- dovecot - dovecot.org

[Dovecot] Capability dropping support patch
by David 28 Feb '07

28 Feb '07

Hi, A week ago I submitted an early patch, please ignore it. The patch attached to this email has been tested and seems to work for me. I have also attached instead of inline to solve problems with spaces/tabs. The patch will, on systems that have libcap support, drop capabilities that Dovecot doesn't need. For example there is no need for CAP_SYS_MODULE, which enables module loading or CAP_SYS_PTRACE/CAP_SYS_ADMIN/etc. If libcap isn't installed then nothing will change, this is a compile-time only enhancement that isn't configurable. Personally I did not find that CAP_SYS_CHROOT was needed in order for me to authenticate and access my mailbox, but I haven't configured anything special with chrooting (yet). I added it because I see chroot() is used in src/lib/restrict-access.c. The patch was generated against 1.0-rc24 and tested with clients imp and Thunderbird. My configuration uses a virtual passdb, requires TLS for AUTH and exports auth-master under a different account. All of this appears to work correctly. I'd appreciate any comments, perhaps this will help safeguard the 1000EUR on non-hardened systems :) David

1 0

Re: [Dovecot] Quota stored in LDAP
by Stian Jordet 27 Feb '07

27 Feb '07

On tir, 2007-02-27 at 13:12 -0300, Venilton Junior wrote: > default_mail_env = maildir:/var/lib/imap/vmail/domains/%d/%n/mail::INDEX=/var/run/dovecot/indexes/%n I don't really know, but have you checked whether the maildirsize file is in the index-location? > plugin { > convert_mail = maildir:/var/lib/imap/vmail/%d/%u/mail > #quota = maildir:storage=102400 (If I uncomment this line, quota start to work, but for everyone equally) > quota = maildir (After putting this line, all messages starts to get at the filename the ,S=) > } You don't need to have a quota line in the plugin section. > Here follows my dovecot-ldap.conf: > > user_attrs = mail,homeDirectory,,,,quotaStorage=quota And your ldap attribute is called quotaStorage? > But it's not creating the control file... should I use dirsize instead of Maildir++ ? > My quota ldap entry is: maildir:storage=102400 No, you should not use dirsize. That's terribly slow (and does for sure not make the maildirsize-file). The only thing I'm unsure of is whether your ldap attribute is called quotaStorage? You could post some debug output from the log, with debug enabled. -Stian

2 1

[Dovecot] Dovecot rc23 and rc24 freeze after authentication
by Garret Huntress 27 Feb '07

27 Feb '07

I had our production systems running on rc23, however we ran into problems when the server was under heavy load. Eventually, the server would begin to freeze all imap connection after authentication (according to the logs). A user would connect, authentication would succeed, and then the connection would sit until timing out. No error logs were produced. Upgrading to rc24 did not resolve the issue, but reverting to rc22 has. -Garret -- Garret W. Huntress System Administrator / System Developer Geophysical Laboratory Carnegie Institution of Washington 5251 Broad Branch Road, NW Washington, DC 20015 Email: ghuntress(a)ciw.edu Phone: (202)-478-8973 AIM: Garret Huntress

2 1

[Dovecot] Certs file
by Javier Henderson 27 Feb '07

27 Feb '07

I'm running 1.0rc23 on FreeBSD 6.2-RELEASE, and seeing the following: Starting dovecot. Error: Can't use SSL key file /etc/ssl/private/dovecot.pem: No such file or directory In the config file I have: ssl_cert_file=/usr/local/certs/imapd.pem Looking for dovecot.pem on the config file there's only: % grep dovecot.pem dovecot.conf #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem So the two entries referencing dovecot.pem are commented out. I removed those two lines anyway, just in case, but it didn't make a difference. What am I missing? I'd love to include the output of 'dovecot -n' but... % dovecot -n # /usr/local/etc/dovecot.conf Error: Can't use SSL key file /etc/ssl/private/dovecot.pem: No such file or directory Thanks, -jav

6 9

Re: [Dovecot] Solaris problem & exim. Please ignore it.
by Stephen Usher 27 Feb '07

27 Feb '07

Please ignore my previous question.. as it turns out it's a bug/feature of fprintf(3C) and sockets under Solaris. Exim was using fprintf to output the AUTH string and for some unknown reason it was hanging, possibly because the input buffer on the file stream wasn't empty or something. After modifying the Exim's dovecot authentication plug-in to use write(2) instead of fprintf(3C) it miraculously worked! Steve -- --------------------------------------------------------------------------- Computer Systems Administrator, E-Mail:-steve@earth.ox.ac.uk Department of Earth Sciences, Tel:- +44 (0)1865 282110 University of Oxford, Parks Road, Oxford, UK. Fax:- +44 (0)1865 272072

1 0

[Dovecot] lstats on all files in Maildir when opening an e-mail.
by Tan Shao Yi 27 Feb '07

27 Feb '07

Hi, I'm running RC19 on a Solaris 10 SPARC box. It seems that whenever I open an e-mail in any folder via IMAP, dovecot appears to scan every other folder in the Maildir. A truss reveals that it is lstat-ing every e-mail in every directory. I'm sorry I am sending only a fragment of the truss, it's really too long... but is this behaviour expected? Cheers, Tan Shao Yi lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170337156.M209211P18431V025055F0I0000DAF0_0.recess1,S=2596", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170337594.M159985P18549V025055F0I0001891B_0.recess1,S=4111", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170338379.M564254P18933V025055F0I000196A3_0.recess1,S=3630", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170344035.M859029P24106V025055F0I000198E4_0.recess1,S=4254", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170344816.M69242P24829V025055F0I000199CB_0.recess1,S=3810", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170347789.M408186P27905V025055F0I00019A8F_0.recess1,S=3922", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170378895.M589722P25748V025055F0I00019279_0.recess1,S=2782", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170380726.M524353P29456V025055F0I0001AEE1_0.recess1,S=3619", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/new/1170381420.M702545P517V025055F0I0001B208_0.recess1,S=3028", 0xFFBFF040) = 0 getdents64(8, 0xFEE72000, 8192) = 0 close(8) = 0 lstat64("/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/maildirfolder", 0xFFBFF148) = 0 lstat64("/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/cur", 0xFFBFF148) = 0 openat(-3041965, "/var/qmail/maildirs/AA/AA/test(a)pacific.net.sg/Maildir/.qmail/cur", O_RDONLY|O_NDELAY|O_LARGEFILE) = 8 fcntl(8, F_SETFD, 0x00000001) = 0 fstat64(8, 0xFFBFEEE8) = 0 getdents64(8, 0xFEE72000, 8192) = 1088 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/cur/1169092926.M656431P6118V04010002I000023E9_0.recess1,S=4701:2,S", 0xFFBFF040) = 0 lstat64("/var/qmail/maildirs/AA/AA/test@pacific.net.sg/Maildir/.qmail/cur/1168983168.M76366P8906V04010002I000027AB_0.recess1,S=2345:2,S", 0xFFBFF040) = 0

3 6

Re: [Dovecot] pid stamp on log entries?
by Bill Boebel 27 Feb '07

27 Feb '07

On Mon, February 26, 2007 2:40 pm, bhayden(a)umn.edu said: > Hi folks. Is there a way to modify the log stamp to include pid as well as > time? Take a look at http://wiki.dovecot.org/Variables %p = pid I use: mail_log_prefix = "%Us(%u)(%p): " Syslog adds the timestamp though. Bill

1 0

[Dovecot] pid stamp on log entries?
by bhayden＠umn.edu 26 Feb '07

26 Feb '07

Hi folks. Is there a way to modify the log stamp to include pid as well as time? Preferably for all logging, but at least for imap and pop. I took a look at the mail-login plugin, but that seems to associate operations with uid, still no pid. Am I missing something? Thanks for any info, -Brian U of Minnesota Internet Services

1 0

[Dovecot] dovecot and ldap
by Antonis Faragitakis 26 Feb '07

26 Feb '07

hi im trying to install dovecot and use ldap as the backend and i get the following error srv:/root# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS AUTH=PLAIN] Dovecot ready. 1 login b.tapratzis passwordhere 1 NO Authentication failed. tail -f /var/log/dovecot.info dovecot: Feb 26 18:14:21 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGIudGFwcmF0emlzADM2Yi50YXByIw== dovecot: Feb 26 18:14:21 Info: auth(default): ldap(b.tapratzisb.tapratzis,127.0.0.1): bind search: base=ou=Company,ou=Ath,dc=company,dc=gr filter=(&(objectClass=posixAccount)(uid=b.tapratzisb.tapratzis)) dovecot: Feb 26 18:14:21 Info: auth(default): ldap(b.tapratzisb.tapratzis,127.0.0.1): unknown user dovecot: Feb 26 18:14:21 Info: auth(default): client out: FAIL 1 user=b.tapratzisb.tapratzis i cant understand why is place 2 times the username in the uid= for search. my dovecot.conf: passdb ldap { args = /etc/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot-ldap.conf } my dovecot-ldap.conf: base = ou=Company,ou=Ath,dc=company,dc=gr deref = never scope = subtree user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid where it my be the fault? Thanks Atn

1 0

[Dovecot] Quota stored in LDAP
by Venilton Junior 26 Feb '07

26 Feb '07

Hie folks, Does anyone have any experiences using dovecot + per user quota + ldap? I've configured my settings as this example: # quotaStorage must be in the format mentioned above # For example: dirsize:storage=10240 user_attrs = uid,homeDirectory,,,uidNumber,gidNumber,quotaStorage=quota But, Dovecot isn't creating maildirsize file. Any guesses? PS: I've already instaled 1.0rc24 Venilton C. Junior HPS Sercompe Computadores Ltda. Office: +55 47 3431-9700 Fax: +55 47 3431-9747 Mobile: +55 47 9653-5872 www.sercompe.com.br <http://www.sercompe.com.br/>

2 1

[Dovecot] Bigcrypt password patch
by Philipp Kolmann 26 Feb '07

26 Feb '07

Hi, we are currently in the progress of switching an HPUX mailserver to linux and dovecot. The only issue so far is, that HPUX has bigcrypt for passwords > 8 chars. Bigcrypt uses standard libc crypt for every block of 8 chars. The linux pam modules have a bigcrypt.c file which can be used for dovecot as well to authenticate crypt and bigcrypt passwords. I have used the pam bigcrypt.c code to patch the mycrypt.c dovecot file. Maybe you could add this path (against branch_1_0 cvs). thanks Philipp Kolmann -- If you have problems in Windows: REBOOT If you have problems in Linux: BE ROOT

2 1

[Dovecot] problem with NFS from Microsoft Windows Services for Unix
by Arnaud Grandville 26 Feb '07

26 Feb '07

Hi all, I'm using dovecot 1.0 RC24 compiled form source on a OpenBSD 4.0, I use IMAP service with maildir storage and my mail client is Outlook 2003. If the root of the user maildir stay on the BSD filesystem everything is right. If the root of the maildir is mount on an NFS drive on Microsoft Windows 2003 server, I always have the same error when I try to move mail (under Outlook) form my Pop3 account to my Imap account : dovecot: Feb 24 21:41:13 Error: IMAP(arno): rename(/var/mail/arno/Maildir/tmp/1172353272.P7684Q1.mail.domaine.fr, /var/mail/arno/Maildir/cur/1172353272.P7684Q1.mail.domaine.fr:2,S) failed: Input/output error As you see, the name of the file gets an extra string ":2,S" and that's why the new filename can't be created. what's wrong? thanks --- dovecot.conf ------------------ base_dir: /var/run/dovecot/ log_path: /dev/stderr protocols: imap listen: *:143 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_gid: 0 mail_location: maildir:~/Maildir mmap_disable: yes lock_method: dotlock auth default: passdb: driver: passwd-file args: /etc/master.passwd userdb: driver: passwd

4 5

[Dovecot] Updated SHA256 patch
by Jasper Slits 25 Feb '07

25 Feb '07

Hi, This is the updated version of the SHA256 password hashing patch I submitted earlier to this list. I changed it, based on the suggestions by Andrey Panin (AP). Also some other parts have been changed, summary as follows: [sha2.h] - typedef of context dropped for consistency (AP) - removed ifndef SHA2_TYPES part (AP) - removed sha256() prototype [sha2.c] - added lib.h and safe_memset.h includes - added static const to sha256_h0[8] and sha256_k[64] (AP) - replaced memset with safe_memset - used standard types from stdint.h: (AP) - uint32 -> uint32_t - uint8 -> uint8_t - removed strings.h include - removed PACK64 and UNPACK64 (defined but not used) The updated patch can also be found at http://www.malochia.nl/dovecot/sha256.patch Kind regards, Jasper diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/auth/password-scheme.c src/auth/password-scheme.c --- dv_bas/src/auth/password-scheme.c 2007-02-25 02:13:29.697424750 +0100 +++ src/auth/password-scheme.c 2007-02-23 14:34:23.940550315 +0100 @@ -10,6 +10,7 @@ #include "mycrypt.h" #include "randgen.h" #include "sha1.h" +#include "sha2.h" #include "str.h" #include "password-scheme.h" @@ -153,6 +154,17 @@ return str_c(str); } +static const char *sha256_generate(const char *plaintext, + const char *user __attr_unused__) +{ + unsigned char digest[SHA256_RESULTLEN]; + string_t *str; + sha256_get_digest(plaintext, strlen(plaintext), digest); + str = t_str_new(MAX_BASE64_ENCODED_SIZE(sizeof(digest)+1)); + base64_encode(digest, sizeof(digest), str); + return str_c(str); +} + static const void * password_decode(const char *password, unsigned int result_len) { @@ -196,6 +208,23 @@ return memcmp(sha1_digest, data, SHA1_RESULTLEN) == 0; } +static bool sha256_verify(const char *plaintext, const char *password, + const char *user) +{ + unsigned char sha256_digest[SHA256_RESULTLEN]; + const char *data; + + sha256_get_digest(plaintext, strlen(plaintext), sha256_digest); + + data = password_decode(password, SHA256_RESULTLEN); + if (data == NULL) { + i_error("sha256_verify(%s): Invalid password encoding", user); + return 0; + } + + return memcmp(sha256_digest, data, SHA256_RESULTLEN) == 0; +} + static const char *ssha_generate(const char *plaintext, const char *user __attr_unused__) { @@ -466,6 +495,7 @@ { "MD5-CRYPT", md5_crypt_verify, md5_crypt_generate }, { "SHA", sha1_verify, sha1_generate }, { "SHA1", sha1_verify, sha1_generate }, + { "SHA256", sha256_verify, sha256_generate }, { "SMD5", smd5_verify, smd5_generate }, { "SSHA", ssha_verify, ssha_generate }, { "PLAIN", plain_verify, plain_generate }, diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/lib/sha2.c src/lib/sha2.c --- dv_bas/src/lib/sha2.c 1970-01-01 01:00:00.000000000 +0100 +++ src/lib/sha2.c 2007-02-25 01:53:03.876815750 +0100 @@ -0,0 +1,226 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#include "lib.h" + +#include "sha2.h" +#include "safe-memset.h" + +#define SHFR(x, n) (x >> n) +#define ROTR(x, n) ((x >> n) | (x << ((sizeof(x) << 3) - n))) +#define ROTL(x, n) ((x << n) | (x >> ((sizeof(x) << 3) - n))) +#define CH(x, y, z) ((x & y) ^ (~x & z)) +#define MAJ(x, y, z) ((x & y) ^ (x & z) ^ (y & z)) + +#define SHA256_F1(x) (ROTR(x, 2) ^ ROTR(x, 13) ^ ROTR(x, 22)) +#define SHA256_F2(x) (ROTR(x, 6) ^ ROTR(x, 11) ^ ROTR(x, 25)) +#define SHA256_F3(x) (ROTR(x, 7) ^ ROTR(x, 18) ^ SHFR(x, 3)) +#define SHA256_F4(x) (ROTR(x, 17) ^ ROTR(x, 19) ^ SHFR(x, 10)) + +#define UNPACK32(x, str) \ +{ \ + *((str) + 3) = (uint8_t) ((x) ); \ + *((str) + 2) = (uint8_t) ((x) >> 8); \ + *((str) + 1) = (uint8_t) ((x) >> 16); \ + *((str) + 0) = (uint8_t) ((x) >> 24); \ +} + +#define PACK32(str, x) \ +{ \ + *(x) = ((uint32_t) *((str) + 3) ) \ + | ((uint32_t) *((str) + 2) << 8) \ + | ((uint32_t) *((str) + 1) << 16) \ + | ((uint32_t) *((str) + 0) << 24); \ +} + + + +#define SHA256_SCR(i) \ +{ \ + w[i] = SHA256_F4(w[i - 2]) + w[i - 7] \ + + SHA256_F3(w[i - 15]) + w[i - 16]; \ +} + + + +static const uint32_t sha256_h0[8] = + {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, + 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19}; + + +static const uint32_t sha256_k[64] = + {0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, + 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, + 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, + 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, + 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, + 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, + 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, + 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, + 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, + 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, + 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, + 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, + 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, + 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, + 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, + 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2}; + + +/* SHA-256 functions */ + +void sha256_transf(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb) +{ + uint32_t w[64]; + uint32_t wv[8]; + uint32_t t1, t2; + const unsigned char *sub_block; + int i,j; + + + for (i = 0; i < (int) block_nb; i++) { + sub_block = message + (i << 6); + + for (j = 0; j < 16; j++) { + PACK32(&sub_block[j << 2], &w[j]); + } + + for (j = 16; j < 64; j++) { + SHA256_SCR(j); + } + + for (j = 0; j < 8; j++) { + wv[j] = ctx->h[j]; + } + + for (j = 0; j < 64; j++) { + t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + + sha256_k[j] + w[j]; + t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]); + wv[7] = wv[6]; + wv[6] = wv[5]; + wv[5] = wv[4]; + wv[4] = wv[3] + t1; + wv[3] = wv[2]; + wv[2] = wv[1]; + wv[1] = wv[0]; + wv[0] = t1 + t2; + } + + for (j = 0; j < 8; j++) { + ctx->h[j] += wv[j]; + } + } +} + + +void sha256_init(struct sha256_ctx *ctx) +{ + int i; + for (i = 0; i < 8; i++) { + ctx->h[i] = sha256_h0[i]; + } + + ctx->len = 0; + ctx->tot_len = 0; +} + +void sha256_loop(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int len) +{ + unsigned int block_nb; + unsigned int new_len, rem_len, tmp_len; + const unsigned char *shifted_message; + + tmp_len = SHA256_BLOCK_SIZE - ctx->len; + rem_len = len < tmp_len ? len : tmp_len; + + memcpy(&ctx->block[ctx->len], message, rem_len); + + if (ctx->len + len < SHA256_BLOCK_SIZE) { + ctx->len += len; + return; + } + + new_len = len - rem_len; + block_nb = new_len / SHA256_BLOCK_SIZE; + + shifted_message = message + rem_len; + + sha256_transf(ctx, ctx->block, 1); + sha256_transf(ctx, shifted_message, block_nb); + + rem_len = new_len % SHA256_BLOCK_SIZE; + + memcpy(ctx->block, &shifted_message[block_nb << 6], + rem_len); + + ctx->len = rem_len; + ctx->tot_len += (block_nb + 1) << 6; +} + +void sha256_result(struct sha256_ctx *ctx, unsigned char *digest) +{ + unsigned int block_nb; + unsigned int pm_len; + unsigned int len_b; + int i; + + block_nb = (1 + ((SHA256_BLOCK_SIZE - 9) + < (ctx->len % SHA256_BLOCK_SIZE))); + + len_b = (ctx->tot_len + ctx->len) << 3; + pm_len = block_nb << 6; + + safe_memset(ctx->block + ctx->len, 0, pm_len - ctx->len); + ctx->block[ctx->len] = 0x80; + UNPACK32(len_b, ctx->block + pm_len - 4); + + sha256_transf(ctx, ctx->block, block_nb); + + for (i = 0 ; i < 8; i++) { + UNPACK32(ctx->h[i], &digest[i << 2]); + } +} + +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]) +{ + struct sha256_ctx ctx; + + sha256_init(&ctx); + sha256_loop(&ctx, data, size); + sha256_result(&ctx, result); +} + diff -r -u -N --exclude=Makefile.in --exclude=.deps --exclude=Makefile --exclude=CVS dv_bas/src/lib/sha2.h src/lib/sha2.h --- dv_bas/src/lib/sha2.h 1970-01-01 01:00:00.000000000 +0100 +++ src/lib/sha2.h 2007-02-24 19:45:48.447687500 +0100 @@ -0,0 +1,71 @@ +/* + * FIPS 180-2 SHA-224/256/384/512 implementation + * Last update: 02/02/2007 + * Issue date: 04/30/2005 + * + * Copyright (C) 2005, 2007 Olivier Gay <olivier.gay(a)a3.epfl.ch> + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#ifndef SHA2_H +#define SHA2_H + +#define SHA256_RESULTLEN ( 256 / 8) + +#define SHA256_BLOCK_SIZE ( 512 / 8) + +/* +#ifndef SHA2_TYPES +#define SHA2_TYPES +typedef unsigned char uint8; +typedef unsigned int uint32; +typedef unsigned long long uint64; +#endif +*/ + +struct sha256_ctx { + unsigned int tot_len; + unsigned int len; + unsigned char block[2 * SHA256_BLOCK_SIZE]; + uint32_t h[8]; +}; + +void sha256_transf(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int block_nb); + + +void sha256_init(struct sha256_ctx * ctx); +void sha256_loop(struct sha256_ctx *ctx, const unsigned char *message, + unsigned int len); +void sha256_result(struct sha256_ctx *ctx, unsigned char *digest); +void sha256_get_digest(const void *data, size_t size, + unsigned char result[SHA256_RESULTLEN]); + + + +#endif /* !SHA2_H */ +

1 0

[Dovecot] openssl mkcert problem
by Zbigniew Szalbot 24 Feb '07

24 Feb '07

Hello, Can someone point me to what I should do to install the missing files? I am trying to generate self-signed certificates using mkcert.sh but I get the following error: $ /usr/local/share/dovecot/mkcert.sh error on line -1 of ./dovecot-openssl.cnf} 6213:error:02001002:system library:fopen:No such file or directory:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:104:fopen('./dovecot-openssl.cnf}','rb') 6213:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:107: 6213:error:0E064072:configuration file routines:CONF_load:no such file:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_def.c:197: I am using OpenSSL 0.9.7e-p1 25 Oct 2004. Many thanks for your help in advance! -- Zbigniew Szalbot

2 1

[Dovecot] Dovecot on Solaris x86?
by Tim Skirvin 24 Feb '07

24 Feb '07

I'm trying to get dovecot working on Solaris x86. I've got it working just fine on RH Desktop 4; and while I have a built, limping version on solx86, it's not actually usable except from other solx86 systems. Basic details: Version 1.0rc23 OS Solaris x86 (64 bit) CPU Opteron Filesystem NFS (but it's not getting that far) The general problem is apparently SSL-related. I can connect properly from another Solaris x86 machine, using either mutt or straight openssl; but when I try mutt from a Solaris or Linux machine, I get the error "SSL failed: I/O error" and it fails, and when I use openssl from a Linux machine, I get something like this: victor ~> stelnet xxxxxxxx.ks.uiuc.edu 993 + openssl s_client -connect xxxxxxxx.ks.uiuc.edu:993 -verify -debug verify depth is 0 CONNECTED(00000003) depth=0 /C=US/ST=Illinois/L=Urbana/O=UIUC/OU=[...] verify error:num=18:self signed certificate verify return:1 depth=0 /C=US/ST=Illinois/L=Urbana/O=UIUC/OU=[...] verify return:1 24748:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226: Annoyingly, the same command run from a Solaris machine connects, even though mutt doesn't. (I'm using 'mutt -f imaps://xxxx/', which I know works elsewhere; and the Linux mutt is the system default one, so I don't suspect that it is the source of the problem.) The logs have been remarkably un-useful: dovecot: Feb 21 09:41:21 Info: imap-login: Disconnected: rip=[...], lip=[...] TLS handshake The software was built in all cases with: ./configure --prefix=/usr/local/encap/dovecot-1.0rc23.1 I've tried with both Sun's native cc and gcc compilers. I have also tried building on SPARC Solaris with the native cc compiler, to the same (negative) effect. (I used to have v0.99.14 running just fine on this SPARC machine, so this worries me... but I only checked it just now as an after-thought.) Any suggestions? - Tim Skirvin (tskirvin(a)ks.uiuc.edu) -- Theoretical and Computational http://www.ks.uiuc.edu/~tskirvin/ Biophysics, Beckman Institute, UIUC Senior Systems Administrator

4 9

[Dovecot] POP Problem
by Marc Perkel 24 Feb '07

24 Feb '07

Getting an error on POP only - "Authentication Server Isn't Connected" IMAP works fine. This used to work. not sure what changed.

1 1

[Dovecot] Setting up an email server
by Matt Penfold 24 Feb '07

24 Feb '07

I am sure this is a really stupid question but I could do with some advice. I am setting an old PC as an email/file server using Gentoo Linux. So far I have configured getting emails from a couple of a pop3 accounts I have with ISPs/Mail Service providers using getmail and dovecot. I can access those emails from a variety of clients using IMAP without problem. The next stage I want to implement is to have a central location available to the clients of sent emails as well as received emails. It is this part I am a bit confused about. I know I will need some kind of agent to transfer the email from the client to the appropriate ISP/Mail provider but I am overwhelmed by the choice. Sendmail seems a bit OTT for me needs! And how do I ensure that I can see what emails I have send using IMAP ? Thanks in advance Matt Penfold -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.441 / Virus Database: 268.18.3/698 - Release Date: 23/02/2007 04:39

2 1

[Dovecot] Simple patch
by David 23 Feb '07

23 Feb '07

Inline below is a simple patch that drops the root capabilities that aren't needed (inspired by a similar patch against the mpm_itk project!). Possibly it is a little too restrictive, extras can be added to suidcaps, but on platforms that support capabilities this will prevent things such as kernel module loading. Needed on linux is libcap, available in most distros. Note that this patch doesn't require libcap, or add an option, but if it is installed then it will take advantage of it. I don't have any other platforms to test on. The patch compiles fine but I haven't managed to test it yet. My autoconf experience is zero, so I hope that HAVE_LIBCAP is actually getting defined. Comments appreciated, I'll test it thoroughly later when I get some free time (and, if it works, remove the test message!). David --- configure.in 2007-02-22 21:50:07.000000000 +0000 +++ configure.in 2007-02-23 17:52:16.000000000 +0000 @@ -382,6 +382,17 @@ ]) ]) +AC_CHECK_FUNC(cap_init, [], [ + AC_CHECK_LIB(cap, cap_init, [ + have_libcap=yes + LIBS="$LIBS -lcap" + ]) +]) + +if test "$have_libcap" = "yes"; then + AC_DEFINE(HAVE_LIBCAP,, libcap is installed for cap_init()) +fi + AC_CHECK_FUNC(fdatasync, [ have_fdatasync=yes ], [ --- src/master/main.c 2007-01-27 01:44:25.000000000 +0000 +++ src/master/main.c 2007-02-23 16:13:39.000000000 +0000 @@ -24,6 +24,9 @@ #include <syslog.h> #include <sys/stat.h> #include <sys/wait.h> +#ifdef HAVE_LIBCAP +#include <sys/capability.h> +#endif const char *process_names[PROCESS_TYPE_MAX] = { "unknown", @@ -36,6 +39,15 @@ "dict" }; +/* the capabilities that we *need* in order to operate */ +#ifdef HAVE_LIBCAP +cap_t caps; +cap_value_t suidcaps[] = { + CAP_SETUID, + CAP_NET_BIND_SERVICE +}; +#endif + static const char *configfile = SYSCONFDIR "/" PACKAGE ".conf"; static const char *env_tz; @@ -583,6 +595,18 @@ if (log_error) i_fatal("This is Dovecot's error log"); + i_info("test message, monkeys"); + /* drop capabilities that we don't need, be very restrictive */ +#ifdef HAVE_LIBCAP + i_info("Found capability support, dropping unnecessary root priviledges"); + caps = cap_init(); + cap_clear(caps); + cap_set_flag(caps, CAP_PERMITTED, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_flag(caps, CAP_EFFECTIVE, sizeof(suidcaps)/sizeof(cap_value_t), suidcaps, CAP_SET); + cap_set_proc(caps); + cap_free(caps); +#endif + lib_signals_init(); lib_signals_set_handler(SIGINT, TRUE, sig_die, NULL); lib_signals_set_handler(SIGTERM, TRUE, sig_die, NULL);

1 0

[Dovecot] Migration from courierpop3d (younger versions)
by Christian Skarby 23 Feb '07

23 Feb '07

Dear list, I am looking for a way to set up dovecot as a successor for courier pop3d, however I am looking for a way to preserve the UIDLs. Any progress on this? I can help out writing a converter if I know where the appropriate specs are. References: [1] http://www.dovecot.org/list/dovecot/2006-April/012727.html [2] http://wiki.dovecot.org/Migration#head-a43de1ba365baeb73f6c83702e4f14788041… -- Yours, Christian Skarby Interhost ANS

1 0

[Dovecot] quota warning
by Nicolas Boullis 23 Feb '07

23 Feb '07

Hi, Is there a way with dovecot to warn users who are close to reach their quota? Although I never used it, I think cyrus supports something like that by droping a warning message into the INBOX when delivering a message that brings the total size over a certain percentage. Would it be feasible to implement something like that with an extra plugin or by changing the quota plugin? Cheers, Nicolas

11 22

[Dovecot] rc19 - (_view_lookup_uid_range): assertion failed
by Dean Manners 23 Feb '07

23 Feb '07

Apologies if this is an <=rc19 thing, but am waiting for rc24 to come into Debian unstable/testing before upgrading. After purging ~10 messages from INBOX the index's appeared to go into a broken state. Mail client (Outlook express) reported "unable to read message flags". Logged messages: Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:34:58 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e53974] -> im ap [0x8056731] Feb 23 17:34:59 mailget01 dovecot: child 24629 (imap) killed with signal 6 Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): file mail-index-view.c: line 386 (_view_lookup_ui d_range): assertion failed: (*last_seq_r >= *first_seq_r) Feb 23 17:35:10 mailget01 dovecot: IMAP(drawkcab(a)drawkcab.com): Raw backtrace: imap [0x80b46eb] -> imap [0x80b413 9] -> imap [0x809c6c8] -> imap(mail_index_lookup_uid_range+0x2b) [0x809cd5b] -> imap(index_storage_get_uids+0x36) [0x8086936] -> imap(mailbox_get_uids+0x2b) [0x80a674b] -> imap [0x805f9b8] -> imap(imap_search_get_arg+0x76) [0x 8060786] -> imap(cmd_fetch+0xa5) [0x8057ed5] -> imap(cmd_uid+0x52) [0x805ad02] -> imap [0x805b8c5] -> imap [0x805 b83b] -> imap(_client_input+0x6d) [0x805b9ad] -> imap(io_loop_handler_run+0x118) [0x80baa88] -> imap(io_loop_run+ 0x28) [0x80b9f08] -> imap(main+0x69) [0x8063e89] -> /lib/tls/libc.so.6(__libc_start_main+0xf4) [0xb7e88974] -> im ap [0x8056731] Feb 23 17:35:10 mailget01 dovecot: child 24662 (imap) killed with signal 6 rm /userdirectory/dovecot* resolved it. If its worth investigating the dovecot* files copied to: http://www.drawkcab.com/dumpyard/dovecot-files.tar Regards __________________________________________ Dean Manners

2 1

[Dovecot] Final LDAP issues
by Joseba Torre 23 Feb '07

23 Feb '07

Hi all, I'm in my final steps with my testing server using rc23 in a x86 RHEL4 machine. Everything is working quite well, but still are some LDAP related issues I'd like to clarify: - I'm using auth_bind and auth_bind_userdn. So pass_filter isn't used, and pass_attrs are never searched. Is this true or am I missing something? - Is there a choice for the userdb bind/queries to be done using the user supplied dn -the one used for passdb-? I would like to access some non-public attributes, but I've had no luck until now. If I use the same dovecot-ldap.conf for userdb and passdb, i have a single connection to the LDAP server, but once the auth bind is successful, an anonymous bind occurs. If I use two separate files for userdb and passdb, i have two connections to the LDAP server, the second one being always anonimous. For me, the perfect state would be: - bind using the user supplied dn - if successfull, search for pass_attrs, where some user_attrs may be prefetched - unbind - userdb only binds if some needed attrs haven't been already fetched. If so, there's a choice to use the user supplied dn for the bind/search. Is this possible now? Would it be in the future? Thanks in advance. -- Joseba Torre. CIDIR Bizkaia.

3 5

[Dovecot] Strange new mail count
by Brian Taber 23 Feb '07

23 Feb '07

I am having a slight issue with new message count... for some reason, dovecot reports I have some strange number of new messages, even though there are no new messages... If I click on a few of the folders, the new message count seams to correct itself... Any way to solve this?

3 4

[Dovecot] out-of-tree plugins and installed header files
by Timo Sirainen 22 Feb '07

22 Feb '07

I added --with-headers configure option now to CVS (not enabled by default). It makes Dovecot install all the useful .h files so that it's possible to compile out-of-tree plugins without having compiled Dovecot sources. I'd hope that binary package builders add a new dovecot-dev package which contains the headers (and $libdir/dovecot- config). I also updated dovecot-sieve so that it compiles against only the header files, except then sievec and sieved binaries aren't compiled (because they require liblib.a).

1 0

[Dovecot] Mixing POP and IMAP
by Dominic Lepiane 22 Feb '07

22 Feb '07

Hi, I run a small site, about a dozen users, and many of the users POP their mail. I have just installed Squirrelmail which uses IMAP. Has anyone had any significant problems with mixing POP and IMAP for mail retreival? Your feedback is greatly apprecianted, -- Dominic Lepiane The IRMACS Centre Simon Fraser University

5 4

[Dovecot] Crash: index-mail.c: line 790
by Bill Boebel 22 Feb '07

22 Feb '07

Here is the first crash I've seen with the current CVS... Feb 19 00:45:52 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5736, but next_uid = 5744 Feb 19 00:45:55 mail35a dovecot: IMAP(mnash(a)stest1.com): Corrupted transaction log file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index.log: Append with UID 5737, but next_uid = 5744 Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): file index-mail.c: line 790: unreached Feb 19 00:46:34 mail35a dovecot: IMAP(mnash(a)stest1.com): Raw backtrace: imap [0x8091552] -> imap [0x80910cf] -> imap [0x806c891] -> imap(mail_set_seq+0x10) [0x8084ce0] -> imap(index_storage_search_next+0x3b) [0x806f28b] -> imap(mailbox_search_next+0x14) [0x8085ae4] -> imap(imap_expunge+0x8a) [0x805b3e6] -> imap(cmd_expunge+0x61) [0x8056e69] -> imap [0x805a51e] -> imap [0x805a498] -> imap(_client_input+0x5a) [0x805a5e6] -> imap(io_loop_handler_run+0x10c) [0x80965fc] -> imap(io_loop_run+0x25) [0x8095a75] -> imap(main+0x6b) [0x80614f7] -> /lib/tls/libc.so.6(__libc_start_main+0xda) [0xd9478a] -> imap(setuid+0xa1) [0x8055825] Feb 19 00:46:34 mail35a dovecot: child 23564 (imap) killed with signal 6 Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): fscking index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index Feb 19 00:46:38 mail35a dovecot: IMAP(mnash(a)stest1.com): Fixed index file /var/index//data1/mail/st/stest1.com/mn/mnash//.Trash/dovecot.index: first_recent_uid_lowwater 5744 -> 5738

2 1

[Dovecot] 1.0.rc23 released
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If pop3_uidl_format=%m, we generate a unique X-Delivery-ID header when saving mails to make sure the UIDL is unique. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: Broken X-UID headers assert-crashed sometimes - mbox: When saving a message to an empty mbox file it got an UID which immediately got incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

4 8

[Dovecot] Solaris/SSLonly/Lots of Users
by Steven F Siirila 22 Feb '07

22 Feb '07

Anyone running Dovecot on Solaris, requiring only SSL connections, and servicing thousands of simultaneous users? Our past attempts to do so have failed due to dovecot-auth using up all 256 of its file descriptors. I say 256 since we are limited to that by the 32-bit libraries. We are looking at either compiling Dovecot in 64-bit and letting dovecot-auth file descriptors accumulate (not ideal), or providing Timo with access to one of our test servers so he can debug the problem. However, I would like to hear of anyone in the same boat first. Thanks! -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

4 5

[Dovecot] Dovecot Quota + LDAP
by Venilton Junior 22 Feb '07

22 Feb '07

Hie Folks, I'm having a little problem with quota + ldap. I want to use per user quota settings. So I configured quota on my /etc/dovecot.conf like this site http://wiki.dovecot.org/Quota examples. Here follows my /etc/dovecot.conf: protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/cert.pem ssl_key_file = /usr/share/ssl/private/pkey.pem mail_extra_groups = mail valid_chroot_dirs = /var/lib/imap/vmail/domains default_mail_env = maildir:/var/lib/imap/vmail/domains/%d/%n/mail::INDEX=/var/run/dovecot/i ndexes/%n lock_method = dotlock mmap_disable = yes auth_debug = yes auth_debug_passwords = yes first_valid_uid = 202 last_valid_uid = 202 first_valid_gid = 202 last_valid_gid = 202 maildir_copy_with_hardlinks = no login_greeting = Sercomtel Internet ready. disable_plaintext_auth = no protocol imap { mail_plugins = quota imap_quota } protocol lda { postmaster_address = postmaster(a)domain.com mail_plugins = quota } protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota } auth default_with_listener { mechanisms = plain login userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } } } plugin { # quota = maildir:/var/lib/imap/vmail/%d/%u/mail:storage=102400 # convert_mail = maildir:/var/lib/imap/vmail/%d/%u/mail #quota = maildir:storage=102400 } And here is my user attributes in my dovecot-ldap.conf: user_attrs = mail,homeDirectory,,,,quotaStorage=quota=dirsize:storage user_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) As you can see above in my dovecot.conf, I made a comment at plugin section to ensure that there's no quota usage for all system. I'd like to have per user quota stored in my ldap base. Here is a value off my quota attribute: quota = 122880 Making tests, the user already have 138 Mb. Does anyone have any idea how to set up quota with ldap and get it working? Tnx for any reply. Best regards, Venilton C. Junior

1 0

[Dovecot] login and plain-md5 in sql query
by Adrian Stoica 22 Feb '07

22 Feb '07

i use last dovecot rc23 with users/passwords in mysql 1) How can i define a sql query for each auth mechanism ? 2)Why i can't set "default_pass_scheme = login" in my dovecot-sql.conf? : dovecot: Feb 21 09:46:22 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AGFkaUBhZHJpYW4uZXUAcGFyb2xh dovecot: Feb 21 09:46:22 Info: auth-worker(default): sql(adi(a)adrian.eu,127.0.0.1): query: SELECT IF('adrian.eu'='',clear,crypt) AS password , user FROM mailbox WHERE user = 'adi' AND domain = 'adrian.eu' AND status = '1' LIMIT 1 dovecot: Feb 21 09:46:22 Info: auth-worker(default): auth(adi(a)adrian.eu,127.0.0.1): username changed adi(a)adrian.eu -> adi dovecot: Feb 21 09:46:22 Error: auth-worker(default): sql(adi,127.0.0.1): Unknown password scheme login dovecot: Feb 21 09:46:23 Info: auth(default): client out: FAIL 1 user=adi(a)adrian.eu dovecot: Feb 21 09:46:23 Info: imap-login: Disconnected: user=<adi(a)adrian.eu>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured 3)Whi i can't use plain-md5 in dovecot.conf : auth default { mechanisms = login plain <- plain-md5 passdb sql { args=/etc/dovecot-sql.conf } userdb sql { args=/etc/dovecot-sql.conf } } dovecot: Feb 21 09:43:48 Error: auth(default): Unknown authentication mechanism 'plain-md5'

2 1

[Dovecot] pop3_lock_session
by Rene Luria 22 Feb '07

22 Feb '07

Hi guys, How can I modify the timeout value for the pop3_lock_session ? I'd like it to be much bigger.

2 4

[Dovecot] crash in mail_cache_transaction_reset on rc22
by Dan Price 22 Feb '07

22 Feb '07

I've not been able to roll out rc23 yet (tonight, I hope) but I just saw a crash which I'm not sure I've seen reported before, following a server outage (that is to say, the server came back up and one of the users had a dovecot core). #0 0x0005d720 in mail_cache_transaction_reset (ctx=0xcf928) at mail-cache-transaction.c:71 No locals. #1 0x0005e8bc in mail_cache_add (ctx=0xcf928, seq=233, field=4294967295, data=0xb7600, data_size=1063) at mail-cache-transaction.c:752 file_field = 19 data_size32 = 1063 fixed_size = 4294967295 full_size = 831272 __PRETTY_FUNCTION__ = "mail_cache_add" #2 0x00057160 in index_mail_parse_header (part=0xe9, hdr=0x14, mail=0xd33e8) at index-mail-headers.c:125 data = (struct index_mail_data *) 0xd3450 cache_field_name = 0xe9 <Address 0xe9 out of bounds> field_idx = 0 count = 21 match = (uint8_t *) 0xcf928 "" __PRETTY_FUNCTION__ = "index_mail_parse_header" #3 0x00079848 in _read (stream=0xe2aa0) at istream-header-filter.c:173 ret = 0 pos = 854336 #4 0x00085818 in i_stream_read (stream=0xe2ac8) at istream.c:58 _stream = (struct _istream *) 0xcaf28 #5 0x00085ca4 in i_stream_read_data (stream=0xe2ac8, data=0xffbff5ec, size=0xffbff5e8, threshold=1) at istream.c:250 ret = 0 read_more = false #6 0x0007e8c4 in message_get_body_size (input=0xe2ac8, body=0xffbff660, has_nuls=0x0) at message-size.c:105 msg = ( const unsigned char *) 0xe2cf7 "\ndary_(ID_/CFD74Co3EWCZqYkdHlE8A)\"\r\nt>\r\nSS(a)cox.net>,\r\nil.com>,\r\n\r\n" i = 0 ---Type <return> to continue, or q <return> to quit--- size = 1 missing_cr_count = 0 __PRETTY_FUNCTION__ = "message_get_body_size" #7 0x0002e5e4 in fetch_body_header_fields (ctx=0xc6a08, mail=0xffbff660, context=0xc6c98) at imap-fetch-body.c:448 size = {physical_size = 1357, virtual_size = 0, lines = 26} old_offset = Unhandled dwarf expression opcode 0x93 -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

2 1

[Dovecot] Understanding fcntl() error messages
by Dean Manners 22 Feb '07

22 Feb '07

Hey guys, After many trials and tribulations I have now got some fairly stable NFS clients serving dovecot-lda and pop3/imap. Over a 9 hour postal/rabid stress test only saw 5 errors for the 4 servers. Wondering if anyone can shed a bit more light on what they mean exactly. I have tried to find "Resource temporarily unavailable" and "No locks available" in the src to get some understanding - however it appears these messages are from a lower level. With pop3: ------------------ Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 03:36:32 mailget01 dovecot: POP3(test992(a)mailtest06.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest06.com/8/test992/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable Feb 22 04:16:45 mailget01 dovecot: POP3(test445(a)mailtest03.com): mail_index_wait_lock_fd() failed with file /mnt/mailstore/mailtest03.com/4/test445/dovecot.index.log: Resource temporarily unavailable ------------------ ------------------ Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): fcntl() failed with file /mnt/mailstore/mailtest06.com/8/test999/dovecot.index: Resource temporarily unavailable Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-22 13:07:27] Feb 22 13:07:27 mailget01 dovecot: POP3(test999(a)mailtest06.com): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 ------------------ Does this mean that pop3 was waiting for a lock, but timed out ? What are the likely affects of this on a client POPing - session times out and they need to reconnect? The "No INBOX" error is little more odd, the same user had successful login 90 minutes earlier. With deliver: ------------------ Feb 22 01:42:03 mailfilter01 deliver(test680(a)mailtest04.com): fcntl() failed with file /mnt/mailstore/mailtest04.com/10/test680/dovecot.index: No locks available Feb 22 01:42:06 mailfilter01 deliver(test265(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/1/test265/dovecot.index: No locks available Feb 22 03:25:42 mailfilter02 deliver(test454(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/2/test454/dovecot.index: No locks available Feb 22 03:25:45 mailfilter02 deliver(test397(a)mailtest03.com): fcntl() failed with file /mnt/mailstore/mailtest03.com/7/test397/dovecot.index: No locks available ------------------ I assume this means deliver tried to obtain a lock on the index file (probably many times) but failed. Are the likely affects that the message still gets saved to the maildir but the index doesn't get updated? Regards __________________________________________ Dean Manners

2 2

[Dovecot] critical performance problem
by Rene Luria 22 Feb '07

22 Feb '07

I have been using dovecot 1.0alpha4 + deliver/sieve in production for a few accounts (400'000). After testing 1.0.rc22 I decided to upgrade one of the imap servers... And... what a mess ! The server just gets unusable. I don't know why but with new release, it just overloads the system with I/O. It turns that with 1.0.rc22 I get 15Mo/s read on disk average, without any reason. What did really change ? How come a system (with a few thousand accounts) works perfectly and then with 1.0.rc22 gets unusable with a load approaching 300 ? If you have any ideas...

5 18

[Dovecot] 1.0.rc23 tomorrow
by Timo Sirainen 22 Feb '07

22 Feb '07

http://dovecot.org/nightly/dovecot-latest.tar.gz Would be nice to get some testing before the actual release. I've now finally gone through all the "TODO" mails in this list and my INBOX and fixed pretty much every problem I know of. There are still some mbox bugs, but I can't really get them fixed unless someone figures out how to reproduce them (http://wiki.dovecot.org/MboxProblems) I think documentation is the last thing that should be done before v1.0. I'm happy enough with the code as it is now, unless some new bugs again appear. The notable changes since rc22: * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. + PAM: blocking=yes in args uses an alternative way to do PAM checks. Try it if you're having problems with PAM. + userdb passwd: blocking=yes in args makes the userdb lookups be done in auth worker processes. Set it if you're doing remote NSS lookups (eg. nss_ldap problems are fixed by this). + If PAM child process hasn't responded in two minutes, send KILL signal to it (only with blocking=no) - IMAP: APPEND ate all CPU while waiting for more data from the client (broken in rc22) - mbox: When saving a message to an empty mbox file it got one UID which immediately was incremented. - mbox: Fixed some wrong "uid-last unexpectedly lost" errors. - auth cache: In some situations we crashed if passdb had extra_fields. - auth cache: Special extra_fields weren't saved to auth cache. For example allow_nets restrictions were ignored for cached entries. - A lot of initial login processes could cause auth socket errors in log file at startup, if dovecot-auth started slowly. Now the login processes are started only after dovecot-auth has finished initializing itself. - imap/pop3 proxy: Don't crash if the remote server disconnects before we're logged in. - deliver: Don't bother trying to save the mail twice into the default mailbox (eg. if it's over quota). - mmap_disable=yes + non-Linux was really slow with large dovecot.index.cache files - MySQL couldn't be used as a masterdb - Trash plugin was more or less broken - imap/pop3 couldn't load plugins if they chrooted - imap/pop3-login process could crash in some conditions - checkpassword-reply crashed if USER/HOME wasn't set

6 19

[Dovecot] --log-error and the mysterious "not starting" problem
by Marshal Newrock 22 Feb '07

22 Feb '07

I've finally upgraded to 1.0.rc21. If I run "dovecot --log-error", then dovecot fails to start. The following appears in the log: Feb 5 10:54:00 taurus1 dovecot: Dovecot v1.0.rc21 starting up Feb 5 10:54:00 taurus1 dovecot: This is Dovecot's error log Without --log-error, it will start up fine from command-line. Dovecot still fails to start, as near as I can tell, in the specific condition that it is being started from a non-interactive shell and there is a mail_plugin set in "protocol imap". mail plugins set for pop or lda do not cause this problem. The failure to start appears in only two instances that I can see: on boot, or by a monitoring script if dovecot crashes, or, since I haven't seen dovecot die, when I manually stop it to see if the monitoring program will restart it. With the above problem, if the init script has --log-error when I try to make the monitoring program restart dovecot, then nothing still gets logged. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 8

[Dovecot] False "new mail" warning from Thunderbird, using RC23
by Stephen Warren 21 Feb '07

21 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am continually getting false "New Mail" warning from Thunderbird. I'm running Thunderbird 1.5.0.9 on Windows, and it's talking to two different Dovecot 1.0.RC23 servers (one home server, one work server). This was happening in older Dovecot versions too, so it's not new in RC23. Very often, Thunderbird will pop up the "new mail" notification window, and put a "new mail" icon in the Windows icon bar. However, when I view the main Thunderbird window, there will be no folders with new mail. Simply changing the currently selected folder in Thunderbird will clear the tray icon. Sometimes the notification window will say something small like "7 new messages", but right now, it's showing huge numbers like "587 new messages", which could be the total message count in one of my folders... Sometimes restarting Thunderbird will stop this happening for a short while. Is this a Thunderbird bug? Am I the only one seeing this? Does it have to do with having two separate IMAP servers configured? Perhaps it's because Thunderbird is configured to cache 5 connections to the server (although I think that's the default?) Should I delete all my accounts in Thunderbird, delete the (Thunderbird) cache files etc. on disk, and re-create it all? I do notice that whenever Thunderbird starts, it displays a whole load of folders that don't exist (e.g. got renamed/deleted) and/or multiple copies (e.g. Sent, Sent-1, Sent-2), which disappear very quickly. Is this related? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF2+eJhk3bo0lNTrURAh9uAKCWYrcNByF+wE2e1FPvL6x8N48/uACgtwxR 07fYmnaG9P/JCBOkKscCZIA= =XWXG -----END PGP SIGNATURE-----

2 1

[Dovecot] auth_user setting?
by Joseba Torre 21 Feb '07

21 Feb '07

Hi all, I've installed rc23 in a new testing machine, and i've had some permission problems related to dovecot-master.conf. As I have my master passwords in that file, I don't want it to be world readable. dovecot -n shows that auth_user is nobody, so setting the permissions to nobody.whatever 640 solves the problem. Anyway, I've tried to change the auth_user setting with no effect. Is it configurable? Aaaaaaaaaagur. -- Joseba Torre. CIDIR Bizkaia.

1 1

[Dovecot] Wrong configure.in entry in CVS branch_1_0
by Luca Corti 21 Feb '07

21 Feb '07

This line in configure.in src/plugins/mail-log/Makefile refers to a non existing direcory in the branch_1_0 tree, which breaks build. ciao Luca

3 2

[Dovecot] Possible Bug in quota-fs.c
by Martin Konopka 20 Feb '07

20 Feb '07

Hi, I'm using filesystem quotas with dovecot 1.0rc22 on my Linux 2.4.27 box. The quota limit gets correctly reported in kilobytes to the client but the amount of used space is reported in megabytes. In quota-fs.c I noticed that only the currently used space is divided by 1024: Line 241: *value_r = dqblk.dqb_curblocks / 1024; *limit_r = dqblk.dqb_bsoftlimit; After removing /1024 everything works fine. regards, Martin

3 4

[Dovecot] Convert plugin
by Jay Chandler 20 Feb '07

20 Feb '07

convert_mail = mbox:%h/mail Convert plugin. If set, specifies the source storage path which is converted to destination storage (mail_location) when the user logs in. The existing mail directory is renamed to <dir>-converted. I'm not entirely clear on what this does. If someone can clarify for me, I'll update the Wiki. I'm hoping it'll allow me to convert from mbox to Maildir-- otherwise I'm looking at a weekend of downtime when that project comes due... -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: high pressure system failure

2 1

[Dovecot] Reading mail for Virtual and Real LDAP Users
by Aaron Luchko 20 Feb '07

20 Feb '07

I'm trying to setup a system with ldap+postfix+dovecot. Everyone who gets an email is stored in LDAP, some of these users also have a local unix account, regardless I want all users to be dealt with as virtual users. All the mail is stored by postfix in /var/spool/mail in Maildir format with permissions 600 vmail:vmail. Everything works fine when dovecot tries to read the mail of a completely virtual user, the problem is when dovecot tries to read mail for a user who has an account on the machine, dovecot finds the user's local account, then it tries to read the mail as that user. Even if first_valid_{u,g}id is low enough to allow login the user still doesn't have sufficient permissions to read the mail. I can't figure out why this is happening and was hoping someone could help me out. thanks, Aaron /etc/dovecot-ldap.conf: hosts = server.example.com base = dc=example,dc=com dn = cn=Directory Manager dnpass = password uris = ldap://127.0.0.1 user_attrs = mail user_filter = uid=%u user_global_uid = 5001 user_global_gid = 5001 pass_filter = uid=%u /etc/dovecot.conf: mail_location = maildir:/var/spool/mail/%u/ protocols = imap pop3 mail_log_prefix = "%Us(%u):%i:%h " first_valid_uid = 5001 first_valid_gid = 5001 protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_verbose = yes auth_debug = yes auth default { mechanisms = plain passdb pam { } userdb passwd { } userdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap.conf } user = root } dict { } plugin { }

2 2

[Dovecot] NTLM oddities
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Started implementing the MasterUser changes to my config files so I can finally offer SPA for pop3/imap. Things are working fine with the MasterUser (horray!), however one of my guys started using SPA with Outlook Express and started getting another users mailbox. Turns out to be related to NTLM. His Outlook express is configured for the username of 'johnsmith'. However, you'll see the NTLM took the username from his XP machine login, it appears, which is just "John". However, what is really weird, is the "failed" on the "client out" line, but then the proxy went ahead and proxied to the storage server. Here's some output from debuggage: dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client in: AUTH 1 NTLM service=POP3 lip=204.17.177.60 rip=209.33.215.142 resp= dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): client out: CONT 1 dovecot: Feb 19 16:15:56 Info: auth-worker(mail.infowest.com): sql(John, 209.33.215.142): query: SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)),'*masteruser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'masterpass' AS pass FROM iwmailsystem.virtmailbox AS v INNER JOIN iwmailsystem.popserversAS p ON ( p.storeIP = '204.17.177.60') INNER JOIN authenticate.users AS a ON (a.userID= IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@', p.host))) WHERE v.userID = IF('John' LIKE '%(a)%.%',CONCAT(LCASE('John'),''),CONCAT(LCASE('John'),'@',p.host)) AND v.client_active=1; dovecot: Feb 19 16:15:56 Info: auth(mail.infowest.com): password(John, 209.33.215.142): Credentials: 8447128CC04AD05D1CD15F0C2F17F136 dovecot: Feb 19 16:15:57 Info: auth(mail.infowest.com): client out: FAIL 1 user=John host=204.17.177.76 destuser= john(a)host.com*masteruser nologin proxy pass=masterpass dovecot: Feb 19 16:15:57 Info: pop3-login: proxy(John): started proxying to 204.17.177.76:110: user=<John>, method=NTLM, rip=209.33.215.142, lip= 204.17.177.60 Questions: 1) So is it possible to use OE for SPA authentication without it sending the "XP username", but the actual account username OE is configured for ? 2) Why, when it "FAIL"ed did it still proxy? This seems bad :) Thanks, Cassidy

3 3

[Dovecot] rc22 segv when over quota
by Steffen Kaiser 20 Feb '07

20 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just pulled and built version 1.0.rc22 root@ux-2s11-9:/mnt/mailcache/dvtest/MailDir# dovecot -n # /usr/local/etc/dovecot.conf log_path: /var/tmp/dovecot.log info_log_path: /var/tmp/dovecot.info ssl_disable: yes disable_plaintext_auth: no verbose_ssl: yes login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes mail_location: maildir:/mnt/mailcache/%u/MailDir:CONTROL=/var/cache/dovecot/%i/control:INDEX=/var/cache/dovecot/%i/index mail_debug: yes mail_plugins: quota imap_quota auth default: mechanisms: plain login cache_size: 10 verbose: yes debug: yes debug_passwords: yes passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd On Linux Debian Etch on Debian kernel v2.6.18; tested with XFS and Extended3. repquota /mnt/mailcache *** Report for user quotas on device /dev/mapper/mailstaff-mailcache Block grace time: 7days; Inode grace time: 7days Block limits File limits User used soft hard grace used soft hard grace - ---------------------------------------------------------------------- dvtest -- 560 600 1024 17 0 0 Then I copy messages in a directory via Thunderbird, the log shows: dovecot: Feb 20 12:12:27 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969947.P22138Q3.ux-2s11-9) failed: Resource temporarily unavailable dovecot: Feb 20 12:12:27 Error: child 22138 (imap) killed with signal 11 - -or- dovecot: Feb 20 12:09:42 Error: IMAP(dvtest): o_stream_send_istream(/mnt/mailcache/dvtest/MailDir/.test/tmp/1171969782.P22134Q6.ux-2 s11-9) failed: Disk quota exceeded dovecot: Feb 20 12:09:42 Error: child 22134 (imap) killed with signal 11 and repquota /mnt/mailcache dvtest +- 616 600 1024 6days 20 0 0 The Thunderbird continues to copy other messages believing everthing is OK. There is also this message on the screen (started via dovecot -F): dm-1: write failed, user block limit reached. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdr0Vy9SORjhbDpvAQIKfwgA0vONUFwD5nZ1iOb0z+bRf2Kxz9/9r6QE yqZ/iL6FylJMDQwNi9hY3EbzIbu+pEs3SJrz3VVKuWO7bVyhVTFpxQaSS8vBokXo 6cnLuG5V+n3jtyqy26lM1VQWDCifEY/++YAs/KmJ5NQHm0mk5bUEc6fhDeL4D6MJ UcKUBrQ8S2B6vJMBQfcabgnC8KR9kh+xvvUtvlnsfpoaInAKx8x4r1S+9mMjbAEv lIjHt+yavW6Hlq+HmVCirTddesy1rQDFiDSrrV9F8Sp43GpxHyjun9iK6CGrQkJf AO4o2DsBIbBrhvyUrzUks1dR8ZHasyBQDuMVG02/s1bM3UIkJVX3RA== =/MmG -----END PGP SIGNATURE-----

2 2

[Dovecot] Apple Mail/Tiger Bug came up on the pf mailing list. . .
by Sean Kamath 20 Feb '07

20 Feb '07

Hi all, Just FYI, this post showed up on the pf mailing list a couple of days ago: Cc: pf(a)benzedrine.cx From: Axel Rau <Axel.Rau(a)Chaos1.DE> Subject: Re: mismatch on route through packet/byte counts Date: Sun, 18 Feb 2007 14:37:56 +0100 To: Daniel Hartmeier <daniel(a)benzedrine.cx> X-Mailer: Apple Mail (2.752.2) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by insomnia.benzedrine.cx id l1IDc2fg029064 Sender: owner-pf(a)benzedrine.cx Thank you, Daniel, for taking the time to analyze my traces and to explain the problem so perfect, that even non-net-developers, like I, can understand it. (-;) > > This looks like a bug in the client's TCP/IP stack, and how to fix it > depends on the client's OS. IMO, the RST is invalid, and pf is > right in > blocking it. The OS is Darwin 8.8 / Mac OS X 10.4.8, a 4.4BSD descendant and the relevant source may be in netinet/tcp_output.c, found here http://www.opensource.apple.com/darwinsource/10.4.8.ppc/xnu-792.12.6 Good news is that your diagnosis could bring us forward to resolve a long running painful bug filed against Mail.app, the Apple email client. If you agree, I would like to add your diagnosis to my open bug report and cross-post the mail on the Darwin Developers list, before filing a new bug against Darwin. Axel --------------------------------------------------------------------- Axel Rau, â˜€Frankfurt , Germany +49 69 9514 18 0

1 0

[Dovecot] relocating indexes.
by Rob Shepherd 20 Feb '07

20 Feb '07

Dear Dovecot users, I'd like to relocate indexes from NFS to local storage. I plan to replace... default_mail_env = maildir:~/.maildir with mail_location = maildir:~/.maildir:INDEX=/usr/local/var/dovecot/index/%u However, to minimise disruption, by avoiding dovecot rebuilding indexes for many user's large and numerous folders, I'd like to copy the existing indexes to the new location. Here is a list of _my_ indexes (in and under ~/.maildir) ./.Drafts/dovecot-uidlist ./.Drafts/dovecot.index ./.Drafts/dovecot.index.cache ./.Drafts/dovecot.index.log ./.OpenLDAP/dovecot-keywords ./.OpenLDAP/dovecot-uidlist ./.OpenLDAP/dovecot.index ./.OpenLDAP/dovecot.index.cache ./.OpenLDAP/dovecot.index.log ./.OpenLDAP/dovecot.index.log.2 ./.Sent/dovecot-keywords ./.Sent/dovecot-uidlist ./.Sent/dovecot.index ./.Sent/dovecot.index.cache ./.Sent/dovecot.index.log ./.Trash/dovecot-keywords ./.Trash/dovecot-uidlist ./.Trash/dovecot.index ./.Trash/dovecot.index.cache ./.Trash/dovecot.index.log ./.mailscanner/dovecot-keywords ./.mailscanner/dovecot-uidlist ./.mailscanner/dovecot.index ./.mailscanner/dovecot.index.cache ./.mailscanner/dovecot.index.log ./.mailscanner/dovecot.index.log.2 ./.nagios/dovecot-keywords ./.nagios/dovecot-uidlist ./.nagios/dovecot.index ./.nagios/dovecot.index.cache ./.nagios/dovecot.index.log ./.samba/dovecot-keywords ./.samba/dovecot-uidlist ./.samba/dovecot.index ./.samba/dovecot.index.cache ./.samba/dovecot.index.log ./.samba/dovecot.index.log.2 ./.sw-announce/dovecot.index ./.sw-announce/dovecot.index.cache ./.sw-announce/dovecot.index.log ./dovecot-keywords ./dovecot-uidlist ./dovecot.index ./dovecot.index.cache ./dovecot.index.log ./dovecot.index.log.2 Would I be correct in copying these to /usr/local/var/dovecot/index/rob/ (_my_ new index loc) whilst preserving the structure of the folders etc. Thanks Rob -- Rob

4 3

[Dovecot] startup script under FreeBSD 6.2 / dovecot-1.0rc22
by Alexis Susset 20 Feb '07

20 Feb '07

Hi all, I recently installed Dovecot rc22 from the FreeBSD ports and I have some problem with the dovecot startup: - If I start dovecot manually, it works fine, it starts and I get messages in /var/log/maillog - If I reboot the machine, that's where the problem appears, dovecot doesn't seem to start and I get nothing, no errors in /var/log/maillog Any idea if this is a known problem and how to fix it ? Thanks in advance, Regards, -- Alexis

4 5

[Dovecot] Run fetchmail after login?
by Brett B. 20 Feb '07

20 Feb '07

Hello all, I was wondering if it is possible to run fetchmail after a user logs into dovecot? So far I have tried to make a small script that contains the command for fetchmail. Then I told the dovecot mail_executable to look at that script. However this ends up leaving the server hanging and does not seem to work. Thanks

2 1

[Dovecot] Dovecot losing .mailboxlist files
by Lauri Jesmin 20 Feb '07

20 Feb '07

Hello! I am running a site that has two servers, 10 000 users in both, Solaris 9 and home directories with mbox mailboxes shared with NFS. Indexes are kept separately in both server, on local disks, both servers are serving imap (from NFS mboxes). We are trying to convert from uw-imap to dovecot. Servers are currently running on their limits and now i have mysterious problems with .mailboxlist file: i patched dovecot to use .mailboxlist file instead of .subscriptions, but sometimes the .mailboxlist file disappears on some users. Instead there are appearing .nfsXXXXXX files, where XXXXXX is combination of numbers and capital letters. Also some users have problems with subscribing to folders, others do not have this problem. It seems to be that users who do not have .mailboxlist have also problems with subscribing to folders. Dovecot is version 1.0rc22. I have not discovered error messages in logs. -- Lauri Jesmin <lauri.jesmin(a)ut.ee> Tartu Ülikool

2 1

[Dovecot] mbox assert crashes finally fixed?
by Timo Sirainen 20 Feb '07

20 Feb '07

Patch: http://dovecot.org/list/dovecot-cvs/2007-February/007760.html Nightly snapshot should be ready in a few minutes. I'll release rc23 tomorrow. Night.

1 0

[Dovecot] Weird Issues with latest nightly (pre-rc23)
by Cassidy B. Larson 20 Feb '07

20 Feb '07

Just updated one of my proxy boxes to the latest nightly (20070217), restarted the dovecot process and got a bit of errors showing up for each pop3/imap connection. Feb 19 11:14:00 marbella dovecot: pop3-login: Login: user=<user1(a)host.com>, method=PLAIN, rip=209.33.217.218, lip=204.17.177.60 Feb 19 11:14:00 marbella dovecot: POP3(user1(a)host.com): Set pop3_uidl_format in config file Feb 19 11:14:00 marbella dovecot: child 33684 (pop3) returned error 89 Feb 19 11:14:04 marbella dovecot: imap-login: Login: user=<user2(a)host.com>, method=PLAIN, rip=204.17.177.50, lip=204.17.177.60 Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): mbox: Can't create root mail directory /dev/null/mail: Not a directory Feb 19 11:14:04 marbella dovecot: IMAP(user2(a)host.com): MAIL environment missing and autodetection failed (home /dev/null) Feb 19 11:14:04 marbella dovecot: child 33753 (imap) returned error 89 On the pop3 errors above. Why should I have a pop3_uidl_format in the config file for the proxy? This was working fine on rc19. I do have a pop3_uidl_format on my storage boxes. Same with the imap section. It should just proxy over (and is on rc19), the proxy shouldnt have to know about the mail directory. Am I the only one seeing this? Or have I missed a config change that is required? thanks, Cassidy

2 2

[Dovecot] Dovecot authentication problem
by Marion Keith 20 Feb '07

20 Feb '07

Hi all, New SUSE 10.2 install, Sendmail, dovecot 1.0.rc14-7 SUSE rpm. Was using PAM for authentication. Worked like a champ since Feb 7th. No changes to system. Yesterday authentication failed. I can't even authenticate locally with "telnet localhost" options to test pop3 or imap. It appears that my pam authentication has somehow gotten changed. Can anyone direct me to some PAM debugging help? Thanks, Marion

1 0

[Dovecot] LDAP auth load? (looking for advice)
by Troy Engel 19 Feb '07

19 Feb '07

One of the changes my beta testers are testing is switching from NIS to LDAP for login/auth/homedir lookups; all is working perfectly, Dovecot + PAM/nss_ldap is A-OK. No issues here, we've been using LDAP lookups on other servers for years. I'm wondering about load, specifically if when I switch the entire company over, will the new authentication load stress my LDAP server to the point of breaking. A) Does anyone here have some numbers or experience in this switch that could lend some real-world advice? We're talking maybe... 50 people with large (numerically, not gig-age) mailboxes, and ThunderBird seems to open 4-5 connections per client based on the logs. B) Would anyone advise that I run a slapd slave directly on the main Dovecot server to alleviate load? Is this overkill and I shouldn't worry about it? Mainly what has me concerned is that on the Dovecot machine, I'm getting a number of entries in the messages that look like: dovecot-auth: nss_ldap: reconnecting to LDAP server... dovecot-auth: nss_ldap: reconnected to LDAP server after 1 attempt(s) No failures ever, it all just works. But still this tickles my brain that maybe it'll need more robustness come production time. Thanks for your feedback, -te -- Troy Engel | Systems Engineer Fluid Inc. | http://www.fluid.com

5 5

[Dovecot] repeat downloads of message headers in 1.0rc19
by Brian G. Peterson 19 Feb '07

19 Feb '07

I upgraded one server to 1.0rc19 (from rc15) over the weekend, and have since received several reports of dovecot erroneously retrieving older messages as new mail. I've seen this myself intermittently on KMail, and users have reported it on Thunderbird, Squirrelmail, and Outlook. I see some things in the archives that suggest that this was a problem in older 1.0 release candidates, but hadn't experienced the problem myself until just now. Has anyone else seen this problem? Regards, - Brian

5 14

[Dovecot] wrong dovecot GID while upgrading
by Zbigniew Szalbot 18 Feb '07

18 Feb '07

Hello, I tried to upgrade dovecot from 1.0.rc7 to rc22 but I got this error at the end of the upgrade process: Dovecot has reserved the groupname 'dovecot' and gid '143': ERROR: groupname 'dovecot' already in use by gid '1003' Please resolve these issues and try again: Either remove the conflicting group or if you wish to continue using a legacy gr oup override DOVECOT_GID. *** Error code 1 Stop in /usr/ports/mail/dovecot. So I went to /usr/ports/mail/dovecot and edited the Makefile to change the GID into: DOVECOT_UID?= 1003 DOVECOT_GID?= 1003 SCRIPT_ENV+= DOVECOT_UID=${DOVECOT_UID} \ DOVECOT_GID=${DOVECOT_GID} I saved the makefile and ran portupgrade again but I got stopped by exactly the same error. I'd appreciate suggestions how to resolve this. Thank you! -- Zbigniew Szalbot

3 2

[Dovecot] Reproducible duplicate messages bug with Mail.app+Dovecot
by Andrew Moran 18 Feb '07

18 Feb '07

Hey guys, I am not sure if this is a Mail.app bug or a dovecot bug. I can reproduce it 100% of the time using dovecot and Mail.app. I cannot reproduce it with other imap clients, which at first made me think it was Mail.app, but then I tried Mail.app with other imap servers and couldn't reproduce it either, so it's definitely the combination of the two. So I thought I'd try you guys first before submitting a bug to Apple. The problem: If I move multiple messages (set "A") from one imap folder to another, then delete those messages, and then move another set into that same folder (set "B"), then all the messages in set B show up as duplicates until I relaunch Mail.app. My configuration: Server: Dovecot 1.0rc22 using Maildir on FreeBSD 6.1 Client: Mail.app 2.1 on OS X 10.4.8 Steps to reproduce: (these steps involve trashing messages, so it's best to test this on email you are going to toss anyway) 1) Create a new imap folder (let's say "bar") 2) Drag more than one message (let's say 3 or 4) from existing imap folder "foo" to new folder "bar". 3) Click on new folder "bar" and see messages in there. 4) Select messages and delete them (Delete key). Messages are gone as expected. 5) Go back to original folder "foo" and drag a few more messages into new folder "bar" 6) Click on bar. 7) You will notice that all the second set of messages show up twice. Relaunching Mail.app at this point makes the problem disappear. I'm guessing this has something to do with the deleted messages from Set A being purged until the close of imap connection. Any help narrowing this down would be appreciated. Thank you, --Andy

3 4

[Dovecot] Problem moving emails with attachments or HTML links
by J. Wren Hunt 18 Feb '07

18 Feb '07

I recently switched from UW-IMAP to Dovecot (1.0.rc15 on Ubuntu) and am experiencing a weird problem that I haven't been able to figure out yet: If I try to move a message from one IMAP folder to another, all works fine if the message is plain text. However, *sometimes* the message will not be transferred if it contains either an attachment and/or an HTML link (operation times-out). Not all the time, but just enough to be annoying. I've looked through the logs and for settings in the .conf file and can't find anything obvious that I've overlooked. Can anyone help me with any parameters that might be causing this type of problem? Thanks so much! Wren Hunt Cambridge, MA

3 6

[Dovecot] MySQL question
by spammy 18 Feb '07

18 Feb '07

Hi all, Trying to migrate my actual mailserver postfix Cyrus-IMAP with virtual users to dovecot. done some tests and seems to work quite well except for; I would like to integrate my virtual configuration to share SQL information throw various daemons, like postfix, amavis and so on. By default, Dovecot sets the database users table to "users" but I would like to change it to "mailboxes". this is because I don't want to change all my configiuration files already setup, only for dovecot. is this possible? best regards, xtura Fedora Core 6 Dovecot 1.0 rc22

2 1

[Dovecot] LDA plugins mail_plugin_dir
by Dick Middleton 18 Feb '07

18 Feb '07

The LDA option mail_plugin_dir isn't by any chance like PATH i.e. can have more than one directory? I want to pick up some plugins from /usr/lib and some from elsewhere. Thanks Dick

2 3

[Dovecot] master request not found
by Marshal Newrock 18 Feb '07

18 Feb '07

I am setting up dovecot 1.0-rc15 as a proxy. When I try to log in, I get errors such as the following: Dec 4 17:39:23 vega dovecot: Dovecot v1.0.rc15 starting up Dec 4 17:39:24 vega dovecot: auth-worker(default): mysql: Connected to localhost (ad_mail) Dec 4 17:39:31 vega dovecot: auth(default): client in: AUTH 1 PLAINservice=POP3 lip=xx.xx.xx.xx rip=xx.xx.xx.xx resp=<hidden> Dec 4 17:39:31 vega dovecot: auth(default): client out: CONT 1 Dec 4 17:39:31 vega dovecot: auth(default): client in: CONT<hidden> Dec 4 17:39:31 vega dovecot: auth-worker(default): sql(XXXX,xx.xx.xx.xx: query: SELECT NULL AS password, host, destuser, 'Y' AS proxy FROM exchange_proxy WHERE user='XXXX' Dec 4 17:39:31 vega dovecot: auth(default): client out: OK 1 user=XXXX host=XXXX destuser=newrock.marshal(a)acd.net proxy pass=<hidden> Dec 4 17:39:31 vega dovecot: auth(default): master in: REQUEST 1 171931 Dec 4 17:39:31 vega dovecot: auth(default): Master request 17193.1 not found Dec 4 17:39:31 vega dovecot: auth(default): master out: NOTFOUND 1 Dec 4 17:39:31 vega dovecot: pop3-login: Internal login failure: user=<XXXX>, method=PLAIN, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx dovecot.conf contains: auth default { mechanisms = plain login passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb static { args = uid=0 gid=0 } user = nobody } In dovecot-sql.conf: password_query = SELECT NULL AS password, host, destuser, 'Y' AS proxy FROM exchange_proxy WHERE user='%u' I have verified that I can log into the remote server from the proxy via pop3. Unfortunately, there isn't currently imap access to the remote server. I am connecting to the proxy using pop3 (with "telnet localhost 110"). Any suggestions what the problem could be? -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 4

[Dovecot] master password 'username contains disallowed character: 0x2a'
by Dale Bewley 18 Feb '07

18 Feb '07

v1.0.rc22 FC6 x86_64 So, here is my config: protocol imap { } protocol pop3 { } protocol lda { postmaster_address = postmaster(a)example.com } auth_master_user_separator = * auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot.masterusers master = yes } passdb pam { } userdb passwd { } user = root } dict { } plugin { } But here is what happens when I try to login as dlbewley*zimbra using the password I put in dovecot.masterusers. Feb 16 23:37:30 tofu dovecot: Dovecot v1.0.rc22 starting up Feb 16 23:37:31 tofu dovecot: auth(default): passwd-file /etc/dovecot.masterusers: Read 1 users Feb 16 23:37:49 tofu dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:169.237.1.109 rip=::ffff:169.237.2.160 Feb 16 23:37:49 tofu dovecot: auth(default): client out: CONT 1 Feb 16 23:37:49 tofu dovecot: auth(default): client in: CONT 1 ZGxiZXdsZXkqemltYnJhAGRsYmV3bGV5KnppbWJyYQBjb2tlc2hpdDc= Feb 16 23:37:49 tofu dovecot: auth(default): plain(zimbra,::ffff:169.237.2.160): login user: Username contains disallowed character: 0x2a Feb 16 23:37:49 tofu dovecot: auth(default): client out: FAIL 1 user=zimbra Feb 16 23:37:49 tofu dovecot: imap-login: Disconnected: user=<zimbra>, method=PLAIN, rip=::ffff:169.237.2.160, lip=::ffff:169.237.1.109, TLS If I try setting this: auth_username_chars = I get this: Feb 16 23:45:15 tofu dovecot: Dovecot v1.0.rc22 starting up Feb 16 23:45:16 tofu dovecot: auth(default): passwd-file /etc/dovecot.masterusers: Read 1 users Feb 16 23:45:22 tofu dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=::ffff:169.237.1.109 rip=::ffff:169.237.2.160 Feb 16 23:45:22 tofu dovecot: auth(default): client out: CONT 1 Feb 16 23:45:22 tofu dovecot: auth(default): client in: CONT 1 ZGxiZXdsZXkqemltYnJhAGRsYmV3bGV5KnppbWJyYQBjb2tlc2hpdDc= Feb 16 23:45:22 tofu dovecot: auth(default): passdb(zimbra,::ffff:169.237.2.160,master): Master user logging in as dlbewley*zimbra Feb 16 23:45:22 tofu dovecot: auth(default): client out: OK 1 user=dlbewley*zimbra Feb 16 23:45:22 tofu dovecot: auth(default): master in: REQUEST 1 7537 1 Feb 16 23:45:22 tofu dovecot: auth(default): passwd(dlbewley*zimbra,::ffff:169.237.2.160): unknown user Feb 16 23:45:22 tofu dovecot: auth(default): userdb(dlbewley*zimbra,::ffff:169.237.2.160): user not found from userdb Feb 16 23:45:22 tofu dovecot: auth(default): master out: NOTFOUND 1 Feb 16 23:45:22 tofu dovecot: imap-login: Internal login failure: user=<dlbewley*zimbra>, method=PLAIN, rip=::ffff:169.237.2.160, lip=::ffff:169.237.1.109, TLS

2 2

Re: [Dovecot] 1.0.rc23 tomorrow
by Bill Boebel 18 Feb '07

18 Feb '07

On Sat, February 17, 2007 8:09 am, Timo Sirainen <tss(a)iki.fi> said: > http://dovecot.org/nightly/dovecot-latest.tar.gz > > Would be nice to get some testing before the actual release. > Haven't tested this version yet, but we pulled a copy from CVS around mid-day Friday and it has been running fine for the past 30 hours. Bill

1 0

Re: [Dovecot] I keep getting password mismatches
by Mark 18 Feb '07

18 Feb '07

i have that: #%PAM-1.0auth required pam_nologin.soauth include system-authaccount include system-authsession include system-auth[root@School-Mail ~]# and i`m still not able to login with a webmail ldap client ot with thunderbird (also ldap) the error messages are still the same. > Date: Thu, 15 Feb 2007 10:10:13 -0800> From: tengel(a)fluid.com> To: dovecot(a)dovecot.org> Subject: Re: [Dovecot] I keep getting password mismatches> > Mark wrote:> > > > auth(default): passwd(mark,127.0.0.1): password mismatch> > > > The strange thing is that i can login with ssh using my username and > > password but i can`t do anything related to dovecot..> > Do you have a PAM stack installed to allow your dovecot process access > to authentication? (/etc/pam.d/dovecot e.g.)> > http://wiki.dovecot.org/PasswordDatabase/PAM> > -te> > -- > Troy Engel | Systems Engineer> Fluid, Inc | http://www.fluid.com _________________________________________________________________ Probeer Live.com: je eigen persoonlijke opstartpagina met alleen de dingen die jij belangrijk vindt op één plek. http://www.live.com/getstarted

1 0

[Dovecot] [Fwd: wrong dovecot GID while upgrading]
by Zbigniew Szalbot 17 Feb '07

17 Feb '07

Sorry to have bothered - just read the updating file...! I should have let the upgrading process remove the dovecot user... Warm regards, ZS ---------------------------- Original Message ---------------------------- Subject: wrong dovecot GID while upgrading From: "Zbigniew Szalbot" <zbyszek(a)szalbot.homedns.org> Date: Sat, February 17, 2007 21:10 To: dovecot(a)dovecot.org -------------------------------------------------------------------------- Hello, I tried to upgrade dovecot from 1.0.rc7 to rc22 but I got this error at the end of the upgrade process: Dovecot has reserved the groupname 'dovecot' and gid '143': ERROR: groupname 'dovecot' already in use by gid '1003' Please resolve these issues and try again: Either remove the conflicting group or if you wish to continue using a legacy gr oup override DOVECOT_GID. *** Error code 1 Stop in /usr/ports/mail/dovecot. So I went to /usr/ports/mail/dovecot and edited the Makefile to change the GID into: DOVECOT_UID?= 1003 DOVECOT_GID?= 1003 SCRIPT_ENV+= DOVECOT_UID=${DOVECOT_UID} \ DOVECOT_GID=${DOVECOT_GID} I saved the makefile and ran portupgrade again but I got stopped by exactly the same error. I'd appreciate suggestions how to resolve this. Thank you! -- Zbigniew Szalbot -- Zbigniew Szalbot

1 0

[Dovecot] Dovecot "open files" (again?)
by falz 17 Feb '07

17 Feb '07

I'm a new dovecot user, just began using it last week. I switched from courier because my research showed that Dovecot did indexes, and allows me to store them anywhere I chose. I did this, and it fixed some severe disk IO issues that my server had. (25k horde only webmail install using imap proxy). I'm using quotas, and by default had it set to 'dirsize'. my postfix is already creating 'maildirsize' files, so I opted to change dovecot to use this instead. However, when I do, I run into the "too many open files" issue that's been reported many times on the list. I've seen a lot of mention of too many open files, but I haven't seen it related to the quota type used. It's possible that simply my using 'dirsize' as the quota type slows things down enough to not have the issue? I don't really know. Anyhow. I doubled my max open files in FreeBSD's /boot/loader.conf to: kern.maxfiles="24656", but to no avail. When I have it set to maildirsize, the open files on the system grows uncontrollably. Under normal use, it's somewhere below 5k: sysctl -a | grep openfiles kern.openfiles: 4415 I looked into the patch mentioned here: - http://www.dovecot.org/list/dovecot/2006-November/017536.html - http://dovecot.org/list/dovecot-cvs/2006-November/006776.html Those patches already appear to be in rc15, which I'm already running (Via FreeBSD's ports). I also applied the patch mentioned here awhile back: - http://www.dovecot.org/list/dovecot/2005-June/007647.html and rebuilt, but it didn't help out either. There are also freebsd specific notes on forcing a limit on dovecot itsself using login.conf, but that wouldnt really fix anything, it would just cause dovecot to not interfere with other running daemons. - http://www.mail-archive.com/ports@openbsd.org/msg08646.html Any thoughts? TSS, you mention a few times in these notes that you're unable to reproduce this. Perhaps try with the maildir as quota? More details about my setup: - FreeBSD 4.8 (yea, I know) - Imapproxy (http://www.imapproxy.org/) - Postfix to create maildir++ maildirsize folders - MySQL backend The work of this is spread out between several servers, dovecot is running on the server that's the final SMTP delivery location, and has local disks with the maildirs. --falz

2 5

[Dovecot] upgrade from 1.0rc7
by Zbigniew Szalbot 17 Feb '07

17 Feb '07

Hello, Have been to dovecot website but could not find information on what I need to check before I upgrade from the current 1.0rc7 which I am using on a FreeBSD 6.2 system. Will the old conf (virtual users, no ssl) file work with upgraded dovecot? Many thanks! -- Zbigniew Szalbot

2 1

Re: [Dovecot] Reply-To header
by Kenny Dail 17 Feb '07

17 Feb '07

> On Saturday 17 February 2007 00:13, Mark E. Mallett wrote: > > On Sat, Feb 17, 2007 at 12:33:40AM +0200, Timo Sirainen wrote: > > > On Fri, 2007-02-16 at 15:16 -0600, Richard Laager wrote: > > > > I see you've added a Reply-To header later. The canonical response in > > > > this case is for someone to reference: > > > > http://www.unicom.com/pw/reply-to-harmful.html > > > > A canonical response to that is > > > > http://www.metasystema.net/essays/reply-to.mhtml > > My mind was not changed, sorry. First, RFC 822 is obsolete, and RFC 2822 does > not contain the quoted paragraph. Instead it says that '[w]hen > the "Reply-To:" field is present, it indicates the mailbox(es) to which the > author of the message suggests that replies be sent.' - the author, not the > mailing list software. There are other fields for that. Fortunately Dovecot's set-up, does make it the author's choice. -- Kenny Dail <kend(a)amigo.net>

2 1

[Dovecot] Problem/workaround with X-Keywords and Apple's Mail.app
by Joey Coleman 17 Feb '07

17 Feb '07

Hello, I've just switched from UW-IMAP to Dovecot, and for the most part, things are good. However, I encountered the problem with the X-Keywords header not being written back into individual messages in an mbox file (originally described in [1], and Timo gave a clue as to maybe why in [2]). What was happening for me is that Apple's Mail.app would flag a message as spam, which happily sets a couple keywords in the message, but those weren't being written back (at least, I didn't see them in the file on the server). The "DO NOT DELETE..." message had a perfectly fine X-IMAP header, and up until I switched things were working great. The user visible symptom of this happened every time new spam arrived in my Junk folder [3] --- the new spam would arrive, be flagged as spam by Mail.app, and the earlier pieces of mail would promptly be unflagged! Anyway, Timo's clue in [2] prompted me to turn off both mbox_lazy_writes and mbox_dirty_syncs (the latter just on the off- chance... it's a low-volume server, so I can deal with the inefficiency). Lo and behold, Mail.app started acting sane again *and* the X-Keywords header appeared immediately. Oddly, during all of this, the Status and X-UID keywords would appear in the messages just fine; no clue as to why those and not X- Keywords. Version details are: - Dovecot 1.0rc13 [4] - FreeBSD 5.3-RELEASE - Apple Mail.app 2.1 (752/752.2) cheers, --joey [1] http://dovecot.org/list/dovecot/2006-March/011872.html [2] http://dovecot.org/list/dovecot/2006-June/014126.html [3] And it felt really strange while troubleshooting this as I found myself *hoping* for another piece of spam to arrive. Bleh. [4] Yes, two versions behind current, but in my defense, I did check the announcements and they didn't seem to mention the problem.

2 1

[Dovecot] DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
by Gerhard Wiesinger 17 Feb '07

17 Feb '07

Hello! I see the internal message from pine with the following subject (mbox format, dovecot 1.0rc22): DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA As far as I know this message should be filtered. I never saw this before in previous 1.0 betas and 1.0rc (nearly every version tested). Any ideas Timo? Ciao, Gerhard -- http://www.wiesinger.com/

3 3

[Dovecot] Going nuts
by Mário Gamito 17 Feb '07

17 Feb '07

Hi, The subject says it all. For two days i've been trying to get IMAP and IMAPS working and nothing. I'm running CentOS 4.4 with qmail-ldap I just can't login in dovecot. Following my signature is some info. You can find my dovecot.conf at http://www.gamito.org/dovecot.conf I'm about to give up :( Any help would be appreciated. Warm Regards, Mário Gamito --------------------------------------------------------------------- [root@mail login]# telnet mail.sincity.lan 143 Trying 192.168.5.129... Connected to mail.sincity.lan (192.168.5.129). Escape character is '^]'. * OK Dovecot ready. O LOGIN gamito(a)mail.sincity.lan 143 O NO Temporary authentication failure. O LOGOUT * BYE Logging out O OK Logout completed. Connection closed by foreign host. -------------------------------------------------- [root@mail login]# tail /var/log/dovecot/dovecot.log dovecot: Feb 17 00:01:02 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.5.129 rip=192.168.5.129 resp=<hidden> dovecot: Feb 17 00:01:02 Info: auth(default): checkpassword(gamito(a)mail.sincity.lan,192.168.5.129): Executed: /usr/local/bin/auth_imap /usr/local/libexec/dovecot/checkpassword-reply dovecot: Feb 17 00:01:02 Info: auth(default): checkpassword(gamito(a)mail.sincity.lan,192.168.5.129): Received no input dovecot: Feb 17 00:01:02 Error: auth(default): checkpassword: Child 31122 died with signal 11 dovecot: Feb 17 00:01:04 Info: auth(default): client out: FAIL 1 user=gamito(a)mail.sincity.lan temp dovecot: Feb 17 00:01:10 Info: imap-login: Aborted login: user=<gamito(a)mail.sincity.lan>, method=PLAIN, rip=192.168.5.129, lip=192.168.5.129, secured -------------------------------------------------------------------------

3 10

[Dovecot] again... cross compiling
by Martin Höfling 17 Feb '07

17 Feb '07

> Create a cache file with the right values, or call configure with those > values set in the environment. OK, i ran configure with -C one time without cross compiler env set, to obtain the variables another time with -C to use the config.cache . I could not find anything related to the check whether size_t is signed. I found a variable which i set that way: ignored_signed_size=${ignore_signed_size=1} What's wrong with that? Cheers Martin P.S.: Is there a way to obtain all variables in an easy way, or to obtain the variable that has to be set by hand? -- Frag' nicht - Du könntest eine Antwort erhalten. (Markus Mehring in d.a.arnooo)

3 2

Re: [Dovecot] Reply-To header
by Kenny Dail 17 Feb '07

17 Feb '07

> On Fri, 2007-02-16 at 15:16 -0600, Richard Laager wrote: > > I see you've added a Reply-To header later. The canonical response in > > this case is for someone to reference: > > http://www.unicom.com/pw/reply-to-harmful.html > > Yes, I've read that page. It says basically that it makes replying > privately to the sender difficult. I'm sure it does, but in this list I > don't think pretty much anyone ever wants to reply to someone only > privately. Since deliberate choice is required to go in and set the maillist option, this is no different than if I configure my MUA to set the reply-to header on messages I send to the list. So the way it has been implemented for this list is not a problem at all. If people feel the need to reply to me off list, I feel that should be a deliberate choice on their part. -- Kenny Dail <kend(a)amigo.net>

1 0

Re: [Dovecot] Bug tracking system
by Kenny Dail 17 Feb '07

17 Feb '07

> > > I don't think I want an anonymous user to be able to create bugs. Maybe > > > what I'm after is an automatic user creation based on the given email > > > address, but the user won't be able to log in before verifying the > > > email. If a user already exists for the given email address, that bug > > > also belongs to that existing user even though no password was asked > > > (but it could mention that it was created anonymously and log the IP). > > > > But that's how most othe rregstration systems work too. All > > bugzilla/mailman etc. typically want is to verify the autheticity of > > the given email address. > > But why? If all you're doing is just adding a new bug, what's the point > of verifying the email address? It's just annoying to the user. Especially if someone like myself is already registered to the mailing list, I don't feel the need to go and register into a bugtracking system and have my email verified yet again. > I just made a simple mockup of what I'd like the "Enter new bug" page to > be like: http://dovecot.org/tmp/bug.html Nice and simple is good. I'd include a couple of other fields to make it easy to get useful info, like dovecot version and OS. But I'd really prefer to just email reports in to the list. > The log in page would then allow logging in with email/password, or > allow "registering" the user by sending a new password to the email. Perhaps it can just be integrated with the maillist login page? -- Kenny Dail <kend(a)amigo.net>

1 0

[Dovecot] filtering out LIST cruft?
by Dan Price 17 Feb '07

17 Feb '07

In planning our migration, I've noticed that lots of users have bits of lint in their ~/mail and/or ~/Mail. For example-- for an mbox called "blah" we may see: blah blah.msf (from Thunderbird) .blah.summary (from... I'm not sure, dtmail maybe) .blah_SIMS_index0003 (from our old IMAP server). When the user goes to "subscribe" they are often overloaded with too many items to choose from-- because all of these files are selectable in the UI-- LIST happily returns them. Is there a way to get dovecot to skip over these, by regex? Could it optionally "taste" files to see if they look like mboxes? I looked at the wiki and the source but didn't find anything. In the absence of this feature, I wonder how other sites have handled this? Obviously I can do some cleanup during migration, but I find that those pesky msf files like to come back. -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

2 1

[Dovecot] imap core dump with rc18
by Nicolas STRANSKY 17 Feb '07

17 Feb '07

Hi, I had a core dump while using rc18. Here are the backtraces: Jan 23 01:01:44 rouge dovecot: IMAP(user): file mail-index-view.c: line 386 (_view_lookup_uid_range): assertion failed: (*last_seq_r >= *first_seq_r) Jan 23 01:01:44 rouge dovecot: IMAP(user): Raw backtrace: [0x47f25b00000000] Jan 23 01:01:44 rouge dovecot: child 24319 (imap) killed with signal 6 Core was generated by `imap'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 #0 0x00002b3448083545 in raise () from /lib/libc.so.6 (gdb) bt full #0 0x00002b3448083545 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00002b3448084cce in abort () from /lib/libc.so.6 No symbol table info available. #2 0x0000000000465fd5 in i_set_failure_file () No symbol table info available. #3 0x000000000046585c in i_panic () No symbol table info available. #4 0x000000000044fff3 in mail_index_view_unref_maps () No symbol table info available. #5 0x00000000004505c7 in mail_index_lookup_uid_range () No symbol table info available. #6 0x000000000043be90 in index_storage_get_uids () No symbol table info available. #7 0x0000000000458d37 in mailbox_get_uids () No symbol table info available. #8 0x0000000000419eef in imap_messageset_parse () No symbol table info available. #9 0x000000000041aaae in imap_search_get_arg () No symbol table info available. #10 0x0000000000412e45 in cmd_fetch () No symbol table info available. #11 0x0000000000415910 in cmd_uid () No symbol table info available. #12 0x00000000004164a1 in _client_reset_command () No symbol table info available. #13 0x0000000000416430 in _client_reset_command () No symbol table info available. #14 0x0000000000416591 in _client_input () No symbol table info available. #15 0x000000000046b5bb in io_loop_handler_run () No symbol table info available. #16 0x000000000046ab4c in io_loop_run () No symbol table info available. ---Type <return> to continue, or q <return> to quit--- #17 0x000000000041dd1b in main () No symbol table info available. Regards, -- Nico Ce n'est pas en continuant de faire ce que l'on connaît que l'on pourra faire ce que l'on ne connaît pas

2 3

[Dovecot] severe performance problem (mail cache related?)
by Dan Price 17 Feb '07

17 Feb '07

Hi all, we're having a bad day with email :) I have a user who was complaining of poor performance today when opening mailboxes. Total time to open the box was about 1 minute. Upon truss'ing the imap process during an open, I saw the trace quoted below at the end of the email. As you can see, for each "FETCH" line of response, we were seeing dovecot do a ton of work-- mmaping anon, lots of munmaps(), etc. -- mmap() and munmap() are not free. The stack trace of at least one of the munmaps is captured below, as well-- deep inside of the mail caching code. Then, I moved aside the user's .imap directory, assuming that forcing dovecot to rebuild its indices and caches could help-- and sure enough the user reported that mailbox open times had dropped to 18 seconds. I truss'd that open, briefly, and it was just a ton of preads at high speed. So I don't know why this user was fine for a week, then suddenly hit this. This is a grave concern if I'm going to roll this out from 15 test users to 250 production users. Thanks for your help. PS: Raw logs are also attached below. -dp write(1, " * 1 0 7 9 5 F E T C".., 2050) = 2050 mmap64(0x00000000, 7356416, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFD800000 munmap(0xFE602000, 1048576) = 0 munmap(0xFE502000, 1048576) = 0 munmap(0xFE402000, 1048576) = 0 munmap(0xFE302000, 1048576) = 0 munmap(0xFE202000, 1048576) = 0 munmap(0xFE102000, 1048576) = 0 munmap(0xFE002000, 1048576) = 0 munmap(0xFE000000, 8192) = 0 pread64(9, " n c o m @ o s s 1 >\n\0".., 8192, 7340032) = 8192 mmap64(0x00000000, 7364608, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFE800000 munmap(0xFDE04000, 1048576) = 0 munmap(0xFDD04000, 1048576) = 0 munmap(0xFDC04000, 1048576) = 0 munmap(0xFDB04000, 1048576) = 0 munmap(0xFDA04000, 1048576) = 0 munmap(0xFD904000, 1048576) = 0 munmap(0xFD804000, 1048576) = 0 munmap(0xFD802000, 8192) = 0 munmap(0xFD800000, 8192) = 0 pread64(9, " l @ p l a t i n u m >\n".., 8192, 7348224) = 8192 mmap64(0x00000000, 7372800, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFE000000 munmap(0xFEE06000, 1048576) = 0 munmap(0xFED06000, 1048576) = 0 munmap(0xFEC06000, 1048576) = 0 munmap(0xFEB06000, 1048576) = 0 munmap(0xFEA06000, 1048576) = 0 munmap(0xFE906000, 1048576) = 0 munmap(0xFE806000, 1048576) = 0 munmap(0xFE802000, 16384) = 0 munmap(0xFE800000, 8192) = 0 pread64(9, "\0\0\0 0\0\0\0\0 C c : ".., 8192, 7356416) = 8192 ---------- ---------- ---------- ---------- ---------- ---------- ---------- ff1c3e14 munmap (100000, bdc000, fe6de000, 2dc000, 0, 1ef0) + 8 00080bb4 file_cache_set_size (c03a0, 0, bdc110, 408, 0, 110) + e0 00080cec file_cache_read (0, bdbd08, bdbd08, 408, 0, 684a8) + a4 000594a0 mail_cache_map (191268, bdbd08, 408, ffbff274, 3, fffffffc) + ec 0005ae20 mail_cache_get_record (0, bdbd08, ffbff274, ffbff274, 0, 0) + 20 0005b00c mail_cache_foreach_rec (1959c8, ffbff2ec, 5b3d8, 0, b5760, 7ed8) + 10 0005b2bc mail_cache_foreach (1, 47ae, 5b3d8, 0, 0, 0) + b4 0005b47c mail_cache_field_exists (0, 47ae, 0, c0000000, b4f10, 88184) + 84 0005b64c mail_cache_lookup_field (1959c8, b5898, 47ae, 0, 191d48, 195560) + c 000531ac index_mail_get_fixed_field (195dd8, 0, 195ea0, 4, ffffffff, ffffffff) + 4c 000545e8 index_mail_set_seq (195dd8, 47ae, 19a1c8, b4b4f, 0, 47ae) + bc 00070dac mail_set_seq (195dd8, 47ae, 1, c2ce8, 0, 39c) + c 0005770c index_storage_search_next (1, 195dd8, 1, bd778, 5769c, c8ae0) + 70 00072024 mailbox_search_next (19a1c8, 195dd8, 3, 2, 0, c2b50) + 14 0002b3bc imap_fetch (c4e20, c4de8, ffbff748, 5, c2eb0, 80000000) + 6c 00026210 cmd_fetch (1, c2e88, 0, 75696400, 26054, 80000000) + 1bc 00029000 cmd_uid (0, c22f8, 0, 8, 2a134, c22f8) + 8c 00029b58 client_handle_input (c2b94, c2e80, b5760, bd778, 7ef8, 2000000) + 138 00029ad0 client_handle_input (0, 2f05e860, b5760, bd778, 45d3834d, b5000) + b0 00029cb0 _client_input (c2b50, c2b50, 26ee, 0, 1, 0) + 68 00086338 io_loop_handler_run (c0348, 0, 0, ffbffa14, 4c, 80000000) + 140 00085c14 io_loop_run (c0348, ff212cb0, 1, b573c, bae80, ff215dbc) + 34 00032064 main (ffbffc18, b4400, b5000, b573c, c1314, ff3a0180) + 3f8 00024b18 _start (0, 0, 0, 0, 0, 0) + 5c ------ ------ ------ ------ ------ ------ ------ ------ ------ ------ [in] 3 select "Mail/OpenSolaris/discuss" 4 UID fetch 1:* (FLAGS) 5 IDLE DONE 6 close 7 logout ------ ------ ------ ------ ------ ------ ------ ------ ------ ------ [out, taking 1+ minutes] * OK [RAWLOG TIMESTAMP] 2007-02-14 14:05:35 * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $Forwarded Junk \*)] Flags permitted. * 20462 EXISTS * 0 RECENT * OK [UIDVALIDITY 1159980013] UIDs valid * OK [UIDNEXT 20487] Predicted next UID 3 OK [READ-WRITE] Select completed. * 1 FETCH (FLAGS (\Seen) UID 1) * 2 FETCH (FLAGS (\Seen) UID 2) * 3 FETCH (FLAGS (\Seen) UID 3) * 4 FETCH (FLAGS (\Seen) UID 4) * 5 FETCH (FLAGS (\Seen) UID 5) * 6 FETCH (FLAGS (\Seen) UID 6) * 7 FETCH (FLAGS (\Seen) UID 7) * 8 FETCH (FLAGS (\Seen) UID 8) * 9 FETCH (FLAGS (\Seen) UID 9) * 10 FETCH (FLAGS (\Seen) UID 10) * 11 FETCH (FLAGS (\Seen) UID 11) * 12 FETCH (FLAGS (\Seen) UID 12) * 13 FETCH (FLAGS (\Seen) UID 13) * 14 FETCH (FLAGS (\Seen) UID 14) * 15 FETCH (FLAGS (\Seen) UID 15) * 16 FETCH (FLAGS (\Seen) UID 16) * 17 FETCH (FLAGS (\Seen) UID 17) * 18 FETCH (FLAGS (\Seen) UID 18) * 19 FETCH (FLAGS (\Seen) UID 19) * 20 FETCH (FLAGS (\Seen) UID 20) * 21 FETCH (FLAGS (\Seen) UID 21) * 22 FETCH (FLAGS (\Seen) UID 22) * 23 FETCH (FLAGS (\Seen) UID 23) [-----elided-----] * 20459 FETCH (FLAGS (\Seen) UID 20483) * 20460 FETCH (FLAGS (\Seen) UID 20484) * 20461 FETCH (FLAGS (\Seen) UID 20485) * 20462 FETCH (FLAGS (\Seen) UID 20486) 4 OK Fetch completed. + idling 5 OK Idle completed. 6 OK Close completed. * BYE Logging out 7 OK Logout completed. -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 12

[Dovecot] trash plugin sql
by Robert Schetterer 16 Feb '07

16 Feb '07

Hi @ll, with dovecot latest following http://wiki.dovecot.org/DovecotLDAPostfixAdminMySQL i have defined plugin { quota = maildir acl = vfile:/etc/dovecot/acls trash = /etc/dovecot/dovecot-trash.conf } Example dovecot-trash.conf file 1 Spam 2 Trash 3 Sent from wiki The Trash plugin. When saving a message would make user go over quota, this plugin automatically deletes the oldest mails from configured mailboxes until the message can be saved within quota limits. this dont work at my setup where quota is coming out of sql is there any trick to solve this? or did i missunderstand something -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany

3 6

Re: [Dovecot] repeat downloads of message headers in 1.0rc19
by Jim Garrison 16 Feb '07

16 Feb '07

I reported this against rc7 and rc8, and still see it occasionally. (I'm running the rc8 that comes with Fedora 5). It is always associated with this message in dovecot.log: dovecot: Oct 23 19:26:17 Error: POP3(user(a)domain.tld): mbox sync: UID inserted in the middle of mailbox /var/mail/vhosts/domain.tld/user (12 > 4, seq=2, idx_msgs=5) Once this happens, dovecot will refuse to clear out the mbox file when the user retrieves email via POP. Each time the user logs in to retrieve mail s/he gets everything in the mbox, which continues to grow. The only fix I've been able to find is to manually delete the mbox file. I'm using postfix as the MTA.

5 6

[Dovecot] Error message in logs
by Jay Chandler 16 Feb '07

16 Feb '07

Mbox format, running r22. Only happening to two users so far, happened on r19 as well. Feb 12 13:52:29 wurfel dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Feb 12 13:52:30 wurfel dovecot: IMAP(username): file mbox-sync-rewrite.c: line 404 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: Dyslexics retyping hosts file on servers

2 1

[Dovecot] Proxy with MasterUser + Authentication issues
by Cassidy B. Larson 16 Feb '07

16 Feb '07

Per Timo's direction, I decided to give the MasterUser a try in connecting my proxy to my destination server. This might allow for the use of 'secure password' for my clients that like to check that box by default. A couple of problems I'm running into running RC15: #1: My Proxy's SQL password_query line: password_query = SELECT a.clearpasswd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = '%u' and v.imap_active = 1 I'm wanting to authenticate the user on the proxy before I send it off via the MasterUser to the destination server. However, I show this in the logs: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= x.y.z.a rip=a.b.c.d resp=AGJ1dGNoQGluZm93ZXN0LmNvbQBzZWNyZXQ= Info: auth-worker(default): sql(user(a)host.com,a.b.c.d): query: SELECT a.clearpass wd AS password, v.storeIP AS host, CONCAT(v.userID,'*someuser') AS destuser, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS p roxy, 'somepass' AS pass FROM iwmailsystem.virtmailbox AS v NATURAL JOIN authenticate.users AS a WHERE v.userID = 'user(a)host.com' and v.imap_active = 1 Error: auth(default): file auth-request.c: line 207 (auth_request_save_cache): assertion failed: (extra_fields == NULL || (strstr(extra_fields, "\tpass=") == NULL && strncmp(extra_fields, "pass=", 5) != 0)) Error: child 54122 (auth) killed with signal 6 The Wiki showed I should return a 'pass' column. However, that's choking the query up in auth-request.c. Could it be the "\tpass" from auth-request.c? If I change user(a)host.com's password to 'someass' and remove the 'pass' column from the password_query, it authenticates, and proxy's over just fine. Am I doing something wrong? I want to authenticate the user locally on the proxy and pass off the 'master password' to the proxy, but using 'pass' doesnt work. 'password' column does. Doesnt help me though for my situation :) Problem #2: I'm wanting to put the masteruser/pass in the database for quick retrieval and updating. So I setup dovecot.conf as: passdb sql { # Path for SQL configuration file, see doc/dovecot-sql.conf for example args = /usr/local/etc/dovecot-sql.conf master=yes #pass=yes } passdb passwd { } and dovecot-sql.conf with: password_query = SELECT '%u' AS user, 'master-password' AS password Trying to connect locally with a "telnet localhost 143" via: 1 login user(a)host.com*someuser "somepass" Give me this in the detail log file: Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip= a.b.c.d rip=w.x.y.z resp=AGJ1dGNoQGluZm93ZXN0LmNvbSphZG1pbkBpbmZvd2VzdC5jb20AbWFzdGVyLXBhc3N3b3Jk Error: auth-worker(default): BUG: PASSV had invalid passdb ID Warning: Killed with signal 15 I am able to successfully authenticate with the master user/pass if I store it in a passdb file. However, I'd prefer to have it in the database for obvious reasons. Any help to the above would be appreciated. thanks, Cassidy

2 6

[Dovecot] Can't login in IMAP server
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, I can't login in the IMAP server. This is the log from a telnet session to port 143: Feb 16 15:38:32 mail2 dovecot: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=192.168.84.128 rip=192.168.84.128 resp=<hidden> Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Executed: /usr/local/bin/auth_imap /usr/local/libexec/dovecot/checkpassword-reply Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword(gamito(a)mail2.telbit.pt,192.168.84.128): Received no input Feb 16 15:38:32 mail2 dovecot: auth(default): checkpassword: Child 15764 died with signal 11 Feb 16 15:38:34 mail2 dovecot: auth(default): client out: FAIL 1 user=gamito(a)mail2.telbit.pt temp Feb 16 15:38:40 mail2 dovecot: imap-login: Aborted login: user=<gamito(a)mail2.telbit.pt>, method=PLAIN, rip=192.168.84.128, lip=192.168.84.128, secured What is happening here ? Any help would be appreciated. Warm Regards, Mário Gamito

2 2

[Dovecot] Dovecot proxy question (hostname instead of ip)
by Wouter de Jong 16 Feb '07

16 Feb '07

Hello, We are planning to use the Proxy feature of Dovecot, but fail to implement it currently the way we would like to. Reason is that proxy insists to have an IP-address as host : Feb 15 15:43:24 proxy-test.widexs.nl dovecot: pop3-login: proxy(username): mspool01-test.widexs.nl is not a valid IP When I changed the query to force the IP-address of the above server, it works. Would it be possible to make this work, but more important ... Are there any reasons NOT to make this work ? :)) Kind regards, Wouter. -- WideXS http://www.widexs.nl Wouter de Jong System-Administrator Tel +31 (0)23 5698070 Fax +31 (0)23 5698099 Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL

3 3

[Dovecot] domain truncated
by Nemanja Miletic 16 Feb '07

16 Feb '07

Hi all, I have a problem with domain information being truncated from username during ldap search, so it can not be used in mail_location. This happens when user part of the username %n is used in pass_filter in passdb ldap search. When I use %u all username information remains and mailbox can be located. Here is my configuration. In dovecot.conf I have two locations one for system and one for virtual users: ... mail_location = maildir:/var/spool/mail/%n mail_location = maildir:/var/spool/mail/vdom/%d/%n ... Also two configurations for passdb: ... passdb ldap { args = /etc/dovecot-ldap.conf } passdb ldap { args = /etc/dovecot-ldap-virt.conf } ... Here info is searched in ldap: /etc/dovecot-ldap-virt.conf ... base = dc=%d,ou=Virtual Domains,dc=eunet,dc=yu pass_filter = (&(objectClass=posixAccount)(uid=%n)) ... And the line in log file stating that maildir can not be located: mkdir(/var/spool/mail/vdom//cone/cur) failed: Permission denied Is this a bug or I am doing something wrong. Thank You, Nemanja

3 4

[Dovecot] Where is auth_dovecot
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, Shouldn't i have a file named auth_dovecot ? It's not in my system and i can't find anything about it in the docs. Any help would be appreciated. Warm Regards, Mário Gamito

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 9:03 am, Timo Sirainen <tss(a)iki.fi> said: > Looks like my rc22 fix broke that then. It didn't loop forever, only > until client sent the whole message or until it disconnected, but it did > eat all the CPU while waiting. > > Fix here: > http://dovecot.org/list/dovecot-cvs/2007-February/007721.html > > I guess this is good enough reason for rc23. > Nice. Thanks for the quick fix. Bill

1 0

Re: [Dovecot] severe performance problem (mail cache related?)
by Bill Boebel 16 Feb '07

16 Feb '07

On Fri, February 16, 2007 6:39 am, Timo Sirainen <tss(a)iki.fi> said: > On Fri, 2007-02-16 at 03:29 -0800, Dan Price wrote: >> Well there you go, I'm a dope. I think I set mmap_disable=yes because I >> was seeing strange things happening where there would be thousands >> (millions?) of madvise(DONTNEED) calls-- seemingly forever in a loop. I >> have not yet tracked that problem down-- next time I see it, I will >> make sure to get to the bottom of it. > > Actually the only place where madvise(MADV_DONTNEED) is called is in the > file-cache code which is used only with mmap_disable=yes. I'm not sure if this is related or not, but we set mmap_disable=yes last week and since then have seen what appears to be an occasional infinite loops. I have been trying to track down some more details before posting to the list, but here is what I have so far. There is no error logged in the dovecot log when this occurs, and it only stops by "kill -9" on the process... # top -c PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND 7832 virtual 25 0 580 496 376 R 71.5 0.0 70:59 0 imap [user(a)example.com 192.168.1.14] # lsof -p 7832 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME imap 7832 virtual cwd DIR 147,0 600 2372995 /data1/mail/ex/example.com/us/user imap 7832 virtual rtd DIR 3,3 4096 2 / imap 7832 virtual txt REG 3,3 412996 789553 /usr/libexec/dovecot/imap imap 7832 virtual mem REG 3,3 33856 771355 /usr/lib/dovecot/lib10_quota_plugin.so imap 7832 virtual mem REG 3,3 7720 771364 /usr/lib/dovecot/imap/lib11_imap_quota_plugin.so imap 7832 virtual mem REG 3,3 106912 278626 /lib/ld-2.3.2.so imap 7832 virtual mem REG 3,3 14868 278653 /lib/libdl-2.3.2.so imap 7832 virtual mem REG 3,3 1571824 278633 /lib/tls/libc-2.3.2.so imap 7832 virtual 0u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 1u IPv4 -1140164370 TCP vip.mail17a.r4.iad.mlsrvr.com:imap->director2.r2.iad.emailsrvr.com:56195 (ESTABLISHED) imap 7832 virtual 2w FIFO 0,5 3154802927 pipe imap 7832 virtual 3r CHR 1,9 599160 /dev/urandom imap 7832 virtual 4r FIFO 0,5 3154802928 pipe imap 7832 virtual 5w FIFO 0,5 3154802928 pipe imap 7832 virtual 6r FIFO 0,5 3154802929 pipe imap 7832 virtual 7w FIFO 0,5 3154802929 pipe imap 7832 virtual 8u REG 22,1 11112 6602923 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index imap 7832 virtual 9u REG 22,1 50824 6602903 /var/index/data1/mail/ex/example.com/us/user/.Elementos enviados/dovecot.index.log imap 7832 virtual 10u REG 147,0 3074 6346008 /data1/mail/ex/example.com/us/user/maildirsize imap 7832 virtual 11w REG 147,0 905650 7062984 /data1/mail/ex/example.com/us/user/.Elementos enviados/tmp/1171483586.P7832Q0M770594.mail17a.r4.iad.mlsrvr.com # strace -p 7832 read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable) read(0, 0x96ca1f0, 3992) = -1 EAGAIN (Resource temporarily unavailable)

2 2

[Dovecot] imap-login crash with RC19
by Nicolas STRANSKY 16 Feb '07

16 Feb '07

Hi Timo, Using RC19, I've have the following crash. If there was a core file, I've got no idea where it's gone... Jan 25 10:35:10 rouge dovecot: imap-login: file client.c: line 528 (client_unref): assertion failed: (client->refcount > 0) Jan 25 10:35:10 rouge dovecot: child 25498 (login) killed with signal 6 Best regards, -- Nico On réalise qu'une femme est de la dynamite quand on la laisse tomber. -+- Marcel Pagnol -+-

2 4

[Dovecot] Wiki to doc/ in tarball
by Timo Sirainen 16 Feb '07

16 Feb '07

So I finally started building a script that does it. Anyone interested in helping with it so that it produces readable output? First step is getting raw wiki pages. I'll do this directly by getting them from the filesystem. You can get them from here: http://dovecot.org/tmp/wikipages.tar.gz Next there's http://dovecot.org/tmp/wiki2txt.pl which is my horrible Perl script that kind of works now to produce almost readable text files. Its current output is in http://dovecot.org/tmp/wikitxt.tar.gz One thing I'm wondering about is how to make the directory layout work. For example there is "UserDatabase" and "UserDatabase/Static" pages. Currently I'm placing the latter into "_UserDatabase/Static" but I don't think that's the best solution. I was thinking about adding some "include" and "exclude" lists. If a page is in excluce list it's skipped. If it's in neither list it prints a warning but still includes it. So this makes it easy to find out the new pages and figure out if they should be included in the documentation.

3 2

[Dovecot] Index Prob
by Kevin Richter 16 Feb '07

16 Feb '07

Hi, i have a problem with rc19 (sorry, i have no time at the moment to uptime) and homedirs and maildirs mounted via NFS on Solaris10. At the beginning of the following log file everything is ok. At the end it cannot access the index... and just deleted the whole mailbox! It was empty... so it was no problem. Any ideas? Thanks. Bye, Kevin dovecot: Feb 15 21:17:52 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 secured lip=147.x.x.x rip=89.x.x.x resp=<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: CONT 1 dovecot: Feb 15 21:17:52 Info: auth(default): client in: CONT<hidden> dovecot: Feb 15 21:17:52 Info: auth(default): client out: OK 1 user=ssal0041 dovecot: Feb 15 21:17:52 Info: auth(default): master in: REQUEST 111 2754 1 dovecot: Feb 15 21:17:52 Info: auth(default): master out: USER 111 ssal0041 system_user=ssal0041 uid=3092 gid=1100 home=/home/ssal0041 dovecot: Feb 15 21:17:52 Info: pop3-login: Login: user=<ssal0041>, method=PLAIN, rip=89.x.x.x, lip=147.x.x.x, TLS dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): Effective uid=3092, gid=1100 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: data=/home/ssal0041/mail/:INBOX=/var/mail/ssal0041 dovecot: Feb 15 21:17:52 Info: POP3(ssal0041): mbox: root=/home/ssal0041/mail, index=/home/ssal0041/mail, inbox=/var/mail/ssal0041 dovecot: Feb 15 21:17:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:52 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Timeout while waiting for shared lock for index file /home/ssal0041/mail/.imap/INBOX/dovecot.index dovecot: Feb 15 21:19:55 Error: POP3(ssal0041): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2007-02-15 21:15:55] dovecot: Feb 15 21:19:55 Info: POP3(ssal0041): No INBOX for user top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0 dovecot: Feb 15 21:21:29 Info: POP3(ssal0041): Disconnected top=0/0, retr=0/0, del=0/0, size=0

2 2

[Dovecot] Son't have IMAPS
by Mário Gamito 16 Feb '07

16 Feb '07

Hi, I've installed dovecot and i'm pretty sure it has SSL support built in. But i don't have IMAPS. I get all sort of errors. Thunderbird tells: "The connection was refused". If i disable imaps, imap works just fine. If i enable it, none of them work. The certificates in /etc/ssl/certs and /etc/ssl/private are the same ? Any help would be appreciated. Warm Regards, Mário Gamito ## ## SSL settings ## # IP or host address where to listen in for SSL connections. Defaults # to above if not specified. ssl_listen = *:943 # Disable SSL/TLS support. #ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem # If key file is password protected, give the password here. Alternatively # give it when starting dovecot with -p parameter. #ssl_key_password = theedge # File containing trusted SSL certificate authorities. Usually not needed. # The CAfile should contain the CA-certificate(s) followed by the matching # CRL(s). CRL checking is new in dovecot .rc1 #ssl_ca_file = # Request client to send a certificate. #ssl_verify_client_cert = no # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 168 # SSL ciphers to use #ssl_cipher_list = ALL:!LOW # Show protocol level SSL errors. #verbose_ssl = no ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. Note that # everything in this directory is deleted when Dovecot is started. login_dir = /var/run/dovecot/login

2 3

[Dovecot] Dovecot forward problems
by Venilton Junior 16 Feb '07

16 Feb '07

Hi Folks, I setted up a mail server based on this how-to http://wanderingbarque.com/howtos/mailserver/mailserver.html All things are working thing as you can see in my server log. Off course, that I've suppressed some informations. postfix/smtpd[16483]: connect from unknown[myip] postfix/smtpd[16483]: 62C9034002: client=unknown[myip] postfix/cleanup[16777]: 62C9034002: message-id=<20070215182523.62C9034002@mysmtpserver> postfix/qmgr[16457]: 62C9034002: from=<me@domain>, size=360, nrcpt=1 (queue active) dovecot: auth(default_with_listener): master in: USER 1 user@domain service=deliver dovecot: auth(default_with_listener): ldap(user@domain): user search: base=dc=example,dc=com scope=subtree filter=(&(objectClass=VirtualMailAccount)(mail=user@domain)(accountActiv e=TRUE)(delete=FALSE)) fields=mail,homeDirectory dovecot: auth(default_with_listener): master out: USER 1 user@domain uid=202 gid=202 deliver(user@domain): msgid=<20070215182523.62C9034002@mysmtpserver>: saved mail to INBOX postfix/pipe[16785]: 62C9034002: to=<user@domain>, relay=dovecot, delay=12, status=sent (domain) postfix/qmgr[16457]: 62C9034002: removed This log is showing that a message was delivered to an user at my mailserver. But, at this time, I've tried to test forwarding features of postfix+dovecot+ldap. I've setted up this user entry (forwardActive=TRUE) in my ldap server. Here follows some entries that I put at my main.cf # Accounts accounts_server_host = $ldap_server_host accounts_search_base = $ldap_search_base accounts_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accounts_result_attribute = mailbox accounts_cache = no virtual_transport = dovecot virtual_mailbox_base = /var/lib/imap/vmail/domains virtual_mailbox_maps = ldap:accounts virtual_mailbox_domains = ldap:domains virtual_minimum_uid = 202 virtual_uid_maps = static:202 virtual_gid_maps = static:202 virtual_alias_maps = ldap:aliases, ldap:virtualforward home_mailbox = Maildir/ # aliases aliases_server_host = $ldap_server_host aliases_search_base = $ldap_search_base aliases_query_filter = (&(&(objectClass=VirtualMailAlias)(mail=%s))(forwardActive=FALSE)(accoun tActive=TRUE)(delete=FALSE)) aliases_result_attribute = maildrop aliases_cache = no aliases_bind_dn = $ldap_bind_dn aliases_bind_pw = $ldap_bind_pw accountsmap_server_host = $ldap_server_host accountsmap_search_base = $ldap_search_base accountsmap_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accountsmap_result_attribute = mail accountsmap_cache = no # Domains domains_server_host = $ldap_server_host domains_search_base = $ldap_search_base domains_query_filter = (&(objectClass=VirtualDomain)(vd=%s)(accountActive=TRUE)(delete=FALSE)) domains_result_attribute = vd domains_bind = no domains_scope = one # VirtualForward virtualforward_server_host = $ldap_server_host virtualforward_search_base = $ldap_search_base virtualforward_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=TRUE)(accou ntActive=TRUE)(delete=FALSE)) virtualforward_result_attribute = maildrop virtualforward_cache = no virtualforward_bind_dn = $ldap_bind_dn virtualforward_bind_pw = $ldap_bind_pw Any guesses or misconfiguration? I don't have an idea of how can I debug to get the error. Looking forward to get some clues and helps :P Best Regards Venilton C. Junior

2 1

[Dovecot] I keep getting password mismatches
by Mark 16 Feb '07

16 Feb '07

Hey, This is the debug information: auth(default): client in: AUTH 1 PLAIN service=IMAP secured lip=127.0.0.1 rip=127.0.0.1 resp=AG1hcmsAbWFyaw==auth(default): passwd(mark,127.0.0.1): password mismatchauth(default): client out: FAIL 1 user=markimap-login: Disconnected: user=<mark>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured The strange thing is that i can login with ssh using my username and password but i can`t do anything related to dovecot.. i`m using a default .conf file with auth method set as plain and the supported protocols are set to pop and imap.. anyone that could help me with this? Thanx in favor. _________________________________________________________________ Probeer Live.com: je eigen persoonlijke opstartpagina met alleen de dingen die jij belangrijk vindt op één plek. http://www.live.com/getstarted

3 2

[Dovecot] Is it 1.0 yet?
by Marc Perkel 15 Feb '07

15 Feb '07

OK - my last main bug was fixed a few releases ago. I know that there's no end to getting things right but there comes a point when you need to call it done. No one trusts a 1.0 to be perfect but Dovecot is already better that most 2.0 versions of other software. I vote (as if my vote counted) to call it done, declare victory, and move on to 1.01, 1.02 etc. No one is going to trus it till it gets to 1.02 so I say lets bless it and move on.

15 22

[Dovecot] 1.0.rc22 released
by Timo Sirainen 15 Feb '07

15 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc22.tar.gz http://dovecot.org/releases/dovecot-1.0.rc22.tar.gz.sig Found another bad bug in rc19 changes. Wonder why my imaptest catched the bug only in CVS HEAD but not in branch_1_0 even though both had it. Anyway, now the imaptest runs nicely for both, and I'm again optimistic that the bug count is low enough for v1.0 to be released soon :) BTW. My previous benchmarks which showed how mmap_disable=yes and fsync_disable=yes give huge performance benefits are pretty XFS-specific. I did some quick tests with ext3 and the differences were quite small with it. I'll probably do another proper run of tests later. + pop3: Commit the transaction even if client didn't QUIT so cached data gets saved. - Fixed another indexing bug in rc19 and later which caused transactions to be skipped in some situations, causing all kinds of problems. - mail_log_max_lines_per_sec was a bit broken and caused crashes with dovecot -a - BSD filesystem quota was counted wrong. Patch by Manuel Bouyer - LIST: If namespace has a prefix and inbox=no, don't list prefix.inbox if it happens to exist when listing for %.

8 22

[Dovecot] Sieve Vacation virtual support?
by Charles Marcus 15 Feb '07

15 Feb '07

Hello, I'm wanting to enable vacation messages for my users on a new dovecot server that I'm playing with, but want to know if the Dovecot LDA+Sieve vacation message function http://wiki.dovecot.org/LDA/Sieve will work with virtual users? For security reasons, I only want to use virtual domains/users. Thanks... -- Best regards, Charles

2 4

[Dovecot] strange LDA error
by Farkas Levente 15 Feb '07

15 Feb '07

hi, i try to use dovecot lda with postfix virtual delivery, but i've got error. the maildirs are created ie: new/, tmp/, curr/, dovecot.index, dovecot.index.log, .dovecot.lda-dupes. but the mail is not placed into it and got and error: "save failed to INBOX". what can be the reason? thank you for your help in advance. yours. --------------------------------- # ls -ald /var/vmail/ drwxrwx--- 3 vmail mail 4096 Feb 15 14:08 /var/vmail/ --------------------------------- this's the relevant part my dovecot.conf: --------------------------------- mail_location = maildir:/var/vmail/%d/%u mail_extra_groups = mail mail_debug = yes mmap_disable = yes first_valid_uid = 101 last_valid_uid = 101 maildir_copy_with_hardlinks = yes protocol lda { mail_plugins = quota log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { mechanisms = plain passdb sql { args = /etc/dovecot/sql.conf } userdb sql { args = /etc/dovecot/sql.conf } userdb prefetch { } user = nobody socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = mail } } } --------------------------------- this is the log in maillog: --------------------------------- Feb 15 14:08:03 alpha postfix/pickup[15447]: 14C61F4D34: uid=0 from=<root> Feb 15 14:08:03 alpha postfix/cleanup[15614]: 14C61F4D34: message-id=<20070215130803.14C61F4D34(a)alpha.lenux.hu> Feb 15 14:08:03 alpha postfix/qmgr[15448]: 14C61F4D34: from=<root(a)alpha.lenux.hu>, size=295, nrcpt=1 (queue active) Feb 15 14:08:03 alpha dovecot: auth(default): master in: USER 1 attaba(a)balazsiek.hu service=deliver Feb 15 14:08:03 alpha dovecot: auth-worker(default): mysql: Connected to localhost (postfix) Feb 15 14:08:03 alpha dovecot: auth-worker(default): sql(attaba(a)balazsiek.hu): SELECT concat('/var/vmail/', maildir) as home, concat('maildir:/var/vmail/', maildir) as mail, 101 A S uid, 12 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = 'attaba(a)balazsiek.hu' AND active = '1' Feb 15 14:08:03 alpha dovecot: auth(default): master out: USER 1 attaba(a)balazsiek.hu home=/var/vmail/balazsiek.hu/attaba/ mail=maildir:/var/vmail/balazsiek.hu/attaba / uid=101 gid=12 quota=dirsize:storage=0 Feb 15 14:08:03 alpha postfix/sendmail[15620]: running: PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin? xxgdb /usr/libexec/postfix/sendmail 15620 & sleep 5 Feb 15 14:08:08 alpha postfix/pickup[15447]: 51183F4D36: uid=101 from=<> Feb 15 14:08:08 alpha postfix/cleanup[15614]: 51183F4D36: message-id=<dovecot-1171544883-208651-0(a)alpha.lenux.hu> Feb 15 14:08:08 alpha postfix/pipe[15617]: 14C61F4D34: to=<attaba(a)balazsiek.hu>, relay=dovecot, delay=5.3, delays=0.17/0.01/0/5.1, dsn=2.0.0, status=sent (delivered via dovecot se rvice) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 14C61F4D34: removed Feb 15 14:08:08 alpha postfix/qmgr[15448]: 51183F4D36: from=<>, size=1558, nrcpt=1 (queue active) Feb 15 14:08:08 alpha postfix/cleanup[15614]: 64127F4D33: message-id=<dovecot-1171544883-208651-0(a)alpha.lenux.hu> Feb 15 14:08:08 alpha postfix/qmgr[15448]: 64127F4D33: from=<>, size=1687, nrcpt=1 (queue active) Feb 15 14:08:08 alpha postfix/local[15627]: 51183F4D36: to=<root(a)alpha.lenux.hu>, relay=local, delay=0.21, delays=0.13/0.01/0/0.07, dsn=2.0.0, status=sent (forwarded as 64127F4D33 ) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 51183F4D36: removed Feb 15 14:08:08 alpha postfix/smtp[15628]: 64127F4D33: to=<lfarkas(a)bppiac.hu>, orig_to=<root(a)alpha.lenux.hu>, relay=mx3.mail-server.hu[212.24.171.194]:25, delay=0.13, delays=0.07/ 0.04/0/0.01, dsn=2.0.0, status=sent (250 Ok: queued as 80C4937650E) Feb 15 14:08:08 alpha postfix/qmgr[15448]: 64127F4D33: removed --------------------------------- this's in dovecot-deliver.log: --------------------------------- deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: attaba(a)balazsiek.hu deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: home=/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: mail=maildir:/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: uid=101 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: gid=12 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: auth input: quota=dirsize:storage=0 deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Home dir not found: /var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Loading modules from directory: /usr/lib64/dovecot/lda deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: Module loaded: /usr/lib64/dovecot/lda/lib10_quota_plugin.so deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: maildir: data=/var/vmail/balazsiek.hu/attaba/ deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: maildir: root=/var/vmail/balazsiek.hu/attaba, index=/var/vmail/balazsiek.hu/attaba, control=, inbox= deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: dirsize quota limit = 0kB deliver(attaba(a)balazsiek.hu): Feb 15 14:08:03 Info: msgid=<20070215130803.14C61F4D34(a)alpha.lenux.hu>: save failed to INBOX --------------------------------- -- Levente "Si vis pacem para bellum!"

2 1

[Dovecot] selective logging
by T. Horsnell 15 Feb '07

15 Feb '07

>From the wiki: log_path = Use this logfile instead of syslog(). /dev/stderr can be used if you want to use stderr for logging (ONLY /dev/stderr - otherwise it is closed). (I dont understand the above references to the use of stderr) info_log_path = For informational messages, use this logfile instead of the default (What exactly is an informational message, and what is the default?) Can I selectively suppress logging like: Feb 5 11:52:15 ls1 imap(iamelel): File isn't in mbox format: /gfg0/iamelel//claudia/ligplot/NQ10/ligplot.bonds Or do I have to turn off logging entirely? Thanks, Terry.

2 1

[Dovecot] maildir and the separator for subfolder
by David Bonnafous 15 Feb '07

15 Feb '07

hi, I use dovecot 1.0rc15 with one maildir namespace. I'd like to be able to use '.' in folders and subfolders name. So, I setup the default namespace with separator =':' But, when I create some folders and then subfolders with thunderbird the filename one the server are named with some '.' no ':'... It seems that dovecot always interprets '.' as a separator for folders. Is-it a bug ? yours, -- David Bonnafous Institut de Mathématiques Université Paul Sabatier Toulouse - France

4 5

[Dovecot] [Fwd: Compiler warnings]
by Stephen Lee 15 Feb '07

15 Feb '07

Hi, I'm resubmitting the message below hoping it gets a response this time. Thanks, Stephen -------- Forwarded Message -------- > From: Stephen Lee <splee(a)plexio.com> > To: dovecot(a)dovecot.org > Subject: [Dovecot] Compiler warnings > Date: Thu, 08 Feb 2007 08:27:48 -0800 > > Hi, > > I'm trying to install Dovecot 1.0RC22 on an old Trustix 1.5 box and am > getting the compiler warnings: > > quota-storage.c:275: warning: pointer of type `void *' used in > arithmetic > > convert-storage.c:50: warning: pointer of type `void *' used in > arithmetic > > acl-backend-vfile.c:212: warning: pointer of type `void *' used in > arithmetic > > There are many more of these pointer warnings in the various modules > when compiling. Is this a problem? > > Thanks, > Stephen >

3 3

[Dovecot] deliver LDA permission problem
by Dick Middleton 15 Feb '07

15 Feb '07

Hello, I'm trying to get deliver LDA working with postfix in a virtual domain configuration. I'm using dovecot v1.0.rc10. My setup is pretty much exactly as in the wiki (only the path to deliver and auth-master socket are different). I'm having a little problem with permissions and this occurred which I think is undesirable: syslog: Feb 8 13:09:35 deliver(<email-addr>): setgid(5002) failed: Operation not permitted Feb 8 13:09:36 deliver(<email-addr>): setgid(5001) failed: Operation not permitted mail.log: Feb 8 13:09:36 Devil postfix/pipe[9622]: 5AD5C103C: to=<<email-addr>>, orig_to=<<email-addr>>, relay=dovecot, delay=0.05, delays=0.01/0/0/0.04, dsn=5.3.0, status=bounced (Command died with status 89: \"/usr/libexec/dovecot/deliver\") When deliver fails because it can't connect to auth-master socket it returns an undeliverable status which causes postfix to defer delivery. I think it should do the same here. The real question is how I give deliver the permission to do the setgid? Is it enough to just add user vmail to each of the virtual user groups in /etc/group. Does deliver setuid to virtual user as well? Dick

3 4

[Dovecot] dict quota not being updated for all users when receiving a multi-recipient message
by Justin McAleer 15 Feb '07

15 Feb '07

I've set up a mysql quota dictionary using the proxy setup as described in the wiki (using Dovecot lda). When I send a single message to multiple users, only the first recipient is getting their usage updated. This behavior occurs if I manually send to more than one user via the To: line, or via aliases set up in postfix. I do have dovecot_destination_recipient_limit set to 1. I don't even have a guess as to what might be going on here, since each instance of the lda is a separate process. But, let me know if anybody has any ideas or requests for more info.

2 2

[Dovecot] sieve plugin
by pod 15 Feb '07

15 Feb '07

I'm currently looking at dovecot for a large-scale deployment. The requirements will almost certainly mean we would use the dovecot lda with the sieve plugin. The current method of distribution causes (binary distro) packaging to be slightly awkward IMHO. The dovecot-sieve code needs to be told where an in-tree build of dovecot lives. The fact that it _must_ be an in-tree build I was considering as a bug; the dovecot-sieve build wants to access both '.a' and '.h' files from the dovecot build but in an out-of-tree build these are in different places. My first thoughts were to simply move the dovecot-sieve code into the dovecot tree (I imagine under src/plugins/cmusieve or similar) and rework the autoconf setup as appropriate. This sidesteps the problem for this case but does not help other 'third party' dovecot plugins. If however a simple plugin build environment were to exist as part of a dovecot install then plugins could be distributed and built as independent packages. I quite understand that this additionally burdens dovecot development with 'stable API' concerns which may not be considered worth the effort. Timo: have you thought about any of the above and if so which direction have your thoughts taken you? I can justify spending a small amount of time to develop this into real code but it would be a waste to fight against or duplicate existing effort that has gone into this area. All comments welcome.

2 1

[Dovecot] leaking file descriptors? imap-login: inotify_init() failed
by Dale Bewley 15 Feb '07

15 Feb '07

Even though the system is configured to allow a large number of open files, and tools such as lsof tell me dovecot is within that limit; I am seeing errors like this pretty frequently. dovecot: imap-login: inotify_init() failed: Too many open files I'm running Fedora Core 5 (2.6.18-1.2257.fc5 SMP x86_64) with dovecot-1.0-1.rc15 built from the FC6 SRPM, but I was seeing the same thing with 1.0-0.beta8.3.fc5 (one of the reasons for the jump to the FC6 ver). # system default limit is very high, and we aren't approaching it [root@mail 2496]# cat /proc/sys/fs/file-max 738223 [root@mail fs]# cat file-nr 8704 0 738223 # the limit per user is 1024 [root@mail 2496]# su -c 'ulimit -n' dlbewley 1024 # But dovecot doesn't appear to be above that. # it looks like the master process is well below that [root@mail 2496]# lsof -p `cat /var/run/dovecot/master.pid` | wc -l 280 # but overall, this user has way more than that [root@mail fs]# lsof -nu dovecot |wc -l 3145 So, I raised the limit for dovecot to 5000 soft and 10000 hard to see if it would make a difference. Even after a reboot, the next day the errors returned. Today login_process_per_connection is set to 'no' rather than the default to see if it makes a difference. So far today, no errors. Config looks like this: protocols = imap imaps pop3 pop3s ssl_cert_file = /usr/share/ssl/certs/mail.cert ssl_key_file = /usr/share/ssl/private/mail.key disable_plaintext_auth = no login_process_per_connection = no max_mail_processes = 2048 protocol imap { } protocol pop3 { } auth_username_chars = auth_master_user_separator = * auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot/dovecot.masterusers master = yes pass = no } passdb pam { } userdb passwd { } user = root } plugin { } -- Dale Bewley - Unix Administrator - Shields Library - UC Davis GPG: 0xB098A0F3 0D5A 9AEB 43F4 F84C 7EFD 1753 064D 2583 B098 A0F3

2 1

[Dovecot] POP3-Proxy error
by Christian Froemmel 15 Feb '07

15 Feb '07

Hi, as mentioned in another thread I discovered a crash in the pop3-proxy. It occurs when the remote-pop3-server just drops the connection (in my case courier was hitting the MAXPERIP-Limit). I don't have a corefile yet, but will try to get one. Here the message from the dovecot.log: dovecot: Feb 02 09:30:00 Error: pop3-login: file pop3-proxy.c: line 20 (proxy_input): assertion failed: (!client->destroyed) dovecot: Feb 02 09:30:00 Error: pop3-login: Raw backtrace: pop3-login [0x8052fe0] -> pop3-login [0x8052ab4] -> pop3-login(vfprintf+0x2324) [0x804c6fc] -> pop3-login(vfprintf+0x2c9a) [0x804d072] -> pop3-login(vfprintf+0x1086) [0x804b45e] -> pop3-login(vfprintf+0x29d0) [0x804cda8] -> pop3-login [0x8056346] -> pop3-login [0x8055849] -> pop3-login(vfprintf+0x39d6) [0x804ddae] -> /lib/i686/libc.so.6(__libc_start_main+0xc7) [0x4015bd17] -> pop3-login(SSL_write+0x49) [0x804a931] dovecot: Feb 02 09:30:00 Error: child 5985 (login) killed with signal 6 It seems that the unexpected shutdown of the connection confuses dovecot. When I increased the MAXPERIP-limit in courier the crashes went away. regards, Christian -- SYSTEM CONCEPT GmbH

2 1

[Dovecot] master user
by Tom Bombadil 15 Feb '07

15 Feb '07

Greetings all... We are thinking about using the master DB, so a few admins can impersonate an ordinary user. So, we want to define one master for a set of users. And this administrator cannot be master of the other users? Can this be done somehow? Reading the docs, it seems that if a user is defined as master, it can login as everyone. Thanks for any hint.

4 3

[Dovecot] Startup errors
by Steven F Siirila 15 Feb '07

15 Feb '07

I just finished setting up a test Dovecot server (1.0-rc15, Solaris 10) and noticed upon start of Dovecot (after rebooting the server) that the imap-login and pop3-login processes spew errors as follows, which I can only assume is due to the fact that dovecot-auth has not fully initialized yet... it seems to me that these login processes are getting started too early, or should at least be waiting for dovecot-auth to get started. Jan 31 15:55:06 hostname dovecot: Dovecot v1.0.rc15 starting up Jan 31 15:55:07 hostname dovecot: imap-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname dovecot: pop3-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname dovecot: imap-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname last message repeated 1 time Jan 31 15:55:07 hostname dovecot: pop3-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname last message repeated 1 time Jan 31 15:55:07 hostname dovecot: imap-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname last message repeated 9 times Jan 31 15:55:07 hostname dovecot: pop3-login: Can't connect to auth server at default: Connection refused Jan 31 15:55:07 hostname last message repeated 9 times -- Steven F. Siirila Office: Lind Hall, Room 130B Internet Services E-mail: sfs(a)umn.edu Office of Information Technology Voice: (612) 626-0244 University of Minnesota Fax: (612) 626-7593

2 1

[Dovecot] Q on configuring shared mboxes
by Mikhail Teterin 15 Feb '07

15 Feb '07

Hello! I have the following three types of mailboxes on my server: 1) Regular user mail /var/mail/<user> in mbox format 2) Suspected spam in /var/tmp/spamprobe in mbox format 3) Archived mailing list in /home/mks/mksarch in mbox format I want the 1) to be only accessible to the respective <user>, obviously (POP3 and/or IMAP4). I wanted the 2) to be accessible to all users -- and I want them to be able to move stuff out of it into their own mboxes (IMAP4 is enough). I want the 3) to be accessible _read only_ to anyone, who enters the correct username/password (preferably -- without creating a special Unix account). (IMAP4 or POP3) So far, I have only been able to achieve 1). Could someone, please, help me configure dovecot for the 2) and the 3)? Thanks! -mi

2 1

[Dovecot] Dovecot ACL
by Barry Kwok 15 Feb '07

15 Feb '07

I am using 1.0-rc19 version. I made a global ACL file in /etc/dovecot-acls/Public as: owner lrsi user=manager rl The owner cannot delete/move mail inside his Public folder as I want. But the user "manager" cannot subscribe/view to other's Public folder. What I have missed?

2 1

[Dovecot] lda sieve broken after upgrade
by lenny＠edpausa.com 15 Feb '07

15 Feb '07

upgraded to rc19. using maildirs. solaris 9/cc. removed all modules from pop/imap/lda subdirs and first upgraded dovecot to rc19 and then used dovecot-sieve-1.0.1 sources to build against the dovecot source directory ( everything now builds nicely on Solaris, thank you Timo ). added "cmusieve" to the list of plugins used by lda. ail_plugins = cmusieve now getting this: deliver(lenny): Error: dlopen(/usr/local/dovecot/lib/dovecot/lda//lib90_cmusieve_plugin.so) failed: ld.so.1: deliver: fatal: relocation error: file /usr/local/dovecot/lib/dovecot/lda//lib90_cmusieve_plugin.so: symbol deliver_mail: referenced symbol not found anyone ? on the same machine, mbox based dovecot rc19 with dovecot ( sieve ) lda, works and upgraded without any issues, although the prior version must have been different, since the cmusieve statement was already present.

2 2

[Dovecot] Hello, new to the list
by Vikram Goyal 15 Feb '07

15 Feb '07

Hello Guys! I have just joined the list as I needed some clarifications, help etc. I am not sure what I want is possible and I have been unable to do it myself, read lots of dovecot wiki pages, debian lists, dovecot archives, experimented myself and so on. I have a mail dir ~/Mail where all my mails get distributed to their respective folders through procmail filters. The heirarchy is as follows: ~/Mail/ /inbox --> maildir /trash --> trash maildir /newsletter --> mbox lists/ --> normal dir /dovecot --> dovecot list maildir /some other list maildirs I wanted to access them through dovecot. I have tried namespaces etc but have been unable to accomplish till now. Kindly help. Thanks! -- vikram... |||||||| |||||||| ^^'''''^^||root||^^^'''''''^^ // \\ )) //(( \\// \\ // /\\ || \\ || / )) (( \\ -- o ~|~ = Registered Linux User #285795

3 3

[Dovecot] sieve question
by Xueron Nee 15 Feb '07

15 Feb '07

hi, I am testing deliver with sieve support, and want to use it to filter chinese. But I found it doesn't work. an encoded subject: =?GB2312?B?aSBhbSBhIGNoaW5lc2U=?= decoded content is: i am a chinese and i have such rules: require "fileinto"; if header :contains "Subject" "GB2312" { fileinto "Hello"; } if header :contains "Subject" "chinese" { fileinto "Trush"; } but the first one acts. if a delete the first rule, like this: require "fileinto"; if header :contains "Subject" "chinese" { fileinto "Trush"; } message was delived to INBOX. so, any help? Thanks! -- Xueron Nee <xueron(a)gmail.com>

2 1

[Dovecot] auto-detection of user mailbox type - followup
by John Harper 15 Feb '07

15 Feb '07

In http://www.dovecot.org/list/dovecot/2006-December/018253.html Timo Sirainen wrote > > You can still change NAMESPACE_* environments. I don't remember how > exactly now, but you can do eg. "set > /tmp/sets" in the script, see > what it has set and modify them in the script. in response to my query regarding setting the mail_location in namespaces from a mail_executable script. The purpose of this is to be able to select on a per-user basis whether they're using Maildir or mbox format (I don't want to convert 12000 users all at once, and some users have no need or desire to change formats - they still use mail/elm etc) and also have the UW-IMAP compatibility namespaces to take care of all the clients currently configured with imap server directory = mail/. This all works, with one small bug left. For reference, here's the gist: In the dovecot.conf file place the usual namespace directives following the Namespaces wiki: namespace private { separator = / prefix = inbox = yes } #for UW backwards compatibility: namespace private { separator = / prefix = mail/ hidden = yes } namespace private { separator = / prefix = ~/mail/ hidden = yes } namespace private { separator = / prefix = ~%u/mail/ hidden = yes } define the mail_executable under protocol imap: mail_executable = /usr/local/dovecot/lbin/imap.sh and write the imap.sh script: ------start imap.sh--------------------------------------------------- #!/bin/sh # determine if user is in mbox or Maildir mode # Maildir takes precedence and is identified by the existence of # both a .procmailrc recipe and the Maildir directory. # Without a .procmailrc file, there's no recipe to force delivery in # Maildir format, so any existing Maildir is spurious # The .procmailrc should contain DEFAULT=Maildir/ # Set the absolute path to this script as the mail_executable for # the imap protocol in dovecot.conf. # It appears that this script is run as the user in their home dir if [ -f .procmailrc -a -d Maildir ]; then MAIL='maildir:~/Maildir'; export MAIL else MAIL='mbox:~/mail:INBOX=~/.mail'; export MAIL fi # each namespace defined in the conf file needs to have the mail # location defined which is set in environment vars # NAMESPACE_1 etc NAMESPACE_1=$MAIL; export NAMESPACE_1 NAMESPACE_2=$MAIL; export NAMESPACE_2 NAMESPACE_3=$MAIL; export NAMESPACE_3 NAMESPACE_4=$MAIL; export NAMESPACE_4 #debugging to see what else we can play with #set >> /tmp/d exec /usr/local/dovecot/libexec/dovecot/imap ------end imap.sh----------------------------------------------------- However, it appears that the root dir '~/mail' string is used at some point before the tilde-expansion takes place. I see a literal ~ directory in the users home, with an empty mail directory inside. After that it picks up the proper location and works correctly. I tried a %h and got a literal %h directory. So for now I made a simple workaround by using the absolute path to the home directory: # use home variable (depends on this script running in users home) # During startup it seems like ~/mail is interpreted as a string and # a spurious ~ folder is created, before the ~ is expanded home=`/bin/pwd` if [ -f .procmailrc -a -d Maildir ]; then MAIL="maildir:$home/Maildir"; export MAIL else MAIL="mbox:$home/mail:INBOX=$home/.mail"; export MAIL fi Thanks, John Harper ------------------------------------------------- Senior Systems Administrator Information and Instructional Technology Services University of Toronto Scarborough harper(a)utsc.utoronto.ca

2 1

[Dovecot] dovecot and libnss-ldap
by Nicolas Boullis 15 Feb '07

15 Feb '07

Hi, I've been using dovecot 0.99.14 for a few years, with libpam-ldap and libnss-ldap, and never experienced any problem with those. I expect to soon switch to dovecot 1.0rc15 (or whatever gets available in Debian Etch, hopefuly dovecot 1.0), but I've seen some warnings against dovecot+libnss-ldap... Is the problem with libnss-ldap a recent problem (I mean it was not a problem with older dovecot such as my 0.99.14)? Is it still a problem even with 1.0rc22? Is there any hope to have it fixed before 1.0? Note that while most of the users I have to deal with are in my LDAP directory, a few ones are not and are in /etc/passwd. Hence, "userdb ldap" is probably not an option for me (and I'm quite happy with configuring all my servers with PAM and NSS). Cheers, Nicolas

2 6

[Dovecot] who limit the process deliver number?
by Antonio Casado Rodríguez 15 Feb '07

15 Feb '07

Hi, i have postfix-2.3.6, dovecot-1.0-rc19 and dovecot-lda Where i limit the process number deliver, in postfix or dovecot.conf Thanks.

2 1

[Dovecot] DoveCot compression to save HDD space
by Host Expert 15 Feb '07

15 Feb '07

Hello, I am wondering if there are any possibilities to save HDD space used by emails by compressing content (not just attachements). It would be many 1000s email boxes and probably each using lot of space so would be easier if we can just compress emails somehow. Thanks, Cristian

12 28

[Dovecot] Last login fields
by Dean Manners 15 Feb '07

15 Feb '07

Hey guys, Wondering if anyone has tried to do this before - a last login timestamp field. Using mysql for auth, I figured it would be easy enough to add a timestamp field and then tack an UPDATE statement on the end of the password_query. But of course, dovecot sees this as only one statement to pass to MySQL - of which MySQL barfs at.. Any ideas on how to achieve this ? Regards __________________________________________ Dean Manners

2 2

[Dovecot] Dovecot not responding
by Andrew Hoag 15 Feb '07

15 Feb '07

Hi all, I'm pulling my hair out on this problem and wanted to throw it out there to see if anyone else had run across it. I recently restarted my server. There were some network config issues that caused the interfaces not to come back up, but my colo company got those resolved. However, after restart, my IMAPS server has stopped responding to outside requests. I can successfully access IMAP from localhost, as well as via SSH tunnelling, so I know it is working. I've tried all sorts of "listen=" configurations, and checked lsof & tcpdump to rule out other problems, but it just seems as though dovecot isn't responding. TCPDUMP (notice the TCP SYN but no response): /var/log 89# tcpdump -vvs 192 port 993 tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 192 bytes 17:37:54.101518 IP (tos 0x0, ttl 112, id 56543, offset 0, flags [DF], length: 48) c-24-9-151-115.hsd1.co.comcast.net.3132 > mail.server.com.imaps: S [tcp sum ok] 1828791628:1828791628(0) win 16384 <mss 1460,nop,nop,sackOK> 17:37:58.282840 IP (tos 0x0, ttl 59, id 54721, offset 0, flags [DF], length: 60) dsl001-148-165.sfo1.dsl.speakeasy.net.39250 > mail.server.com.imaps: S [tcp sum ok] 3827175783:3827175783(0) win 5840 <mss 1460,sackOK,timestamp 1555809446 0,nop,wscale 2> 17:38:00.130267 IP (tos 0x0, ttl 112, id 56548, offset 0, flags [DF], length: 48) c-24-9-151-115.hsd1.co.comcast.net.3132 > mail.server.com.imaps: S [tcp sum ok] 1828791628:1828791628(0) win 16384 <mss 1460,nop,nop,sackOK> 17:38:01.283013 IP (tos 0x0, ttl 59, id 54722, offset 0, flags [DF], length: 60) dsl001-148-165.sfo1.dsl.speakeasy.net.39250 > mail.server.com.imaps: S [tcp sum ok] 3827175783:3827175783(0) win 5840 <mss 1460,sackOK,timestamp 1555810196 0,nop,wscale 2> LSOF: /var/log 91# lsof -i | grep imap sshd 4475 andrew 11u IPv4 39601 TCP localhost:34661->localhost:imaps (ESTABLISHED) dovecot 6540 root 5u IPv4 38988 TCP *:imaps (LISTEN) imap-logi 6599 dovecot 9u IPv4 39602 TCP localhost:imaps->localhost:34661 (ESTABLISHED) imap-logi 6629 dovecot 1u IPv4 38988 TCP *:imaps (LISTEN) imap-logi 6630 dovecot 1u IPv4 38988 TCP *:imaps (LISTEN) NETSTAT: /var/log 92# netstat -an | grep 993 tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:993 127.0.0.1:34661 ESTABLISHED tcp 0 0 127.0.0.1:34661 127.0.0.1:993 ESTABLISHED STRACE: 17:00:33.225030 gettimeofday({1171501233, 225048}, {480, 0}) = 0 17:00:33.225072 gettimeofday({1171501233, 225090}, NULL) = 0 17:00:33.225113 poll([{fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=1, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 4, 0) = 0 17:00:33.225163 gettimeofday({1171501233, 225182}, {480, 0}) = 0 17:00:33.225212 gettimeofday({1171501233, 225230}, NULL) = 0 17:00:33.225260 poll([{fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=1, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 4, 999) = 0 17:00:34.225145 gettimeofday({1171501234, 225179}, {480, 0}) = 0 17:00:34.225204 gettimeofday({1171501234, 225222}, NULL) = 0 17:00:34.225246 poll([{fd=7, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=10, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=3, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}, {fd=1, events=POLLIN|POLLPRI|POLLERR|POLLHUP|POLLNVAL}], 4, 0) = 0 17:00:34.225297 gettimeofday({1171501234, 225315}, {480, 0}) = 0 Has anyone seen this behavior? What's the obvious thing I'm missing here? My host has some weird VLAN thing installed by the colo company so I have IP aliases, but given I'm not even seeing a response to the SYN, it doesn't seem to be a routing issue, and I can connect to my local interface on port 993 (NOT localhost) without problems. Suggestions much appreciated, I'm stuck. I'm sure this is something obvious and simple, but I'm looking past it right now. Andrew -- Email: andrew(a)50degreescorp.com <mailto:andrew@50degreescorp.com>

2 1

[Dovecot] OT: looking for plugin developer
by Tom Bombadil 15 Feb '07

15 Feb '07

Greetings all, We are looking for a developer to write a plugin that copies the message to a specific hidden folder called "spam_copy" when a message inside a folder called "spam" is viewed for the first time. And when we move the message from the "spam" folder to any other folder, and if the message hasn't been seen, we should send a copy of it to "spam_copy" hidden folder, in addition to the move. If anybody is up for it, please send me a private message, so we can arrange all the details, payment, etc... Thanks in advance.

1 0

[Dovecot] Changing the Seen Flags
by Amardeep Singh 15 Feb '07

15 Feb '07

Hi , Can we change the setting on dovecot so that the Seen mail flag S should be saved where everybody can see that and not in the dovecot.index file As we are facing problems with public folder read/unread mails. Any help is appreciated Thanks, Amardeep

3 5

[Dovecot] incorrect quota reporting with dict quota
by Marshal Newrock 14 Feb '07

14 Feb '07

Using the dict quota with dovecot-1.0.rc21, quota reporting was incorrect. It wasn't just that the stored quota was different than the disk usage, but also that each time the quota was checked, it was greater than before, even if no mail was received. I tested this by using telnet to log into an imap account, and issuing multiple "getquotaroot inbox" commands. I have changed to just using maildir quotas, and everything seems correct now. Thanks to dovecot's flexible authentication methods, I'll be able to set an individual account to use the dict quota backend for testing. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

2 1

[Dovecot] lda quota in sql works but is ignored
by Robert Schetterer 14 Feb '07

14 Feb '07

Hi, (dovecot latest vers) i have lda deliver up with quota and sql, but it seems that deliver simply ignores it, normally it should bounce the message deliver(tester(a)example.de): Feb 13 15:31:32 Info: auth input: gid=1001 deliver(tester(a)example.de): Feb 13 15:31:32 Info: auth input: quota=dirsize:storage=3072000 deliver(tester(a)example.de): Feb 13 15:31:32 Info: Home dir not found: /usr/local/virtual/tester(a)example.de/ deliver(tester(a)example.de): Feb 13 15:31:32 Info: Loading modules from directory: /usr/lib64/dovecot/modules/lda deliver(tester(a)example.de): Feb 13 15:31:32 Info: Module loaded: /usr/lib64/dovecot/modules/lda/lib10_quota_plugin.so deliver(tester(a)example.de): Feb 13 15:31:32 Info: Module loaded: /usr/lib64/dovecot/modules/lda/lib90_cmusieve_plugin.so deliver(tester(a)example.de): Feb 13 15:31:32 Info: maildir: data=/usr/local/virtual/tester(a)example.de/ deliver(tester(a)example.de): Feb 13 15:31:32 Info: maildir: root=/usr/local/virtual/tester(a)example.de, index=/usr/local/virtual/tester(a)example.de, control=, inbox= deliver(tester(a)example.de): Feb 13 15:31:32 Info: dirsize quota limit = 3072000kB deliver(tester(a)example.de): Feb 13 15:31:32 Info: msgid=<20070213143132.012C982EF(a)mail.example.de>: saved mail to INBOX /usr/local/virtual/tester(a)example.de # du -h 4,0K ./tmp 4,0K ./cur 5,3M ./new 5,3M . any idea? -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany

3 4

[Dovecot] environment variables required for startup
by Marshal Newrock 14 Feb '07

14 Feb '07

Using dovecot-1.0-rc19 (quotas are working good, btw) on Gentoo, I have a strange problem. On boot, dovecot doesn't start, the init script just times out. From the command line, it starts instantly without problem. Also, using a program called 'monit' to make sure processes stay running and restart them if they stop, if I manually stop dovecot, it is then unable to start it (calling the init script). Nothing gets logged. In all cases, it's "/etc/init.d/dovecot start". The only thing I can think of is that there's some environment variable required which isn't being set. monit specifically says it unsets everything except for a basic path before running the start program. Do any environment variables need to be set in order for dovecot to start successfully? -- Marshal Newrock Ideal Solution, LLC - http://www.idealso.com

4 8

[Dovecot] migration question: "imap server directory"
by Dan Price 14 Feb '07

14 Feb '07

In prepping our IMAP migration to Dovecot, I've hit upon a small issue: the "IMAP server directory" which Thunderbird users have set in the "advanced" prefs. Our old IMAP server seems to set your current directory to ~. This wound up causing users to set their IMAP server directory to "/home/<user>/mail/" so that their mailboxes would be found: --> A104 LIST "/home/dp/mail/" "%" * LIST (\NoSelect) "/" /home/dp/mail/ * LIST (\NoInferiors \UnMarked) "/" /home/dp/mail/sent-mail-Jul-2006 * LIST (\NoInferiors \UnMarked) "/" /home/dp/mail/sent-mail-Dec-2004 ... A104 OK LIST completed Of course, relative paths also work, but it seems that not many users are using them: --> A105 LIST "mail/" "%" * LIST (\NoSelect) "/" mail/ * LIST (\NoInferiors \UnMarked) "/" mail/sent-mail-Jul-2006 * LIST (\NoInferiors \UnMarked) "/" mail/sent-mail-Dec-2004 ... A105 OK LIST completed Also, it turns out that some users have mail in "mail" and some in "Mail". So for now, with Dovecot, I've set: mail_location = mbox:~:INBOX=/var/mail/%u:INDEX=%h/Mail/imapd-indices But users with absolute paths are having issues: A102 LIST "/home/dp/mail/" "%" A102 OK List completed. Versus: A103 LIST "mail/" "%" * LIST (\Noselect \HasChildren) "/" "mail/" * LIST (\NoInferiors \UnMarked) "/" "mail/sent-mail-Jul-2006" * LIST (\NoInferiors \UnMarked) "/" "mail/sent-mail-Dec-2004" A103 OK List completed. I've read the MailboxLocation page on the Wiki, but I'm not sure of the best way to proceed and have things stay compatible for my users. It is possible to ask all users to change, but I'm going to have to field a lot of questions if I ask users for that :/ Thanks! -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

3 2

[Dovecot] quota interferes with dovecot
by jepoy 14 Feb '07

14 Feb '07

hi guys, im having some trouble on my quota.whenever my client reaches the quota, they cant download their mails anymore. +OK Dovecot 1.0 ready. user test +OK pass testd -ERR [IN-USE] Couldn't sync mailbox. +OK Logged in. Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Account: , Protocol: POP3, Port: 110, Secure(SSL): No, Socket Error: 10053, Error Number: 0x800CCC0F -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[Dovecot] info deleted messages imap
by Hola 14 Feb '07

14 Feb '07

Hi! I want to know the number of messages deleted when the mail user connect by IMAP protocol. When the user uses POP, we got this directive in the configuration file: pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s This is the log: dovecot: Feb 09 02:31:02 Info: pop3-login: Login: user=<xxxxxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured dovecot: Feb 09 02:31:02 Info: POP3(xxxxx): Disconnected: Logged out top=2/3756, retr=0/0, del=0/7, size=17392 If you look at "del=0/7" we know that user deleted 0 messages. When the user log in the account by IMAP protocol, appears the following: dovecot: Feb 09 02:02:36 Info: imap-login: Login: user=<xxxxx>, method=PLAIN, rip=82.xxx.xxx.xxx, lip=82.xxx.xxx.xxx dovecot: Feb 09 02:03:02 Info: IMAP(xxxxx): Disconnected: Logged out And we donÂ´t know the number of messages deleted, the question is: there is any directive like "pop3_logout_format" applied to IMAP?? Something like "imap_logout_format" ?? Dovecot version: 1.0.rc17.

2 1

[Dovecot] Rawlogs in freebsd?
by Francisco Reyes 14 Feb '07

14 Feb '07

I am trying to enable rawlogs. I made a directory /home/dovecot/dovecot.rawlog/, changed dovecot.conf to have mail_executable = /usr/local/libexec/dovecot/rawlog /usr/local/libexec/dovecot/imap Made sure the /home/dovecot/dovecot.rawlog/ could be written to. Even made it 1777 as a test. Made sure the FreeBSD user database points /home/dovecot as the dovecot user's directory (left shell as nologin). Compiled dovecot from ports and using Dovecot 1.0.r21. Still no rawlog. Any pointers?

2 1

[Dovecot] Question about migration from tpop3d mbox -> Dovecot maildir
by Vladimir Koshelenko 14 Feb '07

14 Feb '07

Yes, again! :) I googled this issue but found no solution. Then, simple question - on this moment, it is possible without losing UIDLs or not?

2 1

[Dovecot] Some users cannot login
by Frank Bonnet 14 Feb '07

14 Feb '07

Hello I am in trouble with certain logins that cannot log in through Dovecot IMAP ... I've tried both with flat passwd or NIS It is possible to login with ssh ou to su - xxxx on the machine but it seems that the dovecot imap refuse to authenticate some users ... the dovecot version is the latest

3 2

[Dovecot] Problems to put dovecot-ldap.conf working
by Venilton Junior 14 Feb '07

14 Feb '07

Hi Folks, I'm having a little trouble to put dovecot authenticating in ldap. My postfix and saslauthd are authenticating fine. Here is what I have in my main.cf: # Accounts accounts_server_host = $ldap_server_host accounts_search_base = $ldap_search_base accounts_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accounts_result_attribute = mailbox accounts_cache = no # aliases aliases_server_host = $ldap_server_host aliases_search_base = $ldap_search_base aliases_query_filter = (&(&(objectClass=VirtualMailAlias)(mail=%s))(accountActive=TRUE)) aliases_result_attribute = maildrop aliases_cache = no accountsmap_server_host = $ldap_server_host accountsmap_search_base = $ldap_search_base accountsmap_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco untActive=TRUE)(delete=FALSE)) accountsmap_result_attribute = mail accountsmap_cache = no # VirtualForward virtualforward_server_host = $ldap_server_host virtualforward_search_base = $ldap_search_base virtualforward_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=TRUE)(accou ntActive=TRUE)(delete=FALSE)) virtualforward_result_attribute = maildrop virtualforward_cache = no My saslauthd.conf follows as: ldap_servers: ldap://myldapserver/ ldap_version: 3 ldap_auth_method: bind ldap_bind_dn: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot ldap_bind_pw: xxxx ldap_search_base: dc=domain,dc=com #ldap_filter: (|(mail=%u)(cn=%U)) ldap_filter: (&(|(mail=%u)(cn=%U)(mail=%U@%d))(accountActive=TRUE)(delete=FALSE)) PS: Removed my real server and search_base. Here is the test with saslauthd configuration: testsaslauthd -u novoemail01 -p teste123 0: OK "Success." And here is my dovecot-ldap.conf: hosts = myldapserver dn = uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot dnpass = xxxx ldap_version = 3 base = dc=domain,dc=com user_attrs = mail,,,,, user_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) pass_attrs = mail,userPassword pass_filter = (&(objectClass=VirtualMailAccount)(mail=%u)(accountActive=TRUE)(delete=F ALSE)) default_pass_scheme = SSHA When I try to authenticate, my mail.info get this: dovecot: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=200.155.34.10 rip=200.155.63.82 resp=AG5vdm9lbWFpbDAxAHRlc3RlMTIz dovecot: auth(default): ldap(novoemail01,200.155.63.82): pass search: base=dc=sercomtel,dc=com,dc=br scope=subtree filter=(&(objectClass=VirtualMailAccount)(mail=novoemail01)(accountActiv e=TRUE)(delete=FALSE)) fields=mail,userPassword dovecot: auth(default): ldap(novoemail01,200.155.63.82): unknown user dovecot: auth(default): client out: FAIL 1 user=novoemail01 Does anyone have an idea where I'm failing to configure this or find a misconfiguration? Tnx for any help. Best Regards, Venilton C. Junior

2 1

[Dovecot] resilience suggestion
by David Lee 14 Feb '07

14 Feb '07

On the whole we are pleased with our trials of dovecot to replace UW-IMAP. But (ah!) we have hit one particular problem, in which we think dovecot could probably benefit from a resilience improvement. We're running dovecot on Fedora Core 5 (FC5), with passwd map details supplied by NIS. We have found that "nscd" sometimes thinks that a username is invalid, even though it is valid. So when "deliver" attempts a delivery to the INBOX of that username, it receives "user unknown" from the name service, and then does a 5xx permanent failure of valid email. >From the user perspective "The System" has incorrectly rejected perfectly valid incoming email. It is rare, but it does occasionally happen on large, busy systems. Clearly it is fundamentally an "nscd" bug. But that bug is nevertheless out there, in the wild, on such systems, potentially affecting dovecot's delivery of valid user email. We have had a source code hack since October (in "deliver.c", simply replacing a "return ret" occurence with "return EX_TEMPFAIL") and it has worked nicely (ported forward from rc8 towards rc22). Mail re-queues and a later delivery attempt then succeeds. So it would be both helpful, and good for resilience against such real OS/nscd bugs (and similar), if there were a configuration option in dovecot to allow a site admin to tell deliver to use a temporary, 4xx, failure instead (if the circumstances were appropriate for the site). Could this be considered please, Timo? -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : UNIX Team Leader Durham University : : South Road : : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. :

9 15

[Dovecot] Ubuntu, Exim, deliver: permissions/setgid problem
by Sam Hathaway 14 Feb '07

14 Feb '07

Hello all, I have a little problem. I'm trying to set up Dovecot deliver (1.0 beta 3) as the LDA for Exim4 on Ubuntu 6.06 with MBOX, and I'm running into permissions problems. Exim typically wants to run pipes as the user to whom the mail is being delivered (as per the "check_local_user"). deliver needs access to the auth socket and needs to be able to create files in /var/mail. In Ubuntu, /var/mail is writeable by group mail, but not by others. So I thought I'd make deliver run as the user to whom the mail is being delivered (as per default) and with group "mail" (so it can create files in /var/mail). I also set the auth socket to be group-writeable and gave it the group mail. So theoretically, deliver should be able to: - connect to the socket - create dotfiles in /var/mail - write to the user's mailbox The problem I'm running into is that deliver tries to setgid to the primary group of the target user, and dies when it can't. I specifically do NOT want it to do this, because regular users don't have permission to write to /var/mail. I've also tried making deliver SUID root (as recommended on this list) or SGID mail (like procmail is) but I get the same error. If I also disable the "group = mail" line in the dovecot_deliver_user router in exim4.conf, I still get the same error. If I disable the "group = mail" line without making deliver SUID or SGID, then it can no longer connect to the auth socket. In this case it runs with the group of the user for whom the mail is being delivered, i.e. sam-adm (#10000). I've also tried adding "user = mail" to the transport, to no avail. The ONE way I've been able to make it work is to remove "group = mail" from exim4.conf and set the socket's mode to 0666, but I've seen warnings that allowing world-access to the socket is dangerous. I'm actually not sure why this works, since in this case it's running with both the UID and GID of the target user, and therefore shouldn't be able to create files in /var/mail. Can anyone untangle this for me? From what I've read, in Debian delivery agents should run with group "mail" (procmail is SGID mail). It seems to me that the way to go is to spawn it with group mail, allow group mail access to the auth socket, and be done with it. But this is prevented from working since it insists on resetting back to the user's primary group. Thanks, Sam Hathaway The relevent section of my dovecot.conf looks like this: protocol lda { postmaster_address = postmaster(a)uofr.net log_path = /var/log/dovecot-lda.log } auth default { mechanisms = plain socket listen { master { path = /var/run/dovecot-auth-master mode = 0660 group = mail } } # ... (other auth config directives here) } And the relevent parts of my exim4.conf are as follows: # in router section: local_user: debug_print = "R: local_user for $local_part@$domain" driver = accept domains = +local_domains check_local_user local_part_suffix = +* local_part_suffix_optional local_parts = ! root transport = dovecot_deliver_user # in transport section: dovecot_deliver_user: debug_print = "T: pipe for $local_part@$domain" driver = pipe command = /usr/lib/dovecot/deliver -d $local_part message_prefix = message_suffix = log_output delivery_date_add envelope_to_add return_path_add group = mail Here are the permissions on some interesting files/dirs: -rwxr-xr-x 1 root mail 551424 2006-11-22 21:59 /usr/lib/dovecot/deliver drwxrwsr-t 2 root mail 1024 2007-01-25 14:14 /var/mail -rw-rw---- 1 sam-adm mail 544 2007-01-25 15:58 /var/mail/sam-adm srw-rw---- 1 root mail 0 2007-01-25 15:39 /var/run/dovecot-auth-master And here's how I've been testing: echo "test" | mail -s "deliver test" sam-adm When I execute the above command, exim says: 2007-01-25 15:55:01 1HABcb-0006h4-N8 <= sam-adm(a)vps.uofr.net U=sam-adm P=local S=334 2007-01-25 15:55:02 1HABcb-0006h4-N8 ** sam-adm(a)vps.uofr.net R=local_user T=dovecot_deliver_user: Child process of dovecot_deliver_user transport returned 89 from command: /usr/lib/dovecot/deliver 2007-01-25 15:55:02 1HABcb-0006h4-N8 Completed And deliver says: deliver: "2007-01-25 15:55:02 "Fatal: setgid(10000) failed: Operation not permitted

3 6

[Dovecot] http://wiki.dovecot.org/VirtualhostingWithExim
by Marc Haber 14 Feb '07

14 Feb '07

Hi, Here is a new wording for the "Exim4 on Debian" part of the web page on http://wiki.dovecot.org/VirtualhostingWithExim. It's immutable, so I cannot directly change it. I e-mailed Florian, but he cannot log in to the wiki any more. Can somebody with appropriate privileges change the page? --------------------- If you are using the exim4 packages on Debian, you need to pay attention whether you are using the split or non-split configuration method that the packages offer. If you are using split-configuration, you need to apply the configuration changes to the router and transport directories inside /etc/exim4/conf.d; if you are using non-split configuration, you need to edit /etc/exim4/exim4.conf.template. A restart of the exim daemon with /etc/init.d/exim4 reload will activate your changes. You can find more information about the way Debian configures the exim4 packages in /usr/share/doc/exim4-base/README.Debian or at http://pkg-exim4.alioth.debian.org/README/README.Debian.html or at the Debian wiki (http://wiki.debian.org/PkgExim4) --------------------- Additionally, I would appreciate if the instructions for exim 3 could be removed. exim 3 is obsolete five years now, and new users of exim 4 are constantly finding old exim 3 documentation and fail in applying that docs to exim 4. Greetings Marc, Maintainer for Debian exim4 packages -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

1 0

[Dovecot] .bz2 plugin?
by David McBride 14 Feb '07

14 Feb '07

Hello all, Is anyone working on a .bz2 plugin similar to the existing zlib plugin? Cheers, David -- David McBride <dwm(a)tastycake.net>

2 1

[Dovecot] dead bodies stacking up in Drafts folder
by Charles Bueche 14 Feb '07

14 Feb '07

Hi, Setup : Apple Mail 2.1.1 (752.3) on Intel MacBook Pro and Dovecot 1.0rc22 on Solaris 9/SPARC. I use IMAP/TLS. Problem : mails are stacking up in the Drafts folder. When I start writing a mail, it appears in the drafts folder, and usually disappear as desired when I hit "Send". It then appear in the "Sent" folder. Sometimes, a draft versions stays in "Drafts", I have 21 of them since 1.1.2007. In this period, I have written about 400 emails, so only about 5 % stick in "Drafts". I can of course periodically select and delete them, but I don't like such glitches. Never sure if emails are really sent. Advice welcome. I'm the Solaris packager and admin so I can test things if needed. Sorry if it's a known Apple Mail issue, I would be the one to beat for using closed-source stuff :-) Charles -- Charles Bueche <charles(a)bueche.ch> sand, snow, wave, wind and net -surfer A-Cat SUI 192

7 9

[Dovecot] [Fwd: Re: Is it 1.0 yet?]
by Gavin Henry 14 Feb '07

14 Feb '07

---------------------------- Original Message ---------------------------- Subject: Re: [Dovecot] Is it 1.0 yet? From: "Raymond Lillard" <ryl(a)plasmaequip.com> Date: Tue, February 13, 2007 11:16 pm To: "Gavin Henry" <ghenry(a)suretecsystems.com> -------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gavin Henry wrote: > <quote who="Marc Perkel"> >> OK - my last main bug was fixed a few releases ago. I know that there's >> no end to getting things right but there comes a point when you need to >> call it done. No one trusts a 1.0 to be perfect but Dovecot is already >> better that most 2.0 versions of other software. >> >> I vote (as if my vote counted) to call it done, declare victory, and >> move on to 1.01, 1.02 etc. No one is going to trus it till it gets to >> 1.02 so I say lets bless it and move on. >> >> > > +1 > > +2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF0kbLW6j0KQLSyTQRAhbZAJ0SAJDaNES4wV+UajiKJ0ByObbP5gCfXfdv CU2v+W+diqDAnarYRncXj2s= =XTcI -----END PGP SIGNATURE-----

1 0

[Dovecot] Chdir Permission Denied
by Jamie Heinzel 13 Feb '07

13 Feb '07

Here are the error messages I get when anyone tries to login. Feb 13 11:22:17 mail dovecot: chdir(/home/don150) failed with uid 776: Permission denied Feb 13 11:22:17 mail imap-login: Login: don150 [::ffff:192.168.146.10] Feb 13 11:22:17 mail dovecot: child 12101 (imap) returned error 89 I am not running SELinux so I'm not sure what is happening here. All was working fine this morning, then at about 9:30 am nobody could log in. Any help would be great. Thanks!

2 2

Re: [Dovecot] [Fwd: Disable a User's email account]
by Steffen Kaiser 13 Feb '07

13 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 13 Feb 2007, Michael Surette wrote: Hello, I'm not sure why you'd not mail this info the one, who had created the thread. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBRdHa9y9SORjhbDpvAQLFoQf+PZUZZ6bHwhcKIh+8eTK3h4wEuF0lAqjE zuOjOC5D08bOgY86qt84vWqA+MYt9QTCXTPlTFxQYQESf5IgqgwKbPbl0PHxoc/1 GOddQ+Hd7I9lt42iWukqYtd6LGAV6CTIhZIFRm6uVnZYm1Or+3kiyFhiwMwkxSKF NfcsUYVenAhtfNSXOEALaBhvzdD/uUsZX/G/whq6y9A2xPOE25zdVxLPLP+F+mk3 enShwoGa1AMV6snOOEJIRkJ4QwuCacjuQjduyBKpn72rQukZBrHoJes8DOGdIKSx 3BrFz6ck+H+7hHt+vH6ukk2fRO7nkheltrMiCc22Uf97UIychHNrOA== =NWw9 -----END PGP SIGNATURE-----

1 0

[Dovecot] Apple mail
by Аркадий Володин 13 Feb '07

13 Feb '07

I have strange situation with Appe mail and latest (rc22) Dovecot. I using "mbox" POP3 (not IMAP) type of message box on server (exim: driver=appendfile) I also using MySQL authentification and SSL. Server - Linux Slackware 11.0 Linux/Thunderbird, WinXP/Thunderbird, WinXP/Outlook clients are working fine with their message boxes. But Apple mail doesn't delete messages in user's mbox, so client gets a lot of duplicate messages. As I see in such a mbox, there isn't system message like: >From MAILER_DAEMON Tue Feb 13 14:41:08 2007 Date: Tue, 13 Feb 2007 14:41:08 +0000 From: Mail System Internal Data <MAILER-DAEMON@mail> Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA Message-ID: <1171377668@mail> X-IMAP: 1169824263 0000000019 Status: RO But every message in such a box marked as "Status: RO" Please, help me to solve this trouble.

1 0

[Dovecot] error message after migration UW --> DOVECOT
by Frank Bonnet 13 Feb '07

13 Feb '07

Hello I get a lot of messages looking as above since I migrate from UW dovecot: Feb 13 10:27:44 Error: IMAP(xxxxxxxx): mbox sync: UID inserted in the middle of mailbox /user/xxxxxxxx/Trash (7 > 5, seq=2, idx_msgs=2) What would be the impact for my users ? Thanks a lot Frank

2 1

[Dovecot] [Fwd: Disable a User's email account]
by edwardspl＠ita.org.mo 13 Feb '07

13 Feb '07

Dear All, The System is FC6... So, how to disbale a User's mail service ? eg : Sendmail ( SMTP ) + Dovecot ( pop3 /imap ). Edward. -- fedora-list mailing list fedora-list(a)redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

6 12

[Dovecot] PAM, NSS, and a new blocking=yes setting
by Timo Sirainen 13 Feb '07

13 Feb '07

I wondered for a while if I should do this before v1.0, but since there seem to be problems with some PAM/NSS users and this was way easier to implement than I realized, here it is: passdb pam and userdb passwd now support blocking=yes setting in their args. For PAM the default has been to fork the dovecot-auth process and talk via a pipe to the main dovecot-auth. I've never really liked this approach, but didn't bother fixing it before. However it is also what has caused the bugs with nss_ldap, and maybe with other NSS backends too. NSS lookups then have been done all in the same dovecot-auth process without any forking. This meant that if it got stuck (or delayed a bit in LDAP queries and such), the whole dovecot-auth got stuck and all authentication attempts got stuck. With blocking=yes the lookups are handled in dovecot-auth worker processes. Earlier these workers have been used only with MySQL. Initially there is only a single worker process, but whenever dovecot-auth notices that there are no free workers while a new auth request comes, a new worker is created. auth_worker_max_count specifies the maximum number of those processes. This blocking=yes will probably work great with NSS. With PAM I'm not so sure. Mostly because the worker never exits, it just does one PAM auth after another. I think usually PAM is used only once in a process, so there might be memory leaks and maybe other bugs.. Then again, maybe not. I'll add some auth_worker_max_requests setting which can be set to 1 if this is a problem. Also for blocking=no case I added code to send KILL signal to PAM child processes which haven't replied for 2 minutes. With blocking=yes this condition can't be checked currently. http://dovecot.org/list/dovecot-cvs/2007-February/007639.html http://dovecot.org/list/dovecot-cvs/2007-February/007642.html http://dovecot.org/list/dovecot-cvs/2007-February/007646.html

2 2

[Dovecot] MD5-CRYPT passwords in a MySQL Database
by David Mills 13 Feb '07

13 Feb '07

First of all, hello to the list. I'm currently migrating from a /etc/passwd and /etc/shadow based configuration to a MySQL based one using dovecot 99.14 on debian sarge. The problem is that the /etc/shadow containes both DES encoded (Crypt) and md5 based passwords. I've set the default system to be Crypt, and have added {MD5-CRYPT} in front of the md5 passwords in place of the $1$ header found in /etc/shadow. But I can only log in on accounts that have DES based passwords. I've included my dovecot configuration, and below are 2 examples of encoded password, one crypt and one MD5: XalGYN3cy1crA {MD5-CRYPT}RL$Bvv.TF2XJkyVI6JOUO8tx/ If anyone has any ideas I'd really appreciate them since 80 odd accounts have this problem, so changing them one by one will be difficult. David -- David Mills Enki Technologies 01 76 00 71 20 *De nouvelles offres d'emploi...* *...pour bien démarrer 2007 !* Consulter la news <http://www.enki.fr/detail_actualite.htm?ACTU=13> - enki.fr <http://www.enki.fr> ## Dovecot 1.0 configuration file # Default values are shown after each value, it's not required to uncomment # any of the lines. Exception to this are paths, they're just examples # with real defaults being based on configure options. The paths listed here # are for configure --prefix=/usr --sysconfdir=/etc/dovecot # --localstatedir=/var --with-ssldir=/etc/ssl # Base directory where to store runtime data. #base_dir = /var/run/dovecot/ # Protocols we want to be serving: # imap imaps pop3 pop3s protocols = imaps pop3 pop3s # IP or host address where to listen in for connections. It's not currently # possible to specify multiple addresses. "*" listens in all IPv4 interfaces. # "[::]" listens in all IPv6 interfaces, but may also listen in all IPv4 # interfaces depending on the operating system. You can specify ports with # "host:port". #imap_listen = * #pop3_listen = * # IP or host address where to listen in for SSL connections. Defaults # to above non-SSL equilevants if not specified. #imaps_listen = #pop3s_listen = # Disable SSL/TLS support. #ssl_disable = no # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem # SSL parameter file. Master process generates this file for login processes. # It contains Diffie Hellman and RSA parameters. #ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 24 # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that 127.*.*.* and # IPv6 ::1 addresses are considered secure, this setting has no effect if # you connect from those addresses. disable_plaintext_auth = no # Use this logfile instead of syslog(). /dev/stderr can be used if you want to # use stderr for logging (ONLY /dev/stderr - otherwise it is closed). #log_path = # For informational messages, use this logfile instead of the default #info_log_path = # Prefix for each line written to log file. % codes are in strftime(3) # format. #log_timestamp = "%b %d %H:%M:%S " ## ## Login processes ## # Directory where authentication process places authentication UNIX sockets # which login needs to be able to connect to. The sockets are created when # running as root, so you don't have to worry about permissions. Note that # everything in this directory is deleted when Dovecot is started. #login_dir = /var/run/dovecot/login # chroot login process to the login_dir. Only reason not to do this is if you # wish to run the whole Dovecot without roots. # http://wiki.dovecot.org/Rootless #login_chroot = yes ## ## IMAP login process ## login = imap # Executable location. #login_executable = /usr/lib/dovecot/imap-login # User to use for the login process. Create a completely new user for this, # and don't use it anywhere else. The user must also belong to a group where # only it has access, it's used to control access for authentication process. # Note that this user is NOT used to access mails. # http://wiki.dovecot.org/UserIds #login_user = dovecot # Set max. process size in megabytes. If you don't use # login_process_per_connection you might need to grow this. #login_process_size = 32 # Should each login be processed in it's own process (yes), or should one # login process be allowed to process multiple connections (no)? Yes is more # secure, espcially with SSL/TLS enabled. No is faster since there's no need # to create processes all the time. #login_process_per_connection = yes # Number of login processes to create. If login_process_per_user is # yes, this is the number of extra processes waiting for users to log in. #login_processes_count = 3 # Maximum number of extra login processes to create. The extra process count # usually stays at login_processes_count, but when multiple users start logging # in at the same time more extra processes are created. To prevent fork-bombing # we check only once in a second if new processes should be created - if all # of them are used at the time, we double their amount until limit set by this # setting is reached. This setting is used only if login_process_per_use is yes. #login_max_processes_count = 128 # Maximum number of connections allowed in login state. When this limit is # reached, the oldest connections are dropped. If login_process_per_user # is no, this is a per-process value, so the absolute maximum number of users # logging in actually login_processes_count * max_logging_users. #login_max_logging_users = 256 ## ## POP3 login process ## # Settings default to same as above, so you don't have to set anything # unless you want to override them. login = pop3 # Exception to above rule being the executable location. #login_executable = /usr/lib/dovecot/pop3-login ## ## Mail processes ## # Maximum number of running mail processes. When this limit is reached, # new users aren't allowed to log in. #max_mail_processes = 1024 # Show more verbose process titles (in ps). Currently shows user name and # IP address. Useful for seeing who are actually using the IMAP processes # (eg. shared mailboxes or if same uid is used for multiple accounts). #verbose_proctitle = no # Show protocol level SSL errors. #verbose_ssl = no # Valid UID range for users, defaults to 500 and above. This is mostly # to make sure that users can't log in as daemons or other system users. # Note that denying root logins is hardcoded to dovecot binary and can't # be done even if first_valid_uid is set to 0. first_valid_uid = 106 #last_valid_uid = 0 # Valid GID range for users, defaults to non-root/wheel. Users having # non-valid GID as primary group ID aren't allowed to log in. If user # belongs to supplementary groups with non-valid GIDs, those groups are # not set. #first_valid_gid = 1 #last_valid_gid = 0 # Grant access to these extra groups for mail processes. Typical use would be # to give "mail" group write access to /var/mail to be able to create dotlocks. mail_extra_groups = mail # ':' separated list of directories under which chrooting is allowed for mail # processes (ie. /var/mail will allow chrooting to /var/mail/foo/bar too). # This setting doesn't affect login_chroot or auth_chroot variables. # WARNING: Never add directories here which local users can modify, that # may lead to root exploit. Usually this should be done only if you don't # allow shell access for users. See # /usr/share/doc/dovecot-common/configuration.txt for more information. #valid_chroot_dirs = # Default chroot directory for mail processes. This can be overridden by # giving /./ in user's home directory (eg. /home/./user chroots into /home). #mail_chroot = # Default MAIL environment to use when it's not set. By leaving this empty # dovecot tries to do some automatic detection as described in # /usr/share/doc/dovecot-common/mail-storages.txt. There's a few special # variables you can use: # # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain # %h - home directory # # You can also limit a width of string by giving the number of max. characters # after the '%' character. For example %1u gives the first character of # username. Some examples: # # default_mail_env = maildir:/var/mail/%1u/%u/Maildir # default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u # default_mail_env = mbox:/var/mail/%d/%n/:INDEX=/var/indexes/%d/%n # default_mail_env = mbox:~/mail/:INBOX=/var/mail/%u # Space-separated list of fields to cache for all mails. Currently these # fields are allowed followed by a list of commands they speed up: # # Envelope - FETCH ENVELOPE and SEARCH FROM, TO, CC, BCC, SUBJECT, # SENTBEFORE, SENTON, SENTSINCE, HEADER MESSAGE-ID, # HEADER IN-REPLY-TO # Body - FETCH BODY # Bodystructure - FETCH BODY, BODYSTRUCTURE # MessagePart - FETCH BODY[1.2.3] (ie. body parts), RFC822.SIZE, # SEARCH SMALLER, LARGER, also speeds up BODY/BODYSTRUCTURE # generation. This is always set with mbox mailboxes, and # also default with Maildir. # # Different IMAP clients work in different ways, that's why Dovecot by default # only caches MessagePart which speeds up most operations. Whenever client # does something where caching could be used, the field is automatically marked # to be cached later. For example after FETCH BODY the BODY will be cached # for all new messages. Normally you should leave this alone, unless you know # what most of your IMAP clients are. Caching more fields than needed makes # the index files larger and generate useless I/O. # # With maildir there's one extra optimization - if nothing is cached, indexing # the maildir becomes much faster since it's not opening any of the mail files. # This could be useful if your IMAP clients access only new mails. #mail_cache_fields = MessagePart # Space-separated list of fields that Dovecot should never set to be cached. # Useful if you want to save disk space at the cost of more I/O when the fields # needed. #mail_never_cache_fields = # Workarounds for various client bugs: # oe6-fetch-no-newmail: # Never send EXISTS/RECENT when replying to FETCH command. Outlook Express # seems to think they are FETCH replies and gives user "Message no longer # in server" error. Note that OE6 still breaks even with this workaround # if synchronization is set to "Headers Only". # outlook-idle: # Outlook and Outlook Express never abort IDLE command, so if no mail # arrives in half a hour, Dovecot closes the connection. This is still # fine, except Outlook doesn't connect back so you don't see if new mail # arrives. # outlook-pop3-no-nuls: # Outlook and Outlook Express hang if mails contain NUL characters. # This setting replaces them with 0x80 character. #client_workarounds = # Dovecot can notify client of new mail in selected mailbox soon after it's # received. This setting specifies the minimum interval in seconds between # new mail notifications to client - internally they may be checked more or # less often. Setting this to 0 disables the checking. # NOTE: Evolution client breaks with this option when it's trying to APPEND. #mailbox_check_interval = 0 # Like mailbox_check_interval, but used for IDLE command. #mailbox_idle_check_interval = 30 # Allow full filesystem access to clients. There's no access checks other than # what the operating system does for the active UID/GID. It works with both # maildir and mboxes, allowing you to prefix mailboxes names with eg. /path/ # or ~user/. #mail_full_filesystem_access = no # Maximum allowed length for custom flag name. It's only forced when trying # to create new flags. #mail_max_flag_length = 50 # Save mails with CR+LF instead of plain LF. This makes sending those mails # take less CPU, especially with sendfile() syscall with Linux and FreeBSD. # But it also creates a bit more disk I/O which may just make it slower. #mail_save_crlf = no # Use mmap() instead of read() to read mail files. read() seems to be a bit # faster with my Linux/x86 and it's better with NFS, so that's the default. #mail_read_mmaped = no # By default LIST command returns all entries in maildir beginning with dot. # Enabling this option makes Dovecot return only entries which are directories. # This is done by stat()ing each entry, so it causes more disk I/O. # (For systems setting struct dirent->d_type, this check is free and it's # done always regardless of this setting) #maildir_stat_dirs = no # Copy mail to another folders using hard links. This is much faster than # actually copying the file. This is problematic only if something modifies # the mail in one folder but doesn't want it modified in the others. I don't # know any MUA which would modify mail files directly. IMAP protocol also # requires that the mails don't change, so it would be problematic in any case. # If you care about performance, enable it. #maildir_copy_with_hardlinks = no # Check if mails' content has been changed by external programs. This slows # down things as extra stat() needs to be called for each file. If changes are # noticed, the message is treated as a new message, since IMAP protocol # specifies that existing messages are immutable. #maildir_check_content_changes = no # Which locking methods to use for locking mbox. There's three available: # dotlock: Create <mailbox>.lock file. This is the oldest and most NFS-safe # solution. If you want to use /var/mail/ like directory, the users # will need write access to that directory. # fcntl : Use this if possible. Works with NFS too if lockd is used. # flock : May not exist in all systems. Doesn't work with NFS. # # You can use both fcntl and flock too; if you do the order they're declared # with is important to avoid deadlocks if other MTAs/MUAs are using both fcntl # and flock. Some operating systems don't allow using both of them # simultaneously, eg. BSDs. If dotlock is used, it's always created first. #mbox_locks = dotlock fcntl # Should we create dotlock file even when we want only a read-lock? Setting # this to yes hurts the performance when the mailbox is accessed simultaneously # by multiple processes, but it's needed for reliable reading if no other # locking methods are available. #mbox_read_dotlock = no # Maximum time in seconds to wait for lock (all of them) before aborting. #mbox_lock_timeout = 300 # If dotlock exists but the mailbox isn't modified in any way, override the # lock file after this many seconds. #mbox_dotlock_change_timeout = 30 # umask to use for mail files and directories #umask = 0077 # Drop all privileges before exec()ing the mail process. This is mostly # meant for debugging, otherwise you don't get core dumps. Note that setting # this to yes means that log file is opened as the logged in user, which # might not work. It could also be a small security risk if you use single UID # for multiple users, as the users could ptrace() each others processes then. #mail_drop_priv_before_exec = no ## ## IMAP process ## # Executable location #imap_executable = /usr/lib/dovecot/imap # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. #imap_process_size = 256 # Support for dynamically loadable modules. #imap_use_modules = no #imap_modules = /usr/lib/dovecot/imap ## ## POP3 process ## # Executable location #pop3_executable = /usr/lib/dovecot/pop3 # Set max. process size in megabytes. Most of the memory goes to mmap()ing # files, so it shouldn't harm much even if this limit is set pretty high. #pop3_process_size = 256 # Support for dynamically loadable modules. #pop3_use_modules = no #pop3_modules = /usr/lib/dovecot/pop3 ## ## Authentication processes ## # An Authentication process is a child process used by Dovecot that # handles the authentication steps. The steps cover an authentication # mechanism (auth_mechanisms, how the client authenticates in the IMAP or # POP3 protocol), which password database should be queried (auth_passdb), # and which user database should be queried (auth_userdb, to obtain # UID, GID, and location of the user's mailbox/home directory). # # You can have multiple processes, though a typical configuration will # have only one. Each time "auth = xx" is seen, a new process # definition is started. The point of multiple processes is to be able # to set stricter permissions. (See auth_user below.) # # Just remember that only one Authentication process is asked for the # password, so you can't have different passwords accessible through # different process definitions (unless they have different # auth_mechanisms, and you're ok with having different password for # each mechanisms). # Authentication process name. auth = default # Specifies how the client authenticates in the IMAP protocol. # Space separated list of permitted authentication mechanisms: # anonymous plain digest-md5 cram-md5 # # anonymous - No authentication required. # plain - The password is sent as plain text. All IMAP/POP3 clients # support this, and the password can be encrypted by Dovecot to match # any of the encryption schemes used in password databases. # digest-md5 and cram-md5 - both encrypt the password so it is more # secure in transit, but are not well supported by clients, and # require that the password database use a matching encryption # scheme (or be in plaintext). # # See auth.txt for more details. # # If you are using SSL there is less benefit to digest-md5 and # cram-md5 as the communication is already encrypted. auth_mechanisms = plain # Space separated list of realms for SASL authentication mechanisms that need # them. You can leave it empty if you don't want to support multiple realms. # Many clients simply use the first one listed here, so keep the default realm # first. #auth_realms = # Default realm/domain to use if none was specified. This is used for both # SASL realms and appending @domain to username in plaintext logins. #auth_default_realm = # User database specifies where mails are located and what user/group IDs # own them. For single-UID configuration use "static". # http://wiki.dovecot.org/Authentication # http://wiki.dovecot.org/VirtualUsers # passwd: /etc/passwd or similiar, using getpwnam() # passwd-file <path>: passwd-like file with specified location # static uid=<uid> gid=<gid> home=<dir template>: static settings # vpopmail: vpopmail library # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf auth_userdb = passwd #auth_userdb = static uid=139 gid=139 home=/home/users/%u/ # Password database specifies only the passwords for users. # http://wiki.dovecot.org/Authentication # passwd: /etc/passwd or similiar, using getpwnam() # shadow: /etc/shadow or similiar, using getspnam() # pam [<service> | *]: PAM authentication # passwd-file <path>: passwd-like file with specified location # vpopmail: vpopmail authentication # ldap <config path>: LDAP, see /etc/dovecot/dovecot-ldap.conf # mysql <config path>: a MySQL database, see /etc/dovecot/dovecot-mysql.conf # pgsql <config path>: a PostgreSQL database, see # /etc/dovecot/dovecot-pgsql.conf #auth_passdb = shadow auth_passdb = mysql /etc/dovecot/dovecot-mysql.conf #auth_executable = /usr/lib/dovecot/dovecot-auth # Set max. process size in megabytes. #auth_process_size = 256 # User to use for the process. This user needs access to only user and # password databases, nothing else. Only shadow and pam authentication # requires roots, so use something else if possible. Note that passwd # authentication with BSDs internally accesses shadow files, which also # requires roots. Note that this user is NOT used to access mails. # That user is specified by auth_userdb above. auth_user = root # Directory where to chroot the process. Most authentication backends don't # work if this is set, and there's no point chrooting if auth_user is root. #auth_chroot = # Number of authentication processes to create #auth_count = 1 # List of allowed characters in username. If the user-given username contains # a character not listed in here, the login automatically fails. This is just # an extra check to make sure user can't exploit any potential quote escaping # vulnerabilities with SQL/LDAP databases. If you want to allow all characters, # set this value to empty. #auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ # Username to use for users logging in with ANONYMOUS SASL mechanism #auth_anonymous_username = anonymous # More verbose logging. Useful for figuring out why authentication isn't # working. #auth_verbose = no # Even more verbose logging for debugging purposes. Shows for example SQL # queries. #auth_debug = no # digest-md5 authentication process. It requires special MD5 passwords which # /etc/shadow and PAM doesn't support, so we never need roots to handle it. # Note that the passwd-file is opened before chrooting and dropping root # privileges, so it may be 0600-root owned file. #auth = digest_md5 #auth_mechanisms = digest-md5 #auth_realms = #auth_userdb = passwd-file /etc/passwd.imap #auth_passdb = passwd-file /etc/passwd.imap #auth_user = imapauth #auth_chroot = # if you plan to use only passwd-file, you don't need the two auth processes, # simply set "auth_methods = plain digest-md5" # For the mysql passdb module, you'll need a database with a table that # contains fields for at least the userid and password. If you want to # use the user@domain syntax, you might want to have a separate domain # field as well. # # If your users all have the same uig/gid, and have predictable home # directories, you can use the static userdb module to generate the home # dir based on the userid and domain. In this case, you won't need fields # for home, uid, or gid in the database. # # If you prefer to use the mysql userdb module, you'll want to add fields # for home, uid, and gid. Here is an example table: # # CREATE TABLE users ( # userid VARCHAR(128) NOT NULL, # password VARCHAR(64) NOT NULL, # home VARCHAR(256) NOT NULL, # uid INTEGER NOT NULL, # gid INTEGER NOT NULL, # active CHAR(1) DEFAULT 'Y' NOT NULL # ); db_host = localhost db_port = 3306 db_unix_socket = /var/run/mysqld/mysqld.sock db = mail db_user = dovecot db_passwd = 3eDcVb db_client_flags = 0 # Default password scheme. # # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, and CRYPT. # default_pass_scheme = CRYPT # Query to retrieve the password. # # The query should return one row, one column. If more than one row or column # is returned, authentication will automatically fail. # # Available substitutions: # %u = entire userid # %n = user part of user@domain # %d = domain part of user@domain # # Example: # password_query = SELECT password FROM users WHERE userid = '%n' AND domain = '%d' # password_query = SELECT password FROM users WHERE userid = '%u' AND active = 'Y' # password_query = SELECT password FROM enki_users WHERE username = '%u' # Query to retrieve the user information. # # The query must return only one row. The columns to return are: # home - Home directory # mail - MAIL environment # system_user - System user name (for initgroups()) # uid - System UID # gid - System GID # # Either home or mail is required. uid and gid are required. If more than one # row is returned or there's missing fields, login will automatically fail. # # Examples # user_query = SELECT home, uid, gid FROM users WHERE userid = '%n' AND domain = '%d' # user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where userid = '%u' # user_query = SELECT home, 501 AS uid, 501 AS gid FROM users WHERE userid = '%u' # #user_query = SELECT home, uid, gid FROM users WHERE userid = '%u'

2 1

[Dovecot] pop3 via tls
by jepoy 13 Feb '07

13 Feb '07

hi guys, i want to try pop3 using tls, just like smtp. is it possible ? i want to first create a secure tunnel before donwloading the mails. tnx -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

[Dovecot] Problems with HUP'ing dovecot
by Javier Henderson 13 Feb '07

13 Feb '07

Hi, I'm running dovecot 1.0.rc7 on FreeBSD 6.1, so far with great success. Earlier today I tried to HUP the main process, the following was logged: dovecot: Feb 12 15:10:19 Warning: SIGHUP received - reloading configuration dovecot: Feb 12 15:10:19 Panic: file ioloop-poll.c: line 105 (io_loop_handle_remove): assertion failed: (index >= 0 && (unsigned int) index < ctx->fds_count) Of possible interest: just prior to issuing the HUP I had edited the / etc/resolv.conf file to take out the first entry since that particular DNS server went off line. I noticed that login attempts to the POP and IMAP services were timing out and that's when I sent the HUP to dovecot. Any ideas? Thanks, -jav

2 1

[Dovecot] mail_location and storage type
by Jürgen Herz 13 Feb '07

13 Feb '07

Hi, I was setting up a new system for testing Dovecot 1.0. My old one is using 0.99 and was set up quite a time ago, so I had to consult the documentation. I needed several attempts until it worked and that was because the designated maildir directory /server/mail/jrg/Maildir was completely empty. Upon login the server exited and wrote the following to the log: POP3(jrg): Ambiguous mail location setting, don't know what to do with it: /server/mail/jrg/Maildir (try prefixing it with mbox: or maildir:) POP3(jrg): Failed to create storage with data: /server/mail/jrg/Maildir That thing was the main cause of my confusion since the config wasn't ambiguous at all at already contained a prefix: mail_location = maildir:/server/mail/%u/Maildir The wiki article MailLocation doesn't contain any hint maildirs have to contain at least a cur subdirectory. That information I eventually got from mail-storages.txt - that file must be one for which the wiki isn't an alternative. So what is this mail about? 1. The log message is wrong or at least missleading. Would be fine if it could get improved. 2. Is there any reason at all to have a storage prefix but still require some special format for the directory in order to recognize it? 3. At least if the behaviour will stay, shouldn't the text from mail-storages.txt converted to a wiki article or incorporated into MailLocation? Regards, Juergen

2 3

[Dovecot] Compiler warnings
by Stephen Lee 12 Feb '07

12 Feb '07

Hi, I'm trying to install Dovecot 1.0RC22 on an old Trustix 1.5 box and am getting the compiler warnings: quota-storage.c:275: warning: pointer of type `void *' used in arithmetic convert-storage.c:50: warning: pointer of type `void *' used in arithmetic acl-backend-vfile.c:212: warning: pointer of type `void *' used in arithmetic There are many more of these pointer warnings in the various modules when compiling. Is this a problem? Thanks, Stephen

2 1

[Dovecot] Differences between IDLE when Maildir vs. wel the "mail" folder is used
by Philip Van Hoof 12 Feb '07

12 Feb '07

Are there any differences with how both IDLE and "UID FETCH n:n+x (FLAGS UID...)" are handled when Dovecot is using a "mail" vs. a "Maildir" user? I have recently implemented support for IDLE (Push E-mail) in a client infrastructure that I'm building. I haven't in depth checked out what the problem might be, but when Dovecot was using the "mail" dir in $HOME something about the implementation wasn't working. When I switched to "Maildir" everything worked. I only tested to the point of seeing the "* EXISTS n" response during the idle. I saw this response. It's for example possible that the n is wrong or that a bit later the "UID FETCH ..." ain't returning the right information. It's also possible that my implementation is wrong (of course) and I haven't yet had the time to really figure out what goes wrong. I did so far, however, test with Cyrus, Exchange, Courier and Isode's M-Box. All these tests where successful. SO if it indeed is a discrepancy in my implementation .. it's going to be something very specialised or specific I fear :-) I also setup testing infrastructure http://tinymail.org/trac/tinymail/wiki/TestImapServers Also take a careful look at this manual test. "tnytest" is a user on imap2.tinymail.org that uses Maildir. The "tnytest2" user doesn't have a Maildir configured. By that I mean that "Dovecot" has created the folder for E-mail using whatever it uses by default. Dovecot's IDLE (the EXISTS) responses also take a lot longer on tnytest2 than on tnytest. Another question. Why not simply "always" use the Maildir solution if that one works better? ;-) (really, honest question. Hehe). Take a look at the "UID FETCH" response: It's incorrect on tnytest2. The first attempt I asked for 1:1 and I got none. The second I asked for 1:4 and I got 3 of them, while IDLE clearly stated that there where 4 messages available. In reality 4 where indeed available (or copied in total). Well, I'm not saying something is or isn't wrong, just wondering and testing a little bit and seeing some strange results... Feel free to use imap2.tinymail.org for testing. And if you need root on that virtual machine, so that you can install a new version, go ahead. On http://imap2.tinymail.org you van find things like version information (it's a CVS snapshot). pvanhoof@lort:~$ telnet imap2.tinymail.org Trying 86.39.154.77... telnet: Unable to connect to remote host: Connection refused pvanhoof@lort:~$ telnet imap2.tinymail.org 143 Trying 86.39.154.77... Connected to imap2.tinymail.org. Escape character is '^]'. * OK Dovecot ready. ao1 login tnytest tnytest ao1 OK Logged in. a01 select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 1 EXISTS * 0 RECENT * OK [UIDVALIDITY 1171049606] UIDs valid * OK [UIDNEXT 2] Predicted next UID a01 OK [READ-WRITE] Select completed. a04 IDLE + idling * 2 EXISTS DONE a04 OK Idle completed. UID FETCH 1:2 (FLAGS UID) * 1 FETCH (FLAGS (\Seen) UID 1) * 2 FETCH (FLAGS (\Seen) UID 2) UID OK Fetch completed. ^] telnet> quit Connection closed. pvanhoof@lort:~$ telnet imap2.tinymail.org 143 Trying 86.39.154.77... Connected to imap2.tinymail.org. Escape character is '^]'. * OK Dovecot ready. a01 login tnytest2 tnytest a01 OK Logged in. a01 select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1171107413] UIDs valid * OK [UIDNEXT 1] Predicted next UID a01 OK [READ-WRITE] Select completed. a04 IDLE + idling * 1 EXISTS DONE a04 OK Idle completed. a05 UID FETCH 1:1 (FLAGS UID) a05 OK Fetch completed. a04 IDLE + idling * 4 EXISTS DONE a04 OK Idle completed. a06 UID FETCH 1:4 (FLAGS UID) * 1 FETCH (FLAGS (\Seen) UID 2) * 2 FETCH (FLAGS (\Seen) UID 3) * 3 FETCH (FLAGS (\Seen) UID 4) a06 OK Fetch completed. -- Philip Van Hoof, software developer home: me at pvanhoof dot be gnome: pvanhoof at gnome dot org http://www.pvanhoof.be/blog

2 1

[Dovecot] PLAIN-MD5 password scheme with salt?
by Steffen Weber 12 Feb '07

12 Feb '07

Hello! I'm storing passwords as MD5 hashes in a MySQL database and have specified "default_pass_scheme = PLAIN-MD5" in dovecot-sql.conf. Can Dovecot append or prepend a salt to a password before hashing them? Because without salt the plaintext passwords can be restored from the MD5 hashes using rainbow tables. Greetings Steffen Weber

2 3

[Dovecot] mbox and dual-use folders?
by John Robinson 12 Feb '07

12 Feb '07

Feature request: please can we have support for messages stored in mbox files, but folders containing both messages and folders. I think this could be done for a folder called e.g. dovecot-list by having an mbox file called dovecot-list and a directory called dovecot-list.folder (or whatever, says he handwaving away name clashes which can be worked around like they are in maildirs). This may be a subset or variant of http://wiki.dovecot.org/FeatMboxMaildir Cheers, John.

2 1

[Dovecot] IMAP/POP3 server with proxy feature
by Jasper Bryant-Greene 12 Feb '07

12 Feb '07

We are currently evaluating the migration from a proprietary, legacy mail server onto Dovecot for 20,000+ virtual domains. This is a big job and we intend to do it by initially proxying connections through to the legacy server, and moving customers over in batches by turning off the proxy feature for them. In the manual it states "This model is still a bit unfinished in current code" [1]. What is needed to get this production-quality? I'm happy to help out with any work required. [1] http://wiki.dovecot.org/ImapProxy -- Jasper Bryant-Greene Director Album Limited jasper(a)albumltd.co.nz +64 21 708 334 / 0800 425 286 http://www.albumltd.co.nz/

5 4

Re: [Dovecot] Reproducible duplicate messages bug with Mail.app+Dovecot / may imap bug from mail apple
by Andrew Moran 12 Feb '07

12 Feb '07

On Feb 10, 2007, at 4:30 PM, Robert Schetterer wrote: > > Hi Andrew, > > i investigated the imap bugs from apple mail app with google > trough the years, and i saw there was no version without a bug with > imap, so i speculate its not dovecot what does something wrong here > Oh I have no doubt that Apple's Mail.app is very buggy, but I submit a bug to them which only happens with dovecot IMAP server, I'm sure they are going to be quick to blame dovecot rather than investigate it fully. This is why I was hoping that someone on this list who has Mail.app and Dovecot can (a) verify that it is happening for them (it's 100% reproducible to me) and (b) figure out exactly what's going on, at least to the point of knowing it's Mail.app's fault and not something Dovecot is doing, or a combination of both (such as dovecot doing something other IMAP servers don't and Mail.app misinterpreting it). --Andy

3 2

[Dovecot] Shared folders plans for the future
by Timo Sirainen 11 Feb '07

11 Feb '07

So while driving for several hours in my car recently and having nothing else to do, I started thinking how they could be done. I think the "public folders" configuration will stay as it is now. Does it really even need anything else? The problematic case is how the users can share their mailboxes to other users. There are two problems related to it: 1) How to get (quickly) a list of another user's mailboxes that I have access to? 2) How to get quickly a list of all users who have mailboxes that I have access to? The 1) problem is easier to solve. Create a directory listing all the mailboxes that are shared to at least someone (have ACLs set). It could be configured like: namespace shared { # IMAP namespace prefix, %u expands to shared user prefix = user/%u/ # Directory containing symlinks to user's all shared mailboxes share_dir = ~/Maildir/shared # Where to store indexes for other users' accessed mailboxes index_dir = ~/Maildir/others-indexes } The ~/Maildir/shared directory could then contain symlinks to all the shared mailboxes. The directory list could probably be in Maildir++ layout even though the symlinks would point to mboxes. This requires adding code that can handle mixed maildir/mbox directories, but it'll come anyway.. The 2) problem is more difficult. There are 3 choices: a) Use a shared database file. lib-dict could be used for this, so the database could be in SQL or in a berkeley db file. The downside to this is that the file needs to be readable and writable to everyone, so if users have shell access the users could break the file. They dictionary would contain data in format "<destination_user>/<sharing_user>" = 1 and "<destination_group>/<sharing_user>" = 1, ie. the value would be ignored and only the existence of the keys would be important. Then iterating through "<my_username>/*" and "<all_my_groups>/*" would list the users who probably have mailboxes where I have access to. b) Use a directories with sticky bit set. Well, basically the same idea as in a), except filesystem would be used. Actually perhaps this could be made another lib-dict backend.. c) Brute force: Just assume everyone potentially have shared mailboxes. Get the list of users by readdir()ing through /home (configurable). I guess each of these could be made an option.. So something like: namespace shared { .. # a) shared_dict = db:/var/lib/dovecot/shared-mailboxes.db # b) shared_dict = dir:/var/lib/dovecot/shared-mailboxes # c) shared_dict = bruteforce:/home } I'm currently also implementing a "mailbox list index", which contains a list of all the user's mailboxes and some useful metadata for them, such as number of messages and so on. So that STATUS command wouldn't need to open the mailbox index files if they haven't changed. The mailbox list index updating is normally done when directory's mtime has changed. For list of shared users that would also work in 2b) and 2c) cases, but for 2a) I'd either have to always sync everything or alternatively add some sequence/<dest_user/group>=# value which is grown for each update, and the syncing is done only when the sequence is updated.

6 17

[Dovecot] help needed - dovecot-ldap authentication
by Vidyasagar Warge 10 Feb '07

10 Feb '07

I am trying to set a up mail server on a ubuntu edgy machine. I followed the howto at http://wanderingbarque.com/howtos/mailserver/mailserver.html . I am able to configure everything except dovecot-ldap authentication :(. After struggling with it for a week I decided to seek help. The current version of dovecot is v1.0 RC21 and the version used for the howto is v0.99.10.9. I installed & tried to configure both versions but none of them was able to authenticate a user from ldap. I noted some differences in syntax of the dovecot.conf files of both the versions. It seems that the ldap documentation at dovecot site is from the old version of dovecot ( I might be wrong on this!). So if anyone can tell me how to configure the current version of dovecot with openldap? Please help me! I am eagerly waiting for your response. Regards, Vidyasagar

2 1

[Dovecot] where is the subfolders
by P Y Tan 10 Feb '07

10 Feb '07

I have just set up a dovecot IMAP + Maildir. Would any one tell me where Dovecot store the subfolders and how to delete invalid folders.

2 1

[Dovecot] 1.0.rc21 released
by Timo Sirainen 10 Feb '07

10 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc21.tar.gz http://dovecot.org/releases/dovecot-1.0.rc21.tar.gz.sig Just one fix. Maybe the one big thing in Dovecot v2.0.* will be a test suite, which is run before any release. :) - Cache file handling could have crashed rc20

11 19

[Dovecot] Lda does not query pgsql
by Tognini Samuele 09 Feb '07

09 Feb '07

Hi, I don't know if it's a bug or my configuration fault, but LDA does not work as i expect. Dovecot auth connects to a pgsql database that mirrors Nis users infos, but it has also quota settings because i'd like to use a per-user quota environment. Mailserver and Postfix authenticates users with Nis (through PAM), while imap and local delivery (with the postfix mailbox_command setting) are left to dovecot mechanism. Imap works perfectly, dovecot retrieves authentication and quota setting from database, but dovecot LDA seems to not query any database (and nothing is logged) , so that quota is not retrived and message is not bounced when user is overquota. You can see it in the verbose log: deliver(tognini): 2007-02-08 12:25:02 Info: Loading modules from directory: /usr/lib/dovecot/modules/lda deliver(tognini): 2007-02-08 12:25:02 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib10_quota_plugin.so deliver(tognini): 2007-02-08 12:25:02 Info: Module loaded: /usr/lib/dovecot/modules/lda/lib90_cmusieve_plugin. so deliver(tognini): 2007-02-08 12:25:02 Info: mbox: data=/home/t/tognini:INBOX=/var/spool/mail/tognini deliver(tognini): 2007-02-08 12:25:02 Info: mbox: root=/home/t/tognini, index=/home/t/tognini, inbox=/var/spool/mail/tognini deliver(tognini): 2007-02-08 12:25:02 Info: cmusieve: Using sieve path: /home/t/tognini/.dovecot.sieve deliver(tognini): 2007-02-08 12:25:02 Info: msgid=<20070208112502.7706B3273D6(a)arturo.cli.di.unipi.it>: saved mail to INBOX If i set quota variable in dovecot.conf, still no query but the global variable is used for all users: ... deliver(tognini): 2007-02-07 12:33:04 Info: dirsize quota limit = 1024kB ... My Debian server packages are: dovecot-common/unstable 1.0.rc22-1 postfix/testing 2.3.6-1 postgresql/testing 7.5.22 Dovecot.conf: protocols = imap imaps log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Server ready. mail_location = mbox:%h:INBOX=/var/spool/mail/%u mail_extra_groups = mail mail_debug = yes mbox_read_locks = dotlock fcntl mbox_write_locks = dotlock fcntl protocol imap { mail_plugins = quota imap_quota imap_client_workarounds = outlook-idle tb-extra-mailbox-sep } auth_verbose = yes auth_debug = yes auth_debug_passwords = yes auth default { user = root mechanisms = plain passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb prefetch { } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = mail # User running Dovecot LDA group = mail # Or alternatively mode 0660 + LDA user in this group } } } protocol lda { postmaster_address = samuele(a)example.org mail_plugins = quota cmusieve log_path = /var/log/dovecot-deliver.log info_log_path = /var/log/dovecot-deliver.log } plugin { #quota = dirsize:storage=1024 # every user gets this quota, but it's not what i want. } Dovecot-sql.conf: driver = pgsql connect = host=192.168.1.2 dbname=dovecot user=myuser password='mypasswd' default_pass_scheme = CRYPT password_query = SELECT password, home as userdb_home, uid as userdb_uid, gid as userdb_gid, 'dirsize:storage='||quota as userdb_quota FROM user_accounts WHERE username = '%u' AND active = '1' #user_query = SELECT home, uid, gid, quota FROM user_accounts WHERE username = '%u' user_query = SELECT home, uid, gid, 'dirsize:storage=' || quota AS quota FROM user_accounts WHERE username = '%u' Postfix main.cf: ... mailbox_size_limit = 0 recipient_delimiter = + mailbox_command = /usr/lib/dovecot/deliver .... Postgresql table: Table "public.user_accounts" Column | Type | Modifiers ----------+------------------------+------------------------------ username | character varying(12) | not null uid | integer | not null gid | integer | not null password | character varying(32) | home | character varying(255) | not null active | character(1) | not null default 'Y'::bpchar quota | integer | not null default 512 Thanks in advance for any help or suggestion, Samuele

1 1

[Dovecot] error on pop3
by jepoy 09 Feb '07

09 Feb '07

hi guys, just got this error after install quota. -ERR [IN-USE] Couldn't sync mailbox. tnx -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 4

[Dovecot] LSUB * error solved on rc22
by Gavin Henry 09 Feb '07

09 Feb '07

Hi All, Just a quickie to say ew are running the latest version now. Our LSUB error was due to: open(/var/mail/public/.Projects/dovecot-acl) failed: Permission denied Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

[Dovecot] why is there email in my mbox file?
by Kendall Shaw 09 Feb '07

09 Feb '07

Hi, I've installed dovecot-imapd under ubuntu. My account and root are the only email accounts on my computer. I transitioned from using GNUS with fetchmail, exim and movemail, to gnus with exim, fetchmail and imap, so I've kept the mbox format email instead of changing to maildir. This works okay, except my mbox file is giant. I expected dovecot to take the mail out of the mbox file and put it somewhere. But, I see there's a big mbox file (/var/mail/me) that keeps growing. Is dovecot using that as the store of messages? If I were to move to using maildir instead of mbox, what is going to happen to my existing mail? Kendall

2 4

[Dovecot] Feature Request
by Jay Chandler 09 Feb '07

09 Feb '07

How much trouble would it be to have the name of the .subscriptions file set via the configuration file, or failing that, as a compile-time option? I find that editing the source directly is a bit of a harrowing experience, particularly when doing it as part of a package management system such as an RPM or the FreeBSD ports tree. -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: Too many interrupts

2 1

[Dovecot] Folders compat. problem ?
by Frank Bonnet 08 Feb '07

08 Feb '07

Hi A user here has a strange problem when I moved my imap server from UW-IMAP to Dovecot. A folder created monthes ago with mozilla mail (windows client) became suddenly invisible when I stopped UW then started Dovecot. I really think that IMAP created folders a fully compatibles between UW and Dovecot but I'm curious to know from where does come this trouble ??? Anyone had experienced the same problem ? Thanks a lot.

2 2

[Dovecot] duplicate emails
by Alex 07 Feb '07

07 Feb '07

i'm working with dovecot-1.0.rc15 I have receive a lot of duplicate emails with microsoft outlook, i don't have this problem with outlook express This is in pop3

10 36

[Dovecot] POP3 UIDL
by FiL ＠ Kpoxa 07 Feb '07

07 Feb '07

I have installed rc22 and tried it with my mbox-based mail - fine. Then I converted that mbox to Maildir to see if new feature (saving state without QUIT) works - first run - I get time out. Second run - I get rest of the Maildir scanned and get into mailbox. Fine. but.... # telnet enders2 110 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. +OK Dovecot ready. user filonovd +OK pass ****** +OK Logged in. uidl +OK . where is the list of pop3 uids ? When I connect to mbox I get something like .......... 84904 d8f096c72c24719bd7d13d78a3694114 84905 9074b40ab4283ec38a151587f34690d9 84906 06a40afeaca43fc76bea2231b13b1a33 84907 cdae771ec2407df89a25321f3792d9e9 84908 9f84415625d77dd3cde7d9441847318e but with Maildir I get nothing. Doesn't look like proper behavior. P.S. mail_location = maildir:~/Maildir #mail_location = mbox:~/mail:INBOX=/var/mail/%u pop3_reuse_xuidl = no pop3_uidl_format = %m FiL

6 10

[Dovecot] negative quota usage causes over-quota messages with dictionary quota backend
by Marshal Newrock 07 Feb '07

07 Feb '07

Using dovecot 1.0.rc21, with quotas being stored in mysql, I have found that if the quota usage stored is negative, then when a message is given to dovecot deliver, the account is reports as being over quota. The squirrelmail quota usage plugin says that the quota is at around 40 million percent (I should have written down the exact number), though I don't know if that's squirrelmail or dovecot coming up with that number. At a guess, I'd say there's an unsigned int being used where the result can be signed. I'm using MySQL 5, so for an easy workaround, I added a trigger that sets the quota usage to 0 if it goes less than 0. I could probably also set the field to unsigned int, but I haven't tested what mysql does if you try to change an unsigned int field such that it would be negative. -- Marshal Newrock, Ideal Solution LLC http://www.idealso.com

1 0

[Dovecot] OTP?
by Micah Cowan 07 Feb '07

07 Feb '07

Hello, I was wondering where I might find more information about using OTP as an authentication protocol with dovecot. In searching, I found a thread from 2004, but not much information about how it has progressed from then. I also saw some promising patches from mid-last year, which if I had to guess are probably the addition of support for the SASL OTP mechanism. Is this available in a release yet? (And, also: does anyone know of Linux mail clients that support the OTP SASL mechanism? I'm hoping Thunderbird might...). If not, is it possible to make it work currently with PAM (or, if that's not possible, maybe Cyrus SASL)? It would be okay with me if it can work with PAM but not prompt with the seed/series number: I can scratch off keys no prob. I tried briefly to get it to work through PAM, and in fact opieinfo told me that the series was being decremented, but auth.log gives Feb 6 15:41:46 mabruk dovecot-auth: (pam_unix) authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=x.x.x.x user=micah ssh works fine with the same PAM settings (both include common-auth, which has:) auth sufficient pam_opie.so auth sufficient pam_unix.so nullok_secure auth required pam_deny.so -- Micah J. Cowan Programmer, musician, typesetting enthusiast, gamer... http://micah.cowan.name/

4 7

[Dovecot] imap crashes on deleting an e-mail with no message-id.
by Tan Shao Yi 07 Feb '07

07 Feb '07

Hi, I'm on RC21 on a Solaris 10 SPARC box. Somehow I managed to receive an e-mail with no message-id and when dovecot tries to delete the e-mail. Viewing the e-mail is not a problem though. I attached truss to the imap process and this was what I received: pollsys(0x000B7A88, 3, 0xFFBFF870, 0x00000000) = 0 pollsys(0x000B7A88, 3, 0xFFBFF870, 0x00000000) = 0 pollsys(0x000B7A88, 3, 0xFFBFF870, 0x00000000) (sleeping...) pollsys(0x000B7A88, 3, 0xFFBFF870, 0x00000000) = 1 read(0, " g 1 b q U I D S T O".., 3747) = 52 alarm(120) = 0 fcntl(6, F_SETLKW64, 0xFFBFF1D0) = 0 alarm(0) = 120 close(8) = 0 open64("/maildirs/tansy/Maildir/maildirsize", O_RDWR|O_APPEND) = 8 read(8, " 1 0 7 3 7 4 1 8 2 4 0 S".., 5120) = 2223 read(8, 0xFFBFE8DF, 2897) = 0 Incurred fault #6, FLTBOUNDS %pc = 0x00086FF8 siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 Received signal #11, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 I believe it's due to the mail_log plugin that is logging the message-ids being deleted. When I disabled the mail_log plugin, the e-mail gets deleted correctly. Timo, do you think we can have mail_log to handle such exceptions? :) Thanking in advance. Cheers, Tan Shao Yi

2 1

[Dovecot] Default domain name
by Nils Vogels 07 Feb '07

07 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I'm trying to setup a dovecot installation and at the same time i'm also moving from system to virtual users. In order for end-users to experience as little impact as possible, I'd like to add a default domainname to the login, if the login doesn't contain a full username. For instance: * User logging in as "user(a)mydomain.com" will get the mailbox for user(a)mydomain.com. * User logging in as "user" will also get the mailbox for user(a)mydomain.com Is there some way to do this, without using the pop3/imap proxy? I've searched the wiki and sample configuration file, but was only able to find entries about authentication rewrites so far, and I don't know if this could be done with auth_username_translation ? Greetings, Nils - -- Those who desire to give up freedom in order to gain security, will not have, nor do they deserve, either one. ~Benjamin Franklin (American Statesman, Scientist, Philosopher, Printer, Writer and Inventor. 1706-1790) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (MingW32) iD8DBQFFyP+3MzNX/a06Wq0RAvQ4AJwNWr7ov8Fw6JhuoOQGiQte51FW9wCfaZ7x Y3VbqigfdqSFgnlA0Aukucg= =owku -----END PGP SIGNATURE-----

2 1

[Dovecot] Indexing Performance Question (was tpop3d vs dovecot)
by Nate 06 Feb '07

06 Feb '07

Since posting the previous thread we've setup a new system (Opteron 2.0ghz, 1gb ram, Fedora 6) for testing. I am hoping somebody very familiar with the indexing portion of dovecot can shed some light on this for me. After much testing, I've come to one primary conclusion that dovecot is possibly unnecessarily scanning or reading files within the maildir directories. Take a mailbox for instance (my test one has 71570 emails in the cur/ folder so the process runs long enough to get data of what it's doing). Follow these steps: 1. First pop3 connection. With no index files whatsoever, it takes nearly a full 10 minutes at 100% io load to scan the 71570 files (748M) directory and build the index files from scratch which look like this: -rw------- 1 postfix postdrop 839K Feb 1 00:43 dovecot.index -rw------- 1 postfix postdrop 1.9M Feb 1 00:57 dovecot.index.cache -rw------- 1 postfix postdrop 560K Feb 1 00:43 dovecot.index.log -rw------- 1 postfix postdrop 3.1M Feb 1 00:43 dovecot-uidlist While it's building index i see a lot of these fly by in lsof pop3 2023 postfix 8r REG 8,3 14425 285947 /var/spool/mail/test.visp.net/natetest/cur/1128488047.V902I7d42e.s3.visp.net:2, No problem here, the disk can only go as fast as the disk can go and thats a *lot* of mail. Although, one curious thing here, it appears that dovecot is reading or at least scanning the entire contents of the files within the cur/ directory to generate an index. I assume this by watching my disk cache go from 100MB to 600MB. Is it necessary to do that or only read the top X lines of each file, is that even possible? 2. Second connection. Near instantaneous results from a login and LIST. Cannot perform an lsof fast enough to see what files it's opening. This step can be repeated with nearly the same results. *rebooted machine to clear all cache* 3. Third connection. It takes ~40 seconds to display a LIST after login. The index files are untouched; however, during the 40 seconds I'm waiting, I can catch a few of these in lsof. pop3 1971 postfix 10r REG 8,3 4196 205963 /var/spool/mail/test.visp.net/natetest/cur/1157863512.V902I1f3867.s3.visp.net:2,S This tells me even though there is no new email, it is re-scanning the cur/ directory somewhat. It doesn't take near as long as the initial index build, but certainly takes longer than it would for the system to read any or all of the listed index files above. Why would dovecot need to even enter cur/ if the index file is up to date? Is it verifying that the index file is up to date by re-reading some or all of the many files in cur/? If so, could it not get the info it needs by simply doing the equivalent of a ls, which would take considerably less time? The disk cache is only filled up an additional 30meg vs an additional 500meg from connection 1, so it's certainly not reading as much data. (also makes me wonder why the initial scan/index build could not use this lesser time consuming function if thats what it's doing). Additional information: Running strace on the initial indexing looks like this... ------------------------------------------- open("/var/spool/mail/test.visp.net/natetest/cur/1115929738.V902I67c13.test.visp.net:2,", O_RDONLY) = 8 fstat(8, {st_mode=S_IFREG|0600, st_size=4667, ...}) = 0 pread(8, "Return-Path: <mehl8nl3n8osm3r83a"..., 4096, 0) = 4096 pread(8, "zdik8dyrnffv6bbrue.itownshipno12"..., 4095, 4096) = 571 pread(8, "", 3524, 4667) = 0 close(8) = 0 open("/var/spool/mail/test.visp.net/natetest/cur/1115931742.V902I67c42.test.visp.net:2,", O_RDONLY) = 8 fstat(8, {st_mode=S_IFREG|0600, st_size=3881, ...}) = 0 pread(8, "Return-Path: <sender-5-8759012-9"..., 4096, 0) = 3881 pread(8, "", 215, 3881) = 0 close(8) = 0 ------------------------------------------- Running strace on the 3rd connection looks like this... ------------------------------------------- open("/var/spool/mail/test.visp.net/natetest/cur/1114490671.V902I6011f.test.visp.net:2,", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0600, st_size=5367, ...}) = 0 pread(10, "Return-Path: <qflfmq82vz8zg-u6ci"..., 4096, 0) = 4096 pread(10, "gs/rpoc_District6Spauldings.php?"..., 4095, 4096) = 1271 pread(10, "", 2824, 5367) = 0 close(10) = 0 open("/var/spool/mail/test.visp.net/natetest/cur/1114496568.V902I60bf5.test.visp.net:2,", O_RDONLY) = 10 fstat(10, {st_mode=S_IFREG|0600, st_size=2047, ...}) = 0 pread(10, "Return-Path: <removed(a)aaa-calif.c"..., 4096, 0) = 2047 pread(10, "", 2049, 2047) = 0 close(10) = 0 Thank you for the help! - Nate

8 27

[Dovecot] Problem with vpopmail auth
by Fred Moyer 06 Feb '07

06 Feb '07

Hello, I've install 1.021 and am having some problems getting vpopmail authentication to work correctly (running 0.99 in production, upgrading to 1.021). I'm using vpopmail-5.4.16. Here are the authentication debug statements in the log, my dovecot.conf changes from default, and the schema of my vpopmail database. Any ideas / suggestions? I've commented out all authentication except for vpopmail. I took a look around the source but am not that familiar with the vpopmail api. Thanks dovecot: Feb 05 22:23:31 Info: auth(default): client in: AUTH 1 PLAIN service=IMAP lip=10.0.0.2 rip=10.0.0.1 resp=<hidden> dovecot: Feb 05 22:23:31 Info: auth(default): vpopmail(fred(a)redhotpenguin.com,10.0.0.1): crypted password=rightpasswd dovecot: Feb 05 22:23:31 Info: auth(default): client out: OK 1 user=fred(a)redhotpenguin.com dovecot: Feb 05 22:23:31 Info: auth(default): master in: REQUEST 1 13457 1 dovecot: Feb 05 22:23:31 Info: auth(default): vpopmail(fred(a)redhotpenguin.com,10.0.0.1): vget_assign(redhotpenguin.com) failed dovecot: Feb 05 22:23:31 Info: auth(default): master out: FAIL 1 dovecot: Feb 05 22:23:31 Info: imap-login: Internal login failure: user=<fred(a)redhotpenguin.com>, method=PLAIN, rip=10.0.0.1, lip=10.0.0.2 852 # vpopmail authentication 853 # http://wiki.dovecot.org/AuthDatabase/VPopMail 854 passdb vpopmail { 855 # args = cache_key=%u dovecot 856 # [cache_key=<key>] - See cache_key in PAM for explanation. 857 # args = cache_key=%u 858 } 907 # vpopmail 908 # http://wiki.dovecot.org/AuthDatabase/VPopMail 909 userdb vpopmail { 910 } +-----------+-----------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +-----------+-----------+------+-----+---------+-------+ | pw_name | char(32) | | PRI | | | | pw_domain | char(64) | | PRI | | | | pw_passwd | char(40) | YES | | NULL | | | pw_uid | int(11) | YES | | NULL | | | pw_gid | int(11) | YES | | NULL | | | pw_gecos | char(48) | YES | | NULL | | | pw_dir | char(160) | YES | | NULL | | | pw_shell | char(20) | YES | | NULL | | +-----------+-----------+------+-----+---------+-------+

1 1

[Dovecot] Big problems after upgrade from beta8 (FC5) to rc21
by Jim Garrison 06 Feb '07

06 Feb '07

After upgrading a working system from FC5's beta8 to rc21, one vhost is failing with: > dovecot: Feb 05 09:54:30 Error: POP3(user(a)mydomain.com): > open(/var/mail/vhosts/mydomain.com/david/user, O_CREAT) failed: Not a > directory > dovecot: Feb 05 09:54:30 Error: POP3(user(a)mydomain.com): > mkdir_parents(/var/mail/vhosts/mydomain.com/user/.imap/INBOX) failed: > Not a directory > dovecot: Feb 05 09:54:30 Error: POP3(user(a)mydomain.com): Couldn't open > INBOX: Internal error occurred. Refer to server log for more > information. [2007-02-05 09:54:30] > dovecot: Feb 05 09:54:30 Info: POP3(user(a)mydomain.com): No INBOX for > user top=0/0, retr=0/0, del=0/0, size=0 > dovecot: Feb 05 09:54:30 Info: pop3-login: Login: > user=<user(a)mydomain.com>, method=PLAIN, rip=::ffff:4.242.120.235, > lip=::ffff:216.75.55.45, TLS Here's the entire dovecot.conf: protocols = pop3s ssl_cert_file = /etc/pki/dovecot/certs/popcert.pem ssl_key_file = /etc/pki/dovecot/private/popkey.pem ssl_ca_file = /etc/pki/tls/certs/ca-bundle.crt ssl_parameters_regenerate = 48 disable_plaintext_auth = yes log_path = /var/log/dovecot.log mail_extra_groups = mail mbox_read_locks = fcntl mbox_write_locks = fcntl dotlock protocol imap { } protocol pop3 { } auth_verbose = no auth_debug = no auth_debug_passwords = no auth default { mechanisms = plain passdb passwd-file { args = /etc/dovecot/%d.passwd } passdb pam { } userdb passwd { } userdb static { args = uid=502 gid=502 home=/var/mail/vhosts/%d mail=mbox:/var/mail/vhosts/%d/%n } user = root } plugin { } Did something changed between beta8 and rc21 in the index format and/or mbox location? If so, how do I recover so users can retrieve mail again? Thx.

2 4

[Dovecot] LDAP auth_bind=yes in rc21 = goodness
by Adrian Close 06 Feb '07

06 Feb '07

Hi all, I finally got a chance to try out the fix for the LDAP auth_bind=yes issues in production (using rc21). It seems to be working just fine even after 24 hours of severe abuse. Incidentally, I had switched to bsdauth+login_ldap (on OpenBSD) which was often OK, but occasionally I would see Postfix smtpd throttled with SASL errors due to "connection refused" on the Dovecot authentication socket. This may just have been due to increased LDAP server load (Dovecot's internal LDAP generates much less). Thanks Timo! (And thanks Brad for updating the port) Adrian.

2 1

[Dovecot] minor kerberized dovecot build issue
by Dan Price 05 Feb '07

05 Feb '07

Hi all, again, I'm not knowledgeable about Kerberos, but we have a few users who use it to make sure that it works well on Solaris... so, they would like a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on Solaris Nevada (the current development release), and the configure script choked for a couple of reasons. First, script uses 'grep -qv' in the case that you specify --with-gssapi to run some test. Unfortunately, Solaris doesn't have 'grep -q'. There's a note in GNU grep's manpage about this problem and a note that portable scripts should just redirect to /dev/null. Once I fixed this problem, I got: configure: WARNING: gssapi/gssapi.h: present but cannot be compiled configure: WARNING: gssapi/gssapi.h: check for missing prerequisite headers? configure: WARNING: gssapi/gssapi.h: see the Autoconf documentation configure: WARNING: gssapi/gssapi.h: section "Present But Cannot Be +Compiled" configure: WARNING: gssapi/gssapi.h: proceeding with the preprocessor's result configure: WARNING: gssapi/gssapi.h: in the future, the compiler will take +precedence configure: WARNING: ## ---------------------------------- ## configure: WARNING: ## Report this to dovecot(a)dovecot.org ## configure: WARNING: ## ---------------------------------- ## For whatever reason, on Solaris /usr/bin/krb5-config does not like the syntax 'krb5-config --cflags gssapi' (ditto with --libs). I found that removing the 'gssapi' part from the configure script fixed the problem, but I imagine this must break some other OS. If need be, I can follow up with the Kerberos team about this. Once I made these minor changes, I also had to add -lgss to the src/auth makefile's compile line. After that, I had no problem getting this to compile, although we have not yet tested it. -dp -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

2 3

[Dovecot] Nitpicking: rc21 startup banner says rc19
by Jim Garrison 05 Feb '07

05 Feb '07

> [jhg@helios RPMS]$ rpm -q dovecot > dovecot-1.0-1_42.rc21.fc5.at but: > dovecot: Feb 05 10:49:21 Info: Dovecot v1.0.rc19 starting up

4 5

[Dovecot] Problems enabling quota on MacOS X
by Lars Skovgaard 05 Feb '07

05 Feb '07

Hi, I'm trying to activate quotas for my users, preferably maildir++ quotas as all users are using maildir. I have compiled dovecot with quota-support, but when I try to enable quotas in the config, dovecot refuses to start up with a (to me, at least) strange message: Fopendir(/usr/local/lib/dovecot/imap) failed: No such file or directory Error: imap dump-capability process returned 89 In the logs I get the following: dovecot: read (imap dump-capability process) failed: Interrupted system call The directory "/usr/local/lib/dovecot/imap" is not missing, which would be the obvious explanation... Dovecot-version is 1.0rc21 (which by the way is running ***great*** without quotas). Thanks, /Lars

2 2

[Dovecot] Compile without GSSAPI disables SSL?
by Troy Engel 05 Feb '07

05 Feb '07

Perchance this is something unique to Red Hat -- I'm compiling/running 1.0rc?? on a CentOS 4 machine (i386), building RPMs and trimming down things I don't need (SQL e.g.). If I compile with the flag --with-gssapi, the resulting dovecot-auth binary links to libcrypto and libssl, the standard OpenSSL libs. Life is happy even though I don't need gssapi/krb5 support. If I remove --with-gssapi (but leave --with-ssl=openssl as before), the resulting dovecot-auth binary is no longer linked to the OpenSSL libraries (so I'm assuming no TLS/SSL support, but can't run the binary to test - I have SSL betatest users). So the question is, is this a ./configure problem in Dovecot, or some strangeness with Red Hat that you must link with gssapi/krb5 to get OpenSSL? Anyone care to hazard a guess? -te == details == The full configure line generated by the build is: + ./configure --build=i686-redhat-linux-gnu --host=i686-redhat-linux-gnu --target=i386-redhat-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/usr/com --mandir=/usr/share/man --infodir=/usr/share/info 'INSTALL_DATA=install -c -p -m644' --with-doc --with-ssl=openssl --with-ssldir=/etc/pki/dovecot --with-ldap --with-gssapi --with-linux-quota=2 With gssapi: Install prefix ...................... : /usr File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : yes Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: Without gssapi: Install prefix ...................... : /usr File offsets ........................ : 64bit I/O loop method ..................... : poll File change notification method ..... : dnotify Building with SSL support ........... : yes (OpenSSL) Building with IPv6 support .......... : yes Building with pop3 server ........... : yes Building with mail delivery agent .. : yes Building with GSSAPI support ........ : no Building with user database modules . : static prefetch passwd passwd-file checkpassword (modules) Building with password lookup modules : passwd passwd-file shadow pam checkpassword (modules) Building with SQL drivers ............: -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

2 2

[Dovecot] URGENT: specify mailboc location
by T. Horsnell 05 Feb '07

05 Feb '07

Is there a way I can tell dovecot to only use the .subscriptions file, if it exists, as the source of mailfolder paths, rather than have it look at every file in a user's directory to see if it's a mail folder? I'm on RHEL4, still on dovecot dovecot-0.99.11 Thanks, Terry.

2 1

[Dovecot] pop3 not working properly in 1.0.r19
by Charlie Root 05 Feb '07

05 Feb '07

Hi, I often see this message: Feb 1 14:42:44 vlk dovecot: POP3(obec(a)nizkov.cz): Mailbox init failed top=0/0, retr=0/0, del=0/0, size=0 Feb 1 14:42:44 vlk dovecot: POP3(obec(a)nizkov.cz): mbox sync: UID inserted in the middle of mailbox /var/mail/obec(a)nizkov.cz (68386 > 68346, seq=2, idx_msgs=3) this is on FreeBSD@i386 runnin 1.0.r19 (but I have seen this with all versions of 1.0.x), filesystem in use is UFS (ie. local filesystem). THe mailing client in question seems to be outlook express. I can provide the mbox in question. locking method is #lock_method = flock and the dovecot was compiled with kqueue thnx roman

2 1

[Dovecot] a namespace "mbox" without an INBOX
by David Bonnafous 05 Feb '07

05 Feb '07

hi, (dovecot 1.0r15) I try to setup up two namespaces: 1- the first one (and default one) a maildir namespace 2- the second one a mbox namespace I want only one "INBOX", in the maildir namespace, no INBOX in the mbox namespace. I get what I want with this configuration: ---------------------------------------- mail_location = maildir:~/Maildir namespace private { inbox = yes } namespace private { separator = . prefix = mbox. location = mbox:~/mbox:INBOX= inbox = no hidden = no } ---------------------------------------- My question is: is it a normal way to do what I want ? I mean, the line location = mbox:~/mbox:INBOX= looks odd. I try with just the line inbox=no (without INBOX=) but dovecot set a default INBOX that disturbs some mail client. yours, -- David Bonnafous Institut de Mathématiques Université Paul Sabatier Toulouse - France

2 1

[Dovecot] Large & busy site, NFS with deliver only servers
by Dean Manners 05 Feb '07

05 Feb '07

Timo / Others, I have been working on a new installation for a fairly busy site, and after many weeks of tribulation have come to an architecture Im happy with: 2x Debian (2.6.18) - MXing machines running Postfix / MailScanner / Dovecot-LDA (A slightly patched RC17 for prettier Quota bounces) 2x Debian (2.6.18) - Mail retrieval machines running Dovecot IMAP/POP3 (Currently RC17) 3x Node Isilon NFS cluster (NetApp type devices) I chose Dovecot-LDA over Postfix-Virtual / Maildrop / Procmail due to its hassle free auto creation of new user maildirs, and the funkyness of built in Sieve functionality. The on the fly indexing sounded like a bonus at the time. However as Im sure all people who stress test with index's stored over NFS find, index locking makes for some 'spectacular crashes' (see others previous posts). I have tried out the recommended mount options and locking methods to no avail. Once under some stress, say ~60 messages a minute from the two front end machines, understandably the index's get pickled instantly. So as a hack way around the index locking problems, I have configured the MXing machines to index locally to no where (/tmp) - and deal with the very slightly slower IMAP/POP3 performance on the retrieval side. Is there way to tell/patch Dovecot-LDA not to bother with indexing? So Im not creating unused index files. Cheers __________________________________________ Dean Manners

2 7

[Dovecot] Quota crashing w/ gdb backtrace
by Dean Brooks 05 Feb '07

05 Feb '07

Hi, I'm still running into consistent crashing when moving files between folders when dirsize quotas are enabled. This is running Dovecot1.0rc19. Please let me know if I'm posting this to the wrong list. Here is the gdb backtrace: #0 0x377fc in mbox_file_seek (mbox=0xc8560, view=0xc94c0, seq=1, deleted_r=0xffbef157) at mbox-file.c:167 167 if (data == NULL) { (gdb) bt #0 0x377fc in mbox_file_seek (mbox=0xc8560, view=0xc94c0, seq=1, deleted_r=0xffbef157) at mbox-file.c:167 #1 0x39684 in mbox_mail_seek (mail=0xc73a8) at mbox-mail.c:69 #2 0x398f0 in mbox_mail_get_physical_size (_mail=0xc73a8) at mbox-mail.c:163 #3 0x6b880 in mail_get_physical_size (mail=0xc73a8) at mail.c:75 #4 0x7f933a74 in quota_default_try_alloc (ctx=0xc9a58, mail=0xc73a8, too_large_r=0xffbef397) at quota.c:434 #5 0x7f933654 in quota_try_alloc (ctx=0x0, mail=0xc73a8, too_large_r=0xffbef397) at quota.c:301 #6 0x7f9370c8 in quota_check (t=0xc57f0, mail=0xc73a8) at quota-storage.c:120 #7 0x7f9374d0 in quota_save_finish (ctx=0xc7790, dest_mail=0xc73a8) at quota-storage.c:222 #8 0x6cb64 in mailbox_save_finish (_ctx=0xffbef504, dest_mail=0xc73a8) at mail-storage.c:538 #9 0x6ba2c in mail_storage_copy (t=0xc57f0, mail=0xc5c00, flags=MAIL_SEEN, keywords=0x0, dest_mail=0xc73a8) at mail-copy.c:38 #10 0x7f9371e4 in quota_copy (t=0xc57f0, mail=0xc5c00, flags=MAIL_SEEN, keywords=0x0, dest_mail=0x0) at quota-storage.c:148 #11 0x6cbbc in mailbox_copy (t=0xc57f0, mail=0xc5c00, flags=MAIL_SEEN, keywords=0x0, dest_mail=0x0) at mail-storage.c:553 #12 0x1e6b0 in fetch_and_copy (t=0xc57f0, srcbox=0xc57f0, search_args=0x8) at cmd-copy.c:34 #13 0x1e804 in cmd_copy (cmd=0xba6c4) at cmd-copy.c:95 #14 0x21eec in cmd_uid (cmd=0xba6c4) at cmd-uid.c:19 #15 0x22ab8 in client_handle_input (cmd=0xba6c4) at client.c:331 #16 0x22a3c in client_handle_input (cmd=0xba6c4) at client.c:388 #17 0x22bb0 in _client_input (context=0xba680) at client.c:428 #18 0x80e88 in io_loop_handler_run (ioloop=0xb7de8) at ioloop-poll.c:199 #19 0x80794 in io_loop_run (ioloop=0xb7de8) at ioloop.c:281 #20 0x2b3d0 in main (argc=0, argv=0xffbefa7c, envp=0xffbefa8c) at main.c:280 The "data" variable defined as: (gdb) print data $1 = (void *) 0xd9354 (gdb) print &data $3 = (void **) 0xffbef0dc I've noticed that the copy (during a move) *does* complete correctly. However, the original files never gets deleted, so I assume that this crash is occuring during the deletion in the original folder. -- Dean Brooks dean(a)iglou.com

2 4

[Dovecot] broken attachments with pop3
by Robert Schetterer 05 Feb '07

05 Feb '07

Hi all, ive just upgrade to rc21 ( so i dont know perhaps this report failure is fixed with this release ) i have reports from users that attachments get broken ( with rc19, dont know about before ) with some accounts , which where downloaded via a pop3 service to a exchange server, but in fact nothing is broken when looking with imap to the mailboxes Has anyone an idea, i havent any failure logs about that, is there a parameter which makes logging verbose to such failures? -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany -- Diese Nachricht wurde auf Viren und andere gefährliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber.

2 1

[Dovecot] SSL error is it due to a self certified certificate?
by Matthew Bickerton 05 Feb '07

05 Feb '07

Hi I have set up dovecot with a self signed SSL certificate, created with the mkcert.sh script. Now I see the following in the log: pop3-login: SSL_accept() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown [206.124.112.22] pop3-login: Disconnected: rip=206.124.112.22, lip=204.3.153.71, TLS handshake Is this caused by my self certified certificates. Or is it another problem? Thanks Matthew

3 2

[Dovecot] mail_log plugin, log throttling and killing of the IMAP child.
by Tan Shao Yi 05 Feb '07

05 Feb '07

Hi, Just a quick check, was wondering if anyone is experiencing problems mass deleting/purging mails from a folder? I am on RC19 with the mail_log plugin enabled. Quite often, when a mass deletion/purge is attempted, we receive the following message in the dovecot logs: dovecot: Feb 01 11:36:27 Error: IMAP(userid): Sending log messages too fast, throttling.. Sometimes this is accompanied by a message like the following and the user will be prompted with an error message saying that the connection has been abruptly terminated. dovecot: Feb 01 11:34:41 Error: child 3908 (imap) killed with signal 11 Is anyone experencing similar behaviour? Cheers, Tan Shao Yi

2 1

[Dovecot] Dovecot Wiki: Orphaned page on mbox locking
by Jim Garrison 05 Feb '07

05 Feb '07

The following shows up in the "orphaned page" list of the Wiki: http://wiki.dovecot.org/MboxLocking?action=show&redirect=MboxSoftwareLocks Does the description of Dovecot mbox locking still apply to current versions? If yes, it should be linked from the "Troubleshooting" page. -- Jim Garrison (jhg(a)acm.org) PGP Keys at http://www.jhmg.net RSA 0x04B73B7F DH 0x70738D88

2 1

[Dovecot] get username in pop3s
by Maria de los Angeles Cifuentes 05 Feb '07

05 Feb '07

Dear friends: I need to get the username after authenticate user in a ldap database but I don't know where i must modificate de source code. Please help me. Regards Maria de los Angeles.

2 1

[Dovecot] unknown namespace with Mac OS client
by Francisco Reyes 05 Feb '07

05 Feb '07

I see in this thread, http://dovecot.org/list/dovecot/2006-April/012918.html, that others had simmilar problems with Mac OS client. Anyone got a working Dovecot + Mac OS setup? In particular with RC15. Our setup default_mail_env = maildir:Maildir namespace private { separator = . prefix = INBOX. inbox = yes } Would it help to use hidden = yes ?? Reading the description doesn't say much to me.. in particular I guess I am not familiar with the IMAP protocol to appreciate the explanation in the config file. The server is getting data originally coming from a Courier setup. I wrote a couple of scripts to convert files names and delete old setup files. So far we have moved 3 domains to this machine and the only one with the problem so far is the customer with the Mac client. Unless we can solve this soon, we will have to move him back to a courier server ... until we can figure how to solve this problem.

8 31

[Dovecot] Push IMAP
by Paul 05 Feb '07

05 Feb '07

Hearing that today's new Apple device is going to work with push IMAP from Yahoo, my first thought is to wonder whether an extension might make it possible for a Dovecot server to push its own IMAP in a compatible way. Paul

5 7

[Dovecot] command line options
by AJ Weber 05 Feb '07

05 Feb '07

Is the wiki up-to-date on the command-line arguments that can be passed to dovecot? I don't like the fact that I have to hard-code the "listen address" in the config file. Even though it shouldn't change (rarely if ever), when I have a multi-homed host, I need to specify only one of the interfaces. Would it be possible to either: 1) Make --listen into an optional, command-line argument; or 2) Make the listen config-file parameter understand interface names instead of just IP Addresses? (Like "eth0") -AJ

2 1

[Dovecot] beta8: core, signal 11
by Jeff A. Earickson 05 Feb '07

05 Feb '07

Timo, The gdb analysis is attached. It looks like memory got seriously stomped in this core dump. There was no assert or other useful information in the syslog. My setup: Solaris 9, imap and imaps, mbox format, INBOXes NFS mounted, index files on local ufs filesystem, beta8 configured like so: VERSION=1.0.beta8 CC=gcc CFLAGS="-g -O" CPPFLAGS=-I/opt/openssl/include LDFLAGS=-L/opt/openssl/lib \ ./configure --prefix=/opt/dovecot.$VERSION \ --with-ssl=openssl \ --with-ssldir=/opt/openssl/ssl \ --with-sql-drivers=no \ --disable-ipv6 \ > configure.out Jeff Earickson Colby College

6 9

[Dovecot] Trailer message
by Gyanchand Maurya 04 Feb '07

04 Feb '07

Hi , I am using Dovecot with Postfix I want put a trailer message for smtp/pop3 user how do I do. Regards Gyan

3 2

[Dovecot] start dovecot at boot
by jepoy 04 Feb '07

04 Feb '07

hi guys, just recently installed dovecot from source on my centos box.how can i enable it to automatically start upon reboot. tnx -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 3

[Dovecot] 1.0rc19 with plugins on AIX 5.2
by Ralf Becker 03 Feb '07

03 Feb '07

Hello, has anyone out there successfully build dovecot on AIX with plugins supported? I'm talking about an dlopen error when a plugin tries to access global symbols, that are defined in the dovecot "parent" binary For example: # MAIL_PLUGINS=zlib /usr/local/libexec/dovecot/imap imap(root): Error: dlopen(/usr/local/lib/dovecot/imap/lib20_zlib_plugin.so) failed: rtld: 0712-001 Symbol i_error was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_stream_get_data was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_stream_skip was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_stream_seek was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_stream_close was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol i_panic was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. rtld: 0712-001 Symbol pool_get_exp_grown_size was referenced from module /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so(), but a runtime definition of the symbol was not found. Additional errors occurred but are not reported. Maybe libtool is the problem, because it does not export global symbols correctly. Or would a newer version of AIX vac fix this? Any ideas? I'm using dovecot 1.0rc19, AIX 5.2-06 and vac 5.0.2 Regards, Ralf -- ______________________________________________________________________ Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier Mail: beckerr(a)fh-trier.de Fon: +49 651 8103 499 WWW: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214 PGP: http://www.fh-trier.de/~beckerr/pgp ICQ: <available> ______________________________________________________________________ Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)

1 1

Re: [Dovecot] broken attachments with pop3
by Robert Schetterer 03 Feb '07

03 Feb '07

Justin McAleer schrieb: > Robert Schetterer wrote: >> Hi all, >> ive just upgrade to rc21 ( so i dont know perhaps this report failure is >> fixed with this release ) >> i have reports from users that attachments get broken ( with rc19, dont >> know about before ) with some accounts , which where downloaded via a >> pop3 service to a exchange server, but in fact nothing is broken when >> looking with imap to the mailboxes >> Has anyone an idea, i havent any failure logs about that, is there a >> parameter which makes logging verbose to such failures? >> >> > The first thing you should do is pop such messages directly from > Dovecot. Anytime there is a problem with mail, and Exchange is involved, > the first step should always be ruling out Exchange IMHO. > > -- > Diese Nachricht wurde auf Viren und andere gefährliche Inhalte untersucht > und ist - aktuelle Virenscanner vorausgesetzt - sauber. > agree exchange is magic voodoo, but its not exchange , its an independent pop service which delivers to exchange ( like fetchmail ) and the other 1000 mailboxes do not have this problem going the same way, so it must something special with this mailboxes, may any index stuff involved with this? I have no failure doing pop3 with thunderbird to that mailboxes, these mailboxes are the the ones with most traffic on the system After all the exchange systems are not under my control and the failure info from win admins and their users is not very exact *g -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany -- Diese Nachricht wurde auf Viren und andere gefährliche Inhalte untersucht und ist - aktuelle Virenscanner vorausgesetzt - sauber.

1 0

[Dovecot] Automatic Folder Expiry (plugin?)
by Troy Engel 02 Feb '07

02 Feb '07

Greetings, I'm migrating an existing Courier IMAP installation to Dovecot (1.0rc19 right now) on a new server; there's one feature I'm not sure if Dovecot supports - but it might and I'm missing it, so I'll ask. In Courier there's an option to expire a folder after a given time period; ostensibly it's to keep a Trash folder clean, but we use it to keep the Junk folder (where spam is delivered by Exim) clean. How can I do this in Dovecot? Here's the chunk from Courier for those unfamiliar with it (just part of the verbiage): ##NAME: IMAP_EMPTYTRASH:0 # # The following setting is optional, and causes messages from the given # folder to be automatically deleted after the given number of days. # IMAP_EMPTYTRASH is a comma-separated list of folder:days. # # Important: the purging is controlled by CTIME, not MTIME ... So in our case it's set like so: IMAP_EMPTYTRASH=Junk:14 Thanks for any help/ideas - I'm not sure if we can live without this feature, the amount of spam is horrendous and users never clean out that folder. -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

6 11

[Dovecot] Planning a dovecot deployment: issues and questions
by Dan Price 02 Feb '07

02 Feb '07

Hi folks, I am currently evaluating Dovecot for deployment to ~200 software engineers (so, heavy email users); I'm hoping this list could provide wisdom about how best to do the configuration, evaluation and deployment, and what testing folks have done to determine whether dovecot is right for their site. Below I've listed the diffs between the dovecot-example.conf and our config. I've been playing with 1.0rc19 running on Solaris Nevada. We have set it up on our server on an alternate port from the existing IMAPd, which is something ancient, horrible and problematic. We're using sendmail and mail.local as our MTA and MDA, respectively, as these ship with the OS, and we need to test them. I have some users who have volunteered to experiment with the server, and they are starting to do so. I've also seen the "flags" problems others have mentioned on the list, and I do not think I could deploy to production with that bug affecting the users. I also have some issues which I'm not sure have been previously reported: One user (of my 4 test users) is occasionally seeing a bug in which mutt 1.4.2.1 claims to be "[downloading xxx/30724]" headers. Upon getting very near to the 30724 total, the total rises to something like: "[downloading xxx/50132]". And on and on. The actual number of messages in the box is 30724. This is not very reproducible, and we do not yet know if it's a problem with mutt or dovecot. Another, using Apple's Mail.App reported: "Everything was working fine until i quit out of my mail app (Mac mail) and restarted. Then i saw weird things: - messages wouldn't get marked unread - messages from eons ago started showing up in my Drafts folder - Inbox would keep spinning/loading - then eventually Inbox just hung showing me no messages" Any thoughts about how to approach these issues? I don't really have a feel for how to go from user-observed-app-doing-X to imapd-is-doing-Y. The big challenge for our site may be mailbox size: the median mailbox size is 62M, the average is 176M and the largest is 1.1GB. I'd be curious to know what sort of mailbox sizes other sites have experienced, and how widespread the use of the Dovecot MDA is-- is this likely to make a big difference for us, and will we have to migrate our (approximately 25) procmail users to sieve? Having read the recent discussions about "1.0", I think my team would really appreciate knowing how to obtain something that was thoroughly vetted and worked highly reliably. If major changes are coming, I think it'd be great to have a 1.0.x stability focused tree, and a 1.1.x (or 2.x.x) feature tree. Thanks in advance for your comments, -dp ------- ------- ------- ------- ------- ------- ------- ------- ------- [note that IMAPS is off for now, but that's just temporary] $ diff dovecot.conf dovecot-example.conf 21d20 < protocols = imap 42,45d40 < protocol imap { < listen = *:150 < } < 50c45 < disable_plaintext_auth = no --- > #disable_plaintext_auth = yes 89c84 < ssl_disable = yes --- > #ssl_disable = no 214,215d208 < mail_location = mbox:~:INBOX=/var/mail/%u:INDEX=%h/Mail/imapd-indices < 258d250 < mail_extra_groups = mail 290d281 < dotlock_use_excl = yes 296d286 < lock_method = fcntl 441,444d430 < # dp: we'll see. < mbox_read_locks = dotlock fcntl < mbox_write_locks = dotlock fcntl < ------- ------- ------- ------- ------- ------- ------- ------- ------- -- Daniel Price - Solaris Kernel Engineering - dp(a)eng.sun.com - blogs.sun.com/dp

5 7

[Dovecot] 1.0.rc20 released
by Timo Sirainen 02 Feb '07

02 Feb '07

http://dovecot.org/releases/dovecot-1.0.rc20.tar.gz http://dovecot.org/releases/dovecot-1.0.rc20.tar.gz.sig So, rc19 was somewhat broken. How about this version? + dovecot: Added --log-error command line option to log an error, so the error log is easily found. + Added mail_log_max_lines_per_sec setting. Change it to avoid log throttling with mail_log plugin. - Changing message flags was more or less broken in rc19 - ACL plugin still didn't work without separate control directory - Some mbox handling fixes, including fixing an infinite loop - Some index file handling fixes - maildir quota: Fixed a file descriptor leak - If auth_cache was enabled and userdb returned "user unknown" (typically only deliver can do that), dovecot-auth crashed. - mail_log plugin didn't work with pop3

4 4

[Dovecot] Strange Error in RC19
by Jay Chandler 02 Feb '07

02 Feb '07

Drops IMAP connection when a particular user's "Sent" folder is opened. Does this mean that the sent folder is potentially corrupted? Feb 2 10:14:57 MyBox dovecot: IMAP(WhinyUserDuJour): file mbox-sync-rewrite.c: line 404 (mbox_sync_read_and_move): assertion failed: (need_space == (uoff_t)-mails[idx].space) -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / chandler(a)chapman.edu Today's Excuse: those damn raccoons!

1 1

[Dovecot] namespace subscription problem
by Nate Sanders 02 Feb '07

02 Feb '07

Greetings, I am trying to setup a private namespace in dovecot and running in to some troubles. Here is my setup: > default_mail_env = maildir:~/Maildir > > # default namespace > namespace private { > separator = . > prefix = > inbox = yes > } > namespace private { > separator = . > prefix = maillog. > location = maildir:/var/maildir/maillog/Maildir/ > #inbox = yes > hidden = no > } So far it's working to a degree. When I load my imap folder and go to Subscribe, I can see the master "maillog" folder, and expand it to see all the subfolders. The problem is, I cannot subscribe to the master "maillog" folder. Only it's sub folders. When I check dovecot.info it says this: > dovecot: 2007-01-31 13:27:42 Info: imap(nate): Namespace: > type=private, prefix=maillog., sep=., inbox=no, hidden=no, > subscriptions=no I see there "subscriptions=no". Is it possible to change this to yes? Would changing this to yes allow me to subscribe to the actual namespace folder? I tried adding "subscriptions=yes" and "subscription=yes" to dovecot.conf but both entries resulted in failed starts and errors. How is it possible allow subscriptions directly to this namespace? Thanks. -- Nate Sanders nate(a)ima.umn.edu Associate Systems Manager (612) 624 - 4353 Institute for Mathematics and its Applications

2 2

[Dovecot] periodic problems with dovecot-1.0rc19 (No authentication sockets found)
by Mikhail Teterin 02 Feb '07

02 Feb '07

Hi, Timo! On the new server running 1.0rc19 people stop being able to login every once in a while. The log messages on the server side are: Jan 30 12:18:50 bonkers dovecot: pop3-login: No authentication sockets found Jan 30 12:18:50 bonkers dovecot: pop3-login: No authentication sockets found Jan 30 12:18:59 bonkers dovecot: pop3-login: No authentication sockets found Jan 30 12:19:01 bonkers dovecot: imap-login: No authentication sockets found Jan 30 12:19:06 bonkers dovecot: pop3-login: No authentication sockets found Restarting dovecot helps for a while, but then the problem reappears... The config-file was copied from an older server running 1.0.r15, where we never saw this problem... The old server ran FreeBSD-4.10/i386. The new one runs FreeBSD-6.2/amd64. Thanks for any hints! Yours, -mi

3 2

[Dovecot] Over quota message
by Antonio Casado Rodríguez 02 Feb '07

02 Feb '07

Hi all, I'm working with Dovecot-1.0.rc19 + dovecot-lda + postfix + quota-maildir plugin When a new email arrives and it's over quota, the client receives this: -------------------------------- The mail system <vvv(a)ual.es>: Command died with status 89: "/usr/local/libexec/dovecot/deliver" -------------------------------- Reporting-MTA: dns; vvv.ual.es X-Postfix-Queue-ID: 3AA3F280AB X-Postfix-Sender: rfc822; zzz(a)ual.es Arrival-Date: Fri, 26 Jan 2007 15:00:17 +0100 (CET) Final-Recipient: rfc822; vvv(a)ual.es Original-Recipient: rfc822;vvv(a)ual.es Action: failed Status: 5.3.0 Diagnostic-Code: x-unix; unknown mail system error 89 -------------------------------- cannot be received another type of clear message like: the user to exceeded the quota?

1 1