at the errors for both auth and util: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Making all in util gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/util' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - - -I../../src/auth -I/usr/local/include -I/usr/include/kerberosV - - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - - -Wbad-function-cast -MT rawlog.o -MD -MP -MF ".deps/rawlog.Tpo" - - -c - -o rawlog.o rawlog.c; \ then mv -f ".deps/rawlog.Tpo" ".deps/rawlog.Po"; else rm -f ".deps/rawlog.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link --tag=CC gcc -std=gnu99 -O2 - - - -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -L/usr/local/lib -o rawlog rawlog.o ../lib/liblib.a mkdir .libs gcc -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -o rawlog rawlog.o -L/usr/local/lib ../lib/liblib.a if gcc -DHAVE_CONFIG_H -I. -I. -I../.. - - -I../../src/lib - -I../../src/auth -I/usr/local/include - - -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall - - -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith - - -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT gdbhelper.o - - -MD -MP -MF ".deps/gdbhelper.Tpo" -c -o gdbhelper.o gdbhelper.c; \ then mv -f ".deps/gdbhelper.Tpo" ".deps/gdbhelper.Po"; else rm -f ".deps/gdbhelper.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link - - --tag=CC gcc -std=gnu99 -O2 - -march=athlon -pipe -Wall -W - - -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -L/usr/local/lib -o gdbhelper gdbhelper.o ../lib/liblib.a gcc -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts - - -Wformat=2 - -Wbad-function-cast -o gdbhelper gdbhelper.o - - -L/usr/local/lib ../lib/liblib.a if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - - - -I../../src/auth -I/usr/local/include -I/usr/include/kerberosV - - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - - -Wbad-function-cast -MT dovecotpw.o -MD -MP -MF ".deps/dovecotpw.Tpo" -c -o dovecotpw.o dovecotpw.c; \ then mv -f ".deps/dovecotpw.Tpo" ".deps/dovecotpw.Po"; else rm -f ".deps/dovecotpw.Tpo"; exit 1; fi /bin/sh ../../libtool --mode=link - - --tag=CC gcc -std=gnu99 -O2 - -march=athlon -pipe -Wall -W - - -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith - - -Wchar-subscripts -Wformat=2 - -Wbad-function-cast - - -L/usr/local/lib -o dovecotpw dovecotpw.o ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib/liblib.a - -L@libdir@ -lgssapi -lkrb5 - - -lasn1 @LIB_des_appl@ -lroken @LIB_crypt@ @LIB_dbopen@ @LIBS@ - - -L/usr/local/lib -lpq -L/usr/local/lib/mysql - - - -lmysqlclient -lz -lm -export-dynamic ../../libtool[6473]: cd: /src/mail/dovecot-1.0.beta8/src/util/@libdir@ - No such file or directory libtool: link: cannot determine absolute directory name of `@libdir@' gmake[3]: *** [dovecotpw] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/util' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 To get Dovecot to build, I manually went into both Makefiles, made "AUTH_CFLAGS" empty and deleted all "@" references and "-lroken" in "AUTH_LIBS" replacing them with "-lcrypto" Once I did that, it built successfully and has not thrown any errors. - -- Ed V. Don't hit the keys so hard, it hurts. 12 June 2006 08:22:32 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRI15U6fRmhqF/IZAAQpxDBAA5eHEmclQjjQesfrz9cq5zkFeted+G5md vDCQ65Q8QDD5yXdg0BKlc571JbFJjI2Rc7jGEGsokrgP895jOEHDMEaDbJ4CCX8h r5IqFSmS9Hi/Uuyte1Aww7lLBnq0+yT9NcxzmYP0OYwGRM+EpYU5Z4/mwjgSmFcR 0qn/2WlmK+Q1kBD3S0IrtbOOUjLEFX+x+C5iomd0Ua05FuwtKSFFBBChNU9jOl3S 4ir9UVYJpd8pOikfghnPrSegoigjU4SsxcbvjFi3lfZUpJPY5oZZDNzRqh5/oJHc PSwIl8as98RqQqtJsMzEwzT787pAD5zT5q+KAk+0jRPN5Qhc58lnDSQD2KBr9WPg MeZmRivQAkK5LUePkSCGg+BqsiA6UJka5RF76nGfpi3boL7Uc6Q9OFYFHWny8g1T dxrQvXW5//n6QyxTPliK9Nu3g7tspp07E6oBMSAhu6q7KF3l+ReARVPEpdjcgOqM yz+rzk6a8NMTkXfsysvwm11EU6pvjgrJRpnVlLvYfbbIu0BDIVrr9J4iAXWvb6Ll 447S+DDf67rDxp0VscmCxQ1CrI8WK2mL/SGdnuJEcQvP2B1BurI01AcVNcUDfeNi anHOX+b8OUkwbvjOecFMNEMg/GHN1Ckgd05vgG4o4u2IyBsA/a1cypNFHnwLFTxM IRjupfBLxlE= =y6WG -----END PGP SIGNATURE-----

2 2

Re: [Dovecot] Dovecot fails to start after enabling "deliver" executable settings to config file
by Timo Sirainen 12 Jun '06

12 Jun '06

On Mon, 2006-06-12 at 10:29 -0400, My BSD wrote: > dovecot: Jun 12 10:08:53 Error: auth(default): bind > (/opt/var/run/dovecot/auth-client) failed: No such file or directory Does /opt/var/run/dovecot/ directory exist? And you haven't tried to chroot auth process?

1 0

[Dovecot] deliver setgid issues
by Brad 12 Jun '06

12 Jun '06

Okay .. have dovecot set up with following settings : userdb static { args = uid=97 gid=97 home=/export/dovecot/mail/%d/%u mail=mbox:/export/dovecot/mbox/%d/%u/ } passdb passwd-file { # Path for passwd-file args = /etc/dovecot-passdb } Passdb works I think in the sense that I can log into dovecot using a regular mail client. The real issue is when I try to deliver any type of mail using dovecot-lda (deliver). deliver is setuid and setgid dovecot .. I event se the static mail dirs above to be owned by dovecot (I know .. a no no .. but wanted to trace down issue) I also have first_valid_uid = 96 and first_valid_uid = 96 Now .. when I try to do this .. echo "A Test Message" | /usr/local/libexec/dovecot/deliver -d existinguser I get this .. master in: USER 1 echo service=deliver dovecot: Mar 11 23:45:24 Info: auth(default): master out: USER 1 echo uid=97 gid=97 home=/export/dovecot/mail//echo mail=mbox:/export/dovecot/mbox//echo/ dovecot: Mar 11 23:45:24 Error: auth(default): deliver: Fatal: setgroups(97) failed: Operation not permitted 97 is the gid for the dovecot user .. which owns just about everything deliver could ever touch. What am I missing ?

5 6

[Dovecot] Verbose logs to show ACL hits?
by Gavin Henry 12 Jun '06

12 Jun '06

Hi all, Using Beta here, but can't see anything in dovecot.conf for this? Any tips? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

2 3

[Dovecot] Quick thanks for wonderful ACLS!
by Gavin Henry 12 Jun '06

12 Jun '06

Hi again, Just testing the ACLs, as one of our clients do not want users to delete or move Sent emails. Following http://wiki.dovecot.org/ACL and creating: /etc/dovecot-acls/Sent with this in it: owner lrsi Works a treat. We love Dovecot! ;-) -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] Verbose logs to show ACL hits?
by Gavin Henry 12 Jun '06

12 Jun '06

Hi all, Using Beta here, but can't see anything in dovecot.conf for this? Any tips? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] LDA Questions
by Timothy White 12 Jun '06

12 Jun '06

Firstly, if you're out of quota for example, and using postfix, will it need to send a bounce email, or will it do the out of quota error at SMTP time? (preferred) Also, I want a global sieve script to run first, REGARDLESS if the user has their own script. # If there is no user-specific Sieve-script, global Sieve script is # executed if set. #global_script_path = This suggests to me, that it will only execute if no user sieve script is present. As most of my users are going to be virtual, it shouldn't be a problem, but just encase, I'd like to know my global script is being run for all users. Thanks Tim -- Linux Counter user #273956

4 4

[Dovecot] ssl_require_client_cert = yes for encrypted connections only
by Rainer Frey 12 Jun '06

12 Jun '06

Hi, is there any way to get dovecot to use "ssl_require_client_cert = yes" for encrypted connections only? For unencrypted connections there can't be any client certificate, and I can't disable unencrypted connections altogether (I limit them by firewall to our own network). Rainer Frey -- Software Development ------------------------------------------------------ Inxmail GmbH Kaiser-Joseph-Str. 274, 79098 Freiburg, Germany

3 4

[Dovecot] Expunge is not expunging unless called twice--revisited
by Jeff Blank 12 Jun '06

12 Jun '06

Hi, I'm running dovecot-1.0.beta8 from FreeBSD ports, using mbox mail store. My problem appears to have come up on the list about a month ago, "Expunge is not expunging unless it is called twice". I ran through Bill Boebel's telnet-IMAP session for myself, and I see that his test case is now fixed (as Timo said), but mutt, for whatever reason, uses +FLAGS.SILENT, and I'm still getting the behaviour in Bill's original problem when I telnet and use +FLAGS.SILENT: 1 OK Logged in. 2 select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] * Flags permitted. * 1 EXISTS * 1 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1148956034] UIDs valid * OK [UIDNEXT 4] Predicted next UID 2 OK [READ-WRITE] Select completed. 3 UID STORE 3 +FLAGS.SILENT (\Deleted) 3 OK Store completed. 4 expunge 4 OK Expunge completed. 5 expunge * 1 EXPUNGE * 0 RECENT 5 OK Expunge completed. After step 4, the message is still in the mailbox with "X-Status: D"; the second expunge is required to remove it. I seem to get the same behaviour with Thunderbird, so is this still a dovecot problem? (I have Thunderbird set up to remove deleted messages immediately, not move to trash or just mark as deleted.) thanks much, Jeff

4 4

[Dovecot] Wiki's MainConfig page
by Timo Sirainen 12 Jun '06

12 Jun '06

http://wiki.dovecot.org/MainConfig is now automatically generated from dovecot-example.conf, so it's no longer out of date. I use the attached perl script to generate it, so if you want some things to work better in it fix the script and send it back to me :) Oh and it's now immutable so no-one can edit the page directly.

1 0

[Dovecot] Strange Error after some hour of inactivity.
by Ramunas 12 Jun '06

12 Jun '06

Hi, in near future planing migrate our E-mail server to new hardware. Decided try dovecot as IMAP and POP3 server. Compiled latest dovecot-1.0.beta8 version on Linux Fedora Core 3 machine (2.6 kernel). Users database are on PostgreSQL server. Everything working fine except some issues. After some hour of inactivity (POP3 or IMAP) then connecting to check e-mail got this error: invalid I/O fd 8, callback 0x8064d30. Next connection without service restart working fine again but only when in dovecot.conf exsist this option: login_process_per_connection = yes. When "login_process_per_connection = no" , always got "invalid I/O fd 8, callback 0x8064d30" error. from log file ( in dovecot.conf login_process_per_connection = yes): ... Jun 2 08:34:31 srv1 dovecot: auth(default): sql(ramas,192.168.0.3): Password query failed: Jun 2 08:34:31 srv1 dovecot: auth(default): invalid I/O fd 8, callback 0x8064d30 Jun 2 08:34:31 srv1 dovecot: auth(default): sql(ramas,192.168.0.3): Password query failed: Jun 2 08:34:31 srv1 dovecot: auth(default): file auth-request.c: line 347 (auth_request_verify_plain_callback): assertion failed:(request->state == AUTH_REQUEST_STATE_PASSDB) Jun 2 08:34:31 srv1 dovecot: pop3-login: Disconnected: method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 2 08:34:31 srv1 dovecot: child 12203 (auth) killed with signal 6 Jun 2 08:34:31 srv1 dovecot: auth(default): pgsql: Connected to hosting Jun 2 08:34:34 srv1 dovecot: pop3-login: Login: user=<ramas>, method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 2 08:34:34 srv1 dovecot: POP3(ramas): Disconnected: Logged out top=0/0, retr=2/3502, del=2/2, size=3468 ... also have troubles with maildir quota on POP3 module (IMAP works fine): mail log: ... Jun 1 20:29:40 srv1 dovecot: Dovecot v1.0.beta8 starting up Jun 1 20:29:41 srv1 dovecot: auth(default): pgsql: Connected to hosting Jun 1 20:29:44 srv1 dovecot: POP3(ramas): dlopen(/usr/lib/dovecot/lib01_quota_plugin.so) failed: /usr/lib/dovecot/lib01_quota_plugin.so: undefined symbol: mountpoint_get Jun 1 20:29:44 srv1 dovecot: pop3-login: Login: user=<ramas>, method=PLAIN, rip=192.168.0.3, lip=192.168.0.6, TLS Jun 1 20:29:44 srv1 dovecot: child 21465 (pop3) returned error 89 Jun 1 20:43:09 srv1 dovecot: Killed with signal 15 ... For this issue i found solution with manual compilation POP3 module: appended dependence -o ../lib/mountpoint.o Best regards, Ramas Lithuania, Marijampole

2 2

[Dovecot] Errors in dovecot 1 beta7
by Oliver Schulze L. 11 Jun '06

11 Jun '06

Hi, I just installed dovecot 1.0 beta 7 and I have these errors: May 5 09:21:27 mail dovecot: pop3-login: Login: user=<user1>, method=PLAIN, rip=::ffff:xx.xx.xx.6, lip=::ffff:xx.xx.xx.1 May 5 09:21:27 mail dovecot: POP3(user2): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 May 5 09:21:27 mail dovecot: pop3-login: Login: user=<user3>, method=PLAIN, rip=::ffff:xx.xx.xx.12, lip=::ffff:xx.xx.xx.1 May 5 09:21:27 mail dovecot: auth(default): userdb(user4,::ffff:xx.xx.xx.207): user not found from userdb May 5 09:21:27 mail dovecot: pop3-login: Internal login failure: user=<user4>, method=PLAIN, rip=::ffff:xx.xx.xx.207, lip=::ffff:xx.xx.xx.1 May 5 09:21:27 mail dovecot: POP3(user1): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 May 5 09:36:49 mail dovecot: pop3-login: Login: user=<user5>, method=PLAIN, rip=::ffff:xx.xx.xx.203, lip=::ffff:xx.xx.xx.1 May 5 09:36:49 mail dovecot: POP3(user5): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 May 5 09:36:50 mail dovecot: auth(default): BROKEN NSS IMPLEMENTATION: getpwnam() lookup returned different user than was requested (user6 != user7). May 5 09:36:50 mail dovecot: child 8454 (auth) returned error 89 May 5 09:37:50 mail dovecot: pop3-login: Disconnected: Inactivity: user=<user7>, method=PLAIN, rip=::ffff:xx.xx.xx.32, lip=::ffff:xx.xx.xx.1 I run dovecot in CentOS 4.3 using openldap/nss_ldap/nscd The problem get resolved when I restart dovecot. Is this a problem in dovecot or in nss_ldap/nscd? How can I debug even further? Many thanks Oliver -- Oliver Schulze L. <oliver(a)samera.com.py>

2 8

Re: [Dovecot] Maildir folder hierarchy question
by Richard Leszczynski 11 Jun '06

11 Jun '06

> did you get an answer? No answer yet. I've had another look at the conf file in the meantime and I still can't detect if specifying :INBOX=... in the default_mail_env has any effect at all. Richard L > Richard Leszczynski wrote: > > Hello all, > > > > I am trying to set up Dovecot to use a particular > > maildir folder hierarchy and have a problem that > > relates to the inbox. > > > > the folder hierarchy I want in /.../Maildir/ is: > > > > .inbox > > cur > > new > > tmp > > .imap.index.files-for-inbox > > .sent-items > > cur > > new > > tmp > > .imap.index.files-for-sent-items > > > > however the hierarchy that dovecot gives me is > > > > .inbox (unused) > > .INBOX > > .imap.index.files-for-.INBOX > > cur > > new > > tmp > > .sent-items > > cur > > new > > tmp > > .imap.index.files-for-.sent-items > > > > I would like to have the (cur,new,tmp) folders > > associated with the the .inbox placed in the > .inbox > > directory, not alongside it in the main maildir > > directory. Dovecot appears to do this > automatically > > for other folders. I'm not too bothered if the > .inbox > > folder has to be capitalised. > > > > Is this possible? I suspect from reading the > Dovecot > > Q&A that it may not be as the rootdir has special > > significance with IMAP but I would like > confirmation. > > > > I've currently set my default_mail_env as: > > > > default_mail_env = > > > maildir:/home/%u/mail/maildir:INBOX=/home/%u/mail/maildir/.inbox > > > > > > which I thought should do accomplish what I want > but > > it has no apparent effect. > > > > I'm running SUSE 10.0 with Dovecot 0.99.14-5 (as > > installed by Yast). KMail and Outlook are being > used > > to access Dovecot. > > > > Can anyone help? > > thank you, > > Richard L > > > > > > > > > ___________________________________________________________ > > > 24 FIFA World Cup tickets to be won with Yahoo! > Mail http://uk.mail.yahoo.com > > > > -- > ==== > Stewart Dean, Unix System Admin, Henderson Computer > Resources > Center of Bard College, Annandale-on-Hudson, New > York 12504 > sdean(a)bard.edu voice: 845-758-7475, fax: > 845-758-7035 > > ___________________________________________________________ Switch an email account to Yahoo! Mail, you could win FIFA World Cup tickets. http://uk.mail.yahoo.com

2 1

[Dovecot] Dovecot 1.0beta7: STARTTLS/SSL not wanting to start
by Mike Brudenell 11 Jun '06

11 Jun '06

Greetings - I have been looking at Dovecot with a view to migrating us to it from the Washington IMAP server on our Sun systems. To start our testing we first of all installed the pre-built version of Dovecot from the Blastwave (www.blastwave.org) community supported packaged software site. This was Dovecot 0.99.10.4 and we successfully got it working in our test environment: at first just with regular IMAP, then with STARTTLS too. For the latter we installed a properly signed certificate and it works fine: mail clients can connect, use STARTTLS and then use the encrypted connection. I then downloaded the source code for Dovecot 1.0beta7 and built this myself from source, against the OpenSSL 0.9.8 libraries. I configured Dovecot to use the same certificate and key files as had been used for the earlier version we had just tried out. Whilst 1.0beta7 works fine for regular IMAP it just does not want to start SSL using STARTTLS at all. The error that is getting logged in the syslog file is: <date etc> ... dovecot: [ID 107833 mail.warning] imap-login: SSL_accept() failed: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash unavailable [ddd.ddd.ddd.ddd] I see in the archived for the list archives that this same problem was asked about for 1.0beta3 but without a solution I could see. Could someone offer any insight/help, please? Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. *

3 3

[Dovecot] Quotas and LDAP
by Stephan Müller 11 Jun '06

11 Jun '06

Hi, first of all, it is very nice that dovecot has quotas now! Thank you very much. Now, I want to use quotas with LDAP requests, but I am having the following issues. First, contrary to what is written in the Wiki about quota and LDAP ("# quotaStorage must be in the format mentioned above, # For example: dirsize:storage=10240"), it is possible to have an LDAP field with just a number in it. The configuration in dovecot-ldap.conf looks like: user_attrs = homedir=home,uidnumber=uid,primaryGroupID=gid,quotanumber=quota=maildir:storage This works (as tested - I guess, it works as long as the quota entry is the last entry) and you also see it in the logs: Jun 11 19:10:36 inet dovecot: auth(default): master out: USER^I8^Ismueller^Iuid= 76340^Igid=513^Iquota=maildir:storage=90000000^Ihome=/home/dozenten/smueller/ Question now: is this intended (meaning, is this configuration possibility here to stay)? If yes, can you please update the wiki? Second issue: according to the description, the quota number is the size in KB. Is there a chance to change it to bytes? Reason: I am using Postfix with the VDA extension. There, the quota is to be given in bytes. Now, as lazy as I am, I only want to maintain one value for the quota. As I personally think that a quota given in bytes is more flexible, I would ask whether the following change can be made to dovecot: --- quota-maildir.c.orig 2006-06-11 19:15:55.000000000 +0200 +++ quota-maildir.c 2006-06-11 19:16:13.000000000 +0200 @@ -526,7 +526,7 @@ for (; *args != '\0'; args++) { if (strncmp(*args, "storage=", 8) == 0) { - size = strtoull(*args + 8, NULL, 10) * 1024; + size = strtoull(*args + 8, NULL, 10); if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; Thanks Stephan -- | Those that bite the hand that feeds them are | | doomed to lick the boot that kicks them. |

2 2

[Dovecot] beta8: complaint about tilde at startup
by Jeff A. Earickson 11 Jun '06

11 Jun '06

Timo, After installing beta8 on Solaris 10 sparc and starting it for the first time, I noticed this in my syslog: May 14 19:35:45 emerald dovecot: [ID 475045 mail.info] Dovecot v1.0.beta8 starting up May 14 19:35:47 emerald dovecot: [ID 536776 mail.error] stat(~) failed: No such file or directory The only appearance of the tilde (~) in my dovecot.conf is here: default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%u:INDEX=~ Is the INDEX definition wrong? Or is this a bug? My setup: Solaris 10, mbox format, home directories are local UFS filesystems, INBOX is an NFS-mounted filesystem from another S10 box (NFS version 4). Jeff Earickson Colby College

4 3

[Dovecot] maildir quota not including INBOX
by Bill Boebel 11 Jun '06

11 Jun '06

The maildir quota plugin doesn't appear to be including the INBOX in the quota calculation that is reported by GETQUOTAROOT. I took a look at the code and it appears that in this file "src/plugins/quota/quota-maildir.c", the function "maildirsize_recalculate" relies on all of the folders being listed when "maildir_list_init" is called. However the INBOX is not included in that listing, so its current storage size is not included. I couldn't figure out what patch would be needed to fix this, but I'm sure it is something simple. Any ideas? Bill

2 1

[Dovecot] LIST command ignores "hidden=yes" for default namespace
by Bill Boebel 11 Jun '06

11 Jun '06

I'm not sure if this is a bug or just an undesirable feature, but when I have our namespace configured to match Courier's "INBOX." functionality, Dovecot forces me to also define a default namespace (with no prefix). Without the default namespace defined I get "NO Unknown namespace." errors when trying to subscribe or unsubscribe folders. So I have configured my namespaces like this: namespace private { separator = . prefix = INBOX. inbox = no } namespace private { separator = . prefix = inbox = yes hidden = yes } However with this configuration, LIST commands ignore the "hidden = yes" setting on the default namespace and IMAP clients end up displaying an identical folder listing twice... 2 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.spam" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\HasNoChildren) "." "INBOX.RSS" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.test2" * LIST (\HasNoChildren) "." "spam" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "Drafts" * LIST (\HasNoChildren) "." "RSS" * LIST (\HasNoChildren) "." "test" * LIST (\HasNoChildren) "." "test2" 2 OK List completed. Again, I am not sure if this was intended, but either way it is undesirable for us. I even had a couple customers delete one of their duplicate folders thinking that was safe, but it deleted both folders - of course. To force Dovecot to hide mailboxes in the default namespace I made the following change: src/imap/cmd-list.c: @247 + if (ns->hidden) { + return; + }

2 1

[Dovecot] Bug: maildirsize not updated when deleting folders
by Bill Boebel 11 Jun '06

11 Jun '06

When using maildir++ quotas, if you delete an IMAP folder, the maildirsize file should get updated so that it subtracts the size of the messages that were contained in the deleted IMAP folder. However Dovecot is not doing this, resulting in Dovecot showing an incorrect quota value until the next time the maildirsize file is rebuilt. Bill

2 2

[Dovecot] Outside mails
by Tolga 11 Jun '06

11 Jun '06

Hi, I recently found out that I was able to get system mails, but not mails from the outside world. What setting do I have to fiddle with for this? Regards,

5 6

[Dovecot] Quotas and LDAP
by Stephan Müller 11 Jun '06

11 Jun '06

Hi, first of all, it is very nice that dovecot has quotas now! Thank you very much. Now, I want to use quotas with LDAP requests, but I am having the following issues. First, contrary to what is written in the Wiki about quota and LDAP ("# quotaStorage must be in the format mentioned above, # For example: dirsize:storage=10240"), it is possible to have an LDAP field with just a number in it. The configuration in dovecot-ldap.conf looks like: user_attrs = homedir=home,uidnumber=uid,primaryGroupID=gid,quotanumber=quota=maildir:storage This works (as tested - I guess, it works as long as the quota entry is the last entry) and you also see it in the logs: Jun 11 19:10:36 inet dovecot: auth(default): master out: USER^I8^Ismueller^Iuid= 76340^Igid=513^Iquota=maildir:storage=90000000^Ihome=/home/dozenten/smueller/ Question now: is this intended (meaning, is this configuration possibility here to stay)? If yes, can you please update the wiki? Second issue: according to the description, the quota number is the size in KB. Is there a chance to change it to bytes? Reason: I am using Postfix with the VDA extension. There, the quota is to be given in bytes. Now, as lazy as I am, I only want to maintain one value for the quota. As I personally think that a quota given in bytes is more flexible, I would ask whether the following change can be made to dovecot: --- quota-maildir.c.orig 2006-06-11 19:15:55.000000000 +0200 +++ quota-maildir.c 2006-06-11 19:16:13.000000000 +0200 @@ -526,7 +526,7 @@ for (; *args != '\0'; args++) { if (strncmp(*args, "storage=", 8) == 0) { - size = strtoull(*args + 8, NULL, 10) * 1024; + size = strtoull(*args + 8, NULL, 10); if (size != 0) root->message_bytes_limit = size; root->master_message_limits = TRUE; Thanks Stephan -- | Those that bite the hand that feeds them are | | doomed to lick the boot that kicks them. |

1 0

[Dovecot] RFC 3501 compliance issue: body-type-msg incorrect
by Tony Kay 11 Jun '06

11 Jun '06

Hi, I am using Dovecot 1.0 beta 7, moving to beta8 probably tomorrow. I am seeing a few RFC compliance issues with IMAP responses. I have an in-house IMAP client that caches IMAP data for a web mail system (it parses millions of IMAP interactions a day), and it reports whenever it gets a line that does not look RFC compliant. Unfortunately, users modify their mailboxes before I can get a copy that allows me to reproduce the errors. However, I can at least show you some examples of the response lines I'm seeing, since they are copied verbatim to my logs when they happen. I saw one case of imap-literal coming across without a \r\n sequence: * 1135 FETCH (UID 1345 RFC822.SIZE 4813894 BODY (("text" "plain" ("charset" "ISO-8859-1") NIL NIL "7bit" 415 6)("application" "octet-stream" ("name" {59}C:\\Documents and Settings\\Mitch\\Desktop\\AIR JORDANS.ppt) NIL NIL "base64" 4811938) "mixed") BODY[1]<0> {80} We sorted out what technical difficulties we having and have posted a corrected BODY[HEADER.FIELDS (FROM TO SUBJECT)] {90} From: XXX To: XXX Subject: Sports group II back online ) This one is probably some weird malformed message, since literal strings processing is certainly not broken in general. The much more common problem is when people receive a message that has a message embedded using the RFC3501 body-type-msg rule. Here is a sample incorrect response: * 4154 FETCH (UID 27140 RFC822.SIZE 14078 BODY (("text" "plain" ("charset" "ISO-8859-1" "format" "flowed") NIL NIL "7bit" 2 1)("message" "rfc822" ("name" "casbudmgr: FW: deans-dirs: Scholarship Announcement") NIL NIL "7bit" 11694 ("Wed, 12 Apr 2006 14:42:04 -0700" "casbudmgr: FW: deans-dirs: Scholarship Announcement" (("xxxxxxx xxxx" NIL "xxxxxx" "xxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxxxxxxxx" "lists.xxxxxxxxxxx")) ((NIL NIL "casbudmgr" "xxxxx.xxxxxxx.xxx")) ((NIL NIL "xxxxxxxxx" "xxxxxxxxxxxxxxxxx")) NIL NIL NIL <AF3B91355406B440A6E838338E63A742C6435B@xxxxxxxxxxxxxxxxxxxxxdu>") ("text" "plain" ("charset" "us-ascii") NIL NIL "quoted-printable" 2047 50)("text" "html" ("charset" "us-ascii") NIL NIL "quoted-printable" 6565 189) "alternative" 302)("text" "x-vcard" ("charset" "utf-8" "name" "ddkintz.vcf") NIL NIL "7bit" 415 14) "mixed")) Look through the line to the point where you see: "alternative" 302. The part the proceeds this is a body-type-mpart rule, but it is missing a set of parentheses...i.e. there should be an ending paren after alternative, and a beginning paren before the set of 1parts that precede it. This looks like a similar problem to what was in imap_bodystructure.c a while back. -- Anthony Kay University Computing Center (541) 346-1719 GPG Fingerprint: B0DB D46A 60AF FAE7 A94A 5075 0CB4 4D88 9F4F 7F09 Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. Rich Cook

3 4

[Dovecot] Fatal: chdir(/home/xxxxx) failed with uid xxx: Permission denied
by Nick Ortiz 11 Jun '06

11 Jun '06

I've had this issue for sometime, I finally gave up and switched to Courier-Imap but I'm finding I hate data storage / structure so I decided to give dovecot another go but am still running into the same issue. I had this working once upon a time and can not for the life of me figure it out. Here's some basic info. Dist: Gentoo 2005.1 Emerge Info: net-mail/dovecot-1.0_beta8 USE="ipv6 pam ssl -debug -kerberos -ldap -mbox -mysql* -pop3d -postgres -vpopmail" Permissions for /home: drwxr-x--x Owner for /home: root Permissions for /home/*: drwxr-xr-x Owner for /home/*: username:username dovecot: May 18 23:40:04 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=xxx.xxx.xxx.xxx rip=xxx.xxx.xxx.xxx dovecot: May 18 23:40:04 Info: auth(default): client out: CONT 1 dovecot: May 18 23:40:04 Info: auth(default): client in: CONT<hidden> dovecot: May 18 23:40:04 Info: auth(default): client out: OK 1 user=xxxx dovecot: May 18 23:40:04 Fatal: chdir(/home/xxxxx) failed with uid 502: Permission denied dovecot: May 18 23:40:04 Info: auth(default): master in: REQUEST 2 4464 1 dovecot: May 18 23:40:04 Info: auth(default): master out: USER 2 xxxx system_user=xxxx uid=502 gid=506 home=/home/xxxx ovecot: May 18 23:40:04 Info: imap-login: Login: user=<xxxx>, method=plain, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS dovecot: May 18 23:40:04 Error: child 4488 (imap) returned error 89 Only real resolution I can find refers to SELinux which I do not have installed. I can provide my dovecot.conf if needed.

2 1

[Dovecot] LDAP imaps,pop3s authentication problem
by Peter Susán 11 Jun '06

11 Jun '06

Hi, i'm using LDAP authentication with dovecot, and it's working flawlessly,until i enable SSL.. (even imaps or pop3s) i can't log in... if i test the certificates, and the login with the `openssl s_client - host example.com -port 993 -verify -debug` command, it works, until i want to log in... it lists the capibilities, but when i login it says "01 NO LOGIN failed"... no log messages appears in the logfile, only when i login without SSL... i've tried the newest beta8 and older versions of the server, but the effect is the same.. i'm really confused, becouse i have lots servers running dovecot, but with mysql authentication, and i didn't have any problems with them... the biggest problem is, that no log messages being generated during the process (with or without auth_debug, and auth_verbose options enabled), so i can't figure it out why is it happening.. it's working if i authenticate from other sources, just like passdb, or mysql... thx for the answers in advance, ->Peter Susán tel.: +36-20-395-3751 mail: peter(a)susinet.hu

2 1

[Dovecot] beta8: cores on corrupted index file
by Jeff A. Earickson 11 Jun '06

11 Jun '06

Timo, I saw a couple of these cores over the weekend. The syslog says: May 21 19:04:48 emerald dovecot: [ID 107833 mail.error] IMAP(user): Corrupted index cache file /home/students/s/user/.imap/sent-mail-apr-2004/dovecot.index.cache: indexid changed With a resulting core file from imap at this time. I also discovered a remaining lock file on the person's imap file: -rw------- 1 user user 3088940 May 10 2004 sent-mail-apr-2004 -rw------- 1 user user 13 May 21 19:04 sent-mail-apr-2004.lock The lockfile contains the pid of the process that cores: May 21 19:04:48 emerald dovecot: [ID 684838 mail.error] child 17480 (imap) killed with signal 11 The gdb output of the core file is attached. Jeff Earickson Colby College

2 1

[Dovecot] Dovecot statistics -- I hope this is a stupid question
by Jon Callas 11 Jun '06

11 Jun '06

Is there a way for me to know the last time a user logged in? i'm running Dovecot with Postfix with the authentication bridge and completely virtual everything. It would be nice to know the last time someone logged in, so four years from now I can delete the ones that haven't been used in three years. Jon

2 1

[Dovecot] Slow caching
by John Rowe 11 Jun '06

11 Jun '06

I have just installed dovecot on a RedHat Enterprise 4 clone with exim MTA, procmail LDA and mbox format. I'm getting complaints of slow caching from a Mac user: I think there's still something very sick with [host]'s IMAP server: it just took a full five minutes to cache an attachment (350kb) in an email from [person]. In that time, I couldn't do anything else with mail; it was essentially locked. The user's inbox is in /var/spool/mail (where there are no idexes), there areindex files within his home directory: ./.imap/INBOX: total 1160 -rw------- 1 xyz users 60656 May 30 14:22 dovecot.index -rw------- 1 xyz users 891904 May 30 14:22 dovecot.index.cache -rw------- 1 xyz users 78428 May 30 14:22 dovecot.index.log -rw------- 1 xyz users 131920 May 26 11:29 dovecot.index.log.2 Everything is on local disk, there are no NFS mounts at all. Any thoughts? Thanks John

3 3

[Dovecot] Inbox in two different locations
by arilinux 11 Jun '06

11 Jun '06

Hello I'm running dovecot v1.0.beta3 on a fedora 4 machine. I'm looking for the way to tell dovecot that some users have inbox (mailbox) in /var/mail/%u and some have inbox (maildir) in /home/%u/mail. Anyway?

2 1

[Dovecot] deliver LDA status?
by Lev Serebryakov 11 Jun '06

11 Jun '06

Hello dovecot, wiki mentions `deliver', but it doesn't include into 1.0.beta8 dovecot distribution. It can be downlaoded from CVS, and even contains two tags on files, that seems to eb release tags :) But what is official status of `deliver' tool? Is it stable, or experemental, or what? Are here any plans when it will be packaged ad announced? -- Best regards, Lev mailto:lev@serebryakov.spb.ru

2 1

[Dovecot] Can't run POP3 and IMAP simultaneously from xinetd...
by Timothy Meader 11 Jun '06

11 Jun '06

Hello all, I'm hoping you can help out with an issue I'm having running dovecot-beta8 on Solaris 9 (SPARC). The reason I need to run them from xinetd is that we require the filtering ability that tcp_wrappers provide. My issue is that, when running both from xinetd, IMAP runs fine, but then, when you try to POP in to check mail on the same box, it seems that the login section is handled via pop3-login... but all subsequent commands are handled via the imap interpreter. It's as if it's getting passed off to /usr/local/libexec/dovecot/imap instead of /usr/local/libexec/dovecot/pop3 as is specified in dovecot.conf. Here's an example from running a direct telnet session to the box in question: [operator@yyyy operator]# telnet yyyy 110 Trying xxx.xxx.xxx.xxx... Connected to yyyy. Escape character is '^]'. +OK Unauthorized access prohibited USER joeblow +OK PASS joeblowspass +OK Logged in. LIST LIST BAD Error in IMAP command : Unknown command. QUIT QUIT BAD Error in IMAP command : Unknown command. 1 logout If you do a ps -ef on the box and check the processes, at no time does a pop3 process start through this process. However, if you do the ps -ef right after the "LIST" command, you can see that there's an imap process started for user 'joeblow'. Now, if I take xinetd out of the equation and instead use the daemon mode /usr/local/sbin/dovecot... everything works perfectly. I've tried using the tcp_wrappers patch that's available in the unsupported directory on dovecot.org, but I cannot get the configure script to recognize the libwrap I have on the system when I compile dovecot with "--with-libwrap" as specified. I'm using tcp_wrappers for Solaris 9 off sunfreeware, so I know it's on there. I've also created sym links to libwrap.a and tcpd.h in /usr/lib and /usr/include respectively... still no dice. Honestly, I don't care which way dovecot runs (though daemon mode WOULD actually be preferred for performance reasons IF tcp_wrappers were available for use), but I just need it running both IMAP and POP3 somehow. Here are the applicable pop3 and imap sections of my dovecot.conf: -- default_mail_env = mbox:~/mail:INBOX=/var/mail/%1u/%1.1u/%u protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_no_flag_updates = no pop3_enable_last = no pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%T, retr=%r/%R, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes } -- And the respective sections from xinetd.conf: -- service pop3 { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/pop3-login port = 110 flags = REUSE IPv4 rlimit_cpu = 150 instances = 80 cps = 110 10 disable = no } service imap { socket_type = stream protocol = tcp wait = no user = root server = /usr/local/libexec/dovecot/imap-login port = 143 flags = REUSE IPv4 rlimit_cpu = 120 disable = no } -- I hope someone can shed some light on this situation for me. Thank you in advance. --- Tim Meader CNE Internet Services NetCommerce Corporation Tim.Meader(a)gsfc.nasa.gov (301) 286-8013

2 1

[Dovecot] missing empty line in mbox folders with Outlook 2000 client
by Gary Funck 11 Jun '06

11 Jun '06

I recently looked into a problem that has been plaguing me since the switch to dovecot a couple of years back, documented here: http://mailman.rwth-aachen.de/pipermail/procmail/2006-May/024363.html The gist is that when I tell Outlook 2000 to write all outgoing mail into a Sent-mail folder on the IMAP server (using mbox format), I find that the mbox's don't have empty lines separating the messages, (though the Content-Length field is correct. This leads to interoperability problems with programs and scripts that expect each mbox message to be separated by an empty line. (We're running dovecot-1.0-0.beta2.7 under Fedora Core 5 on an x86_64 platform.) Has this mbox behavior been reported before? Is it considered a bug or a feature? Is there a configuration option, or Outlook tweak, that can be enabled to ensure that the mbox's produced by writing messages to them via Outlook, are well-formed (have an empty line separating messages)?

2 1

[Dovecot] Server settings for a busy server
by Pat Hastings 11 Jun '06

11 Jun '06

Hi, We are migrating from a windows server and i have very few stats as to what our current concurrent usage stats are other than about 50,000 active users and 90,000 email messages a day inbound 20,000 outbound. Anyone got some tips for tuning dovecot to handle this load? Below is my config - do the values of login_process_size etc sound correct? Also my logs seem to be written out as root which seems kind of scary do how do I / should I have these written out by the dovecot user. Any feedback greatfully accepted. Regards, Pat protocols = imap pop3 listen = * ssl_disable = no disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot/mainlog info_log_path = /var/log/dovecot/infolog log_timestamp = "%Y-%m-%d %H:%M:%S " login_dir = /var/run/dovecot/login login_chroot = yes login_user = dovecot login_process_size = 256 login_process_per_connection = no login_processes_count = 48 login_max_logging_users = 2048 login_greeting = Email server ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_log_format = %$: %s first_valid_uid = 100 mail_extra_groups = mail valid_chroot_dirs = /var/vmail mail_debug = no default_mail_env = maildir:/var/vmail/dovecoterror/%domain/%u maildir_copy_with_hardlinks = yes protocol imap { } protocol pop3 { pop3_reuse_xuidl = no pop3_uidl_format =%u pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_client_workarounds = outlook-no-nuls, oe-ns-eoh } auth_executable = /usr/lib/dovecot/dovecot-auth auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb pam { } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb passwd { } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } user = root } --- [This E-mail has been scanned for viruses but it is your responsibility to maintain up to date anti virus software on the device that you are currently using to read this email. ]

2 1

[Dovecot] Dovecot 1.0beta8 dovecot-auth consumes 100% CPU time on Solaris 10 amd64
by Tore André Klock 11 Jun '06

11 Jun '06

Hello. I hope someone out there can help with this. It is getting pretty urgent. I am running a Solaris 10 server on Opteron (amd64) hardware and have compiled Dovecot 1.0beta8 from source. It has openssl compiled in (after much mucking around with various environment variables and modifying the Makefile), and was built with: $ ./configure --with-ldap --with-ssl-dir=/etc/ssl $ make # make install The variables: CC=/usr/sfw/bin/gcc CFLAGS='-m64 -I/usr/local/ssl/include:/usr/sfw/include:/opt/sfw/include' CPP=/usr/sfw/bin/cpp CPPFLAGS=-I/usr/local/ssl/include/openssl:/usr/sfw/include:/opt/sfw/include CXX=/usr/sfw/bin/g++ LDFLAGS='-m64 -L/usr/local/ssl/lib -R/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib' LD_LIBRARY_PATH=/usr/local/ssl/lib:/usr/sfw/lib:/opt/sfw/lib It was compiled with gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath). I modified the SSL_CFLAGS and SSL_LIBS variables in the Makefile to make it find my openssl install in /usr/local/ssl. The one that came with the OS was broken[1], so I compiled 0.9.8b from source. The configure script for some reason didn't pick this up, even when using CFLAGS, LDFLAGS, etc. At any rate, I successfully set it up to accept SSL/TLS connections and authenticate against an LDAP server. I use the auth_bind authentication method and only one LDAP host. I have confirmed that this works. In fact, dovecot runs just fine with the exception of the dovecot-auth proces, which is thrown into an endless loop. It starts off at maybe 1-2% CPU time, but after a few minutes it is back up to 100%. This is the output from truss(1) pointed at the dovecot-auth process: --cut-- pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0xFFFFFD7FFFDFF6F0, 5, 0xFFFFFD7FFFDFF6D0, 0x00000000) = 0 pollsys(0x00467DC0, 10, 0xFFFFFD7FFFDFFB10, 0x00000000) = 1 [same sequence repeats ad nauseum] --cut-- This is a sample of top(1) output: --cut-- load averages: 1.00, 1.00, 1.00 08:51:38 60 processes: 55 sleeping, 3 running, 1 zombie, 1 on cpu CPU states: 0.0% idle, 68.3% user, 31.7% kernel, 0.0% iowait, 0.0% swap Memory: 1024M real, 680M free, 71M swap in use, 591M swap free PID USERNAME LWP PRI NICE SIZE RES STATE TIME CPU COMMAND 22875 nobody 1 0 0 0K 0K run 726:22 99.68% dovecot-auth --cut-- Here is a condensed version of my ldap-config: (comments removed, names changed to protect the innocent) --cut-- hosts = ldap.example.com auth_bind = yes auth_bind_userdn = uid=%u,ou=People,o=example.com,o=example.com ldap_version = 3 base = uid=%,ou=People,o=example.com,o=example.com --cut-- This is my condensed dovecot.conf: --cut-- base_dir = /var/run/dovecot/ protocols = imap pop3 listen = * ssl_disable = no ssl_cert_file = /etc/ssl/certs/host.cert ssl_key_file = /etc/ssl/private/host.key ssl_cipher_list = ALL:!LOW disable_plaintext_auth = no shutdown_clients = yes log_path = /var/log/dovecot log_timestamp = "%b %d %H:%M:%S " login_user = dovecot login_process_per_connection = yes verbose_proctitle = yes verbose_ssl = yes first_valid_uid = 100 last_valid_uid = 60000 mail_debug = yes default_mail_env = maildir:/var/mail/%u/Maildir mail_full_filesystem_access = no protocol imap { login_executable = /usr/local/libexec/dovecot/imap-login mail_executable = /usr/local/libexec/dovecot/imap login_greeting_capability = yes imap_client_workarounds = outlook-idle tb-extra-mailbox-sep } protocol pop3 { login_executable = /usr/local/libexec/dovecot/pop3-login mail_executable = /usr/local/libexec/dovecot/pop3 pop3_uidl_format = %08Xu%08Xv pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } auth_executable = /usr/local/libexec/dovecot/dovecot-auth auth_cache_size = 0 auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_verbose = yes auth_debug = no auth default { mechanisms = plain passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb passwd { } user = nobody } --cut-- I may have commented out more than necessary in an attempt to be explicit while I was trying to narrow this down. This is the output of ldd dovecot-auth: --cut-- libpam.so.1 => /lib/64/libpam.so.1 libldap.so.5 => /usr/lib/64/libldap.so.5 libsocket.so.1 => /lib/64/libsocket.so.1 libnsl.so.1 => /lib/64/libnsl.so.1 librt.so.1 => /lib/64/librt.so.1 libsendfile.so.1 => /lib/64/libsendfile.so.1 libc.so.1 => /lib/64/libc.so.1 libcmd.so.1 => /lib/64/libcmd.so.1 libsasl.so.1 => /usr/lib/64/libsasl.so.1 libmd5.so.1 => /lib/64/libmd5.so.1 libnspr4.so => /usr/lib/mps/64/libnspr4.so libplc4.so => /usr/lib/mps/64/libplc4.so libnss3.so => /usr/lib/mps/64/libnss3.so libssl3.so => /usr/lib/mps/64/libssl3.so libmp.so.2 => /lib/64/libmp.so.2 libscf.so.1 => /lib/64/libscf.so.1 libaio.so.1 => /lib/64/libaio.so.1 libpthread.so.1 => /lib/64/libpthread.so.1 libthread.so.1 => /lib/64/libthread.so.1 libdl.so.1 => /lib/64/libdl.so.1 libsoftokn3.so => /usr/lib/mps/amd64/libsoftokn3.so libplds4.so => /usr/lib/mps/amd64/libplds4.so libdoor.so.1 => /lib/64/libdoor.so.1 libuutil.so.1 => /lib/64/libuutil.so.1 libm.so.2 => /lib/64/libm.so.2 --cut-- Notes: - The problem *seems* to occur only when I use LDAP authentication. - Disabling SSL in the config has no effect on the CPU usage. - I am not using NFS for anything. - I use Thunderbird 1.5.0.2 and another client runs Outlook. - There is no indication of any problem in the dovecot or system logs. - I suspected this had to do with the poll method dovecot is compiled with (poll), but it happens even when I compiled it with the select method. As far as I know, none of the other methods are available on Solaris. - I noted that the poll(2) call in Solaris will return immediately given a timeout of zero (-1 is 'forever'). I tried tacking down the use of that system call, but I had to give up on that. I only mention it in case it is a dovecot bug and of any help to Timo. Any help is greatly appreciated. Thank you. - Tore [1] If you use the factory-installed version, you get messages like "Warning: imap-login: SSL_accept() failed: error:1409D08A:SSL routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable" in your dovecot log.

2 7

[Dovecot] Can't read dovecot.conf
by E P 11 Jun '06

11 Jun '06

Hello all, I'm attempting to run dovecot on an HP-UX 11.11 system ... the built went fine, and I've got the program installed. I copied dovecot-example.conf to dovecot.conf and made a few changes to it, then went to sbin and ran the dovecot binary to see what would happen. What happened was this: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: _cert_file ... which is odd; line 1 of dovecot.conf was actually this: ## Dovecot configuration file ... and the first line that wasn't commented out was this: protocols = imaps So just for fun I changed the first non-commented line to this: protocols=imaps ... and then ran the dovecot binary again. This time the error was subtly different: colin:/usr/local/dovecot/sbin# ./dovecot Error: Error in configuration file /usr/local/dovecot/etc/dovecot.conf line 1: Unknown setting: ert_file ... "aha" says I, "it's having some issue with comments." So I took out every line in dovecot.conf that wasn't a comment, leaving me with just 23 lines: protocols=imaps listen=<IP address> ssl_cert_file=/opt/openssl/certs/imapd.pem ssl_key_file=/opt/openssl/certs/imapd.pem disable_plaintext_auth=yes protocol imap { login_executable=/usr/local/dovecot/libexec/dovecot/imap-login mail_executable=/usr/local/dovecot/libexec/dovecot/imap mail_plugin_dir=/usr/local/dovecot/lib/dovecot } protocol pop3 { } auth_executable=/usr/local/dovecot/libexec/dovecot/dovecot-auth auth default { mechanisms=plain passdb pam { } userdb passwd { } user=root } plugin { } This time, when I ran the binary, I got a new error: colin:/usr/local/dovecot/sbin# ./dovecot Error: Can't use SSL certificate /opt/openssl/certs/dovecot.pem: No such file or directory ... this is odd, because the config file clearly states that it should look for the certificate elsewhere. But just for fun, I made dovecot.pem symlinks in /opt/openssl/certs and /opt/openssl/private. Then I try running again: colin:/usr/local/dovecot/sbin# ./dovecot Error: Missing auth section for server default At this point, it's becoming clear to me that my current tactic isn't doing much, so I read some READMEs, checked the wiki, googled around a bit, and now I'm here. Anyone have hints on this? Thanks -- Elliott

2 1

[Dovecot] Dovecot wont start.
by Cesar Diaz 11 Jun '06

11 Jun '06

I installed Dovecot along with Postfix on a FreeBSD server using the port. When I try to start dovecot I get the following error: Fatal: Can't resolve address : hostname nor servname provided, or not known I have the hostname define on the server and can ping it by FQDN and by just hostname with out problems. Any suggestions are greatly appreciated.

2 1

[Dovecot] postmaster alias
by Tracy R Reed 11 Jun '06

11 Jun '06

I have dovecot configured to use an LDAP database for mail delivery with dovecot-lda. All of of my user accounts and aliases work fine except for postmaster@ which consistantly bounces. I have compared the entry for postmaster with another working alias and see no difference. When I send mail to postmaster I get the following in the logs: Jun 11 02:11:13 server1 postfix/pipe[12083]: 6D6CF33444: to=<postmaster(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=bounced (user unknown)Jun 11 02:11:13 server1 deliver(treed(a)mydomain.com): saved mail to INBOX Jun 11 02:11:13 server1 postfix/pipe[12193]: 6D6CF33444: to=<treed(a)mydomain.com>, orig_to=<postmaster>, relay=dovecot, delay=3, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/cleanup[12055]: 49F1F33431: message-id=<20060611091113.49F1F33431(a)mail.mydomain.com> Jun 11 02:11:13 server1 postfix/qmgr[29342]: 49F1F33431: from=<>, size=2138, nrcpt=2 (queue active) Jun 11 02:11:13 server1 postfix/qmgr[29342]: 6D6CF33444: removed Jun 11 02:11:13 server1 postfix/smtpd[12089]: 6464D33415: client=d150-39-102.home.cgocable.net[24.150.39.102] Jun 11 02:11:13 server1 postfix/pipe[12193]: 49F1F33431: to=<treed(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Jun 11 02:11:13 server1 postfix/pipe[12083]: 49F1F33431: to=<myboss(a)mydomain.com>, orig_to=<root(a)mydomain.com>, relay=dovecot, delay=0, status=sent (mydomain.com) Then I get a bounce email back saying: <postmaster(a)drjays.com> (expanded from <postmaster>): user unknown The strange thing is that first I get the bounce and then the mail goes on to be delivered to the two users (me and my boss) specified in the alias as it should be. How is this possible that the user is unknown and then it goes on to deliver to the alias? I am running 1.0.beta8 pulled from CVS May 23 16:46 (PDT) with openldap-2.2.13-4 on CentOS 4.3 Thanks for any clues you can provide! -- Tracy R Reed http://ultraviolet.org

2 1

[Dovecot] mkcert.sh broken
by Erick Calder 10 Jun '06

10 Jun '06

I've just installed dovecot on my FC5 box. I tweaked the dovecot-openssl.cnf and attempted to recreate the cert but get the errors below. I see older postings about this problem on FC2. help? - e # ./mkcert.sh /etc/ssl/certs directory doesn't exist /etc/ssl/private directory doesn't exist error on line -1 of dovecot-openssl.cnf 2810:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('dovecot-openssl.cnf','rb') 2810:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 2810:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:197:

4 6

[Dovecot] IMAP FILE MOVE ERROR
by agreig＠protectionprojects.co.za 10 Jun '06

10 Jun '06

I recently installed dovecot.x86_64 1.0-0.beta8.1.fc5 on a new server. Our network users use Pegasus as their mail readers, accessing their home folder on the server via Samba. Each user has a pop3 set of folders, and we have a shared imap set of folders. This has worked very well for previous versions of dovecot. When moving files between folders on the imap set, we get an error message from Pegasus, as follows: "The IMAP server that manages this mailbox or folder has reported an error during the operation you have attempted to perform." The operation cannot be completed." Operation of the imap INBOX only restores once it is "refreshed" via Pegasus. The maillog shows the following message for this error: "dovecot: IMAP(tekstaff): file mail-cache-transaction.c: line 709 (mail_cache_add): assertion failed: (fixed_size == (unsigned int)-1 || fixed_size == data_size)" A search using find / -name mail-cache-transaction.c does not find such file. I am stumped. Any help to fix this will be much appreciated.

1 0

[Dovecot] imap default folder dont appear..,
by John Von Essen 10 Jun '06

10 Jun '06

Hi, New to list. I am having some issues with dovecot and Outlook. Mail server is sendmail with procmail LDA for supporting /home/username/Maildir. I am talking to IMAP with both Outlook and SquirrelMail. SquirrelMail shows the default IMAP folders under INBOX, namely Sent, Drafts, and Trash for all users. However Outlook does not. Actually, to be more specific, some clients Outlook show the default folders but some do not. On the ones that do not, I am not sure what to do? Those accounts receive mail into the Inbox, but there is no Sent mail folder for outbound email, etc.,. Can someone point me in the right direction. I have six Outlook clients for six users, 2 show the default folders, the others do not. On the users Outlook that do not see the defaults folders, like Sent mail... If I go into SquirrelMail and send an email, I see it in SquirrelMails Sent, but not Outlook?! Thanks in advance for any help.... John

1 0

[Dovecot] Dovecot, IMAP, and mutt
by Travis Poppe 09 Jun '06

09 Jun '06

Hello, I'm running FreeBSD 6.0 release on x86 hardware and am using mutt version 1.5.11. Not running dovecot on/over NFS or anything, just the standard UFS2 filesystem. I'm also using SSL for IMAP. Since dovecot 1.0.b8, I've had to instruct mutt to do things twice (such as deleting) before the changes will actually occur. I've confirmed that this does not happen with dovecot 1.0.b7, which is what I'm using now to work around the problem. To repeat, use mutt 1.5.11 in IMAP/SSL mode with dovecot 1.0.b8 and try to mark some mail for deletion. Then, press the '$' key to enact the changes. You'll see that the piece(s) of mail will still be there after doing so. Pressing the '$' key again will cause the mail to be removed. Any ideas as to what's going on? Thanks, -- Travis Poppe IRC: tlp @ irc.freenode.net

3 2

[Dovecot] Problem with dovecot-lda
by Jef Driesen 09 Jun '06

09 Jun '06

I have installed the dovecot 1.0 beta3 (package included with Ubuntu Dapper Drake) and everything is working very well. Next I wanted to try the dovecot lda (for sieve filtering). In postfix I have "mailbox_command = /usr/lib/dovecot/deliver" and I followed the instructions from http://wiki.dovecot.org/LDA. I only changed "postmaster_address = postmaster(a)localdomain.local" and "user = dovecot" from the example configuration. With this configuration, no mail is delivered (discarded?) and in the logfile there is this error: Jun 5 18:10:08 localhost postfix/local[9630]: BFA6D5A403: to=<jef(a)localdomain.local>, relay=local, delay=0, status=bounced (local configuration error. Command output: Fatal: open(/etc/dovecot/dovecot.conf) failed: Permission denied ) Changing permissions on /etc/dovecot/dovecot.conf to 644 fixes the problem, but I think this is not the best solution. Any ideas?

2 2

[Dovecot] Problem Compiling Dovecot-LDA
by Timothy White 09 Jun '06

09 Jun '06

I'm trying to setup Dovecot-LDA. I grab dovecot beta8 and compiled it with the following options. $ ./configure --without-deliver --with-mysql $ make # make install It builds fine, and I have it running fine now. I then tried to build dovecot-lda from cvs, with the following. $ ./configure --with-dovecot=../dovecot-1.0.beta8/ $ make and it then fails with the following gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o sievec sievec.o libsieve.a /home/tim/src/dovecot-1.0.beta8/src/lib/liblib.a libsieve.a(script.o)(.text+0xa23): In function `sieve_script_load': /home/tim/src/dovecot-lda/src/libsieve/script.c:435: undefined reference to `map_refresh' libsieve.a(script.o)(.text+0xaf0): In function `sieve_script_unload': /home/tim/src/dovecot-lda/src/libsieve/script.c:462: undefined reference to `map_free' libsieve.a(sieve.o)(.text+0x1e6e): In function `verify_flag': /home/tim/src/dovecot-lda/src/libsieve/sieve.y:951: undefined reference to `imparse_isatom' collect2: ld returned 1 exit status make[2]: *** [sievec] Error 1 make[2]: Leaving directory `/home/tim/src/dovecot-lda/src/libsieve' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/tim/src/dovecot-lda/src' make: *** [all-recursive] Error 1 Any ideas as to what is wrong? Grepping the src files for map_refresh, map_free, and imparse_isatom only show references in dovecot-lda, in src/imparse.c and src/map.c. It seems to be a problem with src/libsieve when trying to build the sieve stuff. But I'm not sure. Thanks Tim -- Linux Counter user #273956

3 3

[Dovecot] Dovecot Authentication through LDAP Server
by ashok cvs 09 Jun '06

09 Jun '06

I have a Samba PDC with LDAP (samba version 3.0.21c with Openldap 2.3.19). where i have all the users. I have configured sendmail on another system with dovecot as IMAP and POP3 server. I wanted to enable user authentication from LDAP server which is on samba PDC. So configured /etc/dovecot.conf ################################################################ protocols = pop3 imap imap_listen = [::] pop3_listen = [::] login_dir = /var/run/dovecot-login login = imap login_user = testuser login = pop3 verbose_proctitle = yes maildir_copy_with_hardlinks = yes mbox_locks = fcntl auth = default auth_mechanisms = plain digest-md5 auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = ldap /etc/dovecot-ldap.conf auth_user = dovecot auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ ################################################################ configured /etc/dovecot-ldap.conf ####################################################################### # NOTE: We don't support "authentication binds", so you'll have to give # dovecot-auth read access to userPassword field in LDAP server. With OpenLDAP # this is done by modifying /etc/ldap/slapd.conf. There should already be # something like this: # # access to attribute=userPassword # by dn="<dovecot's dn>" read # add this # by anonymous auth # by self write # by * none # Space separated list of LDAP hosts to use. host:port is allowed too. hosts = 192.168.129.18 # Distinguished Name - the username used to login to the LDAP server dn = uid=root,ou=People,dc=msdpl,dc=com # Password for LDAP server dnpass = mobil5@b1d # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base base = dc=msdpl,dc=com # Dereference: never, searching, finding, always deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: # Virtual user name (user@domain) # Home directory # MAIL environment # System user name (for initgroups()) # System UID # System GID #user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_attrs = uid,homeDirectory,,uid,, # Filter for user lookup. Some variables can be used: # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain user_filter = (&(objectClass=posixAccount)(uid=%u)) #ser_filter = (&(objectClass=sambaSamAccount)(uid=%u)) # Password checking attributes in order: # Virtual user name (user@domain) # Password, may optionally start with {type}, eg. {crypt} pass_attrs = uid,userPassword # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) # Default password scheme. "{scheme}" before password overrides this. # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, CRYPT #default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = 100 #user_global_gid = 100 ####################################################################### The following is the error when we check using [root]#telnet mymailserverip 110 Trying 192.168.129.248 Connected to testmail.mydomain.com (192.168.129.248) Escape character is '^]`. user dcadmin pass mypass ERR-Authentication Failure The following is the log output of /var/log/maillog ######################################################################### Jun 8 13:09:16 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:10:16 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:10:26 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:11:26 testmail pop3-login: Disconnected: Inactivity [::ffff: 127.0.0.1] Jun 8 13:11:38 testmail dovecot-auth: LDAP: ldap_result() failed: Can't contact LDAP server Jun 8 13:13:46 testmail dovecot-auth: ldap(root): No password in reply Jun 8 13:13:46 testmail imap-login: Disconnected [::ffff:127.0.0.1] Jun 8 13:14:03 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:14:03 testmail imap-login: Disconnected [::ffff:127.0.0.1] ############################################################################ Regards Niranjan

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 09 Jun '06

09 Jun '06

Hi, cat /var/log/dovecot.log|grep -i jun\ 09 dovecot: Jun 09 09:35:26 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: CONT 1 dovecot: Jun 09 09:35:26 Info: auth(default): client in: CONT<hidden> dovecot: Jun 09 09:35:26 Info: auth(default): client out: OK 1 user=kabuto dovecot: Jun 09 09:35:26 Info: auth(default): master in: REQUEST 13 12652 1 dovecot: Jun 09 09:35:26 Info: auth(default): master out: USER 13 kabuto system_user=kabuto uid=1000 gid=100 home=/home/kabuto dovecot: Jun 09 09:35:26 Info: pop3-login: Login: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 dovecot: Jun 09 09:35:26 Info: POP3(kabuto): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Does this look right? I'm still not getting any e-mails from outside world. My latest .conf file is at http://www.kunduz.org/dovecot.conf. The last change I made was to out uncomment pop3_uidl_format as I was suggested yesterday. Regards,

2 2

[Dovecot] Error building on OpenBSD 3.9
by B.O.F.H. 08 Jun '06

08 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 This is for all versions from 1.0b3 - 1.0b8 All crash at the same place: Making all in auth gmake[3]: Entering directory `/src/mail/dovecot-1.0.beta8/src/auth' if gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../../src/lib - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps/mycrypt.Po"; else rm -f ".deps/mycrypt.Tpo"; exit 1; fi gcc: cannot specify -o with -c or -S and multiple compilations gmake[3]: *** [mycrypt.o] Error 1 gmake[3]: Leaving directory `/src/mail/dovecot-1.0.beta8/src/auth' gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory `/src/mail/dovecot-1.0.beta8/src' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/src/mail/dovecot-1.0.beta8' gmake: *** [all] Error 2 Gnu-make versus BSD make doesn't differ. Compile options were: ./configure \ - --sysconfdir=/etc/dovecot \ - --localstatedir=/var \ - --infodir=/usr/share/info \ - --mandir=/usr/share/man \ - --disable-rpath \ - --enable-ipv6 \ - --enable-asserts \ - --without-shadow \ - --without-pam \ - --without-vpopmail \ - --with-pgsql \ - --with-mysql \ - --with-ssl=openssl \ - --with-ssldir=/etc/ssl \ - --with-storages='maildir mbox' \ - --with-sql-drivers \ CFLAGS='-O2 -march=athlon -pipe' \ LDFLAGS='-L/usr/local/lib' \ CPPFLAGS='-I/usr/local/include -I/usr/include/kerberosV' What other data can I provide to help figure out what's going wrong? - -- Ed V. IBM: Into Building Money 7 June 2006 17:52:03 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iQIVAwUBRIdnZKfRmhqF/IZAAQrVUg//U0L4agoc5WGQ8gvj0XiEclzj+izer635 NYppYOc4AicVKq1Hp3HbcwaYcWYBY0nubkcUemSk+t8V/2qcZY2Y3rvaQo6B2aj8 rQF8Wj8BdqIzVMsX4IeVJO7XQlI7xUA/vaEOeL69dx43M/+7VE673YuaBpHYLvez UwXx/4pWujg0HbSuuX1SqFg5VntAE2XppxfukHmbK4FYfNbmWWGYKuAwAMqdr35t r+2cN8GOrk9nRBgisl2ADJW8YbDYvrj1DVcrNeo2cIeK68kqXU8knhCNxs9fXr75 pNRP811rdDLXQur66JHSlGdcJWOSNuoKUDUWLoJ5vpuQP/QlCpF2IfJ5kiK7rraJ 56q4Jbw63IHqYOiEC+yb2pGcgoh7tOOBSGTtlmzorym+0lOBS2SSKz7xd0+zfeU2 yHlRs5af13nCWG5ZV9e+gdyLuvZkd+8H9RTQyv2pbBgn9GHjq62HreDP/Drj6/DA HfHMXOtDF0tkfWbedIDD6SCeH4ptPf6FOqRd0BVdzuMk0Hi4uFeiChmkdXJYo9Vn c3176FN31fHmc7ZJm1P7MjAPdzAI/QP+vGiucMJg9bNTZVVOs5t/4aKMdG183zRT 5UZR4x+7ZA1JKZ4NgfVuaTM3khsgo9lQgw+A8QwrOOwKFGaek9By0AKxbJ06wIcg BFOZZSoKgWc= =U0oQ -----END PGP SIGNATURE-----

3 6

[Dovecot] a bug in the LDAP code
by Udo Rader 08 Jun '06

08 Jun '06

Hi, I was heaving some grave problems with dovecot's ldap client that left me with the following settings for virtual users: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/var/mail/f.someone.oeush.at -------CUT------- data in that case was correct, yet the INBOX location was wrong, this should have been /virtual/oeush.at/var/mail/f.someone.oeush.at instead. My settings for the retrieval of the mail environment in /etc/dovecot/dovecot-ldap.conf were like this: -------CUT------- user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,MailMessageStore=mail -------CUT------- now at first glance this seems correct, but the problem was the upper cased "MailMessageStore" attribute name. changing it to "mailMessageStore" gave me the correct settings: -------CUT------- mbox: data=/virtual/oeush.at/home/f.someone/mail/:INBOX=/virtual/oeush.at/var/mail/f.someone.oeush.at -------CUT------- I don't have any of the LDAP RFCs ready, but I think that per default the case of the attribute _names_ should not matter when querying an ldap server. Udo Rader -- B e s t S o l u t i o n . a t EDV Systemhaus GmbH ------------------------------------------------------------------------ udo rader technischer leiter/CTO mobile ++43 660 5263642 ------------------------------------------------------------------------ eduard-bodem-gasse 8/3 A-6020 innsbruck fax ++43 512 935833 http://www.bestsolution.at phone ++43 512 935834

2 1

[Dovecot] Login issue
by "M. Tolga Özses" 08 Jun '06

08 Jun '06

Hi, I have a login issue. I do everything I can think of, but can't login. My .conf file is at http://kabuto.kunduz.org/dovecot.conf and I make slight changes everytime I try a new thing. I last set disable_plaintext_auth to yes and when I try to login using Thunderbird, I get *Code:* Sending of username did not succeed. Mail server mail.somedomain.org responded: Plaintext authentication disabled. , and dovecot.log reads *Code:* Info: pop3-login: Login failed: Plaintext authentication disabled: method=PLAIN, rip=212.98.201.1, lip=192.168.1.2. When I set disable_plaintext_auth to no and try again, I get *Code:* Sending of password did not succeed. Mail server mail.somedomain.org responded: Authentication failed and dovecot.log reads *Code:* dovecot: Jun 07 16:05:45 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): client out: CONT 1 dovecot: Jun 07 16:05:45 Info: auth(default): client in: CONT<hidden> dovecot: Jun 07 16:05:45 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:46 Info: auth(default): client out: FAIL 1 user=kabuto dovecot: Jun 07 16:05:47 Info: auth(default): client in: AUTH 2 PLAIN service=POP3 lip=192.168.1.2 rip=212.98.201.1 resp=<hidden> dovecot: Jun 07 16:05:47 Info: auth(default): pam(kabuto,212.98.201.1): pam_authenticate() failed: Authentication failure dovecot: Jun 07 16:05:48 Info: auth(default): client out: FAIL 2 user=kabuto dovecot: Jun 07 16:05:51 Info: pop3-login: Disconnected: user=<kabuto>, method=PLAIN, rip=212.98.201.1, lip=192.168.1.2 Can you help me with this? Sorry that it is long, but it was the only way to describe completely. Best regards,

3 3

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 08 Jun '06

08 Jun '06

Marc Perkel scribbled: > Repeat after me - think outside the box. Did you miss the part where I said we've already tried this? Not only have we thought outside the box, but we've smashed it up and built several alternatives to see which one sucked the least. Turns out, SQL backends suck the most. Please try to keep up :) Marc Perkel also scribbled: > To do this with MySQL would be trivial. To do it without a database > isn't possible. Actually you could do that with a tiny Sieve extension. I don't think you really understand what you are even proposing. Your statement would be better phrased "to do it without an index would be slow". If you wanted to create a database server for mail, with a mail-specific query language, then that database might be called "Dovecot", and the query language might be called "IMAP". Innovation is not an excuse for lousy engineering. As usual, it turns out to be bad design practice to say "let's deploy shinytoy for feature X!" rather than say "we need capability X! What's a creative way to achieve that?". Which is why necessity is the mother of invention. /JG

1 0

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel: > Suppose I want to move all message from a specific host to another folder. > UPDATE table SET folder=new-folder WHERE host=value; > > With databases you can do things you would have to write complex programs > to do with files. Things that you would consider to be impossible are > trivial with databases. > > This outside the box. People who optimise their systems for shiny cute features rather than the common case get all the hacks they deserve. Repeat after me: design for the common case. Also your proposed sql above and implications (arbitrary operations based on mail metadata i.e. headers) seems to involve indexing every mail header on delivery. Good luck with that one large scale mail storage. Did you want a mail database, or an OLAP system? >-) /jg

3 2

RE: [Dovecot] Using MySQL to store email?
by Joshua Goodall 07 Jun '06

07 Jun '06

Marc Perkel trolled: > So Timo, > > Have you considered the idea of storing all the email in a MySQL > database? Seems to me that MySQL could somplify all the backend stuff > that everyone struggles with and with replication one could create very > massive and reliable systems. What would it take to use MySQL that way? Maybe we could recode Dovecot in PHP, too. Sorry, that was nasty. However, having recently experimented with a very large mail storage system using mysql, I strongly advise against this avenue. In particular, the two main backends have serious deficiencies when you get up to the multi-gigabyte ranges: * MyISAM doesn't restart in constant time. * InnoDB's next-key locking kills performance on large blob inserts & deletes. Anyway, what do you mean, everyone struggles with backends? Dovecot's backends are fast, modular and reliable. Regarding replication; all good logical volume managers can do this. Regarding massive; all good filesystems can do this. Regarding reliable; I guarantee that mysql reliability (when properly managed) is still lower than that of a filesystem (when properly managed). In fact, the whole argument is specious. Filesystems already are databases, optimised for storing arbitrary-sized data objects using a hierarchical key, which is practically the definition of mail storage. /jg

2 1

[Dovecot] Dspam Plugin
by Timothy White 07 Jun '06

07 Jun '06

Johannes, do you have any plans (regarding your dspam plugin) to: a) Integrate it into libdspam rather than calling the dspam binary? b) Any ideas for scaling it better, and implementing it scaled better? I notice a slight discussion about scaling, and you have chosen not to pursue it. Is that because it's too hard, or just because you don't need to? Thanks Tim p.s. If I knew how to use the libdspam stuff, I'd make the changes myself... I might have to learn ;-) -- Linux Counter user #273956

2 1

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

On 6/5/06, grant beattie <grant(a)grunta.com> wrote: > On Mon, Jun 05, 2006 at 05:57:36PM -0400, Will Buik wrote: > > > I am having a problem with the configure script for Dovecot 1.0b8. It > > doesn't seem to be compiling in sql engine driver support. I have > > specified --with-sql and --with-pgsql but when the script is done it > > says "Building with SQL drivers ..............:" but lists no drivers > > afterwards. I tried compiling it anyway but it logs the error " > > auth(default): Unknown database driver 'pgsql' " so the it defiantly > > didn't get compiled in. My pgsql includes and libs are in a non > > standard location but I specified that in the CPPFLAGS and LDFLAGS > > before the ./configure invocation. What have I done wrong here, or is > > there a bug in the script? > > > > The whole invocation is: > > CPPFLAGS='-I/usr/local/openssl-0.9.8b/include > > -I/usr/local/pgsql-8.1.4/include' > > LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' > > ./configure --prefix=/usr/local/dovecot-1.0b8 > > --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll > > --with-notify=dnotify --without-pop3d --with-storages=maildir > > --with-sql --with-pgsql --with-gnu-ld > > what does config.log say? and does it report any problems with > finding openssl? > > the problem may be that the shared libraries can't be found at > runtime, in which case you will need to set the rpath in the binaries > that are built. you didn't mention which platform/compiler you're > using, but this is done using the -Wl,-R<directory> argument for gcc > and Sun Studio compiler/Solaris ld, at least (-Wl passes the next > argument to the linker, -R tells the linker to include this path in the > binary's rpath). > > grant. I looked at the config.log file and it doesn't look like it's having any problems with openssl, but when I looked for pgsql I got what looked like some errors. configure:29296: checking for PQconnectdb in -lpq | char PQconnectdb (); | PQconnectdb (); ac_cv_lib_pq_PQconnectdb=no /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlerror' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlclose' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlopen' /usr/local/pgsql-8.1.4/lib/libpq.so: undefined reference to `dlsym'

2 1

Re: [Dovecot] Using MySQL to store email?
by nodata 06 Jun '06

06 Jun '06

> On 06-06-2006 15:48:20 +0200, nodata wrote: >> Putting everything in a database would provide one benefit: >> * Less storage space needed due to duplicated e-mail > > ... assuming that the mails are completely identical (i.e. have no slightly different headers) and that the database backend does expensive duplicate elimination on its string heaps. Yes, like Exchange does (unless you did something "clever" with the headers). > So the real benefit you get I think is: > * full text searching capabilities based on the IR-like indices > provided/maintained by the database backend, such as for instance: http://dev.mysql.com/doc/refman/5.0/en/fulltext-query-expansion.html If the original poster if struggling with a filesystem version of dovecot, and wants to create "massive and reliable systems" using MySQL, then he's going to have trouble. Adding MySQL won't do that.

1 0

[Dovecot] vpopmail
by C J Kenneth Tan -- OptimaNumerics 06 Jun '06

06 Jun '06

I was running 1.0.beta3 code with no problems. I recently switched to 1.0.beta8 and I noticed that vpopmail's pop-before-smtp functionality stopped working. I am using vpopmail authentication. Has anyone else encountered this problem? Thank you. Kenneth Tan ----------------------------------------------------------------------- C J Kenneth Tan, PhD OptimaNumerics Ltd Telephone: +44 798 941 7838 E-mail: cjtan(a)OptimaNumerics.com Telephone: +44 207 099 4428 Web: http://www.OptimaNumerics.com Facsimile: +44 207 100 4572 -----------------------------------------------------------------------

8 24

[Dovecot] Procmail and dovecot interactions
by Jeff Turner 06 Jun '06

06 Jun '06

Hi, I'm using procmail to deliver to Maildir directories: DEFAULT=${HOME}/Maildir/ I notice dovecot keeps a 'dovecot-uidlist' plus cache and index files, in each maildir. How is it that dovecot keeps these up to date when the contents of cur/ keeps changing? Is dovecot scanning cur/ every so often checking for changes? Isn't this slow for large folders (100k+)? I note on the Dovecot LDA page[1], that it keeps the "Dovecot index base up to date". Does this mean Dovecot isn't expected to work properly with a delivery agent which doesn't know about its indexes? Cheers, Jeff [1] http://wiki.dovecot.org/LDA

2 2

[Dovecot] Dovecot configure script for 1.0b8 not including SQL drivers?
by Will Buik 06 Jun '06

06 Jun '06

I am having a problem with the configure script for Dovecot 1.0b8. It doesn't seem to be compiling in sql engine driver support. I have specified --with-sql and --with-pgsql but when the script is done it says "Building with SQL drivers ..............:" but lists no drivers afterwards. I tried compiling it anyway but it logs the error " auth(default): Unknown database driver 'pgsql' " so the it defiantly didn't get compiled in. My pgsql includes and libs are in a non standard location but I specified that in the CPPFLAGS and LDFLAGS before the ./configure invocation. What have I done wrong here, or is there a bug in the script? The whole invocation is: CPPFLAGS='-I/usr/local/openssl-0.9.8b/include -I/usr/local/pgsql-8.1.4/include' LDFLAGS='-L/usr/local/openssl-0.9.8b/lib -L/usr/local/pgsql-8.1.4/lib' ./configure --prefix=/usr/local/dovecot-1.0b8 --sysconfdir=/etc/dovecot --localstatedir=/var --with-ioloop=eooll --with-notify=dnotify --without-pop3d --with-storages=maildir --with-sql --with-pgsql --with-gnu-ld Thanks in advance.

2 1

[Dovecot] Maildir, procmail, and locks
by Mark Nienberg 05 Jun '06

05 Jun '06

I'm using procmail as the local delivery agent for Maildir style mailboxes. I discovered that I was able to send mail to other users but was unable to send mail to myself. Examples from verbose procmail log: **** Successful message to another user **** procmail: [24589] Fri Jun 2 15:03:34 2006 procmail: Assigning "PATH=/home/david/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Assigning "LASTFOLDER=/home/david/Maildir/new/msg.4AAdC" procmail: Opening "/home/david/Maildir/new/msg.4AAdC" procmail: Acquiring kernel-lock procmail: Notified comsat: "david@0:/home/david/Maildir/new/msg.4AAdC" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:03:34 2006 Subject: test to other user Folder: /home/david/Maildir/new/msg.4AAdC **** Failed message to myself **** procmail: [24596] Fri Jun 2 15:05:13 2006 procmail: Assigning "PATH=/home/mark/bin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/X11R6/bin" procmail: Couldn't create or rename temp file "/home/mark/Maildir/new/msg.A" procmail: Assigning "LASTFOLDER=/var/mail/mark" procmail: Opening "/var/mail/mark" procmail: Acquiring kernel-lock procmail: Notified comsat: "mark@686:/var/mail/mark" From mark.nienberg(a)tippingmar.com Fri Jun 2 15:05:13 2006 Subject: test to self Folder: /var/mail/mark Anyway, I changed dovecot's lock_method from the default fcntl to flock and the problem disappeared. I'll add this to the wiki unless someone points out an error in my method. Mark Nienberg

3 8

[Dovecot] Re: Expunge is not expunging unless called twice--revisited
by Glenn Leavell 05 Jun '06

05 Jun '06

On Tue May 30 05:45:12 EEST 2006, Jeff Blank jb000002 at mr-happy.com wrote: > Hi, > > I'm running dovecot-1.0.beta8 from FreeBSD ports, using mbox mail > store. My problem appears to have come up on the list about a month > ago, "Expunge is not expunging unless it is called twice". I ran > through Bill Boebel's telnet-IMAP session for myself, and I see that > his test case is now fixed (as Timo said), but mutt, for whatever > reason, uses +FLAGS.SILENT, and I'm still getting the behaviour in > Bill's original problem when I telnet and use +FLAGS.SILENT: > > 1 OK Logged in. > 2 select INBOX > * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) > * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] > * Flags permitted. > * 1 EXISTS > * 1 RECENT > * OK [UNSEEN 1] First unseen. > * OK [UIDVALIDITY 1148956034] UIDs valid > * OK [UIDNEXT 4] Predicted next UID > 2 OK [READ-WRITE] Select completed. > 3 UID STORE 3 +FLAGS.SILENT (\Deleted) > 3 OK Store completed. > 4 expunge > 4 OK Expunge completed. > 5 expunge > * 1 EXPUNGE > * 0 RECENT > 5 OK Expunge completed. > > After step 4, the message is still in the mailbox with "X-Status: D"; > the second expunge is required to remove it. I seem to get the same > behaviour with Thunderbird, so is this still a dovecot problem? (I > have Thunderbird set up to remove deleted messages immediately, not > move to trash or just mark as deleted.) I'm also still experiencing the twice-needed expunge problem (with mutt and +FLAGS.SILENT) just as Jeff described it. I have the problem both with Beta8 and with last night's CVS snapshot. I'm using Maildir. Thanks very much, Glenn

2 1

[Dovecot] Dovecot + Logcheck Regex
by Rik Wade 05 Jun '06

05 Jun '06

I'm using logcheck for log reporting on Debian Etch, and am currently getting a lot of log entries from Syslog falling through the standard logcheck regex filters. I'm running Dovecot 1.0beta8. The filters follow: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login: [.[:alnum:]@-]+ \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[(::ffff:)?[:0-9a-f.]+\]$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)$[^[:space:]]+$: File isn't in mbox format: [^[:space:]]+$ # dovecot 1.0 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dovecot: (imap|pop3)-login: Login: user=<[.[:alnum:]@-]+>, method=(PLAIN|plain|LOGIN|login|(CRAM|cram|DIGEST|digest)-(MD5|md5)), rip=(::ffff:)?[:.[:digit:]]+, lip=(::ffff:)?[:0-9a-f.]+(, TLS)?$ The type of entry coming through is: Jun 5 09:05:57 myhostname dovecot: IMAP(myusername): Disconnected for inactivity Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out Jun 5 09:07:05 myhostname dovecot: IMAP(myusername): Disconnected: Logged out The first alnum pattern doesn't match given a host name, but the messages given by Dovecot do not appear to be catered for in the logcheck files. I wondered whether anyone on the dovecot list was also using logcheck and had fixed the regex patterns? -- rik

1 0

[Dovecot] Specifying with openssl to use
by Chase 05 Jun '06

05 Jun '06

I'm trying to setup dovecot on Solaris 10. I can get it all working except TLS/SSL. I traced my problem down to the version of openssl that Solaris 10 ships with. The fix is supposed to be to use a newer version of openssl. Without removing the built-in version of openssl I've installed openssl-0.9.8b to /usr/local. When I "./configure" dovecot it seems to always pick up the broken version of openssl in /usr/sfw. How do I make dovecot use an alternate copy of openssl? How is it even finding the one in /usr/sfw? Thanks, -Chase I tried setting CPPFLAGS and LDFLAGS already.

3 4

[Dovecot] Since Updating Dovecot - Problem by connecting with Client
by Mailing 04 Jun '06

04 Jun '06

Hi, in the last days I've updated my dovecot on my Gentoo System. Before all went fine. Since the update it doesn't work in any way. After the Update my Thunderbird Client says: The Connecction could not proceeded because it was rejected. Another message was, that I should use TLS or SSL to connect. I've not changed my config - probably the update does - and it's only a simple configuration in my home-network. Has anybody an idea which is causing the problem? the config looks like this: protocols = imap imaps listen = [::] default_mail_env = maildir:%h/.mail mechanism = plain Thx for help k1x

3 3

[Dovecot] imaps multiple domains proposal
by Jim Flowers 04 Jun '06

04 Jun '06

There was a thread earlier this year that noted a difficulty in modifying dovecot to handle multiple domain certificates. This is a proposal that may require only minor modifications. Virtual domains can be set up with a unique ip address for each server; mail.domain1.tld ###.###.###.1, mail.domain2.tld ###.###.###.2, etc. Users are instructed to enter 'mail.domain?.tld' for their imap server. When an SSL TCP connection is established on port 993, the server program will know the IP # that was used for the connection and can use getnameinfo to extract the domain name (%d). This can then be used to build a specific reference to the certificate to be used, prior to responding to CLIENT_HELLO. Something like /etc/ssl/%d/[certs|private]/dovecot.pem One technique would be to include this in multiple dovecot.conf listen parameters read on startup, similar to tpop3d: listen = ###.###.###.1:993(domain1.tld);tls=stls,\ /etc/ssl/domain1.tld/certs/dovecot.pem,\ /etc/ssl/domain1.tld/private/dovecot.pem listen = ###.###.###.2:993(domain2.tld);tls=stls,\ /etc/ssl/domain2.tld/certs/dovecot.pem,\ /etc/ssl/domain2.tld/private/dovecot.pem Alternatively, as virtual servers almost always use some form of lookup (in my case mysql) the certificate used could be determined at time of connection, similar to the way ssl_ca is handled. For example: user_query = SELECT '125'as uid, '125' as gid, maildir as home, '/etc/ssl/%d/certs/dovecot.pem' as cert, '/etc/ssl/%d/private/dovecot.pem as priv FROM mailbox WHERE username = '%u' In this manner the certificate returned would match the server ip/FQDN and can also be customized for the specific domain involved. Seeing their own domain name as the CN for both the certificate and CA goes a long way to establish credibility for most secure email users. Could this be done? -- Jim Flowers<jflowers(a)ezo.net>

4 5

[Dovecot] "Bug" report (and patch)
by Soren Hansen 03 Jun '06

03 Jun '06

1 0

[Dovecot] outlook express 6 imap client workaround
by david williams 03 Jun '06

03 Jun '06

My outlook express users connecting with imap are having issues with client timeout. The wiki says to add oe6-fetch-no-newmail, but when I add that workaround I get this error in the logs: Jun 2 10:00:13 mail dovecot: IMAP(username): Unknown client workaround: oe6-fetch-no-newmail I'm using 1.0b7. Any ideas?

3 2

Re[2]: [Dovecot] dovecot can't start!
by Oleg D. 02 Jun '06

02 Jun '06

MB> Hmmm... I was seeing a problem rather like this with 1.0beta8 under Solaris MB> with Sun's compiler: only it was with the IMAP protocol rather than POP. MB> The problem there was an assumption Tio had made that everyone was using a MB> C99-compatible compiler. Apparently this handles some aspects of variable MB> initialisation differently from earlier C compilers. MB> In my case adding a command-line option to the C compiler to flip it into MB> C99 mode seemed to solve the problem. The option for our compiler was MB> "-xc99" -- however if your compiler has such an option it may have a MB> different name. If you check the manual page for your C compiler you may MB> find an equivalent option to try. MB> However another solution was provided by Timo in the form of a simple patch MB> that made changes to a couple of source files. I hope Timo doesn't mind: MB> I'm re-sending his patch as an attachment to this message as it is tiny. MB> You could try applying it and rebuilding Dovecot. MB> Cheers, MB> Mike Brudenell But I use FreeBSD 4.11-RELEASE-p15 with native compiler. Really nobody has this problem on freebsd? And the main - Why I can't start dovecot without SSL :) Why I see in log "pop3-login: BUG: SSL initialization parameters not given while they should have been" even if I have "ssl_disable = yes" in dovecot.conf 1.0b3 works fine. This problem is main for me because I don't want to use SSL. -- Best regards, Oleg mailto:dzoleg@rsute.ru

4 6