- dovecot - dovecot.org

Re: NFSv4 and Maildir
by Joseph Tam 01 Oct '16

01 Oct '16

> we have a setup with (CentOS 6) Director+Dovecot, Maildir as storage on > NetApp NFS v3. Every time I try to switch to NFS v4 I found issue with > lock (and others). So for me NFSv4 with Maildir is "unstable" or need a > fine tuning that I don't know. I found the same thing, and turning off write delegation seemed to have solved the problem. I still don't know why, though. Joseph Tam <jtam.home(a)gmail.com>

2 1

Bug: Shared Mailbox - Case Sensitivity
by Leander Schäfer 01 Oct '16

01 Oct '16

Hi, unfortunately I found a bug in Dovecot's ACL handling for shared mailboxes. It turns out Dovecot doesn't enforce lower casing the privileged username to whom the mailbox should be shared to. This results in a invalid configuration. Users get confused, since they passed on a valid email address in their ACL setup. /usr/local/www/default/mail/test(a)mydomain.localdomain/maildir/.Spam/dovecot-acl user=leander(a)mydomain.localdomain eilrwts ^^ works /usr/local/www/default/mail/leander(a)mydomain.localdomain/maildir/dovecot-acl user=test(a)mydomain.localdomain eilrwts ^^ works /usr/local/www/default/mail/test(a)mydomain.localdomain/maildir/.Drafts/dovecot-acl user=Leander(a)MyDomain.LocalDomain eilrwts ^^ Doesn't work Best regards Leander Schäfer

3 4

acl_group not working not working correctly
by Leander Schäfer 01 Oct '16

01 Oct '16

Hi, I'm trying to setup group based ACLs coming from OpenLDAP. My setup doesn't require a POSIX Group match. In the Dovecot configuration file I have this: "user_attrs = [...], mailAclGroups=acl_groups" as well as "acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300". The user has "public" in the LDAP attribute "mailAclGroups". It seems to get everything right. I checked with doveadm - and I see public ist listed as expected: cat /var/log/debug.log [...] Sep 16 23:39:04 WM-01 dovecot: auth: Debug: client passdb out: OK 1 user=leander(a)mydomain.localdomain acl_groups=public [...] cat /usr/local/etc/dovecot/global-acls INBOX owner lrwstipekxa Drafts owner lrwstipeka Sent owner lrwstipeka Spam owner lrwstipeka Trash owner lrwstipeka Public authenticated l Public group-override=public lrwstipekx Public/* group-override=public lrwstipekx doveadm mailbox list -u leander(a)mydomain.localdomain Drafts Sent Trash Spam Shared Public Public/Service Center Shared/test(a)mydomain.localdomain Shared/test(a)mydomain.localdomain/Drafts Shared/test(a)mydomain.localdomain/Sent Shared/test(a)mydomain.localdomain/Trash Shared/test(a)mydomain.localdomain/Spam INBOX But here comes the strange thing: telnet equal to Thunderbird: . LIST "" "*" * LIST (\HasNoChildren \Drafts) "/" Drafts * LIST (\HasNoChildren \Sent) "/" Sent * LIST (\HasNoChildren \Trash) "/" Trash * LIST (\HasNoChildren \Junk) "/" Spam * LIST (\Noselect \HasChildren) "/" Shared * LIST (\HasChildren) "/" Shared/test(a)mydomain.localdomain * LIST (\HasNoChildren) "/" Shared/test(a)mydomain.localdomain/Drafts * LIST (\HasNoChildren) "/" Shared/test(a)mydomain.localdomain/Sent * LIST (\HasNoChildren) "/" Shared/test(a)mydomain.localdomain/Trash * LIST (\HasNoChildren) "/" Shared/test(a)mydomain.localdomain/Spam * LIST (\HasNoChildren) "/" INBOX . OK List completed (0.000 + 0.000 + 0.092 secs). Public and Public/* shoul be listed as well, but it isn't. Any idea why it is behaving like this? Thanks Best regards Leander Schäfer

1 1

[patch] Improved error checking for the dovecot-antispam-plugin
by Robert Munteanu 30 Sep '16

30 Sep '16

Hi, Hopefully this is the right channel for such a patch. I have a minor enhancement to submit for the antispam plugin http://hg.dovecot.org/dovecot-antispam-plugin It adds minimal error checking for the sendmail_binary, otherwise the reported error in case of a missing binary or one with missing permissions is generic and not useful. Thanks, Robert -- http://robert.muntea.nu/

3 6

NFSv4 and Maildir
by Robert Blayzor 30 Sep '16

30 Sep '16

Recently moving to newer storage platforms for mailbox storage so looking at moving mounts from NFSv3 with lots of issues with locking and caching to NFSv4. There seems to be a lot of benefits to v4 along with some other new features, namely “delegation”. So the question boils down to, to delegate or not delegate on Maildir storage. There may be many reasons based on actual platform why to do (or not to do this), but I want to get the general opinion from others that may have more experience with this. Our setup is several FreeBSD 10.x clients running Dovecot/Exim, NetApp NFS mail storage (probably moving to TrueNAS) and using F5 load balancers for client side connections/SSL offload. From what I’ve found (and what i’ve read in the RFC) is that delegation seems to work best when there is NOT a lot of file contention from clients accessing the same files. I realize that in some situations many people are using director to try and keep users on the same client; in our case we’re doing it with F5 iRules. The F5 iRules work great for POP3 and IMAP session persistence, but unfortunately that doesn’t work for SMTP and Dovecot LDA, so we still have possible race conditions from the MTA’s delivering into “INBOX”. (mostly dovecot indexes updating at the same time). So the big question is, who is using Dovecot with maildirs with NFSv4 mounts. What has your experience been? Are you using delegation? By choice and why did you come to that decision. I’m drawing up the conclusion that if you can *mostly* control client control to specific files (ie: directing access to a mailbox to come from one client), then delegation might be ok. However, if you’re not using director and have several NFS mail clients racing to access mailboxes, then delegation might turn into chaos. Your comments welcome and appreciated. -- Robert inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP Key: 78BEDCE1 @ pgp.mit.edu

2 1

Re: Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 30 Sep '16

30 Sep '16

Joseph Tam <jtam.home(a)gmail.com> wrote: >>> OK, the origin of your problem becomes clearer. You can hardcode these >>> paths into the executables by doing something like >>> >>> env CFLAGS='-I/my'ssl/include' \ >>> LDFLAGS='-L/your/ssl/lib -Wl,-rpath,/my/ssl/lib' \ >>> configure ... >> >> Based on your mail I've tried CFLAGS/LDFLAGS again, and >> now Dovecot didn't even compile any longer. > > I don't use the same OS as you, but what errors dis you get? To be exact here, it's not the compiler but the linker failing (of course, the whole problem is about the linking process). With "--as-needed", the crypto/ssl libraries are not linked at all with the object files. I don't quite understand why it doesn't fall back to the system crypto/ssl libraries because they are in the default pathes with all other libraries. (That's basically what most other software packages do if my custom pathes for "-L" "-Wl,-R" somehow get ignored in the building process.) IMHO, the unusual option "--as-needed" should be removed. There seems to be no benefit but it basically keeps Dovecot to be linked against any custom-specified library. Maybe it's just a problem with RHEL/CentOS 6 and the GCC that ships with it. I'm compiling a lot of software myself and link it against my custom OpenSSL. Never had this problem before, otherwise I would have known to specify "-Wl,--no-as-needed" to reverse ld's behavior to the default. Well, at least I've learned something new. :-) Regards, Andreas

2 1

Softlinks
by Chris 29 Sep '16

29 Sep '16

All, I'm using Maildir. Is it possible to move all (or only some) maildirs with softlinks to another partition? - Chris

2 2

Login just at special timeslots / working hours
by Götz Reinicke - IT Koordinator 29 Sep '16

29 Sep '16

Hi, is there a dovecot feature I did not found yet, which can limit the access to the server to special timeslots like working hours? Or is that a serverside / sssd / auth / pam / account feature? Thanks for hints to some helpfull documentation and sugesstions. Regards . Götz

4 4

dovecot is moving messages to spam
by Webert de Souza Lima 28 Sep '16

28 Sep '16

Hi, is there any dovecot rule settings besides X-Spam-Flag header? Can it move messages via IMAP? I have a message that is being moved to spam folder after delivered in the INBOX but it has no X-Spam-Flag and it's not beeing done by the user (I changed his password, suspended his account and made his login impossible). This happens only when certain "FROM" address is present in the body, like the following message (sent via telnet): From:<some.guy(a)some.domain> Subject: Test teste . Dovecot logs: Sep 28 13:08:00 lmtp(my.user(a)my.domain): Info: OOKlA3rA61dNbwAAkzG9Ng: sieve: msgid=unspecified: stored mail into mailbox 'INBOX' Sep 28 13:08:01 imap(my.user(a)my.domain): Info: copy from INBOX: box=INBOX.Spam, uid=154, msgid=, size=340, subject=Test Sep 28 13:08:01 imap(my.user(a)my.domain): Info: expunge: box=INBOX, uid=18147, msgid=, size=340, subject=Test Thanks in advance

3 4

FreeBSD port
by The Doctor 28 Sep '16

28 Sep '16

Is the person responsible for the FreeBSD port on this list? There might be a minor bug in a small piece of correction code issues in the last 4 days. -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism Time for the USA to hold a referendum on its republic and vote to dissolve!!

4 4

Dovecot Pro Community Edition
by Markus Petzsch 28 Sep '16

28 Sep '16

Hi, I'm trying to setup push notifications for Open-Xchange (OX) and struggle with finding the push_notification plugin. According to https://oxpedia.org/wiki/index.php?title=AppSuite:OX_Mail#Requirements it should be found in the Dovecot Pro Community Edition. I'm currently running dovecot that came with CentOS 7.2 but am intrested in OX's push feature. Can someone point me in the right direction where to find the community edition repos? https://oxpedia.org/wiki/index.php?title=Dovecot:Main_Page_Dovecot#dovecotq… only lists password protected repos. Thx for your help in advance. Best Regards Markus Petzsch

2 1

Trying to regain access to my email archive after an upgrade.
by Rick Jones 27 Sep '16

27 Sep '16

Hi - I had been running an Ubuntu 12.04 system on which I receive email, with an inbox in /var/mail/ and a bunch of folders under ~/Maildir. When I upgraded from 14.04 there were a bunch of questions about keeping old/new config files and my muddling through it has me seeing only the inbox, and then a Drafts, Sent and Trash Folder. I would like to regain access to the messages stored under ~/Maildir, but have been thoroughly unsuccessful. I seem to run into duplicate prefix issues and I suspect I have other issues, when I try to add: namespace rest { separator = / prefix = location = maildir:~/Maildir } to what is already present. I've seen a few of the wiki pages, but not fully understanding what is going-on I'm afraid I've not groked them terribly well. any help/pointers for this cluser would be much appreciated. rick jones raj@tardy:~$ dovecot --version 2.2.9 raj@tardy:~$ dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:25: 'imaps' protocol is no longer necessary, remove it doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:732: protocol managesieve {} has been replaced by protocol sieve { } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:904: add auth_ prefix to all settings inside auth {} and remove the auth {} section completely doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:942: passdb pam {} has been replaced by passdb { driver=pam } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:1055: userdb passwd {} has been replaced by userdb { driver=passwd } doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:1117: auth_user has been replaced by service auth { user } # OS: Linux 3.13.0-95-generic x86_64 Ubuntu 14.04.5 LTS auth_mechanisms = plain login log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } protocols = imap service auth { user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } raj@tardy:~$ vi /etc/dovecot/conf.d/15-mailboxes.conf raj@tardy:~$ dovecot --version 2.2.9

1 0

imapc fetch optimization
by Nagy, Attila 27 Sep '16

27 Sep '16

Hi, imapc does a lot of UID FETCH $UID (BODY.PEEK[]), which is nice, because it works even with the dumbest IMAP server, altough it really kills performance, especially on high latency lines. I wonder: if IMAP servers can effectively handle boundless fetches (like a list with all wanted UIDs, or simply 1:* if all are needed), do you see this as a good addition to develop? This could be a new imapc_features setting afterall... Thanks,

2 8

Drac Plugin
by Darryl Baker 27 Sep '16

27 Sep '16

I now have the drac plugin compiled and working. The plugin binary might even work with the Debian/Ubuntu binary. It was a one line change. I need to talk to the sendmail folks about their macro for the DRAC feature. My custom sendmail.cf code works in a way that makes using drac and SpamHaus for anyone on a blacklisted IP such as non-comercial Comcast users. I am hoping that the drac plugin will get fixed in the core distribution and possible the new binary make it into the Debian/Ubuntu binary build. *** dovecot-2.2.22/src/plugins/drac/drac-plugin.c 2016-09-23 22:49:56.345568783 -0500 --- dovecot-2.2.22/src/plugins/drac/drac-plugin.c-orig 2016-09-26 14:33:46.828670909 -0500 *************** *** 25,31 **** /* libdrac function */ int dracauth(char *, unsigned long, char **); ! const char *drac_plugin_version = DOVECOT_ABI_VERSION; static struct timeout *to_drac = NULL; static const char *drachost = NULL; /* dracd host */ --- 25,31 ---- /* libdrac function */ int dracauth(char *, unsigned long, char **); ! const char *drac_plugin_version = DOVECOT_VERSION; static struct timeout *to_drac = NULL; static const char *drachost = NULL; /* dracd host */ *Darryl Baker*

2 1

Re: Shared mailboxes nightmare (for me :-( )
by Felix Rubio 27 Sep '16

27 Sep '16

Hi KR, Just checked the folders, and they do not contain any of these subfolders. This is the structure I see: . ├── dovecot-acl-list ├── dovecot.list.index ├── dovecot.list.index.log ├── dovecot.list.index.log.2 ├── dovecot.mailbox.log ├── dovecot-uidvalidity ├── dovecot-uidvalidity.570e9b2d ├── mailboxes │ ├── folderB │ │ └── dbox-Mails │ │ ├── dovecot.index │ │ ├── dovecot.index.backup │ │ ├── dovecot.index.cache │ │ ├── dovecot.index.log │ │ └── dovecot.index.thread │ ├── dovecot-acl │ ├── folderA │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── folderC │ │ └── dbox-Mails │ │ ├── dovecot.index │ │ ├── dovecot.index.backup │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── INBOX │ │ └── dbox-Mails │ │ ├── dovecot.index │ │ ├── dovecot.index.backup │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── Junk │ │ └── dbox-Mails │ │ └── dovecot.index.log │ ├── Sent │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ └── Trash │ └── dbox-Mails │ └── dovecot.index.log ├── sieve │ ├── dovecot.sieve │ ├── dovecot.svbin │ └── tmp ├── spamassassin │ ├── bayes.mutex │ ├── bayes_seen │ └── bayes_toks ├── storage │ ├── dovecot.map.index │ ├── dovecot.map.index.log │ ├── m.1 │ ├── m.10 │ ├── m.11 │ ├── m.12 │ ├── m.13 │ ├── m.14 │ ├── m.2 │ ├── m.3 │ ├── m.4 │ ├── m.5 │ ├── m.6 │ ├── m.7 │ ├── m.8 │ └── m.9 └── subscriptions Update: I have finally managed to see these folders in roundcube, after setting subscriptions=no (instead of yes) in the shared namespace. Also, I have been able to keep it working with the single dovecot-acl file I have inside mailboxes. Is this structure correct? I am asking becaus I have another user, for which I migrated the format to mdbox, for which I have these folders (curr, tmp, new) but also the structure I have for the shared :s. Are both formats mixed for that user? Thank you, Felix On 27 September 2016 00:25:40 CEST, "dovecot(a)avv.solutions" <dovecot(a)avv.solutions> wrote: >Quick thought: are the sub-folder structure complete? > >I mean, do they have their cur+new+tmp directories? > >With their rights ownership+permissions? > >KR > >On 09/26/2016 11:31 PM, Felix Rubio Dalmau wrote: >> Hi everybody, >> >> I am honestly desperate: I have spent/invested the whole day in >trying to set a shared mailbox, with quite partial success. The INBOX >is merged with the top level mailbox, and there are many more folders. >To give an idea, for the shared account sharedacc(a)domain.org, this is >how looks the folder structure: >> >> sharedacc >> |-folderA >> |-folderB >> \-folderC >> >> in the account for usera(a)domain.org, I see the following: >> >> usera >> |-folderD >> |-folderE >> |-folderF >> \-shared >> \-sharedacc >> >> So, I do not get to see folderA, folderB, folderC, etc. >> >> My configuration is: >> >> # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf >> # Pigeonhole version 0.4.14 (099a97c) >> # OS: Linux 4.5.4-0 x86_64 Debian stretch/sid zfs >> >> mail_plugins = zlib expire acl >> >> plugin { >> acl = vfile >> acl_shared_dict = proxy::acl >> } >> >> dict { >> acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext >> } >> >> namespace { >> list = children >> location = >mdbox:/mnt/vmail/%%d/%%n:INDEXPVT=/mnt/vmail/indexes/shared/%%d/%%n >> prefix = shared/%%n/ >> separator = / >> subscriptions = yes >> type = shared >> } >> >> protocol lmtp { >> mail_plugins = zlib expire acl sieve >> } >> >> protocol imap { >> mail_plugins = zlib expire acl antispam imap_acl >> } >> >> the files I have one the account for sharedacc are: >> sharedacc >> |-dovecot-acl >> |-dovecot-acl-list >> \-mailboxes >> |-dovecot-acl >> |-folderA >> | \-dbox-Mails >> | \-dovecot-acl >> |-folderB >> | \-dbox-Mails >> | \-dovecot-acl >> \-folderC >> \-dbox-Mails >> \-dovecot-acl >> >> In dovecot-acl-list I have the following contents: >> 1474920778 folderA >> 1474920778 folderB >> 1474920778 folderC >> >> and in every dovecot-acl, I have: >> user=usera(a)domain.org akxeilprwts >> >> All the files on the filesystem are owned by the same vmail user. >> What is strange is that I can see all these folderA, folderB, folderC >in roundcube, and I can click to subscribe to them. However, when I go >back to the general view, the subscriptions have been reset and I see >only sharedacc, without a thing inside. Finally, in kmail I can see the >subscribed folders without a problem (??!) >> >> Can please somebody help me? -- Sent from my phone. Please excuse my brevity. -- Sent from my phone. Please excuse my brevity.

1 0

Shared mailboxes nightmare (for me :-( )
by Felix Rubio Dalmau 26 Sep '16

26 Sep '16

Hi everybody, I am honestly desperate: I have spent/invested the whole day in trying to set a shared mailbox, with quite partial success. The INBOX is merged with the top level mailbox, and there are many more folders. To give an idea, for the shared account sharedacc(a)domain.org, this is how looks the folder structure: sharedacc |-folderA |-folderB \-folderC in the account for usera(a)domain.org, I see the following: usera |-folderD |-folderE |-folderF \-shared \-sharedacc So, I do not get to see folderA, folderB, folderC, etc. My configuration is: # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.14 (099a97c) # OS: Linux 4.5.4-0 x86_64 Debian stretch/sid zfs mail_plugins = zlib expire acl plugin { acl = vfile acl_shared_dict = proxy::acl } dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } namespace { list = children location = mdbox:/mnt/vmail/%%d/%%n:INDEXPVT=/mnt/vmail/indexes/shared/%%d/%%n prefix = shared/%%n/ separator = / subscriptions = yes type = shared } protocol lmtp { mail_plugins = zlib expire acl sieve } protocol imap { mail_plugins = zlib expire acl antispam imap_acl } the files I have one the account for sharedacc are: sharedacc |-dovecot-acl |-dovecot-acl-list \-mailboxes |-dovecot-acl |-folderA | \-dbox-Mails | \-dovecot-acl |-folderB | \-dbox-Mails | \-dovecot-acl \-folderC \-dbox-Mails \-dovecot-acl In dovecot-acl-list I have the following contents: 1474920778 folderA 1474920778 folderB 1474920778 folderC and in every dovecot-acl, I have: user=usera(a)domain.org akxeilprwts All the files on the filesystem are owned by the same vmail user. What is strange is that I can see all these folderA, folderB, folderC in roundcube, and I can click to subscribe to them. However, when I go back to the general view, the subscriptions have been reset and I see only sharedacc, without a thing inside. Finally, in kmail I can see the subscribed folders without a problem (??!) Can please somebody help me?

1 0

Re: Self-Signed Certificate issue
by Joseph Tam 26 Sep '16

26 Sep '16

Darryl Baker writes: > I am running a small email site which I am moving from uw-imapd and Solaris > to Ubuntu and Dovecot imaps and pop3s. I am trying to use a self-signed > certificate for this site. I am using Thunderbird as the test client. I've > tried both the pre-built snakeoil certificate and building a special one > for dovecot. In /var/log/mail.err I keep getting what I am interpreting as > a missing CA cert. The message is: > > dovecot: imap-login: Error: SSL: Stacked error: error:14094418:SSL > routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 > > The certificate was created by: > > openssl req -new -x509 -days 365 -nodes -out /etc/ssl/certs/dovecot.pem > -keyout /etc/ssl/private/dovecot.pem Are you using this as a server certificate or as a client certificate? Please output your dovecot's configuration, esp. your SSL setup. doveconf -n | grep ssl Joseph Tam <jtam.home(a)gmail.com>

1 0

Setting hostdomain
by Arie Peterson 25 Sep '16

25 Sep '16

Hi all, Preparing for a replication setup, I read (at the bottom of <http://wiki2.dovecot.org/Replication>) that `dovecot --hostdomain` should give a different output on the two servers. This is not the case for me: both give "localhost". I'm trying to change my configuration to set the hostdomain to another value, but I can't find how to do this. I tried: • setting the environment variable DOVECOT_HOSTDOMAIN=mydomain in /etc/default/dovecot (which is read by the init script); • adding the line import_environment = TZ DOVECOT_HOSTDOMAIN=mydomain to dovecot.conf; • the combination of both of the above. However, after restarting dovecot none of these changes seem to have any effect: `dovecot --hostdomain` still returns "localhost". This is with dovecot version 2.2.13. How should one change this setting? Thanks, Arie

2 2

fail to compile with openssl-1.1.x
by A. Schulze 25 Sep '16

25 Sep '16

Hi again, now I get compile errors. Is openssl-1.1.xy supported? iostream-openssl.c: In function 'openssl_iostream_verify_client_cert': iostream-openssl.c:118:37: error: dereferencing pointer to incomplete type subject = X509_get_subject_name(ctx->current_cert); ^ iostream-openssl.c:127:37: error: dereferencing pointer to incomplete type X509_verify_cert_error_string(ctx->error), certname)); Andreas ^

2 1

configure fail if libssl is named libssl-opt
by A. Schulze 25 Sep '16

25 Sep '16

Hello, I try to build dovecot with my own version of openssl. It's compiled in a way the libraries can coexist without symbol conflict with the real OpenSSL in /usr: They are named libssl-opt and libcrypto-opt. Now configure fail to find my libssl-opt: CFLAGS="..." CXXFLAGS="..." CPPFLAGS="..." LDFLAGS="..." SSL_LIBS='-lssl-opt -lcrypto-opt' ./configure ... --with-ssl=openssl ... checking for SSL_read in -lssl... no configure: error: Can't build with OpenSSL: libssl not found Is there an other way to tell configure the ssl libraries have other names? Andreas

1 1

Proxy IMAP/POP
by Luis Miguel Flores dos Santos 25 Sep '16

25 Sep '16

Hello, I'm try configure dovecot to proxy imap and pop but I can't, follow my configurations: dovecot version = 2.2.10 My configuration: dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.18.35 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = plain login auth_username_format = %n disable_plaintext_auth = no mail_location = maildir:~/Maildir mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = "host=127.0.0.1 dbname=mail user=root password=PASS" password_query = SELECT NULL AS password, 'Y' as nopassword, host, destuser, 'Y' AS proxy FROM proxy WHERE user = '%u' /var/log/maillog: RHDOVECOT dovecot: auth: Fatal: Unknown database driver 'mysql' **OBS: I followed this wiki: http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy and installed dovecot-mysql.x86_64, My server is a CentOS Linux release 7.2.1511 (Core) Anyone can help me? Thanks. -------- Atenciosamente, Luis Miguel

2 1

dovecot-2.2.18 / net_listen_unix(...) failed: Value too large for defined data type
by Christophe Bricout 25 Sep '16

25 Sep '16

Dear All, SUMMARY: Dovecot shows an issue when "localstatedir" path is too long The issue exists also with dovecot-2.2.25 CONFIGURATION: The configure options are: ./configure --prefix=${TARGET_DIR} \ --sysconfdir=${TARGET_DIR}/cfg \ --localstatedir=${TARGET_DIR}/var \ --with-ssl=openssl \ --with-sqlite \ --disable-shared RESULTS: When executing dovecot (as root), the followin message appears: Error: service(dict): net_listen_unix(/<user>/localbin/minnowboard-turbot-applications/1.0/linux/x86_64-linux/localbin/dovecot/2.2.18/linux/x86_64-linux/var/run/dovecot/dict) failed: Value too large for defined data type Error: service(config): net_listen_unix(<user>/localbin/minnowboard-turbot-applications/1.0/linux/x86_64-linux/localbin/dovecot/2.2.18/linux/x86_64-linux/var/run/dovecot/config) failed: Value too large for defined data type --- WORKAROUND: The problem is solved by defining shorten localstatedir or using base_dir = /var/run/dovecot. It seems the path lengh causing a such issue. Path Lengh > 127 Available for additional experiments Best Regards

2 1

Re:Self-Signed Certificate issue
by dovecot＠outputservices.com 23 Sep '16

23 Sep '16

Try this: Create a directory and do the following in that directory. Create the file openssl.cnf with the following information: [ req ] default_md = sha2 distinguished_name = req_distinguished_name [ req_distinguished_name ] countryName = US localityName = Boulder organizationName = Your orginizations name here organizationalUnitName = IT Department emailAddress = some email address at your company commonName = "Just a simple statement about the company" [ certauth ] subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always,issuer:always basicConstraints = CA:true [ client ] basicConstraints = critical,CA:FALSE keyUsage = digitalSignature, keyEncipherment, dataEncipherment extendedKeyUsage = clientAuth Just change the things you need to for you. Then issue the following command. openssl req -config ./openssl.cnf -newkey rsa:2048 -nodes -keyform PEM -keyout dovecot.key -x509 - days 365 -extensions certauth -outform PEM -out dovecot.pem -subj "/C=US/postalCode=00000/ST=state/L=city/streetAddress=some street/O=company name/OU=IT Department/CN=dovecort cert/emailAddress=email(a)yourcompany.com" Just change the C, O, OU, etc for your needs. Then verify the contents via: openssl x509 -noout -in dovecot.pem -subject openssl x509 -noout -in dovecot.pem -issuer openssl x509 -noout -in dovecot.pem -enddate openssl x509 -noout -in dovecot.pem -text This will show what is in the certificate. Now copy the pem & key files to where you want them. Restart dovecot. You may have to change the configuration to use the names just created. Dave Ryan On 09/23/16 11:07, Darryl Baker wrote: > My apologies if this is a repeat but my search of the archive did not turn > it up in the recent past. If this has been covered just point me at the > previous thread, please. > > I am running a small email site which I am moving from uw-imapd and Solaris > to Ubuntu and Dovecot imaps and pop3s. I am trying to use a self-signed > certificate for this site. I am using Thunderbird as the test client. I've > tried both the pre-built snakeoil certificate and building a special one > for dovecot. In /var/log/mail.err I keep getting what I am interpreting as > a missing CA cert. The message is: > > dovecot: imap-login: Error: SSL: Stacked error: error:14094418:SSL > routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48 > > > The certificate was created by: > > openssl req -new -x509 -days 365 -nodes -out /etc/ssl/certs/dovecot.pem > -keyout /etc/ssl/private/dovecot.pem > > > The Dovecot version is 2.2.22 (fe789d2) The Ubuntu version is 16.04 LTS > current patches. > > > *Darryl Baker* > >

1 0

Director keeping IMAP connections alive
by Webert de Souza Lima 23 Sep '16

23 Sep '16

Hello, I have a 2 director - 2 dovecot set up in a cluster. >From time to time I notice high usage of RAM by dovecot process, and analyzing with doveadm who, I see many users with dozens, even hundreds of PIDs. Inspecting those PIDs I see each one of them is an IMAP connection, coming from either director process, and ESTABILISHED. A deeper analysis shows me that there ltos of connections from the same users to BOTH dovecot instances, but as I am using director, this shouldn't happen, right? Ok. The thing is, one of the dovecot instances have only old connections (like 3 days old) and the other dovecot have some old and some newer connections. So, director is redirecting recent connections to the right dovecot, as expected, but it is keeping many of old and unused connections open, consuming resources. output of doveconf -n from dovecot: http://pastebin.com/trMEjeAs output of doveconf -n from director: http://pastebin.com/EUpHYMKY Thanks.

1 1

Broken auth-* sockets.
by ygrishin＠pyramidheadgroup.ca 23 Sep '16

23 Sep '16

Hello. I am migrating my servers to Ubuntu and have been having an issue with Dovecot authenticator service. Exim is set up to use dovecot-auth, anticipating the question whether exim binary was compiled with support of Dovecot authenticator, it was: --- # exim -bV Exim version 4.86_2 #1 built 05-Apr-2016 12:21:41 Copyright (c) University of Cambridge, 1995 - 2015 (c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2015 Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013) Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS move_frozen_messages Content_Scanning DKIM Old_Demime DNSSEC PRDR OCSP Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa tls Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp Fixed never_users: 0 Size of off_t: 8 Configuration file is /etc/exim4/exim4.conf --- The problem is sockets Dovecot creates are somehow broken. Exim reports something like: --- 2016-09-21 14:45:26 dovecot_plain authenticator failed for *** ([***]) [***]: 435 Unable to authenticate at present: authentication socket connection error 2016-09-21 14:45:26 dovecot_login authenticator failed for *** ([***]) [***]: 435 Unable to authenticate at present: authentication socket connection error --- and I initially thought it was wrong permissions for the socket, triple checked and they are 100% right. More than that, I temporarily chmodded it "rw" for the world as follows: --- # ls -l /var/dovecot/auth-* srw-rw-rw- 1 Debian-exim root 0 Aug 17 21:20 /var/dovecot/auth-client srw------- 1 dovecot root 0 Aug 17 21:20 /var/dovecot/auth-login srw-rw-rw- 1 Debian-exim root 0 Aug 17 21:20 /var/dovecot/auth-master -rw------- 1 root root 32 Aug 15 19:35 /var/dovecot/auth-token-secret.dat srw-rw-rw- 1 dovecot root 0 Aug 17 21:20 /var/dovecot/auth-userdb srw------- 1 dovecot root 0 Aug 17 21:20 /var/dovecot/auth-worker --- and Exim reports the same problem. What makes me think that it's Dovecot's and not Exim's problem? The fact that the socket is really broken, on the server where it's not working: --- # socat - UNIX-CONNECT:/var/dovecot/auth-client 2016/09/22 17:58:27 socat[15192] E connect(5, AF=1 "/var/dovecot/auth-client", 26): Connection refused --- on the server where it is working (version 2.2.13 is installed there), precisely same command: --- # socat - UNIX-CONNECT:/var/dovecot/auth-client VERSION 1 1 MECH PLAIN plaintext MECH LOGIN plaintext MECH CRAM-MD5 dictionary active MECH DIGEST-MD5 dictionary active mutual-auth MECH APOP private dictionary active SPID 535 CUID 880 COOKIE 0311e84ed191fb63334819b1fc3bf2e3 DONE --- with a different result!!! The system: --- uname -a Linux *** 4.4.0-38-generic #57-Ubuntu SMP Tue Sep 6 15:41:41 UTC 2016 i686 i686 i686 GNU/Linux --- Doveconf: --- # dovecot -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-38-generic i686 Ubuntu 16.04.1 LTS ext3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 digest-md5 apop debug_log_path = /var/log/dovecot-debug.log default_internal_user = dovenull disable_plaintext_auth = no first_valid_uid = 114 log_path = /var/log/dovecot.log login_greeting = IMAP/POP3 server is ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = maildir:/var/mail/exim/%d/%n mail_log_prefix = "%Us(%u): " namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } unix_listener auth-master { mode = 0600 user = Debian-exim } user = root } service imap-login { chroot = login client_limit = 8 inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 10143 } process_limit = 8 process_min_avail = 5 service_count = 1 user = dovenull vsz_limit = 64 M } service imap { drop_priv_before_exec = yes process_limit = 64 vsz_limit = 2 G } service pop3-login { chroot = login client_limit = 8 inet_listener pop3 { address = * port = 110 } inet_listener pop3s { address = * port = 10110 } process_limit = 8 process_min_avail = 5 service_count = 1 user = dovenull vsz_limit = 64 M } service pop3 { drop_priv_before_exec = yes process_limit = 64 vsz_limit = 2 G } ssl = no ssl_cert = </etc/dovecot/ssl/server.crt ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/dovecot/ssl/server.key userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol lda { auth_socket_path = /var/dovecot/auth-master info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log postmaster_address = postmaster@*** } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } --- Sounds like a broken Dovecot install, doesn't it? Looks like not the case: --- # apt-get check Reading package lists... Done Building dependency tree Reading state information... Done --- What else to check?

2 2

Logging of custom mail headers
by Francesco Fiore 22 Sep '16

22 Sep '16

Hi, I need to configure Dovecot to log some custom mail headers. I red the documentation of the mail_log plugin but I didn't found which field I've to use as value for mail_log_fields parameter. So, I red the plugin code but in mail-log-plugin.c there're defined only "from" and "subject" fields that match some email header. I found three alternatives: 1. use the mail_filter plugin (spawning a new process, ecc.) 2. coding a new plugin using the notify plugin 3. propose a patch to the mail_log plugin that use a new configuration parameter (es. mail_log_headers) and log the specified mail headers Which is the better solution for you? Thanks in advance Francesco

1 1

Sieve vacation won't send second reply after timeout interval.
by David Williams 21 Sep '16

21 Sep '16

Hi I solved this by updating to Dovecot 2.2.24 David

1 0

dsync-server: Configure lock-file location?
by Udo Waechter 21 Sep '16

21 Sep '16

Good day everyone, I have a situation where my mail-folder structure (mdbox) ist like this: My users have the following data: $ doveadm user XYZ(a)xx.com field value home /srv/mail/ mail mdbox:foo/XYZ@xx.com/ I also do replication between 2 nodes. Now, I sometimes (when a lot of replication is happening I get the following errors: dovecot: dsync-local(XYZ(a)xx.com): Error: Couldn't lock /srv/mail//.dovecot-sync.lock: Timed out after 60 seconds This of course not only for XYZ(a)xx.com It seems to me, that my mailbox structure should rather be: $ doveadm user XYZ(a)xx.com field value home /srv/mail/foo mail mdbox:XYZ@xx.com/ in order to get rid of these messages? Unfortunatly I cannot change that. I've searched around and took a look into the code of dsync-server, unfortunatly the path to the lockfile is not configurable. Is there a way to somehow configure the lock-file location for dsync-server? Thanks very much, udo.

1 0

ldap sasl bind and auth_bind
by Matwey V. Kornilov 20 Sep '16

20 Sep '16

Hello, I am using # dovecot --version 2.2.18 # dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.8 (0c4ae064f307+) doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:24: 'imaps' protocol can no longer be specified (use protocols=imap). to disable non-ssl imap, use service imap-login { inet_listener imap { port=0 } } doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:24: 'imaps' protocol can no longer be specified (use protocols=imap). to disable non-ssl imap, use service imap-login { inet_listener imap { port=0 } } # OS: Linux 4.1.27-27-default x86_64 openSUSE 42.1 (x86_64) first_valid_uid = 1 mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = lmtp imap service imap-login { inet_listener imap { port = 0 } } ssl = required ssl_ca = /etc/pki/trust/anchors/rootCA.pem ssl_cert = </etc/openldap/openldap.crt ssl_dh_parameters_length = 2048 ssl_key = </etc/openldap/openldap.key ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap override_fields = uid=vmail gid=vmail home=/var/spool/mail/%d/%n } I use LDAP for user and passwd databases as the following: uris = ldapi:/// sasl_bind = yes sasl_mech = EXTERNAL auth_bind = yes And I found that only first authentication after dovecot restart is successful, the others always fail with temp. The reason is that dovecot rebinds to anonymous bind after succesful auth bind instead of rebinding to external sasl bind.

1 1

Sieve vacation won't send second reply after timeout interval.
by David Williams 20 Sep '16

20 Sep '16

Hi there I'm having problems getting sieve to send a second vacation response. For testing I've set sieve_vacation_min_period = 500s and the seconds option in the script is 600. I send the first test message and get a reply fine I then wait about 12 minutes send a second message and get no reply. In the log I get "discarded duplicate response". I've restarted dovecot and removed the .dovecot.lda-dupes file before running the last test. I'm using LMTP for delivery to Dovecot. The sieve script is require ["vacation-seconds"]; # rule:[Vacation] if true { vacation :seconds 600 :addresses "username(a)mydomain.com" :subject "vacation" "test"; } and doveconf -n is # 2.2.19: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.9 (357ac0a0e68b+) # OS: Linux 3.18.12-gentoo x86_64 Gentoo Base System release 2.2 ext4 auth_username_format = %Ln disable_plaintext_auth = no imap_capability = +XLIST mail_location = maildir:/srv/mail/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate vacation-seconds imapflags notify namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox "Sent Items" { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = * driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/default.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_extensions = +notify +imapflags +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_min_period = 500s sieve_vacation_use_original_recipient = yes } postmaster_address = postmaster(a)mydomain.com protocols = imap lmtp sieve service auth { unix_listener auth-userdb { group = mode = 0777 user = } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 10024 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key submission_host = localhost userdb { driver = passwd override_fields = home=/srv/mail/%n } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } I've changed the identifying info to stop any spammers. Any ideas, suggestions or just another pair of eyes telling me I've done something stupid would be much appreciated. Many thanks David

1 0

[Dovecot] Plugins: virtuals vs acls
by Leho Kraav 20 Sep '16

20 Sep '16

Hi all dovecot-virtual: * all when dovecot-acl files restrict some subset of * for a user, does dovecot respect these ACLs when collecting messages for virtual folder? I'd like a confirmation about what I should be seeing when I start implementing this setup.

2 3

Dovecot and imapproxy
by Grant 20 Sep '16

20 Sep '16

imapproxy sped things up a lot for me when I was using courier. I switched to dovecot a while back and kept using imapproxy. Lately I've been noticing weird TCP Queuing spikes in my munin graphs and discontinuing my use of imapproxy seems to have smoothed them out completely and I haven't noticed a slowdown in webmail. Is imapproxy generally not necessary with dovecot? - Grant

2 1

Re: Dovecot 2.2.25 fails on SSL
by Joseph Tam 19 Sep '16

19 Sep '16

"Andreas M. Kirchwitz" <amk(a)spamfence.net> writes: >> OK, the origin of your problem becomes clearer. You can hardcode these >> paths into the executables by doing something like >> >> env CFLAGS='-I/my'ssl/include' \ >> LDFLAGS='-L/your/ssl/lib -Wl,-rpath,/my/ssl/lib' \ >> configure ... > > Based on your mail I've tried CFLAGS/LDFLAGS again, and > now Dovecot didn't even compile any longer. I don't use the same OS as you, but what errors dis you get? Joseph Tam <jtam.home(a)gmail.com>

1 0

Panic: file auth-request.c
by Chris Wik 19 Sep '16

19 Sep '16

Hello Dovecot list, We've been running a really old CentOS 5 server with the stock dovecot from yum (1.0.7) for years and years with absolutely no problems. If it ain't broke, don't fix it, or something like that. Well it finally broke, but only due to the server no longer being able to handle the load of the increasing user base (many thousands now, with hundreds of concurrent IMAP connections any any given time) So we upgraded to a new CentOS 7 server with SSD RAID, fast CPUs and tons of RAM. No more load problems. We compiled the latest dovecot from source (as the version from CentOS yum repo is already quite old, figure we might as well run the latest version since we were upgrading anyway). Thanks to excellent documentation on dovecot.org and fairly thorough testing, the upgrade was quite smooth. We kept all the message UUIDs intact and tried to match the supported authentication methods etc to the old setup, and we didn't have any problems with clients re-downloading or re-syncing mail. We do however have one problem, which prompted me to join this list. It is the same problem as described in this thread from last month: http://dovecot.org/list/dovecot/2016-July/104899.html Here's the excerpt from our maillog: Sep 17 19:34:57 mail dovecot: auth: Panic: file auth-request.c: line 1049 (auth_request_lookup_credentials): assertion failed: (request->credentials_scheme == scheme) Sep 17 19:34:57 mail dovecot: auth: Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x89470) [0x7fa9cb8af470] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x8954e) [0x7fa9cb8af54e] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa9cb851f75] -> dovecot/auth() [0x4165bc] -> dovecot/auth() [0x4221fb] -> dovecot/auth() [0x41620b] -> dovecot/auth(auth_request_lookup_credentials_callback+0x58) [0x4162f8] -> dovecot/auth(passdb_handle_credentials+0x6a) [0x4254ba] -> dovecot/auth() [0x425b62] -> dovecot/auth() [0x41c1f8] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fa9cb8c207c] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7fa9cb8c3377] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7fa9cb8c2105] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fa9cb8c22b8] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fa9cb857f33] -> dovecot/auth(main+0x2eb) [0x40ccdb] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7fa9c9dc2b15] -> dovecot/auth() [0x40cf15] On the client side, it manifests as an authentication failure, and the user is prompted to re-enter their password. The reports we've had are all from users who have their passwords saved in a local password manager, so the client is definitely sending the correct password. It's not related to a particular mail client. It is also definitely not related to the particular user or password, as the user will authenticate many times successfully and then (seemingly) randomly be hit by this bug and prompted to re-enter their password. We enabled verbose logging and even logging of passwords for failed authentication attempts in an attempt to find a pattern, but so far we have not found one. Similar to the original poster in the above thread, we are using a MySQL backend, and CentOS 7 on x86_64 It happens quite frequently: in the past 6 days it happened 49175 times, according to a grep of the maillog. In the same period there were 294167 successful IMAP logins and 160322 POP3 logins. For now we have downgraded to 2.2.4 and so far have not seen the crash recorded in the maillog. What can we do to help track down and fix this bug? # dovecot -n # 2.2.24 (a82c823): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.28.3.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login digest-md5 cram-md5 ntlm rpa apop auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot-debug.log default_client_limit = 5000 default_process_limit = 1000 disable_plaintext_auth = no first_valid_uid = 89 mail_debug = yes mail_fsync = never mail_gid = 89 mail_location = maildir:/var/virtual/%d/%n mail_uid = 89 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = <*** ssl_cert = <*** ssl_key = <*** userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lmtp { mail_fsync = optimized } protocol lda { mail_fsync = optimized } protocol imap { mail_max_userip_connections = 50 } protocol pop3 { mail_max_userip_connections = 20 } -- Chris Wik Anu Internet Services www.anu.net | www.cwik.ch

3 5

dovecot --hostdomain
by dovecot＠nspace.de 19 Sep '16

19 Sep '16

Hi, I'm currently debugging replication issues and I found that both servers answer to a "dovecot --hostdomain" simply with localhost From what I've read, this can lead to problems. Where do I configure the dovecot hostdomain name? The machine itself has a valid name in /etc/hostname Thanks, Thomas

2 1

Re: Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 19 Sep '16

19 Sep '16

Joseph Tam <jtam.home(a)gmail.com> wrote: >> For every program I compile myself, I link it against my custom >> OpenSSL library (always newest version; distributions usually tend >> to stick with a specific version and only apply security fixes). > > OK, the origin of your problem becomes clearer. You can hardcode these > paths into the executables by doing something like > > env CFLAGS='-I/my'ssl/include' \ > LDFLAGS='-L/your/ssl/lib -Wl,-rpath,/my/ssl/lib' \ > configure ... Yes, exactly, that's my usual approach. I've used this as well for building other software with custom libraries. Unfortunately, I remember CFLAGS/LDFLAGS didn't play well with Dovecot, so I used SSL_CFLAGS/SSL_LIBS as suggested by the documentation and that worked well. > I use this myself (except the -Wl part since these libs are > symlinked to my shared library path). I think "-R/my/ssl/lib" > might also be synonymous with -Wl,... Based on your mail I've tried CFLAGS/LDFLAGS again, and now Dovecot didn't even compile any longer. I was close to giving up. But obviously, I didn't ... :-) After some investigation I found the non-default linker option "-Wl,--as-needed" as problem which is enabled by Dovecot for unknown reasons. Finally, this call to "configure" generates proper Makefile files to build Dovecot with a custom SSL library: env CPPFLAGS="-I/usr/local/ssl/include" LDFLAGS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib" LIBS="-Wl,--no-as-needed -lcrypto -lssl" SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -Wl,--no-as-needed -lcrypto -lssl" ./configure --prefix=/usr/local/dovecot --with-ssl=openssl (chances are that SSL_CFLAGS/SSL_LIBS could be removed completely but it won't hurt) I've read the section in the "ld" manual but still don't understand why Dovecot enables --as-needed (never seen that before with other software) and why it's such a big problem. But I'm no expert here. > I don't have that problem -- I use configure to tell dovecot where to find > my self-compiled openssl, and the resulting executables load from where I > want. Thanks for pointing me at the proper direction again. Now Dovecot 2.2.25 compiles for me with a custom SSL. I understand that this issue might not have a high priority but maybe one of the developers could check if "--as-needed" is really needed (as it confuses people who try to use custom libraries) and what's the deeper meaning of SSL_CFLAGS/SSL_LIBS. My system is a regular CentOS 6 (latest sub-release with all patches), nothing special except for a custom SSL installation. Greetings, Andreas

1 0

BUG - DELETE Public/Folder not working with Thunderbird
by Leander Schäfer 18 Sep '16

18 Sep '16

Hi, Unfortunately it looks like the parameter: "imap_client_workarounds = tb-extra-mailbox-sep" does not work. Neither inside nor outside "protocol imap {}" configuration section. ACLs are set correctly. Manual "DELETE Public/Test" via telnet is working as expected. Is this a known bug? See: - https://help.ubuntu.com/community/Dovecot#Thunderbird - http://wiki.dovecot.org/Clients#Thunderbird # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: FreeBSD 10.3-RELEASE amd64 [...] imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags [...] namespace { list = children location = maildir:%%h/maildir:INDEX=~/maildir/Shared/%%u:CONTROL=~/maildir/Shared/%%u:INDEXPVT=~/maildir/Shared prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace { hidden = no list = children location = maildir:~/../Public:LAYOUT=fs:INDEX=~/../Public:CONTROL=~/../Public:INDEXPVT=~/maildir/Public prefix = Public/ separator = / subscriptions = no type = public } [...] Best regards Leander Schäfer

2 4

how to mass delete after a hacked mail?
by voytek＠sbt.net.au 17 Sep '16

17 Sep '16

I had a hacked user account resulting in several thousand bounces back to that email inbox, account now corrected, but, how can I mass delete bounces with say subject like: "Undelivered Mail Returned to Sender" (by from ? ""Mail Delivery System" <MAILER-DAEMON(a)emu.sbt.net.au>") or what other ways to clean the mess ? thanks, V

4 3

converting maildir to mailbox
by Anton Yuzhaninov 16 Sep '16

16 Sep '16

Hi all! There is a script to convert maildir to mailbox in wiki: http://wiki.dovecot.org/Migration/MailFormat but it doesn't convert any message flags (seen e.t.c.). I wrote a script, which converts most flags and labels: https://bitbucket.org/citrin/scripts/src/tip/dovecot-maildir2mbox.pl It doesn't convert recent flag and UIDs though, because it was not necessary in my case. Do you think link to the script should be added to dovecot wiki? -- WBR, Anton Yuzhaninov P. S. My use case was: get maildir from other server, convert to mbox, compress (gzip -9) and add to my mailbox as read-only archive.

3 2

Crash with latest -git as of 2.2.devel (c06590c)
by Reuben Farrelly 16 Sep '16

16 Sep '16

Hi, Looks like something has been committed to master-2.2 in the last week which is causing crashes as soon as the remote user logs in: Sep 17 01:11:19 thunderstorm.reub.net dovecot: dsync-server(reuben): Error: read(lightning.reub.net) failed: EOF (last sent=mailbox_state, last recv=mail (EOL)) Sep 17 01:11:31 thunderstorm.reub.net dovecot: imap(reuben): Panic: file fts-api.c: line 128 (fts_backend_set_cur_mailbox): assertion failed: (ctx->cur_box != NULL) Sep 17 01:11:31 thunderstorm.reub.net dovecot: imap(reuben): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xb7f9f) [0x7f4cd5b4cf9f] -> /usr/lib64/dovecot/libdovecot.so.0(+0xb9515) [0x7f4cd5b4e515] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4cd5b4d332] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x96b4) [0x7f4cd50b86b4] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_backend_update_deinit+0x45) [0x7f4cd50b872b] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x142ed) [0x7f4cd50c32ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_sync_index+0x98e) [0x7f4cd5e4eed7] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5f209) [0x7f4cd5e51209] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5f497) [0x7f4cd5e51497] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xb2) [0x7f4cd5e517de] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x6d) [0x7f4cd5e2cc41] -> dovecot/imap(imap_sync_init+0xc7) [0x42e408] -> dovecot/imap() [0x42f96b] -> dovecot/imap() [0x42febc] -> dovecot/imap(cmd_sync_delayed+0x34) [0x42fef2] -> dovecot/imap(client_handle_input+0x138) [0x41e9d1] -> dovecot/imap(client_input+0xf5) [0x41eb02] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xcd) [0x7f4cd5b6b054] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x209) [0x7f4cd5b6d5c1] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x24) [0x7f4cd5b6b1fd] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xaf) [0x7f4cd5b6b149] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x2e) [0x7f4cd5aca603] -> dovecot/imap(main+0x300) [0x431169] -> /lib64/libc.so.6(__libc_start_main+0xf0) [0x7f4cd571c710] -> dovecot/imap(_start+0x29) [0x40c7b9] Sep 17 01:11:31 thunderstorm.reub.net dovecot: imap(reuben): Fatal: master: service(imap): child 1740 killed with signal 6 (core dumped) thunderstorm reuben # file core core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from 'dovecot/imap postlogin', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/libexec/dovecot/imap', platform: 'x86_64' thunderstorm reuben # gdb /usr/libexec/dovecot/imap core GNU gdb (Gentoo 7.11.1 vanilla) 7.11.1 Copyright (C) 2016 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://bugs.gentoo.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/libexec/dovecot/imap...done. [New LWP 1740] warning: Could not load shared library symbols for linux-vdso.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/imap postlogin'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f4cd572f1f8 in raise () from /lib64/libc.so.6 (gdb) bt full #0 0x00007f4cd572f1f8 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f4cd573064a in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f4cd5b4cfee in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:201 backtrace = 0x27446a0 "/usr/lib64/dovecot/libdovecot.so.0(+0xb7f9f) [0x7f4cd5b4cf9f] -> /usr/lib64/dovecot/libdovecot.so.0(+0xb9515) [0x7f4cd5b4e515] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4cd5b4d332] -> /usr"... #3 0x00007f4cd5b4e515 in i_internal_fatal_handler (ctx=0x7fff509f3750, format=0x7f4cd50cb000 "file %s: line %d (%s): assertion failed: (%s)", args=0x7fff509f3770) at failures.c:670 status = 0 #4 0x00007f4cd5b4d332 in i_panic (format=0x7f4cd50cb000 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = <error reading variable args (Attempt to dereference a generic pointer.)> #5 0x00007f4cd50b86b4 in fts_backend_set_cur_mailbox (ctx=0x26f6e70) at fts-api.c:128 __FUNCTION__ = "fts_backend_set_cur_mailbox" #6 0x00007f4cd50b872b in fts_backend_update_deinit (_ctx=0x268b3b8) at fts-api.c:143 ctx = 0x26f6e70 backend = 0x26825e0 ret = 32588 #7 0x00007f4cd50c32ed in fts_mailbox_sync_notify (box=0x268aaa0, uid=0, sync_type=(unknown: 0)) at fts-storage.c:665 flist = 0x2683000 fbox = 0x268b258 #8 0x00007f4cd5e4eed7 in maildir_sync_index (ctx=0x268eb40, partial=true) at maildir-sync-index.c:649 mbox = 0x268aaa0 view = 0x26f4f30 view2 = 0x0 iter = 0x0 trans = 0x270ef20 hdr = 0x268b8b0 empty_hdr = {major_version = 176 '\260', minor_version = 57 '9', base_header_size = 20639, header_size = 32767, record_size = 3588796538, compat_flags = 76 'L', unused = "\177\000", indexid = 1352612272, flags = 32512, uid_validity = 40955680, next_uid = 0, messages_count = 40849200, unused_old_recent_messages_count = 0, seen_messages_count = 40857728, deleted_messages_count = 0, first_recent_uid = 136, first_unseen_uid_lowwater = 0, first_deleted_uid_lowwater = 40428608, log_file_seq = 0, log_file_tail_offset = 1352612384, log_file_head_offset = 32767, unused_old_sync_size = 139967982787820, unused_old_sync_stamp = 40913568, day_stamp = 0, day_first_uid = { 41174496, 0, 41174440, 0, 40413856, 0, 1352612384, 32767}} rec = 0x26d7188 seq = 0 seq2 = 0 uid = 1043 prev_uid = 1043 uflags = (MAILDIR_UIDLIST_REC_FLAG_MOVED | MAILDIR_UIDLIST_REC_FLAG_RECENT | MAILDIR_UIDLIST_REC_FLAG_NONSYNCED) filename = 0x2711a00 "1474037293.M664229P7078.thunderstorm,S=18760,W=19334:2,Sd" uid_validity = 1466133870 next_uid = 3585376580 hdr_next_uid = 1044 first_recent_uid = 1044 first_uid = 1 changes = 1 ret = 0 time_before_sync = 1474038691 expunged_guid_128 = "\247\332=\207\337[1\a\367\217\025\307\024|-Y" private_flags_mask = 0 expunged = true full_rescan = false __FUNCTION__ = "maildir_sync_index" #9 0x00007f4cd5e51209 in maildir_sync_context (ctx=0x27445a8, forced=false, find_uid=0x0, lost_files_r=0x7fff509f3afa) at maildir-sync.c:951 sync_flags = MAILDIR_UIDLIST_SYNC_PARTIAL flags = (MAILDIR_UIDLIST_REC_FLAG_NEW_DIR | MAILDIR_UIDLIST_REC_FLAG_MOVED | MAILDIR_UIDLIST_REC_FLAG_RECENT | MAILDIR_UIDLIST_REC_FLAG_NONSYNCED | MAILDIR_UIDLIST_REC_FLAG_RACING | unknown: 32736) new_changed = false cur_changed = false lock_failure = false fname = 0x268aaa0 "" why = (unknown: 0) ret = 1 __FUNCTION__ = "maildir_sync_context" #10 0x00007f4cd5e51497 in maildir_sync_run (mbox=0x268aaa0, flags=MAILBOX_SYNC_FLAG_EXPUNGE, force_resync=false, uid=0x0, lost_files_r=0x7fff509f3afa) at maildir-sync.c:1024 _data_stack_cur_id = 5 ctx = 0x27445a8 retry = false lost_files = false ret = 0 #11 0x00007f4cd5e517de in maildir_storage_sync_init (box=0x268aaa0, flags=MAILBOX_SYNC_FLAG_EXPUNGE) at maildir-sync.c:1097 mbox = 0x268aaa0 lost_files = false force_resync = false ret = 0 __FUNCTION__ = "maildir_storage_sync_init" #12 0x00007f4cd5e2cc41 in mailbox_sync_init (box=0x268aaa0, flags=MAILBOX_SYNC_FLAG_EXPUNGE) at mail-storage.c:1728 _data_stack_cur_id = 4 ctx = 0x0 #13 0x000000000042e408 in imap_sync_init (client=0x2687680, box=0x268aaa0, imap_flags=IMAP_SYNC_FLAG_SAFE, flags=MAILBOX_SYNC_FLAG_EXPUNGE) at imap-sync.c:229 ctx = 0x268b770 __FUNCTION__ = "imap_sync_init" #14 0x000000000042f96b in cmd_sync_client (sync_cmd=0x2688280) at imap-sync.c:737 client = 0x2687680 ctx = 0x2 flags = MAILBOX_SYNC_FLAG_EXPUNGE imap_flags = IMAP_SYNC_FLAG_SAFE no_newmail = false #15 0x000000000042febc in cmd_sync_delayed_real (client=0x2687680) at imap-sync.c:858 cmd = 0x2688280 first_expunge = 0x2688280 first_nonexpunge = 0x0 __FUNCTION__ = "cmd_sync_delayed_real" #16 0x000000000042fef2 in cmd_sync_delayed (client=0x2687680) at imap-sync.c:866 _data_stack_cur_id = 3 ret = 80 #17 0x000000000041e9d1 in client_handle_input (client=0x2687680) at imap-client.c:1118 ret = false remove_io = false handled_commands = true __FUNCTION__ = "client_handle_input" #18 0x000000000041eb02 in client_input (client=0x2687680) at imap-client.c:1149 cmd = 0x7fff509f3cc0 output = 0x26880a0 bytes = 28 __FUNCTION__ = "client_input" #19 0x00007f4cd5b6b054 in io_loop_call_io (io=0x268ca30) at ioloop.c:564 ioloop = 0x264f760 t_id = 2 __FUNCTION__ = "io_loop_call_io" #20 0x00007f4cd5b6d5c1 in io_loop_handler_run_internal (ioloop=0x264f760) at ioloop-epoll.c:220 ctx = 0x2651270 events = 0x26520a0 event = 0x26520a0 list = 0x26881d0 io = 0x268ca30 tv = {tv_sec = 256, tv_usec = 707889} events_count = 5 msecs = 256708 ret = 1 i = 0 j = 0 call = true __FUNCTION__ = "io_loop_handler_run_internal" #21 0x00007f4cd5b6b1fd in io_loop_handler_run (ioloop=0x264f760) at ioloop.c:612 No locals. #22 0x00007f4cd5b6b149 in io_loop_run (ioloop=0x264f760) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #23 0x00007f4cd5aca603 in master_service_run (service=0x264f600, callback=0x430dd6 <client_connected>) at master-service.c:641 No locals. #24 0x0000000000431169 in main (argc=2, argv=0x264f390) at main.c:460 set_roots = {0x43bbe0 <imap_setting_parser_info>, 0x646340 <lda_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x2647048 "\001", postlogin_socket_path = 0x2647078 "z`\005", postlogin_timeout_secs = 60, callback = 0x430af0 <login_client_connected>, failure_callback = 0x430d41 <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN storage_service_flags = (MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT | MAIL_STORAGE_SERVICE_FLAG_AUTOEXPUNGE) username = 0x0 auth_socket_path = 0x43cd85 "auth-master" c = -1 (gdb) Reuben

1 0

Dovecot lmtp support for SMTPUTF8
by Igor Colombi 16 Sep '16

16 Sep '16

Hello, I'm using dovecot lmtp with Postfix. I'm enabling SMTPUTF8 (EAI), but when Postfix (v 3.1.2) tries to deliver the message to dovecot-lmtp it receive this error: status=bounced (SMTPUTF8 is required, but was not offered by host dlvmx.espsrv.net[private/dovecot-lmtp] I'm not sure if Dovecot lda and lmpt support EAI and how can I enable it. I've just found and old thread: http://www.dovecot.org/list/dovecot/2013-January/087756.html Thanks for your help. -- Igor Colombi

1 0

pop3 deleted count
by Dave 16 Sep '16

16 Sep '16

On pop3 logout, we're seeing log lines where the deleted count is blank (using default pop3_logout_format), so "del=%d/%m" is displaying in the logs as: "del=/1186" for example. In src/pop3/pop3-client.c:552: tab[4].value = client->delete_success ? dec2str(client->deleted_count) : 0; Shouldn't this be: tab[4].value = client->delete_success ? dec2str(client->deleted_count) : "0"; (very minor bug) -- Dave

2 2

dovecot-keywords and mbox
by Anton Yuzhaninov 15 Sep '16

15 Sep '16

Hello, With Maildir++ it is possible to store list of IMAP message keyworkds (tags in Thunderbird) on server in dovecot-keywords file. Is it possible the same with mbox mailboxes? My mbox directory contains .subscriptions file, but no .dovecot-keywords file. -- WBR, Anton Yuzhaninov

2 1

Re: 2.2.25 dumps core with "Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL)"
by Piper Andreas 15 Sep '16

15 Sep '16

Hello Timo, from the maintainer of the OpenCSW package I got the below answer. As the newly build package yields another different commit hash (which I cannot find on GitHub too), I would ask, if you are sure that the commit hash-output in 'doveconf -n' is generated correctly? The headline of 'doveconf -n' with the newly build package is # 2.2.25 (68082dc): /etc/opt/csw/dovecot/dovecot.conf Many thanks for your help, Andreas -------- Weitergeleitete Nachricht -------- Betreff: Re: OpenCSW question about package CSWdovecot Datum: Tue, 30 Aug 2016 08:56:44 -0700 Von: jgoerzen <jgoerzen(a)opencsw.org> An: piper(a)hrz.uni-marburg.de Hello Andreas, The OpenCSW dovecot package was built using the 2.2.25 version release tarball. No code changes or patches have been applied. I'm not sure what happened. I will respin new packages and then check to see if the git-commit hash is correct. When the packages are done building I'll put them in the experimental catalog: http://buildfarm.opencsw.org/experimental.html#jgoerzen Thanks, Jake On 08/29/2016 11:59 PM, piper(a)hrz.uni-marburg.de wrote: > Hello, > > with your newest dovecot-package 2.2.25,REV=2016.07.01, I sometimes get core-dumps as documented in my bug-report at the dovecot-mailing-list: http://dovecot.org/list/dovecot/2016-August/105321.html > In reaction to my bug-report, Timo Sirainen asks, which git-commit of the dovecot-sources was used for this package: http://dovecot.org/list/dovecot/2016-August/105332.html > > Could you shed some light on this? > > Thanks a lot, > Andreas

3 8

No Autoindex?
by Larry Rosenman 14 Sep '16

14 Sep '16

I used to get my mail auto-indexed, but something(tm) changed recently, but I'm not sure what. I do have fts_autoindex = yes in my dovecot config, and if I do a doveadm index \* it does the index. Ideas? doveconf -n attached -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

How to obtain a "non-stripped" executable for producing a usable core-dump
by Ben Johnson 14 Sep '16

14 Sep '16

Hello, I'm attempting to capture a core-dump file, and gdb reports warning: core file may not match specified executable file. And only after installing "dovecot-dbg" on my system (Ubuntu 16.04 LTS) does gdb report further warning: the debug information found in "/lib64/ld-2.23.so" does not match "/lib64/ld-linux-x86-64.so.2" (CRC mismatch). It took some searching the internet to realize that both messages are likely the result of having a "stripped" executable: # file /usr/lib/dovecot/dovecot-lda /usr/lib/dovecot/dovecot-lda: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=49c9c607c304a5c853c05a4ccb9e4b995f185ac4, stripped So, how best I am I to obtain a "non-stripped" dovecot-lda executable? Must I forego my distro's repositories and download the dovecot source, compiling every executable and all plugins "from scratch", in order to obtain a useful core-dump file? Perhaps the bug report instructions at http://www.dovecot.org/bugreport.html should mention "stripped" executables and how to avoid them. Perhaps I am simply ignorant, but if that is the case, there is little to no hope for the "average user" where submitting bug reports is concerned. Any guidance would be most appreciated. Thanks in advance, -Ben

3 5

Limit replication to one user
by Arne Hoffmann 14 Sep '16

14 Sep '16

Hello, we have a setup here where the main (and only important) feature of the IMAP server is the public folder. Two Dovecot instances are running in a active/passive cluster and mailstorage should be replicated between the two. Since there is a race condition when using public namespaces (locking on user level and not on mailbox level) I had the intention of limiting the replication to one user. I read somewhere that dsync is replicating all the users the command "doveadm user '*'" shows. And the command only shows *one* user because I have modified the iterate_query: ,----[/etc/dovecot/mysql.conf] | iterate_query = SELECT username AS user FROM mailbox WHERE username = 'data_replication(a)example.com' `---- root [~]# doveadm user '*' data_replication(a)example.com root [~]# So, why does Dovecot still replicate mails from other users inboxes? And why does doveadm replicator still show other users? root [~]# doveadm replicator status '*' username priority fast sync full sync success sync failed data_replication(a)example.com none 00:57:14 01:13:21 00:57:12 - arne.hoffmann(a)example.com none 00:20:04 00:31:40 00:20:02 - root [~]# [I removed some whitespace to keep line length in check] Any explanation of this behavior would be just awesome. Hints to possible solution even more! :) root [~]# doveconf -n # 2.2.24 (a82c823): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 ext4 debug_log_path = /var/log/mail.debug disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it mail_debug = yes mail_location = maildir:/var/mail/vmail/%d/%n/Maildir:INBOX=/var/mail/vmail/%d/%n/Maildir mail_plugins = " listescape notify replication" mail_privileged_group = vmail namespace { location = maildir:/var/mail/vmail/Öffentliche Ordner:INDEXPVT=~/Maildir/Öffentliche Ordner mailbox "Gelöschte Elemente" { auto = subscribe special_use = \Trash } mailbox XYZ-Projekt { auto = subscribe } prefix = Öffentliche Ordner/ separator = / subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox "Gelöschte Elemente" { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/mysql.conf driver = sql } plugin { mail_replica = tcps:10.162.70.70:22001 } protocols = imap replication_max_conns = 1 service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service doveadm { inet_listener { port = 22001 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0660 user = vmail } } ssl = required ssl_ca = </etc/ssl/os/ca-cert.pem ssl_cert = </etc/ssl/os/cert-10-162-70-71.pem ssl_client_ca_file = /etc/ssl/os/cert-all.pem ssl_client_cert = </etc/ssl/os/cert-10-162-70-71.pem ssl_client_key = </etc/ssl/os/key-10-162-70-71.pem ssl_key = </etc/ssl/os/key-10-162-70-71.pem ssl_require_crl = no userdb { args = /etc/dovecot/mysql.conf driver = sql } local 10.162.70.72 { protocol imap { ssl_ca = </etc/ssl/os/ca-cert.pem ssl_cert = </etc/ssl/os/cert-10-162-70-72.pem ssl_client_ca_file = /etc/ssl/os/cert-all.pem ssl_client_cert = </etc/ssl/os/cert-10-162-70-72.pem ssl_client_key = </etc/ssl/os/key-10-162-70-72.pem ssl_key = </etc/ssl/os/key-10-162-70-72.pem } } root [~]# Regards, Arne

1 0

Dovecot con Autentication Checkpassword error signal 111
by zerocool＠modemsoft.it 13 Sep '16

13 Sep '16

Good morning, It is the first time I write in this mailing list and I apologize in advance for possible nonsense that i can write. I have a mail server with qmail + courier imap and I would "Migrate" to dovecot. I installed the package and configured the components necessary to me using as system autentication checkpassword. I have verified the checkpassword operation without the processor usage of Dovecot and is functioning. When you perform the tests with dovecot from the logs out these errors: auth: Error: checkpassword(plutos,127.0.0.1,<WLcLPkg8esF/AAAB>): Child 15375 died with signal 11 auth: Error: checkpassword(plutos,127.0.0.1,<WLcLPkg8esF/AAAB>): Child 15376 died with signal 11 imap-login: Info: Disconnected (auth failed, 2 attempts in 8 secs): user=<plutos>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured master: Warning: Killed with signal 15 (by pid=15479 uid=0 code=kill) or : auth: Error: checkpassword(plutos,192.168.1.113,<zzV561I8IuDAqAFx>): Child 15851 died with signal 11 auth: Error: checkpassword(plutos,192.168.1.113,<zzV561I8IuDAqAFx>): Child 15852 died with signal 11 imap-login: Info: Disconnected (auth failed, 2 attempts in 8 secs): user=<plutos>, method=PLAIN, rip=192.168.1.113, lip=192.168.1.113, secured imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 102 secs): user=<>, rip=192.168.1.235, lip=192.168.1.113 auth: Error: checkpassword(plutos,192.168.1.235,<7pLd+FI81uXAqAHr>): Child 15870 died with signal 11 It is already a long time that we slam but I can not figure out where to make the mistake. Who will help me to solve this problem. Thanks in advance for your support. Regards

2 1

Lmtp proxy (director) destination port.
by Aleksey Tsvetkov 13 Sep '16

13 Sep '16

Hello, If in extra fields "port" isn't set, then lmtp proxy doesn't work: Error: lmtp client: connect(mail.example.com, 0) failed: Can't assign requested address If to set "port", then imap, doveadm proxy don't work. How it is possible to set "port" only for lmtp proxy? -- Best regards, Aleksey Tsvetkov Leading System Administrator Company Grand Vision tel. +7(495)937-70-02

1 0

Capturing dovecot core dump and debugging with gdb: ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
by Ben Johnson 13 Sep '16

13 Sep '16

Hello, I'm experiencing a segfault, so I've followed the steps at http://www.dovecot.org/bugreport.html in an effort to capture the information necessary to submit a bug report. Full "doveconf -n" output is at the end of this message. Dovecot does seem to dump a core file, but when I attempt to parse it, I get this: # apt install dovecot-dbg lib64stdc++6-4.9-dbg # gdb /usr/lib/dovecot/deliver /var/vmail/tmp/core-deliver-6-5000-5000-29125-1473732949 # Generic gdb GNU disclaimers and such here... Reading symbols from /usr/lib/dovecot/deliver...Reading symbols from /usr/lib/debug/.build-id/49/c9c607c304a5c853c05a4ccb9e4b995f185ac4.debug...done. done. warning: core file may not match specified executable file. [New LWP 29125] warning: the debug information found in "/lib64/ld-2.23.so" does not match "/lib64/ld-linux-x86-64.so.2" (CRC mismatch). Core was generated by `/usr/lib/dovecot/deliver -d sa-training(a)example.com -m Training.HAM -p'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f7712e77418 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 54 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) The obvious question is why the "core file may not match specified executable file". What am I doing wrong here? Any help would be greatly appreciated. Thanks in advance! --Ben # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-36-generic x86_64 Ubuntu 16.04.1 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_max_userip_connections = 100 mail_plugins = " quota" mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /bin/bash antispam_pipe_program_args = /usr/local/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_rule4 = INBOX:storage=+100M quota_warning = storage=100%% quota-reached 100 %u %d quota_warning2 = storage=95%% quota-warning 95 %u %d quota_warning3 = storage=80%% quota-warning 80 %u %d quota_warning4 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve sieve_max_redirects = 25 } postmaster_address = postmaster@example protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service config { unix_listener config { group = vmail mode = 0600 user = vmail } } service imap-login { client_limit = 1000 process_limit = 512 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-below { executable = script /usr/local/bin/quota-below.sh unix_listener quota-below { group = vmail mode = 0666 user = vmail } user = vmail } service quota-reached { executable = script /usr/local/bin/quota-reached.sh unix_listener quota-reached { group = vmail mode = 0666 user = vmail } user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol lmtp { mail_plugins = quota sieve postmaster_address = webmaster@localhost }

1 0

Re: Use of obox2 and AWS S3
by Raymond Sellars 12 Sep '16

12 Sep '16

Thanks Karol My challenge with AWS EFS is waiting for it to be HIPAA/BAA certified. But good to know it's a satisfactory option. I like the aspect of not worrying about total storage space, in part why I was looking at obox and S3 for the elastic scale. ------------------------------ Message: 5 Date: Sat, 10 Sep 2016 22:27:52 +0100 From: Karol Augustin <karol(a)augustin.pl> To: dovecot(a)dovecot.org Subject: Re: Use of obox2 and AWS S3 Message-ID: <1fbb9ac24386c29a92a320d2d1a399bd(a)augustin.pl> Content-Type: text/plain; charset=US-ASCII On 2016-09-01 2:59, Raymond Sellars wrote: > Any one running a dovecot solution within AWS in general? Interested > in best practice for the storage layer. Although NFS is possible its > not really optimised for elastic cloud type hosting. > > Thanks > Raymond Hi Raymond, I am using dovecot on EC2 instance with EFS storage backend. As the initial performance is bad it scales pretty quickly with space used. So it handles maildir storage very well. The latency is a little high but with indexes there is no problem. It works as NFS storage with unlimited space (8EB) and you pay for what you use. So it turns out to be very cost effective as you do not have to worry about reserving space. For better performance you can keep indexes on ephermal storage or EBS, which both have much lower access times. As for 'elastic cloud type hosting' EFS store can be used by thousands of instances in multiple AWS AZs at the same time, so it looks like it is somehow optimized. Best, Karol -- Karol Augustin karol(a)augustin.pl http://karolaugustin.pl/ +353 85 775 5312

1 0

Sieve filtering SPAM and redirect
by Andre Luiz Paiz 12 Sep '16

12 Sep '16

Hi every body. I'm having difficulties to setup my filters correctly and I really need some help. This is my environment: Mail that is received on the system passes through a sieve_before script that checks the message header for SPAM tag and store it into the "Junk" folder. If no spam tag is found, mail goes to inbox. My horde webmail is integrated with sieve, so this allow users to create their own scripts to store mail in other folders or forward them to external accounts. And this are the problems I'm having: 1 - When users create a forward filter to redirect to external mail, mail that is stored inside the Junk folder are not forwarded; 2 - If I insert a "keep" parameter inside the sieve_before script to keep processing the rules, the mail is forwarded, but becomes duplicated and stored inside the inbox or other folders, if the user has more filters. 3 - If I move my sieve_before script to sieve_after, the same thing happened, one copy is stored on the user selected folder (inbox or filtered), including mail marked as SPAM. My needs are: I need to separate SPAM and HAM e-mail before users intervention (so I need sieve_before). But this SPAM e-mail has to be forwarded if a forward filter is created. Is it possible to use a sieve_after script that moves (instead of copy) the user mail marked as SPAM to the Junk folder even if it was stored in a different folder? Is that possible? Thanks a lot. Here is my config: sieve_after content: require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Junk"; } dovecot --version 2.2.10 # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.28.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_mechanisms = plain login auth_username_format = %Ln default_client_limit = 1024 default_process_limit = 1024 default_vsz_limit = 1 G mail_location = maildir:~/Maildir:INDEX=/var/indexes/dovecot/%u mail_plugins = " mail_log notify quota" mail_temp_dir = /var/tmp managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir quota_exceeded_message = Cota de armazenamento de e-mails excedida. Quota exceeded for mail store. quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=85%% quota-warning 85 %u quota_warning3 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/default.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } protocols = imap pop3 lmtp sieve service anvil { client_limit = 14100 process_limit = 1 } service auth-worker { client_limit = 1 process_limit = 50 service_count = 1 } service auth { client_limit = 15100 process_limit = 1 } service dict { client_limit = 1 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 6000 process_min_avail = 10 service_count = 1 vsz_limit = 256 M } service imap { process_limit = 3000 vsz_limit = 1 G } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_limit = 6000 process_min_avail = 10 service_count = 1 } service pop3 { process_limit = 3000 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 user = dovecot } user = root } ssl = required ssl_cert = ************** ssl_key = ************** userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = " mail_log notify quota sieve quota" } protocol imap { mail_plugins = " mail_log notify quota imap_quota" } Atenciosamente André Luiz Paiz Administração de Redes Instituto de Química – Unicamp andre.paiz(a)iqm.unicamp.br Telefone: (19)3521-0197

4 8

Use of obox2 and AWS S3
by Raymond Sellars 10 Sep '16

10 Sep '16

Hi Has anyone used or is using dovecot obox and S3 storage? I see very little chatter or documentation on it. Interested in how mature it is and technical items such as high availability and region replication. I'm guessing that multiple updates to a S3 mailbox is mitigated via the standard dovecot pattern of Director pointing multiple user sessions to a single/common dovecot node. And for disaster recovery - that's out of scope of dovecot and more reliant on S3 replication? Any one running a dovecot solution within AWS in general? Interested in best practice for the storage layer. Although NFS is possible its not really optimised for elastic cloud type hosting. Thanks Raymond

3 2

nouvelles incroyables!
by bunkertor 09 Sep '16

09 Sep '16

Hey, Ces nouvelles vont vous surprendre, je vous le dis! Jeter juste un coup d’œil <http://shavopriji.countrysummersblog.com/xowmhs> Je t'embrasse, bunkertor

1 0

sieve - find in header
by Hajo Locke 09 Sep '16

09 Sep '16

Hello list, have a problem with sieve script. I want to perform an action if an arbitrary headerline contains a defined string. I tried with regex: if header :regex [".*"] ["searchstri.*"] { fileinto "junk"; } This is not working because regex is only used in 2nd argument ["searchstri.*"] In 1st argument [".*"] no regex is used, sieve expects just plain string. Something like this would work, if "x-myheader" contains "searchstring": if header :regex ["x-myheader"] ["searchstri.*"].... How to solve this case and find a string in arbitrary/unknown headerline? Thanks, Hajo

4 5

Re: Dovecot 2.2.25 fails on SSL
by Joseph Tam 08 Sep '16

08 Sep '16

Andreas M. Kirchwitz writes: >> You can also affect where shared libraries are loaded using the >> LD_LIBRARY_PATH environment variable. Try adding >> >> LD_LIBARY_PATH=/location/of/libdir; export LD_LIBARY_PATH >> >> to your service boot scripts. > > Thanks for the advice. It's fine for a temporary working around > problems (like this one, so you're absolutely right :-) > > However, no program should require that for regular use because > you never know exactly if somebody in the chain of executed code > removes certain environment variables. And also the opposite way, > if Dovecot runs external programs, those might not play well > with an existing LD_LIBARY_PATH and incompatible SSL libraries. Sure, I understand this, but it's handy in lots of cases where you need to loading from an alternate location. Not everyone has access to resource to recompile. > For every program I compile myself, I link it against my custom > OpenSSL library (always newest version; distributions usually tend > to stick with a specific version and only apply security fixes). OK, the origin of your problem becomes clearer. You can hardcode these paths into the executables by doing something like env CFLAGS='-I/my'ssl/include' \ LDFLAGS='-L/your/ssl/lib -Wl,-rpath,/my/ssl/lib' \ configure ... I use this myself (except the -Wl part since these libs are symlinked to my shared library path). I think "-R/my/ssl/lib" might also be synonymous with -Wl,... > Dovecot is the only package I know of where there are like a thousand > places to put additional libs in the Makefile.am files, but most of > them are totally ignored by configure. I don't have that problem -- I use configure to tell dovecot where to find my self-compiled openssl, and the resulting executables load from where I want. Joseph Tam <jtam.home(a)gmail.com>

1 0

doveadm quota recalc returns a Segmentation fault
by Alessio Cecchi 07 Sep '16

07 Sep '16

Hi, with the latest dovecot-ee version (2.2.25.4 (5cb7c97)) if I run “doveadm quota recalc -u alessio(a)skye.xn--it-02t dovecot return a “Segmentation fault” (but the quota is update fine). Since dovecot version 2.2.24.3 (55cdc32) works fine. This is my quota backends configuration: plugin { quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota } dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } I found that if I comment the line “quota2 = dict:…” doveadm quota recalc works fine. I have two quota backends because with dict I can store everybody's current quota usage in a SQL database for fast retrieving (like quota_clone plugin but I cannot switch to it immediately). The backtrace: # gdb --args doveadm quota recalc -u alessio(a)skye.it GNU gdb (GDB) Red Hat Enterprise Linux (7.2-90.el6) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/doveadm...Reading symbols from /usr/lib/debug/usr/bin/doveadm.debug...done. done. (gdb) run Starting program: /usr/bin/doveadm quota recalc -u alessio(a)skye.it [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0x00007ffff73ed245 in io_loop_handler_run (ioloop=0x1006b1930) at ioloop.c:612 612 io_loop_handler_run_internal(ioloop); Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 cyrus-sasl-lib-2.1.23-15.el6_6.2.x86_64 dovecot-ee-pigeonhole-2.2.25.4-4.x86_64 glibc-2.12-1.192.el6.x86_64 nspr-4.11.0-1.el6.x86_64 nss-3.21.0-8.el6.x86_64 nss-softokn-freebl-3.14.3-23.3.el6_8.x86_64 nss-util-3.21.0-2.el6.x86_64 openldap-2.4.40-12.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x00007ffff73ed245 in io_loop_handler_run (ioloop=0x1006b1930) at ioloop.c:612 No locals. #1 0x00007ffff73ed3e8 in io_loop_run (ioloop=0x6b1930) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #2 0x00007ffff73ac45c in client_dict_wait (_dict=0x6b15f0) at dict-client.c:653 dict = 0x6b15f0 #3 0x00007ffff636f85f in dict_quota_deinit (_root=<value optimized out>) at quota-dict.c:106 root = 0x6b12f0 __FUNCTION__ = "dict_quota_deinit" #4 0x00007ffff636d326 in quota_root_deinit (root=0x6b12f0) at quota.c:279 pool = 0x6b1400 #5 0x00007ffff636d381 in quota_deinit (_quota=0x6aeae8) at quota.c:389 quota = 0x6ac0b0 roots = <value optimized out> i = <value optimized out> count = 2 #6 0x00007ffff637240d in quota_user_deinit (user=0x6ac7b0) at quota-storage.c:538 quser = 0x6aead8 quota_set = 0x6b07c0 #7 0x00007ffff76a9b52 in mail_user_unref (_user=<value optimized out>) at mail-user.c:174 user = 0x6ac7b0 __FUNCTION__ = "mail_user_unref" #8 0x00000000004216b4 in doveadm_mail_next_user (ctx=0x69bbe0, cctx=<value optimized out>, error_r=0x7fffffffe1c0) at doveadm-mail.c:403 input = {module = 0x0, service = 0x4569d9 "doveadm", username = 0x681288 "alessio(a)skye.it", session_id = 0x0, session_id_prefix = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = { family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0, debug = 0} error = <value optimized out> ip = <value optimized out> ret = <value optimized out> __FUNCTION__ = "doveadm_mail_next_user" #9 0x00000000004218dc in doveadm_mail_cmd_exec (ctx=0x69bbe0, cctx=0x7fffffffe400, wildcard_user=0x0) at doveadm-mail.c:592 ret = <value optimized out> error = <value optimized out> #10 0x0000000000422c7d in doveadm_cmd_ver2_to_mail_cmd_wrapper (cctx=0x7fffffffe400) at doveadm-mail.c:1053 mctx = 0x69bbe0 wildcard_user = <value optimized out> fieldstr = 0x456c52 "-u" i = <value optimized out> ---Type <return> to continue, or q <return> to quit--- mail_cmd = {alloc = 0x7ffff573fba0 <cmd_quota_recalc_alloc>, name = 0x7ffff573ffc5 "quota recalc", usage_args = 0x7ffff573ff7f ""} args_pos = <value optimized out> #11 0x00000000004303b6 in doveadm_cmd_run_ver2 (argc=3, argv=0x6883a0, cctx=0x7fffffffe400) at doveadm-cmd.c:523 param = <value optimized out> pargv = {arr = {buffer = 0x680a28, element_size = 104}, v = 0x680a28, v_modifiable = 0x680a28} pargc = <value optimized out> c = <value optimized out> li = 32767 pool = 0x680858 optbuf = 0x680870 __FUNCTION__ = "doveadm_cmd_run_ver2" #12 0x0000000000430467 in doveadm_cmd_try_run_ver2 (cmd_name=<value optimized out>, argc=3, argv=0x6883a0, cctx=0x7fffffffe400) at doveadm-cmd.c:446 cmd = <value optimized out> #13 0x0000000000432bdc in main (argc=4, argv=0x688398) at doveadm.c:379 cctx = {cmd = 0x69abf8, argc = 4, argv = 0x680a60, username = 0x681288 "alessio(a)skye.it", cli = true, tcp_server = false, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = { __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, conn = 0x0} cmd_name = <value optimized out> quick_init = false c = <value optimized out> (gdb) I hope can be fixed. Thanks -- Alessio Cecchi Postmaster AT http://www.qboxmail.it http://www.linkedin.com/in/alessice

2 2

Re: Dovecot 2.2.25 fails on SSL
by Joseph Tam 06 Sep '16

06 Sep '16

Aki Tuomi wrote: >>>> ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libdcrypt_openssl.so >>>> linux-gate.so.1 => (0x00dca000) >>>> libcrypto.so.1.0.0 => not found >>>> ... > > Well, then it leaves only option of using /etc/ld.so.conf > so basically add your libssl location there. You can also affect where shared libraries are loaded using the LD_LIBRARY_PATH environment variable. Try adding LD_LIBARY_PATH=/location/of/libdir; export LD_LIBARY_PATH to your service boot scripts. Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 06 Sep '16

06 Sep '16

Joseph Tam <jtam.home(a)gmail.com> wrote: > You can also affect where shared libraries are loaded using the > LD_LIBRARY_PATH environment variable. Try adding > > LD_LIBARY_PATH=/location/of/libdir; export LD_LIBARY_PATH > > to your service boot scripts. Thanks for the advice. It's fine for a temporary working around problems (like this one, so you're absolutely right :-) However, no program should require that for regular use because you never know exactly if somebody in the chain of executed code removes certain environment variables. And also the opposite way, if Dovecot runs external programs, those might not play well with an existing LD_LIBARY_PATH and incompatible SSL libraries. For every program I compile myself, I link it against my custom OpenSSL library (always newest version; distributions usually tend to stick with a specific version and only apply security fixes). For most packages (eg, Exim, Apache HTTP, BIND, INN, OpenSSH, Mutt, wget etc.) it pretty straightforward. Even if not, usually I can find a quick solution myself. Dovecot is the only package I know of where there are like a thousand places to put additional libs in the Makefile.am files, but most of them are totally ignored by configure. And even if I modify the Makefile files after configure, again most of the additional options get ignored. Never seen it that complicated. As Dovecot is my favorite IMAP daemon, there's no way I'm giving up. :-) I'm totally confident that the developers will find a good solution. And I'm happy to test every patch they come up with. Greetings, Andreas

1 0

Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed
by Thomas Leuxner 05 Sep '16

05 Sep '16

I'm seeing these recently: Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory Feb 27 09:24:01 nihlus dovecot: imap(tlx(a)leuxner.net): Error: istream-seekable: safe_mkstemp(/tmp/dovecot.imap.) failed: No such file or directory $ doveconf -n | head # 2.2.devel (f1a9b58): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (0de2a19) Regards Thomas

2 3

Strange result searching over fts_solr
by Davide Marchi 05 Sep '16

05 Sep '16

Hi to all, i have a strange issue if i search a series of messages through normal index on Sent folder my result is correct but if i make same search thrpough fts_solr result is much smaller on number of mails: - My solr version is 5.5.2 doveadm -Dv index -u davide.marchi(a)mail.cgilfe.it '*' no error this is my dovecot version and my doveconf - 2.2.23 (806d709) -# 2.2.23 (806d709): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 auth_master_user_separator = * auth_mechanisms = plain digest-md5 debug_log_path = /var/log/dovecot/dovecot-debug.log disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 imap_hibernate_timeout = 1 mins imap_id_log = * imap_idle_notify_interval = 1 mins info_log_path = /var/log/dovecot/dovecot.log last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 0.0.0.0 lmtp_rcpt_check_quota = yes log_path = /var/log/dovecot/dovecot-err.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = %u method=%m rip=%r lip=%l mpid=%e %c %k session=<%{session}> mail_fsync = never mail_gid = 89 mail_location = maildir:~/Maildir mail_plugins = " notify zlib quota fts fts_solr stats acl" mail_prefetch_count = 100 mail_uid = 89 mailbox_list_index = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/home/public/:INDEX=/mnt/ramdisk/public prefix = Public/ separator = / subscriptions = no type = public } passdb { args = /usr/local/etc/dovecot/passwd.masterusers driver = passwd-file master = yes pass = yes } passdb { driver = shadow } passdb { args = webmail=127.0.0.1 cache_key=%u%s driver = vpopmail } plugin { acl = vfile:/usr/local/etc/dovecot/dovecot-acl antispam_backend = crm114 antispam_crm_args = -u;/opt/crm114;--fileprefix=/opt/crm114/;--config=/usr/share/crm114/mailfilter.cf antispam_crm_binary = /usr/share/crm114/mailreaver.crm antispam_crm_notspam_arg = --good antispam_crm_spam_arg = --spam antispam_signature = X-CRM114-CacheID antispam_spam_pattern_ignorecase = crm-spam* antispam_trash_pattern_ignorecase = Trash* antispam_unsure_pattern_ignorecase = crm-unsure* mail_log_events = delete undelete expunge copy mail_log_fields = uid box msgid size mail_log_group_events = quota = maildir:User quota quota_rule = ?:storage=0 quota_rule2 = Trash:storage=+20%% quota_vsizes = yes quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /usr/local/lib/dovecot/sieve/default.sieve sieve_default = /usr/local/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/lib/dovecot/sieve/ stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz zlib_save_level = 9 } protocols = imap sieve lmtp service anvil { client_limit = 2048 } service auth { client_limit = 2048 unix_listener auth-master { group = vchkpw mode = 0600 user = vpopmail } unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 user = dovecot } } service imap-hibernate { unix_listener imap-hibernate { group = vchkpw mode = 0600 user = vpopmail } user = vpopmail } service imap-login { executable = /usr/local/libexec/dovecot/imap-login inet_listener imaps { address = 192.168.10.50 } process_limit = 1024 process_min_avail = 2 service_count = 0 } service imap { executable = /usr/local/libexec/dovecot/imap unix_listener imap-master { group = vchkpw mode = 0600 user = vpopmail } } service lmtp { executable = lmtp -L inet_listener lmtp { address = 192.168.10.50 127.0.0.1 ::1 port = 24 } process_min_avail = 5 unix_listener lmtp { group = vchkpw mode = 0600 user = vpopmail } } service managesieve-login { executable = managesieve-login inet_listener sieve { address = 0.0.0.0 port = 4190 } process_min_avail = 2 service_count = 0 } service managesieve { process_limit = 10 } service quota-warning { executable = script /usr/local/libexec/dovecot/quota-warning unix_listener quota-warning { mode = 0660 user = vpopmail } user = vpopmail } service stats { fifo_listener stats-mail { group = vchkpw mode = 0600 user = vpopmail } } ssl_cert = </var/qmail/control/servercert.pem ssl_dh_parameters_length = 2048 ssl_key = </var/qmail/control/servercert.pem ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } verbose_proctitle = yes protocol sieve { info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-error.log managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lmtp { auth_socket_path = /usr/local/var/run/dovecot/auth-userdb deliver_log_format = msgid=<%f>-<%s>-%m: %$ hostname = mail.cgilfe.it info_log_path = /var/log/dovecot/dovecot-lmtp.log log_path = /var/log/dovecot/dovecot-lmtp-err.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " notify zlib quota fts fts_solr stats acl mail_log sieve" postmaster_address = postmaster(a)mail.cgilfe.it rejection_reason = Il sistema ha rifiutato automaticamente il messaggio destinato a <%t> per il seguente motivo:%n%r rejection_subject = Messaggio Rifiutato: %s submission_host = 127.0.0.1 } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_max_line_length = 64 k mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " notify zlib quota fts fts_solr stats acl imap_quota mail_log antispam imap_zlib imap_stats imap_acl" } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-userdb deliver_log_format = msgid=<%f>-<%s>-%m: %$ hostname = mail.cgilfe.it info_log_path = /var/log/dovecot/dovecot-lda.log log_path = /var/log/dovecot/dovecot-lda-err.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " notify zlib quota fts fts_solr stats acl mail_log sieve" postmaster_address = postmaster(a)mail.cgilfe.it rejection_reason = Il sistema ha rifiutato automaticamente il messaggio destinato a <%t> per il seguente motivo:%n%r rejection_subject = Messaggio Rifiutato: %s submission_host = 127.0.0.1 -- DAVIDE MARCHI Teorema Ferrara Srl Via Spronello 7 - FERRARA - 44121 Tel. 0532783161 Fax. 0532783368 デイヴイツド THIS EMAIL AND ANY FILES TRANSMITTED WITH IT ARE CONFIDENTIAL AND INTENDED SOLELY FOR THE USE OF THE INDIVIDUAL OR ENTITY TO WHOM THEY ARE ADDRESSED. IF YOU HAVE RECEIVED THIS EMAIL IN ERROR PLEASE NOTIFY THE SYSTEM MANAGER. THIS MESSAGE CONTAINS CONFIDENTIAL INFORMATION AND IS INTENDED ONLY FOR THE INDIVIDUAL NAMED. IF YOU ARE NOT THE NAMED ADDRESSEE YOU SHOULD NOT DISSEMINATE, DISTRIBUTE OR COPY THIS E-MAIL. PLEASE NOTIFY THE SENDER IMMEDIATELY BY E-MAIL IF YOU HAVE RECEIVED THIS E-MAIL BY MISTAKE AND DELETE THIS E-MAIL FROM YOUR SYSTEM. IF YOU ARE NOT THE INTENDED RECIPIENT YOU ARE NOTIFIED THAT DISCLOSING, COPYING, DISTRIBUTING OR TAKING ANY ACTION IN RELIANCE ON THE CONTENTS OF THIS INFORMATION IS STRICTLY PROHIBITED.

1 0

Cannot subscribe to Public mailbox
by MI 04 Sep '16

04 Sep '16

I'm trying to set up a Public mailbox, but when I try to subscribe to it in Thunderbird, nothing happens: it doesn't appear as a folder, and when I go back to the Subscribe window, it is unchecked again. I use postfix local dlivery, which created a Maildir when a mail arrived for this mailbox: /home/others/sharedmail/Maildir/{cur,new,tmp} (sharedmail is a system user so that Postfix can deliver the mail; it doesn't have a login shell or a password) To make sure it is not a simple filesystem permissions problem, I did "chmod -R a+rwX Maildir/" This is my current config ( I tried to keep it short by leaving only what might be relevant ): # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.9 ... mail_location = maildir:~/Maildir namespace { list = yes location = maildir:/home/others/sharedmail/Maildir prefix = Public. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox ... ... } prefix = separator = . } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } userdb { driver = passwd } Also, I'm not sure about the difference between type=public and type=shared. But anyway, I tried both with the same result.

1 1

Alternate mail store of few users is disparaged unexpectedly
by Prakash Autade 02 Sep '16

02 Sep '16

Hello, We are using dovecot with mdbox and ALT store on S3(Simple Storage System). We export the mail_location=mdbox:/<user-mailstore>/mdbox:ALT=/altmailstore/<user-mailstore>/mdbox of user in extra parameters. Today, alternate mail store of few users is disparaged unexpectedly which resulted in mail loss. We are unable to trace out why and when the alternate store is disparaged. Our hypothesis is, the folder is removed during doveadm altmove. We want to prevent this in future. It will be great if someone helps to identify the root cause. Dovecot version: 2.2.19 # dovecot -n # 2.2.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-573.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final) auth_mechanisms = plain login auth_verbose_passwords = plain disable_plaintext_auth = no mail_fsync = always mail_gid = 65111 mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " quota" mail_uid = 65111 mdbox_rotate_interval = 1 days mdbox_rotate_size = 20 M mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { auto = create } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = create special_use = \Trash } mailbox chat { auto = create } prefix = INBOX. separator = . type = private } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } ssl_cert = </conf/server/server.crt ssl_key = </conf/server/server.key -- Sincerely, Prakash P. Autade.

1 0

Dovecot 2.2.25 fails on SSL
by Andreas M. Kirchwitz 02 Sep '16

02 Sep '16

Dear Dovecot developers! This problem already existed some years ago, has been fixed, and now it's there again in Dovecot 2.2.25 (2.2.24 was fine). I'm running CentOS 6 with a custom OpenSSL installation in /usr/local/ssl Therefore, Dovecot is configured like this: env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto -lssl" ./configure --prefix=/usr/local/Dovecot-2.2.25 --with-ssl=openssl --with-ssldir=/usr/local/Dovecot-2.2.25/etc/dovecot/certs With "pkg-config", the same options for SSL are provided. "make" and "make install" run just fine, and the daemon starts without any errors. However, if a user connects on port 993 (IMAPS), Dovecot logs this failure message to syslog: Jul 4 01:08:43 myhost dovecot: ssl-params: Fatal: Couldn't load required plugin /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so: dlopen() failed: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory Jul 4 01:08:43 myhost dovecot: ssl-params: Error: child process failed with status 22784 ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x00e8c000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00be4000) libc.so.6 => /lib/libc.so.6 (0x001a6000) libpthread.so.0 => /lib/libpthread.so.0 (0x003e4000) /lib/ld-linux.so.2 (0x007e7000) ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libdcrypt_openssl.so linux-gate.so.1 => (0x00dca000) libcrypto.so.1.0.0 => not found libssl.so.1.0.0 => not found librt.so.1 => /lib/librt.so.1 (0x00a7a000) libc.so.6 => /lib/libc.so.6 (0x00160000) libpthread.so.0 => /lib/libpthread.so.0 (0x0072f000) /lib/ld-linux.so.2 (0x00560000) When comparing to Dovecot 2.2.24: ldd /usr/local/Dovecot-2.2.24/lib/dovecot/libssl_iostream_openssl.so linux-gate.so.1 => (0x0073d000) libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00b04000) libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x0044a000) librt.so.1 => /lib/librt.so.1 (0x00a60000) libc.so.6 => /lib/libc.so.6 (0x001e5000) libdl.so.2 => /lib/libdl.so.2 (0x003a9000) libpthread.so.0 => /lib/libpthread.so.0 (0x009d0000) /lib/ld-linux.so.2 (0x00d77000) There's no libdcrypt_openssl.so in Dovecot 2.2.24, so I guess with the newly introduced dcrypt stuff something with SSL went wrong. Would be great if that could be fixed so that SSL works again. Thanks a lot in advance ... Andreas

3 6

index: namespace not selectable, and no info. :(
by Larry Rosenman 02 Sep '16

02 Sep '16

thebighonker.lerctr.org ~ $ doveadm -D -v index \#ARCHIVE/2012/02/INBOX Debug: Loading modules from directory: /usr/local/lib/dovecot Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib21_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/lib90_stats_plugin.so Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: Undefined symbol "acl_user_module" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: Undefined symbol "expire_set_lookup" (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: Undefined symbol "quota_user_module" (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so Debug: Module loaded: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(ler): Debug: Effective uid=1001, gid=1001, home=/home/ler doveadm(ler): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=~/mail/INBOX doveadm(ler): Debug: fs: root=/home/ler/mail, index=, indexpvt=, control=, inbox=/home/ler/mail/INBOX, alt= doveadm(ler): Debug: Namespace archive: type=private, prefix=#ARCHIVE/, sep=/, inbox=no, hidden=no, list=no, subscriptions=yes location=mbox:~/MAILARCHIVE doveadm(ler): Debug: mbox: INBOX defaulted to /home/ler/MAILARCHIVE/inbox doveadm(ler): Debug: fs: root=/home/ler/MAILARCHIVE, index=, indexpvt=, control=, inbox=/home/ler/MAILARCHIVE/inbox, alt= doveadm(ler): Error: lucene: Failed to sync mailbox INBOX: Mailbox isn't selectable doveadm(ler): Error: Mailbox #ARCHIVE/2012/02/INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2016-08-30 13:41:57] NOTHING additional is logged in syslog. doveconf -n attached. I **CAN** select the mailbox in mutt using #ARCHIVE/2012/02/INBOX -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 1

Force SSL/TLS and client certificate checking only for connections from Internet
by Konstantin Khomoutov 02 Sep '16

02 Sep '16

(Please CC me if possible.) I have Dovecot 2.2.13 (shipped with Debian 8 "Jessie") serving IMAP for a small organization. It's connected both to the Internet and to that organization LAN. I'd like to have Dovecot has rather tight security requirements for connections made from the Internet and reasonably laxed requirements for the LAN clients. Due to Dovecot authenticating users against a LDAP database which is also used for logging into the users' machines, we have to use somewhat weak passwords (randomly generated but short) for most users. Because of this I want to: * Mandate the usage of TLS for the connections made from Internet; * Require the clients to present their SSL certificates, and * Verify the validity of these certificates. The certificates are issued by our own CA, so it's not a problem to verify them. The first iteration was to set ssl = required and disable_plaintext_auth = yes which I then overrode with a "remote" section for LAN connections: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes } The next iteration was to actually enable verification of the client certificates. I have set the "ssl_ca" variable appropriately, then ssl_require_crl = yes ssl_verify_client_cert = yes and auth_ssl_require_client_cert = yes Then I went on and attempted to override the latter two settings for the LAN clients by appending them to my special "remote" section to it read: remote 192.168.0.0/16 { disable_plaintext_auth = no ssl = yes ssl_verify_client_cert = no auth_ssl_require_client_cert = no } But after restart Dovecot complained that I cannot use the "auth_ssl_require_client_cert" setting in a "remote" section. I have removed it in the hope that still having ssl_verify_client_cert = no there would inhibit SSL certificate checks for the LAN clients but apparently it did not. So, to recap: * I need to have tight TLS settings for the clients connecting from the Internet: - TLS is required; - The client must present a valid certificate (issued by a CA we control). * LAN clients should use relaxed security settings: TLS is okay but that's all. How do I go about setting this? (On a side note, I can supposedly get away installing stunnel and making it proxy IMAP and IMAPS connections to Dovecot -- at least from the documentation, it appears stunnel supports IMAP+STARTTLS, -- but I would rather have all this handled solely by Dovecot.)

1 0

Re: initd script does not stop/restart all dovecot processes
by Christian Kivalo 02 Sep '16

02 Sep '16

On 2016-09-02 12:15, Florent B wrote: > On 09/02/2016 11:57 AM, Aki Tuomi wrote: >>> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> >>> wrote: >>> >>> >> Hi >> >> You could look under /lib/systemd/system or similar. The .in file from >> repo gets a sed treatment during make install. >> >> Aki Tuomi > > Ok, but I use 2.2.24, and when I did "make install" from source, it did > not install any Dovecot service. Was it introduced in 2.2.25 ? "make > install" output does not show anything with "dovecot.service.in"... i use ./configure with --with-systemdsystemunitdir=/etc/systemd/system/ and that installs the systemd.service and socket > That's why I need to copy initd script by myself, and did the same with > systemd unit file when you suggested me to try it. -- Christian Kivalo

1 0

Re: initd script does not stop/restart all dovecot processes
by Aki Tuomi 02 Sep '16

02 Sep '16

> On September 2, 2016 at 12:16 PM Florent B <florent(a)coppint.com> wrote: > > Hi You could look under /lib/systemd/system or similar. The .in file from repo gets a sed treatment during make install. Aki Tuomi

1 0

Re: initd script does not stop/restart all dovecot processes
by Sami Ketola 02 Sep '16

02 Sep '16

> On 01 Sep 2016, at 17:25, Florent B <florent(a)coppint.com> wrote: > > Hi everyone, > > On Debian Jessie servers, I use initd script provided by Dovecot 2.2 (in > doc/dovecot-initd.sh) and when I stop or restart dovecot service, it > still remains some process : > > ps aux | grep dove > dovecot 1798 0.0 0.1 9408 2116 ? S 16:15 0:00 > dovecot/anvil [1 connections] > root 1799 0.0 0.1 9544 2288 ? S 16:15 0:00 dovecot/log > dovecot 1812 0.0 0.2 39144 5720 ? S 16:15 0:00 > dovecot/auth [0 wait, 0 passdb, 0 userdb] > root 1844 0.0 0.1 12728 2076 pts/0 S+ 16:16 0:00 grep dove > > > Is it expected ? "restart" does not work of course, and "start" after > "stop" too. > > How can I fix this ? Debian Jessie comes with systemd so you really should not use initscript anymore but switch to systemd for starting dovecot. There is systemd service description file available for you in case your vendor does not provide it in the package: https://github.com/dovecot/core/blob/master/dovecot.service.in Sami

2 1

dovecot and ldap with problem on userdb
by Averlon GmbH (in Gründung) 02 Sep '16

02 Sep '16

Hi, I have setup a new ubuntu on 16.04.. I have already a running system on 14.04 but wanted to migrate. I get an error when checking user in ldap. +++ Aug 31 18:14:16 auth: Error: ldap_bind Aug 31 18:14:16 auth: Error: ldap_simple_bind Aug 31 18:14:16 auth: Error: ldap_sasl_bind Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_new_connection 1 1 0 Aug 31 18:14:16 auth: Error: ldap_int_open_connection Aug 31 18:14:16 auth: Error: ldap_connect_to_host: TCP localhost:389 Aug 31 18:14:16 auth: Error: ldap_new_socket: 20 Aug 31 18:14:16 auth: Error: ldap_prepare_socket: 20 Aug 31 18:14:16 auth: Error: ldap_connect_to_host: Trying ::1 389 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: fd: 20 tm: 5 async: 0 Aug 31 18:14:16 auth: Error: ldap_ndelay_on: 20 Aug 31 18:14:16 auth: Error: attempting to connect: Aug 31 18:14:16 auth: Error: connect errno: 115 Aug 31 18:14:16 auth: Error: ldap_int_poll: fd: 20 tm: 5 Aug 31 18:14:16 auth: Error: ldap_is_sock_ready: 20 Aug 31 18:14:16 auth: Error: ldap_ndelay_off: 20 Aug 31 18:14:16 auth: Error: ldap_pvt_connect: 0 Aug 31 18:14:16 auth: Error: ldap_open_defconn: successful Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 1, origid 1, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 1 message type bind Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 1 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 1, msgid 1) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_search Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Aug 31 18:14:16 auth: Error: put_filter: AND Aug 31 18:14:16 auth: Error: put_filter_list "(objectClass=posixAccount)(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: "(objectClass=posixAccount)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "objectClass=posixAccount" Aug 31 18:14:16 auth: Error: put_filter: "(mail=info)" Aug 31 18:14:16 auth: Error: put_filter: simple Aug 31 18:14:16 auth: Error: put_simple_filter: "mail=info" Aug 31 18:14:16 auth: Error: ldap_send_initial_request Aug 31 18:14:16 auth: Error: ldap_send_server_request Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 2 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: * msgid 2, origid 2, status InProgress Aug 31 18:14:16 auth: Error: outstanding referrals 0, parent count 0 Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 1 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 msgid 2 message type search-result Aug 31 18:14:16 auth: Error: read1msg: ld 0x55b624137680 0 new referrals Aug 31 18:14:16 auth: Error: read1msg: mark request completed, ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: request done: ld 0x55b624137680 msgid 2 Aug 31 18:14:16 auth: Error: res_errno: 0, res_error: <>, res_matched: <> Aug 31 18:14:16 auth: Error: ldap_free_request (origid 2, msgid 2) Aug 31 18:14:16 auth: Error: ldap_parse_result Aug 31 18:14:16 auth: Error: ldap_first_attribute Aug 31 18:14:16 auth: Error: ldap_msgfree Aug 31 18:14:16 auth: Error: ldap_result ld 0x55b624137680 msgid -1 Aug 31 18:14:16 auth: Error: wait4msg ld 0x55b624137680 msgid -1 (timeout 0 usec) Aug 31 18:14:16 auth: Error: wait4msg continue ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Connections: Aug 31 18:14:16 auth: Error: * host: localhost port: 389 (default) Aug 31 18:14:16 auth: Error: refcnt: 1 status: Connected Aug 31 18:14:16 auth: Error: last used: Wed Aug 31 18:14:16 2016 Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Outstanding Requests: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 request count 0 (abandoned 0) Aug 31 18:14:16 auth: Error: ** ld 0x55b624137680 Response Queue: Aug 31 18:14:16 auth: Error: Empty Aug 31 18:14:16 auth: Error: ld 0x55b624137680 response count 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList ld 0x55b624137680 msgid -1 all 0 Aug 31 18:14:16 auth: Error: ldap_chkResponseList returns ld 0x55b624137680 NULL Aug 31 18:14:16 auth: Error: ldap_int_select Aug 31 18:16:18 auth: Error: ldap_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection 1 1 Aug 31 18:16:18 auth: Error: ldap_send_unbind Aug 31 18:16:18 auth: Error: ldap_free_connection: actually freed +++ The problem is this line: Aug 31 18:14:16 auth: Error: put_filter: "(&(objectClass=posixAccount)(mail=info))" Since the file to run the userdb contains this command: user_filter = (&(objectClass=posixAccount)(mail=%u)) Which should user the full name, in my case a full e-mail address. The postfix command is: virtual_transport = lmtp:unix:private/dovecot-lmtp When using: virtual_transport = dovecot The correct string is shown for %u. Here is dovecot conf. I don't believe this will cause the error. Anyhow. +++ dovecot -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS ext4 auth_mechanisms = plain login auth_username_format = %Ln debug_log_path = /var/log/dovecot/dovecot-debug.log info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log mail_gid = avvmail mail_location = maildir:/var/av_vmail/%d/%n:LAYOUT=fs mail_privileged_group = avvmail mail_uid = avvmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocols = pop3 imap lmtp service auth-worker { unix_listener auth-worker { user = root } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mode = 0666 user = } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = avvmail } ssl = required ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128 :+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDE A:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/ssl-cert-snakeoil.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/av_auth_ldap.conf driver = ldap } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = " quota imap_quota antispam" } +++ Please let me know what additional info I can provide to narrow the problem and get to a solution. By the way: When using: virtual_transport = dovecot I get another error with some file permissions on auth-userdb which I was not able to overcome sofar. Help appreciated. Mit freundlichenGrüßen / Kind Regards Kallewirsch

2 3

Dsync config help
by Jean-Luc Wasmer 01 Sep '16

01 Sep '16

Hi, I’m having a hard time with the http://wiki2.dovecot.org/Replication page. - for a master-master setup, does the configuration need to be mirrored on both masters? - after aggregating unrelated sections of the wiki page, there seems to be 3 different values for “mail_replica": - "remote”: for SSH - “remoteprefix": for SSH wrapper - “tcp”: for TCP connection using the Doveadm protocol Is this correct? - what’s the purpose of the replicator VS aggregator VS doveadm services? Who talks to who? Where can I find documentation about their configuration (i.e. not examples) - most examples are for a single vmail user setup… what should be done when using system accounts? Thanks, Jean-Luc

2 4

autoexpunge clarification
by Michael Fox 01 Sep '16

01 Sep '16

I'm trying to understand autoexpunge, but the documentation is just not clear. Hopefully, someone can clear up a few questions. http://wiki.dovecot.org/MailboxSettings says the following: autoexpunge=<time>: (v2.2.20+) Automatically at user deinitialization expunge all mails in this mailbox whose saved-timestamp is older than <time> (e.g. autoexpunge=30d). This removes the need for expire plugin <http://wiki.dovecot.org/Plugins/Expire> if you don't care that the expunging may not always happen in time. What does "at user deinitialization" mean? What does "if you don't care that the expunging may not always happen in time" mean? I read the sub-bullets but they just aren't clear. When exactly does autoexpunge occur? Thanks, Michael

2 4

Help setting up IMAP account in Outlook 2016
by Spiro Angeli 01 Sep '16

01 Sep '16

Hi, I need help setting up mail clients for my email accounts running on dovecot ver 2.2.18 on CentOS release 6.8 (Final) and Plesk Web Admin Edition in Italian. For better reading I posted a forum thread where you can get all detail info: Help setting up IMAP account in Outlook 2016 Forum link: http://www.emailquestions.com/threads/help-setting-up-imap-account-in-outloo k-2016.13439 I was advised to " ask dovecot list for help with the IMAP server. " So I did and a user kindly suggested me to customize "15-mailboxes.conf " file. I have some technical questions I need to ask. Hope someone knows the answers. As Plesk continuously updates itself and manages most of the server the majority of CentOS fils report this lines on top of each file: ## ## Authentication for Plesk mail users. ## # PLEASE DON'T EDIT ANYTHING IN THIS FILE! ANY CHANGES WILL BE LOST ON UPGRADE. So if I customize this "15-mailboxes.conf " I need to make sure that Plesk does not overwrite. Also I need to make sure that it gets updated if Dovecot changes in its settings. So, my first question is: how do I manage to keep this "15-mailboxes.conf " file updatable by OS (when I update system) but at the same time retain customizations upon system updates? Second question has to do with customization: Please consult attachment for this question a. I wish to see existing server folders (Draft, Sent, Spam, Trash) on my MS Outlook mail client software only in Italian and not in English. What should I do? Roundcube displays them in Italian. AquaMail (on Android) displays them in Italian. b. I was told to solve this server wise and not mail box per mailbox. Is this correct? c. Can you please share a complete customized code, for my needs, for this "15-mailboxes.conf " so I can learn from it? Thank you, Spiro

1 0

ACL List uses wrong namespace for permissions
by Harald Leithner 31 Aug '16

31 Aug '16

Hi, I'm using dovecot 2.2.devel (11c704a) with lazyexpunge and shared Mailboxes, this seams to work since the latest patch. There is only one problem creating the correct dovecot-acl-list, if I login as the normal user that has set permissions for another user everything is ok. If I login with the same user but with a modified roundcube that uses the #EXPUNGED Namespace as root, dovecot overrides the correct dovecot-acl-list with an empty version. I think this is the most interesting part of the log: 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: fs: root=/srv/storage1/vmail/company/628, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: initializing backend with data: vfile 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: acl username = user(a)company.at 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: owner = 1 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: Global ACLs disabled 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : type=private, prefix=#EXPUNGED/, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=mdbox:/srv/storage1/vmail/company/628:MAILBOXDIR=expunged 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: fs: root=/srv/storage1/vmail/company/628, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: initializing backend with data: vfile 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: acl username = user(a)company.at 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl: owner = 1 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: Global ACLs disabled 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : type=shared, prefix=#Users/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=mdbox:/srv/storage1/vmail%h 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/mailboxes/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace : Using permissions from /srv/storage1/vmail/company/628: mode=0700 gid=default 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/mailboxes/Drafts/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: Namespace #EXPUNGED/: Using permissions from /srv/storage1/vmail/company/628: mode=0700 gid=default 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/INBOX/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: file /srv/storage1/vmail/company/628/expunged/INBOX/test/dbox-Mails/dovecot-acl not found 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Debug: acl vfile: reading file /srv/storage1/vmail/company/628/mailboxes/INBOX/dbox-Mails/dovecot-acl 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Logged out in=178 out=870 2016-04-26T16:49:26+02:00 mailstore1 dovecot: imap(user(a)company.at): Logged out in=315 out=27172 regards, -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

2 1

Panic on cleanup
by Harald Leithner 31 Aug '16

31 Aug '16

Hi, I got a doveadm panic while running purge -A with 2.2.25 doveadm(x(a)itronic.at): Panic: file mdbox-map.c: line 1359: unreached doveadm(x(a)itronic.at): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x8dc6e) [0x7f2fe2022c6e] -> /usr/lib/dovecot/libdovecot.so.0(+0x8dce8) [0x7f2fe2022ce8] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f2fe1fc102e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_append_move+0x1ed) [0x7f2fe2301c0d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0xfe3) [0x7f2fe2303103] -> doveadm(+0x29458) [0x7f2fe2c7e458] -> doveadm(+0x2910f) [0x7f2fe2c7e10f] -> doveadm(+0x29db4) [0x7f2fe2c7edb4] -> doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x278) [0x7f2fe2c7fae8] -> doveadm(doveadm_cmd_run_ver2+0x560) [0x7f2fe2c8dfd0] -> doveadm(doveadm_cmd_try_run_ver2+0x37) [0x7f2fe2c8e027] -> doveadm(main+0x1e4) [0x7f2fe2c6f414] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f2fe1c0bb45] -> doveadm(+0x1a7ee) [0x7f2fe2c6f7ee] The command was run in a cleanup script that expunge old mails from the lazy-plugin. ---- #!/bin/sh # Permanently expunge old Trash doveadm expunge -A -d mailbox '#EXPUNGED/*' savedbefore 2w # Optimize mdbox storage and sis storage doveadm purge -A ---- After rerunning the command it fails again. stace could be found after config. config: # 2.2.devel (6d2fa6b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (3f51b82) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 auth_cache_negative_ttl = 1 secs auth_cache_size = 10 M auth_cache_ttl = 1 secs auth_mechanisms = PLAIN LOGIN DIGEST-MD5 SCRAM-SHA-1 CRAM-MD5 APOP auth_verbose = yes default_client_limit = 600 default_vsz_limit = 512 M dict { lastlogin = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlacl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 hostname = mailstore1(a)itronic.at imap_hibernate_timeout = 1 mins imap_id_log = * imap_id_send = * imap_idle_notify_interval = 10 mins instance_name = mailstore1 last_valid_gid = 1001 last_valid_uid = 1001 lda_original_recipient_header = X-LDA-Original-To lmtp_rcpt_check_quota = yes login_greeting = ITronic Mail Store login_trusted_networks = 172.22.14.0/24 mail_attachment_dir = /srv/storage1/vmail_sis mail_attachment_hash = %{sha512} mail_attachment_min_size = 64 k mail_cache_min_mail_count = 5 mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = zlib lazy_expunge stats acl quota mail_prefetch_count = 100 mail_server_admin = mailto:postmaster@itronic.at mail_server_comment = ITronic Mail System mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_preallocate_space = yes namespace { hidden = yes list = no location = mdbox:~/mdbox:MAILBOXDIR=expunged prefix = "#EXPUNGED/" subscriptions = no type = private } namespace { list = children location = mdbox:%%h/mdbox prefix = "#Users/%%u/" separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes location = mailbox Archvie { special_use = \Archive } mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::sqlacl last_login_dict = proxy::lastlogin last_login_key = last-login/%u lazy_expunge = "#EXPUNGED/" lazy_expunge_only_last_instance = no quota = dict:User quota::proxy::sqlquota quota_grace = 10%% quota_rule = *:storage=1024M quota_rule2 = "#EXPUNGED:storage=+100M" quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_global = /etc/dovecot/sieve sieve_max_actions = 64 sieve_max_redirects = 8 sieve_max_script_size = 2M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 64M stats_refresh = 30 secs stats_track_cmds = yes zlib_save = gz zlib_save_level = 6 } pop3_uidl_duplicates = rename protocols = imap lmtp sieve pop3 sieve service auth-worker { user = $default_internal_user } service auth { inet_listener { port = 4180 } unix_listener auth-userdb { mode = 0666 } } service dict { unix_listener dict { group = vmail mode = 0666 } } service imap-hibernate { unix_listener imap-hibernate { group = vmail mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 0 } service imap { process_limit = 1024 unix_listener imap-master { user = dovecot } unix_listener imap { group = vmail mode = 0666 } vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 172.22.14.135 port = 24000 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 50 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 20 service_count = 1 vsz_limit = 64 M } service pop3 { process_limit = 1024 } service quota-warning { executable = script /opt/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } shutdown_clients = no ssl_cert = </etc/dovecot/private/STAR.itronic.at.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-CAMELLIA256-SHA:CAMELLIA128-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/dovecot/private/STAR.itronic.at.pem ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 submission_host = 172.22.14.198 syslog_facility = local0 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /srv/storage1/vmail verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 mail_plugins = zlib lazy_expunge stats imap_stats quota imap_quota acl imap_acl last_login } protocol lda { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol lmtp { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol sieve { mail_max_userip_connections = 10 managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = zlib lazy_expunge stats acl last_login } strace: open("/srv/storage1/vmail/itronic/7/mdbox/storage/m.4184", O_RDWR) = 22 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 pread(22, "2 M1e C577baa0d\n\1\2N 000"..., 8192, 0) = 8192 flock(22, LOCK_EX|LOCK_NB) = 0 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/m.4184", {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 fstat(22, {st_mode=S_IFREG|0644, st_size=38285, ...}) = 0 pread(19, "\1\2N 0000000000000BE3\n\37\213"..., 8192, 1889547) = 8192 pwrite(22, "\1\2N 0000000000000BE3\n\37\213"..., 3073, 38285) = 3073 .... pread(19, "\1\2N 00000000000003CA\n\37\213"..., 8192, 2095957) = 1078 pwrite(22, "\n\1\3\nZ1510\nR532d6d69\nV1574\nGc74fb"..., 1094, 244601) = 1094 pwrite(21, "\n\1\3\nZ62903b\nR576a94d0\nV63ea34\nG9"..., 632, 2094401) = 632 fdatasync(21) = 0 pwrite(20, "\n\1\3\nZ44ef\nR523ab092\nV467e\nG524f7"..., 94, 2095470) = 94 fdatasync(20) = 0 pwrite(22, "\n\1\3\nZ73b\nR570f7b1b\nV790\nGa658d91"..., 78, 245695) = 78 fdatasync(22) = 0 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/dovecot.map.index.log.2", {st_mode=S_IFREG|0644, st_size=37848, ...}) = 0 alarm(180) = 0 fcntl(17, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0 alarm(0) = 180 stat("/srv/storage1/vmail/itronic/7/mdbox/storage/dovecot.map.index.log", {st_mode=S_IFREG|0644, st_size=5160, ...}) = 0 fstat(17, {st_mode=S_IFREG|0644, st_size=5160, ...}) = 0 write(2, "doveadm(lord(a)itronic.at): Panic:"..., 72doveadm(lord(a)itronic.at): Panic: file mdbox-map.c: line 1359: unreached ) = 72 open("/usr/lib/dovecot/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 23 fstat(23, {st_mode=S_IFREG|0644, st_size=17246, ...}) = 0 mmap(NULL, 17246, PROT_READ, MAP_PRIVATE, 23, 0) = 0x7f0033cca000 close(23) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/x86_64-linux-gnu/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 23 read(23, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260*\0\0\0\0\0\0"..., 832) = 832 fstat(23, {st_mode=S_IFREG|0644, st_size=90096, ...}) = 0 mmap(NULL, 2185952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 23, 0) = 0x7f002ed5b000 mprotect(0x7f002ed71000, 2093056, PROT_NONE) = 0 mmap(0x7f002ef70000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 23, 0x15000) = 0x7f002ef70000 close(23) = 0 munmap(0x7f0033cca000, 17246) = 0 futex(0x7f0032d9e190, FUTEX_WAKE_PRIVATE, 2147483647) = 0 futex(0x7f002ef70850, FUTEX_WAKE_PRIVATE, 2147483647) = 0 write(2, "doveadm(lord(a)itronic.at): Error:"..., 860doveadm(lord(a)itronic.at): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x8dc6e) [0x7f0032e2dc6e] -> /usr/lib/dovecot/libdovecot.so.0(+0x8dce8) [0x7f0032e2dce8] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f0032dcc02e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_map_append_move+0x1ed) [0x7f003310cc0d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_purge+0xfe3) [0x7f003310e103] -> doveadm(+0x29458) [0x7f0033a89458] -> doveadm(+0x2910f) [0x7f0033a8910f] -> doveadm(+0x29db4) [0x7f0033a89db4] -> doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x278) [0x7f0033a8aae8] -> doveadm(doveadm_cmd_run_ver2+0x560) [0x7f0033a98fd0] -> doveadm(doveadm_cmd_try_run_ver2+0x37) [0x7f0033a99027] -> doveadm(main+0x1e4) [0x7f0033a7a414] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f0032a16b45] -> doveadm(+0x1a7ee) [0x7f0033a7a7ee] ) = 860 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0 tgkill(5682, 5682, SIGABRT) = 0 --- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=5682, si_uid=0} --- +++ killed by SIGABRT +++ [1] 5679 abort strace doveadm purge -A -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

2 2

Automatic purging of old email in all mailboxes
by Scott W. Sander 30 Aug '16

30 Aug '16

I am using a postfix + Dovecot server as a test mail server for which some applications in our test environment use as a target to deliver email so that our real endusers don't receive messages from our test servers. A few of the mailboxes in Dovecot receive hundreds of emails per day. I'd like to automatically remove all emails in all mailboxes and mailbox folders that were received more than 90 days prior to the received date. As I'm a novice Dovecot administrator, I'm not exactly sure what the best way to accomplish this is, but I've started looking at the "doveadm expunge" command. I figure I could create a cron job that calls this command with the -A switch and that has a search query that finds all emails older than 90 days. I'm aware that I can test my query by using the "doveadm search" command. The problem is that when I do any sort of search query with that command (e.g. "doveadm search -A NEW"), I receive the following error messages: Error: User listing returned failure doveadm: Error: Failed to iterate through some users I've searched for help with this error, but most of the guidance I'm seeing refers to making sure that dovecot-sql is configured correctly; however, I'm using "passwd-file" for the passdb and not a true database. Here is doveconf -n: ------- # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS ext4 auth_mechanisms = plain login hostname = mail.domain.test info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_location = maildir:/var/mail/vhosts/%d/%n namespace inbox { inbox = yes location = mailbox "Deleted Items" { special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox "Junk E-Mail" { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Items" { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=PLAIN username_format=%u /etc/dovecot/dovecot-users driver = passwd-file } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/ssl/certs/appserver4_combined.pem ssl_key = </etc/ssl/private/appserver4_key.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } ------- Thank you in advance!

6 7

Sub addressing delimiters
by Kurt Fitzner 30 Aug '16

30 Aug '16

Hello, There is a disconnect between the way Postfix handles recipient_delimiter and the way Dovecot handles it. For Postfix, it is a set of delimiters that can each individually be used to separate the address from the . In Dovecot, having multiple characters in recipient_delimiters simply makes it a multi-character single delimiter. For my purposes, the Postfix method is much more versatile. Extra delimiters can be added without breaking the way users currently have delimiters. I am wondering what the odds are of reconciling the two approaches, hopefully in favour of the Postfix one. Failing a switch to the other behaviour, is it possible to add the Postfix method as an option? Would a patch for either of these be accepted? Thanks, Kurt Fitzner

5 5

Last Login Plugin with mysql
by Adrian M 30 Aug '16

30 Aug '16

Hello, is it possible to use Last Login Plugin with mysql instead of redis ? http://wiki2.dovecot.org/Plugins/LastLogin .-- Best regards, Adrian Minta

2 2

Move dovecot between servers
by Gandalf Corvotempesta 30 Aug '16

30 Aug '16

Hi to all I have a very old dovecot server (1.2.15) with about 195GB used and 1081 email accounts. I have to move this server to another one with contextual dovecot upgrade. Anyone did this before? Any advice? Obviously, existing emails *must not* be downloaded twice by existing clients (outlook, thunderbird, ...) I have no access to customer's clients, only to my server.

2 2

2.2.25 dumps core with "Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL)"
by Piper Andreas 30 Aug '16

30 Aug '16

Hello, Dovecot 2.2.25 OS: Solaris 11 (SunOS 5.11 11.3 i86pc i386 i86pc) Virtualization: VMware Filesystem: ZFS active users: ~4000 About once a day Dovecot crashes with "Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL)" The log shows in each case: Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.crit] imap(username): Panic: file imap-client.c: line 837 (client_check_command_hangs): assertion failed: (client->io != NULL) Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.error] imap(username): Error: Raw backtrace: 0xffff80ffb6f3d88d -> 0xffff80ffb6f6ae82 -> 0x41eba0 -> 0x41ecf3 -> 0xffff80ffb6f5d248 -> 0xffff80ffb6f50d2f -> 0xffff80ffb6f519e0 -> 0xffff80ffb6f50dce -> 0xffff80ffb6f50f90 -> 0xffff80ffb6ee3ebb -> 0x42f169 -> 0x41292c Aug 29 12:59:00 surz113 dovecot: [ID 583609 mail.crit] imap(username): Fatal: master: service(imap): child 1461 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) It happens with different users, all with mailbox-sizes of 9 to 17 GByte. The server stops completely for all users with this Panic and is then restarted automatically from Solaris Service Management. Find attached the output of 'doveconf -n'. Please let me know, if you need any more infos. Thanks for any help on this issue, Andreas, postmaster(a)uni-marburg.de

3 3

Re: Automatic purging of old email in all mailboxes
by Joseph Tam 30 Aug '16

30 Aug '16

"Scott W. Sander" <scottwsx96(a)gmail.com> writes: > A few of the mailboxes in Dovecot receive hundreds of emails per day. I'd > like to automatically remove all emails in all mailboxes and mailbox > folders that were received more than 90 days prior to the received date. > As I'm a novice Dovecot administrator, I'm not exactly sure what the best > way to accomplish this is, but I've started looking at the "doveadm > expunge" command. I figure I could create a cron job that calls this > command with the -A switch and that has a search query that finds all > emails older than 90 days. That more of less what I do. doveadm expunge -A mailbox INBOX savedbefore 7d > Error: User listing returned failure > doveadm: Error: Failed to iterate through some users I think this may be avoided (or made into warnings) if you bracket all user UID ranges with first_valid_uid = {first user uid} last_valid_uid = {last user uid} Sean Greenslade <sean(a)seangreenslade.com> then writes: > Since you're using maildirs as the storage backend, it might be easier > to just write a small script in the language of your preference (bash, > python, perl, etc.) that walks the directory tree and deletes files > based on their mtime. The downside is that the Dovecot caches will be out of date. Perhaps follow this up with a "doveadm index ..." operation. Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: maildirsize not correct
by Aki Tuomi 29 Aug '16

29 Aug '16

Does it work if you do? ---Aki TuomiDovecot oy -------- Original message --------From: Kamil Madac <kamil.madac(a)gmail.com> Date: 26/08/2016 20:51 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: dovecot(a)dovecot.org Subject: Re: maildirsize not correct Hi Aki, No I do not use it. On Thu, Aug 25, 2016 at 7:32 AM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: Are you using quota_vsizes=yes? Aki On 24.08.2016 21:39, Kamil Madac wrote: > Thanks, but this is most probably different issue. My maildirsize is > computed incorrectly even if I delete it completely and let dovead > recompute it so expunging is not in the game. > > Is there any way how to track/debug the recomputation algorithm in dovecot? > > On Wed, Aug 24, 2016 at 12:02 AM, WJCarpenter <bill-dovecot(a)carpenter.org> > wrote: > >> A long shot, but here's how I experienced similar symptoms: >> http://www.dovecot.org/list/dovecot/2016-April/104091.html >> >> >> >> Kamil Madac wrote on 08/23/2016 02:02 PM: >> >>> Hi, >>> >>> One of my email accounts has 1,5gb of emails in INBOX, but maildirsize >>> shows only 528mb. 'du' also shows 1,5gb and there are 3809 files in cur >>> directory. >>> >>> When I use mailbox status a can see correct values: >>> >>> doveadm -f table mailbox status -u user(a)domain.sk "messages vsize" INBOX* >>> messages >>> vsize >>> >>> INBOX 3809 1521049349 >>> >>> but when I check the quotas with doveadm: >>> >>> doveadm quota get -u user(a)domain.sk >>> Quota name Type Value >>> Limit >>> % >>> User quota STORAGE 541391 >>> 2048000 >>> 26 >>> User quota MESSAGE 886 >>> - >>> 0 >>> >>> I tried to delete maildirsize, but it was recalculated again incorrectly. >>> >>> 2097152000S >>> 554384829 886 >>> >>> Dovecot version is 2.2.9 installed from packages on Ubuntu 14.04 >>> I have other accounts on server which are have no problems with >>> maildirsize >>> and quotas. Does anyone have same experience? >>> >>> Kamil >>> > -- Kamil Madac

2 1

sieve-filter with duplicate-extension
by hendrik＠luecke-tieke.de 26 Aug '16

26 Aug '16

Hi, i have imported a mailbox twice (accentially). Now i thought, it might be a valid approach to simply use a custom sieve rule to mark duplicates using the attached ruleset I ran sieve-filter like this: ~# sieve-filter -e -W -v -C -u userxyz(a)example.com /var/vmail/example.com/userxyz/sieve/duplicates.sieve 'INBOX' But sieve-filter complains like this: info: msgid=<1231321313212312312312(a)p3enginer2.emv2.com>: left message in mailbox 'INBOX'. info: message kept in source mailbox. info: filtering: [Sun, 1 May 2011 16:41:46 +0100; 101297 bytes] `Cipo & Baxx, Nike Golf, Strenesse, al...'. roundcube2: line 3: warning: duplicate test: duplicate checking not available in this context. info: msgid=<1123123123123123(a)p3enginer3.emv2.com>: left message in mailbox 'INBOX'. info: message kept in source mailbox. info: filtering: [Sun, 28 Oct 2012 11:32:56 +0100; 1416 bytes] `DenyHosts Report for example.com'. roundcube2: line 3: warning: duplicate test: duplicate checking not available in this context. Is there a way, to refilter an existing mailbox and applying the duplicate extension? Many thanks and best regards, Hendrik

2 1

quota-status service rejecting plus addressed recipients
by Robert Brooks 26 Aug '16

26 Aug '16

Hi, I have "recipient_delimiter = +" set in my Dovecot config, however the Dovecot quota-status service is rejecting with "Unknown user" plus addressed recipients. Talking to the policy server we have... # telnet localhost 12340 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > recipient=user(a)example.com > > action=OK > > recipient=user+foo(a)example.com > > action=REJECT Unknown user > I can mask the issue with "quota_status_nouser = DUNNO", but then over quota messages are not rejected when plus addressed. quota-status service config is... service quota-status { > executable = quota-status -p postfix > inet_listener { > address = localhost > port = 12340 > # You can choose any port you want > } > client_limit = 1 > } > Regards, Rob

1 0

maildirsize not correct
by Kamil Madac 26 Aug '16

26 Aug '16

Hi, One of my email accounts has 1,5gb of emails in INBOX, but maildirsize shows only 528mb. 'du' also shows 1,5gb and there are 3809 files in cur directory. When I use mailbox status a can see correct values: doveadm -f table mailbox status -u user(a)domain.sk "messages vsize" INBOX* messages vsize INBOX 3809 1521049349 but when I check the quotas with doveadm: doveadm quota get -u user(a)domain.sk Quota name Type Value Limit % User quota STORAGE 541391 2048000 26 User quota MESSAGE 886 - 0 I tried to delete maildirsize, but it was recalculated again incorrectly. 2097152000S 554384829 886 Dovecot version is 2.2.9 installed from packages on Ubuntu 14.04 I have other accounts on server which are have no problems with maildirsize and quotas. Does anyone have same experience? Kamil

3 4

Help setting up IMAP account in Outlook 2016
by Spiro Angeli 26 Aug '16

26 Aug '16

Hi, I need help setting up properly mail clients for my email accounts running on dovecot ver 2.2.18 on CentOS release 6.8 (Final) in italian. I posted a forum thread where you can get all detail info: this for better reading. Forum thread subject: Help setting up IMAP account in Outlook 2016 Forum link: http://www.emailquestions.com/threads/help-setting-up-imap-account-in-outloo k-2016.13439 I was advised to " ask dovecot list for help with the IMAP server. " Thank you, Spiro

2 2

lazy_expunge and public folder
by Arne Hoffmann 26 Aug '16

26 Aug '16

Hi all, I stumbled upon the lazy_expunge plugin and thought that it might be useful in some cases. It works fine if I delete mails from my inbox. But it doesn't do anything if I deleted mails from a public folder (and for the server I am currently working on the public folder is _the_ _main_ _feature_). Does lazy_expunge not work with public folders? Or am I using it wrong? root@imap01 [~]# doveconf -n # 2.2.24 (a82c823): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 ext4 auth_debug = yes auth_debug_passwords = yes debug_log_path = /var/log/mail.debug disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 22001 mail_debug = yes mail_location = maildir:/var/mail/vmail/%d/%n/Maildir:INBOX=/var/mail/vmail/%d/%n/Maildir mail_plugins = " listescape lazy_expunge notify replication" mail_privileged_group = vmail namespace { location = maildir:/var/mail/vmail/Öffentliche Ordner:INDEXPVT=~/Maildir/Öffentliche Ordner mailbox "Gelöschte Elemente" { auto = subscribe special_use = \Trash } mailbox MirrorServer-Projekt { auto = subscribe } prefix = Öffentliche Ordner/ separator = / subscriptions = no type = public } namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = .EXPUNGED/ separator = / } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/mysql.conf driver = sql } plugin { lazy_expunge = .EXPUNGED/ mail_replica = tcps:imap02.example.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service doveadm { inet_listener { port = 22001 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = vmail mode = 0660 } } ssl = required ssl_ca = </etc/ssl/os/cert-sub-ca1-and-root-ca.pem ssl_cert = </etc/ssl/os/cert-imap01-example.com.pem ssl_client_ca_file = /etc/ssl/os/cert-all.pem ssl_client_cert = </etc/ssl/os/cert-imap01-example.com.pem ssl_client_key = </etc/ssl/os/key-imap01-example.com.pem ssl_key = </etc/ssl/os/key-imap01-example.com.pem ssl_require_crl = no userdb { args = /etc/dovecot/mysql.conf driver = sql } root@imap01 [~]#

1 0

Allow selection of safe curves in dovecot
by Ruga 26 Aug '16

26 Aug '16

http://safecurves.cr.yp.to

2 1

Change dovecot hostname
by Scott W. Sander 25 Aug '16

25 Aug '16

I have noticed that the name of my private server running dovecot appears in email headers rather than the public-friendly name of my server. Is there a method to specify an alternate server name for the dovecot server to use for itself in the dovecot configuration files? I performed a few Google searches and was not able to find the answer to my question. ------- user@server1:~$ dovecot --version 2.2.9 user@server1:~$ dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-77-generic x86_64 Ubuntu 14.04.4 LTS ext4 auth_mechanisms = plain login info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log mail_location = maildir:/var/mail/vhosts/%d/%n namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=PLAIN username_format=%u /etc/dovecot/dovecot-users driver = passwd-file } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/ssl/certs/server1_combined.pem ssl_key = </etc/ssl/private/server1_key.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static }

3 5

Possible IMAP IDLE bug in Dovecot 2.2.18 and 2.2.25
by cleber-listas＠inetweb.com.br 24 Aug '16

24 Aug '16

Hello Guys, I guess that I found a bug in Dovecot 2.2.18 and 2.2.25 versions. The problem it's when I try to connect in a Dovecot used a proxy to another e-mail server (in our case it's a Smartermail Server) the DoveCot send a lot of IDLE commands to the destination server. With that, the LOG files grow and grow and grow :( I make a test with 1 connection only and if you see the log file in the same second the dovecot send 25, 40 IDLE commands. But, when I disconnect the client (outlook 2013) the dovecot continue to send the IDLE command for some seconds. If I try to connect directly to Smartermail with Outlook this don't occurrs. Bellow the LOG FILE: 16:08:08 [192.168.202.11][21425199] connected at 22/08/2016 16:08:08 16:08:08 [192.168.202.11][21425199] command: C CAPABILITY 16:08:09 [192.168.202.11][21425199] command: L LOGIN "cleber(a)testdomain.com.br" XXXX 16:08:09 [192.168.202.11][21425199] cleber(a)testdomain.com.br logged in 16:08:09 [192.168.202.11][21425199] command: 36mc IDLE 16:08:09 [192.168.202.11][21425199] command: 2x04 ID ("name" "Microsoft Outlook" "version" "15.0.4849.1000") 16:08:09 [192.168.202.11][21425199] response: 2x04 BAD Command does not exist or is not implemented 16:08:09 [192.168.202.11][21425199] command: g4zp LSUB "" "*" 16:08:09 [192.168.202.11][21425199] command: pv81 IDLE 16:08:09 [192.168.202.11][21425199] command: 2it1 SELECT "INBOX" 16:08:09 [192.168.202.11][21425199] response: * 912 EXISTS 16:08:09 [192.168.202.11][21425199] response: * 0 RECENT 16:08:09 [192.168.202.11][21425199] response: * OK [UNSEEN 904] Message 904 is first unseen 16:08:09 [192.168.202.11][21425199] response: * OK [UIDVALIDITY 1] UIDs valid 16:08:09 [192.168.202.11][21425199] response: * OK [UIDNEXT 26830] Predicted next UID 16:08:09 [192.168.202.11][21425199] response: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) 16:08:09 [192.168.202.11][21425199] response: * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft)] 16:08:09 [192.168.202.11][21425199] response: 2it1 OK [READ-WRITE] SELECT completed 16:08:09 [192.168.202.11][21425199] command: a6tj IDLE 16:08:09 [192.168.202.11][21425199] command: bn09 FETCH 912 (UID) 16:08:09 [192.168.202.11][21425199] command: 78b6 IDLE 16:08:09 [192.168.202.11][21425199] command: q13w UID FETCH 1:26829 (UID FLAGS) 16:08:09 [192.168.202.11][21425199] command: p02s IDLE 16:08:09 [192.168.202.11][21425199] command: 9de9 IDLE 16:08:09 [192.168.202.11][21425199] command: xjyf IDLE 16:08:09 [192.168.202.11][21425199] command: holb IDLE 16:08:09 [192.168.202.11][21425199] command: sfbq IDLE 16:08:09 [192.168.202.11][21425199] command: tuvb IDLE 16:08:09 [192.168.202.11][21425199] command: hv13 IDLE 16:08:09 [192.168.202.11][21425199] command: ctgw IDLE 16:08:09 [192.168.202.11][21425199] command: s00g IDLE 16:08:09 [192.168.202.11][21425199] command: 9zx1 IDLE 16:08:09 [192.168.202.11][21425199] command: dtu2 IDLE 16:08:09 [192.168.202.11][21425199] command: 1brp IDLE 16:08:09 [192.168.202.11][21425199] command: vhds IDLE 16:08:09 [192.168.202.11][21425199] command: cp9s IDLE 16:08:09 [192.168.202.11][21425199] command: hx1b IDLE 16:08:09 [192.168.202.11][21425199] command: 6thy IDLE 16:08:09 [192.168.202.11][21425199] command: 4ert IDLE 16:08:09 [192.168.202.11][21425199] command: cy32 IDLE 16:08:09 [192.168.202.11][21425199] command: z7ku IDLE 16:08:09 [192.168.202.11][21425199] command: xeqd IDLE 16:08:09 [192.168.202.11][21425199] command: gqis IDLE 16:08:09 [192.168.202.11][21425199] command: bdz2 IDLE 16:08:09 [192.168.202.11][21425199] command: zzyq IDLE 16:08:09 [192.168.202.11][21425199] command: 41do IDLE 16:08:09 [192.168.202.11][21425199] command: 7k73 IDLE 16:08:10 [192.168.202.11][21425199] command: 5989 IDLE 16:08:10 [192.168.202.11][21425199] command: lyt4 IDLE 16:08:10 [192.168.202.11][21425199] command: 8ji4 IDLE 16:08:10 [192.168.202.11][21425199] command: pt5b IDLE 16:08:10 [192.168.202.11][21425199] command: ha2s IDLE 16:08:10 [192.168.202.11][21425199] command: ay0x IDLE 16:08:10 [192.168.202.11][21425199] command: t66x IDLE 16:08:10 [192.168.202.11][21425199] command: pf4j IDLE 16:08:10 [192.168.202.11][21425199] command: 2q5x IDLE 16:08:10 [192.168.202.11][21425199] command: wdup IDLE 16:08:10 [192.168.202.11][21425199] command: ii7b IDLE 16:08:10 [192.168.202.11][21425199] command: 2g4k IDLE 16:08:10 [192.168.202.11][21425199] command: lxxg IDLE 16:08:10 [192.168.202.11][21425199] command: vilu IDLE 16:08:10 [192.168.202.11][21425199] command: ms05 IDLE 16:08:10 [192.168.202.11][21425199] command: 8ugb IDLE 16:08:10 [192.168.202.11][21425199] command: 1vfo IDLE 16:08:10 [192.168.202.11][21425199] command: s78s IDLE 16:08:10 [192.168.202.11][21425199] command: 7h2k IDLE 16:08:10 [192.168.202.11][21425199] command: 0het IDLE 16:08:10 [192.168.202.11][21425199] command: rgj7 IDLE 16:08:10 [192.168.202.11][21425199] command: myx3 IDLE 16:08:10 [192.168.202.11][21425199] command: oi5h IDLE 16:08:10 [192.168.202.11][21425199] command: p4mr IDLE 16:08:10 [192.168.202.11][21425199] command: z0dn IDLE 16:08:10 [192.168.202.11][21425199] command: ivj4 IDLE 16:08:10 [192.168.202.11][21425199] command: vxt4 IDLE 16:08:10 [192.168.202.11][21425199] command: mj9c IDLE 16:08:10 [192.168.202.11][21425199] command: 0cf3 IDLE 16:08:10 [192.168.202.11][21425199] command: u215 IDLE 16:08:10 [192.168.202.11][21425199] command: czw6 IDLE 16:08:10 [192.168.202.11][21425199] command: t3nw IDLE 16:08:10 [192.168.202.11][21425199] command: ixmt IDLE 16:08:10 [192.168.202.11][21425199] command: o3qi IDLE 16:08:10 [192.168.202.11][21425199] command: ca1l IDLE 16:08:10 [192.168.202.11][21425199] command: 3r67 IDLE 16:08:10 [192.168.202.11][21425199] command: 8rmq IDLE 16:08:10 [192.168.202.11][21425199] command: yi76 IDLE 16:08:10 [192.168.202.11][21425199] command: 7doe IDLE 16:08:10 [192.168.202.11][21425199] command: 1xzf IDLE 16:08:10 [192.168.202.11][21425199] command: y78i IDLE 16:08:10 [192.168.202.11][21425199] command: 7g2f IDLE 16:08:10 [192.168.202.11][21425199] command: vmvn IDLE 16:08:10 [192.168.202.11][21425199] command: m9z5 IDLE 16:08:10 [192.168.202.11][21425199] command: cq7q IDLE 16:08:11 [192.168.202.11][21425199] command: 3c54 IDLE 16:08:11 [192.168.202.11][21425199] command: otih IDLE 16:08:11 [192.168.202.11][21425199] command: uuhy IDLE 16:08:11 [192.168.202.11][21425199] command: 7dya IDLE 16:08:11 [192.168.202.11][21425199] command: i2rb IDLE 16:08:11 [192.168.202.11][21425199] command: 13kl IDLE 16:08:11 [192.168.202.11][21425199] command: mbxe IDLE 16:08:11 [192.168.202.11][21425199] command: 0oz5 IDLE 16:08:11 [192.168.202.11][21425199] command: ymn7 IDLE 16:08:11 [192.168.202.11][21425199] command: vavf IDLE 16:08:11 [192.168.202.11][21425199] command: 3vdh IDLE 16:08:11 [192.168.202.11][21425199] command: rnci IDLE 16:08:11 [192.168.202.11][21425199] command: n3gu IDLE 16:08:11 [192.168.202.11][21425199] command: gu0f IDLE 16:08:11 [192.168.202.11][21425199] command: gewp IDLE 16:08:11 [192.168.202.11][21425199] command: vu84 IDLE 16:08:11 [192.168.202.11][21425199] command: d1rz IDLE 16:08:11 [192.168.202.11][21425199] command: 7nz9 IDLE 16:08:11 [192.168.202.11][21425199] command: trs9 IDLE 16:08:11 [192.168.202.11][21425199] command: yqlo IDLE 16:08:11 [192.168.202.11][21425199] command: 2jtj IDLE 16:08:11 [192.168.202.11][21425199] command: 085e IDLE 16:08:11 [192.168.202.11][21425199] command: 2jyw IDLE 16:08:11 [192.168.202.11][21425199] command: ycwo IDLE 16:08:11 [192.168.202.11][21425199] command: iemo IDLE 16:08:11 [192.168.202.11][21425199] command: eien IDLE 16:08:11 [192.168.202.11][21425199] command: lxi2 IDLE 16:08:11 [192.168.202.11][21425199] command: uhug IDLE 16:08:11 [192.168.202.11][21425199] command: jabp IDLE 16:08:11 [192.168.202.11][21425199] command: v1hf IDLE 16:08:11 [192.168.202.11][21425199] command: s0pp IDLE 16:08:11 [192.168.202.11][21425199] command: i4qi IDLE 16:08:11 [192.168.202.11][21425199] command: bc7b IDLE 16:08:11 [192.168.202.11][21425199] command: 6kxh IDLE 16:08:11 [192.168.202.11][21425199] command: bd0a IDLE 16:08:11 [192.168.202.11][21425199] command: i578 IDLE 16:08:11 [192.168.202.11][21425199] command: 4fb8 IDLE 16:08:11 [192.168.202.11][21425199] command: y259 IDLE 16:08:11 [192.168.202.11][21425199] command: tftj IDLE 16:08:11 [192.168.202.11][21425199] command: vm65 IDLE 16:08:11 [192.168.202.11][21425199] command: 2seb IDLE 16:08:11 [192.168.202.11][21425199] command: 2tu4 IDLE 16:08:11 [192.168.202.11][21425199] command: 7fq3 IDLE 16:08:11 [192.168.202.11][21425199] command: nydu IDLE 16:08:11 [192.168.202.11][21425199] command: 5na0 IDLE 16:08:12 [192.168.202.11][21425199] command: yqr4 IDLE 16:08:12 [192.168.202.11][21425199] command: lmd5 IDLE 16:08:12 [192.168.202.11][21425199] command: d4ir IDLE 16:08:12 [192.168.202.11][21425199] command: prma IDLE 16:08:12 [192.168.202.11][21425199] command: g53z IDLE 16:08:12 [192.168.202.11][21425199] command: 8isn IDLE 16:08:12 [192.168.202.11][21425199] command: x5l9 IDLE 16:08:12 [192.168.202.11][21425199] command: mb99 IDLE 16:08:12 [192.168.202.11][21425199] command: 3az0 IDLE 16:08:12 [192.168.202.11][21425199] command: nfpf IDLE 16:08:12 [192.168.202.11][21425199] command: 4roj IDLE 16:08:12 [192.168.202.11][21425199] command: fzcr IDLE 16:08:12 [192.168.202.11][21425199] command: nzgu IDLE 16:08:12 [192.168.202.11][21425199] command: ta6y IDLE 16:08:12 [192.168.202.11][21425199] command: 3ig2 IDLE 16:08:12 [192.168.202.11][21425199] command: 7kgp IDLE 16:08:12 [192.168.202.11][21425199] command: lri1 IDLE 16:08:12 [192.168.202.11][21425199] command: 2isc IDLE 16:08:12 [192.168.202.11][21425199] command: l5mz IDLE 16:08:12 [192.168.202.11][21425199] command: 37j4 IDLE 16:08:12 [192.168.202.11][21425199] command: k4cq IDLE 16:08:12 [192.168.202.11][21425199] command: ye7w IDLE 16:08:12 [192.168.202.11][21425199] command: 0uck IDLE 16:08:12 [192.168.202.11][21425199] command: 0oyd IDLE 16:08:12 [192.168.202.11][21425199] command: 2cbj IDLE 16:08:12 [192.168.202.11][21425199] command: 1pj6 IDLE 16:08:12 [192.168.202.11][21425199] command: nkji IDLE 16:08:12 [192.168.202.11][21425199] command: 1c2o IDLE 16:08:12 [192.168.202.11][21425199] command: b0k8 IDLE 16:08:12 [192.168.202.11][21425199] command: qaeh IDLE 16:08:12 [192.168.202.11][21425199] command: diex IDLE 16:08:12 [192.168.202.11][21425199] command: f6nh IDLE 16:08:12 [192.168.202.11][21425199] command: 6lkk IDLE 16:08:12 [192.168.202.11][21425199] command: 3jep IDLE 16:08:12 [192.168.202.11][21425199] command: vsev IDLE 16:08:12 [192.168.202.11][21425199] command: r79z IDLE 16:08:12 [192.168.202.11][21425199] command: 0bhv IDLE 16:08:12 [192.168.202.11][21425199] command: ow86 IDLE 16:08:12 [192.168.202.11][21425199] command: qnwo IDLE 16:08:12 [192.168.202.11][21425199] command: egss IDLE 16:08:12 [192.168.202.11][21425199] command: t36m IDLE 16:08:12 [192.168.202.11][21425199] command: cj9l IDLE 16:08:12 [192.168.202.11][21425199] command: abfg IDLE 16:08:12 [192.168.202.11][21425199] command: unln IDLE 16:08:12 [192.168.202.11][21425199] command: x217 IDLE 16:08:12 [192.168.202.11][21425199] command: l9br IDLE 16:08:12 [192.168.202.11][21425199] command: 5moj IDLE 16:08:12 [192.168.202.11][21425199] command: e6al IDLE 16:08:12 [192.168.202.11][21425199] command: r7n7 IDLE 16:08:13 [192.168.202.11][21425199] command: tn7m IDLE 16:08:13 [192.168.202.11][21425199] command: 6ljm IDLE 16:08:13 [192.168.202.11][21425199] command: g6ub IDLE 16:08:13 [192.168.202.11][21425199] command: xers IDLE 16:08:13 [192.168.202.11][21425199] command: 2vjl IDLE 16:08:13 [192.168.202.11][21425199] command: wn21 IDLE 16:08:13 [192.168.202.11][21425199] command: lvpe IDLE 16:08:13 [192.168.202.11][21425199] command: nx7v IDLE 16:08:13 [192.168.202.11][21425199] command: an9d IDLE 16:08:13 [192.168.202.11][21425199] command: bno6 IDLE 16:08:13 [192.168.202.11][21425199] command: y1ui IDLE 16:08:13 [192.168.202.11][21425199] command: i3pw IDLE 16:08:13 [192.168.202.11][21425199] command: ixg4 IDLE 16:08:13 [192.168.202.11][21425199] command: phsg IDLE 16:08:13 [192.168.202.11][21425199] command: g8nn IDLE 16:08:13 [192.168.202.11][21425199] command: 3rn6 IDLE 16:08:13 [192.168.202.11][21425199] command: 85iv IDLE 16:08:13 [192.168.202.11][21425199] command: o8cu IDLE 16:08:13 [192.168.202.11][21425199] command: x3uh IDLE 16:08:13 [192.168.202.11][21425199] command: jlsf IDLE 16:08:13 [192.168.202.11][21425199] command: 4brr IDLE 16:08:13 [192.168.202.11][21425199] command: tsyx IDLE 16:08:13 [192.168.202.11][21425199] command: p71l IDLE 16:08:13 [192.168.202.11][21425199] command: lk79 IDLE 16:08:13 [192.168.202.11][21425199] command: f97g IDLE 16:08:13 [192.168.202.11][21425199] command: 8svd IDLE 16:08:13 [192.168.202.11][21425199] command: 08d3 IDLE 16:08:13 [192.168.202.11][21425199] command: i1ba IDLE 16:08:13 [192.168.202.11][21425199] command: dari IDLE 16:08:13 [192.168.202.11][21425199] command: l9uj IDLE 16:08:13 [192.168.202.11][21425199] command: 4ei0 IDLE 16:08:13 [192.168.202.11][21425199] command: nrgl IDLE 16:08:13 [192.168.202.11][21425199] command: oel6 IDLE 16:08:13 [192.168.202.11][21425199] command: 5xvd IDLE 16:08:13 [192.168.202.11][21425199] command: 2lx9 IDLE 16:08:13 [192.168.202.11][21425199] command: swiv IDLE 16:08:13 [192.168.202.11][21425199] command: p7jj IDLE 16:08:13 [192.168.202.11][21425199] command: tgpw IDLE 16:08:13 [192.168.202.11][21425199] command: trsd IDLE 16:08:13 [192.168.202.11][21425199] command: pccw IDLE 16:08:14 [192.168.202.11][21425199] command: rdhw IDLE 16:08:14 [192.168.202.11][21425199] command: 2rig IDLE 16:08:14 [192.168.202.11][21425199] command: vit6 IDLE 16:08:14 [192.168.202.11][21425199] command: yv2g IDLE 16:08:14 [192.168.202.11][21425199] command: oxe1 IDLE 16:08:14 [192.168.202.11][21425199] command: q5ty IDLE 16:08:14 [192.168.202.11][21425199] command: 0jmr IDLE 16:08:14 [192.168.202.11][21425199] command: 95qq IDLE 16:08:14 [192.168.202.11][21425199] command: h5vd IDLE 16:08:14 [192.168.202.11][21425199] command: n24j IDLE 16:08:14 [192.168.202.11][21425199] command: dapo IDLE 16:08:14 [192.168.202.11][21425199] command: 6fm1 IDLE 16:08:14 [192.168.202.11][21425199] command: 5901 IDLE 16:08:14 [192.168.202.11][21425199] command: i6mt IDLE 16:08:14 [192.168.202.11][21425199] command: 5ch4 IDLE 16:08:14 [192.168.202.11][21425199] command: y8ke IDLE 16:08:14 [192.168.202.11][21425199] command: gef5 IDLE 16:08:14 [192.168.202.11][21425199] command: va4d IDLE 16:08:14 [192.168.202.11][21425199] command: k7me IDLE 16:08:14 [192.168.202.11][21425199] command: btre IDLE 16:08:14 [192.168.202.11][21425199] command: ajdc IDLE 16:08:14 [192.168.202.11][21425199] command: avxy IDLE 16:08:14 [192.168.202.11][21425199] command: 60n3 IDLE 16:08:14 [192.168.202.11][21425199] command: m4ym IDLE 16:08:14 [192.168.202.11][21425199] command: f764 IDLE 16:08:14 [192.168.202.11][21425199] command: 00ag IDLE 16:08:14 [192.168.202.11][21425199] command: mv6y IDLE 16:08:14 [192.168.202.11][21425199] command: nf39 IDLE 16:08:14 [192.168.202.11][21425199] command: o0pk IDLE 16:08:14 [192.168.202.11][21425199] command: tw5i IDLE 16:08:14 [192.168.202.11][21425199] command: vdkq IDLE 16:08:14 [192.168.202.11][21425199] command: i3af IDLE 16:08:14 [192.168.202.11][21425199] command: qsmq IDLE 16:08:14 [192.168.202.11][21425199] command: l7gs IDLE 16:08:14 [192.168.202.11][21425199] command: wlyv IDLE 16:08:14 [192.168.202.11][21425199] command: hrl6 IDLE 16:08:14 [192.168.202.11][21425199] command: 6o3m IDLE 16:08:14 [192.168.202.11][21425199] command: d62f IDLE 16:08:14 [192.168.202.11][21425199] command: ztx1 IDLE 16:08:14 [192.168.202.11][21425199] command: ejoq IDLE 16:08:14 [192.168.202.11][21425199] command: jo8n IDLE 16:08:15 [192.168.202.11][21425199] command: 898c IDLE 16:08:15 [192.168.202.11][21425199] command: uo5n IDLE 16:08:15 [192.168.202.11][21425199] command: ljkw IDLE 16:08:15 [192.168.202.11][21425199] command: fqwe IDLE 16:08:15 [192.168.202.11][21425199] command: z2r4 IDLE 16:08:15 [192.168.202.11][21425199] command: v1k3 IDLE 16:08:15 [192.168.202.11][21425199] command: 9ruc IDLE 16:08:15 [192.168.202.11][21425199] command: humj IDLE 16:08:15 [192.168.202.11][21425199] command: wmy6 IDLE 16:08:15 [192.168.202.11][21425199] command: 2r60 IDLE 16:08:15 [192.168.202.11][21425199] command: a66w IDLE 16:08:15 [192.168.202.11][21425199] command: 3sn5 IDLE 16:08:15 [192.168.202.11][21425199] command: o4j4 IDLE 16:08:15 [192.168.202.11][21425199] command: 4j68 IDLE 16:08:15 [192.168.202.11][21425199] command: 7e0z IDLE 16:08:15 [192.168.202.11][21425199] command: ts0o IDLE 16:08:15 [192.168.202.11][21425199] command: k62v IDLE 16:08:15 [192.168.202.11][21425199] command: 9u3v IDLE 16:08:15 [192.168.202.11][21425199] command: 1vo5 IDLE 16:08:15 [192.168.202.11][21425199] command: un6t IDLE 16:08:15 [192.168.202.11][21425199] command: v74a IDLE 16:08:15 [192.168.202.11][21425199] command: zqk5 IDLE 16:08:15 [192.168.202.11][21425199] command: 7v00 IDLE 16:08:15 [192.168.202.11][21425199] command: d6yk IDLE 16:08:15 [192.168.202.11][21425199] command: mtc3 IDLE 16:08:15 [192.168.202.11][21425199] command: fu9l IDLE 16:08:15 [192.168.202.11][21425199] command: bbzw IDLE 16:08:15 [192.168.202.11][21425199] command: zwms IDLE 16:08:15 [192.168.202.11][21425199] command: vw1a IDLE 16:08:15 [192.168.202.11][21425199] command: buw0 IDLE 16:08:15 [192.168.202.11][21425199] command: ogzd IDLE 16:08:15 [192.168.202.11][21425199] command: 4481 IDLE 16:08:15 [192.168.202.11][21425199] command: pvdz IDLE 16:08:15 [192.168.202.11][21425199] command: 112d IDLE 16:08:15 [192.168.202.11][21425199] command: ah3f IDLE 16:08:15 [192.168.202.11][21425199] command: pmj9 IDLE 16:08:15 [192.168.202.11][21425199] command: ljzk IDLE 16:08:15 [192.168.202.11][21425199] command: dbuv IDLE 16:08:15 [192.168.202.11][21425199] command: gb84 IDLE 16:08:15 [192.168.202.11][21425199] command: sb7b IDLE 16:08:15 [192.168.202.11][21425199] command: iml4 IDLE 16:08:15 [192.168.202.11][21425199] command: wek0 IDLE 16:08:15 [192.168.202.11][21425199] command: ovhh IDLE 16:08:15 [192.168.202.11][21425199] command: 39bq IDLE 16:08:15 [192.168.202.11][21425199] command: tu31 IDLE 16:08:15 [192.168.202.11][21425199] command: wok3 IDLE 16:08:15 [192.168.202.11][21425199] command: p2ez IDLE 16:08:15 [192.168.202.11][21425199] command: argr IDLE 16:08:15 [192.168.202.11][21425199] command: q9dq IDLE 16:08:15 [192.168.202.11][21425199] command: ea8l IDLE 16:08:15 [192.168.202.11][21425199] command: nfnd IDLE 16:08:15 [192.168.202.11][21425199] command: sc4z IDLE 16:08:15 [192.168.202.11][21425199] command: 5bpf IDLE 16:08:15 [192.168.202.11][21425199] command: j8k8 IDLE 16:08:15 [192.168.202.11][21425199] command: brs0 IDLE 16:08:15 [192.168.202.11][21425199] command: rjvj IDLE 16:08:16 [192.168.202.11][21425199] command: nmj0 IDLE 16:08:16 [192.168.202.11][21425199] command: x7uv IDLE 16:08:16 [192.168.202.11][21425199] command: s0cq IDLE 16:08:16 [192.168.202.11][21425199] command: xi5v IDLE 16:08:16 [192.168.202.11][21425199] command: j3vg IDLE 16:08:16 [192.168.202.11][21425199] command: xxtr IDLE 16:08:16 [192.168.202.11][21425199] command: czhg IDLE 16:08:16 [192.168.202.11][21425199] command: qhu0 IDLE 16:08:16 [192.168.202.11][21425199] command: 4kue IDLE 16:08:16 [192.168.202.11][21425199] command: yydo IDLE 16:08:16 [192.168.202.11][21425199] command: jt93 IDLE 16:08:16 [192.168.202.11][21425199] command: sibh IDLE 16:08:16 [192.168.202.11][21425199] command: u7n7 IDLE 16:08:16 [192.168.202.11][21425199] command: 58wp IDLE 16:08:16 [192.168.202.11][21425199] command: 4s1d IDLE 16:08:16 [192.168.202.11][21425199] command: 87a4 IDLE 16:08:16 [192.168.202.11][21425199] command: lol8 IDLE 16:08:16 [192.168.202.11][21425199] command: 5h58 IDLE 16:08:16 [192.168.202.11][21425199] command: v7dy IDLE 16:08:16 [192.168.202.11][21425199] command: nsh7 IDLE 16:08:16 [192.168.202.11][21425199] command: dzp1 IDLE 16:08:16 [192.168.202.11][21425199] command: xj4s IDLE 16:08:16 [192.168.202.11][21425199] command: 0ws3 IDLE 16:08:16 [192.168.202.11][21425199] command: t6n2 IDLE 16:08:16 [192.168.202.11][21425199] command: o3ol IDLE 16:08:16 [192.168.202.11][21425199] command: t4rw IDLE 16:08:16 [192.168.202.11][21425199] command: mgvo IDLE 16:08:16 [192.168.202.11][21425199] command: 5rse IDLE 16:08:16 [192.168.202.11][21425199] command: 7fdj IDLE 16:08:16 [192.168.202.11][21425199] command: 7s6h IDLE 16:08:16 [192.168.202.11][21425199] command: mlfb IDLE 16:08:16 [192.168.202.11][21425199] command: 06hh IDLE 16:08:16 [192.168.202.11][21425199] command: 32ni IDLE 16:08:16 [192.168.202.11][21425199] command: cslk IDLE 16:08:16 [192.168.202.11][21425199] command: aml4 IDLE 16:08:16 [192.168.202.11][21425199] command: rle9 IDLE 16:08:16 [192.168.202.11][21425199] command: dg6a IDLE 16:08:16 [192.168.202.11][21425199] command: 20hl IDLE 16:08:16 [192.168.202.11][21425199] command: f3pc IDLE 16:08:16 [192.168.202.11][21425199] command: 8f6a IDLE 16:08:17 [192.168.202.11][21425199] command: reav IDLE 16:08:17 [192.168.202.11][21425199] command: 3qpc IDLE 16:08:17 [192.168.202.11][21425199] command: 5utk IDLE 16:08:17 [192.168.202.11][21425199] command: ldjq IDLE 16:08:17 [192.168.202.11][21425199] command: sbhb IDLE 16:08:17 [192.168.202.11][21425199] command: ire7 IDLE 16:08:17 [192.168.202.11][21425199] command: o2n7 IDLE 16:08:17 [192.168.202.11][21425199] command: t9n7 IDLE 16:08:17 [192.168.202.11][21425199] command: cags IDLE 16:08:17 [192.168.202.11][21425199] command: tx43 IDLE 16:08:17 [192.168.202.11][21425199] command: 87o5 IDLE 16:08:17 [192.168.202.11][21425199] command: zjfx IDLE 16:08:17 [192.168.202.11][21425199] command: 7url IDLE 16:08:17 [192.168.202.11][21425199] command: 58ky IDLE 16:08:17 [192.168.202.11][21425199] command: zgr9 IDLE 16:08:17 [192.168.202.11][21425199] command: 6nif IDLE 16:08:17 [192.168.202.11][21425199] command: 07jo IDLE 16:08:17 [192.168.202.11][21425199] command: 3scq IDLE 16:08:17 [192.168.202.11][21425199] command: 1j7j IDLE 16:08:17 [192.168.202.11][21425199] command: l0b2 IDLE 16:08:17 [192.168.202.11][21425199] command: p7qy IDLE 16:08:17 [192.168.202.11][21425199] command: qms1 IDLE 16:08:17 [192.168.202.11][21425199] command: sln8 IDLE 16:08:17 [192.168.202.11][21425199] command: x07c IDLE 16:08:17 [192.168.202.11][21425199] command: jand IDLE 16:08:17 [192.168.202.11][21425199] command: iicp IDLE 16:08:17 [192.168.202.11][21425199] command: 264r IDLE 16:08:17 [192.168.202.11][21425199] command: nqoj IDLE 16:08:17 [192.168.202.11][21425199] command: p516 IDLE 16:08:17 [192.168.202.11][21425199] command: 00dj IDLE 16:08:17 [192.168.202.11][21425199] command: 0oo8 IDLE 16:08:17 [192.168.202.11][21425199] command: 7yc3 IDLE 16:08:17 [192.168.202.11][21425199] command: ex3e IDLE 16:08:17 [192.168.202.11][21425199] command: dyw0 IDLE 16:08:17 [192.168.202.11][21425199] command: qy06 IDLE 16:08:17 [192.168.202.11][21425199] command: 6opb IDLE 16:08:17 [192.168.202.11][21425199] command: oxnm IDLE 16:08:17 [192.168.202.11][21425199] command: wiqm IDLE 16:08:17 [192.168.202.11][21425199] command: 74jg IDLE 16:08:17 [192.168.202.11][21425199] command: r750 IDLE My dovecot -n config: # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-642.1.1.el6.x86_64 x86_64 CentOS release 6.8 (Final) auth_cache_negative_ttl = 0 auth_cache_ttl = 0 auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot/debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot/info.log log_path = /var/log/dovecot/dovecot.log passdb { args = /usr/local/etc/dovecot/conf.d/10-mysql.conf driver = sql } protocols = pop3 imap service imap-login { service_count = 0 vsz_limit = 512 M } service pop3-login { process_min_avail = 1 service_count = 0 } ssl_ca = </usr/local/etc/dovecot/RapidSSL_CA_G3.pem ssl_cert = </usr/local/etc/dovecot/mailserverpro.pem ssl_key = </usr/local/etc/dovecot/mailserverpro.pem userdb { driver = prefetch } My MYSQL connection config: password_query = SELECT NULL AS password, NULL as user, NULL AS destuser, host, 'Y' AS nologin, 'Y' as nodelay, 'Y' AS nopassword, 'Y' AS proxy, 'Y' as proxy_nopipelining, 120 AS proxy_timeout FROM dovecot_domains WHERE domain = '%d' Anybody can help? Best Regards, Cleber

5 9

virtual users, mailer daemon send mails to non existant recipient and dovecot store it
by Sam 24 Aug '16

24 Aug '16

Hello, Sometime when we receive a spam or virus that is detected as it, mailer daemon send a reply to the sender to inform that the message is a spam or content viruses. The problem is that the sender of the spam as something like voicemail(a)ourdomain.fr ( the user voicemail doesn't exist in our database ) And sometimes dovecot create the directory and store the reply 's mail... Aug 23 16:07:31 mail3 postfix/cleanup[15687]: C7EEB406FFFD: message-id=<20160823140731.C7EEB406FFFD(a)mail3.ourdomain.fr> Aug 23 16:07:31 mail3 postfix/qmgr[12987]: C7EEB406FFFD: from=<>, size=14280, nrcpt=1 (queue active) Aug 23 16:07:31 mail3 postfix/bounce[15800]: 824D7406FFFC: sender non-delivery notification: C7EEB406FFFD Aug 23 16:07:31 mail3 postfix/qmgr[12987]: 824D7406FFFC: removed Aug 23 16:07:31 mail3 dovecot: auth: Debug: master in: USER#0111#011voicemail#011service=lda Aug 23 16:07:31 mail3 dovecot: auth: Debug: userdb out: USER#0111#011voicemail#011uid=1001#011gid=1001#011home=/home/vmail/voicemail Aug 23 16:07:31 mail3 dovecot: lda(voicemail): msgid=<20160823140731.C7EEB406FFFD(a)mail3.ourdomain.fr>: saved mail to INBOX Aug 23 16:07:31 mail3 postfix/pipe[15791]: C7EEB406FFFD: to=<voicemail(a)ourdomain.fr>, relay=dovecot, delay=0.02, delays=0/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) Aug 23 16:07:31 mail3 postfix/qmgr[12987]: C7EEB406FFFD: removed here is the stored mail : Return-Path: <MAILER-DAEMON> Delivered-To: voicemail(a)ourdomain.fr Received: by mail3.ourdomain.fr (Postfix) id C7EEB406FFFD; Tue, 23 Aug 2016 16:07:31 +0200 (CEST) Date: Tue, 23 Aug 2016 16:07:31 +0200 (CEST) From: MAILER-DAEMON(a)ourdomain.fr (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: voicemail(a)ourdomain.fr Auto-Submitted: auto-replied MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="824D7406FFFC.1471961251/mail3.ourdomain.fr" Message-Id: <20160823140731.C7EEB406FFFD(a)mail3.ourdomain.fr> This is a MIME-encapsulated message. --824D7406FFFC.1471961251/mail3.ourdomain.fr Content-Description: Notification Content-Type: text/plain; charset=us-ascii This is the mail system at host mail3.ourdomain.fr. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <existing.user(a)ourdomain.com> (expanded from <existing.user(a)ourdomain.fr>): host mails.collaboration-sfr.com[86.64.240.34] said: 552 5.2.0 <ae7X1t00115ZlG601e7Xvw> reject for policy reason : spam detected in your mail (in reply to end of DATA command) --824D7406FFFC.1471961251/mail3.ourdomain.fr Content-Description: Delivery report Content-Type: message/delivery-status Reporting-MTA: dns; mail3.ourdomain.fr X-Postfix-Queue-ID: 824D7406FFFC X-Postfix-Sender: rfc822; voicemail(a)ourdomain.fr Arrival-Date: Tue, 23 Aug 2016 16:07:29 +0200 (CEST) Final-Recipient: rfc822; existing.user(a)ourdomain.com Original-Recipient: rfc822;existing.user(a)ourdomain.fr Action: failed Status: 5.2.0 Remote-MTA: dns; mails.collaboration-sfr.com Diagnostic-Code: smtp; 552 5.2.0 <ae7X1t00115ZlG601e7Xvw> reject for policy reason : spam detected in your mail --824D7406FFFC.1471961251/mail3.ourdomain.fr Content-Description: Undelivered Message Content-Type: message/rfc822 Return-Path: <voicemail(a)ourdomain.fr> Received: from 177.222.108.254.dynamic.on.com.br (unknown [177.222.108.254]) by mail3.ourdomain.fr (Postfix) with ESMTP id 824D7406FFFC for <existing.user(a)ourdomain.fr>; Tue, 23 Aug 2016 16:07:29 +0200 (CEST) From:voicemail@ourdomain.fr To:existing.user@ourdomain.fr Subject: [Vigor2820 Series] New voice mail message from 01425939048 on 2016/08/23 11:07:28 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="5A1b791c537d41f1" --5A1b791c537d41f1 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Dear existing.user : There is a message for you from 01425939048, on 2016/08/23 11:07:28 . You might want to check it when you get a chance.Thanks! --5A1b791c537d41f1 Content-Type: audio/x-wav; name="Message_from_01425939048.wav.zip" Content-Transfer-Encoding: BASE64 Content-Description: Voicemail sound attachment. Content-Disposition: attachment; filename="Message_from_01425939048.wav.zip" UEsDBBQAAAAIAGZiF0n9ycl98x4AAE54AAAQAAAAODU5MjE2MjE1MDA4LndzZuxbW2/jWHJ+ dgP9H9hCMJbaHrWuljW2e2FJlCz1iLJk3T39QJG0SIkXNS/WpcdAZgYJctmXBNgE+7jAArkB uTzkKUD+jLFJ9l+kDnl4Ubd4KM/0dIBgG6ZskfVV1amqU6fqHPb5L1aK/IvXz5+dL1huzk4F 9OdMm1ASf3HYuCq9YZqHr891SzUlBT17/ozC/855weB0aWFKmvo6cPvV9n3nyfkrl8W585CS WXVqgTyQcmPfATEvbsuVy+7lLULdmLqkTpMLXTM1c70QkhPBMDVZ40SVFQW9X+85P6ZpavCP ... I don't understand why I don't have the same behavior that when I send a mail to a non existant address ( <tottttt(a)ourdomain.fr>: Recipient address rejected: User unknown in virtual mailbox table ) How can I fix it? Thanks a lot! Samuel

5 11

juste pour vous
by bunkertor 24 Aug '16

24 Aug '16

Salut, Regardez ce qu'ils ont pour vous, je suppose que cela vaut la peine de lire, plus d'infos ici <http://ntispokequi.truthisthenewporn.com/xofbi> bunkertor

1 0

Re: dovecot Digest, Vol 160, Issue 25
by Ron Cleven 23 Aug '16

23 Aug '16

>> >On August 23, 2016 at 6:57 PM Sam<sr42354(a)gmail.com> wrote: >> > >> > >> >Hello, >> > >> >Sometime when we receive a spam or virus that is detected as it, mailer >> >daemon send a reply to the sender to inform that the message is a spam >> >or content viruses. >> > >> >The problem is that the sender of the spam as something like >> >voicemail(a)ourdomain.fr ( the user voicemail doesn't exist in our database ) >> > >> >And sometimes dovecot create the directory and store the reply 's mail... >> > >> > If I understand your question correctly, you are sometimes sending an after-the-fact bounce message based upon the return-path in at least some situations where you detect a spam or virus (as opposed to responding with an error code response during the SMTP session)? If my understanding is correct, you should never ever ever ever ever ever ever send those sort of NDR's. Please google "backscatter".

1 0

antispam plugin pipe script seems not to be called when it "should be"
by Ben Johnson 23 Aug '16

23 Aug '16

Hello, (Full "doveconf -n" output is at the end of this message.) I'm attempting to recreate a "recipe" I had used successfully for quite some time (in Ubuntu 12.04 LTS), which allowed me to train SpamAssassin's Bayes database when someone dragged an email message from one sub-folder of the account to another. I later tried to re-implement it (in Ubuntu 14.04 LTS), and core-dumps resulted. I posted to this list about it several times, but nobody was ever able to help me solve the problem. I just tried the same (in Ubuntu 16.04 LTS), hoping that the source had evolved since then, and while I don't see a core-dump, the pipe script doesn't seem to be called. I've booby-trapped the pipe script with quite a bit of debugging output, which should be written to a file, but I don't see any indication that the pipe script is ever executed. When logged-in as an IMAP user, and I drag a message from the user's Inbox into the "Spam" folder, I do see the following activity in the syslog: Aug 18 22:12:15 example.com imap: antispam: mailbox_is_unsure(Junk): 0 Aug 18 22:12:15 example.com imap: antispam: mailbox_is_trash(INBOX): 0 Aug 18 22:12:15 example.com imap: antispam: mailbox_is_trash(Junk): 0 Aug 18 22:12:15 example.com imap: antispam: mail copy: from trash: 0, to trash: 0 Aug 18 22:12:15 example.com imap: antispam: mailbox_is_spam(INBOX): 0 Aug 18 22:12:15 example.com imap: antispam: mailbox_is_spam(Junk): 1 Aug 18 22:12:15 example.com imap: antispam: mailbox_is_unsure(INBOX): 0 Aug 18 22:12:15 example.com imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 Aug 18 22:12:15 example.com imap: antispam: running mailtrain backend program /bin/bash Aug 18 22:12:15 example.com imap: antispam: running mailtrain backend program /bin/bash Aug 18 22:12:15 example.com imap: antispam: running mailtrain backend program parameter 1 /usr/local/bin/sa-learn-pipe.sh Aug 18 22:12:15 example.com imap: antispam: running mailtrain backend program parameter 2 --spam But the piped message is never delivered to the target mailbox. The mail log at /var/log/mail.log does not register any activity when I move messages (and maybe that's expected). Here are the contents of the /usr/local/bin/sa-learn-pipe.sh script: http://pastebin.com/7vm74jmk The permissions and mode on the script seem appropriate: $ stat /usr/local/bin/sa-learn-pipe.sh File: '/usr/local/bin/sa-learn-pipe.sh' Size: 1765 Blocks: 8 IO Block: 4096 regular file Device: fd01h/64769d Inode: 669345 Links: 1 Access: (0755/-rwxr-xr-x) Uid: ( 5000/ vmail) Gid: ( 5000/ vmail) Access: 2016-08-18 19:09:47.307392919 -0400 Modify: 2016-08-18 19:09:31.231391749 -0400 Change: 2016-08-18 19:09:31.231391749 -0400 Birth: - What might I be doing incorrectly here? Please let me know if I can provide any other information. Thank you in advance, -Ben Full "doveconf -n" output: $ doveconf -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_max_userip_connections = 100 mail_plugins = " quota" mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /bin/bash antispam_pipe_program_args = /usr/local/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_rule4 = INBOX:storage=+100M quota_warning = storage=100%% quota-reached 100 %u %d quota_warning2 = storage=95%% quota-warning 95 %u %d quota_warning3 = storage=80%% quota-warning 80 %u %d quota_warning4 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve sieve_max_redirects = 25 } postmaster_address = postmaster(a)example.com protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 512 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-below { executable = script /usr/local/bin/quota-below.sh unix_listener quota-below { group = vmail mode = 0666 user = vmail } user = vmail } service quota-reached { executable = script /usr/local/bin/quota-reached.sh unix_listener quota-reached { group = vmail mode = 0666 user = vmail } user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol lmtp { mail_plugins = quota sieve postmaster_address = webmaster@localhost }

5 8

Director/Doveadm: Trying to iterate users, but userdbs don't support it
by Tom Sommer 23 Aug '16

23 Aug '16

Hi I'm doing: doveadm force-resync -S director1:1234 -A "*" The director gives this error: Jul 06 16:17:29 auth: Error: Trying to iterate users, but userdbs don't support it Jul 06 16:17:29 doveadm: Error: User listing returned failure Jul 06 16:17:29 doveadm: Error: Failed to iterate through some users The director has "iterate_query" set -- Tom

2 2

Re: Catch-all with LMTP and Postfix
by Aki Tuomi 23 Aug '16

23 Aug '16

On 22.08.2016 21:53, Michael Starks wrote: > On 08/22/2016 01:29 AM, Aki Tuomi wrote: >> It seems your postfix is misbehaving. Did you forget to run postmap? >> >> Aki Tuomi >> Dovecot oy > > Thanks for the response, Aki. I dug a little deeper and found this: > > lrwxrwxrwx. 1 root root 20 Jul 24 01:37 virtual_alias_maps -> > /etc/postfix/virtual > > I had been postmapping virtual_alias_maps, but not virtual. I guess > postmap doesn't follow links. When I postmapped virtual and did a > 'postfix reload' it started to work. Seems you accidentically replied to me only. Postfix uses the filename you provide as name for the db file, so running it against symlinks does follow the symlink, but it uses the symlink name as what it uses to create the .db file. You can test this by creating file and doing symlink for it and running postmap against the symlink. You'll see that it will create symlink-name.db file instead of file.db. Aki Tuomi Dovecot oy

2 1

Re: Change dovecot hostname
by Joseph Tam 23 Aug '16

23 Aug '16

"Scott W. Sander" writes: > Received: from mail.domain.test > by appserver4.domain.com (Dovecot) with LMTP id z7RGLzH4uldlPAAAxdv4Dw > for <user(a)domain.test>; Mon, 22 Aug 2016 09:03:45 -0400 > ------- > > I want the part that says "by appserver4.domain.com (Dovecot)" to say "by > mail.domain.test (Dovecot)". I don't want it to say the FQDN of the actual > host server that is running Dovecot. > > The server currently referenced as "mail.domain.test" in the headers is > postfix running on the same machine. Oh yeah, right, LMTP. I don't run LMTP myself, but I suspect the hostname is mapped from the IP of the LMTP listening interface (using /etc/hosts or DNS). Maybe you can change the IP of your listening interface to match mail.domain.test and firewall it off if that IP is public facing. >From reading the code, I can't quite grok how LMTP derives the host label, but as a last resort, you can patch at src/lmtp/commands.c in client_get_added_headers(). Joseph Tam <jtam.home(a)gmail.com>

1 0

specifying elliptic curve
by İhsan Doğan 22 Aug '16

22 Aug '16

Hi, I've noticed that Dovecot is using per default the elliptic curve sect571r1. Because not all clients might support sect571r1, I would like to set the elliptic curve manually. Is that possible? -Ihsan -- ihsan(a)dogan.ch http://blog.dogan.ch/

3 2

a question about certificates from letsencrypt
by Andreas Meyer 22 Aug '16

22 Aug '16

Hello! Certificates from letsencrypt are renewed every three months. Does that mean a MUA has to accept the renewed certificates manually everytime it is renewed? Sorry if this is OT! Greetings Andreas

6 6

Crash on opening mailbox
by Ladislav Laska 22 Aug '16

22 Aug '16

Hi! I'm currently experiencing a crash of dovecot 2.2.25 on Gentoo, upon opening mailbox. The crash only triggers on opening inbox, other mailboxes seem to work fine. It happens every time, and can be reproduced on request. I also briefly tried 2.2.19, and it behaves the same. The bug seems to be triggered by some mail, as I encountered it previously and fixed by removing some spam. I guess it might be malformed header of some kind. I can open the mailbox locally using mutt, but fail to do so remotely (using mutt or K-9 mail on android). Unforunately, I haven't been able to isolate the specific mail, as when I create a new mailbox, dovecot refuses to open it: [CANNOT] Mailbox isn't a valid mbox file (0.000 + 0.000 secs). I'm not really sure what's going on and will investigate further once I find some time to do so. I also experienced a similar problem on opening a specific mail, but it's much harder to reproduce and I currently don't have an example. The crash looks very similar, and only happens on first attempt to open a specific mail, it always works later on. I'm attaching a stack trace and dovecot -n. I'm also willing to send the binary and core dump, but not publicly, as I'm not eager to share whatever's inside with the whole world. Other than what I mentioned, I'm running pretty standard setup, with postfix on Gentoo x86_64, ext4 fs, quota and disk space is plentiful. The delivery agent is dovecot itself, in postfix/main.cf I have: mailbox_command = /usr/libexec/dovecot/deliver I'm using sieve script to file my mail, but the problem manifested even before when I was still using procmail to deliver my mail (I migrated because I had doubts about procmail and dovecot lock cooperation) I'll keep my mailbox corrupted for a few more days, and access the mail only locally, hoping to test a potential fix. Let me know if you need any more info/experimentation. Also, if you know a good way to find the mail that causes the trouble out of the core, let me know, I'd be glad to forward it for testing. Thanks and I hope we can find (and fix) the problem! -- S pozdravem Ladislav Láska <laska(a)kam.mff.cuni.cz> Katedra Aplikované Matematiky, MFF UK tel.: +420 739 464 167

2 8

Re: Change dovecot hostname
by Joseph Tam 22 Aug '16

22 Aug '16

"Scott W. Sander" writes: > I have noticed that the name of my private server running dovecot appears > in email headers rather than the public-friendly name of my server. Which headers are you taking about? If you're talking about Received: headers, that's usually inserted by your MTA, not dovecot. Joseph Tam <jtam.home(a)gmail.com>

3 2

LMTP doing passdb queries ?
by Peter Mogensen 22 Aug '16

22 Aug '16

Hi, I can see dovecot is doing a passdb query when handling the LMTP RCPT command. That's kinda unexpected for me. I would have thought it only did a userdb lookup. I have disabled lmtp_proxy to be sure it didn't do a passdb lookup to check the proxy field. Is this expected? Doesn't the LDA only do userdb lookups? /Peter

1 2

Catch-all with LMTP and Postfix
by Michael Starks 22 Aug '16

22 Aug '16

Hidy-ho, I'm having a difficult time getting catch-all working when using Dovecot LMTP. I would like *(a)example.com (everything) to go to virtual(a)example.com, where virtual is a valid virtual user. It seems that things are getting as far as LMTP, but then the mail gets bounced. To wit: Aug 21 08:02:50 hostname postfix/lmtp[4914]: 8DF8E9AFE6: to=<test(a)example.com>, relay=mail.example.com[private/dovecot-lmtp], delay=0.07, delays=0.04/0.01/0.01/0.01, dsn=5.1.1, status=bounced (host mail.example.com[private/dovecot-lmtp] said: 550 5.1.1 <test(a)example.com> User doesn't exist: test(a)example.com (in reply to RCPT TO command)) In the previous log example, test(a)example.com should have been forwarded (aliased) to the virtual mail user. Some config details: [root@hostname postfix]# cat /etc/postfix/virtual ######################################### #### Postmap this file after editing #### ######################################### # Person who should get root's mail. Don't receive mail as root! #root you # Basic system aliases -- these MUST be present MAILER-DAEMON postmaster postmaster root # General redirections for pseudo accounts bin root daemon root named root nobody root uucp root www root ftp-bugs root postfix root # Put your local aliases here. @example.com virtual(a)example.com # Well-known aliases manager root dumper root operator root abuse postmaster # trap decode to catch security attacks decode root [root@hostname postfix]# cat /etc/postfix/virtual_mailbox_domains ################################################ #### Do NOT postmap this file after editing #### ################################################ example.com [root@hostname postfix]# cat /etc/postfix/virtual_mailbox_maps ######################################### #### Postmap this file after editing #### ######################################### # From: http://wiki.dovecot.org/LDA/Postfix # Info: if you use the Dovecot LDA or LMTP it doesn't matter what you use behind the recipient address. Use "OK", the full name of the user or else. # I am using the Dovecot LMTP @example.com OK [root@hostname postfix]# dovecot --version 2.2.10 [root@hostname postfix]# dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.22.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_verbose = yes login_greeting = What's crackalackin? mail_debug = yes mail_home = /var/mail/%d/%n mail_location = maildir:~/mail maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=SSHA512 /etc/dovecot/passdb driver = passwd-file } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/pki/tls/certs/hostname.com.crt ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/pki/tls/certs/example.com.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv3 !SSLv2 userdb { args = /etc/dovecot/userdb driver = passwd-file } [root@hostname postfix]# postconf -d mail_version mail_version = 2.10.1 [root@talyn postfix]# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases body_checks = pcre:/etc/postfix/body_checks.pcre broken_sasl_auth_clients = no command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 disable_vrfy_command = yes header_checks = pcre:/etc/postfix/header_checks.pcre html_directory = no inet_protocols = all mail_owner = postfix mail_spool_directory = /var/spool/mail mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 20480000 mydestination = $myhostname, localhost.$mydomain, localhost myhostname = mail.example.com mynetworks_style = host newaliases_path = /usr/bin/newaliases.postfix notify_classes = resource, software, bounce queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES relay_domains = $mydestination sample_directory = /usr/share/doc/postfix-2.10.1/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_header_checks = pcre:/etc/postfix/smtp_header_checks.pcre smtp_tls_note_starttls_offer = yes smtp_use_tls = yes smtpd_banner = $myhostname Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready. smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce permit smtpd_helo_required = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_destination, check_recipient_access hash:/etc/postfix/recipient_access.hash, check_recipient_access pcre:/etc/postfix/recipient_access.pcre, check_sender_access hash:/etc/postfix/sender_access.hash, check_sender_access pcre:/etc/postfix/sender_access.pcre, reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net permit smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/pki/tls/certs/example.com.crt smtpd_tls_key_file = /etc/pki/tls/certs/example.com.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/virtual virtual_mailbox_domains = /etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_maps virtual_transport = lmtp:unix:private/dovecot-lmtp Thank you in advance for your assistance.

2 1

Field Return-Path contains twice the domain
by Quaquaraquà 21 Aug '16

21 Aug '16

Dear exim & dovecot users, posting on both mailing lists as I am not sure who has the ultimate responsability for this field. I am trying to set up a mail server for multiple domains in my VPS. So I managed to set up the authentication through a dovecot authenticator, which relies to a sqlite database. I would like that, from the database perspective, a query has, as input parameters, both the username and the domain to check the password. For this purpose, I am requesting that the SMTP account is in the full form username(a)domain.com. When forwarded to the dovecot authenticator, I can extract the user with %n and %d. This works, but it has a utter drawback: emails are sent repeating twice the domain in the Return-Path field, e.g. : Return-Path: <"user(a)domain.net"@domain.net> Subject: Re: Hello To: nuquaquaraqua(a)gmail.com From: user <user(a)domain.net> How do I properly fix the field Return-Path now? dovecot --version: 2.2.25 (7be1766) Exim version 4.87 #1 built 28-Jul-2016 18:38:04 Kind regards, Quaquaraqua

1 0

Port 143 is no SSL; no client auth; plain password auth. But port 993 is SSL; client cert auth.
by UK Universal Support Limited 21 Aug '16

21 Aug '16

I am experiencing the error "Error: BUG: Authentication client sent unknown handshake command:" My goal is Port 143: no SSL; no client auth; plain password auth. Port 993: SSL; client cert auth. I found the archive http://www.dovecot.org/list/dovecot/2016-February/103067.html and followed it, but does not work, I see the following log in /var/log/maillog Aug 21 15:36:42 vps0 dovecot: master: Dovecot v2.2.25 (7be1766) starting up for imap (core dumps disabled) Aug 21 15:37:51 vps0 dovecot: auth: Error: BUG: Authentication client sent unknown handshake command: REQUEST?1997012993?3734?1?e067999d43eebcecf0c9d44a1c108d75?session_pid=3741?r... Aug 21 15:37:51 vps0 dovecot: imap: Error: Authentication server didn't send valid SPID as expected: MECH#011PLAIN#011plaintext Aug 21 15:37:51 vps0 dovecot: imap: Error: Disconnected from auth server, aborting (client-pid=3734 client-id=1) Aug 21 15:37:51 vps0 dovecot: imap-login: Internal login failure (pid=3734 id=1) (internal failure, 1 successful auths): user=<contact>, method=PLAIN, rip=212.104.147.161, lip=46.30.14.36, mpid=3741, TLS, session=<UkXhtpY6W8XUaJOh> Aug 21 15:37:51 vps0 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=212.104.147.161, lip=46.30.14.36, TLS handshaking: SSL_accept() failed: error:140D9115:SSL routines:SSL_GET_PREV_SESSION:session id context uninitialized, session=<nkrktpY6XMXUaJOh> Can anyone advice any solution? Dovecot version: 2.2.25 (7be1766) Operating system:CentOS 7, 64bit, selinux is off. CPU architecture: Intel x86 64bit. Filesystem: xfs # /usr/local/bin/doveconf -n # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.28.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_mechanisms = plain login auth_ssl_username_from_cert = yes disable_plaintext_auth = no mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = imap service auth-ssl { executable = auth -o auth_ssl_require_client_cert=yes unix_listener auth-master-ssl { mode = 0666 } unix_listener login/login-ssl { mode = 0666 } } service imap-login-ssl { chroot = login executable = imap-login -l imap-ssl login-ssl inet_listener imaps { port = 993 ssl = yes } user = $default_login_user } service imap-login { inet_listener imaps { port = 0 } } service imap-ssl { executable = imap -a auth-master-ssl unix_listener login/imap-ssl { user = $default_login_user } } ssl_ca = </etc/SslCert/dovecot/2016080505CAcert.WithCrl.pem ssl_cert = </etc/SslCert/dovecot/2016080506cert.pem ssl_key = </etc/SslCert/dovecot/2016080506PrivateKey.NoPassPhrase.pem userdb { driver = passwd } protocol imap { auth_ssl_require_client_cert = no ssl_require_crl = no ssl_verify_client_cert = no } protocol imaps { auth_ssl_require_client_cert = yes ssl_require_crl = yes ssl_verify_client_cert = yes } #

1 0

Re: Crash on opening mailbox
by Aki Tuomi 21 Aug '16

21 Aug '16

So it seems. Sorry must've missed them. ---Aki TuomiDovecot oy -------- Original message --------From: Ladislav Laska <laska(a)kam.mff.cuni.cz> Date: 21/08/2016 13:59 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: dovecot(a)dovecot.org Subject: Re: Crash on opening mailbox Hi! dovecot -n and backtrace are both attached in my original email, due to their size. Did the attachments not arrive? The relevant log does not contain much more than the trace, but here it is: Aug 21 12:58:28 ibex dovecot: imap-login: Login: user=<krakonos>, method=PLAIN, rip=77.48.73.189, lip=78.108.107.19, mpid=17785, TLS, session=<Q5igz5I66sxNMEm9> Aug 21 12:58:28 ibex dovecot: imap(krakonos): Debug: Effective uid=1000, gid=100, home=/home/krakonos Aug 21 12:58:28 ibex dovecot: imap(krakonos): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/.mbox Aug 21 12:58:28 ibex dovecot: imap(krakonos): Debug: mbox: INBOX defaulted to /home/krakonos/.mbox/inbox Aug 21 12:58:28 ibex dovecot: imap(krakonos): Debug: fs: root=/home/krakonos/.mbox, index=, indexpvt=, control=, inbox=/home/krakonos/.mbox/inbox, alt= Aug 21 12:58:29 ibex dovecot: imap(krakonos): Panic: file ../../../src/lib/array.h: line 219 (array_idx_i): assertion failed: (idx * array->element_size < array->buffer->used) Aug 21 12:58:29 ibex dovecot: imap(krakonos): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x8d91e) [0x7fa68fb6a91e] -> /usr/lib64/dovecot/libdovecot.so.0(+0x8da0a) [0x7fa68fb6aa0a] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa68fb08fce] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x79e56) [0x7fa68fe6ae56] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0xd6) [0x7fa68fe6b2a6] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_first_header+0x3d) [0x7fa68fe1e93d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x8de70) [0x7fa68fe7ee70] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x8e062) [0x7fa68fe7f062] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fa68fb74e03] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fa68fb7583d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7fa68fb56042] -> /usr/lib64/dovecot/libdovecot.so.0(+0x736c1) [0x7fa68fb506c1] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fa68fb74e03] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fa68fb7583d] -> /usr/lib64/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7fa68fb56042] -> /usr/lib64/dovecot/libdovecot.so.0(+0x736c1) [0x7fa68fb506c1] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7fa68fb74e03] -> /usr/lib64/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7fa68fb7583d] -> /usr/lib64/dovecot/libdovecot.so.0(message_get_header_size+0x74) [0x7fa68fb59d64] -> /usr/lib64/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x317) [0x7fa68fea7ff7] -> dovecot/imap() [0x41d4ae] -> dovecot/imap() [0x41b9fc] -> dovecot/imap(imap_fetch_more+0x3a) [0x41ca0a] -> dovecot/imap(cmd_fetch+0x32c) [0x40f57c] -> dovecot/imap(command_exec+0x9c) [0x41a29c] -> dovecot/imap() [0x418772] -> dovecot/imap() [0x418800] -> dovecot/imap(client_handle_input+0x175) [0x418b95] Aug 21 12:58:29 ibex dovecot: imap(krakonos): Fatal: master: service(imap): child 17785 killed with signal 6 (core dumped) On Sat, Aug 20, 2016 at 01:25:01AM +0300, Aki Tuomi wrote: > > > On August 19, 2016 at 10:00 PM Ladislav Laska <laska(a)kam.mff.cuni.cz> wrote: > > > > > > Hi! > > > > I'm currently experiencing a crash of dovecot 2.2.25 on Gentoo, upon opening > > mailbox. The crash only triggers on opening inbox, other mailboxes seem to > > work fine. It happens every time, and can be reproduced on request. I also > > briefly tried 2.2.19, and it behaves the same. > > > > The bug seems to be triggered by some mail, as I encountered it previously > > and fixed by removing some spam. I guess it might be malformed header of > > some kind. I can open the mailbox locally using mutt, but fail to do so > > remotely (using mutt or K-9 mail on android). Unforunately, I haven't been > > able to isolate the specific mail, as when I create a new mailbox, dovecot > > refuses to open it: > > > > [CANNOT] Mailbox isn't a valid mbox file (0.000 + 0.000 secs). > > > > I'm not really sure what's going on and will investigate further once I find > > some time to do so. > > > > I also experienced a similar problem on opening a specific mail, but it's > > much harder to reproduce and I currently don't have an example. The crash > > looks very similar, and only happens on first attempt to open a specific > > mail, it always works later on. > > > > I'm attaching a stack trace and dovecot -n. I'm also willing to send the > > binary and core dump, but not publicly, as I'm not eager to share whatever's > > inside with the whole world. > > > > Other than what I mentioned, I'm running pretty standard setup, with postfix > > on Gentoo x86_64, ext4 fs, quota and disk space is plentiful. The delivery > > agent is dovecot itself, in postfix/main.cf I have: > > > > mailbox_command = /usr/libexec/dovecot/deliver > > > > I'm using sieve script to file my mail, but the problem manifested even > > before when I was still using procmail to deliver my mail (I migrated > > because I had doubts about procmail and dovecot lock cooperation) > > > > I'll keep my mailbox corrupted for a few more days, and access the mail only > > locally, hoping to test a potential fix. Let me know if you need any more > > info/experimentation. Also, if you know a good way to find the mail that > > causes the trouble out of the core, let me know, I'd be glad to forward it > > for testing. > > > > Thanks and I hope we can find (and fix) the problem! > > > > -- S pozdravem Ladislav Láska > > <laska(a)kam.mff.cuni.cz> > > Katedra Aplikované Matematiky, MFF UK tel.: +420 739 464 167 > > Hi! > > Please provide > > doveconf -n > > relevant log files (or at least anything you care to share) > > gdb /path/to/binary /path/to/core > bt full > > --- > Aki Tuomi > Dovecot Oy -- S pozdravem Ladislav Láska <laska(a)kam.mff.cuni.cz> Katedra Aplikované Matematiky, MFF UK tel.: +420 739 464 167

1 0

Dovecot & Thunderbird on shared mbox
by Ruga 19 Aug '16

19 Aug '16

Occasional error from TB when selecting a dovecot's shared mbox: "Unable to open the summary file for [shared]" "Perhaps there was an error on disk, or the full path is too long." The server's disk is clear, and the longest full path is [a-zA-Z\/\.]{46}. The error occurs occasionally.

2 2

POP3 strange logging behavior after upgrade from 2.2.13 to 2.2.25
by Iavor Stoev 19 Aug '16

19 Aug '16

Hello, I've tested the patch and can confirm that the issue is resolved. Thank you for your assistance! Iavor Stoev Project Manager // Head of System & Network Administration Department ICDSoft Ltd - http://icdsoft.com On 18.8.2016 г. 18:14 ч., dovecot-request(a)dovecot.org wrote: > Hi! > > This has been now fixed in > https://github.com/dovecot/core/commit/7424d35ff1b7d17c0caf7b426c0ef3c2b822… > > Aki Tuomi > Dovecot Oy

1 0

What might cause messages delivered with dovecot-lda to be "invisible" to IMAP clients?
by Ben Johnson 19 Aug '16

19 Aug '16

Hello! I'm attempting to use dovecot-lda, and for whatever reason, messages that I send with it are not visible in my IMAP client. $ dovecot --version 2.2.22 (fe789d2) (Full "doveconf -n" output is at the bottom of this message!) Here's the the sequence of commands that I'm using: # su vmail $ echo 'This is a test message.' > /tmp/test.txt $ stat /tmp/test.txt File: '/tmp/test.txt' Size: 24 Blocks: 8 IO Block: 4096 regular file Device: fd01h/64769d Inode: 783925 Links: 2 Access: (0664/-rw-rw-r--) Uid: ( 5000/ vmail) Gid: ( 5000/ vmail) Access: 2016-08-18 20:49:38.419011552 -0400 Modify: 2016-08-18 20:49:07.178995015 -0400 Change: 2016-08-18 20:49:38.191011425 -0400 Birth: - $ /usr/lib/dovecot/dovecot-lda -d "test(a)example.com" -p "/tmp/test.txt" When I do this, the destination mailbox acts like there's a new message (I'm using Thunderbird, and the mailbox is highlighted in blue and bolded, which is the "new mail" behavior in this client). But when I "check my inbox", i.e., click on the Inbox, I don't see the new message. With regard to the filesystem, the message is present and contains the intended contents. Here's the "stat" output: $ stat /var/vmail/example.com/ben/Maildir/cur/1471567777.M685753P32257.example.com,S=24:2, File: '/var/vmail/example.com/ben/Maildir/cur/1471567777.M685753P32257.example.com,S=24:2,' Size: 24 Blocks: 8 IO Block: 4096 regular file Device: fd01h/64769d Inode: 783925 Links: 2 Access: (0664/-rw-rw-r--) Uid: ( 5000/ vmail) Gid: ( 5000/ vmail) Access: 2016-08-18 20:51:05.647059340 -0400 Modify: 2016-08-18 20:50:58.543055378 -0400 Change: 2016-08-18 20:50:58.543055378 -0400 Birth: - Might anyone know why I'm not "seeing" this message in my IMAP client? Interestingly, I tried another IMAP client (Blue Mail for Android), and I can actually see the messages there, but they appear in the Inbox as: (No subject) <Empty Message> When I click on the messages, Blue Mail simply displays "No text", without the quotes. Surely, I'm overlooking something simple... Thank you for any help here! -Ben Full "doveconf -n" output: $ doveconf -n # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-34-generic x86_64 Ubuntu 16.04.1 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_max_userip_connections = 100 mail_plugins = " quota" mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /bin/bash antispam_pipe_program_args = /usr/local/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_rule4 = INBOX:storage=+100M quota_warning = storage=100%% quota-reached 100 %u %d quota_warning2 = storage=95%% quota-warning 95 %u %d quota_warning3 = storage=80%% quota-warning 80 %u %d quota_warning4 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve sieve_max_redirects = 25 } postmaster_address = postmaster(a)example.com protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 512 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-below { executable = script /usr/local/bin/quota-below.sh unix_listener quota-below { group = vmail mode = 0666 user = vmail } user = vmail } service quota-reached { executable = script /usr/local/bin/quota-reached.sh unix_listener quota-reached { group = vmail mode = 0666 user = vmail } user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol lmtp { mail_plugins = quota sieve postmaster_address = webmaster@localhost }

1 1

Quota issue: enforced, but reporting issue
by dovecot＠avv.solutions 18 Aug '16

18 Aug '16

Hello everyone, I face the following challenge: - dovecot 2.2.13 - userdb: passwd-file - quota enabled: -- default 1GB -- changed for some users thru users file: user@domain:passwd::::::userdb_quota_rule=*:storage=15M - when sending a message to this user while near quota, warnings are correctly triggered => *OK* - when sending a message to this user while over quota, message is refused => *OK* - when checking quota from mail client (eg Thunderbird 45.2), reported quota is.. 1GB => *NOK* - some config: mail_plugins = quota notify acl plugin { acl_shared_dict = file:/sd/MAIL_IMAP_POP/%d/shared-mailboxes quota = maildir:User quota:ns= quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=90%% quota-warning 90 %u %d quota_warning2 = storage=75%% quota-warning 75 %u %d } protocol imap { mail_plugins = quota notify acl imap_quota imap_acl service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } - 90-quota: passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users } userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users # Default fields that can be overridden by passwd-file #default_fields = quota_rule=*:storage=1G # Override fields from passwd-file #override_fields = home=/home/virtual/%u } Any idea? Already spent hours on this. Thank you in advance for the help. Cheers A.

1 0

Reporting on CephFS being ready to use with Dovecot
by Daniel van Ham Colchete 18 Aug '16

18 Aug '16

I would like to report that from version 10.2.3 on (next release), Ceph FS is working really well with Dovecot systems. For those that don't know, Ceph is a "distributed object store and file system designed to provide excellent performance, reliability and scalability.". We have used it here since 2013 very successfully, but never with our Dovecot setup. For more information go on http://ceph.com/. Since Ceph Jewel (the current version), Ceph FS is considered production ready by their team. With Ceph FS you have a cache-coherent POSIX-compliant [1] clustered file system, without most of the NFS shortcomings. Ceph have very nice features like online upgrades, online maintenance, constant deep scrubbing of replicated data, cache tiering (HD -> SSD -> etc), erasure coding (clustered RAID6 for really old email - I'm not using), etc. Ceph is very complex to operate but very flexible and robust. This year we moved our Dovecot servers to a Ceph based system, found one bug there (http://tracker.ceph.com/issues/15920) when Dovecot's LMTP was delivery an email, and the fix is about to be released on version 10.2.3. I have been using a fix-build here for a couple of months without issue. So, now I'm glad to share with you guys that it works really well! My setup involves two clusters, each with about 30k-40k users. Each cluster will have two HD storages (with 6TB HDs), two SSD storages (with Intel 480GB SSDs) and two frontends. In a few months will add a third server of each type. Clusters work better with 3's. Here we used mdbox as it is better performant on Ceph for maintenance tasks, since each file is an object on Ceph and maintenance costs increase with the number of objects. We created two base directories: - /srv/dovecot/mail/%d/%n - stored on HDs with the most recent files cached on SSDs, thanks to Ceph Cache Tiering. Also, the directory structure itself is stored on SSDs, so dir listings are very fast (Ceph FS Metadata). - /srv/dovecot/index/%d/%n - stored only on SSDs, thanks for Ceph FS file layout. On our setup about 17% of the IOPs are going to HDs, the rest will go to SSDs, even though SSDs are less than 5% of the space. This is a matter of tuning the cache tiering parameters, but we didn't look at that yet. That setup is working like a charm, performance is about 53% better than when we were using NFS on the same hardware. Our previous DRBD+Heartbeat setup didn't allow for online maintenance and had a few problems. Now we can do 100% online maintenance on storage without users noticing, and on frontends with just a reconnect but without any downtime. Ceph is hard to learn at first but those with bigger setups and stronger SLAs will want to take a look at that. I really recommend that the Dovecot community take at look at that setup. Good luck! Best, Daniel Colchete [1] http://docs.ceph.com/docs/hammer/dev/differences-from-posix/

3 2

POP3 strange logging behavior after upgrade from 2.2.13 to 2.2.25
by Iavor Stoev 18 Aug '16

18 Aug '16

Hello, After the upgrade from Dovecot version 2.2.13 to 2.2.25, we experience the following strange behavior with POP3 logging. When a connection is closed with reason "Connection closed" & "Disconnected for inactivity", the number of deleted mails is missing. Like del=/1166 & del=/4138 from the example bellow. With Dovecot 2.2.13: Feb 14 03:35:20 serverXYZ dovecot: pop3(user(a)domain.com): Connection closed top=0/0, retr=0/0, del=0/946, size=39500197 Feb 15 16:49:18 serverXYZ dovecot: pop3(user(a)domain.com): Disconnected for inactivity top=0/0, retr=0/0, del=0/739, size=52319632 With Dovecot 2.2.25: Jul 31 02:56:03 serverXYZ dovecot: pop3(user(a)domain.com): Connection closed top=1/1380, retr=0/0, del=/4138, size=284167741 Jul 31 02:34:47 serverXYZ dovecot: pop3(user(a)domain.com): Disconnected for inactivity top=0/0, retr=0/0, del=/1166, size=111425436 For sessions completed normally, everything works fine with both Dovecot versions: Jul 31 06:55:48 serverXYZ dovecot: pop3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jul 31 02:36:59 serverXYZ dovecot: pop3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=1/18821, del=1/1, size=18803 Please advise if this behavior is normal and if yes how should we read entries like "del=/4138"? Thank you Iavor Stoev Project Manager // Head of System & Network Administration Department ICDSoft Ltd - http://icdsoft.com

2 1

2.3.0~alpha0-1~auto+197: Crash when openening a message via IMAP
by Ralf Hildebrandt 18 Aug '16

18 Aug '16

>From the log: Jul 11 13:12:42 mproxy dovecot: imap-login: Login: user=<hildeb>, method=PLAIN, rip=141.42.206.36, lip=141.42.206.11, mpid=27254, TLS, session=<TGwoO1o3id+NKs4k> Jul 11 13:12:44 mproxy dovecot: imap(hildeb)<TGwoO1o3id+NKs4k>: Panic: file imap-client.c: line 854 (client_check_command_hangs): assertion failed: ((io_loop_find_fd_conditions(current_ioloop, client->fd_out) & IO_WRITE) != 0) Jul 11 13:12:44 mproxy dovecot: imap(hildeb)<TGwoO1o3id+NKs4k>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x8e09e) [0x7efd1d3a309e] -> /usr/lib/dovecot/libdovecot.so.0(+0x8e18c) [0x7efd1d3a318c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7efd1d34169e] -> dovecot/imap [hildeb 141.42.206.36 UID FETCH - 8192 bytes waiting corked](+0x1ad42) [0x55649b35cd42] -> dovecot/imap [hildeb 141.42.206.36 UID FETCH - 8192 bytes waiting corked](client_output+0x118) [0x55649b35ce68] -> /usr/lib/dovecot/libdovecot.so.0(+0xaf370) [0x7efd1d3c4370] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7efd1d3b715c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x101) [0x7efd1d3b85b1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7efd1d3b71e5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x30) [0x7efd1d3b7380] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7efd1d347c13] -> dovecot/imap [hildeb 141.42.206.36 UID FETCH - 8192 bytes waiting corked](main+0x322) [0x55649b34faf2] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7efd1cf6c830] -> dovecot/imap [hildeb 141.42.206.36 UID FETCH - 8192 bytes waiting corked](+0xdc6f) [0x55649b34fc6f] Jul 11 13:12:44 mproxy dovecot: imap(hildeb)<TGwoO1o3id+NKs4k>: Fatal: master: service(imap): child 27254 killed with signal 6 (core dumped) # 2.3.0.alpha0 (3aae884) [XI:2:2.3.0~alpha0-1~auto+197]: /etc/dovecot/dovecot.conf -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 5

dsync replication issue
by Cédric ML 18 Aug '16

18 Aug '16

Hello, I'm facing a problem with dsync : replication between my two dovecot 2.2.10 servers (10.10.10.10 = serverA and 10.10.10.11 = serverB) is not done when a mail is received on any of the two servers. Sync is correctly working when running "doveadm [-D] sync -A tcp:10.10.10.10:12345" from serverB or "doveadm [-D] sync -A tcp:10.10.10.11:12345" from serverA Sieve vacation message replication is functional too, and triggered when a change is done on any of the two servers. I guess it's a notify problem, but I did not find how to debug it... I've enabled dovecot debug, but I don't see anything related to notify in logfile. Here's my doveconf -n (it's the same on the two servers, except IP address changes) Hope somebody will be able to help me. Regards, Cédric --------------------------------------- root@dovecot1-pa3:/etc/dovecot/conf.d# doveconf -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-327.28.2.el7.x86_64 x86_64 CentOS Linux release 7.2.1511 (Core) auth_debug = yes auth_mechanisms = plain login debug_log_path = /var/log/dovecot-deliver.log doveadm_password = tgIK16l5L26023b doveadm_port = 12345 log_path = /var/log/dovecot-deliver.log mail_debug = yes mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vacation-seconds mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = tcp:10.10.10.10:12345 quota = maildir:User quota quota_grace = 10%% quota_rule = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Boite de messagerie pleine. quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_before = /home/vmail/%d/%n/sieve/Vacation.sieve sieve_dir = ~/sieve sieve_extensions = +vacation-seconds } protocols = imap pop3 sieve sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = mailbox } unix_listener replication-notify { mode = 0666 user = mailbox } } service auth { inet_listener { port = 12346 } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mailbox mode = 0660 user = mailbox } } service config { unix_listener config { user = mailbox } } service doveadm { inet_listener { port = 12345 } user = mailbox } service imap-login { inet_listener imaps { port = 993 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 1 service_count = 1 vsz_limit = 64 M } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = mailbox } user = mailbox } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lda { mail_plugins = " quota sieve quota" postmaster_address = postmaster(a)domain.fr } protocol imap { mail_plugins = " quota imap_quota" }

1 0

POP3 strange logging behavior after upgrade from 2.2.13 to 2.2.25
by George Dankin 17 Aug '16

17 Aug '16

Hello, I experience exactly the same issue. Is there any progress regarding that bug report? Cheers George Dankin Forum Leader HardwareBG.com

1 0

sieve-pipe
by zhaochangpan 16 Aug '16

16 Aug '16

hello,everyone           <span id="tran_0" data-aligning="#tran_0,#src_0" class="copied" style="margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(102, 102, 102); font-family: Tahoma, Arial, 宋体, 'Malgun Gothic'; line-height: 24px; text-align: justify; widows: auto; background-color: rgba(255, 255, 255, 0.8);">I want to use the dovecot sieve - pipe plugin, I look at the website, but the plugin is not installed.<span id="tran_1" data-aligning="#tran_1,#src_1" class="copied" style="margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(102, 102, 102); font-family: Tahoma, Arial, 宋体, 'Malgun Gothic'; line-height: 24px; text-align: justify; widows: auto; background-color: rgba(255, 255, 255, 0.8);">Does anyone can help me, my dovecot is 2.2.Thank you<span id="tran_2" data-aligning="#tran_2,#src_2" class="copied" style="margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(102, 102, 102); font-family: Tahoma, Arial, 宋体, 'Malgun Gothic'; line-height: 24px; text-align: justify; widows: auto; background-color: rgba(255, 255, 255, 0.8);"> very much.<span id="tran_3" data-aligning="#tran_3,#src_3" class="copied" style="margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(102, 102, 102); font-family: Tahoma, Arial, 宋体, 'Malgun Gothic'; line-height: 24px; text-align: justify; widows: auto; background-color: rgba(255, 255, 255, 0.8);">Reference:http://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Pipe

2 1

dsync: Keywords not being replicated
by Karsten Heiken 16 Aug '16

16 Aug '16

I just noticed that some IMAP keywords are not being replicated through dsync backup/sync using Dovecot 2.2.24 from Debian backports: On the master server everything looks fine: RECORD: seq=3, uid=44731, flags=0x09 (Seen Answered) - ext 0 keywords : (0900) <-- 0900 - ext 1 modseq : 701695 (ffb40a0000000000) - ext 3 cache : 3948 (6c0f0000) - ext 4 sort-s : 0 (00000000) On Replica: RECORD: seq=3, uid=44731, flags=0x09 (Seen Answered) - ext 0 keywords : (0000) <-- 0000 - ext 1 modseq : 701695 (ffb40a0000000000) - ext 3 cache : 3948 (6c0f0000) In this case the "forwarded" keyword is gone. Thunderbird no longer displays the message as having been forwarded. The command I used was: > doveadm sync -u myuser -l 60 -N tcp:replica:24245 My config is attached. It looks like there are other users also having the same problem: http://dovecot.org/list/dovecot/2016-January/102951.html Thanks, Karsten -- Karsten Heiken Leibniz Universität IT Services Kommunikationssysteme E-Mail, XMPP, Kalender Schloßwender Str. 5 D-30159 Hannover

1 0

[Dovecot] How to disable SSL and TLSv1.1?
by Darren Pilgrim 16 Aug '16

16 Aug '16

I'm running Dovecot 2.2.5 and want to make it refuse SSLv2, SSLv3 and TLSv1.0. Clients will opportunistically use TLS 1.1 and 1.2, but now I want require they do so. Is it enough to set ssl_cipher_list = HIGH:!SSLv2:!SSLv3:!TLSv1.0:!aNULL:!MD5 or are there additional settings I need to specify?

8 12

Segfault in lib11_trash_plugin.so
by Василий Севостьянов 16 Aug '16

16 Aug '16

After a recent update of dovecot to 2.2.devel (d81a83b) I started to get errors like that: Jul 26 07:34:44 mx kernel: pop3[17311]: segfault at 1ee74b0d5 ip 00000001ee74b0d5 sp 00007ffe593dc3c0 error 14 in lib11_trash_plugin.so[ 7f66edce2000+3000] Jul 26 08:11:25 mx dovecot: pop3(xxxxxxxx): Fatal: master: service(pop3): child 17311 killed with signal 11 (core dumps disabled) My dovecot configuration follows: # 2.2.devel (d81a83b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (3f51b82) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 ext4 auth_default_realm = euct.ru auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * login_greeting = Hello. mail_gid = 5000 mail_location = maildir:/home/vmail/%d/%u mail_max_userip_connections = 25 mail_plugins = " quota trash" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { list = children location = maildir:/home/vmail/%d/%%n:INDEX=/home/vmail/%d/%n/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe autoexpunge = 1 weeks special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl deleted_to_trash_folder = Trash quota = dict:User quota::proxy::quota quota_grace = 50M quota_rule = *:storage=250M quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/sieve/.dovecot.sieve sieve_dir = ~/sieve sieve_vacation_default_period = 7d sieve_vacation_max_period = 30d sieve_vacation_min_period = 1d trash = /etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)euct.ru protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = dovecot mode = 0666 user = vmail } } service dict { unix_listener dict { group = dovecot mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = required ssl_cert = </etc/letsencrypt/live/mail.euct.ru/fullchain.pem ssl_dh_parameters_length = 2048 ssl_key = </etc/letsencrypt/live/mail.euct.ru/privkey.pem ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota trash acl sieve" } protocol imap { mail_plugins = " quota trash quota imap_quota acl imap_acl deleted_to_trash" }

2 1

public namespace quota
by Chris 15 Aug '16

15 Aug '16

All, sorry, I've to ask again. I'm trying to define quotas for public namespace subfolders: ns=public/ - DepartmentA - 50G - DepartmentB - 500M - DepartmentC - 10G public/ shouldn't have a limit. public/DepartmentA is independent of B and C. Is this possible with dovecot? I've added the following rules quota = maildir:User quota quota2 = maildir:Public quota:ns=public/ quota2_rule = *:storage=10M quota2_rule2 = DepartmentA:storage=+50M but then only 10M is shown for DepartmentA in Thunderbird. I'm using Maildir++. maildirsize is only created in public/ toplevel, not in public/DepartmentA. Public-subfolders are owned by vmail system-user. Different virtual users' ACLs are set (and working). Any help is appreciated! - Chris

1 0

Symbolic link for sieve script not created by dsync
by Laz C. Peterson 15 Aug '16

15 Aug '16

Hello Dovecot ~ I know this bug has been discussed previously for other versions of dsync, pigeonhole and dovecot … But we still can’t get dsync to create the symbolic link for the sieve script after it is created on a replicated server. We are running Ubuntu 16.04.1 with the official Ubuntu dovecot packages (2.2.22). Sieve script itself is replicated, but not the symbolic link. Any suggestions? ~ Laz Peterson Paravis, LLC

1 1

fts-solr autoindex issue in public mailbox
by maks 15 Aug '16

15 Aug '16

Hello everyone, I have a public mailbox: /var/mail/example.com/public/public_mailbox with "Public/" namespace set up in config file. When i move message from user's INBOX to one of mailboxes inside Public/ (for example Public/archive), i'm getting "indexer-worker: Info: Indexed 0 messages in Public/archive" in logs and i can't find the message through the FTS search. If i move the message back from Public/archive into personal mailbox the message is indexed by indexer-worker "indexer-worker: Info: Indexed 1 messages in temp_folder" If i perform "doveadm index Public/archive" then the message is added to the index. Dovecot version: 2.2.9 FTS backend: Solr fts_autoindex = yes Searching through localhost:8983/solr/collection1 gives the same result.

1 0

Bug with shared access to mailbox
by van der Kamp, John 15 Aug '16

15 Aug '16

Hello, I'm testing dovecot with some setups, and one of them is with shared mailboxes. The test I wrote will create and delete mail using multiple connections to the same user and folder. Each connection makes a couple of mails, remembers the uid from APPENDUID, and will delete those emails again. At the end of the test I expect an empty folder. This is not what happens. At the end I still have several mails in the folder. I lack insight in the dovecot source to tell exactly what's going on. I've tested this with different setups: 1) local system user, connecting over localhost -> bug is present 2) local system user, connecting over internet -> bug is present, but is harder to reproduce 3) dovecot as proxy to another imap server -> bug is present In step 3, you can even setup a dovecot to be a proxy to another dovecot server. >From logging in the other imap server I've seen that a client command to the proxy like: TAG UID STORE 1:3 +FLAGS (\Deleted) TAG UID EXPUNGE 1:3 will be sent to the other imap server in 3 steps, one for each message. When running the test with multiple threads, that logging shows that some uids are never sent to the other imap server, and some uids are sent over different connections than they original were sent to. (Thread 1 deletes 1:3, Thread 2 deletes 4:6, the proxy of Thread 1 might expunge messages from Thread 2 and vice versa). Attached is a python script which tests the behavior. The script expects a file named "testmail.eml" to upload to the imap server. I used an email which was about 75 kB. I tested using version: 2.2.22 (fe789d2). Let me know if I can help in any other way too. John

5 4

Save user passwords in clear text
by Lefteris Tsintjelis 13 Aug '16

13 Aug '16

Is it possible to save user passwords as clear text through dovecot? I am currently using MD5 passwords and I allow only "plain and login” mechanisms but I want to switch my database to clear text as this will give me the ability to use more mechanisms such as CRAM-MD5. Is this possible? Thank you

4 4

Sieve with many criteria
by Vince42 13 Aug '16

13 Aug '16

Hi, currently I am putting all my filter strings into a big array in my sieve script. I wonder whether this is the best way to store many criteria. Any suggestions? -- Cheers, \\|// Vince (o o) ----------------------------ooO-(_)-Ooo------------------------- ''' (o)_(o) [ ][0][ ] ô¿ô (=°o°=) World Domination by Copy and Paste [ ][ ][0] - (")_(") [0][0][0] () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Ooo. ---------------------------.ooO----( )------------------------- ( ) (_/ \_)

1 0

receiving and associating emails to single a/c
by David Tildesley 13 Aug '16

13 Aug '16

Hi,Looking for advice.Scenario: we have a dmz mta that currently redirects received emails for a selection of email domains to specific internal ms exchange servers. We want this mta to redirect incoming customer emails directed to a set of email addresses numbering about 30, to a dovecot server and associate these emails to a single dovecot user account so that a contact Centre platform can pull these emails on a frequent cycle.How to go about configuring this on the dovecot? I assume a postfix server needs to be installed on the dovecot server for the dmz mta to send these emails to dovecot inbox? Any advice most appreciated. David. Sent from Yahoo Mail on Android

2 2

Dovecot Director self ip
by Tomaž 12 Aug '16

12 Aug '16

Hello everybody! I kindly ask somebody to help me with this problem. I'm trying to configure Dovecot proxy with Director. On the same machine is KeepAlived that needs this configured to bind non local IP: sysctl net.ipv4.ip_nonlocal_bind=1 But as already mentioned in this email: http://www.dovecot.org/list/dovecot/2012-November/087033.html Dovecot Director needs sysctl net.ipv4.ip_nonlocal_bind=0 (if this is set, everything works ok, but we break keepalived) because otherwise the second server uses IP from the first server as "self". Is it possible to configure this some other way, so Dovecot Director doesn't try to bind to all IPs and because of above configuration, uses the first one that binds. This is the result from director status on server 1: root@u1:~# doveadm director ring status director ip port type last failed status 172.16.100.191 9090 self never handshaking 172.16.100.192 9090 never handshaking and server 2: root@u2:/var/log# doveadm director ring status director ip port type last failed status 172.16.100.191 9090 self never handshaking 172.16.100.192 9090 never My dovecot config: http://pastebin.com/RnmHRWhY Thank you very much! Thomas

1 1

dovecot 2.2.25 & deleting emails from \Junk special-use assigned folder
by Marc Jauvin 11 Aug '16

11 Aug '16

Since our cPanel installation upgraded Dovecot from 2.2.23 to 2.2.25, deleting emails located in the Junk folder (\Junk special-use), the emails end-up in the \Trash special-use folder instead of being purged as before. Is there something that changed or this some configuration I am missing? Thanks for any help regarding this. -- Marc Jauvin Register4less, Inc. 514-905-6500 x403

1 0

Header's corrupted flag is set
by Tom Sommer 11 Aug '16

11 Aug '16

I have a ton of these errors in my logs: Aug 11 14:16:04 imap(xxxx(a)xxxxx.xxxx): Error: Corrupted index file...../dovecot.list.index: Header's corrupted flag is set Does Dovecot not automatically fix these? Or what is the correct action to take? -- Tom

1 0

news page not been updated
by Chris 11 Aug '16

11 Aug '16

The url http://www.dovecot.org/doc/NEWS has not been updated for a while, I suggest either killing it or updating it again. Chris

1 0

Re: Replication issue EOF or unknown flag V
by Rick Romero 10 Aug '16

10 Aug '16

Quoting Rick Romero <rick(a)havokmon.com>: > Hi, I'm trying to sort out a replication error: It was working > initially, but now it no longer works. Dovecot 2.2.25, Maildir format > On the 'master' side I see : Aug 09 14:02:17 dsync-server(rick at > havokmon.com[1]): Error: read(172.16.1.86) failed: EOF (version not > received) Aug 09 14:02:17 dsync-local(rick at havokmon.com[1]): Error: > read(172.16.1.86) failed: EOF (version not received) On the 'slave' > side I see: Aug 09 14:02:10 doveadm(172.16.1.81,rick at > havokmon.com[1]): Error: doveadm client: Unknown flag: V Aug 09 14:02:17 > doveadm(172.16.1.81,rick at havokmon.com[1]): Error: doveadm client: > Unknown flag: V on FreeBSD 10.2. I changed my mailbox to be on the 'slave' server, and the error messages switched sides. # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: FreeBSD 10.2-RELEASE amd64 auth_master_user_separator = * auth_mechanisms = plain login auth_username_translation = %@ auth_verbose = yes debug_log_path = /var/log/dovecot-debug.log default_internal_user = vpopmail default_login_user = dovecot default_vsz_limit = 1536 M disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 12345 first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 log_path = /dev/stderr login_greeting = Dovecot ready. login_trusted_networks = 172.16.1.0/24 mail_fsync = never mail_plugins = " quota zlib stats notify replication" mail_privileged_group = mail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace compat { alias_for = hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } namespace inbox { inbox = yes location = prefix = separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-master-sql.conf driver = sql master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = tcp:172.16.1.81 quota = maildir quota_rule = Trash:storage=+10%% stats_refresh = 30 secs stats_track_cmds = yes } replication_max_conns = 15 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpopmail } unix_listener replication-notify { mode = 0666 user = vpopmail } } service anvil { client_limit = 4799 } service auth-worker { user = $default_internal_user } service auth { client_limit = 4996 unix_listener auth-master { mode = 0600 } } service config { unix_listener config { user = vpopmail } } service doveadm { inet_listener { port = 12345 } user = vpopmail } service imap-login { process_limit = 2548 process_min_avail = 25 service_count = 1 } service imap-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-imap.sh user = vpopmail } service imap { executable = /usr/local/libexec/dovecot/imap imap-postlogin process_limit = 2048 } service lmtp { executable = lmtp -L inet_listener lmtp { port = 24 } user = vpopmail } service pop-postlogin { executable = script-login /usr/local/etc/dovecot/lastauth-pop.sh user = vpopmail } service pop3-login { process_limit = 2048 process_min_avail = 15 service_count = 1 } service pop3 { executable = /usr/local/libexec/dovecot/pop3 pop-postlogin } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } service stats { fifo_listener stats-mail { mode = 0600 user = vpopmail } } shutdown_clients = no ssl_cert = </etc/ssl/mail.pem ssl_key = </etc/ssl/mail.key userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 25 mail_plugins = " quota zlib stats notify replication imap_zlib quota imap_quota notify replication" } protocol pop3 { mail_max_userip_connections = 25 mail_plugins = quota notify replication namespace inbox { location = mailbox Spam { auto = no autoexpunge = 1 weeks special_use = \Junk } mailbox Trash { auto = no autoexpunge = 2 weeks special_use = \Trash } prefix = } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota notify replication userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql name = } } protocol lmtp { auth_debug = no info_log_path = /var/log/dovecot-lmtp.log mail_plugins = sieve quota notify replication namespace inbox { location = mailbox Spam { auto = no autoexpunge = 1 weeks special_use = \Junk } mailbox Trash { auto = no autoexpunge = 2 weeks special_use = \Trash } prefix = } postmaster_address = admin(a)domain.com userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql name = } } driver = mysql connect = host= user= password= dbname=vpopmail default_pass_scheme = CRYPT password_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, pw_passwd AS password, IF(host IS NULL or host = '','172.16.1.86', host ) as host, 'Y' AS proxy_maybe, pw_dir as userdb_home, 89 as userdb_uid, 89 as userdb_gid FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' AND !(pw_gid & 8) AND !(pw_gid & 2) AND ('%r'!='172.16.1.93' or !(pw_gid & 4)) AND ('%r'!='172.16.1.92' or !(pw_gid & 4)) user_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user, "89" as uid, "89" as gid, IF(host IS NULL or host = '','172.16.1.86', host ) as host, 'Y' AS proxy_maybe, pw_dir as home, pw_dir as mail_home, CONCAT('maildir:', pw_dir , '/Maildir/' ) as mail_location FROM vpopmail WHERE pw_name = '%n' AND pw_domain = '%d' iterate_query = SELECT CONCAT(pw_name, '@', pw_domain) AS user from vpopmail Links: ------ [1] http://dovecot.org/cgi-bin/mailman/listinfo/dovecot

1 0

Replication issue EOF or unknown flag V
by Rick Romero 09 Aug '16

09 Aug '16

Hi, I'm trying to sort out a replication error: It was working initially, but now it no longer works. Dovecot 2.2.25, Maildir format Delivering via LMTP. If I run doveadm replicator replicate rick(a)havokmon.com On the 'master' side I see : Aug 09 14:02:17 dsync-server(rick(a)havokmon.com): Error: read(172.16.1.86) failed: EOF (version not received) Aug 09 14:02:17 dsync-local(rick(a)havokmon.com): Error: read(172.16.1.86) failed: EOF (version not received) On the 'slave' side I see: Aug 09 14:02:10 doveadm(172.16.1.81,rick(a)havokmon.com): Error: doveadm client: Unknown flag: V Aug 09 14:02:17 doveadm(172.16.1.81,rick(a)havokmon.com): Error: doveadm client: Unknown flag: V This seems to just happen with my mailbox, so I've completely removed it on both sides, to no avail. My mailbox was re-created on the slave side, but nothing else has occurred (no folders or new mail). #doveadm user rick(a)havokmon.com field value uid 89 gid 89 home /home/prime/domains/havokmon.com/rick mail maildir:/home/prime/domains/havokmon.com/rick/Maildir/ host 172.16.1.81 proxy_maybe Y mail_home /home/prime/domains/havokmon.com/rick mail_location maildir:/home/prime/domains/havokmon.com/rick/Maildir/ Any thoughts?

1 0

custom mail_location detection for dovecot lda
by Alexander 'Leo' Bergolth 09 Aug '16

09 Aug '16

Hi! Is it possible to do something like "post-login scripting" to detect and set a per-user custom mail location for dovecot LDA delivery? I tried to use a wrapper-script around dovecot-lda that sets the environment variables MAIL="..." and USERDB_KEYS="MAIL" just like overriding userdb fields may be done using imap postlogin scripts, but unfortunately this doesn't seem to be honored. (Also tried with dovecot-lda -k.) Woud be very useful for slow migration from one mailbox format to another. Is there any other way to supply a custom mail_location to dovecot-lda? Cheers, --leo -- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria

2 4

help me with sieve_pipe
by 句号先生。 | 08 Aug '16

08 Aug '16

dear all I have a question about sieve_pipe use. how to open the plugin,and then specify the sieve script. the above is my dovecot configuration,and the sieve script,help me to have a look at the right ,thank you. Thanks !! Waiting....

2 1

Questions about how fts-solr works
by Radu Gheorghe 08 Aug '16

08 Aug '16

Hello, I'm quite a Dovecot newbie, so please be gentle :) Though I did my homework as well as I could, I still have some questions regarding the Solr plugin. Specifically: - I understand that by default, a mailbox is indexed on the first search and then deltas are indexed in subsequent searches. Are Emails indexed in batches or one by one? Looking at the code, I see a hardcoded limit of 1000, and I'm guessing if the mailbox is done and there are <1000 Emails in the buffer, it just flushes them, right? - if I set fts_autoindex=yes, does it mean that as soon as the Email is delivered by the MTA, it will be indexed in Solr? or does it have to read by the user or touched in any way? - also, with fts_autoindex=yes, are Emails indexed in batches? if yes, is there also a time limit besides the size limit? e.g. if only 100 messages were received - I have the same question about deletes: when do they happen, and are they batched? - what happens if Solr is unavailable? I know Dovecot keeps track of what indexed in dovecot.indexed files, but does it retry? if yes, what's the retry policy and can it be configured? Also, does it behave the same if Solr is actually available and throws an error? - the same question is for attachments, though I think this is general FTS - what if Tika fails to parse the attachment? Does Dovecot still index the Email metadata? As a side, I'm also wondering if I could use the Tika that comes with Solr (https://cwiki.apache.org/confluence/display/solr/Uploading+Data+with+Solr+C…) Can fts-solr handle attachments at all? I'm asking because I don't see that field in the default schema.xml - can I add arbitrary URI parameters to the Solr request? I see that one could fiddle with the path, which I assume will let one have one collection per mailbox (though I'm curious how that works with batches - I'm guessing one batch/indexing thread per mailbox?). Specifically, I'm interested in using the mailbox as a routing value - if I read the code well, Dovecot does a soft commit when it's done with the specific mailbox. For indexing at search time, I see why it makes sense. If I do "autoindex", can I disable that and let Solr autoSoftCommit every N seconds? That should improve indexing throughput and reduce load. I see that one can already do this for hard commits (I'd use autoCommit there, though a hard commit is also triggered when ramBufferSizeMB gets hit) - when querying, can I sort by an arbitrary field, such as the date? I saw I can sort by score, but I can't find anything in the code that will suggest it's supported - also when querying, can I specify which fields to return? I see that the plugin asks for Email ID, so I'm guessing it fetches things like from/to from the Email itself. I'm thinking that if I want to sort by those values I need to set docValues=true on them, to save memory. In that case, I might as well retrieve the original string from docValues, which should be a whole lot faster My plan is to do all sorts of tests, but having a better background on how it works will certainly help. Any pointers, feedback, encouragement, etc is certainly welcome - thanks in advance! Best regards, Radu -- Performance Monitoring * Log Analytics * Search Analytics Solr & Elasticsearch Support * http://sematext.com/

1 0

Dovecot book available again
by Peer Heinlein 08 Aug '16

08 Aug '16

Hi, after my publisher has to shut down his business at the end of last year, it took several months to organize everything. But it's done! I'm happy to announce: The Dovecot book is available again. You can order it at Createspace: https://www.createspace.com/5942312 Or Amazon: https://www.amazon.com/dp/1534895701 https://www.amazon.co.uk/dp/1534895701 https://www.amazon.de/dp/1534895701 And in some weeks in every book store by ISBN-13 978-1534895706. If you want to support the author and if you help us to make good books you should think about ordering it from Createspace instead of Amazon. There's a 10% discount for users of this mailinglist if you use the discount code VR5YF7W2 at Createspace. Valid until August, 21th. Feedback and comments by mail is appreciated, also comments and ratings at Createspace and Amazon :-) Thanks again to Timo and everybody from Dovecot Oy / Open-Xchange for their support. Peer P.S.: The German Dovecot-Book is also available at: http://www.dovecot-buch.de/online-shop/buch-bestellung/ -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

6 5

Dovecot password policy
by Robert Blayzor 06 Aug '16

06 Aug '16

Is there a way to configure Dovecot to perhaps filter/enforce which passwords are accepted before authenticating? Ie: Reject immediately (without a database lookup) if password is not X characters in length? ? -- Robert inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP Key: 78BEDCE1 @ pgp.mit.edu

4 5

Re: Dovecot password policy
by Joseph Tam 05 Aug '16

05 Aug '16

Robert Blayzor <rblayzor.bulk(a)inoc.net> writes: > Is there a way to configure Dovecot to perhaps filter/enforce which > passwords are accepted before authenticating? Ie: Reject immediately > (without a database lookup) if password is not X characters in length? Yes, use the checkpassword hook. http://wiki.dovecot.org/AuthDatabase/CheckPassword I think there also some PAM module that you can stack into your system that will enforce password policies. Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot and Solr 6
by KSB 05 Aug '16

05 Aug '16

Hi! Dovecot 2.2.24 Had set up solr and new schema collection. Copied dovecot provided schema. There was an error with booleans (while getting schema via http), which I "solved" by removing "add-unknown-fields-to-the-schema" from solrconfig.xml. It is correct way to solve this? Anyway, I run tcpdump to see network activity between dovecot and solr: #tcpdump -i lo port 8983 and see nothing while doing: #doveadm fts rescan -u username(a)domain.tld no output also from doveadm. Noticed that dovecot.index.log reapears in user mail root if deleted. plugin { fts = solr fts_solr = url=http://localhost:8983/solr/dovecot/ debug .. } -- KSB

3 4

Problem with sieve configuration on dovecot+debian_jessie+ISPC3
by Filip Loncar [WarpMax | FederationServers] 05 Aug '16

05 Aug '16

I'm new-ish to dovecot and sieve (haven't used it extensively till now) and I'm not sure that I configured everything propperly. The problem is that we're trying to get the following sieve code to run: require ["fileinto", "regex", "date", "relational", "vacation", "duplicate"]; require "duplicate"; if duplicate :header "message-id" { discard; } else { redirect "<somemail1>"; redirect "<somemail2>"; redirect "<somemail3>"; redirect "<somemail4>"; redirect "<somemail5>"; redirect "<somemail6>"; keep; } keep; But we're constantly getting the following error: sieve: info: started log at Aug 02 08:13:21. main script: line 5: error: require command: unknown Sieve capability `duplicate'. main script: line 6: error: unknown test 'duplicate' (only reported once at first occurence). main script: error: validation failed. Both me and my collegue can't find what's wrong with the system. I would appreciate any kind of help on this matter. Below's my configuration. # dovecot --version 2.2.13 # dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-45-pve x86_64 Debian 8.5 auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.duplicate passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve sieve_duplicate_default_period = 14d sieve_extensions = +vnd.dovecot.duplicate sieve_max_redirects = 6 sieve_plugins = sieve_extprograms } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 500 } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } # uname -a Linux fero 2.6.32-45-pve #1 SMP Wed Mar 30 12:22:08 CEST 2016 x86_64 GNU/Linux It's a Debain Jessie VM running ISPC3. -- Srdac(an pozdrav | Best regards Filip Lonc(ar ___________________________________________ WarpMax hosting *WarpMax hosting* *A* Tehnolos(ki park Varaz(din, Zagrebac(ka 89, Varaz(din, Croatia - Europe *T * +385 42 492 129, 490 090, +385 99 5896 123 ___________________________________ Ova elektronic(ka poruka, kao i svi eventualni privici, su povjerljivi i namijenjeni iskljuc(ivo naznac(enom primatelju(ima). Ukoliko niste naznac(eni primatelj(i) ove elektronic(ke poruke, molimo da odmah obavijestite pos(iljatelja, a sve kopije ove elektronic(ke poruke (ukljuc(ujuc'i i privitke) trajno obris(ete. Svaka neovlas(tena upotreba, distribucija, reprodukcija ili priopc'avanje ove poruke zabranjeno je. WarpMax hosting ne preuzima odgovornost za sadrz(aj ove poruke i eventualnu s(tetu nastalu primitkom ove poruke i priloga sadrz(anih u poruci. Ne jamc(imo da je ova elektronic(ka poruka slobodna od virusa. WarpMax hosting ne preuzima odgovornost za bilo kakav gubitak ili s(tetu koja nastane zbog prisutnosti virusa u elektronic(koj poruci. This e-mail, including all attached files, if any, is confidential and intended for the sole use by the person(s) mentioned as recipient(s). If you are not the named recipient(s) indicated in this message, please notify the sender immediately, and permanently delete all copies of this message (including any attachments). Any review, use, distribution, disclosure, printing or copying of this e-mail other than by the intended recipient(s) is prohibited. WarpMax hosting accepts no liability for content of this message and any potential damage caused by this message and files attached to it. No warranty is given that this email is free of viruses. WarpMax hosting accepts no liability for any loss or damage caused by presence of a virus.

4 3

New password hashing scheme as plugin
by Andreas Meyer 05 Aug '16

05 Aug '16

Hi, I want to add a new password hashing scheme as plugin and provide it for the dovecot project, so that it will be included as optional plugin in future releases. Yet the plugin compiles fine and the .so file gets created. My approach is to call the functions password_scheme_register() and password_scheme_unregister() (src/auth/password-scheme.c) inside the plugin's _init() and _deinit() functions. When a client tries to login via imap the log shows an error message: Error: Couldn't load required plugin /usr/local/lib/dovecot/lib20_newauth_plugin.so: dlopen() failed: /usr/local/lib/dovecot/lib20_newauth_plugin.so: undefined symbol: password_scheme_unregister That error obviously occurs, because the required lib is not linked into the plugin. Now my problem is to understand, whether this approach (via .so file) can be successful at all and if so, how? Do I need to link libs into it? Which would that be and how do I specify them in the Makefile.am? I assume, I don't need to link a lib, but need to use a hook to register the new hashing scheme, since the plugin is loaded into an already existing process, which needs to get extended. If this is true, which hook would that be and how do I register the new scheme? Or is there no way to accomplish this via a separated .so plugin? Should I extend the sources in /src/auth instead? (separat file for the hashing scheme with preprocessor instructions to include it only on demand) Thank you very much, Andreas

3 8

file/folder perms permissions
by Jim Pazarena 05 Aug '16

05 Aug '16

Forgive me if I am blind, but I cannot find default folder permissions. For the home directories, with the sub of mail: and deeper, I see some files with 660, some with 600, some folders with 770 some with 660 I am a bit confused. I manually messed with some files, and my MUA complained about permissions. So I got that mess fixed, and in doing so I noticed the seemingly contradictory permissions. Thanks!

3 2

SSL connection reset by peer
by Vince42 04 Aug '16

04 Aug '16

Hi, I am running a dovecot server and have set up an external monitoring, where every five minutes a login with SSL on port 993 is done. I usually get once a day an error "connection reset by peer - SSL connect", which goes away until the next monitor is executed. Initially I thought that raising the mail_max_userip_connections in protocol imap in 20-imap.conf to 256 should do the trick - but the error stays. What could be the reason for this error and which configuration values could be changed in order to avoid this error? I read a lot of different suggestions - but did not find a plausible explanation and recommendation. Thanks in advance! -- Cheers, \\|// Vince (o o) ----------------------------ooO-(_)-Ooo------------------------- ''' (o)_(o) [ ][0][ ] ô¿ô (=°o°=) World Domination by Copy and Paste [ ][ ][0] - (")_(") [0][0][0] () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Ooo. ---------------------------.ooO----( )------------------------- ( ) (_/ \_)

5 11

Dovecot 2.2.25 test failure
by Michael A. Peters 04 Aug '16

04 Aug '16

Operating system - 64 bit CentOS 7 gcc-4.8.5-4.el7.x86_64 Building against LibreSSL which has been fine for other releases, but it is a crypto test that is fails. Tried with LibreSSL 2.4.2 and 2.3.6 - both the build completes but fails the make check Dovecot 2.2.24 passes make check on both. This is where it fails: Making check in lib-dcrypt make[2]: Entering directory `/home/alice/rpmbuild/BUILD/dovecot-2.2.25/src/lib-dcrypt' for bin in test-crypto test-stream; do \ if ! /bin/sh ../../run-test.sh ../.. ./$bin; then exit 1; fi; \ done ../../run-test.sh: line 21: 22369 Segmentation fault (core dumped) valgrind -q --trace-children=yes --leak-check=full --suppressions="$supp_path" --log-file=test.out.$$ $* ==22369== Invalid read of size 8 ==22369== at 0x113A47: dcrypt_ctx_sym_create (dcrypt.c:61) ==22369== by 0x119194: test_cipher_test_vectors (test-crypto.c:60) ==22369== by 0x1196F0: test_run_funcs (test-common.c:354) ==22369== by 0x119FC0: test_run (test-common.c:404) ==22369== by 0x113461: main (test-crypto.c:554) ==22369== Address 0x8 is not stack'd, malloc'd or (recently) free'd ==22369== ==22369== ==22369== Process terminating with default action of signal 11 (SIGSEGV) ==22369== Access not within mapped region at address 0x8 ==22369== at 0x113A47: dcrypt_ctx_sym_create (dcrypt.c:61) ==22369== by 0x119194: test_cipher_test_vectors (test-crypto.c:60) ==22369== by 0x1196F0: test_run_funcs (test-common.c:354) ==22369== by 0x119FC0: test_run (test-common.c:404) ==22369== by 0x113461: main (test-crypto.c:554) ==22369== If you believe this happened as a result of a stack ==22369== overflow in your program's main thread (unlikely but ==22369== possible), you can try to increase the size of the ==22369== main thread stack using the --main-stacksize= flag. ==22369== The main thread stack size used in this run was 8388608. Failed to run: ./test-crypto make[2]: *** [check-test] Error 1 make[2]: Leaving directory `/home/alice/rpmbuild/BUILD/dovecot-2.2.25/src/lib-dcrypt' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/home/alice/rpmbuild/BUILD/dovecot-2.2.25/src' make: *** [check-recursive] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.Il5fdU (%check) Thanks for suggestions.

3 7

Attachment Storage problems
by Daniel van Ham Colchete 04 Aug '16

04 Aug '16

Guys, I started using single instance attachment storage a while ago but I had too many problems with it. My logs are filled with errors like: Aug 03 18:41:38 imap(user@domain): Error: read(attachments-connector(zlib(/srv/dovecot/mdbox/domain/user/storage/m.2))) failed: read(/srv/dovecot/attach/domain/5f/03/5f03f1d7da846fe9268473cae5219ae31019fd540dc67f58596d8390be4a0f2256158b1e9ba327841c513a6d927dbe9b767b7ad94f8ae5772674cccb3124b69d-7be2ef0e97036457c52000009331bd36[base64:19 b/l]) failed: open(/srv/dovecot/attach/domain/5f/03/5f03f1d7da846fe9268473cae5219ae31019fd540dc67f58596d8390be4a0f2256158b1e9ba327841c513a6d927dbe9b767b7ad94f8ae5772674cccb3124b69d-7be2ef0e97036457c52000009331bd36) failed: No such file or directory (uid=23484, box=INBOX) The funny thing is that the directory /srv/dovecot/attach/domain/5f/03/ doesn't even exist! So, I would like to stop using it and my question is: how? First we would need to stop writting things there while still reading it. How can I tell dovecot to stop using it on new e-mail? Second would be a dsync-like migration reinserting the attachments on the messages back. How can I do that? Most importantly, what do I do with the messages that lost attachments? Thank you very much. Best, Daniel Colchete

1 0

service-specific userdb affecting lmtp, quota-service
by Michael Fox 03 Aug '16

03 Aug '16

The service specific passwd-file userdb is causing quota-status and lmtp to fail. Using: userdb { args = ... /etc/dovecot/auth.d/%d/userdb.%s } I'm getting the following in /var/log/mail.err when I try to send/receive mail: Aug 1 15:46:57 n6mef-gw dovecot: auth: Error: passwd-file(mefpop(a)email.n6mef.org): stat(/etc/dovecot/auth.d/email.n6mef.org/userdb.quota-status) failed: Address family not supported by protocol Aug 1 15:47:08 n6mef-gw dovecot: auth: Error: passwd-file(mefpop(a)email.n6mef.org): stat(/etc/dovecot/auth.d/email.n6mef.org/userdb.lmtp) failed: Address family not supported by protocol I don't have a userdb.quota-status or userdb.lmtp. Is there something else that needs to be in the configuration to prevent these services from needing their own userdb? Thanks, Michael $ doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-76-generic x86_64 Ubuntu 14.04.4 LTS auth_mechanisms = cram-md5 auth_verbose = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = " quota" mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = scheme=cram-md5 username_format=%n /etc/dovecot/auth.d/%d/passdb driver = passwd-file } plugin { quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=50MB quota_rule2 = Trash:storage=+10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_status_toolarge = 552 5.2.3 Message is too large quota_warning = storage=90%% quota-warning 90 %n %d quota_warning2 = storage=75%% quota-warning 75 %n %d } pop3_lock_session = yes protocols = pop3 imap lmtp service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { executable = pop3 postlogin process_limit = 25 } service postlogin { executable = script-login /etc/dovecot/postlogin.sh group = vmail user = vmail } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = /etc/dovecot/quota-warning.sh user = vmail } ssl = required ssl_cert = </opt/xsc/ssl/certs/n6mef-gw.crt ssl_key = </opt/xsc/ssl/private/n6mef-gw.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = username_format=%n /etc/dovecot/auth.d/%d/userdb.%s default_fields = home=/var/vmail/%d/%n driver = passwd-file } verbose_ssl = yes protocol lmtp { postmaster_address = xxxxxxxxxxxxxxxxx } protocol imap { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 1 } remote 192.168.7.0/24/24 { ssl = yes } remote 192.168.7.0/27/27 { ssl = no } $

2 4

"Plaintext authentication disallowed on non-secure (SSL/TLS) connections" despite correct configuration to allow this
by Christian Balzer 03 Aug '16

03 Aug '16

Hello, this is basically a repeat of this query from last year, which unfortunately got a deafening silence for replies: --- http://dovecot.org/pipermail/dovecot/2015-August/101720.html --- I have mostly 2.1.7 (Debian Wheezy) mailbox servers and the current proxies are also of that vintage. So with "ssl=yes" and "disable_plaintext_auth=no" plaintext logins work, as per the documentation (http://wiki2.dovecot.org/SSL/DovecotConfiguration) and historically expected. Trying to use a 2.2.24 (Debian Jessie backports) dovecot proy with the same parameters fails like this: --- Aug 2 15:45:57 smtp12 dovecot: pop3-login: proxy(chibixxx(a)gol.com): Login failed to mbxx.xxx.gol.com:110: Plaintext authentication disallowed on non-secure (SSL/TLS) connections.: user=<chibixxx(a)gol.com>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, pid=16066 --- Changing things to "ssl=no" doesn't help and setting trusted networks only changes the last bit to have "secured" appended but still fails the same otherwise. I really need 2.2.x to behave the same way as before and documented. Any ideas and feedback would be most welcome. Regards, Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Rakuten Communications http://www.gol.com/

1 1

Error: Timeout (180s) while waiting for lock for transaction log file dovecot.index.log
by Götz Reinicke - IT Koordinator 02 Aug '16

02 Aug '16

Hi, our maildir store is on a NFS share which was working fine for some time with the recommended setting from the dovecot wiki; suddenly today i got informed that one user has login problems to his mails and I have some messages in the logs: Error: Timeout (180s) while waiting for lock for transaction log file ....../Maildir/dovecot.index.log My current guess is a hick up in the network during a router configuration this weekend. My question: How to solve the problem? I can restart the nfs service/server later this day, as well as the mailserver ... as there is a kernel update too. Do I have to initiate some resync or deletion of index or whatsoever files? Thanks for any feedback and regards . Götz

1 0

auth_bind with "()" in username not working
by Matthias Lay 02 Aug '16

02 Aug '16

Hi all, I have an AD testsetup with auth_bind setting auth_bind_userdn = "spdev\\%Ln" I created a testuser "claasc (test)" which works fine in all ldapfilters but not for the auth_bind. the log shows everything correct just "invalid credentials" mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: auth client connected (pid=12202) mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=T6knVtc0wQB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=39873 mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: client passdb out: CONT 1 mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: client in: CONT<hidden> mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: passwd-file(claasc (test),127.0.0.1,<T6knVtc0wQB/AAAB>): cache miss mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: passwd-file(claasc (test),127.0.0.1,<T6knVtc0wQB/AAAB>): lookup: user=claasc (test) file=/etc/dovecot/passwd.postmaster mail.info: Jun 9 14:12:31 dovecot: auth: passwd-file(claasc (test),127.0.0.1,<T6knVtc0wQB/AAAB>): unknown user (given password: HubertHans99) mail.debug: Jun 9 14:12:31 dovecot: auth: Debug: ldap(claasc (test),127.0.0.1,<T6knVtc0wQB/AAAB>): cache miss mail.info: Jun 9 14:12:31 dovecot: auth: ldap(claasc (test),127.0.0.1,<T6knVtc0wQB/AAAB>): invalid credentials mail.debug: Jun 9 14:12:33 dovecot: auth: Debug: client passdb out: FAIL 1 user=claasc (test) mail.info: Jun 9 14:12:33 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<claasc (test)>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<T6knVtc0wQB/AAAB> So I guess its just a bind problem. strace output from auth process of imap login: write(26, "0-\2\1\4`(\2\1\3\4\25spdev\\claasc \$test\$\200\fHubertHans99", 47) = 47 the additional \\ in front of the brackets look strange to me and might be the reason. tested Version is 2.2.18 Greetz Matze

1 4

passwd-file extra-fields: inbox=yes
by Michael Fox 02 Aug '16

02 Aug '16

I'd like to implement the virtual plugin so that POP3 users can see emails in their own inbox and a public namespace. As I understand it, I need to set "inbox=yes" separately, depending on which service the user is using. With passwd-file flat files, this means: userdb { args = ... /path/userdb.%s } userdb.imap: set the extra fields for each user = userdb_namespace/inbox/inbox=yes userdb.pop3: set the extra fields for each user = userdb_namespace/virtual/inbox=yes But without even getting to the virtual namespace part, I'm having difficulty getting the extra fields setting to work for a regular IMAP user. Specifically: If I use the Dovecot default settings of namespace inbox, which includes inbox=yes, and do NOT include the extra_fields value shown above, then IMAP users can log in OK. But if I comment out inbox=yes within namespace inbox, and then add the extra fields to userdb.imap (as shown above), (and reload doveadm), then the IMAP user is no longer able to login. Thunderbird displays "Login to server ... failed." and I get the following in syslog (mail.err): Aug 1 13:56:13 n6mef-gw dovecot: imap(mefimp(a)email.n6mef.org): Error: user mefimp(a)email.n6mef.org: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Aug 1 13:56:13 n6mef-gw dovecot: imap(mefimp(a)email.n6mef.org): Error: Invalid user settings. Refer to server log for more information. I'm at a loss for what's wrong. Can someone help? Userdb.imap test entry and doveconf -n below. Thanks, Michael Userdb.imap: mefimp::::Michael E Fox - mefimp:::userdb_namespace=/namespace/inbox/inbox=yes $ doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-76-generic x86_64 Ubuntu 14.04.4 LTS auth_mechanisms = cram-md5 auth_verbose = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = " quota" mail_uid = vmail namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = scheme=cram-md5 username_format=%n /etc/dovecot/auth.d/%d/passdb driver = passwd-file } plugin { quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=50MB quota_rule2 = Trash:storage=+10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_status_toolarge = 552 5.2.3 Message is too large quota_warning = storage=90%% quota-warning 90 %n %d quota_warning2 = storage=75%% quota-warning 75 %n %d } pop3_lock_session = yes protocols = pop3 imap lmtp service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { executable = pop3 postlogin process_limit = 25 } service postlogin { executable = script-login /etc/dovecot/postlogin.sh group = vmail user = vmail } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = /etc/dovecot/quota-warning.sh user = vmail } ssl = required ssl_cert = </opt/xsc/ssl/certs/n6mef-gw.crt ssl_key = </opt/xsc/ssl/private/n6mef-gw.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = username_format=%n /etc/dovecot/auth.d/%d/userdb.%s default_fields = home=/var/vmail/%d/%n driver = passwd-file } verbose_ssl = yes protocol lmtp { postmaster_address = xxxxxxxxxx } protocol imap { mail_max_userip_connections = 1 } protocol pop3 { mail_max_userip_connections = 1 } remote 192.168.7.0/24/24 { ssl = yes } remote 192.168.7.0/27/27 { ssl = no } $

1 0

IMAP flags and dovecot-keywords not working as expected
by Mark Foley 01 Aug '16

01 Aug '16

I've converted most of our users from Outlook to Thunderbird. One important feature of Thunderbird is that it pays attention to the IMAP non-standard message flags via the 'tags' feature (see http://wiki2.dovecot.org/MailboxFormat/Maildir) This is important because 2 users make extensive use of Outlook categories (Tags, in Thunderbird). I found that when I set a message to the 1st Tbird tag 0 (Important), the corresponding IMAP file got an 'a' suffix. Likewise, if I manually added an 'a' suffix to an IMAP file the corresponding tag was set displayed in Thunderbird. This made it easy for me to exports Outlook Categories and set IMAP messages flags accordingly. This worked perfectly on the user I was experimenting with (me). Recently, I converted one of these Outlook 'categories' users to Thunderbird. I added the appropriate flag letters to their IMAP messages, changed their tag names in Thunderbird, and created the following dovecot-keywords file as: 0 Board_and_Committee 1 Completed 2 Health_Care_meetings 3 Notifications 4 OSHP-DAS 5 personal_or_To_Do 6 Retirement_exits 7 $label5 8 Junk 9 $Forwarded 10 $MDNSent 11 $label2 However, none of the tags show up correctly in Thunderbird. If I manually set a message to have a tag of 0, the corresponding IMAP file gets a flag of 'm', not 'a' and the following is added to the dovecot-keywords files: 12 $label1 How can I fix this? Where is "$label1" text defined? Why did Thunderbird not snag the text for '0' from the dovecot-keywords file and give the IMAP file a tag of 'a'? My current theory is that the "Default" Thunderbird Tags corresponding to IMAP flags are not changeable and if new tags are create in Tbird, they get new flag letters. That would, of course, mean that if a user changes Thunderbird tag name, they would lose all tag settings on existing message. That doesn't seem right and I hope my theory is wrong. Any insight would be appreciated. --Mark

2 3

POP3 & IMAP inbox setting for virtual
by Michael Fox 01 Aug '16

01 Aug '16

Posted Monday 7/25. Haven't seen a response. Trying again: --- This is a noobie question, so bear with me if it's not worded correctly: Primary Requirements: 1) I'd like to have two namespaces - one private/per-user, and one public (visible by all logged-in users). The public mailbox(s) would be used to distribute information to all users. 2) I'd like both POP3 and IMAP users to see both namespaces. As I understand it, this requires the use of the virtual plugin for POP3, in order to create a virtual namespace which would mix together the private and public namespaces into one mailbox. I have read: http://wiki.dovecot.org/Plugins/Virtual https://sys4.de/de/blog/2013/02/11/dovecot-virtual-setup-mit-globaler-sieve- spamfilter-regel-fur-pop3-nutzer/ (via Google translation) The example uses a CASE statement in the MySQL userdb query. As I understand it, this is done to set which namespace contains the inbox: the private namespace or the virtual namespace -- depending on if the user is connected via the imap or pop3 service, respectively. Question: how do I accomplish the same goal (setting the proper namespace for the inbox) when using a passwd-file style flat file userdb? Thanks, Michael

2 4

self signed certs and dovecot imaps : howto? tlsv1 alert unknown ca
by hanasaki＠gmail.com 01 Aug '16

01 Aug '16

How do you setup dovecot to use a self signed cert? One server will be connected to the internet. One will be totally internal and have no runtime access to the internet. Getting the below error msg. Also, I think I have a TLS 1.0 and need a 1.2 cert?... Thank you. Jul 28 20:09:27 host dovecot: imap-login:: user=<>, rip=10...., lip=10...., TLS: SSL_read() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session=<kK2aELspLpkKAQF5>

2 1

any news Enterprise Repository Access?
by Götz Reinicke - IT Koordinator 31 Jul '16

31 Jul '16

Hi, we had access to the repository and it was working fine. But as we cant get the 2.2.25 update I was looking into the repofolders and there are RPMs "just" for RHEL 6// but not 5 any more. My be I missed the latest discussions or announcements? Could you give me an update on information and may be the RHEL 5 RPMs too? Thanks a lot and regards . Götz

6 8

dovecot runs on a pbl listed ip ?
by Benny Pedersen 31 Jul '16

31 Jul '16

X-Spam-Report: * 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [52.178.156.48 listed in zen.spamhaus.org] * 3.6 FS_REPLICA Subject says "replica" * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's * domain * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS Received: from talvi.dovecot.org (unknown [52.178.156.48]) by wursti.dovecot.fi (Postfix) with ESMTP; Sun, 31 Jul 2016 04:27:22 +0200 (CEST) sorry if its not just me :( make sure all wan ips is in trusted-networks / internal-networks atleast in spamassassin who will make a bug for replica ? :=)

2 1

migration from cyrus; seg fault at mail_namespaces_get_root_sep
by vstargben＠gmail.com 31 Jul '16

31 Jul '16

Hi all, I am currently trying to migrate from cyrus to dovecot on a new system. Though only few accounts, I decided to use the mdbox format. To convert I use cyrus2dovecot first, then I use dsync to import the mailboxes. For compatibility I set the namespace of inbox to prefix = INBOX. and separator = . (as described here: http://wiki2.dovecot.org/Migration/Cyrus http://wiki.dovecot.org/Namespaces) This works except that the clients (mutt and Thunderbird) show an additional folder/mailbox "INBOX" below the inbox. How can I fix that? Should I add a prefix during conversion and not change the namespace config? On disk, the subfolders are next to INBOX. Well, I then tried to set list = children instead of "yes" for namespace inbox. On login a segfault occurs with this setting. See the information and backtrace below. Regards, Vincent ########################################################### linux-server2:~ # dovecot --version 2.2.25 (7be1766) linux-server2:~ # dovecot -n # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 4.1.21-14-default x86_64 openSUSE 42.1 (x86_64) btrfs base_dir = /data/mail/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_gid = dovecot mail_location = mdbox:/data/mail/dovecot/maildat/%u mail_privileged_group = dovecot mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes list = children location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap lmtp ssl = no ssl_dh_parameters_length = 2048 ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = passwd } ################################################################ GNU gdb (GDB; openSUSE Leap 42.1) 7.9.1 Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-suse-linux". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://bugs.opensuse.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/usr/lib/dovecot/imap.debug...done. done. [New LWP 8366] Core was generated by `dovecot/imap'. Program terminated with signal SIGSEGV, Segmentation fault. #0 mail_namespaces_get_root_sep (namespaces=0x0) at mail-namespace.c:601 601 mail-namespace.c: Datei oder Verzeichnis nicht gefunden. Missing separate debuginfos, use: zypper install glibc-debuginfo-2.19-19.1.x86_64 (gdb) bt full #0 mail_namespaces_get_root_sep (namespaces=0x0) at mail-namespace.c:601 No locals. #1 0x0000559bfb1792a5 in cmd_list_ref_root (ref=0x559bfd155d78 "", client=0x559bfd155020) at cmd-list.c:324 ns = 0x0 ns_prefix = 0x559bfb1963ea "" ns_sep = <optimized out> str = <optimized out> #2 cmd_list_full (cmd=0x559bfd155c00, lsub=<optimized out>) at cmd-list.c:461 client = 0x559bfd155020 args = 0x559bfd1289b8 list_args = 0x7f02a7ab0093 <t_malloc0+35> arg_count = 21915 patterns = {arr = {buffer = 0x559bfd155d88, element_size = 8}, v = 0x559bfd155d88, v_modifiable = 0x559bfd155d88} ref = 0x559bfd155d78 "" pattern = 0x559bfd155d80 "" str = <optimized out> #3 0x0000559bfb1818ed in command_exec (cmd=cmd@entry=0x559bfd155c00) at imap-commands.c:180 hook = 0x559bfd125110 finished = <optimized out> cmd_start_timeval = {tv_sec = 1469732468, tv_usec = 662738} cmd_start_bytes_in = 29 cmd_start_bytes_out = 746 __FUNCTION__ = "command_exec" #4 0x0000559bfb17fe4f in client_command_input (cmd=cmd@entry=0x559bfd155c00) at imap-client.c:969 client = 0x559bfd155020 command = <optimized out> __FUNCTION__ = "client_command_input" #5 0x0000559bfb17fedf in client_command_input (cmd=0x559bfd155c00) at imap-client.c:1029 client = 0x559bfd155020 command = <optimized out> __FUNCTION__ = "client_command_input" #6 0x0000559bfb180285 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x559bfd155020) at imap-client.c:1069 No locals. #7 client_handle_input (client=client@entry=0x559bfd155020) at imap-client.c:1081 _data_stack_cur_id = 3 remove_io = false handled_commands = true __FUNCTION__ = "client_handle_input" #8 0x0000559bfb180785 in client_input (client=0x559bfd155020) at imap-client.c:1128 cmd = 0x559bfd136130 output = 0x559bfd155a40 bytes = 36 ---Type <return> to continue, or q <return> to quit--- __FUNCTION__ = "client_input" #9 0x00007f02a7ac49dc in io_loop_call_io (io=0x559bfd155b10) at ioloop.c:564 ioloop = 0x559bfd124740 t_id = 2 __FUNCTION__ = "io_loop_call_io" #10 0x00007f02a7ac5ce7 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x559bfd124740) at ioloop-epoll.c:220 ctx = 0x559bfd126260 list = 0x559bfd127c90 io = <optimized out> tv = {tv_sec = 1799, tv_usec = 999471} events_count = <optimized out> msecs = <optimized out> ret = 1 i = 0 call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #11 0x00007f02a7ac4a65 in io_loop_handler_run (ioloop=ioloop@entry=0x559bfd124740) at ioloop.c:612 No locals. #12 0x00007f02a7ac4c18 in io_loop_run (ioloop=0x559bfd124740) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #13 0x00007f02a7a5a1e3 in master_service_run (service=0x559bfd1245e0, callback=<optimized out>) at master-service.c:640 No locals. #14 0x0000559bfb173eb2 in main (argc=1, argv=0x559bfd124390) at main.c:460 set_roots = {0x559bfb39c520 <imap_setting_parser_info>, 0x7f02a8274b20 <lda_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x559bfd11c050 "\210\300\021\375\233U", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x559bfb18cbd0 <login_client_connected>, failure_callback = 0x559bfb18c560 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 auth_socket_path = 0x559bfb19530e "auth-master" c = <optimized out> (gdb)

1 0

Occasional lock timeouts on Linode VM with Dovecot Replication
by Reuben Farrelly 31 Jul '16

31 Jul '16

I've been seeing periodic entries in my dovecot logs like this: dovecot[3464]: dsync-server(kaylene): Error: Couldn't lock /home/kaylene/.dovecot-sync.lock: Timed out after 30 seconds: 3 Time(s) dovecot[3464]: dsync-server(reuben): Error: Couldn't lock /home/reuben/.dovecot-sync.lock: Timed out after 30 seconds: 1 Time(s) They occur several times per day, but don't appear to have any obvious cause and I am not aware of any problems this is causing. [They could be the cause of some reappearing UID type messages that also periodically are logged, but I can't be sure] They occur on a lightly loaded Linode VM, KVM Paravirtualised and with only local SSD disk storage. The VM is a Gentoo Linux VM running the latest kernels that Linode provide. I also saw this problem under Xen. The dovecot setup is a dsync replication between two hosts, there is about 150ms of latency between them. The host where I am seeing these messages on (lightning) is a dovecot replica of another system (thunderstorm). I am using Maildir storage. Thunderstorm sees the vast majority of the client side reads and writes and lightning just functions as a not-so-active replica. Thunderstorm is also a VM but on VMware (also on SSDs). This system has never had this problem. I've had this across many dovecot versions going back many months now so it's impossible to pinpoint when this started. I am currently running dovecot -git master-2.2 branch at the moment. I've never seen disk latency in excess of 30s on any system either so I doubt that raw IO is the cause. I don't have any settings specified in 10-mail.conf in the Mail processes section relating to locking or mmap. Has anyone else experienced this and/or any ideas about where to look next to determine the root cause? Is this a common warning to see in cloud hosted/shared environments? Reuben

2 2

Master-Master replication question
by Remko Lodder 29 Jul '16

29 Jul '16

Dear list, I have setup a master-master replication setup. My primairy MX's send email over on a DNS loadbalanced way, so DNS is doing some kind of round-robin way of sending mail to both master servers. I found out, that on one of the two machines, the email synchronisation is heavily delayed. Lets assume server A receives a mail from the MX; it synchronises almost instantly with the other server. Whenever server B receives the email, it could take up to several hours to synchronise the email, it seems that it is not detected prior. It is also interesting to see, that the mailboxes on server A (Where users login to retrieve their email via webmail/clients) are significantly smaller then the mailboxes on server B. When investigating, it seems that "older" mailboxes (or storage rather since we use mdbox) are still there on server B, which already had been removed on server A. My personal mailbox was 170MB on server A, while it was still 2.5GB on server B. (which was around that size before cleaning up the mailsboxes). I enabled debugging on the servers, and I see rather quick : "Replication requests" on server A, but when getting an email on server B, I do not see the request at all. My servers are both running the same version, same configuration (utilizing puppet), both running on ZFS and FreeBSD. Where server B is more loaded in it's memory because of some bhyve VM's and the server A does not run any VM. Does someone have any pointers on where to look? Thanks in advance ;-) Remko Included below the configurations from server A and B: Server A: # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.14 (099a97c) # OS: FreeBSD 10.3-RELEASE-p2 amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it haproxy_trusted_networks = YYYY lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_fsync = always mail_location = mdbox:~/mdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/bin/sa-learn.sh antispam_mail_spam = --spam antispam_spam_pattern_ignorecase = spam;junk antispam_trash_pattern_ignorecase = trash;deleted items;deleted messages antispam_verbose_debug = 1 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:the other server:12346 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/etc/dovecot/sieve/global/ sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } postmaster_address = postmaster@xxx protocols = imap pop3 lmtp sieve replication_dsync_parameters = -d -N -l 60 -U replication_max_conns = 100 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { inet_listener imap_haproxy { haproxy = yes port = 10143 } inet_listener imaps_haproxy { haproxy = yes port = 10144 ssl = yes } service_count = 1 } service imap { process_limit = 1024 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/letsencrypt/live/XXX ssl_cert = </usr/local/etc/letsencrypt/live/XXX ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_key = </usr/local/etc/letsencrypt/live/XXX ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = quota sieve postmaster_address = postmaster@xxxx } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota antispam" } Server B: # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.14 (099a97c) # OS: FreeBSD 10.3-RELEASE amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it haproxy_trusted_networks = YYYY lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_fsync = always mail_location = mdbox:~/mdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/bin/sa-learn.sh antispam_mail_spam = --spam antispam_spam_pattern_ignorecase = spam;junk antispam_trash_pattern_ignorecase = trash;deleted items;deleted messages antispam_verbose_debug = 1 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:the other host:12346 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/etc/dovecot/sieve/global/ sieve_global_path = /usr/local/etc/dovecot/sieve/default.sieve } postmaster_address = postmaster@xxx protocols = imap pop3 lmtp sieve replication_dsync_parameters = -d -N -l 60 -U replication_max_conns = 100 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { inet_listener imap_haproxy { haproxy = yes port = 10143 } inet_listener imaps_haproxy { haproxy = yes port = 10144 ssl = yes } service_count = 1 } service imap { process_limit = 1024 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/letsencrypt/live/xxx ssl_cert = </usr/local/etc/letsencrypt/live/xxx ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_key = </usr/local/etc/letsencrypt/live/xxx ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = quota sieve postmaster_address = postmaster@XXXXX } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota antispam" }

4 12

Re: Client app says my chained Comodo cert is invalid
by Joseph Tam 28 Jul '16

28 Jul '16

> The trouble appears when I attempt to configure a client account in > Mail.app on my Mac. For the POP server name, I enter my VPS? > ?45.56.81.181", because public DNS is still pointing to my existing > host. I set the account to use the Apple TLS certificate, and then > click to save this new account info. Before saving, Mail.app checks my > entries by attempting to log in. The result is: ?The identify of > server 45.56.81.181 cannot be verified. The certificate for this > server is invalid.? Well, yes, that's what you would expect. You've told your mail client to connect to "45.56.81.181", the client starts the SSL negotiation and finds the certificate is made out for "sheepsystems.com", and your mail client complains about the mismatch (a possible MITM attack). This is what you want SSL enabled system to do. Since 45.56.81.181 does not map to "sheepsystems.com" yet, you can short-circuit DNS and add a direct mapping to your Mac by adding this to /etc/hosts: 45.56.81.181 sheepsystems.com then reconfiguring your mail client to use the server "sheepsystems.com". This will appease the SSL constraint. > appear in /var/log/mail.log [2]. Don't know what this is about -- probably your Mac bailing out on authentication. Joseph Tam <jtam.home(a)gmail.com>

3 2

Client app says my chained Comodo cert is invalid
by Jerry Krinock 27 Jul '16

27 Jul '16

I’ve configured Dovecot and Postfix on a new VPS running Ubuntu 16.04, using Linode’s tutorial [1], to require authentication and SSL encryption for both POP3 and SMTP. All looks OK to me except, when my email client app (macOS Mail.app) tries to log in, it says that my cert is invalid. The trouble appears when I attempt to configure a client account in Mail.app on my Mac. For the POP server name, I enter my VPS’ “45.56.81.181", because public DNS is still pointing to my existing host. I set the account to use the Apple TLS certificate, and then click to save this new account info. Before saving, Mail.app checks my entries by attempting to log in. The result is: “The identify of server 45.56.81.181 cannot be verified. The certificate for this server is invalid.” At the same time, on my new server, some entries appear in /var/log/mail.log [2]. The certificate in question is a new PositiveSSL/Comodo cert I bought the other day. It works OK for serving web pages - I mean, on this same Mac, when I visit my under-construction site at https://45.56.81.181 in Safari or Firefox, I get the padlock icon and no warnings. Comodo gave me two two files, a “.crt” which contains my cert, and a “.ca-bundle.crt” which contains their certs. Per Dovecot documentation, I concatenated these into a “chained” file containing all 3 certs, starting with mine. In /etc/dovecot/conf.d/10-ssl.conf, I set ssl_cert = this “chained” file. I tried adding the two original cert files to macOS Keychain.app with “Always trust” but that did not help. Being new at this, I would appreciate any suggestions. My `dovecot -n` output is below [3]. Thank you very much! Jerry Krinock [1] https://www.linode.com/docs/email/postfix/email-with-postfix-dovecot-and-my… ************************************************** [2] /var/log/mail.log entries when client attempts login Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [24.4.251.228] Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [24.4.251.228] Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: unknown state [24.4.251.228] Jul 27 12:22:19 bird dovecot: message repeated 6 times: [ pop3-login: Debug: SSL: where=0x2001, ret=1: unknown state [24.4.251.228]] Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: unknown state [24.4.251.228] Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: unknown state [24.4.251.228] Jul 27 12:22:19 bird dovecot: pop3-login: Warning: SSL failed: where=0x2002: unknown state [24.4.251.228] Jul 27 12:22:19 bird dovecot: pop3-login: Debug: SSL error: Disconnected Jul 27 12:22:19 bird dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=24.4.251.228, lip=45.56.81.181, TLS handshaking: Disconnected, session=<8HuX76I4p8gYBPvk> Yes, 24.4.251.228 is the IP address of my Mac. ************************************************** [3] Output from `dovecot -n` # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.5.5-x86_64-linode69 x86_64 Ubuntu 16.04 LTS ext4 auth_mechanisms = plain login mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap pop3 lmtp service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 } } ssl = required ssl_cert = </etc/ssl/localcerts/sheepsystems_com_chained.crt ssl_key = </etc/ssl/localcerts/linode.sheepsystems.com.key userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } verbose_ssl = yes

1 0

Sieve vacation address problem
by Harald Leithner 27 Jul '16

27 Jul '16

Hi, it seams I have a problem with the vacation script. The problem is that the vacation answers to a address that is not listed in the sieve script. I checked the postfix master.conf which delivers to lda correct parameter. In the logfile you can see that that office(a)example.com received a message that get delivered to user(a)example.com (with the sievescipt) and to office(a)example.com (another user without script). The sieve script has the :addresses parameter only set to user(a)example.com Is something wrong with my setup? We use roundcube + sievemanage to create sieve scripts. Sievescript: ## Generated by Roundcube Webmail SieveRules Plugin ## require ["date","relational","vacation"]; # rule:[Urlaub] if allof (currentdate :zone "+0200" :value "gt" "date" "2016-07-22", currentdate :zone "+0200" :value "lt" "date" "2016-08-08") { vacation :days 1 :addresses ["user(a)example.com"] :subject "Abwesenheitsnotiz" text: Thx i'm not here . ; } -------------- postfix master.conf dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -f ${sender} -a ${original_recipient} -d ${user}@${nexthop} -e -------------- Logfile: Postfix: 2016-07-27T11:44:30+02:00 mailstore1 postfix/smtpd[5037]: connect from unknown[172.20.20.229]:15677 2016-07-27T11:44:30+02:00 mailstore1 postfix/smtpd[5037]: 3rzqp64klWzF: client=unknown[172.20.20.229]:15677 2016-07-27T11:44:30+02:00 mailstore1 postfix/cleanup[5040]: 3rzqp64klWzF: message-id=<019301d1e7eb$76b26a70$64173f50$(a)example.org> 2016-07-27T11:44:30+02:00 mailstore1 postfix/qmgr[704]: 3rzqp64klWzF: from=<user(a)example.org>, size=7337, nrcpt=2 (queue active) 2016-07-27T11:44:30+02:00 mailstore1 postfix/smtpd[5037]: disconnect from unknown[172.20.20.229]:15677 2016-07-27T11:44:30+02:00 mailstore1 postfix/pipe[5157]: 3rzqp64klWzF: to=<office(a)example.com>, relay=dovecot, delay=0.12, delays=0.02/0.03/0/0.06, dsn=2.0.0, status=sent (delivered via dovecot service) 2016-07-27T11:44:30+02:00 mailstore1 postfix/pipe[5042]: 3rzqp64klWzF: to=<user(a)example.com>, orig_to=<office(a)example.com>, relay=dovecot, delay=0.12, delays=0.02/0.03/0/0.07, dsn=2.0.0, status=sent (delivered via dovecot service) 2016-07-27T11:44:30+02:00 mailstore1 postfix/qmgr[704]: 3rzqp64klWzF: removed dovecot lda 2016-07-27T11:44:30+02:00 mailstore1 dovecot: lda(user(a)example.com): sieve: msgid=<019301d1e7eb$76b26a70$64173f50$(a)example.org>: sent vacation response to <user(a)example.org> 2016-07-27T11:44:30+02:00 mailstore1 dovecot: lda(office(a)example.com): msgid=<019301d1e7eb$76b26a70$64173f50$(a)example.org>: saved mail to INBOX 2016-07-27T11:44:30+02:00 mailstore1 dovecot: lda(user(a)example.com): sieve: msgid=<019301d1e7eb$76b26a70$64173f50$(a)example.org>: stored mail into mailbox 'INBOX' ----------- doveocot conf # 2.2.devel (d81a83b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.devel (3f51b82) # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.5 auth_cache_negative_ttl = 1 secs auth_cache_size = 10 M auth_cache_ttl = 1 secs auth_mechanisms = PLAIN LOGIN DIGEST-MD5 SCRAM-SHA-1 CRAM-MD5 APOP auth_verbose = yes default_client_limit = 600 default_vsz_limit = 512 M dict { lastlogin = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlacl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 hostname = mailstore1(a)itronic.at imap_hibernate_timeout = 1 mins imap_id_log = * imap_id_send = * imap_idle_notify_interval = 10 mins instance_name = mailstore1 last_valid_gid = 1001 last_valid_uid = 1001 lda_original_recipient_header = X-LDA-Original-To lmtp_rcpt_check_quota = yes login_greeting = ITronic Mail Store login_trusted_networks = 172.22.14.0/24 mail_attachment_dir = /srv/storage1/vmail_sis mail_attachment_hash = %{sha512} mail_attachment_min_size = 64 k mail_cache_min_mail_count = 5 mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = zlib lazy_expunge stats acl quota mail_prefetch_count = 100 mail_server_admin = mailto:postmaster@itronic.at mail_server_comment = ITronic Mail System mail_shared_explicit_inbox = yes mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_preallocate_space = yes namespace { hidden = yes list = no location = mdbox:~/mdbox:MAILBOXDIR=expunged prefix = "#EXPUNGED/" subscriptions = no type = private } namespace { list = children location = mdbox:%%h/mdbox prefix = "#Users/%%u/" separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes location = mailbox Archvie { special_use = \Archive } mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::sqlacl last_login_dict = proxy::lastlogin last_login_key = last-login/%u lazy_expunge = "#EXPUNGED/" lazy_expunge_only_last_instance = no quota = dict:User quota::proxy::sqlquota quota_grace = 10%% quota_rule = *:storage=1024M quota_rule2 = "#EXPUNGED:storage=+100M" quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=80%% quota-warning 80 %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_global = /etc/dovecot/sieve sieve_max_actions = 64 sieve_max_redirects = 8 sieve_max_script_size = 2M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 64M stats_refresh = 30 secs stats_track_cmds = yes zlib_save = gz zlib_save_level = 6 } pop3_uidl_duplicates = rename protocols = imap lmtp sieve pop3 sieve service auth-worker { user = $default_internal_user } service auth { inet_listener { port = 4180 } unix_listener auth-userdb { mode = 0666 } } service dict { unix_listener dict { group = vmail mode = 0666 } } service imap-hibernate { unix_listener imap-hibernate { group = vmail mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 0 } service imap { process_limit = 1024 unix_listener imap-master { user = dovecot } unix_listener imap { group = vmail mode = 0666 } vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 172.22.14.135 port = 24000 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 50 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 20 service_count = 1 vsz_limit = 64 M } service pop3 { process_limit = 1024 } service quota-warning { executable = script /opt/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } shutdown_clients = no ssl_cert = </etc/dovecot/private/STAR.itronic.at.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-CAMELLIA256-SHA:CAMELLIA128-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/dovecot/private/STAR.itronic.at.pem ssl_options = no_compression ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 submission_host = 172.22.14.198 syslog_facility = local0 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = /srv/storage1/vmail verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 mail_plugins = zlib lazy_expunge stats imap_stats quota imap_quota acl imap_acl last_login } protocol lda { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol lmtp { mail_plugins = zlib lazy_expunge stats acl sieve quota } protocol sieve { mail_max_userip_connections = 10 managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = zlib lazy_expunge stats acl last_login } -- Harald Leithner ITronic Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leithner(a)itronic.at | itronic.at

2 2

Opportunistic quota recalc
by Tom Sommer 27 Jul '16

27 Jul '16

I'm switching quota backend to redis (from maildir++), so all my current usages are reset. I get that I can do "doveadm quota recalc -A", but it takes forever (and auth processes time out/crash). It would make much more sense to recalc the usage on login if the current usage is unset. Is there no way to do a recalc-quota-on-first-login? Thanks. -- Tom Sommer

2 7

Dovecot v2.2.25 crashed on startup in Mac OSX
by Michael Chen 27 Jul '16

27 Jul '16

I built from dovecot-2.2.25.tar.gz on Mac OSX 10.11.15 (El Capitan) the usual way: CFLAGS=-I/usr/local/ssl/include LDFLAGS=-L/usr/local/ssl/lib ./configure make sudo make install sudo /usr/local/sbin/dovecot It consistently crash on startup with the following entries in /var/log/mail.log (edited backtrace): Jul 27 07:39:26 macbook-pro dovecot[70234]: master: Dovecot v2.2.25 (7be1766) starting up for imap, pop3, lmtp Jul 27 07:39:26 macbook-pro dovecot[70234]: master: Panic: kevent(EV_ADD, READ, 60) failed: Bad file descriptor Jul 27 07:39:26 macbook-pro dovecot[70234]: master: Error: Raw backtrace: 2 libdovecot.0.dylib 0x00000001000dc3fb default_fatal_finish + 43 -> 3 libdovecot.0.dylib 0x00000001000dd4e0 syslog_handler + 0 -> 4 dovecot 0x0000000100026f8d master_fatal_callback + 429 -> 5 libdovecot.0.dylib 0x00000001000dca9f i_panic + 415 -> 6 libdovecot.0.dylib 0x00000001000ff022 io_loop_handle_add + 194 -> 7 libdovecot.0.dylib 0x00000001000fb5f1 io_add_file + 385 -> 8 libdovecot.0.dylib 0x00000001000fb456 io_add + 118 -> 9 libdovecot.0.dylib 0x0000000100102b83 lib_signals_set_handler + 355 -> 10 dovecot 0x0000000100027070 main_init + 112 -> 11 dovecot 0x0000000100026628 main + 2024 -> 12 libdyld.dylib 0x00007fff889ac5ad start + 1 It looks similar to this report: http://article.gmane.org/gmane.mail.imap.dovecot/86319/match=panic+kevent HomeBrew installed 2.2.24, and it works in my Mac. Can someone confirm this is a bug? I also built 2.2.25 with debug, but can't make it break at line iolook-kqueue.c:67 i_panic("kevent(EV_ADD, READ, %d) failed: %m", io->fd); Thanks --mc . -- CONFIDENTIALITY NOTICE: This e-mail, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information or otherwise be protected by law. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and destroy all copies and the original message.

2 2

Converting mailboxes to UTF-8
by Артем Перекресний 27 Jul '16

27 Jul '16

Is any proven routine to migrate mailboxes from mUTF-7 to UTF-8 encoding? I've try to use doveadm list/mutf7/rename but have been stuck with nested inboxes. Say I have the next structure: INBOX INBOX.жыр INBOX.жыр.ядъ encoded for FS respectively as .INBOX .INBOX.&BDYESwRA- .INBOX.&BDYESwRA-.&BE8ENARK- When I've try to rename INBOX.жыр with doveadm mailbox rename -u me -s "INBOX.&BDYESwRA-" $(doveadm mailbox mutf7 -7 "INBOX.&BDYESwRA-") I've get the next: .INBOX .INBOX.жыр .INBOX.жыр.&BE8ENARK- Sure when I've try to rename .INBOX.жыр.&BE8ENARK- I've get a message that this is not a valid mUTF7-encoded string. So that is the question.

2 3

imap & pop3 using same mailbox with virtual plugin
by Michael Fox 26 Jul '16

26 Jul '16

This is a noobie question, so bear with me if it's not worded correctly: Primary Requirements: 1) I'd like to have two namespaces - one private/per-user, and one public (visible by all logged-in users). The public mailbox would be used to distribute information to all users. 2) I'd like both POP3 and IMAP users to see both namespaces. As I understand it, this requires the use of the virtual plugin to create a virtual namespace which would mix together the private and public namespaces into one mailbox. I have read: http://wiki.dovecot.org/Plugins/Virtual https://sys4.de/de/blog/2013/02/11/dovecot-virtual-setup-mit-globaler-sieve- spamfilter-regel-fur-pop3-nutzer/ (via Google translation) I don't really understand the example MySQL code (too much "..." for me to follow) in the above web pages. As I understand it (and I could be very wrong), the solution relies on a MySQL query to determine which namespace should have inbox = yes -- the private namespace or the virtual namespace -- depending on if the user is an imap or pop3 user, respectively. Question 1: How would this be done on a user-by-user basis if the userdb is a passwd-file flat file? Would it be something like this? -- Userdb extra fields for IMAP User: userdb_namespace/inbox/inbox=yes -- Userdb extra fields for POP3 User: userdb_namespace/virtual/inbox=yes Question 2: If I want to allow any user to use either POP3 or IMAP, then could I do it this way? protocol imap { namespace inbox { inbox = yes } } protocol pop3 { namespace virtual { inbox = yes } } Thanks, Michael

1 0

Dovecot cannot find mailboxes
by C. Andrews Lavarre 26 Jul '16

26 Jul '16

Edgar, thank you for your help: I have solved gaining access from a client (Evolution) via IMAP to the server: I can refresh, add folders, and delete folders. But I am still confounded, as IMAP does not see any mailboxes. Neither we from the command line (telnet, openssl, login, select) nor the system can find the mailbox, despite following FindMailLocation: telnet, openssl, login, then b select inbox * 0 EXISTS * 0 RECENT and postfix fails with 2016-07-23T21:22:37.312039-04:00 lavarre postfix/error[17088]: A8DA2C1BB2: to=<andy(a)privustech.com>, orig_to=<andy>, relay But the mailboxes do exist in /var/mail/vhosts/privustech.com/andy and we point to them in /etc/dovecot/users. doveconf -n is attached. ----- Two issues are: 1. file permissions and ownership 2. virtual versus system users 1. It appears that having the correct ownership and permissions on various files is critical (of course), but those parameters must also be included in the interior of the /etc/dovecot/user. So if you change permissions you also must change that file. For example, you said: i also noticed your certificate chain is broken. http://wiki2.dovecot.org/testinstallation I worked through this link, thank you. Changing permissions for the directories /var/mail/* to root:mail ($UID:$GID = 1000:12) and then changing /etc/dovecot/users correspondingly to user(a)privustech.com :{plain}actualpassword: 1000:12 ::/var/mail/vhosts/privustech.com/user now allows a normal login. and we can create a new folder (e.g., work) and delete it. However, this is at variance with http://wiki2.dovecot.org/HowTo/SimpleVirtualInstall which says to set the ownership to vmail:vmail ($UID:$GID = 100: 5000). Doing so breaks dovecot. 2. The various links suggest that having virtual users is preferable to setting system users. The former do not require directories under /homebut they do require a directory in the mail system, which I have provided under /var/mail/vhosts. It also turns out that for virtual users you must include the domain (andy(a)privustech.com) Making that change allowed the success reported above. But despite that, we still cannot find the mailboxes on login. Any thoughts on how to have IMAP find the mailboxes (beyond FindMailLocation, which doesn't seem to work for me) would be most appreciated. Kind regards, Andy

3 2

[2.2.25 auth issue] auth-request.c: line 1049 (auth_request_lookup_credentials): assertion failed: (request->credentials_scheme == scheme)
by Alexey Asemov (Alex/AT) 26 Jul '16

26 Jul '16

Hello, Since updating to 2.2.25, we do have the following issue (seems to be related to the new auth policy code): Jul 9 00:00:14 LXmail01 dovecot: auth-worker(6558): sql(user(a)domain.org,*.*.*.*,<wjpa7SY3nNFR8yTo>): unknown user Jul 9 00:00:14 LXmail01 dovecot: auth: Panic: file auth-request.c: line 1049 (auth_request_lookup_credentials): assertion failed: (request->credentials_scheme == scheme) Jul 9 00:00:14 LXmail01 dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x8d57e) [0x7f197bd8157e] -> /usr/lib64/dovecot/libdovecot.so.0(+0x8d65e) [0x7f197bd8165e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f197bd201f6] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0x1a15a) [0x7f197c44715a] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0x26f8f) [0x7f197c453f8f] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0x19d2b) [0x7f197c446d2b] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](auth_request_lookup_credentials_callback+0x68) [0x7f197c4 46e28] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](passdb_handle_credentials+0x92) [0x7f197c457742] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0x2af06) [0x7f197c457f06] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0x2065a) [0x7f197c44d65a] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f197bd94edc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_in ternal+0xff) [0x7f197bd9633f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f197bd94f65] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f197bd95118] -> /usr /lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f197bd26663] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](main+0x3a1) [0x7f197c43cbe1] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f197b30ab15] -> dovecot/auth [1 wait, 0 passdb, 0 userdb](+0xfdd1) [0x7f197c43cdd1] Jul 9 00:00:14 LXmail01 dovecot: auth: Fatal: master: service(auth): child 6555 killed with signal 6 (core dumps disabled) Jul 9 00:00:14 LXmail01 dovecot: pop3-login: Warning: Auth connection closed with 1 pending requests (max 1 secs, pid=8133, EOF) Environment is MySQL passdb/userdb, we are using plain scheme as default and password_noscheme field. In 2.2.24 and below auth worked without scratch. Reverting all policy-related commits in 2.2.25 fixes this, but I have not dug the details. KR, Alex

3 2

Doveadm error
by László Károlyi 25 Jul '16

25 Jul '16

Hey everyone, I've got a weird error since I upgraded to the latest dovecot on my FreeBSD box: root@postfixjail /# doveadm quota recalc -u xxx(a)xxx.com doveadm(xxx(a)xxx.com): Error: dict-client: Commit failed: Deinit fish: 'doveadm quota recalc -u xxx@…' terminated by signal SIGSEGV (Address boundary error) root@postfixjail /# dovecot --version 2.2.25 (7be1766) root@postfixjail /# dovecot -n # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: FreeBSD 10.3-STABLE amd64 auth_cache_negative_ttl = 0 auth_cache_ttl = 0 auth_mechanisms = plain login cram-md5 digest-md5 auth_realms = flix.hu base_dir = /usr/local/var/run/dovecot/ default_login_user = nobody dict { quota = mysql:/usr/local/etc/dovecot/dovecot-dict-sql.conf.ext quota_rule2 = Trash:bytes=+100M } listen = * login_trusted_networks = 127.0.0.0/24 mail_location = mdbox:~/mdbox mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vnd.dovecot.pipe mdbox_rotate_size = 20 M namespace { inbox = yes location = prefix = separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/local/etc/email-responder sieve_plugins = sieve_extprograms } postmaster_address = postmaster(a)flix.hu protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { process_min_avail = 3 service_count = 1 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 } service managesieve { process_limit = 1024 process_min_avail = 2 } service pop3-login { process_min_avail = 3 service_count = 1 } ssl = required ssl_cert = </usr/local/etc/dovecot/ssl/server.crt ssl_key = </usr/local/etc/dovecot/ssl/server.pem userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota sieve } protocol lmtp { mail_plugins = quota sieve } protocol sieve { mail_plugins = quota sieve managesieve_max_line_length = 65536 } protocol imap { mail_max_userip_connections = 20 mail_plugins = quota imap_quota } protocol pop3 { mail_max_userip_connections = 15 mail_plugins = quota } root@postfixjail /# uname -a FreeBSD postfixjail.xxx.com 10.3-STABLE FreeBSD 10.3-STABLE #19 r302639: Tue Jul 12 13:54:21 CEST 2016 root@flix.hu:/usr/obj/usr/src/sys/MYKERNEL amd64 There seems no difference of which virtual mailbox I want dovecot to quota recalculate, it always fails with this error message. Any suggestions? Cheers, -- László Károlyi http://linkedin.com/in/karolyi

5 6

maildirsize calculation gives higher value than a real disk utilization
by Andrea Lisci 25 Jul '16

25 Jul '16

Hi, hope someone can help also if this problem is difficult to debug I have a mail account that has on file system 32GB however quotacalculation gives a higher value 41262146 I've already tried to: - doveadm quota recalc -u user@domain - removing maildirsize from /users/vmail/domain/user/Maildir - checking all emails messages if they have the size in the name (S=xxxx) different from the real size. I used the script here in attach giving it in input the output of << find /users/vmail/domain/user -name *S=* -type f>> I don't have mail compression the mail account have a lot of mailboxes and at now 78319 messages doveadm quota get -u user@domain Quota name Type Value Limit % User quota STORAGE 41262146 42991616 95 User quota MESSAGE 78319 - 0 this is the same command run with -Dv doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(user@domain): Debug: Added userdb setting: mail_location=maildir:/users/vmail/domain/user/Maildir doveadm(user@domain): Debug: Added userdb setting: plugin/quota_rule=*:storage=41G doveadm(user@domain): Debug: Effective uid=5000, gid=5000, home=/users/vmail/domain/user doveadm(user@domain): Debug: Quota root: name=User quota backend=maildir args= doveadm(user@domain): Debug: Quota rule: root=User quota mailbox=* bytes=44023414784 messages=0 doveadm(user@domain): Debug: Quota warning: bytes=41822244044 (95%) messages=0 reverse=no command=quota-warning 95 user@domain doveadm(user@domain): Debug: Quota grace: root=User quota bytes=20971520 doveadm(user@domain): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/users/vmail/domain/user/Maildir doveadm(user@domain): Debug: maildir++: root=/users/vmail/domain/user/Maildir, index=, indexpvt=, control=, inbox=/users/vmail/domain/user/Maildir, alt= Quota name Type Value Limit % User quota STORAGE 41202926 42991616 95 User quota MESSAGE 78247 - hope someone can help I'm running dovecot-2.2.10-5.el7 on centos7

3 3

postconf -n display error for "remote"?
by Michael Fox 25 Jul '16

25 Jul '16

Is this a bug? I configured the following: remote 192.168.7.128/27 { ssl = no } remote 192.168.7.0/24 { ssl = yes } But, when I run doveconf -n, I see: remote 192.168.7.0/24/24 { ssl = yes } remote 192.168.7.128/27/27 { ssl = no } Note the repeated network prefix length (/27/27 and /24/24). Is there a way to tell for sure whether this is just a cosmetic issue or something that could cause a problem? Michael

2 1

Cannot connect to Dovecot IMAP or POP
by C. Andrews Lavarre 24 Jul '16

24 Jul '16

Hello all. Thank you for your service. Easy when you know how, but presently I do not. After literally months of research and experimentation we simply cannot log into our PAM / apache2 / postfix / dovecot pop3/imap STARTTLS email server with an ordinary email client, e.g., Evolution or Thunderbird. We can connect to the host server in a host of different ways (no pun intended)—http, https, ssh, vnc, telnet, openssl -sclient Similarly we can connect to postfix and dovecot in yet another number of ways—telnet, openssl -sclient—but cannot log in to the email server with a normal email client (either Evolution or Thunderbird) by either pop3 or imap. SSL certificates are in place, verified, and tested. Part of the problem is the many changes in all the involved operating systems and protocols (e.g., imaps and pop3s are deprecated, openSUSE has migrated to LEAP, etc.) so many of the docs from Google are no longer valid. Additionally, there simply are bugs: Leap 42.1 YAST does not work when it comes to setting up websites. Documented. But I digress. I'm sure it's something really simple, but it evades me. Research details below. Any help would be more than appreciated. Thanks in advance, Andy ======================= Configuration testing details ======================= System is: Linux openSUSE Leap 42.1 Dovecot --version 2.2.18, Postfix Version: 2.11.6-3.1 Apache2 Version: 2.4.16-9.1 Connections 1. Evolution or Thunderbird to pop3 or imap reports: The reported error was "Could not connect to mail.privustech.com: Connection refused". Both connect successfully to googlemail.com with the same protocol: Port 993 SSL on a dedicated port I have also tried Port 143 STARTTLS after connecting without success 2. openssl s_client -connect mail.privustech.com:xxx a. xxx=25, 110, 143 all return error:140770FC b. xxx=993, 995 return socket: Connection refused connect:errno=111 3.telnet to a. smtp works. b. pop3 andy@tm2t:~> telnet 70.186.159.22 110 ... +OK POP3 2007e.104 server ready <48fa.572a0769(a)privustech.com> ... user andy -ERR Unknown AUTHORIZATION state command c. imap connects but does not allow login, and should not. http://marc.info/?l=imap&m=118775891829506&w=2 The most simple answer is "you cannot TELNET to a modern, correctly-configured, IMAP server and log in to it." andy@tm2t:~> telnet 70.186.159.22 143 ... * OK [...] privustech.com IMAP4rev1 2007e.404 at Wed, 4 May 2016 10:26:28 -0400 (EDT) ... A NO Invalid login credentials Modules • Apache2 works just fine. The server is up and answering. ping works just fine. We have http and https to all vhost sites (privustech, mailprivustech, nptbeyond, gvhl, truthcourage, and their www. subsites). • Postfix reports no errors. We can log in on localhost, send a message to ourselves and see the message. • Dovecot: a. Logging is enabled in 10-logging.conf to /var/log/dovecot.conf but no logging has occurred there. b. doveconf -n throws no errors. Checks and tests completed 1. /etc/hosts is just fine. 2. Firewall is open for telnet, postfix, dovecot. 3. Added andy to dovecot, postfix groups, in addition to mail, reset password to ANDYbbs14@. 4. We tried enabling imaps, pop3s, but this command returns errors about these protocols being obsolete. https://tools.ietf.org/html/rfc2595 Use of these ports is discouraged in favor of the STARTTLS or STLS commands. 5. Reviewed doveconf -n: a. Note, there are no Dovecot users established other than user postfix group postfix service auth { unix_listener auth-userdb { group = postfix user = postfix } } i. postfix has its own set of users, including andy, which works just fine within postfix. We can send mail and read mail in the mailbox. b. Authentication is performed by PAM: passdb { driver = pam } i. Examined PAM: A. The files /etc/pam.d/xxx, where xxx = dovecot, pop, imap, are all the same lavarre:~ # cat /etc/pam.d/xxx #%PAM-1.0 auth include common-auth account include common-account password include common-password session include common-session B. They do not resemble at all the form presented in http://wiki2.dovecot.org/PasswordDatabase/PAM passdb { driver = pam args = %s } C. Add (B.) to see if that works: No change. Comment out the original (A.): No change. Restore it. c. SSL is required and apparently configured correctly (the less-than symbol '<'causes the succeeding file to be read into the variable): ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/dovecot.pem ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = passwd } i. dovecot.pem, both cert and key, are installed in /etc/ssl as above and verified as a pair with openssl x509. And we point to them in /etc/dovecot/conf.d/10-ssl.conf as seen in the above. 6. Checked listening as it does not appear in doveconf -n: lavarre:~ # doveconf protocols listen protocols = imap pop3 lmtp listen = *, :: a. conf.d/10-master.conf ports for service xxx-login {inet_listener} are commented out. In fact, the entire file is commented out. Uncomment the listeners, restart. But no change. So undo.

2 3

Thunderbird | Attachments failed opened
by Jos Chrispijn 23 Jul '16

23 Jul '16

It lately happens that I cannot open attachments in Thunderbird45.2.0. Only when I resend the email to myself I can open it. What could be done? Found out that with Outlook there is noproblem opening these attachments. Thanks, Jos -- AI is no match for natural ignorance

1 0

Managesieve problem
by Joseph Mays 22 Jul '16

22 Jul '16

Trying to get either avelsieve or server side filters to work with managesieve. Managesieve is running but whenever avelsieve or the server settings backend try to talk to it the same thing happens. So I guess it's really a problem with something about managesieve at this point. I hit the Message Filters option, it takes a long time for it to come back, though it finally just times out and does nothing, and immediately when I click on the Message Filters link the following two messages appear in /var/log/dovecot.... 2016-07-18 17:03:02 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=108(<getpwuid() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 0:111 mode=0750) 2016-07-18 17:03:02 managesieve-login: Error: auth: connect(login) in directory / failed: Permission denied (euid=108(<getpwuid() error>) egid=65534(<getgrgid() error>) missing +x perm: /, dir owned by 0:111 mode=0750) Seems to be straightforwardly a permissions error on a directory, but I don't believe it's really the / directory, so which directory is it? Any insights on where to look would be appreciated.

2 2

Disable auth_ssl_require_client_cert for SASL
by damir 22 Jul '16

22 Jul '16

Hello! Dovecot version - 2.2.6 Postfix version - 2.10.2 OS: Mageia Linux 4 x86_64 I have configured Dovecot imaps-server on 993 port to authenticate users via private certificates: auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = no Users' database is in OpenLDAP and in dovecot-ldap.conf.ext checking of users' passwords is disabled: pass_attrs = uid=%n, mail=%n@%d, =nopassword=1 It all works fine. I have configured Postfix submission-service on 587 port to connect users via StartTLS: submission inet n - y - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_enforce_tls=yes -o smtpd_tls_req_ccert=yes -o smtpd_tls_ask_ccert=yes -o smtpd_client_restrictions=permit_tls_all_clientcerts,reject -o smtpd_recipient_restrictions=permit_tls_all_clientcerts,reject -o smtpd_helo_restrictions=permit_tls_all_clientcerts,reject It works fine. And now I have a new task: I also need Postfix to authenticate OpenLDAP-users using SASL on smtps-port 465. I need it for using on mobile devices, which don't support StartTLS. So I have configured smtps in Postfix: smtps inet n - y - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject_unauth_destination -o smtpd_helo_restrictions=permit_sasl_authenticated,reject While trying to connect to smtps, clients get an error: "Client didn't present valid SSL certificate", and this is clear. The question is: how to configure an additional auth-service in dovecot, which doesn't require private certificates and authenticates users using login/password? Configuration-files: dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.14.43-server-1.mga4 x86_64 Mageia 4 ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ first_valid_gid = 12 first_valid_uid = 8 hostname = myexample.com last_valid_gid = 12 last_valid_uid = 8 listen = * login_greeting = Dovecot L ready. login_trusted_networks = 127.0.0.0/8 10.62.0.0/16 mail_debug = yes mail_gid = 12 mail_home = /home/mail/%d/%n mail_location = maildir:/home/mail/%d/%n mail_uid = 8 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = homeDirectory=/home/mail/%d/%n driver = ldap } plugin { sieve = /home/mail/%d/%n/sieve/UsersActiveScript.sieve sieve_before = /var/spool/mail/dovecot.sieve sieve_default = /var/spool/mail/dovecot.sieve sieve_dir = /home/mail/%d/%n/sieve } postmaster_address = admin(a)myexample.com protocols = imap service anvil { type = anvil unix_listener anvil-auth-penalty { group = mail mode = 0600 user = mail } unix_listener anvil { mode = 0600 user = mail } } service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = mail } } service imap-login { inet_listener imap { port = 0 ssl = no } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } ssl_ca = </etc/pki/CA/private/dovecot-ca.pem grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-ldap.conf.ext: uris = ldap://localhost dn = cn=service,ou=Systems,dc=myexample,dc=com dnpass = SeCrEt auth_bind = no ldap_version = 3 base = ou=People,dc=myexample,dc=com deref = never scope = subtree user_attrs = homeDirectory=home user_filter = (&(mail=%n@%d)(uid=%n)) pass_attrs = uid=%n, mail=%n@%d, =nopassword=1 pass_filter = (&(mail=%n@%d)(uid=%n)) Kind regards, Damir

1 0

Suggested improvement for antispam plugin documentation
by Ralph Seichter 21 Jul '16

21 Jul '16

Hello, I struggled a bit with getting the antispam plugin to work, because the plugin configuration in http://wiki2.dovecot.org/Plugins/Antispam is incomplete. After some twiddling, I ended up with this: # /etc/dovecot/conf.d/90-plugin.conf plugin { antispam_backend = mailtrain antispam_mail_spam = spam antispam_mail_notspam = ham antispam_mail_sendmail = /path/to/mailtrain/script antispam_spam = Junk;Spam antispam_trash = Deleted Messages;Trash } I know that the antispam plugin has not yet been officially released, but I think it might be worth updating the documentation anyway. Your thoughts? -Ralph

1 0

an e-mail client for dovecot ?
by Spyros Tsiolis 21 Jul '16

21 Jul '16

Hello all, For some years now, I've been using Thunderbird for dovecot. I am not very satisfied with t/b so I thought of using m/s outlook but then I thought that I want to distance my clients from office products. I have a newly created dovecot installation on a very small site. Three nodes, all x86 Windows 7 professional with an ubuntu v14.04 server (x86 again) running dovecot 1.2.17. The clients there use dovecot as an imap server, so they have a real-world e-mail account each and whatever they want to keep , they store by gradding-and-dropping to the imap (local / archive) account. Since I have quite some experiece with thunderbird, I know most of its shortcomings; So I thought if there's an alternative (better?) imap mail client for x86 windows 7 systems than t/b. Even better if there's an alternative client that is also supporeted under linux . Any ideas are welcome, TIA, s.t.

12 12

Absolute path in SUBSCRIPTIONS
by Miloslav Hůla 20 Jul '16

20 Jul '16

Hello, I'm using following two namespaces with Dovecot 2.2.13-12~deb8u1: namespace inbox { inbox = yes list = yes location = prefix = INBOX. # the previous Cyrus compatibility separator = . subscriptions = yes type = private ... } namespace { inbox = no list = children location = maildir:/vmail/user/%%n/Maildir:INDEXPVT=/vmail/user/%n/Maildir/Shared/%%n prefix = user.%%n. separator = . subscriptions = yes type = shared } For the shared namespace, the subscriptions are stored globally in '/vmail/user/%%n/Maildir/subscribtions' which is bad for me. I would like too keep subscriptions per user. I cannot set 'subscriptions = no' because I have no parent namespace. And when I set :SUBSCRIPTIONS=/vmail/user/%n/Maildir/subscriptions-shared it does not work (absolute path does not work) and it creates file in: /vmail/user/%%n/Maildir/vmail/user/%n/Maildir/subscriptions-shared instead of /vmail/user/%n/Maildir/subscriptions-shared I found, that relative path hack works: :SUBSCRIPTIONS=../../%n/Maildir/subscriptions-shared but I'm not sure it is the legitimate solution. Are there other options? Kind regards, Milo

1 0

Panic when runing "doveadm mailbox status ... vsize"
by Mark Costlow 20 Jul '16

20 Jul '16

I'm using dovecot 2.2.24 on FreeBSD 10.3. I'm working on converting users from maildir to mdbox, for the usual reasons. I have converted some test users and they generally work fine. But when I run "doveadm mailbox status" I get a Panic if I ask for the vsize field (or "all"), but other fields work fine. For example: # doveadm mailbox status -u bubbacheex3 "messages" INBOX INBOX messages=53 # doveadm mailbox status -u bubbacheex3 "guid" INBOX INBOX guid=bf976912f3748957761d0100f906a3d0 # doveadm mailbox status -u bubbacheex3 "unseen" INBOX INBOX unseen=52 # doveadm mailbox status -u bubbacheex3 "vsize" INBOX doveadm(bubbacheex3): Panic: file file-lock.c: line 269: unreached Abort trap I've only converted a few users, but they all exhibit this problem. I converted them with: dsync -u bubbacheex3 mirror maildir:/var/tmp/bubbacheex3 I have done a force-resync, which succeeds but doesn't change the behavior. I spent a little time trying to get gdb running but didn't get very far (couldn't seem to get it to find the source files once I got a few levels deep in the call stack). Before I beat my head on the gdb issue more, I thought I'd check here to see if anyone has any ideas. I didn't turn up anything in google or searching this list. Here's my "doveconf -n" output: ------------------------------------------------------ # 2.2.24 (a82c823): /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.3-RELEASE-p3 amd64 ufs auth_failure_delay = 1 secs auth_mechanisms = plain login auth_winbind_helper_path = /usr/local/bin/ntlm_auth auth_worker_max_count = 60 base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 100 first_valid_uid = 1000 listen = * login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mdbox:/var/mail/%u:INDEX=/var/dovecot/%u mail_log_prefix = "%Us(%u): " mail_nfs_storage = yes mail_privileged_group = mail mdbox_rotate_interval = 1 days mdbox_rotate_size = 4 M mmap_disable = yes namespace { inbox = yes location = prefix = separator = . } passdb { args = session=yes dovecot driver = pam } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } user = root vsz_limit = 256 M } service imap-login { chroot = login process_limit = 128 process_min_avail = 10 service_count = 1 user = dovecot vsz_limit = 64 M } service imap { drop_priv_before_exec = no process_limit = 512 vsz_limit = 256 M } service pop3-login { chroot = login process_limit = 128 process_min_avail = 5 service_count = 1 user = dovecot vsz_limit = 64 M } service pop3 { drop_priv_before_exec = no process_limit = 512 vsz_limit = 256 M } ssl_cert = </etc/mail/certs/mail.swcp.com.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/mail/certs/mail.swcp.com.pem userdb { args = blocking=yes driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k mail_max_userip_connections = 20 mail_plugin_dir = /usr/local/lib/dovecot/imap } protocol pop3 { mail_max_userip_connections = 10 mail_plugin_dir = /usr/local/lib/dovecot/pop3 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ mail_plugin_dir = /usr/local/lib/dovecot/lda postmaster_address = postmaster(a)swcp.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r sendmail_path = /usr/sbin/sendmail } ------------------------------------------------------ Thanks, Mark -- Mark Costlow | Southwest Cyberport | Fax: +1-505-232-7975 cheeks(a)swcp.com | Web: www.swcp.com | Voice: +1-505-232-7992 Mail Minder - Intelligent Push Notifications for Email on the iPhone http://mailminderapp.com/download or in the App Store

3 3

Virtual mailboxes
by Lefteris Tsintjelis 19 Jul '16

19 Jul '16

I have been banging my head to the walls for the past couple of days to make virtual mailboxes work and I finally found the problem. It seems when prefetch is used the user_query is not working at all. However, I have not found any reference to this one. http://wiki.dovecot.org/Plugins/Virtual I have tried to add the SQL statements to the password_query with prefetch but it did not work. It seems that it only works with prefetch off.

1 0

dovecot --version tarball
by Leon Kyneur 19 Jul '16

19 Jul '16

Hi, Trying to understand what the version numbers mean. I typically build from the stable tarball and then apply patches as needed.. however since 2.2.25 this hasn't been working (not sure if it worked before or never really looked closely TBH). http://dovecot.org/releases/2.2/dovecot-2.2.25.tar.gz - shows GITID 7be1766 however it has commits / changes newer than this. Also the github tag for 2.2.25 is c1527e5 which doesn't match the source tarball as well. Should the source tarball and git commit hash be related? Thanks Leon

1 0

Some killed with signal 11 after upgrade to 2.2.25
by Alessio Cecchi 18 Jul '16

18 Jul '16

Hi, after to upgrade to dovecot-2.2.25 I see some killed with signal 11 in the log file: Jul 18 08:41:59 pop01 dovecot: pop3(rossi(a)milano.it): Fatal: master: service(pop3): child 32318 killed with signal 11 (core dumped) Jul 18 09:22:48 pop01 dovecot: imap(mail_backup(a)domain.it): Fatal: master: service(imap): child 16137 killed with signal 11 (core dumped) I’m not sure but I think happens with new users at the first login but I’m not able to reproduce it. Here the backtrace: Core was generated by `dovecot/pop3 pop3-postlogin'. Program terminated with signal 11, Segmentation fault. #0 0x00000001afdb5828 in ?? () Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-11.el6_2.x86_64 glibc-2.12-1.192.el6.x86_64 libgcc-4.4.7-17.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-17.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x00000001afdb5828 in ?? () No symbol table info available. #1 0x000000000120a5d0 in ?? () No symbol table info available. #2 0x00007f7dafd74cac in client_dict_wait (_dict=0x120a920) at dict-client.c:573 dict = 0x120a920 #3 0x00007f7dafd757d8 in client_dict_lookup (_dict=0x120a5d0, pool=0x7f7db0020110, key=0x7f7daef41a07 "priv/quota/messages", value_r=0x7ffe94cb1650) at dict-client.c:669 result = {ret = -2, value = 0x0, error = 0x0} #4 0x00007f7daef3c5c3 in dict_quota_get_resource (_root=0x120a2d0, name=<value optimized out>, value_r=0x7ffe94cb1708) at quota-dict.c:168 value = <value optimized out> _data_stack_cur_id = 5 root = 0x120a2d0 want_bytes = <value optimized out> ret = <value optimized out> #5 0x00007f7daef39170 in quota_get_resource (root=0x120a2d0, mailbox_name=0x7f7daef41cfc "", name=0x7f7daef412f3 "MESSAGE", value_r=0x7ffe94cb1708, limit_r=0x7ffe94cb1700) at quota.c:686 bytes_limit = <value optimized out> count_limit = <value optimized out> kilobytes = false ret = <value optimized out> #6 0x00007f7daef39303 in quota_over_flag_check_root (root=0x120a2d0) at quota.c:1036 name = <value optimized out> overquota_script = <value optimized out> resources = 0x7f7daf144980 i = <value optimized out> value = 0 limit = 0 cur_overquota = <value optimized out> ret = <value optimized out> #7 0x00007f7daef39530 in quota_over_flag_check_startup (quota=<value optimized out>) at quota.c:1078 roots = <value optimized out> i = <value optimized out> count = 2 name = <value optimized out> #8 0x00007f7db006babe in hook_mail_namespaces_created (namespaces=0x12038d0) at mail-storage-hooks.c:296 _data_stack_cur_id = 4 hooks__foreach_end = 0x12073d8 hooks = 0x12073a8 #9 0x00007f7db0060065 in mail_namespaces_init_finish (namespaces=0x12038d0, error_r=0x7ffe94cb1920) at mail-namespace.c:357 _data_stack_cur_id = 3 ---Type <return> to continue, or q <return> to quit--- ns = 0x0 prefixless_found = <value optimized out> __FUNCTION__ = "mail_namespaces_init_finish" #10 0x00007f7db00601f4 in mail_namespaces_init (user=0x1205270, error_r=0x7ffe94cb1920) at mail-namespace.c:405 mail_set = 0x1206118 ns_set = <value optimized out> unexpanded_ns_set = <value optimized out> namespaces = 0x12038d0 ns_p = <value optimized out> i = <value optimized out> count = <value optimized out> __FUNCTION__ = "mail_namespaces_init" #11 0x00007f7db006f56d in mail_storage_service_init_post (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:714 mail_set = 0x1206118 home = 0x11f2931 "/home/domains/milano.it/rossi" mail_user = 0x1205270 #12 mail_storage_service_next_real (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:1411 len = <value optimized out> temp_priv_drop = false priv = {uid = 89, gid = 89, uid_source = 0x7f7db01118d9 "userdb lookup", gid_source = 0x7f7db01118d9 "userdb lookup", home = 0x11f2931 "/home/domains/milano.it/rossi", chroot = 0x11e4670 ""} error = <value optimized out> use_chroot = true #13 mail_storage_service_next (ctx=<value optimized out>, user=0x11f1960, mail_user_r=0x7ffe94cb19f0) at mail-storage-service.c:1429 old_log_prefix = 0x11f1750 "pop3(rossi(a)milano.it): " ret = 18899224 #14 0x00007f7db006f7ad in mail_storage_service_lookup_next (ctx=0x11ecdc0, input=<value optimized out>, user_r=0x7ffe94cb19f8, mail_user_r=0x7ffe94cb19f0, error_r=0x7ffe94cb1a70) at mail-storage-service.c:1462 user = 0x11f1960 ret = <value optimized out> #15 0x000000000040434e in client_create_from_input (input=0x7ffe94cb1a80, fd_in=13, fd_out=13, input_buf=0x7ffe94cb1a30, error_r=<value optimized out>) at main.c:106 lookup_error_str = 0x4083b0 "-ERR [SYS/TEMP] Internal error occurred. Refer to server log for more information.\r\n" user = <value optimized out> mail_user = <value optimized out> client = <value optimized out> set = <value optimized out> error = <value optimized out> #16 0x0000000000404abe in login_client_connected (client=0x11eefc0, username=<value optimized out>, ---Type <return> to continue, or q <return> to quit--- extra_fields=<value optimized out>) at main.c:178 input = {module = 0x40932a "pop3", service = 0x40932a "pop3", username = 0x11e3168 "rossi(a)milano.it", session_id = 0x11ef040 "MI/mQ+M3nvtPBuXj", session_id_prefix = 0x0, local_ip = {family = 2, u = {ip6 = {__in6_u = { __u6_addr8 = "\n`\003\235", '\000' <repeats 11 times>, __u6_addr16 = {24586, 40195, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2634244106, 0, 0, 0}}}, ip4 = {s_addr = 2634244106}}}, remote_ip = {family = 2, u = {ip6 = { __in6_u = {__u6_addr8 = "O\006\345\343", '\000' <repeats 11 times>, __u6_addr16 = {1615, 58341, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {3823437391, 0, 0, 0}}}, ip4 = {s_addr = 3823437391}}}, local_port = 0, remote_port = 0, userdb_fields = 0x11e3140, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0, debug = 0} error = <value optimized out> input_buf = {data = 0x11ef030, used = 0, priv = {0x0, 0x0, 0x0, 0x0, 0x0}} __FUNCTION__ = "login_client_connected" #17 0x00007f7dafd456fe in master_login_auth_finish (client=0x11eefc0, auth_args=<value optimized out>) at master-login.c:210 login = 0x11ee2a0 service = 0x11eb5d0 close_sockets = true __FUNCTION__ = "master_login_auth_finish" #18 0x00007f7dafd45989 in master_login_postlogin_input (pl=0x11f1490) at master-login.c:284 login = 0x11ee2a0 buf = "rossi@milano.it\tquota_rule=*:backend=8589934592S,229376C\tuid=89\tgid=89\thome=/home/domains/milano.it/rossi\n\000\257\005\000\000\001\000\000\000\300\035˔\376\177\000\000@\226ѯ}\177\000\000X3W\260}\177\000\000\200\035˔\376\177\000\000\250\035˔\376\177\000\000\000\060W\260}\177\000\000\030\275V\260}\177\000\000\326+\301\213\000\000\000\000\352\377\065\260}\177"... auth_args = 0x11e3138 p = 0x11e3160 len = <value optimized out> ret = -1 fd = -1 #19 0x00007f7dafdb55db in io_loop_call_io (io=0x11eee00) at ioloop.c:564 ioloop = 0x11eb730 t_id = 2 __FUNCTION__ = "io_loop_call_io" #20 0x00007f7dafdb6bc7 in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0x11ec850 events = <value optimized out> event = 0x11ed6c0 list = 0x11eee60 io = <value optimized out> tv = {tv_sec = 59, tv_usec = 999953} events_count = <value optimized out> msecs = <value optimized out> ret = 1 i = <value optimized out> ---Type <return> to continue, or q <return> to quit--- call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #21 0x00007f7dafdb5685 in io_loop_handler_run (ioloop=0x11eb730) at ioloop.c:612 No locals. #22 0x00007f7dafdb5828 in io_loop_run (ioloop=0x11eb730) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #23 0x00007f7dafd47b53 in master_service_run (service=0x11eb5d0, callback=<value optimized out>) at master-service.c:640 No locals. #24 0x00000000004048d4 in main (argc=2, argv=0x11eb390) at main.c:289 set_roots = {0x409400, 0x0} login_set = {auth_socket_path = 0x11e3050 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x11e3088 "/var/run/dovecot/pop3-postlogin", postlogin_timeout_secs = 60, callback = 0x404a00 <login_client_connected>, failure_callback = 0x404500 <login_client_failed>, request_auth_token = 0} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = <value optimized out> c = <value optimized out> (gdb) and this: Core was generated by `dovecot/imap imap-postlogin'. Program terminated with signal 11, Segmentation fault. #0 0x0000000178e39828 in ?? () Missing separate debuginfos, use: debuginfo-install bzip2-libs-1.0.5-7.el6_0.x86_64 expat-2.0.1-11.el6_2.x86_64 glibc-2.12-1.192.el6.x86_64 libgcc-4.4.7-17.el6.x86_64 libicu56-56.1-4.1.x86_64 libstdc++-4.4.7-17.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x0000000178e39828 in ?? () No symbol table info available. #1 0x0000000000e1e670 in ?? () No symbol table info available. #2 0x00007f1178df8cac in client_dict_wait (_dict=0xe1e910) at dict-client.c:573 dict = 0xe1e910 #3 0x00007f1178df97d8 in client_dict_lookup (_dict=0xe1e670, pool=0x7f11790a4110, key=0x7f1177dc1a07 "priv/quota/messages", value_r=0x7ffc745d6590) at dict-client.c:669 result = {ret = -2, value = 0x0, error = 0x0} #4 0x00007f1177dbc5c3 in dict_quota_get_resource (_root=0xe189a0, name=<value optimized out>, value_r=0x7ffc745d6648) at quota-dict.c:168 value = <value optimized out> _data_stack_cur_id = 5 root = 0xe189a0 want_bytes = <value optimized out> ret = <value optimized out> #5 0x00007f1177db9170 in quota_get_resource (root=0xe189a0, mailbox_name=0x7f1177dc1cfc "", name=0x7f1177dc12f3 "MESSAGE", value_r=0x7ffc745d6648, limit_r=0x7ffc745d6640) at quota.c:686 bytes_limit = <value optimized out> count_limit = <value optimized out> kilobytes = false ret = <value optimized out> #6 0x00007f1177db9303 in quota_over_flag_check_root (root=0xe189a0) at quota.c:1036 name = <value optimized out> overquota_script = <value optimized out> resources = 0x7f1177fc4980 i = <value optimized out> value = 0 limit = 0 cur_overquota = <value optimized out> ret = <value optimized out> #7 0x00007f1177db9530 in quota_over_flag_check_startup (quota=<value optimized out>) at quota.c:1078 roots = <value optimized out> i = <value optimized out> count = 2 name = <value optimized out> #8 0x00007f11790efabe in hook_mail_namespaces_created (namespaces=0xe1d230) at mail-storage-hooks.c:296 _data_stack_cur_id = 4 hooks__foreach_end = 0xe1b450 hooks = 0xe1b420 #9 0x00007f11790e4065 in mail_namespaces_init_finish (namespaces=0xe1d230, error_r=0x7ffc745d6860) at mail-namespace.c:357 _data_stack_cur_id = 3 ---Type <return> to continue, or q <return> to quit--- ns = 0x0 prefixless_found = <value optimized out> __FUNCTION__ = "mail_namespaces_init_finish" #10 0x00007f11790e41f4 in mail_namespaces_init (user=0xe19260, error_r=0x7ffc745d6860) at mail-namespace.c:405 mail_set = 0xe1a120 ns_set = <value optimized out> unexpanded_ns_set = <value optimized out> namespaces = 0xe1d230 ns_p = <value optimized out> i = <value optimized out> count = <value optimized out> __FUNCTION__ = "mail_namespaces_init" #11 0x00007f11790f356d in mail_storage_service_init_post (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:714 mail_set = 0xe1a120 home = 0xe054a1 "/home/domains/C/domain.it/mail_backup" mail_user = 0xe19260 #12 mail_storage_service_next_real (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:1411 len = <value optimized out> temp_priv_drop = false priv = {uid = 89, gid = 89, uid_source = 0x7f11791958d9 "userdb lookup", gid_source = 0x7f11791958d9 "userdb lookup", home = 0xe054a1 "/home/domains/C/domain.it/mail_backup", chroot = 0xdf66a0 ""} error = <value optimized out> use_chroot = true #13 mail_storage_service_next (ctx=<value optimized out>, user=0xe04340, mail_user_r=0x7ffc745d6928) at mail-storage-service.c:1429 old_log_prefix = 0xe04130 "imap(mail_backup(a)domain.it): " ret = 14786848 #14 0x00007f11790f37ad in mail_storage_service_lookup_next (ctx=0xdff7d0, input=<value optimized out>, user_r=0x7ffc745d6930, mail_user_r=0x7ffc745d6928, error_r=0x7ffc745d6988) at mail-storage-service.c:1462 user = 0xe04340 ret = <value optimized out> #15 0x0000000000424811 in client_create_from_input (input=0x7ffc745d69a0, fd_in=14, fd_out=14, client_r=0x7ffc745d6990, error_r=0x7ffc745d6988) at main.c:228 user = <value optimized out> mail_user = 0x0 ns = <value optimized out> client = <value optimized out> imap_set = <value optimized out> lda_set = <value optimized out> errstr = <value optimized out> mail_error = 32529 ---Type <return> to continue, or q <return> to quit--- #16 0x00000000004251fc in login_client_connected (login_client=0xe01a50, username=<value optimized out>, extra_fields=<value optimized out>) at main.c:316 input = {module = 0x42d701 "imap", service = 0x42d701 "imap", username = 0xdf5128 "mail_backup(a)domain.it", session_id = 0xe01ad0 "12Tc1eM34NNeVqvj", session_id_prefix = 0x0, local_ip = {family = 2, u = {ip6 = {__in6_u = { __u6_addr8 = "m\250q\234", '\000' <repeats 11 times>, __u6_addr16 = {43117, 40049, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {2624694381, 0, 0, 0}}}, ip4 = {s_addr = 2624694381}}}, remote_ip = {family = 2, u = {ip6 = { __in6_u = {__u6_addr8 = "^V\253\343", '\000' <repeats 11 times>, __u6_addr16 = {22110, 58283, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {3819656798, 0, 0, 0}}}, ip4 = {s_addr = 3819656798}}}, local_port = 0, remote_port = 0, userdb_fields = 0xdf50f8, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0, debug = 0} client = <value optimized out> flags = <value optimized out> error = <value optimized out> __FUNCTION__ = "login_client_connected" #17 0x00007f1178dc96fe in master_login_auth_finish (client=0xe01a50, auth_args=<value optimized out>) at master-login.c:210 login = 0xe00d30 service = 0xdfd5f0 close_sockets = true __FUNCTION__ = "master_login_auth_finish" #18 0x00007f1178dc9989 in master_login_postlogin_input (pl=0xe03ea0) at master-login.c:284 login = 0xe00d30 buf = "mail_backup@domain.it\tquota_rule=*:backend=1073741824S,32768C\tuid=89\tgid=89\thome=/home/domains/C/domain.it/mail_backup\tauth_token=a3ac7f7c5f6b71227cc12425b8ca588d426452a2\n\270l]t\374\177\000\000\370D\200y\021\177\000\000\060\263\177y\021"... auth_args = 0xdf50f0 p = 0xdf5120 len = <value optimized out> ret = -1 fd = -1 #19 0x00007f1178e395db in io_loop_call_io (io=0xe01890) at ioloop.c:564 ioloop = 0xdfd750 t_id = 2 __FUNCTION__ = "io_loop_call_io" #20 0x00007f1178e3abc7 in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0xdff260 events = <value optimized out> event = 0xe000d0 list = 0xe018f0 io = <value optimized out> tv = {tv_sec = 59, tv_usec = 999978} events_count = <value optimized out> msecs = <value optimized out> ret = 1 ---Type <return> to continue, or q <return> to quit--- i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #21 0x00007f1178e39685 in io_loop_handler_run (ioloop=0xdfd750) at ioloop.c:612 No locals. #22 0x00007f1178e39828 in io_loop_run (ioloop=0xdfd750) at ioloop.c:588 __FUNCTION__ = "io_loop_run" #23 0x00007f1178dcbb53 in master_service_run (service=0xdfd5f0, callback=<value optimized out>) at master-service.c:640 No locals. #24 0x0000000000425025 in main (argc=2, argv=0xdfd390) at main.c:460 set_roots = {0x42d740, 0x6359e0, 0x0} login_set = {auth_socket_path = 0xdf5050 "uota_rule=*:backend=1073741824S,32768C", postlogin_socket_path = 0xdf5088 "e=/home/domains/C/domain.it/mail_backup", postlogin_timeout_secs = 60, callback = 0x425160 <login_client_connected>, failure_callback = 0x424690 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> auth_socket_path = 0x42e6f0 "auth-master" c = <value optimized out> and my configuration: # 2.2.25.1 (f9daebb): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15.rc1 (b9dc09d) # OS: Linux 2.6.32-642.1.1.el6.x86_64 x86_64 CentOS release 6.8 (Final) auth_cache_negative_ttl = 2 mins auth_cache_size = 20 M auth_cache_ttl = 20 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 50 deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins imap_logout_format = in=%i out=%o session=<%{session}> imap_max_line_length = 2 M last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 10.0.1.5 login_trusted_networks = 10.0.1.0/24 mail_fsync = always mail_location = maildir:~/Maildir mail_plugins = quota acl expire zlib fts fts_solr maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-deny-sql.conf.ext deny = yes driver = sql } passdb { args = /etc/dovecot/extra/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire fts = solr fts_solr = url=http://10.0.1.145:8983/solr/ quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_grace = 10M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation zlib_save = gz zlib_save_level = 6 } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o, session=<%{session}> protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { client_limit = 6524 unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { process_limit = 500 unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap-postlogin { executable = script-login /etc/dovecot/scripts/imap-postlogin.sh unix_listener imap-postlogin { group = vmail mode = 0660 user = vmail } user = vmail } service imap { executable = imap imap-postlogin process_limit = 5000 vsz_limit = 384 M } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { process_min_avail = 4 service_count = 0 } service pop3-postlogin { executable = script-login /etc/dovecot/scripts/pop3-postlogin.sh unix_listener pop3-postlogin { group = vmail mode = 0660 user = vmail } user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } service quota-warning { executable = script /etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no submission_host = 127.0.0.1 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_fsync = optimized mail_location = maildir:~/Maildir:INDEX=MEMORY mail_plugins = quota acl expire zlib fts fts_solr sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl expire zlib fts fts_solr imap_quota imap_acl imap_zlib } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 15 } I hope can be fixed. Thanks

1 0

Include IMAP Junk folder to pop3 clients.
by Lefteris Tsintjelis 18 Jul '16

18 Jul '16

Hi, I would like to include all new mails of Junk box (I have a global sieve filtering set) folder to pop3 clients. Is this possible? This is my current configuration. # 2.2.25 (7be1766): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: FreeBSD 9.3-RELEASE-p43 amd64 auth_default_realm = example.com auth_failure_delay = 30 secs auth_mechanisms = plain login disable_plaintext_auth = no info_log_path = /var/log/dovmaillog lmtp_rcpt_check_quota = yes log_path = /var/log/dovmessages login_greeting = NO UBE/UCE - Trespassers will be pursued. mail_gid = mail mail_home = /home/vmail/%d/%u mail_max_userip_connections = 30 mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Archive { auto = create special_use = \Archive } mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = create special_use = \Sent } mailbox Trash { auto = create autoexpunge = 30 days special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/local.ext driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --deliver=;--source=error;--signature=%%s;--user;%u antispam_dspam_binary = /usr/local/bin/dspam antispam_dspam_result_header = X-DSPAM-Result antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Junk antispam_trash = Trash quota = maildir sieve = /home/vmail/.sieve/%d/%u/.user.sieve sieve_dir = /home/vmail/.sieve/%d/%u/.sieve sieve_global_dir = /home/vmail/.sieve/global sieve_global_path = /home/vmail/.sieve/global.sieve sieve_max_script_size = 512K } protocols = imap pop3 lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/dovauth { group = wheel mode = 0666 user = postfix } } service imap-login { chroot = login client_limit = 256 executable = /usr/local/libexec/dovecot/imap-login inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } process_limit = 128 process_min_avail = 2 service_count = 1 } service imap { executable = /usr/local/libexec/dovecot/imap } service lmtp { unix_listener /var/spool/postfix/private/dovlmtp { group = wheel mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { chroot = login client_limit = 256 executable = /usr/local/libexec/dovecot/pop3-login inet_listener pop3 { address = * port = 110 } inet_listener pop3s { address = * port = 995 } process_limit = 128 process_min_avail = 2 service_count = 1 } service pop3 { executable = /usr/local/libexec/dovecot/pop3 } ssl_cert = </etc/ssl/certs/server.pem ssl_key = </etc/ssl/private/server.pem userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/local.ext driver = sql } protocol lmtp { mail_plugins = quota mail_log notify sieve quota } protocol lda { auth_socket_path = /var/spool/postfix/private/dovauth mail_plugins = quota mail_log notify sieve quota } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_max_line_length = 64 k mail_plugins = quota mail_log notify imap_quota antispam } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv }

2 1

Moving Maildir folders
by Mark Foley 18 Jul '16

18 Jul '16

Our office had a user leave. Another user is taking over her duties and needs reference to the departing user's email. I've copied that entire departed user's Maildir structure to the current user: mv olduser/Maildir/.* curuser/Maildir/.olduser I did change permission and ownership on curuser/Maildir/.olduser to be the target user. I did not bring over the olduser/Maildir/dovecot* files (indexes, subscriptions, etc.) as I thought that would be bad. Nevertheless, the curuser cannot see this new olduser folder (which should be at the same level as Inbox, Junk Mail, etc.). I did manually add olduser to the curuser/Maildir/subscriptions file, but still nothing. So, what did I do wrong and how do I fix it? THX -- Mark

7 13

doveadm feature request: move mailbox between users
by Luigi Rosa 17 Jul '16

17 Jul '16

A feature request for doveadm: move (or copy) mailboxes between users Something like: doveadm movemailbox -s User1 -d User2 Old/Mail/Box Destin/Ation/Path (the same with copymailbox) Or something like that is already possible? -- Ciao, luigi / +--[Luigi Rosa]-- \ It's not enough that we do our best; sometimes we have to do what's required. --Sir Winston Churchill

2 4

doveconf -n display error for "remote"
by Michael Fox 15 Jul '16

15 Jul '16

Upon further testing, it seems that the issue below may only be a display bug in doveconf. In other words, the remote filter appears to work as configured, even though it is displayed with duplicate prefix length by doveconf. Is this sufficient information to report a bug or is there some other protocol? Michael ------------------------------------------- Dovecot --version: 2.2.9 I configured the following in local.conf: remote 192.168.7.128/27 { ssl = no } remote 192.168.7.0/24 { ssl = yes } But, when I run doveconf -n, I see: remote 192.168.7.0/24/24 { ssl = yes } remote 192.168.7.128/27/27 { ssl = no } Note the repeated network prefix length (/27/27 and /24/24).

1 0

controlling STARTTLS by IP address
by Michael Fox 15 Jul '16

15 Jul '16

On my POP3 server, I need to be able to control the use of STARTTLS by client IP address. Specifically: * Clients on certain internal subnets (e.g., 192.168.1.0/24) must not have the option to use TLS. If the client tries to use STARTTLS, the option should be rejected. This is to satisfy US FCC rules regarding the use of encryption over certain radio frequencies. * All other internal clients (e.g., 192.168.0.0/16, but not 192.168.1.0/24) should be able to use STARTTLS if they choose to. * All external clients (0.0.0.0/0) will be required to use TLS. Is there a way to control which clients are allowed to use STARTTLS according to the client's IP address? Thanks, Michael

7 18

authentication failed: Connection lost to authentication server
by Zhang Huangbin 15 Jul '16

15 Jul '16

Dear all, I got error "authentication failed: Connection lost to authentication server", i turned on debug mode in Postfix/Dovecot, but this is the error i can get. All other errors point to sasl auth failure, what does "connection lost to authentication server" means? How can i exactly know what the problem is and how to fix it? Here's my Dovecot/Postfix configuration, with Active Directory integration. - dovecot.conf: http://pastebin.com/7T05kvmH - dovecot-ldap.conf: http://pastebin.com/DtkAg01v - Postfix main.cf: http://pastebin.com/Z9Wihmvr Dovecot/Postfix and AD are running in the same network (192.168.10.X), no firewall between them. Thanks for your help. :)

1 0

Re: Re: "Error: nfs_flush_file_handle_cache_dir: rmdir(/inboxes)" log spikes
by Joseph Tam 15 Jul '16

15 Jul '16

Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > On 14.07.2016 21:26, Joseph Tam wrote: >> >> I received a bunch of these log messages at a rate of a few thousand >> per hour for one of my users -- she may have max'd out her quota. The >> directory is a NFS directory containing mbox formatted INBOX's. >> >> Other than alleviating the space crunch, is there any particular >> action I need to take? > > Are we talking about dovecot quota or some filesystem quota? Filesystem quota. Joseph Tam <jtam.home(a)gmail.com>

1 0

"Error: nfs_flush_file_handle_cache_dir: rmdir(/inboxes)" log spikes
by Joseph Tam 14 Jul '16

14 Jul '16

I received a bunch of these log messages at a rate of a few thousand per hour for one of my users -- she may have max'd out her quota. The directory is a NFS directory containing mbox formatted INBOX's. Other than alleviating the space crunch, is there any particular action I need to take? Joseph Tam <jtam.home(a)gmail.com>

2 1

quota config - when is the warning messag send?
by Götz Reinicke - IT Koordinator 14 Jul '16

14 Jul '16

Hi, we run dovecot 2.2.24 and from what I see, quota management with warning message is configured currently with "noenforcing". Our individual quota limit is stored in the users ldap DN which is fetched as I see from the logs and by "doveadm quota get -u" I tried to trigger the warning mail by going over the limit on my account step by step and can see that values are counted with the command above and in thunderbird by showing the orange and than red warning symbol at the bottom for me. But the warning mail script is not triggert. How may I debug this? from 90-quota.conf: service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail # dovecot unix_listener quota-warning { user = vmail } } /usr/local/bin/quota-warning.sh is owned currently by vmail and executable by vmail. Thanks for feedback and suggestion . /Götz

1 0

Panic: file mdbox-save.c: line 337: unreached
by Leon Kyneur 14 Jul '16

14 Jul '16

Recently updated to 2.2.25. Noticed a migration script I've been previously running fine started giving me the errors below. Remove server doesn't log any failure. doveconf -n attached. + /bin/doveadm -o mail_fsync=never backup -R -u user(a)domain.com imapc: dsync(user(a)domain.com): Panic: file mdbox-save.c: line 337: unreached dsync(user(a)domain.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x8d52e) [0x7f58e6da052e] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_ha ndler+0x2a) [0x7f58e6da059a] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f58e6d3f1b6] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5b157) [0x7f58e7080157] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbfdbf) [0x7f58e70e4dbf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x9d) [0x7f58e 710043d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x107) [0x7f58e70e5337] -> /usr/lib64/dovecot/lib20_zlib_plugin.so(+0x3163) [0x7f58e5f29 163] -> /usr/lib64/dovecot/lib10_quota_plugin.so(+0xc703) [0x7f58e613d703] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x51) [0 x7f58e7069631] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](dsync_mailbox_import_deinit+0xf8) [0x7f58e7a12898] -> /bin/doveadm [user(a)domain.com IN BOX import:650/674](+0x41bbf) [0x7f58e7a0cbbf] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](dsync_brain_sync_mails+0x723) [0x7f58e7a0d433] -> /bin/dovea dm [user(a)domain.com INBOX import:650/674](dsync_brain_run+0x5f8) [0x7f58e7a08c78] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x27521) [0x7f58e7 9f2521] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x2929f) [0x7f58e79f429f] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x29d8d) [0x7f58e79f4d8d] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](doveadm_mail_try_run+0x215) [0x7f58e79f56f5] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](main+0x455) [0x7f58e79e57f5] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f58e6973b15] -> /bin/doveadm [user(a)domain.com INBOX import:650/674](+0x1a96d) [0x7f58e79e596d] /root/migrate_code/migrate_mailbox_eftel.sh: line 31: 48637 Aborted /bin/doveadm -o mail_fsync=never backup -R -u $USERNAME imapc: + RETCODE=134 Regards Leon

3 3

Pigeonhole vs dovecot gssapi option
by Larry Rosenman 13 Jul '16

13 Jul '16

Stephan, Is there a reason you don't pick up the dovecot-config file to set additional libraries like the Kerberos libs? I'm the FreeBSD Ports Maintainer for pigeonhole, and a user filed a PR about missing the krb5 libs. Thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Re: [2.2.25 auth issue] auth-request.c: line 1049 (auth_request_lookup_credentials): assertion failed: (request->credentials_scheme == scheme)
by Alexey Asemov (Alex/AT) 13 Jul '16

13 Jul '16

Hello Aki. Here it is. Some sensitive data was replaced by ***. # 2.2.25 (7be1766): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.15 (97b3da0) # OS: Linux 3.10.0-***.el7.x86_64 x86_64 CentOS Linux release 7.*** (Core) ext4 auth_cache_negative_ttl = 15 secs auth_cache_size = 8 M auth_cache_ttl = 15 secs auth_default_realm = *** auth_mechanisms = plain login digest-md5 cram-md5 ntlm auth_username_chars = abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.,;=-_@ auth_username_format = %LTn@%LTd auth_verbose = yes auth_worker_max_count = 64 dict { last_login = mysql:/etc/dovecot/mailserver/last_login.dbconf sieve = mysql:/etc/dovecot/mailserver/sieve.dbconf } disable_plaintext_auth = no import_environment = TZ listen = * lock_method = dotlock log_timestamp = %F %T login_greeting = *** Mail Server ready and serving (LXmail01). mail_attachment_dir = /mailboxes/%1.16Nu/%Ld/.attachments mail_attachment_hash = %{sha256}.%{size} mail_attachment_min_size = 64 k mail_cache_min_mail_count = 32 mail_gid = mailbox mail_home = /mailboxes/%1.16Nu/%Ld/%2.256Nn/%Ln mail_location = mdbox:/mailboxes/%1.16Nu/%Ld/%2.256Nn/%Ln mail_max_keyword_length = 64 mail_plugins = quota fts fts_lucene zlib mail_uid = mailbox mailbox_idle_check_interval = 1 mins managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_rotate_interval = 90 days mdbox_rotate_size = 4 M namespace { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = create special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/mailserver/mysql.dbconf driver = sql } plugin { fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 65536 fts_index_timeout = 900 fts_lucene = whitespace_chars=@.,;-/ last_login_dict = proxy::last_login last_login_key = last_login/%u quota = dict:user quota::file:%h/.quota quota_rule = *:bytes=2684354560 quota_rule2 = Trash:bytes=+10%% quota_rule3 = Spam:bytes=+10%% sieve = dict:proxy::sieve;name=%Lu;bindir=/mail_local/sieve/cache sieve_dir = ~/sieve sieve_global_dir = /mail_local/sieve/global sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 16K sieve_user_log = /mail_local/sieve/logs/%Lu.log sieve_vacation_dont_check_recipient = yes sieve_vacation_max_period = 0 sieve_vacation_min_period = 0 zlib_save = xz zlib_save_level = 1 } service anvil { client_limit = 6666 } service auth { client_limit = 6666 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = mailbox mode = 0600 user = mailbox } user = $default_internal_user } service auth_worker { user = root } service dict { unix_listener dict { group = mailbox mode = 0600 user = mailbox } } service imap-login { chroot = login client_limit = 2048 inet_listener imaps { address = * } process_limit = 2048 process_min_avail = 1 service_count = 1 user = dovecot } service imap { drop_priv_before_exec = no process_limit = 2048 } service indexer-worker { process_limit = 2 } service ipc { unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = dovecot mode = 0660 user = $default_login_user } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mailbox mode = 0600 user = mailbox } } service pop3-login { chroot = login client_limit = 2048 inet_listener pop3s { address = * } process_limit = 2048 process_min_avail = 1 service_count = 1 user = dovecot } service pop3 { drop_priv_before_exec = no process_limit = 2048 } shutdown_clients = no ssl_cert = </etc/ssl/email.crt ssl_key = </etc/ssl/email.key syslog_facility = local2 userdb { args = /etc/dovecot/mailserver/mysql.dbconf driver = sql } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 16 mail_plugins = quota fts fts_lucene zlib imap_quota last_login } protocol pop3 { mail_max_userip_connections = 16 mail_plugins = quota fts fts_lucene zlib last_login pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_save_uidl = yes pop3_uidl_duplicates = rename pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_original_recipient_header = X-Original-To mail_debug = no mail_plugins = quota fts fts_lucene zlib sieve postmaster_address = postmaster@*** quota_full_tempfail = no recipient_delimiter = + } protocol lmtp { lda_original_recipient_header = X-Original-To lmtp_save_to_detail_mailbox = yes mail_debug = no mail_plugins = quota fts fts_lucene zlib sieve postmaster_address = postmaster@*** quota_full_tempfail = no recipient_delimiter = + } local_name LXmail.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail01.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail02.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail03.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } local_name LXmail04.*** { ssl_cert = </etc/ssl/***.net.crt ssl_key = </etc/ssl/***.net.key } > Hi! > > Could you provide your doveconf -n so we could debug this? > > Aki >

2 3

passdb {driver = shadow args = override_username=%variable}
by UNIX admin 12 Jul '16

12 Jul '16

Hello list I want to implement override_username = %variable for the "shadow" driver, so that the following works: passdb { driver = shadow args = override_username=%Ln } by "%variable", I mean "Variables" at http://wiki.dovecot.org/Variables. I've hacked up a solution with strtok(3C), but that's a hack and a possible security hole, and I'd rather not implement it. What I really want is to be able to leverage Dovecot's var_expand() call, which, looking at the code, appears to be the function responsible for %variable expansion and formatting. The relevant piece of code seems to be this excerpt in auth/passdb-shadow.c: static enum passdb_result shadow_lookup(struct auth_request *request, struct spwd **spw_r) { auth_request_log_debug(request, AUTH_SUBSYS_DB, "lookup"); *spw_r = getspnam(request->user); if (*spw_r == NULL) { auth_request_log_unknown_user(request, AUTH_SUBSYS_DB); return PASSDB_RESULT_USER_UNKNOWN; } when request->user contains 'user(a)domain.tld', I want the code to be able to process "override_username", determine that the format is %Ln so that request->user is lowercased, and everything after the "@" sign is stripped. Therefore, if this user happens to exist in the shadow file, authentication will succeed. Currently, the "shadow" driver only appears to support "args = blocking=no". Please advise.

3 4

Re: Dovecot 2.2.25 compiling error
by Joseph Tam 12 Jul '16

12 Jul '16

>> I've reduced the problem to this: >> >> void foo(int X[static 20]); >> >> will compile but if you remove "X", it won't. > > The change was to replace "int" with "unsigned char" in the above test > program, and the test started failing then in CentOS 5's gcc. I'd > expect the same to happen for you also. No, it will fail with both "int" and "unsigned char" without the dummy argument "X", and works for both if one is inserted. I don't know why -- perhaps a bug with my version of gcc. Joseph Tam <jtam.home(a)gmail.com>

1 1

dovecot master password without "auth_master_user_separator"
by Miguel C 12 Jul '16

12 Jul '16

Looking at the doc its sugest we can either use auth_master_user_separator to login with a master user (i.e user(a)email.com*master and the master password defined in a file or db) I'm able to use this method with a password file and works just fine, however we need to sync some imap users to another destrination that does not allow us to use this format in the "email address source" (shame) But the doc also sugests if I don't use this flag I should be able to just use the same login used in the SASL mecahnisms which is not working (testing with plain text ). Is there anything more to this? I have tried to add a username to the password file with the same master password but still doens't work :| What am I missing? Melhores Cumprimentos // Best Regards ----------------------------------------------- *Miguel Clara* *IT - Sys Admin & Developer*

1 0

Feature Request
by Doug Hardie 12 Jul '16

12 Jul '16

I would like to request an additional optional argument for queue-id to dovecot-lda. The intended use for this argument is to include in the logging. From what I can tell, the queue-id size is not consistent between the various MTAs and so would need to be allocated dynamically when read during initialization. This element in the log messages would make it easier to find the trace of a received email. Generally I can easily get the queue-id generated by postfix (or sendmail - I use both). One grep would then give me the whole picture rather than having to dig out the message-id and doing a secondary grep to obtain the lda log messages. — Doug I find it interesting that every submission to this list results in a quick response that says moderation is required since I "am not a member". However, I am a member...

2 1

is it possible to run a post-login script in a dovecot proxy with local auth?
by Luca Lesinigo 12 Jul '16

12 Jul '16

We’re using dovecot v2.2.22, authenticating on a local database (passdb with sql driver), and then proxying the connections to the backend server returned by passdb (proxy=y and backend in “host” column). To support some legacy clients we should keep POP/IMAP-before-SMTP running for some time, but right know I don’t know how to hook up a successful authentication in the dovecot proxy. I did read from http://wiki2.dovecot.org/PostLoginScripting: “...it's not currently possible to run post-login scripts in proxies, because they're not actually logging in to the local Dovecot” Does that also holds true even if the proxy is authenticating users locally before proxying them? Failing that, any idea on how to get successful logins, other than parsing the log file? thank you, -- Luca Lesinigo

2 1

Re: Dovecot 2.2.25 compiling error
by Joseph Tam 12 Jul '16

12 Jul '16

Aki Tuomi wrote: >>> Well, tried with or without patches, but got still same error: >>> >>> sha1.h:80: error: static or type qualifiers in abstract declarator >> >> For what it's worth, I get the same error compiling on Solaris 10. >> It may be because I have a rather old gcc (3.4.4). Editing out >> the "static" keyword from config.h allowed it to finish the compile. > > It still happened even with > https://github.com/dovecot/core/commit/d9c865ce774aae9f2f17b89e7e94c3cfca29… > > You need to rerun autotools on this before it can do anything. I don't grok autotools, but I don't think this will solve the problem. If I understand the patch correctly, it modifies the small program used by configure to test a C99 feature. Manually compiling the small test program (with and without the changes made by the patch) will result in a successful compile, but if you compile sha1.h (line 80,81), it will fail. I've reduced the problem to this: void foo(int X[static 20]); will compile but if you remove "X", it won't. Joseph Tam <jtam.home(a)gmail.com>

2 1

a question about dovecot-sieve
by 刘莹莹 11 Jul '16

11 Jul '16

question discribe: example: > vim .dovecot.sieve require ["fileinto"]; # rule:[filter1] if anyof (header :contains "Subject" "测试邮件") { fileinto "sieve"; } when i write a mail ,give subject "这是一封测试邮件" , then server convert this subject to " SUBJECT: =?UTF-8?Q?=E8=BF=99=E6=98=AF=E4=B8=80=E5=B0=81=E6=B5=8B=E8=AF=95=E9=82=AE?= =?UTF-8?Q?=E4=BB=B6?= " the essential question is when the mail go through dovecot-sieve plugin, the sieve plugin get mail subject is "这是一封测试邮件" not "这是一封测试邮件"，there is a extra space added(which as segmentation between "=?UTF-8?Q?"). SIMPLY SAY：edit subject"这是一封测试邮件" ——>server convert "SUBJECT: =?UTF-8?Q?=E8=BF=99=E6=98=AF=E4=B8=80=E5=B0=81=E6=B5=8B=E8=AF=95=E9=82=AE?= =?UTF-8?Q?=E4=BB=B6?="——>sieve plugin get "这是一封测试邮件" The result is filter failure. is this a bug ? How can I avoid it？ thanks

2 1