- dovecot - dovecot.org

Disable user login for a few seconds ?
by Florent B 05 Jul '14

05 Jul '14

Hi all, I need to move e-mail files of my users from one file system to another. I use a MySQL backend on Dovecot 2.1. How can I do to disable temporary an account while moving files ? I have an "active" bit in my DB, but if I set it to 0, my MX servers are bouncing mails. How can I do to disable temporary an account ? In fact, I need dovecot not to do any change on files... I think I could change account password for a while, and reset it after migration, but it will disturb connected users. Maybe I could chmod 0 files on my old file system during migration ? How Dovecot will act ? Thank you :) Flo

4 4

Shared Mailbox + LDAP Easy with this script
by Allan Cassaro 05 Jul '14

05 Jul '14

Hello guys, After some hours fighting with shared mailbox, I finally understand how it works - and, realy, I can't believe how easy it is! So, to help others like me and to improve the shared mailbox with Dovecot this script does all the "hard work". I don't know if this group permit attachments, so, let's the link: https://sites.google.com/site/allancassaro/mkshared.tar.gz Enjoy! ===== From README file ===== This is a simple code to help with Dovecot Public Shared Mailbox function. Just configure a public shared mailbox with ACLs, change the configuration file and run this program. How it works: 1) The program connect to the LDAP server and fetch groups from it (with ldap filter) 2) With groups, it fetches the members and owners (or any attribute you want); 3) It will walk into the "shared folder" folder base directory and: 3.1) Rename any directory that was renamed in LDAP (based on entryUUID ldap attribute); 3.2) Create diretories and skeletion (new, cur and tmp) of any group that exists in LDAP; 3.3) Optionaly, remove any "orphan" directory (wihtout a ldap entrey); Example: dn: cn=Everyone,ou=Shared_Mailbox, dc=example,dc=com objectClass: labeledURIObject objectClass: top objectClass: groupOfURLs cn: Everyone labeledURI: ldap:///ou=Users,dc=example,dc=com?uid?one?(objectClass=person) member: uid=user2,ou=users,dc=example,dc=com member: uid=user3,ou=users,dc=example,dc=com member: uid=user1,ou=users,dc=example,dc=com member: uid=user.surname,ou=users,dc=example,dc=com owner: uid=user4,ou=Users,dc=example,dc=com This will create a folder tree like this: /path/toshared/.Everyone /path/toshared/.Everyone/new /path/toshared/.Everyone/cur /path/toshared/.Everyone/tmp With permission file (/path/toshared/.Everyone/dovecot-acl): user=user1 lr ... user=user.surname lr user=user4 lrwstipekxa Hope this helps you! Enjoy. -- Use cópia oculta (BCC ou CCO) e apague dados pessoais no campo da mensagem ao encaminhar qualquer e-mail. http://allan.cassaro.googlepages.com

1 0

Shared Mailbox + LDAP Easy with this script
by Allan Cassaro 04 Jul '14

04 Jul '14

Hello guys, After some hours fighting with shared mailbox, I finally understand how it works - and, realy, I can't believe how easy it is! So, to help others like me and to improve the shared mailbox with Dovecot this script does all the "hard work". I don't know if this group permit attachments, so, let's the link: https://sites.google.com/site/allancassaro/mkshared.tar.gz Enjoy! ===== From README file ===== This is a simple code to help with Dovecot Public Shared Mailbox function. Just configure a public shared mailbox with ACLs, change the configuration file and run this program. How it works: 1) The program connect to the LDAP server and fetch groups from it (with ldap filter) 2) With groups, it fetches the members and owners (or any attribute you want); 3) It will walk into the "shared folder" folder base directory and: 3.1) Rename any directory that was renamed in LDAP (based on entryUUID ldap attribute); 3.2) Create diretories and skeletion (new, cur and tmp) of any group that exists in LDAP; 3.3) Optionaly, remove any "orphan" directory (wihtout a ldap entrey); Example: dn: cn=Everyone,ou=Shared_Mailbox,dc=example,dc=com objectClass: labeledURIObject objectClass: top objectClass: groupOfURLs cn: Everyone labeledURI: ldap:///ou=Users,dc=example,dc=com?uid?one?(objectClass=person) member: uid=user2,ou=users,dc=example,dc=com member: uid=user3,ou=users,dc=example,dc=com member: uid=user1,ou=users,dc=example,dc=com member: uid=user.surname,ou=users,dc=example,dc=com owner: uid=user4,ou=Users,dc=example,dc=com This will create a folder tree like this: /path/toshared/.Everyone /path/toshared/.Everyone/new /path/toshared/.Everyone/cur /path/toshared/.Everyone/tmp With permission file (/path/toshared/.Everyone/dovecot-acl): user=user1 lr ... user=user.surname lr user=user4 lrwstipekxa Hope this helps you! Enjoy. -- Use cópia oculta (BCC ou CCO) e apague dados pessoais no campo da mensagem ao encaminhar qualquer e-mail. http://allan.cassaro.googlepages.com

1 0

Shared folders not listed by IMAP
by Bambero 04 Jul '14

04 Jul '14

Hello I just upgraded my system and there is a problem with shared mailboxes. When I use the doveadm command I can see shared folders: doveadm mailbox list -u 'test(a)mydomain.pl' Drafts Sent Spam Trash Shared Virtuals Virtuals/all Shared/test2(a)mydomain.pl Shared/test2(a)mydomain.pl/Sent INBOX But I can't see them over IMAP protocol. Some config opts: valid_chroot_dirs = /var/mail mail_chroot = /var/mail namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%u/Maildir:INDEX=~/Maildir/Shared/%%u subscriptions = yes list = yes } plugin { acl = vfile:cache_secs=5 } plugin { acl_shared_dict = file:/var/mail/%i.db } protocol imap { mail_plugins = $mail_plugins imap_quota imap_acl imap_zlib } My version of dovecot is 2.2.10. Regards Bambero

2 4

[Dovecot] dovecot/lmtp munmap()-ing a lot
by Ralf Hildebrandt 04 Jul '14

04 Jul '14

I observed several long running dovecot/lmtp processes hogging the CPU. I then strace'd them (strace -c -p 6375) and found them munmap()-ing a lot: % time seconds usecs/call calls errors syscall ------ ----------- ----------- --------- --------- ---------------- 97.18 19.592537 1878 10430 munmap 2.28 0.458984 36 12696 epoll_ctl 0.26 0.052926 10 5288 fdatasync 0.21 0.042472 3 13679 epoll_wait ... snip ... Why would that happen? (dovecot 2.1.17) -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

7 15

[Dovecot] dovecot: disable ssl compression
by Andreas Schulze 04 Jul '14

04 Jul '14

Hello, Our "it-security" department asked me about Qualys warnings like -> SSL/TLS Compression Algorithm Information Leakage Vulnerability As far as I learned it's compression inside ssl. postfix-2.11 knows 'tls_ssl_options = no_compression' ( see http://www.postfix.org/postconf.5.html#tls_ssl_options ) is the something comparable in dovecot too? Looks like most extensions in ssl exist only to be disabled :-/ Thanks Andreas

7 15

number of users
by ihab 04 Jul '14

04 Jul '14

Hello, i using roundcube with dovecot, i have a question if there is possible to know the number of users that using the mail system (in other word the online users) . thanks, best regards, ihab :) -- View this message in context: http://dovecot.2317879.n4.nabble.com/number-of-users-tp48701.html Sent from the Dovecot mailing list archive at Nabble.com.

4 3

mixing Maildir and mdbox
by gustavo panizzo <gfa> 04 Jul '14

04 Jul '14

Hello i'm in the process to architect a new email system. i plan to use dovecot 2.2.9 (debian's wheezy). i would like to use maildir for 2 folders on each account (spam and no-spam) and the rest of the folders stored on mdbox. this should be opaque to my users. the reason for this, is i want to be able to train my anti-spam tools, but they read maildir or mbox, they don't read mdbox or dbox. but i want the other folders as mdbox (performance, backups, alternate storage) is there any way?, i prefer if is configurable in advance for all accounts but i could live with something that is done after account is created thanks! -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333

1 0

stripping extension from domain name
by Jerry 03 Jul '14

03 Jul '14

Thu, 3 Jul 2014 06:29:06 -0400 I know that the "%d" parameter is for the domain. Is there any way to use just the domain name sans its extension. EXAMPLE: example.com ==> example Also, I have a lot of logging going on in my dovecot log file. I want to limit it to just the barest amount, such as indicting what mail box mail was delivered to. Authentication errors, etcetera should only be shown if an error occurs. Is this possible? Thanks! -- Jerry

2 1

ACL configuration migration from Dovecot 2.1.17 to 2.2.13
by Iavor Stoev 03 Jul '14

03 Jul '14

Hello, I'm preparing migration to the latest Dovecot version 2.2.13 from the previous stable branch 2.1.17 which is deployed on my servers. With version 2.1.17 I use global acl dir to prevent all mail users to delete their INBOX.Junk Mail folder, which is part from our spam protection system. My current config is: cat /etc/dovecot/acls/INBOX.Junk\ Mail owner lrwstiae With version 2.2.13, the global acl dir support is disabled (with the above config, the imap server shows no folders at all) so I must use global acl file. The problem is that the "INBOX.Junk Mail" folder contains space character and I tried to escape it with "",'',/ and enclose the whole name with "" & '' without success. If I change the acl config to INBOX.Mail it works OK. The syntax of my global acl file is: cat /etc/dovecot/acls INBOX.Junk Mail owner lrwstiae The error is: Error: Global ACL file /etc/dovecot/acls line 1: Unknown ID 'Mail' Please advise Iavor Stoev Project Manager // Head of System & Network Administration Department

2 1

[Dovecot] fts_lucene - hiding lucene-indexes folder?
by Nicholas Riley 03 Jul '14

03 Jul '14

Hi, Is there any way to hide this folder from IMAP clients? I can see it is not runtime configurable and just #defined as LUCENE_INDEX_DIR_NAME in fts-backend-lucene.c. -- Nicholas Riley <njriley(a)illinois.edu>

5 8

BUG: Mail folder with space in its name is not supported in the global acl file
by Iavor Stoev 03 Jul '14

03 Jul '14

Hello, I use Dovecot 2.2.13 The syntax of my global acl file is: cat /etc/dovecot/acls INBOX.Junk Mail owner lrwstiae The error is: Error: Global ACL file /etc/dovecot/acls line 1: Unknown ID 'Mail' I tried to escape it with "",'',/ and enclose the whole name with "" & '' without success If I change the rule to: INBOX.JunkMail owner lrwstiae or INBOX.Junk?Mail owner lrwstiae The acl works fine. Please advise how to apply the acl rule for the folder with a space in its name? Thank you Iavor Stoev Project Manager // Head of System & Network Administration Department

2 1

Bug/feature: mail fs pollution on IMAP select namespace/{non-existent}
by Peter Benko 03 Jul '14

03 Jul '14

Hi all, I have noticed a strange behavior with dovecot (tested with 2.2.13). I use shared folders to share mailboxes between users. I have a namespace called "Accounts" that hosts the shared folder for the users (prefix Accounts/%%n/). However, When I issue an IMAP select command on a random non-existent mailbox name under "Accounts", dovecot auto-creates it and pollutes my mail root directory: Python test code snippet: imapConn=imaplib.IMAP4_SSL(serverIP, serverPort) imapConn.login(serverLogin, serverPass) print imapConn.select("Accounts/NonExistentMailbox") imapConn.logout() Resulting in this: drwxr-x--- 1 vmail vmail 4096 Jun 12 10:00 _attachments_ >>> drwx------ 1 vmail vmail 4096 Jun 24 14:27 NonExistentMailbox <<< drwxr-x--- 1 vmail vmail 4096 Jun 24 00:54 user1 drwxr-x--- 1 vmail vmail 4096 Jun 24 01:24 user2 ... -rwxr-x--- 1 vmail vmail 72 Jun 24 14:27 shared-mailboxes.db ls -l NonExistentMailbox/ -rw------- 1 vmail vmail 0 Jun 24 14:27 dovecot-acl-list drwx------ 1 vmail vmail 4096 Jun 24 14:27 mailboxes <<< (empty) I attached a debug log and and my sanitized dovecot config. Please help! Is this a bug or a feature? I assume it might even cause more serious problems e.g., if I would select "Accounts/_attachments_" or something similar... I noticed this behavior with the latest Thunderbird client when I tried to subscribe to shared folders and it started to pollute my mail dirs (which signals that Thunderbird might be also buggy as it should not select non-existent folders under "Accounts"). I just reproduced it for simplicity with the above python script. Best regards, Peter debug log --------- Jun 24 14:27:51 efi-backup dovecot: imap-login: Login: user=<user2(a)domain.com>, method=PLAIN, rip=192.168.1.1, lip=192.168.1.3, mpid=10787, TLS, session=<t36aFpT8ggDAqAEB> Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Jun 24 14:27:51 efi-backup dovecot: imap: Debug: Added userdb setting: plugin/master_user=user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Effective uid=5000, gid=5000, home=/mail/mailboxes/domain.com/user2 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:~ Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/user2, index=, indexpvt=, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 1 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : type=shared, prefix=Accounts/%n/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=mdbox:/mail/mailboxes/%d/%n:INDEX=/mail/mailboxes/%d/%n:INDEXPVT=/… Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/NonExistentMailbox, index=, indexpvt=/mail/mailboxes/domain.com/user2/indexpvt-accounts/NonExistentMail…, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : /mail/mailboxes/domain.com/NonExistentMailbox doesn't exist yet, using default permissions Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace : Using permissions from /mail/mailboxes/domain.com/NonExistentMailbox: mode=0700 gid=default Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: fs: root=/mail/mailboxes/domain.com/NonExistentMailbox, index=, indexpvt=/mail/mailboxes/domain.com/user2/indexpvt-accounts/NonExistentMail…, control=, inbox=, alt= Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: initializing backend with data: vfile Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: acl username = user2(a)domain.com Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl: owner = 0 Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: Global ACLs disabled Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: file /mail/mailboxes/domain.com/NonExistentMailbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: Namespace Accounts/NonExistentMailbox/: Using permissions from /mail/mailboxes/domain.com/NonExistentMailbox: mode=0700 gid=default Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Debug: acl vfile: file /mail/mailboxes/domain.com/NonExistentMailbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Jun 24 14:27:51 efi-backup dovecot: imap(user2(a)domain.com): Disconnected: Logged out in=56 out=481 doveconf -n ----------- # 2.2.13 (38cd37cea8b1): /etc/dovecot/dovecot.conf auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain hostname = mail.domain.com listen = * login_greeting = $hostname IMAP server mail_attachment_dir = /mail/mailboxes/%d/_attachments_ mail_attachment_fs = sis-queue /mail/mailboxes/%d/_attachments_/queue:posix mail_attachment_min_size = 16 k mail_debug = yes mail_location = mdbox:~ mail_plugins = " zlib acl" mdbox_rotate_interval = 5 days mdbox_rotate_size = 5 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = mdbox:/mail/mailboxes/%%d/%%n:INDEX=/mail/mailboxes/%%d/%%n:INDEXPVT=/mail/mailboxes/%d/%n/indexpvt-accounts/%%n prefix = Accounts/%%n/ separator = / subscriptions = no type = shared } passdb { args = /mail/config/dovecot/passwd driver = passwd-file } passdb { args = /mail/config/dovecot/passwd-master driver = passwd-file master = yes pass = yes } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/mail/mailboxes/%d/shared-mailboxes.db zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)domain.com protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } ssl = required ssl_cert = </mail/config/public-address-cert.pem ssl_key = </mail/config/public-address-key.pem syslog_facility = local6 userdb { args = uid=vmail gid=vmail master_user=%u home=/mail/mailboxes/%d/%n driver = static } protocol imap { mail_plugins = " zlib acl imap_acl" } remote 192.168.0.0/16/16 { ssl_cert = </mail/config/private-address-cert.pem ssl_key = </mail/config/private-address-key.pem }

2 1

Dsync replication one-way
by Muriel 03 Jul '14

03 Jul '14

Hi all, I know that I can do a backup using doveadm: doveadm backup -u user ssh backup.server doveadm dsync-server -u user But it's possible to use replicator service to do the same job? Or dsync with replicator can only be used in a two-way environment? Thanks, Muriel

2 1

IMAP sessions quit when calling MYRIGHTS on shared namespace
by Franz Knipp 03 Jul '14

03 Jul '14

Hi, the IMAP connection is dropped, when I call MYRIGHTS on the root of my shared folders. Using the configuration below, the shared folders are located in shared/%%U/ # telnet localhost imap Trying ::1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. . LOGIN XXXXXXX xxxx . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in . MYRIGHTS shared Connection closed by foreign host. I'd expect some kind of error message instead of dropping the connection. Kind regards, Franz # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_master_user_separator = * auth_verbose = yes debug_log_path = /var/log/dovecot_debug.log default_client_limit = 3500 disable_plaintext_auth = no import_environment = TZ DOVECOT_HOSTNAME lmtp_rcpt_check_quota = yes mail_gid = vmail mail_location = mdbox:~/mail mail_plugins = acl quota zlib mail_log notify mail_uid = vmail managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body environment mailbox date ihave duplicate vacation-seconds imapflags notify mbox_write_locks = fcntl namespace { list = children location = mdbox:%%h/mail prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } prefix = INBOX/ separator = / subscriptions = yes } namespace parent { hidden = yes list = no location = prefix = separator = / subscriptions = yes } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/spool/imap/dovecot-shared-mailboxes mail_log_events = delete undelete expunge copy save mailbox_create mailbox_delete mailbox_rename pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX quota = dict:user::file:%h/mail/dovecot-quota quota_exceeded_message = Empfaenger Postfach ist voll (Mailbox Quota Exceeded) quota_grace = 50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/sieve/active sieve_before = /etc/dovecot/sieve_before/movespamfolder.sieve sieve_dir = ~/sieve sieve_extensions = +notify -enotify +imapflags +vacation-seconds sieve_max_actions = 1000 sieve_max_redirects = 1000 sieve_vacation_max_period = 0 sieve_vacation_min_period = 0 zlib_save = gz zlib_save_level = 6 } pop3_no_flag_updates = yes pop3_uidl_format = %v.%u pop3c_host = pop3.example.com pop3c_master_user = master pop3c_password = secret protocols = imap pop3 lmtp sieve service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-userdb { mode = 0777 } } service imap-login { process_limit = 3000 process_min_avail = 16 service_count = 0 } service imap { process_limit = 10240 } service lmtp { inet_listener lmtp { port = 26 } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } service pop3-login { service_count = 0 } service pop3 { process_limit = 10240 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem syslog_facility = local0 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl quota zlib mail_log notify sieve } protocol doveadm { mail_plugins = acl quota zlib mail_log notify pop3_migration } protocol lda { mail_plugins = acl quota zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 3789 mail_plugins = acl quota zlib mail_log notify imap_acl imap_quota } -- Franz Knipp, +43 664 3980169 qnipp GmbH, Hauptstraße 54, 7064 Oslip, Österreich http://qnipp.com http://qnipp.com/qnipp.vcf

3 3

[Dovecot] zlib maildir reindex broken
by Richard Platel 03 Jul '14

03 Jul '14

I posted to the list about this a while ago but never got a response, I have a bit more information now. Dovecot 2.2.12 and other 2.2 versions are broken when using zlib and maildir. If messages are re-indexed, the INTERNALDATE of all messages is set to the time the re-index is done. The problem seems to be in src/plugins/zlib/zlib-plugin.c in the function zlib_mail_cache_open. During a reindex maildir_mail_get_received_date() does an i_stream_stat on the the i_stream_seekable stream created in zlib_mail_cache_open, but this istream does not know about the original maildir message file and always returns the current time for the file's stat times. This is also broken on initial index, but if mail is indexed when it's received (ours isn't) it coincidentally gets the right time.

4 3

Another Crash in service imap with version 2.2.13 - Debian Wheezy
by Urban Loesch 03 Jul '14

03 Jul '14

Hi, yesterday I updated my second server from Debian Squeeze to Debian Wheezy. Since todaay I get the followinig errors in my logs: Error-Log: ... Jun 26 09:08:28 mailstore dovecot: imap(user(a)domain.net pid:28898 session:<iuMX3Lf8fACXLrFC>): Fatal: master: service(imap): child 28898 killed with signal 11 (core dumped) ... Mail-log ... Jun 26 09:08:28 mailstore dovecot: imap-login: ID sent: x-session-id=iuMX3Lf8fACXLrFC, x-originating-ip=CLIENT_IP, x-originating-port=52092, x-connected-ip=PROXY_IP, x-connected-port=143, x-proxy-ttl=4: user=<>, rip=CLIENT_IP, lip=PROXY_IP, secured, session=<iuMX3Lf8fACXLrFC> Jun 26 09:08:28 mailstore dovecot: imap-login: Login: user=<user(a)domain.net>, method=PLAIN, rip=CLIENT_IP, lip=PROXY_IP, mpid=28898, secured, session=<iuMX3Lf8fACXLrFC> Jun 26 09:08:28 mailstore dovecot: imap(user(a)domain.net pid:28898 session:<iuMX3Lf8fACXLrFC>): ID sent: name=iPhone Mail, version=11D201, os=iOS, os-version=7.1.1 (11D201) Jun 26 09:08:28 mailstore dovecot: imap(user(a)domain.net pid:28898 session:<iuMX3Lf8fACXLrFC>): Fatal: master: service(imap): child 28898 killed with signal 11 (core dumped) ... I made a backtrace: -----> start backtrace <----- [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x0000000000000000 in ?? () (gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x00007fbf26650c44 in mailbox_save_cancel (_ctx=<optimized out>) at mail-storage.c:2116 ctx = 0xa95500 keywords = 0x0 mail = <optimized out> #2 0x00007fbf2665104f in mailbox_save_begin (ctx=ctx@entry=0x7fff64b53048, input=0xaaaea0) at mail-storage.c:2041 box = 0xa6f800 ret = <optimized out> #3 0x00007fbf26648bb6 in mail_storage_try_copy (mail=0xa90d20, _ctx=0x7fff64b53048) at mail-copy.c:76 ctx = 0xa95500 pmail = 0xa90d20 input = 0xaaaea0 #4 mail_storage_copy (ctx=0x0, mail=0xa90d20) at mail-copy.c:101 No locals. #5 0x00007fbf24f12679 in notify_copy (ctx=0xa95500, mail=0xa90d20) at notify-storage.c:107 lt = 0xa8bdd0 lbox = 0xa70870 ret = <optimized out> #6 0x00007fbf2573d06b in acl_copy (ctx=0xa95500, mail=0xa90d20) at acl-mailbox.c:435 t = <optimized out> abox = 0xa6fe48 #7 0x00007fbf26650e8d in mailbox_copy (_ctx=_ctx@entry=0x7fff64b53190, mail=0xa90d20) at mail-storage.c:2152 ctx = 0xa95500 t = 0xa8de20 keywords = 0x0 pvt_flags = 0 backend_mail = 0xa90d20 ret = <optimized out> __FUNCTION__ = "mailbox_copy" #8 0x000000000040dd34 in fetch_and_copy (copy_count_r=<synthetic pointer>, src_uidset_r=<synthetic pointer>, search_args=<optimized out>, src_trans_r=0x7fff64b53168, t=0xa8de20, move=false, client=0xa00f40) at cmd-copy.c:70 search_ctx = 0xa90a80 src_trans = 0xa8f3f0 srcset_ctx = {str = 0x9d4318, first_uid = 0, last_uid = 4294967295} ret = 1 save_ctx = 0x0 mail = 0xa90d20 copy_count = 1 src_uidset = 0x9d4318 #9 cmd_copy_full (cmd=0xa01a50, move=false) at cmd-copy.c:123 client = 0xa00f40 dest_storage = <optimized out> destbox = 0xa6f800 t = 0xa8de20 src_trans = <optimized out> search_args = 0xa6e7f0 messageset = 0xa04410 "1309,1310" mailbox = 0xa04420 "[rolmail]/Unseen" src_uidset = <optimized out> sync_flags = 0 imap_flags = 0 changes = {pool = 0x7fff64b53290, uid_validity = 1689596352, saved_uids = {arr = {buffer = 0x9dd0f0, element_size = 10492496}, v = 0x9dd0f0, v_modifiable = 0x9dd0f0}, ignored_modseq_changes = 10492496, changed = false, no_read_perm = false} copy_count = <optimized out> msg = <optimized out> ret = <optimized out> __FUNCTION__ = "cmd_copy_full" #10 0x000000000041841c in command_exec (cmd=cmd@entry=0xa01a50) at imap-commands.c:158 hook = 0x9dd100 ret = <optimized out> #11 0x0000000000417480 in client_command_input (cmd=cmd@entry=0xa01a50) at imap-client.c:778 client = 0xa00f40 ---Type <return> to continue, or q <return> to quit--- command = <optimized out> __FUNCTION__ = "client_command_input" #12 0x0000000000417514 in client_command_input (cmd=0xa01a50) at imap-client.c:839 client = 0xa00f40 command = <optimized out> __FUNCTION__ = "client_command_input" #13 0x00000000004177f5 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0xa00f40) at imap-client.c:877 No locals. #14 client_handle_input (client=client@entry=0xa00f40) at imap-client.c:889 _data_stack_cur_id = 3 ret = 2 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #15 0x0000000000417ba2 in client_input (client=0xa00f40) at imap-client.c:931 cmd = <optimized out> output = 0xa062d0 bytes = 39 __FUNCTION__ = "client_input" #16 0x00007fbf2637478e in io_loop_call_io (io=0x9ffb60) at ioloop.c:439 ioloop = 0x9dc740 t_id = <optimized out> __FUNCTION__ = "io_loop_call_io" #17 0x00007fbf263757b7 in io_loop_handler_run_internal (ioloop=<optimized out>) at ioloop-epoll.c:206 ctx = 0x9dd3d0 events = 0xa955f0 event = 0x9de240 list = 0x9dee30 io = 0xa955f0 tv = {tv_sec = 29, tv_usec = 742827} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #18 0x00007fbf26374819 in io_loop_call_io (io=0x9dc740) at ioloop.c:443 ioloop = 0x7fff64b533f0 t_id = 0 __FUNCTION__ = "io_loop_call_io" #19 0x00007fbf26321a23 in master_service_run (service=0x9dc740, callback=callback@entry=0x420d20 <client_connected>) at master-service.c:566 No locals. #20 0x000000000040c1e8 in main (argc=1, argv=0x9dc390) at main.c:410 set_roots = {0x428960, 0x0} login_set = {auth_socket_path = 0x9d4048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x420bb0 <login_client_connected>, failure_callback = 0x4208c0 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x9dc5d0 "@ǝ" c = <optimized out> -----> end backtrace <----- Have you any idea how I can solve this? Many thanks Urban Loesch doveconf -n: # 2.2.13 (705fd8f3f485): /etc/dovecot/dovecot.conf # OS: Linux 3.4.67-vs2.3.3.9-rol-em64t-efigpt x86_64 Debian 7.5 ext4 auth_cache_negative_ttl = 0 auth_cache_size = 40 M auth_cache_ttl = 1 weeks auth_mechanisms = plain login deliver_log_format = msgid=%m: %$ %p %w disable_plaintext_auth = no info_log_path = syslog login_trusted_networks = INTERNAL_IP mail_gid = mailstore mail_location = mdbox:/home/vmail/%d/%n mail_log_prefix = "%s(%u pid:%p session:<%{session}>): " mail_plugins = " quota mail_log notify acl zlib stats virtual" mail_uid = mailstore managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify mdbox_rotate_size = 10 M namespace { list = children location = mdbox:/home/vmail/%%d/%%n prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { hidden = no inbox = no list = children location = virtual:/home/virtual:INDEX=~/virtual prefix = [mymail]/ separator = / subscriptions = yes type = private } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox [mymail]/All { auto = no special_use = \All } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/home/vmail/%d/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mailbox_create append mail_log_fields = uid box msgid size from mail_log_group_events = no quota = dict:Storage used::file:%h/dovecot-quota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 15 stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = no stats_user_min_time = 1 hours zlib_save = gz zlib_save_level = 9 } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = mailstore mode = 0660 user = root } } service imap-login { inet_listener imap { port = 143 } process_limit = 48 process_min_avail = 3 service_count = 1 } service imap { process_limit = 48 process_min_avail = 2 service_count = 1 } service lmtp { inet_listener lmtp { port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } process_limit = 16 process_min_avail = 2 service_count = 1 } service pop3 { process_limit = 16 process_min_avail = 2 service_count = 1 } service quota-warning { executable = script /usr/local/rol/dovecot/quota-warning.sh unix_listener quota-warning { user = mailstore } user = mailstore } service stats { fifo_listener stats-mail { mode = 0600 user = mailstore } } ssl = no ssl_cert = </etc/dovecot/certs/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = " quota mail_log notify acl zlib stats virtual sieve zlib" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep imap_id_log = * imap_logout_format = bytes=%i/%o session=<%{session}> mail_max_userip_connections = 20 mail_plugins = " quota mail_log notify acl zlib stats virtual imap_quota imap_acl imap_zlib imap_stats" } protocol pop3 { mail_plugins = " quota mail_log notify acl zlib stats virtual" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes pop3_logout_format = bytes_sent=%o top=%t/%p, retr=%r/%b, del=%d/%m, size=%s uidl_hash=%u session=<%{session}> pop3_reuse_xuidl = yes }

2 3

BUG: segfault in auth when user listed multiple times in LDAP
by Laszlo Toth 03 Jul '14

03 Jul '14

Hi, I think I found a bug in the auth module. It can be triggered when the userdb is in LDAP and an user is found multiple times in LDAP. Dovecot version 2.2.10 (from ATrpms Testing) running on CentOS 6.5 x64. Jun 27 10:34:34 server dovecot: auth: Debug: ldap(USER): user search: base=dc=linguamatics,dc=com scope=subtree filter=( & (uid=user) (| (&(objectClass=posixAccount)(|(employeeType=staff)(employeeType=guest))) (objectClass=account) ) ) fields=uid Jun 27 10:34:34 server kernel: auth[15916]: segfault at 8 ip 00007f45e5aa9bef sp 00007fff5b17e210 error 4 in libauthdb_ldap.so[7f45e5aa4000+a000] Jun 27 10:34:34 server dovecot: auth: Error: ldap(user): LDAP search returned multiple entries Jun 27 10:34:34 server dovecot: auth: Debug: ldap(user): no fields returned by the server Jun 27 10:34:35 server abrtd: Directory 'ccpp-2014-06-27-10:34:34-15916' creation detected Jun 27 10:34:35 server abrt[16137]: Saved core dump of pid 15916 (/usr/libexec/dovecot/auth) to /var/spool/abrt/ccpp-2014-06-27-10:34:34-15916 (2863104 bytes) Jun 27 10:34:35 server dovecot: doveadm(user): Error: userdb lookup(user): Disconnected unexpectedly Jun 27 10:34:35 server dovecot: doveadm(user): Error: sync: User lookup failed: Internal error occurred. Refer to server log for more information. Jun 27 10:34:35 server dovecot: auth: Fatal: master: service(auth): child 15916 killed with signal 11 (core dumped) If more information is needed just let me know. I have the core dump but I was not able to find the debuginfo package for the installed Dovecot packages to extract the trace. Thanks, Laszlo -- Laszlo Toth Systems administrator Linguamatics 324 Cambridge Science Park Milton Road Cambridge CB4 0WG UK Telephone number: +44 (0)1223 651910 www.linguamatics.com

2 1

Crash in service imap with version 2.2.13
by Urban Loesch 03 Jul '14

03 Jul '14

Hi, yesterday I upgraded to version 2.2.13 under Debian Squeeze. Since today morning sometimes my logfile shows the folling error: .. Jun 24 10:14:16 mailstore dovecot: imap(user(a)domain.net pid:23434 session:<jf6yi5D8TADD/vzh>): Fatal: master: service(imap): child 23434 killed with signal 11 (core dumped) ... The kernel error log shows: ... Jun 24 10:14:16 mailstore kernel: [13959701.899726] imap[23434]: segfault at 1012acec0 ip 00007f7dd89b5e52 sp 00007ffffd33d9b0 error 4 in libdovecot-storage.so.0.0.0[7f7dd88ed000+10d000] ... This seems only to happen in conjunction with Horde Webmail. Other IMAP clients aren't affected. I made a backtrace: -----> start backtrace <----- Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 mail_index_strmap_uid_exists (ctx=0x7ffffd33d9f0, uid=8442) at mail-index-strmap.c:395 395 mail-index-strmap.c: No such file or directory. in mail-index-strmap.c (gdb) bt full #0 mail_index_strmap_uid_exists (ctx=0x7ffffd33d9f0, uid=8442) at mail-index-strmap.c:395 rec = 0x1012acec0 #1 0x00007f7dd89b79ab in mail_index_strmap_view_renumber (_sync=<value optimized out>) at mail-index-strmap.c:842 ctx = {view = 0x12b2d80, input = 0x0, end_offset = 0, highest_str_idx = 0, uid_lookup_seq = 0, lost_expunged_uid = 0, data = 0x0, end = 0x0, str_idx_base = 0x0, rec = {uid = 0, ref_index = 0, str_idx = 0}, next_ref_index = 0, rec_size = 0, too_large_uids = 0} str_idx = 0 count = 1 ret = <value optimized out> prev_uid = 8442 i = 0 dest = 0 count2 = <value optimized out> #2 mail_index_strmap_write (_sync=<value optimized out>) at mail-index-strmap.c:1189 ret = <value optimized out> #3 mail_index_strmap_view_sync_commit (_sync=<value optimized out>) at mail-index-strmap.c:1236 sync = <value optimized out> view = <value optimized out> #4 0x00007f7dd899fc23 in mail_thread_index_map_build (box=<value optimized out>, args=<value optimized out>, ctx_r=<value optimized out>) at index-thread.c:332 last_uid = 8442 search_ctx = <value optimized out> mail = <value optimized out> seq1 = 0 tbox = 0x12af2e0 headers_ctx = 0x12b7e50 search_args = <value optimized out> seq2 = <value optimized out> wanted_headers = {0x7f7dd89d8542 "message-id", 0x7f7dd89d9f96 "in-reply-to", 0x7f7dd89d9fa2 "references", 0x0} #5 mail_thread_init (box=<value optimized out>, args=<value optimized out>, ctx_r=<value optimized out>) at index-thread.c:569 tbox = 0x12af2e0 ctx = 0x12afc10 search_ctx = 0x12b2b20 ret = <value optimized out> __FUNCTION__ = "mail_thread_init" #6 0x0000000000414ef3 in imap_thread (cmd=0x12a7eb0) at cmd-thread.c:90 ctx = <value optimized out> str = 0x12afbd0 #7 cmd_thread (cmd=0x12a7eb0) at cmd-thread.c:281 client = 0x12a72b0 thread_type = MAIL_THREAD_REFERENCES sargs = 0x12b04a0 args = 0x128faf8 charset = 0x128fc18 "US-ASCII" str = 0x128fc08 "REFERENCES" ret = <value optimized out> #8 0x00000000004181fd in command_exec (cmd=0x12a7eb0) at imap-commands.c:158 hook = 0x128d110 ret = <value optimized out> #9 0x00000000004172e0 in client_command_input (cmd=0x12a7eb0) at imap-client.c:778 client = 0x12a72b0 command = <value optimized out> __FUNCTION__ = "client_command_input" #10 0x0000000000417376 in client_command_input (cmd=0x12a7eb0) at imap-client.c:839 client = 0x12a72b0 command = 0x12acd00 __FUNCTION__ = "client_command_input" #11 0x000000000041765d in client_handle_next_command (client=0x12a72b0) at imap-client.c:877 No locals. #12 client_handle_input (client=0x12a72b0) at imap-client.c:889 _data_stack_cur_id = 3 ret = 80 remove_io = <value optimized out> handled_commands = false ---Type <return> to continue, or q <return> to quit--- __FUNCTION__ = "client_handle_input" #13 0x00000000004179ef in client_input (client=0x12a72b0) at imap-client.c:931 cmd = <value optimized out> output = 0x12a7cf0 bytes = <value optimized out> __FUNCTION__ = "client_input" #14 0x00007f7dd869808e in io_loop_call_io (io=0x12a7dc0) at ioloop.c:441 ioloop = 0x128c760 t_id = 2 __FUNCTION__ = "io_loop_call_io" #15 0x00007f7dd869923f in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0x128d3f0 event = 0x128e260 list = 0x128ee50 io = 0x12acde0 tv = {tv_sec = 4, tv_usec = 996567} msecs = <value optimized out> ret = 1 i = 0 call = false __FUNCTION__ = "io_loop_handler_run_internal" #16 0x00007f7dd8698119 in io_loop_handler_run (ioloop=0x12acde0) at ioloop.c:488 No locals. #17 0x00007f7dd86981a8 in io_loop_run (ioloop=0x128c760) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #18 0x00007f7dd8645153 in master_service_run (service=0x128c5f0, callback=0x20fa) at master-service.c:566 No locals. #19 0x0000000000420f87 in main (argc=1, argv=0x128c3a0) at main.c:410 set_roots = {0x428fc0, 0x0} login_set = {auth_socket_path = 0x1284050 "\210@(\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x421180 <login_client_connected>, failure_callback = 0x421120 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> -----> end backtrace <----- Have you any idea how I can solve this? Many thanks Urban Loesch doveconf -n: ... # 2.2.13 (38cd37cea8b1): /etc/dovecot/dovecot.conf # OS: Linux 3.4.67-vs2.3.3.9-rol-em64t-efigpt x86_64 Debian 6.0.9 ext4 auth_cache_negative_ttl = 0 auth_cache_size = 80 M auth_cache_ttl = 1 weeks auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2000 deliver_log_format = msgid=%m: %$ %p %w disable_plaintext_auth = no login_trusted_networks = INTERNAL_IPS mail_gid = mailstore mail_location = mdbox:/home/vmail/%d/%n:INDEX=/home/dovecotindex/%d/%n mail_log_prefix = "%s(%u pid:%p session:<%{session}>): " mail_plugins = " quota mail_log notify zlib" mail_uid = mailstore mailbox_idle_check_interval = 1 mins managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags notify mdbox_rotate_size = 10 M namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mailbox_create append mail_log_fields = uid box msgid size from mail_log_group_events = no quota = dict:Storage used::file:%h/dovecot-quota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 15 zlib_save = gz zlib_save_level = 9 } protocols = imap pop3 lmtp sieve service auth-worker { service_count = 0 vsz_limit = 512 M } service auth { unix_listener auth-userdb { group = mailstore mode = 0660 user = root } } service imap-login { inet_listener imap { port = 143 } process_limit = 256 process_min_avail = 50 service_count = 1 } service imap { process_limit = 2048 process_min_avail = 50 service_count = 1 vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = * port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } process_limit = 256 process_min_avail = 25 service_count = 1 } service pop3 { process_limit = 256 process_min_avail = 25 service_count = 1 } service quota-warning { executable = script /usr/local/rol/dovecot/quota-warning.sh unix_listener quota-warning { user = mailstore } user = mailstore } ssl = no ssl_cert = </etc/dovecot/ssl/dovecot.pem ssl_key = </etc/dovecot/ssl/dovecot.key userdb { args = /etc/dovecot/dovecot-sql-account.conf driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = " quota mail_log notify zlib sieve zlib" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep imap_id_log = * imap_logout_format = bytes=%i/%o session=<%{session}> mail_max_userip_connections = 40 mail_plugins = " quota mail_log notify zlib imap_quota imap_zlib" } protocol pop3 { mail_plugins = " quota mail_log notify zlib" pop3_logout_format = bytes_sent=%o top=%t/%p, retr=%r/%b, del=%d/%m, size=%s uidl_hash=%u session=<%{session}> } ....

2 2

indexer failure: lucene: while doing doveadm commands
by Larry Rosenman 03 Jul '14

03 Jul '14

I have the following script: #!/bin/sh PATH=$PATH:/usr/local/bin #Expects to be run after midnight on the first of the month # to archive all the previous months mail #Date Run: TODAY=`date "+%Y-%m-%d"` #last month in YYYY/MM YEAR_LAST_MONTH=`date -v-1d "+%Y/%m"` #1st of last month as 01-Mon-YYYY FIRST_LAST_MONTH=`date -v-1d "+01-%b-%Y"` echo 'TODAY=' ${TODAY} echo 'YEAR_LAST_MONTH=' ${YEAR_LAST_MONTH} echo 'FIRST_LAST_MONTH=' ${FIRST_LAST_MONTH} # get a list of all the mailboxes with at least one real message doveadm -f table mailbox status vsize \* 2>/dev/null | \ awk '{if ($2 > 0) print $1}' >/tmp/ler-mailbox-list.$$ 2>/dev/null # archive all the mails for i in `cat /tmp/ler-mailbox-list.$$` do echo `date` start ${i} doveadm mailbox create \#ARCHIVE/${YEAR_LAST_MONTH}/${i} doveadm -f tab mailbox status messages ${i} doveadm move \#ARCHIVE/${YEAR_LAST_MONTH}/${i} mailbox \ ${i} BEFORE ${TODAY} SINCE ${FIRST_LAST_MONTH} doveadm -f tab mailbox status messages ${i} echo `date` done ${i} done rm /tmp/ler-mailbox-list.$$ It runs at 00:30:00 local time on the first of the month. While it was running I got: Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:00 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20538 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:00 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20683 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:00 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:00 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20693 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:01 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20700 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:01 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:01 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20707 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:02 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:02 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:02 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:02 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20717 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:08 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:08 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:08 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 7 requests for ler Jul 1 00:30:08 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20719 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:16 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:16 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:16 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 10 requests for ler Jul 1 00:30:16 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20753 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:20 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:20 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:20 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 10 requests for ler Jul 1 00:30:20 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20797 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:21 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:21 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:21 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:21 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20841 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:24 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 13 requests for ler Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20842 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:24 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20905 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:24 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:24 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20912 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:25 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20919 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:25 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:25 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20926 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:27 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:27 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:27 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:27 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20936 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:30 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:30 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:30 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 4 requests for ler Jul 1 00:30:30 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20939 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:31 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20964 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:31 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20971 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:31 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:31 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20978 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:32 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:32 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:32 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:32 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20985 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:34 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:34 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:34 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 6 requests for ler Jul 1 00:30:34 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 20986 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:36 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 4 requests for ler Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21013 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:36 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:36 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21039 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:38 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:38 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:38 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 3 requests for ler Jul 1 00:30:38 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21040 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:40 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:40 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:40 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:40 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21075 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:42 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:42 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:42 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 2 requests for ler Jul 1 00:30:42 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21076 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:43 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:43 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:43 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:43 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21092 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:44 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:44 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:44 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 4 requests for ler Jul 1 00:30:44 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21094 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) Jul 1 00:30:45 thebighonker dovecot: indexer-worker(ler): Indexed 1 messages in root-mail Jul 1 00:30:48 thebighonker dovecot: indexer-worker(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable Jul 1 00:30:48 thebighonker dovecot: indexer-worker(ler): Panic: file mailbox-list.c: line 1125 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Jul 1 00:30:48 thebighonker dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for ler Jul 1 00:30:48 thebighonker dovecot: indexer-worker(ler): Fatal: master: service(indexer-worker): child 21119 killed with signal 6 (core not dumped - set service indexer-worker { drop_priv_before_exec=yes }) So, what's my problem here? doveconf -n: # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = fts fts_lucene stats mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate vacation-seconds editheader namespace archive { hidden = no inbox = no list = no location = mbox:~/MAILARCHIVE prefix = "#ARCHIVE/" separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. normalize no_snowball recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </etc/ssl/certs/CHAIN.crt ssl_key = </etc/ssl/certs/thebighonker.lerctr.org.key.open userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = fts fts_lucene sieve } protocol lda { mail_plugins = fts fts_lucene sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 mail_plugins = fts fts_lucene stats imap_stats } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: ler(a)lerctr.org US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

2 1

Bug in quota_get_status
by Franz Knipp 03 Jul '14

03 Jul '14

Hi, the configuration option lmtp_rcpt_check_quota = yes didn't work, so I traced down the problem: quota_get_status (quota_storage.c:89) calls quota_test_alloc (quota.c:1352) with size = 0 bytes, which leads always to a FALSE result in quota_is_over (quota.c:1305). I've fixed the function quota_is_over by considering ctx->bytes_over and ctx->count_over. See the included patch. Kind regards, Franz -- Franz Knipp, +43 664 3980169 qnipp GmbH, Hauptstraße 54, 7064 Oslip, Österreich http://qnipp.com http://qnipp.com/qnipp.vcf

3 3

Mailboxes are in Maildir format. Any good backup tips? Had success with version control?
by deoren 03 Jul '14

03 Jul '14

I'm still pretty new to running a mail server, but one thing I've come to appreciate over the years is a good backup strategy. Since I have always run my own servers for practice and for personal use I don't have access to Enterprise backup solutions. Because of that I usually just fall back to scripts and tarballs and offload the content on a regular basis. Right now I'm using LVM snapshots + tarballs for daily backups, but I'd like to get better coverage for incremental changes that occur throughout the day. The size of existing content is low, but (small) changes are frequent. I went with Maildir format because based on my reading it is referred to as time tested and corruption resistant. Because individual emails are stored as separate files this also leads me to believe that a version control system (Git, SVN) would allow for easy point in time restores. I'm also going to research the GNU tar utility's support for incremental archives as that sounds promising. Suggestions and warnings are most welcome. Thanks!

15 22

doveadm director userdb
by G H 03 Jul '14

03 Jul '14

How do you configure an iterate_query SQL lookup for the doveadm director? I tried: service director { userdb { ... } } but userdb is not a valid stanza for director. I do not have a default userdb stanza, all my userdb definitions are specified in service imap/lda/lmtp blocks. Thanks. G H

1 0

Re: Shared folders not listed by IMAP
by john.j.rowan.jr＠gmail.com 02 Jul '14

02 Jul '14

. t,yV e Sent from my Verizon Wireless 4GLTE smartphone ----- Reply message ----- From: "Giedrius Liubavičius" <giedrius(a)su.lt> To: <dovecot(a)dovecot.org> Subject: Shared folders not listed by IMAP Date: Wed, Jul 2, 2014 14:03 OK, This is the problem why your configuration is not working. My shared folder did not work up until I fixed auth-userdb permissions in a way so that user my A (not dovecot user) [test(a)mydomain.pl in your case] could connect to it and get info about user B [test2(a)mydomain.pl in your case] Just change the auth-userdb file location (and probably permissions) or duplicate it to real root location. either from within configuration files or just as a plain symlink (maybe pre-login script ?) 2014.07.02 19:03, Bambero rašė: > But the problem is that I can't see shared folders to subscribe (shared by > other users) while connecting via IMAP. > > There is also an error: > Error: userdb lookup: connect(/var/dovecot/auth-userdb) failed: No such > file or directory > > Probably becouse of chroot (/var/mail). > > > On Wed, Jul 2, 2014 at 1:29 PM, Giedrius Liubavičius <giedrius(a)su.lt> wrote: > >> Hi, >> doveadm mailbox subscribe -u test(a)mydomain.pl Shared/test2(a)mydomain.pl >> doveadm mailbox subscribe -u test(a)mydomain.pl >> Shared/test2(a)mydomain.pl/Sent >> >> 2014.07.02 14:04, Bambero rašė: >>> Hello >>> >>> I just upgraded my system and there is a problem with shared mailboxes. >>> >>> When I use the doveadm command I can see shared folders: >>> >>> doveadm mailbox list -u 'test(a)mydomain.pl' >>> Drafts >>> Sent >>> Spam >>> Trash >>> Shared >>> Virtuals >>> Virtuals/all >>> Shared/test2(a)mydomain.pl >>> Shared/test2(a)mydomain.pl/Sent >>> INBOX >>> >>> But I can't see them over IMAP protocol. >>> >>> Some config opts: >>> >>> valid_chroot_dirs = /var/mail >>> mail_chroot = /var/mail >>> >>> namespace { >>> type = shared >>> separator = / >>> prefix = Shared/%%u/ >>> location = maildir:/%%u/Maildir:INDEX=~/Maildir/Shared/%%u >>> subscriptions = yes >>> list = yes >>> } >>> >>> plugin { >>> acl = vfile:cache_secs=5 >>> } >>> >>> plugin { >>> acl_shared_dict = file:/var/mail/%i.db >>> } >>> >>> protocol imap { >>> mail_plugins = $mail_plugins imap_quota imap_acl imap_zlib >>> } >>> >>> >>> My version of dovecot is 2.2.10. >>> >>> Regards >>> Bambero >>> >> >>

1 0

Re: Shared folders not listed by IMAP
by john.j.rowan.jr＠gmail.com 02 Jul '14

02 Jul '14

Sent from my Verizon Wireless 4GLTE smartphone ----- Reply message ----- From: "Giedrius Liubavičius" <giedrius(a)su.lt> To: <dovecot(a)dovecot.org> Subject: Shared folders not listed by IMAP Date: Wed, Jul 2, 2014 14:03 OK, This is the problem why your configuration is not working. My shared folder did not work up until I fixed auth-userdb permissions in a way so that user my A (not dovecot user) [test(a)mydomain.pl in your case] could connect to it and get info about user B [test2(a)mydomain.pl in your case] Just change the auth-userdb file location (and probably permissions) or duplicate it to real root location. either from within configuration files or just as a plain symlink (maybe pre-login script ?) 2014.07.02 19:03, Bambero rašė: > But the problem is that I can't see shared folders to subscribe (shared by > other users) while connecting via IMAP. > > There is also an error: > Error: userdb lookup: connect(/var/dovecot/auth-userdb) failed: No such > file or directory > > Probably becouse of chroot (/var/mail). > > > On Wed, Jul 2, 2014 at 1:29 PM, Giedrius Liubavičius <giedrius(a)su.lt> wrote: > >> Hi, >> doveadm mailbox subscribe -u test(a)mydomain.pl Shared/test2(a)mydomain.pl >> doveadm mailbox subscribe -u test(a)mydomain.pl >> Shared/test2(a)mydomain.pl/Sent >> >> 2014.07.02 14:04, Bambero rašė: >>> Hello >>> >>> I just upgraded my system and there is a problem with shared mailboxes. >>> >>> When I use the doveadm command I can see shared folders: >>> >>> doveadm mailbox list -u 'test(a)mydomain.pl' >>> Drafts >>> Sent >>> Spam >>> Trash >>> Shared >>> Virtuals >>> Virtuals/all >>> Shared/test2(a)mydomain.pl >>> Shared/test2(a)mydomain.pl/Sent >>> INBOX >>> >>> But I can't see them over IMAP protocol. >>> >>> Some config opts: >>> >>> valid_chroot_dirs = /var/mail >>> mail_chroot = /var/mail >>> >>> namespace { >>> type = shared >>> separator = / >>> prefix = Shared/%%u/ >>> location = maildir:/%%u/Maildir:INDEX=~/Maildir/Shared/%%u >>> subscriptions = yes >>> list = yes >>> } >>> >>> plugin { >>> acl = vfile:cache_secs=5 >>> } >>> >>> plugin { >>> acl_shared_dict = file:/var/mail/%i.db >>> } >>> >>> protocol imap { >>> mail_plugins = $mail_plugins imap_quota imap_acl imap_zlib >>> } >>> >>> >>> My version of dovecot is 2.2.10. >>> >>> Regards >>> Bambero >>> >> >>

1 0

Android Sync Doesn't Work Too Good
by Asai 02 Jul '14

02 Jul '14

Greetings, I'm getting reports from a user who's reading and deleting mail on Thunderbird, but read flags and deletions don't show up in his Android phone. He's using the native Android mail app with the newest Android OS. My question is, where do I start with troubleshooting this kind of issue? Thanks for anyone's insight here. We're using Dovecot 2.2.13. -- --Asai

5 6

Re: number of users
by Reindl Harald 02 Jul '14

02 Jul '14

Am 02.07.2014 16:10, schrieb Jonathan Tripathy: > On 2014-07-02 15:04, Reindl Harald wrote: >> Am 02.07.2014 16:01, schrieb ihab: >>> i using roundcube with dovecot, i have a question if there is possible to >>> know the number of users that using the mail system (in other word the >>> online users) >> >> no - how do you imagine that? >> >> * roundcube is a web-application >> * HTTP is stateless >> * so there are no permanent connections > > It is possible as Roundcube does have its own session management, which you could maybe hook into first: why do you respond off-list? second: any of such magic is outside of dovecots scope and from security point of view you don't want user-login-sessions dealing with other users session infos and any smart session-backend is doing what it can to prevent from such a breach

2 2

[Dovecot] TLS/SSL for Win8 & Outlook
by Sebastian Goodrick 02 Jul '14

02 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello I recently upgraded to dovecot 2.1.7 (as supplied with Debian Weezy). All clients work as expected except for Outlook (2013 &2010) on Win8 with a SSL/TLS connection. (Thunderbird on Win8 and Outlook 2013 on Win 7 works fine. On my previous dovecot version 1.2.13 all clients worked.) As far as I understand, one difference is the support for TLS1.2 and SSL3. And on the client side Win8 is now connecting through the Microsoft Unified Security Protocol Provider. My logs show these issues: Dovecot: May 06 21:05:43 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=78.42.x.x, lip=144.76.x.x, TLS handshaking: Disconnect Outlook 2013 (contains German, translation in []): IMAP: 12:30:02 [db] Mit 'mail.xxx.de' wird eine Verbindung an Port 143 hergestellt. [A connection to port 143 is established with 'mail.xxx.de'] [snip] IMAP: 12:30:02 [rx] * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Welcome at mail.xxx.de [snip] IMAP: 12:30:02 [rx] hmpc OK Pre-login capabilities listed, post-login capabilities have more.IMAP: 12:30:02 [tx] ekum STARTTLS IMAP: 12:30:02 [db] OnNotify: asOld = 5, asNew = 5, ae = 3 IMAP: 12:30:02 [rx] ekum OK Begin TLS negotiation now. IMAP: 12:30:02 [db] Mit 'Microsoft Unified Security Protocol Provider' wird eine sichere Verbindung ausgehandelt. [A secure connection is negotiated with 'Microsoft Unified Security Protocol Provider'] IMAP: 12:30:02 [db] OnNotify: asOld = 5, asNew = 6, ae = 2 IMAP: 12:30:03 [db] Die Verbindung mit 'mail.xxx.de' wurde geschlossen. [Connection to 'mail.xxx.de' has been closed.] IMAP: 12:30:03 [db] OnNotify: asOld = 6, asNew = 0, ae = 5 IMAP: 12:30:03 [db] ERROR: "Es kann keine sichere Verbindung mit dem Server hergestellt werden.", hr=2148322330 [Can't establish a secure connection with the server.] My settings for ssl_protocols and ssl_cipher_list are empty. Since it works with most clients, I assume no broken certificates or my dovecot configuration. The connection fails at the TLS/SSL handshake. Has anyone seen this behaviour, too? Is there a setting (for ssl_protocols and ssl_cipher_list) to support Outlook on Win8? Thanks, Sebastian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlNqhkwACgkQR7+YB0QzbnqEFQCdHBPPpFB/pqgZ9FR81h/vcGy5 hkoAn2iuq+AUwQCN3yEtGIWuPAfpm2bs =WrvL -----END PGP SIGNATURE-----

6 29

Re: number of users
by Jonathan Tripathy 02 Jul '14

02 Jul '14

On 2014-07-02 15:04, Reindl Harald wrote: > Am 02.07.2014 16:01, schrieb ihab: >> i using roundcube with dovecot, i have a question if there is >> possible to >> know the number of users that using the mail system (in other word >> the >> online users) > > no - how do you imagine that? > > * roundcube is a web-application > * HTTP is stateless > * so there are no permanent connections It is possible as Roundcube does have its own session management, which you could maybe hook into.

1 0

[Dovecot] lazy_expunge and shared folders
by Florian 02 Jul '14

02 Jul '14

Hi, since migration to Dovecot 2.2 I have troubles with lazy_expunge as soon as a user shares a folder. The user the folder is shared to cannot login anymore, dovecot logs Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' - When no folder is shared lazy_expunge is working fine, deleted mails are moved to the expunged namespace and can be recovered without any problems. - Sharing folders works as long as I disable lazy_expunge. I have used the config (with minor changes) with dovecot 2.0 for years without any problem. Switching to dovecot 2.2.10 (atrps repository) or 2.2.12 (dovecot enterprise repo) lazy_expunge and acl do not work together anymore. Is it a bug, a known limitation or is something wrong with my config? Any hints are welcome. Thanks in advance, Florian dovecot -n # 2.2.12.12 (03196f188677): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab085.20 x86_64 CentOS release 6.5 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 10 M auth_cache_ttl = 2 hours auth_failure_delay = 10 secs auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 105 first_valid_uid = 105 hostname = ... imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 10 mins last_valid_uid = 105 listen = ... lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_gid = vimap mail_home = /var/imap/spool/%1n/%n mail_location = mdbox:~/mdbox mail_plugins = " fts fts_lucene acl" mail_temp_dir = /var/imap/tmp mail_uid = vimap managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mdbox_rotate_interval = 1 days namespace { list = children location = mdbox:/var/imap/spool/%%1n/%%n/mdbox:INDEXPVT=/var/imap/spool/%1n/%n/mdbox/shared/%%u prefix = User/%%u/ separator = / subscriptions = no type = shared } namespace expunged { hidden = yes list = no location = mdbox:/var/imap/spool/%1n/%n/mdbox:MAILBOXDIR=expunged prefix = .EXPUNGED/ separator = / subscriptions = no type = private } namespace inbox { inbox = yes location = mdbox:/var/imap/spool/%1n/%n/mdbox mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Learn { auto = subscribe } mailbox Learn/Ham { auto = subscribe } mailbox Learn/Spam { auto = subscribe } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { special_use = \All } mailbox virtual/Flagged { special_use = \Flagged } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = /etc/dovecot/extra-users driver = passwd-file } plugin { acl = vfile:/var/imap/global-acls:cache_secs=300 acl_shared_dict = file:/var/imap/shared-mailboxes/shared-mailboxes fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. lazy_expunge = .EXPUNGED/ lazy_expunge_only_last_instance = yes recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster@... protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vimap mode = 0600 user = vimap } user = $default_internal_user } service imap-login { process_min_avail = 4 service_count = 0 } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = ... port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 4 service_count = 0 } service pop3 { process_limit = 512 } ssl_cert = </etc/dovecot/ssl/... ssl_key = </etc/dovecot/ssl/... userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=vimap gid=vimap home=/var/imap/spool/%1n/%n driver = static } protocol lda { mail_plugins = " fts fts_lucene acl sieve" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " fts fts_lucene acl imap_acl" } protocol lmtp { mail_plugins = " fts fts_lucene acl sieve" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 20 }

4 4

Imaptest script testing
by kaustubh 02 Jul '14

02 Jul '14

http://www.imapwiki.org/ImapTest/ <http://www.imapwiki.org/ImapTest/> I am doing imap testing using imaptest scripts. But, i am unable to append message. APPEND INBOX "15-Jun-2015 05:30:05 -0700" "From:abc@gmail.com" "Subject: test. HI this is msg". This command i am using in my testing script. Command executed properly. But, it is not appending mail which is i entered into command. Imaptest appending his own mail into mailbox. please tell me whether i am doing it wrong way. How to append msg i entered into command using imaptest ?? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Imaptest-script-testing-tp48607.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

Direct groups of users to pairs of backend mailstores?
by Murray Trainer 02 Jul '14

02 Jul '14

Hi All, We are using Dovecot in a Director setup with two director proxies, six backend mailstores, mailbox storage in NFS, and user accounts stored in LDAP. Currently we have five NFS filesystems on EMC VNX storage which are all mounted on each of the six backend mailstores. At the moment all users could be directed to any of the six mailstores. We have a group of users with very large mailboxes we want to put on separate cheaper Backblaze NFS storage. Because this will be less reliable than our VNX storage we want to be able to direct this group of users to a new pair of backend mailstores that only have the Backblaze NFS mounts. This would isolate the rest of the users isolation from problems with the Backblaze NFS servers. I have read the Dovecot documentation which indicates it is possible to direct users always to a single backend server. Can Dovecot direct users to a pair or more of backend mailstores - ie a subset or another set of mailstores. If not it would be a great enhancement which would allow more scalability, flexibility and redundancy. Thanks Murray

1 0

Managing users and home dirs
by deano-dovecot＠areyes.com 02 Jul '14

02 Jul '14

For those of you using virtual users, and SQL, how are you managing your users and their home dirs ? That is, what process do you use for adding/deleting users, creating their home dirs etc ? I suppose it's easy enough to do manually, inserting rows in the database, creating dirs, chown/chmod yada yada, but there must be a better way to do it ... If you're doing dovecot replication then it gets even more cumbersome, having to duplicate the effort in two places (and make sure it's correct). I have a nice test setup using Percona XtraDB Clustering in a 3-node cluster which works swimmingly, albeit in VMs only at the moment. A master DB node and two dovecot nodes. Dovecot replication is up and running nicely too, and I almost have all the communications going over ipsec tunnels, so it will be nice and secure. I'm thinking of something like a cronjob with two tasks, the first would periodically scan the home dirs and compare the users to what's in the database. When it finds a new userdir (plus a file labeled PASSWD) the script would add the user to the database, create the Maildir and whatever else, then delete the PASSWD file. DB replication will push that to the other nodes. The second task is scanning the user database and comparing to the home dirs - basically opposite of the first cronjob. When it finds a user in the DB that doesn't have a home dir, it would create it and whatever else is needed. This way, to add a user one would just create a PASSWD file in /var/mail/domain.com/newusername/PASSWD on either of the dovecot replication partner systems. The first cronjob task would discover the newusername dir, create the user in the DB, create the Maildir, chown/chmod etc. and delete the PASSWD file, so it's ready to go on that system. DB replication pushes the user table to the other nodes. The second task on the other dovecot system will discover a new user in the DB that doesn't have a home dir, and do its thing to create it all. So the whole create-a-new-user process becomes something like this on either dovecot system : mkdir -p /var/mail/domain.com/newusername ; echo "changeme" > /var/mail/domain.com/newusername/PASSWD A max of 5 minutes later the user is added to the database, and the home dir/Maildir/etc/etc is created on both dovecot systems. D.

2 2

i need a little advice with dovecot master user
by Francesco 02 Jul '14

02 Jul '14

Hello, As a step to migrate to a newer version of dovecot, i've been asked to configure a master user for logging in into mailboxes of a dovecot 1.2. I've followed the instructions from this page: http://wiki1.dovecot.org/Authentication/MasterUsers but appearently something is going wrong. I've turned on the auth verbose and what i get in the log is: 2014-06-30 15:25:03 auth(default): Info: passdb(administrator,127.0.0.1,master): Master user logging in as user(a)domain.tld but the output from a telnet session says: Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=LOGIN AUTH=PLAIN] server ready. a1 login user(a)domain.tld*administrator <administrator password> a1 NO [AUTHORIZATIONFAILED] Authorization failed what i noticed is that if i type a wrong password i get an AUTHENTICATIONFAILED, which, to me, sounds different from authorization. what am i doing wrong? here is the auth configuration: ____________________________________ auth_master_user_separator=* auth default { mechanisms = login plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } passdb passwd-file { args = /etc/dovecot/passwd.masterusers master = yes pass = yes } userdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=65000 gid=65000 mail=maildir:/var/utenti/ADS/%Lu/Maildir } passdb pam { } user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } ____________________________________

2 1

Error receiving mail from postfix
by Jerry 02 Jul '14

02 Jul '14

When mail is relayed to dovecot from postfix, I am getting this error message in the maillog: Jul 1 07:05:19 scorpio postfix/pipe[45488]: 3h2jQl3Xldz3FMPc: to=<user(a)domain.com>, relay=dovecot, delay=0.16, delays=0.12/0.01/0/0.03, dsn=4.3.0, status=deferred (temporary failure. Command output: lda: Error: user user(a)domain.com: Error reading configuration: Invalid settings: postmaster_address setting not given lda: Fatal: Internal error occurred. Refer to server log for more information. ) Is this a Postfix problem or a Dovecot problem? # OS: FreeBSD 10.0-RELEASE-p3 amd64 ufs auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes auth_verbose_passwords = plain log_path = /var/log/dovecot mail_location = maildir:/var/mail/vmail/seibercom/gerard managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } passdb { driver = pam } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } plugin { sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd default_fields = uid=vmail gid=vmail driver = passwd-file } userdb { driver = passwd } userdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } protocol lda { mail_plugins = " sieve" } -- jerry

4 4

Login failure with SElinux enforcing + Sqlite user DB
by G H 30 Jun '14

30 Jun '14

I am having a very strange issue with Dovecot + Sqlite + SELinux in enforcing. I am able to log in via IMAPS if SELinux is in permissive, but not able to do so when in enforcing. I do not see any SELinux denials even with dontaudit's enabled. I am running Centos 5 on x86_64 with a customized kernel build and SElinux Strict policy. The log dumps below are in the following order: 1. My syslog output when SElinux is enforcing 2. My mail client's protocol log (using Sylpheed) 3. My syslog output when SElinux is permissive. From the audit log, syscall 2 (from the message "type=SYSCALL ... syscall=2 success=no" appears to be sys_open for x86_64 architectures. syscall 87 is sys_unlink. Why is my mail client getting a SQL error message even though dovecot's auth log reported login success? Is this a sqlite problem instead of a dovecot one? FYI, I am using dovecot-2.2.10 (from ATrpms.net) and sqlite-3.3.6-7 There appears to be several options related to the temporary store on sqlite's documentation, the solution may be to use memory (instead of files) for temporary tables... dovecot: auth-worker(29695): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth-worker(29695): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth-worker(29695): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth-worker(29695): Debug: sql(mailadmin,10.0.77.80): query: SELECT password FROM users WHERE username = 'mailadmin' dovecot: auth: Debug: client passdb out: OK 1 user=mailadmin dovecot: auth: Debug: master in: REQUEST 3487432705 29692 1 17d4d0374be5dec51ce20917470caed8 session_pid=29696 request_auth_token dovecot: auth-worker(29695): Debug: sql(mailadmin,10.0.77.80): SELECT username FROM users WHERE username = 'mailadmin' AND view_mail = 't' AND 'imap' = 'imap' dovecot: auth: Debug: master userdb out: USER 3487432705 mailadmin uid=97 gid=12 home=/var/mail/mailadmin auth_token=e0d0ed3080574ab089f1a5302d43110ffa15ec42 dovecot: imap-login: Login: user=<mailadmin>, method=PLAIN, rip=10.0.77.80, lip=10.0.78.223, mpid=29696, TLS, session=<0C+M3A/9OwCsEQFQ> audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144473.421:46298): arch=c000003e syscall=2 success=no exit=-13 a0=7fff97f77ce0 a1=c2 a2=1a4 a3=0 items=1 ppid=29697 pid=29699 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="access" audispd: node=myhost.somewhere type=CWD msg=audit(1404144473.421:46298): cwd="/var/run/dovecot" audispd: node=myhost.somewhere type=PATH msg=audit(1404144473.421:46298): item=0 name="./sqlite_ZPh8vGq4ia1CCsJ" inode=8192027 dev=fb:02 mode=040755 ouid=0 ogid=97 rdev=00:00 obj=system_u:object_r:dovecot_var_run_t:s0 audispd: node=myhost.somewhere type=EOE msg=audit(1404144473.421:46298): audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144473.422:46299): arch=c000003e syscall=2 success=no exit=-13 a0=7fff97f77ce0 a1=c2 a2=1a4 a3=0 items=1 ppid=29697 pid=29699 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="access" audispd: node=myhost.somewhere type=CWD msg=audit(1404144473.422:46299): cwd="/var/run/dovecot" audispd: node=myhost.somewhere type=PATH msg=audit(1404144473.422:46299): item=0 name="./sqlite_9i9aIbK0rBuJWFS" inode=8192027 dev=fb:02 mode=040755 ouid=0 ogid=97 rdev=00:00 obj=system_u:object_r:dovecot_var_run_t:s0 ... REPEATED MANY TIMES ... audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404145638.097:46407): arch=c000003e syscall=87 success=yes exit=0 a0=608872 a1=60aa50 a2=60e0d0 a3=0 items=2 ppid=29774 pid=29776 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="delete" audispd: node=myhost.somewhere type=CWD msg=audit(1404145638.097:46407): cwd="/var/run/dovecot" dovecot: imap(mailadmin): Debug: Effective uid=97, gid=12, home=/var/mail/mailadmin dovecot: imap(mailadmin): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/var/mail/mailadmin dovecot: imap(mailadmin): Debug: fs: root=/var/mail/mailadmin, index=, indexpvt=, control=, inbox=, alt= audispd: node=myhost.somewhere type=PATH msg=audit(1404145638.097:46407): item=0 name="/var/lib/maildb/" inode=3735776 dev=fb:02 mode=040775 ouid=0 ogid=12 rdev=00:00 obj=system_u:object_r:var_lib_t:s0 audispd: node=myhost.somewhere type=PATH msg=audit(1404145638.097:46407): item=1 name="/var/lib/maildb/users.db-journal" inode=3735779 dev=fb:02 mode=0100600 ouid=8 ogid=12 rdev=00:00 obj=system_u:object_r:var_lib_t:s0 audispd: node=myhost.somewhere type=EOE msg=audit(1404145638.097:46407): * creating IMAP4 connection to 10.0.78.223:993 ... * SSL certificate of 10.0.78.223 previously accepted [12:17:37] IMAP4< * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. [12:17:37] IMAP4> 1 CAPABILITY [12:17:37] IMAP4< * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN [12:17:37] IMAP4< 1 OK Pre-login capabilities listed, post-login capabilities have more. [12:17:37] IMAP4> 2 AUTHENTICATE PLAIN [12:17:37] IMAP4< + [12:17:37] IMAP4> **************** [12:17:37] IMAP4< SQL error: unable to open database file ** LibSylph-WARNING: [12:17:37] IMAP4 authentication failed. dovecot: auth-worker(29747): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth-worker(29747): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth-worker(29747): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth-worker(29747): Debug: sql(mailadmin,10.0.77.80): query: SELECT password FROM users WHERE username = 'mailadmin' dovecot: auth: Debug: client passdb out: OK 1 user=mailadmin dovecot: auth: Debug: master in: REQUEST 1811939329 29745 1 8ec504decee63fdeb7c94b1193a70872 session_pid=29748 request_auth_token dovecot: auth-worker(29747): Debug: sql(mailadmin,10.0.77.80): SELECT username FROM users WHERE username = 'mailadmin' AND view_mail = 't' AND 'imap' = 'imap' dovecot: auth: Debug: master userdb out: USER 1811939329 mailadmin uid=97 gid=12 home=/var/mail/mailadmin auth_token=2015ca3583c60fd9108a639c35c066d2613a2219 dovecot: imap-login: Login: user=<mailadmin>, method=PLAIN, rip=10.0.77.80, lip=10.0.78.223, mpid=29748, TLS, session=<BkhN7Q/9wACsEQFQ> audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144754.513:46369): arch=c000003e syscall=87 success=yes exit=0 a0=7fffc59431a0 a1=0 a2=7ffa4c972b40 a3=0 items=2 ppid=29749 pid=29751 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="delete" audispd: node=myhost.somewhere type=CWD msg=audit(1404144754.513:46369): cwd="/var/run/dovecot" audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.513:46369): item=0 name="/var/tmp/" inode=2 dev=fb:01 mode=041777 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tmp_t:s0 audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.513:46369): item=1 name="/var/tmp/sqlite_vxCdWSgpDUDm7VV" inode=98307 dev=fb:01 mode=0100600 ouid=8 ogid=12 rdev=00:00 obj=system_u:object_r:tmp_t:s0 audispd: node=myhost.somewhere type=EOE msg=audit(1404144754.513:46369): audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144754.513:46370): arch=c000003e syscall=87 success=yes exit=0 a0=7fffc59431a0 a1=0 a2=7ffa4c972b40 a3=0 items=2 ppid=29749 pid=29751 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="delete" audispd: node=myhost.somewhere type=CWD msg=audit(1404144754.513:46370): cwd="/var/run/dovecot" audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.513:46370): item=0 name="/var/tmp/" inode=2 dev=fb:01 mode=041777 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tmp_t:s0 audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.513:46370): item=1 name="/var/tmp/sqlite_4h8lCyF8htbWvZb" inode=98310 dev=fb:01 mode=0100600 ouid=8 ogid=12 rdev=00:00 obj=system_u:object_r:tmp_t:s0 audispd: node=myhost.somewhere type=EOE msg=audit(1404144754.513:46370): ... REPEATED MANY TIMES ... audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144754.533:46373): arch=c000003e syscall=87 success=yes exit=0 a0=608872 a1=60aa50 a2=60e0d0 a3=0 items=2 ppid=29749 pid=29751 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe="/usr/bin/sqlite3" subj=system_u:system_r:dovecot_t:s0 key="delete" audispd: node=myhost.somewhere type=CWD msg=audit(1404144754.533:46373): cwd="/var/run/dovecot" audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.533:46373): item=0 name="/var/lib/maildb/" inode=3735776 dev=fb:02 mode=040775 ouid=0 ogid=12 rdev=00:00 obj=system_u:object_r:var_lib_t:s0 audispd: node=myhost.somewhere type=PATH msg=audit(1404144754.533:46373): item=1 name="/var/lib/maildb/users.db-journal" inode=3735779 dev=fb:02 mode=0100600 ouid=8 ogid=12 rdev=00:00 obj=system_u:object_r:var_lib_t:s0 audispd: node=myhost.somewhere type=EOE msg=audit(1404144754.533:46373): dovecot: imap(mailadmin): Debug: Effective uid=97, gid=12, home=/var/mail/mailadmin dovecot: imap(mailadmin): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/var/mail/mailadmin dovecot: imap(mailadmin): Debug: fs: root=/var/mail/mailadmin, index=, indexpvt=, control=, inbox=, alt=

1 0

unsubscribe
by Dave Gattis 30 Jun '14

30 Jun '14

Dave Gattis Suhner Manufacturing, Inc. IT Manager 43 Anderson Rd SW Rome, GA 30161 Phone: 706-314-2943 Fax: 706-235-8045 <mailto:dave.gattis@suhner.com> dave.gattis(a)suhner.com <http://www.suhner.com/> www.suhner.com Description: Description: Description: suhner_100_logo_standard NOTE: This message and all attachments should be considered confidential and proprietary to Suhner Manufacturing Inc and are intended only for the individual or company to whom addressed, and only for the purpose stated or intended. Any other viewing, copying, distribution or other use of this information is prohibited. If you received this message in error, please immediately notify the sender and then delete.

2 1

Dovecot and Postfix
by Jerry 30 Jun '14

30 Jun '14

Does this configuration look sane? I seem to have a few duplicates and I am not sure if that is a problem or not. It seems I have multiple "userdb" sections and I am not sure where they are all originating from. # 2.2.13: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p3 amd64 ufs auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain log_path = /var/log/dovecot mail_location = maildir:/var/mail/vmail/seibercom/gerard managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } passdb { driver = pam } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } plugin { sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd default_fields = uid=vmail gid=vmail driver = passwd-file } userdb { driver = passwd } userdb { args = username_format=%u /usr/local/etc/dovecot/user/passwd driver = passwd-file } protocol lda { mail_plugins = " sieve" }

2 4

Sieve seems to break mailbody during automatic redirection
by Urban Loesch 30 Jun '14

30 Jun '14

Hi, I have a strange problem with sieve. After upgrading to 2.2.13 sieve seems to break the mailbody during automatic redirection. I have the following configuration. - User A sends mail to User B. - User B has an automatic redirect to User C - User C geht the mailbody broken I did some debugging. This is a part of the mailbody which i grabbed from the mailqueue before the mail gets delivered to user B: ... Message-ID: <53B12105.2020207(a)domain.net> Date: Mon, 30 Jun 2014 10:34:13 +0200 From: =?ISO-8859-15?Q?Urban_L=F6sch_Enas?= <userA(a)domain.net> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Urban Loesch <userB(a)domain.net> Subject: testmail 5 X-Enigmail-Version: 1.6 Content-Type: multipart/mixed; boundary="------------040308070600090201000704" This is a multi-part message in MIME format. --------------040308070600090201000704 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit --------------040308070600090201000704 Content-Type: application/rtf; name="elenco_siti_inibiti.2.rtf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="elenco_siti_inibiti.2.rtf" e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBc c3RzaGZkYmNoMFxzdHNoZmxvY2gwXHN0c2hmaGljaDBcc3RzaGZiaTBcZGVmbGFuZzEwNDBc ZGVmbGFuZ2ZlMTA0MFx0aGVtZWxhbmcxMDQwXHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7 XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAw MjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fQ0Ke1xmMVxmYmlkaSBcZnN3 aXNzXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwYjA2MDQwMjAyMDIwMjAyMDR9QXJp YWx7XCpcZmFsdCBBcmlhbH07fXtcZjJcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQwXGZwcnEx e1wqXHBhbm9zZSAwMjA3MDMwOTAyMDIwNTAyMDQwNH1Db3VyaWVyIE5ldzt9e1xmM1xmYmlk aSBcZnJvbWFuXGZjaGFyc2V0MlxmcHJxMntcKlxwYW5vc2UgMDUwNTAxMDIwMTA3MDYwMjA1 MDd9U3ltYm9sO30NCntcZjRcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFu b3NlIDAyMGIwNjA0MDIwMjAyMDIwMjA0fUhlbHZldGljYTt9e1xmNVxmYmlkaSBcZm1vZGVy blxmY2hhcnNldDBcZnBycTF7XCpccGFub3NlIDAyMDcwNDA5MDIwMjA1MDIwNDA0fUNvdXJp ZXI7fXtcZjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIw NjAzMDQwNTA1MDIwMzA0fVRtcyBSbW57XCpcZmFsdCBUaW1lcyBOZXcgUm9tYW59O30NCntc ZjdcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGIwNjA0MDIw MjAyMDMwMjA0fUhlbHY7fXtcZjhcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpc cGFub3NlIDAyMDQwNTAzMDYwNTA2MDIwMzA0fU5ldyBZb3JrO317XGY5XGZiaWRpIFxmc3dp c3NcZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMDAwMDAwMDAwMDAwMDAwMDAwMH1TeXN0 ZW07fQ0Ke1xmMTBcZmJpZGkgXGZuaWxcZmNoYXJzZXQyXGZwcnEye1wqXHBhbm9zZSAwNTAw MDAwMDAwMDAwMDAwMDAwMH1XaW5nZGluZ3M7fXtcZjExXGZiaWRpIFxmbW9kZXJuXGZjaGFy c2V0MTI4XGZwcnExe1wqXHBhbm9zZSAwMjAyMDYwOTA0MDIwNTA4MDMwNH1NUyBNaW5jaG97 XCpcZmFsdCA/bD9yID8/XCc4MVwnNjZjfTt9DQp7XGYxMlxmYmlkaSBcZnJvbWFuXGZjaGFy c2V0MTI5XGZwcnEye1wqXHBhbm9zZSAwMjAzMDYwMDAwMDEwMTAxMDEwMX1CYXRhbmd7XCpc ZmFsdCA/Pz8/P0U/Pz8/P0VjRT8/Pz8/RT8/Y0VjRT8/Pz8/fTt9e1xmMTNcZmJpZGkgXGZu aWxcZmNoYXJzZXQxMzRcZnBycTJ7XCpccGFub3NlIDAyMDEwNjAwMDMwMTAxMDEwMTAxfVNp bVN1bntcKlxmYWx0ID8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz99O30NCntcZjE0 XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxMzZcZnBycTJ7XCpccGFub3NlIDAyMDIwNTAwMDAw MDAwMDAwMDAwfVBNaW5nTGlVe1wqXGZhbHQgIVBzMk9jdUFlfTt9e1xmMTVcZmJpZGkgXGZt b2Rlcm5cZmNoYXJzZXQxMjhcZnBycTF7XCpccGFub3NlIDAyMGIwNjA5MDcwMjA1MDgwMjA0 fU1TIEdvdGhpY3tcKlxmYWx0ID9sP3IgP1M/Vj9iP059O30NCntcZjE2XGZiaWRpIFxmc3dp c3NcZmNoYXJzZXQxMjlcZnBycTJ7XCpccGFub3NlIDAyMGIwNjAwMDAwMTAxMDEwMTAxfURv dHVte1wqXGZhbHQgPz8/Pz9FPz9jRT8/Pz8/RWNFPz8/Pz9FPz8/Pz9FY307fXtcZjE3XGZi aWRpIFxmbW9kZXJuXGZjaGFyc2V0MTM0XGZwcnExe1wqXHBhbm9zZSAwMjAxMDYwOTA2MDEw MTAxMDEwMX1TaW1IZWl7XCpcZmFsdCBvPz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/ fTt9DQp7XGYxOFxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDEzNlxmcHJxMXtcKlxwYW5vc2Ug ... Looks normal to me. Now: This is the part of the mailbody which i grabbed from the mailqueue after user B has received the mail and sieve has injectd it to the mailqueue for delivering to user C. ... Message-ID: <53B12105.2020207(a)domain.net> Date: Mon, 30 Jun 2014 10:34:13 +0200 From: =?ISO-8859-15?Q?Urban_L=F6sch_Enas?= <userA(a)domain.net> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Urban Loesch <userB(a)domain.net> Subject: testmail 5 X-Enigmail-Version: 1.6 Content-Type: multipart/mixed; boundary="------------040308070600090201000704" This is a multi-part message in MIME format.^M --------------040308070600090201000704^M Content-Type: text/plain; charset=ISO-8859-15^M Content-Transfer-Encoding: 7bit^M ^M ^M --------------040308070600090201000704^M Content-Type: application/rtf;^M name="elenco_siti_inibiti.2.rtf"^M Content-Transfer-Encoding: base64^M Content-Disposition: attachment;^M filename="elenco_siti_inibiti.2.rtf"^M ^M e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBc^M c3RzaGZkYmNoMFxzdHNoZmxvY2gwXHN0c2hmaGljaDBcc3RzaGZiaTBcZGVmbGFuZzEwNDBc^M ZGVmbGFuZ2ZlMTA0MFx0aGVtZWxhbmcxMDQwXHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7^M XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAw^M MjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fQ0Ke1xmMVxmYmlkaSBcZnN3^M aXNzXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwYjA2MDQwMjAyMDIwMjAyMDR9QXJp^M YWx7XCpcZmFsdCBBcmlhbH07fXtcZjJcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQwXGZwcnEx^M e1wqXHBhbm9zZSAwMjA3MDMwOTAyMDIwNTAyMDQwNH1Db3VyaWVyIE5ldzt9e1xmM1xmYmlk^M aSBcZnJvbWFuXGZjaGFyc2V0MlxmcHJxMntcKlxwYW5vc2UgMDUwNTAxMDIwMTA3MDYwMjA1^M MDd9U3ltYm9sO30NCntcZjRcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFu^M b3NlIDAyMGIwNjA0MDIwMjAyMDIwMjA0fUhlbHZldGljYTt9e1xmNVxmYmlkaSBcZm1vZGVy^M blxmY2hhcnNldDBcZnBycTF7XCpccGFub3NlIDAyMDcwNDA5MDIwMjA1MDIwNDA0fUNvdXJp^M ZXI7fXtcZjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIw^M NjAzMDQwNTA1MDIwMzA0fVRtcyBSbW57XCpcZmFsdCBUaW1lcyBOZXcgUm9tYW59O30NCntc^M ZjdcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGIwNjA0MDIw^M MjAyMDMwMjA0fUhlbHY7fXtcZjhcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpc^M cGFub3NlIDAyMDQwNTAzMDYwNTA2MDIwMzA0fU5ldyBZb3JrO317XGY5XGZiaWRpIFxmc3dp^M c3NcZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMDAwMDAwMDAwMDAwMDAwMDAwMH1TeXN0^M ZW07fQ0Ke1xmMTBcZmJpZGkgXGZuaWxcZmNoYXJzZXQyXGZwcnEye1wqXHBhbm9zZSAwNTAw^M MDAwMDAwMDAwMDAwMDAwMH1XaW5nZGluZ3M7fXtcZjExXGZiaWRpIFxmbW9kZXJuXGZjaGFy^M c2V0MTI4XGZwcnExe1wqXHBhbm9zZSAwMjAyMDYwOTA0MDIwNTA4MDMwNH1NUyBNaW5jaG97^M XCpcZmFsdCA/bD9yID8/XCc4MVwnNjZjfTt9DQp7XGYxMlxmYmlkaSBcZnJvbWFuXGZjaGFy^M c2V0MTI5XGZwcnEye1wqXHBhbm9zZSAwMjAzMDYwMDAwMDEwMTAxMDEwMX1CYXRhbmd7XCpc^M ZmFsdCA/Pz8/P0U/Pz8/P0VjRT8/Pz8/RT8/Y0VjRT8/Pz8/fTt9e1xmMTNcZmJpZGkgXGZu^M aWxcZmNoYXJzZXQxMzRcZnBycTJ7XCpccGFub3NlIDAyMDEwNjAwMDMwMTAxMDEwMTAxfVNp^M bVN1bntcKlxmYWx0ID8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz99O30NCntcZjE0^M XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxMzZcZnBycTJ7XCpccGFub3NlIDAyMDIwNTAwMDAw^M MDAwMDAwMDAwfVBNaW5nTGlVe1wqXGZhbHQgIVBzMk9jdUFlfTt9e1xmMTVcZmJpZGkgXGZt^M b2Rlcm5cZmNoYXJzZXQxMjhcZnBycTF7XCpccGFub3NlIDAyMGIwNjA5MDcwMjA1MDgwMjA0^M fU1TIEdvdGhpY3tcKlxmYWx0ID9sP3IgP1M/Vj9iP059O30NCntcZjE2XGZiaWRpIFxmc3dp^M c3NcZmNoYXJzZXQxMjlcZnBycTJ7XCpccGFub3NlIDAyMGIwNjAwMDAwMTAxMDEwMTAxfURv^M dHVte1wqXGZhbHQgPz8/Pz9FPz9jRT8/Pz8/RWNFPz8/Pz9FPz8/Pz9FY307fXtcZjE3XGZi^M aWRpIFxmbW9kZXJuXGZjaGFyc2V0MTM0XGZwcnExe1wqXHBhbm9zZSAwMjAxMDYwOTA2MDEw^M MTAxMDEwMX1TaW1IZWl7XCpcZmFsdCBvPz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8/^M fTt9DQp7XGYxOFxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDEzNlxmcHJxMXtcKlxwYW5vc2Ug^M MDIwMjA1MDkwMDAwMDAwMDAwMDB9TWluZ0xpVXtcKlxmYWx0IDJPY3VBZX07fXtcZjE5XGZi^M aWRpIFxmcm9tYW5cZmNoYXJzZXQxMjhcZnBycTF7XCpccGFub3NlIDAyMDIwNjA5MDQwMzA1^M MDgwMzA1fU1pbmNob3tcKlxmYWx0ID8/XCc4MVwnNjZjfTt9DQp7XGYyMFxmYmlkaSBcZnN3^M ... The part of the mail-header looks normal. But as you can see at beginning of the mailbody something inserts the strange character "^M" after each newline. According to Google this is a endline charachter from Windows. And this seems to break some clients (Eg. Lotus Notes). With dovecot version 2.1.x I don't have this problem. Have you any solution for me? Many thanks Urban Loesch

2 2

Any issues with dsync between 2.1.7 and 2.2.9 ?
by deano-dovecot＠areyes.com 29 Jun '14

29 Jun '14

My current production system is running dovecot 2.1.7-7ubuntu1 on Ubuntu 13.04, and I'm building a new setup based on Ubuntu 14.04 with dovecot 2.2.9-1ubuntu2.1 - current standard in the repos. I'd like to use replication to get the mailstore from the old system to the new. Are there any caveats or gotchas to be aware of ? Is it possible to make it a one-way replication ? So problems or glitches on the new setup don't propagate to the old production ? Thanks - D.

1 0

Procmail to Sieve translation
by Gerhard Wiesinger 28 Jun '14

28 Jun '14

Hello, I'm trying to move from procmail to dovecot sieve. I found the translation script at http://www.dovecot.org/tools/procmail2sieve.pl It works well except the following use cases: * ^From:.*myemail@mydomain.com.* | formail -I"X-Priority: 2 (high)" -I"X-mydomain-com-seen: yes" | $SENDMAIL -oi \ myemail(a)mydomain2.com \ myemail(a)mydomain3.com :0c * ^From:.*myemail@mydomain.com.* ! +1123456789(a)mysmsprovider.com :0c * ^(To|Cc|Bcc):.*myemail@mydomain.com.* ! myemail(a)mydomain2.com myemail(a)mydomain3.com Is there a possibility to support these use cases (can be done manually)? How does forwarding to another domain work at the deliver process? :copy seems not to be supported, right? Thank you. Ciao, Gerhard

2 3

Dovecot virtual and SASL with Postfix
by Jerry 28 Jun '14

28 Jun '14

This is my first attempt to set up virtual users and sasl with Postfix. Can I use a regular password file in this format: user:{plain}password user2:{plain}password2 or do I need to use a different format? I have been trying to find an example of a virtual user SASL file, but without any luck. I suck at Googling too. All of the mail will be delivered to :/var/mail/vmail/<domain>/<user> -- Jerry

2 2

change dovecot mbox localtion
by Charlot W 28 Jun '14

28 Jun '14

hi, i use: dovecot 1.2.7, sendmail and unbuntu to serve my mail service. recent my disk space is not enough, so i want to mange my mail in two ways: *1. change the mail location:* i use: mail_location = mbox:/var/mail:INBOX=/var/mail/%u when i changed it to mail_location = mbox:/home/mail:INBOX=/home/mail/%u but the mail still write to the old path *2. limit the mail file size* i want the mail file reduce when it reach to 100MB how can i config dovecot/sendmail to do in last 2 ways? thank you all:)

1 0

mixing Maildir and mdbox
by gustavo panizzo <gfa> 28 Jun '14

28 Jun '14

Hello i'm in the process to architect a new email system. i plan to use dovecot 2.2.9 (debian's wheezy). i would like to use maildir for 2 folders on each account (spam and no-spam) and the rest of the folders stored on mdbox. this should be opaque to my users. the reason for this, is i want to be able to train my anti-spam tools, but they read maildir or mbox, they don't read mdbox or dbox. but i want the other folders as mdbox (performance, backups, alternate storage) is there any way?, i prefer if is configurable in advance for all accounts but i could live with something that is done after account is created thanks! PD: please keep me CC'ed as i'm not subscribed to the list -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333

1 0

remove unreferenced files from mail_attachment_dir
by Hardy Flor 27 Jun '14

27 Jun '14

Hello, I restore a backup from all users (mail_location ...) the mail_attachment_dir backup was not from the same time. How can I the unreferenced files from mail_attachment_dir? Hardy

1 0

[Dovecot] mdbox-files not approximately 2 MB
by Hardy Flor 27 Jun '14

27 Jun '14

Hello, there are copies with different size in 3 mailboxes of the user sequentially about 3800 emails. why not something 2MB files? After the big file "m.00000034" with 14MB follow very many small ... ------------------------------------- doveconf: # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 ext4 mail_attachment_dir = /var/mail/attachments mail_attachment_hash = %{md5} mail_attachment_min_size = 16 k mail_location = mdbox:/var/mail/user/%n mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 2 M ------------------------------------- directory: root@xxx:/var/mail/user/xxx/storage# ls -al insgesamt 76532 drwx--S--- 2 vmail mail 4096 Mär 16 13:52 . drwx--S--- 6 vmail mail 4096 Mär 16 12:10 .. -rw------- 1 vmail mail 74360 Mär 16 12:39 dovecot.map.index -rw------- 1 vmail mail 25204 Mär 16 13:52 dovecot.map.index.log -rw------- 1 vmail mail 63544 Mär 16 12:39 dovecot.map.index.log.2 -rw------- 1 vmail mail 2092921 Mär 16 12:15 m.00000001 -rw------- 1 vmail mail 2086746 Mär 16 12:15 m.00000002 -rw------- 1 vmail mail 2084182 Mär 16 12:15 m.00000003 -rw------- 1 vmail mail 2096826 Mär 16 12:15 m.00000004 -rw------- 1 vmail mail 1882666 Mär 16 12:15 m.00000005 -rw------- 1 vmail mail 1903965 Mär 16 12:15 m.00000006 -rw------- 1 vmail mail 2091169 Mär 16 12:15 m.00000007 -rw------- 1 vmail mail 2086396 Mär 16 12:15 m.00000008 -rw------- 1 vmail mail 507205 Mär 16 12:16 m.00000009 -rw------- 1 vmail mail 2031456 Mär 16 12:17 m.00000010 -rw------- 1 vmail mail 2095697 Mär 16 12:17 m.00000011 -rw------- 1 vmail mail 1689071 Mär 16 12:17 m.00000012 -rw------- 1 vmail mail 2092124 Mär 16 12:17 m.00000013 -rw------- 1 vmail mail 1950602 Mär 16 12:17 m.00000014 -rw------- 1 vmail mail 2092215 Mär 16 12:17 m.00000015 -rw------- 1 vmail mail 2087463 Mär 16 12:17 m.00000016 -rw------- 1 vmail mail 2079795 Mär 16 12:17 m.00000017 -rw------- 1 vmail mail 2014121 Mär 16 12:17 m.00000018 -rw------- 1 vmail mail 2081893 Mär 16 12:17 m.00000019 -rw------- 1 vmail mail 2092088 Mär 16 12:17 m.00000020 -rw------- 1 vmail mail 2090508 Mär 16 12:17 m.00000021 -rw------- 1 vmail mail 1929296 Mär 16 12:17 m.00000022 -rw------- 1 vmail mail 2067685 Mär 16 12:17 m.00000023 -rw------- 1 vmail mail 1745743 Mär 16 12:20 m.00000024 -rw------- 1 vmail mail 866452 Mär 16 12:20 m.00000025 -rw------- 1 vmail mail 296379 Mär 16 12:20 m.00000026 -rw------- 1 vmail mail 433541 Mär 16 12:39 m.00000027 -rw------- 1 vmail mail 92526 Mär 16 12:39 m.00000028 -rw------- 1 vmail mail 19094 Mär 16 12:39 m.00000029 -rw------- 1 vmail mail 106837 Mär 16 12:39 m.00000030 -rw------- 1 vmail mail 162012 Mär 16 12:39 m.00000031 -rw------- 1 vmail mail 412080 Mär 16 13:51 m.00000032 -rw------- 1 vmail mail 1715868 Mär 16 13:51 m.00000033 -rw------- 1 vmail mail 14433784 Mär 16 13:51 m.00000034 -rw------- 1 vmail mail 3280 Mär 16 13:51 m.00000035 -rw------- 1 vmail mail 6308 Mär 16 13:51 m.00000036 -rw------- 1 vmail mail 534274 Mär 16 13:51 m.00000037 -rw------- 1 vmail mail 378719 Mär 16 13:51 m.00000038 -rw------- 1 vmail mail 458528 Mär 16 13:51 m.00000039 -rw------- 1 vmail mail 192504 Mär 16 13:51 m.00000040 -rw------- 1 vmail mail 1277766 Mär 16 13:51 m.00000041 -rw------- 1 vmail mail 33417 Mär 16 13:51 m.00000042 -rw------- 1 vmail mail 142866 Mär 16 13:51 m.00000043 -rw------- 1 vmail mail 113529 Mär 16 13:51 m.00000044 -rw------- 1 vmail mail 55888 Mär 16 13:51 m.00000045 -rw------- 1 vmail mail 673504 Mär 16 13:51 m.00000046 -rw------- 1 vmail mail 430738 Mär 16 13:51 m.00000047 -rw------- 1 vmail mail 218494 Mär 16 13:51 m.00000048 -rw------- 1 vmail mail 96165 Mär 16 13:51 m.00000049 -rw------- 1 vmail mail 8370 Mär 16 13:51 m.00000050 -rw------- 1 vmail mail 29251 Mär 16 13:51 m.00000051 -rw------- 1 vmail mail 394680 Mär 16 13:51 m.00000052 -rw------- 1 vmail mail 674892 Mär 16 13:51 m.00000053 -rw------- 1 vmail mail 1076919 Mär 16 13:51 m.00000054 -rw------- 1 vmail mail 258806 Mär 16 13:51 m.00000055 -rw------- 1 vmail mail 60069 Mär 16 13:51 m.00000056 -rw------- 1 vmail mail 297891 Mär 16 13:51 m.00000057 -rw------- 1 vmail mail 92772 Mär 16 13:51 m.00000058 -rw------- 1 vmail mail 129272 Mär 16 13:51 m.00000059 -rw------- 1 vmail mail 56073 Mär 16 13:51 m.00000060 -rw------- 1 vmail mail 528260 Mär 16 13:51 m.00000061 -rw------- 1 vmail mail 29468 Mär 16 13:51 m.00000062 -rw------- 1 vmail mail 3250 Mär 16 13:51 m.00000063 -rw------- 1 vmail mail 96445 Mär 16 13:51 m.00000064 -rw------- 1 vmail mail 337663 Mär 16 13:51 m.00000065 -rw------- 1 vmail mail 187505 Mär 16 13:51 m.00000066 -rw------- 1 vmail mail 98839 Mär 16 13:51 m.00000067 -rw------- 1 vmail mail 5294 Mär 16 13:51 m.00000068 -rw------- 1 vmail mail 28276 Mär 16 13:51 m.00000069 -rw------- 1 vmail mail 67950 Mär 16 13:52 m.00000070 -rw------- 1 vmail mail 704457 Mär 16 13:52 m.00000071 -rw------- 1 vmail mail 1410205 Mär 16 13:52 m.00000072 -rw------- 1 vmail mail 736330 Mär 16 13:52 m.00000073 -rw------- 1 vmail mail 616992 Mär 16 13:52 m.00000074

1 1

Re: question on lmtp logged message
by Leonardo Rodrigues 27 Jun '14

27 Jun '14

Hi Steffen, Em 26/06/14 11:06, Steffen Kaiser escreveu: > > maildir_copy_with_hardlinks is set on my server, too. It's the default > now. I do not see these errors. > > Can you check if the failed recipient is _never_ the first one? I > remember some discussions about that the Dovecot LDA has to re-open > the storred message of the first recipient, in order to spool it for > the other ones. That caused problems because the server used an > user-specific encryption key. > > If that applies to LMTP, too, this might become problematic, if the > first recipient deletes the message very quickly. Therefore my > question, if the error pops up for the second recipient and maybe all > following ones. Just did some more scripting and got a total of 1413 distinct emails (distinct queueids) that suffered from this 'message was expunged' problem on the 36 hours i got the problems. As noted before, not even a single one of these 1413 were nrcpt=1. Problems were from nrcpt=2 or greater. So, whatever this is, it really seems to NOT affect single recipient messages. As you suspected, on those 1413 the very first recipient ALWAYS got a status=sent from dovecot/lmtp. "Message was expunged" never happened on the very first recipient delivery. About the first user (the first delivered message) checking the message right after delivery, i tried to confirm that by the logs. To make things a little easier, i used nrcpt=2 and nrcpt=3 situations, just to avoid posting lots of logs here. Case #1 1st recipient delivery OK, failed on 2nd recipient, just delivered successfully on 2nd try Jun 25 17:08:53 correio postfix/qmgr[3059]: 2AFA01BF7496F: from=<alejandro.miguel(a)domain.com.br>, size=49366, nrcpt=2 (queue active) Jun 25 17:09:52 correio postfix/lmtp[6029]: 2AFA01BF7496F: to=<fabio.kado(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=59, delays=0.01/47/0/12, dsn=2.0.0, status=sent (250 2.0.0 <fabio.kado(a)domain.com.br> UbjnEywqq1MTPwAAHvf8vg Saved) Jun 25 17:09:55 correio postfix/lmtp[6029]: 2AFA01BF7496F: to=<marcelo.roberto(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=63, delays=0.01/47/0/16, dsn=4.2.0, status=deferred (host correio.domain.com.br[private/dovecot-lmtp] said: 451 4.2.0 <marcelo.roberto(a)domain.com.br> Message was expunged (received-date) (in reply to end of DATA command)) Jun 25 17:24:11 correio postfix/lmtp[26595]: 2AFA01BF7496F: to=<marcelo.roberto(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=918, delays=908/0/0/10, dsn=2.0.0, status=sent (250 2.0.0 <marcelo.roberto(a)domain.com.br> hWS4JMorq1OIdAAAHvf8vg Saved) and in fact the first recipient was checking its email during the LMTP delivery. This is the actual order of the logs: Jun 25 17:09:47 correio dovecot: pop3-login: Login: user=<fabio.kado(a)domain.com.br>, method=PLAIN, rip=10.253.x.x, lip=10.252.x.x, mpid=21164 Jun 25 17:09:52 correio postfix/lmtp[6029]: 2AFA01BF7496F: to=<fabio.kado(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=59, delays=0.01/47/0/12, dsn=2.0.0, status=sent (250 2.0.0 <fabio.kado(a)domain.com.br> UbjnEywqq1MTPwAAHvf8vg Saved) Jun 25 17:09:52 correio dovecot: pop3(fabio.kado(a)domain.com.br), rip=10.253.x.x, lip=10.252.x.x: Disconnected: Logged out top=0/0, retr=1/49582, del=1/1, size=49550 and by the size= of the 'disconnected' pop3 log (size=49550) and the size from qmgr (size=49366), user really seems to have checked (and deleted after that) exactly the message right BEFORE the 2nd recipient delivery was tried by LMTP Case #2 1st and 2nd recipient delivery OK, failed on 3rd recipient, just delivered successfully on 2nd try Jun 25 10:00:31 correio postfix/qmgr[804]: EFEB31A4BB227: from=<andrei.lunkes(a)domain.com.br>, size=26667, nrcpt=3 (queue active) Jun 25 10:00:47 correio postfix/lmtp[6549]: EFEB31A4BB227: to=<marcos.pereira(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=16, delays=0/0/0/16, dsn=2.0.0, status=sent (250 2.0.0 <marcos.pereira(a)domain.com.br> uTsNO+/HqlOHGQAAHvf8vg Saved) Jun 25 10:00:54 correio postfix/lmtp[6549]: EFEB31A4BB227: to=<mario.cabreira(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=22, delays=0/0/0/22, dsn=2.0.0, status=sent (250 2.0.0 <mario.cabreira(a)domain.com.br> uTsNO+/HqlOHGQAAHvf8vg Saved) Jun 25 10:00:55 correio postfix/lmtp[6549]: EFEB31A4BB227: to=<wellington.camargo(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=24, delays=0/0/0/24, dsn=4.2.0, status=deferred (host correio.domain.com.br[private/dovecot-lmtp] said: 451 4.2.0 <wellington.camargo(a)domain.com.br> Message was expunged (received-date) (in reply to end of DATA command)) Jun 25 10:03:57 correio postfix/lmtp[7312]: EFEB31A4BB227: to=<wellington.camargo(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=205, delays=202/1/0/2.2, dsn=2.0.0, status=sent (250 2.0.0 <wellington.camargo(a)domain.com.br> j1dRAU/IqlN6QAAAHvf8vg Saved) 1st recipient in fact checked email (and deleted the message) right after the delivery. Actual log sequence is: Jun 25 10:00:40 correio dovecot: pop3-login: Login: user=<marcos.pereira(a)domain.com.br>, method=PLAIN, rip=10.253.22.56, lip=10.252.38.2, mpid=7233 Jun 25 10:00:47 correio postfix/lmtp[6549]: EFEB31A4BB227: to=<marcos.pereira(a)domain.com.br>, relay=correio.domain.com.br[private/dovecot-lmtp], delay=16, delays=0/0/0/16, dsn=2.0.0, status=sent (250 2.0.0 <marcos.pereira(a)domain.com.br> uTsNO+/HqlOHGQAAHvf8vg Saved) Jun 25 10:00:48 correio dovecot: pop3(marcos.pereira(a)domain.com.br), rip=10.253.22.56, lip=10.252.38.2: Disconnected: Logged out top=0/0, retr=1/26872, del=1/1, size=26849 2nd recipient did NOT checked email near the delivery Jun 25 09:54:08 correio dovecot: pop3-login: Login: user=<mario.cabreira(a)domain.com.br>, method=PLAIN, rip=10.253.22.72, lip=10.252.38.2, mpid=29125 Jun 25 09:54:12 correio dovecot: pop3(mario.cabreira(a)domain.com.br), rip=10.253.22.72, lip=10.252.38.2: Disconnected: Logged out top=0/0, retr=11/1408320, del=11/11, size=1408058 Jun 25 10:06:49 correio dovecot: pop3-login: Login: user=<mario.cabreira(a)domain.com.br>, method=PLAIN, rip=10.253.22.72, lip=10.252.38.2, mpid=13391 Jun 25 10:06:50 correio dovecot: pop3(mario.cabreira(a)domain.com.br), rip=10.253.22.72, lip=10.252.38.2: Disconnected: Logged out top=0/0, retr=10/1923222, del=10/10, size=1923004 this is interesting ... logs seems to show clearly that right after the message was delivered to the 1st recipient, it was checked and deleted. Despite of that, 2nd recipient got the message successfully delivered. But we have also a delay=22 ... maybe lmtp instance had already opened the message BEFORE it was erased by the 1st user ? this delay is high, i know that and, usually, server do NOT suffer from this delays on deliveries. Anyway, during this problem period, queues were pretty large and, thus, load was very high, which i think explains this unusual delays. With these two cases, it really seems that this is somehow related to: - lmtp as delivery agent - multiple recipient messages - first (or previous users in fact) checked and deleted the message before all the recipients got the message delivery About the two parameters, maildir_copy_with_hardlinks and pop3_fast_size_lookups, i'll try to change them one at a time and try to reproduce the problems. Fact is i only had the problem with both set to yes and problems were completly vanished when both were set to no. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

quota warning configuration problem
by Przemysław Orzechowski 27 Jun '14

27 Jun '14

Hi Im trying to setup automatic quota warning in dovecot but somehow cant get it to work Quota usage is displayed properly in roundcube so quota plugin is working. But somehow i cant get quota warning to work my dovecot is 2.2.9 (stock version in ubuntu) doveconf -n output in attached file dovecot-quota-warning-sh is as found in wiki Best regards Przemysław Orzechowski

2 2

RE: quota warning configuration problem
by ihab_mishriki 26 Jun '14

26 Jun '14

Hello I faced the problem but try to stop mail debug conf from devcot.conf -------- Original message -------- From: Przemysław Orzechowski <przemek.orzechowski(a)makolab.pl> Date:26/06/2014 17:53 (GMT+02:00) To: dovecot(a)dovecot.org Subject: quota warning configuration problem Hi Im trying to setup automatic quota warning in dovecot but somehow cant get it to work Quota usage is displayed properly in roundcube so quota plugin is working. But somehow i cant get quota warning to work my dovecot is 2.2.9 (stock version in ubuntu) doveconf -n output in attached file dovecot-quota-warning-sh is as found in wiki Best regards Przemysław Orzechowski

2 1

Re: question on lmtp logged message
by Leonardo Rodrigues 26 Jun '14

26 Jun '14

Em 26/06/14 03:32, Steffen Kaiser escreveu: > > On Wed, 25 Jun 2014, Leonardo Rodrigues wrote: > >> Anyway, sometimes LMTP seems to not be able to deliver some >> messages and keep them on postfixqueue. And on the next or third try, >> the message gets delivered successfully. The logged message, however, >> is not helping me identify what is happening.Example: >> >> (error - message was expunged) >> Jun 25 11:49:39 correio postfix/lmtp[21835]: ADB0A1AC05108: >> to=<vanilson.parreira(a)domain.com.br>, >> relay=correio.domain.com.br[private/dovecot-lmtp], conn_use=6, >> delay=13, delays=0.07/0/0/13, dsn=4.2.0, status=deferred (host >> correio.domain.com.br[private/dovecot-lmtp] said: 451 4.2.0 >> <vanilson.parreira(a)domain.com.br> Message was expunged >> (received-date) (in reply to end of DATA command)) > > What does the Dovecot log says for the delivery attempt? exactly what's reported by postfix, no extra information there Jun 25 11:49:39 correio dovecot: lmtp(766, vanilson.parreira(a)domain.com.br) 645hNV7hqlP+AgAAHvf8vg: msgid=<F12DAC80721942C1842481355A0D08F8(a)corporate.ad>: save failed to INBOX: Message was expunged (received-date) > How many recipients does the message has and, if so, what about the > other recipients? > After analyzing lots of cases (made a script for doing that), this seems to occur only on messages with more than 1 recipient, usually on messages with lots of recipients (>10) altough i got some on messages with 2 or 3. Some days ago, when trying to optimize somethings on the server, i changed two dovecot parameters: maildir_copy_with_hardlinks to yes pop3_fast_size_lookups to yes previously, both were no. I have returned both values to 'no' and this situation, 'message was expunged' seems to not be occurring anymore. Can this behavior by any chance related to these settings ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

2 1

imap/pop3/lmtp proxy question/problem
by Jogi Hofmüller 25 Jun '14

25 Jun '14

Dear list, We are finally back to our task of migrating from cyrus to dovecot. dovecot mostly does what we want in terms of POP3/IMAP server. Now we are preparing for migration. The plan is to use dovecot as proxy for not-yet migrated accounts. This works wonderfully for IMAP but not for LMTP. Here's what I find in the logs when I try to deliver e-mail to the dovecot lmtp port: Jun 25 19:03:06 klee dovecot: lmtp(5037): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Jun 25 19:03:06 klee dovecot: lmtp(5037): Connect from IP-address Jun 25 19:03:06 klee dovecot: lmtp(5037): Debug: user USER: Auth PASS lookup returned temporary failure: reason=Configured passdbs don't support crentials lookups Jun 25 19:03:06 klee dovecot: lmtp(5037): Debug: auth input: reason=Configured passdbs don't support crentials lookups Delivery works fine without proxy (lmtp_proxy = no). What I would need to do is to configure the proxy part so that POP3/IMAP uses the accounts username/password and LMTP uses a special account to deliver e-mail. This is dovecot-ldap.auth (the =proxy=y will be replaced by a field from ldap once the tests work): uris = ldaps://our.ldap.server/ tls = no auth_bind = yes base = dc=mur,dc=at deref = never scope = subtree user_attrs = =home=/srv/vmail/mail/%Lu,=uid=999,=gid=999 user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,=proxy=y,=host=our.imap.server,=starttls=yes iterate_attrs = uid=user iterate_filter = (objectClass=posixAccount) dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.14-1-amd64 x86_64 Debian jessie/sid auth_verbose = yes disable_plaintext_auth = no lmtp_proxy = yes login_greeting = Dovecot is spitze! mail_debug = yes mail_location = maildir:/srv/vmail/mail/%u mail_plugins = acl namespace { hidden = no inbox = no list = children location = maildir:/srv/vmail/mail/%%u:INDEX=/srv/vmail/mail/%u/shared/%%u prefix = shared.%%u. separator = . subscriptions = yes type = shared } namespace inbox { hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp pop3" service auth { unix_listener auth-userdb { group = vmail user = vmail } } service lmtp { inet_listener lmtp { address = 172.16.16.78 port = 24 } user = vmail } ssl_cert = </etc/dovecot/server.pem ssl_key = </etc/dovecot/private/server.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl quota sieve postmaster_address = postmaster(a)mur.at } protocol imap { mail_plugins = acl imap_acl } Regards, -- j.hofmüller Gerüchtegenerator http://plagi.at/geruecht

1 0

sievec drops privileges unexpectedly
by Matthijs Kooijman 25 Jun '14

25 Jun '14

(Please keep me CC'd, I'm not subscribed) Hi folks, I'm using dovecot 2.1.7 (from Debian stable) with sieve. I have default sieve script configured, which lives in /etc/dovecot/sieve. I use dovecot-lda running under the virtual-mail user, which does not have write access to the /etc/dovecot/sieve directory. Now, when a mail gets delivered, I get the following message in my logs. Jun 25 14:29:43 mail dovecot: lda(2001): Error: sieve: binary save: failed to create temporary file: open(/etc/dovecot/sieve/default.svbin.mail.local.18902.) failed: Permission denied (euid=2009(virtual-mail) egid=2009(virtual-mail) missing +w perm: /etc/dovecot/sieve, dir owned by 0:0 mode=0755) Jun 25 14:29:43 mail dovecot: lda(2001): Error: sieve: the lda sieve plugin does not have permission to save global sieve script binaries; global sieve scripts like /etc/dovecot/sieve/default need to be pre-compiled using the sievec tool Due to the lack of permissions, this is of course expected. However, when I then try to precompile the script using sievec, that also fails: # sievec /etc/dovecot/sieve/default sievec(root): Error: sieve: binary save: failed to create temporary file: open(/etc/dovecot/sieve/default.svbin.mail.local.18952.) failed: Permission denied (euid=2009(virtual-mail) egid=2009(virtual-mail) missing +w perm: /etc/dovecot/sieve, dir owned by 0:0 mode=0755) So, apparently sievec drops privileges to the virtual-mail user. Why does this happen? It seems kind of counter-productive - I don't see a way to properly run sievec as root now? How is this supposed to work? Now I wrote this, I realized that it might be related that I have specified mail_uid and mail_gid globally in my dovecot.conf file. Perhaps those are intended to only be put inside the protocol imap and protocol lda blocks? This would mean duplicating of this bit of configuration, which doesn't really sound nice. Gr. Matthijs PS, here's my dovecot -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.10-1-amd64 x86_64 Debian 7.5 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = spamd-access mail_debug = yes mail_gid = virtual-mail mail_location = Maildir:~/Folders:INBOX=~/INBOX:LAYOUT=fs mail_uid = virtual-mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { antispam_backend = pipe antispam_pipe_program = /usr/bin/spamc antispam_pipe_program_args = --socket=/var/run/spamd.socket antispam_pipe_program_notspam_arg = --learntype=ham antispam_pipe_program_spam_arg = --learntype=spam antispam_spam = Spam antispam_trash_pattern_ignorecase = trash;Deleted *;Prullenbak;Verwijderde * sieve = ~/sieve sieve_dir = ~/sieve.d sieve_global_path = /etc/dovecot/sieve/default } protocols = imap sieve service auth { unix_listener auth-client { group = Debian-exim mode = 0600 user = Debian-exim } unix_listener auth-master { group = virtual-mail mode = 0600 user = virtual-mail } user = nobody } ssl_cert = <ssl/mail.tikatika.nl.crt-chain ssl_key = <ssl/mail.tikatika.nl.key userdb { args = home=/data/mail/%u allow_all_users=yes uid=virtual-mail gid=virtual-mail driver = static } protocol imap { mail_plugins = antispam } protocol lda { lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_plugins = sieve postmaster_address = }

2 2

Remove all messages in a mailbox
by Murray Trainer 25 Jun '14

25 Jun '14

Hi All, I am having trouble removing all messages in a mailbox. The command below doesn't remove all the messages: doveadm expunge -u user@domain mailbox '*' all Do I need to add .* or other? THanks Murray

2 1

ot: accepting self certs into win pc?
by voytek＠sbt.net.au 24 Jun '14

24 Jun '14

few month ago, I've got a new Dovecot/Postfix server with self issued certificate (like the previous server), transferred users, all went well EXCEPT for one user on Win/Outlook (or Outlook Express) who tells me his new PC 'doesn't want to accept certificate' (sorry, I'm short on exact details at this time) I need to get it sorted out, I expect it 'should just work' like it did for other users, BUT, before I start looking, trying to 'educate myself' better if any one has any pointers, dos or don't regarding win email clients with self certified server, pls point me that way is using IE with www.dom.com/mycert.crt good point to start ? (after copying mycer.crt to web linked directory first?) thanks, V

7 17

Wheezy Dovecot workarounds
by Steve Litt 24 Jun '14

24 Jun '14

Hi all, In switching from Ubuntu to Debian Wheezy (7.5 64bit, network install), I'm finding some surprises in getting Dovecot to work. PROBLEM: As installed, the package manager doesn't give you the dovecot executable. WORKAROUND: To install the dovecot executable, you need to follow these instructions: http://wiki2.dovecot.org/HowTo/DebianStable PROBLEM: Even when you install Dovecot, it doesn't work, as evidenced by the inability of a local email client to talk to it. Further elements of the symptom are that nmap -A -T4 LocalIPAddress, whether LocalIPAddress is the IP of eth0, or 127.0.0.1, fails to find any open ports. Telnet can't operate dovecot at port 143, and openssl can't operate it at 993. However, bizarrly, executing these same commands on a remote machine into the original machine (including accessing the machine's Dovecot from an email client) work perfectly. WORKAROUND To "solve" this problem, do the following raindance as root: ifdown lo ifup lo After the raindance, local access to Dovecot works perfectly, and all nmap commands perform as expected. LOL, hey man, don't shoot me, I'm just the messenger. SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

4 3

Mangesieve security question
by Vijay Rajah 24 Jun '14

24 Jun '14

Hello, I have a dovecot 2.2.6 on a Linux platform. I have configured manageseive extension. I have opened the manageseive port (4190) to entire world. (since I need my thunderbird and other clients to create seive scripts). I just wanted to know if it is ok to open that port to everyone, and get some feedback on some security measures specific to manageseive. -Thanks in advance Vijay PS: I have taken reasonable server hardening measures. This question is specific to manageseive.

2 1

Wishlist: add a variable %{x509} expanding to the client cert in Dovecot-auth
by Guilhem Moulin 24 Jun '14

24 Jun '14

Hi there, As of Dovecot 2.2.9, it's possible to enable passwordless authentication using client certificates [1]: ssl_ca = </etc/ssl/ca.pem ssl_verify_client_cert = yes auth_ssl_username_from_cert = yes (Password checking can be bypassed by returning the extra fields ‘password= nopassword’ in the passdb when the variable ‘%k’ expands to "valid".) However this requires the server admin to set up a PKI. Having a variable %{x509} expanding to the X.509 client cert in Dovecot-auth would remove such hassle and instead provide a way to manage authorized clients in the fashion of OpenSSH's ‘authorized_keys’. Postfix has a similar configuration option: relay_clientcerts [2]. There, the keys for the lookup table can be either client cert fingerprints or public key fingerprints (the digest algorithm can be configured with smtpd_tls_fingerprint_digest). I can't see why %{x509} should digest the certificate and not merely PEM-encode it, but having another %{pubkey} variable expanding to the (PEM-encoded) cert's SubjectPublicKeyInfo block would surely be useful :-) I wonder if there are other folks interested in having the client cert available in the passdb. Thanks, cheers, -- Guilhem. [1] http://wiki2.dovecot.org/SSL/DovecotConfiguration#Client_certificate_verifi… [2] http://www.postfix.org/postconf.5.html#relay_clientcerts

1 0

ACL group-override question
by Peter Chiochetti 23 Jun '14

23 Jun '14

Trying to get ACLs working, very basic setup: Virtual users are put into different acl_group via passdb. > u:{PLAIN}B::::::userdb_acl_groups=g The global acl file restricts what they can do. > * group-override=g > * group=g lr Shouldn't this mean, that the group rights override the user rights? The effect that I see though is, that the user "u" then may not do anything, not even lookup and read. The wiki text is not fully clear to me: It tells about disabling access fully (probably by specifying a non-existent group?). But this can only be one way to use group_override… -- peter

1 2

Dovecot authentication against active directory
by Tobias Dummert 23 Jun '14

23 Jun '14

Hello, i´ve got a problem with the dovecot authentication against active directory. I´m using dovecot 2.0.19 and windows server 2008 R2. When I try to login via telnet I get the following error message: a NO [AUTHENTICATIONFAILED] Authentication failed. My dovecot configuration: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-60-generic x86_64 Ubuntu 12.04.4 LTS ext4 auth_mechanisms = plain login auth_username_format = %Lu disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 last_valid_gid = 1001 last_valid_uid = 1001 log_path = /var/log/dovecot.log mail_location = maildir:/srv/mail/%u passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocols = imap ssl = no syslog_facility = local7 userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } valid_chroot_dirs = /srv/mail My dovecot-ldap.conf: hosts = ************** dn = CN=*****,OU=*****,OU=*****,OU=*****,DC=******,DC=*****,DC=de dnpass = **************** tls = no debug_level = -1 ldap_version = 2 base = OU=*****,DC=*****,DC=*****,DC=de deref = never scope = subtree user_attrs = sAMAccountName=home user_filter = (&(ObjectClass=user)(|(mail=%u)(sAMAccountName=%u))) pass_filter = (&(ObjectClass=user)(sAMAccountName=%u)) default_pass_scheme = plain could anybody help me with this problem? Thanks in advance! Regards, Tobias Dummert

2 1

ACL group vs. owner question
by Peter Chiochetti 23 Jun '14

23 Jun '14

A hopefully simple question regarding the use of ACLs - the spirit being of taking away most permissions first and then adding them back selectively: In the global ACL declaration I have: > * owner lr > * group=SYS lrwstipekxa The owner is put into the SYS group via userdb extra field in static passwd file ("archiv" is a system user, but pam is disabled for the server): > archiv:::::::userdb_acl_groups=SYS Still, the group permissions do not get applied: > root@host:/etc/dovecot# doveadm -D acl debug -u archiv INBOX > […] > doveadm(archiv): Debug: Added userdb setting: plugin/acl_groups=SYS > doveadm(archiv): Debug: Effective uid=1002, gid=1001, home=/home/archiv > doveadm(archiv): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled > doveadm(archiv): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir > doveadm(archiv): Debug: maildir++: root=/home/archiv/Maildir, index=, indexpvt=, control=, inbox=/home/archiv/Maildir, alt= > doveadm(archiv): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl > doveadm(archiv): Debug: acl: acl username = archiv > doveadm(archiv): Debug: acl: owner = 1 > doveadm(archiv): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl > doveadm(archiv): Info: Mailbox 'INBOX' is in namespace '' > doveadm(archiv): Info: Mailbox path: /home/archiv/Maildir > doveadm(archiv): Info: All message flags are shared across users in mailbox > doveadm(archiv): Debug: acl vfile: file /home/archiv/Maildir/dovecot-acl not found > doveadm(archiv): Info: User archiv has rights: lookup read > doveadm(archiv): Info: Mailbox in user's private namespace > doveadm(archiv): Info: Mailbox INBOX is visible in LIST My question: Shouldn't this work? (In a stock setup.) PS: when I add "* group-override=SYS" to /etc/dovecot/dovecot-acl the user will not even be able to list INBOX. PPS: As an aside, the setup also switches any sytem or /virtual/ users during login in local.conf: > userdb { > driver = static > args = uid=archiv gid=archiv home=/home/archiv user=archiv > } but I get the above result without that switching when I make it read: > userdb { > driver = static > args = home=/home/archiv > } So I suppose that it's not relevant in this case… Thank you in advance -- peter

2 2

dovecot sieve vacation + lmtp protocol
by Florin Portase 23 Jun '14

23 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Here is my setup: dovecot - 2.2.11 pigeonhole - 0.4.2 qmail I was trying to create a vacation message, but after the sive script has been created and I was checking the logs I saw some strange errors: DOVECOT LOG Jun 18 16:52:24 lda(portase.florin(a)medianetork.ro): Error: lmtp client: connect(medianetork.ro, 25) failed: Connection refused Jun 18 16:52:24 lda(portase.florin(a)medianetork.ro): Error: smtp(medianetork.ro): RCPT TO failed: 451 4.4.0 Remote server not answering (connect) Jun 18 16:52:24 lda(portase.florin(a)medianetork.ro): Error: sieve: msgid=<OF380D0FC2.6E61F37A-ONC1257CFB.0051127E-C1257CFB.00511452(a)XXX.com>: failed to send vacation response to <ZZZ(a)XXX.com> (refer to server log for more information) DOVECOT config service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = #inet_listener lmtp { # address = 0.0.0.0 # port = 24 #} unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } protocol lmtp { #mail_fsync = optimized log_path = /var/log/dovecot/lmtp-errors.log info_log_path = /var/log//dovecot/lmtp.log mail_plugins = quota sieve autocreate expire } Am I missing something ??? Just to specify: domain medianetork.ro is accessible from outside on port 25 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTobZ9AAoJECEzxtLP+204AisH/2t83NS5GzFEv6JET3rJFW/k yN1/EM+Veg2CX7qvh0NPAQ/5/1f9MOdlyFUEs5vg1n2YGtBCfig6RFhP0OZNa2lK 38n99Vq3uutrTmviuv5pl4c8Jwlq68jlUlTK6DvKub58AVcqln6ljQt82HhfKl1+ lzQ/Igg6V9XT9vzcgdtumac4h+jNHuvoMv697dhK5/UfaV5tuFqKIHgLMampf4lz kc7x85xocK3C1+DQIepmpOgyHpjwBRi2KYzFii2s2jT0QWmhUHaD88BNnN8mkJxZ +1+IsWqyqSpxTx5ghIh0QiiUUBKmWcngRTs67PisDuVwvOmEy/ULkp1aEYwpD7Y= =3/1y -----END PGP SIGNATURE-----

3 3

Setting mail_attach_dir for destination on dsync
by Laeeth Isharc 23 Jun '14

23 Jun '14

Hi. What is the best way to do this, please ? I can override with -o but this applies to source as I read the docs. So I wish to do something like this dsync mirror -u myuser(a)me.com mdbox:/home/mail/myuser/mdboxcopy With either of: 1) attachments stored within message so mail_attachment_dir for dest being blank Or 2) attachments stored in a sub directory of mdboxcopy eg mdboxcopy/attach/ Timo hints that this is possible, but I cannot see how to do this, Any ideas ? Sent from my iPad

1 0

SIGSEGV in 2.2.13 with IMAP Proxying to an Exchange Server (dovecot/auth)
by Ralf Hildebrandt 22 Jun '14

22 Jun '14

Reading symbols from /usr/lib/dovecot/auth...Reading symbols from /usr/lib/debug//usr/lib/dovecot/auth...done. done. Attaching to program: /usr/lib/dovecot/auth, process 29099 [New LWP 29099] Core was generated by `dovecot/auth'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f40b534c418 in array_append_i (count=<optimized out>, data=<optimized out>, array=<optimized out>) at ../../src/lib/array.h:148 #0 0x00007f40b534c418 in array_append_i (count=<optimized out>, data=<optimized out>, array=<optimized out>) at ../../src/lib/array.h:148 No locals. #1 imapc_connection_abort_commands_array (cmd_array=cmd_array@entry=0x2075270, dest_array=dest_array@entry=0x7fff4b6aa810, only_box=only_box@entry=0x0, keep_retriable=keep_retriable@entry=false) at imapc-connection.c:236 cmd = 0x7f40b61e3c1d <buffer_alloc+45> i = 0 #2 0x00007f40b534c69d in imapc_connection_abort_commands (conn=0x20751a0, only_box=0x0, keep_retriable=<optimized out>) at imapc-connection.c:250 cmdp = <optimized out> cmd = <optimized out> tmp_array = {arr = {buffer = 0x203f6a0, element_size = 8}, v = 0x203f6a0, v_modifiable = 0x203f6a0} reply = {state = IMAPC_COMMAND_STATE_DISCONNECTED, resp_text_key = 0x0, resp_text_value = 0x0, text_full = 0x7f40b534f6a6 "Disconnected from server", text_without_resp = 0x7f40b534f6a6 "Disconnected from server"} #3 0x00007f40b61f7d7f in io_loop_handle_timeouts_real (ioloop=0x2047790) at ioloop.c:410 timeout = 0x2077e00 item = 0x2077e00 tv = {tv_sec = 0, tv_usec = 0} tv_call = {tv_sec = 1403450802, tv_usec = 614093} t_id = 3 #4 io_loop_handle_timeouts (ioloop=ioloop@entry=0x2047790) at ioloop.c:423 _data_stack_cur_id = 2 #5 0x00007f40b61f8d34 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x2047790) at ioloop-epoll.c:193 ctx = 0x204d270 list = <optimized out> io = <optimized out> tv = {tv_sec = 29, tv_usec = 999992} events_count = <optimized out> msecs = 30000 ret = 0 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #6 0x00007f40b61f7ed9 in io_loop_handler_run (ioloop=ioloop@entry=0x2047790) at ioloop.c:488 No locals. #7 0x00007f40b61f7f58 in io_loop_run (ioloop=0x2047790) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #8 0x00007f40b61a7133 in master_service_run (service=0x2047620, callback=<optimized out>) at master-service.c:566 No locals. #9 0x000000000040b96b in main (argc=1, argv=0x2047390) at main.c:393 c = <optimized out> ----- End forwarded message ----- -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

1 0

SIGSEGV in 2.2.13 with IMAP Proxying to an Exchange Server
by Ralf Hildebrandt 22 Jun '14

22 Jun '14

Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug//usr/lib/dovecot/imap...done. done. Attaching to program: /usr/lib/dovecot/imap, process 28497 [New LWP 28497] Core was generated by `dovecot/imap'. Program terminated with signal SIGSEGV, Segmentation fault. #0 imapc_client_mailbox_cmd (box=0x0, callback=callback@entry=0x7fa3a78020e0 <imapc_simple_callback>, context=context@entry=0x7fffd738b940) at imapc-client.c:351 #0 imapc_client_mailbox_cmd (box=0x0, callback=callback@entry=0x7fa3a78020e0 <imapc_simple_callback>, context=context@entry=0x7fffd738b940) at imapc-client.c:351 cmd = <optimized out> __FUNCTION__ = "imapc_client_mailbox_cmd" #1 0x00007fa3a7802815 in imapc_mailbox_noop (mbox=mbox@entry=0x149d440) at imapc-storage.c:154 cmd = <optimized out> sctx = {client = 0x146c400, ret = -2} #2 0x00007fa3a7800d30 in imapc_mailbox_sync_init (box=0x149d440, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at imapc-sync.c:476 mbox = 0x149d440 list = <optimized out> capabilities = <optimized out> changes = true ret = 0 #3 0x00007fa3a78133c9 in mailbox_sync_init (box=box@entry=0x149d440, flags=(MAILBOX_SYNC_FLAG_FULL_READ | MAILBOX_SYNC_FLAG_FIX_INCONSISTENT)) at mail-storage.c:1677 _data_stack_cur_id = 4 ctx = <optimized out> #4 0x00007fa3a78134d7 in mailbox_sync (box=box@entry=0x149d440, flags=<optimized out>, flags@entry=MAILBOX_SYNC_FLAG_FULL_READ) at mail-storage.c:1725 ctx = 0x149d440 status = {sync_delayed_expunges = 0} #5 0x00007fa3a783ddcb in mailbox_expunge_all_data (box=0x149d440) at index-storage.c:648 ctx = 0x7fffd738bafc t = 0x7fffd738bafc mail = 0x0 search_args = 0x0 #6 index_storage_mailbox_delete (box=0x149d440) at index-storage.c:701 metadata = {guid = "\000\000\000\000\000\000\000\000\030\337z\247\000\000\000", virtual_size = 21615680, cache_fields = 0x0, precache_fields = (MAIL_FETCH_RECEIVED_DATE | MAIL_FETCH_SAVE_DATE | MAIL_FETCH_PHYSICAL_SIZE | MAIL_FETCH_IMAP_BODY | MAIL_FETCH_IMAP_ENVELOPE | MAIL_FETCH_HEADER_MD5 | MAIL_FETCH_UIDL_BACKEND | MAIL_FETCH_POP3_ORDER | unknown: 16777216), backend_ns_prefix = 0x7fa3a78144b0 <mailbox_open+16> "\211\302\061\300\205\322x\bH\203\304\030[]Ð\366\203\230\002", backend_ns_type = (unknown: 0)} status = {messages = 0, recent = 0, unseen = 21327392, uidvalidity = 0, uidnext = 1, first_unseen_seq = 0, first_recent_uid = 2806981817, last_cached_seq = 32675, highest_modseq = 21615680, highest_pvt_modseq = 140340866663231, keywords = 0x1, permanent_flags = 0, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 0, no_modseq_tracking = 0, have_guids = 0, have_save_guids = 0, have_only_guid128 = 0} ret_guid = <optimized out> #7 0x00007fa3a78146a7 in mailbox_delete (box=0x149d440) at mail-storage.c:1319 ret = <optimized out> #8 0x000000000040d0e1 in cmd_delete (cmd=0x148de40) at cmd-delete.c:39 client = <optimized out> ns = <optimized out> box = 0x149d440 name = 0x144c2b8 "postponed-msgs" errstr = <optimized out> error = 32767 disconnect = false #9 0x0000000000416cfc in command_exec (cmd=0x148de40) at imap-commands.c:158 hook = 0x14550e0 ret = <optimized out> #10 0x0000000000415d5f in client_command_input (cmd=0x148de40) at imap-client.c:778 client = 0x1499c10 command = <optimized out> __FUNCTION__ = "client_command_input" #11 0x0000000000415e15 in client_command_input (cmd=0x148de40) at imap-client.c:839 client = 0x1499c10 command = <optimized out> __FUNCTION__ = "client_command_input" #12 0x0000000000416115 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x1499c10) at imap-client.c:877 No locals. #13 client_handle_input (client=client@entry=0x1499c10) at imap-client.c:889 _data_stack_cur_id = 3 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #14 0x00000000004164a2 in client_input (client=0x1499c10) at imap-client.c:931 cmd = 0x1465630 output = 0x148dd30 bytes = 32 __FUNCTION__ = "client_input" #15 0x00007fa3a7547e6f in io_loop_call_io (io=0x148be10) at ioloop.c:441 ioloop = 0x1454730 t_id = 2 __FUNCTION__ = "io_loop_call_io" #16 0x00007fa3a7548d77 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x1454730) at ioloop-epoll.c:220 ctx = 0x14553c0 list = 0x1456e20 io = <optimized out> tv = {tv_sec = 4, tv_usec = 998377} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #17 0x00007fa3a7547ed9 in io_loop_handler_run (ioloop=ioloop@entry=0x1454730) at ioloop.c:488 No locals. #18 0x00007fa3a7547f58 in io_loop_run (ioloop=0x1454730) at ioloop.c:465 __FUNCTION__ = "io_loop_run" #19 0x00007fa3a74f7133 in master_service_run (service=0x14545c0, callback=callback@entry=0x41ee50 <client_connected>) at master-service.c:566 No locals. #20 0x000000000040b06f in main (argc=1, argv=0x1454390) at main.c:400 set_roots = {0x426ca0 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x144c048 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41f200 <login_client_connected>, failure_callback = 0x41ef30 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

1 0

config best practice
by Egbert 20 Jun '14

20 Jun '14

Hi! We will soon start upgrading our Ubuntu mail server (running 2.0.19) from 12.04.1 LTSto 14.04 LTS. The dovecot config is still pretty much in 1.x style; one flat file called dovecot.conf. I can easily switch to a dovecot.conf with the "!include" lines and rename my flat config file to local.conf. I've tested that and it works fine. I could also try to move all lines in local.conf to the different XX-.conf files in the conf.d subdir. What is wise and best practice? Should one edit the files in conf.d? Or will the files in conf.d be overwritten on an update of dovecot? Then I'll better stick to the way of working with the dovecot.conf with the !includes and local.conf and assume that all files in conf.d are default settings. TNX for any advise! Egbert Jan, HCC!hobbynet, NL

4 4

Sis attachment deduplication
by Laeeth Isharc 20 Jun '14

20 Jun '14

Hi. Two questions: 1. Is this now reasonably stable for large mailboxes (c 2mm messages)? 2. Will this leave the filename in the message body unchanged? So for example if I have the same attachment called proposalfromvendor.pdf and proposaltoclient.pdf in two different emails, will the original names be kept ? Or will it replace the filename with some kind of numeric hash ? Many thanks. Laeeth Sent from my iPad

3 2

IMAP Chunking Thunderbird
by MrLINK 20 Jun '14

20 Jun '14

Hi, using dovecot-2.0.9-7.el6.x86_64 on CentOS release 6.5 (Final) I have an issue with thunderbird imap chunking. Some attachments are corrupted, because Thunderbird is just storing the first chunk. Since there are some workarounds by editing the "mail.imap.fetch_by_chunks" via about:config this is not the best choice for me because every client has to be edited. Is there a way to set a central value on the dovecot server (i.e disable chunking since this is not a client behaviour only)? Thanks in advance! MrLINK -- View this message in context: http://dovecot.2317879.n4.nabble.com/IMAP-Chunking-Thunderbird-tp48549.html Sent from the Dovecot mailing list archive at Nabble.com.

2 1

Suggestion: Split login_trusted_networks
by Peter Mogensen 20 Jun '14

20 Jun '14

Hi, It seems the use of login_trusted_networks is overloaded. Example: * It's used for indicating which hosts you trust to provide XCLIENT remote IP's. * It's used for indicating from which hosts you trust logins enough to disable auth penalty. (like in a webmail) However... trustwise, this is trusting two different entities. The first case you put trust in the host. In the second case, you actually put trust in the user which uses the webmail (unless of course the webmail it self implements auth-penalties). So you can't have one set of hosts which you trust for XCLIENT and another set of hosts you trust for not being the origin of brute force attacks. /Peter

1 0

Replication and namespaces
by Laeeth Isharc 19 Jun '14

19 Jun '14

Hi. Replication in dovecot is running into trouble as it is trying to sync virtual namespaces and does not like it. dsync parameters With v2.2.9+ you can configure what parameters replicator uses for the doveadm sync command: replication_dsync_parameters = -d -N -l 30 -U The -f and -s parameters are added automatically when needed. Usually the only change you may want to do is replace -N (= sync all namespaces) with -n <namespace> or maybe just add -x <exclude> parameter(s). ........ What is the description of namespace that follows -n or -x? -x virtual Or -x 0/ Where 0/ is the prefix for my virtual namespace Does not seem to stop it trying to sync the virtual namespace... What should I be doing instead? Do I need to use all the parameters above? Or can I just use the -x ? Sent from my iPa

1 0

dsync initial replication failing
by Cassidy Larson 19 Jun '14

19 Jun '14

Trying to get my new storage server synced up using dsync replication with SSH. Followed the wiki and everything works great for the initial sync, for about 4 hours, then I get some errors and it stops replicating: dsync-local(user(a)host.com): Warning: Failed to do incremental sync for mailbox INBOX, retry with a full sync dsync-local(user(a)host.com): Error: Remote command returned error 75: ssh -lusername <remote_ip> doveadm dsync-server -uuser(a)host.com -U It happened around 2am. I restarted the new server dovecot process and it started to copy back up again, and then happened about four hours later. I have about 10,000 accounts, and it chugs through the list to replicate pretty well (~300Mbps), so I know it's working. Just not sure why it's failing after it's working so great. Running 2.2.13 on both on FreeBSD. Both show this: # doveadm replicator status Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 0 Queued 'failed' requests 0 Queued 'full resync' requests 5645 Waiting 'failed' requests 0 Total number of known users 9957 Any ideas? Suggestions? Thanks, Cassidy

1 0

Re: config best practice
by Joseph Tam 19 Jun '14

19 Jun '14

From: Egbert <egbert(a)vandenbussche.nl> > The dovecot config is still pretty much in 1.x style; one flat file > called dovecot.conf. I can easily switch to a dovecot.conf with the > "!include" lines and rename my flat config file to local.conf. I've > tested that and it works fine. I could also try to move all lines in > local.conf to the different XX-.conf files in the conf.d subdir. What is > wise and best practice? Should one edit the files in conf.d? Or will the > files in conf.d be overwritten on an update of dovecot? Then I'll better > stick to the way of working with the dovecot.conf with the !includes and > local.conf and assume that all files in conf.d are default settings. I think you will hear from proponents of both styles. I would say use whatever works best for you. I personally use one dovecot.conf without any includes because I like having all my configs in one place. Less editing mutiple files, and less forgetting some configuration squirreled away in some conf.d file. Joseph Tam <jtam.home(a)gmail.com>

1 0

LDAP and MySQL in the same configuration
by Nicolas Cauchie 18 Jun '14

18 Jun '14

Hello there, Simple question, I'm losting hope when I search on Google : Is there a way to authenticate users from a LDAP database and to fetch their quotas stored in a MySQL database, both in the same configuration ? Thanks Nicolas --

1 0

Problem syncing mailboxes using doveadm sync
by Przemysław Orzechowski 18 Jun '14

18 Jun '14

Hi command im using command bellow on destination server rtying to make keep it in sync after initialy doing doveadm backup -R doveadm -Dv -o imapc_host=src.srv -o imapc_user=test(a)domain.tld -opop3c_user=test(a)domain.tld -o imapc_password='pass' -o pop3c_password='pass' -o mail_fsync=never -o mail_prefetch_count=20 sync -f -1 -R -u test(a)domain.tld imapc: Im using dovecot on both source and destination server (source is dovecot 1.0.10 destination is 2.2.9) Destination box is Ubuntu 14.04 LTS with dovecot installed using apt. When i create new mail message on the serrver where i run this command its not propagated to the remote (old) server Is this command wrong ?

3 4

RFE: dnsbl-support for dovecot
by Reindl Harald 17 Jun '14

17 Jun '14

after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks from known bad hosts, in our case that blacklist is 100% trustable and blocks before SMTP-Auth while normal RBL's are after SASL i admit that i am not a C/C++-programmer, but i think doing the DNS request and in case it has a result block any login attemt should be not too complex setup a own honeypot and feed rbldnsd with the sources is quite easy and in case of a own, trustable RBL where no foreigners report somebody by mistake it's relieable and scales well over many machines and services as long services supporting it mod_security: http://blog.inliniac.net/2007/02/23/blocking-comment-spam-using-modsecurity…

4 9

[Dovecot] Replication with virtual users and static userdb possible ?
by deano-dovecot＠areyes.com 17 Jun '14

17 Jun '14

Is it possible to get replication working in a virtual user setup that uses a static userdb ? My environment is fairly simple and typical - there's a single system user (vmail) that owns all the home dirs (/var/mail/domain.com/user). The virtual users (userid@domain.com:secretpassword) are kept in a single file (/var/mail/domain.com/PASSWD) that's unique per domain, and referenced as a static userdb : passdb { driver = passwd-file args = scheme=plain username_format=%u /var/mail/%d/PASSWD } userdb { driver = static args = uid=vmail gid=vmail home=/var/mail/%d/%n } I know the wiki http://wiki2.dovecot.org/Replication states that user listing must be enabled, but that's not available for a static userdb. The wiki http://wiki2.dovecot.org/UserDatabase/Static also says that it shouldn't be a problem because it will use do a passdb lookup instead (except for PAM which isn't used here). Unfortunately, it's not working. I've testing with ssh : dsync_remote_cmd = ssh -l vmail %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} mail_replica = remote:vmail@server2.domain.com as well as with straight tcp (SSL for later) mail_replica = tcp:server2.domain.com:999 /var/log/mail.err shows the problems ... Jun 3 11:30:53 server1 dovecot: auth: Error: Trying to iterate users, but userdbs don't support it Jun 3 11:30:53 server1 dovecot: replicator: Error: User listing returned failure Jun 3 11:30:53 server1 dovecot: replicator: Error: listing users failed, can't replicate existing data Anyone else have it working ? I'm sure it's something simple that I've just overlooked. Thanks - D.

2 4

replicator, ldap virtual users and static userdb
by Alan McGinlay 17 Jun '14

17 Jun '14

Hi! I am trying to use the static userdb with virtual users stored in ldap and the replicator plugin. What is the best way to implement this? I was not able to find documentation about it. Thanks!

1 0

[Dovecot] Problem in Search IMAP with spaces in Subject
by Giovanni Mancuso 17 Jun '14

17 Jun '14

Hi, I deliver a test email (with 4 spaces in subject) into a maildir: Return-Path: <user(a)example.com> Delivered-To: <user(a)example.com> Received: from suse11 ([10.0.8.7]) by suse11 (Dovecot) with LMTP id Pf6zDTCaiFOUXwAA4Q5jHg for <user(a)example.com>; Fri, 30 May 2014 16:48:16 +0200 From: <user(a)example.com> To: <user(a)example.com> Message-ID: <9704BC6A-28D9-CBF2-A1D6-DD54F6AA9D9D(a)newsvilpec.babel.it> Subject: Test 4 Spaces Test But, if i search this email with 4 spaces in subject i don't find anthing: telnet 0 143 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. ab login user(a)example.com password ab OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in ab select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft PEC_INBOX) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft PEC_INBOX \*)] Flags permitted. * 1 EXISTS * 1 RECENT * OK [UNSEEN 1] First unseen. * OK [UIDVALIDITY 1401785069] UIDs valid * OK [UIDNEXT 2] Predicted next UID ab OK [READ-WRITE] Select completed (0.002 secs). a1 SEARCH CHARSET UTF-8 SUBJECT "Test 4 Spaces" * SEARCH a1 OK Search completed (0.001 secs). a1 SEARCH CHARSET UTF-8 SUBJECT "Test 4 Spaces" * SEARCH 1 a1 OK Search completed (0.000 secs). ab logout * BYE Logging out ab OK Logout completed. Connection closed by foreign host. If i run the search with one space i find a mail. I use dovecot v2.2.12 on Linux suse11 x86_64 Thanks

1 1

Accessing a user mailbox from another user
by Angel L. Mateo 17 Jun '14

17 Jun '14

Hello, I'm looking for something maybe similar to master password but for final users and I don't know if there is already a way I could do it with dovecot. I have accounts that are used by a set of users who know their password. But I now want to remove this shared password and the users has to access to this shared account with their own password. Using shared folders is not an option (at least, not the first option) because of the behaviour our users are familiar with, such as: * They have and manage different sieve filters for the account * They have thier own Sent, Drafts, SPAM... for this shared account and their email client recognizes them as it (because they have its own account). What I'm looking for is something similar to master password, but for a user identifying as another regular user, not the "master" one. Do you know if there already is a way to configure a similar behaviour? I'm planning to configure an user and authentication backend (maybe pam) that gets users as <realuser>$<finaluser> and the realuser password, checks if <realuser> should access to <finaluser> and then returns <finaluser> mail location to dovecot. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

1 0

Procmail wiki text -- don't muck with SENDMAIL
by era eriksson 16 Jun '14

16 Jun '14

I tried to edit http://wiki2.dovecot.org/procmail but got stuck on the TextCha. Approaching this list instead seems to be a time-tested secondary approach, and I wasn't completely comfortable making these changes without discussion anyway. So here goes. The SENDMAIL= assignment is not only irrelevant, but actually wrong. The note down in the update section about Ubuntu explains the problem well enough, but it applies to all the sections on the page. My proposed edit was to simply remove SENDMAIL and SENDMAILFLAGS from all the recipes on the page, and then remove the Ubuntu section altogether, because it would no longer add anything useful to the page. If somebody in the Dovecot community with edit access to the wiki wants to implement this change, I would be grateful on behalf of the people who try to use Procmail with Dovecot. -- If this were my real .signature, it would suck less. Well, maybe not.

1 0

connection to director (lmtp) time out
by Patrick Westenberg 16 Jun '14

16 Jun '14

Hi all, I'm running two directors with lmtp proxy as relay transport for my mail exchangers. relay_transport = lmtp:inet:dovecot-directors.example.net dovecot-directors.example.net resolves to 172.17.1.3 and 172.17.1.4 Now, .3 is down and Postfix tries to deliver it to .4 but this connection gets a timeout: (delivery temporarily suspended: connect to 172.17.1.4[172.17.1.4]:24: Connection timed out There is no log entry on the director. Can anyone give me a hint how to solve this or maybe optimize my configuration? Regards Patrick auth_mechanisms = plain login default_process_limit = 150 director_mail_servers = 172.17.1.2 director_servers = 172.17.1.4 172.17.1.3 director_user_expire = 5 mins lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.4 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 172.17.1.4 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/certs/wildcard.example.de.crt ssl_key = </etc/ssl/private/wildcard.example.de.key protocol !smtp { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } } protocol smtp { passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } } protocol lmtp { auth_socket_path = director-userdb } local 83.149.... { protocol imap { ssl_cert = </etc/ssl/certs/wildcard.example.de.pem ssl_key = </etc/ssl/private/wildcard.example.de.key } } local 83.149... { protocol pop3 { ssl_cert = </etc/ssl/certs/wildcard.example.de.pem ssl_key = </etc/ssl/private/wildcard.example.de.key } } local [2001:1af8:...] { protocol imap { ssl_cert = </etc/ssl/certs/wildcard.example.de.pem ssl_key = </etc/ssl/private/wildcard.example.de.key } } local [2001:1af8:...] { protocol pop3 { ssl_cert = </etc/ssl/certs/wildcard.example.de.pem ssl_key = </etc/ssl/private/wildcard.example.de.key } }

1 0

[Dovecot] Pigeonhole and dsync replication not replicating 'SETACTIVE' for a sieve script
by Skeffling 16 Jun '14

16 Jun '14

Hello, I'm testing dovecot replication alongside pigeonhole and liking it. Dovecot v2.2.13 Pigeonhole v0.4.3 If I create or edit a sieve script on one server (via managesieve, using the thunderbird plugin as it happens) then it does get replicated to the other - great! However, if I set a script to be active (SETACTIVE) on one side then this is not being replicated across to the other server. Is this a known issue? Thank you! -- Andrew

2 1

[Dovecot] Outlook 2007 & 2010 hangs in v2.2?
by Timo Sirainen 15 Jun '14

15 Jun '14

Has anybody noticed Outlook 2007 & 2010 (but apparently not 2013) hanging IMAP connections with Dovecot v2.2 (but not v2.1) when they're FETCHing large mails? I can't think of any reasonable explanation for this.

7 14

Dovecot and Postfix - dovecot doesn't create sockets
by Bernd Weber 14 Jun '14

14 Jun '14

Hi, Problem: Sockets /var/spool/postfix/private/auth and /var/spool/postfix/private/dovecot-lmtp are not created The only error message I get comes from postfix: no auth (SASL) founhd. Takes np wonder, the s ockets don't exist. Any help is welcome. Thanks. Bernd doveconf: # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.11.10-11-default x86_64 openSUSE 13.1 (x86_64) ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = yes auth_debug_passwords = yes auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = /var/run/dovecot/auth-client auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot/ config_cache_size = 1 M debug_log_path = /var/log/dovecot.log default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ LISTEN_PID LISTEN_FDS info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot zu Diensten. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = yes mail_fsync = optimized mail_full_filesystem_access = no mail_gid = vmail mail_home = mail_location = maildir:/var/vmail/%d/%n:LAYOUT=fs mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot/modules mail_plugins = mail_prefetch_count = 0 mail_privileged_group = vmail mail_save_crlf = no mail_shared_explicit_inbox = yes mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = vmail mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Junk { auto = no special_use = \Junk } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = deny = no driver = sql master = no override_fields = pass = no } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = bweber(a)casasky.com protocols = imap pop3 lmtp sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 12 hours replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = postfix mode = 0666 user = postfix } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vmail vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = required ssl_ca = ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/private/dovecot.pem ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail valid_chroot_dirs = verbose_proctitle = no verbose_ssl = yes version_ignore = no postconf 2bounce_notice_recipient = postmaster access_map_defer_code = 450 access_map_reject_code = 554 address_verify_cache_cleanup_interval = 12h address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = btree:$data_directory/verify_cache address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = ${stress?1}${stress:3} address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = $double_bounce_sender address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_sender_ttl = 0s address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_add_missing_headers = no always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = no application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = no body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = no canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = hash:/etc/postfix/canonical cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = cyrus_sasl_config_path = daemon_directory = /usr/lib/postfix daemon_table_open_error_is_fatal = no daemon_timeout = 18000s data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_failed_cohort_limit = 1 default_destination_concurrency_limit = 20 default_destination_concurrency_negative_feedback = 1 default_destination_concurrency_positive_feedback = 1 default_destination_rate_delay = 0s default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_filter_nexthop = default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 20000 default_recipient_refill_delay = 5s default_recipient_refill_limit = 100 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 1h deliver_lock_attempts = 20 deliver_lock_delay = 1s destination_concurrency_feedback_debug = no detect_8bit_encoding_header = yes disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = yes dnsblog_reply_delay = 0s dnsblog_service_name = dnsblog dont_remove = 0 double_bounce_sender = double-bounce duplicate_filter_limit = 1000 empty_address_default_transport_maps_lookup_key = <> empty_address_recipient = MAILER-DAEMON empty_address_relayhost_maps_lookup_key = <> enable_long_queue_ids = no enable_original_recipient = yes error_delivery_slot_cost = $default_delivery_slot_cost error_delivery_slot_discount = $default_delivery_slot_discount error_delivery_slot_loan = $default_delivery_slot_loan error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit error_destination_concurrency_limit = $default_destination_concurrency_limit error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback error_destination_rate_delay = $default_destination_rate_delay error_destination_recipient_limit = $default_destination_recipient_limit error_extra_recipient_limit = $default_extra_recipient_limit error_initial_destination_concurrency = $initial_destination_concurrency error_minimum_delivery_slots = $default_minimum_delivery_slots error_notice_recipient = postmaster error_recipient_limit = $default_recipient_limit error_recipient_refill_delay = $default_recipient_refill_delay error_recipient_refill_limit = $default_recipient_refill_limit error_service_name = error execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = hopcount_limit = 50 html_directory = /usr/share/doc/packages/postfix-doc/html ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = all inet_protocols = all initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 5s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmtp_address_preference = any lmtp_assume_final = no lmtp_bind_address = lmtp_bind_address6 = lmtp_body_checks = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_delivery_slot_cost = $default_delivery_slot_cost lmtp_delivery_slot_discount = $default_delivery_slot_discount lmtp_delivery_slot_loan = $default_delivery_slot_loan lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback lmtp_destination_rate_delay = $default_destination_rate_delay lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_dns_resolver_options = lmtp_enforce_tls = no lmtp_extra_recipient_limit = $default_extra_recipient_limit lmtp_generic_maps = lmtp_header_checks = lmtp_host_lookup = dns lmtp_initial_destination_concurrency = $initial_destination_concurrency lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 998 lmtp_mail_timeout = 300s lmtp_mime_header_checks = lmtp_minimum_delivery_slots = $default_minimum_delivery_slots lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_nested_header_checks = lmtp_per_record_deadline = no lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_maps = lmtp_pix_workaround_threshold_time = 500s lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_recipient_limit = $default_recipient_limit lmtp_recipient_refill_delay = $default_recipient_refill_delay lmtp_recipient_refill_limit = $default_recipient_refill_limit lmtp_reply_filter = lmtp_rset_timeout = 20s lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_dummy_mail_auth = no lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_skip_quit_response = no lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_block_early_mail_reply = no lmtp_tls_cert_file = lmtp_tls_ciphers = export lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_eccert_file = lmtp_tls_eckey_file = $lmtp_tls_eccert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_fingerprint_cert_match = lmtp_tls_fingerprint_digest = md5 lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = !SSLv2 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_protocols = !SSLv2 lmtp_tls_scert_verifydepth = 9 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_delivery_slot_cost = $default_delivery_slot_cost local_delivery_slot_discount = $default_delivery_slot_discount local_delivery_slot_loan = $default_delivery_slot_loan local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit local_destination_concurrency_limit = 2 local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback local_destination_rate_delay = $default_destination_rate_delay local_destination_recipient_limit = 1 local_extra_recipient_limit = $default_extra_recipient_limit local_header_rewrite_clients = permit_inet_interfaces local_initial_destination_concurrency = $initial_destination_concurrency local_minimum_delivery_slots = $default_minimum_delivery_slots local_recipient_limit = $default_recipient_limit local_recipient_maps = $virtual_mailbox_maps local_recipient_refill_delay = $default_recipient_refill_delay local_recipient_refill_limit = $default_recipient_refill_limit local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20130203 mail_spool_directory = /var/mail mail_version = 2.9.6 mailbox_command = mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 51200000 mailbox_transport = mailbox_transport_maps = mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = root master_service_disable = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 2000000 message_strip_characters = \0 milter_command_timeout = 30s milter_connect_macros = j {daemon_name} v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_end_of_header_macros = i milter_header_checks = milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer} milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer} milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 300s multi_instance_directories = multi_instance_enable = no multi_instance_group = multi_instance_name = multi_instance_wrapper = multi_recipient_bounce_reject_code = 550 mydestination = $myhostname, localhost.$mydomain mydomain = localdomain myhostname = linux.local mynetworks = 127.0.0.0/8 85.214.148.246/32 [::1]/128 [fe80::]/64 mynetworks_style = subnet myorigin = $mydomain nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = yes parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 postmulti_control_commands = reload flush postmulti_start_commands = start postmulti_stop_commands = stop abort drain quick-stop postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_bare_newline_ttl = 30d postscreen_blacklist_action = ignore postscreen_cache_cleanup_interval = 12h postscreen_cache_map = btree:$data_directory/postscreen_cache postscreen_cache_retention_time = 7d postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit postscreen_command_count_limit = 20 postscreen_command_filter = postscreen_command_time_limit = ${stress?10}${stress:300}s postscreen_disable_vrfy_command = $disable_vrfy_command postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords postscreen_dnsbl_action = ignore postscreen_dnsbl_reply_map = postscreen_dnsbl_sites = postscreen_dnsbl_threshold = 1 postscreen_dnsbl_ttl = 1h postscreen_enforce_tls = $smtpd_enforce_tls postscreen_expansion_filter = $smtpd_expansion_filter postscreen_forbidden_commands = $smtpd_forbidden_commands postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = ${stress?2}${stress:6}s postscreen_helo_required = $smtpd_helo_required postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = no postscreen_non_smtp_command_ttl = 30d postscreen_pipelining_action = enforce postscreen_pipelining_enable = no postscreen_pipelining_ttl = 30d postscreen_post_queue_limit = $default_process_limit postscreen_pre_queue_limit = $default_process_limit postscreen_reject_footer = $smtpd_reject_footer postscreen_tls_security_level = $smtpd_tls_security_level postscreen_use_tls = $smtpd_use_tls postscreen_watchdog_timeout = 10s postscreen_whitelist_interfaces = static:all prepend_delivered_header = command, file, forward process_id_directory = pid propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map proxymap_service_name = proxymap proxywrite_service_name = proxywrite qmgr_clog_warn_time = 300s qmgr_daemon_timeout = 1000s qmgr_fudge_factor = 100 qmgr_ipc_timeout = 60s qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_client_port_logging = no qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 300s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = reject_code = 554 reject_tempfail_action = defer_if_permit relay_clientcerts = relay_delivery_slot_cost = $default_delivery_slot_cost relay_delivery_slot_discount = $default_delivery_slot_discount relay_delivery_slot_loan = $default_delivery_slot_loan relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback relay_destination_rate_delay = $default_destination_rate_delay relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = $mydestination relay_domains_reject_code = 554 relay_extra_recipient_limit = $default_extra_recipient_limit relay_initial_destination_concurrency = $initial_destination_concurrency relay_minimum_delivery_slots = $default_minimum_delivery_slots relay_recipient_limit = $default_recipient_limit relay_recipient_maps = relay_recipient_refill_delay = $default_recipient_refill_delay relay_recipient_refill_limit = $default_recipient_refill_limit relay_transport = relay relayhost = relocated_maps = hash:/etc/postfix/relocated remote_header_rewrite_domain = require_home_directory = no reset_owner_alias = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no retry_delivery_slot_cost = $default_delivery_slot_cost retry_delivery_slot_discount = $default_delivery_slot_discount retry_delivery_slot_loan = $default_delivery_slot_loan retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit retry_destination_concurrency_limit = $default_destination_concurrency_limit retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback retry_destination_rate_delay = $default_destination_rate_delay retry_destination_recipient_limit = $default_destination_recipient_limit retry_extra_recipient_limit = $default_extra_recipient_limit retry_initial_destination_concurrency = $initial_destination_concurrency retry_minimum_delivery_slots = $default_minimum_delivery_slots retry_recipient_limit = $default_recipient_limit retry_recipient_refill_delay = $default_recipient_refill_delay retry_recipient_refill_limit = $default_recipient_refill_limit rewrite_service_name = rewrite sample_directory = /usr/share/doc/packages/postfix-doc/samples send_cyrus_sasl_authzid = no sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = hash:/etc/postfix/sender_canonical sender_dependent_default_transport_maps = sender_dependent_relayhost_maps = sendmail_fix_line_endings = always sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = maildrop show_user_unknown_table_name = yes showq_service_name = showq smtp_address_preference = any smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_body_checks = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_delivery_slot_cost = $default_delivery_slot_cost smtp_delivery_slot_discount = $default_delivery_slot_discount smtp_delivery_slot_loan = $default_delivery_slot_loan smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback smtp_destination_rate_delay = $default_destination_rate_delay smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_dns_resolver_options = smtp_enforce_tls = no smtp_extra_recipient_limit = $default_extra_recipient_limit smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_header_checks = smtp_helo_name = $myhostname smtp_helo_timeout = 300s smtp_host_lookup = dns smtp_initial_destination_concurrency = $initial_destination_concurrency smtp_line_length_limit = 998 smtp_mail_timeout = 300s smtp_mime_header_checks = smtp_minimum_delivery_slots = $default_minimum_delivery_slots smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_nested_header_checks = smtp_never_send_ehlo = no smtp_per_record_deadline = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_maps = smtp_pix_workaround_threshold_time = 500s smtp_pix_workarounds = disable_esmtp,delay_dotcrlf smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_recipient_limit = $default_recipient_limit smtp_recipient_refill_delay = $default_recipient_refill_delay smtp_recipient_refill_limit = $default_recipient_refill_limit smtp_reply_filter = smtp_rset_timeout = 20s smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = noplaintext, noanonymous smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_dummy_mail_auth = no smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_block_early_mail_reply = no smtp_tls_cert_file = smtp_tls_ciphers = export smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_eccert_file = smtp_tls_eckey_file = $smtp_tls_eccert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_fingerprint_cert_match = smtp_tls_fingerprint_digest = md5 smtp_tls_key_file = smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = !SSLv2 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_protocols = !SSLv2 smtp_tls_scert_verifydepth = 9 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_verify_cert_match = hostname smtp_use_tls = no smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_port_logging = no smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = smtpd_command_filter = smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_helo_required = no smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = ${stress?1}${stress:100} smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_per_record_deadline = ${stress?yes}${stress:no} smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_options = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_reject_footer = smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_restriction_classes = smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = smtpd_sender_restrictions = hash:/etc/postfix/access smtpd_service_name = smtpd smtpd_soft_error_limit = 10 smtpd_starttls_timeout = ${stress?10}${stress:300}s smtpd_timeout = ${stress?10}${stress:300}s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = no smtpd_tls_ccert_verifydepth = 9 smtpd_tls_cert_file = smtpd_tls_ciphers = export smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_eccert_file = smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mailbox_ownership = yes strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name} tcp_windowsize = 0 tls_append_default_CA = no tls_daemon_random_bytes = 32 tls_disable_workarounds = tls_eecdh_strong_curve = prime256v1 tls_eecdh_ultra_curve = secp384r1 tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH tls_legacy_public_key_fingerprints = no tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH tls_null_cipherlist = eNULL:!aNULL tls_preempt_cipherlist = no tls_random_bytes = 32 tls_random_exchange_name = ${data_directory}/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom tlsproxy_enforce_tls = $smtpd_enforce_tls tlsproxy_service_name = tlsproxy tlsproxy_tls_CAfile = $smtpd_tls_CAfile tlsproxy_tls_CApath = $smtpd_tls_CApath tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth tlsproxy_tls_cert_file = $smtpd_tls_cert_file tlsproxy_tls_ciphers = $smtpd_tls_ciphers tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest tlsproxy_tls_key_file = $smtpd_tls_key_file tlsproxy_tls_loglevel = $smtpd_tls_loglevel tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols tlsproxy_tls_protocols = $smtpd_tls_protocols tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert tlsproxy_tls_security_level = $smtpd_tls_security_level tlsproxy_tls_session_cache_timeout = $smtpd_tls_session_cache_timeout tlsproxy_use_tls = $smtpd_use_tls tlsproxy_watchdog_timeout = 10s trace_service_name = trace transport_maps = hash:/etc/postfix/transport transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = unknown_address_reject_code = 450 unknown_address_tempfail_action = $reject_tempfail_action unknown_client_reject_code = 450 unknown_helo_hostname_tempfail_action = $reject_tempfail_action unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_defer_code = 450 unverified_recipient_reject_code = 450 unverified_recipient_reject_reason = unverified_recipient_tempfail_action = $reject_tempfail_action unverified_sender_defer_code = 450 unverified_sender_reject_code = 450 unverified_sender_reject_reason = unverified_sender_tempfail_action = $reject_tempfail_action verp_delimiter_filter = -=+ virtual_alias_domains = hash:/etc/postfix/virtual virtual_alias_expansion_limit = 1000 virtual_alias_maps = mysql:/etc/postfix/virtmysql/mysql-aliases.cf virtual_alias_recursion_limit = 1000 virtual_delivery_slot_cost = $default_delivery_slot_cost virtual_delivery_slot_discount = $default_delivery_slot_discount virtual_delivery_slot_loan = $default_delivery_slot_loan virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback virtual_destination_rate_delay = $default_destination_rate_delay virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_extra_recipient_limit = $default_extra_recipient_limit virtual_gid_maps = virtual_initial_destination_concurrency = $initial_destination_concurrency virtual_mailbox_base = virtual_mailbox_domains = mysql:/etc/postfix/virtmysql/mysql-domains.cf virtual_mailbox_limit = 51200000 virtual_mailbox_limit_inbox = no virtual_mailbox_limit_maps = virtual_mailbox_limit_override = no virtual_mailbox_lock = fcntl, dotlock virtual_mailbox_maps = mysql:/etc/postfix/virtmysql/mysql-maps.cf virtual_maildir_extended = no virtual_maildir_filter = no virtual_maildir_filter_maps = virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later. virtual_maildir_limit_message_maps = virtual_maildir_suffix = virtual_minimum_delivery_slots = $default_minimum_delivery_slots virtual_minimum_uid = 100 virtual_overquota_bounce = no virtual_recipient_limit = $default_recipient_limit virtual_recipient_refill_delay = $default_recipient_refill_delay virtual_recipient_refill_limit = $default_recipient_refill_limit virtual_transport = lmtp:unix:private/dovecot-lmtp virtual_trash_count = no virtual_trash_name = .Trash virtual_uid_maps =

3 7

[Dovecot] doveadm index - Bug or expected behaviour?
by Bruno Galindro da Costa 13 Jun '14

13 Jun '14

My ldap config is using the variable %d in base search for domain replacement when dovecot will search for users in LDAP. Its works fine for dovecot operation. But, for doveadm index, not. It ignores that variable and tries to pass a base search without domain. So, the search will not working. This is the command: # doveadm -v index -A INBOX This is my config: # cat /etc/dovecot/dovecot-ldap-userdb.conf hosts = 10.0.0.1 tls = no auth_bind = no ldap_version = 3 base = ou=%d,ou=mail,ou=services,dc=domain scope = subtree deref = never user_filter = (& (cn=%n)(objectclass=nisMailAlias)(ContaAtiva=TRUE) ) user_attrs = cn=rfc822mailmember,EmailQuota=quota_rule=*:storage=%$M,EmailQuotaSpecial=quota_rule=*:storage=%$M,eduPersonPrincipalName=eppn iterate_filter = (&(objectclass=nisMailAlias)(ContaAtiva=TRUE)(!(EmailQuota=0))) iterate_attrs = rfc822mailmember=user This is the error reported by doveadm index: doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users If you put a tcpdump to monitor the search, you i'll see 3 packets. The first is the LDAP searchRequest message, with this content: LDAPMessage searchRequest(3) "*ou=,*ou=mail,ou=services,dc=domain" wholeSubtree If I change the base parameter of config file to this, it works perfectly: base = ou=net.domain,ou=mail,ou=services,dc=domain tcpdump: LDAPMessage searchRequest(3) "*ou=**net.domain**,*ou=mail,ou=services,dc=domain" wholeSubtree # dovecot -n # 2.2.13 (5c877bca95e5): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-63-virtual x86_64 Ubuntu 12.04.4 LTS zfs auth_cache_negative_ttl = 1 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@~ disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = mail mail_home = /var/mail/mailboxes/%d/%n/home mail_location = maildir:/var/mail/mailboxes/%d/%n:INDEX=/var/mail.indexes/%d/%n mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = prefix = type = private } namespace spam { list = yes location = maildir:/var/mail.spam/%d/%n mailbox Filtrados { auto = subscribe } prefix = SPAM. subscriptions = yes type = private } passdb { args = /etc/dovecot/passdb.v3.1.sh driver = checkpassword } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mailbox_create mail_log_fields = uid box msgid from subject size vsize quota = maildir:DefaultQuota quota_exceeded_message = O destinatario desta mensagem esta com a caixa postal cheia. A sua mensagem so pode ser entregue se o destinatario apagar algumas das mensagens. quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95 %u quota_warning2 = storage=90%% /usr/local/bin/quota-warning.sh 90 %u sieve = /var/mail/sieve_scripts/%d/%n/.dovecot.sieve sieve_after = /etc/dovecot/sieve/default.sieve sieve_dir = /var/mail/sieve_scripts/%d/%n/sieve sieve_global_dir = /etc/dovecot/sieve sieve_global_path = /etc/dovecot/sieve/default.sieve trash = /etc/dovecot/dovecot-trash.conf } protocols = imap sieve pop3 service anvil { client_limit = 1603 } service auth { client_limit = 1600 unix_listener auth-client { mode = 0660 } unix_listener auth-master { group = mail mode = 0600 user = vmail } user = root vsz_limit = 256 M } service imap-login { client_limit = 1500 inet_listener imap { address = *,[::] port = 143 } inet_listener imaps { address = *,[::] port = 993 } process_limit = 500 service_count = 0 user = dovecot vsz_limit = 256 M } service imap { process_limit = 2048 vsz_limit = 450 M } service managesieve-login { client_limit = 1500 executable = /usr/lib/dovecot/managesieve-login process_limit = 500 service_count = 0 user = dovecot vsz_limit = 256 M } service managesieve { executable = /usr/lib/dovecot/managesieve process_limit = 2048 vsz_limit = 450 M } service pop3-login { client_limit = 1500 inet_listener pop3s { address = *,[::] port = 2221 } process_limit = 500 service_count = 0 user = dovecot vsz_limit = 256 M } service pop3 { process_limit = 2048 vsz_limit = 450 M } userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } protocol imap { mail_fsync = never mail_max_userip_connections = 2048 mail_plugins = quota imap_quota trash zlib mail_log notify ssl_ca = </etc/dovecot/ca.crt ssl_cert = </etc/dovecot/domain.crt ssl_key = </etc/dovecot/domain.key } protocol pop3 { mail_fsync = never mail_plugins = quota pop3_uidl_format = %08Xu%08Xv ssl_ca = </etc/dovecot/ca.crt ssl_cert = </etc/dovecot/domain.crt ssl_key = </etc/dovecot/domain.key } protocol sieve { managesieve_implementation_string = Cyrus timsieved v2.2.13 managesieve_logout_format = bytes=%i/%o ssl_ca = </etc/dovecot/ca.crt ssl_cert = </etc/dovecot/domain.crt ssl_key = </etc/dovecot/domain.key } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_fsync = optimized mail_plugins = quota sieve expire postmaster_address = admin@domain } -- Att. Bruno Galindro da Costa

2 2

Subject tag [Dovecot] is gone
by Timo Sirainen 13 Jun '14

13 Jun '14

I've actually been thinking about it almost since the beginning. It's just been annoying waste of space on my screen. And more importantly nowadays it's also breaking DKIM/DMARC signatures. So if somebody still uses Subject-based filtering it's about time to switch to List-ID header based filtering now. Another thing I'm wondering about is if I should allow text/html parts, because removing them will also break the DKIM signatures. Or mainly I'd like to allow only multipart/alternative with text/plain + text/html, but I don't think I can configure Mailman to support that.

15 28

display SSL version?
by Zube 13 Jun '14

13 Jun '14

Sorry for the bother, but is there any way to poke or prod or query dovecot so that it will reveal what version of SSL it is currently using? dovecot --build-options tells me that openssl is there, but not the version. ldd on any of the binaries in libexec comes up empty. I can get the version and what directory it is looking at by: strings ssl-params | grep -i ssl but that is kludgy. CentOS 5, dovecot 2.2.13. Thanks for any help. Cheers, Zube

4 9

A solution : dsync(someuser) Error: Mailbox GUIDs are not permanent without index files
by James Rogers 12 Jun '14

12 Jun '14

While migrating from mbox to maildir using dsync, I kept running into a brick wall. Some folders would not sync. The message in stderr was: Error message GUID: Mailbox GUIDs are not permanent without index files. This is what solved things for me. I hope this might help someone. Let me know if I'm completely off sides. When working with dsync to migrate from mbox to maildir format mailboxes, I kept running into the error: dsync(someuser): Error: Couldn't get mailbox Drafts GUID: Mailbox GUIDs are not permanent without index files dsync(someuser): Error: Couldn't get mailbox Junk E-mail1 GUID: Mailbox GUIDs are not permanent without index files dsync(soemuser): Error: Couldn't get mailbox TO DO LATER - US GUID: Mailbox GUIDs are not permanent without index files dsync(someuser): Error: Couldn't get mailbox Notes GUID: Mailbox GUIDs are not permanent without index files dsync(someuser): Error: Couldn't get mailbox Orders Pending GUID: Mailbox GUIDs are not permanent without index files dsync(someuser): Error: Couldn't get mailbox Junk E-mail GUID: Mailbox GUIDs are not permanent without index files dsync(someuser): Error: Couldn't get mailbox Server Mgmt+Config GUID: Mailbox GUIDs are not permanent without index files The error messages were helpful, but it would be nice to know what prevented the creation of the indexes in the errors (permissions, settings, disk space, etc.). I finally figured it out semi-randomly when I dumped my doveconf file using doveconf -n, and saw: mbox_min_index_size = 100 k I felt very um... happy? And not too bright. The following made my problems go away, and the sync worked flawlessly. mbox_min_index_size = 0 I guess it's best to set this using dsync -o'mbox_min_index_size=0' Mail now converts quickly and completely even for 0 length mailboxes (i.e. empty folders are created). Also, I would like to note that mb2md.pl should not be used to convert mbox to maildir. The regex used to split mboxes will fragment messages. mb2md.pl uses: if ( /^From / And in the very least, the following would be less harmful: if ( /^From\s+(\S+.*(a)\S+.*|MAILER.DAEMON)\s+.*$/ I love dovecot. I knew it must be something bone-headed I just wasn't seeing. And now I can go get some rest. --James W. Rogers

1 0

lazy_expunge mangles dovecot-acl-list
by Christoph Bußenius 12 Jun '14

12 Jun '14

Hi, I think I found a bug in Dovecot 2.1.17 and 2.2.13. In our setup, sometimes ACLs stop working because "dovecot-acl-list" is replaced by an empty file. We found that lazy_expunge is connected to this. To reproduce, create ACLs for "user1" in a folder. Put a mail in that folder and expunge it, so that the folder will be created in the "expunged" namespace. For instance, # cat user1/mail/mailboxes/folder/dbox-Mails/dovecot-acl user=user2 keilrwts # cat user1/mail/dovecot-acl-list 1350914868 folder # doveadm -f flow fetch -u "user1" 'guid' mailbox _EXPUNGED.\* # ls -l user1/mail/dovecot-acl-list -rw------- 1 vmail vmail 0 2014-06-12 11:40 user1/mail/dovecot-acl-list You see that we have used doveadm to list the expunged namespace, which has emptied the "dovecot-acl-list" file. Cheers, Christoph # 2.2.13: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-57-server x86_64 Ubuntu 10.04.4 LTS disable_plaintext_auth = no mail_gid = vmail mail_location = mdbox:~/mail mail_plugins = acl mail_uid = vmail namespace { inbox = no list = children location = mdbox:%%h/mail prefix = INBOX.shared.%%u. separator = . subscriptions = no type = shared } namespace default { inbox = yes location = prefix = INBOX. separator = . type = private } namespace expunged { hidden = yes list = no location = mdbox:~/mail:MAILBOXDIR=expunged:SUBSCRIPTIONS=expunged-subscriptions prefix = _EXPUNGED. separator = . subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /usr/local/dovecot/etc/dovecot/users driver = passwd-file } plugin { acl = vfile acl_shared_dict = file:/mail/shared-mailboxes lazy_expunge = _EXPUNGED. } protocols = imap pop3 service auth { unix_listener auth-userdb { group = vmail mode = 0660 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/local/dovecot/etc/dovecot/users driver = passwd-file } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = acl imap_acl acl } -- Christoph Bußenius Rechnerbetriebsgruppe Informatik und Mathematik Technische Universität München

2 2

Parse dovecot 2.2 logs with logstash
by Bruno Galindro da Costa 12 Jun '14

12 Jun '14

Guys, I need to parse my dovecot log files with logstash grok patterns. Is there any document specifying the patterns used by dovecot to write it's logs? I need to find all the log possibilities that could be writed to log files by dovecot. So, if a document like that exists or if anyone could answer my question, I'll could make the parser with less difficult. -- Att. Bruno Galindro da Costa

3 3

Problems with dsync and global acls
by Michał Węgrzynek 12 Jun '14

12 Jun '14

Hi all! I have 2 servers running dsync tcp replication between them. After setting global ACLs to * user=admin lrwstipekxa on both hosts, I get the following errors during replication for every folder: dsync-local(mwegrzynek): Error: Mailbox Trash: Failed to set attribute vendor/vendor.dovecot/pvt/acl/user=admin: Invalid right '' This error first manifested in version 2.2.13, there were no such errors in 2.2.9 (stock Ubuntu 14.04) version. Am I doing something wrong? My configuration: # 2.2.13.3 (6dab0352ccb3+): /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-29-generic x86_64 Ubuntu 14.04 LTS ext4 auth_cache_size = 10 M auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/krb5.keytab auth_master_user_separator = * auth_mechanisms = plain login gssapi auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@() auth_username_format = %Ln auth_verbose = yes default_client_limit = 10000 default_process_limit = 1000 default_vsz_limit = 2 G doveadm_port = 12345 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_rcpt_check_quota = yes lmtp_save_to_detail_mailbox = yes mail_gid = vmail mail_home = /var/mail/users/%u mail_location = mdbox:/var/mail/users/%u/mdbox mail_plugins = acl quota virtual zlib listescape fts fts_squat notify replication mail_prefetch_count = 20 mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mdbox_preallocate_space = yes namespace dzielone { list = children location = mdbox:%%h/mdbox:INDEXPVT=~/shared/%%u prefix = Dzielone/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace publiczne { list = children location = mdbox:/var/mail/public:INDEXPVT=~/public prefix = Publiczne/ separator = / subscriptions = no type = public } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.passdb.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/var/mail/config/shared-mailboxes fts = squat fts_squat = partial=4 full=10 mail_replica = tcps:xxx.yyy.zzz quota = dict:User quota::file:%h/dovecot-quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } pop3_uidl_format = %v.%u protocols = imap pop3 lmtp sieve quota_full_tempfail = yes replication_dsync_parameters = -d -l 60 -n inbox -U service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } service doveadm { inet_listener { port = 12345 ssl = yes } process_limit = 10 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/xxx.pem ssl_cert = </etc/ssl/certs/default.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_client_ca_file = /etc/ssl/certs/xxx.pem ssl_key = </etc/ssl/private/default.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.userdb.ext driver = ldap } protocol lmtp { mail_plugins = acl quota virtual zlib listescape fts fts_squat notify replication sieve } protocol lda { mail_plugins = acl quota virtual zlib listescape fts fts_squat notify replication sieve } protocol imap { mail_plugins = acl quota virtual zlib listescape fts fts_squat notify replication imap_acl imap_zlib imap_quota } Thanks in advance for your help, -- *Michał Węgrzynek*

1 0

Converting mailboxes from one Maildir format to another
by Patrick C 12 Jun '14

12 Jun '14

I am currently running dovecot 2.0.9 on a CentOS 6 server with the following layout for mailboxes: mail_location = maildir:~/Maildir I would like to change the layout to this format to match the output of other software packages such as offlineimap, mbsync, etc: mail_location = maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX Is there a way to convert the mailbox layout for all mail accounts currently on the server? I was looking at dsync, but there aren't any Maildir <--> Maildir examples. I was also looking at potentially writing a script to manually rename directories/move files around to match the new format, but wasn't sure whether that would mess with UIDs or other dovecot internals. pat patrickc81(a)gmail.com

2 1

Maildir index
by Eduardo Ramos 11 Jun '14

11 Jun '14

Hi all! I store my maildir mailboxes in a ocfs2 volume. By default, my indexes are stored with the inbox. If I change now to a local disk, could I have trouble? That's my production server. Thanks!

1 0

Safe to downgrade 2.2 to 2.1?
by Florian Tischler 11 Jun '14

11 Jun '14

Hi, is it safe to downgrade Dovecot 2.2 to 2.1 (in my case 2.2.13 to 2.1.17 with mdbox format) or will there be troubles with index files and backup/restore is recommended? Unfortunately with 2.2+ it is not to be possible to use acl + lazy_expunge together anymore, so downgrading is the only option for me... @Timo, please fix acl + lazy_expunge in 2.2 if you find some time. Florian -- Florian Tischler System Administrator *Johann Radon Institute for Computational and Applied Mathematics (RICAM) http://www.ricam.oeaw.ac.at/

1 0

Change index location problem
by igord 11 Jun '14

11 Jun '14

Hi All, I was unable to change location of Dovecot indexes. Currently they are under /var/vmail/%d/%u, but I want to change them to /media/ephemeral0/%u I've changed conf line in /etc/dovecot/dovecot.conf: mail_location = maildir:/var/vmail/%d/%u:INDEX=/media/ephemeral0/%u and setup permissions of /media/ephemeral0 to dovecot:dovecot, tried also vmail:mail (which is default user for e-mails) and also tried with 777 on all dirs, but Dovecot is keeping creating indexes on the old location. I tried moving them from old to new location, but Dovecot recreates them on the old location. Details: # dovecot --version 2.0.9 # doveconf -a | grep location mail_location = maildir:/var/vmail/%d/%u:INDEX=/media/ephemeral0/%u Has anyone experienced something similar, any solution for this? Thanks in advance! -- View this message in context: http://dovecot.2317879.n4.nabble.com/Change-index-location-problem-tp48468.… Sent from the Dovecot mailing list archive at Nabble.com.

2 4

Re: Subject tag [Dovecot] is gone
by Professa Dementia 11 Jun '14

11 Jun '14

On 6/9/2014 7:26 PM, Timo Sirainen wrote: > The main reason is DKIM, which is starting to be a real problem. I have not used DKIM much. My mail server and client mostly deal with SPF. I have a filter that colorizes messages that have no SPF or a missing DKIM or bad DKIM signature. I *have* noticed that a lot of messages from the list get marked in such manner, but it never really bothered me and I never thought about it much. Now I understand why that happens (the [Dovecot] identifier in the subject). When trying to solve a problem, the first thing is to correctly identify the problem. You cannot solve a problem if you do not even know what it is. The underlying problem is to identify and classify emails as ones you want and ones you do not want. This is not easy and involves reading a person's mind. A person may, depending on their mood, classify the same email differently at different times, which complicates things. DKIM assumes that you can, in many cases, classify emails this way based on authenticating the *domain* of the sender. This has some serious flaws in that it does not address this issue, even though it purports to. One way to classify an email as "wanted" is if it comes from someone you know and want to communicate with. Signing based on a domain does nothing to address this. If my girlfriend is judy(a)yahoo.com, I want to receive her emails. That does not means I want to receive all emails from the yahoo.com domain. I do not want someone else to impersonate her. If later, we break up and I no longer want to receive her emails, DKIM does nothing to help with that, either. That could be OK if such functionality is beyond its scope. DKIM erroneously bundles sender authentication with message validation. I want to know that it really was judy(a)yahoo.com that sent me the message and not someone trying to impersonate her. However, as a separate function, I would like to know that the message I received is not the one she sent. These functions should not be integrated. As it is now, if the signature does not verify, I do not know why. Was the sender spoofed? Was some part of the message modified in some way? And just for the record, I believe that the subject line should conceptually be treated as part of the message, along with the date. DKIM is too strict. If I want to present a legal document (email) in court, I may want to prove that the document I present to the court is exactly as it was when it was sent to me. However, this is not a common occurrence. The real world is messy and imperfect and often, changes to emails are innocuous and legitimate. Mailing lists are an example of this. A mailing list or anti-virus scanner *should* be able to add a footer or add a mailing list identifier to the subject line, as long as those changes can be marked as later additions that the original sender is not accountable for. An email program should make it clear to the recipient which parts are not accountable to the original sender. I am not proposing a new standard, simply pointing out that breaking an established protocol (by removing the [Dovecot] subject identifier) because of a flawed anti-spam system is not in people's best interest. Can a spammer spoof messages from the list? Sure. Has it happened? Not that I am aware of. Is it a problem? Not so far. So why, then, make people go through all this trouble of setting up new filters and rules, mail routing, software upgrades, etc, just to appease a standard that is clearly broken? Dem

5 4

replication with plugin won´t work
by Florian Schaal 11 Jun '14

11 Jun '14

Hi all, i try to setup a master-master replication with dovecot / dsync. I´m using virtual-users. When I call doveadm sync -A remote:vmail@server2 new mails are copied to the second server, but new messages from server 2 not on Server 1. To fix this i run doveadm sync -A remote:vmail@server on the 2nd server But I want that it works with dovecot / dsync (see my config at the end - identical on bot servers, only mail_replica is different). I added some services regarding http://wiki2.dovecot.org/Replication If i send a local mail on one server it will not be replicated to the other server until i run doveadm sync. Maybe i just missed some steps in my setup? doveadm user '*' displays the right users on both servers. === docecot.conf === # 2.2.13 (7b25994a8cb7): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab076.8 x86_64 Debian 7.5 auth_mechanisms = plain login ntlm disable_plaintext_auth = no dsync_remote_cmd = ssh -p 4711 -l%{login} %{host} doveadm dsync -u%u listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_plugins = " notify replication" mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@server2 quota = dict:user::file:/var/vmail/%d/%n/.quotausage replication_full_sync_interval = 1 hours sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service imap-login { client_limit = 1000 process_limit = 500 } service replicator { process_min_avail = 1 } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } === docecot.conf === regards Florian

1 0

[Dovecot] Can't get authentication for masterusers on Mac OS X Server 10.6.8
by Gilles Celli 11 Jun '14

11 Jun '14

Hi dovecot masters, This is my first post here, since I desperately need some advices from the dovecot community. I've tried to get an answer on the Apple Forums but til now no luck....here we go: I've tried to sync our users emails (Mac OS X Server 10.6.8 Snow Leopard with dovecot 1.1.20-apple0.5) via imapsync to our new server by using the masterusers authentication method on the old 10.6.8 server... The main problem on OS X Server 10.6.8 is that dovecot 1.1.20 uses the OD (OpenDirectory) driver (well I think), so that when following the directions of Master users/password from this page I can't login with the http://wiki1.dovecot.org/Authentication/MasterUsers I couldn't find anything on the OD driver directive....the dovecot 1.1.20-apple build doesn't even have the shadow driver built in (see below the dovecot --build-options), so that passdb shadow {} won't work anyway I always get NO Authentication failed, when trying the following: >telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK Dovecot ready. 1 login user1*mailadmin PASSWORD 1 NO Authentication failed. I've tried also to add a Post-login scripting like described here, but no luck either: http://www.stefanux.de/wiki/doku.php/server/dovecot Does someone know how to fix my migration issue ? Any help is greatly appreciated. Gilles Here's my dovecot : >dovecotd --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl Mail storages: maildir mbox dbox cydir raw SQL drivers: Passdb: checkpassword od pam passwd passwd-file Userdb: od passwd passwd-file prefetch static Here's my dovecot -n output: >dovecotd -n # 1.1.20apple0.5: /private/etc/dovecot/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 306). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Darwin 10.8.0 i386 hfs base_dir: /var/run/dovecot syslog_facility: local6 protocols: pop3 imap pop3s imaps ssl_ca_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.chain.pem ssl_cert_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.cert.pem ssl_key_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.key.pem ssl_cipher_list: ALL:!LOW:!SSLv2:!aNULL:!ADH:!eNULL disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_user: _dovecot login_process_per_connection: no max_mail_processes: 50 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 6 first_valid_gid: 6 mail_access_groups: mail mail_location: maildir:/var/spool/imap/dovecot/mail/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_sharing: full mail_max_connections(default): 10 mail_max_connections(imap): 10 mail_max_connections(pop3): 5 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 lda: postmaster_address: postmaster(a)example.com hostname: mymailserver.example.com mail_plugins: quota quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth_socket_path: /var/run/dovecot/auth-master log_path: /var/log/mailaccess.log info_log_path: /var/log/mailaccess.log auth default: mechanisms: plain login gssapi apop cram-md5 master_user_separator: * verbose: yes passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: od userdb: driver: od args: partition=/etc/dovecot/partition_map.conf enforce_quotas=no socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: _dovecot group: mail plugin: quota_warning: storage=100%% /usr/libexec/dovecot/quota-exceeded.sh quota_warning2: storage=90%% /usr/libexec/dovecot/quota-warning.sh quota: maildir:User quota sieve: /var/spool/imap/dovecot/sieve-scripts/%u/dovecot.sieve

3 5

[Dovecot] imap-login killed with signal 11 in Dovecot 2.2.13 (feea8645c4d7)
by Thomas Leuxner 10 Jun '14

10 Jun '14

Latest 2.2.13 HG feea8645c4d7 seems to unexpectedly kill imap-login sessions: Jun 7 11:56:10 nihlus dovecot: imap(tlx(a)leuxner.net): Disconnected: Logged out in=2203 out=851225 Jun 7 11:56:10 nihlus dovecot: imap(tlx(a)leuxner.net): Disconnected: Logged out in=316 out=2417 Jun 7 11:56:10 nihlus dovecot: imap-login: Fatal: master: service(imap-login): child 60505 killed with signal 11 (core not dumped - add -D parameter to service imap-login { executable } Jun 7 11:56:10 nihlus dovecot: imap-login: Fatal: master: service(imap-login): child 60595 killed with signal 11 (core not dumped - add -D parameter to service imap-login { executable } Adding the -D parameter does not generate a core dump however...

5 7

Dovecot auth NTLM
by dovecot.lista＠palacio.cu 10 Jun '14

10 Jun '14

Hello, this is my first email to the list... i´m configuring Dovecot with NTLM authentication, at least this is what i wanted, but i´m having a few problems. 1-I made my configuration following the steps from this howto http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm from the dovecot official site, but my dovecot´s version is 2.1.7 and the tutorial dovecot´s version is 1.1.16. But, the fact is that when i enter to the wiki1, for the version 1.x i found that all the howtos are obsoletes and the tutorial for the version 1.x is the same for the 2.x version, so this howto is not trustful.... but, there is not another one. 2-When i implement it all seems to work OK, but the communication between dovecot and the helper in "/usr/bin/ntlm_auth". I made the tests with the binary(/usr/bin/ntlm_auth) and i got the right answers from it, and i also made the test with the tool wbinfo and were successful. During the tests i was monitoring the logs of my Domain Controller (The server from where i want to authenticate) and it logged all the requests i made however when i try to authenticate with dovecot in my Domain Controller nothing is written in the logs... then i get to the conclusion that Dovecot is not communicating with the helper, and of course in dovecot´s logs appears: auth: Info: winbind(?,10.10.10.10): user not authenticated: NT_STATUS_UNSUCCESSFUL As i said, my friends, there is no any other tutorial or howto in internet, at least i did not see it. I´m asking for your help... if any of you have configured Dovecot to auth against NTLM, please tell me how. Im working on Debian Wheezy and Dovecot 2.1.7. PS:Please forgive my English i speak Spanish

1 0

Dovecot Configuration for access with GSSAPI / Kerberos
by Sandra 10 Jun '14

10 Jun '14

Hi Dovecot-Mailinglist! I try to install a new Dovecot-Server with Kerberos-Authentification (Kerberos-Server is already authenticating user-account ). The following error-notice occurs when I use mail-programm Gnome Evolution to access IMAP-Account: "Ordner konnte nicht geöffnet werden (Folder can not be opened) The reported error was "GSSAPI-Legitimation ist fehlgeschlagen". (GSSAPI-Legitimation failed) Is anybody able to help me??? Thanks in advance, Sandra Dovecot Version: 2.1.17 Configuration: auth_mechanisms = gssapi auth_debug = yes auth_gssapi_hostname = kerberosServer.domain auth_realms = REALM auth_default_realm = REALM auth_krb5_keytab = /etc/krb5.keytab auth_verbose = yes disable_plaintext_auth = yes userdb { driver = static args = uid=vmail gid=vmail home=/service/mailServer_Kommunikations-Server/mails/%u } mail_location = maildir:/service/mailServer_Kommunikations-Server/mails/imap/% u/:INBOX=/service/mailServer_Kommunikations-Server/mails/maildir/%u log_timestamp = "%Y-%m-%d %H:%M:%S " managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 ssl = no service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = mail } user = root } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master postmaster_address = root(a)mailServer.domain } mail_privileged_group = mail Logfile: 2014-06-09T09:59:22.596608+02:00 highlands dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth 2014-06-09T09:59:22.598243+02:00 highlands dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_mysql.so 2014-06-09T09:59:22.598559+02:00 highlands dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth 2014-06-09T09:59:22.600354+02:00 highlands dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libmech_gssapi.so 2014-06-09T09:59:22.600982+02:00 highlands dovecot: auth: Debug: auth client connected (pid=5770) 2014-06-09T09:59:22.602211+02:00 highlands dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011session=E7rSlmL70wDAqEWd#011lip=mailServerIP#011rip=clientIP#011lport=143#011rport=46035 2014-06-09T09:59:22.602498+02:00 highlands dovecot: auth: Debug: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): Obtaining credentials for imap(a)dartmoor.outback 2014-06-09T09:59:22.610815+02:00 highlands dovecot: auth: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): While acquiring service credentials: Unspecified GSS failure. Minor code may provide more information 2014-06-09T09:59:22.611097+02:00 highlands dovecot: auth: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): While acquiring service credentials: No key table entry found matching imap/dartmoor.outback@ 2014-06-09T09:59:24.113071+02:00 highlands dovecot: auth: Debug: client passdb out: FAIL#0111#011temp 2014-06-09T09:59:24.113818+02:00 highlands dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<>, method=GSSAPI, rip=clientIP, lip=mailServerIP, session=<E7rSlmL70wDAqEWd>

1 0