- dovecot - dovecot.org

Re: imap_logout_format improvements
by Joseph Tam 16 May '15

16 May '15

Timo Sirainen wrote: > So all in all, you can now add to imap_logout_format: >... > Any thoughts on what else would be useful? Maybe quota stats like number of quota errors, or quota usage? Bytes used by Email marked \Deleted? Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] IMAP and POP3 operations log per user
by Miloš Dukić 15 May '15

15 May '15

On 05/14/15 23:49, Jorge Bastos wrote: > Hi, > > > > I'd like to have a log per user, and protocol (imap+pop3), where this log > would tell me/save the message sender+subject+operation (deleted, marked to > expunge/other/was read/other). > > Is there something similar to this that already exists? > > > > If not is there something like this on the TODO/whishlist? > > > > Thanks in advanced, > > Jorge Bastos > . > Jorge, Per user loggin is not available. You can enable Dovecot events in 10-logging.conf. Just uncomment mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename in plugin section. Depending on your setup, it will be logged to /var/log/maillog, or whatever you defined in your syslog configuration.

1 0

Released Pigeonhole v0.4.8 for Dovecot v2.2.18
by Stephan Bosch 15 May '15

15 May '15

Hello Dovecot users, Here is the final 0.4.8 release. No significant changes were committed since the last release candidate. Changelog v0.4.8: * LDA Sieve plugin: Dovecot changed the deliver_log_format setting to include %{delivery_time}. This prompted changes in Pigeonhole that make this release dependent on Dovecot v2.2.17. + Implemented magic to make sieve_default script visible from ManageSieve under a configurable name. This way, users can see the default rules, edit them and store a private adjusted version. This could also be achieved by copying the default script into the user's script storage, but updates to the global sieve_default script would be ignored that way. + ManageSieve: Implemented support for reporting command statistics at disconnect. Statistics include the number of bytes and scripts uploaded/downloaded/checked and the number of scripts deleted/renamed. - Fixed problem in address test: erroneously decoded mime-encoded words in address headers. - extprograms plugin: Fixed failure occurring when connecting to script service without the need to read back the output from the external program. - Fixed bug in script storage path normalization occurring with relative symbolic links below root. - Fixed and updated various parts of the documentation - ManageSieve: Used "managesieve" rather than "sieve" as login service name, which means that all managesieve-specific settings where ignored. - Managesieve: Storage quota was not always enforced properly for scripts uploaded as quoted string. Nobody uses that, but it is allowed in the specification and we support it, so it should work properly. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Many Duplicated messages after migrate from 2.0.19 to 2.2.15
by Listas＠Adminlinux 15 May '15

15 May '15

Hi, In my company, we have several failover clusters (~50k accounts per cluster) with Ubuntu12.04 and Dovecot-2.0.19 (without dsync, replication at block level with DRBD). We are migrating to active/active clusters with Ubuntu14.04 and Dovecot-2.2.15 with replication via dovecot-dsync. Each new cluster consists of two machines and each machine runs two instances of Dovecot (one for backend and the other for proxy Dovecot-director). We did the migration of message files, indexes and sieve scripts using rsync to one of the backends. After we turn on the second backend and let the dsync work in replication for him. Now, many accounts are with duplicated messages and some new emails delivered are also being duplicated. Doveadm deduplicate doesn't work for me. I ran: doveadm deduplicate -u <user> -m ALL Does do the migration of files with rsync was a mistake ? We are using mdbox on both clusters. My confs with doveconf -n for both clusters: http://www.adminlinux.com.br/newcluster_doveconf.txt http://www.adminlinux.com.br/oldcluster_doveconf.txt Thanks and regards, Thiago Henrique

1 0

v2.2.18 released
by Timo Sirainen 15 May '15

15 May '15

http://dovecot.org/releases/2.2/dovecot-2.2.18.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.18.tar.gz.sig Oops, director was somewhat broken in 2.2.17. I thought I tested the last changes in it well enough, but looks like not. To avoid all existing Dovecot director installations from breaking I decided to make 2.2.18 release quickly afterwards.. BTW. We're planning on making some changes soon to how version control is used in Dovecot development, which should help avoid these kind of problems. The main problem now is that everything gets directly committed to the master branch (although we have a separate more stable dovecot-ee repo also). The new plan is to do something like this: http://nvie.com/posts/a-successful-git-branching-model/ Besides some minor compiling issues and other small changes, the important ones are: - director: Login UNIX sockets were normally detected as doveadm or director ring sockets, causing it to break in existing installations. - sdbox: When copying a mail in alt storage, place the destination to alt storage as well.

3 2

Best practice for getting sieve scripts replicated?
by Michael Grimm 15 May '15

15 May '15

Hi — I do have replication between two servers running, and mail is replicated without any issues. I do have sieve running at both servers without any issues. But replication of sieve scripts doesn't work as "expected": Whenever I do modify my default script und upload it via "doveadm sieve put -u abc -a default < default" it becomes uploaded to the home directory of user abc as expected, but it will not be replicated to the partner server. Whenever I do deactivate the default script by "doveadm sieve deactivate -u abc", followed by a deletion "doveadm sieve delete -u abc default" plus subsequent upload of the script "doveadm sieve put -u abc -a default < default", replication takes place instantly. Questions: Is a modification of a sieve script supposed to be triggered the latter way? Or am I doing it the wrong way? Thanks and regards, Michael

2 5

Alternate Storage altmove not working bug
by Daniel van Ham Colchete 15 May '15

15 May '15

Hello everyone! I would like to report a bug here. We are using dovecot's sdbox with alternate storage here. From time to time my SSD partition gets full and I always find users with lots of e-mails stuck there, and altmove just won't move them. It moves most of the e-mails correctly, but a few was getting stuck everyday. So, I think I have found the problem! When a user moves the message from one mailbox to another, the move will keep all the flags! Including MAIL_INDEX_MAIL_FLAG_BACKEND 0x40. So, altmove think this message was already moved and doesn't do anything. I did a doveadm dump on the destination mailbox's index and what I see is a lot of this: RECORD: seq=104, uid=104, flags=0x48 (Seen) - ext 0 keywords : (0000) - ext 1 modseq : 12 (0c00000000000000) - ext 3 cache : 14004 (b4360000) - cache offset=14004 size=76, prev_offset = 0 - mime.parts: (48000000b404000000000000cc04000000000000e542000000000000fd4300000000000018010000) (pos=0 hdr.p=1204 hdr.v=1228 body.p=17125 body.v=17405 flags=48) - size.physical: 18329 (9947000000000000) - date.received: 1418235366 (e68d8854) Although the 0x40 flag is set, the file still lives on the main/ssd storage area. My config: http://pastebin.com/8Wk4bfRK Dovecot version: 2.2.5-0~auto+22 Host is Xeon E3 64bit, running Debian 7. Filesystem is plain local ext4 on both storage areas I know my version is outdated but I didn't find anything related to this there. Just one last question: how can I remove that flag from the message? I have taken a look at doveadm-flags(1) but it doesn't seem to allow anything on that flag. Thank you very much! Best, Daniel Colchete

2 2

Return code 139 when enabling auth debugging
by Stefan Midjich 15 May '15

15 May '15

Hi I'm running dovecot 2.2.10 installed from base repos on CentOS 7. I'm trying to use sqlite as an auth backend but it's not working so I enabled some auth debugging settings in conf.d/10-logging.conf and then dovecot refused to start. sudo dovecot -F produced 139. Here is doveconf -n: http://dpaste.com/2BNB2F7 Unfortunately when I have these settings enabled doveconf does not work and only produces the first comment line. So here is the output of sudo grep -v '^#' /etc/dovecot/conf.d/10-logging.conf | grep -v '^$': http://dpaste.com/0G0VVK8 And when these settings are uncommented dovecot -F produces return code 139 and no output. So I'm having a hard time troubleshooting my authentication when I can't even troubleshoot my debug options not working. ;) -- Hälsningar / Greetings http://Stefan.Midjich.name

1 0

Re: [Dovecot] IMAP and POP3 operations log per user
by Steffen Kaiser 15 May '15

15 May '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 14 May 2015, Jorge Bastos wrote: > I'd like to have a log per user, and protocol (imap+pop3), where this log > would tell me/save the message sender+subject+operation (deleted, marked to > expunge/other/was read/other). > Is there something similar to this that already exists? Check out the mail_log plugin. You'll have to break the logfiles by users via script. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVVWSGHz1H7kL/d9rAQLIzAf/ZtNOLa1n12LnxwhMaS1B+6LEHDOCZWtw ldTarGE0uovu/OH84PEq4MkE5Y1Oww+VWmA+b2csBx1C0bZmcQeF2g7O65fESYsI Qu/xSuJLhOyUm4sppE62Zqyxba+rG2tyj9XpKMrHI6nU3ZTCOhVu/RJ2TB2WkhkB 21pgYEpkBYvRZK2PPqRwl+Lwc3oGQvWoYHcyniXL0v2P5tNNQj1gTuGVm53dPliM cFm9p4EjAOKEZyFgQokBljDpp03OMpEu16GT8XjCg8Fxg2BkF2XHBx/Wvv8DxQCC vyLA1SFMLNNRoizwF+xVlUJu4AW8fWBLhCgvOAFw4mFXkbMoi+lUwQ== =vRwJ -----END PGP SIGNATURE-----

1 0

Trying to get mail working
by Steve Matzura 15 May '15

15 May '15

I have charge of a very mixed system--current OS (Fedora 20--OK 21's out but I just haven't upgraded yet), current (or nearly so) Mailman (2.1.18-1), Postfix 2.10 with a configuration file sfrom something a lot older which I've run through the upgrade-configuration procedure, and old Dovecot (1.0.15). Is there anything I can do to test each of these components individually, then add a second component and test the three pairs, then all three together? I am nobody's definitioin of an expert in any of these three components, so am having a lot of trouble making them work together, so I thought maybe there might be some test procedure that might straighten me out. Thanks in advance.

2 1

[Dovecot] IMAP and POP3 operations log per user
by Jorge Bastos 14 May '15

14 May '15

Hi, I'd like to have a log per user, and protocol (imap+pop3), where this log would tell me/save the message sender+subject+operation (deleted, marked to expunge/other/was read/other). Is there something similar to this that already exists? If not is there something like this on the TODO/whishlist? Thanks in advanced, Jorge Bastos

1 0

v2.2.17 Segfault
by Adam Lackorzynski 14 May '15

14 May '15

Hi, I'm using libexec/dovecot/imap via a ssh tunnel. 2.2.17 segfaults while accessing a NULL pointer. The following change fixes it for me: --- dovecot-2.2.17/src/lib-imap/imap-keepalive.c 2015-05-03 11:12:11.000000000 +0200 +++ dovecot-2.2.17/src/lib-imap/imap-keepalive.c 2015-05-14 20:06:29.490617405 +0200 @@ -11,6 +11,8 @@ { unsigned int addr; + if (!ip) + return FALSE; if (ip->family == 0) return FALSE; if (ip->family == AF_INET) { Thanks, Adam -- Adam adam(a)os.inf.tu-dresden.de Lackorzynski http://os.inf.tu-dresden.de/~adam/

2 1

Pigeonhole v0.4.8.rc3 compilation error (bad mail-deliver.h)
by Jacques Distler 14 May '15

14 May '15

Got a /usr/local/include/dovecot/mail-deliver.h:30:17: error: field has incomplete type 'struct timeval' struct timeval delivery_time_started; ^ error. This is because mail-deliver.h in dovecot-2.2.17 is missing an #include <sys/time.h> Adding that line to mail-deliver.h fixes the problem. Oddly, I had no problem compiling dovecot itself.

2 1

v2.2.17 released
by Timo Sirainen 14 May '15

14 May '15

http://dovecot.org/releases/2.2/dovecot-2.2.17.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.17.tar.gz.sig A few director improvements since RC2, some fixes and a new plugin: http://wiki2.dovecot.org/Plugins/QuotaClone * Dovecot no longer checks or warns if a mountpoint is removed. This was causing more trouble than it was worth. Make sure that all the mountpoints that Dovecot accesses aren't writable by mail processes when they're unmounted. * dict server wasn't properly escaping/unescaping data. Fixing this broke backwards compatibility with data that contains line feeds. This hopefully affects only very few installations. If you're using dict to save multiline data (Sieve scripts to SQL), you may be affected. * imap: SPECIAL-USE capability is no longer advertised if there are no special_use flags specified for any mailboxes. + lmtp: Added lmtp_hdr_delivery_address setting to specify whether to include email address in Delivered-To: and Received: headers. + Added initial version of full text search library, which includes language-specific text normalization and filtering. This is still in development, but it's already possible to use for testing with fts-lucene and fts-solr. + lda, lmtp: deliver_log_format can now include %{delivery_time}, which expands to how many milliseconds it took to deliver the mail. With LMTP %{session_time} also expands to how many milliseconds the LMTP session took, not including the delivery time. + lmtp proxy: Mail delivery logging includes timing information. + imap: Most IMAP commands now include in the tagged reply how many milliseconds it took to run the command (not counting the time spent on waiting for the IMAP client to read/write data). + director: Implemented director_proxy_maybe passdb extra field to be able to run director and backend in the same Dovecot instance. (LMTP doesn't support mixed proxy/non-proxy destinations currently.) + doveadm: Added -F <file> parameter to read a list of users from the given file and run the command for all the users. This is similar to -A parameter reading the list of users from userdb lookup. + Implemented initial Cassandra CQL support as lib-sql backend. It's only usable as dict backend currently. + Added quota-clone plugin to copy current quota usage to a dict. - auth: If auth_master_user_separator was set, auth process could be crashed by trying to log in with empty master username. - imap-login, pop3-login: Fixed crash on handshake failures with new OpenSSL versions (v1.0.2) when SSLv3 was disabled. - auth: If one passdb fails allow_nets check, it shouldn't have failed all the other passdb checks later on. - imap: Server METADATA couldn't be accessed - imapc: Fixed \Muted label handling in gmail-migration. - imapc: Various bugfixes and improvements. - Trash plugin fixes by Alexei Gradinari - mbox: Fixed crash/corruption in some situations

2 1

Released Pigeonhole v0.4.8.rc3 for Dovecot v2.2.17
by Stephan Bosch 13 May '15

13 May '15

Hello Dovecot users, RC2 had one more important bug caused by the new sieve_default_name feature. To prevent causing more of such rather stupid bugs in the future, I created an external shell-based test suite to test dovecot-lda delivery, the doveadm sieve tools and ManageSieve. These kind of tests aren't possible with the current Sieve-based test suite that is included in the Pigeonhole tarball. Now I can test most basic top-level Pigeonhole functionality in one go. Additionally, I created one new feature for ManageSieve. It allows logging various statistics at client disconnect, much like POP3 currently supports. This is e.g. useful for debugging. In the process, I fixed a few ManageSieve bugs as well. If RC3 doesn't cause any more issues, I will release 0.4.8 this Friday. Changelog v0.4.8 (updated): * LDA Sieve plugin: Dovecot changed the deliver_log_format setting to include %{delivery_time}. This prompted changes in Pigeonhole that make this release dependent on Dovecot v2.2.17. + Implemented magic to make sieve_default script visible from ManageSieve under a configurable name. This way, users can see the default rules, edit them and store a private adjusted version. This could also be achieved by copying the default script into the user's script storage, but updates to the global sieve_default script would be ignored that way. + ManageSieve: Implemented support for reporting command statistics at disconnect. Statistics include the number of bytes and scripts uploaded/downloaded/checked and the number of scripts deleted/renamed. - Fixed problem in address test: erroneously decoded mime-encoded words in address headers. - extprograms plugin: Fixed failure occurring when connecting to script service without the need to read back the output from the external program. - Fixed bug in script storage path normalization occurring with relative symbolic links below root. - Fixed and updated various parts of the documentation - ManageSieve: Used "managesieve" rather than "sieve" as login service name, which means that all managesieve-specific settings where ignored. - Managesieve: Storage quota was not always enforced properly for scripts uploaded as quoted string. Nobody uses that, but it is allowed in the specification and we support it, so it should work properly. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc3… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc3… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v2.2.17 release candidate 2 released
by Timo Sirainen 13 May '15

13 May '15

http://dovecot.org/releases/2.2/rc/dovecot-2.2.17.rc2.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.17.rc2.tar.gz.sig Changes since rc1: - Compiling fix for fs-compress in Solaris and maybe others. - Implemented Cassandra CQL support as lib-sql backend. This is mainly usable as dict-sql backend. - lib-fts fixes and improvements - Some other small random changes If no new issues are found, v2.2.17 final should be out in a day or two. (Actually looks like I have a few more bugs that probably will be fixed for it.) Changes since v2.2.16: * Dovecot no longer checks or warns if a mountpoint is removed. This was causing more trouble than it was worth. Make sure that all the mountpoints that Dovecot accesses aren't writable by mail processes when they're unmounted. * dict server wasn't properly escaping/unescaping data. Fixing this broke backwards compatibility with data that contains line feeds. This hopefully affects only very few installations. If you're using dict to save multiline data (Sieve scripts to SQL), you may be affected. * imap: SPECIAL-USE capability is no longer advertised if there are no special_use flags specified for any mailboxes. + lmtp: Added lmtp_hdr_delivery_address setting to specify whether to include email address in Delivered-To: and Received: headers. + Added initial version of full text search library, which includes language-specific text normalization and filtering. This is still in development, but it's already possible to use for testing with fts-lucene and fts-solr. + lda, lmtp: deliver_log_format can now include %{delivery_time}, which expands to how many milliseconds it took to deliver the mail. With LMTP %{session_time} also expands to how many milliseconds the LMTP session took, not including the delivery time. + lmtp proxy: Mail delivery logging includes timing information. + imap: Most IMAP commands now include in the tagged reply how many milliseconds it took to run the command (not counting the time spent on waiting for the IMAP client to read/write data). + director: Implemented director_proxy_maybe passdb extra field to be able to run director and backend in the same Dovecot instance. (LMTP doesn't support mixed proxy/non-proxy destinations currently.) + doveadm: Added -F <file> parameter to read a list of users from the given file and run the command for all the users. This is similar to -A parameter reading the list of users from userdb lookup. + Implemented initial Cassandra CQL support as lib-sql backend. It's only usable as dict backend currently. - auth: If auth_master_user_separator was set, auth process could be crashed by trying to log in with empty master username. - imap-login, pop3-login: Fixed crash on handshake failures with new OpenSSL versions (v1.0.2) when SSLv3 was disabled. - auth: If one passdb fails allow_nets check, it shouldn't have failed all the other passdb checks later on. - imap: Server METADATA couldn't be accessed - imapc: Fixed \Muted label handling in gmail-migration. - imapc: Various bugfixes and improvements. - Trash plugin fixes by Alexei Gradinari - mbox: Fixed crash/corruption in some situations when the first mail was expunged.

2 3

dovecot-lda panics when postmaster_address is given on command line
by Onno Molenkamp 13 May '15

13 May '15

Hi, When passing a postmaster_address to dovecot-lda on the command line with -o, it panics: $ ./dovecot-lda -o postmaster_address=anything lda(onno,)Panic: file lda-settings.c: line 80 (lda_settings_check): assertion failed: (set->postmaster_address[0] == SETTING_STRVAR_UNEXPANDED[0]) It looks like postmaster_address has already been expanded at that point when it's given on the command line. (set->postmaster_address[0] is "1") I'm running v2.2.15, but with v2.2.17.rc1 the same thing happens. Regards, Onno

2 1

Released Pigeonhole v0.4.8.rc1 for Dovecot v2.2.17.rc1
by Stephan Bosch 11 May '15

11 May '15

Hello Dovecot users, Here's the Pigeonhole RC that goes with the Dovecot RC. It includes a few small fixes and one new feature. Changelog v0.4.8.rc1: * LDA Sieve plugin: Dovecot changed the deliver_log_format setting to include %{delivery_time}. This prompted changes in Pigeonhole that make this release dependent on Dovecot v2.2.17. + Implemented magic to make sieve_default script visible from ManageSieve under a configurable name. This way, users can see the default rules, edit them and store a private adjusted version. This could also be achieved by copying the default script into the user's script storage, but that way updates to the global sieve_default script would be ignored. - Fixed problem in address test: erroneously decoded mime-encoded words in address headers. - extprograms plugin: Fixed failure occurring when connecting to script service without the need to read back the output from the external program. - Fixed bug in script storage path normalization occurring with relative symbolic links below root. - Fixed and updated various parts of the documentation. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc1… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc1… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

3 7

Re: Dovecot is not reading connections from iOS devices correctly. Any ideas?
by Joseph Tam 11 May '15

11 May '15

Robert Chalmers writes: > dovecot-info.log > May 11 09:27:45 imap-login: Info: Aborted login (no auth attempts in 0 > secs): user=<>, rip=192.168.0.1, lip=192.168.0.15, > session=<pXcBJ8oVbgDAqAAB> > > When I try to connect using either the iOS Mail app, or Outlook mail > app, nothing happens at al with ssl, and if I use plain login the iOS > device tells me I have either the username or password wrong - which I > haven't. Some mail readers have auto-discover features that are rather stupid. If possible, manually configure the SSL style (TLS/STARTTLS) and port rather than letting it guess. To diagnose whether it is some dovecot config error, you can manually connect with both flavours of SSL openssl s_client -connect 192.168.0.15:993 ... or ... openssl s_client -starttls imap -connect 192.168.0.15:143 then if it gets past the SSL handshake, a login <user> <password> to test the authentication part. This will at least tell you whether it's a client side or server side issue. (However, since it is working with other client, it's probably a client side issue.) Joseph Tam <jtam.home(a)gmail.com>

1 0

v2.2.17 release candidate released
by Timo Sirainen 11 May '15

11 May '15

http://dovecot.org/releases/2.2/rc/dovecot-2.2.17.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.17.rc1.tar.gz.sig Quite a lot of changes, so here's a release candidate first. If no problems are reported I'll make v2.2.17 release early next week. Please test especially non-Linux systems as there are some larger configure/Makefile changes done since v2.2.16. * Dovecot no longer checks or warns if a mountpoint is removed. This was causing more trouble than it was worth. Make sure that all the mountpoints that Dovecot accesses aren't writable by mail processes when they're unmounted. * dict server wasn't properly escaping/unescaping data. Fixing this broke backwards compatibility with data that contains line feeds. This hopefully affects only very few installations. If you're using dict to save multiline data (Sieve scripts to SQL), you may be affected. * imap: SPECIAL-USE capability is no longer advertised if there are no special_use flags specified for any mailboxes. + lmtp: Added lmtp_hdr_delivery_address setting to specify whether to include email address in Delivered-To: and Received: headers. + Added initial version of full text search library, which includes language-specific text normalization and filtering. This is still in development, but it's already possible to use for testing with fts-lucene and fts-solr. + lda, lmtp: deliver_log_format can now include %{delivery_time}, which expands to how many milliseconds it took to deliver the mail. With LMTP %{session_time} also expands to how many milliseconds the LMTP session took, not including the delivery time. + lmtp proxy: Mail delivery logging includes timing information. + imap: Most IMAP commands now include in the tagged reply how many milliseconds it took to run the command (not counting the time spent on waiting for the IMAP client to read/write data). + director: Implemented director_proxy_maybe passdb extra field to be able to run director and backend in the same Dovecot instance. (LMTP doesn't support mixed proxy/non-proxy destinations currently.) + doveadm: Added -F <file> parameter to read a list of users from the given file and run the command for all the users. This is similar to -A parameter reading the list of users from userdb lookup. - auth: If auth_master_user_separator was set, auth process could be crashed by trying to log in with empty master username. - imap-login, pop3-login: Fixed crash on handshake failures with new OpenSSL versions (v1.0.2) when SSLv3 was disabled. - auth: If one passdb fails allow_nets check, it shouldn't have failed all the other passdb checks later on. - imap: Server METADATA couldn't be accessed - imapc: Fixed \Muted label handling in gmail-migration. - imapc: Various bugfixes and improvements. - Trash plugin fixes by Alexei Gradinari - mbox: Fixed crash/corruption in some situations when the first mail was expunged.

10 17

Released Pigeonhole v0.4.8.rc2 for Dovecot v2.2.17.rc1
by Stephan Bosch 11 May '15

11 May '15

Hello Dovecot users, Ok, RC1 contained one rather stupid bug that caused a segfault at delivery. It was caused by a new feature, so the list of changes is not updated. Changelog v0.4.8: * LDA Sieve plugin: Dovecot changed the deliver_log_format setting to include %{delivery_time}. This prompted changes in Pigeonhole that make this release dependent on Dovecot v2.2.17. + Implemented magic to make sieve_default script visible from ManageSieve under a configurable name. This way, users can see the default rules, edit them and store a private adjusted version. This could also be achieved by copying the default script into the user's script storage, but that way updates to the global sieve_default script would be ignored. - Fixed problem in address test: erroneously decoded mime-encoded words in address headers. - extprograms plugin: Fixed failure occurring when connecting to script service without the need to read back the output from the external program. - Fixed bug in script storage path normalization occurring with relative symbolic links below root. - Fixed and updated various parts of the documentation. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc2… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.8.rc2… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Bug#776094: dovecot-imapd: corrupts mailbox after trying to retrieve it (fwd)
by Santiago Vila 11 May '15

11 May '15

Hello. I wrote about this three weeks ago but got no answer. I'm going to officially "forward" the Debian bug this time, with all the details. The test case is just 840 bytes long. Please give it a try. ---------- Forwarded message ---------- From: Santiago Vila <sanvila(a)unex.es> To: submit(a)bugs.debian.org Date: Fri, 23 Jan 2015 22:32:28 +0100 (CET) Subject: dovecot-imapd: corrupts mailbox after trying to retrieve it Package: dovecot-imapd Version: 1:2.2.13-11 Severity: serious The following mbox folder, when put in $HOME/mail, becomes corrupted after trying to retrieve it with fetchmail. The problem may be reproduced by using the same machine as server and client: * Put "inbox-b" in $HOME/mail * Put this in $HOME/.fetchmailrc server localhost proto imap port 143: user "someuser" pass "thepassword" * Retrieve email using this command line: fetchmail -a localhost --folder inbox-b -m "true" Note: By looking at the "true" above it is clear that whatever fetchmail does with the message is not important at all. You will see something like this: 12 messages for someuser at localhost (folder inbox-b). reading message someuser@localhost:1 of 12 (171 header octets) (3 body octets) flushed reading message someuser@localhost:2 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:3 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:4 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:5 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:6 of 12 (171 header octets) (3 body octets) flushed reading message someuser@localhost:7 of 12 (171 header octets) (3 body octets) flushed reading message someuser@localhost:8 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:9 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:10 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:11 of 12 (245 header octets) (3 body octets) flushed reading message someuser@localhost:12 of 12 (273 header octets)fetchmail: incorrect header line found - see manpage for bad-header option not flushed And in fact "inbox-b" in the server is now like this: [...] >From root(a)example.com Tue Jan 13 10:18:20 2015 rstuvwxyzabcdefghijklmnopqrstuvwxyz(a)example.com To: a(a)example.com Subject: a MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Message-Id: <20150113091737.B5ADA5F8B1(a)example.com> Date: Tue, 13 Jan 2015 10:17:25 +0100 (CET) X-UID: 16035 Status: O a Note how the From: line has been truncated from its original state. I have been suffering from this problem for months. At first I believed it was some misbehaving procmail/formail recipe I had on the server, but that's not the case as this example shows. Thanks.

6 23

Dovecot is not reading connections from iOS devices correctly. Any ideas?
by Robert Chalmers 11 May '15

11 May '15

From the dovecot logs. dovecot-info.log May 11 09:27:45 imap-login: Info: Aborted login (no auth attempts in 0 secs): user=<>, rip=192.168.0.1, lip=192.168.0.15, session=<pXcBJ8oVbgDAqAAB> dovecot-debug.log May 11 09:27:45 auth: Debug: auth client connected (pid=17388) When I try to connect using either the iOS Mail app, or Outlook mail app, nothing happens at al with ssl, and if I use plain login the iOS device tells me I have either the username or password wrong - which I haven't. Connection from Mac with MailMate works fine. iOS doesn't. so I'm stumped. I can't see why this is refusing the connection.

1 0

What is this message in appfirewall.log telling me ? on OSX
by Robert Chalmers 11 May '15

11 May '15

I'm on OS X What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) Thanks Robert

2 3

Cant use doveadm to set ACL . [request for help]
by Kevin Laurie 11 May '15

11 May '15

Hi, i keep getting error for using doveadm acl get commands. Below is the output for grep 'socket_path' :- grep 'socket_path' /etc/dovecot/dovecot.conf auth_socket_path = /var/run/dovecot/auth-master auth_socket_path = /var/run/dovecot/auth-master [root@mail root]# doveadm acl get -u bob(a)mydomain.net -S /var/run/dovecot/auth-master -m Inbox doveadm(bob(a)mydomain.net): Error: doveadm server sent invalid handshake: VERSION 1 1 doveadm(bob(a)mydomain.net): Error: /var/run/dovecot/auth-master: Internal failure for bob(a)mydomain.net ID Global Rights

2 1

New York: Matilda, seit Jahren mit dem immer gleichen Outfit - DIE WELT
by Michael Grimm 10 May '15

10 May '15

Cool, und vor allem gut! > http://www.welt.de/vermischtes/article140736122/Matilda-seit-Jahren-mit-dem… <http://www.welt.de/vermischtes/article140736122/Matilda-seit-Jahren-mit-dem…>

1 1

Xi broken
by Stephan Bosch 10 May '15

10 May '15

Hi, Xi is broken at the moment. This XenServer version won't boot jessie kernel. Can't fix this myself, so this may take some time. Regards, Stephan.

4 5

FYI: dovecot (008632bdfd2c) compilation woes, and minor glitch regarding update-version.sh
by Michael Grimm 10 May '15

10 May '15

Hi — 1) I'm trying to compile a recent hg dovecot version (008632bdfd2c) at a FBSD10-STABLE system without success: libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I/usr/local/include -DUDHRDIR=\"../../src/lib-fts\" -DDATADIR=\"/usr/local/share/dovecot\" -DTEST_STOPWORDS_DIR=\"../../src/lib-fts\" -I/usr/local/include -std=gnu99 -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -I/usr/local/include -MT fts-tokenizer-generic.lo -MD -MP -MF .deps/fts-tokenizer-generic.Tpo -c fts-tokenizer-generic.c -fPIC -DPIC -o .libs/fts-tokenizer-generic.o fts-tokenizer-generic.c:111:18: error: use of undeclared identifier 'White_Space' if (uint32_find(White_Space, N_ELEMENTS(White_Space), c, &idx)) ^ fts-tokenizer-generic.c:113:18: error: use of undeclared identifier 'Dash' if (uint32_find(Dash, N_ELEMENTS(Dash), c, &idx)) ^ […] fts-tokenizer-generic.c:212:18: error: use of undeclared identifier 'MidLetter' if (uint32_find(MidLetter, N_ELEMENTS(MidLetter), c, &idx)) ^ fts-tokenizer-generic.c:214:18: error: use of undeclared identifier 'MidNum' if (uint32_find(MidNum, N_ELEMENTS(MidNum), c, &idx)) ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 20 errors generated. Makefile:591: recipe for target 'fts-tokenizer-generic.lo' failed gmake[4]: *** [fts-tokenizer-generic.lo] Error 1 gmake[4]: Leaving directory '/usr/local/etc/dovecot/SOURCE/dovecot-2.2/src/lib-fts' 2) I don't have a python binary installed, only a python2 link to the python27 binary (FBSD, and python27 from ports). Thus, update-version.sh will fail to evaluate hg's changeset. As a quick fix I needed to create a link: python -> python2 Regards, Michael

4 7

Full text search indexes not used for header/body OR queries?
by Robert L Mathews 09 May '15

09 May '15

I've noticed that when using Lucene full text search, most queries use the indexes and/or header cache and are fast: . SEARCH BODY test . OK Search completed (0.001 secs). . SEARCH SUBJECT test . OK Search completed (0.053 secs). . SEARCH BODY test SUBJECT test . OK Search completed (0.002 secs). . SEARCH OR SUBJECT test FROM test . OK Search completed (0.093 secs). But an OR query that mixes headers and body does not use the available FTS indexes for the BODY part and is slow: . SEARCH OR BODY test SUBJECT test * OK Searched 62% of the mailbox, ETA 0:05 * OK Searched 70% of the mailbox, ETA 0:04 . OK Search completed (15.147 secs). Is this the expected behavior? Since the FTS code can handle an AND of header and body searches, I'm surprised it doesn't do the same for an OR. I noticed this while tracking down poor performance in Thunderbird, which issues searches like this: UID SEARCH RETURN (ALL) (OR FROM "Evelyn" (OR SUBJECT "Evelyn" (OR TO "Evelyn" (OR CC "Evelyn" BODY "Evelyn")))) NOT DELETED These are slow even with FTS enabled because of this behavior. I'm using Dovecot 2.1.7 from Debian wheezy. (I know this is outdated; however, I've examined the 2.1.x and 2.2.x changelogs and found no mention of it.) -- Robert L Mathews, Tiger Technologies, http://www.tigertech.net/

1 1

PublicFolders using Maildir and INDEXPVT in Dovecot v2.2.13
by Panayiotis Fafakos 08 May '15

08 May '15

Dear all, we have succesfully configured Dovecot v2.2.13 in debian wheezy 7.8 (using backports) using Maildir structure, to use private index files for the \Seen flag on a per user basis. All users access their emails and Public Folders using IMAP protocol. The problem is that when a user moves an email from publicFolderA to publicFolderB under the same namespace the other users see this message as unread, although they have actually read it when it was in publicFolderA. Please note that this is an old message which has been moved , it was not copied, so the actual UID should be the same... Is there a way to keep the \Seen flag for the messages that are moved from folder to folder? Is there a way to keep the \Seen flag in a database, so that we can ignore the folder structure and only check the message UIDs? We could use MySQL, PgSQL or even SQLite... Below follows the Public-Folder namespace declaration: ------------------------------------------ namespace { inbox = no location = maildir:/var/vmail/Public-Folders:LAYOUT=fs:INDEXPVT=~/Maildir/public/%u prefix = Public-Folders/ separator = / subscriptions = no type = public } ------------------------------------------ With the above system configuration we have the complete folder structure under ~/Maildir/public/%u, and many log files, one for each folder a user has accessed. Could we only have one index file for each user for all the public folder structure under the same namespace? Kind regards to all, Panayiotis Fafakos

2 3

Different mdbox_rotate_size for primary and alternate storage
by Paolo Cravero 08 May '15

08 May '15

Hello. In order to speed up backups of very very old messages I would like to set two different limits for mdbox_rotate_size. Like, 50M for primary storage and 100M or larger for alternate storage. There is no mention in docs or such a possibility, so I assume it is not possible. Is that correct? While I am at it, is it possible to configure primary storage as maildir (sturdy indexes) and altstorage as mdbox (more delicate indexes)? Thanks, Paolo

1 0

Prebuilt Binaries xi.rename-it.nl down ?
by Nathan Schultheiss 07 May '15

07 May '15

Hello, Since several days the repo (xi.rename-it.nl (217.119.238.14)) is no longer accessible. I'd found here for Debian/Ubuntu => http://wiki2.dovecot.org/PrebuiltBinaries Is it off, or temporarily down ? Could not connect to xi.rename-it.nl:80 (217.119.238.14). - connect (110: Connection timed out) Bests Regards, Nathan

2 1

Dovecot and data migration
by Alain BERNARD 07 May '15

07 May '15

Hi, Our legacy data store retains a single copy of a message regardless of the number of mailboxes in which that message resides. It does this by creating hard links to that message in the mailboxes containing that message. Thus, when we perform data migration to the server target (Dovecot), the copies of the same message are copied over with the migration process (imapsync). We use the storage format maildir. With a small message store, this means that a lot of messages are duplicated unnecessarily. How to reduce message store size due to duplicate storage of identical messages ? Does a relinking function exist and can be run in real-time mode ? how can we configure Dovecot to deduplicate for all users using a hash to determine whether the file could be already exist ? Thanks in advance. Memo

2 2

Mapping other Inbox method (symlink vs ACL)
by Kevin Laurie 07 May '15

07 May '15

Hi, I am trying to map a account(bob(a)mydomain.com) to help(a)mydomain.com. I would like him to see/access Inbox,Sent,Junk,Trash of help(a)mydomain.com . What would you reckon would be the best way to do this? ACL or Symlink? With symlink, I dont think I will be able to set permissions. Is it possible to use ACL to get the entire email account access(the inbox, junk, sent etc.)?

2 6

lmpt director and ldap userdb
by Angel L. Mateo 06 May '15

06 May '15

Hello, I've been using dovecot for a long time, but now I'm having troubles with I change I need to make. I have a director server in front of two backend servers. All of these servers are running dovecot 2.1.16. Redirection to backend servers are based in an attribute of a ldap server. My users are defined in this same ldap server. At this moment, for user authentication we use password lookups. My current configuration at both frontend and backend servers is attached. But now I need to change it to bind authentication, so the only change I've made is changing "auth_bind=no" to "auth_bind=yes". After this change, backend servers are working fine. Director servers are also working for POP and IMAP connections, but for LMTP they are returning: May 6 10:23:35 myotis40 dovecot: lmtp(48026): Error: user myuser(a)um.es: Auth PASS lookup failed This error is returned without any ldap lookup, neither connection to backend servers. Any help? thanks in advance. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

1 1

only mark as deleted when deleted as default for some mailboxes
by zucca＠systemschmiede.com 06 May '15

06 May '15

Hi list, i wonder if this is possible with some dovecot configuration. Selected mailboxusers will only mark their mails as deleted, when a mail is being deleted through any client. No automatic expunge. This is default behaviour in Outlook, and i think in Thunderbird too, but unfortunately not in Open-Xchange for example. So i was asking myself if it would be possible to simply turn this feature on maybe globally and as a default for some users. Thank you very much for your reply. Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: +49 (0)2451 - 9088390 Fax: +49 (0)2451 - 9124070 Mobil: +49 (0)178 - 4073254 Ust.ID: DE248030393

2 2

dovecot-proxy with managesieve, director and backend dovecot imap
by George Vieira 06 May '15

06 May '15

hi all, I've been tasked to add sieve/managesieve to an existing dovecot cluster running 2.1.7 on debian wheezy which is made up of 2 dovecot-proxy hosts as directors and some back end dovecot imap hosts all running the same version. My problem is that I thought to put the service on the director/proxy hosts since they wouldn't have too much load on it, but when I do I get the following error: Apr 28 11:00:28 master: Info: Dovecot v2.1.7 starting up (core dumps disabled) Apr 28 11:00:28 config: Warning: service auth { client_limit=50000 } is lower than required under max. load (60000) Apr 28 11:00:34 managesieve-login: Error: proxy: host not given: user=<mailchannel(a)mydomain.net>, method=PLAIN, rip=192.168.100.207, lip=192.168.100.119, TLS, session=<3/zPY74UOgDAqGTP> Apr 28 11:00:34 managesieve-login: Info: Aborted login (internal failure, 1 succesful auths): user=<mailchannel(a)mydomain.net>, method=PLAIN, rip=192.168.100.207, lip=192.168.100.119, TLS, session=<3/zPY74UOgDAqGTP> From searching around, only ever saw 1 result which was to add "executable = managesieve-login director" to the managesieve service, but this made no difference at all and the error is the same. So I tried to instead use the back end imap servers, but they throw errors expecting the users password to be the common proxy/director password as below: passdb { driver = static args = user=%u password=crypticpasswordagain } Apr 28 12:03:37 auth: Debug: static(mailchannel(a)mydomain.net,192.168.100.207,<17RTRb8UpADAqGTP>): lookup Apr 28 12:03:37 auth: Info: static(mailchannel(a)mydomain.net,192.168.100.207,<17RTRb8UpADAqGTP>): Password mismatch Apr 28 12:03:37 auth: Debug: static(mailchannel(a)mydomain.net,192.168.100.207,<17RTRb8UpADAqGTP>): PLAIN(85387v92394jks) != 'crypticpasswordagain' Apr 28 12:03:39 auth: Debug: client out: FAIL 1 user=mailchannel(a)mydomain.net So with configs below, how is it best to run managesieve that takes the correct login/password without directing to the cluster (or direct if it's easier but must use real user password)? -- dovecot proxy config -- # dovecot version 2.1.7 instance_name = dovecot-proxy protocols = imap pop3 lmtp sieve mail_location = maildir:~/ #listen = 192.168.101.119 listen = 0.0.0.0 # = dovecot-proxy-1 director_servers = 192.168.101.119 # = dovecot-shared-7 director_mail_servers = 192.168.100.101 base_dir = /var/run/dovecot-proxy login_greeting = Welcome to IMAP. default_internal_user = webmail lmtp_proxy = yes disable_plaintext_auth = no auth_mechanisms = plain login cram-md5 auth_verbose=yes auth_debug=yes auth_debug_passwords=yes mail_debug=yes verbose_ssl=yes auth_verbose_passwords=no #log_path = syslog log_path = /var/log/dovecot.log default_process_limit = 10000 default_client_limit = 50000 ssl = no ssl_cert = </etc/ssl/private/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem director_user_expire = 15 min doveadm_proxy_port = 9292 doveadm_password = somecrypticpassword auth_worker_max_count = 90 passdb { driver = ldap args = /etc/dovecot/dovecot-proxy-ldap.conf.ext } passdb { driver = checkpassword args = /etc/dovecot/checkpassword_migration.py } userdb { driver = prefetch } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } service director { unix_listener login/director { mode = 0666 } fifo_listener login/proxy-notify { mode = 0666 } unix_listener director-userdb { mode = 0600 } inet_listener { port = 9191 } } service imap-login { process_min_avail = 2 service_count = 0 executable = imap-login director inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { process_min_avail = 2 service_count = 0 executable = pop3-login director inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service imap { process_min_avail = 2 process_limit = 0 service_count = 0 } service pop3 { process_min_avail = 2 process_limit = 0 service_count = 0 } service lmtp { inet_listener lmtp { port = 24 } } service auth { client_limit=65000 inet_listener { port = 5451 } } service auth-worker { user = webmail } service doveadm { inet_listener { port = 9292 } } protocol imap { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 } protocol lmtp { auth_socket_path = director-userdb passdb { driver = ldap args = /etc/dovecot/dovecot-proxy-ldap.conf.ext } } protocol doveadm { auth_socket_path = director-userdb } plugin { # Used by both the Sieve plugin and the ManageSieve protocol sieve = file:~/sieve;active=~/.dovecot.sieve } -- dovecot backend config -- # dovecot version 2.1.7 protocols = imap pop3 lmtp #sieve # OLDTEMP listen = 192.168.100.95 listen = 192.168.100.101 mail_location = maildir:~/ namespace { prefix = INBOX. separator = . inbox = yes } base_dir = /var/run/dovecot/ login_greeting = Dovecot ready. default_login_user = dovenull default_internal_user = webmail mail_access_groups = mail postmaster_address = postmaster(a)mydomain.net disable_plaintext_auth = no auth_mechanisms = plain login auth_verbose=yes auth_debug=yes auth_debug_passwords=yes mail_debug=yes verbose_ssl=yes auth_verbose_passwords=no #log_path = syslog log_path = /var/log/dovecot.log default_process_limit = 10000 default_client_limit = 50000 mmap_disable = yes mail_fsync = always mail_nfs_storage = no mail_nfs_index = no #mail_plugin_dir = /usr/lib/dovecot mail_plugin_dir = /usr/lib/dovecot/modules # OLDTEMP mail_plugins = $mail_plugins quota fts fts_lucene mail_plugins = $mail_plugins quota fts fts_squat sieve ssl = no # OLDTEMP ssl_cert = </usr/local/dovecot/ssl/dovecot.pem # OLDTEMP ssl_key = </usr/local/dovecot/ssl/dovecot.pem ssl_cert = </etc/ssl/private/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem doveadm_password = somecrypticpassword userdb { driver = ldap # OLDTEMP args = /usr/local/dovecot/etc/dovecot/dovecot-ldap.conf.ext args = /etc/dovecot/dovecot-ldap.conf.ext } passdb { driver = static args = user=%u password=crypticpasswordagain } service imap-login { process_min_avail = 2 service_count = 0 inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { process_min_avail = 2 service_count = 0 inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service imap { process_min_avail = 2 process_limit = 0 executable = imap #imap-postlogin vsz_limit = 384M } service pop3 { process_min_avail = 2 process_limit = 0 executable = pop3 #pop3-postlogin vsz_limit = 384M } service lmtp { inet_listener lmtp { port = 24 } vsz_limit = 384M } service doveadm { inet_listener { port = 9292 } } service director { unix_listener director-admin { mode = 0 } } service quota-warning { executable = script /etc/dovecot/quota-warning.sh unix_listener quota-warning { user = webmail } } protocol imap { mail_plugins = $mail_plugins quota imap_quota mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 } plugin { fts = fts_squat fts_squat = partial=4 full=10 # fts_lucene = whitespace_chars=@. quota = maildir:User quota quota_warning = storage=75%% quota-warning 75 %u quota_warning2 = storage=95%% quota-warning 95 %u } -- managesieve config -- service managesieve-login { executable = managesieve-login director service_count = 0 process_min_avail = 0 vsz_limit = 64M } service managesieve { process_count = 100 } # Service configuration protocol sieve { managesieve_max_line_length = 32768 executable = managesieve-login director mail_max_userip_connections = 5 managesieve_max_compile_errors = 5 }

1 0

[sieve] extracting address behavior changes beetwen 2.2.13 and 2.2.16
by Marcin Mirosław 05 May '15

05 May '15

Hi all! After upgrading dovecot from 2.2.13 to 2.2.16 I noticed that my sieve filters doesn't catch some emails. I used sieve-test with tracing (it's great tool!) and I can see as below: part of sieve filter: [...] elsif address :is "From" "backup(a)areda.pl" { [...] dovecot-2.2.13: 36: address test 36: starting `:is' match with `i;ascii-casemap' comparator: 36: extracting `From' headers from message 36: parsing address header value `=?UTF-8?B?QmFjdWxhQEFUTQ==?= <backup(a)areda.pl>' 36: extracting `all' part from address `backup(a)areda.pl' 36: matching value `backup(a)areda.pl' 36: with key `backup(a)areda.pl' => 1 36: finishing match with result: matched 36: jump if result is false 36: not jumping dovecot-2.2.16: 36: address test 36: starting `:is' match with `i;ascii-casemap' comparator: 36: extracting `From' headers from message 36: parsing address header value `Bacula@ATM <backup(a)areda.pl>' 36: extracting `all' part from address `Bacula@ATM' 36: matching value `Bacula@ATM' 36: with key `backup(a)areda.pl' => 0 36: finishing match with result: not matched 36: jump if result is false 36: jumping to line 43 So in newer dovecot sieve uses comment not exact email address. Did I wrongly wrote my sieve script? Thanks, Marcin.

2 2

Dovecot 2.2.16 doesn't rotate mdbox files
by Басов Евгений 04 May '15

04 May '15

Hello, there's setting in my config file: mail_location = mdbox:/var/vmail/%Ld/%Ln:INDEX=/var/indexes/%Ld/%Ln mdbox_rotate_size = 1M mdbox_preallocate_space = yes mdbox_rotate_interval = 1d As I understand, this settings means that file which contains letters with refcount=0 will be rotated after 23:59 today. I remember letter ID and execute grep whith this one in storage directory. Letter was presented. After that, I removed letter over IMAP protocol, checked and find it again. On the next day check with grep was repeated and letter was finded. After doveadm purge -u user@domain letter was expunged. What's wrong in my configuration?

1 0

Crashes in dovecot -hg (86f535375750)
by Reuben Farrelly 04 May '15

04 May '15

Seems there is some breakage with -hg latest - 2.2.16 (86f535375750+). I've just had 4 core files created in short succession on both servers in the replication set. Here's the first... tornado reuben # gdb /usr/libexec/dovecot/imap core GNU gdb (Gentoo 7.9 vanilla) 7.9 Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://bugs.gentoo.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/libexec/dovecot/imap...done. [New LWP 20929] warning: Could not load shared library symbols for linux-vdso.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f186087693a in fts_user_free (fuser=0x0) at fts-user.c:187 187 fts-user.c: No such file or directory. (gdb) bt full #0 0x00007f186087693a in fts_user_free (fuser=0x0) at fts-user.c:187 user_langp = 0x300000008 #1 0x00007f1860876ac2 in fts_mail_user_deinit (user=0x20a3eb0) at fts-user.c:215 fuser = 0x0 #2 0x00007f185d7890f8 in fts_lucene_mail_user_deinit (user=0x20a3eb0) at fts-lucene-plugin.c:99 fuser = 0x20a5550 #3 0x00007f185d994e0c in replication_user_deinit (user=0x20a3eb0) at replication-plugin.c:310 ruser = 0x20a5500 #4 0x00007f18615b565a in mail_user_unref (_user=0x20abc28) at mail-user.c:168 user = 0x20a3eb0 __FUNCTION__ = "mail_user_unref" #5 0x000000000041afef in client_default_destroy (client=0x20abbb0, reason=0x0) at imap-client.c:284 cmd = 0x7ffde3a18960 __FUNCTION__ = "client_default_destroy" #6 0x000000000041ada0 in client_destroy (client=0x20abbb0, reason=0x0) at imap-client.c:236 No locals. #7 0x000000000041ccf4 in client_input (client=0x20abbb0) at imap-client.c:967 cmd = 0x7ffde3a189a0 output = 0x0 bytes = 12 __FUNCTION__ = "client_input" #8 0x00007f18612fc992 in io_loop_call_io (io=0x20c8610) at ioloop.c:501 ioloop = 0x2076740 t_id = 2 __FUNCTION__ = "io_loop_call_io" #9 0x00007f18612fec40 in io_loop_handler_run_internal (ioloop=0x2076740) at ioloop-epoll.c:220 ctx = 0x2077460 events = 0x2078290 event = 0x2078290 list = 0x2078e80 io = 0x20c8610 tv = {tv_sec = 4, tv_usec = 999387} events_count = 5 msecs = 5000 ret = 1 i = 0 j = 0 call = true __FUNCTION__ = "io_loop_handler_run_internal" #10 0x00007f18612fcb2f in io_loop_handler_run (ioloop=0x2076740) Reuben

2 2

SQLite does not depend on zlib, was: Re: [PATCH] Split sql drivers from lib-sql to plugins
by Bernd Kuhls 04 May '15

04 May '15

Tomas Janousek <tjanouse(a)redhat.com> wrote in news:20070413132731.GA8281 @redhat.com: > - SQL_LIBS="$SQL_LIBS -lsqlite3 -lz" > + SQLITE_LIBS="$SQLITE_LIBS -lsqlite3 -lz" Hi, this patch fixes a build error during cross compilation to a system without the libz target package: --- dovecot-2.2.15.org/configure.ac 2014-10-25 05:57:08.000000000 +0200 +++ dovecot-2.2.15/configure.ac 2014-11-08 10:06:23.015570150 +0100 @@ -2293,7 +2293,7 @@ if test $want_sqlite != no; then AC_CHECK_LIB(sqlite3, sqlite3_open, [ AC_CHECK_HEADER(sqlite3.h, [ - SQLITE_LIBS="$SQLITE_LIBS -lsqlite3 -lz" + SQLITE_LIBS="$SQLITE_LIBS -lsqlite3" AC_DEFINE(HAVE_SQLITE,, Build with SQLite3 support) found_sql_drivers="$found_sql_drivers sqlite" Regards, Bernd

2 2

backup mails from alternate storage
by Lars Täuber 04 May '15

04 May '15

Hi there! It seems that # doveadm backup -v backup -fu $MUSER mdbox:"$BKPDIR/$MUSER/mdbox" doesn't backup all messages stored in alternate storage. mail_location = mdbox:~/mdbox:ALT=/srv/mail/slow/vmail/%n/mdbox I don't know how to debug this. The sizes of the mailboxes in the filesystems of user C are strange: ~/mdbox: # du -sm 2169 ALT: # du -sm 25252 backup: # du -sm 2658 This is with dovecot 2.2.9 on Ubuntu x86_64 14.04.2 LTS. Is this a bug or am I doing something wrong? How can I test if messages stored in the alternate storage are successfully backed up? Thanks Lars

1 1

dsync-local(klink): Error: remote: dsync-server: invalid option -- 'l'
by Mathieu ROY 04 May '15

04 May '15

Hello, Since recently (not sure when), dsync stopped working. dsync -u klink mirror XXXX dsync-local(klink): Error: remote: dsync-server: invalid option -- 'l' dsync-local(klink): Error: remote: doveadm dsync-server [-u <user>|-A] [-S <socket_path>] dsync-local(klink): Error: read() from worker server failed: EOF I did not change anything on my setup but dovecot was upgraded (debian stable). On the box I'm starting the command I have: $ dpkg --list | grep dovecot ii dovecot-common 1:2.1.7-7+deb7u1 all Transitional package for dovecot ii dovecot-core 1:2.1.7-7+deb7u1 amd64 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-imapd 1:2.1.7-7+deb7u1 amd64 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes $ doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 7.8 mail_location = maildir:~/.Maildir:LAYOUT=fs:INBOX=~/.Maildir/INBOX mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" ssl = required ssl_cert = </etc/dovecot/certs/XXX.pem ssl_key = </etc/dovecot/certs/XXX.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } On the destination box, I have: $ dpkg --list | grep dovecot ii dovecot-core 1:2.2.13-11 amd64 secure POP3/IMAP server - core files ii dovecot-imapd 1:2.2.13-11 amd64 secure POP3/IMAP server - IMAP daemon $ doveconf -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.0 ext4 mail_location = maildir:/var/maildir/%u:LAYOUT=fs:INBOX=/var/maildir/%u/INBOX mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" ssl = required ssl_cert = </etc/dovecot/certs/XXX.pem ssl_key = </etc/dovecot/certs/XXX.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } What is the is invalid option l ? When did I set this? PS: please add me in CC, I'm not on the list. Cheers, -- http://yeupou.wordpress.com/

1 1

Fatal: Unknown scheme: SHA512-CRYPT. On a Mac-mini
by Robert Chalmers 01 May '15

01 May '15

Running postfix+dovecot+mysql on a mac-mini, and trying to solve this puzzle. Is this a Mac issue?, a MySQL issue? or something I haven't configured in? You can see from the output of the samples shows in the first case, that SHA512-CRYPT seems to be Unknown. The code I used is from a Linux based tutorial on setting up Postfix+Dovecot+MySQL on a site. Everything is generally going ok, apart from this bit. There are some others unknown as well. The codes used to create my database of passwords follows these output examples. MacMini:~ robert$ sudo doveadm pw -s SHA512-CRYPT -p 123456 Fatal: Unknown scheme: SHA512-CRYPT MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 123456 {SHA512}ujJTh2rta8ItSm/1PYQGxq2GQZXtFEq1yHYhtsIztUi66uaVbfNG7IwX9eoQ817jy8UUeX7X3dMUVGTioLq0Ew== MacMini:~ robert$ sudo doveadm pw -s SHA256 -p 123456 {SHA256}jZae727K08KaOmKSgOaGzww/XVqGr/PKEgIMkjrcbJI= MacMini:~ robert$ sudo doveadm pw -s MD5 -p 123456 {MD5}$1$.mAQzPhO$6v/WxTUt.Y1lhopkMarEb0 MacMini:~ robert$ sudo doveadm pw -s MD5-CRYPT -p 123456 {MD5-CRYPT}$1$gNkYwx/o$3nQLmUIPOBmZdR/e/EXFV1 MacMini:~ robert$ sudo doveadm pw -s BLF-CRYPT -p 123456 Fatal: Unknown scheme: BLF-CRYPT MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 1pass66U! {SHA512}EuuO6BAt+bgzXIOw7XIdiVBFwdEZ2tGqHOJ/DSTSkD+ikw7GQQo+KtHSta7p3KNv2AEVKtfOuyl5UeCEqnKogg== MacMini:~ robert$ sudo doveadm pw -s SHA256-CRYPT -p 1pass66U! Fatal: Unknown scheme: SHA256-CRYPT MacMini:~ robert$ mysql --version mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine wrapper MacMini:~ robert$ cd My MySQL Version: mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine wrapper The MySQL code used to create the user/password table. Which seems to work fine, and creates the table as it should - even though the resulting password doesn't appear to be quite right for SHA512-CRYPT INSERT INTO `mailserver`.`virtual_users` (`id`, `domain_id`, `password` , `email`) VALUES ('1', '1', ENCRYPT('firstpassword', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16))), 'email1(a)example.com'), ('2', '1', ENCRYPT('secondpassword', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16))), 'email2(a)example.com'); What it actually creates is this: This is not a SHA512-CRYPT password?? mysql> SELECT * FROM mailserver.virtual_users; 3 | 1 | $6jxK9DWPBrAc | robert(a)zeus.example.com Just to be clear,. this is the section of the Dovecot configs that deals with handling this. BUT.. On the MAC-Mini, SHA512-CrYPT is unknown. # List of supported schemes is in # http://wiki2.dovecot.org/Authentication/PasswordSchemes # default_pass_scheme = SHA512-CRYPT So the question is, what Encryption should I be using, and is this an Apple thing, or a MySQL thing?

2 1

Postpone email delivery with LMTP and Postfix
by Miloslav Hůla 30 Apr '15

30 Apr '15

Hi, is there any way, based on userdb/passwdb attribute, how to postpone an email delivery? The purpose is, I need to freeze an account (Maildir++) for a few minutes and new email must not be delivered. But emails must be delivered when account is unfrozen. I found few things about Postfix filters, but I'm not sure it's a good way. Thank you, Milo

3 3

timed out while receiving the initial server greeting
by Paul Smith 30 Apr '15

30 Apr '15

Am using ubuntu 14.04 and get a lot of errors like this A84952061AC4 1457 Thu Apr 30 19:46:11 theeducationchannel(a)astarmathsandphysics.com (delivery temporarily suspended: conversation with astarmathsandphysics.com[private/lmtp] timed out while receiving the initial server greeting) postconf -n returns alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix html_directory = /usr/share/doc/postfix/html inet_interfaces = all inet_protocols = all mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 51200000 mydestination = localhost myhostname = astarmathsandphysics.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = /usr/share/doc/postfix recipient_delimiter = + relayhost = smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/dovecot/dovecot.pem smtpd_tls_key_file = /etc/dovecot/private/dovecot.pem smtpd_use_tls = yes virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf virtual_mailbox_domains = mysql:/etc/postfix/ mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = lmtp:unix:private/lmtp dovecot -n returns # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-32-generic x86_64 Ubuntu 14.04.2 LTS ext4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = lmtp imap pop3 service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } all the mail folders in /var/mail/vhosts/domains are empty ports 25 and 995 are open (but 465/587 are not)

1 0

Sieve Rule: What am I missing here?
by Larry Rosenman 30 Apr '15

30 Apr '15

I have a rule that sends all mail from root to a mailbox, but I want it to NOT send mail from mailing-lists there. if allof (address :contains :localpart "From" "root", not anyof(exists ["List-Id","List-ID","Mailing-List", "X-List-Name","List-Post"])) { fileinto "root-mail"; stop; } I got a mail with the following headers: Return-Path: <openssl-users-bounces(a)openssl.org> Delivered-To: ler(a)lerctr.org Received: from thebighonker.lerctr.org by thebighonker.lerctr.org (Dovecot) with LMTP id gt09JVp6QlUfkQAAu+mOrA for <ler(a)lerctr.org>; Thu, 30 Apr 2015 13:54:29 -0500 Received: from mta.openssl.org ([194.97.150.230]:56641) by thebighonker.lerctr.org with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.85 (FreeBSD)) (envelope-from <openssl-users-bounces(a)openssl.org>) id 1YntbO-0009fK-Em for ler(a)lerctr.org; Thu, 30 Apr 2015 13:54:29 -0500 Received: from mta.openssl.org (localhost [127.0.0.1]) by mta.openssl.org (Postfix) with ESMTP id F3DF4204AE; Thu, 30 Apr 2015 18:54:11 +0000 (UTC) X-Original-To: openssl-users(a)mta.openssl.org Delivered-To: openssl-users(a)mta.openssl.org Received: by mta.openssl.org (Postfix, from userid 106) id 9D98B204AE; Thu, 30 Apr 2015 18:54:10 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mta.openssl.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.0 X-Greylist: delayed 471 seconds by postgrey-1.34 at mta; Thu, 30 Apr 2015 18:54:10 UTC Received: from mtx6.mbn1.net (mtx6.mbn1.net [213.188.129.253]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by mta.openssl.org (Postfix) with ESMTPS id 51E1920135 for <openssl-users(a)openssl.org>; Thu, 30 Apr 2015 18:54:10 +0000 (UTC) From: m.de.groot <m.de.groot(a)dmdg.nl> To: "openssl-users(a)openssl.org" <openssl-users(a)openssl.org> Date: Thu, 30 Apr 2015 20:46:11 +0200 Thread-Topic: Error signing document Thread-Index: AQHQg3XtdOOD1R0meUuAevuEqgOClg== Message-ID: < E7206BA2D53D894BAD0C4B62B2C52E7722E3CA8252(a)MBX01.hosting01.active24.com> Accept-Language: nl-NL, en-US Content-Language: nl-NL X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: nl-NL, en-US MIME-Version: 1.0 Subject: [openssl-users] Error signing document X-BeenThere: openssl-users(a)openssl.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <openssl-users.openssl.org> List-Unsubscribe: <https://mta.openssl.org/mailman/options/openssl-users>, <mailto:openssl-users-request@openssl.org?subject=unsubscribe> List-Archive: <http://mta.openssl.org/pipermail/openssl-users/> List-Post: <mailto:openssl-users@openssl.org> List-Help: <mailto:openssl-users-request@openssl.org?subject=help> List-Subscribe: <https://mta.openssl.org/mailman/listinfo/openssl-users>, <mailto:openssl-users-request@openssl.org?subject=subscribe> Reply-To: openssl-users(a)openssl.org Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: quoted-printable Errors-To: openssl-users-bounces(a)openssl.org Sender: "openssl-users" <openssl-users-bounces(a)openssl.org> X-Spam-Score: -0.9 (/) X-LERCTR-Spam-Score: -0.9 (/) X-Spam-Report: SpamScore (-0.9/5.0) BAYES_00=-1.9,HEADER_FROM_DIFFERENT_DOMAINS=0.001,KAM_LAZY_DOMAIN_SECURITY=1,RCVD_IN_MSPIKE_H3=-0.01,RCVD_IN_MSPIKE_WL=-0.01,T_RP_MATCHES_RCVD=-0.01 X-LERCTR-Spam-Report: SpamScore (-0.9/5.0) BAYES_00=-1.9,HEADER_FROM_DIFFERENT_DOMAINS=0.001,KAM_LAZY_DOMAIN_SECURITY=1,RCVD_IN_MSPIKE_H3=-0.01,RCVD_IN_MSPIKE_WL=-0.01,T_RP_MATCHES_RCVD=-0.01 What am I missing in the AnyOf part? Or am I totally messed up? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

2 2

A question about Configure time options, and base directories and Defaults?
by Robert Chalmers 30 Apr '15

30 Apr '15

I originally downloaded the sources a few weeks ago, dovecot-2.2.16, and simply did a ./configure make make install I'm running OSX 10.10.3 on a mac-mini. Not being too sure that I was going to go ahead with this whole idea... in any event, I did. BUT... most documentation I come across as I search for answers refers to the base directories being below /etc - as in postfix actually. ie; /etc/dovecot /etc/postfix Which seems logical to me - and appears to be a "default" or standard, at least in most documentation. However, my cavaliere installation put everything below /usr/local, as in /usr/local/etc/dovecot Which has caused me no end of fiddling as I try and remember where things are when I'm working on config files. There even appears to be a /private/etc/dovecot folder, which I seem to have somehow created about a month ago??? but is empty anyway. So, on my Mac I now have these folders/directories. These may have been created by a previous attempt, or by an installation to CutedgeSystems Mailserve. Now redundant. /private/etc/dovecot <---- empty /private/etc/pam.d/dovecot <--- contains login, pop3, ssh etc etc /private/var/spool/postfix/private/dovecot <-- this is a link to the one just above ??? or the other one is a link to this? /usr/libexec/dovecot <-- this contains a link to dovecot-lda [dovecot-lda -> /usr/local/libexec/dovecot/dovecot-lda] that I put in myself because that's where dovecot was looking for it. ========= everything below this line is as a result of the installation from source /usr/local/cutedge/dovecot /usr/local/etc/dovecot /usr/local/include/dovecot /usr/local/lib/dovecot /usr/local/libexec/dovecot /usr/local/sbin/dovecot /usr/local/share/doc/dovecot /usr/local/var/lib/dovecot /usr/local/var/run/dovecot I see from this list in someone else's post, that it's obviously possible - and I should have remembered - to put the files where ever I want them. i.e. /etc/dovecot If I read this list right, it will put the installation into /etc/dovecot - with some in other, appropriate directories. NOT all below /user/local as I have done. --prefix=/usr \ --sysconfdir=/etc \ --libexecdir=\${prefix}/lib \ --localstatedir=/var \ --mandir=\${prefix}/share/man \ --infodir=\${prefix}/share/info \ --with-moduledir=\${prefix}/lib/dovecot/modules \ --disable-rpath \ --disable-static Now for the burning question. Is it possible now to re-configure, then reinstall into the more appropriate directories, then copy the configuration files over. Make the appropriate weeks, and remove the original /usr/local/xxxx installation? Or is that just a step too far for the sake of what is essentially window dressing. The system I might add appears to be working as is? Thanks for any advice from the experts. (Sorry if the formatting in this post gets screwed up. It;s gmail;s web interface) Robert

1 0

doveadm -D and -v options
by Reuben Farrelly 30 Apr '15

30 Apr '15

According to doveadm-dsync man page the above two options are valid, but they are rejected when used: tornado # doveadm backup -v -u testuser remote:pi.me.name:4814 backup: invalid option -- 'v' doveadm backup [-u <user>|-A] [-S <socket_path>] [-fPRU] [-l <secs>] [-r <rawlog path>] [-m <mailbox>] [-g <mailbox_guid>] [-n <namespace> | -N] [-x <exclude>] [-s <state>] -d|<dest> tornado # tornado # doveadm backup -D -u testuser remote:pi.me.name:4814 backup: invalid option -- 'D' doveadm backup [-u <user>|-A] [-S <socket_path>] [-fPRU] [-l <secs>] [-r <rawlog path>] [-m <mailbox>] [-g <mailbox_guid>] [-n <namespace> | -N] [-x <exclude>] [-s <state>] -d|<dest> tornado # This is with 2.2.16 (latest -hg). Looks to me like either a bug, or the documentation (man doveadm-sync) is incorrect...? Reuben

2 1

quota_over_flag examples?
by E.B. 30 Apr '15

30 Apr '15

I can't find any posts on this list for peoples using quota_over_flag http://wiki2.dovecot.org/Quota/Configuration#Overquota-flag_.28v2.2.16.2B-.… If my userdb is sql what would be best script to use in terms of performance? (I mean if over-quota-flag triggers script every time it changes and the script calls CLI mysql client isn't all this so expensive to spawn a new shell session which spawns a mysql client?) Anyone knows how to use this flag with postfix *making postfix send special reject* "user over quota" note instead of plain SMTP reject?? Is an additional database lookup (restriction class?) unavoidable? :( TIA1 PS Looks like it is tricky almost impossible to make postfix do rejects based on this flag for aliases. (Special query would be a little messy for our schema but i dunno at what point postfix resolves aliases?)

3 6

Re: How do I compile passed driver for sql into Dovecot?
by Robert Chalmers 29 Apr '15

29 Apr '15

Sorry - I found the issue and dealt with it. Forgot about compiling it in and Configure time. Robert On Wed, Apr 29, 2015 at 2:57 PM, Robert Chalmers <racuk12(a)gmail.com> wrote: > I'm getting this error message when trying to run. > > > dovecot[1997]: auth: Fatal: Support not compiled in for passdb driver 'sql' > > > thanks > > Robert >

1 0

lda and lmtp error after upgrading dovecot
by giorgio paolucci 29 Apr '15

29 Apr '15

Hello everybody, after upgrading dovecot on a debian wheezy installation from the standard package version (dovecot 2.1.7) to dovecot 2.2.13-11 from wheezy-backports, i noticed some errors in my logs... Apr 28 22:00:13 lmtp(4879, xxxxxxxxx(a)unipd.it) Info: copy from <lmtp DATA>: box=INBOX, uid=error, msgid=<20150428200011.47D801F32(a)mydoom.unipd.it>, size=1523 They are not frequent but still coninuing since the upgrade. After the upgrade I found also errors coming fom lda: Apr 28 12:29:36 lda(userxxxxxx(a)unipd.it): Info: copy from stdin: box=INBOX, uid=error, msgid=, size=595 Apr 28 12:29:37 lda(userxxxxxx(a)unipd.it): Info: msgid=unspecified: saved mail to INBOX Strange thing as I use lmtp for local delivery. Is there some tuning I can do? My storage is accessed via NFS with a load blancer keeping sticky sessions "per user". Is there any risk to loose mails? Here is my dovecot -n Thanks in advance. Best regards Giorgio ====================================== # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 auth_default_realm = unipd.it disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota listescape mail_log notify mdbox_rotate_interval = 1 days mdbox_rotate_size = 10 M mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } plugin { fts = solr fts_solr = break-imap-search url=http://147.162.10.96:8983/solr/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size pop3_migration_mailbox = INBOX quota = dict:User quota::file:/SYSTEM/USERS/homes/%d/%1u/%u/%u.quota quota_rule = *:storage=1100M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3c_host = 147.162.10.68 protocols = imap pop3 lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imaps { ssl = no } process_min_avail = 20 service_count = 1 } service imap { executable = imap postlogin } service lmtp { executable = lmtp inet_listener lmtp { port = 2223 } process_min_avail = 15 } service pop3-login { inet_listener pop3s { ssl = no } } service postlogin { executable = script-login -d rawlog user = vmail } service quota-warning { executable = script /SYSTEM/DOVECOT/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log mail_plugins = quota listescape mail_log notify } protocol imap { imap_max_line_length = 128 k mail_plugins = quota listescape mail_log notify imap_quota } protocol doveadm { mail_plugins = quota listescape mail_log notify pop3_migration } protocol pop3 { pop3_no_flag_updates = yes pop3_uidl_format = %10v.%09u } -- Ing. Giorgio Paolucci Universita' di Padova Centro Servizi Informatici di Ateneo Responsabile Infrastrutture, Networking e Sicurezza Tel.+39-049-8273711 --

1 1

Fatal: Error in configuration file /etc/dovecot/dovecot.conf: protocols: Unknown protocol: sieve
by Paul Smith 29 Apr '15

29 Apr '15

Here is the output from dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-32-generic x86_64 Ubuntu 14.04.2 LTS ext4 auth_mechanisms = plain login auth_verbose = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = lmtp imap pop3 sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RS A:+HIGH:+MEDIUM ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } doveconf: Error: protocols: Unknown protocol: sieve protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: protocols: Unknown protocol: sieve PS dovecot-sieve is installe. Also this error appears without sieve in the list of protocols in /etc/dovecot/dovecot.conf

3 3

Trash Plugin bugs
by Alexei Gradinari 29 Apr '15

29 Apr '15

dovecot v2.2.16 I've found a few bugs in Trash plugin. 1. If Quota set only messages limit (without storage limit) then Trash plugin does not expunge any message because Quota plugin sets too_large_r=TRUE. It's because quota_default_test_alloc function does not check if bytes_limit is set. /* if size is bigger than any limit, then it is bigger than the lowest limit */ - if (size > bytes_limit) { + if (bytes_limit > 0 && size > bytes_limit) { *too_large_r = TRUE; break; } 2. Trash plugin does not use bytes_ceil/count_ceil to calculate size_needed/count_needed to expunge. Trash plugin may expunge more messages that nedeed. + if (ctx->bytes_ceil!=(uint64_t)-1 && ctx->bytes_ceil < size + ctx->bytes_over) { + size_needed = size + ctx->bytes_over - ctx->bytes_ceil; + } + if (ctx->count_ceil!=(uint64_t)-1 && ctx->count_ceil < 1 + ctx->count_over) { + count_needed = 1 + ctx->count_over - ctx->count_ceil; + } + /* not enough space. try deleting some from mailbox. */ - ret = trash_try_clean_mails(ctx, size + ctx->bytes_over, - 1 + ctx->count_over); + ret = trash_try_clean_mails(ctx, size_needed, count_needed); 3. Trash plugin does not check 'unlimited' values in bytes_ceil/count_ceil and may overflow them when add expunged size/messages - ctx->bytes_ceil += size_expunged; - ctx->count_ceil += expunged_count; + if (ctx->bytes_ceil!=(uint64_t)-1) { + ctx->bytes_ceil += size_expunged; + } + if (ctx->count_ceil!=(uint64_t)-1) { + ctx->count_ceil += expunged_count; + } See attached patch.

2 3

seeking sasl configuration example
by shadrock uhuru 28 Apr '15

28 Apr '15

hi everyone could someone show me there sasl configuration section in their dovecot.conf, i have postfix and dovecot setup for virtual users (no system users) everything works fine including tls, i have tried various examples off the web for sasl but they either have obsolete parameters or are for a setup with system users, i would prefer to use dovecots sasl implementation. dovecot --version = 2.1.7 cat dovecot.conf ###################### ###################### disable_plaintext_auth = no mail_privileged_group = mail log_path = /var/log/dovecot.log # auth_verbose=yes # auth_debug=yes # auth_debug_passwords=yes mail_debug=yes # verbose_ssl=yes passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = "pop3 imap lmtp" protocol imap { mail_plugins = " autocreate" } plugin { autocreate = Trash autocreate2 = Sent autocreate3 = junk autosubscribe = Trash autosubscribe2 = Sent autosubscribe3 = junk } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } protocol lmtp { postmaster_address=postmaster(a)mydomain.com hostname=niya.mydomain.com } ssl_cert = </etc/ssl/certs/mailcert.pem ssl_key = </etc/ssl/private/mail.key ###################### ###################### thanks shadrock

2 2

CVE-2015-3420
by Edwardo Garcia 28 Apr '15

28 Apr '15

When can we expect 2.2.17 to resolve this?

3 6

Quotas not working after reboot
by Edgaras Lukoševičius 28 Apr '15

28 Apr '15

Hello, after rebooting my dovecot server quotas are no longer working. # dovecot --version 2.2.10 CentOS Linux release 7.0.1406 It is strange that restarting dovecot did not reveal this problem, but rebooting whole server did. Before reboot it was like this: # doveadm -D quota get -u test1(a)testdomain1.tld doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm 03NB0d9erYBwhnzXhbS66fLDMU8v4ZiCDQDM3tDHCKme4ujpHy/lRk33305AIO9UXtgHGFyJYSpcVgoVnXJQGpJBphGvkAF4XI1JGx83Dtlb44wgJ8ZBgOm4qSNOoQIXKv0NO35EwUohtYBMlDJKPRUTwRF93tW7RsfWZGVNi4Eo5k616Tn4ooU3JMXkQA8LZ5zzLllspBVDbyb4GPAmWiw== root@ovzcloud doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(test1(a)testdomain1.tld): Debug: Added userdb setting: plugin/quota=maildir:storage=512000000 doveadm(test1(a)testdomain1.tld): Debug: Added userdb setting: plugin/quota_rule=*:bytes=512000000 doveadm(test1(a)testdomain1.tld): Debug: Effective uid=997, gid=996, home=/home/vmail/t/e/testdomain1.tld/test1/ doveadm(test1(a)testdomain1.tld): Debug: Quota root: name=storage=512000000 backend=maildir args= doveadm(test1(a)testdomain1.tld): Debug: Quota rule: root=storage=512000000 mailbox=* bytes=512000000 messages=0 doveadm(test1(a)testdomain1.tld): Debug: Quota warning: bytes=486400000 (95%) messages=0 reverse=no command=quota-warning 95 test1(a)testdomain1.tld doveadm(test1(a)testdomain1.tld): Debug: Quota warning: bytes=409600000 (80%) messages=0 reverse=no command=quota-warning 80 test1(a)testdomain1.tld doveadm(test1(a)testdomain1.tld): Debug: Quota grace: root=storage=512000000 bytes=25600000 (5%) doveadm(test1(a)testdomain1.tld): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/t/e/testdomain1.tld/test1/ doveadm(test1(a)testdomain1.tld): Debug: maildir++: root=/home/vmail/t/e/testdomain1.tld/test1, index=, indexpvt=, control=, inbox=/home/vmail/t/e/testdomain1.tld/test1, alt= doveadm(test1(a)testdomain1.tld): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none doveadm(test1(a)testdomain1.tld): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Quota name Type Value Limit % storage=512000000 STORAGE 0 500000 0 storage=512000000 MESSAGE 0 - Now after rebooting i get this output: # doveadm -D quota get -u test1(a)testdomain1.tld doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(test1(a)testdomain1.tld): Debug: Added userdb setting: plugin/quota=maildir:storage=512000000 doveadm(test1(a)testdomain1.tld): Debug: Added userdb setting: plugin/quota_rule=*:bytes=512000000 doveadm(test1(a)testdomain1.tld): Debug: Effective uid=997, gid=996, home=/home/vmail/t/e/testdomain1.tld/test1/ doveadm(test1(a)testdomain1.tld): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/t/e/testdomain1.tld/test1/ doveadm(test1(a)testdomain1.tld): Debug: maildir++: root=/home/vmail/t/e/testdomain1.tld/test1, index=, indexpvt=, control=, inbox=/home/vmail/t/e/testdomain1.tld/test1, alt= doveadm(test1(a)testdomain1.tld): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(test1(a)testdomain1.tld): Debug: fs: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(test1(a)testdomain1.tld): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none doveadm(test1(a)testdomain1.tld): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(test1(a)testdomain1.tld): Error: Quota not enabled Quota name Type Value Limit % # egrep -v "^#|^$" /etc/dovecot/conf.d/90-quota.conf plugin { quota = maildir #quota_rule = *:storage=1G #quota_rule2 = Trash:storage=+100M # LDA/LMTP allows saving the last mail to bring user from under quota to # over quota, if the quota doesn't grow too high. Default is to allow as # long as quota will stay under 10% above the limit. Also allowed e.g. 10M. #quota_grace = 10%% quota_grace = 5%% quota_status_success = DUNNO quota_status_nouser = DUNNO quota_status_overquota = "552 5.2.2 Mailbox is full" } plugin { quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } plugin { #quota = dirsize:User quota #quota = maildir:User quota #quota = dict:User quota::proxy::quota #quota = fs:User quota } plugin { #quota = dict:user::proxy::quota #quota2 = dict:domain:%d:proxy::quota_domain #quota_rule = *:storage=102400 #quota2_rule = *:storage=1048576 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot unix_listener quota-warning { user = vmail } } service quota-status { executable = quota-status -p postfix inet_listener { port = 12340 # You can choose any port you want } client_limit = 1 }

1 2

[dovecot] Extra help, Hotmail nightmare
by Jorge Bastos 28 Apr '15

28 Apr '15

Hi, Some extra help. How would I make hotmail accept my emails and not make them go to junk folder? Is there any trick to do this? Thanks in advanced, Jorge Bastos

5 5

[patch] TLS Handshake failures can crash imap-login
by Hanno Böck 27 Apr '15

27 Apr '15

Hi, I tracked down a tricky bug in dovecot that can cause the imap-login and pop3-login processes to crash on handshake failures. This can be tested by disabling SSLv3 in the dovecot config (ssl_protocols = !SSLv2 !SSLv3) and trying to connect with openssl and forced sslv3 (openssl s_client -ssl3 -connect localhost:995). This would cause a crash. What was going on is this: In ssl-proxy-openssl.c in line 545 in the function ssl_step() the function ssl_handshake() is called. There SSL_accept() is called. If SSL_accept failes - because a client sent an invalid packet or something the server doesn't support or any other reason - ssl_handle_error() will be called. ssl_handle_error() will call ssl_proxy_destroy(). ssl_proxy_destroy() will then call ssl_proxy_flush(). And ssl_proxy_flush will call ssl_step() again. Here we have a loop. Now when SSL_accept() gets called again on the same context this is an invalid state for OpenSSL and it crashes. What to do? In essence, if ssl_proxy_destroy is called it shouldn't try to finish the handshake if the handshake hasn't even started due to an error. This can be done by a simple if check, see attached patch. I think this should do it. I have seen that a bug that is probably rootet in this has been posted here before regarding ssl3-disabled configs: http://dovecot.org/pipermail/dovecot/2015-March/100188.html cu, -- Hanno Böck http://hboeck.de/ mail/jabber: hanno(a)hboeck.de GPG: BBB51E42

5 10

Using Identities to send Emails, question on Email Storage
by Kevin Laurie 27 Apr '15

27 Apr '15

hi, i was wondering that when sending mail with a different identity(bob(a)mydomain.com using help(a)mydomain.com identity), why does it not copy the message to help(a)mydomain.com(Sent box). instead it only shows it on bob(a)mydomain.com(Sent box). appreciate if someone could advise. could someone advise how to fix this as i would like to see the message in help(a)mydomain.com(SentBox) too. thanks kevin

2 1

Re: Encrypt messages on filesystem
by Nicolás Reynolds 27 Apr '15

27 Apr '15

Jorge Bastos <mysql.jorge(a)decimal.pt> writes: > Hi, > > > > If for some reason I want the received messages to be automatic encrypted on > the file system, how should/to do it? > > If there's any nice howto out there please let me know. you can take a look at gpgit, there's a way to use it with pigeonhole -- }(:=

1 0

TLS OCSP Stapling
by T.Tributh 26 Apr '15

26 Apr '15

Hi, is there a plan to support TLS OCSP stapling in the near future? Regards Torsten

1 0

Encrypt messages on filesystem
by Jorge Bastos 26 Apr '15

26 Apr '15

Hi, If for some reason I want the received messages to be automatic encrypted on the file system, how should/to do it? If there's any nice howto out there please let me know. Thanks in advanced,

1 0

prefetch not working (for me) on ldap user backend
by Hector M. Jacas 26 Apr '15

26 Apr '15

Dear Sir, I'm having problems with the implementation of prefetch userdb. Following the directives from the site (http://wiki2.dovecot.org/UserDatabase/Prefetch) I am unable to avoid the second search to the user backend (ldap). Could give me any advice or tips to achieve my goal? Thanks a lot, Hector M. Jacas My ldap has the following structure: search base: ou=Domains,dc=test,dc=local ******************************* domains tree: domain2.com: dc=domain2.com,ou=Domains,dc=test,dc=local Definition of mailuser1 on domail2.com: dn: uid=mailuser1,dc=domain2.com,ou=Domains,dc=test,dc=local uid: mailuser1 cn: User mailuser1 sn: User 1 displayName: User mailuser1 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top mail: mailuser1(a)domain2.com ************************************* domain1.com: dc=domain1.com,ou=Domains,dc=test,dc=local Definition of mailuser1 on domain1.com: dn: uid=mailuser1,dc=domain1.com,ou=Domains,dc=test,dc=local uid: mailuser1 cn: User mailuser1 sn: User 1 displayName: User mailuser1 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top mail: mailuser1(a)domain1.com ************************************* /etc/dovecot/dovecot-ldap.conf.ext content: hosts = ldapserver auth_bind = yes ldap_version = 3 tls = no base = ou=Domains,dc=test,dc=local scope = subtree user_filter = (&(objectclass=inetOrgPerson)(mail=%u)) user_attrs = =home=/var/vmail/mailboxes/%Ld/%Ln/%Ln,=uid=500,=gid=500 default_pass_scheme = CRYPT pass_filter = (&(objectclass=inetOrgPerson)(mail=%u)) pass_attrs = uid=user,password=userPassword,=userdb_home=/var/vmail/mailboxes/%Ld/%8Ln/%Ln, \ =userdb_uid=500,=userdb_gid=500 iterate_attrs = mail=user iterate_filter = (objectclass=inetOrgPerson) ************************************ auth test result for mailuser1(a)domain2.com: # doveadm mailuser1(a)domain2.com password auth test passdb: mailuser1(a)domain2.com auth succeeded Extra fields: user=mailuser1 And in /var/log/maillog (enabled debug auth options): Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: auth client connected (pid=0) Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: client in: AUTH 1 PLAIN service=doveadm resp=<hidden> Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): bind search: base=ou=Domains,dc=test,dc=local filter=(&(objectclass=inetOrgPerson)(mail=mailuser1(a)domain2.com)) Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1; uid unused Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: auth(mailuser1(a)domain2.com): username changed mailuser1(a)domain2.com -> mailuser1 Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1): result: uid=mailuser1 Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: client passdb out: OK 1 user=mailuser1 ***************************** mailuser1(a)domain2.com doveadm user result: # doveadm user mailuser1(a)domain2.com field value uid 500 gid 500 home /var/vmail/mailboxes/domain2.com/mailuser1/mailuser1 maildir mail: /var/vmail/mailboxes/domain2.com/mailuser/mailuser1:INDEX=MEMORY And in /var/log/maillog (enabled debug auth options): Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: master in: USER 1 mailuser1(a)domain2.com service=doveadm Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: prefetch(mailuser1(a)domain2.com): passdb didn't return userdb entries, trying the next userdb Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): user search: base=ou=Domains,dc=test,dc=local scope=subtree filter=(&(objectclass=inetOrgPerson)(mail=mailuser1(a)domain2.com)) fields= Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1 cn=Usuario mailuser1 sn=Usuario 1 displayName=Usuario mailuser1 objectClass=inetOrgPerson,inetOrgPerson,inetOrgPerson,inetOrgPerson mail=mailuser1(a)domain2.com; objectClass,cn,uid,mail,displayName,sn unused Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1 cn=Usuario mailuser1 sn=Usuario 1 displayName=Usuario mailuser1 objectClass=inetOrgPerson,inetOrgPerson,inetOrgPerson,inetOrgPerson mail=mailuser1(a)domain2.com; objectClass,cn,uid,mail,displayName,sn unused Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: userdb out: USER 1 mailuser1(a)domain2.com home=/var/vmail/mailboxes/domain2.com/mailuser1/mailuser1 uid=500 gid=500 *************************** My base system is RHEL7, 24 CPUs and 16GB ram and for LDAP backend, 389 DS 1.2.2 on RHEL 6.6 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.0 (Maipo) nfs4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 50000 disable_plaintext_auth = no listen = * mail_fsync = always mail_gid = 500 mail_location = maildir:/var/vmail/mailboxes/%d/%8n/%n:INDEX=MEMORY mail_nfs_index = yes mail_nfs_storage = yes mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener auth-userdb { group = vmail mode = 0640 user = vmail } } service doveadm { inet_listener { port = 24245 } } service imap-login { process_min_avail = 24 service_count = 0 } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 8192 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 8192 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { process_limit = 8192 } service pop3-login { process_min_avail = 24 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 1000 } local 172.28.200.0/24/24 { doveadm_password = secret } --- This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu Visit our web-site: <http://www.kaspersky.com>, <http://www.viruslist.com>

1 0

dovecot crash with virtual folders (debian testing version 2.2.13-11)
by James Bottomley 25 Apr '15

25 Apr '15

The virtual folder triggering the crash has the configuration namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } And the actual virtual/openstack/dovecot-virtual file is Lists/openstack-dev inthread refs or from "james bottomley" keyword thread It's a standard search for threads I've either replied to or marked with an imap keyword 'thread' The imap command 0 status virtual/openstack (MESSAGES UNSEEN RECENT) Is crashing most of the time with gdb /usr/lib/dovecot/imap GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i586-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug//usr/lib/dovecot/imap...done. done. (gdb) r Starting program: /usr/lib/dovecot/imap process 7868 is executing new program: /usr/bin/doveconf process 7868 is executing new program: /usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in as jejb 0 status virtual/openstack (MESSAGES UNSEEN RECENT) Program received signal SIGSEGV, Segmentation fault. 0xb7f0814b in mail_search_args_deinit_sub (args=args@entry=0x8005caf0, arg=0x8005cb08) at mail-search.c:169 169 mail-search.c: No such file or directory. (gdb) bt #0 0xb7f0814b in mail_search_args_deinit_sub (args=args@entry=0x8005caf0, arg=0x8005cb08) at mail-search.c:169 #1 0xb7f08aea in mail_search_args_deinit (args=0x8005caf0) at mail-search.c:193 #2 0xb7d9ecf1 in virtual_mailbox_close_internal (mbox=mbox@entry=0x800585d0) at virtual-storage.c:253 #3 0xb7d9ed7b in virtual_mailbox_close (box=0x800585d0) at virtual-storage.c:307 #4 0xb7f403ff in mail_thread_mailbox_close (box=0x800585d0) at index-thread.c:628 #5 0xb7f0d3fe in mailbox_close (box=0x800585d0) at mail-storage.c:1182 #6 0xb7f0d472 in mailbox_free (_box=0xbffff878) at mail-storage.c:1197 #7 0x8001e0ae in imap_status_get (cmd=0x80053948, ns=0x80052220, mailbox=0x8003a250 "virtual/openstack", items=0xbffff8f8, result_r=0xbffff900) at imap-status.c:96 #8 0x80011f64 in cmd_status (cmd=0x80053948) at cmd-status.c:40 #9 0x80016847 in command_exec (cmd=0x80053948) at imap-commands.c:158 #10 0x800155cb in client_command_input (cmd=0x80053948) at imap-client.c:778 #11 0x80015719 in client_command_input (cmd=0x80053948) at imap-client.c:839 #12 0x800159cd in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x80052ee0) at imap-client.c:877 #13 client_handle_input (client=0x80052ee0) at imap-client.c:889 #14 0x80015dd5 in client_input (client=0x80052ee0) at imap-client.c:931 ---Type <return> to continue, or q <return> to quit--- #15 0xb7e202e3 in io_loop_call_io (io=0x800538c8) at ioloop.c:441 #16 0xb7e214be in io_loop_handler_run_internal (ioloop=0x80042458) at ioloop-epoll.c:220 #17 0xb7e2036a in io_loop_handler_run (ioloop=0x80042458) at ioloop.c:488 #18 0xb7e203f9 in io_loop_run (ioloop=0x80042458) at ioloop.c:465 #19 0xb7dc6985 in master_service_run (service=0x80042380, callback=0x800200b0 <client_connected>) at master-service.c:566 #20 0x80008b44 in main (argc=1, argv=0xbffffd84) at main.c:400 I thought it might be this patch http://hg.dovecot.org/dovecot-2.2/rev/5c6f49e2d8d9 But after applying I still get the same segfault. James

1 0

Auth-worker, Unknown User
by Stephen R Guglielmo 24 Apr '15

24 Apr '15

Hi list, I'm running Debian Jessie (8). I have Postfix and Dovecot working successfully. I attempted to setup LMTP in order to enable sieve support, but it seems I was not successful. Dovecot version 2.2.13. Postfix accepts an incoming test mail I sent, then tries to deliver it to Dovecot via LMTP: dovecot: lmtp(13493): Connect from local dovecot: auth-worker(13495): pam(srg(a)example.com): unknown user dovecot: lmtp(13493): Disconnect from local: Successful quit Postfix then bounces my mail with a "550 User doesn't exist." It seems that Dovecot is trying to lookup my whole address (srg(a)example.com) in PAM instead of just the username ("srg"), which does exist. What can I do to avoid this? I have searched the internet about this and found a few references to "args = %s" and "args = username_format=%n" for passdb and/or userdb, but I have tried both (restarting Dovecot) to no avail. Thank you! `doveconf -n` below: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab103.6 x86_64 Debian 8.0 auth_verbose = yes first_valid_uid = 1000 last_valid_uid = 1000 listen = 167.114.96.243, 2607:5300:100:200::fce lmtp_save_to_detail_mailbox = yes mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/private/dovecot.cacert.pem ssl_cipher_list = HIGH:!aNULL:!eNULL:!EXP:!SSLv2 ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/dovecot.privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } protocol lmtp { mail_plugins = sieve }

2 2

Performance
by absolutely_free＠libero.it 24 Apr '15

24 Apr '15

Hi, at moment I have this environment: CentOS nginx + phpfpm Dovecot, with Maildir format Postfix Roundcube MySQL backend about 10000 mailusers dual core Intel(R) Pentium(R) D CPU 3.00GHz 8 GB RAM network storage device (Coraid), ext4 file system I have no performance issue now, but I need to move to a different server: FreeBSD 10.1-RELEASE nginx + phpfpm Dovecot Postfix Roundcube dual core Intel(R) Xeon(R) CPU 5120 @ 1.86GHz 16 GB RAM local storage with zfs file system My question is: is better to use SQLite instead of MySQL? Should I prefer dbox format? Thank you in advance for your opinion!

3 2

[BUG] imap-login segfault when running nmap -sV
by Florian Pritz 24 Apr '15

24 Apr '15

Hi, I've noticed that nmap crashes my imap-login (also pop3-login) and narrowed it down to `nmap -sV -p 993 $host`. I've noticed that if I remove "ssl_protocols = !SSLv2 !SSLv3" from my config or enable SSLv3 rather than disabling it the segfault disappears. I'm running on Arch Linux with dovecot 2.2.16-1 and openssl 1.0.2.a-1. I've also attached a network capture, but since it's SSL this probably won't help all that much. I hope this is enough information to reproduce the issue. If necessary I can recompile dovecot with debug symbols for a better backtrace. Thanks, Florian dovecot.conf https://paste.xinu.at/PUsJ/ syslog: > Apr 21 10:52:16 karif dovecot[7849]: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=81.217.47.122, lip=78.46.56.141, TLS handshaking: SSL_accept() failed: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request > Apr 21 10:52:16 karif dovecot[7849]: imap-login: Fatal: master: service(imap-login): child 7879 killed with signal 11 (core not dumped - add -D parameter to service imap-login { executable } [last ip=81.217.47.122] > Apr 21 10:52:16 karif kernel: imap-login[7879] segfault at f0 ip 00007fb2b8b1360b sp 00007fff926ffd50 error 4 in libssl.so.1.0.0[7fb2b8af3000+6f000] backtrace: > #0 0x00007f120100260b in ssl3_get_client_hello () from /usr/lib/libssl.so.1.0.0 > #1 0x00007f120100738f in ssl3_accept () from /usr/lib/libssl.so.1.0.0 > #2 0x00007f1201012b36 in ssl3_write_bytes () from /usr/lib/libssl.so.1.0.0 > #3 0x00007f1201906200 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #4 0x00007f12019062d8 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #5 0x00007f1201905f72 in ssl_proxy_destroy () from /usr/lib/dovecot/libdovecot-login.so.0 > #6 0x00007f12019060e4 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #7 0x00007f1201906671 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #8 0x00007f1201902efa in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #9 0x00007f120162d503 in ?? () from /usr/lib/dovecot/libdovecot.so.0 > #10 0x00007f120168d62c in io_loop_call_io () from /usr/lib/dovecot/libdovecot.so.0 > #11 0x00007f120168e665 in io_loop_handler_run_internal () from /usr/lib/dovecot/libdovecot.so.0 > #12 0x00007f120168d699 in io_loop_handler_run () from /usr/lib/dovecot/libdovecot.so.0 > #13 0x00007f120168d718 in io_loop_run () from /usr/lib/dovecot/libdovecot.so.0 > #14 0x00007f120162cb23 in master_service_run () from /usr/lib/dovecot/libdovecot.so.0 > #15 0x00007f1201903788 in login_binary_run () from /usr/lib/dovecot/libdovecot-login.so.0 > #16 0x00007f120127d800 in __libc_start_main () from /usr/lib/libc.so.6 > #17 0x0000000000402909 in _start () nmap output: >> nmap -sV --packet-trace -p 993 karif > > Starting Nmap 6.47 ( http://nmap.org ) at 2015-04-21 10:52 CEST > CONN (0.0426s) TCP localhost > 78.46.56.141:80 => Operation now in progress > CONN (0.0427s) TCP localhost > 78.46.56.141:443 => Operation now in progress > NSOCK INFO [0.0650s] nsi_new2(): nsi_new (IOD #1) > NSOCK INFO [0.0650s] nsock_connect_udp(): UDP connection requested to 192.168.4.1:53 (IOD #1) EID 8 > NSOCK INFO [0.0650s] nsock_read(): Read request from IOD #1 [192.168.4.1:53] (timeout: -1ms) EID 18 > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 8 [192.168.4.1:53] > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 27 [192.168.4.1:53] > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 18 [192.168.4.1:53] (79 bytes): .............141.56.46.78.in-addr.arpa..................karif.server-speed.net. > NSOCK INFO [0.0650s] nsock_read(): Read request from IOD #1 [192.168.4.1:53] (timeout: -1ms) EID 34 > NSOCK INFO [0.0650s] nsi_delete(): nsi_delete (IOD #1) > NSOCK INFO [0.0650s] msevent_cancel(): msevent_cancel on event #34 (type READ) > CONN (0.0656s) TCP localhost > 78.46.56.141:993 => Operation now in progress > NSOCK INFO [0.1320s] nsi_new2(): nsi_new (IOD #1) > NSOCK INFO [0.1330s] nsock_connect_tcp(): TCP connection requested to 78.46.56.141:993 (IOD #1) EID 8 > NSOCK INFO [0.1550s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 8 [78.46.56.141:993] > Service scan sending probe NULL to 78.46.56.141:993 (tcp) > NSOCK INFO [0.1550s] nsock_read(): Read request from IOD #1 [78.46.56.141:993] (timeout: 6000ms) EID 18 > NSOCK INFO [6.1610s] nsock_trace_handler_callback(): Callback: READ TIMEOUT for EID 18 [78.46.56.141:993] > Service scan sending probe GetRequest to 78.46.56.141:993 (tcp) > NSOCK INFO [6.1610s] nsock_read(): Read request from IOD #1 [78.46.56.141:993] (timeout: 5000ms) EID 34 > NSOCK INFO [6.1610s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 27 [78.46.56.141:993] > NSOCK INFO [6.1840s] nsock_trace_handler_callback(): Callback: READ ERROR [Connection reset by peer (104)] for EID 34 [78.46.56.141:993] > NSOCK INFO [6.1840s] nsi_delete(): nsi_delete (IOD #1) > NSOCK INFO [6.1840s] nsi_new2(): nsi_new (IOD #2) > NSOCK INFO [6.1840s] nsock_connect_tcp(): TCP connection requested to 78.46.56.141:993 (IOD #2) EID 40 > NSOCK INFO [6.2050s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 40 [78.46.56.141:993] > Service scan sending probe SSLSessionReq to 78.46.56.141:993 (tcp) > NSOCK INFO [6.2060s] nsock_read(): Read request from IOD #2 [78.46.56.141:993] (timeout: 5000ms) EID 58 > NSOCK INFO [6.2060s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 51 [78.46.56.141:993] > NSOCK INFO [6.2280s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 58 [78.46.56.141:993] (7 bytes): ......( > Service scan match (Probe SSLSessionReq matched with SSLSessionReq line 10443): 78.46.56.141:993 is ssl. Version: |TLSv1||| > NSOCK INFO [6.2280s] nsi_delete(): nsi_delete (IOD #2) > NSOCK INFO [6.2280s] nsi_new2(): nsi_new (IOD #3) > NSOCK INFO [6.2280s] nsock_connect_ssl(): SSL connection requested to 78.46.56.141:993/tcp (IOD #3) EID 65 > NSOCK INFO [6.3370s] nsock_trace_handler_callback(): Callback: SSL-CONNECT SUCCESS for EID 65 [78.46.56.141:993] > Service scan sending probe NULL to 78.46.56.141:993 (tcp) > NSOCK INFO [6.3370s] nsock_read(): Read request from IOD #3 [78.46.56.141:993] (timeout: 6000ms) EID 74 > NSOCK INFO [6.3960s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 74 [78.46.56.141:993] (114 bytes) > Service scan match (Probe NULL matched with NULL line 1312): 78.46.56.141:993 is SSL/imap. Version: |Dovecot imapd||| > NSOCK INFO [6.3960s] nsi_delete(): nsi_delete (IOD #3) > Nmap scan report for karif (78.46.56.141) > Host is up (0.023s latency). > rDNS record for 78.46.56.141: karif.server-speed.net > PORT STATE SERVICE VERSION > 993/tcp open ssl/imap Dovecot imapd > > Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . > Nmap done: 1 IP address (1 host up) scanned in 6.40 seconds

2 3

(no subject)
by Kevin Laurie 24 Apr '15

24 Apr '15

1 0

acl and lazy_expunge plugins are incompatible?
by Paolo Cravero 24 Apr '15

24 Apr '15

Hello list. Following two previous unanswered requests (http://www.dovecot.org/list/dovecot/2014-August/097449.html and http://www.dovecot.org/list/dovecot/2014-May/096261.html) I fell into the same problem: ACL and lazy_expunge plugins do not work together. I had lazy_expunge enabled working OK. Then I activated ACL plugin, and gave dovecot.2 visibily over paolo.cravero's Inbox: the IMAP connection fails on server-side. Relevant debug log is: Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: Quota grace: root=User quota bytes=576716800 (10%) Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: dict quota: user=paolo.cravero(a)csi.it, uri=file:/maildata1/home/csi.it/p/paolo.cravero/dovecot-quota, noenforcing=0 Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: fs: root=/maildata1/main/csi.it/p/paolo.cravero, index=/maildata1/indexes/csi.it/p/paolo.cravero, indexpvt=, control=, inbox=, alt=/maildata1/altstorage/csi.it/p/paolo.cravero Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: initializing backend with data: vfile Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: acl username = paolo.cravero(a)csi.it Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: owner = 1 Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl vfile: Global ACLs disabled Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' Removing the lazy_expunge, ACLs do work as expected and I can add/remove/use them. Is there a known compatibility issue? Or there's something wrong in my config and someone else is running with both plugins enabled? Thanks, Paolo PS: output of dovecot -n: # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.5 (Santiago) ext3 auth_mechanisms = plain login disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep lmtp_save_to_detail_mailbox = yes mail_attachment_dir = /maildata1/attachments mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = 500 mail_location = mdbox:/maildata1/main/%d/%1n/%n:ALT=/maildata1/altstorage/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n mail_plugins = quota mail_log notify lazy_expunge acl mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mdbox_rotate_size = 50 M namespace { hidden = no list = yes location = mdbox:/maildata1/main/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n:MAILBOXDIR=expunged prefix = .EXPUNGED/ subscriptions = no } namespace { list = children location = mdbox:/maildata1/main/%%d/%%1n/%%n:ALT=/maildata1/altstorage/%%d/%%1n/%%n:INDEX=/maildata1/indexes/%%d/%%1n/%%n prefix = user/%%u/ separator = / type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/maildata1/db/shared-mailboxes.db lazy_expunge = .EXPUNGED/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size flags vsize quota = dict:User quota::file:%h/dovecot-quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail user = vmail } } service lmtp { inet_listener lmtp { address = 10.102.42.114 port = 24 } process_min_avail = 2 user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota mail_log notify lazy_expunge acl sieve } protocol lda { mail_plugins = quota mail_log notify lazy_expunge acl sieve } protocol imap { mail_plugins = quota mail_log notify lazy_expunge acl imap_quota imap_acl }

2 2

fts_languages setting is missing - disabling?
by Ralf Hildebrandt 24 Apr '15

24 Apr '15

I don't find "fts_languages" in the documentation... What should I add there anbd where? doveadm(restore): Error: fts-dovecot: fts_languages setting is missing - disabling -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 4

Crash in dovecot/auth with backtrace
by Ralf Hildebrandt 24 Apr '15

24 Apr '15

I'm seeing this odd crash with "USER\t531\t*(a)liquid-scan.de\tservice=quota-status" Which looks like something is being tested against our quota-status -- but I fail to see why an NON LOCAL address is being tested.... GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/local/dovecot-2.2/libexec/dovecot/auth...done. [New LWP 2289] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/auth'. Program terminated with signal 6, Aborted. #0 0xb7724424 in __kernel_vsyscall () #0 0xb7724424 in __kernel_vsyscall () No symbol table info available. #1 0xb74a0661 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = <optimized out> pid = -1218617356 selftid = 2289 #2 0xb74a3a92 in *__GI_abort () at abort.c:92 act = {__sigaction_handler = {sa_handler = 0xbfd1c924, sa_sigaction = 0xbfd1c924}, sa_mask = {__val = {3077760610, 3218196756, 3076712520, 3218196744, 3077843556, 0, 3074764848, 1, 0, 1, 3077716256, 145215752, 1097, 3077184659, 3, 145244200, 1, 128, 0, 3218196816, 3218196744, 3218196756, 3218196764, 3077716256, 0, 3077194863, 145215720, 3076749582, 3077199789, 3077686824, 1097, 3077686824}}, sa_flags = 0, sa_restorer = 0xb76a5c2f <internal_handler+527>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0xb76a624e in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:202 backtrace = 0x8a7c8d8 "/usr/local/dovecot-2.2/lib/dovecot/libdovecot.so.0(+0x7825e) [0xb76a625e] -> /usr/local/dovecot-2.2/lib/dovecot/libdovecot.so.0(+0x782e1) [0xb76a62e1] -> /usr/local/dovecot-2.2/lib/dovecot/libdovecot."... #4 0xb76a62e1 in i_internal_fatal_handler (ctx=0xbfd1c9f0, format=0x807a0c4 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfd1ca14 "\257j\a\b\371\004") at failures.c:671 status = 0 #5 0xb76a6e5f in i_panic ( format=format@entry=0x807a0c4 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:276 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = 0xbfd1ca14 "\257j\a\b\371\004" #6 0x0805873a in auth_request_set_login_username (request=0x8a945d8, username=0x8a7c548 "", error_r=0xbfd1cad4) at auth-request.c:1273 master_passdb = <optimized out> __FUNCTION__ = "auth_request_set_login_username" #7 0x08054c44 in master_input_auth_request (conn=conn@entry=0x8aa18b8, args=args@entry=0x8a941c1 "531\t*(a)liquid-scan.de\tservice=quota-status", cmd=cmd@entry=0x8076925 "USER", request_r=request_r@entry=0xbfd1cad0, error_r=error_r@entry=0xbfd1cad4) at auth-master-connection.c:209 auth_request = 0x8a945d8 list = 0x8a7c53c name = <optimized out> arg = <optimized out> username = 0x8a7c504 "*(a)liquid-scan.de" id = 531 #8 0x0805539c in master_input_user ( args=0x8a941c1 "531\t*(a)liquid-scan.de\tservice=quota-status", conn=0x8aa18b8) at auth-master-connection.c:306 auth_request = 0x8a92e70 error = 0x8ab8e81 "31298" ret = <optimized out> #9 auth_master_input_line ( line=0x8a941bc "USER\t531\t*(a)liquid-scan.de\tservice=quota-status", conn=0x8aa18b8) at auth-master-connection.c:615 No locals. #10 master_input (conn=0x8aa18b8) at auth-master-connection.c:679 _data_stack_cur_id = 3 line = <optimized out> ret = 40 #11 0xb76baf8b in io_loop_call_io (io=0x8a92ba8) at ioloop.c:501 ioloop = 0x8a844e8 t_id = 2 __FUNCTION__ = "io_loop_call_io" #12 0xb76bc272 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x8a844e8) at ioloop-epoll.c:220 ctx = 0x8a8b500 events = 0x8f1 event = 0x8a8b558 list = 0x8a92be0 io = <optimized out> tv = {tv_sec = 0, tv_usec = 999856} events_count = <error reading variable events_count (Could not find type for DW_OP_GNU_const_type)> msecs = <optimized out> ret = 3 i = <optimized out> j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #13 0xb76bb01c in io_loop_handler_run (ioloop=ioloop@entry=0x8a844e8) at ioloop.c:548 No locals. #14 0xb76bb0a8 in io_loop_run (ioloop=0x8a844e8) at ioloop.c:525 __FUNCTION__ = "io_loop_run" #15 0xb76527ae in master_service_run (service=0x8a84418, callback=0x8063df0 <client_connected>) at master-service.c:569 No locals. #16 0x08064490 in main (argc=1, argv=0x8a841e0) at main.c:393 c = <optimized out> -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 2

doveadm problem
by T.Tributh 24 Apr '15

24 Apr '15

Hi, since several versions i have the following problem: Actually i am using: dovecot --version 2.2.16 (de2023e630cb) When i try to use doveadm i see the following error: doveadm pw -t {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV -p 1234 Fatal: Couldn't load required plugin /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: dlopen() failed: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: undefined symbol: command_unregister I recognized that these lines in my main dovecot.conf are responsible: mail_plugins = quota imap_quota When i change it to mail_plugins = quota The command is working like expected: doveadm pw -t {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV -p 1234 {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV (verified) ....but than my thunderbird-client is not longer able to recognize to mailbox-size. Regards Torsten Tributh

3 3

Dovecot 2.2.16 crashes when fetching mails with Trojita 0.5
by Dennis Schridde 23 Apr '15

23 Apr '15

Hello! When I fetch certain emails from my Dovecot 2.2.16 server using Trojita 0.5, dovecot/imap will crash reproducibly. Please find config and backtrace from coredump attached. Best regards, Dennis

2 2

Moving a local domain to sql
by ＠lbutlr 22 Apr '15

22 Apr '15

I have a domain that current maps to local users that I want to move into the mysql maps with all the other domains, but I am unsure of the best way to proceed with this. For example, my mail server is covisp.net and my personal domain is kreme.com, and currently kremels(a)kreme.com maps to the local user kremels. I want it to map to the existing mysql database as “kernels(a)kreme.xn--com-9o0a. (For example only, I’m not moving kreme.com, I am too dependent on procmail for all my list processing). Once I setup the user account in the mysql database do I just move the Maildir from /home/kremels to /usr/local/virtual/kremels(a)kreme.com/ and reload dovecot? -- I leave symbols to the symbol-minded - George Carlin

3 2

dovecot efficient use of resources
by shouddy＠enet.cu 22 Apr '15

22 Apr '15

I just started a heavy load imap service and everything fitted OK in functional terms. The problem comes whith stress tests, I have no problem in the directors line. But my doubt comes whether the backends are using efficiently the resources assigned or not. The main goal is to maximize the concurrency without affect the integrity of operations. My question is: Is there a rule for relating the amount of computing resources (RAM, Processor) with the number of simultaneous connections to an IMAP/POP3 server running dovecot? I had made all the adjustmens for high performance in dovecot according to the docs and O.S specs Backend's hardware Processor: AMD Opteron(tm) Processor 6136 RAM: 16 GB HDD: Enought for testing I'm confident the NFS layer is not making noise (yet). Comparing the results, the output of tests are giving consistent numbers using local file systems (all of them properly tuned) I have run the tests with imaptest but even with 100 clients I'm having system's max load of 46 stable. I have the sense that memory is not using properly (2GB at most from 16GB). Thank you so much in advance, would be grateful for any help Conf below Dovecot version 2.2.10 doveconf -n # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.0 (Maipo) nfs4 auth_mechanisms = plain login default_client_limit = 4000 disable_plaintext_auth = no listen = * mail_fsync = always mail_gid = 500 mail_location = maildir:/var/vmail/mailboxes/%d/%8n/%n:INDEX=MEMORY mail_nfs_index = yes mail_nfs_storage = yes mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { client_limit = 14400 service_count = 0 unix_listener auth-userdb { group = vmail mode = 0640 user = vmail } } service doveadm { inet_listener { port = 24245 } } service imap-login { client_limit = 1000 process_limit = 100 process_min_avail = 16 service_count = 0 vsz_limit = 512 M } service imap { process_limit = 7000 service_count = 0 } service pop3-login { client_limit = 1000 process_limit = 100 process_min_avail = 16 service_count = 0 } service pop3 { process_limit = 7000 service_count = 0 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 1000 } local 172.28.200.0/24/24 { doveadm_password = secret }

1 0

Cant See Sent Mailbox despite GETACL [request for help]
by Kevin Laurie 21 Apr '15

21 Apr '15

Hi, Apparently the "Sent" mailbox cannot be viewed by Dave(the user). Any idea why? When I do GETACL for Sent, the message I get is shown below:- * ACL "Sent" "dave(a)mydomain.net" ilr "help(a)mydomain.net" lrwstipekxacd

2 1

cant see all users - need to create symlink between mailboxes [request for help]
by Kevin Laurie 21 Apr '15

21 Apr '15

Hi, I need to create a symlink to share mailboxes. I tried to check at : cd /var/mail/ but I cant see all the mailboxes. Could someone advise how to do this? I am trying to achieve as showing in tutorial here:- http://wiki.dovecot.org/SharedMailboxes/Symlinks Below is the details of my dovecot.conf Appreciate if anyone can help. # Listen addresses. # - '*' means all available IPv4 addresses. # - '[::]' means all available IPv6 addresses. # Listen on all available addresses by default listen = * [::] #base_dir = /var/run/dovecot mail_plugins = quota acl # Enable fts fts_solr plugin globally for Solr Full Text Search Indexing mail_plugins = $mail_plugins fts fts_solr plugin { fts = solr #break-imap-search will use solr for indexing TEXT and BODY searches. fts_solr = break-imap-search url=http://127.0.0.1:8983/solr/ fts_autoindex = yes } # Enabled mail protocols. protocols = pop3 imap sieve lmtp # User/group who owns the message files: mail_uid = 2000 mail_gid = 2000 # Assign uid to virtual users. first_valid_uid = 2000 last_valid_uid = 2000 # Logging. Reference: http://wiki2.dovecot.org/Logging log_path = /var/log/dovecot.log mail_debug = no auth_verbose = no auth_debug = no auth_debug_passwords = no # Possible values: no, plain, sha1. auth_verbose_passwords = no # SSL: Global settings. # Refer to wiki site for per protocol, ip, server name SSL settings: # http://wiki2.dovecot.org/SSL/DovecotConfiguration ssl_protocols = !SSLv2 !SSLv3 ssl = required verbose_ssl = no #ssl_ca =</path/to/ca ssl_cert = </etc/pki/tls/certs/iRedMail.crt ssl_key = </etc/pki/tls/private/iRedMail.key # With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory. # Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted # insecurely. disable_plaintext_auth = yes # Allow plain text password per IP address/net #remote 192.168.0.0/24 { # disable_plaintext_auth = no #} # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ # Authentication related settings. # Append this domain name if client gives empty realm. auth_default_realm = # Authentication mechanisms. auth_mechanisms = PLAIN LOGIN # Limits the number of users that can be logging in at the same time. # Default is 100. # Note: this value can be overrided by "process_limit =" in service protocol. # e.g. # protocol imap-login { # ... # process_limit = 500 # } #default_process_limit = 100 service auth { unix_listener /var/spool/postfix/private/dovecot-auth { user = postfix group = postfix mode = 0666 } unix_listener auth-master { user = vmail group = vmail mode = 0666 } unix_listener auth-userdb { user = vmail group = vmail mode = 0660 } } # LMTP server (Local Mail Transfer Protocol). # Reference: http://wiki2.dovecot.org/LMTP service lmtp { user = vmail # For higher volume sites, it may be desirable to increase the number of # active listener processes. A range of 5 to 20 is probably good for most # sites. process_min_avail = 5 # Logging. # Require 'info_log_path =' in 'protocol lmtp {}' block. executable = lmtp -L # Listening on socket file and TCP unix_listener /var/spool/postfix/private/dovecot-lmtp { user = postfix group = postfix mode = 0600 } inet_listener lmtp { #address = 192.168.0.24 127.0.0.1 ::1 port = 24 } } # Virtual mail accounts. userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } # Master user. # Master users are able to log in as other users. It's also possible to # directly log in as any user using a master password, although this isn't # recommended. # Reference: http://wiki2.dovecot.org/Authentication/MasterUsers auth_master_user_separator = * passdb { driver = passwd-file args = /etc/dovecot/dovecot-master-users master = yes } plugin { auth_socket_path = /var/run/dovecot/auth-master quota = dict:user::proxy::quotadict quota_rule = *:storage=1G #quota_rule2 = *:messages=0 #quota_rule3 = Trash:storage=1G #quota_rule4 = Junk:ignore # Quota warning. # If user suddenly receives a huge mail and the quota jumps from # 85% to 95%, only the 95% script is executed. quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u # Plugin: autocreate. Create and subscribe to default IMAP folders. autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk # Plugin: expire. #expire = Trash 7 Trash/* 7 Junk 30 #expire_dict = proxy::expire # ACL and share folder acl = vfile acl_shared_dict = proxy::acl # By default Dovecot doesn't allow using the IMAP "anyone" or # "authenticated" identifier, because it would be an easy way to spam # other users in the system. If you wish to allow it, #acl_anyone = allow # Pigeonhole managesieve service. # Reference: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration # Per-user sieve settings. sieve_dir = /%Lh/sieve sieve = /%Lh/sieve/dovecot.sieve # Global sieve settings. sieve_global_dir = /var/vmail/sieve # Note: if user has personal sieve script, global sieve rules defined in # sieve_default will be ignored. Please use sieve_before or # sieve_after instead. #sieve_default = sieve_before = /var/vmail/sieve/dovecot.sieve #sieve_after = # The maximum number of redirect actions that can be performed during a # single script execution. The meaning of 0 differs based on your version. # For versions v0.3.0 and beyond this means that redirect is prohibited. # For older versions, however, this means that the number of redirects is # unlimited, so be careful. #sieve_max_redirects = 4 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0660 user = vmail group = vmail } } dict { #expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf acl = mysql:/etc/dovecot/dovecot-share-folder.conf } protocol lda { # Reference: http://wiki2.dovecot.org/LDA mail_plugins = $mail_plugins sieve autocreate auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot-sieve.log lda_mailbox_autocreate = yes postmaster_address = root } protocol lmtp { # Log file info_log_path = /var/log/dovecot-lmtp.log # Plugins mail_plugins = quota # Enable fts fts_solr plugin globally for Solr Full Text Search Indexing mail_plugins = $mail_plugins fts fts_solr plugin { fts = solr #break-imap-search will use solr for indexing TEXT and BODY searches. fts_solr = break-imap-search url=http://127.0.0.1:8983/solr/ fts_autoindex = yes } postmaster_address = postmaster lmtp_save_to_detail_mailbox = yes recipient_delimiter = + } protocol imap { mail_plugins = $mail_plugins imap_quota autocreate imap_acl imap_client_workarounds = tb-extra-mailbox-sep # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. # Increase it to avoid issue like below: # "Maximum number of concurrent IMAP connections exceeded" mail_max_userip_connections = 20 } protocol pop3 { mail_plugins = $mail_plugins pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. mail_max_userip_connections = 20 } # Login processes. Refer to Dovecot wiki for more details: # http://wiki2.dovecot.org/LoginProcess service imap-login { service_count = 1 # To avoid startup latency for new client connections, set process_min_avail # to higher than zero. That many idling processes are always kept around # waiting for new connections. #process_min_avail = 0 # number of simultaneous IMAP connections #process_limit = $default_process_limit process_limit = 500 # vsz_limit should be fine at its default 64MB value #vsz_limit = 64M } service pop3-login { service_count = 1 # number of simultaneous POP3 connections #process_limit = 500 } namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u # this namespace should handle its own subscriptions or not. subscriptions = yes list = children } # Public mailboxes. # Refer to Dovecot wiki page for more details: # http://wiki2.dovecot.org/SharedMailboxes/Public #namespace { # type = public # separator = / # prefix = Public/ # # # CONTROL=: Mark this public folder as read-only mailbox # # INDEX=: Per-user \Seen flag # location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public # # # Allow users to subscribe to the public folders. # subscriptions = yes #}

2 2

userdb username changed
by Péter Márton 20 Apr '15

20 Apr '15

Hi! I'm playing with a postfix + dovecot + mysql test setup, and noticed something strange. It seems that despite the "username changed" line, auth returns the original username: Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: Loading modules from directory: /usr/lib64/dovecot (...) Apr 17 09:27:34 imap21 dovecot: auth-worker(27661): Debug: sql(ppp(a)example.net): SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:27:34 imap21 dovecot: auth-worker(27661): Debug: sql(ppp(a)example.net): username changed ppp(a)example.net -> uppp Apr 17 09:27:34 imap21 dovecot: auth: Debug: userdb out: USER#0111#011ppp@example.net#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: auth input: ppp(a)example.net home=/home/ppp uid=500 gid=500 quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Effective uid=500, gid=500, home=/home/ppp Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota rule: root=User quota mailbox=* bytes=3100 messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota grace: root=User quota bytes=310 (10%) Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: dict quota: user=ppp(a)example.net, uri=proxy::quota, noenforcing=0 I've checked this with the LMTP service (i know, normally it wouldn't get mail addresses) and it produces the same: Apr 17 09:30:35 imap21 dovecot: auth-worker(27730): Debug: sql(ppp(a)example.net,127.0.0.1): SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:30:35 imap21 dovecot: auth-worker(27730): Debug: sql(ppp(a)example.net,127.0.0.1): username changed ppp(a)example.net -> uppp Apr 17 09:30:35 imap21 dovecot: auth: Debug: userdb out: USER#0111#011ppp@example.net#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728): Debug: auth input: ppp(a)example.net home=/home/ppp uid=500 gid=500 quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728): Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728, ppp(a)example.net) Debug: Effective uid=500, gid=500, home=/home/ppp Passdb works as it should. IMAP test: Apr 17 09:36:21 imap21 dovecot: auth-worker(27849): Debug: sql(ppp(a)example.net,10.10.128.25): query: SELECT at.userid AS user, at.password AS password, at.home AS userdb_home, at.uid AS userdb_uid, at.gid AS userdb_gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS userdb_quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:36:21 imap21 dovecot: auth-worker(27849): Debug: sql(ppp(a)example.net,10.10.128.25): username changed ppp(a)example.net -> uppp Apr 17 09:36:21 imap21 dovecot: auth: Debug: sql(ppp(a)example.net,10.10.128.25,<ox/+ouYTQQDDyoAZ>): username changed ppp(a)example.net -> uppp Apr 17 09:36:21 imap21 dovecot: auth: Debug: client passdb out: OK#0111#011user=uppp#011original_user=ppp(a)example.net Apr 17 09:36:21 imap21 dovecot: auth: Debug: master in: REQUEST#0113358588929#01127844#0111#011dbf373ba260f9990e1ea6b688924d513#011session_pid=27850#011request_auth_token Apr 17 09:36:21 imap21 dovecot: auth: Debug: prefetch(uppp,10.10.128.25,<ox/+ouYTQQDDyoAZ>): success Apr 17 09:36:21 imap21 dovecot: auth: Debug: master userdb out: USER#0113358588929#011uppp#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024#011auth_token=737d315a5c0e388a0b3dc2bea3c9e333357696d8#011auth_user=ppp@example.net Apr 17 09:36:21 imap21 dovecot: imap-login: Login: user=<uppp>, method=PLAIN, rip=10.10.128.25, lip=10.10.97.201, mpid=27850, TLS, session=<ox/+ouYTQQDDyoAZ> Apr 17 09:36:21 imap21 dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Apr 17 09:36:21 imap21 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Apr 17 09:36:21 imap21 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Apr 17 09:36:21 imap21 dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:36:21 imap21 dovecot: imap(uppp): Debug: Effective uid=500, gid=500, home=/home/ppp Can someone tell what should i do to make this work? Or any idea i could try? It would help if Postfix would be able to run Virtual before the policy check, but thats a problem for the postfix list. :) Thanks! Peter doveconf -n: # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-504.8.1.el6.x86_64 x86_64 CentOS release 6.6 (Final) auth_debug = yes auth_verbose = yes dict { quota = mysql:/etc/dovecot/dict-quota-sql.conf.ext } mail_access_groups = dovecot mail_debug = yes mail_fsync = always mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-example-mysql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quota quota_status_nouser = 554 5.5.4 Who the f* is Alice? quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { inet_listener imap { port = 143 } } service lmtp { inet_listener lmtp { address = * port = 25 } } service pop3-login { inet_listener pop3 { port = 110 } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 252 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-example-mysql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota } protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } /etc/dovecot/dovecot-example-mysql.conf.ext: driver=mysql connect = host=10.10.90.206 dbname=mail user=user password=abcabcabc password_query = SELECT at.userid AS user, at.password AS password, \ at.home AS userdb_home, at.uid AS userdb_uid, at.gid AS userdb_gid, \ concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS userdb_quota_rule \ FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = '%u' OR at.userid = '%u' user_query = SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, \ concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule \ FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = '%u' OR at.userid = '%u'

1 1

Authentication Error with Dovecot
by Kevin Laurie 18 Apr '15

18 Apr '15

Hello, I have some email authentication error with dovecot. Could someone tell me what is the problem that is indicated below? Is it due to some plugin? Apr 18 21:56:35 auth-worker(2057): Info: mysql(127.0.0.1): Connected to database vmail Apr 18 21:56:35 imap-login: Info: Login: user=<user(a)mydomain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2058, secured, session=<n/0fGAUUgwB/AAAB> Apr 18 21:56:35 imap: Error: Can't load plugin imap_acl_plugin: Plugin acl must be loaded also (you must set: mail_plugins=$mail_plugins acl) Apr 18 21:56:35 imap: Fatal: Couldn't load required plugins Apr 18 21:56:53 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<user2>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<z2gKGQUUiQB/AAAB> Apr 18 21:57:05 imap-login: Info: Login: user=<user2(a)mydomain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2065, secured, session=<5tmoGQUUjQB/AAAB> Apr 18 21:57:05 imap: Error: Can't load plugin imap_acl_plugin: Plugin acl must be loaded also (you must set: mail_plugins=$mail_plugins acl) Apr 18 21:57:05 imap: Fatal: Couldn't load required plugins

2 4

Installing fts-solr on dovecot (centos 6) - [request for help]
by Kevin Laurie 18 Apr '15

18 Apr '15

Hello, I have been trying to get full-text-search on dovecot. I followed the tutorial on this site:- https://extremeshok.com/6622/enabling-apache-solr-4-10-using-jetty-with-dov… The instruction on the page here seems wrong:- sed -i -e 's|mail_plugins = quota|mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn}|' /etc/dovecot.conf I would appreciate if someone could help correct the parameters for the dovecot.conf output shown below. Please help. [root@mail tmp]# cat /etc/dovecot/dovecot.conf # Listen addresses. # - '*' means all available IPv4 addresses. # - '[::]' means all available IPv6 addresses. # Listen on all available addresses by default listen = * [::] #base_dir = /var/run/dovecot mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn} acl # Enabled mail protocols. protocols = pop3 imap sieve lmtp # User/group who owns the message files: mail_uid = 2000 mail_gid = 2000 # Assign uid to virtual users. first_valid_uid = 2000 last_valid_uid = 2000 # Logging. Reference: http://wiki2.dovecot.org/Logging log_path = /var/log/dovecot.log mail_debug = no auth_verbose = no auth_debug = no auth_debug_passwords = no # Possible values: no, plain, sha1. auth_verbose_passwords = no # SSL: Global settings. # Refer to wiki site for per protocol, ip, server name SSL settings: # http://wiki2.dovecot.org/SSL/DovecotConfiguration ssl_protocols = !SSLv2 !SSLv3 ssl = required verbose_ssl = no #ssl_ca =</path/to/ca ssl_cert = </etc/pki/tls/certs/iRedMail.crt ssl_key = </etc/pki/tls/private/iRedMail.key # With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory. # Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted # insecurely. disable_plaintext_auth = yes # Allow plain text password per IP address/net #remote 192.168.0.0/24 { # disable_plaintext_auth = no #} # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ # Authentication related settings. # Append this domain name if client gives empty realm. auth_default_realm = # Authentication mechanisms. auth_mechanisms = PLAIN LOGIN # Limits the number of users that can be logging in at the same time. # Default is 100. # Note: this value can be overrided by "process_limit =" in service protocol. # e.g. # protocol imap-login { # ... # process_limit = 500 # } #default_process_limit = 100 service auth { unix_listener /var/spool/postfix/private/dovecot-auth { user = postfix group = postfix mode = 0666 } unix_listener auth-master { user = vmail group = vmail mode = 0666 } unix_listener auth-userdb { user = vmail group = vmail mode = 0660 } } # LMTP server (Local Mail Transfer Protocol). # Reference: http://wiki2.dovecot.org/LMTP service lmtp { user = vmail # For higher volume sites, it may be desirable to increase the number of # active listener processes. A range of 5 to 20 is probably good for most # sites. process_min_avail = 5 # Logging. # Require 'info_log_path =' in 'protocol lmtp {}' block. executable = lmtp -L # Listening on socket file and TCP unix_listener /var/spool/postfix/private/dovecot-lmtp { user = postfix group = postfix mode = 0600 } inet_listener lmtp { #address = 192.168.0.24 127.0.0.1 ::1 port = 24 } } # Virtual mail accounts. userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } # Master user. # Master users are able to log in as other users. It's also possible to # directly log in as any user using a master password, although this isn't # recommended. # Reference: http://wiki2.dovecot.org/Authentication/MasterUsers auth_master_user_separator = * passdb { driver = passwd-file args = /etc/dovecot/dovecot-master-users master = yes } plugin { auth_socket_path = /var/run/dovecot/auth-master quota = dict:user::proxy::quotadict quota_rule = *:storage=1G #quota_rule2 = *:messages=0 #quota_rule3 = Trash:storage=1G #quota_rule4 = Junk:ignore # Quota warning. # If user suddenly receives a huge mail and the quota jumps from # 85% to 95%, only the 95% script is executed. quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u # Plugin: autocreate. Create and subscribe to default IMAP folders. autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk # Plugin: expire. #expire = Trash 7 Trash/* 7 Junk 30 #expire_dict = proxy::expire # ACL and share folder acl = vfile acl_shared_dict = proxy::acl # By default Dovecot doesn't allow using the IMAP "anyone" or # "authenticated" identifier, because it would be an easy way to spam # other users in the system. If you wish to allow it, #acl_anyone = allow # Pigeonhole managesieve service. # Reference: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration # Per-user sieve settings. sieve_dir = /%Lh/sieve sieve = /%Lh/sieve/dovecot.sieve # Global sieve settings. sieve_global_dir = /var/vmail/sieve # Note: if user has personal sieve script, global sieve rules defined in # sieve_default will be ignored. Please use sieve_before or # sieve_after instead. #sieve_default = sieve_before = /var/vmail/sieve/dovecot.sieve #sieve_after = # The maximum number of redirect actions that can be performed during a # single script execution. The meaning of 0 differs based on your version. # For versions v0.3.0 and beyond this means that redirect is prohibited. # For older versions, however, this means that the number of redirects is # unlimited, so be careful. #sieve_max_redirects = 4 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0660 user = vmail group = vmail } } dict { #expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf acl = mysql:/etc/dovecot/dovecot-share-folder.conf } protocol lda { # Reference: http://wiki2.dovecot.org/LDA mail_plugins = $mail_plugins sieve autocreate auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot-sieve.log lda_mailbox_autocreate = yes postmaster_address = root } protocol lmtp { # Log file info_log_path = /var/log/dovecot-lmtp.log # Plugins mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn} sieve postmaster_address = postmaster lmtp_save_to_detail_mailbox = yes recipient_delimiter = + } protocol imap { mail_plugins = $mail_plugins imap_quota autocreate imap_acl imap_client_workarounds = tb-extra-mailbox-sep # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. # Increase it to avoid issue like below: # "Maximum number of concurrent IMAP connections exceeded" mail_max_userip_connections = 20 } protocol pop3 { mail_plugins = $mail_plugins pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. mail_max_userip_connections = 20 } # Login processes. Refer to Dovecot wiki for more details: # http://wiki2.dovecot.org/LoginProcess service imap-login { service_count = 1 # To avoid startup latency for new client connections, set process_min_avail # to higher than zero. That many idling processes are always kept around # waiting for new connections. #process_min_avail = 0 # number of simultaneous IMAP connections #process_limit = $default_process_limit process_limit = 500 # vsz_limit should be fine at its default 64MB value #vsz_limit = 64M } service pop3-login { service_count = 1 # number of simultaneous POP3 connections #process_limit = 500 } namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u # this namespace should handle its own subscriptions or not. subscriptions = yes list = children } # Public mailboxes. # Refer to Dovecot wiki page for more details: # http://wiki2.dovecot.org/SharedMailboxes/Public #namespace { # type = public # separator = / # prefix = Public/ # # # CONTROL=: Mark this public folder as read-only mailbox # # INDEX=: Per-user \Seen flag # location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public # # # Allow users to subscribe to the public folders. # subscriptions = yes #}

2 4

Please help: error after upgrade to version 2.1.16
by Harald Langner 18 Apr '15

18 Apr '15

Hallo I can not find a forum at dovecot.org and I get a problem I can not solve. After Updating to the version dovecot2 2.1.16 I can no more get eMails with my eMail-client. All has been working fine before. Server: FreeBSD 10.0-RELEASE-p18, with perl 5, version 18, subversion 4 (v5.18.4) It seems it is an authentication problem with my server. The errors are: #cat dovecot.log Apr 17 22:19:37 imap-login: Error: Timeout waiting for handshake from auth server. my pid=41810, input bytes=0 Apr 17 22:19:58 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Apr 17 22:19:58 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Apr 17 22:19:58 master: Error: service(auth): command startup failed, throttling for 60 secs Apr 17 22:24:04 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Apr 17 22:24:04 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Apr 17 22:24:04 master: Error: service(auth): command startup failed, throttling for 60 secs I have google and has nothing found about "..environment corrupt; missing value for DOVECOT_" and about "auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address" I have make a reinstall - but doesn't help. I get the same error. I have not forget to create new certs with the dovecote shell-script after installation. I'm using passwd (virtual users). Make a cat on passwd shows that it is not empty. Also the date of the file show that the update installation has it not changed. So I have not create the dovecot users again. here are some other logs: #cat dovecot-info.log Apr 17 22:29:03 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS handshaking Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS #cat dovecot-debug.log Apr 17 22:30:03 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 17 22:30:03 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Apr 17 22:34:01 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 17 22:34:01 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Apr 17 22:34:01 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] ######################################################################################## My configuration is sendmail(MTA) -> procmail(LDA) -> dovecot(IMAP) with TLS and Maildir (no DB) Authentification been done with dovecot password file (no real user, no OpenLDAP, no other DB-User) #dovecot -n # 2.2.16: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p18 amd64 ufs auth_debug = yes auth_mechanisms = digest-md5 plain login auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_internal_user = vmail default_login_user = vmail deliver_log_format = msgid=%m: %$ %f %s disable_plaintext_auth = no first_valid_uid = 1000 hostname = swdevil.de info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = mailnull mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/:INBOX=/home/vmail/%d/%n/.INBOX mail_plugins = " virtual" mail_temp_dir = /tmp/mail namespace inbox { inbox = yes location = prefix = } passdb { args = scheme=DIGEST-MD5 username_format=%n /usr/local/etc/dovecot/pass driver = passwd-file } service auth-worker { group = wheel user = root } service imap-login { group = dovenull inet_listener imap { port = 0 } inet_listener imaps { port = 993 } } service imap { process_limit = 100 } service pop3-login { group = dovenull inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } service pop3 { process_limit = 100 } ssl = required ssl_cert = </usr/local/etc/dovecot/certs/dovecot_ssl_crt.pem ssl_key = </usr/local/etc/dovecot/certs/dovecot_ssl_key.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Many thanks for Your advice what could be wrong. Harald Langner EU (Germany)

2 3

Problem: mail moved by thunderbird script is invisible to mail clients, but in cur directory
by David Gessel 18 Apr '15

18 Apr '15

Over the last year I've had a script moving old mail (120 days) into my annual archive folder. This is the first year I've done this with Dovecot, previously it was running against Cyrus. There's nothing particularly clever: a few conditions to match, then "move message to" the appropriate archive folder. There's one for every year from 2000 to 2015. 2015 is just barely ahead of need. 2014 has about a year's mail in the cur directory. The 2000-2013 folders were filled by Cyrus and were migrated over using IMAP Migrate. They're fine, and read normally. The 2014 layout looks normal to me # ls cur dovecot-uidlist dovecot.index.cache dovecot.index.log.2 new dovecot-keywords dovecot.index dovecot.index.log maildirfolder tmp Permissions are the same as every other folder, as is owner: drw-r----- 2 vmail vmail 9.6K Apr 12 21:13 cur and # ls | wc -l 9822 I've checked with Thunderbird, Mulberry, Claws, and Sylpheed - none can read the directory. The files look normal: 2014/cur 1426411329.M123928P26360.host.domain.com,S=3523,W=3591:2,R More or less the same as a working directory: 2013/cur 1405500734.M958596P27867.host.domain.com,S=794,W=819:2,RS I've run # doveadm force-resync -u user .archives.2014 and nothing changed. I'm at a bit of a loss since no client can read them, something like moving them to another folder and back is a little complicated. Any hints?

3 3

ManageSieve Dovecot v2 listen on localhost only
by trash＠skrilnetz.net 17 Apr '15

17 Apr '15

Hi, How can I only listen on localhost for ManageSieve? I tried: port = localhost:4190 still listening *: tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 515675 20540/dovecot Would did I not get here? Thanks,

3 5

Replace autocreate after upgrading
by trash＠skrilnetz.net 17 Apr '15

17 Apr '15

Hi, I just upgraded to 2.2.9 and found out that autocreate should not be used any more. I had a look at http://wiki2.dovecot.org/MailboxSettings and I tried to replace my old config but I had no success. Would somebody be so and help me to change my config? Here is my old config: http://pastebin.com/zFUAQmV3 Thanks,

2 1

Potentially breaking dict-proxy (dict-sql) backwards compatibility
by Timo Sirainen 17 Apr '15

17 Apr '15

Looks like the dict-proxy code doesn't currently do escaping newlines properly, but it still accidentally happens to work, because the data is stored in the escaped form. I'm thinking about fixing this, but this might break somebody's existing dict usage. But then again maybe nobody is actually using it now, especially because it hasn't been working exactly as expected. So, can anybody tell me if they're currently using a combination of: - dict proxy (especially to dict sql) - containing values which can contain LFs (or TABs) I guess this mainly means storing Sieve scripts or IMAP METADATA to SQL. Or maybe somebody is using dict (via proxy) for their own purposes?..

1 0

Calendar and address book with Dovecot
by mimicafe＠gmail.com 16 Apr '15

16 Apr '15

Hi guys Thanks for all your input. I'll feedback later... Mimi

1 0

Thunderbird sync time? (reverse quota warning)
by E.B. 16 Apr '15

16 Apr '15

For reverse quota warning, it looks like webmail works nice. quota_warning3 = -storage=100%% quota-warning below %u # user is no longer over quota But using thunderbird I deleted enough messages to go below quota and I deleted them from trash folder too. But mail log does not show thunderbird connecting to imap to actually delete mails and get the trigger below quota warning msg. It's i thinks a thundrbrd behavior but i wonder if anyone on this list knows how it works? Do i just keep waiting for it to sync eventually? or??????? TIA!

2 3

Dovecot and recipient_delimiter
by J. Echter 16 Apr '15

16 Apr '15

Hi, we're using thunderbird as our client, it has the functionality to sort spamassassin tagged mails in a folder called 'Junk'. I have this folder on my dovecot server and i'd like to use the recipient_delimiter feature to get my spam/junk mails directly to this folder. what i have done yet: dovecot.conf: plugin { recipient_delimiter = + } postfix: master.cf dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail null_sender= argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -e -m ${extension} postfix: main.cf recipient_delimiter = + what i get: Apr 14 13:46:50 mule postfix/pickup[22664]: 71ED53C05EE: uid=0 from=<testuser(a)testdomain.test> Apr 14 13:46:50 mule postfix/cleanup[1408]: 71ED53C05EE: message-id=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test> Apr 14 13:46:50 mule postfix/qmgr[12559]: 71ED53C05EE: from=<testuser(a)testdomain.test>, size=465, nrcpt=2 (queue active) Apr 14 13:46:50 mule dovecot: lda(testuser(a)testdomain.test): msgid=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test>: save failed to junk: Mailbox doesn't exist: junk Apr 14 13:46:50 mule dovecot: lda(testuser(a)testdomain.test): msgid=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test>: saved mail to INBOX Apr 14 13:46:50 mule postfix/pipe[10898]: 71ED53C05EE: to=<testuser+Junk(a)testdomain.test>, relay=dovecot, delay=0.04, delays=0.02/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) Apr 14 13:46:50 mule postfix/qmgr[12559]: 71ED53C05EE: removed here is my complete dovecot -n output: dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.12.2.el6.x86_64 x86_64 CentOS release 6.6 (Final) ext4 auth_cache_negative_ttl = 0 auth_cache_size = 50 M auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_gid = 5000 mail_home = /DATEN/vmail/%d/%n mail_location = maildir:/DATEN/vmail/%d/%n/mail/ mail_plugins = " zlib" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { autocreate = Junk autosubscribe = Junk recipient_delimiter = + sieve = /DATEN/vmail/%d/%n/.dovecot.sieve sieve_dir = /DATEN/vmail/%d/%n/sieve zlib_save = gz zlib_save_level = 6 } protocols = sieve imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } user = root } service imap-login { chroot = login executable = /usr/libexec/dovecot/imap-login inet_listener imap { port = 0 } process_min_avail = 4 user = dovecot } service imap { executable = /usr/libexec/dovecot/imap } service managesieve-login { chroot = login user = dovecot } service pop3-login { chroot = login user = dovecot } ssl = required ssl_cert = </shared/config/dovecot/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = </shared/config/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } valid_chroot_dirs = /var/spool/vmail protocol lda { mail_plugins = sieve postmaster_address = postmaster } any hints on what i do wrong here? thanks juergen

2 4

Disk space usage with mdbox
by Alexandros Soumplis 15 Apr '15

15 Apr '15

Hello, I am using dovecot with mdbox+sis and I notice an ever increasing disk space usage since I converted mailboxes from Maildir to mdboxes. I have checked with a user and while it actually uses only 65K, his mdbox files on disk are more than 6G. The backup of his mailbox is just 64K. Any suggestions ? Below are some relevant commands: [root@mail ~]# doveadm quota get -u test Quota name Type Value Limit % User quota STORAGE 10135 31457280 0 User quota MESSAGE 186 - 0 [root@mail ~]# du -k --max-depth=1 /mdboxes/test/ 220 /mdboxes/test/mailboxes 6029348 /mdboxes/test/storage 6029592 /mdboxes/test/ [root@mail ~]# doveadm purge -u test [root@mail ~]# du -k --max-depth=1 /mdboxes/test/ 220 /mdboxes/test/mailboxes 6029348 /mdboxes/test/storage 6029592 /mdboxes/test/ [root@mail ~]# doveadm backup -u test mdbox:/tmp/MDBOX_TEMP/ [root@mail ~]# du -k --max-depth=1 /tmp/MDBOX_TEMP/ 16 /tmp/MDBOX_TEMP/mailboxes 65540 /tmp/MDBOX_TEMP/storage 65568 /tmp/MDBOX_TEMP/

4 9

setting service_count results in Permission denied
by Micah Anderson 15 Apr '15

15 Apr '15

The load on our machines has gotten too high, so I started to see log messages that directed me to look at this page for config changes: https://pad.riseup.net/redirect#http%3A//wiki2.dovecot.org/SocketUnavailable One of the things I wanted to do on that page was to set the: service imap { service_count = 100 } but when I added that to the service imap block, and restarted dovecot, I see this in the logs: Error: net_connect_unix(/run/dovecot/imap-postlogin) failed: Permission denied I dont understand how this impacts permissions. Its clearly this setting, because when I remove it, things work again. I found nothing else in the logs indicating a configuration problem. This is what the config block looked like: service imap { # Most of the memory goes to mmap()ing files. You may need to increase this # limit if you have huge mailboxes. #vsz_limit = 256M # Max. number of IMAP processes (connections) process_limit = 4096 service_count = 100 executable = imap imap-postlogin } service imap-postlogin { # the script process runs as the user specified here (v2.0.14+): #user = $default_internal_user executable = script-login /usr/local/sbin/postlogin_imap # this UNIX socket listener must use the same name as given to imap executable unix_listener imap-postlogin { } } This is with dovecot 2.2.13, thanks for any help you can provide! micah

4 3

concurrent IMAP connections (plus 2 easy questions)
by Ron Cleven 14 Apr '15

14 Apr '15

I posted a few days back asking about configuration issues with a modestly large number of IMAP connections. Several people were kind enough to respond with various ideas. Armed with those ideas and Google, I was able to determine the underlying configuration issues with CentOS 7 and Dovecot 2.2.10. I did some further benchmarking to ensure that we could properly plan our server configuration requirements as we continue to roll this out, so I thought I would share this, partly to see if anyone has experiences that conflict with my findings. I found that each incremental dovecot IMAP process required about 750k of RAM. Simulations confirmed that 8 gig of RAM was sufficient to support approximately 10,000 concurrent IMAP connections (no POP3). CentOS settings: Added: fs/inotify/max_user_instances = 28000 to: /etc/sysctl.d/99-sysctl.conf Added: * hard nproc 28000 * soft nproc 28000 * hard nofile 28000 * soft nofile 28000 to: /etc/security/limits.d/20-nproc.conf To verify the settings after reboot: cat /proc/sys/fs/inotify/max_user_instances ulimit -Hn ulimit -Sn Dovecot: Added: process_limit = 28000 to service imap{} /etc/dovecot/conf.d/10-master.conf Added (using proxies, would like to just turn off this check): mail_max_userip_connections = 40 to protocol imap {}: /etc/dovecot/conf.d/20-imap.conf Added: process_limit = 28000 to service managesieve {}: /etc/dovecot/conf.d/20-managesieve.conf Hope this helps someone. Feedback would be welcome. It would be great if there was a blessed cookbook for Dovecot scaling. At this point it seems a bit like an art form. Now to my two "easy" questions. 1) TCP replication between our two CentOS boxes has been working great, no complaints. However, I realized I did not know how to check the status of replications, as one might want to do if one of the two boxes was taken offline for maintenance or repair. On the surface, it would appear that the command: doveadm replicator status '*' would likely show me what I want to know. However, when I tried it, I got: doveadm(): Fatal: net_connect_unix(/var/run/dovecot/replicator-doveadm) failed: No such file or directory The documentation says that doveadm assumes the socket /var/run/dovecot/replicator-doveadm and the command format provides a "-a" override. In that directory, there is no "replicator-doveadm" socket, but I do see a "replicator" socket. So, should I be using the command: doveadm replicator status -a /var/run/dovecot/replicator '*' or is the non-existence of the replicator-doveadm socket indicative of something I might have done wrong with the config? I hate experimenting more than I have to with a production box. The 2.2.10 Dovecot I am running was installed via yum, so there are no potential compilation issues. 2) It seems logical to me that: dovecot stop would first lock out any new user connections, then do the equivalent of a: doveadm kick "*" before actually cycling everything else down to ensure the shutdown is as graceful as possible. I suppose I could experiment and find out for certain, but I have the sense that the "stop" command is not quite that elegant, so we have implemented procedures to work around it. Just a point of curiosity. An alternative would be if there was a doveadm command to lock out any new user connections, which could then be followed by kick and stop. I have found that many clients are VERY quick to reconnect after a kick.

2 1

Authcache and user changing
by Lazy 13 Apr '15

13 Apr '15

Hi, I have noticed that during auth cache hits usernames are not updated. (We use ldap backend and change username with user_attrs = uid=user, mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ cold cache lmtp(14414): Debug: auth input: testmon_testmon home=/vmail/te/testmon_testmon quota_rule=*:bytes=104857600 lmtp(14414): Debug: changed username to testmon_testmon lmtp(14414): Debug: Added userdb setting: plugin/quota_rule=*:bytes=104857600 hot cache lmtp(14715): Debug: auth input: iqmon(a)mon.test.pl home=/vmail/iq/testmon_testmon quota_rule=*:bytes=104857600 lmtp(14715): Debug: Added userdb setting: plugin/quota_rule=*:bytes=104857600 this kills our dictionary based quota (users have multiple quota instances depending on timing and alias the email was delivered to. Is there a way to force addition of user to the auth cache ? -- Michal Grzedzicki

3 5

special_use folders
by Roman Gelfand 13 Apr '15

13 Apr '15

My setup is postfix mail gateway/spamassassin on one machine and dovecot mail box server on another machine. Will the following configuration work? 1. On the mail gateway, I install dovecot-lmtp and use it to deliver locally spam. 2. On the mailbox server, I configure special use junk folder to point mail gateway's spam folder via nfs. If this is correct, how can I configure special use folder to point to a path (variable based on email) which is different from default path? If there is a different way to handle this, I would interested. Thanks in advance

3 2

dovecot debug message help required
by Rajesh M 13 Apr '15

13 Apr '15

hi i was carrying out some testing using qmailtoaster with dovecot on a centos 64 server i am connecting to the mailbox using a windows machine with outlook across the lan. the mailbox is around 7gb in size with around 12000 emails spread across multiple folders and i am trying to sync the mailbox folders to by creating an account imap account in outlook. the mails are getting downloaded in the imap folder but the sync does not complete and outlook throws an error. Task 'Synchronizing subscribed folders for user(a)mydomain.com.' reported error (0x800CCC0F) : 'Outlook cannot synchronize subscribed folders for user(a)mydomain.com.. Error: The TCP/IP connection was unexpectedly terminated by the server. If you continue to receive this message, contact your server administrator or Internet service provider (ISP).' in the dovecot log i see the following. Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Effective uid=89, gid=89, home=/home/vpopmail/domains/mydomain.com/user Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota root: name=ignore=Trash backend=maildir args= Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota rule: root=ignore=Trash mailbox=? bytes=0 messages=0 Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota grace: root=ignore=Trash bytes=0 (10%) Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location= Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: access(/home/vpopmail/domains/mydomain.com/user/mdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: access(/home/vpopmail/domains/mydomain.com/user/sdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: maildir: root exists (/home/vpopmail/domains/mydomain.com/user/Maildir) Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: maildir++: root=/home/vpopmail/domains/mydomain.com/user/Maildir, index=, indexpvt=, control=, inbox=/home/vpopmail/domains/mydomain.com/user/Maildir, alt= Apr 10 17:12:40 imap(user(a)mydomain.com): Info: Disconnected: Logged out in=28 out=460 i would like to know what the following means -- specifically mdbox and sdbox #################### Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: access(/home/vpopmail/domains/mydomain.com/user/mdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: access(/home/vpopmail/domains/mydomain.com/user/sdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: couldn't find root dir #################### my dovecot config file # dovecot -n # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. mail_debug = yes mail_max_userip_connections = 50 mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin { quota = maildir:ignore=Trash quota_rule = ?:storage=0 } protocols = imap pop3 service imap-login { client_limit = 1000 process_limit = 400 process_min_avail = 4 service_count = 0 vsz_limit = 512 M } service pop3-login { client_limit = 1000 process_limit = 400 process_min_avail = 12 service_count = 0 vsz_limit = 512 M } ssl_cert = </var/qmail/control/servercert.pem ssl_dh_parameters_length = 2048 ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = " quota imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = no pop3_no_flag_updates = yes } thank you, rajesh

2 1

Disabling of userdb/passdb modules using config statements
by Jeroen Massar 13 Apr '15

13 Apr '15

Hola, Debian (and possibly other distros) use the /etc/dovecot/conf.d/* setup where default config files are stuffed and then one can just add a 99-myconfig.conf et voila, variables are overruled. This allows the distro to supply updates to the files at package upgrade time without any/much user intervention. The problem (for me ;) is that the system comes provided with: auth-system.conf.ext containing: passdb { driver = pam } userdb { driver = passwd } Hence pam & /etc/passwd based are always enabled. This while I don't have any local users. Replication seems to then always pick up the local users, which are vmail + nobody (65536). doveadm user '*' thus reports vmail, nobody + virtual users Setting: first_valid_uid = 5000 last_valid_uid = 5000 only keeps vmail in there, but apparently some module (guess replication) is still able to figure out that 'nobody' exists: Apr 10 09:48:25 mail dovecot: doveadm(IPADDR,nobody): Error: Mail access for users with UID 65534 not permitted (see first_valid_uid in config file, uid from userdb lookup). Apr 10 09:48:25 mail dovecot: doveadm(IPADDR,nobody): Error: dsync-server: User init failed Apr 10 09:49:38 mail dovecot: doveadm(nobody): Error: sync: Failed to start remote dsync-server command: Remote exit_code=75 and on the other side: Apr 10 09:54:38 mail dovecot: doveadm(nobody): Error: sync: Unknown user in remote This can be resolved by commenting out the entries in auth-system.conf.ext but then I'll have to do that again at package upgrade time. Hence, would it be a cool option to be able (in the 99-myconfig.conf) file to put: passdb { driver = pam enabled = false } userdb { driver = passwd enabled = false } And thereby disabling those modules completely? Thus avoiding upgrade conflicts etc. Greets, Jeroen

4 7

doveadm save ...
by Hardy Flor 13 Apr '15

13 Apr '15

Hello, when I have with "doveadm save ..." store a message, how do I get the guid or uid of this message for the setthe flags? Hardy

4 8

dovecot-2.2.16 compilation problems under Solaris Studio 11
by Jürgen Obermann 13 Apr '15

13 Apr '15

Hello here are two problems I get when I compile dovecot 2.2.16 under Solaris 10 with Studio 11 Compiler: gmake[4]: Entering directory `/net/fileserv/export/sunsrc/src/dovecot-2.2.16/src/lib' source='test-array.c' object='test_lib-test-array.o' libtool=no \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-test -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c -o test_lib-test-array.o `test -f 'test-array.c' || echo './'`test-array.c "test-array.c", line 129: warning: initializer does not fit or is out of range: -32768 "test-array.c", line 129: warning: initializer does not fit or is out of range: -16384 "test-array.c", line 129: warning: initializer does not fit or is out of range: -512 "test-array.c", line 129: warning: initializer does not fit or is out of range: -256 "test-array.c", line 129: warning: initializer does not fit or is out of range: -128 "test-array.c", line 129: warning: initializer does not fit or is out of range: -64 "test-array.c", line 129: warning: initializer does not fit or is out of range: -2 "test-array.c", line 129: warning: initializer does not fit or is out of range: -1 "test-array.c", line 154: operand cannot have void type: op "=" "test-array.c", line 154: assignment type mismatch: unsigned short "=" const void "test-array.c", line 206: operand cannot have void type: op "=" "test-array.c", line 206: assignment type mismatch: pointer to const char "=" const void cc: acomp failed for test-array.c gmake[4]: [test_lib-test-array.o] Fehler 2 (ignoriert) gmake[3]: Entering directory `/net/fileserv/export/sunsrc/src/dovecot-2.2.16/src/lib-imap' source='imap-match.c' object='imap-match.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ /bin/bash ../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c -o imap-match.lo imap-match.c libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c imap-match.c -KPIC -DPIC -o .libs/imap-match.o "imap-match.c", line 199: identifier redeclared: imap_match_dup current : function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} previous: function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} : "imap-match.h", line 33 "imap-match.c", line 214: identifier redeclared: imap_match_globs_equal current : function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool previous: function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool : "imap-match.h", line 36 cc: acomp failed for imap-match.c gmake[3]: [imap-match.lo] Fehler 1 (ignoriert) Greetings Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

4 4

sieve plugin editheader not found
by Patrick Lion 11 Apr '15

11 Apr '15

Hey folks, ive already made a bug report in the gentoo bugtracker last year. In the meantime after some releases the error persists with the current dovecot and pigeonhole versions. Please see my bug report at gentoo mailinglist: https://bugs.gentoo.org/show_bug.cgi?id=522148 Okay, here are some informations: Steps to Reproduce: add "editheader" to sieve options or "sievec" a file that need the extension if header :matches "Something" "*" { addheader "Anything" "${1}"; deleteheader "Something"; } sievec mod_header.sieve sievec(root): Fatal: Plugin 'editheader' not found from directory /usr/lib64/dovecot/sieve dovecot --version 2.2.16 pigeonhole-0.4.7 sources got downloaded and used in the build process dovecot -n # 2.2.16: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.7 # OS: Linux 2.6.32-openvz-042stab102.9-amd64 x86_64 Gentoo Base System release 2.2 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imap_capability = CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=ORDEREDSUBJECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED CONTEXT=SEARCH LIST-STATUS SPECIAL-USE XLIST QUOTA info_log_path = syslog login_log_format_elements = user=<%u> method=%m ip=%r mpid=%e mail_location = maildir:%h/.maildir mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include body enotify environment mailbox date index ihave duplicate imapflags notify namespace compat { alias_for = hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { args = /etc/dovecot/dovecot-sql.conf.ext quota = maildir quota_rule2 = trash:storage=+150M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_extensions = variables } postmaster_address = mailer-daemon(a)dev.someserver service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /etc/postfix/quota-warning.sh unix_listener quota-warning { group = hosting mode = 0660 user = postfix } user = postfix } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota sieve postmaster_address = mailer-daemon(a)dev.someserver } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lmtp { hostname = dev.someserver mail_plugins = quota sieve postmaster_address = postmaster(a)dev.someserver } Please let me know if you need any additional informations, build logs ( log from 2.213 attached at bugs.gentoo.org ) or whatever may be helpful to track this down.

3 4

Calendar and address book with Dovecot
by mimicafe＠gmail.com 10 Apr '15

10 Apr '15

Hi all I recently install Postfix and Dovecot, and so far so good. My assumption was that calendar and address book (similar to Gmail calendar or address book) are part of Dovecot. However I do not see anything concerning them in any of the docs I have read so far. What other software (ideally open source, free) do I need in other to have Calendar and address book so my users can manage their contact on their phones or computer? I have looked at Roundcube already, but my requirement is not necessarily to provide web mail. Thanks Mimi

15 16