- dovecot - dovecot.org

dovecot 2.2.31: linking error
by Rupert Gallagher 02 Jul '17

02 Jul '17

-std=gnu99 -mmacosx-version-min=10.12 [...] Undefined symbols for architecture x86_64: "_imapc_client_cmd", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_client_get_capabilities", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_command_sendf", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_simple_callback", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_simple_context_init", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_simple_run", referenced from: _imapc_quota_refresh in quota-imapc.o "_imapc_storage_client_register_untagged", referenced from: _imapc_quota_refresh in quota-imapc.o ld: symbol(s) not found for architecture x86_64 clang-4.0: error: linker command failed with exit code 1 (use -v to see invocation)

5 9

fsck looping duplicate mdbox GUIDs
by Dirk Koopman 01 Jul '17

01 Jul '17

I have recently updated with 2.2.29.1-avh1~xenial1 ubuntu package on 16.04. It appears that I have a couple of duplicate GUIDs which fsck can't clear so the machine is looping through doing continuous fsck runs. Any way to determine what the offending messages are and how to delete or otherwise stop this? Jul 1 17:09:24 post dovecot: doveadm(djk(a)tobit.co.uk): Warning: fscking index file /home/imap/djk/storage/dovecot.map.index Jul 1 17:09:24 post dovecot: doveadm(djk(a)tobit.co.uk): Error: Fixed index file /home/imap/djk/storage/dovecot.map.index: log_file_tail_offset 0 -> 24 Jul 1 17:09:24 post dovecot: dsync-local(djk): Warning: fscking index file /home/imap/djk/storage/dovecot.map.index Jul 1 17:09:24 post dovecot: doveadm(djk(a)tobit.co.uk): Warning: fscking index file /home/imap/djk/storage/dovecot.map.index Jul 1 17:09:25 post dovecot: doveadm(djk(a)tobit.co.uk): Warning: mdbox /home/imap/djk/storage: rebuilding indexes Jul 1 17:10:15 post dovecot: dsync-local(djk): expunge: box=mup-users, uid=1528, msgid=<48707D70.9070108(a)optusnet.com.au>, size=3159 Jul 1 17:11:00 post dovecot: doveadm(djk(a)tobit.co.uk): Error: mdbox /home/imap/djk/storage: Duplicate GUID a8e15732b4f91b55414f0000f80b9cab in m.385:10102880 (size=860) and m.100:3388046 (size=861) Jul 1 17:11:11 post dovecot: doveadm(djk(a)tobit.co.uk): Error: mdbox /home/imap/djk/storage: Duplicate GUID 67d2801030161c557a710000f80b9cab in m.389:363061 (size=895) and m.169:5349813 (size=896) Jul 1 17:11:43 post dovecot: doveadm(djk(a)tobit.co.uk): Warning: Transaction log file /home/imap/djk/storage/dovecot.map.index.log was locked for 139 seconds (mdbox storage rebuild) Jul 1 17:11:43 post dovecot: dsync-local(djk): Warning: Locking transaction log file /home/imap/djk/storage/dovecot.map.index.log took 88 seconds (syncing) Jul 1 17:11:43 post dovecot: doveadm(djk(a)tobit.co.uk): Warning: fscking index file /home/imap/djk/storage/dovecot.map.index Dirk

1 0

uid '0' from fts_solr?
by Larry Rosenman 30 Jun '17

30 Jun '17

I'm getting lots of: Jun 30 14:41:34 thebighonker dovecot: imap(ler/14135): Error: fts_solr: received invalid uid '0' in my logs. Ideas? doveconf -n: # 2.2.31 (65cde28): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.19 (e5c7051) # OS: FreeBSD 11.1-BETA2 amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_log_prefix = "%s(%u/%p): " mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox SENT { special_use = \Sent } mailbox SPAM { special_use = \Junk } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_mailbox1_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = SPAM imapsieve_mailbox2_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = SPAM imapsieve_mailbox2_name = * imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

Auth Policy Server
by Daniel Miller 30 Jun '17

30 Jun '17

I've made a preliminary auth policy server in Perl - and it sort of works (mostly) - but I've got some questions on "proper" implementation. It appears the communication is HTTP based - is the intent to talk to a "proper" webserver, or is a simple dedicated daemon appropriate (which is what I made)? Should connections be maintained, or terminated after each response (which is my current setup)? If my implementation is correct, I may have found a bug, as I have some log entries like: Jun 30 08:24:20 bubba dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 31 secs, pid=10253, EOF) Jun 30 08:24:20 bubba dovecot: auth: Fatal: master: service(auth): child 31631 killed with signal 11 (core dumped) Guidance would be appreciated. -- Daniel

2 3

imapc making too any connections
by van der Kamp, John 30 Jun '17

30 Jun '17

Hi, I was testing around with 2.2.31, and saw that it made new extra connections to the backend imap server whenever you make a new mailbox. So client does: A001 login username password A002 create subfolder Previously, dovecot would just send the create command to the backend, but now does (including connection IDs): [conn1] 9 CREATE "subfolder" [conn1] 10 EXAMINE "INBOX" [conn2] 12 LOGIN "username" "password" [conn2] 11 SELECT "subfolder" The new EXAMINE Command is a bit weird, but the secondary connection is a complete waste. I also haven't seen any other action on it yet, but it's kept around. If you make more mailboxes, every time you gain an extra connection from dovecot to the backend imap server. And they all stick around. I don't know which changes this behavior triggered, there were loads of imapc fixes the last couple of releases. John

2 1

sieve/vacation: bad parsing of 'References' header
by Krzysztof Witek 29 Jun '17

29 Jun '17

Hello there, I see a strange behavior in the sieve plugin. If I send an email containing the 'References' field with multiple values like this: References: <56CF3A8E.3060603(a)email.com> <74cc03f4-899f-e76f-81ea-d0e8a0efce9e(a)email.com> <CY1PR1001MB11630EC0D1DD48FBB12DDAC1DE090(a)CY1PR1001MB1163.namprd10.prod.outlook.com> <db3ee17f-33eb-b15c-8599-60b6dfa623e0(a)email.com> <YTXPR01MB01112EB28C7BECB5A5EF14C5DEE10(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <734f9013-c4a2-eab4-9c0d-2cfc3deafaee(a)email.com> <YTXPR01MB0111660D7D5A73451F3E5B66DEE00(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <9e3e3c00-a0d8-c061-7c7e-20e660533264(a)email.com> <e702bae4-b1d1-6671-fa74-87349282ce46(a)email.com> <YTXPR01MB01119930E4D876F91008D465DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <69c6be47-b17f-9f9a-5a0c-f389c6877f82(a)email.com> <YTXPR01MB01116BC86CBA49677A29C607DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB0111564E38C21BB293DCAE97DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB01117A258CD09E1E84A1CBC1DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> The vacation sieve script will add extra line breaks into the reply email as follows: References: <56CF3A8E.3060603(a)email.com> <74cc03f4-899f-e76f-81ea-d0e8a0efce9e(a)email.com> <CY1PR1001MB11630EC0D1DD48FBB12DDAC1DE090(a)CY1PR1001MB1163.namprd10.prod.outlook.com> <db3ee17f-33eb-b15c-8599-60b6dfa623e0(a)email.com> <YTXPR01MB01112EB28C7BECB5A5EF14C5DEE10(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <734f9013-c4a2-eab4-9c0d-2cfc3deafaee(a)email.com> <YTXPR01MB0111660D7D5A73451F3E5B66DEE00(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <9e3e3c00-a0d8-c061-7c7e-20e660533264(a)email.com> <e702bae4-b1d1-6671-fa74-87349282ce46(a)email.com> <YTXPR01MB01119930E4D876F91008D465DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <69c6be47-b17f-9f9a-5a0c-f389c6877f82(a)email.com> <YTXPR01MB01116BC86CBA49677A29C607DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB0111564E38C21BB293DCAE97DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB01117A258CD09E1E84A1CBC1DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <d0e5c311-bc89-c085-d597-f3a5744edd59(a)email.com> The problem is this is rendered as follows in the email client (this is what a user will see when he/she receives the auto reply): <CY1PR1001MB11630EC0D1DD48FBB12DDAC1DE090(a)CY1PR1001MB1163.namprd10.prod.outlook.com> <db3ee17f-33eb-b15c-8599-60b6dfa623e0(a)email.com> <YTXPR01MB01112EB28C7BECB5A5EF14C5DEE10(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <734f9013-c4a2-eab4-9c0d-2cfc3deafaee(a)email.com> <YTXPR01MB0111660D7D5A73451F3E5B66DEE00(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <9e3e3c00-a0d8-c061-7c7e-20e660533264(a)email.com> <e702bae4-b1d1-6671-fa74-87349282ce46(a)email.com> <YTXPR01MB01119930E4D876F91008D465DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <69c6be47-b17f-9f9a-5a0c-f389c6877f82(a)email.com> <YTXPR01MB01116BC86CBA49677A29C607DE3A0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB0111564E38C21BB293DCAE97DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <YTXPR01MB01117A258CD09E1E84A1CBC1DECA0(a)YTXPR01MB0111.CANPRD01.PROD.OUTLOOK.COM> <d0e5c311-bc89-c085-d597-f3a5744edd59(a)email.com> Auto-Submitted: auto-replied (vacation) Precedence: bulk MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit I am on holydays right now. I will revert to you ASAP..... I can reproduce this bug on the version 2.2.9 of managersieve/dovecot. Does anyone know how to fix this? Thank you. Krzysztof Witek

3 9

Error: vsize-hdr has invalid size
by Robert Fantini 29 Jun '17

29 Jun '17

version 2.2.27 (c0f36b0) For one user logs have a lot of these since recent upgrade from debian jessie to stretch : Jun 28 13:08:18 imap dovecot: imap(tfa): Error: vsize-hdr has invalid size: 36 Only one user has the issue. It has been happening for a month, The user reports no issue on his end reading mail. Is there a way to fix the error ? best regards, Roberto # dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.9.0-3-amd64 x86_64 Debian 9.0 auth_mechanisms = plain login auth_username_format = %Ln lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_location = maildir:~/Maildir mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-ldaps.conf.ext driver = ldap } plugin { mail_plugins = quota sieve sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/spam.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ } postmaster_address = . protocols = " imap lmtp sieve" quota_full_tempfail = yes service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } } service imap-login { service_count = 0 vsz_limit = 128 M } service imap { process_limit = 2048 } service lmtp { inet_listener lmtp { address = x.x.x.x 127.0.0.1 ::1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 1 service_count = 0 vsz_limit = 256 M } ssl = required ssl_ca = ..hidden ssl_cert = ..hiden ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-ldaps.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota imap_quota antispam" plugin { antispam_backend = pipe antispam_pipe_program = /fbc/bin/mail/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_spam = Junk antispam_trash = Trash } } protocol sieve { mail_debug = yes

1 0

Why does Dovecot authentication against Openldap fail when using TLS encryption?
by Dimitri KOPRIWA 29 Jun '17

29 Jun '17

Dear Mailing list, I have a Dovecot v2.2.9 server that authenticate against a Openldap server. I want to configure Dovecot to use TLS for LDAP authentication. I have tried to fetch/send emails using Thunderbird: - IMAP succeed to fetch mail - SMTP failed to send mail The Dovecot server produce the following log : Jun 29 08:44:00 mail postfix/submission/smtpd[634]: connect from virtual.domain.com[172.16.0.1] Jun 29 08:44:01 mail dovecot: auth: Debug: auth client connected (pid=0) Jun 29 08:44:02 mail dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=172.17.0.15#011rip=172.16.0.1#011secured#011resp=<hidden> Jun 29 08:44:02 mail dovecot: auth: Debug: ldap(me(a)domain.com,172.16.0.1): bind search: base=dc=mail,dc=domain,dc=com filter=(&(objectClass=CourierMailAccount)(mail=me(a)domain.com)) Jun 29 08:44:02 mail dovecot: auth: Debug: ldap(me(a)domain.com,172.16.0.1): no fields returned by the server Jun 29 08:44:02 mail dovecot: auth: Debug: ldap(me(a)domain.com,172.16.0.1): result: uid missing Jun 29 08:44:02 mail dovecot: auth: Debug: client passdb out: OK#0111#011user=me(a)domain.com Jun 29 08:44:04 mail postfix/submission/smtpd[661]: connect from mail.node.domain-ovh.consul[172.16.0.2] Jun 29 08:44:04 mail postfix/submission/smtpd[661]: lost connection after CONNECT from mail.node.domain-ovh.consul[172.16.0.2] Jun 29 08:44:04 mail postfix/submission/smtpd[661]: disconnect from mail.node.domain-ovh.consul[172.16.0.2] Jun 29 08:44:07 mail dovecot: auth: Debug: auth client connected (pid=662) Jun 29 08:44:07 mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=172.16.0.2, lip=172.17.0.15, TLS handshaking: Disconnected, session=<MGK6TRVTRACsEAAC> **Note that before I switch to use TLS**, the server was doing clear connection to Openldap and the **binding was working fine**. I have verified the ldap query using `ldapsearch` and it confirmed my binding must have worked: me@dev-01:[~]: ldapsearch -x -D "cn=readonly,dc=domain,dc=com" -W -H ldap://ldap.domain.com:389 -b "dc=mail,dc=domain,dc=com" -LLL "(&(objectClass=CourierMailAccount)(mail=me(a)domain.com))" -ZZ homeDirectory Enter LDAP Password: dn: mail=me(a)domain.com,dc=mailAccount,dc=domain.com ,dc=mail,dc=domain,dc=com homeDirectory: /var/mail I have the following `dovecot.cf`: login_greeting = server ready mail_uid = 5000 mail_gid = 5000 auth_mechanisms = plain login disable_plaintext_auth = yes ssl_ca = </etc/postfix/ssl/cacert.pem auth_debug_passwords = no auth_debug = yes auth_verbose = yes userdb { driver = ldap args = /etc/dovecot/conf.d/auth-ldap.conf.ext } passdb { driver = ldap args = /etc/dovecot/conf.d/auth-ldap.conf.ext } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } And this is the included `/etc/dovecot/conf.d/auth-ldap.conf.ext` file: # SSL/TLS uris = ldap://virtual.domain.com auth_bind = yes ldap_version = 3 dn = cn=readonly,dc=domain,dc=com dnpass = abc base = dc=mail,dc=domain,dc=com user_filter = (&(objectClass=CourierMailAccount)(mail=%u)) pass_filter = (&(objectClass=CourierMailAccount)(mail=%u)) user_attrs = uidNumber=5000,gidNumber=5000,homeDirectory=home,mailbox=mail=maildir:%$/Maildir:LAYOUT=fs default_pass_scheme = SSHA tls = yes tls_ca_cert_dir = /etc/postfix/ssl Why does Dovecot authentication against Openldap fail when I switch to TLS encryption? Hoping this mail will be read by somebody, Regards, Dimitri

1 0

Re: localhost logins
by Joseph Tam 28 Jun '17

28 Jun '17

> Jun 27 12:03:27 bubba dovecot: auth: > ldap(SomeUser(a)MyDomain.com,127.0.0.1): invalid credentials > > The only other thing I can think of - Postfix runs on this server and > uses Dovecot SASL. Is it possible the Dovecot auth log line is caused > by a Postfix connection attempt? That would have been my first guess. Why don't you actually try it out (i.e. login in to SMTP with bad credentials) and see if the mysterious log entry appears. # Create bogus SMTP auth string AUTH=`echo "\0user\0badpassword\c" | openssl enc -base64` # SMTP session commands echo "EHLO test.client.helo\nAUTH PLAIN $PW\nQUIT" >data # Use whichever command your Postfix supports "250-AUTH PLAIN" # - if you greet pause, you'll have to enter data manually netcat -C mailserver 25 <data openssl s_client -crlf -quiet -starttls smtp -connect mailserver:25 <data openssl s_client -crlf -quiet -starttls smtp -connect mailserver:587 <data openssl s_client -crlf -quiet -connect mailserver:465 <data Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: localhost logins
by Daniel Miller 27 Jun '17

27 Jun '17

On 6/27/2017 1:33 AM, Daniel Miller wrote: > On 6/27/2017 12:42 AM, Fabian Schmidt wrote: >> >> Am 26.06.17 schrieb Daniel Miller: >> >>> On 2017-06-23 15:09, Marcus Rueckert wrote: >>>> On Fri, 23 Jun 2017 11:38:28 -0700 >>>> Daniel Miller <dmiller(a)amfes.com> wrote: >>>> >>>>> While auditing my logs after an account was compromised, I see a >>>>> number of entries like: >>>>> >>>>> Jun 23 11:32:18 bubba dovecot: auth: >>>>> ldap("one-of-my-accounts",127.0.0.1): invalid credentials >>>> >>>> webmail? >> >> Nagios or someone else monitoring dovecot? >> > Not running such - and they wouldn't be hitting multiple accounts. > Now I'm more confused. I changed Dovecot to listen only on a specific IP address - and I still see localhost log lines: Jun 27 12:03:27 bubba dovecot: auth: ldap(SomeUser(a)MyDomain.com,127.0.0.1): invalid credentials The only other thing I can think of - Postfix runs on this server and uses Dovecot SASL. Is it possible the Dovecot auth log line is caused by a Postfix connection attempt? Daniel

1 0

localhost logins
by Daniel Miller 27 Jun '17

27 Jun '17

While auditing my logs after an account was compromised, I see a number of entries like: Jun 23 11:32:18 bubba dovecot: auth: ldap("one-of-my-accounts",127.0.0.1): invalid credentials I'm trying to figure out where this login attempt is coming from. I do run ASSP (an SMTP proxy) on this server, as well as Postfix - but I wouldn't think there'd be any communication with Dovecot for those? Postfix does use Dovecot SASL - but I see separate log entries for Postfix authentication failures. There are of course plenty of external IP's listed in Dovecot logs - I'm just asking for possible causes for the localhost entries. -- Daniel

3 4

Released Pigeonhole v0.4.19 for Dovecot v2.2.31.
by Stephan Bosch 26 Jun '17

26 Jun '17

Hello Dovecot users, Here's the definitive 0.4.19 release. There is one additional fix. Changelog v0.4.19: * This release adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. Previous versions of Pigeonhole will produce compile warnings with the recent Dovecot releases (but still work ok). - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. This is in essence a very old bug, but it was exposed by recent changes. - include extension: Fixed segfault that (sometimes) occurred when the global script location was left unconfigured. The release is available as follows: https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.19.t… https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.19.t… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v2.2.31 released
by Timo Sirainen 26 Jun '17

26 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.31.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.31.tar.gz.sig This should be a great and stable release for the summer :) v2.2.32 is planned for the end of August. Hopefully soon afterwards we can get back to v2.3. * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + dsync/imapc, pop3-migration plugin: Strip trailing whitespace from headers when matching mails. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it.

1 0

acl shared maildir with virtual users
by Rich Simcox 26 Jun '17

26 Jun '17

Can anyone point out where i'm going wrong with my dovecot sharedinbox setup with ACL i'm contemplating giving up with dovecot alltogether i've spent 3 days trying different paths to the virtual users mailboxes I seem to have two issues my acls are getting written to my sql db fine in roundcube i can see the shared folder but cant subscribe to it in thunderbird if i go to namespaces it sees the shared. namespace but its not listing anything in it even though my acls are written to the db please someone tell me what i'm missing i'm betting its something silly but i've been over and over the wiki here is my conf and below it an extract of my debug log # 2.2.28 (bed8434): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-642.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) auth_cache_size = 1 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_policy_hash_mech = sha512 auth_policy_hash_nonce = 78204771 auth_policy_hash_truncate = 64 auth_policy_request_attributes = auth_database=mail database=mail service=dovecot username=%{orig_user} authtoken_hash=$0$0$%{hashed_password} local_host=%{real_lip} local_port=%{real_lport} remote_host=%{real_rip} remote_port=%{real_rport} auth_policy_server_api_header = X-API-Key:dovecot:xxxxxxxxxxxx auth_policy_server_timeout_msecs = 3000 auth_policy_server_url = http://127.0.0.1:579/dovecot-auth-policy auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" auth_verbose = yes dict { acl = sqlite:/usr/local/cpanel/etc/dovecot/dovecot-dict-shares.conf.ext expire = sqlite:/usr/local/cpanel/etc/dovecot/dovecot-dict-expire.conf.ext } disable_plaintext_auth = no first_valid_uid = 201 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_greeting = Welcome to Motorsport Tools mail_access_groups = dovecot mail_debug = yes mail_plugins = acl quota quota_clone fts fts_solr mail_prefetch_count = 20 mailbox_list_index = yes namespace inbox { inbox = yes location = mailbox Archive { auto = create special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox spam { auto = create special_use = \Junk } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict result_failure = return-fail } passdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword skip = authenticated } plugin { acl = vfile:cache_secs=86400 acl_anyone = allow acl_shared_dict = proxy::acl expire_cache = yes fts = solr fts_solr = url=http://lTkFlGxjRar1hZAW:Ocj1FRRvlUs5Udj6@127.0.0.1:8984/solr/dovecot/ quota_exceeded_message = Mailbox is full please archive you old mail zlib_save = gz } protocols = lmtp imap service auth { unix_listener auth-client { mode = 0666 } } service config { vsz_limit = 2 G } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { client_limit = 500 inet_listener imap { address = *,:: } inet_listener imaps { address = *,:: } process_limit = 100 process_min_avail = 8 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 1024 vsz_limit = 512 M } service lmtp { client_limit = 1 process_limit = 500 unix_listener lmtp { group = mail mode = 0660 user = mailnull } vsz_limit = 512 M } service managesieve-login { client_limit = 500 process_limit = 100 process_min_avail = 8 service_count = 0 vsz_limit = 128 M } service managesieve { process_limit = 1024 vsz_limit = 512 M } service quota-status { executable = quota-status -p postfix unix_listener quota-status { mode = 0666 } } ssl = required ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict } userdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } protocol imap { imap_capability = +NAMESPACE imap_client_workarounds = tb-extra-mailbox-sep imap_idle_notify_interval = 24 mins imap_logout_format = in=%i, out=%o, bytes=%i/%o mail_location = maildir:~/ mail_max_userip_connections = 60 mail_plugins = acl quota imap_quota imap_acl imap_zlib quota_clone virtual fts fts_solr namespace { hidden = no list = yes location = maildir:%%h/Maildir:INDEXPVT=~/mail/virtual/%u/shared/%%u prefix = Shared.%%u. separator = . subscriptions = no type = shared } namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } } protocol lda { mail_plugins = quota quota_clone postmaster_address = root quota_full_tempfail = no } local_name home.servers.co.uk www.home.servers.co.uk { ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_key = # hidden, use -P to show it } local_name website1.com www.website1.com www.website2.com website2.com { ssl_cert = </var/cpanel/ssl/domain_tls/website1.com/combined ssl_key = # hidden, use -P to show it i see this alot Debug: acl vfile: reading file /home/server/mail/website2.com/sales/.ebay.Sent/dovecot-acl this is how my path currently looks in debug but i've tried all sorts Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: Namespace : type=shared, prefix=Shared.%u., sep=., inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:%h/Maildir:INDEXPVT=~/mail/virtual/sales@website2.com/shared/%u this is what my private namespace paths relate to Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: Namespace sent: type=private, prefix=sent, sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/sales@website2.com Jun 23 22:32:47 ssd99 dovecot: imap(sales(a)website2.com): Debug: fs: root=/usr/local/cpanel/etc/dovecot/virtual/sent, index=/home/server/mail/website2.com/sales/mail/virtual/sales@website2.com, indexpvt=, control=, inbox=, alt= please someone must know the answer

2 1

ACL problems on shared folder
by Thomas Robers 26 Jun '17

26 Jun '17

Hello, I've a Dovecot Server Version 2.2.30.2 running on CentOS 6.9 and there's a problem with acls on shared folder. We have some mailboxes which are shared and used as a "group mailbox" and also some user who share their inbox and only the inbox when they are on holiday e.g.. When I set "acl_defaults_from_inbox = yes" it's not possible to restrict the access to only the inbox, meaning that the user who wants to share only their inbox have to share the whole mailbox. On the other hand when I set "acl_defaults_from_inbox = no" it is not possible to create a folder direct under the inbox of a "group mailbox" and one gets a "permission denied" message. Is this the normal behavior normal? Although the user who wants to create the folder has all rights he gets a "permission denied" message? Why? Am I missing something important? Does anyone who uses shared mailboxes had the same problem and solved this? Any suggestion or information, that I probably miss is welcome. If needed here's my Dovecot configuration: > # 2.2.30.2 (c0c463e): /etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.18 (29cc74d) > # OS: Linux 2.6.32-696.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 > auth_debug = yes > auth_master_user_separator = * > auth_mechanisms = plain login > auth_verbose = yes > disable_plaintext_auth = no > mail_debug = yes > mail_location = maildir:/export/home/imap/%Lu/Maildir > mail_plugins = acl zlib mail_log notify > mailbox_idle_check_interval = 10 secs > mailbox_list_index = yes > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext > mbox_write_locks = fcntl > namespace { > hidden = no > ignore_on_failure = no > inbox = no > list = children > location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u > prefix = shared/%%u/ > separator = / > subscriptions = yes > type = shared > } > namespace inbox { > hidden = no > inbox = yes > list = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = INBOX/ > separator = / > type = private > } > passdb { > args = /etc/dovecot/master-users > driver = passwd-file > master = yes > } > passdb { > args = /etc/dovecot/dovecot-ldap.conf.ext > driver = ldap > } > plugin { > acl = vfile:/etc/dovecot/global-acls:cache_secs=300 > acl_shared_dict = file:/export/home/shared-db/shared-mailboxes > mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change > mail_log_fields = uid box msgid size from flags > sieve = ~/.dovecot.sieve > sieve_dir = ~/sieve > sieve_global = /var/lib/dovecot/sieve/global/ > sieve_user_log = ~/.dovecot.sieve.log > zlib_save = gz > zlib_save_level = 6 > } > protocols = imap pop3 lmtp sieve > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > } > unix_listener auth-userdb { > group = vmail > mode = 0660 > user = vmail > } > } > service imap-login { > process_limit = 500 > process_min_avail = 20 > } > service lmtp { > inet_listener lmtp { > address = 127.0.0.1 > port = 24 > } > } > service managesieve-login { > inet_listener sieve { > port = 4190 > } > inet_listener sieve_deprecated { > port = 2000 > } > } > ssl = required > ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain > ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT > ssl_key = # hidden, use -P to show it > ssl_protocols = !SSLv3 !SSLv2 > syslog_facility = local6 > userdb { > args = /etc/dovecot/dovecot-ldap-userdb.conf.ext > driver = ldap > } > protocol lmtp { > mail_plugins = acl zlib mail_log notify sieve > } > protocol imap { > mail_max_userip_connections = 100 > mail_plugins = acl zlib mail_log notify imap_zlib imap_acl > } TIA & Regards, Thomas

1 0

Courier migration to dovecot
by j.emerlik 23 Jun '17

23 Jun '17

Hi, I'm almost ready to migrate Courier to Dovecot 2.2.31 but I have one question about home and mail directory. It's good idea to have same directory form home and mail ? Which scenerio will be better and why ? For example: A) Home: /home/doamin/user1 Mail: /home/doamin/user1 B) Home: /home/doamin/user1/home Mail: /home/doamin/user1 C) Home: /home/doamin/user1/ Mail: /home/doamin/user1/mail Thanks & regards, Jack

3 4

v2.2.31 release candidate released
by Timo Sirainen 23 Jun '17

23 Jun '17

https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz https://dovecot.org/releases/2.2/rc/dovecot-2.2.31.rc1.tar.gz.sig Unless new bugs are found, this will be the final v2.2.31 release, which will be released on Monday. * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + pop3-migration plugin: Strip trailing whitespace from headers when matching mails between IMAP and POP3. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it.

4 5

sieve vacation message if ....
by lejeczek 23 Jun '17

23 Jun '17

hi fellas generic construct for(if possible): reply vacation message if address is not from add1@com1 add2@com2 would you share? many thanks L.

4 5

Trouble after Upgrade to v2.2.30.2 missing value for DOVECOT_
by Beng Hui Ong 23 Jun '17

23 Jun '17

Hi, I keep getting these errors after upgraded to 2.2.30.2. I can't seems to find what is going on. This is running a Freebsd 10.3-RELEASE-p11 :( Can someone please assist ? Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Module loaded: /usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Jun 22 14:45:23 starlite2 dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Jun 22 14:45:23 starlite2 dovecot: auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 22 14:45:23 starlite2 dovecot: auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 22 14:45:23 starlite2 dovecot: master: Error: service(auth): command startup failed, throttling for 4 secs root@starlite2:/usr/ports/mail/dovecot2/work/dovecot-2.2.30.2/src/auth # dovecot -n # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-RELEASE-p11 amd64 auth_debug = yes auth_default_realm = ispworkshop.com auth_mechanisms = plain login auth_realms = ispworkshop.com auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 5000 hostname = www3.ispworkshop.net last_valid_uid = 5000 lda_mailbox_autocreate = yes login_greeting = Ready. mail_gid = 5000 mail_location = maildir:~/ mail_plugins = quota expire mail_log notify mail_temp_dir = /var/tmp mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = ongbh(a)ispworkshop.net sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { process_min_avail = 1 } ssl = no userdb { driver = passwd } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 }

2 1

Issue with dsync server - copy transaction record copying to wrong destination mailbox.
by Ivan Warren 22 Jun '17

22 Jun '17

Hello all, I am encountering the following issue : I have 2 dovecot servers with 2 way replication. Everything works fine except for one specific issue : When my MUA (thunderbird) filters (junk & manual) refile a mail from my inbox, I then sometimes find multiple copies of the original message in the destination folder. I have seen the following log entries which make me think (but I'm new to this) that there could be an issue with the processing of the COPY transaction record during DSYNC : * TB Marking msg as Junk Jun 22 20:36:14 db04 dovecot: imap(ivan): flag_change: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB Copies msg to Junk Mailbox Jun 22 20:36:14 db04 dovecot: imap(ivan): copy from INBOX: box=Junk, uid=32059, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * TB expunges mail from INBOX Jun 22 20:36:14 db04 dovecot: imap(ivan): expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Local server receives transaction from remote server and saves message again to INBOX Jun 22 20:36:16 db04 dovecot: dsync-local(ivan): save: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server copies message from INBOX to INBOX <<<<<<<<<<<<<< That's my issue Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: copy from INBOX: box=INBOX, uid=502903, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 * Remote server expunges msg copy Jun 22 20:36:16 db04 dovecot: doveadm: Error: dsync-remote(ivan): Info: expunge: box=INBOX, uid=502902, msgid=<RF7w0iVHwvOBtpFW7y7eTF3jazYxJeuFC9JvB9xsjnk.gI5bQ0w8OtJJT7-T4krQTG3XkEqb5Hti..., size=9942 Is this a known issue (I may not have looked deep enough..) ? Is more information needed ? (note again that for me dovecot is working perfectly fine except for that little issue). (Version is 2.2.27 from Debian stretch) Thanks, --Ivan

1 0

Released Pigeonhole v0.4.19.rc1 for Dovecot v2.2.31.rc1.
by Stephan Bosch 22 Jun '17

22 Jun '17

Hello Dovecot users, This small release is mainly about adjusting to changes in the Dovecot API. There is one significant fix. Changelog v0.4.19: * This release adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. Previous versions of Pigeonhole will produce compile warnings with the recent Dovecot releases (but still work ok). - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. This is in essence a very old bug, but it was exposed by recent changes. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.19… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

+vnd.dovecot.duplicate for Bogofilter duplication shortcomings
by Luescher Claude 21 Jun '17

21 Jun '17

Hello, Sorry for a bit offtopic but it seems the bogofilter community is just as dead as dspam is. I trying to switch from DSPAM to bogofilter on a server where if I turn bogofilter on I run into the following issue: Certain users have sender and recipient bcc maps setup in postfix. This is for forwarding copy of an email to other address for example: Incoming lclude(a)company.com -> info(a)company.com Outgoing lclude(a)company.com -> info(a)company.com This way whatever lcalude sends or receives a copy will be sent to the info mailbox. When bogofilter is enabled the bcc recipient (info) receives a dupe of every email. Did anybody run into this? virtual_destination_recipient_limit = 1 dspam_destination_recipient_limit = 1 was a working fix for me for the old system, however bogofilter_destination_recipient_limit = 1 does not work in this case so if this issue is not possible to fix by configuration an alternate solution like making dovecot delete duplicate messages by message ID would be a viable option. I have +vnd.dovecot.duplicate plugin enabled but it seems to be ineffective. Any other tips for a workaround? Thank you. Claude

2 3

Dovecot 2.2.30* compiling error
by Mart Pirita 21 Jun '17

21 Jun '17

Hello. I cant build 2.2.30*, but I can build fine version 2.2.29* with same options: RedHat based customized distro, 2.6.28.10 kernel Build options: export CPPFLAGS export LDFLAGS CPPFLAGS=-I/usr/local/ssl/include LDFLAGS=-L/usr/local/ssl/lib ./configure \ --prefix=/usr \ --with-ssl=openssl \ --with-ssldir=/etc/ssl \ --sysconfdir=/etc \ --without-vpopmail \ --with-pam \ --without-bsdauth \ --without-sql \ --without-nss \ --without-ldap \ --without-pgsql \ --without-mysql \ --without-sqlite \ --with-rundir=/var/run/dovecot\ --without-deliver \ --without-gssapi Build error: ltest_lib-test-bits.o: In function `bits_required64': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/bits.h:33: undefined reference to `__builtin_clzll' test_lib-test-bits.o: In function `test_bits_requiredXX': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/test-bits.c:74: undefined reference to `__builtin_clzll' ./.libs/liblib.a(numpack.o): In function `numpack_decode': /usr/src/redhat/BUILD/dovecot-2.2.30/src/lib/numpack.c:43: undefined reference to `__builtin_clz' collect2: ld returned 1 exit status Please advise? -- Mart

3 7

dovecot & cap_net_admin capability
by Michal Hlavinka 21 Jun '17

21 Jun '17

Hi, we've seen SELinux reports from our users that dovecot tried to use something that needs CAP_NET_ADMIN capability. Before enabling it, we would like to know where it originated from. I've checked the sources, but was not able to find anything that would require this capability. Do you know for what it is used? CAP_NET_ADMIN Perform various network-related operations: * interface configuration; * administration of IP firewall, masquerading, and accounting; * modify routing tables; * bind to any address for transparent proxying "IP_TRANSPARENT"; * set type-of-service (TOS) "IP_TOS" * clear driver statistics; * set promiscuous mode; * enabling multicasting; * use setsockopt(2) to set the following socket options: SO_DEBUG, SO_MARK, SO_PRIORITY (for a priority outside the range 0 to 6),SO_RCVBUFFORCE, and SO_SNDBUFFORCE Cheers, Michal Hlavinka

2 2

Duplicate mailing list messages
by Joseph Tam 21 Jun '17

21 Jun '17

Is it just me receiving in Digest mode, or are all message submissions to this list being duplicated? Joseph Tam <jtam.home(a)gmail.com>

3 2

Thunderbird "Empty Trash" causes inconsistent IMAP session state?
by awl1 20 Jun '17

20 Jun '17

All, having successfully compiled and set up Dovecot 2.2.29.1 on my Thecus NAS as a newbie without any further hassle, and already imported an external mail archive of ~15 GB into a lz4-compressed mdbox (with impressive performance on the old Intel Atom CPU!), I stumbled into a minor, but reproducible issue that might well be already known, but I haven't managed to find any pointers through Google search: When I *manually empty the Trash folder from Thunderbird* (52.1.1, regardless of Windows or Linux client) by right-clicking on a non-empty Trash folder and then selecting "Empty trash", Dovecot produces the following log message, and I need to restart Thunderbird client in order to properly refresh its folder status: May 30 23:42:04 imap(xxx(a)xxx.org): Info: *IMAP session state is inconsistent, please relogin.* in=405 out=3114 Is this behaviour and message intended, or did I indeed run into a bug here? Many thanks & best regards Andreas

4 13

core dump on ocfs2
by antonello.cioffi＠uniparthenope.it 20 Jun '17

20 Jun '17

Hi everybody I'm finding on my server a lot of a lot of errors like this: Jun 19 14:22:45 posta2 kernel: [885017.412902] BUG: soft lockup - CPU#2 stuck for 22s! [dovecot-lda:11955] Jun 19 14:22:45 posta2 kernel: [885017.412906] Modules linked in: ocfs2(E) jbd2 quota_tree dm_service_time dm_multipath ocfs2_dlmfs(E) ocfs2_stack_o2cb(E) ocfs2_dlm( E) ocfs2_nodemanager(E) ocfs2_stackglue(E) configfs cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf fuse nls_iso8859_1 nls_cp437 vfat fat loop shpchp iTCO_wdt bnx2 pci_hotplug rtc_cmos ipv6 ipv6_lib cdc_ether usbnet ioatdma dca sg tpm_tis i2c_i801 serio_raw mii i7core_edac edac_core pcspkr iTCO_vendor _support tpm mptctl tpm_bios button ext3 jbd mbcache dm_mirror dm_region_hash dm_log linear ttm drm_kms_helper drm i2c_algo_bit sysimgblt sysfillrect i2c_core syscop yarea uhci_hcd ehci_hcd usbcore usb_common sd_mod crc_t10dif processor thermal_sys hwmon scsi_dh_emc scsi_dh_hp_sw scsi_dh_alua scsi_dh_rdac scsi_dh dm_snapshot dm_m od mptsas mptscsih mptbase scsi_transport_sas scsi_mod Jun 19 14:22:45 posta2 kernel: [885017.412971] Supported: Yes Jun 19 14:22:45 posta2 kernel: [885017.412973] CPU 2 Jun 19 14:22:45 posta2 kernel: [885017.412975] Modules linked in: ocfs2(E) jbd2 quota_tree dm_service_time dm_multipath ocfs2_dlmfs(E) ocfs2_stack_o2cb(E) ocfs2_dlm( E) ocfs2_nodemanager(E) ocfs2_stackglue(E) configfs cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf fuse nls_iso8859_1 nls_cp437 vfat fat loop shpchp iTCO_wdt bnx2 pci_hotplug rtc_cmos ipv6 ipv6_lib cdc_ether usbnet ioatdma dca sg tpm_tis i2c_i801 serio_raw mii i7core_edac edac_core pcspkr iTCO_vendor _support tpm mptctl tpm_bios button ext3 jbd mbcache dm_mirror dm_region_hash dm_log linear ttm drm_kms_helper drm i2c_algo_bit sysimgblt sysfillrect i2c_core syscop yarea uhci_hcd ehci_hcd usbcore usb_common sd_mod crc_t10dif processor thermal_sys hwmon scsi_dh_emc scsi_dh_hp_sw scsi_dh_alua scsi_dh_rdac scsi_dh dm_snapshot dm_m od mptsas mptscsih mptbase scsi_transport_sas scsi_mod Jun 19 14:22:45 posta2 kernel: [885017.413027] Supported: Yes Jun 19 14:22:45 posta2 kernel: [885017.413029] Jun 19 14:22:45 posta2 kernel: [885017.413032] Pid: 11955, comm: dovecot-lda Tainted: G E 3.0.101-0.46-default #1 IBM BladeCenter HS22 -[7870H5G]-/68Y813 8 Jun 19 14:22:45 posta2 kernel: [885017.413037] RIP: 0010:[<ffffffff81257b07>] [<ffffffff81257b07>] find_next_zero_bit+0x67/0xc0 Jun 19 14:22:45 posta2 kernel: [885017.413046] RSP: 0018:ffff88006cc855f0 EFLAGS: 00000287 Jun 19 14:22:45 posta2 kernel: [885017.413049] RAX: 0000000000006f30 RBX: ffffffff8118b348 RCX: 0000000000000010 Jun 19 14:22:45 posta2 kernel: [885017.413051] RDX: 0001000000000000 RSI: 0000000000006f30 RDI: 0000000000006f00 Jun 19 14:22:45 posta2 kernel: [885017.413054] RBP: 000000000000000f R08: 0000000000000f00 R09: ffff88006cc857e8 Jun 19 14:22:45 posta2 kernel: [885017.413057] R10: 000000000000000b R11: ffff88063c1fa678 R12: ffffffff8146d1ee Jun 19 14:22:45 posta2 kernel: [885017.413059] R13: 0000000000000000 R14: ffff880655a918c0 R15: 0000000001f9f800 Jun 19 14:22:45 posta2 kernel: [885017.413063] FS: 00007f7387952700(0000) GS:ffff88067f240000(0000) knlGS:0000000000000000 Jun 19 14:22:45 posta2 kernel: [885017.413066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jun 19 14:22:45 posta2 kernel: [885017.413068] CR2: 00007f7386fad9b0 CR3: 000000011f6cc000 CR4: 00000000000007e0 Jun 19 14:22:45 posta2 kernel: [885017.413071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Jun 19 14:22:45 posta2 kernel: [885017.413074] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Jun 19 14:22:45 posta2 kernel: [885017.413077] Process dovecot-lda (pid: 11955, threadinfo ffff88006cc84000, task ffff88003f3284c0) Jun 19 14:22:45 posta2 kernel: [885017.413079] Stack: Jun 19 14:22:45 posta2 kernel: [885017.413085] ffffffffa052f86e 0000000000000000 ffff88006cc857e8 00007e000000000b Jun 19 14:22:45 posta2 kernel: [885017.413090] 6843000000006a00 ffff88063c1fa67a 0000000000000000 000000001f400000 Jun 19 14:22:45 posta2 kernel: [885017.413095] 0000000000007e00 0000000000007e00 ffff880653aaccb8 ffff880656f7f000 Jun 19 14:22:45 posta2 kernel: [885017.413100] Call Trace: Jun 19 14:22:45 posta2 kernel: [885017.413143] [<ffffffffa052f86e>] ocfs2_block_group_find_clear_bits+0x6e/0x180 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413224] [<ffffffffa052fa23>] ocfs2_cluster_group_search+0xa3/0x1f0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413297] [<ffffffffa0530369>] ocfs2_search_chain+0x139/0x730 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413367] [<ffffffffa0531ce8>] ocfs2_claim_suballoc_bits+0x398/0x520 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413447] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413519] [<ffffffffa050f8ff>] ocfs2_local_alloc_new_window+0x1cf/0x320 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413581] [<ffffffffa050fdd0>] ocfs2_local_alloc_slide_window+0x380/0x5e0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413642] [<fffffffbyefa05101d3>] ocfs2_reserve_local_alloc_bits+0x1a3/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413706] [<ffffffffa053396b>] ocfs2_reserve_clusters_with_limit+0xab/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413780] [<ffffffffa0534d15>] ocfs2_lock_allocators+0xc5/0x290 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413847] [<ffffffffa04e30fd>] ocfs2_write_begin_nolock+0x89d/0x11d0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413883] [<ffffffffa04e3b47>] ocfs2_write_begin+0x117/0x240 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413900] [<ffffffff810fa1a2>] generic_perform_write+0xc2/0x1c0 Jun 19 14:22:45 posta2 kernel: [885017.413907] [<ffffffff810fa301>] generic_file_buffered_write+0x61/0xa0 Jun 19 14:22:45 posta2 kernel: [885017.413936] [<ffffffffa050055f>] ocfs2_file_aio_write+0x92f/0x960 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.413966] [<ffffffff8115d478>] do_sync_write+0xc8/0x110 Jun 19 14:22:45 posta2 kernel: [885017.413972] [<ffffffff8115daae>] vfs_write+0xce/0x140 Jun 19 14:22:45 posta2 kernel: [885017.413977] [<ffffffff8115dc23>] sys_write+0x53/0xa0 Jun 19 14:22:45 posta2 kernel: [885017.413983] [<ffffffff8146c812>] system_call_fastpath+0x16/0x1b Jun 19 14:22:45 posta2 kernel: [885017.413992] [<00007f7386c54300>] 0x7f7386c542ff Jun 19 14:22:45 posta2 kernel: [885017.413994] Code: 3f 77 61 48 c7 c0 ff ff ff ff 44 89 c1 4a 8d 34 07 48 d3 e0 48 09 c2 48 83 fa ff 74 0b 48 f7 d2 48 0f bc c2 48 8 d 34 38 48 89 f0 <c3> 0f 1f 84 00 00 00 00 00 48 8b 10 48 83 fa ff 75 e0 48 83 c0 Jun 19 14:22:45 posta2 kernel: [885017.414037] Call Trace: Jun 19 14:22:45 posta2 kernel: [885017.414070] [<ffffffffa052f86e>] ocfs2_block_group_find_clear_bits+0x6e/0x180 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414141] [<ffffffffa052fa23>] ocfs2_cluster_group_search+0xa3/0x1f0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414213] [<ffffffffa0530369>] ocfs2_search_chain+0x139/0x730 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414286] [<ffffffffa0531ce8>] ocfs2_claim_suballoc_bits+0x398/0x520 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414359] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414359] [<ffffffffa0531f0f>] __ocfs2_claim_clusters+0x9f/0x340 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414430] [<ffffffffa050f8ff>] ocfs2_local_alloc_new_window+0x1cf/0x320 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414492] [<ffffffffa050fdd0>] ocfs2_local_alloc_slide_window+0x380/0x5e0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414553] [<ffffffffa05101d3>] ocfs2_reserve_local_alloc_bits+0x1a3/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414617] [<ffffffffa053396b>] ocfs2_reserve_clusters_with_limit+0xab/0x330 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414691] [<ffffffffa0534d15>] ocfs2_lock_allocators+0xc5/0x290 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414758] [<ffffffffa04e30fd>] ocfs2_write_begin_nolock+0x89d/0x11d0 [ocfs2] Jun 19 14:22:45 posta2 kernel: [885017.414793] [<ffffffffa04e3b47>] ocfs2_write_begin+0x117/0x240 [ocfs2] Jun 19 14:22:46 posta2 kernel: [885017.414809] [<ffffffff810fa1a2>] generic_perform_write+0xc2/0x1c0 Jun 19 14:22:46 posta2 kernel: [885017.414815] [<ffffffff810fa301>] generic_file_buffered_write+0x61/0xa0 Jun 19 14:22:46 posta2 kernel: [885017.414844] [<ffffffffa050055f>] ocfs2_file_aio_write+0x92f/0x960 [ocfs2] Jun 19 14:22:46 posta2 kernel: [885017.414872] [<ffffffff8115d478>] do_sync_write+0xc8/0x110 Jun 19 14:22:46 posta2 kernel: [885017.414878] [<ffffffff8115daae>] vfs_write+0xce/0x140 Jun 19 14:22:46 posta2 kernel: [885017.414883] [<ffffffff8115dc23>] sys_write+0x53/0xa0 Jun 19 14:22:46 posta2 kernel: [885017.414888] [<ffffffff8146c812>] system_call_fastpath+0x16/0x1b Jun 19 14:22:46 posta2 kernel: [885017.414895] [<00007f7386c54300>] 0x7f7386c542ff The machine is a SUSE Linux Enterprise Server 11 SP 3 posta2:/var/core # dovecot -n # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 3.0.101-0.46-default x86_64 SUSE Linux Enterprise Server 11 (x86_64) auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes default_internal_user = vmail default_login_user = nobody disable_plaintext_auth = no first_valid_uid = 100 hostname = mail.xxxx.it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_gid = 100 mail_location = maildir:%h mail_plugins = " quota" mail_uid = 1002 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus passdb { args = /usr/local/etc/dovecot/dovecot-people-ldap.conf.ext driver = ldap } plugin { last_login_dict = redis:host=127.0.0.1:port=6379 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/ sieve_dir = ~/.sieve sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric } postmaster_address = postmaster(a)uniparthenope.it protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } service_count = 0 vsz_limit = 256 M } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_ca = </etc/postfix/ssl/chain-8204-mail.uniparthenope.it.pem ssl_cert = </etc/postfix/ssl/cert-8204-mail.uniparthenope.it.pem ssl_key = # hidden, use -P to show it submission_host = 127.0.0.1 userdb { args = /usr/local/etc/dovecot/dovecot-people-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = " quota" } protocol lda { mail_plugins = " quota quota sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 100 mail_plugins = " quota imap_quota last_login" } protocol pop3 { mail_max_userip_connections = 100 mail_plugins = " quota last_login" pop3_logout_format = top=%t/posta2:/var/core # dovecot --version 2.2.30.2 (c0c463e) %p, retr=%r/%b, del=%d/%m, size=%s, %u pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv } I've upgraded dovecot from 2.2.18 to 2.2.30.2 but errors are still present posta2:/var/core # dovecot --version 2.2.30.2 (c0c463e)bye Errors appear only with dovecot-lda process so I tend to exsclude disks or ocfs failure Is there someone who can help me? Best regards Thanks -- Dott. Antonello Cioffi Ufficio Servizi Informatici Università degli Studi di Napoli Parthenope Tel. 081/5475292 - Fax. 081/5475180

2 1

Show other users quota
by Kristjan Eentsalu 19 Jun '17

19 Jun '17

Hey, Is there a way to show other users quota under shared namespace? Right now when I try to "a getquotaroot user/other.user" I get "NO Not showing other users' quota" Dovecot version 2.2.27 Relevant part of the config: namespace user { list = children location = maildir:%%h/Maildir:LAYOUT=fs:DIRNAME=iiuuuuiiiuuu:INDEXPVT=%h/shared/%%n prefix = user/%%n/ separator = / subscriptions = no type = shared } Kristjan

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 17 Jun '17

17 Jun '17

> I've tried changing how I symbolically linked the mailboxes, i.e., > creating a sub-directory that is symlinked into the user's mail/ > directory versus symbolically linking the mbox files themselves, etc. > No dice. Permissions are fine. I've even resorted to changing the > index locking strategy, to no avail. I've tested my setup by symlinking both folders and boxes with user/0700 permissions, and they all work fine. > Folders that are NOT symbolically linked work perfectly, and have various > levels of hierarchy that are selectable as expected. Nothing appears in the logs. > > $ cd ~/mail > $ ls -l > -rw------- 1 2411625 Dec 16 09:12 Dovecot > lrwxrwxrwx 1 21 Jun 13 18:01 OldMail -> /u2/usermail/luser > -rwx------ 8 4096 Jan 1 12:09 "Open Source Projects" If this is output on the dovecot server itself so there's no mismatch in pathnames. Have you checked whether the dovecot user can traverse all the way from / to /u2/usermail/luser/ > I've (rm ~/mail/.subscriptions && touch ~/mail/.subscriptions) to flush any > subscriptions file issues. I'm thinking no .subscription would be better. > Is there a subtle interaction with mail_full_filesystem_access settings, or > similar that might be getting in the way? Dovecot does have chroot-ing stuff that might impede symlink following: https://wiki.dovecot.org/Chrooting > Other data: there are fs quotas on / but not /u2. That shouldn't matter, but > I will concede that I'm not a little ignorant about such things. It seems you have more basic file access problems. > How might I go about further debugging this? I've tried to manually doveadm > index those mailboxes, which doesn't give me any errors, but it also returns > far too quickly to give me the impression that it's done anything. Same result. Nothing with verbose logging (set mail_debug = yes)? Try the simple case ln -s /u2/usermail/luser/OLD_INBOX/INBOX_2016_01_to_08 ~luser/mail/testbox then $ telnet localhost 10143 x0 login luser *** x1 SELECT testbox What do you get here and in your logs? If this doesn't produce any usable diagnostics, I would pull out the heavy duty process trace tool and trace the imap process to figure out what it's really doing and where it's failing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Need Help to analyze the error or is it a bug?
by Dipl.-Ing. Harald E. Langner 16 Jun '17

16 Jun '17

After done an update to dovecot-2.2.30.2 my connection is broken since days. all what I try every time the same error: Jun 15 00:02:18 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Jun 15 00:02:18 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Jun 15 00:02:18 master: Error: service(auth): command startup failed, throttling for 2 secs I try this: # doveadm -Dv auth test -x service=imap theusername mypassword output: Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib20_virtual_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: Undefined symbol "fts_filter_filter" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: Undefined symbol "mail_crypt_user_get_public_key" (this is usually intentional, so just ignore this message) Error: Timeout waiting for handshake from auth server. my pid=63521, input bytes=0 Fatal: Couldn't connect to auth socket dlopen() failed, Undefined symbols ... Is this a bug? How do I check what is going wrong with this auth socket error? 2nd) I'm using dovecot.conf protocols = imap lmtp !include conf.d/*.conf 10-auth.conf , 10-master.conf, auth-passwdfile.conf.ext, 10-ssl.conf and 10-logging.conf (all logs are on) All others, form the 29 configuration files, I haven't touch. It has worked, before I have done the update. What has changed? For what in the *.conf should I locking for? Thanks a lot.

2 2

Error: fts_solr: received invalid uid '0'?
by Larry Rosenman 16 Jun '17

16 Jun '17

I'm getting a lot of: Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' Jun 16 11:40:40 thebighonker dovecot: imap(ler/58755): Error: fts_solr: received invalid uid '0' in my logs. What can I supply to help get to the bottom of it? doveconf -n: # 2.2.30.2 (c0c463e): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-BETA1 amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_log_prefix = "%s(%u/%p): " mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox SENT { special_use = \Sent } mailbox SPAM { special_use = \Junk } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_mailbox1_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = SPAM imapsieve_mailbox2_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = SPAM imapsieve_mailbox2_name = * imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

doveadm-server core dump
by FUSTE Emmanuel 16 Jun '17

16 Jun '17

Hello, coredump found after a force-resync and a replicate Emmanuel. (dovecot-ee 2.2.30.2-1) [New LWP 17168] Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #0 0x00007fa334127c37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 17168 selftid = 17168 #1 0x00007fa33412b028 in __GI_abort () at abort.c:89 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x20d2b48, sa_sigaction = 0x20d2b48}, sa_mask = {__val = {34255104, 0, 140338942616871, 1, 0, 181, 140338929827120, 140725975364353, 0, 0, 140338942645461, 0, 140338930777984, 140338937001888, 34203576, 140725975364140}}, sa_flags = 0, sa_restorer = 0x7ffd51c5b1c8} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007fa334546766 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:201 backtrace = 0x209df68 "/usr/lib/dovecot/libdovecot.so.0(+0x8d770) [0x7fa334546770] -> /usr/lib/dovecot/libdovecot.so.0(+0x8d84e) [0x7fa33454684e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa3344dcffb] -> dovecot/do"... #3 0x00007fa33454684e in i_internal_fatal_handler (ctx=0x7ffd51c5b3b0, format=<optimized out>, args=<optimized out>) at failures.c:670 status = 0 #4 0x00007fa3344dcffb in i_panic (format=format@entry=0x4530f8 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffd51c5b4a0, reg_save_area = 0x7ffd51c5b3e0}} #5 0x000000000043a1eb in dsync_brain_sync_mailbox_deinit (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:371 last_common_uid = 0 last_messages_count = 0 last_common_modseq = 4428091 changes_during_sync = 0x0 last_common_pvt_modseq = 140725975364904 require_full_resync = false error = MAIL_ERROR_NONE __FUNCTION__ = "dsync_brain_sync_mailbox_deinit" #6 0x000000000043adc6 in dsync_brain_slave_recv_mailbox (brain=brain@entry=0x20d2b48) at dsync-brain-mailbox.c:841 dsync_box = 0x20d0878 local_dsync_box = {mailbox_guid = "\344B\277\017j\022\271T\002\253\000\000\367\362\265", <incomplete sequence \346>, mailbox_lost = false, have_guids = true, have_save_guids = true, have_only_guid128 = false, uid_validity = 1497621508, uid_next = 10, messages_count = 9, first_recent_uid = 1, highest_modseq = 3, highest_pvt_modseq = 0, cache_fields = {arr = {buffer = 0x209d208, element_size = 24}, v = 0x209d208, v_modifiable = 0x209d208}} box = 0x20e0f88 errstr = 0x2f <error: Cannot access memory at address 0x2f> resync_reason = 0x466b58 "UIDVALIDITY changed during a stateful sync, need to restart" error = MAIL_ERROR_NONE ret = <optimized out> resync = 255 __FUNCTION__ = "dsync_brain_slave_recv_mailbox" #7 0x00000000004387db in dsync_brain_run_real (changed_r=0x7ffd51c5b67f, brain=0x20d2b48) at dsync-brain.c:651 ret = true orig_state = DSYNC_STATE_SLAVE_RECV_MAILBOX orig_box_recv_state = DSYNC_BOX_STATE_MAILBOX orig_box_send_state = DSYNC_BOX_STATE_MAILBOX changed = false #8 dsync_brain_run (brain=brain@entry=0x20d2b48, changed_r=changed_r@entry=0x7ffd51c5b67f) at dsync-brain.c:687 _data_stack_cur_id = 5 #9 0x0000000000438ae1 in dsync_brain_run_io (context=0x20d2b48) at dsync-brain.c:110 brain = 0x20d2b48 changed = false try_pending = true #10 0x000000000044cc7f in dsync_ibc_stream_input (ibc=0x20c1a10) at dsync-ibc-stream.c:230 ibc = 0x20c1a10 #11 0x00007fa33455a802 in io_loop_call_io (io=0x20becc0) at ioloop.c:599 ioloop = 0x20a9f20 t_id = 4 __FUNCTION__ = "io_loop_call_io" #12 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a9f20) at ioloop-epoll.c:223 ctx = 0x20ab100 list = 0x20c14f0 io = <optimized out> tv = {tv_sec = 4, tv_usec = 999912} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #13 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a9f20) at ioloop.c:648 No locals. #14 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a9f20) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #15 0x000000000042065e in cmd_dsync_server_run (_ctx=0x20b6168, user=<optimized out>) at doveadm-dsync.c:1169 ctx = 0x20b6168 ibc = 0x20c1a10 brain = 0x20d2b48 temp_prefix = 0x209cb68 state_str = 0x0 sync_type = <optimized out> name = 0x20a9f00 "10.33.207.136" process_title_prefix = 0x209cb40 "10.33.207.136 " mail_error = MAIL_ERROR_NONE #16 0x0000000000421f96 in doveadm_mail_next_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:416 input = {module = 0x0, service = 0x4592b0 "doveadm", username = 0x209b5e1 "T0146937", session_id = 0x0, session_id_prefix = 0x0, session_create_time = 0, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, userdb_fields = 0x0, flags_override_add = (unknown: 0), flags_override_remove = (unknown: 0), no_userdb_lookup = 0, debug = 0} error = 0x20 <error: Cannot access memory at address 0x20> ip = <optimized out> ret = <optimized out> __FUNCTION__ = "doveadm_mail_next_user" #17 0x0000000000422909 in doveadm_mail_single_user (ctx=ctx@entry=0x20b6168, cctx=cctx@entry=0x7ffd51c5b8e0, error_r=error_r@entry=0x7ffd51c5b8d8) at doveadm-mail.c:447 __FUNCTION__ = "doveadm_mail_single_user" #18 0x0000000000435484 in doveadm_mail_cmd_server_run (cctx=0x7ffd51c5b8e0, mctx=0x20b6168, conn=0x20b1d48) at client-connection.c:164 error = 0x0 ret = <optimized out> #19 doveadm_cmd_handle (cctx=0x7ffd51c5b8e0, argv=0x209b618, argc=3, cmd_name=<optimized out>, conn=0x20b1d48) at client-connection.c:247 ioloop = 0x20a9f20 mail_cmd = 0x20aa138 mctx = 0x20b6168 cmd_ver2 = <optimized out> prev_ioloop = 0x20a39d0 cmd = 0x0 #20 client_handle_command (args=<optimized out>, conn=0x20b1d48) at client-connection.c:315 cctx = {cmd = 0x0, argc = 0, argv = 0x0, username = 0x209b5e1 "T0146937", cli = false, tcp_server = true, local_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!χ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 34767, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2278498570, 0, 0, 0}}}, ip4 = {s_addr = 2278498570}}}, remote_ip = {family = 2, u = {ip6 = {__in6_u = {__u6_addr8 = "\n!ψ", '\000' <repeats 11 times>, __u6_addr16 = {8458, 35023, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2295275786, 0, 0, 0}}}, ip4 = {s_addr = 2295275786}}}, local_port = 12345, remote_port = 55819, conn = 0x20b1d48} flags = <optimized out> cmd_name = <optimized out> argc = <optimized out> #21 client_connection_input (conn=0x20b1d48) at client-connection.c:432 args = <optimized out> _data_stack_cur_id = 3 line = <optimized out> ok = true #22 0x00007fa33455a802 in io_loop_call_io (io=0x20a8660) at ioloop.c:599 ioloop = 0x20a39d0 t_id = 2 __FUNCTION__ = "io_loop_call_io" #23 0x00007fa33455bd47 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x20a39d0) at ioloop-epoll.c:223 ctx = 0x20af660 list = 0x20a35c0 io = <optimized out> tv = {tv_sec = 2147483, tv_usec = 0} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #24 0x00007fa33455a89c in io_loop_handler_run (ioloop=ioloop@entry=0x20a39d0) at ioloop.c:648 No locals. #25 0x00007fa33455aa58 in io_loop_run (ioloop=0x20a39d0) at ioloop.c:623 __FUNCTION__ = "io_loop_run" #26 0x00007fa3344e6e43 in master_service_run (service=0x20a3870, callback=callback@entry=0x437690 <client_connected>) at master-service.c:666 No locals. #27 0x0000000000413ff7 in main (argc=1, argv=0x20a35e0) at main.c:143 set_roots = {0x464b40 <doveadm_setting_parser_info>, 0x0} input = {roots = 0x7ffd51c5ba60, config_path = 0x0, preserve_environment = false, preserve_user = false, preserve_home = false, never_exec = false, use_sysexits = false, parse_full_config = false, module = 0x4592b0 "doveadm", service = 0x4592b0 "doveadm", username = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_name = 0x0} output = {specific_services = 0x0, service_uses_local = 0, service_uses_remote = 0, used_local = 0, used_remote = 0, permission_denied = 0} error = 0x7fa334f3f520 "\200\364\363\064\243\177" c = <optimized out>

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 15 Jun '17

15 Jun '17

> I do know that this little box of horrors has 200-300MB mbox INBOXes on an > ext3 filesystem formatted in 2005. I am very nervous about converting them to > Maildir at this point. Fortunately, it just involves reformatting the data and a little reconmfiguration of dovcot. If you can find the tool and disk space, it's well worth doing. Of course, when running a proverbial dinosaur, you're often more preoccupied with preventing the next proverbial meteorite strike. > What I meant was, are certain types of filenames "blocked" by policy from > being created via IMAP commands? I'm sure I could run a few tests to answer > this for myself, or better still, go through Timo's code. I never saw anything that could do that -- maybe you can torture the virtual mailbox facility to get that done. If all your concerned is dovecot dot-files, you can place the indices somewhere else other than the user's filesapace. > One last problem area is that many users have soft-links to mailboxes > located on a second drive, but these never appear in folder enumeration > lists or they appear grayed out in SeaMonkey/Thunderbird. I've tried > just symbolically linking to directories containing other mboxes, but > sometimes it works, and sometimes it doesn't. I wonder if there's > paranoia checking in the code that follows symbolic links to ensure > that uids/gids of the "owning" directory and the linked-to directory > (or files within it) are the same. It works for me. From what I see, the ownership of the symlink is ignored; it's the underlying file that counts. Maybe a subscription issue? Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: Minor patches for builds against ancient platforms
by Joseph Tam 14 Jun '17

14 Jun '17

"M. Balridge" <dovecot(a)r.paypc.com> writes: > I assume it's a rarely seen issue because few Dovecot users compile the > software in caves on computers powered by horse-pulled generator > wheels. I resemble that remark. >> Warning: Transaction log file /home/luser/mail/.imap/INBOX/dovecot.index.log >> was locked for 95 seconds (rotating while syncing) Timo recently explained to me it's probably caused by slow I/O or processing. This explanation is consistent with my observation that the users who get these messages have jumbo mailboxes. > imap(luser): Error: fchown(/home/luser/mail/.subscriptions.lock, > group=501(coregroup)) failed: Operation not permitted (egid=200(users), group > based on /home/luser/mail - see http://wiki2.dovecot.org/Errors/ChgrpNoPerm) > > imap(luser): Error: file_dotlock_open() failed with subscription file > /home/luser/mail/.subscriptions: Operation not permitted > > .subscriptions doesn't exist either as a file or a directory in the named > directories. > > Is there a "filter" against dot-files being opened within the bowels of dovecot? You can disable dotclock altogether, but I don't think this is what you meant. You can use locking method "dotlock_try" rather than "dotlock" -- the former will ignore quota/permissions problems and plow on. (It still logs it.) You could also align luser's mail folder group with with luser's GID, which is usually what I do. Maybe locks are created even when files don't exist as there may be a race condition where another process is creating/deleting it at the same time. Joseph Tam <jtam.home(a)gmail.com>

4 5

v2.2.30 released
by Timo Sirainen 13 Jun '17

13 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.tar.gz.sig * auth: Use timing safe comparisons for everything related to passwords. It's unlikely that these could have been used for practical attacks, especially because Dovecot delays and flushes all failed authentications in 2 second intervals. Also it could have worked only when passwords were stored in plaintext in the passdb. * master process sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. This way restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. + auth: Add passdb { mechanisms=none } to match separate passdb lookup + auth: Add passdb { username_filter } to use passdb only if user matches the filter. See https://wiki2.dovecot.org/PasswordDatabase + dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. Because of the way dsync works, it may not always be possible if mails are copied or UIDs need to change. + imapc: Support imapc_features=search without ESEARCH extension. + imapc: Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters. + If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. + doveadm mailbox status: Add "firstsaved" field. + director_flush_socket: Add old host's up/down and vhost count as parameters - More fixes to automatically fix corruption in dovecot.list.index - dsync-server: Fix support for dsync_features=empty-header-workaround - imapc: Various bugfixes, including infinite loops on some errors - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't enabled modseq tracking via CONDSTORE/QRESYNC. - fts-lucene: Fix it to work again with mbox format - Some internal error messages may have contained garbage in v2.2.29 - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys are used. Otherwise the copied mails can't be opened. - vpopmail: Fix compiling

7 12

rescann / reindex / rebuild a subfolder structure
by Götz Reinicke - IT Koordinator 13 Jun '17

13 Jun '17

Hi, an user is missing all mail from a folder and all subfolders which are still saved in the users maildir directory on the dovecot server. From an imap client she sees the main folder but empty. No subfolders. She told me with an other imap client and a new created account she has the same problem. Question: Can I resync / regenerate some folder... index.... something....-files from the dovecot side? Thanks for hints and regards . Götz

1 0

Re: Minor patches for builds against ancient platforms
by Joseph Tam 13 Jun '17

13 Jun '17

> On that note, has anyone written a tool that "harmonises" users mail > directories' permissions - ideally reading the dovecot configuration to assess > where *THE* mail directories are actually used by dovecot? doveadm user $user which will supply the second half: it will spit out the UID, GID, home and mail directories of a user as specified by dovecot's configuration. > I was surprised by the pickiness of the group ownership/permissions > issues, though reflecting on things, I can see why you'd at least want > some logging by default for those conditions. This is a consequence of writing secure software: it employs least privilege so that a fault will not result in someone being able to mess around with someone else's mail (or indices). GID can also govern access to shared mailboxes. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: namespace and folders
by Joseph Tam 13 Jun '17

13 Jun '17

Gregory Sloop <gregs(a)sloop.net> writes: > Using mbox format and this namespace > > namespace { > inbox = yes > hidden = yes > prefix = INBOX/ > } > ... > This is not a terrible problem, but it's cosmetically ugly and confusing for users. > I'd prefer to only see these folders as subscribed as sub-folders [or sub-items] under inbox. Pardon my naievty, but couldn't you just remove this namespace altogether and get rid of at least one set of duplicates (although it probably keep the non-preferred one). Joseph Tam <jtam.home(a)gmail.com>

1 0

service(auth): command startup failed?
by HL1234 12 Jun '17

12 Jun '17

Hello, I need help because since some days I can not figure out what error this is and where it come from. I have used dovecot since years. Know after an update it is broken. First I like to give you some data: It's a FreeBSD 11.0 Server with sendmail (SMTP) and dovecot for IMAP with SSL. #dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword ldap pam passwd passwd-file sql Userdb: checkpassword ldap nss passwd prefetch passwd-file sql #dovecot --version 2.2.30.2 (c0c463e) I install the update with the FreeBSD ports. Before the update all was running fine. The state know is: form my client Outlook I can send eMail above SMTP. When I try to get my eMails by the IMAP-Server it is blocked. I have look around in the config files but I see nothing what has could be changed. I have tried to make new *.pem files with using the script in /usr/local/share/examples/dovecot/ but this havn't bring a solution. I need help for this error i see in the logs: dovecot.log master: Error: service(auth): command startup failed, throttling for 2 secs auth: Error: auth: environment corrupt; missing value for DOVECOT_ auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address auth: Error: auth: environment corrupt; missing value for DOVECOT_ auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address ..... dovecot-info.log imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=77.178.105.78, lip=88.74.25.120, TLS Jun 12 23:01:15 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 8 secs): user=<>, rip=58.218.194.81, lip=88.74.25.120, TLS handshaking .... dovecot-debug.log imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [77.178.105.78] imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [77.178.105.78] imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [77.178.105.78] imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [77.178.105.78] auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth auth: Debug: Module loaded: /usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Have anyone an idea what is going wrong and how to fix it? Harald -- View this message in context: http://dovecot.2317879.n4.nabble.com/service-auth-command-startup-failed-tp… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

Redis auth?
by Mark Moseley 12 Jun '17

12 Jun '17

I was curious what the status of this redis auth patch is: https://dovecot.org/list/dovecot/2016-June/104763.html

1 0

Re: Log authentication attempts
by j.emerlik 12 Jun '17

12 Jun '17

We alse have same problem, now we are running Dovecot 2.2.30.2 and also use Dovecot SASL for SMTP authentication (postfix 2.11). We need to save all failed login attempts to database as source IP address, username and date and time but post-login script can do this but only after successful login. Failed login attempts information may be useful in the fight with bruteforce attacks. It's possible to execude some script after failed login ("Password mismatch") ? Regards, Jacek

4 5

pigeonhole: imapsieve: AntiSpam example
by Larry Rosenman 12 Jun '17

12 Jun '17

Is there a reason why vnd.dovecot.execute is called out for sieve_global_extensions but no configuration or require is there for it on: https://wiki.dovecot.org/HowTo/AntispamWithSieve thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 3

namespace and folders
by Gregory Sloop 12 Jun '17

12 Jun '17

Using mbox format and this namespace namespace { inbox = yes hidden = yes prefix = INBOX/ } [Though I've also tried, seemingly, a million different namespace options to "fix" my problem.] It's a migrated setup from a 1.x dovecot install from Ubuntu 12.04, now on 16.04 The problem is in TBird [I haven't tested with any other mail clients] and IMAP; with that name-space I get all the folders both at the root level [same as inbox], as well as below inbox. [The same folders, pointing at the same underlying messages.] For example, if there's a folder "blah" and I subscribe to it, "blah" shows both at the same level as inbox, as well as a sub-item of inbox. If I unsubscribe from folder "blah" it also unsubscribes from the subfolder "blah" under inbox, and at the root level. [I hope that's clear enough...] This is not a terrible problem, but it's cosmetically ugly and confusing for users. I'd prefer to only see these folders as subscribed as sub-folders [or sub-items] under inbox. I'd guess I'm making some stupid beginner error, but I've not been able to figure it out, as of yet. Any help would be greatly appreciated. -Greg

1 1

AIX packaging: src/plugin/quota does not build
by Michael Felt 12 Jun '17

12 Jun '17

#stdout to /dev/null to see only the error messages It comes down to more issues with how IBM xlc handles (less elegantly) Compound Literals compared to GCC. michael@x071:[/data/prj/aixtools/github/dovecot/x071-test]make -i >/dev/null "../../../../src/x071-test/src/plugins/quota/quota.c", line 382.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 383.17: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 384.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota.c", line 385.17: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. make[4]: [quota.lo] Error 1 (ignored) The above issues I resolved by changing /* * Sigh, xlc and Compound Literals * struct quota_param_parser quota_param_hidden = {.param_name = "hidden", .param_handler = hidden_param_handler}; struct quota_param_parser quota_param_ignoreunlimited = {.param_name = "ignoreunlimited", .param_handler = ignoreunlim_param_handler}; struct quota_param_parser quota_param_noenforcing = {.param_name = "noenforcing", .param_handler = noenforcing_param_handler}; struct quota_param_parser quota_param_ns = {.param_name = "ns=", .param_handler = ns_param_handler}; */ to #define quota_param_hidden {.param_name = "hidden", .param_handler = hidden_param_handler} #define quota_param_ignoreunlimited {.param_name = "ignoreunlimited", .param_handler = ignoreunlim_param_handler} #define quota_param_noenforcing {.param_name = "noenforcing", .param_handler = noenforcing_param_handler} #define quota_param_ns {.param_name = "ns=", .param_handler = ns_param_handler} Unfortunately, this did not help quota-fs.c, so I move the defines to quota.h. However, since hidden_param_handler() is defined as a static routine, it is not visible outside of quota.c. As such the error messages change from: "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.37: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.62: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 126.18: 1506-515 (S) Member designator cannot be applied to an object of type "const struct quota_param_parser[]". make[4]: [quota-fs.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.37: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.66: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.91: 1506-196 (S) Initialization between types "void(* const)(struct quota_root*,const char*)" and "struct quota_param_parser" is not allowed. make[4]: [quota-dict.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 66.17: 1506-196 (S) Initialization between types "char* const" and "struct quota_param_parser" is not allowed. "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 67.18: 1506-515 (S) Member designator cannot be applied to an object of type "const struct quota_param_parser[]". make[4]: [quota-imapc.lo] Error 1 (ignored) libtool: error: 'quota.lo' is not a valid libtool object make[4]: [lib10_quota_plugin.la] Error 1 (ignored) libtool: error: 'quota.lo' is not a valid libtool object make[4]: [quota-status] Error 1 (ignored) make[4]: *** No rule to make target `../quota/lib10_quota_plugin.la', needed by `lib11_imap_quota_plugin.la'. Stop. make[3]: [all-recursive] Error 1 (ignored) to: michael@x071:[/data/prj/aixtools/github/dovecot/x071-test/src/plugins/quota]make -i >/dev/null "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 125.17: 1506-045 (S) Undeclared identifier hidden_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 126.17: 1506-045 (S) Undeclared identifier noenforcing_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-fs.c", line 127.17: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-fs.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.17: 1506-045 (S) Undeclared identifier hidden_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.37: 1506-045 (S) Undeclared identifier ignoreunlim_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.66: 1506-045 (S) Undeclared identifier noenforcing_param_handler. "../../../../src/x071-test/src/plugins/quota/quota-dict.c", line 47.91: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-dict.lo] Error 1 (ignored) "../../../../src/x071-test/src/plugins/quota/quota-imapc.c", line 66.17: 1506-045 (S) Undeclared identifier ns_param_handler. make: [quota-imapc.lo] Error 1 (ignored) libtool: error: 'quota-fs.lo' is not a valid libtool object make: [lib10_quota_plugin.la] Error 1 (ignored) libtool: error: 'quota-fs.lo' is not a valid libtool object make: [quota-status] Error 1 (ignored) For me, this is a procedure declaration issue I may not resolve on my own - I must assume there is a reason that these routines are "static". Michael p.s. Once this is resolved I hope to be able to use "make check". I had to massage the Makefiles to get gnulib/getopt to link into dovecot. Once I can run "make check" I'll request help on how to get a new directory included in the Makefile list, and also assistance with making sure it can also work with out-of-tree builds.

1 0

doveadm ssl error when upgrading from 2.2.27 to 2.2.29
by Pallissard, Matthew 12 Jun '17

12 Jun '17

I'm starting to see the following error when upgrading from 2.2.27 to 2.2.29. doveadm(ip.add.re.ss): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher Downgrading from 2.2.27 resolves, error still persists in 2.2.28. I'm using openssl 1.1.0.f and an ec cert/key with the following curve. ASN1 OID: prime256v1 NIST CURVE: P-256 Does anyone know anything about this off the top of their head? If not I'll try to git-bisect 2.2.27 -> 2.2.28 and see if I can find any offending commits later on this week. -- Matt Pallissard

3 4

AIX lacks getopt_long
by Michael Felt 12 Jun '17

12 Jun '17

* As a test I added the 'struct option' to the file needing it, and this confirmed the need for getopt_long() which AIX libc.a does not include. * p.s. I ran this dry-run from the "root" directory, perhaps it would be better from the ./src directory --- src/x071-test/src/doveadm/doveadm-cmd.c 2017-06-12 06:10:53 +0000 +++ src/AIX-port/src/doveadm/doveadm-cmd.c 2017-06-10 12:24:53 +0000 @@ -13,23 +13,9 @@ /* * getopt.h is non-POSIX * on AIX getopt() is declared in unistd.h - * however, unistd.h does not include the 'struct option' */ #ifndef _AIX #include <getopt.h> -#else -/* - * copied from Debian 3.2.0 /usr/include/getopt.h - */ -struct option -{ - const char *name; - /* has_arg can't be an enum because some compilers complain about - type mismatches in all the code that assumes it is an int. */ - int has_arg; - int *flag; - int val; -}; #endif static struct doveadm_cmd *doveadm_commands[] = { * I searched for a possible solution - and I am hoping gnulib will be something you would consider. I downloaded the latest gnulib using 'git clone git://git.savannah.gnu.org/gnulib.git' * This is the --dry-run output. * As there maybe "license" issues, this is not something I am going to do "on my own" - in the package they speak of GPL and LGPL - but I know nothing about licensing issues. michael@x071:[/data/prj/aixtools/github/dovecot/src/x071-test]/data/prj/aixtools/github/dovecot/gnulib/gnulib-tool --dry-run --import getopt-posix Module list with included dependencies (indented): absolute-header extensions extern-inline getopt-posix gettext-h include_next snippet/arg-nonnull snippet/c++defs snippet/warn-on-use ssize_t stddef sys_types unistd File list: lib/arg-nonnull.h lib/c++defs.h lib/getopt-cdefs.in.h lib/getopt-core.h lib/getopt-ext.h lib/getopt-pfx-core.h lib/getopt-pfx-ext.h lib/getopt.c lib/getopt.in.h lib/getopt1.c lib/getopt_int.h lib/gettext.h lib/stddef.in.h lib/sys_types.in.h lib/unistd.c lib/unistd.in.h lib/warn-on-use.h m4/00gnulib.m4 m4/absolute-header.m4 m4/extensions.m4 m4/extern-inline.m4 m4/getopt.m4 m4/gnulib-common.m4 m4/include_next.m4 m4/off_t.m4 m4/onceonly.m4 m4/ssize_t.m4 m4/stddef_h.m4 m4/sys_types_h.m4 m4/unistd_h.m4 m4/warn-on-use.m4 m4/wchar_t.m4 Create directory ./lib Create directory ./lib Copy file lib/arg-nonnull.h Copy file lib/c++defs.h Copy file lib/getopt-cdefs.in.h Copy file lib/getopt-core.h Copy file lib/getopt-ext.h Copy file lib/getopt-pfx-core.h Copy file lib/getopt-pfx-ext.h Copy file lib/getopt.c Copy file lib/getopt.in.h Copy file lib/getopt1.c Copy file lib/getopt_int.h Copy file lib/gettext.h Copy file lib/stddef.in.h Copy file lib/sys_types.in.h Copy file lib/unistd.c Copy file lib/unistd.in.h Copy file lib/warn-on-use.h Copy file m4/00gnulib.m4 Copy file m4/absolute-header.m4 Copy file m4/extensions.m4 Copy file m4/extern-inline.m4 Copy file m4/getopt.m4 Copy file m4/gnulib-common.m4 Copy file m4/gnulib-tool.m4 Copy file m4/include_next.m4 Copy file m4/off_t.m4 Copy file m4/onceonly.m4 Copy file m4/ssize_t.m4 Copy file m4/stddef_h.m4 Copy file m4/sys_types_h.m4 Copy file m4/unistd_h.m4 Copy file m4/warn-on-use.m4 Copy file m4/wchar_t.m4 Create lib/Makefile.am Create m4/gnulib-cache.m4 # Copyright (C) 2002-2017 Free Software Foundation, Inc. # # This file is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This file is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this file. If not, see <http://www.gnu.org/licenses/>. # # As a special exception to the GNU General Public License, # this file may be distributed as part of a program that # contains a configuration script generated by Autoconf, under # the same distribution terms as the rest of that program. # # Generated by gnulib-tool. # # This file represents the specification of how gnulib-tool is used. # It acts as a cache: It is written and read by gnulib-tool. # In projects that use version control, this file is meant to be put under # version control, like the configure.ac and various Makefile.am files. # Specification in the form of a command-line invocation: # gnulib-tool --import --lib=libgnu --source-base=lib --m4-base=m4 --doc-base=doc --tests-base=tests --aux-dir=. --no-conditional-dependencies --no-libtool --macro-prefix=gl getopt-posix # Specification in the form of a few gnulib-tool.m4 macro invocations: gl_LOCAL_DIR([]) gl_MODULES([ getopt-posix ]) gl_AVOID([]) gl_SOURCE_BASE([lib]) gl_M4_BASE([m4]) gl_PO_BASE([]) gl_DOC_BASE([doc]) gl_TESTS_BASE([tests]) gl_LIB([libgnu]) gl_MAKEFILE_NAME([]) gl_MACRO_PREFIX([gl]) gl_PO_DOMAIN([]) gl_WITNESS_C_MACRO([]) Create m4/gnulib-comp.m4 # DO NOT EDIT! GENERATED AUTOMATICALLY! # Copyright (C) 2002-2017 Free Software Foundation, Inc. # # This file is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # This file is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this file. If not, see <http://www.gnu.org/licenses/>. # # As a special exception to the GNU General Public License, # this file may be distributed as part of a program that # contains a configuration script generated by Autoconf, under # the same distribution terms as the rest of that program. # # Generated by gnulib-tool. # # This file represents the compiled summary of the specification in # gnulib-cache.m4. It lists the computed macro invocations that need # to be invoked from configure.ac. # In projects that use version control, this file can be treated like # other built files. # This macro should be invoked from ./configure.ac, in the section # "Checks for programs", right after AC_PROG_CC, and certainly before # any checks for libraries, header files, types and library functions. AC_DEFUN([gl_EARLY], [ m4_pattern_forbid([^gl_[A-Z]])dnl the gnulib macro namespace m4_pattern_allow([^gl_ES$])dnl a valid locale name m4_pattern_allow([^gl_LIBOBJS$])dnl a variable m4_pattern_allow([^gl_LTLIBOBJS$])dnl a variable # Pre-early section. AC_REQUIRE([gl_USE_SYSTEM_EXTENSIONS]) AC_REQUIRE([gl_PROG_AR_RANLIB]) # Code from module absolute-header: # Code from module extensions: # Code from module extern-inline: # Code from module getopt-posix: # Code from module gettext-h: # Code from module include_next: # Code from module snippet/arg-nonnull: # Code from module snippet/c++defs: # Code from module snippet/warn-on-use: # Code from module ssize_t: # Code from module stddef: # Code from module sys_types: # Code from module unistd: ]) # This macro should be invoked from ./configure.ac, in the section # "Check for header files, types and library functions". AC_DEFUN([gl_INIT], [ AM_CONDITIONAL([GL_COND_LIBTOOL], [false]) gl_cond_libtool=false gl_libdeps= gl_ltlibdeps= gl_m4_base='m4' m4_pushdef([AC_LIBOBJ], m4_defn([gl_LIBOBJ])) m4_pushdef([AC_REPLACE_FUNCS], m4_defn([gl_REPLACE_FUNCS])) m4_pushdef([AC_LIBSOURCES], m4_defn([gl_LIBSOURCES])) m4_pushdef([gl_LIBSOURCES_LIST], []) m4_pushdef([gl_LIBSOURCES_DIR], []) gl_COMMON gl_source_base='lib' AC_REQUIRE([gl_EXTERN_INLINE]) gl_FUNC_GETOPT_POSIX if test $REPLACE_GETOPT = 1; then AC_LIBOBJ([getopt]) AC_LIBOBJ([getopt1]) dnl Arrange for unistd.h to include getopt.h. GNULIB_GL_UNISTD_H_GETOPT=1 fi AC_SUBST([GNULIB_GL_UNISTD_H_GETOPT]) AC_SUBST([LIBINTL]) AC_SUBST([LTLIBINTL]) gt_TYPE_SSIZE_T gl_STDDEF_H gl_SYS_TYPES_H AC_PROG_MKDIR_P gl_UNISTD_H # End of code from modules m4_ifval(gl_LIBSOURCES_LIST, [ m4_syscmd([test ! -d ]m4_defn([gl_LIBSOURCES_DIR])[ || for gl_file in ]gl_LIBSOURCES_LIST[ ; do if test ! -r ]m4_defn([gl_LIBSOURCES_DIR])[/$gl_file ; then echo "missing file ]m4_defn([gl_LIBSOURCES_DIR])[/$gl_file" >&2 exit 1 fi done])dnl m4_if(m4_sysval, [0], [], [AC_FATAL([expected source file, required through AC_LIBSOURCES, not found])]) ]) m4_popdef([gl_LIBSOURCES_DIR]) m4_popdef([gl_LIBSOURCES_LIST]) m4_popdef([AC_LIBSOURCES]) m4_popdef([AC_REPLACE_FUNCS]) m4_popdef([AC_LIBOBJ]) AC_CONFIG_COMMANDS_PRE([ gl_libobjs= gl_ltlibobjs= if test -n "$gl_LIBOBJS"; then # Remove the extension. sed_drop_objext='s/\.o$//;s/\.obj$//' for i in `for i in $gl_LIBOBJS; do echo "$i"; done | sed -e "$sed_drop_objext" | sort | uniq`; do gl_libobjs="$gl_libobjs $i.$ac_objext" gl_ltlibobjs="$gl_ltlibobjs $i.lo" done fi AC_SUBST([gl_LIBOBJS], [$gl_libobjs]) AC_SUBST([gl_LTLIBOBJS], [$gl_ltlibobjs]) ]) gltests_libdeps= gltests_ltlibdeps= m4_pushdef([AC_LIBOBJ], m4_defn([gltests_LIBOBJ])) m4_pushdef([AC_REPLACE_FUNCS], m4_defn([gltests_REPLACE_FUNCS])) m4_pushdef([AC_LIBSOURCES], m4_defn([gltests_LIBSOURCES])) m4_pushdef([gltests_LIBSOURCES_LIST], []) m4_pushdef([gltests_LIBSOURCES_DIR], []) gl_COMMON gl_source_base='tests' changequote(,)dnl gltests_WITNESS=IN_`echo "${PACKAGE-$PACKAGE_TARNAME}" | LC_ALL=C tr abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ | LC_ALL=C sed -e 's/[^A-Z0-9_]/_/g'`_GNULIB_TESTS changequote([, ])dnl AC_SUBST([gltests_WITNESS]) gl_module_indicator_condition=$gltests_WITNESS m4_pushdef([gl_MODULE_INDICATOR_CONDITION], [$gl_module_indicator_condition]) m4_popdef([gl_MODULE_INDICATOR_CONDITION]) m4_ifval(gltests_LIBSOURCES_LIST, [ m4_syscmd([test ! -d ]m4_defn([gltests_LIBSOURCES_DIR])[ || for gl_file in ]gltests_LIBSOURCES_LIST[ ; do if test ! -r ]m4_defn([gltests_LIBSOURCES_DIR])[/$gl_file ; then echo "missing file ]m4_defn([gltests_LIBSOURCES_DIR])[/$gl_file" >&2 exit 1 fi done])dnl m4_if(m4_sysval, [0], [], [AC_FATAL([expected source file, required through AC_LIBSOURCES, not found])]) ]) m4_popdef([gltests_LIBSOURCES_DIR]) m4_popdef([gltests_LIBSOURCES_LIST]) m4_popdef([AC_LIBSOURCES]) m4_popdef([AC_REPLACE_FUNCS]) m4_popdef([AC_LIBOBJ]) AC_CONFIG_COMMANDS_PRE([ gltests_libobjs= gltests_ltlibobjs= if test -n "$gltests_LIBOBJS"; then # Remove the extension. sed_drop_objext='s/\.o$//;s/\.obj$//' for i in `for i in $gltests_LIBOBJS; do echo "$i"; done | sed -e "$sed_drop_objext" | sort | uniq`; do gltests_libobjs="$gltests_libobjs $i.$ac_objext" gltests_ltlibobjs="$gltests_ltlibobjs $i.lo" done fi AC_SUBST([gltests_LIBOBJS], [$gltests_libobjs]) AC_SUBST([gltests_LTLIBOBJS], [$gltests_ltlibobjs]) ]) LIBGNU_LIBDEPS="$gl_libdeps" AC_SUBST([LIBGNU_LIBDEPS]) LIBGNU_LTLIBDEPS="$gl_ltlibdeps" AC_SUBST([LIBGNU_LTLIBDEPS]) ]) # Like AC_LIBOBJ, except that the module name goes # into gl_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gl_LIBOBJ], [ AS_LITERAL_IF([$1], [gl_LIBSOURCES([$1.c])])dnl gl_LIBOBJS="$gl_LIBOBJS $1.$ac_objext" ]) # Like AC_REPLACE_FUNCS, except that the module name goes # into gl_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gl_REPLACE_FUNCS], [ m4_foreach_w([gl_NAME], [$1], [AC_LIBSOURCES(gl_NAME[.c])])dnl AC_CHECK_FUNCS([$1], , [gl_LIBOBJ($ac_func)]) ]) # Like AC_LIBSOURCES, except the directory where the source file is # expected is derived from the gnulib-tool parameterization, # and alloca is special cased (for the alloca-opt module). # We could also entirely rely on EXTRA_lib..._SOURCES. AC_DEFUN([gl_LIBSOURCES], [ m4_foreach([_gl_NAME], [$1], [ m4_if(_gl_NAME, [alloca.c], [], [ m4_define([gl_LIBSOURCES_DIR], [lib]) m4_append([gl_LIBSOURCES_LIST], _gl_NAME, [ ]) ]) ]) ]) # Like AC_LIBOBJ, except that the module name goes # into gltests_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gltests_LIBOBJ], [ AS_LITERAL_IF([$1], [gltests_LIBSOURCES([$1.c])])dnl gltests_LIBOBJS="$gltests_LIBOBJS $1.$ac_objext" ]) # Like AC_REPLACE_FUNCS, except that the module name goes # into gltests_LIBOBJS instead of into LIBOBJS. AC_DEFUN([gltests_REPLACE_FUNCS], [ m4_foreach_w([gl_NAME], [$1], [AC_LIBSOURCES(gl_NAME[.c])])dnl AC_CHECK_FUNCS([$1], , [gltests_LIBOBJ($ac_func)]) ]) # Like AC_LIBSOURCES, except the directory where the source file is # expected is derived from the gnulib-tool parameterization, # and alloca is special cased (for the alloca-opt module). # We could also entirely rely on EXTRA_lib..._SOURCES. AC_DEFUN([gltests_LIBSOURCES], [ m4_foreach([_gl_NAME], [$1], [ m4_if(_gl_NAME, [alloca.c], [], [ m4_define([gltests_LIBSOURCES_DIR], [tests]) m4_append([gltests_LIBSOURCES_LIST], _gl_NAME, [ ]) ]) ]) ]) # This macro records the list of files which have been installed by # gnulib-tool and may be removed by future gnulib-tool invocations. AC_DEFUN([gl_FILE_LIST], [ lib/arg-nonnull.h lib/c++defs.h lib/getopt-cdefs.in.h lib/getopt-core.h lib/getopt-ext.h lib/getopt-pfx-core.h lib/getopt-pfx-ext.h lib/getopt.c lib/getopt.in.h lib/getopt1.c lib/getopt_int.h lib/gettext.h lib/stddef.in.h lib/sys_types.in.h lib/unistd.c lib/unistd.in.h lib/warn-on-use.h m4/00gnulib.m4 m4/absolute-header.m4 m4/extensions.m4 m4/extern-inline.m4 m4/getopt.m4 m4/gnulib-common.m4 m4/include_next.m4 m4/off_t.m4 m4/onceonly.m4 m4/ssize_t.m4 m4/stddef_h.m4 m4/sys_types_h.m4 m4/unistd_h.m4 m4/warn-on-use.m4 m4/wchar_t.m4 ]) Create ./lib/.gitignore Create ./m4/.gitignore Finished. You may need to add #include directives for the following .h files. #include <unistd.h> You may need to use the following Makefile variables when linking. Use them in <program>_LDADD when linking a program, or in <library>_a_LDFLAGS or <library>_la_LDFLAGS when linking a library. $(LTLIBINTL) when linking with libtool, $(LIBINTL) otherwise Don't forget to - add "lib/Makefile" to AC_CONFIG_FILES in ./configure.ac, - mention "lib" in SUBDIRS in Makefile.am, - mention "-I m4" in ACLOCAL_AMFLAGS in Makefile.am, - mention "m4/gnulib-cache.m4" in EXTRA_DIST in Makefile.am, - invoke gl_EARLY in ./configure.ac, right after AC_PROG_CC, - invoke gl_INIT in ./configure.ac. michael@x071:[/data/prj/aixtools/github/dovecot/src/x071-test]

1 0

Changing the name of a compressed file
by Peter West 11 Jun '17

11 Jun '17

Concerning Maildir, the wiki page on compression has this: All mails must have ,S=<size> in their filename where <size> contains the original uncompressed mail size, otherwise there will be problems with quota calculation as well as other potential random failures. Note that if the filename doesn’t contain the ,S=<size> before compression, adding it afterwards changes the base filename and thus the message UID. The safest thing to do is simply to not compress such files. Further down on the same page is this: If the file does exist, rename() (mv) the compressed file over the original file. • Dovecot can now read the file, but to avoid compressing it again on the next run, you'll probably want to rename it again to include e.g. a "Z" flag in the file name to mark that it was compressed (e.g. 1223212411.M907959P17184.host,S=3271:2,SZ). These comments seem to contradict each. Or is there a difference between adding the size specifier to the filename and adding a Z flag to the end of the file name? -- Peter West pbw(a)pbw.id.au And the great throng heard him gladly.

2 9

Unix socket for quota-status?
by Peter West 11 Jun '17

11 Jun '17

The example configs for quota-status use inet_listener. Does quota-status support unix sockets? -- Peter West pbw(a)pbw.id.au And the great throng heard him gladly.

2 2

Pacaging/build issues with AIX and vac (dovecot-2.2.25)
by Michael Felt 10 Jun '17

10 Jun '17

Hi. I finally decided it was really time to stop being lazy and really move away from gmail. After I have a server in my basement using power, etc. So I turned on the imap provided - and did not quite cry - it will have to do for now, but imap2 is wanting. A real server yes, but not Linux. (Using linux would require another server AND I would feel I am being lazy again). So, I downloaded dovecot-2.2.25 and tried to build. Configure (messages to stderr) xlc is /usr/vacpp/bin/xlc + CPPFLAGS="-I/opt/include -I/opt/buildaix/include" CFLAGS="-I/opt/include -O2 -qmaxmem=-1 -qarch=pwr5 -I/opt/buildaix/includes ./configure\ --prefix=/opt \ --sysconfdir=/var/dovecot/etc\ --sharedstatedir=/var/dovecot/com\ --localstatedir=/var/dovecot\ --mandir=/usr/share/man\ --infodir=/opt/share/info/dovecot \ > .buildaix/configure.out xlc_r: 1501-216 (W) command option -dM is not recognized - passed to ld xlc_r: 1501-228 (W) input file c not found 1506-297 (S) Unable to open input file null. No such file or directory. ./configure[25617]: rpcgen: not found messages to stderr by make: + make > .buildaix/make.out ./update-version.sh[42]: git: not found. "askpass.c", line 59.18: 1506-359 (I) Automatic variable str contains a const member and is not initialized. It will be initia "guid.c", line 113.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will be initiali "iostream-rawlog.c", line 28.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "istream-base64-decoder.c", line 42.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-base64-encoder.c", line 47.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It "istream-jsonstr.c", line 70.26: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will b "mountpoint.c", line 222.39: 1506-068 (W) Operation between types "char*" and "const char*" is not allowed. "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "dcrypt-openssl.c", line 787.36: 1506-359 (I) Automatic variable key contains a const member and is not initialized. It will b "dcrypt-openssl.c", line 1099.33: 1506-359 (I) Automatic variable secret contains a const member and is not initialized. It wi "dcrypt-openssl.c", line 1295.18: 1506-359 (I) Automatic variable tmp contains a const member and is not initialized. It will "dcrypt-openssl.c", line 1365.18: 1506-359 (I) Automatic variable saltbuf contains a const member and is not initialized. It w "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 68.18: 1506-359 (I) Automatic variable ephemeral_key contains a const member and is not initialized. "istream-decrypt.c", line 276.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "istream-decrypt.c", line 369.26: 1506-359 (I) Automatic variable peer_key contains a const member and is not initialized. It "istream-decrypt.c", line 745.42: 1506-359 (I) Automatic variable db contains a const member and is not initialized. It will b "ostream-encrypt.c", line 135.65: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "ostream-encrypt.c", line 454.18: 1506-359 (I) Automatic variable buf contains a const member and is not initialized. It will "test-http-auth.c", line 27.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 27.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 28.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 28.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 29.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 30.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.70: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 30.76: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 33.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 33.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 43.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 43.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 44.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 44.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 45.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 46.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 46.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 47.50: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 48.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 49.53: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 50.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 53.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 53.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 60.27: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 60.37: 1506-196 (W) Initialization between types "struct http_auth_challenge_test* const" and "char*" "test-http-auth.c", line 61.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 61.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 62.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 63.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 63.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 64.51: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 65.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 66.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 69.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 69.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 70.33: 1506-022 (S) "data" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 70.41: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 71.33: 1506-022 (S) "params" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 72.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 72.52: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 73.49: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 76.33: 1506-022 (S) "scheme" is not a member of "const struct http_auth_challenges_test". "test-http-auth.c", line 76.43: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 187.27: 1506-196 (W) Initialization between types "struct http_auth_param* const" and "char*" is not a "test-http-auth.c", line 187.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 188.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 189.36: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 190.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 191.34: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 192.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 193.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 194.39: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 195.37: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.27: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. "test-http-auth.c", line 196.33: 1506-026 (S) Number of initializers cannot be greater than the number of aggregate members. make: 1254-004 The error code from the last command is 1. I am quite willing to dig and dig - but I want to be know if there will be any interest and/or support for dovecot on AIX. Sincerely, Michael

3 22

v2.2.30.1 released
by Timo Sirainen 09 Jun '17

09 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz.sig Due to some release process changes I didn't notice that one important bugfix wasn't included in the v2.2.30 release branch before I made the release. So fixing it here with v2.2.30.1. Also included another less important fix. - quota_warning scripts weren't working in v2.2.30 - vpopmail still wasn't compiling Also I guess should mention that in v2.2.30+ the "script" service's protocol changed to a new version. If anyone had written their own script services (not using the included "script" binary) they would need some changes. I haven't heard of anyone having done that though.

7 16

[Dovecot] Dovecot stops with "Fatal: kevent(): Invalid argument"
by Henrik Larsson 09 Jun '17

09 Jun '17

# 2.0.11: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-STABLE amd64 Dovecot stops with the following logged: - master: Fatal: kevent(): Invalid argument I have found that a diff was created for "src/lib/ioloop-kqueue.c" for a similar issue: http://dovecot.org/pipermail/dovecot/2010-November/054855.html I have patched my system with this and haven't seen the problem since, but I don't know if this is a coincidence. Could you please explain if the diff should actually fix anything or just add some more logging in case it stops again? Best regards Henrik Larsson

4 9

Dovecot LDAP using custom field to allow users to connect
by Michael JOIGNY 09 Jun '17

09 Jun '17

Hi all, I'd like to know if it's possible to add a custom field when the authentification is made by users. My boolean custom field will be for example "AllowUser" (false/true). I'm trying to do something like that but it's not working : /user_filter = (&(objectClass=posixAccount)(uid=%u)(objectClass=myclass)(AllowUser=TRUE))/ This is my dovecot/ldap configuration below : /*# dovecot.conf* / /passdb {// // driver = ldap// // args = /etc/dovecot/dovecot-ldap.conf// //}/ *# dovecot-ldap.conf* /hosts = myurl:myport// //dn = cn=myuser,dc=mydomain,dc=com// //dnpass = ********// //a//uth_bind = yes// //auth_bind_userdn = uid=%u,ou=users,dc=mydomain,dc=com// //ldap_version = 3// //base = ou=Users,dc=mydomain,dc=com// //scope = base// //default_pass_scheme = SSHA512 / Do you have an idead ? Kind regards. -- Michael

2 3

lmtp: Error: Temp file creation to /tmp/ ... failed: No such file or directory on incoming mails with attachments
by Lars-Sören Steck 09 Jun '17

09 Jun '17

Dear list, I'm currently facing problems when receiving eMails with attachments, at least sometimes. My mailserver is set up with the tool 'Mailcow', and hence is based on Dovecot (2.2.22 (fe789d2)) and Postfix. Usually, there are no problems with receiving mails. If a mail has an attachment, however, it is possible that the following error occurs (extract from /var/log/mail.log): 'Jun 7 12:50:28 mail postfix/lmtp[26827]: 564E68A0515: to=<abc(a)def.ghj>, relay=my.mail.server[private/dovecot-lmtp], delay=0.71, delays=0.67/0.01/0.01/0.02, dsn=4.3.0, status=deferred (host my.mail.server[private/dovecot-lmtp] said: 451 4.3.0 Temporary internal failure (in reply to end of DATA command))' Extract from /var/log/mail.err: 'Jun 7 12:50:28 mail dovecot: lmtp(26828): Error: Temp file creation to /tmp/dovecot.lmtp.mail.26828. failed: No such file or directory' Once this happened the first time after dovecot is running, it will happen for all incoming mails with attachments. This can be solved temporarily by restarting the dovecot service and running postqueue -f, but that obviously does not solve the underlying problem. In this post to this list, it is stated that dovecot sometimes creates temp files to avoid 'excessive memory usage'. I'm guessing that this is the case here, also the error message is similiar: https://dovecot.org/list/dovecot/2016-June/104722.html Should I simply change the configuration variable mail_temp_dir to solve this? Why is dovecot not able to find the /tmp folder? In the list thread, it is stated that this is caused by dovecot running with enabled chrooting. As far as I understand it though (correct me if I'm wrong), chrooting is not enabled in my dovecot configuration. Please find attached the output of 'dovecot -n': # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-78-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf } listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_home = /var/vmail/%d/%n mail_location = maildir:~/ mail_max_userip_connections = 500 mail_plugins = quota acl fts fts_solr managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = yes location = maildir:%%h/:INDEXPVT=~/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { auto = subscribe special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox "Gesendete Objekte" { special_use = \Sent } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/vmail/shared-mailboxes.db fts = solr fts_autoindex = yes fts_solr = url=http://127.0.0.1:8983/solr/ quota = dict:Userquota::proxy::sqlquota quota_rule2 = Trash:storage=+100%% sieve = /var/vmail/sieve/%u.sieve sieve_after = /var/vmail/sieve/global.sieve sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 } protocols = imap sieve lmtp pop3 service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = root } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 vsz_limit = 128 M } service managesieve { process_limit = 256 } ssl_cert = </etc/ssl/mail/mail.crt ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/mail/mail.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota imap_acl acl fts fts_solr } protocol lmtp { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl fts fts_solr postmaster_address = postmaster(a)steck.cc } protocol sieve { managesieve_logout_format = bytes=%i/%o } remote 127.0.0.1 { disable_plaintext_auth = no } Thank you for your help. Lars

2 2

Re: Any documentation around timeout states ?
by Joseph Tam 08 Jun '17

08 Jun '17

> Hi, this has been fixed in more recent release, where the states are > converted to human readable strings, see > > https://git.dovecot.net/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a… Internal name I guess. For the rest of us: https://github.com/dovecot/core/commit/e7d9dd003e6192b294507b9fbe9917a514e4… Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Dovecot login is slow
by Aki Tuomi 08 Jun '17

08 Jun '17

Can you try adding blocking=yes to your dovecot-ldap.conf.ext Aki On 08.06.2017 11:15, Mitocariu Emilian wrote: > No, other servers use the same LDAP and the response is fast. The > weird part is that this morning i played a little with the > configuration, but in the end i came back to the settings i had > previously and now it works better, but from time to time it still > hangs a little > > On Thu, Jun 8, 2017 at 11:07 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi > <mailto:aki.tuomi@dovecot.fi>> wrote: > > > > On 07.06.2017 16:34, Mitocariu Emilian wrote: > > Hi, > > > > I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as > an imap > > server with an LDAP backend for authentication. This is the > output of > > "dovecot -n": > > # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf > > The problem i'm having is that when i try to login it takes more than 10 > > seconds, making my webmail very slow. For testing i login to > imap like this > > "openssl s_client -connect localhost:993" and sometimes i get > this message > > "* OK Waiting for authentication master process to respond..". I > saw at > > other people, one of the problem was because they didn't > disabled pam > > authentication when using another backend (like ldap or sql), > but i already > > did that. > > > > Does anyone know what could cause such long login times and how > to fix it? > > Does your LDAP take long time to respond? > > Aki > >

1 0

mail storage auto detection failed?
by Alef Veld 08 Jun '17

08 Jun '17

Hi everyone. Nice to meet you. I’m new to dovecot and i came across a problem it seems. I setup a new user called sales with useradd, and gave it a password. Although it has a home directory, i set login to /sbin/nologin. When logging into the pop server on port 110 (with telnet) i get this in the logs: dovecot: pop3-login: Login: user=<sales>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=12938, secured, session=<94SotWVRoAB/AAAB> Jun 7 21:49:24 www dovecot: pop3(sales): Error: user sales: Initialization failed: Namespace '': Mail storage autodetection failed with home=/home/sales Jun 7 21:49:24 www dovecot: pop3(sales): Error: Invalid user settings. Refer to server log for more information. Did i have to initialise the mailbox in the homedirectory? What did i forget. I didn't change anything to the default dovecot.conf, i just installed the package with yum install dovecot (so latest version). This error also shows up when logging into port 143. Thanks for your help. My dovecot -n output if that helps is : [ec2-user@www log]$ dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 4.9.20-10.30.amzn1.x86_64 x86_64 mbox_write_locks = fcntl namespace inbox { inbox = yes location = prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } Thanks a lot. -atv

2 1

Any documentation around timeout states ?
by Matt Bryant 08 Jun '17

08 Jun '17

Been seeing a number of proxy timouts recently with errors such as ... timed out in state=4 timed out in state=2 Is there any doco around what state 2/4 actually means ... atm got auth_debug on to see if we can track further information down centos 7 x86_64 dovecot 2.2.19 rgds Matt

2 1

Dovecot login is slow
by Mitocariu Emilian 08 Jun '17

08 Jun '17

Hi, I have an Ubuntu 16.04 server with dovecot 2.2.22 configured as an imap server with an LDAP backend for authentication. This is the output of "dovecot -n": # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-77-generic x86_64 Ubuntu 16.04.2 LTS auth_debug_passwords = yes mail_gid = vmail mail_location = maildir:~/ mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </path/to/my/cert ssl_key = </path/to/my/key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = home=/var/mail/vmail/%n driver = ldap } The problem i'm having is that when i try to login it takes more than 10 seconds, making my webmail very slow. For testing i login to imap like this "openssl s_client -connect localhost:993" and sometimes i get this message "* OK Waiting for authentication master process to respond..". I saw at other people, one of the problem was because they didn't disabled pam authentication when using another backend (like ldap or sql), but i already did that. Does anyone know what could cause such long login times and how to fix it?

2 1

Segmentation fault in imap_bodystructure_is_plain_7bit
by mihaiush 08 Jun '17

08 Jun '17

Hi, I have a lot of errors like this in my log: Fatal: master: service(imap): child 26049 killed with signal 11 (core dumped) Dovecot 2.2.18 build from sources ./configure --prefix=/opt/dovecot2 --with-mysql --with-sqlite --with-solr --with-ssl --disable-rpath --disable-static. Debian Wheezy 3.2.63-2 x86_64. Filesystem is ZFS. All the core files are similar: $ gdb /opt/dovecot2/libexec/dovecot/imap core GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /opt/dovecot2/libexec/dovecot/imap...done. [New LWP 11635] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/opt/dovecot2/libexec/dovecot/imap imap-postlogin'. Program terminated with signal 11, Segmentation fault. #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 458 if (data->content_subtype != NULL && (gdb) bt #0 imap_bodystructure_is_plain_7bit (part=part@entry=0x234cd50) at imap-bodystructure.c:458 #1 0x00007f920a0fbfaf in index_mail_body_parsed_cache_flags (mail=0x234be60) at index-mail.c:587 #2 index_mail_parse_body_finish (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE, success=success@entry=true) at index-mail.c:1007 #3 0x00007f920a0fc369 in index_mail_parse_body (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1081 #4 0x00007f920a0fc498 in index_mail_parse_bodystructure (mail=mail@entry=0x234be60, field=field@entry=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1222 #5 0x00007f920a0fcf1c in index_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at index-mail.c:1379 #6 0x00007f920a0b29cd in dbox_mail_get_special (_mail=_mail@entry=0x234be60, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at dbox-mail.c:229 #7 0x00007f920a0a83f0 in mdbox_mail_get_special (_mail=0x234be60, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7ffc1518fde8) at mdbox-mail.c:213 #8 0x00007f920a08f96d in mail_get_special (mail=<optimized out>, field=field@entry=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=value_r@entry=0x7ffc1518fde8) at mail.c:317 #9 0x0000000000419a6a in fetch_bodystructure (ctx=0x232bbd8, mail=<optimized out>, context=<optimized out>) at imap-fetch.c:690 #10 0x0000000000419f9f in imap_fetch_more_int (ctx=ctx@entry=0x232bbd8, cancel=false) at imap-fetch.c:506 #11 0x000000000041af07 in imap_fetch_more (ctx=0x232bbd8, cmd=cmd@entry=0x232ba00) at imap-fetch.c:558 #12 0x000000000040f0c9 in cmd_fetch (cmd=0x232ba00) at cmd-fetch.c:286 #13 0x0000000000418aec in command_exec (cmd=cmd@entry=0x232ba00) at imap-commands.c:167 #14 0x0000000000417ad0 in client_command_input (cmd=cmd@entry=0x232ba00) at imap-client.c:814 #15 0x0000000000417b64 in client_command_input (cmd=0x232ba00) at imap-client.c:874 #16 0x0000000000417e45 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x232ade0) at imap-client.c:912 #17 client_handle_input (client=client@entry=0x232ade0) at imap-client.c:924 #18 0x0000000000418212 in client_input (client=0x232ade0) at imap-client.c:966 #19 0x00007f9209df134b in io_loop_call_io (io=0x232b8f0) at ioloop.c:501 #20 0x00007f9209df1e5b in io_loop_handler_run_internal (ioloop=ioloop@entry=0x22ec790) at ioloop-epoll.c:220 #21 0x00007f9209df13d9 in io_loop_handler_run (ioloop=ioloop@entry=0x22ec790) at ioloop.c:548 #22 0x00007f9209df1458 in io_loop_run (ioloop=0x22ec790) at ioloop.c:525 #23 0x00007f9209d92993 in master_service_run (service=0x22ec620, callback=callback@entry=0x421140 <client_connected>) at master-service.c:581 #24 0x000000000040c60b in main (argc=2, argv=0x22ec390) at main.c:431 (gdb) q I wrote a patch which solved the problem but: - my C is absolutely basic, - dovecot is already at version 2.2.30, maybe problem was already fixed. Anyway I attached my patch, please have a look. Thanks.

1 0

Which allowed services can be defined (imap, pop3, etc.)
by Malte Schmidt 08 Jun '17

08 Jun '17

Hello, I am using Dovecot with an LDAP-backend for authentication. According to the documentation at https://wiki.dovecot.org/Authentication/RestrictAccess with LDAP and "pass_filter" it is possible to filter allowed services for the user with: pass_filter = (&(objectClass=posixAccount)(uid=%u)(service=%s)) Thats pretty cool. Now, in the LDAP-settings I created corresponding fields (service) and added the allowed services to tthese fields (imap, pop3, etc.). After that change, certain services were not available to that user anymore. So it seems that more services are there and after explicitly setting the services which are allowed, the other, not mentioned services stop to work. Now two questions: Is there any documented, full-featured list of the services that can be added? Is it possible to "flip" that setting so its not allowing certain services but denying the ones that are added to the "service"-fields? Cheers

2 3

Master users
by Noriyuki TAKEI 08 Jun '17

08 Jun '17

Hi,all What version of dovecot supports master users? Master users means as follows https://wiki2.dovecot.org/Authentication/MasterUsers -- ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥ サイオステクノロジー株式会社技術部クラウドソリューショングループ武井宜行〒106-0047 東京都港区南麻布二丁目 12 番 3 号サイオスビル TEL：03-6401-5314 (直通) 03-6401-5117 (部代表) URL：http://www.sios.com/ ■SIOSの最新情報はこちらから！「いいね！」をお待ちしています■ (SIOS Technology)：http://www.facebook.com/SIOSTechnology (OSSよろず相談室)：http://www.facebook.com/OSSyorozu ■Twitter公式アカウント■ https://twitter.com/#!/SIOS_Technology ・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥

2 2

virtual isp address, local delivery
by Hugh Bragg 07 Jun '17

07 Jun '17

I'm trying to understand how to deliver mail to an address locally which is popped from my isps email account. I access and keep these emails backed up on dovecot and use postfix smtp to deliver mail. The problem is that while fetchmail uses dovecot lda directly, postfix can't include my isps domain in its $mydestination because I won't be able to send mail to other users in that domain. I want to be able to send mail to other users I'm popping for in that domain, or even send myself mail. Currently postfix just relays the mail to the isp and it returns through fetchmail, but I'd like to have it delivered locally and still be able to email my isp users that I don't pop. As far as I can tell, this can't be done because virtual users have to be in postfix $mydestination. Does someone have a better setup they can share or know how to do this? Hugh

2 3

doveadm sync SSL error when upgrading from 2.2.27 -> 2.2.29
by Pallissard, Matthew 07 Jun '17

07 Jun '17

I'm starting to see the following error from doveadm when upgrading from 2.2.27 to 2.2.29. > doveadm(ip.add.re.ss): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher I'm using a cert/key with the following curve. ASN1 OID: prime256v1 NIST CURVE: P-256 Downgrading to 2.2.27 resolves the issue. Does anyone know about this off the top of their head? If not I'll try to git-bisect 2.2.27->2.2.28 for any offending commits later on this week. -- Matt Pallissard

1 0

2.2.30.2 fails to compile on centos 7
by Matt Bryant 07 Jun '17

07 Jun '17

Just downloaded the latest release 2.2.30.2, ran ./configure with all defaults and make ... and it fails to build .. error somewhere whilst running Makefile in lib-http libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,--as-needed -o test-http-server-errors test-http-server-errors.o -Wl,--export-dynamic ./.libs/libhttp.a ../lib-dns/.libs/libdns.a ../lib-ssl-iostream/.libs/libssl_iostream.a ../lib-master/.libs/libmaster.a ../lib-settings/.libs/libsettings.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -ldl collect2: error: ld returned 1 exit status make[3]: *** [test-http-server-errors] Error 1 make[3]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src/lib-http' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/rpmbuild/rpmbuild/BUILD/dovecot-2.2.30.2' make: *** [all] Error 2 any ideas ?? 2.2.30.1 built ok ... rgds Matt

3 6

Moving from CentOS to GF RPMs
by Roger Klorese 07 Jun '17

07 Jun '17

Does anyone have fool-proof documentation for this fool on how to configure repos and what operations to perform to move from the distro RPMs to the GF ones without breaking stuff?

2 2

Re: v2.2.30.1
by Joseph Tam 07 Jun '17

07 Jun '17

Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > On 06.06.2017 14:11, Olaf Hopp wrote: >> On 06/05/2017 11:05 AM, Angel L. Mateo wrote: >>> I have updated my dovecot proxy servers from 2.2.28 to 2.2.30. >>> Since the upgrade I'm having the error: >>> >>> Jun 5 10:54:51 musio12 dovecot: auth: Fatal: master: service(auth): >>> child 63632 killed with signal 11 (core not dumped) +1. > We have identified a bug in auth process, and are working with a fix. This is the 1 line context around the same thing I am seeing, if it helps. It seems to happen with brute force scanning Jun 6 06:13:30 server dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 7 secs, pid=20675 , EOF) Jun 6 06:13:30 server dovecot: auth: Fatal: master: service(auth): child 20676 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes }) Jun 6 06:13:30 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=<{dead@account}>, method=PLAIN, rip=5.188.11.11, lip={my-ip}, TLS, session=<EpJbYkpRInsFvAsL> Bots aren't known to exit cleanly, so it's probably related to prematurely dropped connections. Apart from that, I'm not seeing this with real users. Joseph Tam <jtam.home(a)gmail.com>

1 1

Bug with 2.2.29-1~auto+25 back to haunt me
by Ralf Hildebrandt 06 Jun '17

06 Jun '17

After upgrading from 2.2.28-1~auto+45 to 2.2.29-1~auto+25 I'm gettings this: May 31 16:44:31 mproxy dovecot: auth: Fatal: passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting May 31 16:44:31 mproxy dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs May 31 16:44:31 mproxy dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=141.42.206.36, lip=141.42.206.11, TLS, session=<ze1A9dJQZ8yNKs4k> # doveconf -n # 2.2.devel (215fd61): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (403042e) # OS: Linux 4.4.0-71-generic x86_64 Ubuntu 16.04.2 LTS auth_mechanisms = plain login default_vsz_limit = 1 G imapc_host = exchange-imap.charite.de imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no listen = *,:: mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_plugins = mail_log notify mail_uid = imapproxy passdb { args = host=exchange-imap.charite.de port=993 ssl=imaps default_fields = userdb_imapc_user=%u userdb_imapc_password=%w userdb_imapc_host=exchange-imap.charite.de userdb_imapc_ssl=imaps userdb_imapc_port=993 driver = imap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap service auth { inet_listener { address = 127.0.0.1 port = 12345 } } ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_client_ca_file = /etc/ssl/certs/ca-certificates.crt ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } verbose_proctitle = yes So I added ssl_ca_file = /etc/ssl/certs/ca-certificates.crt But alas: May 31 16:50:24 mproxy dovecot: config: Warning: Obsolete setting in /etc/dovecot/conf.d/10-ssl.conf:36: ssl_ca_file has been replaced by ssl_ca = <file Gnarf! As you can see I do HAVE ssl_ca in my doveconf -n output! ssl_ca = </etc/ssl/certs/ca-certificates.crt So what gives? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

2 6

v2.2.30.2 released
by Timo Sirainen 06 Jun '17

06 Jun '17

https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.30.2.tar.gz.sig Hopefully the last 2.2.30.x.. - auth: Multiple failed authentications within short time caused crashes - push-notification: OX driver crashed at deinit

1 0

2.2.29.8: YACD (Yet Another Core Dump)
by Luciano Mannucci 06 Jun '17

06 Jun '17

I'm getting this in my logfile, should I worry?: Jun 06 12:28:47 imap(paco_mcs): Error: Next message unexpectedly corrupted in mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Error: Unexpectedly lost From-line from mbox file /var/spool/mail/paco_mcs at 639279728 Jun 06 12:28:47 imap(paco_mcs): Panic: file mbox-sync.c: line 1338 (mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2) Jun 06 12:28:47 imap(paco_mcs): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9cd16) [0xb75e7d16] -> /usr/lib/dovecot/libdovecot.so.0(+0x9cd9f) [0xb75e7d9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb757104e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x81698) [0xb76d4698] -> /usr/lib/dovecot/libdovecot-storage.so.0(mbox_sync+0x4b) [0xb76d71cb] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7728c) [0xb76ca28c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x778c6) [0xb76ca8c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_stream_because+0x5f) [0xb768112f] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x811) [0xb774bef1] -> dovecot/imap() [0x8064c76] -> dovecot/imap() [0x80629c6] -> dovecot/imap(imap_fetch_more+0x31) [0x8063ed1] -> dovecot/imap(cmd_fetch+0x4bb) [0x805574b] -> dovecot/imap(command_exec+0x4a) [0x80613aa] -> dovecot/imap() [0x805f8d6] -> dovecot/imap() [0x805f961] -> dovecot/imap(client_handle_input+0x185) [0x805fcc5] - > dovecot/imap(client_input+0x71) [0x80601b1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x67) [0xb75ff997] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xeb) [0xb76013ab] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x45) [0xb75ffa55] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb75ffc18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2d) [0xb757c1ad] -> dovecot/imap(main+0x344) [0x806dbc4] -> /lib/libc.so.6(__libc_start_main+0xfe) [0xb73d6c2e] Jun 06 12:28:48 imap(paco_mcs): Fatal: master: service(imap): child 4989 killed with signal 6 (core dumped) Jun 06 12:28:52 imap(paco_mcs): Error: Next message unexpectedly lost from mbox file /var/spool/mail/paco_mcs at 1073259120 (noncached) Jun 06 12:28:52 imap(paco_mcs): Error: Sync failed for mbox file /var/spool/mail/paco_mcs: Couldn't get body size for seq=11213 My doveconf -n: # 2.2.29.1 (e0b76e3): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.17 (e179378) # OS: Linux 3.0.101-105-pae i686 openSUSE 11.4 (i586) ext3 auth_cache_size = 3 k auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1249 default_vsz_limit = 712 M disable_plaintext_auth = no first_valid_gid = 0 first_valid_uid = 100 info_log_path = /var/log/dovecot/logfile.info listen = * log_path = /var/log/dovecot/logfile login_greeting = Dovecot at Baobab ready. login_trusted_networks = 127.0.0.0/8 212.45.144.0/24 192.168.134.0/24 mail_location = mbox:/var/spool/mailboxes/%u:INBOX=/var/spool/mail/%u:DIRNAME=mbox:INDEX=/var/dovecot_indexes/%u maildir_copy_with_hardlinks = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_lock_timeout = 443 secs namespace { inbox = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = pop3 imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imaps { address = * } process_limit = 512 } service pop3-login { chroot = executable = pop3-login -D inet_listener pop3s { address = * } process_limit = 512 } ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } version_ignore = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes } protocol lda { info_log_path = /var/log/dovecot/lda.log log_path = /var/log/dovecot/lda-errors.log postmaster_address = postmaster(a)mcs.it } Cheers, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

2 2

Multiuser attachment storage (mail_attachment_dir)
by megaone＠yandex.ru 06 Jun '17

06 Jun '17

Was trying to set up attachment storage, but folders are receiving permission only for current user, so if another user is receiving a mail with same attachment he is getting permission denied error on reading hash file. Is it possible to setup global attachment storage to work with all users, at least in domain? mail_access_groups won't help, as folders are given 0 group permission. Umask and setfacl won't help either.

2 1

Two domains - same user names filter
by Sandbox 06 Jun '17

06 Jun '17

Hi, I have two LDAP domains, which has some equal users, eg: abc(a)domain1.com abc(a)domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a user_filter which will choose the correct maildir and user/domain from the email address? My current ldap.conf for domain1: hosts = ldap.domain1.com base = ou=People,dc=domain1,dc=com ldap_version = 3 user_attrs = uid=user user_filter = (uid=%n) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 and for domain2: hosts = ldap.domain2.com base = ou=People,dc=domain2,dc=com ldap_version = 3 user_attrs = \ =mail=maildir:/home/vmail/%{ldap:departmentNumber)/%n/Maildir user_filter = (uid=%n) pass_attrs = uid=%n,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 Thanks, Robert

4 7

vnd.dovecot.pipe in sieve: what user....
by Larry Rosenman 06 Jun '17

06 Jun '17

I have a site-wide bayes database, that currently gets populated by scripts running as a user that is also the user that Exim uses to call spamd. When a script is running from the vnd.dovecot.pipe call, what user is it running as? Would a setuid script work? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 1

Re: corrupted indexes rebuilding over and over
by Joseph Tam 06 Jun '17

06 Jun '17

micah <micah(a)riseup.net> wrote: > Now, about 50 users have a problem where their indexes are > corrupted. Dovecot tries to fix them, but for some reason it is > failing. The users are seeing their mails duplicated and they cannot > delete mails. I can see in the logs dovecot detecting this and trying to > rebuild operations during delivery and imap login, but its repeating > over and over and over. For one user, I've seen more than 4k lines in > the logs about this. > > If i try to do doveadm force-resync -u username INBOX > > I get this: > > doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) I think mdbox is sensitive to index corruption. mbox/maildir indices can be rebuilt, but data loss can result if mdbox indices are corrupted: https://wiki2.dovecot.org/MailboxFormat/dbox "Grubert, Gordon" <gordon.grubert+lists(a)uni-greifswald.de> then writes: > we had the same problem after a system failure. Our problem could be > solved by > > rm /PATH/USER/mdbox/storage/dovecot.map.index* > doveadm -D -v force-resync -u USER INBOX Not sure given the above URL whether this will solve your problem of make it far worse. Better back up what you have before trying anything. Joseph Tam <jtam.home(a)gmail.com>

1 0

corrupted indexes rebuilding over and over
by micah 05 Jun '17

05 Jun '17

Hi, On saturday one of our dovecot machines had an OOPS, and we had to powercycle it. When it came up, it did a filesystem fsck (ext4) and fixed a couple things, but nothing in lost+found. Now, about 50 users have a problem where their indexes are corrupted. Dovecot tries to fix them, but for some reason it is failing. The users are seeing their mails duplicated and they cannot delete mails. I can see in the logs dovecot detecting this and trying to rebuild operations during delivery and imap login, but its repeating over and over and over. For one user, I've seen more than 4k lines in the logs about this. If i try to do doveadm force-resync -u username INBOX I get this: doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,383536) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: rebuilding indexes doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index doveadm(nuffsaid): Warning: mdbox /n/nuffsaid/mdbox/storage: Inconsistency in map index (3494,32332 != 3494,384024) doveadm(nuffsaid): Warning: fscking index file /srv/dovecot_indexes/n/nuffsaid/storage/dovecot.map.index but then if i do it again, I get the same thing, over and over and over (the numbers change a little). This is dovecot 2.2.27 with mdbox format.... what can I do to fix this? Its driving users mad, and they keep going over quota as their space fills. thanks! micah

2 2

fts_solr: uid0?
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing the following: Jun 5 11:10:52 thebighonker dovecot: imap(ler): Error: fts_solr: received invalid uid '0' Is there something I can get for you to debug? doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.1-PRERELEASE amd64 auth_debug_passwords = yes auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

SIG11/Auth/FreeBSD
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing lots of: Jun 2 00:00:05 thebighonker exim[57437]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51339 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57439]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51363 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57438]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51355 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57443]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51385 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57442]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51368 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57441]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51361 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57440]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51362 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker dovecot: auth: Fatal: master: service(auth): child 55916 killed with signal 11 (core not dumped - set s ervice auth { drop_priv_before_exec=yes }) The suggestion to drop_priv_before_exec=yes breaks auth totally. doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.0-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Possible RENAME bug
by Gabriele Bulfon 05 Jun '17

05 Jun '17

Hello, I'm having some trouble working on a webapp managing the imap tree on Dovecot. The same doesn't happen on other imap servers (e.g. Cyrus). Looks like if I receive shared folders from another user, and try to rename a folder in it, the rename command returns "ok", then if you list the new folder name, it isn't there. Looks like you've lost all the original folder because if you try listing the parent folder, you don't have nor the original nor the new name, even trying to logout/disconnect and reconnect/login. Luckily nothing is lost actually, if you try to create a new folder on the parent folder, and then list the parent folder, you get both the newly created one and the renamed one also appears magically! Here is the IMAP trace to reproduce: *** ON ACCOUN RECEIVING SHARED FOLDER *** PREPARE A FOLDER IN SHARED TREE WITH JUST ONE CHILD "aaaa" *** THEN RENAME aaaa FOLDER TO bbbb *** AFTER "OK Rename" FOLDER IS NOT PRESENT IN LIST A3 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa A3 OK List completed. A4 RENAME Shared/gabriele.prova(a)sonicle.com/Junk/aaaa Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A4 OK Rename completed. A5 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A5 OK List completed. *** bbbb IS NOT LISTED AFTER "OK Rename"! *** LOGOUT/DISCONNECT - CONNECT/LOGIN AND LIST BRANCH *** A66 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A66 OK List completed. *** Junk HAS NO CHILDREN! *** CREATE A NEW FOLDER IN Junk *** A68 CREATE Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A68 OK Create completed. A69 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A69 OK List completed. *** "zzzz" IS LISTED, SO NOW LIST PARENT BRANCH *** A26 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A26 OK List completed. *** Junk NOW HAS CHILDREN, SO NOW LIST Junk BRANCH *** A29 LIST "" "Shared/gabriele.prova(a)sonicle.com/Junk/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A29 OK List completed. *** bbbb MAGICALLY APPEARS! NOTHING IS LOST. Is there anything I can do to force "bbbb" to reappear without having to create a new folder? Any idea? Thanks in advance, Gabriele ---------------------------------------------------------------------------------------- Sonicle S.r.l. : http://www.sonicle.com Music: http://www.gabrielebulfon.com Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon

2 2

Problem with LMTP
by Angel L. Mateo 05 Jun '17

05 Jun '17

Hello, I'm having a problem with LMTP in a proxy server since I upgraded from 2.1.16 to 2.2.28. In my logs I have: Apr 26 12:54:17 musio12 dovecot: lmtp(2082): Fatal: master: service(lmtp): child 2082 killed with signal 11 (core dumped). As far as I could check the message is delivered in a later connection. I have enabled core dumped files, but how could I debug it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 11

Retrieving mail from read-only mdbox
by Mark Moseley 05 Jun '17

05 Jun '17

This is a 'has anyone run into this and solved it' post. And yes, I've been reading and re-reading TFM but without luck. The background is that I'm working on tooling before we start a mass maildir->mdbox conversion. One of those tools is recovering mail from backups (easy as pie with maildir). We've got all of our email on Netapp file servers. They have nice snapshotting but the snapshots are, of course, readonly. My question: is there a doveadm command that will allow for email to be retrieved from a readonly mdbox, either directly (like manipulating the mdbox files directly) or by doveadm talking to the dovecot processes? Ideally, there'd be something like doveadm dump, but that could dump selected message contents. I've tried using IMAP with mail_location pointed at the snapshot, but, though I can get a listing of emails in the mailbox, the fetch fails when dovecot can't write-lock dovecot.index.log. If anyone has gotten something similar to work, I'd love to hear about it. A working IMAP setup would be the ideal, since it's more easily automatible (but I'll take whatever I can get). Any and all hints are most welcome!

4 4

10-ssl.conf: Unknown setting: ssl / debian 1:2.2.13-12~deb8u
by Sophie Loewenthal 05 Jun '17

05 Jun '17

Hi, I've been trying to get dovecot2 running and kept having this error message: May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email server. May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl # dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL driver plugins: mysql postgresql sqlite Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql # openssl version OpenSSL 1.0.1t 3 May 2016 This package is from from Debian repos with version number 1:2.2.13-12~deb8u amd64 In case I had inadvertently entered some invisible charaters in 10-ssl.conf, I deleted and typed this out. Not copy-pasted: # >10-ssl.conf # cat 10-ssl.conf # echo 'ssl = required' >10-ssl.conf # echo 'ssl_key = </etc/ssl/private/xxx.key' >>10-ssl.conf # echo 'ssl_cert = </etc/ssl/private/xxx.pem' >>10-ssl.conf I’ve done usual searching online for a week and read some dox, but cannot see what I’ve missed out. Any ideas? Please? Thanks, Sophie

4 14

quota clone + mysql + duplicate key
by Dimos Alevizos 05 Jun '17

05 Jun '17

I'm trying to setup quota clone with mysql on dovecot 2.2.29.1. I see in the wiki that the table is always updated to the new value (https://wiki.dovecot.org/Plugins/QuotaClone) : > Every time quota is updated, the value is updated to the cloned dict. > There are race conditions with it so the quota may not always be 100% > correct. The old value is always replaced with the new one though (not > just incremented/decremented) so the cloned quota is never too much wrong. But the queries I see don't agree : 1186029 Query BEGIN 1186029 Query INSERT INTO quota (bytes,messages,username) VALUES (25002030,226,'user(a)domain.tld') ON DUPLICATE KEY UPDATE bytes=bytes+25002030,messages=messages+226 1186029 Query COMMIT Is it a bug or am I missing something in my configuration ? The relevant part of the config : dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } plugin { quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Quota for this mail account has been exceeded, please try again later. quota_grace = 1M quota_vsizes = yes } map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } Dimos

1 0

Panic: file dsync-brain-mailbox.c: line 814 ...
by Sander Lepik 04 Jun '17

04 Jun '17

Hi! We have 2 servers replicating each other and after upgrade to 2.2.26.0 we are seeing this in the logs: Primary server: Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Panic: file dsync-brain-mailbox.c: line 814 (dsync_brain_slave_recv_mailbox): assertion failed: (memcmp(dsync_box->mailbox_guid, local_dsync_box.mailbox_guid, sizeof(dsync_box->mailbox_guid)) == 0) Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9438e) [0x7f3ccceb238e] -> /usr/lib/dovecot/libdovecot.so.0(+0x9447c) [0x7f3ccceb247c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3ccce4ba4e] -> dovecot/doveadm-server(dsync_brain_slave_recv_mailbox+0x3d8) [0x7f3ccd8f66f8] -> dovecot/doveadm-server(dsync_brain_run+0x650) [0x7f3ccd8f4110] -> dovecot/doveadm-server(+0x4143b) [0x7f3ccd8f443b] -> dovecot/doveadm-server(+0x5735f) [0x7f3ccd90a35f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> dovecot/doveadm-server(+0x26b99) [0x7f3ccd8d9b99] -> dovecot/doveadm-server(+0x28efc) [0x7f3ccd8dbefc] -> dovecot/doveadm-server(+0x3daba) [0x7f3ccd8f0aba] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3ccce51f53] -> dovecot/doveadm-server(main+0x19f) [0x7f3ccd8ccdef] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3ccca94b45] -> dovecot/doveadm-server(+0x19ea6) [0x7f3ccd8ccea6] Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Fatal: master: service(doveadm): child 42621 killed with signal 6 (core dumps disabled) Secondary server: Nov 17 09:37:40 secondarymailhost01 dovecot: dsync-local(user(a)domain.ee): Error: read(mailhost01.domeen.ee) failed: EOF (last sent=mailbox, last recv=mailbox_state) I'm guessing that it happens during automatic full resync, but that's just guessing. OS is Debian 8 (x86_64) and Dovecot is recompiled from Debian's unstable repository. -- Sander

2 2

ACL File
by Bobber 02 Jun '17

02 Jun '17

I'm getting inconsistent behavior from my acl file. I have an acl vfile configured with this: > Jobs$* anyone lrwikst > $* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > $* user=michael.user(a)edm-inc.com lrwstipekxa > Jobs$* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > Jobs$* user=michael.user(a)edm-inc.com lrwstipekxa The Jobs folder is a public shared folder. I want just the two users to be able to have complete control of anything in the shared Jobs folder. Currently, user bob is able to move folders to sub folders but user michael is sometimes able to move folders but mostly not. I am using Thunderbird as the mail client. Sometimes I can restart Thunderbird and it will allow one operation but subsequent operations error out with Thunderbird saying the user does not have permissions. Here's my doveconf -n: > # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 3.16.0-0.bpo.4-amd64 x86_64 Debian 7.11 > auth_cache_size = 8 k > auth_debug = yes > first_valid_gid = 89 > first_valid_uid = 89 > last_valid_gid = 89 > last_valid_uid = 89 > listen = * > log_path = /dev/stderr > login_greeting = IMAP service for edm-inc.com clients. > mail_location = maildir:~/Maildir > mail_plugins = " listescape acl" > namespace { > inbox = yes > location = > prefix = > separator = $ > type = private > } > namespace { > location = maildir:/home/vpopmail/domains/edm-inc.com/public > prefix = Jobs$ > separator = $ > subscriptions = no > type = public > } > passdb { > args = cache_key=%u%s > driver = vpopmail > } > plugin { > acl = vfile:/usr/local/etc/dovecot/acls:cache_secs=300 > } > protocols = imap > service auth { > user = root > vsz_limit = 64 M > } > service imap-login { > process_limit = 150 > service_count = 1 > } > ssl_cert = </etc/ssl/certs/mail_edm-inc_com.pem > ssl_key = # hidden, use -P to show it > userdb { > driver = vpopmail > } > userdb { > driver = vpopmail > } > protocol imap { > mail_plugins = " listescape acl imap_acl" > } -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

1 0

updated to dove 2.30.1 and still the same error ....
by dovecot＠jeffandjessi.com 02 Jun '17

02 Jun '17

Well.. updated to 2.30.1 hoping it would fix this mysterious seg fault ... ,but nope ... auth: Fatal: master: service(auth): child 14502 killed with signal 11 (core dumped) the core dump shows gdb) bt #0 0x00007f7ff4a06bee in ?? () #1 0x00007f7ff74a4f44 in io_loop_handle_remove () from /usr/local/lib/dovecot/libdovecot.so.0 #2 0x00007f7ff74a3765 in io_remove_full () from /usr/local/lib/dovecot/libdovecot.so.0 #3 0x00007f7ff7438b62 in master_service_deinit () from /usr/local/lib/dovecot/libdovecot.so.0 #4 0x00000000004307ef in main () no symbols are available as this is a pkg install.... so whats next? time to dump dovecot after running it for 10 years? Can't believe no one else is seeing this .... the symtoms are dovecot starts up fine when a client connects, they authorize just fine and download email .... about a minute later the auth process crashes and the entire process starts over .... so how do you trouble shoot this ... it sounds like a coding issue some place .... anyone ?

2 1

Problem with dsync backup
by Sergio Belkin 02 Jun '17

02 Jun '17

Hi folks, Firstly, the first: dovecot --version 2.2.10 dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.16.1.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) auth_debug = yes auth_krb5_keytab = /var/lib/dovecot/krb5.keytab auth_master_user_separator = * auth_mechanisms = plain login gssapi auth_verbose = yes debug_log_path = /dev/null default_process_limit = 400 disable_plaintext_auth = no first_valid_uid = 988 imapc_features = rfc822.size fetch-headers imapc_host = mail.example-aid.com imapc_master_user = osstand imapc_password = secret imapc_ssl = starttls imapc_ssl_verify = no imapc_user = %u import_environment = TZ KRB5CCNAME last_valid_uid = 988 lmtp_save_to_detail_mailbox = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = " acl listescape fts fts_lucene" mail_prefetch_count = 20 mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags mbox_write_locks = fcntl namespace PUBLIC { list = children location = maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public } namespace ROOT { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace SHARED_USERS { disabled = no list = children location = maildir:/var/lib/nethserver/vmail/%%u/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = Shared/%%n(a)example.local/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = dovecot-master driver = pam master = yes } passdb { args = /etc/dovecot/deny.passwd deny = yes driver = passwd-file } passdb { args = max_requests=100 failure_show_msg=yes blocking=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/nethserver/vmail/shared-mailboxes.db antispam_backend = MAILTRAIN antispam_mail_notspam = ham antispam_mail_sendmail = /usr/libexec/nethserver/spam-training.sh antispam_mail_sendmail_args = %u antispam_mail_spam = spam antispam_spam = Junk antispam_trash = Trash fts = lucene fts_lucene = whitespace_chars=@. sieve_after = /var/lib/nethserver/sieve-scripts/after.sieve sieve_before = /var/lib/nethserver/sieve-scripts/before.sieve sieve_extensions = +imapflags } protocols = imap lmtp sieve pop3 service anvil { client_limit = 1603 } service auth { client_limit = 2000 unix_listener /var/spool/postfix/private/smtpauth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } unix_listener imap-ipc { group = root mode = 0600 user = $default_internal_user } } service imap-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service imap { executable = imap imap-postlogin } service lmtp { client_limit = 1 unix_listener lmtp { group = vmail mode = 0660 user = vmail } user = vmail } service managesieve { executable = managesieve sieve-postlogin } service pop3-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin } service sieve-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%Ln /etc/dovecot/imap.passwd driver = passwd-file override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%Ln } userdb { driver = passwd override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%u skip = found } protocol imap { mail_max_userip_connections = 12 mail_plugins = " acl listescape fts fts_lucene imap_acl antispam" } protocol lmtp { mail_plugins = " acl listescape fts fts_lucene sieve" } When I try to import a mailbox from an Exchange server, this is the output: time dsync -D -v backup -R -u sergio.zuniga(a)example.local imapc: |& tee /tmp/errors2 doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_listescape_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_lucene_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, index=, indexpvt=, control=, inbox=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 1 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace SHARED_USERS: type=shared, prefix=Shared/%n(a)example.local/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/%u/Maildir:INDEXPVT=~/Maildir/shared/%u doveadm(sergio.zuniga(a)example.local): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: fts: Indexes disabled for namespace 'Shared/%n(a)example.local/' doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace PUBLIC: type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/vmail/Maildir, index=, indexpvt=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/public, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/.Sent/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: Namespace : Using permissions from /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir: mode=0700 gid=default dsync(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Looking up IP address dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Connecting to 192.168.50.1:143 dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Starting SSL handshake dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): SSL handshake successful, ignoring invalid certificate: SSL certificate not received dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 AUTH=GSSAPI AUTH=PLAIN IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Authenticating as neth.stand for user sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Error: imapc(mail.example.com:143): Authentication failed: AUTHENTICATE failed. dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Disconnected dsync(sergio.zuniga(a)example.local): Error: imapc: Command failed: Disconnected from server dsync(sergio.zuniga(a)example.local): Error: user sergio.zuniga(a)example.local: Initialization failed: Namespace '': Mailbox list driver imapc: Failed to access imapc backend Also, mailllog has a lot of lines as of: dovecot: auth: passwd-file(john.doe(a)infoestructura.local,127.0.0.1,<qRwxrulQ/gB/AAAB>): unknown user Please could you help to know where is the error? Thanks in advance!! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 1

Re: Retrieving mail from read-only mdbox
by Joseph Tam 01 Jun '17

01 Jun '17

> I've tried using IMAP with mail_location pointed at the snapshot, but, > though I can get a listing of emails in the mailbox, the fetch fails when > dovecot can't write-lock dovecot.index.log. I've thought about doing this someday (adding snapshots to a user's namespace) but never got around to doing it. Snapshots get rotated (e.g. hourly.1 -> hourly.2 -> etc.) so every hour, so any indices produced gets invalidated. You would need to generate MEMORY indices to create it on the fly. Something like namespace snapshots { location = ...:INDEX==MEMORY ... } I'm not sure how dovecot would react when NetApp pulls the rug out from under one of the hourly snapshots and replace it with the next hour's version. Joseph Tam <jtam.home(a)gmail.com>

3 2

SSL problem - no banner
by Marcio Merlone 01 Jun '17

01 Jun '17

Hi, I am running dovecot 2.2.22-1ubuntu2.4 on a ubuntu 16.04 server. It has a valid Letsencrypt certificate but the problem also happens with a self-digned one. Only openssl s_client -connect localhost:993 works fine and fast, while all MUA's and telnet does not. Telnet timeouts waiting for banner after a minute or so: root@netuno:~# openssl s_client -connect localhost:993 CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 (...) Start Time: 1496081321 Timeout : 300 (sec) Verify return code: 0 (ok) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 0 logout * BYE Logging out 0 OK Logout completed. closed root@netuno:~# telnet localhost 993 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. (about 1 minute later...) Connection closed by foreign host. root@netuno:~# I Have enabled verbose_ssl = yes and mail_debug = yes but no useful info got to logs. Has anyone seen this? Any hint? Thanks, best regards. -- *Marcio Merlone*

3 3

Two domains, same users
by Sandbox 01 Jun '17

01 Jun '17

Hi, I have two LDAP domains, which has some equal users, eg: abc(a)domain1.com abc(a)domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a user_filter which will choose the correct maildir and user/domain from the email address? My current ldap.conf for domain1: hosts = ldap.domain1.com base = ou=People,dc=domain1,dc=com ldap_version = 3 user_attrs = uid=user user_filter = (uid=%n) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 and for domain2: hosts = ldap.domain2.com base = ou=People,dc=domain2,dc=com ldap_version = 3 user_attrs = \ =mail=maildir:/home/vmail/%{ldap:departmentNumber)/%n/Maildir user_filter = (uid=%n) pass_attrs = uid=%n,userPassword=password pass_filter = (uid=%n) default_pass_scheme = MD5 Thanks, Robert

1 0

Re: v2.2.30 released
by Joseph Tam 01 Jun '17

01 Jun '17

Timo wrote: >> (Lots of this ...) >> May 26 15:22:50 server dovecot: pop3(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 43 seconds (rotating while syncing) >> May 27 16:57:18 server dovecot: imap(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 105 seconds (Mailbox was synchronized) > > Not really an error, just bad performance. Probably happens when a user is doing I/O on their large INBOX's via NFS, and bogging down. Thanks for explaining this. Joseph Tam <jtam.home(a)gmail.com>

1 0

sieve folders in maildir with imap: not a directory not fixed with maildir_stat_dirs = yes
by David Gessel 01 Jun '17

01 Jun '17

As my logs fill up with "imap(user(a)domain.com): Error: stat(/mail/doman.com/user//.dovecot.sieve/tmp) failed: Not a directory" errors, I followed the advice at https://wiki2.dovecot.org/VirtualUsers/Home and https://dovecot.org/list/dovecot/2016-June/104403.html and set in /usr/local/etc/dovecot/conf.d/10-mail.conf # By default LIST command returns all entries in maildir beginning with a dot. # Enabling this option makes Dovecot return only entries which are directories. # This is done by stat()ing each entry, so it causes more disk I/O. # (For systems setting struct dirent->d_type, this check is free and it's # done always regardless of this setting) maildir_stat_dirs = yes My mailbox format reads "mail_location = maildir:~:CONTROL=/var/no-quota/%u:INDEX=MEMORY" The error is factually correct, but there is not .dovecot.sieve/tmp directory or file as .dovecot.sieve is a file (the head sieve script that calls the subordinate scripts out of the /sieve directory. There is a tmp directory at /sieve/tmp/ drwxr----- 2 vmail vmail 2B May 31 04:14 tmp Any hints as to why this isn't working? It does seem like the right answer.

2 2

Re: v2.2.30.1 released
by Eric Broch 01 Jun '17

01 Jun '17

Built on CentOS 7 without a hitch. On 5/31/2017 7:24 AM, Timo Sirainen wrote: > https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz > https://dovecot.org/releases/2.2/dovecot-2.2.30.1.tar.gz.sig > > Due to some release process changes I didn't notice that one important bugfix wasn't included in the v2.2.30 release branch before I made the release. So fixing it here with v2.2.30.1. Also included another less important fix. > > - quota_warning scripts weren't working in v2.2.30 > - vpopmail still wasn't compiling > > Also I guess should mention that in v2.2.30+ the "script" service's protocol changed to a new version. If anyone had written their own script services (not using the included "script" binary) they would need some changes. I haven't heard of anyone having done that though. -- Eric Broch White Horse Technical Consulting (WHTC)

1 0

Re: v2.2.30 released
by Joseph Tam 31 May '17

31 May '17

Timo wrote: >>> + If dovecot.index.cache corruption is detected, reset only the one >>> corrupted mail instead of the whole file. >> >> Is this a big performance win? I still have users with jumbo mailboxes >> who insist on direct mailbox file access using procmail or mail readers, >> which trigger index rebuilds when dovecot accesses them. > > What does Dovecot log then? But probably doesn't affect that. It's > only when Dovecot logs something about dovecot.index.cache corruption > that this helps. It logs stuff like this (Lots of this ...) May 26 15:22:50 server dovecot: pop3(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 43 seconds (rotating while syncing) May 27 16:57:18 server dovecot: imap(user): Warning: Transaction log file /{cachedir}/dovecot.index.log was locked for 105 seconds (Mailbox was synchronized) (... and some this this ...) May 26 15:43:07 server dovecot: imap(user): Error: Next message unexpectedly corrupted in mbox file /var/mail/user at 9627641 (... but very rarely this ...) May 8 17:05:59 server dovecot: imap(user): Error: Corrupted index cache file /{cachedir}/dovecot.index.cache: Broken virtual size for mail UID 12032 in mailbox INBOX: read(/var/mail/user): FETCH BODY[] got too little data: 6199 vs 6201 >From what you say, the changes would only affects the latter, so no big change. Thanks for the info. Joseph Tam <jtam.home(a)gmail.com>

2 1

shared folder and private index file problems
by Thomas Robers 31 May '17

31 May '17

Hello, I'm using Dovecot 2.2.30 with Pideonhole 0.4.18 and I'm having some problems, perhaps someone can give an hint on how to solve them. When I try to create a folder in the toplevel directory of a shared mailbox, i get a "permission denied" although I have the rights, example: 1.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com Rights lookup read write write-seen write-deleted insert post expunge create delete admin 2.doveadm mailbox create -u bob(a)example.com "shared/bill(a)example.com" doveadm(bob(a)example.com): Error: Can't create mailbox shared/bill(a)example.com: Permission denied Creating an subfolder of a folder which already exists works fine: 1.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com /Drafts Rights lookup read write write-seen write-deleted insert post expunge create delete admin 2.doveadm mailbox create -u bob(a)example.com "shared/bill(a)example.com /Drafts/Test" (no output) 3.doveadm -f table acl rights -u bob(a)example.com shared/bill(a)example.com /Drafts/Test Rights lookup read write write-seen write-deleted insert post expunge create delete So this works, but creating a folder directly in the inbox of the shared mailbox doesn't work and I don't know why. Is this not supported? Or do I miss something important? Another problem I have is, that the private index files in shared folders are often to always marked as inconsistent in the dovecot log file, an example of such log messages look like: - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Templates/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Templates/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Trash/dovecot.index.pvt view is inconsistent - imap(bob(a)example.com): Error: /export/home/imap/bob(a)example.com/shared /bill(a)example.com/.Trash/dovecot.index.pvt view is inconsistent And this is logged for almost every user who has access to a shared mailbox and I don't know how to stop getting the indexes inconsistent. Here's my Dovecot configuration: # 2.2.30 (8acbc67): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: Linux 2.6.32-642.4.2.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl zlib mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 process_min_avail = 20 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl zlib mail_log notify imap_zlib imap_acl } Any help is appreciated. Many Thanks & best regards Thomas

1 0

Still trouble with vpopmail
by Bobber 31 May '17

31 May '17

Getting this error: > In file included from ../../src/lib/lib.h:6:0, > from auth-common.h:4, > from userdb-vpopmail.c:5: > ../../config.h:791:0: note: this is the location of the previous > definition > #define VERSION "2.2.30" > ^ > userdb-vpopmail.c: In function ‘userdb_vpopmail_get_quota’: > userdb-vpopmail.c:72:6: error: too many arguments to function ‘var_expand’ > if (var_expand(quota, template, tab, error_r) < 0) > ^ > In file included from auth-request.h:5:0, > from userdb.h:89, > from userdb-vpopmail.c:6: > ../../src/lib/var-expand.h:18:6: note: declared here > void var_expand(string_t *dest, const char *str, > ^ > userdb-vpopmail.c:72:2: error: void value not ignored as it ought to be > if (var_expand(quota, template, tab, error_r) < 0) -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

3 3

Re: v2.2.30 released
by Joseph Tam 31 May '17

31 May '17

Timo Sirainen announced > + If dovecot.index.cache corruption is detected, reset only the one > corrupted mail instead of the whole file. Is this a big performance win? I still have users with jumbo mailboxes who insist on direct mailbox file access using procmail or mail readers, which trigger index rebuilds when dovecot accesses them. Joseph Tam <jtam.home(a)gmail.com>

2 1

mailserver.users does not exist
by Amaechi Janneh 31 May '17

31 May '17

Hello. It appears that I have an issue with my dovecot setup. When trying to authenticate, i get this error: May 28 20:18:26 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10879, TLS, ses...QOQBg9rlR> May 28 20:18:42 AmaechiJ dovecot[10516]: imap(aj(a)example.com): Connection closed in=116 out=1311 May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Warning: mysql: Query failed, retrying: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: auth-worker(10892): Error: sql( aj(a)example.com,) User query failed: Table 'mailserver.users' doesn't exist May 28 20:20:32 AmaechiJ dovecot[10516]: imap-login: Login: user=< aj(a)example.com>, method=PLAIN, rip=, lip=, mpid=10894, TLS, ses...QZwBg9rlR> But I already have the users data under virtual_users. So what should I do? Regards, Amaechi Janneh

2 1

Re: SSL problem - no banner
by Joseph Tam 30 May '17

30 May '17

Marcio Merlone <marcio.merlone(a)a1.ind.br> writes: > Only openssl s_client -connect localhost:993 works fine and fast, while > all MUA's and telnet does not. Telnet timeouts waiting for banner after > a minute or so: > > root@netuno:~# openssl s_client -connect localhost:993 > ... > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE > IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. > ... > root@netuno:~# telnet localhost 993 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > (about 1 minute later...) > Connection closed by foreign host. You misundertand how SSL (or TLS) vs STARTTLS works. SSL/TLS (on port 993) starts negotiating a secure session protocol right after connection, which involves binary exchange of data, certificates, etc.. This is what "openssl s_client ..." does, but telnet does not. Only after the SSL handshake completes will you get banners, etc. STARTTLS starts out as a unencrypted session and thus, you'll get the initial banner. The client is then expected to initiate a secure session by issuing a STARTTLS directive, whereupon client and server starts the secure session negotiation like above. To test this, you would use openssl s_client -starttls imap -connect localhost:143 So telnet doesn't work because it does not do SSL. Your MUA don't work because of the same misunderstanding, or there's some network issue at play. You need to align your clients to use the security protocol you've enabled. Joseph Tam <jtam.home(a)gmail.com>

1 0

Fatal error with IMAP MOVE from a shared mailbox to Trash folder
by Daniele Barresi 30 May '17

30 May '17

Hello everyone. I have a problem using Dovecot 2.2.26 with ACL plugin and deleting e-mails from a shared mailbox. My user doesn't have the "expunge" permission on the shared mailbox, but it has the "write-deleted" permission. So, when I delete a message from the shared mailbox using a client that implements the IMAP MOVE command, it tries to move the message to my Trash folder. Then the server closes the connection to the client (process aborted) and I get three lines in the log file with a backtrace and "Fatal" error. In this case the message doesn't get copied or moved from the shared folder and the client complaints. I found the same thing happens whenever I try to move anything between folders of the shared mailbox itself, while logged in with my user. I can move messages inside my own mailbox just fine. If I try the same operation from a client that uses the IMAP COPY + DELETE commands, no errors are logged and the outcome is as expected: the message gets copied from the shared folder to my Trash and gets the flag "\Deleted" set on the shared folder. My setup is as follows: Dovecot: 2.2.26.0 OS: Ubuntu 16.04.1 LTS CPU architecture: x86_64 Filesystem: ext4 The relevant lines from mail.err log: Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Panic: file mail-storage.c: line 2143 (mailbox_save_context_reset): assertion failed: (ctx->copying_via_save) Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9438e) [0x7fbcd478538e] -> /usr/lib/dovecot/libdovecot.so.0(+0x9447c) [0x7fbcd478547c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fbcd471ea4e] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x41b78) [0x7fbcd4a50b78] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_cancel+0x73) [0x7fbcd4a53d73] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xe142) [0x7fbcd3f1d142] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x4516d) [0x7fbcd4a5416d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x23) [0x7fbcd4a54333] -> dovecot/imap(+0xf9c5) [0x557cf98629c5] -> dovecot/imap(command_exec+0xa6) [0x557cf986f196] -> dovecot/imap(+0x1a4c2) [0x557cf986d4c2] -> dovecot/imap(+0x1a550) [0x557cf986d550] -> dovecot/imap(client_handle_input+0x195) [0x557cf986d915] -> dovecot/imap(client_input+0x85) [0x557cf986de25] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fbcd4799bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7fbcd479b09a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7fbcd4799c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fbcd4799e08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fbcd4724f53] -> dovecot/imap(main+0x322) [0x557cf9860ca2] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7fbcd4348830] -> dovecot/imap(+0xde1f) [0x557cf9860e1f] Dec 27 15:21:18 dovecot dovecot: imap(danielebarresi): Fatal: master: service(imap): child 6907 killed with signal 6 (core dumped) Dovecot configuration (doveadm -n): # 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.4.0-57-generic x86_64 Ubuntu 16.04.1 LTS auth_cache_negative_ttl = 10 mins auth_cache_size = 2 M auth_master_user_separator = * auth_mechanisms = plain login first_valid_uid = 12 last_valid_uid = 12 mail_location = maildir:~/Maildir mail_plugins = acl quota notify mail_log stats lazy_expunge managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace casellecondivise { list = children location = maildir:%%h/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = Caselle condivise/%%u/ separator = / subscriptions = no type = shared } namespace expunged { hidden = yes list = no location = maildir:/var/expunged/%n/Expunged prefix = EXPUNGED/ separator = / } namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/etc/dovecot/shared/shared-mailboxes lazy_expunge = EXPUNGED/ lazy_expunge_only_last_instance = yes mail_log_events = delete copy flag_change save undelete expunge mail_log_fields = uid box msgid size quota = maildir:user quota quota_exceeded_message = (Quota exceeded) La casella di posta elettronica del destinatario è piena. quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=100%% quota-warning 100 %u sieve = file:~/sieve;active=~/.dovecot.sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 32 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0666 user = postfix } unix_listener auth-userdb { group = mail user = mail } } service dict { unix_listener dict { group = mail mode = 0600 user = mail } } service imap-login { process_limit = 300 process_min_avail = 2 } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { group = mail user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl = required ssl_cert = </etc/ssl/certs/pac.apg23.org.pem ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=mail gid=mail home=/var/mail/%u master_user=%u driver = sql } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = uid=mail gid=mail home=/var/mail/%u master_user=%u driver = ldap } protocol lda { mail_plugins = acl quota notify mail_log stats lazy_expunge sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = acl quota notify mail_log stats lazy_expunge imap_quota imap_stats } I tested this with different users with the same result. I tested and reproduced the error with Thunderbird and Roundcube. The Apple Mail client uses IMAP COPY + DELETE, instead of IMAP MOVE, and no errors are reported. So I think it's related to the IMAP MOVE implementation on Dovecot server. Has anyone seen the same error? Any suggestions? Is this a Dovecot bug? --- Daniele Barresi

3 4

virtual folder: how to store in mysql?
by dovecot＠avv.solutions 30 May '17

30 May '17

Hello Community, Now that virtual folders seem to work fine, I stil lhave 2 questions : 1° Is it possible to store the virtual folder definition (aka content of Folder/dovecot-virtual) in mysql? 2° I have duplicates in my "Unseen", which both correctly disappear once handled one of them Example: !Inbox * -Inbox (tried this but does not succeed -Trash -Trash/* Public/* Unseen 2°bis :) I tried to put the "common defs" in a shared folder (/etc/dovecot/virtual) using personal index location = virtual:/etc/dovecot/virtual:INDEX=/sd/MAIL_IMAP_POP/%d/%n/__Virtual/ This does not work, I have to *copy* (even symlinks do not succeed) the definitions and use location = virtual:/sd/MAIL_IMAP_POP/%d/%n/__Virtual:INDEX=/sd/MAIL_IMAP_POP/%d/%n/__Virtual/ I already tried to set perms on /etc/dovecot/virtual to: vmail.vmail rw(x)------ Thank you! Cheers

1 0

Question about how to serve many imap users on some mailbox.
by Oleksandr Lystopad 30 May '17

30 May '17

Hi, dear dovecot users! I am running 2.2.29.1 (e0b76e3) on FreeBSD. In my case, one mailbox info(a)example.com is shared between 5-10 managers. Sometimes they complains that no new messages displayed in folder message count list in brackets (bold number if new messages exists), but when they click on the imap folder (for example Inbox) they could see many new mails. There not only Inbox folder, they have 10-30 folders with quite big flow of new messages. Almost all users are using Microsoft Outlook MUA. Please, help me to solve the issue. My config could be found bellow (dovecot -n): auth_failure_delay = 12 secs auth_mechanisms = login cram-md5 plain auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 26 first_valid_uid = 26 lda_mailbox_autocreate = yes listen = * login_greeting = imap/pop mailserver ready mail_location = maildir:~/Maildir mail_max_userip_connections = 50 mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocols = pop3 imap sieve service auth { unix_listener auth-client { group = mailnull mode = 0600 user = mailnull } unix_listener auth-login { group = mailnull mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mailnull mode = 0600 user = mailnull } unix_listener auth-userdb { group = mailnull mode = 0600 user = mailnull } user = root } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } service imap { process_limit = 512 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } service pop3 { process_limit = 512 } ssl_cert = </usr/local/etc/SSL/my.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol lda { mail_plugins = sieve }

2 1