- dovecot - dovecot.org

Still muddling through with broken auth...
by Jason Pruim 03 Apr '16

03 Apr '16

Hey Everyone, I’m still muddling through my first install… Followed the tutorials on workaround.org <http://workaround.org/> which were very helpful! but don’t include much info if things don’t work 100%… and so far I haven’t been able to pin down where the error is. When I try: telnet localhost 143 this is what shows up in the maillot: Apr 2 21:06:57 ip-172-31-24-2 dovecot: auth: Fatal: Unknown database driver 'sql' Apr 2 21:06:57 ip-172-31-24-2 dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Apr 2 21:06:57 ip-172-31-24-2 dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<+lw34IYvVgB/AAAB> With the failed driver for the database, I tried mysql and sql both of which produce the same error… I have a few other issues but I think those are related farther upstream… Not being able to sign into round cube for webmail, because of it being unable to connect to the storage container… But I think that’s a round cube issue… I want to get postfix and dovecot playing nicely before I worry too much about things like webmail access… Here is my postconf -n: [ec2-user@ip-172-31-24-2 dovecot]$ postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no inet_interfaces = localhost inet_protocols = all mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop unknown_local_recipient_reject_code = 550 virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_users virtual_transport = dovecot [ec2-user@ip-172-31-24-2 dovecot]$ What else can I provide? Thanks! Jason Pruim pruimj(a)gmail.com 352.234.3175

3 11

Dovecot with LDAP/AD has problem with uid/gid
by Luca Bertoncello 02 Apr '16

02 Apr '16

Hi list! I have a Server connected to an AD and I need to configure Dovecot to authenticate the users against the AD (with password and GSSAPI). Now I'm trying to connect Dovecot to the AD with password. The authentication works, but I always got this error: Apr 2 13:03:49 mail dovecot: pop3-login: Login: user=<lucabert>, method=PLAIN, rip=192.168.50.1, lip=192.168.50.3, mpid=3508, session=<ZWJDc34vDgDAqDIB> Apr 2 13:03:49 mail dovecot: pop3(lucabert): Error: stat(/var/spool/mail/lucabert/tmp) failed: Permission denied (euid=10001(lucabert) egid=10000(domain users) missing +x perm: /var/spool/mail/lucabert, dir owned by 1005:8 mode=0700) Apr 2 13:03:49 mail dovecot: pop3(lucabert): Error: Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2016-04-02 13:03:49] My configuration: # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-83-generic x86_64 Ubuntu 14.04.4 LTS nfs auth_gssapi_hostname = mail.cch.intra auth_mechanisms = plain login cram-md5 gssapi auth_use_winbind = yes auth_username_chars = disable_plaintext_auth = no login_greeting = mail.cch.intra ready. mail_fsync = always mail_gid = 8 mail_location = maildir:/var/spool/mail/%Ln mail_nfs_index = yes mail_uid = 1005 mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap override_fields = uid=1005 gid=8 euid=1005 } userdb { args = uid=1005 gid=8 home=/var/spool/mail/%n allow_all_users=yes driver = passwd-file override_fields = uid=1005 gid=8 euid=1005 } auth-ldap.conf.ext: passdb { driver = ldap # Path for LDAP configuration file, see example-config/dovecot-ldap.conf.ext args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext # Default fields can be used to specify defaults that LDAP may override #default_fields = home=/home/virtual/%u override_fields = uid=1005 gid=8 euid=1005 } and in my /etc/dovecot/dovecot-ldap.conf.ext I have: user_attrs = \ =uid=1005, \ =gid=8, \ =quota_rule=*:bytes=%{ldap:quotaBytes}, \ =home=/var/spool/mail/%{ldap:sAMAccountName}, \ =mail=maildir:/var/spool/mail/%{ldap:sAMAccountName}/Maildir But it seems that all these settings for uid/gid will be ignored/overwritten... Of course the Mailboxes have user 1005 and group 8. Can someone help me? Thanks Luca Bertoncello (lucabert(a)lucabert.de)

1 1

Save UID & metadata of mail in mysql table
by use experience 02 Apr '16

02 Apr '16

Team, I would like to save UID and metadata of mail in mysql table. I am trying to achieve this using dovecot plugin mail-filter. Also would like to do in the process of mail store (using Dovecot LDA). How can I get UID & metadata through script.

2 3

SIS deduplication fails to create intermediate directories and funny permissions
by Jesus Cea 01 Apr '16

01 Apr '16

I have configured my system to use SIS, sharing the same same storage for all users, and offline deduplication. I have this in my "root" cron: """ 53 1 * * * /usr/local/bin/doveadm purge -A 16 * * * * /usr/local/bin/doveadm sis deduplicate /home/dovecot/buzones/attachments /home/dovecot/buzones/attachments/queue """ Yes, it is launched as "root" but I would expect doveadm drop privileges as soon as possible. This is working great, but from time to time I get this error message: """ Your "cron" job on babylon5 /usr/local/bin/doveadm sis deduplicate /home/dovecot/buzones/attachments /home/dovecot/buzones/attachments/queue produced the following output: Error: mkdir(/home/dovecot/buzones/attachments/dc/62/hashes) failed: No such file or directory """ Looks like doveadm is trying to create the "hashes" directory but the parent "62" doesn't exits yet. If I create that directory by hand and set permissions correctly, everything (seems to) work. Talking about this, I see something strange wit the permissions. All files and directories in SIS are created with "dovemail" user and group EXCEPT the "hashes" directory inside the newly created directory. That is: When I get the error message, I have this: """ drwx------ 7 dovemail dovemail 7 Apr 1 13:28 . drwx------ 237 dovemail dovemail 237 Mar 24 20:09 .. drwx------ 3 dovemail dovemail 3 Feb 29 02:30 1d drwx------ 3 dovemail dovemail 3 Mar 9 01:53 7f drwx------ 3 dovemail dovemail 3 Feb 29 02:30 88 drwx------ 3 dovemail dovemail 3 Feb 29 02:30 8d """ I create the missing directory by hand and change permissions. Now I have: """ drwx------ 7 dovemail dovemail 7 Apr 1 13:28 . drwx------ 237 dovemail dovemail 237 Mar 24 20:09 .. drwx------ 3 dovemail dovemail 3 Feb 29 02:30 1d drwx------ 3 dovemail dovemail 3 Apr 1 13:30 62 drwx------ 3 dovemail dovemail 3 Mar 9 01:53 7f drwx------ 3 dovemail dovemail 3 Feb 29 02:30 88 drwx------ 3 dovemail dovemail 3 Feb 29 02:30 8d """ I run the deduplicator again (as root) and it creates a "hashes" directory inside the "62" directory... with user/group root/root. """ drwx------ 2 root root 2 Apr 1 13:30 hashes """ -- Jesús Cea Avión _/_/ _/_/_/ _/_/_/ jcea(a)jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ jabber / xmpp:jcea@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ "El amor es poner tu felicidad en la felicidad de otro" - Leibniz

1 0

default namespace
by Nerijus Baliunas 01 Apr '16

01 Apr '16

Hello, With no namespace settings and dovecot 2.0.9 I get the following listing: a LIST "" "*" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "INBOX" a OK List completed. Then I add the namespaces: namespace inbox { separator = . prefix = inbox = yes hidden = no list = yes subscriptions = yes } namespace compat { separator = . prefix = INBOX. inbox = no hidden = yes list = no alias_for = } Then list output changes: a LIST "" "*" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasChildren) "." "INBOX" a OK List completed. INBOX now has \HasChildren, while before it had \HasNoChildren. How can I make it \HasNoChildren? Regards, Nerijus

1 1

mail filter plugin script doesn't effective
by use experience 31 Mar '16

31 Mar '16

output of *dovecot --version*: Dovecot version : 2.2.9 ----- output of *doveconf -n:* auth_debug = yes > > auth_mechanisms = plain login > > auth_verbose = yes > > disable_plaintext_auth = no > > mail_debug = yes > > mail_location = > maildir:/var/mail/vhosts/%d/%n:LAYOUT=fs:DIRNAME=dovecot_maildir > > mail_plugins = " mail_log notify mail_filter" > > mail_privileged_group = mail > > namespace inbox { > > inbox = yes > > location = > > mailbox Drafts { > > auto = subscribe > > special_use = \Drafts > > } > > mailbox Junk { > > special_use = \Junk > > } > > mailbox Sent { > > auto = subscribe > > special_use = \Sent > > } > > mailbox "Sent Messages" { > > auto = no > > special_use = \Sent > > } > > mailbox Spam { > > auto = create > > special_use = \Junk > > } > > mailbox Trash { > > auto = no > > special_use = \Trash > > } > > mailbox virtual/All { > > auto = no > > special_use = \All > > } > > prefix = > > } > > passdb { > > args = /etc/dovecot/dovecot-sql.conf.ext > > driver = sql > > } > > plugin { > > autocreate = Trash > > autocreate2 = Spam > > mail_filter = santhosh-filter %u > > mail_log_events = delete undelete expunge copy mailbox_delete > mailbox_rename flag_change save mailbox_create > > mail_log_fields = uid box msgid size flags vsize from subject > > } > > protocols = " imap lmtp pop3" > > service auth-worker { > > user = vmail > > } > > service auth { > > unix_listener /var/spool/postfix/private/auth { > > group = postfix > > mode = 0777 > > user = postfix > > } > > unix_listener auth-userdb { > > mode = 0777 > > } > > user = dovecot > > } > > service imap-login { > > executable = imap-login -R rawlogs > > } > > service imap-postlogin { > > executable = script-login /usr/local/bin/postlogin.sh > /etc/dovecot/script/echo.sh > > user = vmail > > } > > service imap { > > executable = imap imap-postlogin > > } > > service lmtp { > > unix_listener /var/spool/postfix/private/dovecot-lmtp { > > group = postfix > > mode = 0600 > > user = postfix > > } > > } > > service santhosh-filter-out { > > executable = script /usr/local/bin/mail-filter-out.sh > > unix_listener santhosh-filter-out { > > mode = 0777 > > user = vmail > > } > > user = dovecot > > } > > service santhosh-filter { > > executable = script /usr/local/bin/mail-filter.sh > > unix_listener santhosh-filter { > > mode = 0777 > > user = vmail > > } > > } > > ssl_cert = </etc/dovecot/dovecot.pem > > ssl_key = </etc/dovecot/private/dovecot.pem > > userdb { > > args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n > > driver = static > > } > > protocol imap { > > mail_plugins = " autocreate" > > } > >

2 4

VS: Re: v2.2.23 released
by Aki Tuomi 31 Mar '16

31 Mar '16

It's fixed in head. Sorry. ---Aki TuomiDovecot oy -------- Alkuperäinen viesti --------Lähettäjä: Eric <ebroch(a)whitehorsetc.com> Päivämäärä: 31.3.2016 18.05 (GMT+02:00) Saaja: dovecot(a)dovecot.org Aihe: Re: v2.2.23 released Yes. I concur. On 3/31/2016 7:44 AM, Leon Kyneur wrote: > 2.2.23 seems to have broken doveadm backup, was previously working > fine on 2.2.22 > > [root@S613 lkyneur]# doveadm -v backup -u em.mck ... > doveadm(root): Error: User doesn't exist > > > [root@S613 lkyneur]# doveadm user em.mck > field value > uid vmail > gid vmail > home /srv/vmail/eftel/xxx.com/20032218/em.mck > mail > mdbox:/srv/vmail/eftel/xxx.com/20032218/em.mck/mdbox:ALT=/altstorage/srv/vm… > quota_rule *:bytes=500M > > > On 30/03/16 23:48, Timo Sirainen wrote: >> http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz >> http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz.sig >> >> This is a bugfix-only release with various important fixes on top of >> v2.2.22. >> >> - Various fixes to doveadm. Especially running commands via >> doveadm-server was broken. >> - director: Fixed user weakness getting stuck in some situations >> - director: Fixed a situation where directors keep re-sending >> different states to each others and never becoming synced. >> - director: Fixed assert-crash related to a slow "user killed" reply >> - Fixed assert-crash related to istream-concat, which could have >> been triggered at least by a Sieve script.

3 2

Reply to : http://dovecot.org/pipermail/dovecot/2016-March/103789.html
by use experience 31 Mar '16

31 Mar '16

I dint get reply as mail to my mailed, so pasting here the link http://dovecot.org/pipermail/dovecot/2016-March/103791.html

1 0

Dovecot mail-filter execution error.
by use experience 31 Mar '16

31 Mar '16

Hello, While using mail-filter plugin, I am getting following error. Please help me. Mar 31 07:48:31 ip-172-31-29-173 dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Connection refused Mar 31 07:48:31 ip-172-31-29-173 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information.

2 2

Pigeonhole 0.4.13 does not compile against dovecot 2.2.23
by Juan C. Blanco 31 Mar '16

31 Mar '16

Hello, I supose that a new version of pigeonhole is on the way because version 0.4.13 does not compile against dovecot 2.2.23 This is the error that I get gcc -DHAVE_CONFIG_H -I. -I. -I../../.. -I../../.. -I../../../src/lib-sieve -I../../../src/lib-sieve/util -I../../../src/lib-sieve/plugins/environment -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/imap -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-lda -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lda -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23 -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-dict -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-dns -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-http -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-mail -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-imap -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-fs -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-charset -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-auth -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-master -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-ssl-iostream -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-compression -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-settings -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-test -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-sasl -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-stats -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-index -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-storage -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-storage/list -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-storage/index -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-storage/index/raw -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/lib-imap-storage -I/home/jc/rpmbuild/BUILD/dovecot-2.2.23/src/plugins/quota -DPKG_RUNDIR=\"\" -std=gnu99 -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/kerberos/include -I../../.. -MT imap-sieve-storage.lo -MD -MP -MF .deps/imap-sieve-storage.Tpo -c imap-sieve-storage.c -fPIC -DPIC -o .libs/imap-sieve-storage.o imap-sieve-storage.c: In function 'imap_sieve_mailbox_transaction_run': imap-sieve-storage.c:595: error: 'struct client' has no member named 'lda_set' make[4]: *** [imap-sieve-storage.lo] Error 1 Regards. Juan C. Blanco > http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz > http://dovecot.org/releases/2.2/dovecot-2.2.23.tar.gz.sig > > This is a bugfix-only release with various important fixes on top of v2.2.22. > > - Various fixes to doveadm. Especially running commands via > doveadm-server was broken. > - director: Fixed user weakness getting stuck in some situations > - director: Fixed a situation where directors keep re-sending > different states to each others and never becoming synced. > - director: Fixed assert-crash related to a slow "user killed" reply > - Fixed assert-crash related to istream-concat, which could have > been triggered at least by a Sieve script. -- +-------------------------------------------------------------------+ | Juan C. Blanco | | | | Centro de Calculo | | | E.T.S. Ingenieros Informáticos | E-mail: jcblanco(a)fi.upm.es | | Universidad Politécnica de Madrid | | | Campus de Montegancedo | | | Boadilla del Monte | Tel.: (+34) 91 336 7466 | | 28660 MADRID (Spain) | Fax : (+34) 91 336 6913 | +-------------------------------------------------------------------+

3 5

Multiple IMAP Mailboxes and one collection folder
by Dieter Knopf 31 Mar '16

31 Mar '16

Hello, we use many IMAP folders and now we are searching for a way to display all mails inside this folders in one collecting folder. The advantage for us would be the possibility to view all new incoming mails in one folder. It would be possible to use the standard MAIL App on the iOS without problems. I could simply make a copy of all mails in one folder with Sieve, but then the Per-user Seen Flag would be useless, because the mail inside the folder is still unread. Is there a way to show some way of collecting folder for every user? Thanks Dieter

2 2

Dovecot plugin pthread issue
by qmail＠top-consulting.net 31 Mar '16

31 Mar '16

I am using FreeBSD 10.1 and Dovecot 2.2.22 with the Openchange plugin - https://github.com/openchange/openchange/tree/master/mapiproxy/services/plu… (https://github.com/openchange/openchange/tree/master/mapiproxy/services/plu…) The plugin compiles just fine and works up until when it tries to create a socket using nanomsg, which uses a pthread_create() call. At that point dovecot-lda just hangs indefinitely. I've read that -pthread must be included in all the components that might end up using it. So checking with ldd: nanomsg does include libthr ( pthread equivalent in FreeBSD ) openchange plugin also includes libthr dovecot-lda doesn't include libthr Would dovecot-lda also need to be compiled with -pthread ? Is it safe ? How can it be done ? Thank you!

1 0

Dovecot-LMTP and LDAP: passdb doesn't support credential lookups
by Niols 30 Mar '16

30 Mar '16

Hello, Sorry, this might be a newbish question, but I really can't get the answer by myself. I'm trying to setup a mail server using LDAP to authenticate users, and I keep receiving the errors: passdb doesn't support credential lookups passdb doesn't support lookups, can't verify user's existence when I send test mails to (existing) users. I'm already using the LDAP server for other purposes, and it's working fine. I can't (or I don't want to) give read access to the userPassword attribute, so I want to use a authentication bind: http://wiki.dovecot.org/AuthDatabase/LDAP/AuthBinds I've already managed to have postfix working with this LDAP server, the users (and their aliases) are correctly recognized. Postfix then sends the mails to Dovecot (2.2.13, Debian Jessie's version) with dovecot-lmtp. Here is my /etc/dovecot/conf.d/auth-ldap.conf.ext. I use the static driver for userdb, and the LDAP driver for passdb. passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = static args = uid=mail gid=mail home=/var/mail/%u } Here is my /etc/dovecot/dovecot-ldap.conf.ext file. hosts = localhost ldap_version = 3 dn = cn=dovecot,ou=services,dc=niols,dc=fr dnpass = a-random-password auth_bind = yes base = ou=people,dc=niols,dc=fr pass_filter = (&(objectClass=inetOrgPerson)(mail=%u)) I haven't set the user_filter and user_attrs values, since I thought these would only be usefull for userdb. I haven't set the pass_attrs value, since I don't see why it would be needed (I just need to be able to bind my user, right?). I can't auth_bind_userdn since the e-mail address aren't necessarily related in any way to the user dn. I assumed %u was going to be replaced by the user's full e-mail address. I tried to play a bit with these values to find a working configuration, without success. I tried to search myself on the LDAP server, using the provided dn and dnpass, and I succeeded. I tried to activate debug logs, but that didn't give me much more information (full debug log at the end of this e-mail). I think the problem is that passdb cannot find the user on the LDAP server, but I don't know why. I believe the problem is lying in my non-comprehension of what userdb and passdb actually do. I tried to find out by myself, and I'm here because I didn't manage to do so. I'm sorry if this post looks stupid. Any help and any comments of any kind would be greatly appreciated. Regards, Niols PS: Here is the full debug log that I get after sending a test message to test(a)niols.net (.net vs. .fr: this is not a mistake, I use my .net domain for testing purposes while I use my .fr domain for eveyday life) with swaks: lmtp(3208): Connect from local auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat auth: Debug: LDAP initialization took 0 msecs auth: Debug: master in: USER 1 test(a)niols.net service=lmtp auth: Debug: ldap(test(a)niols.net): passdb doesn't support credential lookups auth: Error: static(test(a)niols.net): passdb doesn't support lookups, can't verify user's existence auth: Debug: userdb out: FAIL 1 lmtp(3208): Error: user test(a)niols.net: Auth USER lookup failed lmtp(3208): Disconnect from local: Successful quit

2 1

CentOS RPM updates?
by J Landwehr 30 Mar '16

30 Mar '16

Has CentOS stopped distributing dovecot updates via yum? The current version there is 2.2.10 - which is now over two years old. The link on: http://dovecot.org/download.html <http://dovecot.org/download.html> to “RPMs for Fedora and RHEL/CentOS” http://packages.atrpms.net/dist/el6/dovecot/ <http://packages.atrpms.net/dist/el6/dovecot/> is also broken. Would be great if someone could please point me to alternative locations for authentic RPMs

2 1

imapc tries to fetch uid 0
by Nagy, Attila 30 Mar '16

30 Mar '16

Hi, This is a capture from an imapc client session (which is triggered by a message, received via LMTP): * OK [CAPABILITY IMAP4rev1 NAMESPACE] Ready 2 LOGIN "uid" "pass" 2 OK LOGIN succeeded 1 LIST "" "" * LIST (\Noselect) "/" "" 1 OK LIST completed 3 APPEND "INBOX" {568} + Ready for 568 octets of data [...] 3 OK APPEND complete 4 EXAMINE "INBOX" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 4 EXISTS * 0 RECENT * OK [UIDVALIDITY 1455885804] * OK [UIDNEXT 5] 4 OK [READ-ONLY] EXAMINE successful 5 UID FETCH 0 (RFC822.SIZE BODY.PEEK[HEADER.FIELDS (Message-ID)]) 5 BAD Illegal syntax: Bad message number 0 Dovecot 2.2.21 I don't see any problems with the conversation otherwise. Is it safe to assume this is a bug in imapc?

3 3

crash after out of memory?
by Ralf Hildebrandt 30 Mar '16

30 Mar '16

We're encountering a crash when proxying to an Exchange server: Mar 30 10:40:47 mproxy dovecot: imap-login: Login: user=<xxxbxxx>, method=PLAIN, rip=10.39.76.71, lip=141.42.206.11, mpid=18556, TLS, session=<H98xGkAvfvMKJ0xH> Mar 30 10:40:49 mproxy dovecot: imap(xxxbxxx): Fatal: block_alloc(134217728): Out of memory Mar 30 10:40:49 mproxy dovecot: imap(xxxbxxx): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x85afe) [0x7fb0b829eafe] -> /usr/lib/dovecot/libdovecot.so.0(+0x85bec) [0x7fb0b829ebec] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fb0b824373a] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f284) [0x7fb0b82b8284] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f2c3) [0x7fb0b82b82c3] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f357) [0x7fb0b82b8357] -> /usr/lib/dovecot/libdovecot.so.0(+0x81a6d) [0x7fb0b829aa6d] -> /usr/lib/dovecot/libdovecot.so.0(buffer_write+0x6c) [0x7fb0b829acdc] -> /usr/lib/dovecot/libdovecot.so.0(+0x6ea54) [0x7fb0b8287a54] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fb0b82a8ee3] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_copy_from_parent+0x118) [0x7fb0b82a96a8] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xc00ba) [0x7fb0b85e10ba] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fb0b82a8ee3] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fb0b82a991d] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7fb0b828d2a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x6e919) [0x7fb0b8287919] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fb0b82a8ee3] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fb0b82a991d] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7fb0b828d2a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x6e919) [0x7fb0b8287919] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fb0b82a8ee3] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fb0b82a991d] -> /usr/lib/dovecot/libdovecot.so.0(message_get_header_size+0x74) [0x7fb0b8290e34] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x317) [0x7fb0b8609f37] -> dovecot/imap [xxxbxxx 10.39.76.71 UID fetch](+0x1f1de) [0x7fb0b8a9a1de] -> dovecot/imap [xxxbxxx 10.39.76.71 UID fetch](+0x1d60c) [0x7fb0b8a9860c] -> dovecot/imap [xxxbxxx 10.39.76.71 UID fetch](imap_fetch_more+0x3a) [0x7fb0b8a9970a] -> dovecot/imap [xxxbxxx 10.39.76.71 UID fetch](cmd_fetch+0x354) [0x7fb0b8a8b954] Mar 30 10:40:49 mproxy dovecot: imap(xxxbxxx): Fatal: master: service(imap): child 18556 returned error 83 (Out of memory (service imap { vsz_limit=256 MB }, you may need to increase it) - set CORE_OUTOFMEM=1 environment to get core dump) It happens for this user ONLY. Using the automatic bosch build: 2.2.21-1~auto+152 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 2

talloc access after free error ntlmssp_server.c:457
by J Landwehr 30 Mar '16

30 Mar '16

Our new/fresh dovecot imap installation on CentOS (latest from yum repository, which is 2.2.10) is locking up with a panic on a consistent basis and denying service to subsequent clients. The behavior is repeatable. Have spent weeks debugging and trying different configurations with no success. Specific /var/log/maillog error messages are: 12:06:54 dovecot: auth: Error: talloc: access after free error - first free may be at ../auth/ntlmssp/ntlmssp_server.c:457 12:06:54 dovecot: auth: Error: Bad talloc magic value - access after free 12:06:54 dovecot: auth: Error: PANIC (pid 2570): Bad talloc magic value - access after free Our configuration is based on the instructions for NTLM authentication with our Windows 2012R2 AD/Domain server: http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm <http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm> Here are the steps to reproduce: 1. Fresh boot of CentOS server, only configured for postfix/dovecot 2. Connect with Outlook 2016 12.0.4312.1000 32bit on Win7 via IMAP to this dovecot server 3. Any existing and new mail loads in OK to inbox - so authentication is working OK to AD domain server 4. Send an email to someone from Outlook 5. SMTP process completes, message is delivered - 6. dovecot immediately panics on servers, Authentication to dovecot no longer works 7. <systemctl restart dovecot> will hang until a <kill -9> on the “dovecot/auth” PID is performed The issue is with steps 6/7 immediately after 4/5- and is intermittent. Steps 1-3 always work OK, as do 4-5. Further, inbound emails received on this server when no IMAP client is running are always received just fine and dovecot doesn’t hang. Sometimes I have to send a few email messages with steps 4/5 before the issue with 6/7 happens. If I tail -f /var/log/maillog on the server, I can usually determine when 6/7 will fail because there is a line or two with: "dovecot: map: Disconnected: logged out message” being shown, even though the Outlook client is still open. After I see that Outlook closed an IMAP session, even though outlook is still running, I can send a message from Outlook and after it appears in my inbox, dovecot panics/hangs immediately Authentication is otherwise working, e.g. test with: /usr/bin/ntlm_auth —username=alice occasionally takes several seconds to respond, but is usually immediate response is always NT_STATUS_OK: Success (0x0) (I welcome tips to make ntlm_auth always respond more quickly!) I have tried adding lines to smb.conf like: win bind cache time = 300 win bind offline login = true No success I have also looked further into the detailed debugging logs and there is: dovecot: auth: Error: Go user=[alice] domain=[OFFICE] workstation=[pc1] len1=24 len2=290 dovecot: auth: error: login for user [OFFICE]\[alice]@[pc1] failed due to [Wrong Password] dovecot: auth: Error: GENSEC login failed: NT_STATUS_LOGON_FAILURE dovecot: auth: winbind(?,x.x.x.x,<XXX>): user not authetnicated: NT_STATUS_LOGON_FAILURE But I am not sure why there would be that error, since earlier IMAP sessions are working just fine with the same exact domain/username and password. It seems to be something about Outlook quickly opening up new simultaneous IMAP sessions with a CONT command, and NTLM authentication somehow fails with one of them, and panics. It always seems to be when sending an email. Like the process of either receiving a new msg in the inbox and/or also posting the just sent message into the Sent Items folder via IMAP (perhaps when it happens simultaneously, as in a message you cc yourself on) is somehow triggering this. Here is more detailed information that can hopefully help track this down. Thank you! dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf CentOS 7.2.1511 auth_mechanisms = ntlm auth_use_winbind = yes auth_username_format = %n mbox_write_locks = fcntl passdb { drive = pam } protocols = imap service auth { user = root } userdb { driver = passwd } /etc/samba/smb.conf workgroup = OFFICE realm = OFFICE.LOCAL security = ADS local master = no preferred master = no dns proxy = no idmap uid = 10000-20000 idmap gid = 10000-20000 password server = win2012r2 encrypt passwords = no kerberos method = system keytab winbind use_default_domain = yes winbind offline login = true winbind separator = + ERROR MESSAGE 12:00:10 dovecot: imap(alice): Disconnected: logged out in=398 out=4368 12:05:52 postfix/smtpd: connect from pc1 12:05:52 postfix/smtpd: client=pc1 12:05:52 postfix/cleanu: message-id=<XXX> 12:05:52 postfix/qmgr: from=alice, size=5925, nrcpt=1 (queue active) 12:05:53 postfix/smtp: to=bob, relay=mailserver, delay=0.93, dsn=2.0.0, status=send (250 ok: Message accepted) 12:06:53 postfix/qmgr: removed 12:06:54 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 12:06:54 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so 12:06:54 dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat 12:06:54 dovecot: auth: Debug: auth client connected (pid=2565) 12:06:54 dovecot: auth: Debug: auth client connected (pid=2568) 12:06:54 dovecot: auth: Debug: auth client connected (pid=2569) 12:06:54 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011session=XXXip=X.X.X.X#011rip=X.X.X.X#011lport=143#011rport=61072 12:06:54 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011session=XXXip=X.X.X.X#011rip=X.X.X.X#011lport=143#011rport_61061 12:06:54 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=imap#011sessoin=XXXip=x.x.x.x#011lip=X.X.X.X#011lport=143#011rport=61073 12:06:54 dovecot: auth: Debug: client passdb out: CONT#0111 12:06:54 dovecot: auth: Debug: client passdb out: CONT#0111 12:06:54 dovecot: auth: Debug: client passdb out: CONT#0111 12:06:54 dovecot: auth: Debug: client in: CONT<hidden> 12:06:54 dovecot: auth: Debug: client passdb out: CONT#0111#011XXX 12:06:54 dovecot: auth: Debug: client in: CONT<hidden> 12:06:54 dovecot: auth: Debug: client passdb out; CONT#0111#011XXX 12:06:54 dovecot: auth: Debug: client passdb out: CONT#0111#011XXX 12:06:54 dovecot: auth: Debug: client in CONT<hidden> 12:06:54 dovecot: auth: winbind(?X.X.X.X,<XXX>): user not authenticated: NT_STATUS_LOGON_FAILURE 12:06:54 dovecot: auth: Debug: client in: CONT<hidden> 12:06:54 dovecot: auth: Error: talloc: access after free error - first free may be at ../auth/ntlmssp/ntlmssp_server.c:457 12:06:54 dovecot: auth: Error: Bad talloc magic value - access after free 12:06:54 dovecot: auth: Error: PANIC (pid 2570): Bad talloc magic value - access after free 12:06:54 dovecot: auth: Error: BACKTRACE: 15 stack frames: 12:06:54 dovecot: auth: Error: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) 12:06:54 dovecot: auth: Error: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) 12:06:54 dovecot: auth: error: #2 /lib53/libsamba-util.so.0(smb_panic+0x2f) 12:06:54 dovecot: auth: Error: #3 /lib64/libtalloc.so.2(+0x20af) 12:06:54 dovecot: auth: Error: #4 /lib64/libtalloc.so.2(_talloc_free+0x545) 12:06:54 dovecot: auth: Error: #5 /lib64/libsamba-util.so.0(data_blob_free+0x18) 12:06:54 dovecot: auth: Error: #6 /lib64/libgensec.so.0(gensec_ntlmssp_server_auth+0xdf) 12:06:54 dovecot: auth: Error: #7 /lib64/libgensec.so.0(gensec_ntlmssp_update+0x253) 12:06:54 dovecot: auth: Error: #8 /lib64/libgensec.so.0(gensec_update_ev+0x232) 12:06:54 dovecot: auth: Error: #9 /lib64/libgensec.so.0(gensec_update+0x17) 12:06:54 dovecot: auth: Error: #10 /usr/bin/ntlm_auth(+0x92df) 12:06:54 dovecot: auth: Error: #11 /usr/bin/ntlm_auth(+0x587f) 12:06:54 dovecot: auth: Error: #12 /usr/bin/ntlm_auth(main+0xc3b) 12:06:54 dovecot: auth: Error: #13 /lib64/libc.so.6(__libc_start_main+0xf5) 12:06:54 dovecot: auth: Error: #14 /usr/bin/ntlm_auth(+0x535d) 12:06:54 dovecot: auth: Error: Can not dump core: corepath not set up 12:06:55 postfix/smtp[2560]: disconnect from pc1 12:09:54 dovecot: imap-login: Disconnected: Inactivity during authentication (disconnected while authenticating, waited 180 secs): user =<>, method=NTLM, rip=x.x.x.x, lip=x.x.x.x, session=<XXX> The last line ends up repeating as clients continue to try to connect.

2 2

Crash when setting quota = count:User quota
by Tom Sommer 29 Mar '16

29 Mar '16

Mar 19 16:54:37 lmtp(xxxx(a)xxx.xxx): Panic: file file-lock.c: line 269: unreached Mar 19 16:54:37 lmtp(xxxx(a)xxx.xxx): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0x35f647e07a] -> /usr/lib/dovecot/libdovecot.so.0 [0x35f647e0e6] -> /usr/lib/dovecot/libdovecot.so.0 [0x35f647d4ac] -> /usr/lib/dovecot/libdovecot.so.0 [0x35f6481edf] -> /usr/lib/dovecot/libdovecot.so.0(file_wait_lock_error+0x3a) [0x35f648205a] -> /usr/lib/dovecot/libdovecot.so.0(file_try_lock_error+0x13) [0x35f6482123] -> /usr/lib/dovecot/libdovecot.so.0(file_create_locked+0x284) [0x35f647f7a4] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x35f6068ec4] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mailbox_vsize_update_wait_lock+0xe) [0x35f6068f2e] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mailbox_get_virtual_size+0x3d) [0x35f606919d] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mailbox_get_metadata+0x321) [0x35f606fcd1] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x35f60485a0] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x35f60593ce] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_metadata+0x6e) [0x35f603404e] -> /usr/lib/dovecot/lib10_quota_plugin.so(quota_count+0xe7) [0x2b45f03b9417] -> /usr/lib/dovecot/lib10_quota_plugin.so [0x2b45f03b94fb] -> /usr/lib/dovecot/lib10_quota_plugin.so(quota_get_resource+0x77) [0x2b45f03b74b7] -> /usr/lib/dovecot/lib10_quota_plugin.so(quota_test_alloc+0x191) [0x2b45f03b78f1] -> /usr/lib/dovecot/lib10_quota_plugin.so [0x2b45f03bd5f5] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_save_begin+0x5e) [0x35f6032eae] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_copy+0x66) [0x35f602ac26] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_copy+0x56) [0x35f60435d6] -> /usr/lib/dovecot/lib10_quota_plugin.so [0x2b45f03bd71d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x7a) [0x35f6032cea] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver_save+0x1ba) [0x35f680813a] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0xf3) [0x35f68084c3] -> dovecot/lmtp [DATA 172.0.0.0 xxxx(a)xxx.xxx] [0x40645c] -> dovecot/lmtp [DATA 172.0.0.0 xxxx(a)xxx.xxx] [0x406bd6] Only happens when I set "quota = count:User quota" -- Tom Sommer

2 3

Dumb question: dovecot include file
by Jerry 29 Mar '16

29 Mar '16

Dovecot has an include file option. What I am not sure of is why those files use both a *.conf and *.conf.ext extension. I assume both types are included by using the !include <FILE>.conf or !include <FILE>.conf.ext syntax. -- Jerry

2 1

RE: plugin can't be loaded in imap proxy mode
by Zhong, Xun 29 Mar '16

29 Mar '16

Hi, All I tested [last-login] plugin, when I directly logined by pam way, the last-login plugin can load and run, but when I logined by proxy way(Dovecot forward my imap request to another imap server), the last-login plugin did not load and run. Thanks From: Zhong, Xun Sent: Wednesday, March 23, 2016 11:47 AM To: 'dovecot(a)dovecot.org' <dovecot(a)dovecot.org> Subject: plugin can't be loaded in imap proxy mode When dovecot v2.2.21 work in IMAP proxy mode, plugin can not be loaded and work, so my question is: plugins do not work in proxy mode? Anyone can help me ? Thanks a lot.

2 1

crash
by Nerijus Baliunas 29 Mar '16

29 Mar '16

Hello, dovecot-2.2.22-1.fc23.x86_64 from Fedora. I have some old messages, and when I try to open them, dovecot dies: Mar 29 15:29:33 nerijus dovecot: imap(nerijus): Error: Maildir filename has wrong S value, renamed the file from /ho me/nerijus/Maildir/.Linux_old.fetchmail/cur/1038402635.13668_0.nerijus,S=11015:2,FS to /home/nerijus/Maildir/.Linux_ old.fetchmail/cur/1038402635.13668_0.nerijus,S=10955:2,FS Mar 29 15:29:33 nerijus dovecot: imap(nerijus): Error: Corrupted index cache file /home/nerijus/Maildir/.Linux_old.f etchmail/dovecot.index.cache: Broken physical size for mail UID 49 in mailbox Linux_old.fetchmail: read(/home/neriju s/Maildir/.Linux_old.fetchmail/cur/1038402635.13668_0.nerijus,S=11015:2,FS) failed: Cached message size larger than expected (11015 > 10955, box=Linux_old.fetchmail, UID=49, cached Message-Id=<20021127125617.GB26938(a)mcdonald.bombay. retortsoft.com>) Mar 29 15:29:33 nerijus dovecot: imap(nerijus): Panic: file istream.c: line 163 (i_stream_read): assertion failed: (old_size <= _stream->pos - _stream->skip) Attaching backtrace1. Mar 29 16:03:16 nerijus dovecot: imap(nerijus): Error: Maildir filename has wrong S value, renamed the file from /ho me/nerijus/Maildir/.Linux_old.FLTK/cur/1033767038.6490_0.nerijus,S=4712:2,S to /home/nerijus/Maildir/.Linux_old.FLTK /cur/1033767038.6490_0.nerijus,S=4665:2,S Mar 29 16:03:16 nerijus dovecot: imap(nerijus): Error: Corrupted index cache file /home/nerijus/Maildir/.Linux_old.F LTK/dovecot.index.cache: Broken physical size for mail UID 109 in mailbox Linux_old.FLTK: read(/home/nerijus/Maildir /.Linux_old.FLTK/cur/1033767038.6490_0.nerijus,S=4712:2,S) failed: Cached message size larger than expected (4712 > 4665, box=Linux_old.FLTK, UID=109, cached Message-Id=<3D9E04B0.2070105(a)easysw.com>) Mar 29 16:03:16 nerijus dovecot: imap(nerijus): Panic: file istream.c: line 163 (i_stream_read): assertion failed: ( old_size <= _stream->pos - _stream->skip) Attaching backtrace2. Regards, Nerijus

1 0

mailbox prefix
by michael crane 29 Mar '16

29 Mar '16

dovecot version 2.2.13 hello, I try to make a new server just for me after having old one working for ages with Dovecot, Fetchmail, Squirrelmail, Procmail making new one with above plus Postfix using Maildir structure. I am having a bit of trouble understanding exactly what the namespace and prefix are. Is the "private/" prefix an internal thing with Dovecot ? Or is it supposed to be a real directory ? I'm not quite sure how to properly address the INBOX in Procmail, Squirrelmail, Postfix config. for example am I supposed to say inbox is ".private/.INBOX" cheers zemlik

2 1

Some mails seen only via POP3 but not via IMAP
by Nikolaos Milas 29 Mar '16

29 Mar '16

2 1

First dovecot install
by Jason Pruim 29 Mar '16

29 Mar '16

Hey Everyone, I am trying to get postfix and dovecot to talk to each other… postfix is up and running, dovecot allows me to telnet into it both locally and remotely, but when I try to do: “a login “username” “password” I get an authentication failed error… Here is my dovecot -n: [ec2-user@ip-172-31-24-2 dovecot]$ dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 4.1.17-22.30.amzn1.x86_64 x86_64 auth_debug_passwords = yes auth_mechanisms = plain login first_valid_uid = 200 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_gid = 12 mail_home = /mnt/vmail/%d/%n mail_location = maildir:~ mail_uid = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { autocreate = Trash autocreate2 = Sent autocreate3 = Junk autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = Junk sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve sieve_max_script_size = 1M } protocols = imap lmtp sieve pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = ec2-user } unix_listener auth-userdb { group = mail mode = 0600 user = mailreader } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/pki/tls/certs/server.pem ssl_key = </etc/pki/tls/private/server.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { hostname = mail.primelashdiva.info mail_plugins = " autocreate sieve quota" postmaster_address = postmaster(a)primelashdiva.info } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = " sieve" } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } I’m planning to use user accounts for it to connect to… I’m guessing I’m missing something simple, but I don’t know where to look… Any pointers? Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 1

VS: Re: Migrating to dovecot from gmail apps
by Aki Tuomi 28 Mar '16

28 Mar '16

Primarily german ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: Phil Lello <phil(a)dunlop-lello.uk> Päivämäärä: 28.3.2016 19.34 (GMT+02:00) Saaja: Sven Hartge <sven(a)svenhartge.de> Kopio: dovecot(a)dovecot.org Aihe: Re: Migrating to dovecot from gmail apps Many thanks for the replies, I'm going to take a look at OX. Out of curiousity, does anyone know if Open-Xchange is primarily German or American? I'm trying to favour European projects/products as I've realised too much the tech I use is reliant on the US. Phil On Mon, Mar 28, 2016 at 5:14 PM, Sven Hartge <sven(a)svenhartge.de> wrote: > mick.crane <mick.crane(a)gmail.com> wrote: > > On Mon, March 28, 2016 4:13 pm, mj wrote: > > >>>> *Is there currently a good webmail interface to dovecot, > > > squirrelmail > > Squirrelmail is dead. > > S! > > -- > Sigmentation fault. Core dumped. >

1 0

Migrating to dovecot from gmail apps
by Phil Lello 28 Mar '16

28 Mar '16

Hi, I'm considering migrating away from gmail for my (one-man) company, and I'm trying to decide if dovecot is the right option (I'm committed to self-hosting). I'm a developer, so happy to do my own tooling if needed. *Is there currently a good webmail interface to dovecot, or work-in progress?* If not, would a web interface be out-of-scope for dovecot? I want to use SAML for authentication, so a solution that relies on POP/IMAP doesn't meet my needs - unless I add Kerberos into the mix, which is an additional learning curve, and possibly not widely supported. *Is there currently a good web admin interface to dovecot, or work-in-progress?* If not, would a web interface be out-of-scope? Since I prefer using password-protected SSH keys for shell access, and don't want to tie myself to a laptop (and would hate to use vim on a 3G/4G tablet), I'd like to be able to add/remove aliases and play with SIEVE and ACLs through any available browser. *How's the work on sharing messages between folders progressing?* Finally, and I hope you don't mind me asking, are you aware of a good JAVA based alternative to dovecot? I quite like the idea of using lucene indexing on mailboxes, so reducing the number of dependencies has a certain appeal. Best wishes, Phil Lello

7 7

Email hosting provider
by Andre Rodier 28 Mar '16

28 Mar '16

Hello, Sorry if I am off topic a little. I am looking for an email host provider that supports dovecot, sieve and manage sieve. Ideally with the roundcube webmail and managesieve plugin Better if it is in Europe or switzerland. I don't mind paying a little. Thanks, André.

6 7

Enabling tcpwrappers
by kepa 28 Mar '16

28 Mar '16

Hi all, I would like use Dovecot with tcpwrappers enabled to control remote access using hosts.deny and hosts.allow. A google search gave this response from the listserve, but it is several years ago: http://www.dovecot.org/list/dovecot/2013-April/089455.html Are these instructions for configuring the conf files still valid? Mainly: /etc/dovecot/dovecot.conf login_access_sockets = tcpwrap conf.d/10-master.conf: service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } Also: Which version of Dovecot at least is needed to enable tcpwrappers? Does the tcpwrap option need to be enabled during configure and build or is it already (and enabled in any distro binary repositories)? And is it dovecot, imap, or imaps in the hosts.allow/deny file as the service name? Thanks! Kepa

2 1

Fw: VS: Re: Need help solving issue
by MARIA jamieson 27 Mar '16

27 Mar '16

On Saturday, March 26, 2016 1:04 PM, MARIA jamieson <jamieson.maria(a)yahoo.com> wrote: Yes, I am trying it over ssl. Everything works as in I can connect to my mail server and establish an ssl connection. There's no error with SSL. It's just auth mechanism having a environment corruption error. I am not the only one. You can google around and find many run into this situation and no one could help. Most just delete the dovecot and postfix and start over again. However, I cannot afford that because it took me at least 3 months to setup dovecot correctly with postfix to use virtual users. I don't have the time to spend another 3 months to set it up. The problem lies with auth and I think this is the only issue and it has to be that something is missing either in the configs or a file was deleted or link to it was broken. I am sure after fixing this issue. I will have a working mail system again. On Saturday, March 26, 2016 2:40 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: You should reply to list and not just me. Did you try over SSL? ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: MARIA jamieson <jamieson.maria(a)yahoo.com> Päivämäärä: 26.3.2016 6.28 (GMT+02:00) Saaja: aki.tuomi(a)dovecot.fi Aihe: Re: Need help solving issue doveconf -n output: doveconf -n # 2.2.18: /local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: FreeBSD 10.2-RELEASE amd64 ufs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_login_user = dovecot dict { quota = mysql:/local/etc/dovecot-dict-quota.conf } disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/local/virt/%d/%n/ mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = mode = 0600 user = } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl = required ssl_cert = </etc/postfix/sslmain.cert ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLV3 ssl_key = </etc/postfix/sslmain.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } verbose_proctitle = yes verbose_ssl = yes protocol lda { postmaster_address = postmaster(a)mydomain.com sendmail_path = /usr/sbin/sendmail } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } local [ipaddress3] { protocol imap { ssl_cert = </etc/postfix/ssl42.cert ssl_key = </etc/postfix/ssl42.key } } local [ipaddress4] { protocol imap { ssl_cert = </etc/postfix/ssl43.crt ssl_key = </etc/postfix/ssl43.pem } }Below is output of postconf -npostconf -n broken_sasl_auth_clients = yes command_directory = /local/sbin config_directory = /local/etc/postfix daemon_directory = /local/libexec/postfix data_directory = /var/db/postfix debug_peer_list = mydomain.com debugger_command = PATH=/bin:/usr/bin:/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 disable_vrfy_command = yes html_directory = /local/share/doc/postfix inet_interfaces = [all my ip addresses here],localhost,127.0.0.1 inet_protocols = all local_recipient_maps = $virtual_mailbox_maps mail_owner = postfix mailq_path = /local/bin/mailq manpage_directory = /local/man mydestination = $myhostname, localhost.$mydomain, localhost, mail.$mydomain, mail2.$mydomain mydomain = localhost myhostname = $mydomain mynetworks = [my own ip addresses here], localhost, 127.0.0.1, localhost.localhost mynetworks_style = host newaliases_path = /local/bin/newaliases proxy_read_maps = $smtpd_sender_login_maps $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps queue_directory = /var/spool/postfix readme_directory = /local/share/doc/postfix sample_directory = /local/etc/postfix sendmail_path = /local/sbin/sendmail setgid_group = maildrop smtp_sasl_auth_enable = yes smtp_sasl_password_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtp_tls_mandatory_protocols = !SSLv2,!SSLv3 smtp_tls_note_starttls_offer = yes smtp_tls_protocols = !SSLv2,!SSLv3 smtp_use_tls = yes smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_hostname reject_non_fqdn_sender reject_non_fqdn_recipient reject_unauth_pipelining reject_invalid_hostname reject_rbl_client list.dsbl.org reject_rbl_client bl.spamcop.net reject_rbl_client sbl-xbl.spamhaus.org reject_unknown_reverse_client_hostname reject_unknown_client reject_unauth_destination smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_login_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks smtpd_timeout = 300s smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/postfix/mail.mydomain.crt smtpd_tls_key_file = /etc/ssl/postfix/mail.mydomain.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,TLSv1,TLSv1.1,TLSv1.2 smtpd_tls_protocols = !SSLv2,TLSv1,TLSv1.1,!SSLv3,TLSv1.2 smtpd_tls_received_header = yes smtpd_tls_security_level = encrypt smtpd_tls_session_cache_timeout = 3600s soft_bounce = no tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_alias_maps.cf virtual_gid_maps = static:125 virtual_mailbox_base = /local/virtual/ virtual_mailbox_domains = proxy:mysql:/local/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_limit = 51200000 virtual_mailbox_limit_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_limit_maps.cf virtual_mailbox_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 125 virtual_transport = virtual virtual_uid_maps = static:125 postconf: warning: /local/etc/postfix/main.cf: unused parameter: smtpd_sasl_password_maps=proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf postconf: warning: /local/etc/postfix/main.cf: unused parameter: anonymousbroken_sasl_auth_clients=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_maildir_limit_message="Sorry, this user has overdrawn their diskspace quota. Please try again later." postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_limit_override=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_overquota_bounce=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_extended=yes On Friday, March 25, 2016 2:41 PM, "aki.tuomi(a)dovecot.fi" <aki.tuomi(a)dovecot.fi> wrote: > On March 25, 2016 at 6:48 PM MARIA jamieson <jamieson.maria(a)yahoo.com> wrote: > > > Hi, I am using Dovecot 2.2.18 and have migrated from a 1.x versions. After > this migration I had several errors and obsolete errors in logs. I fixed them > and after all that I finally was able to run postfix and dovecot again. > The problem I have facing right now is that in the mail logs and in the > dovecot logs. I am getting auth errors. > In mail log the postfix is spitting out: " fatal: no SASL authentication > mechanisms" > Dovecot is spitting this out "imap-login : Auth process broken (disconnected > before auth was ready, waited 0 secs): ,user<>, the shows client ip, my server > ip and then the 0 seconds connection etc. > Error: auth: environment corrupt; missing value for DOVECOT_" > > That is what it spits out. I asked for help and many threads.I am using > freebsd 10.2. I do use mysql for database. I need someone to explain what the > error means and how I can fix it? > Thank you for your time! Hi! Can you provide your postconf -n and doveconf -n output? This sounds like configuration error. Aki Tuomi Dovecot Oy

2 2

Dovecot on FreeBSD 10.1
by Larry Rosenman 27 Mar '16

27 Mar '16

I'll take a look when I get home > Hi Larry, I’m getting this error: cat /var/log/maillog Mar 25 19:39:56 beastie dovecot: auth: Error: auth: environment corrupt; missing value for DOVECOT_ Mar 25 19:39:56 beastie dovecot: auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Mar 25 19:39:56 beastie dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs cat /var/log/dovecot-info.log Mar 25 19:39:41 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Mar 25 19:39:41 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Mar 25 19:39:41 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session= Mar 25 19:39:49 master: Info: Dovecot v2.2.22 (fe789d2) starting up for imap, lmtp Mar 25 19:39:56 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Mar 25 19:39:56 auth: Debug: Wrote new auth token secret to /var/run/dovecot/auth-token-secret.dat Mar 25 19:39:56 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session= I’m running mariadb100-server-10.0.23, and I tried to recompile every dependencies for dovecot, postfix, mariadb-server without any luck. /Søren

2 4

Re: IMAP Idle
by Joseph Tam 26 Mar '16

26 Mar '16

>> The IDLE disconnection timeout is hardwired in the Dovecot code >> >> http://wiki.dovecot.org/Timeouts >> >> It's set to the RFC minimum of 30min. > > I am ok if connection is closed automatically after 30 min if client is not > responding but connection is not being closed even after 2 days. Hmm. I can't think of why dovecot wouldn't time out. I think maybe the problem is with your webmail system -- it's not detecting when a client connection goes away and releasing all the resources associated with that user. This is not a typical problem though -- most webmail software do not keep persistent IMAP connections open during a session unless they use some IMAP proxy. Are your IMAP connections connected to the webmail server or an IMAP proxy, and is that connection active (despite webmail user disappearing)? Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: VS: Re: Need help solving issue
by MARIA jamieson 26 Mar '16

26 Mar '16

On Saturday, March 26, 2016 2:40 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: You should reply to list and not just me. Did you try over SSL? ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: MARIA jamieson <jamieson.maria(a)yahoo.com> Päivämäärä: 26.3.2016 6.28 (GMT+02:00) Saaja: aki.tuomi(a)dovecot.fi Aihe: Re: Need help solving issue doveconf -n output: doveconf -n # 2.2.18: /local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) # OS: FreeBSD 10.2-RELEASE amd64 ufs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes default_login_user = dovecot dict { quota = mysql:/local/etc/dovecot-dict-quota.conf } disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/local/virt/%d/%n/ mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = mode = 0600 user = } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl = required ssl_cert = </etc/postfix/sslmain.cert ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLV3 ssl_key = </etc/postfix/sslmain.key ssl_protocols = !SSLv3 !SSLv2 userdb { args = /local/etc/dovecot/dovecot-sql.conf driver = sql name = sql } verbose_proctitle = yes verbose_ssl = yes protocol lda { postmaster_address = postmaster(a)mydomain.com sendmail_path = /usr/sbin/sendmail } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } local [ipaddress3] { protocol imap { ssl_cert = </etc/postfix/ssl42.cert ssl_key = </etc/postfix/ssl42.key } } local [ipaddress4] { protocol imap { ssl_cert = </etc/postfix/ssl43.crt ssl_key = </etc/postfix/ssl43.pem } }Below is output of postconf -npostconf -n broken_sasl_auth_clients = yes command_directory = /local/sbin config_directory = /local/etc/postfix daemon_directory = /local/libexec/postfix data_directory = /var/db/postfix debug_peer_list = mydomain.com debugger_command = PATH=/bin:/usr/bin:/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 disable_vrfy_command = yes html_directory = /local/share/doc/postfix inet_interfaces = [all my ip addresses here],localhost,127.0.0.1 inet_protocols = all local_recipient_maps = $virtual_mailbox_maps mail_owner = postfix mailq_path = /local/bin/mailq manpage_directory = /local/man mydestination = $myhostname, localhost.$mydomain, localhost, mail.$mydomain, mail2.$mydomain mydomain = localhost myhostname = $mydomain mynetworks = [my own ip addresses here], localhost, 127.0.0.1, localhost.localhost mynetworks_style = host newaliases_path = /local/bin/newaliases proxy_read_maps = $smtpd_sender_login_maps $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps queue_directory = /var/spool/postfix readme_directory = /local/share/doc/postfix sample_directory = /local/etc/postfix sendmail_path = /local/sbin/sendmail setgid_group = maildrop smtp_sasl_auth_enable = yes smtp_sasl_password_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtp_tls_mandatory_protocols = !SSLv2,!SSLv3 smtp_tls_note_starttls_offer = yes smtp_tls_protocols = !SSLv2,!SSLv3 smtp_use_tls = yes smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_hostname reject_non_fqdn_sender reject_non_fqdn_recipient reject_unauth_pipelining reject_invalid_hostname reject_rbl_client list.dsbl.org reject_rbl_client bl.spamcop.net reject_rbl_client sbl-xbl.spamhaus.org reject_unknown_reverse_client_hostname reject_unknown_client reject_unauth_destination smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_login_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks smtpd_timeout = 300s smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/postfix/mail.mydomain.crt smtpd_tls_key_file = /etc/ssl/postfix/mail.mydomain.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,TLSv1,TLSv1.1,TLSv1.2 smtpd_tls_protocols = !SSLv2,TLSv1,TLSv1.1,!SSLv3,TLSv1.2 smtpd_tls_received_header = yes smtpd_tls_security_level = encrypt smtpd_tls_session_cache_timeout = 3600s soft_bounce = no tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_alias_maps.cf virtual_gid_maps = static:125 virtual_mailbox_base = /local/virtual/ virtual_mailbox_domains = proxy:mysql:/local/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_limit = 51200000 virtual_mailbox_limit_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_limit_maps.cf virtual_mailbox_maps = proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_minimum_uid = 125 virtual_transport = virtual virtual_uid_maps = static:125 postconf: warning: /local/etc/postfix/main.cf: unused parameter: smtpd_sasl_password_maps=proxy:mysql:/local/etc/postfix/mysql_virtual_mailbox_maps.cf postconf: warning: /local/etc/postfix/main.cf: unused parameter: anonymousbroken_sasl_auth_clients=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_maildir_limit_message="Sorry, this user has overdrawn their diskspace quota. Please try again later." postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_limit_override=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_overquota_bounce=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes postconf: warning: /local/etc/postfix/main.cf: unused parameter: virtual_mailbox_extended=yes On Friday, March 25, 2016 2:41 PM, "aki.tuomi(a)dovecot.fi" <aki.tuomi(a)dovecot.fi> wrote: > On March 25, 2016 at 6:48 PM MARIA jamieson <jamieson.maria(a)yahoo.com> wrote: > > > Hi, I am using Dovecot 2.2.18 and have migrated from a 1.x versions. After > this migration I had several errors and obsolete errors in logs. I fixed them > and after all that I finally was able to run postfix and dovecot again. > The problem I have facing right now is that in the mail logs and in the > dovecot logs. I am getting auth errors. > In mail log the postfix is spitting out: " fatal: no SASL authentication > mechanisms" > Dovecot is spitting this out "imap-login : Auth process broken (disconnected > before auth was ready, waited 0 secs): ,user<>, the shows client ip, my server > ip and then the 0 seconds connection etc. > Error: auth: environment corrupt; missing value for DOVECOT_" > > That is what it spits out. I asked for help and many threads.I am using > freebsd 10.2. I do use mysql for database. I need someone to explain what the > error means and how I can fix it? > Thank you for your time! Hi! Can you provide your postconf -n and doveconf -n output? This sounds like configuration error. Aki Tuomi Dovecot Oy

2 1

Need help solving issue
by MARIA jamieson 26 Mar '16

26 Mar '16

Hi, I am using Dovecot 2.2.18 and have migrated from a 1.x versions. After this migration I had several errors and obsolete errors in logs. I fixed them and after all that I finally was able to run postfix and dovecot again. The problem I have facing right now is that in the mail logs and in the dovecot logs. I am getting auth errors. In mail log the postfix is spitting out: " fatal: no SASL authentication mechanisms" Dovecot is spitting this out "imap-login : Auth process broken (disconnected before auth was ready, waited 0 secs): ,user<>, the shows client ip, my server ip and then the 0 seconds connection etc. Error: auth: environment corrupt; missing value for DOVECOT_" That is what it spits out. I asked for help and many threads.I am using freebsd 10.2. I do use mysql for database. I need someone to explain what the error means and how I can fix it? Thank you for your time!

2 2

sieve: filtering based on default destination/folder
by Andrzej A. Filip 26 Mar '16

26 Mar '16

Is it possible to make sieve filter based on default destination/folder? How to trigger special processing/filtering rules when deliver has been executed as 'deliver -m archive ...' ? -- A. Filip

2 3

Re: Reappearing emails - IMAP trace
by Ron Cleven 26 Mar '16

26 Mar '16

>> > >> >A few days back, I sent an overview of this problem, but received no responses. Since then, I have run dozens of traces to isolate the problem, difficult because there are timing issues involved. I have finally nailed it down. If this is not the proper place to report such bugs or if someone knows that this bug has been fixed, please let me know. As I noted in my earlier post, we have been running Dovecot 2.2.10 with a pair of CentOS 7 boxes with replications for the past year. We have been quite happy with the performance and reliability. >> > >> >Recently we received a report that emails could reappear in the INBOX after being deleted. After running a pile of traces, I determined that the problem was strangely related to replications. For the purposes of this discussion, I will refer to the two symmetric replicating servers as A and B. Further, let us assume that during "normal" operation, all the emails are delivered to A via SMTP and are replicated to B. Under those assumptions, if the IMAP user connects to A (where the messages were originally delivered), there is no problem, at least no problem I was able to find. The problem I am describing only arises if the IMAP user connects to B. Connecting to B has never presented any other problems that I am aware of. >> > >> >The test for which I have provided the trace starts with a test mailbox containing only 3 unread messages in the INBOX. Moving 1 of the unread messages to Trash is all that is needed to reproduce the problem. Remember this is ONLY a problem if the IMAP sessions do not connect to the server to which the messages were originally delivered. Also, I found that there is a timing window. The critical IMAP commands are: >> > >> > UID STORE xxx +FLAGS.SILENT (\Seen) >> > UID MOVE xxx Trash >> > >> >If you introduce a large enough delay (I arbitrarily chose 5 seconds) between those two commands, there is no problem. Presumably this has to do with the two boxes syncing up some critical data structure. > What mailbox format do you use? Are you able to reproduce this by running doveadm sync commands manually instead of letting replication do it? For example: > > - doveadm sync -s "" -d -u user@domain > state > - Run the UID STORE & UID MOVE > - doveadm sync -s "`cat state`" -d -u user@domain > > There have been some fixes, especially recentlyhttps://github.com/dovecot/core/commit/950a6e61d6c2dac961ce031bdd8b… sounds a bit similar although I don't really see how it would apply here. Would be a good idea to try anyway with v2.2.22.rc1 (which seems to be stable enough that I'll make v2.2.22 release soon). > > Anyway, I attempted a few times to reproduce it with your test but wasn't able to. I was out when you were kind enough to reply. To answer your question, we are using Maildir format. The trace I provided was based upon IMAP interactions with Roundcube (though the problem was reproducable with several mail clients). I left in a few more steps to make the trace look less contrived. However, I reduced it further to just a couple of connection sessions. What I found in that exercise that was not apparent to me in my prior posting was that the "STATUS INBOX" command that ultimately reveals the problem (it shows the message reappearing) only becomes "wrong" when it is done in a subsequent session. That is, even if I inject an artificially large delay after the "UID STORE" / "UID MOVE" commands before the "STATUS INBOX" command in the same session, that result is never "wrong". But, as soon as I open a subsequent IMAP session, the "STATUS INBOX" command then shows the problematic results. I have never dug into the Dovecot code base, but I assume this relates to how the session data is cached and how the replications update it. None of this is relevant if the problem has already been fixed, so I will endeavor to set up a couple of test boxes with the current version to verify. The link you provided does look quite hopeful. Thanks so much.

1 0

Re: IMAP Idle
by Joseph Tam 26 Mar '16

26 Mar '16

Joy <pj.netfilter(a)gmail.com> wrote: > We have implement imap idle in web mail built by us to have > push mail feature. IMAP idle working perfectly with browser notification > and we are happy with it but having one issue with users who close the > browser directly and never logout in that case there are number of idle > connection which are not in use and users are unable to login once IP wise > connection limit is reached. > > Dovecot is not closing connection which are not in use, is there any > setting available which can help me to resolve this issue. I had much the same situation where a user signed up with a roaming wireless carrier that assigned a new IP to the client whenever it got passed from one access point to another. Good fun when this person took a bus ride through the city, leaving orphaned connections in its wake. The IDLE disconnection timeout is hardwired in the Dovecot code http://wiki.dovecot.org/Timeouts It's set to the RFC minimum of 30min. You'll have to recompile Dovecot to lower this to a non-RFC compliant value. I'm not sure how this this will affect clients, but 30min seems to be overly generous. Joseph Tam <jtam.home(a)gmail.com>

2 1

NetApp NFS vs. ZFS and NFS for Maildir
by Alessio Cecchi 26 Mar '16

26 Mar '16

Hi, I'm evaluating to switch from NetApp to a ZFS appliance (like Qsan). Our setup is Dovecot, Maildir for email storage and NFS to share mailboxes (more than 30k users) across POP/IMAP and MX servers. NetApp NFS works fine also under high load but have some limitation for inode numbers per Volume and is expensive (but recently their prices have dropped). ZFS, I read, suggest to create many small Raid Group to increase IOPS, but this configuration (N Raid instead of one RAID-DP like NetApp) is more complex to manage, or not? Someone has experiences with ZFS and NFS(v3) in high load environments? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

6 16

State for dsync not working.
by Simon Pierre Desrosiers 26 Mar '16

26 Mar '16

Hello, Since replication does not seem to work on Mac OSX, I will run doveadm sync by hand every few minutes. In order to improve efficiency, I would like to use state. I have tried a few ways, but I always get the following error doveadm(user): Error: Saved sync state is invalid, falling back to full sync: Invalid base64 data KBtMOd0181bQ/wAAoQsxE90181YBAAAAAQAAAAAAAAAAAAAAAAAAABtI+mg= Here is the code I use to sync : for user in $userlist ; do doveadm sync -u $user -s "/Users/_dovecot/.bin/syncStates/syncstate$user" tcp:xxx.xxx.xxx.xxx > "/Users/_dovecot/.bin/syncStates/syncstate$user" done Any idea on how I can correct the encoding error ? Thank you

1 0

Dovecot on FreeBSD 10.1
by Søren Andersen 25 Mar '16

25 Mar '16

I'm experiencing the same problem as mentioned earlier in the mailing list. - Is there some kind of workaround for this issue? http://dovecot.org/pipermail/dovecot/2015-April/100549.html /Søren

2 3

pigeonhole
by ferdinando 25 Mar '16

25 Mar '16

hi all im trying to install pigeonhole with dovecot2 but it stops during "make install" with this error: ========================================================================================== .... /bin/sh ../../libtool --mode=install /usr/bin/install -c sievec sieve-dump sieve-test sieve-filter '/usr/local/cluster/fs-cl00/mail/sieve/bin' libtool: install: /usr/bin/install -c .libs/sievec /usr/local/cluster/fs-cl00/mail/sieve/bin/sievec /usr/bin/install: setting permissions for '/usr/local/cluster/fs-cl00/mail/sieve/bin/sievec': No data available Makefile:450: recipe for target 'install-binPROGRAMS' failed make[3]: *** [install-binPROGRAMS] Error 1 make[3]: Leaving directory '/usr/local/src/pigeonhole/src/sieve-tools' Makefile:648: recipe for target 'install-am' failed make[2]: *** [install-am] Error 2 make[2]: Leaving directory '/usr/local/src/pigeonhole/src/sieve-tools' Makefile:417: recipe for target 'install-recursive' failed make[1]: *** [install-recursive] Error 1 make[1]: Leaving directory '/usr/local/src/pigeonhole/src' Makefile:732: recipe for target 'install-recursive' failed make: *** [install-recursive] Error 1 [root@mail02 pigeonhole]# [root@mail02 pigeonhole]# ls -l /usr/local/cluster/fs-cl00/mail/sieve/bin/sievec -rw------- 1 root root 118504 Mar 23 19:31 /usr/local/cluster/fs-cl00/mail/sieve/bin/sievec [root@mail02 pigeonhole]# file /usr/local/cluster/fs-cl00/mail/sieve/bin/sievec /usr/local/cluster/fs-cl00/mail/sieve/bin/sievec: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=586da03004b77848d5e1c66f9bb33259a984ba48, not stripped [root@mail02 pigeonhole]# ... ========================================================================================== configure is ok, no particular options are required, only ldap module enabled by plugin. make is ok, the job exits with no errors. dovecot itself seems ok, it's up and running what do i miss? need some particular uids/gids to accomplish the installation? here's my specs: pigeonhole commit 1d36af65473016aa8339a3671d8b555adc71cef3 dovecot commit 4a769606eb49926c6dfb9a532186e9e737683283 Fedora release 23 Linux version 4.4.5-300.fc23.x86_64 gcc version 5.3.1 thanks a lot in advance for any help =) Connetti gratis il mondo con la nuova indoona: hai la chat, le chiamate, le video chiamate e persino le chiamate di gruppo. E chiami gratis anche i numeri fissi e mobili nel mondo! Scarica subito l’app Vai su https://www.indoona.com/

1 1

IMAP Idle
by Joy 25 Mar '16

25 Mar '16

Hi guys, We have implement imap idle in web mail built by us to have push mail feature. IMAP idle working perfectly with browser notification and we are happy with it but having one issue with users who close the browser directly and never logout in that case there are number of idle connection which are not in use and users are unable to login once IP wise connection limit is reached. Dovecot is not closing connection which are not in use, is there any setting available which can help me to resolve this issue.

1 0

Trouble handling encrypted passwords
by Dan Wilson 25 Mar '16

25 Mar '16

I am running into trouble when I try to use encrypted passwords. I set my dovecot 2.2.10-5 installation back to plain text passwords and was then able to login and retrieve emails. When I set the default_pass_scheme to MD5-CRYPT in my sql config file, and store an MD5-CRYPT password in the sql database, I invariably get password mismatch errors on login: Mar 24 19:40:30 server1 dovecot: auth: Debug: client in: AUTH#0113#011PLAIN#011service=imap#011secured#011session=25HcztQuwQBHCDBi#011lip=xx.x.xx.xxx#011rip=71.8.48.98#011lport=993#011rport=60609#011resp=<hidden> Mar 24 19:40:34 server1 dovecot: auth-worker(9443): Debug: sql(test1(a)xxxxxx.com,xx.x.xx.xx): query: SELECT email as user, password FROM virtual_users WHERE email='test1(a)xxxxxx.com'; Mar 24 19:40:34 server1 dovecot: auth-worker(9443): sql(test1(a)xxxxxx,xx.x.xx.xx): Password mismatch Mar 24 19:40:36 server1 dovecot: auth: Debug: client passdb out: FAIL#0113#011user=test1(a)xxxxxx.com The password in the database was created using doveadm pw command and is stored as: {MD5-CRYPT}$1$5QAeG70c$dP8y7XJVd.VxZBF/DvcAa0 I tried removing the {MD5-CRYPT} from the password string, but that didn't help. I have to be doing something stupid because this should just work! Any ideas from anyone? Thanks much, Dan

1 0

Fw: new important message
by dovecot 25 Mar '16

25 Mar '16

Hello! New message, please read <http://myomtedavi.com/ask.php?397> dovecot

1 0

Replication issues master <-> master nfs backend
by William L. Thomson Jr. 24 Mar '16

24 Mar '16

I keep having some replication issues and not sure what can be done to resolve or correct. It does not seem to happen all the time, though for the last ~30 or so minutes and many messages seems to be happening consistent for me. I have 2 mail servers, basically clones, and thus master master replication. Most of the time things work fine. But many times an email or several will arrive on one, and never replicate to the other. I am not as concerned on the never replicating, as I am that the user never gets notified. Mail arrives on say server 1, users are checking mail on server 2, and they never see the email on server 2. This is not always the case, but its happening enough daily. I then log into one and run sync manually. Which usually syncs the mail on both servers, and then it arrives in the inbox. Here is an example, mail is on mail2, but not mail1. I am checking email on mail1 so I am not seeing the 1 email. Mail1 /home/wlt-ml/.maildir/new: total 0 Mail2 /home/wlt-ml/.maildir/new: total 12 -rw------- 1 wlt-ml site1 8502 Mar 22 14:57 1458673024.7643.mail2 Then I manually log into mail2 and run this command, though usually I can run it from either side, and just change the name to the other server. doveadm sync -u "*" remote:mail1 And then I end up with the missing email on mail1, and it arrives in my email client shortly there after Mail1 /home/wlt-ml/.maildir/new: total 12 -rw------- 1 wlt-ml site1 8502 Mar 22 14:57 1458673051.M838843P26735.mail1,S=8502,W=8678:2,T I have no idea why it does this. It seems to happen when when a full sync has taken place per doveadm replicator status wlt-ml. There does not seem to be any settings to force a full vs fast sync more often. No clue if this is even a full vs fast issue or other. I think it tends to happen more when people stay connected to the imap server. I had a theory that closing the email client and opening it again will get dovecot to sync. I believe this is still the case, but not able to confirm 100%. Also users are reporting closing Thunderbird. I can see them logging out and back in in the logs, but email does not replicate or show till I run doveadm sync manually. Tempted to have cron invoke that on the regular, but seems very hackish and likely will have its own issues doing that. Since its not the right way or how things were designed. Not sure if this is a bug or what. Hopefully miss-configuration on my end. Open to any feedback, advice, etc. I can provide replicator configuration but its pretty straight forward and mostly copy/paste from the replication page. Replication works, just seems it is not triggered to replicate at times or something. dovecot --version 2.2.22 (fe789d2) -- William L. Thomson Jr. Obsidian-Studios, Inc. http://www.obsidian-studios.com

2 3

Upgrade Dovecot from 2.1.17 to 2.2.13 lmtp child killed with signal 6
by Ivan Jurišić 24 Mar '16

24 Mar '16

After upgrade Debian (Wheezy to Jessie) Dovecot version 2.1.17 is upgraded to 2.2.13. I have random crash of lmtp-a and I got lot message in queue. Any solution for this problem? ---------- Postqueue ---------- 7A5B77F72B 1160457 Tue Mar 22 10:10:15 ivan(a)jurisic.org (delivery temporarily suspended: lost connection with mail.jurisic.org[private/dovecot-lmtp] while sending end of data -- message may be sent more than once) ante.starcevic(a)gmail.com ---------- Log file ---------- Mar 22 10:10:15 lmtp(23497, ivan(a)jurisic.org) Panic: file fs-api.c: line 615 (fs_copy): assertion failed: (src->fs == dest->fs) Mar 22 10:10:15 lmtp(23497, ivan(a)jurisic.org) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6b6fe) [0x7f7647a8b6fe] -> /usr/lib/dovecot/libdovecot.so.0(+0x6b7ec) [0x7f7647a8b7ec] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7647a428fb] -> /usr/lib/dovecot/libdovecot.so.0(fs_copy+0x90) [0x7f7647a4c4a0] -> /usr/lib/dovecot/libdovecot-storage.so.0(sdbox_copy+0x4e0) [0x7f7647d3ec10] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xbaab) [0x7f764726aaab] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x7d) [0x7f7647d7b01d] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver_save+0x196) [0x7f76480229d6] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0xf3) [0x7f7648022e13] -> dovecot/lmtp(+0x6171) [0x7f7648452171] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x3f) [0x7f7647a9cd0f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xf9) [0x7f7647a9dd09] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f7647a9cd79] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f7647a9cdf8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7647a47dc3] -> dovecot/lmtp(main+0x165) [0x7f76484509b5] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f7647696b45] -> dovecot/lmtp(+0x4a95) [0x7f7648450a95] Mar 22 10:10:15 lmtp(23497, ivan(a)jurisic.org) Fatal: master: service(lmtp): child 23497 killed with signal 6 (core dumps disabled) ---------- Dovecot configuration ---------- # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.3 ext4 auth_mechanisms = plain login debug_log_path = /var/log/dovecot.debug default_client_limit = 10000 default_process_limit = 1000 default_vsz_limit = 512 M dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } hostname = mail.jurisic.org info_log_path = /var/log/dovecot.info lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_path = /var/log/dovecot.log mail_attachment_dir = /var/mail/vhosts/%d/attachment mail_home = /var/mail/vhosts/%d/mail/%n mail_location = sdbox:/var/mail/vhosts/%d/mail/%n mail_plugins = " quota" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Sent autocreate2 = Drafts autocreate3 = Junk autocreate4 = Trash autosubscribe = Sent autosubscribe2 = Drafts autosubscribe3 = Junk autosubscribe4 = Trash expire = Trash expire2 = Trash/* expire3 = Spam expire_dict = proxy::expire quota = dict:user::proxy::quota quota_rule = *:storage=102400 quota_warning = storage=75%% quota-warning 75 %u quota_warning2 = storage=90%% quota-warning 90 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@%d protocols = " imap lmtp sieve pop3" service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service dict { unix_listener dict { mode = 0660 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 512 M } service imap { vsz_limit = 512 M } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-warning { executable = script /opt/mail-old.sh unix_listener quota-warning { group = root mode = 0666 user = root } user = root } ssl = required ssl_cert = </etc/ssl/jurisic.org/jurisic.pem ssl_cipher_list = !aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!EDH:!ADH:!DSS:!RC4:HIGH:+3DES ssl_key = </etc/ssl/jurisic.org/jurisic.key ssl_prefer_server_ciphers = yes ssl_protocols = TLSv1 !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota sieve" } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " quota imap_quota" } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = " quota quota" }

2 2

[BUG] Dovecot 2.2.22 Pigeonhole 0.4.13 - Panic: epoll_ctl(del, 18) failed: Bad file descriptor
by Andreas Jobs 24 Mar '16

24 Mar '16

Hi, I just found some of these in my logs: Mar 21 18:42:17 lmtp(andreas.jobs(a)ruhr-uni-bochum.de): Panic: epoll_ctl(del, 18) failed: Bad file descriptor Mar 21 18:42:17 lmtp(andreas.jobs(a)ruhr-uni-bochum.de): Error: Raw backtrace: /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x9acdb) [0x7f4d97ec9cdb] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x9c074) [0x7f4d97ecb074] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4d97eca021] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_handle_remove+0x126) [0x7f4d97ee8830] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0xb63f7) [0x7f4d97ee53f7] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_remove+0x1d) [0x7f4d97ee544e] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0xc85c4) [0x7f4d97ef75c4] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0xc867b) [0x7f4d97ef767b] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_stream_close+0x28) [0x7f4d97ed56b5] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0xc6349) [0x7f4d97ef5349] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(o_stream_destroy+0x20) [0x7f4d97ef53d9] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x95550) [0x7f4d9720b550] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x95c5a) [0x7f4d9720bc5a] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0xc992c) [0x7f4d97ef892c] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_call_io+0xcd) [0x7f4d97ee6680] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x1f6) [0x7f4d97ee8a78] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x24) [0x7f4d97ee6826] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_run+0xaf) [0x7f4d97ee6774] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(program_client_run+0x100) [0x7f4d9720c943] -> /usr/local/dovecot/lib/dovecot/sieve/lib90_sieve_extprograms_plugin.so(sieve_extprogram_run+0x1c) [0x7f4d96735f84] -> /usr/local/dovecot/lib/dovecot/sieve/lib90_sieve_extprograms_plugin.so(+0x459f) [0x7f4d9673359f] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x3fd61) [0x7f4d971b5d61] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_interpreter_continue+0xaa) [0x7f4d971b5e84] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_interpreter_start+0x140) [0x7f4d971b6054] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_interpreter_run+0x47) [0x7f4d971b609d] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(+0x5a1c6) [0x7f4d971d01c6] -> /usr/local/dovecot/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x5c) [0x7f4d971d06fa] -> /usr/local/dovecot/lib/dovecot/lib90_sieve_plugin.so(+0x3278) [0x7f4d9744b278] Mar 21 18:42:17 lmtp(andreas.jobs(a)ruhr-uni-bochum.de): Fatal: master: service(lmtp): child 18908 killed with signal 6 (core dumped) Regards, Andreas -- ! Andreas Jobs Network Operation Center ! ! Ruhr-Universitaet Bochum ! ! One Day I Will Find This Peer Guy and Then I Will Reset HIS Connection !

2 1

Dovecot 2.2.22 - doveadm via socket not working
by Andreas Jobs 24 Mar '16

24 Mar '16

Hello, (my) doveadm is no longer working if I use the -S socket_path. # doveadm quota get -S mbx7:542 -u myaccount doveadm(myaccount): Error: doveadm server disconnected before handshake: EOF doveadm(myaccount): Error: mbx7:542: Command quota get failed for jobsanzl: EOF Quota name Type Value Limit % The server logs: Mar 22 00:29:47 doveadm(134.147.53.150): Fatal: USER environment is missing and -u option not used Mar 22 00:29:47 doveadm(134.147.53.150): Fatal: master: service(doveadm): child 31599 returned error 64 Any hints? --Andreas -- ! Andreas Jobs Network Operation Center ! ! Ruhr-Universitaet Bochum ! ! One Day I Will Find This Peer Guy and Then I Will Reset HIS Connection !

2 3

attachement disappeared
by Sergey Schwartz 23 Mar '16

23 Mar '16

Gentelmen, Is it possible for the attachment to dissappear? I've got an important email with a file attached and today the attachement is absent. -- Best regards, Sergey Schwartz Senior System Administrator Biblio Globus Tour Operator www.bgoperator.ru T: +7 495 5042500 ext 1532 E: sergey.schwartz(a)bgoperator.com

2 2

Dovecot 2.2.21 change imap logout format (and broke my log parsing)
by Alessio Cecchi 23 Mar '16

23 Mar '16

Hi, after upgrade to dovecot-2.2.21 the log of "imap logout" format changed from: Mar 1 03:40:44 pop01 dovecot: imap(info(a)domain.com): Connection closed in=111 out=1522 session=<lusrsfMsXNVf79ju> to: Mar 3 03:48:11 pop01 dovecot: imap(info(a)domain.com): Connection closed (IDLE running for 0.001 + waiting input for 2088.878 secs, 2 B in + 10+0 B out, state=wait-input) in=224 out=2834 session=<6XTzihst3uUFqB6m> Can "(IDLE running for 0.001 + waiting input for 2088.878 secs, 2 B in + 10+0 B out, state=wait-input)" removed from the log? My imap_logout_format is: imap_logout_format = in=%i out=%o session=<%{session}> Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

2 1

plugin can't be loaded in imap proxy mode
by Zhong, Xun 23 Mar '16

23 Mar '16

When dovecot v2.2.21 work in IMAP proxy mode, plugin can not be loaded and work, so my question is: plugins do not work in proxy mode? Anyone can help me ? Thanks a lot.

1 0

Allowing for multiple recipient_delimiter characters?
by Aaron Lindsay 23 Mar '16

23 Mar '16

Postfix allows the recipient_delimiter configuration parameter to contain multiple characters, splitting on the first such character it encounters. For example, if using 'recipient_delimiter=+-' both aaron+foo(a)example.com and aaron-bar(a)example.com would be delivered to aaron(a)example.com. Is anyone opposed to changing dovecot's handling of recipient_delimiter so that it's the same as that of postfix? If not, I am willing to rebase/merge/address review comments on Lennart Weller's patch[1] to get this functionality upstream. While I think aligning with postfix' behaviour would be convenient for those of us who run a server using both dovecot and postfix, would this break any other common use cases I'm not aware of? Thanks! -Aaron [1] - http://dovecot.org/pipermail/dovecot/2015-February/099660.html (I've talked with Lennart off-list, and he's OK with me working to get his patch merged, as long as I attribute his work to him, but doesn't have the time to work on it himself right now)

2 2

protocols.d/ dir empty?
by Kieran 22 Mar '16

22 Mar '16

(I hope I'm doing this right) Hey there. I have a problem with the dovecot protocols. When I do /telnet 127.0.0.1 143/ it gives me a connection refused error. I looked in the wiki and then after trying /doveconf protocols listen /I realized that I don't have any protocols.//I went in //usr/share/dovecot/protocols.d/ and it's empty. How can I fix that?

3 3

multiple imapc settings in different namespaces
by abi＠oleane.net 22 Mar '16

22 Mar '16

hello all i assume this question must have already been asked, but i'm looking for a way to circumvent which might work specifically on my system. the version can be any available version between 2.2.9 and 2.2.22 (i'm testing with both of the above and no other ) i'm using imapc in 2 different namespaces. in both cases, the imapc_host is local, and a custom passdb program is expected to handle proxying to different servers. one of the case should proxy to a different legacy platform, and the other is used for shared mailboxes. is there any way at all to be able to tell which is which in passdb ? i don't care about the password, i can use a login prefix or suffix, different ports, different master passwords, ssl, maybe a different protocol name or auth method... somehow i've seen in the source code there is a namespace "owner" but did not manage to change this parameter. i guess it is used internally. anything else ? thanks a lot for any help you can provide best regards @abi

1 0

LMTP proxy does not pass RCPT TO: ... 5xx response back
by Heiko Schlittermann 22 Mar '16

22 Mar '16

Hello, I'm using dovecot 2.2.9 and a director/backend setup. On the director I've the LMTP in proxy mode, mapping the users to one of the backends. The backends to quota check and return the OverQuota message already at RCPT TO time. Here is what I typed, connected to the director Connection to director1 2525 port [tcp/*] succeeded! 220 director1.rz.hs-example.de Dovecot (Ubuntu) ready. LHLO mailhub1.rz.hs-example.de 250-director1.rz.hs-example.de 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING MAIL FROM:<hs(a)schlittermann.de> 250 2.1.0 OK RCPT TO:<heiko(a)hs-example.de> 250 2.1.5 OK And here is, what TCPDUMP sees (cut for clarity): 00:22:23.029251 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [S], 00:22:23.029376 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [S.], 00:22:23.029660 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [.], 00:22:23.051436 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [P.], .7i`.7jN220 backend1.rz.hs-example.de Dovecot (Ubuntu) ready. 00:22:23.051805 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [.], 00:22:23.052017 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [P.], .7jT.7i`LHLO director1.rz.hs-example.de 00:22:23.052034 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [.], 00:22:23.052114 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [P.], .7ia.7jT250-backend1.rz.hs-example.de 250-XCLIENT ADDR PORT TTL TIMEOUT 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 00:22:23.052476 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [P.], 0EH....d...... ..3........ ..8 ..3.........J ..... .7jT.7iaXCLIENT ADDR=2001:638:914:f33::7:1 PORT=60574 TTL=4 TIMEOUT=30 00:22:23.052540 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [P.], 0EH...E....~e.....3........ ..8 ..3........ ..J .7ia.7jT220 backend1.rz.hs-example.de Dovecot (Ubuntu) ready. 00:22:23.052815 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [P.], 0E.....s...... ..3........ ..8 ..3.........J ....E .7jT.7iaLHLO director1.rz.hs-example.de 00:22:23.052870 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [P.], 0E....h....~......3........ ..8 ..3........ ..J .7ia.7jT250-backend1.rz.hs-example.de 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 00:22:23.053120 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [P.], 0E.....qJ..... ..3........ ..8 ..3.........J ....h .7jT.7iaMAIL FROM:<hs(a)schlittermann.de> RCPT TO:<heiko(a)hs-example.de> 00:22:23.091824 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [.], 0E.........~,.....3........ ..8 ..3........ ..J .7ik.7jT 00:22:23.119918 IP6 2001:638:914:f33::5:ff.2525 > 2001:638:914:f33::5:1.59466: Flags [P.], 0E.........~......3........ ..8 ..3........ ..J * .7ir.7jT250 2.1.0 OK * 552 5.2.2 <heiko(a)hs-example.de> Quota exceeded (mailbox for user is full) 00:22:23.158836 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [.], 0F4....j...... ..3........ ..8 ..3.........J ..... .7jo.7ir 00:27:23.029008 IP6 2001:638:914:f33::5:1.59466 > 2001:638:914:f33::5:ff.2525: Flags [F.], 0F4....E...... ..3........ ..8 ..3.........J ..... It looks as if the backend tells the director/proxy about the full mailbox (552 5.2.2 <heiko(a)hs-example.de> Quota exceeded (mailbox for user is full)) already before the DATA phase starts, right as the response to the RCPT TO. But the proxy seems to ignore it… Any suggestion? Best regards from Dresden/Germany Viele Grüße aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

2 3

sieve - editheader - edit in place
by Hajo Locke 22 Mar '16

22 Mar '16

Hello, i do some tests with sieve editheader extensions. deleteheader and addheader are working, but i noticed that new headerlines are always prepended to current header. So new lines can be found always on top. I am looking for a possibility to edit a headerline in place, without moving the new line to top of stack(replaceheader?). It is not looking good if a Subject-Line suddenly moves to top of header. Is there a possibility for me? Thanks, Hajo

3 3

[BUG] Dovecot 2.2.22 lmtp child killed with signal 11
by Andreas Jobs 22 Mar '16

22 Mar '16

Hello, after upgrading to 2.2.22 the lmtp service is crashing (segfault) a few times per hours. >From the logs: Mar 19 16:37:29 lmtp(redacted(a)ruhr-uni-bochum.de): Info: ohZXLe1x7VaUeQAAEc+Mrg: sieve: msgid=<redacted(a)async.facebook.com>: discarding vacation response to mailinglist recipient <redacted(a)facebookmail.com> Mar 19 16:37:29 lmtp(31124): Info: Disconnect from 134.147.42.228: Successful quit Mar 19 16:37:29 lmtp(31124): Fatal: master: service(lmtp): child 31124 killed with signal 11 (core dumped) All those crashes have either a "send vacation response" or a "discarnding vacation response" in common. I'll attach a backtrace and the current configuration. --Andreas -- ! Andreas Jobs Network Operation Center ! ! Ruhr-Universitaet Bochum ! ! One Day I Will Find This Peer Guy and Then I Will Reset HIS Connection !

2 2

Index corruption in 2.2.18
by Anton Chevychalov 21 Mar '16

21 Mar '16

We are using dbox with lz4 compression and dovecot-lda + sieve for delivery. Mail recieved: Mar 16 06:27:55 mail2 dovecot: lda(svs(a)example.com): sieve: msgid=<20160316032754.4C89D2C4(a)rdbms.oldstable.office.example.com>: stored mail into mailbox 'INBOX' Around 08:14:00 user start his thunderbird with local filters. He found one mail without headers. Around that time user do repair folder in thunderbird: Mar 16 10:14:44 mail2 dovecot: imap(svs(a)example.com): Error: read(/mail/boxes/example.com/svs/storage/m.139) failed: Cached message size larger than expected (1572 > 980, box=Logs/Backup, UID=9763, cached Message-Id=<20160316032754.4C89D2C4(a)rdbms.oldstable.office.example.com>) Mar 16 10:14:44 mail2 dovecot: imap(svs(a)example.com): Error: Corrupted index cache file /mail/boxes/example.com/svs/mailboxes/Logs/Backup/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 9763 Mar 16 10:14:44 mail2 dovecot: imap(svs(a)example.com): Error: read(/mail/boxes/example.com/svs/storage/m.139) failed: Cached message size larger than expected (1572 > 980, box=Logs/Backup, UID=9763, cached Message-Id=<20160316032754.4C89D2C4(a)rdbms.oldstable.office.example.com>) (FETCH BODY[] for mailbox Logs/Backup UID 9763) Mar 16 10:14:44 mail2 dovecot: imap(svs(a)example.com): Disconnected: FETCH read() failed in=14812 out=1077049 Mar 16 10:14:45 mail2 dovecot: imap(svs(a)example.com): Error: read(/mail/boxes/example.com/svs/storage/m.139): FETCH BODY[] for mailbox Logs/Backup UID 9763 got too little data: 1008 vs 1613 Mar 16 10:14:45 mail2 dovecot: imap(svs(a)example.com): Error: Corrupted index cache file /mail/boxes/example.com/svs/mailboxes/Logs/Backup/dbox-Mails/dovecot.index.cache: Broken virtual size for mail UID 9763 Mar 16 10:14:45 mail2 dovecot: imap(svs(a)example.com): Disconnected: FETCH failed in=837 out=641651 And still in a same state: Mar 16 11:42:51 mail2 dovecot: imap(svs(a)example.com): Error: read(/mail/boxes/example.com/svs/storage/m.139): FETCH BODY[] for mailbox Logs/Backup UID 9763 got too little data: 1008 vs 1613 Mar 16 11:42:51 mail2 dovecot: imap(svs(a)example.com): Error: Corrupted index cache file /mail/boxes/example.com/svs/mailboxes/Logs/Backup/dbox-Mails/dovecot.index.cache: Broken virtual size for mail UID 9763 Mar 16 11:42:51 mail2 dovecot: imap(svs(a)example.com): Disconnected: FETCH failed in=12462 out=984043 In thunderbird we see raw lz4 data. I have today backup (duplicate mail on exim to per day mbox). So I can restore that message, but I found older problems in other mailboxes and I can't restore it due to tapes rotation I see a lot of fixes in 2.2.19? Was it fixed after 2.2.18? -- Anton Chevychalov

3 2

doveadm sync/backup doesn't sync the metadata?
by Heiko Schlittermann 21 Mar '16

21 Mar '16

Hello, in a current migration project we want to migrate from Cyrus to Dovecot. The Cyrus server stores expiry information as ANNOTATIONS. On the Dovecot side I've set up the metadata/annotations plugin and it is working. But 'dovecot backup …' doesn't seem to sync these metadata? Did I miss something here? Shouldn't the metadata be part of the backup? (I'm using the latest 2.2.22 for sync purposes, as the stock dovecot just crashed when used as 'doveadm backup …') Best regards from Dresden/Germany Viele Grüße aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

2 1

Understand the UID value in mailbox debug
by Tobi 21 Mar '16

21 Mar '16

Hi list we have a client who complains that mails from a certain sender are always put into his spamfolder. Our strong guess is that this is an issue with the webmail (Roundcube), but I need some help in understanding the output from dovecot's mailbox-debug. In order to narrow down the source of the problem we activated the mailbox-debug from Dovecot. Now we can see that the mail is moved into the spamfolder. But the strange thing is that a UID is logged which does not exist on the mailserver The following log is the "move" of the mail into the spamfolder Mar 19 11:53:57 backend3 dovecot: imap(REMOVED_FOR_PRIVACY): OmQLrmQubgDAqDIW copy from INBOX: box=INBOX.Spam, uid=58, msgid=<000601d181cd$71401940$53c04bc0$(a)bluewin.ch>, size=314585 Mar 19 11:53:57 backend3 dovecot: imap(REMOVED_FOR_PRIVACY): OmQLrmQubgDAqDIW delete: box=INBOX, uid=1614, msgid=<000601d181cd$71401940$53c04bc0$(a)bluewin.ch>, size=314585 Mar 19 11:53:57 backend3 dovecot: imapREMOVED_FOR_PRIVACY): OmQLrmQubgDAqDIW expunge: box=INBOX, uid=1614, msgid=<000601d181cd$71401940$53c04bc0$(a)bluewin.ch>, size=314585 I do not understand whose UID this is, as it does not exist on the server. Does dovecot create temporary UID or something like that? Or is it more a process ID? Thanks and regards tobi

4 5

Problem configuring sieve
by Jerry 20 Mar '16

20 Mar '16

This is a fresh installation of dovecot on a FreeBSD 11 system. Trying to run the following command produces this error: sievec ./default.sieve sievec(root): Debug: Loading modules from directory: /usr/local/lib/dovecot sievec(root): Error: Couldn't load required plugin /usr/local/lib/dovecot/lib90_sieve_plugin.so: Can't load plugin sieve_plugin: Plugin is intended to be used only by binaries: lda lmtp (we're sievec) sievec(root): Fatal: Internal error occurred. Refer to server log for more information. *** Error code 89 This is my configuration: # 2.2.22 (fe789d2): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.12 (c1c0a23) # OS: FreeBSD 11.0-CURRENT amd64 zfs auth_mechanisms = plain login lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/var/mail/vmail/%d/gerard mail_plugins = sieve mail_save_crlf = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users/passwd driver = passwd-file } plugin { sieve_default = /usr/local/etc/dovecot/sieve/default.sieve } postmaster_address = postmaster(a)seibercom.net service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/ssl/demoCA/certs/dovecot.pem ssl_key = </etc/ssl/demoCA/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { args = username_format=%u /usr/local/etc/dovecot/users/passwd driver = passwd-file } protocol lda { mail_plugins = sieve } There is nothing in the logs regarding this. Can anyone help me? -- Jerry

2 1

Re: Setting up public mailboxes - user not found
by Marti Markov 20 Mar '16

20 Mar '16

Hey, I actually went with the method suggested by Steffen Kaiser of creating a separate userdb because I use LDAP and I have an OU which contains all the public mailboxes and was just easier. I setup the userdb like so: userdb { args = /etc/dovecot/dovecot-ldap-shared_mailboxes.conf.ext driver = ldap override_fields = mail=maildir:/home/vmail/Public/.%n } Now when I send an email to office3(a)xxx.com I don’t get any errors and it delivers the message to the office3(a)xxx.com: root@mail:~# ls /home/vmail/Public/.office3/new/ 1458427035.M781836P21781.mail.xxx.com,S=2571,W=2630 1458427705.M750112P23338.mail.xxx.com,S=2501,W=2559 But from any mail client I try I don’t seem to be able to list anything in the Public directory. Am I missing something in the configuration? Here is the public namespace configuration: namespace { list = yes location = maildir:/home/vmail/Public:INDEXPVT=~/Maildir/Public prefix = Public/ separator = / subscriptions = yes type = public } > On 17 Mar 2016, at 08:35, Burckhard Schmidt <bschmidt(a)cms.hu-berlin.de> wrote: > > hello Marti, > > Am 17.03.2016 um 06:18 schrieb Marti Markov: >> First of all thanks for the reply Burckhard. >> When you say: >>> You can use a "normal" user who has a sieve script: > > Normal user that's an account with one or more email aliasses. > So this "user" can receive emails like any other user. This I called "normal" user. But this ist not of interest in our case. > So you don't get an "user not found". > > Next you will add an appropriate email alias to the account if necessary (our accounts are cryptic). > > Now you have an account/user and you can write a sieve script for that user to deliver all emails into one public folder or into different folders. Public subfolders are possible too, if you like or are able to distinguish incomming emails. > > In your case it is not necessary to have an user/account "office3". This name you would only use in that sieve script with "fileinto". > > Regards! > > Burckhard > >> what would that user be in my case? office3? Because I don’t really see how it will solve the problem of getting the error 550 user not found when making the LDAP search. >> >>> On 10 Mar 2016, at 08:50, Burckhard Schmidt <bschmidt(a)cms.hu-berlin.de> wrote: >>> >>> Am 09.03.2016 um 20:02 schrieb Marti Markov: >>>> Hi all, >>>> >>>> This is the first time I use the dovecot mail list so I’m sorry if I forget something. >>>> >>>> My problem is that for some reason I can get public mailboxes to work. I have setup the directory Public, the folders and the cur,tmp and new folder in them: >>>> >>>> Public >>>> | >>>> |- .office3 >>>> | >>>> |- cur >>>> |- tmp >>>> |- new >>>> |- dovecot-acl >>>> >>>> >>>> Here is my dovecot conf: >>>> >>> >>>> namespace { >>>> list = yes >>>> location = maildir:/home/vmail/xxx.com/Public:INDEXPVT=~/Maildir/Public >>>> prefix = Public/ >>>> separator = / >>>> subscriptions = yes >>>> type = public >>>> } >>> >>> You can use a "normal" user who has a sieve script: >>> require ... >>> any filter if necessary >>> fileinto "Public"; >>> discard; >>> ... >>> >>> "Public" is your prefix >>> I have several subfolder so I use: fileinto "Public/subfolder1"; >>> >>> You would have >>> /home/vmail/xxx.com/Public/subfolder1 >>> with cur new tmp >>> and a file "dovecot-acl" containing anyone lrs >>> >>> -- >>> Burckhard Schmidt >> > > > -- > Mit freundlichen Grüßen --- Burckhard Schmidt > > Abteilung Systemsoftware und Kommunikation > ZE Computer- und Medienservice der Humboldt-Universität zu Berlin > Postanschrift: Unter den Linden 6, 10099 Berlin > Standort: Rudower Chaussee 26; 12489 Berlin > Tel.: +49-30-2093-70058 Fax: +49-30-2093-70199 > Mail: bschmidt(a)cms.hu-berlin.de <mailto:bschmidt@cms.hu-berlin.de>

1 0

dovecot-sieve in ports?
by unknown＠example.com 20 Mar '16

20 Mar '16

# portmaster mail/dovecot-sieve ===>>> The dependency for mail/dovecot seems to be handled by dovecot2-2.2.22 ===>>> Initial dependency check complete for mail/dovecot-sieve ===>>> Starting build for mail/dovecot-sieve <<<=== ===>>> All dependencies are up to date ===> Cleaning for dovecot-sieve-1.2+0.1.19_2 ===>>> Waiting on fetch & checksum for mail/dovecot-sieve <<<=== ===> License LGPL21 accepted by the user ===> dovecot-sieve-1.2+0.1.19_2 depends on file: /usr/local/sbin/pkg - found ===> Fetching all distfiles required by dovecot-sieve-1.2+0.1.19_2 for building ===> dovecot-1.2.17_6 conflicts with installed package(s): dovecot2-2.2.22 Sooo… Is dovecot-sieve for dovecot 1.x only? Or is the ports tree wonky? -- 2+2=5 for sufficiently large values of 2.

3 2

v2.2.22 released
by Timo Sirainen 19 Mar '16

19 Mar '16

http://dovecot.org/releases/2.2/dovecot-2.2.22.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.22.tar.gz.sig + Added doveadm HTTP API: See http://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP + virtual plugin: Mailbox filtering can now be done based on the mailbox metadata. See http://wiki2.dovecot.org/Plugins/Virtual + stats: Added doveadm stats reset to reset global stats. + stats: Added authentication statistics if auth_stats=yes. + dsync, imapc, pop3c & pop3-migration: Many optimizations, improvements and error handling fixes. + doveadm: Most commands now stop soon after SIGINT/SIGTERM. - auth: Auth caching was done too aggressively when %variables were used in default_fields, override_fields or LDAP pass/user_attrs. userdb result_* were also ignored when user was found from cache. - imap: Fixed various assert-crashes caused v2.2.20+. Some of them caught actual hangs or otherwise unwanted behavior towards IMAP clients. - Expunges were forgotten in some situations, for example when pipelining multiple IMAP MOVE commands. - quota: Per-namespaces quota were broken for dict and count backends in v2.2.20+ - fts-solr: Search queries were using OR instead of AND as the separator for multi-token search queries in v2.2.20+. - Single instance storage support wasn't really working in v2.2.16+ - dbox: POP3 message ordering wasn't working correctly. - virtual plugin: Fixed crashes related to backend mailbox deletions.

3 2

lmtp timeout, locks and crashes
by Tom Sommer 19 Mar '16

19 Mar '16

I'm seeing some problems on accounts which get a lot of spam (like, a lot). I get these errors: Mar 15 10:43:49 lmtp(12390): Error: Timeout (29s) while waiting for lock for transaction log file /var/spool/mail/dovecot/xxxx/xxxx/dovecot.list.index.log (WRITE lock held by pid 12193) --- Mar 15 10:43:49 lmtp(12034): Error: Transaction log file /var/spool/mail/dovecot/xxxxx/xxxx/dovecot.list.index.log: marked corrupted --- Mar 15 10:43:49 lmtp(12391): Error: Transaction log /var/spool/mail/dovecot/xxxx/xxxx/dovecot.list.index.log: duplicate transaction log sequence (3) ---- Mar 15 10:43:59 lmtp(xxxx(a)xxxx.dk): Error: Timeout (29s) while waiting for lock for transaction log file /var/spool/mail/dovecot/xxxx/xxxx/dovecot.list.index.log ---- Mar 15 10:43:51 lmtp(12294): Panic: file mail-transaction-log-file.c: line 104 (mail_transaction_log_file_free): assertion failed: (!file->locked) Mar 15 10:43:51 lmtp(12294): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0 [0x30d567e07a] -> /usr/lib/dovecot/libdovecot.so.0 [0x30d567e0e6] -> /usr/lib/dovecot/libdovecot.so.0 [0x30d567d4ac] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x30d5299ca7] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_logs_clean+0x28) [0x30d529b698] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_view_close+0x49) [0x30d529a7e9] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x30d5293c03] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_list_index_refresh_later+0x92) [0x30d525af62] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x30d52589eb] -> /usr/lib/dovecot/libdovecot-storage.so.0 [0x30d5259217] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x54) [0x30d52352c4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit+0x16) [0x30d5235386] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_user_autoexpunge+0x1f8) [0x30d522a9b8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_user_unref+0x2a) [0x30d523a16a] -> dovecot/lmtp [DATA 172.17.165.14] [0x40696b] -> dovecot/lmtp [DATA 172.17.165.14] [0x406bd6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x49) [0x30d5690579] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xdc) [0x30d5691c3c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa9) [0x30d56906b9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x30d56909e8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x30d562e533] -> dovecot/lmtp [DATA 172.17.165.14](main+0x15c) [0x404c8c] -> /lib64/libc.so.6(__libc_start_main+0xf4) [0x36aea1d9f4] -> dovecot/lmtp [DATA 172.17.165.14] [0x404a79] ---- The data is stored on NFS, with single-node access. mmap_disable is set to 'yes' Anyone know how to solve this? or can share some insights. Running dovecot 2.2.21 (5345f22) -- Tom Sommer

4 9

poppassd
by Adrian Minta 19 Mar '16

19 Mar '16

Hello, does anyone of you knows a poppassd implementation compatible with dovecot mysql or ldap backends ? -- Best regards, Adrian Minta

1 0

TLS handshake issue
by John Oliver 18 Mar '16

18 Mar '16

dovecot-2.0.9 on CentOS 6.7 The system in question is not connected to the Internet, so I can't copy-and-paste. I have to type anything required :-( Brand-new out-of-the-box install with a really minimal dovecot.conf including: service imap-login { inet_listener imaps { address = 192.168.1.10 port = 143 ssl = yes } } ssl_cert=</etc/pki/tls/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key =</etc/pki/tls/private/dovecot.pem That's very, very similar to an existing dovecot server on an old VM I need to replace. Certs are self-signed, I know that's a horrible thing to do, but right now we don't have any choice. I'm connecting with Apple Mail 8.2 running on OS X 10.10.5, another thing we have no choice about :-/ The Apple Mail just sits there stupidly. It's "Connection Doctor" just helpfully reports that it can't establish a connection. I can use 'openssl s_client -showcerts -connect mail:143' and see what I expect to see. The dovecot log with lots of verbosity enabled tells me: imap-login: Info: Disconnected (no auth attempts): rip=192.168.1.200, lip=192.168.1.10, TLS handshaking: Disconnected auth: Debug: auth client connected (pid=21006) imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [192.168.1.200] imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [192.168.1.200] imap-login: Warning: SSL: where=0x2002, ret=1: SSLv2/v3 read client hello A [192.168.1.200] And that's it... those lines get repeated every minute that Mail is running. I'm not seeing anything in any logs that even hints at what it's unhappy about, or any way to increase verbosity any more. Any hints appreciated! -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

4 5

Dovecot LDA with OpenSMTPD
by Eric Kom 18 Mar '16

18 Mar '16

Good day, Can any one help on how to get Dovecot LDA work with OpenSMTPD?

2 1

VS: Re: VS: Re: TLS handshake issue
by Aki Tuomi 18 Mar '16

18 Mar '16

Most applications would expect to see nonencrypted imap reply in 143 and would use starttls to engage ssl ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: John Oliver <joliver(a)john-oliver.net> Päivämäärä: 17.3.2016 21.45 (GMT+02:00) Saaja: dovecot(a)dovecot.org Aihe: Re: VS: Re: TLS handshake issue On Thu, Mar 17, 2016 at 08:38:55PM +0200, Aki Tuomi wrote: > openssl s_client -connect host:143 -starttls imap Why? 'openssl' works just fine, it shows me the certificate and the IMAP banner, and I can log in and list mail. -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

1 0

Released Pigeonhole v0.4.13 for Dovecot v2.2.22.
by Stephan Bosch 18 Mar '16

18 Mar '16

Hello Dovecot users, Here is the final v0.4.13 release of Pigeonhole for Dovecot v2.2.22. Nothing changed since the RC. Changelog v0.4.13: * redirect action: Added the list-id header to the duplicate ID for mail loop prevention. This means that the message sent directly to the user and the message coming through the mailing list itself are treated as different messages by the loop detection of the redirect command, even though their Message-ID may be identical. * Changed the Sieve number type to uint64_t, which means that Sieve numbers can now technically range up to 2^64. Some other Sieve implementation allowed this, making this change necessary for successful migration. + Implemented the sieve_implicit_extensions setting. The extensions listed in this setting do not need to be enabled explicitly using the Sieve "require" command. This behavior directkly violates the standard, but can be necessary for compatibility with some existing implementations of Sieve. Do not use this setting unless you really need to! - redirect action: Made mail loop detection more robust by forcibly adding a Message-ID header if it is missing. - Prevent logging a useless "script not found" error message for LDAP scripts for which the entry exists but no attribute containing a script. This is not necessarily an error. - extprograms plugin: Changed the communication channel between parent and child process for a directly forked program from a socketpair to a double pipe. Linux does not support /dev/stdin, /dev/stdout and friends for sockets. For some shell program authors this may be confusing, so that is why it is changed. When using the script service, these device nodes are still not usable though. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.13.ta… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.13.ta… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Trouble getting vnd.dovecot.filter and filter visible/usable...
by Tolbert, Joshua P 17 Mar '16

17 Mar '16

Hello, I’m trying to make vnd.dovecot.filter available both globally and for users through sieve, but I haven’t had much luck getting things to work right. Sieve scripts won’t validate and vnd.dovecot.filter never shows up in the managesieve capability list. I’ve spent lots of time looking for where problems could be, but I’m out of ideas…So I’m asking you guys. In the protocol lmtp section, I’m defining mail_plugins = $mail_plugins sieve, however I’ve tried it without $mail_plugins too…No luck that way either. Any help/advice would be much appreciated. Thanks! Cheers, Josh

2 2

VS: Re: TLS handshake issue
by Aki Tuomi 17 Mar '16

17 Mar '16

openssl s_client -connect host:143 -starttls imap ---Aki TuomiDovecot oy-------- Alkuperäinen viesti --------Lähettäjä: John Oliver <joliver(a)john-oliver.net> Päivämäärä: 17.3.2016 20.11 (GMT+02:00) Saaja: dovecot(a)dovecot.org Aihe: Re: TLS handshake issue On Thu, Mar 17, 2016 at 08:30:32PM +0300, Andrey Fesenko wrote: > May be use -starttls imap or 993 port and more logs verbose_ssl=yes I am using verbose_ssl = yes Dovecot is currently working with SSL on 143, and I'm trying to not change current client config. As for '-starttls', in what context? -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

2 1

Looking for way to monitor dsync, confirm it is or isn't running
by Rich Wales 17 Mar '16

17 Mar '16

I am syncing two Dovecot sites using the dsync function. I would like to be able to run some sort of periodic health check to confirm that dsync is (or is not) running properly between the two sites, and alert me if dsync is failing or lagging excessively. Does anyone know of a tool to do this? (If possible, something I can set up to run periodically in Nagios?) Thanks for any suggestions. Rich Wales richw(a)richw.org

2 3

Xi has a new home
by Stephan Bosch 17 Mar '16

17 Mar '16

Hi, The automatic package builder Xi has moved to system within the Dovecot infrastructure. This also means that the repositories are available at a new host name: xi.dovecot.fi. The old host name still works and is a CNAME pointing to the new venue. I expect the old domain to be active for years to come. So, there is no need to update your /etc/apt/sources.list right away. Still, it is a good idea to do so. I've updated the wiki accordingly. Regards, Stephan.

4 5

Re: spamc during dovecot-smtp delivery?
by madduck＠madduck.net 17 Mar '16

17 Mar '16

[cc'ing the list for posterity] also sprach Tolbert, Joshua P <jtolbert(a)illinois.edu> [2016-03-16 21:46 +0100]: > I’ve been working on a Postfix/Dovecot/sieve mail server migration > (from Sendmail/Dovecot/procmail) and ran in to a similar problem > to one you talked about a while ago on the dovecot mailing lists. > Did you ever find a good solution for running spamc as the > destination user in sieve? If you did, mind sharing? Thanks! I've never had a problem again since upgrading to Debian jessie, but I also think that the problem's solution was installing a NSS cache, because the deadlocks seemed to take place between Spamassassin and libnss-pgsql2. Transport from Postfix to Dovecot is lmtp:unix:private/dovecot-lmtp (no idea how to do that with Sendmail or why you'd want to use Sendmail) and then Dovecot's sieve is configured to run a filter using /etc/dovecot/sieve.before.d: require [ "vnd.dovecot.filter"]; filter "spamc" [ "--no-safe-fallback" ]; which is enabled in conf.d/90-sieve.conf with sieve_before = /etc/dovecot/sieve.before.d sieve_global_extensions = +vnd.dovecot.filter sieve_plugins = sieve_extprograms and in conf.d/90-sieve-extprograms.conf sieve_filter_bin_dir = /etc/dovecot/sieve-filter and then I made a simple symlink from /etc/dovecot/sieve-filter → /usr/bin/spamc Spamassassin starts with --create-prefs --helper-home-dir --allow-tell and the final step is to integrate the mail user database (vmm in my case) with libnss to provide spamassassin with a way to identify home directories. I use libnss-pgsql2. The /etc/nss-pgsql.conf file I use is available here: http://bugs.debian.org/818465 A successful delivery then looks like this: postfix/smtpd[29778]: connect from mail1.smtp.mailserver4.de[62.216.179.241] postfix/smtpd[29778]: 6D2F74024E: client=mail1.smtp.mailserver4.de[62.216.179.241] postfix/cleanup[32593]: 6D2F74024E: message-id=<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxx> postfix/smtpd[29778]: disconnect from mail1.smtp.mailserver4.de[62.216.179.241] dovecot: lmtp(3570): Connect from local spamd[2140]: spamd: connection from localhost [::1]:57032 to port 783, fd 6 spamd[2140]: spamd: setuid to xxxxxxx%yyyyyyyyyy.zz succeeded spamd[2140]: spamd: processing message <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxx> for xxxxxxx%yyyyyyyy.zz:70032 spamd[2140]: spamd: clean message (-1.9/5.0) for xxxxxxx%yyyyyyyy.zz:70032 in 3.0 seconds, 10222 bytes. spamd[2140]: spamd: result: . -1 - BAYES_00,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE scantime=3.0,size=10222,user=xxxxxxx%yyyyyyyy.zz,uid=70032,required_score=5.0,rhost=localhost,raddr=::1,rport=57032,mid=<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxx>,bayes=0.000000,autolearn=ham autolearn_force=no dovecot: lmtp(3570, xxxxxxx(a)yyyyyyyy.zz) copy from (file): box=INBOX, uid=30613, msgid=<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxx>, size=10945 dovecot: lmtp(3570, xxxxxxx(a)yyyyyyyy.zz) QLZ6IoJ/6lbyDQAARsnb6w: sieve: msgid=<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxxxxxxxxx>: stored mail into mailbox 'INBOX' postfix/lmtp[3569]: 6D2F74024E: to=<xxxxxxx(a)yyyyyyyy.zz>, orig_to=<aaaaaa(a)bbbbbbb.zz>, relay=ambassador.madduck.net[private/dovecot-lmtp], delay=5, delays=2/0.02/0.01/3, dsn=2.0.0, status=sent (250 2.0.0 <xxxxxxx(a)yyyyyyyy.zz> QLZ6IoJ/6lbyDQAARsnb6w Saved) dovecot: lmtp(3570): Disconnect from local: Successful quit Hope this helps… -- @martinkrafft | http://madduck.net/ | http://two.sentenc.es/ "the public is wonderfully tolerant. it forgives everything except genius." -- oscar wilde spamtraps: madduck.bogus(a)madduck.net

1 0

subscribe users mailbox with non-valid mutf7 chars
by Matthias Lay 16 Mar '16

16 Mar '16

Hi all, I got a question if its possible to subscribe a mailbox from another user, who contains non mutf7 valid chars in his mailbox path. I have a private namespace which can subscribe to mailboxes of a shared namespace with public/ prefix in this example username in private namespace is johnd public username is "a & p products group" when I try the subscription I get this one: ******************************************** # doveadm mailbox subscribe -u johnd "public/a & p products group/INBOX" doveadm(johnd): Error: Can't public/a & p products group/INBOX mailbox subscribe to: Invalid mailbox name 'public/a & p products group/INBOX': Missing namespace prefix 'public/a &- p products group/' ******************************************** is there a way to work around this? (except for not to use usernames like this) greetz matze

1 1

Question: encrypt/decrypt with plugin mail_filter
by Zhang Huangbin 16 Mar '16

16 Mar '16

Dear all, I'm trying to encrypt/decrypt mail body with Dovecot plugin 'mail_filter': http://wiki2.dovecot.org/Plugins/MailFilter I wrote a Python script to read mail body and encrypt it, the encryption/decryption part is working as expected, but Dovecot always fail to write modified email on disk: Error: Cached message size smaller than expected (1575 < 1644) Error: Maildir filename has wrong S value, renamed the file from /var/vmail/domain.com/user/cur/1458165453.M632521P17600.c7.iredmail.org,S=1575:2, to /var/vmail/domain.com/user/cur/1458165453.M632521P17600.c7.iredmail.org,S=1575:2, Error: Corrupted index cache file /var/vmail/domain.com/user/dovecot.index.cache: Broken physical size for mail UID 4 Error: read() failed: Invalid argument (uid=4) I know this behave is clearly explained in Dovecot wiki page, the question is, is there any way to overcome this and let Dovecot correctly handle the encrypted/decrypted mail? Thanks. :)

1 0

dsync and ProxyAUTH
by Giovanni Mancuso 16 Mar '16

16 Mar '16

Hi, can i use dync to migrate a mailboxes through PROX-AUTH? Could It be an attractive feature for you? Thanks

2 3

overview zlib efficiency?
by Götz Reinicke - IT Koordinator 16 Mar '16

16 Mar '16

Hi, may be someone has already done that: Do you have a script(?) tool which shows the efficiency of the mail compression if zlib is used? Something that shows the uncompressed size vrs. the compressed. Thanks for hints! /Götz

12 17

Plugin "last-login" - Log SMTP-AUTH information
by Benjamin Hück 16 Mar '16

16 Mar '16

Hello all, we are using the Plugin "last-login" [1] to update user's last-login timestamp or the timestamp of the last incoming message in a MySQL backend. Would it be possible to expand the plugin to also log the timestamp of the last smtp-auth attempt/successful process? Currently in our settings, a smtp-auth request (port 587) is forwarded by postfix to a dovecot backend server for authentication. I couldn`t find out the developer of the plugin otherwise I had contact them immediatly. Thanks and best regards, Benjamin Hück [1] http://wiki2.dovecot.org/Plugins/LastLogin -- ________________________________ KEVAG Telekom GmbH Cusanusstr. 7 D 56073 Koblenz Fon: +49 261 20162-0 Fax: +49 261 20162-25100 http://www.kevag-telekom.de/ Geschäftsführer: Bernd Gowitzke, Gerd Thewalt Sitz der Gesellschaft: Koblenz, Amtsgericht Koblenz, HRB Nr. 5343 USt.IdNr. DE 18 77 67 843 St-Nr. 22/650/0182/7

1 0

New dovecot user needs installation help
by Jason Pruim 16 Mar '16

16 Mar '16

Hey Everyone, So I just setup my first dovecot install with postfix running for the mail server… I can telnet into my dovecot install and login just fine with my user locally… But when I try to add the account from my phone, computer, or telnetting from my local computer, it just hangs and eventually kicks back a generic error saying it can’t be added… Where can I start looking? I’m hosted with amazon web services and I’m waiting on them to approve my request to white list my IP on my instance, but that should only restrict my ability to send email out on port 25… I should still be able to operate locally… According to the firewall on amazon port 143 and 993 are both allowed from any IP address into the server (All outbound traffic is currently open until I get it working) I’m thinking it’s something easy, and I can handle pointers! I don’t necessarily need my hand held the entire way… At least not yet… Here is the output of my dovecot -n: [ec2-user@ip-172-31-22-222 log]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 3.14.48-33.39.amzn1.x86_64 x86_64 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [ec2-user@ip-172-31-22-222 log]$ Let me know if there is anything else you need, or where to go from here! Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 5

Reappearing emails - IMAP trace
by Ron Cleven 16 Mar '16

16 Mar '16

A few days back, I sent an overview of this problem, but received no responses. Since then, I have run dozens of traces to isolate the problem, difficult because there are timing issues involved. I have finally nailed it down. If this is not the proper place to report such bugs or if someone knows that this bug has been fixed, please let me know. As I noted in my earlier post, we have been running Dovecot 2.2.10 with a pair of CentOS 7 boxes with replications for the past year. We have been quite happy with the performance and reliability. Recently we received a report that emails could reappear in the INBOX after being deleted. After running a pile of traces, I determined that the problem was strangely related to replications. For the purposes of this discussion, I will refer to the two symmetric replicating servers as A and B. Further, let us assume that during "normal" operation, all the emails are delivered to A via SMTP and are replicated to B. Under those assumptions, if the IMAP user connects to A (where the messages were originally delivered), there is no problem, at least no problem I was able to find. The problem I am describing only arises if the IMAP user connects to B. Connecting to B has never presented any other problems that I am aware of. The test for which I have provided the trace starts with a test mailbox containing only 3 unread messages in the INBOX. Moving 1 of the unread messages to Trash is all that is needed to reproduce the problem. Remember this is ONLY a problem if the IMAP sessions do not connect to the server to which the messages were originally delivered. Also, I found that there is a timing window. The critical IMAP commands are: UID STORE xxx +FLAGS.SILENT (\Seen) UID MOVE xxx Trash If you introduce a large enough delay (I arbitrarily chose 5 seconds) between those two commands, there is no problem. Presumably this has to do with the two boxes syncing up some critical data structure. It takes a short time for the message that was moved to Trash to reappear in the INBOX. The trace initially shows the number of messages going from 3 to 2 when the message is moved to Trash, but a second or so later, the message count goes back up to 3. Interestingly, the reappearing message shows back up as Unseen in the INBOX but a duplicate copy of it stays in Trash as Seen. Dragging unread messages to Trash may not be polite, but it is technically acceptable. Regarding the trace below , CR's show up as \r, LF's show up as \n, and each line starts with S or C depending upon whether it is from the Server or Client. There is blank line following each connection. Thanks, Ron ============================================================================ S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 3 UNSEEN 3)\r\n S 10002 OK Status completed.\r\n C 10003 SELECT INBOX\r\n S * FLAGS (\Answered \Flagged \Deleted \Seen \Draft)\r\n S * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \* S )] Flags permitted.\r\n S * 3 EXISTS\r\n S * 1 RECENT\r\n S * OK [UNSEEN 1] First unseen.\r\n S * OK [UIDVALIDITY 1457030049] UIDs valid\r\n S * OK [UIDNEXT 129] Predicted next UID\r\n S * OK [HIGHESTMODSEQ 417] Highest\r\n S 10003 OK [READ-WRITE] Select completed (0.000 secs).\r\n C 10004 UID SEARCH 3\r\n S * SEARCH 128\r\n S 10004 OK Search completed (0.000 secs).\r\n C 10005 LIST "" Trash\r\n S * LIST (\HasNoChildren \Trash) "." Trash\r\n S 10005 OK List completed.\r\n C 10006 UID STORE 128 +FLAGS.SILENT (\Seen)\r\n S 10006 OK Store completed.\r\n C 10007 UID MOVE 128 Trash\r\n S * OK [COPYUID 1457030331 128 127] Moved UIDs.\r\n S * 3 EXPUNGE\r\n S * 0 RECENT\r\n S 10007 OK Move completed.\r\n C 10008 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 2 UNSEEN 2)\r\n S 10008 OK [CLIENTBUG] Status on selected mailbox completed.\r\n C 10009 STATUS Trash (MESSAGES UNSEEN)\r\n S * STATUS Trash (MESSAGES 1 UNSEEN 0)\r\n S 10009 OK Status completed.\r\n C 10010 LOGOUT\r\n S * BYE Logging out\r\n S 10010 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 SELECT INBOX\r\n S * FLAGS (\Answered \Flagged \Deleted \Seen \Draft)\r\n S * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \* S )] Flags permitted.\r\n S * 2 EXISTS\r\n S * 0 RECENT\r\n S * OK [UNSEEN 1] First unseen.\r\n S * OK [UIDVALIDITY 1457030049] UIDs valid\r\n S * OK [UIDNEXT 129] Predicted next UID\r\n S * OK [HIGHESTMODSEQ 419] Highest\r\n S 10002 OK [READ-WRITE] Select completed (0.026 secs).\r\n C 10003 UID FETCH 127 (UID RFC822.SIZE FLAGS INTERNALDATE BODYSTRUCTURE B C ODY.PEEK[HEADER.FIELDS (DATE FROM TO SUBJECT CONTENT-TYPE CC REPLY-TO L C IST-POST DISPOSITION-NOTIFICATION-TO X-PRIORITY IN-REPLY-TO BCC SENDER C MESSAGE-ID CONTENT-TRANSFER-ENCODING REFERENCES X-DRAFT-INFO MAIL-FOLLO C WUP-TO MAIL-REPLY-TO RETURN-PATH)])\r\n S * 2 FETCH (UID 127 RFC822.SIZE 771 FLAGS () INTERNALDATE "08-Mar-2016 0 S 8:48:31 -0600" BODYSTRUCTURE ("text" "plain" ("charset" "us-ascii") NIL S NIL "7bit" 7 1 NIL NIL NIL NIL) BODY[HEADER.FIELDS (DATE FROM TO SUBJE S CT CONTENT-TYPE CC REPLY-TO LIST-POST DISPOSITION-NOTIFICATION-TO X-PRI S ORITY IN-REPLY-TO BCC SENDER MESSAGE-ID CONTENT-TRANSFER-ENCODING REFER S ENCES X-DRAFT-INFO MAIL-FOLLOWUP-TO MAIL-REPLY-TO RETURN-PATH)] {108}\r S \n S From: ron(a)cleven.com\r\n S To: testimap(a)usgo.net\r\n S Date: Tue, 08 Mar 2016 08:48:24 -0600 (CST)\r\n S Subject: test2\r\n S \r\n S )\r\n S 10003 OK Fetch completed.\r\n C 10004 UID FETCH 127 (BODY.PEEK[TEXT])\r\n S * 2 FETCH (UID 127 BODY[TEXT] {7}\r\n S test2\r\n S )\r\n S 10004 OK Fetch completed.\r\n C 10005 UID STORE 127 +FLAGS.SILENT (\Seen)\r\n S 10005 OK Store completed.\r\n C 10006 LOGOUT\r\n S * BYE Logging out\r\n S 10006 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 LIST (SUBSCRIBED) "" "*"\r\n S * LIST (\Subscribed) "." Sent\r\n S * LIST (\Subscribed) "." Trash\r\n S * LIST (\Subscribed) "." Drafts\r\n S * LIST (\Subscribed) "." Junk\r\n S * LIST (\Subscribed) "." Blocked\r\n S * LIST (\Subscribed) "." Pending\r\n S * LIST (\Subscribed) "." Archives\r\n S * LIST (\Subscribed) "." Archives.2016\r\n S 10002 OK List completed.\r\n C 10003 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 2 UNSEEN 1)\r\n S 10003 OK Status completed.\r\n C 10004 LOGOUT\r\n S * BYE Logging out\r\n S 10004 OK Logout completed.\r\n S * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE I S DLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n C 10001 LOGIN testimap(a)usgo.net ***********\r\n S 10001 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENAB S LE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDS S UBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UID S PLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRE S S WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in S \r\n C 10002 LIST (SUBSCRIBED) "" "*"\r\n S * LIST (\Subscribed) "." Sent\r\n S * LIST (\Subscribed) "." Trash\r\n S * LIST (\Subscribed) "." Drafts\r\n S * LIST (\Subscribed) "." Junk\r\n S * LIST (\Subscribed) "." Blocked\r\n S * LIST (\Subscribed) "." Pending\r\n S * LIST (\Subscribed) "." Archives\r\n S * LIST (\Subscribed) "." Archives.2016\r\n S 10002 OK List completed.\r\n C 10003 STATUS INBOX (MESSAGES UNSEEN)\r\n S * STATUS INBOX (MESSAGES 3 UNSEEN 2)\r\n S 10003 OK Status completed.\r\n C 10004 LOGOUT\r\n S * BYE Logging out\r\n S 10004 OK Logout completed.\r\n ============================================================================

2 1

syncing mailboxes with dsync after switchover
by Sergey Schwartz 16 Mar '16

16 Mar '16

Gents, I'm relocating mailboxes to a new server. Before switching over to a new server I ran syncing a few times without any issues first I sync files with rsync from the old server to have a local copy, then I sync mailboxes with dsync /usr/bin/doveadm -Dv sync -u $MBOX -R "sdbox:/srv/vmail/temp/srv/srv.bgoperator.ru/${MBOX}:DIRNAME=DbOx-mAiLs" After switching over smtp transport and running dsync as above a few mailboxes were deleted dsync(xxx): Warning: Deleting mailbox 'INBOX': UID=1 already exists locally for a different mail: GUIDs don't match (c005a206e1c6e756f02700003a8929e2 vs 0ba1c03796f5dc524c6d0000b4ca29ec) dsync(xxxx): Warning: Deleting mailbox 'INBOX': UID=8855 GUID=80d5841f0fe2e35677630000b4ca29ec is missing locally dsync(xxxxx): Warning: Deleting mailbox 'INBOX': UID=7508 already exists locally for a different mail: GUIDs don't match (1e03d72074d8e756403700003a8929e2 vs 1dc47a3ac5c4e7562a290000b4ca29ec) dsync(xxxxxx): Warning: Deleting mailbox 'INBOX': UID=8238 GUID=2a6a803bd33fe156f85e0000b4ca29ec is missing locally and a few other mailboxes seemed to fail to sync dsync(xxxxxxx): Warning: Mailbox changes caused a desync. You may want to run dsync again. Is it a bug or I am doing something wrong ? -- Best regards, Sergey Schwartz Senior System Administrator Biblio Globus Tour Operator www.bgoperator.ru T: +7 495 5042500 ext 1532 E: sergey.schwartz(a)bgoperator.com

2 2

VS: New dovecot user needs installation help
by Aki Tuomi 15 Mar '16

15 Mar '16

Can yoi run doveadm log errors too? ---Aki TuomiDovecot oy -------- Alkuperäinen viesti --------Lähettäjä: Jason Pruim <pruimj(a)gmail.com> Päivämäärä: 15.3.2016 4.50 (GMT+02:00) Saaja: dovecot(a)dovecot.org Aihe: New dovecot user needs installation help Hey Everyone, So I just setup my first dovecot install with postfix running for the mail server… I can telnet into my dovecot install and login just fine with my user locally… But when I try to add the account from my phone, computer, or telnetting from my local computer, it just hangs and eventually kicks back a generic error saying it can’t be added… Where can I start looking? I’m hosted with amazon web services and I’m waiting on them to approve my request to white list my IP on my instance, but that should only restrict my ability to send email out on port 25… I should still be able to operate locally… According to the firewall on amazon port 143 and 993 are both allowed from any IP address into the server (All outbound traffic is currently open until I get it working) I’m thinking it’s something easy, and I can handle pointers! I don’t necessarily need my hand held the entire way… At least not yet… Here is the output of my dovecot -n: [ec2-user@ip-172-31-22-222 log]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 3.14.48-33.39.amzn1.x86_64 x86_64 mail_location = mbox:~/mail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [ec2-user@ip-172-31-22-222 log]$ Let me know if there is anything else you need, or where to go from here! Thanks in advance! Jason Pruim pruimj(a)gmail.com

2 1

dovecot wiki...
by Andrew McGlashan 15 Mar '16

15 Mar '16

Hi, Just want to know if this is a problem at my end (in my browser), or if it is something else. When I copy text from the wiki, the page changes to an edit one; that is very, very annoying. How can I stop this if it is normal dovecot wiki behaviour and what do you think I might look at in my browser if it isn't? I'm never likely to want to edit the wiki any time soon. Thanks AndrewM

3 3

Logging the TLS cipher suite
by Luigi Rosa 12 Mar '16

12 Mar '16

Hi, could it be possible to log the TLS cipher suite as Postfix does? This is a typical TLS Dovecot log line: imap-login: Login: user=<user(a)acme.com>, method=DIGEST-MD5, rip=1.2.3.4, lip=4.3.2.1, mpid=19671, TLS, session=<Jsvr46wt2c1ScQfY> This is the Postfix equivalent postfix/smtp[59723]: Anonymous TLS connection established to mail.acmne.com[1.2.3.4]:25: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits) -- Ciao, luigi / +--[Luigi Rosa]-- \ We're not surrounded, we're in a target-rich environment!

2 3

Timout for LDAP connection
by Gordon Grubert 11 Mar '16

11 Mar '16

Hi, we are using a round robin dns record for connections to our ldap system. This works fine for almost all cases. In particular, for dovecot does this mean, when an ldap server is stopped, dovecot instantly reconnects to another ldap server. But when the network connection to the active ldap server is broken, dovecot sticks to the failed ldap server. Is there any possibility to define a connection timeout? This is our current configuration for the ldap connection: # 2.2.devel (2d8f665): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (0de2a19) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.3 uris = ldaps://LDAP-SERVER dn = BINDDN dnpass = BINDPASS auth_bind = yes ldap_version = 3 base = BASEDN scope = subtree user_attrs= ATTRIBUTES user_filter = USERFILTER pass_filter = PASSFILTER iterate_filter = ITERATEFILTER Best regards, Gordon -- Technischer Leiter & stellv. Direktor Universitätsrechenzentrum (URZ) E.-M.-Arndt-Universität Greifswald Felix-Hausdorff-Str. 12 17489 Greifswald Germany Tel. +49 3834 86 1456 Fax. +49 3834 86 1401

5 14

ldap userdb/passwd connection timeout
by skeletor＠lissyara.su 11 Mar '16

11 Mar '16

Hello. I want to use second ldap server for failover. So, i add a second section for userdb/passdb. My question is: what connection timeout, after that dovecot will be try to connectd another ldap server? Can i change it? Thanks.

1 0

Troubleshooting mailbox problems
by Nick Bright 11 Mar '16

11 Mar '16

Greetings, I'm running Dovecot 2.0.9 on my CentOS 6 server, for several thousand mailboxes. Recently, I've had several reports of "my mailbox is suddenly empty, where'd my mail go?" I've enabled debug logging, but I'd like to make sure I have the best level of debug to see things like "delete message" commands? I've configured in logging: auth_debug = yes auth_debug_passwords = no mail_debug = yes plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_group_events = yes mail_log_fields = uid box msgid size } Does this look like a good start? I really think it's a client side problem, but sometimes end users always want to blame the server; and proof must be shown e.g. "Look, here's the log, you're sending delete commands." At which point, we can proceed with dealing with their software problem. Thanks, -- ----------------------------------------------- - Nick Bright - - Vice President of Technology - - Valnet -=- We Connect You -=- - - Tel 888-332-1616 x 315 / Fax 620-331-0789 - - Web http://www.valnet.net/ - ----------------------------------------------- - Are your files safe? - - Valnet Vault - Secure Cloud Backup - - More information & 30 day free trial at - - http://www.valnet.net/services/valnet-vault - ----------------------------------------------- This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.

3 6

Setting up public mailboxes - user not found
by Marti Markov 10 Mar '16

10 Mar '16

Hi all, This is the first time I use the dovecot mail list so I’m sorry if I forget something. My problem is that for some reason I can get public mailboxes to work. I have setup the directory Public, the folders and the cur,tmp and new folder in them: Public | |- .office3 | |- cur |- tmp |- new |- dovecot-acl Here is my dovecot conf: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.14.32-xxxx-grs-ipv6-64 x86_64 auth_default_realm = xxx.com auth_mechanisms = plain login mail_gid = vmail mail_home = /home/vmail/%d/%n mail_location = maildir:~/Maildir mail_plugins = acl mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/home/vmail/xxx.com/Public:INDEXPVT=~/Maildir/Public prefix = Public/ separator = / subscriptions = yes type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)xxx.com protocols = " imap lmtp sieve" service auth { unix_listener auth-client { group = Debian-exim mode = 0660 user = Debian-exim } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener lmtp { mode = 0666 } } ssl = required ssl_cert = </etc/dovecot/xxx.com.pem ssl_key = </etc/dovecot/private/xxx.private.pem ssl_key_password = yyyyyyy userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_plugins = acl sieve } protocol imap { mail_plugins = acl imap_acl } The error I’m getting is that LMTP can’t deliver to office3(a)xxx.com because the user could not be found. (I’m using LDAP authentication for the users) Mar 9 19:50:43 mail spamd[21021]: spamd: connection from localhost.localdomain [127.0.0.1]:56531 to port 783, fd 5 Mar 9 19:50:43 mail spamd[21021]: spamd: setuid to Debian-exim succeeded Mar 9 19:50:43 mail spamd[21021]: spamd: checking message <FBFE5FE1-A3C3-4C3D-8BD9-1C2AAC90BE17(a)xxx.com> for Debian-exim:107 Mar 9 19:50:44 mail spamd[21021]: spamd: clean message (-1.1/5.0) for Debian-exim:107 in 0.5 seconds, 1611 bytes. Mar 9 19:50:44 mail spamd[21021]: spamd: result: . -1 - BAYES_00,HTML_MESSAGE,RDNS_NONE,TVD_SPACE_RATIO scantime=0.5,size=1611,user=Debian-exim,uid=107,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=56531,mid=<FBFE5FE1-A3C3-4C3D-8BD9-1C2AAC90BE17(a)xxx.com>,bayes=0.000000,autolearn=no autolearn_force=no Mar 9 19:50:44 mail spamd[9510]: prefork: child states: II Mar 9 19:50:44 mail dovecot: lmtp(14554): Connect from local Mar 9 19:50:44 mail dovecot: auth: Debug: master in: USER#0111#011office3(a)xxx.com#011service=lmtp Mar 9 19:50:44 mail dovecot: auth: Debug: ldap(office3(a)xxx.com): user search: base=ou=people,dc=xxx,dc=com scope=subtree filter=(&(objectClass=person)(uid=office3)) fields=(all) Mar 9 19:50:44 mail dovecot: auth: Debug: ldap(office3(a)xxx.com): no fields returned by the server Mar 9 19:50:44 mail dovecot: auth: ldap(office3(a)xxx.com): unknown user Mar 9 19:50:44 mail dovecot: auth: Debug: userdb out: NOTFOUND#0111 Mar 9 19:50:44 mail dovecot: lmtp(14554): Disconnect from local: Successful quit So as I see it LMTP tries to see if the user exists and fails because there is no such user (which is true, the LDAP object office3 has a different base). I’m not sure but should Dovecot skip this and check the Public folder first before checking LDAP? Another part of my setup is Exim4. Here is the transport part: dovecot_lmtp: driver = lmtp socket = /var/run/dovecot/lmtp return_path_add #maximum number of deliveries per batch, default 1 batch_max = 200 And here is the auth part: dovecot_login: driver = dovecot public_name = LOGIN server_socket = /var/run/dovecot/auth-client # setting server_set_id might break several headers in mails sent by authenticated smtp. So be careful. server_set_id = $auth1 .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}} .endif dovecot_plain: driver = dovecot public_name = PLAIN server_socket = /var/run/dovecot/auth-client server_set_id = $auth1 .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_in_cipher}{}{}{*}} .endif So any tips on how to fix this would be great.

4 3

zlib plugin doesn't add "Z" flag to Maildir filename
by Tom Sommer 10 Mar '16

10 Mar '16

I enabled zlib compression, so new mails are saved compressed. Now I want to convert the old mails to gzip with the find and gzip command, but now I don't know which files are already gzip compressed by dovecot. Shouldn't zlib_save itself add Z to the Maildir flags? As suggested in the compress guide on http://wiki2.dovecot.org/Plugins/Zlib ? -- Tom

2 4

v2.2.22 release candidate released
by Timo Sirainen 10 Mar '16

10 Mar '16

http://dovecot.org/releases/2.2/rc/dovecot-2.2.22.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.22.rc1.tar.gz.sig There are some larger changes here, especially to doveadm to make it support HTTP API. There's still time to do smaller tweaks to the API, so let us know if you have some improvement ideas. Note that the API was designed to look mostly like JMAP, which we're planning to implement also for v2.3. The plan is to fork v2.3 development tree soon. + Added doveadm HTTP API: See http://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP + virtual plugin: Mailbox filtering can now be done based on the mailbox metadata. See http://wiki2.dovecot.org/Plugins/Virtual + stats: Added doveadm stats reset to reset global stats. + stats: Added authentication statistics if auth_stats=yes. + dsync, imapc, pop3c & pop3-migration: Many optimizations, improvements and error handling fixes. + doveadm: Most commands now stop soon after SIGINT/SIGTERM. - auth: Auth caching was done too aggressively when %variables were used in default_fields, override_fields or LDAP pass/user_attrs. userdb result_* were also ignored when user was found from cache. - imap: Fixed various assert-crashes caused v2.2.20+. Some of them caught actual hangs or otherwise unwanted behavior towards IMAP clients. - Expunges were forgotten in some situations, for example when pipelining multiple IMAP MOVE commands. - quota: Per-namespaces quota were broken for dict and count backends in v2.2.20+ - fts-solr: Search queries were using OR instead of AND as the separator for multi-token search queries in v2.2.20+.

8 8

Re: Client-initiated secure renegotiation
by djk 10 Mar '16

10 Mar '16

On 09/03/16 10:44, Florent B wrote: > Hi, > > I don't see any SSL configuration option in Dovecot to disable > "Client-initiated secure renegotiation". > > It is advised to disable it as it can cause DDoS (CVE-2011-1473). > > Is it possible to have this possibility through an SSL option or other ? > > Thank you. > > Florent ssl_protocols = !SSLv3 !SSLv2 Is that enough?

4 4

Dovecot 2 Issue
by Peter Fraser 10 Mar '16

10 Mar '16

Hi All I have had a Dovecot-1.x Server running without issue for about 5 years now. I decided to set up a new Server and configure version 2 from scratch. I am having a little issue though. Set up on FreeBSD 10.2 Using dovecot2-2.2.21_1 Dovecot starts up but isn't listening on pop3 and imap ports. Not sure what I have missed. My dovecot -a readout is below. Thanks for any help. root@SMTP1:/home/frank # doveconf -a # 2.2.21 (5345f22): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.12 (c1c0a23) # OS: FreeBSD 10.2-RELEASE-p9 amd64 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = yes auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Ln auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_consistent_hashing = no director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_user_kick_delay = 2 secs director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_username = doveadm doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1000 first_valid_uid = 1000 haproxy_timeout = 3 secs haproxy_trusted_networks = hostname = example.com imap_capability = imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_hibernate_timeout = 0 imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_sasl_mechanisms = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/libexec/dovecot listen = * lmtp_address_translate = lmtp_hdr_delivery_address = final lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lmtp_user_concurrency_limit = 0 lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Mail Server ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_proxy_max_disconnect_delay = 0 login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:~/Maildir:INBOX=~/Maildir/:INDEX=~/Maildir/tmp/index mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_server_admin = mail_server_comment = mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_purge_preserve_alt = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = maildir:/home/public/public mailbox Drafts { auto = no autoexpunge = 0 comment = driver = special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 0 comment = driver = special_use = \Junk } mailbox Sent { auto = no autoexpunge = 0 comment = driver = special_use = \Sent } mailbox "Sent Messages" { auto = no autoexpunge = 0 comment = driver = special_use = \Sent } mailbox Trash { auto = no autoexpunge = 0 comment = driver = special_use = \Trash } order = 0 prefix = public/ separator = / subscriptions = yes type = public } passdb { args = default_fields = deny = no driver = pam master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_delete_type = default pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = yes pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = it(a)example.com protocols = sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict-async { chroot = client_limit = 0 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict-async { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-hibernate { chroot = client_limit = 0 drop_priv_before_exec = no executable = imap-hibernate extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener imap-hibernate { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = haproxy = no port = 143 reuse_port = no ssl = no } inet_listener imaps { address = haproxy = no port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-master { group = mode = 0600 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = haproxy = no port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = haproxy = no port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = haproxy = no port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!ADH!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_dh_parameters_length = 1024 ssl_key = </etc/ssl/private/dovecot.pem ssl_key_password = ssl_options = ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = no ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/db/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol lda { mail_plugins = quota acl sieve } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol pop3 { mail_plugins = quota }

2 1

Using dsync to synchronize laptop against remote server
by Dato Simó 10 Mar '16

10 Mar '16

Hello! I’m thinking of changing the way I sync mail to my laptop, and I have a couple questions about my intended setup. In brief, my plan is: instead of running offlineimap against various IMAP accounts (my personal one included), I will run fetchmail on my private server, and classify mail with Sieve there. Then I’ll run a local Dovecot on my laptop, and do a master/master replication from my personal server/account with dsync. I have two quick questions about this (I have never used dsync before): 1. Reading the manual page, it seems that I probably want stateful synchronization (-s flag). Not having used it before, I’m curious about what lag I can expect. Does it compare to an IMAP IDLE/IMAP NOTIFY connection? Or is it asynchronous / with a timer? 2. I assume modifying my local Maildirs with e.g. Mutt is... a big no-no? Instead, should I always force Mutt to go through the local IMAP server? Many thanks in advance, -d

1 0

Re: Dovecot stops responding when I update SSL certificate
by HotSlots Webmaster 10 Mar '16

10 Mar '16

Time to put an end to this saga... I had an issue that Dovecot refused to serve an updated SSL certificate - one that Postfix had no issue with. Though I quadruple-checked that the cert file and private key file were correct, in the end I simply directed both cert and key files to the file I was using for Postfix (which had both the cert and private key). That worked. Darned if I know what it didn't like about the other files, but I'm back in business with the new cert. Thanks for the responsiveness from Aki. Steve L

2 1

Replication not working
by Simon Pierre Desrosiers 10 Mar '16

10 Mar '16

Hello, I am trying to setup replication between two Mac OS X El Capitan Server. I have added the field as I could understand from the replication page of dovecot and from a few poste in the mailing list. The mac uses the system user _dovecot as main system account. I have setup ssh keys between the two systems for the two _dovecot servers. SSh works fine from the terminal. But yet, I get these messages in the log file : Mar 09 20:18:44 auth: Error: od[getpwnam_ext](submit): No record for user Mar 09 20:18:44 doveadm: Error: Host key verification failed. Mar 09 20:18:44 dsync-local(submit): Error: read(_dovecot(a)laposte.mycompagny.com) failed: EOF Mar 09 20:18:44 dsync-local(submit): Error: Remote command returned error 255 Mar 09 20:23:44 auth: Error: od[getpwnam_ext](submit): No record for user Mar 09 20:23:44 doveadm: Error: Host key verification failed. Mar 09 20:23:44 dsync-local(submit): Error: read(_dovecot(a)laposte.mycompagny.com) failed: EOF Mar 09 20:23:44 dsync-local(submit): Error: Remote command returned error 255 and so on every few minutes. I have a few things about which I am not sure. We configure port 12345, but nothing listen on that port. The doveadm_password, what is it exactly ? Should I use a distinct account than _dovecot for synchronisation (all the fields that need to be added for replication) ? Here is my configuration, any help would be appreciated : # 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 15.3.0 x86_64 hfs auth_mechanisms = cram-md5 digest-md5 gssapi auth_realms = labanque.mycompagny.com auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n debug_log_path = /Library/Logs/Mail/mail-debug.log default_internal_user = _dovecot default_login_user = _dovenull doveadm_password = MyOwnSecret doveadm_port = 12345 dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u first_valid_gid = 6 first_valid_uid = 6 imap_id_log = * imap_id_send = "name" * "version" * imap_urlauth_submit_user = submit info_log_path = /Library/Logs/Mail/mail-info.log log_path = /Library/Logs/Mail/mail-err.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = mail mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib acl fts fts_sk notify replication managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M namespace acl-mailboxes { list = children location = maildir:/Library/Server/Mail/Data/mail/users/%%u:INDEX=/Library/Server/Mail/Data/mail/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } namespace list-archives { list = children location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%%u prefix = archives.%%u. separator = . subscriptions = no type = shared } passdb { driver = od } passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } plugin { acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes fts = sk mail_replica = remote:_dovecot@laposte.mycompagny.com quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u quota_warning2 = storage=80%% quota-warning %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u stats_refresh = 30 secs stats_track_cmds = yes } postmaster_address = postmaster(a)labanque.mycompagny.com protocols = imap lmtp sieve pop3 quota_full_tempfail = yes service aggregator { fifo_listener replication-notify-fifo { user = _dovecot } unix_listener replication-notify { user = _dovecot } } service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service doveadm { user = _dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service indexer-worker { user = _dovecot } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } service stats { fifo_listener stats-mail { mode = 0600 user = _dovecot } } ssl = required ssl_ca = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.chain.pem ssl_cert = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.key.pem ssl_key_path = /etc/certificates/labanque.mycompagny.com.423929C9712FE705D69805A43769B318C7D3CBB3.key.pem userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf global_quota=5000 enforce_quotas=yes driver = od } userdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib acl fts fts_sk sieve } protocol lda { mail_plugins = quota zlib acl fts fts_sk sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = quota zlib acl fts fts_sk imap_acl imap_quota imap_zlib } protocol pop3 { mail_max_userip_connections = 6 }

1 0

Released Pigeonhole v0.4.13.rc1 for Dovecot v2.2.22.rc1.
by Stephan Bosch 10 Mar '16

10 Mar '16

Hello Dovecot users, Pigeonhole v0.4.12 still compiles against Dovecot v2.2.22.rc1, but only with warnings. That is the primary reason for this new release. However, there are also a few significant changes as listed below. When no significant problems are reported, a definitive release will follow closely after Dovecot v2.2.22 is released. Changelog v0.4.13: * redirect action: Added the list-id header to the duplicate ID for mail loop prevention. This means that the message sent directly to the user and the message coming through the mailing list itself are treated as different messages by the loop detection of the redirect command, even though their Message-ID may be identical. * Changed the Sieve number type to uint64_t, which means that Sieve numbers can now technically range up to 2^64. Some other Sieve implementation allowed this, making this change necessary for successful migration. + Implemented the sieve_implicit_extensions setting. The extensions listed in this setting do not need to be enabled explicitly using the Sieve "require" command. This behavior directkly violates the standard, but can be necessary for compatibility with some existing implementations of Sieve. Do not use this setting unless you really need to! - redirect action: Made mail loop detection more robust by forcibly adding a Message-ID header if it is missing. - Prevent logging a useless "script not found" error message for LDAP scripts for which the entry exists but no attribute containing a script. This is not necessarily an error. - extprograms plugin: Changed the communication channel between parent and child process for a directly forked program from a socketpair to a double pipe. Linux does not support /dev/stdin, /dev/stdout and friends for sockets. For some shell program authors this may be confusing, so that is why it is changed. When using the script service, these device nodes are still not usable though. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.13… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.13… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Re: Dovecot 2 Issue
by Joseph Tam 09 Mar '16

09 Mar '16

Peter Fraser <petros.fraser(a)gmail.com> writes: > Dovecot starts up but isn't listening on pop3 and imap ports. Not sure what > I have missed. My dovecot -a readout is below. Thanks for any help. "doveconf -n" would be better as it will only show non-default settings. > ... > protocols = sieve > ... I'm thinking this ought to be protocols = imap pop3 sieve Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot & Pigeon w/ MySQL
by Jorge Bastos 09 Mar '16

09 Mar '16

Howdy, I'm looking for a good howto to have pigeon saving the sieve scripts on an mysql table. Can some point me to a good one? Dr. google doesn't show me much about it. Thanks in advanced, Jorge,

2 3

dovecot: imap-login: Panic: Trying to allocate 0 bytes
by Ron Garret 08 Mar '16

08 Mar '16

My ISP had a hard drive crash. After the dust settled, my dovecot installation started failing with the following error every time a client tries to connect: dovecot: imap-login: Panic: Trying to allocate 0 bytes My installation has otherwise been stable and rock-solid for years. Both I and the techs at my ISP are stumped. Any advice on how to debug this would be greatly appreciated. Vital info: [ron@vm1:/etc/dovecot]$ /usr/sbin/dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 log_timestamp: %Y-%m-%d %H:%M:%S ssl_ca_file: /etc/ssl/local-certs/startssl.ca.pem ssl_cert_file: /etc/ssl/local-certs/... ssl_key_file: /etc/ssl/local-keys/... login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login first_valid_uid: 100 mail_privileged_group: mail mbox_write_locks: fcntl dotlock auth default: user: postfix passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I have checked the MySQL configuration and everything seems to be OK there. In fact, I’ve checked everything that I know how to check, and everything seems to be OK. And yet it is not working. Many thanks, rg

1 1