- dovecot - dovecot.org

Encrypt messages on filesystem
by Jorge Bastos 26 Apr '15

26 Apr '15

Hi, If for some reason I want the received messages to be automatic encrypted on the file system, how should/to do it? If there's any nice howto out there please let me know. Thanks in advanced,

1 0

prefetch not working (for me) on ldap user backend
by Hector M. Jacas 26 Apr '15

26 Apr '15

Dear Sir, I'm having problems with the implementation of prefetch userdb. Following the directives from the site (http://wiki2.dovecot.org/UserDatabase/Prefetch) I am unable to avoid the second search to the user backend (ldap). Could give me any advice or tips to achieve my goal? Thanks a lot, Hector M. Jacas My ldap has the following structure: search base: ou=Domains,dc=test,dc=local ******************************* domains tree: domain2.com: dc=domain2.com,ou=Domains,dc=test,dc=local Definition of mailuser1 on domail2.com: dn: uid=mailuser1,dc=domain2.com,ou=Domains,dc=test,dc=local uid: mailuser1 cn: User mailuser1 sn: User 1 displayName: User mailuser1 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top mail: mailuser1(a)domain2.com ************************************* domain1.com: dc=domain1.com,ou=Domains,dc=test,dc=local Definition of mailuser1 on domain1.com: dn: uid=mailuser1,dc=domain1.com,ou=Domains,dc=test,dc=local uid: mailuser1 cn: User mailuser1 sn: User 1 displayName: User mailuser1 objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top mail: mailuser1(a)domain1.com ************************************* /etc/dovecot/dovecot-ldap.conf.ext content: hosts = ldapserver auth_bind = yes ldap_version = 3 tls = no base = ou=Domains,dc=test,dc=local scope = subtree user_filter = (&(objectclass=inetOrgPerson)(mail=%u)) user_attrs = =home=/var/vmail/mailboxes/%Ld/%Ln/%Ln,=uid=500,=gid=500 default_pass_scheme = CRYPT pass_filter = (&(objectclass=inetOrgPerson)(mail=%u)) pass_attrs = uid=user,password=userPassword,=userdb_home=/var/vmail/mailboxes/%Ld/%8Ln/%Ln, \ =userdb_uid=500,=userdb_gid=500 iterate_attrs = mail=user iterate_filter = (objectclass=inetOrgPerson) ************************************ auth test result for mailuser1(a)domain2.com: # doveadm mailuser1(a)domain2.com password auth test passdb: mailuser1(a)domain2.com auth succeeded Extra fields: user=mailuser1 And in /var/log/maillog (enabled debug auth options): Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: auth client connected (pid=0) Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: client in: AUTH 1 PLAIN service=doveadm resp=<hidden> Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): bind search: base=ou=Domains,dc=test,dc=local filter=(&(objectclass=inetOrgPerson)(mail=mailuser1(a)domain2.com)) Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1; uid unused Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: auth(mailuser1(a)domain2.com): username changed mailuser1(a)domain2.com -> mailuser1 Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1): result: uid=mailuser1 Apr 26 14:00:33 nfs-7-00 dovecot: auth: Debug: client passdb out: OK 1 user=mailuser1 ***************************** mailuser1(a)domain2.com doveadm user result: # doveadm user mailuser1(a)domain2.com field value uid 500 gid 500 home /var/vmail/mailboxes/domain2.com/mailuser1/mailuser1 maildir mail: /var/vmail/mailboxes/domain2.com/mailuser/mailuser1:INDEX=MEMORY And in /var/log/maillog (enabled debug auth options): Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: master in: USER 1 mailuser1(a)domain2.com service=doveadm Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: prefetch(mailuser1(a)domain2.com): passdb didn't return userdb entries, trying the next userdb Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): user search: base=ou=Domains,dc=test,dc=local scope=subtree filter=(&(objectclass=inetOrgPerson)(mail=mailuser1(a)domain2.com)) fields= Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1 cn=Usuario mailuser1 sn=Usuario 1 displayName=Usuario mailuser1 objectClass=inetOrgPerson,inetOrgPerson,inetOrgPerson,inetOrgPerson mail=mailuser1(a)domain2.com; objectClass,cn,uid,mail,displayName,sn unused Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: ldap(mailuser1(a)domain2.com): result: uid=mailuser1 cn=Usuario mailuser1 sn=Usuario 1 displayName=Usuario mailuser1 objectClass=inetOrgPerson,inetOrgPerson,inetOrgPerson,inetOrgPerson mail=mailuser1(a)domain2.com; objectClass,cn,uid,mail,displayName,sn unused Apr 26 14:01:19 nfs-7-00 dovecot: auth: Debug: userdb out: USER 1 mailuser1(a)domain2.com home=/var/vmail/mailboxes/domain2.com/mailuser1/mailuser1 uid=500 gid=500 *************************** My base system is RHEL7, 24 CPUs and 16GB ram and for LDAP backend, 389 DS 1.2.2 on RHEL 6.6 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.0 (Maipo) nfs4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 50000 disable_plaintext_auth = no listen = * mail_fsync = always mail_gid = 500 mail_location = maildir:/var/vmail/mailboxes/%d/%8n/%n:INDEX=MEMORY mail_nfs_index = yes mail_nfs_storage = yes mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener auth-userdb { group = vmail mode = 0640 user = vmail } } service doveadm { inet_listener { port = 24245 } } service imap-login { process_min_avail = 24 service_count = 0 } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 8192 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 8192 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { process_limit = 8192 } service pop3-login { process_min_avail = 24 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 1000 } local 172.28.200.0/24/24 { doveadm_password = secret } --- This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu Visit our web-site: <http://www.kaspersky.com>, <http://www.viruslist.com>

1 0

dovecot crash with virtual folders (debian testing version 2.2.13-11)
by James Bottomley 25 Apr '15

25 Apr '15

The virtual folder triggering the crash has the configuration namespace { prefix = virtual/ separator = / location = virtual:~/Maildir/virtual } And the actual virtual/openstack/dovecot-virtual file is Lists/openstack-dev inthread refs or from "james bottomley" keyword thread It's a standard search for threads I've either replied to or marked with an imap keyword 'thread' The imap command 0 status virtual/openstack (MESSAGES UNSEEN RECENT) Is crashing most of the time with gdb /usr/lib/dovecot/imap GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i586-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug//usr/lib/dovecot/imap...done. done. (gdb) r Starting program: /usr/lib/dovecot/imap process 7868 is executing new program: /usr/bin/doveconf process 7868 is executing new program: /usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in as jejb 0 status virtual/openstack (MESSAGES UNSEEN RECENT) Program received signal SIGSEGV, Segmentation fault. 0xb7f0814b in mail_search_args_deinit_sub (args=args@entry=0x8005caf0, arg=0x8005cb08) at mail-search.c:169 169 mail-search.c: No such file or directory. (gdb) bt #0 0xb7f0814b in mail_search_args_deinit_sub (args=args@entry=0x8005caf0, arg=0x8005cb08) at mail-search.c:169 #1 0xb7f08aea in mail_search_args_deinit (args=0x8005caf0) at mail-search.c:193 #2 0xb7d9ecf1 in virtual_mailbox_close_internal (mbox=mbox@entry=0x800585d0) at virtual-storage.c:253 #3 0xb7d9ed7b in virtual_mailbox_close (box=0x800585d0) at virtual-storage.c:307 #4 0xb7f403ff in mail_thread_mailbox_close (box=0x800585d0) at index-thread.c:628 #5 0xb7f0d3fe in mailbox_close (box=0x800585d0) at mail-storage.c:1182 #6 0xb7f0d472 in mailbox_free (_box=0xbffff878) at mail-storage.c:1197 #7 0x8001e0ae in imap_status_get (cmd=0x80053948, ns=0x80052220, mailbox=0x8003a250 "virtual/openstack", items=0xbffff8f8, result_r=0xbffff900) at imap-status.c:96 #8 0x80011f64 in cmd_status (cmd=0x80053948) at cmd-status.c:40 #9 0x80016847 in command_exec (cmd=0x80053948) at imap-commands.c:158 #10 0x800155cb in client_command_input (cmd=0x80053948) at imap-client.c:778 #11 0x80015719 in client_command_input (cmd=0x80053948) at imap-client.c:839 #12 0x800159cd in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x80052ee0) at imap-client.c:877 #13 client_handle_input (client=0x80052ee0) at imap-client.c:889 #14 0x80015dd5 in client_input (client=0x80052ee0) at imap-client.c:931 ---Type <return> to continue, or q <return> to quit--- #15 0xb7e202e3 in io_loop_call_io (io=0x800538c8) at ioloop.c:441 #16 0xb7e214be in io_loop_handler_run_internal (ioloop=0x80042458) at ioloop-epoll.c:220 #17 0xb7e2036a in io_loop_handler_run (ioloop=0x80042458) at ioloop.c:488 #18 0xb7e203f9 in io_loop_run (ioloop=0x80042458) at ioloop.c:465 #19 0xb7dc6985 in master_service_run (service=0x80042380, callback=0x800200b0 <client_connected>) at master-service.c:566 #20 0x80008b44 in main (argc=1, argv=0xbffffd84) at main.c:400 I thought it might be this patch http://hg.dovecot.org/dovecot-2.2/rev/5c6f49e2d8d9 But after applying I still get the same segfault. James

1 0

Auth-worker, Unknown User
by Stephen R Guglielmo 25 Apr '15

25 Apr '15

Hi list, I'm running Debian Jessie (8). I have Postfix and Dovecot working successfully. I attempted to setup LMTP in order to enable sieve support, but it seems I was not successful. Dovecot version 2.2.13. Postfix accepts an incoming test mail I sent, then tries to deliver it to Dovecot via LMTP: dovecot: lmtp(13493): Connect from local dovecot: auth-worker(13495): pam(srg(a)example.com): unknown user dovecot: lmtp(13493): Disconnect from local: Successful quit Postfix then bounces my mail with a "550 User doesn't exist." It seems that Dovecot is trying to lookup my whole address (srg(a)example.com) in PAM instead of just the username ("srg"), which does exist. What can I do to avoid this? I have searched the internet about this and found a few references to "args = %s" and "args = username_format=%n" for passdb and/or userdb, but I have tried both (restarting Dovecot) to no avail. Thank you! `doveconf -n` below: # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab103.6 x86_64 Debian 8.0 auth_verbose = yes first_valid_uid = 1000 last_valid_uid = 1000 listen = 167.114.96.243, 2607:5300:100:200::fce lmtp_save_to_detail_mailbox = yes mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/private/dovecot.cacert.pem ssl_cipher_list = HIGH:!aNULL:!eNULL:!EXP:!SSLv2 ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/dovecot.privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } protocol lmtp { mail_plugins = sieve }

2 2

Performance
by absolutely_free＠libero.it 24 Apr '15

24 Apr '15

Hi, at moment I have this environment: CentOS nginx + phpfpm Dovecot, with Maildir format Postfix Roundcube MySQL backend about 10000 mailusers dual core Intel(R) Pentium(R) D CPU 3.00GHz 8 GB RAM network storage device (Coraid), ext4 file system I have no performance issue now, but I need to move to a different server: FreeBSD 10.1-RELEASE nginx + phpfpm Dovecot Postfix Roundcube dual core Intel(R) Xeon(R) CPU 5120 @ 1.86GHz 16 GB RAM local storage with zfs file system My question is: is better to use SQLite instead of MySQL? Should I prefer dbox format? Thank you in advance for your opinion!

3 2

[BUG] imap-login segfault when running nmap -sV
by Florian Pritz 24 Apr '15

24 Apr '15

Hi, I've noticed that nmap crashes my imap-login (also pop3-login) and narrowed it down to `nmap -sV -p 993 $host`. I've noticed that if I remove "ssl_protocols = !SSLv2 !SSLv3" from my config or enable SSLv3 rather than disabling it the segfault disappears. I'm running on Arch Linux with dovecot 2.2.16-1 and openssl 1.0.2.a-1. I've also attached a network capture, but since it's SSL this probably won't help all that much. I hope this is enough information to reproduce the issue. If necessary I can recompile dovecot with debug symbols for a better backtrace. Thanks, Florian dovecot.conf https://paste.xinu.at/PUsJ/ syslog: > Apr 21 10:52:16 karif dovecot[7849]: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=81.217.47.122, lip=78.46.56.141, TLS handshaking: SSL_accept() failed: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request > Apr 21 10:52:16 karif dovecot[7849]: imap-login: Fatal: master: service(imap-login): child 7879 killed with signal 11 (core not dumped - add -D parameter to service imap-login { executable } [last ip=81.217.47.122] > Apr 21 10:52:16 karif kernel: imap-login[7879] segfault at f0 ip 00007fb2b8b1360b sp 00007fff926ffd50 error 4 in libssl.so.1.0.0[7fb2b8af3000+6f000] backtrace: > #0 0x00007f120100260b in ssl3_get_client_hello () from /usr/lib/libssl.so.1.0.0 > #1 0x00007f120100738f in ssl3_accept () from /usr/lib/libssl.so.1.0.0 > #2 0x00007f1201012b36 in ssl3_write_bytes () from /usr/lib/libssl.so.1.0.0 > #3 0x00007f1201906200 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #4 0x00007f12019062d8 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #5 0x00007f1201905f72 in ssl_proxy_destroy () from /usr/lib/dovecot/libdovecot-login.so.0 > #6 0x00007f12019060e4 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #7 0x00007f1201906671 in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #8 0x00007f1201902efa in ?? () from /usr/lib/dovecot/libdovecot-login.so.0 > #9 0x00007f120162d503 in ?? () from /usr/lib/dovecot/libdovecot.so.0 > #10 0x00007f120168d62c in io_loop_call_io () from /usr/lib/dovecot/libdovecot.so.0 > #11 0x00007f120168e665 in io_loop_handler_run_internal () from /usr/lib/dovecot/libdovecot.so.0 > #12 0x00007f120168d699 in io_loop_handler_run () from /usr/lib/dovecot/libdovecot.so.0 > #13 0x00007f120168d718 in io_loop_run () from /usr/lib/dovecot/libdovecot.so.0 > #14 0x00007f120162cb23 in master_service_run () from /usr/lib/dovecot/libdovecot.so.0 > #15 0x00007f1201903788 in login_binary_run () from /usr/lib/dovecot/libdovecot-login.so.0 > #16 0x00007f120127d800 in __libc_start_main () from /usr/lib/libc.so.6 > #17 0x0000000000402909 in _start () nmap output: >> nmap -sV --packet-trace -p 993 karif > > Starting Nmap 6.47 ( http://nmap.org ) at 2015-04-21 10:52 CEST > CONN (0.0426s) TCP localhost > 78.46.56.141:80 => Operation now in progress > CONN (0.0427s) TCP localhost > 78.46.56.141:443 => Operation now in progress > NSOCK INFO [0.0650s] nsi_new2(): nsi_new (IOD #1) > NSOCK INFO [0.0650s] nsock_connect_udp(): UDP connection requested to 192.168.4.1:53 (IOD #1) EID 8 > NSOCK INFO [0.0650s] nsock_read(): Read request from IOD #1 [192.168.4.1:53] (timeout: -1ms) EID 18 > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 8 [192.168.4.1:53] > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 27 [192.168.4.1:53] > NSOCK INFO [0.0650s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 18 [192.168.4.1:53] (79 bytes): .............141.56.46.78.in-addr.arpa..................karif.server-speed.net. > NSOCK INFO [0.0650s] nsock_read(): Read request from IOD #1 [192.168.4.1:53] (timeout: -1ms) EID 34 > NSOCK INFO [0.0650s] nsi_delete(): nsi_delete (IOD #1) > NSOCK INFO [0.0650s] msevent_cancel(): msevent_cancel on event #34 (type READ) > CONN (0.0656s) TCP localhost > 78.46.56.141:993 => Operation now in progress > NSOCK INFO [0.1320s] nsi_new2(): nsi_new (IOD #1) > NSOCK INFO [0.1330s] nsock_connect_tcp(): TCP connection requested to 78.46.56.141:993 (IOD #1) EID 8 > NSOCK INFO [0.1550s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 8 [78.46.56.141:993] > Service scan sending probe NULL to 78.46.56.141:993 (tcp) > NSOCK INFO [0.1550s] nsock_read(): Read request from IOD #1 [78.46.56.141:993] (timeout: 6000ms) EID 18 > NSOCK INFO [6.1610s] nsock_trace_handler_callback(): Callback: READ TIMEOUT for EID 18 [78.46.56.141:993] > Service scan sending probe GetRequest to 78.46.56.141:993 (tcp) > NSOCK INFO [6.1610s] nsock_read(): Read request from IOD #1 [78.46.56.141:993] (timeout: 5000ms) EID 34 > NSOCK INFO [6.1610s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 27 [78.46.56.141:993] > NSOCK INFO [6.1840s] nsock_trace_handler_callback(): Callback: READ ERROR [Connection reset by peer (104)] for EID 34 [78.46.56.141:993] > NSOCK INFO [6.1840s] nsi_delete(): nsi_delete (IOD #1) > NSOCK INFO [6.1840s] nsi_new2(): nsi_new (IOD #2) > NSOCK INFO [6.1840s] nsock_connect_tcp(): TCP connection requested to 78.46.56.141:993 (IOD #2) EID 40 > NSOCK INFO [6.2050s] nsock_trace_handler_callback(): Callback: CONNECT SUCCESS for EID 40 [78.46.56.141:993] > Service scan sending probe SSLSessionReq to 78.46.56.141:993 (tcp) > NSOCK INFO [6.2060s] nsock_read(): Read request from IOD #2 [78.46.56.141:993] (timeout: 5000ms) EID 58 > NSOCK INFO [6.2060s] nsock_trace_handler_callback(): Callback: WRITE SUCCESS for EID 51 [78.46.56.141:993] > NSOCK INFO [6.2280s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 58 [78.46.56.141:993] (7 bytes): ......( > Service scan match (Probe SSLSessionReq matched with SSLSessionReq line 10443): 78.46.56.141:993 is ssl. Version: |TLSv1||| > NSOCK INFO [6.2280s] nsi_delete(): nsi_delete (IOD #2) > NSOCK INFO [6.2280s] nsi_new2(): nsi_new (IOD #3) > NSOCK INFO [6.2280s] nsock_connect_ssl(): SSL connection requested to 78.46.56.141:993/tcp (IOD #3) EID 65 > NSOCK INFO [6.3370s] nsock_trace_handler_callback(): Callback: SSL-CONNECT SUCCESS for EID 65 [78.46.56.141:993] > Service scan sending probe NULL to 78.46.56.141:993 (tcp) > NSOCK INFO [6.3370s] nsock_read(): Read request from IOD #3 [78.46.56.141:993] (timeout: 6000ms) EID 74 > NSOCK INFO [6.3960s] nsock_trace_handler_callback(): Callback: READ SUCCESS for EID 74 [78.46.56.141:993] (114 bytes) > Service scan match (Probe NULL matched with NULL line 1312): 78.46.56.141:993 is SSL/imap. Version: |Dovecot imapd||| > NSOCK INFO [6.3960s] nsi_delete(): nsi_delete (IOD #3) > Nmap scan report for karif (78.46.56.141) > Host is up (0.023s latency). > rDNS record for 78.46.56.141: karif.server-speed.net > PORT STATE SERVICE VERSION > 993/tcp open ssl/imap Dovecot imapd > > Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . > Nmap done: 1 IP address (1 host up) scanned in 6.40 seconds

2 3

(no subject)
by Kevin Laurie 24 Apr '15

24 Apr '15

1 0

acl and lazy_expunge plugins are incompatible?
by Paolo Cravero 24 Apr '15

24 Apr '15

Hello list. Following two previous unanswered requests (http://www.dovecot.org/list/dovecot/2014-August/097449.html and http://www.dovecot.org/list/dovecot/2014-May/096261.html) I fell into the same problem: ACL and lazy_expunge plugins do not work together. I had lazy_expunge enabled working OK. Then I activated ACL plugin, and gave dovecot.2 visibily over paolo.cravero's Inbox: the IMAP connection fails on server-side. Relevant debug log is: Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: Quota grace: root=User quota bytes=576716800 (10%) Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: dict quota: user=paolo.cravero(a)csi.it, uri=file:/maildata1/home/csi.it/p/paolo.cravero/dovecot-quota, noenforcing=0 Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: fs: root=/maildata1/main/csi.it/p/paolo.cravero, index=/maildata1/indexes/csi.it/p/paolo.cravero, indexpvt=, control=, inbox=, alt=/maildata1/altstorage/csi.it/p/paolo.cravero Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: initializing backend with data: vfile Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: acl username = paolo.cravero(a)csi.it Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl: owner = 1 Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Debug: acl vfile: Global ACLs disabled Mar 3 15:59:02 tst-msg03 dovecot: imap(dovecot.2(a)csi.it): Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' Removing the lazy_expunge, ACLs do work as expected and I can add/remove/use them. Is there a known compatibility issue? Or there's something wrong in my config and someone else is running with both plugins enabled? Thanks, Paolo PS: output of dovecot -n: # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.5 (Santiago) ext3 auth_mechanisms = plain login disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep lmtp_save_to_detail_mailbox = yes mail_attachment_dir = /maildata1/attachments mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = 500 mail_location = mdbox:/maildata1/main/%d/%1n/%n:ALT=/maildata1/altstorage/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n mail_plugins = quota mail_log notify lazy_expunge acl mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mdbox_rotate_size = 50 M namespace { hidden = no list = yes location = mdbox:/maildata1/main/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n:MAILBOXDIR=expunged prefix = .EXPUNGED/ subscriptions = no } namespace { list = children location = mdbox:/maildata1/main/%%d/%%1n/%%n:ALT=/maildata1/altstorage/%%d/%%1n/%%n:INDEX=/maildata1/indexes/%%d/%%1n/%%n prefix = user/%%u/ separator = / type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/maildata1/db/shared-mailboxes.db lazy_expunge = .EXPUNGED/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size flags vsize quota = dict:User quota::file:%h/dovecot-quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail user = vmail } } service lmtp { inet_listener lmtp { address = 10.102.42.114 port = 24 } process_min_avail = 2 user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota mail_log notify lazy_expunge acl sieve } protocol lda { mail_plugins = quota mail_log notify lazy_expunge acl sieve } protocol imap { mail_plugins = quota mail_log notify lazy_expunge acl imap_quota imap_acl }

2 2

fts_languages setting is missing - disabling?
by Ralf Hildebrandt 24 Apr '15

24 Apr '15

I don't find "fts_languages" in the documentation... What should I add there anbd where? doveadm(restore): Error: fts-dovecot: fts_languages setting is missing - disabling -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 4

Crash in dovecot/auth with backtrace
by Ralf Hildebrandt 24 Apr '15

24 Apr '15

I'm seeing this odd crash with "USER\t531\t*(a)liquid-scan.de\tservice=quota-status" Which looks like something is being tested against our quota-status -- but I fail to see why an NON LOCAL address is being tested.... GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/local/dovecot-2.2/libexec/dovecot/auth...done. [New LWP 2289] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/auth'. Program terminated with signal 6, Aborted. #0 0xb7724424 in __kernel_vsyscall () #0 0xb7724424 in __kernel_vsyscall () No symbol table info available. #1 0xb74a0661 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 resultvar = <optimized out> pid = -1218617356 selftid = 2289 #2 0xb74a3a92 in *__GI_abort () at abort.c:92 act = {__sigaction_handler = {sa_handler = 0xbfd1c924, sa_sigaction = 0xbfd1c924}, sa_mask = {__val = {3077760610, 3218196756, 3076712520, 3218196744, 3077843556, 0, 3074764848, 1, 0, 1, 3077716256, 145215752, 1097, 3077184659, 3, 145244200, 1, 128, 0, 3218196816, 3218196744, 3218196756, 3218196764, 3077716256, 0, 3077194863, 145215720, 3076749582, 3077199789, 3077686824, 1097, 3077686824}}, sa_flags = 0, sa_restorer = 0xb76a5c2f <internal_handler+527>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0xb76a624e in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:202 backtrace = 0x8a7c8d8 "/usr/local/dovecot-2.2/lib/dovecot/libdovecot.so.0(+0x7825e) [0xb76a625e] -> /usr/local/dovecot-2.2/lib/dovecot/libdovecot.so.0(+0x782e1) [0xb76a62e1] -> /usr/local/dovecot-2.2/lib/dovecot/libdovecot."... #4 0xb76a62e1 in i_internal_fatal_handler (ctx=0xbfd1c9f0, format=0x807a0c4 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfd1ca14 "\257j\a\b\371\004") at failures.c:671 status = 0 #5 0xb76a6e5f in i_panic ( format=format@entry=0x807a0c4 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:276 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = 0xbfd1ca14 "\257j\a\b\371\004" #6 0x0805873a in auth_request_set_login_username (request=0x8a945d8, username=0x8a7c548 "", error_r=0xbfd1cad4) at auth-request.c:1273 master_passdb = <optimized out> __FUNCTION__ = "auth_request_set_login_username" #7 0x08054c44 in master_input_auth_request (conn=conn@entry=0x8aa18b8, args=args@entry=0x8a941c1 "531\t*(a)liquid-scan.de\tservice=quota-status", cmd=cmd@entry=0x8076925 "USER", request_r=request_r@entry=0xbfd1cad0, error_r=error_r@entry=0xbfd1cad4) at auth-master-connection.c:209 auth_request = 0x8a945d8 list = 0x8a7c53c name = <optimized out> arg = <optimized out> username = 0x8a7c504 "*(a)liquid-scan.de" id = 531 #8 0x0805539c in master_input_user ( args=0x8a941c1 "531\t*(a)liquid-scan.de\tservice=quota-status", conn=0x8aa18b8) at auth-master-connection.c:306 auth_request = 0x8a92e70 error = 0x8ab8e81 "31298" ret = <optimized out> #9 auth_master_input_line ( line=0x8a941bc "USER\t531\t*(a)liquid-scan.de\tservice=quota-status", conn=0x8aa18b8) at auth-master-connection.c:615 No locals. #10 master_input (conn=0x8aa18b8) at auth-master-connection.c:679 _data_stack_cur_id = 3 line = <optimized out> ret = 40 #11 0xb76baf8b in io_loop_call_io (io=0x8a92ba8) at ioloop.c:501 ioloop = 0x8a844e8 t_id = 2 __FUNCTION__ = "io_loop_call_io" #12 0xb76bc272 in io_loop_handler_run_internal (ioloop=ioloop@entry=0x8a844e8) at ioloop-epoll.c:220 ctx = 0x8a8b500 events = 0x8f1 event = 0x8a8b558 list = 0x8a92be0 io = <optimized out> tv = {tv_sec = 0, tv_usec = 999856} events_count = <error reading variable events_count (Could not find type for DW_OP_GNU_const_type)> msecs = <optimized out> ret = 3 i = <optimized out> j = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run_internal" #13 0xb76bb01c in io_loop_handler_run (ioloop=ioloop@entry=0x8a844e8) at ioloop.c:548 No locals. #14 0xb76bb0a8 in io_loop_run (ioloop=0x8a844e8) at ioloop.c:525 __FUNCTION__ = "io_loop_run" #15 0xb76527ae in master_service_run (service=0x8a84418, callback=0x8063df0 <client_connected>) at master-service.c:569 No locals. #16 0x08064490 in main (argc=1, argv=0x8a841e0) at main.c:393 c = <optimized out> -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 2

doveadm problem
by T.Tributh 24 Apr '15

24 Apr '15

Hi, since several versions i have the following problem: Actually i am using: dovecot --version 2.2.16 (de2023e630cb) When i try to use doveadm i see the following error: doveadm pw -t {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV -p 1234 Fatal: Couldn't load required plugin /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: dlopen() failed: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: undefined symbol: command_unregister I recognized that these lines in my main dovecot.conf are responsible: mail_plugins = quota imap_quota When i change it to mail_plugins = quota The command is working like expected: doveadm pw -t {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV -p 1234 {SSHA512}cywDi7p60qc1K0mK4zAC2NrnK86hntGgbQcAh3H9U3WEpZMFk1hj/MYQ81hJouP1FOsF/Jasc1BjzdaPeUU5fYLitEzV (verified) ....but than my thunderbird-client is not longer able to recognize to mailbox-size. Regards Torsten Tributh

3 3

Dovecot 2.2.16 crashes when fetching mails with Trojita 0.5
by Dennis Schridde 23 Apr '15

23 Apr '15

Hello! When I fetch certain emails from my Dovecot 2.2.16 server using Trojita 0.5, dovecot/imap will crash reproducibly. Please find config and backtrace from coredump attached. Best regards, Dennis

2 2

Moving a local domain to sql
by ＠lbutlr 22 Apr '15

22 Apr '15

I have a domain that current maps to local users that I want to move into the mysql maps with all the other domains, but I am unsure of the best way to proceed with this. For example, my mail server is covisp.net and my personal domain is kreme.com, and currently kremels(a)kreme.com maps to the local user kremels. I want it to map to the existing mysql database as “kernels(a)kreme.xn--com-9o0a. (For example only, I’m not moving kreme.com, I am too dependent on procmail for all my list processing). Once I setup the user account in the mysql database do I just move the Maildir from /home/kremels to /usr/local/virtual/kremels(a)kreme.com/ and reload dovecot? -- I leave symbols to the symbol-minded - George Carlin

3 2

dovecot efficient use of resources
by shouddy＠enet.cu 22 Apr '15

22 Apr '15

I just started a heavy load imap service and everything fitted OK in functional terms. The problem comes whith stress tests, I have no problem in the directors line. But my doubt comes whether the backends are using efficiently the resources assigned or not. The main goal is to maximize the concurrency without affect the integrity of operations. My question is: Is there a rule for relating the amount of computing resources (RAM, Processor) with the number of simultaneous connections to an IMAP/POP3 server running dovecot? I had made all the adjustmens for high performance in dovecot according to the docs and O.S specs Backend's hardware Processor: AMD Opteron(tm) Processor 6136 RAM: 16 GB HDD: Enought for testing I'm confident the NFS layer is not making noise (yet). Comparing the results, the output of tests are giving consistent numbers using local file systems (all of them properly tuned) I have run the tests with imaptest but even with 100 clients I'm having system's max load of 46 stable. I have the sense that memory is not using properly (2GB at most from 16GB). Thank you so much in advance, would be grateful for any help Conf below Dovecot version 2.2.10 doveconf -n # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.0 (Maipo) nfs4 auth_mechanisms = plain login default_client_limit = 4000 disable_plaintext_auth = no listen = * mail_fsync = always mail_gid = 500 mail_location = maildir:/var/vmail/mailboxes/%d/%8n/%n:INDEX=MEMORY mail_nfs_index = yes mail_nfs_storage = yes mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { client_limit = 14400 service_count = 0 unix_listener auth-userdb { group = vmail mode = 0640 user = vmail } } service doveadm { inet_listener { port = 24245 } } service imap-login { client_limit = 1000 process_limit = 100 process_min_avail = 16 service_count = 0 vsz_limit = 512 M } service imap { process_limit = 7000 service_count = 0 } service pop3-login { client_limit = 1000 process_limit = 100 process_min_avail = 16 service_count = 0 } service pop3 { process_limit = 7000 service_count = 0 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 1000 } local 172.28.200.0/24/24 { doveadm_password = secret }

1 0

Cant See Sent Mailbox despite GETACL [request for help]
by Kevin Laurie 21 Apr '15

21 Apr '15

Hi, Apparently the "Sent" mailbox cannot be viewed by Dave(the user). Any idea why? When I do GETACL for Sent, the message I get is shown below:- * ACL "Sent" "dave(a)mydomain.net" ilr "help(a)mydomain.net" lrwstipekxacd

2 1

cant see all users - need to create symlink between mailboxes [request for help]
by Kevin Laurie 21 Apr '15

21 Apr '15

Hi, I need to create a symlink to share mailboxes. I tried to check at : cd /var/mail/ but I cant see all the mailboxes. Could someone advise how to do this? I am trying to achieve as showing in tutorial here:- http://wiki.dovecot.org/SharedMailboxes/Symlinks Below is the details of my dovecot.conf Appreciate if anyone can help. # Listen addresses. # - '*' means all available IPv4 addresses. # - '[::]' means all available IPv6 addresses. # Listen on all available addresses by default listen = * [::] #base_dir = /var/run/dovecot mail_plugins = quota acl # Enable fts fts_solr plugin globally for Solr Full Text Search Indexing mail_plugins = $mail_plugins fts fts_solr plugin { fts = solr #break-imap-search will use solr for indexing TEXT and BODY searches. fts_solr = break-imap-search url=http://127.0.0.1:8983/solr/ fts_autoindex = yes } # Enabled mail protocols. protocols = pop3 imap sieve lmtp # User/group who owns the message files: mail_uid = 2000 mail_gid = 2000 # Assign uid to virtual users. first_valid_uid = 2000 last_valid_uid = 2000 # Logging. Reference: http://wiki2.dovecot.org/Logging log_path = /var/log/dovecot.log mail_debug = no auth_verbose = no auth_debug = no auth_debug_passwords = no # Possible values: no, plain, sha1. auth_verbose_passwords = no # SSL: Global settings. # Refer to wiki site for per protocol, ip, server name SSL settings: # http://wiki2.dovecot.org/SSL/DovecotConfiguration ssl_protocols = !SSLv2 !SSLv3 ssl = required verbose_ssl = no #ssl_ca =</path/to/ca ssl_cert = </etc/pki/tls/certs/iRedMail.crt ssl_key = </etc/pki/tls/private/iRedMail.key # With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory. # Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted # insecurely. disable_plaintext_auth = yes # Allow plain text password per IP address/net #remote 192.168.0.0/24 { # disable_plaintext_auth = no #} # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ # Authentication related settings. # Append this domain name if client gives empty realm. auth_default_realm = # Authentication mechanisms. auth_mechanisms = PLAIN LOGIN # Limits the number of users that can be logging in at the same time. # Default is 100. # Note: this value can be overrided by "process_limit =" in service protocol. # e.g. # protocol imap-login { # ... # process_limit = 500 # } #default_process_limit = 100 service auth { unix_listener /var/spool/postfix/private/dovecot-auth { user = postfix group = postfix mode = 0666 } unix_listener auth-master { user = vmail group = vmail mode = 0666 } unix_listener auth-userdb { user = vmail group = vmail mode = 0660 } } # LMTP server (Local Mail Transfer Protocol). # Reference: http://wiki2.dovecot.org/LMTP service lmtp { user = vmail # For higher volume sites, it may be desirable to increase the number of # active listener processes. A range of 5 to 20 is probably good for most # sites. process_min_avail = 5 # Logging. # Require 'info_log_path =' in 'protocol lmtp {}' block. executable = lmtp -L # Listening on socket file and TCP unix_listener /var/spool/postfix/private/dovecot-lmtp { user = postfix group = postfix mode = 0600 } inet_listener lmtp { #address = 192.168.0.24 127.0.0.1 ::1 port = 24 } } # Virtual mail accounts. userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } # Master user. # Master users are able to log in as other users. It's also possible to # directly log in as any user using a master password, although this isn't # recommended. # Reference: http://wiki2.dovecot.org/Authentication/MasterUsers auth_master_user_separator = * passdb { driver = passwd-file args = /etc/dovecot/dovecot-master-users master = yes } plugin { auth_socket_path = /var/run/dovecot/auth-master quota = dict:user::proxy::quotadict quota_rule = *:storage=1G #quota_rule2 = *:messages=0 #quota_rule3 = Trash:storage=1G #quota_rule4 = Junk:ignore # Quota warning. # If user suddenly receives a huge mail and the quota jumps from # 85% to 95%, only the 95% script is executed. quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u # Plugin: autocreate. Create and subscribe to default IMAP folders. autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk # Plugin: expire. #expire = Trash 7 Trash/* 7 Junk 30 #expire_dict = proxy::expire # ACL and share folder acl = vfile acl_shared_dict = proxy::acl # By default Dovecot doesn't allow using the IMAP "anyone" or # "authenticated" identifier, because it would be an easy way to spam # other users in the system. If you wish to allow it, #acl_anyone = allow # Pigeonhole managesieve service. # Reference: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration # Per-user sieve settings. sieve_dir = /%Lh/sieve sieve = /%Lh/sieve/dovecot.sieve # Global sieve settings. sieve_global_dir = /var/vmail/sieve # Note: if user has personal sieve script, global sieve rules defined in # sieve_default will be ignored. Please use sieve_before or # sieve_after instead. #sieve_default = sieve_before = /var/vmail/sieve/dovecot.sieve #sieve_after = # The maximum number of redirect actions that can be performed during a # single script execution. The meaning of 0 differs based on your version. # For versions v0.3.0 and beyond this means that redirect is prohibited. # For older versions, however, this means that the number of redirects is # unlimited, so be careful. #sieve_max_redirects = 4 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0660 user = vmail group = vmail } } dict { #expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf acl = mysql:/etc/dovecot/dovecot-share-folder.conf } protocol lda { # Reference: http://wiki2.dovecot.org/LDA mail_plugins = $mail_plugins sieve autocreate auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot-sieve.log lda_mailbox_autocreate = yes postmaster_address = root } protocol lmtp { # Log file info_log_path = /var/log/dovecot-lmtp.log # Plugins mail_plugins = quota # Enable fts fts_solr plugin globally for Solr Full Text Search Indexing mail_plugins = $mail_plugins fts fts_solr plugin { fts = solr #break-imap-search will use solr for indexing TEXT and BODY searches. fts_solr = break-imap-search url=http://127.0.0.1:8983/solr/ fts_autoindex = yes } postmaster_address = postmaster lmtp_save_to_detail_mailbox = yes recipient_delimiter = + } protocol imap { mail_plugins = $mail_plugins imap_quota autocreate imap_acl imap_client_workarounds = tb-extra-mailbox-sep # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. # Increase it to avoid issue like below: # "Maximum number of concurrent IMAP connections exceeded" mail_max_userip_connections = 20 } protocol pop3 { mail_plugins = $mail_plugins pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. mail_max_userip_connections = 20 } # Login processes. Refer to Dovecot wiki for more details: # http://wiki2.dovecot.org/LoginProcess service imap-login { service_count = 1 # To avoid startup latency for new client connections, set process_min_avail # to higher than zero. That many idling processes are always kept around # waiting for new connections. #process_min_avail = 0 # number of simultaneous IMAP connections #process_limit = $default_process_limit process_limit = 500 # vsz_limit should be fine at its default 64MB value #vsz_limit = 64M } service pop3-login { service_count = 1 # number of simultaneous POP3 connections #process_limit = 500 } namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u # this namespace should handle its own subscriptions or not. subscriptions = yes list = children } # Public mailboxes. # Refer to Dovecot wiki page for more details: # http://wiki2.dovecot.org/SharedMailboxes/Public #namespace { # type = public # separator = / # prefix = Public/ # # # CONTROL=: Mark this public folder as read-only mailbox # # INDEX=: Per-user \Seen flag # location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public # # # Allow users to subscribe to the public folders. # subscriptions = yes #}

2 2

userdb username changed
by Péter Márton 20 Apr '15

20 Apr '15

Hi! I'm playing with a postfix + dovecot + mysql test setup, and noticed something strange. It seems that despite the "username changed" line, auth returns the original username: Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: Loading modules from directory: /usr/lib64/dovecot (...) Apr 17 09:27:34 imap21 dovecot: auth-worker(27661): Debug: sql(ppp(a)example.net): SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:27:34 imap21 dovecot: auth-worker(27661): Debug: sql(ppp(a)example.net): username changed ppp(a)example.net -> uppp Apr 17 09:27:34 imap21 dovecot: auth: Debug: userdb out: USER#0111#011ppp@example.net#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: auth input: ppp(a)example.net home=/home/ppp uid=500 gid=500 quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Effective uid=500, gid=500, home=/home/ppp Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota root: name=User quota backend=dict args=:proxy::quota Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota rule: root=User quota mailbox=* bytes=3100 messages=1024 Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: Quota grace: root=User quota bytes=310 (10%) Apr 17 09:27:34 imap21 dovecot: quota-status(ppp(a)example.net): Debug: dict quota: user=ppp(a)example.net, uri=proxy::quota, noenforcing=0 I've checked this with the LMTP service (i know, normally it wouldn't get mail addresses) and it produces the same: Apr 17 09:30:35 imap21 dovecot: auth-worker(27730): Debug: sql(ppp(a)example.net,127.0.0.1): SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:30:35 imap21 dovecot: auth-worker(27730): Debug: sql(ppp(a)example.net,127.0.0.1): username changed ppp(a)example.net -> uppp Apr 17 09:30:35 imap21 dovecot: auth: Debug: userdb out: USER#0111#011ppp@example.net#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728): Debug: auth input: ppp(a)example.net home=/home/ppp uid=500 gid=500 quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728): Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:30:35 imap21 dovecot: lmtp(27728, ppp(a)example.net) Debug: Effective uid=500, gid=500, home=/home/ppp Passdb works as it should. IMAP test: Apr 17 09:36:21 imap21 dovecot: auth-worker(27849): Debug: sql(ppp(a)example.net,10.10.128.25): query: SELECT at.userid AS user, at.password AS password, at.home AS userdb_home, at.uid AS userdb_uid, at.gid AS userdb_gid, concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS userdb_quota_rule FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = 'ppp(a)example.net' OR at.userid = 'ppp(a)example.net' Apr 17 09:36:21 imap21 dovecot: auth-worker(27849): Debug: sql(ppp(a)example.net,10.10.128.25): username changed ppp(a)example.net -> uppp Apr 17 09:36:21 imap21 dovecot: auth: Debug: sql(ppp(a)example.net,10.10.128.25,<ox/+ouYTQQDDyoAZ>): username changed ppp(a)example.net -> uppp Apr 17 09:36:21 imap21 dovecot: auth: Debug: client passdb out: OK#0111#011user=uppp#011original_user=ppp(a)example.net Apr 17 09:36:21 imap21 dovecot: auth: Debug: master in: REQUEST#0113358588929#01127844#0111#011dbf373ba260f9990e1ea6b688924d513#011session_pid=27850#011request_auth_token Apr 17 09:36:21 imap21 dovecot: auth: Debug: prefetch(uppp,10.10.128.25,<ox/+ouYTQQDDyoAZ>): success Apr 17 09:36:21 imap21 dovecot: auth: Debug: master userdb out: USER#0113358588929#011uppp#011home=/home/ppp#011uid=500#011gid=500#011quota_rule=*:storage=3100b:messages=1024#011auth_token=737d315a5c0e388a0b3dc2bea3c9e333357696d8#011auth_user=ppp@example.net Apr 17 09:36:21 imap21 dovecot: imap-login: Login: user=<uppp>, method=PLAIN, rip=10.10.128.25, lip=10.10.97.201, mpid=27850, TLS, session=<ox/+ouYTQQDDyoAZ> Apr 17 09:36:21 imap21 dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Apr 17 09:36:21 imap21 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Apr 17 09:36:21 imap21 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Apr 17 09:36:21 imap21 dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=3100b:messages=1024 Apr 17 09:36:21 imap21 dovecot: imap(uppp): Debug: Effective uid=500, gid=500, home=/home/ppp Can someone tell what should i do to make this work? Or any idea i could try? It would help if Postfix would be able to run Virtual before the policy check, but thats a problem for the postfix list. :) Thanks! Peter doveconf -n: # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-504.8.1.el6.x86_64 x86_64 CentOS release 6.6 (Final) auth_debug = yes auth_verbose = yes dict { quota = mysql:/etc/dovecot/dict-quota-sql.conf.ext } mail_access_groups = dovecot mail_debug = yes mail_fsync = always mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-example-mysql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quota quota_status_nouser = 554 5.5.4 Who the f* is Alice? quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { inet_listener imap { port = 143 } } service lmtp { inet_listener lmtp { address = * port = 25 } } service pop3-login { inet_listener pop3 { port = 110 } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 252 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-example-mysql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota } protocol lda { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } /etc/dovecot/dovecot-example-mysql.conf.ext: driver=mysql connect = host=10.10.90.206 dbname=mail user=user password=abcabcabc password_query = SELECT at.userid AS user, at.password AS password, \ at.home AS userdb_home, at.uid AS userdb_uid, at.gid AS userdb_gid, \ concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS userdb_quota_rule \ FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = '%u' OR at.userid = '%u' user_query = SELECT at.userid AS user, at.home AS home, at.uid AS uid, at.gid AS gid, \ concat('*:storage=', at.quotabytes, 'b:messages=', at.quotamessages) AS quota_rule \ FROM auth at INNER JOIN mailaddr mt ON at.userid = mt.userid WHERE mt.mailaddress = '%u' OR at.userid = '%u'

1 1

Authentication Error with Dovecot
by Kevin Laurie 18 Apr '15

18 Apr '15

Hello, I have some email authentication error with dovecot. Could someone tell me what is the problem that is indicated below? Is it due to some plugin? Apr 18 21:56:35 auth-worker(2057): Info: mysql(127.0.0.1): Connected to database vmail Apr 18 21:56:35 imap-login: Info: Login: user=<user(a)mydomain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2058, secured, session=<n/0fGAUUgwB/AAAB> Apr 18 21:56:35 imap: Error: Can't load plugin imap_acl_plugin: Plugin acl must be loaded also (you must set: mail_plugins=$mail_plugins acl) Apr 18 21:56:35 imap: Fatal: Couldn't load required plugins Apr 18 21:56:53 imap-login: Info: Disconnected (auth failed, 1 attempts in 2 secs): user=<user2>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=<z2gKGQUUiQB/AAAB> Apr 18 21:57:05 imap-login: Info: Login: user=<user2(a)mydomain.net>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2065, secured, session=<5tmoGQUUjQB/AAAB> Apr 18 21:57:05 imap: Error: Can't load plugin imap_acl_plugin: Plugin acl must be loaded also (you must set: mail_plugins=$mail_plugins acl) Apr 18 21:57:05 imap: Fatal: Couldn't load required plugins

2 4

Installing fts-solr on dovecot (centos 6) - [request for help]
by Kevin Laurie 18 Apr '15

18 Apr '15

Hello, I have been trying to get full-text-search on dovecot. I followed the tutorial on this site:- https://extremeshok.com/6622/enabling-apache-solr-4-10-using-jetty-with-dov… The instruction on the page here seems wrong:- sed -i -e 's|mail_plugins = quota|mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn}|' /etc/dovecot.conf I would appreciate if someone could help correct the parameters for the dovecot.conf output shown below. Please help. [root@mail tmp]# cat /etc/dovecot/dovecot.conf # Listen addresses. # - '*' means all available IPv4 addresses. # - '[::]' means all available IPv6 addresses. # Listen on all available addresses by default listen = * [::] #base_dir = /var/run/dovecot mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn} acl # Enabled mail protocols. protocols = pop3 imap sieve lmtp # User/group who owns the message files: mail_uid = 2000 mail_gid = 2000 # Assign uid to virtual users. first_valid_uid = 2000 last_valid_uid = 2000 # Logging. Reference: http://wiki2.dovecot.org/Logging log_path = /var/log/dovecot.log mail_debug = no auth_verbose = no auth_debug = no auth_debug_passwords = no # Possible values: no, plain, sha1. auth_verbose_passwords = no # SSL: Global settings. # Refer to wiki site for per protocol, ip, server name SSL settings: # http://wiki2.dovecot.org/SSL/DovecotConfiguration ssl_protocols = !SSLv2 !SSLv3 ssl = required verbose_ssl = no #ssl_ca =</path/to/ca ssl_cert = </etc/pki/tls/certs/iRedMail.crt ssl_key = </etc/pki/tls/private/iRedMail.key # With disable_plaintext_auth=yes AND ssl=required, STARTTLS is mandatory. # Set disable_plaintext_auth=no AND ssl=yes to allow plain password transmitted # insecurely. disable_plaintext_auth = yes # Allow plain text password per IP address/net #remote 192.168.0.0/24 { # disable_plaintext_auth = no #} # Mail location and mailbox format. mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ # Authentication related settings. # Append this domain name if client gives empty realm. auth_default_realm = # Authentication mechanisms. auth_mechanisms = PLAIN LOGIN # Limits the number of users that can be logging in at the same time. # Default is 100. # Note: this value can be overrided by "process_limit =" in service protocol. # e.g. # protocol imap-login { # ... # process_limit = 500 # } #default_process_limit = 100 service auth { unix_listener /var/spool/postfix/private/dovecot-auth { user = postfix group = postfix mode = 0666 } unix_listener auth-master { user = vmail group = vmail mode = 0666 } unix_listener auth-userdb { user = vmail group = vmail mode = 0660 } } # LMTP server (Local Mail Transfer Protocol). # Reference: http://wiki2.dovecot.org/LMTP service lmtp { user = vmail # For higher volume sites, it may be desirable to increase the number of # active listener processes. A range of 5 to 20 is probably good for most # sites. process_min_avail = 5 # Logging. # Require 'info_log_path =' in 'protocol lmtp {}' block. executable = lmtp -L # Listening on socket file and TCP unix_listener /var/spool/postfix/private/dovecot-lmtp { user = postfix group = postfix mode = 0600 } inet_listener lmtp { #address = 192.168.0.24 127.0.0.1 ::1 port = 24 } } # Virtual mail accounts. userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } # Master user. # Master users are able to log in as other users. It's also possible to # directly log in as any user using a master password, although this isn't # recommended. # Reference: http://wiki2.dovecot.org/Authentication/MasterUsers auth_master_user_separator = * passdb { driver = passwd-file args = /etc/dovecot/dovecot-master-users master = yes } plugin { auth_socket_path = /var/run/dovecot/auth-master quota = dict:user::proxy::quotadict quota_rule = *:storage=1G #quota_rule2 = *:messages=0 #quota_rule3 = Trash:storage=1G #quota_rule4 = Junk:ignore # Quota warning. # If user suddenly receives a huge mail and the quota jumps from # 85% to 95%, only the 95% script is executed. quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u # Plugin: autocreate. Create and subscribe to default IMAP folders. autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk # Plugin: expire. #expire = Trash 7 Trash/* 7 Junk 30 #expire_dict = proxy::expire # ACL and share folder acl = vfile acl_shared_dict = proxy::acl # By default Dovecot doesn't allow using the IMAP "anyone" or # "authenticated" identifier, because it would be an easy way to spam # other users in the system. If you wish to allow it, #acl_anyone = allow # Pigeonhole managesieve service. # Reference: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration # Per-user sieve settings. sieve_dir = /%Lh/sieve sieve = /%Lh/sieve/dovecot.sieve # Global sieve settings. sieve_global_dir = /var/vmail/sieve # Note: if user has personal sieve script, global sieve rules defined in # sieve_default will be ignored. Please use sieve_before or # sieve_after instead. #sieve_default = sieve_before = /var/vmail/sieve/dovecot.sieve #sieve_after = # The maximum number of redirect actions that can be performed during a # single script execution. The meaning of 0 differs based on your version. # For versions v0.3.0 and beyond this means that redirect is prohibited. # For older versions, however, this means that the number of redirects is # unlimited, so be careful. #sieve_max_redirects = 4 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { user = vmail group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0660 user = vmail group = vmail } } dict { #expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf acl = mysql:/etc/dovecot/dovecot-share-folder.conf } protocol lda { # Reference: http://wiki2.dovecot.org/LDA mail_plugins = $mail_plugins sieve autocreate auth_socket_path = /var/run/dovecot/auth-master log_path = /var/log/dovecot-sieve.log lda_mailbox_autocreate = yes postmaster_address = root } protocol lmtp { # Log file info_log_path = /var/log/dovecot-lmtp.log # Plugins mail_plugins = quotann# Enable fts fts_solr plugin globally for Solr Full Text Search Indexingnmail_plugins = $mail_plugins fts fts_solrnnplugin {nfts = solrn#break-imap-search will use solr for indexing TEXT and BODY searches.nfts_solr = break-imap-search url=http://127.0.0.1:8983/solr/nfts_autoindex = yesn} sieve postmaster_address = postmaster lmtp_save_to_detail_mailbox = yes recipient_delimiter = + } protocol imap { mail_plugins = $mail_plugins imap_quota autocreate imap_acl imap_client_workarounds = tb-extra-mailbox-sep # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. # Increase it to avoid issue like below: # "Maximum number of concurrent IMAP connections exceeded" mail_max_userip_connections = 20 } protocol pop3 { mail_plugins = $mail_plugins pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. mail_max_userip_connections = 20 } # Login processes. Refer to Dovecot wiki for more details: # http://wiki2.dovecot.org/LoginProcess service imap-login { service_count = 1 # To avoid startup latency for new client connections, set process_min_avail # to higher than zero. That many idling processes are always kept around # waiting for new connections. #process_min_avail = 0 # number of simultaneous IMAP connections #process_limit = $default_process_limit process_limit = 500 # vsz_limit should be fine at its default 64MB value #vsz_limit = 64M } service pop3-login { service_count = 1 # number of simultaneous POP3 connections #process_limit = 500 } namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u # this namespace should handle its own subscriptions or not. subscriptions = yes list = children } # Public mailboxes. # Refer to Dovecot wiki page for more details: # http://wiki2.dovecot.org/SharedMailboxes/Public #namespace { # type = public # separator = / # prefix = Public/ # # # CONTROL=: Mark this public folder as read-only mailbox # # INDEX=: Per-user \Seen flag # location = maildir:/var/vmail/public/:CONTROL=~/Maildir/public:INDEX=~/Maildir/public # # # Allow users to subscribe to the public folders. # subscriptions = yes #}

2 4

Please help: error after upgrade to version 2.1.16
by Harald Langner 18 Apr '15

18 Apr '15

Hallo I can not find a forum at dovecot.org and I get a problem I can not solve. After Updating to the version dovecot2 2.1.16 I can no more get eMails with my eMail-client. All has been working fine before. Server: FreeBSD 10.0-RELEASE-p18, with perl 5, version 18, subversion 4 (v5.18.4) It seems it is an authentication problem with my server. The errors are: #cat dovecot.log Apr 17 22:19:37 imap-login: Error: Timeout waiting for handshake from auth server. my pid=41810, input bytes=0 Apr 17 22:19:58 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Apr 17 22:19:58 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Apr 17 22:19:58 master: Error: service(auth): command startup failed, throttling for 60 secs Apr 17 22:24:04 auth: Error: auth: environment corrupt; missing value for DOVECOT_ Apr 17 22:24:04 auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address Apr 17 22:24:04 master: Error: service(auth): command startup failed, throttling for 60 secs I have google and has nothing found about "..environment corrupt; missing value for DOVECOT_" and about "auth: Fatal: unsetenv(RESTRICT_SETUID) failed: Bad address" I have make a reinstall - but doesn't help. I get the same error. I have not forget to create new certs with the dovecote shell-script after installation. I'm using passwd (virtual users). Make a cat on passwd shows that it is not empty. Also the date of the file show that the update installation has it not changed. So I have not create the dovecot users again. here are some other logs: #cat dovecot-info.log Apr 17 22:29:03 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS handshaking Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS Apr 17 22:29:33 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=85.181.222.126, lip=78.47.225.20, TLS #cat dovecot-debug.log Apr 17 22:30:03 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 17 22:30:03 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Apr 17 22:34:01 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 17 22:34:01 auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Apr 17 22:34:01 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] Apr 17 22:34:01 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [85.181.222.126] ######################################################################################## My configuration is sendmail(MTA) -> procmail(LDA) -> dovecot(IMAP) with TLS and Maildir (no DB) Authentification been done with dovecot password file (no real user, no OpenLDAP, no other DB-User) #dovecot -n # 2.2.16: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p18 amd64 ufs auth_debug = yes auth_mechanisms = digest-md5 plain login auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot-debug.log default_internal_user = vmail default_login_user = vmail deliver_log_format = msgid=%m: %$ %f %s disable_plaintext_auth = no first_valid_uid = 1000 hostname = swdevil.de info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log login_greeting = IMAPd ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = mailnull mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/:INBOX=/home/vmail/%d/%n/.INBOX mail_plugins = " virtual" mail_temp_dir = /tmp/mail namespace inbox { inbox = yes location = prefix = } passdb { args = scheme=DIGEST-MD5 username_format=%n /usr/local/etc/dovecot/pass driver = passwd-file } service auth-worker { group = wheel user = root } service imap-login { group = dovenull inet_listener imap { port = 0 } inet_listener imaps { port = 993 } } service imap { process_limit = 100 } service pop3-login { group = dovenull inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } service pop3 { process_limit = 100 } ssl = required ssl_cert = </usr/local/etc/dovecot/certs/dovecot_ssl_crt.pem ssl_key = </usr/local/etc/dovecot/certs/dovecot_ssl_key.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } verbose_proctitle = yes verbose_ssl = yes protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Many thanks for Your advice what could be wrong. Harald Langner EU (Germany)

2 3

Problem: mail moved by thunderbird script is invisible to mail clients, but in cur directory
by David Gessel 18 Apr '15

18 Apr '15

Over the last year I've had a script moving old mail (120 days) into my annual archive folder. This is the first year I've done this with Dovecot, previously it was running against Cyrus. There's nothing particularly clever: a few conditions to match, then "move message to" the appropriate archive folder. There's one for every year from 2000 to 2015. 2015 is just barely ahead of need. 2014 has about a year's mail in the cur directory. The 2000-2013 folders were filled by Cyrus and were migrated over using IMAP Migrate. They're fine, and read normally. The 2014 layout looks normal to me # ls cur dovecot-uidlist dovecot.index.cache dovecot.index.log.2 new dovecot-keywords dovecot.index dovecot.index.log maildirfolder tmp Permissions are the same as every other folder, as is owner: drw-r----- 2 vmail vmail 9.6K Apr 12 21:13 cur and # ls | wc -l 9822 I've checked with Thunderbird, Mulberry, Claws, and Sylpheed - none can read the directory. The files look normal: 2014/cur 1426411329.M123928P26360.host.domain.com,S=3523,W=3591:2,R More or less the same as a working directory: 2013/cur 1405500734.M958596P27867.host.domain.com,S=794,W=819:2,RS I've run # doveadm force-resync -u user .archives.2014 and nothing changed. I'm at a bit of a loss since no client can read them, something like moving them to another folder and back is a little complicated. Any hints?

3 3

ManageSieve Dovecot v2 listen on localhost only
by trash＠skrilnetz.net 17 Apr '15

17 Apr '15

Hi, How can I only listen on localhost for ManageSieve? I tried: port = localhost:4190 still listening *: tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 515675 20540/dovecot Would did I not get here? Thanks,

3 5

Replace autocreate after upgrading
by trash＠skrilnetz.net 17 Apr '15

17 Apr '15

Hi, I just upgraded to 2.2.9 and found out that autocreate should not be used any more. I had a look at http://wiki2.dovecot.org/MailboxSettings and I tried to replace my old config but I had no success. Would somebody be so and help me to change my config? Here is my old config: http://pastebin.com/zFUAQmV3 Thanks,

2 1

Potentially breaking dict-proxy (dict-sql) backwards compatibility
by Timo Sirainen 17 Apr '15

17 Apr '15

Looks like the dict-proxy code doesn't currently do escaping newlines properly, but it still accidentally happens to work, because the data is stored in the escaped form. I'm thinking about fixing this, but this might break somebody's existing dict usage. But then again maybe nobody is actually using it now, especially because it hasn't been working exactly as expected. So, can anybody tell me if they're currently using a combination of: - dict proxy (especially to dict sql) - containing values which can contain LFs (or TABs) I guess this mainly means storing Sieve scripts or IMAP METADATA to SQL. Or maybe somebody is using dict (via proxy) for their own purposes?..

1 0

Calendar and address book with Dovecot
by mimicafe＠gmail.com 16 Apr '15

16 Apr '15

Hi guys Thanks for all your input. I'll feedback later... Mimi

1 0

Thunderbird sync time? (reverse quota warning)
by E.B. 16 Apr '15

16 Apr '15

For reverse quota warning, it looks like webmail works nice. quota_warning3 = -storage=100%% quota-warning below %u # user is no longer over quota But using thunderbird I deleted enough messages to go below quota and I deleted them from trash folder too. But mail log does not show thunderbird connecting to imap to actually delete mails and get the trigger below quota warning msg. It's i thinks a thundrbrd behavior but i wonder if anyone on this list knows how it works? Do i just keep waiting for it to sync eventually? or??????? TIA!

2 3

Dovecot and recipient_delimiter
by J. Echter 16 Apr '15

16 Apr '15

Hi, we're using thunderbird as our client, it has the functionality to sort spamassassin tagged mails in a folder called 'Junk'. I have this folder on my dovecot server and i'd like to use the recipient_delimiter feature to get my spam/junk mails directly to this folder. what i have done yet: dovecot.conf: plugin { recipient_delimiter = + } postfix: master.cf dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail null_sender= argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -e -m ${extension} postfix: main.cf recipient_delimiter = + what i get: Apr 14 13:46:50 mule postfix/pickup[22664]: 71ED53C05EE: uid=0 from=<testuser(a)testdomain.test> Apr 14 13:46:50 mule postfix/cleanup[1408]: 71ED53C05EE: message-id=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test> Apr 14 13:46:50 mule postfix/qmgr[12559]: 71ED53C05EE: from=<testuser(a)testdomain.test>, size=465, nrcpt=2 (queue active) Apr 14 13:46:50 mule dovecot: lda(testuser(a)testdomain.test): msgid=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test>: save failed to junk: Mailbox doesn't exist: junk Apr 14 13:46:50 mule dovecot: lda(testuser(a)testdomain.test): msgid=<552cfe2a.tR3wZK7y16RgA548%testuser(a)testdomain.test>: saved mail to INBOX Apr 14 13:46:50 mule postfix/pipe[10898]: 71ED53C05EE: to=<testuser+Junk(a)testdomain.test>, relay=dovecot, delay=0.04, delays=0.02/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) Apr 14 13:46:50 mule postfix/qmgr[12559]: 71ED53C05EE: removed here is my complete dovecot -n output: dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.12.2.el6.x86_64 x86_64 CentOS release 6.6 (Final) ext4 auth_cache_negative_ttl = 0 auth_cache_size = 50 M auth_verbose = yes base_dir = /var/run/dovecot/ imap_id_log = * imap_id_send = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_gid = 5000 mail_home = /DATEN/vmail/%d/%n mail_location = maildir:/DATEN/vmail/%d/%n/mail/ mail_plugins = " zlib" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { autocreate = Junk autosubscribe = Junk recipient_delimiter = + sieve = /DATEN/vmail/%d/%n/.dovecot.sieve sieve_dir = /DATEN/vmail/%d/%n/sieve zlib_save = gz zlib_save_level = 6 } protocols = sieve imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } user = root } service imap-login { chroot = login executable = /usr/libexec/dovecot/imap-login inet_listener imap { port = 0 } process_min_avail = 4 user = dovecot } service imap { executable = /usr/libexec/dovecot/imap } service managesieve-login { chroot = login user = dovecot } service pop3-login { chroot = login user = dovecot } ssl = required ssl_cert = </shared/config/dovecot/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = </shared/config/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } valid_chroot_dirs = /var/spool/vmail protocol lda { mail_plugins = sieve postmaster_address = postmaster } any hints on what i do wrong here? thanks juergen

2 4

Disk space usage with mdbox
by Alexandros Soumplis 15 Apr '15

15 Apr '15

Hello, I am using dovecot with mdbox+sis and I notice an ever increasing disk space usage since I converted mailboxes from Maildir to mdboxes. I have checked with a user and while it actually uses only 65K, his mdbox files on disk are more than 6G. The backup of his mailbox is just 64K. Any suggestions ? Below are some relevant commands: [root@mail ~]# doveadm quota get -u test Quota name Type Value Limit % User quota STORAGE 10135 31457280 0 User quota MESSAGE 186 - 0 [root@mail ~]# du -k --max-depth=1 /mdboxes/test/ 220 /mdboxes/test/mailboxes 6029348 /mdboxes/test/storage 6029592 /mdboxes/test/ [root@mail ~]# doveadm purge -u test [root@mail ~]# du -k --max-depth=1 /mdboxes/test/ 220 /mdboxes/test/mailboxes 6029348 /mdboxes/test/storage 6029592 /mdboxes/test/ [root@mail ~]# doveadm backup -u test mdbox:/tmp/MDBOX_TEMP/ [root@mail ~]# du -k --max-depth=1 /tmp/MDBOX_TEMP/ 16 /tmp/MDBOX_TEMP/mailboxes 65540 /tmp/MDBOX_TEMP/storage 65568 /tmp/MDBOX_TEMP/

4 9

setting service_count results in Permission denied
by Micah Anderson 15 Apr '15

15 Apr '15

The load on our machines has gotten too high, so I started to see log messages that directed me to look at this page for config changes: https://pad.riseup.net/redirect#http%3A//wiki2.dovecot.org/SocketUnavailable One of the things I wanted to do on that page was to set the: service imap { service_count = 100 } but when I added that to the service imap block, and restarted dovecot, I see this in the logs: Error: net_connect_unix(/run/dovecot/imap-postlogin) failed: Permission denied I dont understand how this impacts permissions. Its clearly this setting, because when I remove it, things work again. I found nothing else in the logs indicating a configuration problem. This is what the config block looked like: service imap { # Most of the memory goes to mmap()ing files. You may need to increase this # limit if you have huge mailboxes. #vsz_limit = 256M # Max. number of IMAP processes (connections) process_limit = 4096 service_count = 100 executable = imap imap-postlogin } service imap-postlogin { # the script process runs as the user specified here (v2.0.14+): #user = $default_internal_user executable = script-login /usr/local/sbin/postlogin_imap # this UNIX socket listener must use the same name as given to imap executable unix_listener imap-postlogin { } } This is with dovecot 2.2.13, thanks for any help you can provide! micah

4 3

concurrent IMAP connections (plus 2 easy questions)
by Ron Cleven 15 Apr '15

15 Apr '15

I posted a few days back asking about configuration issues with a modestly large number of IMAP connections. Several people were kind enough to respond with various ideas. Armed with those ideas and Google, I was able to determine the underlying configuration issues with CentOS 7 and Dovecot 2.2.10. I did some further benchmarking to ensure that we could properly plan our server configuration requirements as we continue to roll this out, so I thought I would share this, partly to see if anyone has experiences that conflict with my findings. I found that each incremental dovecot IMAP process required about 750k of RAM. Simulations confirmed that 8 gig of RAM was sufficient to support approximately 10,000 concurrent IMAP connections (no POP3). CentOS settings: Added: fs/inotify/max_user_instances = 28000 to: /etc/sysctl.d/99-sysctl.conf Added: * hard nproc 28000 * soft nproc 28000 * hard nofile 28000 * soft nofile 28000 to: /etc/security/limits.d/20-nproc.conf To verify the settings after reboot: cat /proc/sys/fs/inotify/max_user_instances ulimit -Hn ulimit -Sn Dovecot: Added: process_limit = 28000 to service imap{} /etc/dovecot/conf.d/10-master.conf Added (using proxies, would like to just turn off this check): mail_max_userip_connections = 40 to protocol imap {}: /etc/dovecot/conf.d/20-imap.conf Added: process_limit = 28000 to service managesieve {}: /etc/dovecot/conf.d/20-managesieve.conf Hope this helps someone. Feedback would be welcome. It would be great if there was a blessed cookbook for Dovecot scaling. At this point it seems a bit like an art form. Now to my two "easy" questions. 1) TCP replication between our two CentOS boxes has been working great, no complaints. However, I realized I did not know how to check the status of replications, as one might want to do if one of the two boxes was taken offline for maintenance or repair. On the surface, it would appear that the command: doveadm replicator status '*' would likely show me what I want to know. However, when I tried it, I got: doveadm(): Fatal: net_connect_unix(/var/run/dovecot/replicator-doveadm) failed: No such file or directory The documentation says that doveadm assumes the socket /var/run/dovecot/replicator-doveadm and the command format provides a "-a" override. In that directory, there is no "replicator-doveadm" socket, but I do see a "replicator" socket. So, should I be using the command: doveadm replicator status -a /var/run/dovecot/replicator '*' or is the non-existence of the replicator-doveadm socket indicative of something I might have done wrong with the config? I hate experimenting more than I have to with a production box. The 2.2.10 Dovecot I am running was installed via yum, so there are no potential compilation issues. 2) It seems logical to me that: dovecot stop would first lock out any new user connections, then do the equivalent of a: doveadm kick "*" before actually cycling everything else down to ensure the shutdown is as graceful as possible. I suppose I could experiment and find out for certain, but I have the sense that the "stop" command is not quite that elegant, so we have implemented procedures to work around it. Just a point of curiosity. An alternative would be if there was a doveadm command to lock out any new user connections, which could then be followed by kick and stop. I have found that many clients are VERY quick to reconnect after a kick.

2 1

Authcache and user changing
by Lazy 13 Apr '15

13 Apr '15

Hi, I have noticed that during auth cache hits usernames are not updated. (We use ldap backend and change username with user_attrs = uid=user, mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ cold cache lmtp(14414): Debug: auth input: testmon_testmon home=/vmail/te/testmon_testmon quota_rule=*:bytes=104857600 lmtp(14414): Debug: changed username to testmon_testmon lmtp(14414): Debug: Added userdb setting: plugin/quota_rule=*:bytes=104857600 hot cache lmtp(14715): Debug: auth input: iqmon(a)mon.test.pl home=/vmail/iq/testmon_testmon quota_rule=*:bytes=104857600 lmtp(14715): Debug: Added userdb setting: plugin/quota_rule=*:bytes=104857600 this kills our dictionary based quota (users have multiple quota instances depending on timing and alias the email was delivered to. Is there a way to force addition of user to the auth cache ? -- Michal Grzedzicki

3 5

special_use folders
by Roman Gelfand 13 Apr '15

13 Apr '15

My setup is postfix mail gateway/spamassassin on one machine and dovecot mail box server on another machine. Will the following configuration work? 1. On the mail gateway, I install dovecot-lmtp and use it to deliver locally spam. 2. On the mailbox server, I configure special use junk folder to point mail gateway's spam folder via nfs. If this is correct, how can I configure special use folder to point to a path (variable based on email) which is different from default path? If there is a different way to handle this, I would interested. Thanks in advance

3 2

dovecot debug message help required
by Rajesh M 13 Apr '15

13 Apr '15

hi i was carrying out some testing using qmailtoaster with dovecot on a centos 64 server i am connecting to the mailbox using a windows machine with outlook across the lan. the mailbox is around 7gb in size with around 12000 emails spread across multiple folders and i am trying to sync the mailbox folders to by creating an account imap account in outlook. the mails are getting downloaded in the imap folder but the sync does not complete and outlook throws an error. Task 'Synchronizing subscribed folders for user(a)mydomain.com.' reported error (0x800CCC0F) : 'Outlook cannot synchronize subscribed folders for user(a)mydomain.com.. Error: The TCP/IP connection was unexpectedly terminated by the server. If you continue to receive this message, contact your server administrator or Internet service provider (ISP).' in the dovecot log i see the following. Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Effective uid=89, gid=89, home=/home/vpopmail/domains/mydomain.com/user Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota root: name=ignore=Trash backend=maildir args= Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota rule: root=ignore=Trash mailbox=? bytes=0 messages=0 Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Quota grace: root=ignore=Trash bytes=0 (10%) Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location= Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: access(/home/vpopmail/domains/mydomain.com/user/mdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: access(/home/vpopmail/domains/mydomain.com/user/sdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: maildir: root exists (/home/vpopmail/domains/mydomain.com/user/Maildir) Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: maildir++: root=/home/vpopmail/domains/mydomain.com/user/Maildir, index=, indexpvt=, control=, inbox=/home/vpopmail/domains/mydomain.com/user/Maildir, alt= Apr 10 17:12:40 imap(user(a)mydomain.com): Info: Disconnected: Logged out in=28 out=460 i would like to know what the following means -- specifically mdbox and sdbox #################### Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: access(/home/vpopmail/domains/mydomain.com/user/mdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: mdbox: couldn't find root dir Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: access(/home/vpopmail/domains/mydomain.com/user/sdbox, rwx): failed: No such file or directory Apr 10 17:12:10 imap(user(a)mydomain.com): Debug: sdbox: couldn't find root dir #################### my dovecot config file # dovecot -n # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. mail_debug = yes mail_max_userip_connections = 50 mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin { quota = maildir:ignore=Trash quota_rule = ?:storage=0 } protocols = imap pop3 service imap-login { client_limit = 1000 process_limit = 400 process_min_avail = 4 service_count = 0 vsz_limit = 512 M } service pop3-login { client_limit = 1000 process_limit = 400 process_min_avail = 12 service_count = 0 vsz_limit = 512 M } ssl_cert = </var/qmail/control/servercert.pem ssl_dh_parameters_length = 2048 ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = " quota imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = no pop3_no_flag_updates = yes } thank you, rajesh

2 1

Disabling of userdb/passdb modules using config statements
by Jeroen Massar 13 Apr '15

13 Apr '15

Hola, Debian (and possibly other distros) use the /etc/dovecot/conf.d/* setup where default config files are stuffed and then one can just add a 99-myconfig.conf et voila, variables are overruled. This allows the distro to supply updates to the files at package upgrade time without any/much user intervention. The problem (for me ;) is that the system comes provided with: auth-system.conf.ext containing: passdb { driver = pam } userdb { driver = passwd } Hence pam & /etc/passwd based are always enabled. This while I don't have any local users. Replication seems to then always pick up the local users, which are vmail + nobody (65536). doveadm user '*' thus reports vmail, nobody + virtual users Setting: first_valid_uid = 5000 last_valid_uid = 5000 only keeps vmail in there, but apparently some module (guess replication) is still able to figure out that 'nobody' exists: Apr 10 09:48:25 mail dovecot: doveadm(IPADDR,nobody): Error: Mail access for users with UID 65534 not permitted (see first_valid_uid in config file, uid from userdb lookup). Apr 10 09:48:25 mail dovecot: doveadm(IPADDR,nobody): Error: dsync-server: User init failed Apr 10 09:49:38 mail dovecot: doveadm(nobody): Error: sync: Failed to start remote dsync-server command: Remote exit_code=75 and on the other side: Apr 10 09:54:38 mail dovecot: doveadm(nobody): Error: sync: Unknown user in remote This can be resolved by commenting out the entries in auth-system.conf.ext but then I'll have to do that again at package upgrade time. Hence, would it be a cool option to be able (in the 99-myconfig.conf) file to put: passdb { driver = pam enabled = false } userdb { driver = passwd enabled = false } And thereby disabling those modules completely? Thus avoiding upgrade conflicts etc. Greets, Jeroen

4 7

doveadm save ...
by Hardy Flor 13 Apr '15

13 Apr '15

Hello, when I have with "doveadm save ..." store a message, how do I get the guid or uid of this message for the setthe flags? Hardy

4 8

dovecot-2.2.16 compilation problems under Solaris Studio 11
by Jürgen Obermann 13 Apr '15

13 Apr '15

Hello here are two problems I get when I compile dovecot 2.2.16 under Solaris 10 with Studio 11 Compiler: gmake[4]: Entering directory `/net/fileserv/export/sunsrc/src/dovecot-2.2.16/src/lib' source='test-array.c' object='test_lib-test-array.o' libtool=no \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib-test -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c -o test_lib-test-array.o `test -f 'test-array.c' || echo './'`test-array.c "test-array.c", line 129: warning: initializer does not fit or is out of range: -32768 "test-array.c", line 129: warning: initializer does not fit or is out of range: -16384 "test-array.c", line 129: warning: initializer does not fit or is out of range: -512 "test-array.c", line 129: warning: initializer does not fit or is out of range: -256 "test-array.c", line 129: warning: initializer does not fit or is out of range: -128 "test-array.c", line 129: warning: initializer does not fit or is out of range: -64 "test-array.c", line 129: warning: initializer does not fit or is out of range: -2 "test-array.c", line 129: warning: initializer does not fit or is out of range: -1 "test-array.c", line 154: operand cannot have void type: op "=" "test-array.c", line 154: assignment type mismatch: unsigned short "=" const void "test-array.c", line 206: operand cannot have void type: op "=" "test-array.c", line 206: assignment type mismatch: pointer to const char "=" const void cc: acomp failed for test-array.c gmake[4]: [test_lib-test-array.o] Fehler 2 (ignoriert) gmake[3]: Entering directory `/net/fileserv/export/sunsrc/src/dovecot-2.2.16/src/lib-imap' source='imap-match.c' object='imap-match.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/bash ../../depcomp \ /bin/bash ../../libtool --tag=CC --mode=compile cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c -o imap-match.lo imap-match.c libtool: compile: cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-charset -I../../src/lib-mail -I/opt/local/include -I/usr/local/include -fast -xarch=v8plusa -I/opt/local/include -c imap-match.c -KPIC -DPIC -o .libs/imap-match.o "imap-match.c", line 199: identifier redeclared: imap_match_dup current : function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} previous: function(pointer to struct pool {pointer to const struct pool_vfuncs {..} v, unsigned int alloconly_pool :1, unsigned int datastack_pool :1}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning pointer to struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data} : "imap-match.h", line 33 "imap-match.c", line 214: identifier redeclared: imap_match_globs_equal current : function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool previous: function(pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}, pointer to const struct imap_match_glob {pointer to struct pool {..} pool, pointer to struct imap_match_pattern {..} patterns, char sep, array[-1] of char patterns_data}) returning _Bool : "imap-match.h", line 36 cc: acomp failed for imap-match.c gmake[3]: [imap-match.lo] Fehler 1 (ignoriert) Greetings Jürgen -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

4 4

sieve plugin editheader not found
by Patrick Lion 11 Apr '15

11 Apr '15

Hey folks, ive already made a bug report in the gentoo bugtracker last year. In the meantime after some releases the error persists with the current dovecot and pigeonhole versions. Please see my bug report at gentoo mailinglist: https://bugs.gentoo.org/show_bug.cgi?id=522148 Okay, here are some informations: Steps to Reproduce: add "editheader" to sieve options or "sievec" a file that need the extension if header :matches "Something" "*" { addheader "Anything" "${1}"; deleteheader "Something"; } sievec mod_header.sieve sievec(root): Fatal: Plugin 'editheader' not found from directory /usr/lib64/dovecot/sieve dovecot --version 2.2.16 pigeonhole-0.4.7 sources got downloaded and used in the build process dovecot -n # 2.2.16: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.7 # OS: Linux 2.6.32-openvz-042stab102.9-amd64 x86_64 Gentoo Base System release 2.2 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imap_capability = CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=ORDEREDSUBJECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED CONTEXT=SEARCH LIST-STATUS SPECIAL-USE XLIST QUOTA info_log_path = syslog login_log_format_elements = user=<%u> method=%m ip=%r mpid=%e mail_location = maildir:%h/.maildir mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include body enotify environment mailbox date index ihave duplicate imapflags notify namespace compat { alias_for = hidden = yes inbox = no list = no location = prefix = INBOX. separator = . } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { args = /etc/dovecot/dovecot-sql.conf.ext quota = maildir quota_rule2 = trash:storage=+150M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_extensions = variables } postmaster_address = mailer-daemon(a)dev.someserver service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /etc/postfix/quota-warning.sh unix_listener quota-warning { group = hosting mode = 0660 user = postfix } user = postfix } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota sieve postmaster_address = mailer-daemon(a)dev.someserver } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota } protocol lmtp { hostname = dev.someserver mail_plugins = quota sieve postmaster_address = postmaster(a)dev.someserver } Please let me know if you need any additional informations, build logs ( log from 2.213 attached at bugs.gentoo.org ) or whatever may be helpful to track this down.

3 4

Calendar and address book with Dovecot
by mimicafe＠gmail.com 10 Apr '15

10 Apr '15

Hi all I recently install Postfix and Dovecot, and so far so good. My assumption was that calendar and address book (similar to Gmail calendar or address book) are part of Dovecot. However I do not see anything concerning them in any of the docs I have read so far. What other software (ideally open source, free) do I need in other to have Calendar and address book so my users can manage their contact on their phones or computer? I have looked at Roundcube already, but my requirement is not necessarily to provide web mail. Thanks Mimi

15 16

pop3 retr responses too large lines - Fails with current python's poplib
by Guillermo M. Narvaja 10 Apr '15

10 Apr '15

Since December 2014, clients using the Python poplib library (getmail in my case) started to limit the line length of RETR and other command responses sent from the server to 2048 bytes: See https://bugs.python.org/issue16041 (Included at least in Python-2.7.9) Dovecot doesn't have line split in the POP3 module, so Python fails to retrieve messages with long lines. RFC 1939 says: " Responses in the POP3 consist of a status indicator and a keyword possibly followed by additional information. All responses are terminated by a CRLF pair. Responses may be up to 512 characters long, including the terminating CRLF. " I think dovecot-pop3 should split it's output in lines of at least 512 characters. Or at least it should have a "pop3_max_line_length" setting (like "imap_max_line_length"). Server side: # dovecot --version 2.2.13 Client side: # python --version Python 2.7.9 # getmail --version getmail 4.47.0 Temporary workaround (on client-side): --- poplib.py.orig 2015-04-08 18:46:48.280879211 -0300 +++ poplib.py 2015-04-08 18:26:01.288556028 -0300 @@ -36,7 +36,7 @@ # reading arbitrary length lines. RFC 1939 limits POP3 line length to # 512 characters, including CRLF. We have selected 2048 just to be on # the safe side. -_MAXLINE = 2048 +_MAXLINE = 2048*100 class POP3: Thanks in advance. -- Guillermo M. Narvaja Lambda Sistemas S.R.L. www.fierro-soft.com.ar - radiocut.fm Tel: (5411) 3220-1520 (rotativas) y 4857-6662 Cel: (5411) 15-6783-4435 Email: guillermo.narvaja(a)fierro-soft.com.ar MSN: guillermo_narvaja(a)hotmail.com Skype: guillermonarvaja Lavalleja 519 1er Piso - Ciudad de Buenos Aires - Argentina

2 4

FYI: Some 'fun' unlinks with random memory space references
by Jeroen Massar 10 Apr '15

10 Apr '15

Hola, Dovecot: 2.2.16 (6bde7868cffd) That is the rename-it 2:2.2.16-1~auto+43 edition. In the beginning of syncing it caused scary things like: Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(OX/dbox-Mails/u.10672) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(ox/mailboxes/INBOX/dbox-Mails/u.10927) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(OX/dbox-Mails/u.10839) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(OX/dbox-Mails/u.10656) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(11147) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(OX/dbox-Mails/u.10637) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(OX/dbox-Mails/u.10807) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(<80><A5><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(<B0><A6><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(<E0><A7><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(#020<A9><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(@<AA><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(p<AB><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(<A0><AC><C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink(Э<C8>) failed: No such file or directory Apr 9 16:24:08 mail dovecot: dsync-server(username): Error: unlink() failed: No such file or directory Might want to put a check before that unlink that nothing dirty is in the buffer... I would not be surprised if this was related to a broken index, as the other side effect I saw during this sync was an ever-expanding maildir (read: sdbox), multiplying itself during sync, keeping large amounts of the the .temp.<xxxx> in the dir, never moving them to a final directory. That was resolved by stopping dovecot, then deleting the broken sdbox (backups++) and performing a 'dovecot force-resync -u user Folder' on the source. Maybe there was a race somewhere while syncing the large amount of data over; seems that everything is okay now though. Greets, Jeroen

1 0

sa-learn with remote Dovecot folders
by Andreas Kasenides 10 Apr '15

10 Apr '15

Hi all! The set-up I have is a classic one: 1. one or more Dovecot relay/directors Postfix SMTP servers in DMZ 2. one or more backend IMAP/SMTP servers on the inside network 3. There may or may not be separate incoming or outgoing designated SMTP servers. Now the desired functionality is (of course): 1. relay machines receive messages from outside AND inside 2. relays check for all the bad things (spam, viruses etc). 3. for incoming messages relays check for valid local users and reject messages for invalid users 4. after all checks are done incoming messages are transferred to the backend systems where they are accessed via the Dovecot directors While all the above works nicely, the problem I have is how to train my spamassassin (used by amavisd) on the front ends when all messages are on the back ends. Of course transferring the spam detection procedures internally is not such a great option.Am I missing something? I tried googling for info but nothing substantial turned up. Thanks. -- Andreas Kasenides Senior IT Officer Dept. of Computer Science, University of Cyprus Tel: 22892714, Fax: 22892701 (5B4ANK)

2 4

gmail-migration: archived mails in \ALL
by Peer Heinlein 10 Apr '15

10 Apr '15

Hi, I don't completly understand http://wiki2.dovecot.org/Migration/Gmail I can't find the documentation for the -a and the -F Flag. I'd like to migrate ONLY archived mails from an existing gmail-Account. So I'd have to import all Mails from the \ALL-Folder that does NOT have any virtual folder flags set. I tried to use this command: doveadm -D -o imapc_user=user(a)example.com -o pop3c_user=user(a)exampe.com -o imapc_password=secret -o pop3c_password=secret -o imapc_host=imap.googlemail.com -v backup -m '[Gmail]/Tutti i messaggi' -F '-$GmailHaveLabels' -x \Flagged -x \Junk -x \Trash -x \Important -R -u user(a)example.com imapc: But it looks like it's importing too many mails and not only the archived mails without Flags. How do I have do understand -F '-$GmailHaveLabels ?? Is it "that NOT have $GmailHaveLabels"? And: Is there any better way to address the \ALL-Folder? I can use "-x \All" to exclude that folder, but it looks like I can't use "-m \All" to select that folder. We're a little bit in hurry since Google will stop its service this weekend. Any fast help would be appreciated. Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

dovecot debug LDAP expansion
by Thomas Baumann 09 Apr '15

09 Apr '15

Hello all, how can LDAP Expansion being debugged? I need to see which LDAP Query is sent to the LDAP server and which Result is sent by the Server. Best regards, Thomas.

2 1

Sieve, multiple addresses, and variables
by Andrew Sullivan 08 Apr '15

08 Apr '15

Hi, I have another sieve question, this time about setting variables. I join a lot of mailing lists at ietf.org. I thought it'd be handy to filter these all into a common folder and then into individual folders, without having to configure each mailing list independently. So wrote this (this is just a part, obviously): require ["envelope", "variables", "date", "fileinto", "mailbox" ]; if address :is :domain "to" "ietf.org" { if address :matches :localpart "to" "*" {set "lopart" "${1}";} } elsif address :is :domain "cc" "ietf.org" { if address :matches :localpart "cc" "*" {set "lopart" "${1}";} } else {set "lopart" "generic-list-box";} fileinto :create "ietf.${lopart}-in"; stop; } Now, this works, unless someone sends a To: line like this: To: ajs(a)crankycanuck.ca, listname(a)ietf.org The problem in that case is that you _do_ get a match, but the bit "if address :matches :localpart "to" "*" {set "lopart" "${1}";}" ends up putting this in a mailbox ietf.ajs-in, when what is the mailbox ietf.listname-in. I thought that allof(if address :matches :localpart "to" "*", address :matches :localpart "to" "*") {set "lopart" "${1}";}, would solve this, but it doesn't seem to. The localpart matching catches the ajs(a)crankycanuck.ca address anyway, which surprised me. Am I dim, am I not understanding something about how to do this, or is this really impossible? Thanks, A -- Andrew Sullivan ajs(a)crankycanuck.ca

2 2

Need a bit of help with the antispam plugin
by Anthony Papillion 08 Apr '15

08 Apr '15

Hello Everyone, I'm running the antispam plugin on Dovecot 2.0.19 on Ubuntu Server 14.04 and I can't seem to get it to work. In the IMAP section of dovecot.conf I have the following lines: protocol imap { mail_plugins = $mail_plugins imap_quota imap_acl antispam # mail_plugins = $mail_plugins imap_quota imap_acl imap_client_workarounds = tb-extra-mailbox-sep # Maximum number of IMAP connections allowed for a user from each IP address. # NOTE: The username is compared case-sensitively. # Default is 10. # Increase it to avoid issue like below: # "Maximum number of concurrent IMAP connections exceeded" mail_max_userip_connections = 20 plugin { antispam_debug_target = syslog antispam_verbose_debug = 1 antispam_backend = pipe antispam_trash = Trash antispam_spam = Junk antispam_pipe_program_spam_arg = --spam antispam_pipe_program_notspam_arg = --ham antispam_pipe_program = /usr/bin/sa-learn antispam_pipe_program_args = --username=%Lu } } For some reason, when I try to move something to Junk, I get the following in my syslog: Mar 31 18:27:16 anonymail imap: antispam: plugin initialising (2.0-notgit) Mar 31 18:27:16 anonymail imap: antispam: verbose debug enabled Mar 31 18:27:16 anonymail imap: antispam: "Junk" is exact match spam folder Mar 31 18:27:16 anonymail imap: antispam: no unsure folders Mar 31 18:27:16 anonymail imap: antispam: "Trash" is exact match trash folder Mar 31 18:27:16 anonymail imap: antispam: pipe backend spam argument = --spam Mar 31 18:27:16 anonymail imap: antispam: pipe backend not-spam argument = --ham Mar 31 18:27:16 anonymail imap: antispam: pipe backend program = /usr/bin/sa-learn Mar 31 18:27:16 anonymail imap: antispam: pipe backend program arg[0] = --username=anthony(a)cajuntechie.org Mar 31 18:27:16 anonymail imap: antispam: pipe backend tmpdir /tmp Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_unsure(Junk): 0 Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_trash(INBOX): 0 Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_trash(Junk): 0 Mar 31 18:27:19 anonymail imap: antispam: mail copy: from trash: 0, to trash: 0 Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_spam(INBOX): 0 Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_spam(Junk): 1 Mar 31 18:27:19 anonymail imap: antispam: mailbox_is_unsure(INBOX): 0 Mar 31 18:27:19 anonymail imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 Mar 31 18:27:19 anonymail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Mar 31 18:27:19 anonymail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Mar 31 18:27:19 anonymail imap: antispam: running mailtrain backend program parameter 1 --username=anthony(a)cajuntechie.org Mar 31 18:27:19 anonymail imap: antispam: running mailtrain backend program parameter 2 --spam Mar 31 18:27:21 anonymail imap: antispam: run program failed with exit code -1 This is probably a permissions issue but I'm not able to debug it. Can anyone offer me any clues as to what I might be doing wrong or how I might fix it? Thanks, Anthony -- Anthony Papillion Phone: 1.918.631.7331 VoIP (SIP): 1259010(a)localphone.com XMPP Chat: cypher(a)chat.cpunk.us Fingerprint: 65EF73EC 8B57F6B1 8C475BD4 426088AC FE21B251 PGP Key: http://www.cajuntechie.org/p/my-pgp-key.html

4 16

can't create folders under shared mailbox's INBOX
by luke.bigum＠lmax.com 08 Apr '15

08 Apr '15

Hello, I have a namespace / ACL problem with shared mailboxes that I can't figure out. I have a local user tam(a)crm.yb.lmax that shares it's INBOX and all other folders with on LDAP group. Members of that group can't create a folder under the shared local user's INBOX: [08-Apr-2015 11:43:05 +0000]: [9501] S: * MYRIGHTS tam(a)crm.yb.lmax lrwstipekxcd [08-Apr-2015 11:43:05 +0000]: [9501] S: A0004 OK Myrights completed. [08-Apr-2015 11:43:05 +0000]: [9501] C: A0005 CREATE tam(a)crm.yb.lmax/Templates [08-Apr-2015 11:43:05 +0000]: [9501] S: A0005 NO [NOPERM] Permission denied I *can* create a folder underneath another folder of the same shared user that already exists: [08-Apr-2015 11:43:47 +0000]: [99CE] S: * MYRIGHTS tam(a)crm.yb.lmax/Drafts lrwstipekxcd [08-Apr-2015 11:43:47 +0000]: [99CE] S: A0004 OK Myrights completed. [08-Apr-2015 11:43:47 +0000]: [99CE] C: A0005 CREATE tam(a)crm.yb.lmax/Drafts/Test [08-Apr-2015 11:43:47 +0000]: [99CE] S: A0005 OK Create completed. Creating the subfolder as the local user itself works fine: [08-Apr-2015 11:35:35 +0000]: [4E9C] C: A0005 CREATE INBOX/Templates [08-Apr-2015 11:35:35 +0000]: [4E9C] S: A0005 OK Create completed. However the local user creates INBOX/Templates, whereas the ldap user is creating under tam(a)crm.yb.lmax/Templates. Is this an artifact of how we've set up namespaces below? Thanks, -Luke [root@localhost dovecot]# doveconf -n # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_master_user_separator = * default_login_user = vmail disable_plaintext_auth = no doveadm_password = secret doveadm_port = 12345 first_valid_gid = 490 first_valid_uid = 490 imapc_ssl_verify = no listen = * mail_access_groups = vmail mail_location = mdbox:~/mdbox/ mail_plugins = " zlib acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mdbox_preallocate_space = yes mdbox_rotate_size = 10 M namespace { hidden = no ignore_on_failure = no inbox = no list = yes location = mdbox:/srv/mail/%%d/%%n/mdbox prefix = %%u/ separator = / subscriptions = yes type = shared } namespace personal { hidden = yes inbox = yes location = mailbox LMAX-Sent { auto = subscribe } mailbox Sent { auto = subscribe special_use = \Sent } prefix = INBOX/ separator = / subscriptions = yes type = private } passdb { args = scheme=SSHA512 /etc/dovecot/local-users.passdb driver = passwd-file } passdb { args = scheme=SSHA512 /etc/dovecot/master-users.passdb driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap skip = authenticated } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db sieve = ~/%d/%n/.dovecot.sieve sieve_dir = ~/%d/%n/sieve sieve_extensions = +notify +imapflags +vacation-seconds sieve_vacation_min_period = 10s zlib_save = gz zlib_save_level = 6 } protocols = imap lmtp sieve replication_dsync_parameters = -d -l 30 -U service auth { unix_listener auth-userdb { group = vmail user = vmail } } service config { unix_listener config { user = vmail } } service imap-login { process_limit = 500 process_min_avail = 2 user = vmail } service imap-postlogin { executable = script-login /etc/dovecot/ldap_groups.sh user = vmail } service imap { executable = imap imap-postlogin } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/pki/tls/certs/localhost.crt ssl_client_ca_file = /etc/pki/tls/certs/ca-bundle.crt ssl_key = </etc/pki/tls/private/localhost.key userdb { args = /etc/dovecot/local-users.userdb driver = passwd-file } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = " zlib acl imap_acl" } --- LMAX Exchange, Yellow Building, 1A Nicholas Road, London W11 4AN http://www.LMAX.com/ --- #1 Fastest Growing Tech Company in UK - Sunday Times Tech Track 100 (2014) Awards 2015 Best FX Trading Venue - ECN/MTF - WSL Institutional Trading Awards 2014 Best Margin Sector Platform - Profit & Loss Readers' Choice Awards 2014 Best FX Trading Venue - ECN/MTF - WSL Institutional Trading Awards 2014 Best Infrastructure/Technology Initiative - WSL Institutional Trading Awards 2013 #15 Fastest Growing Tech Company in UK - Sunday Times Tech Track 100 2013 Best Overall Testing Project - The European Software Testing Awards 2013 Best Margin Sector Platform - Profit & Loss Readers' Choice Awards 2013 Best FX Trading Platform - ECN/MTF - WSL Institutional Trading Awards 2013 Best Executing Venue - Forex Magnates Awards 2011 Best Trading System - Financial Sector Technology Awards 2011 Innovative Programming Framework - Oracle Duke's Choice Awards --- FX and CFDs are leveraged products that can result in losses exceeding your deposit. They are not suitable for everyone so please ensure you fully understand the risks involved. This message and its attachments are confidential, may not be disclosed or used by any person other than the addressee and are intended only for the named recipient(s). This message is not intended for any recipient(s) who based on their nationality, place of business, domicile or for any other reason, is/are subject to local laws or regulations which prohibit the provision of such products and services. This message is subject to the terms at http://www.lmax.com/pdf/general-disclaimers.pdf however if you cannot access these, please notify us by replying to this email and we will send you the terms. If you are not the intended recipient, please notify the sender immediately and delete any copies of this message. LMAX Exchange is the trading name of LMAX Limited. LMAX Limited operates a multilateral trading facility. LMAX Limited is authorised and regulated by the Financial Conduct Authority (firm registration number 509778) and is a company registered in England and Wales (number 6505809). LMAX Hong Kong Limited is a wholly-owned subsidiary of LMAX Limited. LMAX Hong Kong is licensed by the Securities and Futures Commission in Hong Kong to conduct Type 3 (leveraged foreign exchange trading) regulated activity with CE Number BDV088.

1 0

ACL syntax for setting specified folders within Maildir/ read-only for owner
by kepa 08 Apr '15

08 Apr '15

Hi, I have dovecot (2.2.16, see dovecot -n at end) installed to /opt on CentOS 6 for access on a local network. I would like to create an archival mail account which will reduce the primary account file size and still make older emails easily accessible. How can I set specified folders in this Maildir read-only with ACL? For example, I included this in the dovecot-acl file to specify protected folders in the archives@ Maildir but it did not work: "Email 2013/*" user=archives lrs "Email 2014/*" user=archives lrs Also tried this on folders without spaces with no success (the folders were still delete-able by the user via the Thunderbird client). Each "Email..." folder has several child folders that should also be read-only. BTW, what is the maximum size for a Maildir that Dovecot can comfortably handle? Thanks! Kepa dovecot -n: # 2.2.16: /opt/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.12.2.el6.x86_64 x86_64 CentOS release 6.6 (Final) mail_location = maildir:~/Maildir mail_plugins = acl namespace inbox { inbox = yes location = [mailbox info ...] plugin { acl = vfile:/opt/dovecot/etc/dovecot/dovecot-acl } protocols = imap service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = acl imap_acl

2 1

Users can't use Dovecot IMAP
by John Lewis 08 Apr '15

08 Apr '15

Every time a user logs into Dovcot's IMAP service PAM closes the session immediately after it opens. I would like a user to have a session open long enough to read some emails. dictator@drakeclasher:~$ sudo dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.14-0.bpo.1-amd64 x86_64 Debian 7.8 mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = failure_show_msg=yes %s driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = mail driver = pam } Apr 6 21:57:29 drakeclasher su[2346]: pam_unix(su:session): session opened for user mailtest by dictator(uid=0) Apr 6 21:59:55 drakeclasher su[2346]: pam_unix(su:session): session closed for user mailtest dictator@drakeclasher:~$ groups mailtest mailtest : Domain Users mail users

2 2

Dovecot keeps creating info files in mail directory instead of home
by Jeffrey 'jf' Lim 08 Apr '15

08 Apr '15

I've been trying to troubleshoot this for a while now, and I'm really at a loss. My userdb is set up correctly to return home, and mail, and a test with 'doveadm user' verifies this: # doveadm user user@domain field value uid 1000 gid 1000 home /var/domain/user mail maildir:/var/mail/user@domain I've reloaded, restarted, stopped and started dovecot again - and even deleted the info files in the mail directory just to be sure - but each and every time I log in with imap, dovecot recreates the files again (dovecot.index.log, dovecot-uidlist, etc.) in the mail directory instead of home. I've even made sure just in case that the home directory is accessible to all, and chmod 777, but nothing gets created there. And I dont get any errors at all in the logs. I'm on the latest version (2.2.16). -jf -- He who settles on the idea of the intelligent man as a static entity only shows himself to be a fool. Mensan / Full-Stack Technical Polymath / System Administrator 12 years over the entire web stack: Performance, Sysadmin, Ruby and Frontend

3 3

Authentication with Samba using Kerberos fails
by Justin Clacherty 08 Apr '15

08 Apr '15

Hi, I've been having some problems getting GSSAPI authentication going against a samba (4.2) server and am hoping someone can point me in the right direction. I've searched through Google and haven't managed to find a solution yet. I followed the config instructions at http://wiki2.dovecot.org/Authentication/Kerberos and run through the testing. Testing from the server with telnet does as expected i.e. I get the "+" after I try "a authenticate GSSAPI". However, when I go to test from Thunderbird on while logged in on a Windows PC joined to the domain authentication fails and I see the following in mail.log (I'm running Ubuntu 14.04.2 LTS). Apr 8 11:49:18 server dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 8 11:49:18 server dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 8 11:49:18 server dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libmech_gssapi.so Apr 8 11:49:18 server dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Apr 8 11:49:18 server dovecot: auth: Debug: auth client connected (pid=17667) Apr 8 11:49:18 server dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011secured#011session=e8xMvSwTQgDAqCpl#011lip=192.168.1.1#011rip=192.168.1.101#011lport=143#011rport=49986 Apr 8 11:49:18 server dovecot: auth: Debug: gssapi(?,192.168.42.101,<e8xMvSwTQgDAqCpl>): Obtaining credentials for imap(a)server.corp.mydomain.com Apr 8 11:49:18 server dovecot: auth: Debug: client passdb out: CONT#0111#011 Apr 8 11:49:18 server dovecot: auth: Debug: client in: CONT<hidden> Apr 8 11:49:18 server dovecot: auth: Debug: gssapi(me(a)corp.mydomain.com,192.168.1.101,<e8xMvSwTQgDAqCpl>): security context state completed. Apr 8 11:49:18 server dovecot: auth: Debug: client passdb out: CONT#0111#011YIGVBgkqhkiG9xIBAgICAG+BhTCBgqADAgEFoQMCAQ+idjB0oAMCAReibQRrkGiOLsky4fbzWGzpxgW4mjmpjvNsiCqH8MnsUKviP9v1oVLPXSVkqFzFUiCLAd130ldnf742o/inz9Dx6e0aETwDKnnZu9OUD2nCGg/f5zA20IXGWR1zXVJi3hEB8nmrLgaENhyX0JMiE6g= Apr 8 11:49:18 server dovecot: auth: Debug: client in: CONT<hidden> Apr 8 11:49:18 server dovecot: auth: Debug: gssapi(me(a)corp.mydomain.com,192.168.1.101,<e8xMvSwTQgDAqCpl>): Negotiated security layer Apr 8 11:49:18 server dovecot: auth: Debug: client passdb out: CONT#0111#011BQQF/wAMAAAAAAAAIvajggH////ubQhCZGfeuWGZQ7w= Apr 8 11:49:18 server dovecot: auth: Debug: client in: CONT<hidden> Apr 8 11:49:18 server dovecot: auth: Panic: file auth-request.c: line 716 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Apr 8 11:49:18 server dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x5e271) [0x7f524a7da271] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e34e) [0x7f524a7da34e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f524a795a9e] -> dovecot/auth(+0x15162) [0x7f524ac7e162] -> dovecot/auth(auth_request_lookup_credentials+0x22) [0x7f524ac7f8d2] -> /usr/lib/dovecot/modules/auth/libmech_gssapi.so(+0x20d4) [0x7f52499450d4] -> dovecot/auth(auth_request_handler_auth_continue+0xd1) [0x7f524ac81391] -> dovecot/auth(+0x1052a) [0x7f524ac7952a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f524a7ea247] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f524a7eafd7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f524a7e9de8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f524a79ac93] -> dovecot/auth(main+0x38c) [0x7f524ac7750c] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f5249d8dec5] -> dovecot/auth(+0xe6d9) [0x7f524ac776d9] Apr 8 11:49:18 server dovecot: auth: Fatal: master: service(auth): child 17668 killed with signal 6 (core dumps disabled) Apr 8 11:49:18 server dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=17667, EOF) Apr 8 11:49:19 server dovecot: imap-login: Disconnected (auth process communication failure): user=<>, method=GSSAPI, rip=192.168.1.101, lip=192.168.1.1, TLS, session=<e8xMvSwTQgDAqCpl> Relevant parts of my config: auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = yes auth_debug_passwords = no auth_default_realm = CORP.MYDOMAIN.COM auth_failure_delay = 2 secs auth_gssapi_hostname = server.corp.mydomain.com auth_krb5_keytab = /etc/dovecot/krb5.keytab auth_master_user_separator = auth_mechanisms = gssapi auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 userdb { args = uid=dovecot gid=dovecot home=/var/vmail/%u default_fields = driver = static override_fields = } Any help greatly appreciated. Cheers, Justin.

1 0

Search Public Folder
by Bobber 08 Apr '15

08 Apr '15

I'm trying to use doveadm fetch to search a folder that is public for all users. The command runs but the output is empty. There are no error messages. Is there anything different to do in order to search public folders? -- *Bob Wooldridge*

1 0

Search Public Folder
by Bob Wooldridge 08 Apr '15

08 Apr '15

I'm trying to use doveadm fetch to search a folder that is public for all users. The command runs but the output is empty. There are no error messages. Is there anything different to do in order to search public folders? -- Bob Wooldridge EDM Incorporated http://www.edm-inc.com

1 0

Deleting empty folders
by Samuel Williams 07 Apr '15

07 Apr '15

So, along with the problem of lots of folders ending in 1 1 1 1, I'd like to have a strategy to delete these. I was trying to understand if it is possible to use http://linux.die.net/man/1/doveadm-expunge to delete empty folders, but without also deleting messages? Is this possible and if so what is the syntax? Kind regards, Samuel

5 10

What to read about interactions
by Andrew Sullivan 07 Apr '15

07 Apr '15

Hi, TL;DR: I am having a hard time synthesizing the information I need out of the website/wiki documentation, and google isn't turning up what I need, so I'm looking for advice on what I should read next to understand the way aliases, dovecot's lmtp, and pigeonhole work together. Details below. I've been using dovecot happily for some years, but in a recent migration of my mail server I set up something that I think will be slightly easier to maintain. I now have a single (in my case postgres) database backing all user names and so on, with postfix relying on dovecot auth for user validation and delivery. I have the usual anti-spam machinery in there, and have started using the (for me new) pigeonhole implementation of sieve. (My old mail system was built around the earlier dovecot implementation, and while I've patched it over time it's really pretty creaky.) On the whole, this all seems very nice, but I'm having a hard time understanding the details of what interacts with what other bits when. In particular, my mail system is known by several different names, and I thought it'd be much handier to have everything land in one real mailbox, since I could sort the inbound mail into different mailboxes without a lot of trouble using seive. This has turned out to be slightly trickier than I thought it ought to be (procmail is in some ways easier), and I've come to the conclusion that I don't have a strong foundation in exactly how this is supposed to work. Apart from reading the code (which would probably at this point be hard enough for me so as to make it impossible), are there things I ought to read to understand this better? I've read the seive RFCs, but while that gives me a clue about what ought to happen protocol-wise, it isn't helping me at all to understand the interaction among the different subsystems so that I can see clearly how different parts of the delivery chain are interacting. I'm sure there's some crucial bit of, "Everyone knows that," that I've overlooked, and I thought it would be better to ask for the FM than just to read randomly until I stumbled on it. Thanks, A -- Andrew Sullivan ajs(a)crankycanuck.ca

2 1

currupt folder structure --> INBOX 1 1 1 1 1
by Thorben Hemmler 07 Apr '15

07 Apr '15

Hi all! I´ve got a problem with some (not all) of my mailboxes. If you see, some folders got strange names. 41943652 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:42 INBOX 1 42205306 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:46 INBOX 1 1 42336882 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:48 INBOX 1 1 1 42337295 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:49 INBOX 1 1 1 1 42598861 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:51 INBOX 1 1 1 1 1 42730114 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:54 INBOX 1 1 1 1 1 1 42730261 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:57 INBOX 1 1 1 1 1 1 1 42730276 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:57 INBOX 1 1 1 1 1 1 1 1 42730291 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:58 INBOX 1 1 1 1 1 1 1 1 1 42730306 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 10:59 INBOX 1 1 1 1 1 1 1 1 1 1 42730321 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:00 INBOX 1 1 1 1 1 1 1 1 1 1 1 42730336 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:01 INBOX 1 1 1 1 1 1 1 1 1 1 1 1 42730351 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:02 INBOX 1 1 1 1 1 1 1 1 1 1 1 1 1 42730366 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:03 INBOX 1 1 1 1 1 1 1 1 1 1 1 1 1 1 42730381 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:04 INBOX 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 42730400 4.0K drwx------ 3 vmail vmail 4.0K Mar 25 11:05 INBOX 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 and so on..... Any ideas what I´m doing wrong? Thanks in advance. Best regards, Thorben

1 0

Using dovecot to serve an email archive
by Ramón Casares 06 Apr '15

06 Apr '15

I have a collection of old email messages, archived as follows: 1) One file per message. 2) Messages (=files) distributed in a hierarchy of dirs under mailarch. 3) Each file (=message) uses the name <seconds>.R<sha1>.mail Here <seconds> is the date of the message, expressed as the number of seconds from 1-1-1970 00:00 in 10 digits, and <sha1> is the SHA-1 hash of the message contents, expressed in hexadecimal, [0-9a-f]. The advantages of this file naming scheme are: 1) All important metadata are in the file name. 2) You can verify the integrity of each message using only its own data and metadata. 3) Each file name is unique. 4) It is compatible with maildir (qmail) unique names (uniq). 5) If a dir is sorted alphabetically, then it is ordered chronologically. 6) The extension .mail can be used to call an appropriate message reader. >From time to time I add new messages and dirs to the archive, but some dirs are closed forever, so it would be nice to tar.gz'ip them. Now I am looking for an IMAP server that can serve this collection in a read-only (ro) manner. That is, the server should not write the mailarch dir at all. I am exploring two possibilities: 1) using hard links. 2) using FUSE to set a rw layer on top of the ro archive layer. But I am new to dovecot, so perhaps there is an easier way to achieve what I want, and therefore I would appreciate very much your advice.

2 2

Sieve/ManageSieve documentation on Wiki2
by Robert Blayzor 06 Apr '15

06 Apr '15

Is it possible the Sieve/ManageSieve documentation on the Wiki can be cleaned up? It's incredibly confusing now. Some of the Sieve configuration information says certain options are deprecated, but then the example on how to configure it uses the deprecated options rather than what they *should* be now. More confusion is the sieve plugin configuration listing those same deprecated options, yet when you pull the document on how to configure ManageSieve, it (again) uses deprecated configuration information? http://wiki2.dovecot.org/Pigeonhole/ManageSieve/Configuration Or am I missing something? -- Robert inoc.net!rblayzor http://inoc.net/

2 1

IMAP logging / rawlog
by G H 06 Apr '15

06 Apr '15

I am trying to monitor with Nagios that my phones are consistently checking into dovecot via IMAP. I used to be able to parse syslog for imap-login messages. I have since updated my phones, the phoness email client (k9-mail) and dovecot. Now the imap-login messages are few and far between. However, I can clearly see via tcpdump that some traffic is happening when I click refresh on k9. I enabled "rawlog" support in dovecot, but it doesn't seem to write to disc frequently enough. 1) Does anyone have a better suggestion for how to monitor that my phone is checking in regularly? 2) Is there a flush-to-disk capability for rawlog in dovecot? 3) Also, when you have imap_zlib plugin enabled, the rawlog logs the raw compressed data instead of the decompressed IMAP commands. Is this an oversight? (FYI: k9 is calling SELECT "INBOX" on refresh) Thanks, G H

2 1

Question About Dovadm syntax
by Kenneth Ulrich 06 Apr '15

06 Apr '15

Hello All, I just have a quick question about doveadm commands. 1. Is there a command that we can use to count emails for a particular end user? 2. If an end user needed to copy/move emails from one account to another, is there a command? Also, I've searched Google results, numerous Ubuntu, CentOS, Fedora forums, Doveadm forums, and read the DoveCot/DoveADM man pages numerous times and either I am over looking, or I am not understanding. Thus why I am asking here.

2 1

speaking of sieve scripts... how to selectively not send vacation autoreply
by Harondel J. Sibble 04 Apr '15

04 Apr '15

Don't need to block anyone like in the "Re: Dovecot Oy merger with Open-Xchange AG" thread, but when I have my vacation recipie active, I'd like it to NOT reply to certain addresses. I tried the following, you can see the section with if header :contains "addressIdontwant(a)repliedtoo.tld" is commented out, once I'd added that section, no Vacation messages went out at all. Googling and reading the wiki and recipie suggestions doesn't make it clear how to exempt a list of addresses from ever receiving a vacation response. Suggestions on additional reading or solutions? require ["fileinto", "vacation"]; if header :comparator "i;ascii-casemap" :contains "Subject" "**SPAM**" { fileinto "Trash"; stop; } #if header :contains "addressIdontwant(a)repliedtoo.tld" { # stop; #} vacation # Reply at most once a day to a same sender :days 1 :subject "Changes to email addresses effective Jan 01/15" # List of recipient addresses which are included in the auto replying. # If a mail's recipient is not on this list, no vacation reply is sent for it. :addresses ["user(a)repliedtoo.tld"] This is on a Dovecot 1.x system that is slated for an upgrade soon. -- Harondel J. Sibble Sibble Computer Consulting Ltd. Creating Solutions for the small and medium business computer user. harondel(a)pdscc.com (use pgp keyid 0x3CC3CFCE not 0x3AD5C11D) http://www.pdscc.com Blog: http://www.pdscc.com/blog (604) 739-3709 (voice)

3 3

Dovecot Oy merger with Open-Xchange AG
by Timo Sirainen 03 Apr '15

03 Apr '15

Hi all, Today I can finally announce that Dovecot Oy company has merged with Open-Xchange AG. This helps us to get more Dovecot developers, support people and so on. Most importantly, eventually it should allow me to get back to doing what I like the most: Designing new and interesting stuff for Dovecot and perfecting the old stuff :) OX is a great match to Dovecot going forward. They also really like open source and share our plans for the future. Nothing big will change as a result of this merger: Dovecot will stay Dovecot with its own name and release schedules. We're not going to force OX and Dovecot to be the same product, other than having a somewhat deeper integration between them. Here are the press release links about it: http://www.dovecot.fi/open-xchange-and-dovecot-announce-merger-to-create-wo… http://www.open-xchange.com/dovecot http://www.open-xchange.com/announcements/18

16 32

EL6 EE package dependencies
by Will Yardley 03 Apr '15

03 Apr '15

I've been trying to upgrade Dovecot-ee package (on EL6/x86_64) from 2.2.15.8-1 to 2.2.16.2-1. It's complaining on these two dependencies: liblz4.so.1 libtextcat.so.0 These would both seem to be related to plugins, and don't seem to be required as package dependencies by the RPM from what I can see from the SRPM. Anyone know what packages I need to satisfy these dependencies?

3 5

Install process breaks its self by design
by Merlin at Desktop Masters 02 Apr '15

02 Apr '15

Greetings, I just tried to install Dovecot for the first time. It was on a virgin Ubuntu/Debian server (Version: 1:2.2.9-1ubuntu5) and the install failed. After a bit of struggling I worked out that the install fails BY DESIGN. Spoke about this with a few people and we decided it was best to report this issue and request that you redesign the packing so it does not fail. The reason it fails is as follows... When you install it asks you if you want to use self signed certificates. I have certificates so I said, "No". At the end of the install the script tries to start dovecot. It cannot because the service does not have certificates so it fails. This causes the script to abort and the other packages not to install and breaks the install process. I had to purge dovecot, then install it with the self signed certificates. So we have 2 issues here. 1. Why allow people to not install certificates if it is just going to break the install and confuse them. 2. Why are you starting the service right after install when dovecot clearly requires manual configuration as part of the setup. I recommend you resolve this by NOT starting the service as part of the install unless it is an upgrade and the service was already running. ~ Merlin

2 1

Re: Install process breaks its self by design
by Merlin at Desktop Masters 02 Apr '15

02 Apr '15

Correct Correct Correct And when I went to the page it lead me here. Whomever is making the .deb packages needs to be made aware of this. Can you please point me into a direction? ~ Merlin On 4/1/2015 4:33 PM, edgar(a)pettijohn-web.com wrote: > On 2015-03-29 13:58, Merlin at Desktop Masters wrote: >> Greetings, >> >> I just tried to install Dovecot for the first time. It was on a >> virgin Ubuntu/Debian server (Version: 1:2.2.9-1ubuntu5) and the >> install failed. After a bit of struggling I worked out that the >> install fails BY DESIGN. Spoke about this with a few people and we >> decided it was best to report this issue and request that you redesign >> the packing so it does not fail. The reason it fails is as follows... >> > > This would be on Debian/Ubuntu. > >> When you install it asks you if you want to use self signed >> certificates. I have certificates so I said, "No". At the end of the >> install the script tries to start dovecot. It cannot because the >> service does not have certificates so it fails. This causes the >> script to abort and the other packages not to install and breaks the >> install process. I had to purge dovecot, then install it with the >> self signed certificates. >> >> So we have 2 issues here. 1. Why allow people to not install >> certificates if it is just going to break the install and confuse >> them. > > This would be on Debian/Ubuntu. > > 2. Why are you starting the service right after install when >> dovecot clearly requires manual configuration as part of the setup. > > This would be on Debian/Ubuntu. > >> >> I recommend you resolve this by NOT starting the service as part of >> the install unless it is an upgrade and the service was already >> running. >> > > This would be on Debian/Ubuntu. > >> ~ Merlin >

3 3

Mismatch search user in ldap
by Jean-François Sénéchal 01 Apr '15

01 Apr '15

Hi I do not understand the right configuration I had a loop worries the users received the same message multiple times and testing other users config was not found so what is the right config to the following scheme My ldap scheme : mail: jf(a)marche.be gosaMailForwardingAddress: jf(a)citoyen.marche.be gosaMailAlternateAddress: toto(a)marche.be dovecot-ldap.conf.ext user_filter = (&(objectClass=posixAccount)(uid=%n)) virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap_virtual_recipients.cf virtual_alias_maps = proxy:ldap:/etc/postfix/ldap_virtual_recipients.cf ldap_virtual_recipients.cf : server_host = localhost search_base = ou=Users,ou=Citoyens,dc=marche,dc=be scope = sub bind = no version = 3 query_filter = (&(|(mail=%s)(gosaMailAlternateAddress=%s)(gosaMailForwardingAddress=%s)(uid=%s))(objectClass=gosaMailAccount)) result_attribute = uid is it correct ? thanks

1 0

multiple imap servers for high availability
by Robert Fantini 31 Mar '15

31 Mar '15

Hello, We run imap for our domain at our lan. I'd like to set up a backup mirror that has imap storage always duplicated. Then using something like heartbeat to share the imapd IP address . Could someone point me to documents , if any , that give ideas on how to set up the mirror? best regards, Rob

2 2

Migrating from Cyrus to Dovecot
by Miloslav Hůla 31 Mar '15

31 Mar '15

Hi, we are migrating from Cyrus 2.3.7 to Dovecot 2.2.13. We have ~7000 maildirs with ~500GB. Our goal is to do the migration without users have notice and with the shortest service downtime. The users use IMAP (with shared folders and ACL), POP3 and sieve filters. As a first choice, we tried the Dovecot's dsync tool. First tests were great, but we are not able to change the Cyrus auth backend for migration. Moreover, this migration seems too slow for us. As a second try, we tried the cyrus2dovecot migrating Perl scripts (and their derivates) from Wiki2. More or less they works but we found we need more control during the migration. So, as a third try, we wrote own migrating scripts. And thanks to the cyrus2dovecot it wasn't too much complicated. And there are my questions: A) Files and dirs timestamps The mtime of email file is important as an internal date as I found on Wiki2. But what about timestamps of cur/new/tmp directories or Dovecot's internal files line dovecot-uidlist? Do they play some role here? B) The 128 bit mailbox UID The Wiki2 speaks about 128 bit mailbox UID at first line of dovecot-uidlist. Cyrus preserves only 64 bit UID. Is this mailbox UID required by Dovecot? If so, can we use 0000000000000000501100008c4a11c1 (Cyrus UID padded by zeros)? C) Format of dovecot-uidlist records Wiki2 shows two examples: 25006 :1276528487.M364837P9451.kurkku,S=1355,W=1394:2, 25017 W2481 :1276533073.M242911P3632.kurkku:2,F Which format is preferred? Or what the benefits are? D) Converting between CRLF and LF If I understand correctly, Dovecot stores emails with LF only. We have all emails with CRLF now on Cyrus and converting them to LF only is a little more time consuming. Is there any benefit to do that? Or can we live with 'mail_save_crlf' without problems? E) POP3 backend I found many informations about IMAP internals but few on POP3 internals. What do I need to do POP3 migration transparent for user? Many thanks for any answers. Regards, Milo

2 2

quota setup assistance (postfix+dovecot+mysql)
by rooster 31 Mar '15

31 Mar '15

Hello list, I have been struggling with establishing a working installation of dovecot with mySQL quota support. I have not been able to find a guide or tutorial that works for the current revisions of software I have at my disposal. Most notably, the error I see in the mail log is as follows : Mar 23 00:55:31 host dovecot: lmtp(328): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 23 00:55:31 host dovecot: lmtp(328): Error: dlopen(/usr/lib/dovecot/modules/lib11_imap_quota_plugin.so) failed: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: undefined symbol: command_unregister Mar 23 00:55:31 host dovecot: lmtp(328): Fatal: Couldn't load required plugins I have attached my dovecot -n output. The installed revision of dovecot is 2.2.9 on ubuntu 14.04.02 LTS. Thank you in advance. --

4 21

sieve rule for "header don't exist"
by Reindl Harald 30 Mar '15

30 Mar '15

is there a way to expresse when the header "X-Spam-Status" *do not* exist move the message to a different folder? :contains, :matches and :is are not helpful here background: the spamass-milter option -B is lacking the spamassassin headers in case of milter-rejects and via sendmail generated BCC while flagged messages contain the headers - so it would be nice to move the rejected ones to a subfolder "REJECTED" instead into the inbox

2 2

Problem connecting to an imap account with Dovecot
by Laurent Rathle 29 Mar '15

29 Mar '15

Hello, I have several accounts on my server. I can’t connect to one of them using Apple mail on Mac or IOS to create my account or read my mail in these applications. I can send mails to this address and read them with my Horde webmail. I have these messages in the log : Mar 28 12:21:49 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13705, TLS, session=<vKWGdFcSXAAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:50 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=26, sent=435 Mar 28 12:21:50 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13707, TLS, session=<Sw2LdFcSXgAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:51 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=89, sent=1447 Mar 28 12:21:21 sd-41648 postfix/master[31571]: message repeated 4 times: [ warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused] Mar 28 12:21:52 sd-41648 postfix/master[31571]: warning: master_wakeup_timer_event: service qmgr(public/qmgr): Connection refused Mar 28 12:21:53 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13709, TLS, session=<cDPCdFcScwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:54 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=44, sent=457 Mar 28 12:21:54 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13711, TLS, session=<9vDSdFcSnQAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:56 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=860, sent=132669 Mar 28 12:21:57 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13713, TLS, session=<1pvxdFcSpwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:58 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=1266, sent=108893 Mar 28 12:22:12 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13720, TLS, session=<XCXadVcStwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:22:20 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=309, sent=11066 Mar 28 12:22:21 sd-41648 postfix/master[31571]: warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused Mar 28 12:22:23 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13724, TLS, session=<QAiBdlcSwgAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:22:23 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=214, sent=3159 I have : Plesk 12 Ubuntu 14.04.2 Dovecot 2.2.12 You can see my configuration file here : http://pastie.org/10059309 What should I do ? Thank you

2 2

Error after setting up fts /solr for Open-Xchange
by zucca＠systemschmiede.com 28 Mar '15

28 Mar '15

Hi List, i have tried to get fts / solr running with virtual all folder with Open-Xchange. I followed a pretty well written howto from Open-Xchanges Intranet, and i first thought everything was running smooth, as the first one or two searches were successful. However now whenever i try to search again for something in the virtual "all folders" Open-Xchange tells me: *Error* *Folder "virtual.all" has been closed on mail server xxx.xxx.xxx.xxx Probably your request took too long.** * /var/log/mail.err says: Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Panic: file fts-search-serialize.c: line 63 (fts_search_deserialize_add_idx): assertion failed: (*idx < buf->used) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6c15f) [0x7f5110f5e15f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6c1be) [0x7f5110f5e1be] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5110f1740e] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc847) [0x7f510fb07847] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_search_deserialize_add_nonmatches+0x1c) [0x7f510fb0799c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd263) [0x7f510fb08263] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd3e6) [0x7f510fb083e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa812e) [0x7f511127112e] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x4b) [0x7f51112717bb] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x13e) [0x7f510f8f2a7e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x7e) [0x7f510f8f29be] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x27) [0x7f511124b277] -> dovecot/imap(+0x1f27f) [0x7f511172527f] -> dovecot/imap(imap_search_start+0xfd) [0x7f51117256fd] -> dovecot/imap(cmd_sort+0x205) [0x7f511171b6c5] -> dovecot/imap(command_exec+0x3c) [0x7f511171fc4c] -> dovecot/imap(+0x18c30) [0x7f511171ec30] -> dovecot/imap(+0x18cea) [0x7f511171ecea] -> dovecot/imap(client_handle_input+0x115) [0x7f511171efb5] -> dovecot/imap(client_input+0x75) [0x7f511171f385] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f5110f6efbe] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7f5110f6ffb7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f5110f6f049] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f5110f6f0c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5110f1c7b3] -> dovecot/imap(main+0x2ae) [0x7f511171352e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5110b85ead] -> dovecot/imap(+0xd69d) [0x7f511171369d] Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Fatal: master: service(imap): child 6594 killed with signal 6 (core dumps disabled) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Panic: file fts-search-serialize.c: line 63 (fts_search_deserialize_add_idx): assertion failed: (*idx < buf->used) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6c15f) [0x7fae1c14c15f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6c1be) [0x7fae1c14c1be] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fae1c10540e] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc847) [0x7fae1acf5847] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_search_deserialize_add_nonmatches+0x1c) [0x7fae1acf599c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd263) [0x7fae1acf6263] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd3e6) [0x7fae1acf63e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa812e) [0x7fae1c45f12e] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x4b) [0x7fae1c45f7bb] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x13e) [0x7fae1aae0a7e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x7e) [0x7fae1aae09be] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x27) [0x7fae1c439277] -> dovecot/imap(+0x1f27f) [0x7fae1c91327f] -> dovecot/imap(imap_search_start+0xfd) [0x7fae1c9136fd] -> dovecot/imap(cmd_sort+0x205) [0x7fae1c9096c5] -> dovecot/imap(command_exec+0x3c) [0x7fae1c90dc4c] -> dovecot/imap(+0x18c30) [0x7fae1c90cc30] -> dovecot/imap(+0x18cea) [0x7fae1c90ccea] -> dovecot/imap(client_handle_input+0x115) [0x7fae1c90cfb5] -> dovecot/imap(client_input+0x75) [0x7fae1c90d385] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7fae1c15cfbe] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7fae1c15dfb7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fae1c15d049] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fae1c15d0c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fae1c10a7b3] -> dovecot/imap(main+0x2ae) [0x7fae1c90152e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fae1bd73ead] -> dovecot/imap(+0xd69d) [0x7fae1c90169d] Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Fatal: master: service(imap): child 6598 killed with signal 6 (core dumps disabled) I don't even have any fts-search-serialize.c on the system... Maybe someone is able to help me? I know we're nearly there, but i can't find anything on this anywhere. If there's anything else you need to know in order to help, please let me know. Thank you very very much! Sascha _this is set under /opt/open-xchange/etc/findbasic.properties for Open-Xchange__:_ com.openexchange.find.basic.mail.allMessagesFolder = virtual.all _grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf:_ driver = mysql connect = host=localhost dbname=dbispconfig user=ispconfig password=e04a9349a47706e4f18bee2782349355 default_pass_scheme = CRYPT password_query = SELECT password FROM mail_user WHERE (login = '%u' OR email = '%u') AND disable%Ls = 'n' user_query = SELECT email as user, maildir as home, CONCAT('maildir:', maildir, '/Maildir') as mail, uid, gid, CONCAT('*:storage=', quota, 'B') AS quota_rule, CONCAT(maildir, '/.sieve') as sieve FROM mail_user WHERE (login = '%u' OR email = '%u') AND `disable%Ls` = 'n' _||dovecot --version: _2.2.13 _dovecot -n: _# 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-37-pve x86_64 Debian 7.8 simfs auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%d/%n/Maildir mail_max_userip_connections = 150 mail_plugins = " acl fts fts_solr virtual" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/shared/%%u prefix = Shared/.%%n/. separator = . subscriptions = no type = shared } namespace virtual { location = virtual:/etc/dovecot/virtual:INDEX=~/virtual mailbox all { special_use = \All } prefix = virtual. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/vmail/shared-mailboxes.db fts = solr fts_autoindex = yes fts_solr = url=http://localhost:8090/solr/ quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 500 } ssl_ca = </usr/local/ispconfig/interface/ssl/mail_mailserver_de.ca-bundle ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = " acl fts fts_solr virtual imap_acl quota imap_quota" } protocol pop3 { mail_plugins = quota virtual pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota virtual }

4 8

v2.2.16 released
by Timo Sirainen 28 Mar '15

28 Mar '15

http://dovecot.org/releases/2.2/dovecot-2.2.16.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.16.tar.gz.sig A few fixes and some imapc improvements since the release candidate. * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes dovecot.index.cache file. The cache file was rarely the problem so this just caused unnecessary slowness. * Mailbox name limits changed during mailbox creation: Each part of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up to 255 chars long (instead of 200). This also reduces the max number of hierarchical levels to 16 (instead of 20) to keep the maximum name length 4096 (a common PATH_MAX limit). The 255 char limit is hopefully large enough for migrations from all existing systems. It's also the limit on many filesystems. + director: Added director_consistent_hashing setting to enable consistent hashing (instead of the mostly-random MD5 hashing). This causes fewer user moves between backends when backend counts are changed, which may improve performance (mainly due to caching). + director: Added support for "tags", which allows one director ring to serve multiple backend clusters with different sets of users. + LMTP server: Added lmtp_user_concurrency_limit setting to limit how many LMTP deliveries can be done concurrently for a single user. + LMTP server: Added support for STARTTLS command. + If logging data is generated faster than it can be written, log a warning about it and show information about it in log process's process title in ps output. Also don't allow a single service to flood too long at the cost of delaying other services' logging. + stats: Added support for getting global statistics. + stats: Use the same session IDs as the rest of Dovecot. + stats: Plugins can now create their own statistics fields + doveadm server: Non-mail related commands can now also be used via doveadm server (TCP socket). + doveadm proxying: passdb lookup can now override doveadm_port and change the username. + doveadm: Search query supports now "oldestonly" parameter to stop immediately on the first non-match. This can be used to optimize: doveadm expunge mailbox Trash savedbefore 30d oldestonly + doveadm: Added "save" command to directly save mails to specified mailbox (bypassing Sieve). + doveadm fetch: Added body.snippet field, which returns the first 100 chars of a message without whitespace or HTML tags. The result is stored into dovecot.index.cache, so it can be fetched efficiently. + dsync: Added -t <timestamp> parameter to sync only mails newer than the given received-timestamp. + dsync: Added -F [-]<flag> parameter to sync only mails with[out] the given flag/keyword. + dsync: Added -a <mailbox> parameter to specify the virtual mailbox containing user's all mails. If this mailbox is already found to contain the wanted mail (by its GUID), the message is copied from there instead of being re-saved. (This isn't efficient enough yet for incremental replication.) + dsync: -m parameter can now specify \Special-use names for mailboxes. + imapc: Added imapc_features=gmail-migration to help migrations from GMail. See http://wiki2.dovecot.org/Migration/Gmail + imapc: Added imapc_features=search to support IMAP SEARCH command. (Currently requires ESEARCH support from remote server.) + expire plugin: Added expire_cache=yes setting to cache most of the database lookups in dovecot index files. + quota: If overquota-flag in userdb doesn't match the current quota usage, execute a configured script. + redis dict: Added support for expiring keys (:expire_secs=n) and specifying the database number (:db=n) - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if buffering was split in the middle of a UTF-8 character. This affected at least searching messages. - String sanitization for some logged output wasn't done properly: UTF-8 text could have been truncated wrongly or the truncation may not have happened at all. - fts-lucene: Lookups from virtual mailbox consisting of over 32 physical mailboxes could have caused crashes.

4 7

postfix sasl -> haproxy -> dovecot auth
by Edgaras Lukoševičius 28 Mar '15

28 Mar '15

Hello, is it possible to configure configure haproxy to work with postfix sasl and dovecot auth like this: clients -> 25:postfix -> 20025:haproxy -> 20025:auth-backend-1, 20025:auth-backend-2 The configuration I have now gives me this error randomly: 535 5.7.8 Error: authentication failed: Connection lost to authentication server This is probably because haproxy change servers while session is still active (postfix sasl don’t establish new connection to auth service every time new auth request arrives) Note that haproxy is between postfix and dovecot and is not facing clients directly, so there is no way to keep persistent connections by client ip. # POSTFIX smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = inet:127.0.0.1:20025 smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot # HAPROX frontend postfix-sasl bind 127.0.0.1:20025 default_backend dovecot-auth backend dovecot-auth mode tcp option tcplog option srvtcpka hash-type consistent balance roundrobin server mail-backend-1 31.220.19.52:20025 check server mail-backend-2 31.220.19.53:20025 check

6 18

Re: Error "Next message unexpectedly lost from mbox file"
by Joseph Tam 28 Mar '15

28 Mar '15

BehrensM <EDV2(a)BehrensM.de> writes: > Beside the lokal mailserver-account(s) there is/are pulled Mails via > imap direct from the mailprovider, the "old" solution which shall be > replaced by the new mailserver. imap direct from provider shows the > mails/Attachments in corrects size an opening works. > Only using the local mailserver fails. > ... > Mar 26 09:40:05 raspberrypi dovecot: imap(info): Error: Next message > unexpectedly lost from mbox file /home/info/mail/.INBOX at 1066141935 > (cached) I couldn't follow all that you wrote, but these errors (actually, more like warnings) usually occur if you have a mail reader or any utility that modifies a mailbox outside of dovecot's sight. For example, a mail reader that does local manipulation of mbox files rather than via IMAP. This log message is more or less saying that the indices are out of sync with respect to the mailbox, and the message that it expected to find at a file offset is not there anymore. > Mar 26 09:40:07 raspberrypi dovecot: imap(info): Panic: file > mbox-sync.c: line 1286 (mbox_sync_handle_eof_updates): assertion failed: > (trailer_size <= 2) This, though, should not happen. Your version of dovecot is rather old, so maybe an update will solve this. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Error: open() failed with file /var/vmail/... Too many open files
by Silvia Tormo 27 Mar '15

27 Mar '15

I've already tried creating etc/default/dovecot chmod +x it and inside put ulimit but didn't work. Also i've tried to put the ulimit into the /etc/init.d/dovecot linked file but i found still 1024 the limit kn dovecot. El 27/03/2015 22:03, Timo Sirainen <tss(a)iki.fi> escribió: > > On 26 Mar 2015, at 16:52, Silvia Tormo <silvia.tormo(a)addapta.com> wrote: > > > > Hello guys we have Dovecot 2.0.19 and we are getting those errors opening > > files of dovecot Too many open files, we¹ve tried to increase limits in > > /etc/security/limits > > /etc/security/ settings don't affect Dovecot (or any other server program). You need to put the ulimit commands somewhere in the init script. Or perhaps adding the ulimit command to /etc/default/dovecot would work. I don't know what's the correct Ubuntu way to do it.

1 0

Courier-dovecot migration issue: Forward and Junk flags
by Dennis Højgaard 27 Mar '15

27 Mar '15

Hello.. Another courier -> dovecot migrater here.. I ham having a bit of trouble converting the courier maildir correctly, or actually i'm almost there. The only thing i experience is that forwarded messages and messages marked as junk (in thunderbird) are downloaded again (i am using thunderbird and caching) after running the courier-dovecot-migrate.pl script and connecting to the newly configured dovecot imap server.. So i think that the Forward and Junk flag is not being converted..

3 4

Error: open() failed with file /var/vmail/... Too many open files
by Silvia Tormo 27 Mar '15

27 Mar '15

Hello guys we have Dovecot 2.0.19 and we are getting those errors opening files of dovecot Too many open files, we¹ve tried to increase limits in /etc/security/limits Wih ulimits a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 63735 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 102400 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 63735 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited But if i make cat/proc/dovecotpid/limits Limit Soft Limit Hard Limit Units Max cpu time unlimited unlimited seconds Max file size unlimited unlimited bytes Max data size unlimited unlimited bytes Max stack size 8388608 unlimited bytes Max core file size 0 unlimited bytes Max resident set unlimited unlimited bytes Max processes 63735 63735 processes Max open files 1024 4096 files Max locked memory 65536 65536 bytes Max address space unlimited unlimited bytes Max file locks unlimited unlimited locks Max pending signals 63735 63735 signals Max msgqueue size 819200 819200 bytes Max nice priority 0 0 Max realtime priority 0 0 Max realtime timeout unlimited unlimited us I am still getting 1024 limit The only warning that we get is doveconf: Warning: service auth { client_limit=4096 } is lower than required under max. load (9516) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (4299) I¹ve tried all i have found in internet, but there is no more info, and is like i¹ve increased system limits but not dovecot limits. Thankyou This is our CONF # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-44-generic x86_64 Ubuntu 12.04.5 LTS ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = VM8-ATISA.atisa.es auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login gssapi auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = no dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 112 first_valid_uid = 107 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%Y-%m-%d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = 112 mail_home = /var/vmail/sieve/%d/%u mail_location = maildir:/var/vmail/%$ mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = 107 mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body e notify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no passdb { args = /etc/dovecot/dovecot-ldap.conf deny = no driver = ldap master = no pass = no } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = maildir:User quota quota_rule = *:storage=0 sieve = /var/vmail/sieve/%d/%u/sieve-script sieve_dir = /var/vmail/sieve/%d/%u sieve_global_path = /var/vmail/sieve/default.sieve sieve_storage = /var/vmail/sieve/%d/%u } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = pop3 imap sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = /usr/lib/dovecot/auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = ebox mode = 0600 user = ebox } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = dovecot vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 1024 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = * port = 143 ssl = no } inet_listener imaps { address = * port = 993 ssl = yes } privileged_group = process_limit = 4096 process_min_avail = 0 protocol = imap service_count = 0 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1024 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 4096 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/dovecot/ssl/mx_atisa_es.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_key = </etc/dovecot/ssl/mx_atisa_es.key ssl_key_password = ssl_parameters_regenerate = 168 ssl_protocols = !SSLv2 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota postmaster_address = postmaster }

2 1

IMAP ANNOTATE Extension RFC5257: priority on roadmap
by Florian Sager 27 Mar '15

27 Mar '15

Hi Timo, congrats to the merger with OX. Currently the implementation of RFC 5257, ANNOTATE-EXPERIMENT-1, has only low priority on http://wiki2.dovecot.org/Roadmap I want to explain a scenario that would benefit from annotation support to - maybe - increase the priority in your roadmap: I'm currently working on a project to publish bank customer related documents inside a banking webinterface (they call it 'postbox'). There are different requirements that would be satisfied very well by an IMAP server as data storage/provider for a long term email/document archive inside the bank. Annotations would be necessary to tag emails with customer numbers and document IDs to allow a delayed grouping of several emails by such identifiers (message IDs may not be available for references so annotations have to be used to compute references indirectly). Same for sorting and filtering by customer number or account number. I would highly appreciate if you at Dovecot could increase the priority of ANNOTATE in your roadmap. Best regards, Florian -- Agitos GmbH Emil-Geis-Straße 40 D-81379 München Telefon: +49-89-381 564 46-0 Telefax: +49-89-381 564 46-9 E-Mail: support(a)agitos.de Web: http://www.agitos.de Registergericht: Amtsgericht München, HRB 213590 Geschäftsführer: Dipl.-Inf. (Univ.) Florian Sager Ust-Identifikationsnummer: DE296114074

3 2

Re: Option to not add "Received" header ?
by G H 27 Mar '15

27 Mar '15

You could remove them with sieve in the latest version of pigeonhole. On Mar 24, 2015 7:33 AM, Florent B <florent(a)coppint.com> wrote: > > I know about RFC's, but that could be an option, not enabled by default.

2 1

Error "Next message unexpectedly lost from mbox file"
by BehrensM 26 Mar '15

26 Mar '15

Hi, i am the new one;) - and my first post is about a problem i ran into. I installed a mailserver on a RaspberryPi. It works mostly well, using dovecot 2.1.7. (exim4 4.8 (not in use, smtp direct to Provider), fetchmail 6.3.21, RasPi 3.12.28+, Roundcube (no version known) - the whole system went through an apg-get update/uppgrade this night to look if a known problem already been fixed. When getting bigger Attachments (not sure if it occurs by smaller too, but bigger attachments are normally "to open" and often fail) Not all of them, but much. Unpredictable when it occurs. These Attachments are shown with less size in the Mailclient (Thunderbird actual version). In Roundcube they are shown to small, too. But it looks as the mail IS "fullsized" on the lokal Mailserver: When i use Roundcube and try to open an x00kB .zip, Roundcube starts to get the whole xyMB (real size) .zip-file, even when disconnected from internet. Thunderbird behaves different, doesnt load the full file, so "ignore" is no option;) And yes, i always dont like that option:) Beside the lokal mailserver-account(s) there is/are pulled Mails via imap direct from the mailprovider, the "old" solution which shall be replaced by the new mailserver. imap direct from provider shows the mails/Attachments in corrects size an opening works. Only using the local mailserver fails. In the log-files i found (i quote a part in which - cronjob matching - one of these defect mails was pulled): In Syslog: Mar 26 09:40:01 raspberrypi /USR/SBIN/CRON[26696]: (info) CMD (/usr/bin/fetchmail -s --fetchsizelimit 0 --fetchlimit 0 --limit 0 --timeout 300) Mar 26 09:40:05 raspberrypi dovecot: imap(info): Error: Next message unexpectedly lost from mbox file /home/info/mail/.INBOX at 1066141935 (cached) Mar 26 09:40:05 raspberrypi dovecot: imap(info): Error: read(/home/info/mail/.INBOX) failed: Invalid argument (FETCH for mailbox INBOX UID 1247) Mar 26 09:40:05 raspberrypi dovecot: imap(info): Disconnected: Internal error occurred. Refer to server log for more information. [2015-03-26 09:40:05] in= 2693 out=172626 Mar 26 09:40:07 raspberrypi dovecot: imap(info): Panic: file mbox-sync.c: line 1286 (mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2) Mar 26 09:40:07 raspberrypi dovecot: imap(info): Fatal: master: service(imap): child 26341 killed with signal 6 (core dumps disabled) Mar 26 09:40:51 raspberrypi dovecot: imap-login: Login: user=<info>, method=PLAIN, rip=192.168.100.27, lip=192.168.100.199, mpid=26723, TLS, session=<hbkg+ SwS3gDAqGQb> Mar 26 09:42:16 raspberrypi dovecot: imap(info): Connection closed in=752 out=21810 And in mail.err: Mar 26 09:40:05 raspberrypi dovecot: imap(info): Error: Next message unexpectedly lost from mbox file /home/info/mail/.INBOX at 1066141935 (cached) Mar 26 09:40:05 raspberrypi dovecot: imap(info): Error: read(/home/info/mail/.INBOX) failed: Invalid argument (FETCH for mailbox INBOX UID 1247) Mar 26 09:40:07 raspberrypi dovecot: imap(info): Panic: file mbox-sync.c: line 1286 (mbox_sync_handle_eof_updates): assertion failed: (trailer_size <= 2) Mar 26 09:40:07 raspberrypi dovecot: imap(info): Fatal: master: service(imap): child 26341 killed with signal 6 (core dumps disabled) (To tell the whole story: /home/$user/mail is link by NFS to a NAS. The limit 0 and timeout entries are just to test after running into the error and before i discovered that not fetchmail but dovecot looks to cause the problem) In the archive i only found an issue in 2010 with a CR/LF-problem, but it is a) a long time ago an b) i am not sure that my specific problem comes from the same direction. http://www.dovecot.org/list/dovecot/2010-November/054938.html Any suggestions how to solve that problem? Thanks.

1 0

Lazy_expunge issue...
by giorgio paolucci 26 Mar '15

26 Mar '15

Hello everybody, I have a question about lazy_expunge plugin. I set up Dovecot with lazy_expunge plugin on a Debian Wheezy machine; I setup also a global acl to keep .expunged namespace readonly for all users. Imap client is Horde Webmail Edition 5.2.3 When I try to delete folders containing subfolders, lazy_expunge copies into expunged private namespace only the upper level folder. The subfolder and all messages inside it are lost. Quota is also corrupted (subfolder messages are still accounted in the Message counter and disk quota) and a recalc is needed to fix. Problem can be reproduced this way: 1)Create with horde a folder "extern" 2)Create a subfolder "extern/subfolder" 3) copy some messages into extern and some into subfolder (in my test 5 messages each) 4) verify quota usage: root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 4 1126400 0 User quota MESSAGE 10 - 0 3)Delete extern with option to delete all subfolders. 4)verify that all folders and messages have been deleted 5)verify that only extern folder has been copied into .expunged namespace and verify that quota still reports the 5 messages that were in subfolder: root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 2 1126400 0 User quota MESSAGE 5 - 0 6) recalc quota and check again that quota has benne corrected: # doveadm quota recalc -u testimap2.csia(a)unipd.it root@gold:# doveadm quota get -u testimap2.csia(a)unipd.it Quota name Type Value Limit % User quota STORAGE 0 1126400 0 User quota MESSAGE 0 - 0 Is there anything I am missing? Thanks in advance. Best regards. Giorgio Paolucci ================================================ dovecot version 2.2.13 OS :Linux bronze 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u1 x86_64 GNU/Linux ================================================= root@bronze:/etc/dovecot/conf.d# more ../dovecot-acl _PostaCancellataPerErrore* owner lrik ================================================= root@bronze:/etc/dovecot/conf.d# dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 auth_default_realm = unipd.it disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log mail_debug = yes mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota listescape lazy_expunge acl mail_log notify mdbox_rotate_interval = 1 days mdbox_rotate_size = 10 M mmap_disable = yes namespace { hidden = no inbox = no list = yes location = maildir:/SYSTEM/USERS/mailbox/%d/%1n/%u/expunged mailbox .LEGGIMI { auto = subscribe } mailbox INBOX.Trash { auto = subscribe special_use = \Trash } prefix = _PostaCancellataPerErrore/ separator = / subscriptions = yes type = private } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl lazy_expunge = _PostaCancellataPerErrore/ lazy_expunge_only_last_instance = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size pop3_migration_mailbox = INBOX quota = dict:User quota::file:/SYSTEM/USERS/homes/%d/%1u/%u/%u.quota quota_rule = *:storage=1100M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3c_host = 147.162.10.68 protocols = imap pop3 lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imaps { ssl = no } process_min_avail = 20 service_count = 1 } service imap { executable = imap postlogin } service lmtp { executable = lmtp inet_listener lmtp { port = 2223 } process_min_avail = 15 } service pop3-login { inet_listener pop3s { ssl = no } } service postlogin { executable = script-login -d rawlog user = vmail } service quota-warning { executable = script /SYSTEM/DOVECOT/scripts/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } userdb { driver = prefetch } userdb { args = /etc/dovecot/conf.d/dovecot-sqlSSO.conf.ext driver = sql } protocol lmtp { info_log_path = /tmp/dovecot-lmtp-info.log log_path = /tmp/dovecot-lmtp.log mail_plugins = quota listescape lazy_expunge acl mail_log notify } protocol imap { imap_max_line_length = 128 k mail_plugins = quota listescape lazy_expunge acl mail_log notify imap_quota acl imap_acl } protocol doveadm { mail_plugins = quota listescape lazy_expunge acl mail_log notify pop3_migration } protocol pop3 { pop3_no_flag_updates = yes pop3_uidl_format = %10v.%09u } =================================== root@gold:# doveadm user -u testimap2.csia(a)unipd.it userdb: testimap2.csia(a)unipd.it uid : 1003 gid : 1003 home : /SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it mail : sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it ------------------------------- Here follows IMAP transaction in and out from rawlog IN: 2 ENABLE QRESYNC 3 NAMESPACE 4 LIST () "" (extern/*) 5 DELETE extern 6 UNSUBSCRIBE extern 7 DELETE extern/subfolder 8 UNSUBSCRIBE extern/subfolder 9 LOGOUT OUT: root@gold:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/dovecot.rawlog# more 20150326-095943-1773.out 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=OR DEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARC H ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in * ENABLED QRESYNC 2 OK Enabled. * NAMESPACE (("" "/")("_PostaCancellataPerErrore/" "/")) NIL NIL 3 OK Namespace completed. * LIST () "/" extern/subfolder 4 OK List completed. 5 OK Delete completed. 6 OK Unsubscribe completed. 7 OK Delete completed. 8 OK Unsubscribe completed. * BYE Logging out 9 OK Logout completed. ================================== Here follows debug log from dovecot. Mar 26 09:59:43 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.10.141, lip=147.162.10.84, mpid=1771, session=<DXefPC0SWQCTogqN> Mar 26 09:59:43 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 09:59:43 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 09:59:43 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox/mailboxes/extern/subfolder/dbox-Mails/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/extern/dbox-Mails/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace _PostaCancellataPerErrore/: /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern doesn't exist yet, using default permissions Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace _PostaCancellataPerErrore/: Using permissions from /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged: mode=0700 gid=default Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.extern/dovecot-acl not found Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=1, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=2, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=3, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=4, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: copy from extern: box=_PostaCancellataPerErrore/extern, uid=5, msgid=, size=524 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=1, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=2, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=3, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=4, msgid=, size=523 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: expunge: box=extern, uid=5, msgid=, size=524 Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Debug: Namespace : Using permissions from /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox: mode=0755 gid=default Mar 26 09:59:43 imap(testimap2.csia(a)unipd.it): Info: Mailbox deleted: extern Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Mailbox deleted: extern/subfolder Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Disconnected: Logged out in=162 out=704 Mar 26 09:59:44 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.10.141, lip=147.162.10.84, mpid=1778, session=<vUqqPC0SXACTogqN> Mar 26 09:59:44 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 09:59:44 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 09:59:44 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Mar 26 09:59:44 imap(testimap2.csia(a)unipd.it): Info: Disconnected: Logged out in=77 out=1009 Mar 26 10:01:50 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.INBOX\2eTrash/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged/.\2eLEGGIMI/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX.Trash/dbox-Mails/dovecot-acl not found Mar 26 10:01:51 imap-login: Info: Login: user=<testimap2.csia(a)unipd.it>, method=PLAIN, rip=147.162.200.67, lip=147.162.10.86, mpid=2474, session=<VWBCRC0SugCToshD> Mar 26 10:01:51 script-login: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_lazy_expunge_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so Mar 26 10:01:51 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Mar 26 10:01:51 imap: Debug: Added userdb setting: mail_location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Effective uid=1003, gid=1003, home=/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota root: name=User quota backend=dict args=:file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=* bytes=1153433600 messages=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=1095761920 (95%) messages=0 reverse=no command=quota-warning 95 testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota warning: bytes=922746880 (80%) messages=0 reverse=no command=quota-warning 80 testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Quota grace: root=User quota bytes=115343360 (10%) Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: dict quota: user=testimap2.csia(a)unipd.it, uri=file:/SYSTEM/USERS/homes/unipd.it/t/testimap2.csia@unipd.it/testimap2.csia@unipd.it.quota, noenforcing=0 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/NAS1/unipd.it/mailbox/t/testimap2.csia@unipd.it/sdbox:INDEX=/INDEX1/unipd.it/t/testimap2.csia@unipd.it:ALT=/ALTSTORAGE1/unipd.it/t/testimap2.csia@unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: fs: root=/NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox, index=/INDEX1/unipd.it/t/testimap2.csia(a)unipd.it, indexpvt=, control=, inbox=, alt=/ALTSTORAGE1/unipd.it/t/testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: Namespace : type=private, prefix=_PostaCancellataPerErrore/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia@unipd.it/expunged Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: maildir++: root=/SYSTEM/USERS/mailbox/unipd.it/t/testimap2.csia(a)unipd.it/expunged, index=, indexpvt=, control=, inbox=, alt= Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: initializing backend with data: vfile:/etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: acl username = testimap2.csia(a)unipd.it Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl: owner = 1 Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: Global ACL file: /etc/dovecot/dovecot-acl Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/INBOX.Trash/dbox-Mails/dovecot-acl not found Mar 26 10:01:51 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Drafts/dbox-Mails/dovecot-acl not found Mar 26 10:01:52 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Spam/dbox-Mails/dovecot-acl not found Mar 26 10:01:52 imap(testimap2.csia(a)unipd.it): Debug: acl vfile: file /NAS1/unipd.it/mailbox/t/testimap2.csia(a)unipd.it/sdbox/mailboxes/Templates/dbox-Mails/dovecot-acl not found

1 0

Re: Dovecot Oy merger with Open-Xchange AG
by Patrick Coffin 25 Mar '15

25 Mar '15

To Timo and the Dovecot guys - congratulations! I'm sure this merger with OpenXchange is going to provide you with a lot of resources and opportunities. As a longtime user of dovecot, I do have a few concerns. I wonder if you can answer some questions for me. You say that OpenXchange really likes open source and shares your plans for the future. Is this a commitment that future versions core dovecot product will remain free and truly open source? According to Wikipedia (http://en.wikipedia.org/wiki/Open-Xchange#Licensing <http://en.wikipedia.org/wiki/Open-Xchange#Licensing>) , OpenXchange's backend is GPL'd, but the front-end is not - it's released under "Creative Common's Share Alike, Non Commercial, Attribution". The article points out: "The restriction to Non Commercial in the Creative Commons license for the Frontend restricts re-distribution to third parties, i.e. hosted deployments for third parties. However, since the front-end license prohibits commercial re-distribution, the software is neither free software nor open source software since the definitions of both require such re-distribution to be permitted" Do you expect that dovecot is moving in that direction? Here's why I'm asking: As a hosted email provider, I've long used dovecot, and been quite happy with it. But I have some concerns, as is common when any popular open source project gets acquired by a commercial entitiy. The current dovecot license is a mixture of the MIT and LGPL licenses. Will this remain? Or is dovecot going to go the way of OpenXchange licensing? What about other pieces of the dovecot ecosystem, such as the Object Storage plugin - will that remain closed source and proprietary? Or will you follow the lead of companies like RedHat and be truly open source? Is there a possibility that future versions of dovecot that contain what we might consider core features will be available only in the commercial version of the product? If I base a part of my business on a piece of software I've been running for the last 10 years, am I going to find myself in trouble in a year or two, when some new version of dovecot comes out with changes that I need, and I have to move to a commercial product, which I may or may not be able to afford? I'd love to hear that you're going to be following a model like RedHat did when they acquired GlusterFS and created the RedHat Storage Server. Gluster development is still going strong, and still completely open source. But they make money from people like me who know that by buying a contract, we can get the kind of support we need for such a critical part of our infrastructure. Again, congratulations and, as always, thanks for all the hard work creating dovecot in the first place. Patrick

7 13

Upgrading a dovecot director configuration?
by Will Rouesnel 25 Mar '15

25 Mar '15

Is Dovecot Director compatible across Dovecot versions? i.e. 2.0.x to 2.1.x or 2.2.x? I have a 6 host cluster in a director configuration which is getting somewhat aged, but it would be very beneficial if the director hosts could be upgraded seamlessly. Is such a thing possible, or will their be compatibility issues? Would a workaround be possible (i.e. migrate to a user system which enforces proxy destinations by another means, then do an upgrade?)

1 0

Fixing broken UTF-8 handling with MySQL driver
by Felix Zandanel 23 Mar '15

23 Mar '15

Hi, I noticed that dovecot's MySQL driver doesn't play well with UTF-8 encoded strings. I presume this issue has been around for a while. However, it still fails with the current release candidate 2.2.16-rc1. I have been using the sieve extdata plugin with a MySQL-backed dict to retrieve a folder name that is then passed to fileinto: fileinto :create "${extdata.folder_name_drafts}"; Whenever this dict returned a string with non-7byte characters, a line such as the following popped up in sieve.log. (This example query should return "Entwürfe".) error: folder name specified for fileinto command is not utf-8: Entw?rfe. Although my MySQL installation is set up to use UTF-8 as the default charset on every level (config, database, table and field), and the character_set_* runtime variables all yield the value "utf8", it still seems that the mysql client library must be instructed to actually use UTF-8 explicitly. Adding the following statement to driver_mysql_connect() fixes the issue for me: mysql_options(db->mysql, MYSQL_SET_CHARSET_NAME, "utf8"); I checked this against mysql 5.5.41. Regards, Felix

2 2

[PATCH] increase fd_limit to max_client_limit automatically
by Lauri Tirkkonen 23 Mar '15

23 Mar '15

Hi, with a low soft limit on file descriptors, dovecot 2.2.15 warns on startup: Warning: fd limit (ulimit -n) is lower than required under max. load (256 < 1000), because of default_client_limit It could try increasing the limit first, and only report the warning if that fails. I'm attaching a patch that does just this. Without the patch, the soft fd limit is kept at whatever it was on dovecot startup: % pfexec plimit $(pgrep dovecot) 18737: /opt/niksula/sbin/dovecot resource current maximum time(seconds) unlimited unlimited file(blocks) unlimited unlimited data(kbytes) unlimited unlimited stack(kbytes) 10240 unlimited coredump(blocks) unlimited unlimited nofiles(descriptors) 256 65536 vmemory(kbytes) unlimited unlimited and with patch applied, it's increased to max_client_limit: % pfexec plimit $(pgrep dovecot) 18775: /opt/niksula/sbin/dovecot resource current maximum time(seconds) unlimited unlimited file(blocks) unlimited unlimited data(kbytes) unlimited unlimited stack(kbytes) 10240 unlimited coredump(blocks) unlimited unlimited nofiles(descriptors) 1000 65536 vmemory(kbytes) unlimited unlimited It should probably be increased to higher than that to account for fds other than client sockets, but I don't have insights into that. -- Lauri Tirkkonen Niksula systems specialist

2 2

Re: fast doveadm search results
by Joseph Tam 23 Mar '15

23 Mar '15

Steffen Kaiser writes: > e.g. put message-id into mail_always_cache_fields > > - From http://dovecot.org/pipermail/dovecot-cvs/2013-May/023261.html > > lib-storage: Allow mail_*cache_fields settings to specify any hdr.* fields ... but I belatedly wrote ... > Maybe you can even add these items into the cache upon delivery, > but someone more knowlegable than I would have to help you with that. The drawback of getting thing in digest form -- you look like a boob when answering late. I defer to Steffen's superior knowledge. Joseph Tam <jtam.home(a)gmail.com>

3 3

2.2.16 link failure on FreeBSD 10.1, with patch
by Jan Mikkelsen 22 Mar '15

22 Mar '15

Hi, Compiling on FreeBSD 10.1 gives linker errors when linking test-message-snippet. The underlying problem is that libiconv appears on the actual linker line after libcharset.a, which leads to unresolved libiconv symbols. This build process worked fine with 2.2.15. The patch below to src/lib-charset/Makefile.in resolves the problem for me and seems broadly correct. libcharset.a does depend on libiconv so it should probably be declared that way. There is probably a more correct way to make the patch to Makefile.am, but I don't really use automake. Hopefully helpful to someone. Jan Mikkelsen. Patch: --- dovecot-2.2.16/src/lib-charset/Makefile.in 2015-03-13 02:41:16.000000000 +1100 +++ dovecot-2.2.16.new/src/lib-charset/Makefile.in 2015-03-21 13:58:21.951293274 +1100 @@ -92,7 +92,7 @@ CONFIG_CLEAN_FILES = CONFIG_CLEAN_VPATH_FILES = LTLIBRARIES = $(noinst_LTLIBRARIES) -libcharset_la_LIBADD = +libcharset_la_LIBADD = $(LTLIBICONV) am_libcharset_la_OBJECTS = charset-iconv.lo charset-utf8.lo libcharset_la_OBJECTS = $(am_libcharset_la_OBJECTS) AM_V_lt = $(am__v_lt_@AM_V@) Error messages: libtool: link: cc -std=gnu99 -I/usr/local/include -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wno-duplicate-decl-specifier -Wstrict-aliasing=2 -Wl,--as-needed -o test-message-snippet test-message-snippet.o .libs/message-snippet.o .libs/mail-html2text.o .libs/message-decoder.o .libs/quoted-printable.o .libs/rfc822-parser.o .libs/rfc2231-parser.o /usr/local/lib/libiconv.so -Wl,-rpath -Wl,/usr/local/lib .libs/message-parser.o .libs/message-header-parser.o .libs/message-header-decode.o .libs/message-size.o -L/usr/local/lib ../lib-charset/.libs/libcharset.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_begin': charset-iconv.c:(.text+0x49): undefined reference to `libiconv_open' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_end': charset-iconv.c:(.text+0x151): undefined reference to `libiconv_close' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_reset': charset-iconv.c:(.text+0x211): undefined reference to `libiconv' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_try': charset-iconv.c:(.text+0x425): undefined reference to `libiconv' cc: error: linker command failed with exit code 1 (use -v to see invocation) ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_begin': charset-iconv.c:(.text+0x49): undefined reference to `libiconv_open' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_end': charset-iconv.c:(.text+0x151): undefined reference to `libiconv_close' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_reset': charset-iconv.c:(.text+0x211): undefined reference to `libiconv' ../lib-charset/.libs/libcharset.a(charset-iconv.o): In function `charset_to_utf8_try': charset-iconv.c:(.text+0x425): undefined reference to `libiconv'

1 0

Transitioning from version 1 to version 2
by Steve Matzura 21 Mar '15

21 Mar '15

I'm wrestling with transitioning from a 1.0.15 system to a 2.2.25 system. The old dovecot.conf cannot be dropped into position on the new system because so many config options and symbols have changed. It seems every time I change something to match the new formats, I break something else! Anyone out there have maybe half an hour to spare to look at my old and new files to help me whip them into shape?

1 0

FreeBSD ZFS maildir to mdbox
by Roland van Laar 21 Mar '15

21 Mar '15

Hello, I'm converting my mailbox from Maildir to mdbox.. The Maildir is from an 1.2 server. The new server is a virtual FreeBSD ZFS server. The conversion is not working, I'm getting either segfaults or the sync just quits with errors. I also did set with mmap_disable=yes. This didn't resolve the problem. How can I fix this? The same conversion on a virtual ubuntu 14.04 box works with mentions of "filename has the wrong S value" and Corrupted index errors. The FreeBSD errors and dovecot -n are included below: dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: Maildir filename has wrong S value, renamed the file from ./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa to ./Maildir/cur/1296038598.29562.mail.micite.net,S=20640:2,Sa dsync(vagrant): Error: Corrupted index cache file ./Maildir/dovecot.index.cache: Broken physical size for mail UID 475 dsync(vagrant): Error: write(/home/vagrant/mdbox/storage/m.12) failed: Invalid argument dsync(vagrant): Error: copy: i_stream_read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) (uid=475, box=INBOX) dsync(vagrant): Error: Mailbox INBOX: read(msg input) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) dsync(vagrant): Error: read(./Maildir/cur/1296038598.29562.mail.micite.net,S=20542:2,Sa) failed: Cached message size smaller than expected (20542 < 20640, box=INBOX, UID=475) (uid=475, box=INBOX) dsync(vagrant): Panic: file mail-index-transaction-update.c: line 964 (mail_index_update_ext): assertion failed: (seq > 0 && (seq <= mail_index_view_get_messages_count(t->view) || seq <= t->last_new_seq)) Abort (core dumped) (gdb) core doveadm.core Core was generated by `doveadm'. Program terminated with signal 6, Aborted. #0 0x00000008013f8a1a in ?? () (gdb) bt #0 0x00000008013f8a1a in ?? () #1 0x00000008013f7149 in ?? () #2 0x0000000000000000 in ?? () or with no core dump: % doveadm sync maildir:./Maildir dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: Maildir filename has wrong S value, renamed the file from ./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa to ./Maildir/cur/1296466748.64525.mail.micite.net,S=7694:2,Sa dsync(vagrant): Error: Corrupted index cache file ./Maildir/dovecot.index.cache: Broken physical size for mail UID 899 dsync(vagrant): Error: write(/home/vagrant/mdbox/storage/m.11) failed: Invalid argument dsync(vagrant): Error: copy: i_stream_read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) (uid=899, box=INBOX) dsync(vagrant): Error: Mailbox INBOX: read(msg input) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) dsync(vagrant): Error: read(./Maildir/cur/1296466748.64525.mail.micite.net,S=7629:2,Sa) failed: Cached message size smaller than expected (7629 < 7694, box=INBOX, UID=899) (uid=899, box=INBOX) % dovecot -n # 2.2.16: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.1-RELEASE-p6 amd64 mail_location = mdbox:~/mdbox namespace { inbox = yes location = prefix = separator = . } passdb { args = /usr/local/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocols = lmtp imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } ssl = required ssl_cert = </etc/ssl/ec/ec.crt ssl_key = </etc/ssl/ec/ec.key userdb { args = /usr/local/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lmtp { postmaster_address = postmaster(a)micite.net }

2 2

imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
by James 21 Mar '15

21 Mar '15

Connecting to dovecot with ssl3 causes imap-login to die: $ openssl s_client -connect localhost:993 -ssl3 CONNECTED(00000003) 4277630796:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1461:SSL alert number 40 4277630796:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake failure:s3_pkt.c:645: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : SSLv3 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1426851034 Timeout : 7200 (sec) Verify return code: 0 (ok) --- syslog: Mar 20 11:30:35 MAILHOST dovecot: [ID 583609 mail.crit] imap-login: Fatal: master: service(imap-login): child 21918 killed with signal 11 (core dumped) [last ip=127.0.0.1] dovecot.conf had: ssl_protocols = !SSLv2 !SSLv3 removing that line stops the core dump and syslog then shows: Mar 20 11:36:25 MAILHOST dovecot: [ID 583609 mail.info] imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported protocol, session=<eqr1ubYRWgB/AAAB> the "SSL23_GET_CLIENT_HELLO:unsupported protocol" seems to do what I thought the ssl_protocols setting did. Do I still need, if I ever needed, the "ssl_protocols = " setting? James. # dovecot -n # 2.2.16: /etc/opt/XXXX/dovecot/dovecot.conf # Pigeonhole version 0.4.7 # OS: SunOS 5.10 i86pc auth_mechanisms = plain login digest-md5 cram-md5 base_dir = /var/opt/XXXX/dovecot/ lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_trusted_networks = 111.222.333.444/24 mail_gid = vmail mail_home = /XXXXXX/XXXX/%d/%n mail_location = maildir:/XXXXX/XXXX/%d/%n/Maildir mail_max_userip_connections = 20 mail_plugins = quota mail_uid = vmail mailbox_idle_check_interval = 10 secs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate passdb { args = /etc/opt/XXXX/dovecot/dovecot-sql.conf driver = sql } plugin { fts_autoindex = yes quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10% quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=99%% quota-warning 99 %u sieve = /XXXXX/XXXX/%d/%n/dovecot.sieve sieve_dir = /XXXXX/XXXX/%d/%n/sieve } protocols = imap lmtp sieve service auth { drop_priv_before_exec = yes unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } user = root } service imap-login { chroot = drop_priv_before_exec = yes executable = imap-login -D service_count = 1 user = dovecot } service lmtp { group = vmail unix_listener lmtp { mode = 0666 } user = vmail } service quota-warning { executable = script /etc/opt/XXXX/dovecot/quota-warning user = vmail } ssl_cert = </etc/opt/XXXX/dovecot/dovecot.pem ssl_cipher_list = AES128+EECDH:AES128+EDH ssl_key = </etc/opt/XXXX/dovecot/dovecot.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /etc/opt/XXXX/dovecot/dovecot-sql.conf driver = sql } protocol lda { auth_socket_path = /var/opt/XXXX/dovecot/auth-master mail_plugins = quota sieve postmaster_address = postmaster@XXXXXXXX sendmail_path = /opt/XXXX/sbin/exim } protocol pop3 { mail_plugins = quota } protocol imap { mail_plugins = quota imap_quota } protocol lmtp { mail_plugins = quota sieve postmaster_address = postmaster@XXXXXX sendmail_path = /opt/XXXX/sbin/exim }

3 9

Strange empty folders 1 1 1 1 1
by Samuel Williams 20 Mar '15

20 Mar '15

I just updated to the latest dovecot from 1.2 and it has been working great for most of my clients. But one client,who is using Outlook, has found that hundreds of folders have been created, e.g. admin@domain Deleted Items 1 admin@domain Deleted Items 1 1 admin@domain Deleted Items 1 1 1 .... admin@domain Deleted Items 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 This appears to be affecting all folders in his account, across multiple accounts for his domain. It isn't affecting any other user, even other users using outlook. All the folders are empty. Just wondering if anyone has any suggestions or ideas why this is happening. Thanks Samuel

1 0

fast sync vs. full sync
by Patrick Westenberg 20 Mar '15

20 Mar '15

Hi everyone, can anybody explain the difference between Dovecots fast sync and full sync in replication mode? Regards Patrick

2 1

indexer-worker panics with latest mercurial
by Laeeth Isharc 20 Mar '15

20 Mar '15

Hi. I am seeing the following in my logs. Happy to downgrade to an earlier version if you think this might be the problem, but dovecot.org is extremely slow (and has been for months) so I found it easier just to pull the latest from mercurial. Thanks. Laeeth Mar 12 20:48:39 indexer: Error: Indexer worker disconnected, discarding 1 reques ts for laeeth(a)laeeth.com Mar 12 20:48:39 indexer-worker(laeeth(a)laeeth.com): Fatal: master: service(indexe r-worker): child 24003 killed with signal 6 (core dumps disabled) Mar 12 20:49:01 dsync-local(laeeth(a)laeeth.com): Error: Couldn't lock /home/mail/ laeeth_laeeth_com/.dovecot-sync.lock: Timed out after 30 seconds Mar 12 20:49:16 indexer-worker(laeeth(a)laeeth.com): Error: fts_tika: PUT http://l ocalhost:9997/tika/ failed: 500 Server Error Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Warning: I/O leak: 0x7fc47d60fcf0 (line 127, fd 25) Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Panic: file ioloop .c: line 39 (io_add_file): assertion failed: (callback != NULL) Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7fc47d63fc40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7fc47d63fd1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7fc47d5f02e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x87bd0) [0x7fc47d650bd0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_move_io+0x3e) [0x7fc47d65183e] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7fc47d63db14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7fc47d614448] -> /usr/lib64/dovecot/libdovecot.so.0(+0x43876) [0x7fc47d60c876] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x29) [0x7fc47c733159] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x3637) [0x7fc47c72f637] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x6d83) [0x7fc47cf5dd83] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x614) [0x7fc47cf5e3c4] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xc14e) [0x7fc47cf6314e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_precache+0x19) [0x7fc47d8ef429] -> dovecot/indexer-worker() [0x40237c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7fc47d65155c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbb) [0x7fc47d65249b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fc47d6515c9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fc47d651648] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fc47d5f5703] -> dovecot/indexer-worker(main+0xcb) [0x401e7b] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x32c6021d65] -> dovecot/indexer-worker() [0x401f25] Mar 12 20:49:17 indexer: Error: Indexer worker disconnected, discarding 15 reque sts for rosie(a)kaleidicassociates.com Mar 12 20:49:17 indexer-worker(rosie(a)kaleidicassociates.com): Fatal: master: service(indexer-worker): child 24022 killed with signal 6 (core dumps disabled) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Warning: I/O leak: 0x7f22c4d4dcf0 (line 127, fd 23) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Panic: file ioloop.c: line 829 (io_loop_move_io): assertion failed: ((old_io->condition & IO_NOTIFY) == 0) Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7f22c4d7dc40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7f22c4d7dd1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f22c4d2e2e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x888ba) [0x7f22c4d8f8ba] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7f22c4d7bb14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7f22c4d52448] -> /usr/lib64/dovecot/libdovecot.so.0(+0x43876) [0x7f22c4d4a876] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x29) [0x7f22c3e71159] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x3637) [0x7f22c3e6d637] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x6d83) [0x7f22c469bd83] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x123) [0x7f22c469bed3] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xc14e) [0x7f22c46a114e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_precache+0x19) [0x7f22c502d429] -> dovecot/indexer-worker() [0x40237c] -> /usr/lib64/dovecot/libdovecot.so.0(io _loop_call_io+0x4c) [0x7f22c4d8f55c] -> /usr/lib64/dovecot/libdovecot.s o.0(io_loop_handler_run_internal+0xbb) [0x7f22c4d9049b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f22c4d8f5c9] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f22c4d8f648] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f22c4d33703] -> dovecot/indexer-worker(main+0xcb) [0x401e7b] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x32c6021d65] -> dovecot/indexer-worker() [0x401f25] Mar 12 20:49:17 indexer: Error: Indexer worker disconnected, discarding 6 requests for laeeth(a)kaleidicassociates.com Mar 12 20:49:17 indexer-worker(laeeth(a)kaleidicassociates.com): Fatal: master: service(indexer-worker): child 24020 killed with signal 6 (core dumps disabled) Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Warning: I/O leak: 0x7f0d5aa00cf0 (line 127, fd 23) Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Panic: file ioloop-iolist.c: line 22: unreached Mar 12 20:49:26 indexer-worker(laeeth(a)laeeth.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x76c40) [0x7f0d5aa30c40] -> /usr/lib64/dovecot/libdovecot.so.0(+0x76d1e) [0x7f0d5aa30d1e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f0d5a9e12e5] -> /usr/lib64/dovecot/libdovecot.so.0(+0x88a0d) [0x7f0d5aa42a0d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handle_add+0x3b) [0x7f0d5aa4319b] -> /usr/lib64/dovecot/libdovecot.so.0(+0x87b61) [0x7f0d5aa41b61] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_move_io+0x3e) [0x7f0d5aa4283e] -> /usr/lib64/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7f0d5aa2eb14] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7f0d5aa0

2 1

[Dovecot] imapc - different settings for different namespaces
by Timo Sirainen 20 Mar '15

20 Mar '15

Originally I was planning on allowing all kinds of mail settings inside namespace {}, including imapc_* settings. But that's a bit difficult to implement (although I think it will happen some day). So for now I was thinking: imapc foo { host = imap.foo.com master_user = foomaster password = foopass } imapc bar { host = imap.bar.com ... } namespace { prefix = foo/ location = imapc:foo } namespace { prefix = bar/ location = imapc:bar } So basically if the path after imapc isn't absolute (/path or ~/path), then treat the path as the imapc section name and use its settings. Anyone have any improvement suggestions? I was planning on adding this to v2.2.3. I'm not sure if the section names should be "imapc" or something else (e.g. imap_remote {}).

2 2

core not dumped
by James 20 Mar '15

20 Mar '15

There is some underlying problem with imap-login but in order to debug it I'd like to see a core file. On error dovecot reports "core not dumped". If I put "abort()" in the code at the point it is reporting then a core file is written, so there is no OS reason why a core can not be written. It appears to be dovecot's choice to control the child. In an attempt to obtain a core file I have: service imap-login { chroot = drop_priv_before_exec = yes user = dovecot } How can I make imap-login to produce a core file? Syslog error report: Mar 18 09:22:28 MAILHOST dovecot: [ID 583609 mail.crit] imap-login: Fatal: master: service(imap-login): child 10812 killed with signal 11 (core not dumped) [last ip=111.222.333.444] Should anyone care at this point (before I've looked at a core file) the error is related to; imap-login: Disconnected (no auth attempts in 0 secs): user=<>, James.

3 4

Re: fast doveadm search results
by Joseph Tam 20 Mar '15

20 Mar '15

Vu Ngoc VU <vvu(a)mcra.fr> writes: > My goal is to be able to find mails quickly with "doveadm search". > We are using dovecot in a corporate. And some managers, sometimes ask to delete some messages. > These messages are "unwanted" ones: mistakenly sent, defamatory... > > So, that situations appear rarely, but when asked, they expected me to > deleted quickly these messages from few to thousands of users > mailboxes. > > Is that possible to change behaviour of Dovecot, some headers like > sender, message-id, date are stored in cache for at least 48h? (7 days > would be better). So is this a fair summary of what you are asking: you want to load dovecot's caches with searchable items (i.e. specified headers) *and* have them expire and removed from caches after a preset amount of time? Caches are persistent: once an item is cached, it stays in the cache. I can't think of a good way to purge them without a lot of bother, but maybe you don't really need this. If you want to preload the cache with searchable items, you can periodically run a search/fetch command, which will load the cache with headers you want. http://www.dovecot.org/list/dovecot/2010-October/053521.html Maybe you can even add these items into the cache upon delivery, but someone more knowlegable than I would have to help you with that. The FTS/Solr plugin might also help. You seem to be optimizing the wrong problem. Reading between the lines of your message, your management wants a technical solution to a human problem (someone did an oops). Joseph Tam <jtam.home(a)gmail.com>

1 0

Released Pigeonhole v0.4.7 for Dovecot v2.2.16
by Stephan Bosch 20 Mar '15

20 Mar '15

Hello Dovecot users, Here is the final 0.4.7 release. No changes were committed since the last release candidate. Changelog v0.4.7: * editheader extension: Made protection against addition and deletion of headers configurable separately. Also, the `Received' and `Auto-Submitted' headers are no longer protected against addition by default. * Turned message envelope address parse errors into warnings. * The interpreter now accepts non-standard domain names, e.g. containing '_'. + Implemented the Sieve index extension (RFC 5260). + Implemented support for the mboxmetadata and servermetadata extensions (RFC 5490). + Implemented new sieve commands for the doveadm command line utility. These commands are currently limited to ManageSieve operations, but the other current sieve tools will be migrated to doveadm in the near future as well. + Added more debug output about binary up-to-date checking. + Added script metadata to binary dump output. - Fixed Sieve script binary up-to-date checking by normalizing the script location. - The Sieve interpreter now flushes the duplicate database during start phase of result execution rather than commit phase. This makes sure locks on the duplicate database are released as soon as possible, preventing contention. - Performed a few optimizations in the lexical scanner of the language. - Fixed bug in `:matches' match-type that made a pattern without wildcards match as if there were a '*' at the beginning. - Fixed crash in validation of the string parameter of the comparator tag. - extprograms extension: Made sure supplemental group privileges are also dropped. This was a problem reported by Debian lintian. - Fixed bug in handling of binary errors for action side-effects and message overrides. - file script storage: Restructured storage initialization to address backwards compatibility issues. - dict script storage: Fixed small memory allocation bug. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

check if anvil is working
by Leonardo Rodrigues 19 Mar '15

19 Mar '15

Hi, Is there any way of making sure the anvil service, used to penalty login fails, is working ? I dont see anything on the logs regarding it neither have it configured. It's not on my configuration files, but it can be seen on a 'dovecot -a' dump. Should it be logging something ? Should i have enabled it somehow ? Thanks for the answers. [root@correio log]# dovecot --version 2.2.13 (from dovecot -a dump) service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

1 0

fast doveadm search results
by Vu Ngoc VU 19 Mar '15

19 Mar '15

hello, I've posted same question here months ago. But obtaine no answer, even not a "you question is stupid". So I don't know what to think about that. My goal is to be able to find mails quickly with "doveadm search". We are using dovecot in a corporate. And some managers, sometimes ask to delete some messages. These messages are "unwanted" ones: mistakenly sent, defamatory... So, that situations appear rarely, but when asked, they expected me to deleted quickly these messages from few to thousands of users mailboxes. Is that possible to change behaviour of Dovecot, some headers like sender, message-id, date are stored in cache for at least 48h? (7 days would be better). I've read this page : http://wiki2.dovecot.org/Design/Indexes/Cache but cannot understand every parts. "A specific decision can be forced by ORing it with MAIL_CACHE_DECISION_FORCED." Is OR in this sentence like AND/OR comparators? Where to put "MAIL_CACHE_DECISION_FORCED"? "mail-cache-decisions.c file contains the rules how Dovecot changes the decisions." <-- is it in this file? My setup is 2.2.9 on Ubuntu 14.04 running on OpenVZ containers with 2 Director and 2 imap/pop3 backends. The storage is shared via NFS. Is this the performance problem? If dovecot has metadata I want in its cache, I cannot see how this is a problem. Can these settings be useful for my case? mail_always_cache_fields = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_never_cache_fields = imap.envelope Thanks.

2 2

Support for multiple passwords?
by Conrad Kostecki 18 Mar '15

18 Mar '15

Hi! Currently, the passwords are stored in plaintext for my dovecot, as I am still using cram-md5 AND digest-md5. I have still to offer that, as I have some deprecated clients, therefore, I am unable to hash at least those passwords for that accounts. I've found on the Wiki: > In future it's possible that Dovecot could support multiple passwords > in different schemes for a single user. Is there any news about this? Are there still any plans to support this maybe in future? For my understanding, that would solve my problem, that I could define a password in both schemes (cram and digest) and don't have to use plaintext password? Cheers Conrad

3 6

passwd file for quota
by Cliff Hayes 18 Mar '15

18 Mar '15

I need to implement quota. I read as much as I could including http://wiki2.dovecot.org/HowTo/SimpleVirtualInstall But my current /etc/passwd file does not have the password in it as shown in dovecot docs ... there is an x where the password should be. I created a program that creates a passwd file in the proper format with the proper extra quota fields for all users (except it has an x where the password should be). I plan to store it in /etc/dovecot How do I get dovecot to stop looking at /etc/passwd and start looking at /etc/dovecot/passwd? And hopefully that will not affect how it gets the password (pam) because when users change their password from webmail of course dovecot will need to be looking in the same place. # dovecot -n output # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release 6.5 (Carbon) auth_failure_delay = 5 secs auth_username_format = %Ln auth_verbose_passwords = plain first_valid_uid = 9 mail_access_groups = mail mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_after = /dovecotSieveAfter/ sieve_dir = ~/sieve } protocols = imap lmtp sieve service managesieve-login { inet_listener sieve { port = 4190 } } ssl_ca = </etc/pki/dovecot/certs/intermediate20150202.crt ssl_cert = </etc/pki/dovecot/certs/avalon20150202.crt ssl_key = </etc/pki/dovecot/private/avalon20150129.key ssl_verify_client_cert = yes userdb { driver = passwd } protocol lmtp { log_path = /var/log/dovecot-lmtp.log mail_plugins = " sieve" } protocol lda { log_path = /var/log/dovecot-lda.log mail_plugins = " sieve" }

2 4

Roundcubemail problem with Dovecot
by Robert Moskowitz 18 Mar '15

18 Mar '15

I am getting "Connection to storage server failed." in roundcubemail. On doing a google search If find: http://help.directadmin.com/item.php?id=473 Which puts the problem at dovecot. I did get a dovecot update back on 3-5 and that would match to my one roundcube mail user complaining and the delays I am seeing with thunderbird and outlook users. So with my setup, I am trying to figure what are the index files to delete. Say for myself, I am seeing: /home/vmail/htt-consult.com/rgm/dovecot.index /home/vmail/htt-consult.com/rgm/dovecot.index.cache /home/vmail/htt-consult.com/rgm/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Drafts/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Sent/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Spam/dovecot.index.log /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index.cache /home/vmail/htt-consult.com/rgm/.Trash/dovecot.index.log Do I delete all of these? The index.cache files are quite large.

1 1

Re: Dovecot current number of connections being used.
by Joseph Tam 18 Mar '15

18 Mar '15

Jaime Ventura writes: > Is there an easy way to get how many connections are being handled at a > moment? This works: doveadm who -1 2>/dev/null | wc -l If yopu only want to coutn IMAP connections (not POP3), doveadm who -1 2>/dev/null | grep -Fc imap Joseph Tam <jtam.home(a)gmail.com>

2 1

Proxying of non "plain" SASL mechnisms.
by Peter Mogensen 18 Mar '15

18 Mar '15

Hi, I understand from earlier discussions that the reason dovecot doesn't support proxying of other SASL mechanisms than those which supply the plaintext password is that in general it would be possible to proxy any SASL mechanism since it might protect against man-in-the-middle attacks (which would prevent proxying). However, that has led to choice between letting users use PLAIN (or equivalent), or to have the proxy access the target hosts by "master" password. Of course, having the plaintext password the proxy could in principle do other challenge/response SASL handshakes with the target backend, but right now only LOGIN and PLAIN is implemented. So I wondered about the rationale for not just forward the SASL handshake. - First, blindly forwardning will not do, since the mech data has to be decoded anyway to do any per/user passdb lookup (to, say, find the target host). But you don't need authentication to actually succeed to do that. You only need AuthZ-id or AuthN-id. - Secondly, the design of the interaction between imap-login processes and the auth-service in general prevent in general to forward multi-handshake SASL mechanisms, since the authentication must be done before the proxying can be started. But it doesn't prevent forwarding of single handshake SASL mechanisms which use SASL-IR. - Thirdly, while it's correct that some SASL mechanisms protect against man-in-the-middle attacks, that doesn't apply for most single-handshake SASL-IR mechanisms unless they do some kind of channel-binding. (like SASL EXTERNAL) For example, the GS2-KRB5 SASL mech would be perfectly forwarded if just the Kerberos ticket doesn't put restrictions on the client IP-address. So, why not just extend the support for proxy authentication forwarding to any single-handskake SASL-IR mechanism, which doesn't use channel-binding? (which includes PLAIN, but also GS2-KRB5, and possibly others). /Peter

2 2

Dovecot 2.2.15 issues with global ACL
by Ovidiu Moldovan 18 Mar '15

18 Mar '15

Hello, We have upgraded from Dovecot 2.2.13 to 2.2.15 and we are using global ACL file. The content of the ACL file is as following: * owner r INBOX owner lrwstipekxa INBOX/* owner lrwstipekxa user owner rwstipekxa user/* owner rwstipekxa This worked fine but after update any user cannot see any folders from under the INBOX, also they cannot create any new folders. Error into the logs are like this: Debug: acl: Mailbox not in dovecot-acl-list: INBOX Debug: acl: Mailbox not in dovecot-acl-list: INBOX/Chats Debug: acl: Mailbox not in dovecot-acl-list: INBOX/Draft Debug: acl: Mailbox not in dovecot-acl-list: INBOX/INBOX .... I can only see one acl change log at version 2.2.14: http://www.dovecot.org/list/dovecot-news/2014-October/000276.html acl: Global ACL file now supports "quotes" around patterns. But I could not find the reason why the global acl file does not work anymore? Br, Ova

2 2

http://xi.rename-it.nl 2.2.16-1~auto+10/11/12/13: segfault /var/lib/dovecot/auth OR (db_ldap_connect_delayed):
by Denny Fuchs 17 Mar '15

17 Mar '15

hi, I testing around with Kolab with LDAP and have some strange problems, with the auto generated packages for Wheezy. On my first test VM, I have 2:2.2.16~rc1-1~auto+4 installed, and everything works as expected. On a new VM I have 2.2.16-1~auto+13_amd64.deb packages and if I include LDAP backend, I get a segmentation fault on /usr/lib/dovecot/auth: root@kolab:/etc/dovecot/conf.d# /usr/lib/dovecot/auth Segmentation fault with auto+12 and auto+13 If I downgrade to auto+11 or auto+10 I get: Mar 17 14:42:59 kolab dovecot: auth: Panic: file db-ldap.c: line 1228 (db_ldap_connect_delayed): assertion failed: (conn->to == NULL) Mar 17 14:42:59 kolab dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x7b5ef) [0x7f57d815c5ef] -> /usr/lib/dovecot/libdovecot.so.0(+0x7b64e) [0x7f57d815c64e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f57d810b0d5] -> /usr/lib/dovecot/modules/auth/libauthdb_ldap.so(+0x5455) [0x7f57d70e2455] -> dovecot/auth(userdb_init+0x1a) [0x42765a] -> dovecot/auth(auths_init+0xc9) [0x40d979] -> dovecot/auth(main+0x2b5) [0x40cc85] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f57d7523ead] -> dovecot/auth() [0x40cee9] Mar 17 14:42:59 kolab dovecot: auth: Fatal: master: service(auth): child 1161 killed with signal 6 (core dumps disabled) Mar 17 14:42:59 kolab dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Mar 17 14:42:59 kolab dovecot: pop3-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session=<1QMUJXwRTQAAAAAAAAAAAAAAAAAAAAAB> ii dovecot-sieve 2:2.2.16~rc1-1~auto+4 amd64 secure POP3/IMAP server - Sieve filters support root@kolab:/# ldd /usr/lib/dovecot/modules/auth/libauthdb_ldap.so linux-vdso.so.1 => (0x00007ffc4a1c6000) libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 (0x00007effe2d1a000) librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007effe2b12000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007effe2786000) liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 (0x00007effe2577000) libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007effe2361000) libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007effe2145000) libgnutls.so.26 => /usr/lib/x86_64-linux-gnu/libgnutls.so.26 (0x00007effe1e85000) libgcrypt.so.11 => /lib/x86_64-linux-gnu/libgcrypt.so.11 (0x00007effe1c06000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007effe19e9000) /lib64/ld-linux-x86-64.so.2 (0x00007effe3180000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007effe17e5000) libtasn1.so.3 => /usr/lib/x86_64-linux-gnu/libtasn1.so.3 (0x00007effe15d3000) libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007effe13bc000) libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 (0x00007effe11aa000) libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007effe0fa6000) Then I copied from my first VM the libauthdb_ldap.so file on the new test VM to /usr/lib/dovecot/modules/auth/libauthdb_ldap.so (remember: ~rc1-1~auto+4) and the result: root@kolab:/etc/dovecot/conf.d# /usr/lib/dovecot/auth Error: LDAP: binding failed (dn cn=Directory Manager): Invalid credentials and, it works again ... linux-vdso.so.1 => (0x00007fffa00c6000) libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 (0x00007f94b7ec3000) librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f94b7cbb000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f94b792f000) liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 (0x00007f94b7720000) libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f94b750a000) libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007f94b72ee000) libgnutls.so.26 => /usr/lib/x86_64-linux-gnu/libgnutls.so.26 (0x00007f94b702e000) libgcrypt.so.11 => /lib/x86_64-linux-gnu/libgcrypt.so.11 (0x00007f94b6daf000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f94b6b92000) /lib64/ld-linux-x86-64.so.2 (0x00007f94b8328000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f94b698e000) libtasn1.so.3 => /usr/lib/x86_64-linux-gnu/libtasn1.so.3 (0x00007f94b677c000) libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f94b6565000) libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 (0x00007f94b6353000) libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007f94b614f000) So, it seems, that there is something broken with the autogenerated packages, or with my fresh installed Wheey VM (KVM AMD64) in combination with LDAP. any suggestions? cu denny

2 1

Dovecot current number of connections being used.
by Jaime Ventura 17 Mar '15

17 Mar '15

Hey, Is there an easy way to get how many connections are being handled at a moment? I wanted to have that number over the time and see: - Trends on usage during the day - how close is it from reaching the maximum number of connections. - ... I'm searching for a solution without recurring to something like netstat | grep imap | wc -l. Thanks, Jaime

2 1

Patch SERVICE_FIRST_STATUS_TIMEOUT
by Andre Helwig 17 Mar '15

17 Mar '15

Hi list, we had a lot of trouble with our Dovecot Replicating-Cluster installation authenticating against LDAP Service. We ran in a timeout and what happened was that we got more and more search requests running against on our ldap server. And on the dovecot site the process got killed after a couple of seconds. So we ran into a race condition and our LDAP Server was under heavy load. We got a log entry like this: "Initial status notification not received in 30 seconds, killing the process" So we had to apply the attached patch to our Source based Dovecot Cluster. Could you please make a configurable Parameter for our Patched value? That would be great to get this parameter Configurable. Thanks Andre Helwig -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-0 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 3

Dovecot 2.1.7 still accepting SSLv3 though disabled?
by Thomas Preissler 17 Mar '15

17 Mar '15

Hello, I came across a strange problem with my Dovecot 2.1.7 installation (updated Debian Wheezy) in regards to SSL/TLS connections. My configuration is as follows: $ dovecot -n | grep ssl service imap-login { ssl = yes ... } ssl_cert = <...... ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA ssl_key = <...... ssl_protocols = !SSLv3 !SSLv2 This cipherstring has been taken from https://bettercrypto.org/static/applied-crypto-hardening.pdf. But this is not the problem, when I comment it out, Dovecot still behaves the same way. When I enable verbose_ssl I get this: 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2002, ret=-1: unknown state [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [$CLIENTIP] 2015-03-15 08:27:39 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [$CLIENTIP] Is this right? Is SSLv3 used on this connection? But when I explicitely test for SSLv3 support I get $ openssl s_client -connect $SERVERIP:993 -ssl3 CONNECTED(00000003) 140683835029160:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1260:SSL alert number 40 140683835029160:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:598: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1426411304 Timeout : 7200 (sec) Verify return code: 0 (ok) --- Where I got this from says "if you you get a handshake failure, then you don't support SSLv3". But in my case the following output kinda says, that I do support it - with a ciphers of (NONE)? In regards to libraries $ ldd /usr/lib/dovecot/imap-login | grep ssl libssl.so.1.0.0 => /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 (0x00007f1f55025000) $ dpkg -l | grep ssl ii libcrypt-openssl-bignum-perl 0.04-3 amd64 Access OpenSSL multiprecision integer arithmetic libraries ii libcrypt-openssl-dsa-perl 0.13-6 amd64 module which implements the DSA signature verification system ii libcrypt-openssl-rsa-perl 0.28-1 amd64 module for RSA encryption using OpenSSL ii libcrypt-ssleay-perl 0.58-1 amd64 OpenSSL support for LWP ii libio-socket-ssl-perl 1.76-2 all Perl module implementing object oriented interface to SSL sockets ii libnet-ssleay-perl 1.48-1+b1 amd64 Perl module for Secure Sockets Layer (SSL) rc libssl0.9.8 0.9.8o-4squeeze14 amd64 SSL shared libraries ii libssl1.0.0:amd64 1.0.1e-2+deb7u14 amd64 SSL shared libraries ii openssl 1.0.1e-2+deb7u14 amd64 Secure Socket Layer (SSL) binary and related cryptographic tools ii openssl-blacklist 0.5-3 all Blacklists for OpenSSL RSA keys and tools ii python-openssl 0.13-2+deb7u1 amd64 Python 2 wrapper around the OpenSSL library ii ssl-cert 1.0.32 all simple debconf wrapper for OpenSSL ii ssl-cert-check 3.22-1 all proactively handling X.509 certificate expiration ii sslmate 0.6.2-1 all Buy and manage SSL certificates from the command line My NginX is using the same library, and this does indeed support TLSv2, so what I am doing wrong in my Dovecot configuration? Any clues? Regards Thomas -- www.preissler.co.uk | Twitter: @module0x90 | PGP-Key: 75889415 GPG Fingerprint: CCBD 153A D257 CA7E A217 FDF7 5928 03D1 7588 9415

3 2

Released Pigeonhole v0.4.7.rc3 for Dovecot v2.2.16
by Stephan Bosch 17 Mar '15

17 Mar '15

Hello Dovecot users, The rc2 release had a couple of new, rather small, but very annoying bugs. First of all, the path for a file storage wasn't actually normalized, due to a stupid last-minute change before the release. This caused the personal script to be skipped with a warning when there were e.g. duplicate slashes in the path. Second, due to recent changes, the file storage would complain with a temporary error if the directory where the active script symlink would be located was missing. Changelog v0.4.7 (unchanged): * editheader extension: Made protection against addition and deletion of headers configurable separately. Also, the `Received' and `Auto-Submitted' headers are no longer protected against addition by default. * Turned message envelope address parse errors into warnings. * The interpreter now accepts non-standard domain names, e.g. containing '_'. + Implemented the Sieve index extension (RFC 5260). + Implemented support for the mboxmetadata and servermetadata extensions (RFC 5490). + Implemented new sieve commands for the doveadm command line utility. These commands are currently limited to ManageSieve operations, but the other current sieve tools will be migrated to doveadm in the near future as well. + Added more debug output about binary up-to-date checking. + Added script metadata to binary dump output. - Fixed Sieve script binary up-to-date checking by normalizing the script location. - The Sieve interpreter now flushes the duplicate database during start phase of result execution rather than commit phase. This makes sure locks on the duplicate database are released as soon as possible, preventing contention. - Performed a few optimizations in the lexical scanner of the language. - Fixed bug in `:matches' match-type that made a pattern without wildcards match as if there were a '*' at the beginning. - Fixed crash in validation of the string parameter of the comparator tag. - extprograms extension: Made sure supplemental group privileges are also dropped. This was a problem reported by Debian lintian. - Fixed bug in handling of binary errors for action side-effects and message overrides. - file script storage: Restructured storage initialization to address backwards compatibility issues. - dict script storage: Fixed small memory allocation bug. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc3… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc3… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Released Pigeonhole v0.4.7.rc2 for Dovecot v2.2.16
by Stephan Bosch 16 Mar '15

16 Mar '15

Hello Dovecot users, The rc1 release showed a few problems with the up-to-date checking of on-disk binary files. The binary files contain some metadata about the script these were compiled from. If this doesn't match the current script anymore, the script is recompiled. One of these metadata items is the script location. However, this location wasn't normalized, so when the binary would be compiled with sievec it depended on the path provided at the command line. When dumping a script binary, the metadata is now printed as well. Also, I added more debug log lines about up-to-date checking. I improved backwards compatibility for the file script storage a bit relative to the last version. It now properly recognizes a regular file at the symlink path, even when the storage path itself doesn't exist. Changelog v0.4.7 (updated): * editheader extension: Made protection against addition and deletion of headers configurable separately. Also, the `Received' and `Auto-Submitted' headers are no longer protected against addition by default. * Turned message envelope address parse errors into warnings. * The interpreter now accepts non-standard domain names, e.g. containing '_'. + Implemented the Sieve index extension (RFC 5260). + Implemented support for the mboxmetadata and servermetadata extensions (RFC 5490). + Implemented new sieve commands for the doveadm command line utility. These commands are currently limited to ManageSieve operations, but the other current sieve tools will be migrated to doveadm in the near future as well. + Added more debug output about binary up-to-date checking. + Added script metadata to binary dump output. - Fixed Sieve script binary up-to-date checking by normalizing the script location. - The Sieve interpreter now flushes the duplicate database during start phase of result execution rather than commit phase. This makes sure locks on the duplicate database are released as soon as possible, preventing contention. - Performed a few optimizations in the lexical scanner of the language. - Fixed bug in `:matches' match-type that made a pattern without wildcards match as if there were a '*' at the beginning. - Fixed crash in validation of the string parameter of the comparator tag. - extprograms extension: Made sure supplemental group privileges are also dropped. This was a problem reported by Debian lintian. - Fixed bug in handling of binary errors for action side-effects and message overrides. - file script storage: Restructured storage initialization to address backwards compatibility issues. - dict script storage: Fixed small memory allocation bug. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc2… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc2… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 2

Warning: sieve: file storage: Active sieve script symlink is broken: Invalid/unknown path to storage
by Василий Севостьянов 16 Mar '15

16 Mar '15

dovecot version: 2.2.16 (3d8a054a93a9) sieve configuration: plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } For each of the users, ~/.dovecot.sieve is a symlink to ~/sieve/roundcube.sieve Until yesterday, everything was working find. But starting from yesterday's update, the log is filling up with messages like: Mar 16 19:12:32 cs12986 dovecot: lda(postmaster(a)contoso.com <postmaster(a)euro-contact.ru>): Warning: sieve: file storage: Active sieve script symlink /home/virtualmail/contoso.com/it/.dovecot.sieve <http://euct.ru/it/.dovecot.sieve> is broken: Invalid/unknown path to storage (points to /home/virtualmail/contoso.com/it/sieve <http://euct.ru/it/sieve>). Nothing was changed in the config files. What might have gone wrong?

3 4

Configuring Shared Mailbox Dictionaries
by james＠lottspot.com 16 Mar '15

16 Mar '15

Hello, list! I am in the midst of configuring a new Dovecot IMAP server, and I'm preparing to setup shard mailboxes as part of the ocnfiguration. In order to get these setup the way I want, I've figured out that I'm going to have to setup an acl_shared_dict. This is where things start to get confusing for me, as I have had difficulty finding thorough explanations of dictionary configuration. My primary concern is that all my user details are stored in a sqlite database in which the '%n' and '%d' components of username/email addresses are stored in separate columns. The SQL dictionary example in the Shared Mailboxes document [http://wiki2.dovecot.org/SharedMailboxes/Shared] assumes that the username is stored as a singular '%n@%d' key. In my authdb lookups, I use sqlite syntax to concatenate the '%n' and '%d' columns around a '@' character to find the user. Is it possible to implement an acl_shared_dict in some similar fashion? My second question, which is completely unrelated and more out of morbid curiosity than anything (although it could affect my configuration decisions) is that I noticed every dictionary which shows up in the documentation has a "pattern" field. In the case of the acl_shared_dict example, the pattern is 'shared/shared-boxes/user/$to/$from'. I couldn't figure out by studying the example where this value was derived from, or indeed where it is derived from in any example dictionaries which are documented. Can anyone explain the meaning of the "pattern" field and what exactly its value means? Thanks in advance for all your helpful answers! :)

1 1

Problem with replication ("Fatal: -N parameter requires syncing with remote host")
by Casey Stone 16 Mar '15

16 Mar '15

Switching to official dovecot-ee version solved my sync/backup issues, also on Ubuntu. The 12.04 package works on 14.04. It's free and should update fine. Backup your config files first (dovecot and postfix if you use that)! http://shop.dovecot.fi/home/8-dovecot-ee-repository-access.html

1 0

Problem with replication ("Fatal: -N parameter requires syncing with remote host")
by Vanja 16 Mar '15

16 Mar '15

I have been fighting, for 2 days, with a Dovecot setup and I now officially need help :) Basically, I am trying to setup replication between 2 identical Dovecot servers, on different physical servers (different hostnames/etc, of course), and although I've managed to solve many problems I can't overcome the final hurdle. When a mail comes in to one of the servers, replication over TCP should kick in and mail should be replicated, but instead I get this in the mail log: ------------------------------------------------------------------------------------------------- dovecot2 dovecot: doveadm(user1(a)test1.int): Fatal: -N parameter requires syncing with remote host ------------------------------------------------------------------------------------------------- Mail is delivered to dovecot2 server, Postfix delivers it via LMTP, and everything seems to work ok. However, I can't figure out the cause for the error that I am seeing. I have looked into source code and found where this error is triggered (line 834 in doveadm/dsync/doveadm-dsync.c, inside Dovecot 2.2.9 source code), but I am afraid that I don't understand the context (ctx->run_type == DSYNC_RUN_TYPE_LOCAL) and it would take me a lot of time to debug the whole thing from the scratch. I've never looked into Dovecot internals before, so it's all a mystery to me at this point. I've tried stracing the process but the flow does not make sense to me, I can't understand what exactly happens before error is displayed. Also, there is no traffic to port 12345 on other node, so execution fails before syncing even starts (and error message is not related with remote node config/setup/etc). Triggering replication manually, from command line, works as expected: # doveadm sync -A tcp:192.168.1.100 (at this point user1's mail folder is properly updated on remote server) I've tried searching around, but it appears that noone else has this problem(or isn't complaining about it :). I am not sure if I am doing something wrong (apart from replication). I will need to support multiple virtual domains and I am basically using passwd-file for authentication, so I am using a single passwd file for all virtual domain users which allows user lookup (doveadm user '*') to work, which is required by replication. This is configuration file from dovecot2 server (which I use for testing and delivering mails): --- config start --- # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-30-generic x86_64 Ubuntu 14.04.2 LTS ext4 debug_log_path = /var/log/dovecot_debug.log doveadm_password = 67890 doveadm_port = 12345 mail_debug = yes mail_location = maildir:/vmail/mail/%d/%n/Maildir mail_plugins = " notify replication" namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%u /vmail/auth/passwd driver = passwd-file } plugin { mail_replica = 192.168.1.100 } protocols = imap lmtp service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth-worker { unix_listener auth-worker { user = dovecot-auth } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = dovecot-auth } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 10024 } process_min_avail = 3 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%u /vmail/auth/passwd default_fields = uid=vmail gid=vmail home=/vmail/mail/%d/%n driver = passwd-file } protocol lmtp { postmaster_address = root@localhost } --- config end --- Configuration file on other node is exactly the same, except different IP address in mail_replica statement. Any help is much appreciated. Thank you.

1 1

Re: Problem with replication ("Fatal: -N parameter requires syncing with remote host")
by Vanja 16 Mar '15

16 Mar '15

Sorry to post to the list again, but just to confirm that I am seeing same problem with 2.2.16 that I compiled from sources. Same error message appears in the log, can't figure out what in the setup makes replication break. Philipp, can you tell me which auth backend are you using? passwd-file, SQL database or something else? Would you consider posting your 'sanitized' config file here, or emailing it to me privately? Thanks. Vanja On 03/16/2015 03:23 PM, Philipp wrote: > Am 16.03.2015 09:12 schrieb Vanja: >> doveadm_port = 12345 > >> plugin { >> mail_replica = 192.168.1.100 >> } > > would you try: > mail_replica = tcp:192.168.1.100:12345 > which works for me. > > check for firewall settings (both ways) anyway - and I can only advise > to go for 2.2.16; there have been > numerous fixes after 2.2.9 to the whole dsync/replica parts.

1 0

Re: Problem with replication ("Fatal: -N parameter requires syncing with remote host")
by Vanja 16 Mar '15

16 Mar '15

Philipp, I already tried explicitly specifying port, it does not make any difference. I tried quite many 'obvious' (to put it this way) configuration changes and tried changing many things in setup, but it would be too much to list all of them in a post. Basically, I was hoping that someone would know what exactly triggers this behavior, so I could fix it. At this point in time, I would like to see whether I can make this work with 2.2.9 that comes with Ubuntu 14.04, to avoid having to compile anything from sources (for easier maintenance, later on, since I probably won't be the one maintaining this). I am also not sure whether there is a reliable (semi-official?) PPA with latest Dovecot. I saw this one ( https://launchpad.net/~mamarley/+archive/ubuntu/updates ) but I am not sure whether I can rely on it not breaking anything at some point. Thanks. On 03/16/2015 03:23 PM, Philipp wrote: > Am 16.03.2015 09:12 schrieb Vanja: >> doveadm_port = 12345 > >> plugin { >> mail_replica = 192.168.1.100 >> } > > would you try: > mail_replica = tcp:192.168.1.100:12345 > which works for me. > > check for firewall settings (both ways) anyway - and I can only advise > to go for 2.2.16; there have been > numerous fixes after 2.2.9 to the whole dsync/replica parts.

1 0

Overriding dovecot.conf from Userdb Extras
by E.B. 16 Mar '15

16 Mar '15

Hi, I thought I read that anything from dovecot.conf can be overridden in a userdb lookup. Or a passdb lookup with "userdb_" prefix. But I tried for fun change log_path but it never worked. Is that because logging is special, already started logging before it comes to the passdb/userdb lookups? So are there some dovecot.conf settings that cannot be overridden? Thanks!

3 4

Re: How to detect out-of-sync condition
by Joseph Tam 16 Mar '15

16 Mar '15

> I tried to look at a dovecot.index.log and it was unreadable in a text > editor. I didn't see anything in the wiki link about how to view the log. It's not supposed to be human readable -- the point of this exercise was to check whether your indices are really out of date. You can perhaps compare the mtime of the index files and the mailbox. If they're close or the same, then your indices are not out of sync and don't require sync'ing. > So I guess I'll just be guilty of excessive optimizing. > Should I run a daily doveadm index or resync? You've skipped over the first 3 steps (is it really out of sync, is there a better way to avoid it, does the un-sync really cause probems) and went right to a solution for a possibly non-existent problem. Be that as it may, the frequency of re-syncing is up to you. I have no idea how large your userbase is or how intensive this operation will be. If it takes only a minute, you could run it more frequently. If you're going through terabytes of data, less frequently. I'm not quite convince you need it at all: I never had to do a global re-indexing except for a one-time dovecot initializing, or dealing with the odd crash that left indices in a unfixable state (which is more a bug than an unsync problem). Joseph Tam <jtam.home(a)gmail.com>

1 0

Why is Sieve trying to re-compile global scripts?
by E.B. 16 Mar '15

16 Mar '15

I have some global scripts that were running nicely. Then I opened one in an editor and (probably, but not 100% sure) mindlessly saved the file, even though I hadn't made any changes. Shortly after, Sieve errors started showing in the log: Error: 4k5JA74R/1TlIwABG/SpMA: sieve: binary save: failed to create temporary file: open(/usr/local/var/dovecot/sieve/script2.svbin.example.com.4139.) failed: Permission denied... Error: 4k5JA74R/1TlIwABG/SpMA: sieve: The LDA Sieve plugin does not have permission to save global Sieve script binaries; global Sieve scripts like `/usr/local/var/dovecot/sieve/script2.sieve' need to be pre-compiled using the sievec tool Well, OK, is it going by the timestamp on the files? Fine. I recompiled it by hand. Yet, I STILL got these errors! I triple and quadruple checked that the timestamp on the svbin files was more recent. And Sieve was only complaining about one of the two scripts in the directory. I restarted dovecot. No change. So I removed read permission on the .sieve files and only left read permission on the .svbin files. THIS WORKED. No more error. I can live with that, but why was it not complaining before, why was it only complaining about one of my scripts and why would it complain at all when the timestamps on the svbin should have indicated on compilation is needed?

3 14

sieve script not applied
by Joan Aymà 15 Mar '15

15 Mar '15

Hi everyone, I installed all-new server postfix+amavis+dovecot and pigeonhole. Clients, thunderbird and roundcube creates sieve scripts ok and changed ones are seen by eatch other, so server at 4190 accepts the scripts and ensure they are created. But filters onto new mail isn't applied. Example: # rule:[guifinet] if header :contains :comparator "i;octet" "subject" "[guifi-" { fileinto "INBOX.guifinet"; } Isn't the rule correct? Didn't find any troubleshooting on this topic. Any ideas? Thanks.

1 0

Re: How to detect out-of-sync condition
by Joseph Tam 14 Mar '15

14 Mar '15

On Fri, 13 Mar 2015, Cliff Hayes writes: >> By closing off other avenues other than dovecot imap/pop/lda/etc., >> the indices will stay sync'd. > > I use dovecot's lda and dovecot's sieve filter. Then I'm not sure how mailboxes ever get out of sync. > So it looks like I need to compare the index/mailbox mtimes as you suggest. > > What am I looking for? > I see that the indexes are updated when I run the resync. > > I checked my mailbox (that was not resynced) and noticed that > dovecot.index last update was 16 days ago. Just to be clear, you're talking "doveadm index ...", yes? You might have to check dovecot.index.log* as well as they could contain the latest changes that have yet to propagate to the main index file. http://wiki2.dovecot.org/Design/Indexes/TransactionLog > So am I resyncing if the gap is over x days? > If so, is there a way to resync just those mailboxes with a doveadm > command or do I have to write a program look for that condition and run > doveadm when matched? It's possible that "doveadm index" checks modification times as an optimization measure. My recommended game plan: 1) Are your indices *really* out of date (checks logs as Steffen recommends)? 2) If so, how do they get out of date and can you avoid it? 3) If you can't avoid it, does it cause real problems? Most of the time, dovecot will seemlessly rebuild it and it's transparent to the user. 4) If you got this far, run a trial "doveadm index -A INBOX" (assuming you're just concerned about INBOXs) to see if it's really such a bad operation. As Knuth (hallowed be thy name!) said, "premature optimization is the root of all evil." Only after all these steps are found to be unsatisfactory would I consider writing your own scan and fix tool. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: How to detect out-of-sync condition
by Joseph Tam 14 Mar '15

14 Mar '15

Cliff Hayes writes: > I didn't see anything but the log is huge and I could have easily missed > it. > Is there a certain error or phrase I should look for? > If so please advise. In my setup using mbox, typical log entries would be like (Common) Warning: UIDVALIDITY changed ({int} -> {int}) in mbox file ... Error: Next message unexpectedly corrupted in mbox file ... (Rare) Error: Corrupted index cache file {cache-file}: Broken physical size for mail UID ... Error: read({file}) failed: Next message unexpectedly lost from mbox file ... Error: read({file}) failed: Cached message size larger than expected ... Joseph Tam <jtam.home(a)gmail.com>

1 0

JMAP support
by List 13 Mar '15

13 Mar '15

Just found http://jmap.io/ which is a JSON based RPC protocol for synchronizing messages/contacts/calendars. Any plans to support this protocol in Dovecot?

1 0

How to detect out-of-sync condition
by Cliff Hayes 13 Mar '15

13 Mar '15

Hello list, I recently had a user whose mailbox had gone out of sync. Webmail and client inbox totals had become vastly different and response times had become unacceptable. A doveadm force-resync fixed the problem nicely. This will no doubt happen again as we grow the service and I would like to have some type of indication at the server level so I can run a resync on a per-user basis as required. However, I don't know what to look for. I did not see any signs of the problem on the server - but perhaps I did not know what to look for. The only other alternative is for me to do a global resync in the cron.daily but my fear is that this won't scale well for thousands of users. Please advise. Thanks in advance.

3 6

Different realm for different listeners?
by Chris Adams 13 Mar '15

13 Mar '15

I see this has been asked a few times over the years (but not in several years), and the response was along the lines of "maybe someday", so I figured I'd see if someday was here yet... I have a need to have a different default realm for different listeners. Basically, I've a bunch of different domains, and a few of them insist their users not be required to authenticate with "user@domain" and just use "user", and I'm trying to make this work without separate daemons and/or VMs. I'll be using Dovecot 2.2 (most likely 2.2.10 as provided by RHEL/CentOS 7). Thanks. If there's not a way to do this directly in Dovecot, does anybody have any suggestion that doesn't require several different VMs? -- Chris Adams <cma(a)cmadams.net>

3 4

Active directory bind and quota stuff
by Fran 13 Mar '15

13 Mar '15

Hi list, first of all, please excuse me for any grammar mistake on my text, I'm still learning english. I'm making a Dovecot installation using my Active Directory like pass and user DB. I'm setting the per-user quota from an AD field (Initials) and everything seems to work fine, but I would like to know if you could help me to improve a couple of things. --------------------------------------------------------------------------- --------------------------------------------------------------------------- I'm using CentOS 7, this is my Dovecot build: --------------------------------------------------------------------------- # dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL driver plugins: mysql postgresql sqlite Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql # dovecot --version 2.2.10 And this is my /etc/dovecot/dovecot-ldap.conf.ext file: --------------------------------------------------------------------------- hosts = adserver1.dom, adserver2.dom base = DC=dom ldap_version = 3 auth_bind = yes auth_bind_userdn = dom\%u dn = cn=imapUser,cn=Users,dc=dom dnpass = ******** user_filter = (&(samaccountname=%u)(objectClass=person)(|(mail=%u@dom.com)(othermailbox=%u@dom.com))) pass_filter = (&(samaccountname=%u)(objectClass=person)(|(mail=%u@dom.com)(othermailbox=%u@dom.com))) pass_attrs = userPassword=password user_attrs = Initials=quota_rule=*:storage=%$MB --------------------------------------------------------------------------- --------------------------------------------------------------------------- My questions: 1) My AD doesn't allow anonymous searches and I was thinking in a way to avoid the need of have a specific user account with his password stored in a configuration file to do the bind. And I don't know if this is posible, but, does it exist a way to use the same user you are trying to validate to do bind with the AD server? 2) As you can see (user_attrs = Initials=quota_rule=*:storage=%$MB), to set the per-user quota value, I require a numeric value in "Initials" field of my AD. I've realized that if some wrong value is introduced in that field, Dovecot throws an error when you try to validate the user, and hence, imap logon fails. Does it exist any way to bypass that and to use the default quota value if something is wrong with the per-user quota set? Error log with wrong quota values (I wrote the value e34 in the Initials field of user1 in AD, instead of a valid numeric value): * quota refresh command: [root@dmail02 dovecot]# doveadm quota recalc -u user1 doveadm(user1): Error: user user1: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:storage=e34MB: Invalid rule limit value 'storage=e34MB': Unknown unit: e34MB * imap login: Mar 13 14:12:10 dmail02 dovecot: imap(user1): Error: user user1: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:storage=e34MB: Invalid rule limit value 'storage=e34MB': Unknown unit: e34MB Mar 13 14:12:10 dmail02 dovecot: imap(user1): Error: Invalid user settings. Refer to server log for more information. Thank you very much in advance, Fran

1 0

Dovecot fails to compile --with-cdb (and attempted fix)
by Jeffrey 'jf' Lim 13 Mar '15

13 Mar '15

Dovecot version: 2.2.15 Tinycdb: 0.78 I'm attempting to compile dovecot --with-cdb, but keep getting into a problem with cdb: ======================== libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,--as-needed -o .libs/anvil main.o anvil-connection.o anvil-settings.o connect-limit.o penalty.o -Wl,--export-dynamic ../../src/lib-dovecot/.libs/libdovecot.so -ldl -lrt -Wl,-rpath -Wl,/usr/local/lib/dovecot ../../src/lib-dovecot/.libs/libdovecot.so: undefined reference to `cdb_read' ../../src/lib-dovecot/.libs/libdovecot.so: undefined reference to `cdb_find' ../../src/lib-dovecot/.libs/libdovecot.so: undefined reference to `cdb_free' ../../src/lib-dovecot/.libs/libdovecot.so: undefined reference to `cdb_init' collect2: ld returned 1 exit status make[3]: *** [anvil] Error 1 make[3]: Leaving directory `/home/jf/dovecot-2.2.15/src/anvil' ========================== After some troubleshooting, I've finally managed to get dovecot to compile, albeit with a hack: --- src/lib-dovecot/Makefile.old 2015-03-09 17:36:15.690179802 +0000 +++ src/lib-dovecot/Makefile 2015-03-09 18:01:43.075719700 +0000 @@ -230,7 +230,7 @@ LIBDOVECOT_STORAGE_DEPS = $(top_builddir)/src/lib-storage/ libdovecot-storage.la $(top_builddir)/src/lib-imap-storage/ libimap-storage.la LIBICONV = LIBOBJS = -LIBS = -lrt +LIBS = -lrt -lcdb LIBTOOL = $(SHELL) $(top_builddir)/libtool LIBWRAP_LIBS = LINKED_STORAGE_LDADD = This isn't the best fix, admittedly (I wish I were more familiar with autotools), but I'll say that the configure process isn't right yet for cdb. Can anybody produce a better fix? Would love to learn more. thanks, -jf -- He who settles on the idea of the intelligent man as a static entity only shows himself to be a fool. Mensan / Full-Stack Technical Polymath / System Administrator 12 years over the entire web stack: Performance, Sysadmin, Ruby and Frontend

2 6

doveadm sync subscribed folders only
by Jernej Porenta 13 Mar '15

13 Mar '15

Heya, is there a simple way to use "doveadm sync" for subscribed folders only? Since the migration from UW-IMAP, our users can actually subscribe to non-mbox files and now, when we are pushing new servers out, we are migrating our mboxes to dbox format and we would like to migrate only subscribed folders. I know, there is a -m switch which can be used to transfer subscribed folders for each user, but it makes it quite unusable with escaping and all other problems with such volume, so just wondering if there is a simple way to migrate subscribed folders only. Thank you in advance, cheers, Jernej

1 0

Re: How to detect out-of-sync condition
by Cliff Hayes 13 Mar '15

13 Mar '15

Thanks. I use dovecot's lda and dovecot's sieve filter. So it looks like I need to compare the index/mailbox mtimes as you suggest. What am I looking for? I see that the indexes are updated when I run the resync. I checked my mailbox (that was not resynced) and noticed that dovecot.index last update was 16 days ago. So am I resyncing if the gap is over x days? If so, is there a way to resync just those mailboxes with a doveadm command or do I have to write a program look for that condition and run doveadm when matched? Cliff Hayes <chayes(a)afo.net> writes: > I recently had a user whose mailbox had gone out of sync. > Webmail and client inbox totals had become vastly different and response > times had become unacceptable. > A doveadm force-resync fixed the problem nicely. > > This will no doubt happen again as we grow the service and I would like to have some type of indication at the server level so I can run a resync on a per-user basis as required. Perhaps what you ought to look for is how are they getting out of sync in the first place. Assuming your webmail is a IMAP/POP client, I would look at ways that your user's INBOX can be modified out of Dovecot's sight. For example, does your LDA use dovecot's lda/lmtp, or do your users run mail clients that directly manipulate mailbox files, or do you use procmail/mail filters? By closing off other avenues other than dovecot imap/pop/lda/etc., the indices will stay sync'd. If you really have to do manual resyncing, comparing index/mailbox mtimes might be one way to do it. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: How to detect out-of-sync condition
by Joseph Tam 13 Mar '15

13 Mar '15

Cliff Hayes <chayes(a)afo.net> writes: > I recently had a user whose mailbox had gone out of sync. > Webmail and client inbox totals had become vastly different and response > times had become unacceptable. > A doveadm force-resync fixed the problem nicely. > > This will no doubt happen again as we grow the service and I would like > to have some type of indication at the server level so I can run a > resync on a per-user basis as required. Perhaps what you ought to look for is how are they getting out of sync in the first place. Assuming your webmail is a IMAP/POP client, I would look at ways that your user's INBOX can be modified out of Dovecot's sight. For example, does your LDA use dovecot's lda/lmtp, or do your users run mail clients that directly manipulate mailbox files, or do you use procmail/mail filters? By closing off other avenues other than dovecot imap/pop/lda/etc., the indices will stay sync'd. If you really have to do manual resyncing, comparing index/mailbox mtimes might be one way to do it. Joseph Tam <jtam.home(a)gmail.com>

1 0

doveconf -a Segmentation Fault
by Dan LaSota 13 Mar '15

13 Mar '15

Getting "Segmentation Fault" When I run doveconf -a Dan LaSota Instructional Designer, UAF eLearning (907) 451-4067 dan.lasota(a)alaska.edu http://elearning.uaf.edu

3 3

looks like a repeat of this problem
by Laeeth Isharc 12 Mar '15

12 Mar '15

http://permalink.gmane.org/gmane.mail.imap.dovecot/80062

1 0

location of dovecot.rawlog-directory
by Hardy Flor 12 Mar '15

12 Mar '15

How is it possible to have the dovecot.rawlog-directory outside the mail_location? A link to another directory is not because it is checked in rawlog.c S_ISDIR to directory.

3 4

rawlog with -i not worked
by Hardy Flor 12 Mar '15

12 Mar '15

Hello, I have the rawlog enabled according to the manual:http://wiki2.dovecot.org/Debugging/Rawlog Without -i everything is wonderful, a coredump is with the -i parameter created **************************************** service imap-postlogin { executable = script-login -d rawlog -i user = vmail } **************************************** GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/rawlog...(no debugging symbols found)...done. [New LWP 29312] warning: Can't read pathname for load map: Eingabe-/Ausgabefehler. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/usr/lib/dovecot/rawlog -i /usr/lib/dovecot/script-login'. Program terminated with signal 11, Segmentation fault. #0 0x00007f66bd2fe6c7 in master_instance_list_find_by_name () from /usr/lib/dovecot/libdovecot.so.0 (gdb) bt full #0 0x00007f66bd2fe6c7 in master_instance_list_find_by_name () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #1 0x00007f66bd300ea5 in master_service_parse_option () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #2 0x00007f66bd300fd4 in master_getopt () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #3 0x0000000000401e15 in main () No symbol table info available. (gdb)

3 4

v2.2.16 release candidate released
by Timo Sirainen 12 Mar '15

12 Mar '15

http://dovecot.org/releases/2.2/rc/dovecot-2.2.16.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.16.rc1.tar.gz.sig Looks like it's been a long time since v2.2.15. There have been a ton of changes since it was released though, so here's a release candidate first to find out if somebody can find any bugs before the final v2.2.16. Unfortunately I haven't had time/energy to read Dovecot mailing list for a while now. I'm hoping this will change, but I don't really expect it to happen anytime soon. On the positive side for Dovecot, it's now becoming used in more and more multi-million user installations, which brings all kinds of nice new improvements. The largest changes since v2.2.15: * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes dovecot.index.cache file. The cache file was rarely the problem so this just caused unnecessary slowness. * Mailbox name limits changed during mailbox creation: Each part of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up to 255 chars long (instead of 200). This also reduces the max number of hierarchical levels to 16 (instead of 20) to keep the maximum name length 4096 (a common PATH_MAX limit). The 255 char limit is hopefully large enough for migrations from all existing systems. It's also the limit on many filesystems. + director: Added director_consistent_hashing setting to enable consistent hashing (instead of the mostly-random MD5 hashing). This causes fewer user moves between backends when backend counts are changed, which may improve performance (mainly due to caching). + director: Added support for "tags", which allows one director ring to serve multiple backend clusters with different sets of users. + LMTP server: Added lmtp_user_concurrency_limit setting to limit how many LMTP deliveries can be done concurrently for a single user. + LMTP server: Added support for STARTTLS command. + If logging data is generated faster than it can be written, log a warning about it and show information about it in log process's process title in ps output. Also don't allow a single service to flood too long at the cost of delaying other services' logging. + stats: Added support for getting global statistics. + stats: Use the same session IDs as the rest of Dovecot. + stats: Plugins can now create their own statistics fields + doveadm server: Non-mail related commands can now also be used via doveadm server (TCP socket). + doveadm proxying: passdb lookup can now override doveadm_port and change the username. + doveadm: Search query supports now "oldestonly" parameter to stop immediately on the first non-match. This can be used to optimize: doveadm expunge mailbox Trash savedbefore 30d oldestonly + doveadm: Added "save" command to directly save mails to specified mailbox (bypassing Sieve). + doveadm fetch: Added body.snippet field, which returns the first 100 chars of a message without whitespace or HTML tags. The result is stored into dovecot.index.cache, so it can be fetched efficiently. + dsync: Added -t <timestamp> parameter to sync only mails newer than the given received-timestamp. + dsync: Added -F [-]<flag> parameter to sync only mails with[out] the given flag/keyword. + dsync: Added -a <mailbox> parameter to specify the virtual mailbox containing user's all mails. If this mailbox is already found to contain the wanted mail (by its GUID), the message is copied from there instead of being re-saved. (This isn't efficient enough yet for incremental replication.) + dsync: -m parameter can now specify \Special-use names for mailboxes. + imapc: Added imapc_features=gmail-migration to help migrations from GMail. See http://wiki2.dovecot.org/Migration/Gmail + imapc: Added imapc_features=search to support IMAP SEARCH command. (Currently requires ESEARCH support from remote server.) + expire plugin: Added expire_cache=yes setting to cache most of the database lookups in dovecot index files. + quota: If overquota-flag in userdb doesn't match the current quota usage, execute a configured script. + redis dict: Added support for expiring keys (:expire_secs=n) and specifying the database number (:db=n) - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if buffering was split in the middle of a UTF-8 character. This affected at least searching messages. - String sanitization for some logged output wasn't done properly: UTF-8 text could have been truncated wrongly or the truncation may not have happened at all. - fts-lucene: Lookups from virtual mailbox consisting of over 32 physical mailboxes could have caused crashes.

4 7

Released Pigeonhole v0.4.7.rc1 for Dovecot v2.2.16.rc1
by Stephan Bosch 12 Mar '15

12 Mar '15

Hello Dovecot users, Last time I had a few stupid problems in the releases, so I'll follow Timo's example and I release an RC first. The highlights include the implementation of the index and metadata extensions. Quite a few bugs are fixed as well. Changelog v0.4.7: * editheader extension: Made protection against addition and deletion of headers configurable separately. Also, the `Received' and `Auto-Submitted' headers are no longer protected against addition by default. * Turned message envelope address parse errors into warnings. * The interpreter now accepts non-standard domain names, e.g. containing '_'. + Implemented the Sieve index extension (RFC 5260). + Implemented support for the mboxmetadata and servermetadata extensions (RFC 5490). + Implemented new sieve commands for the doveadm command line utility. These commands are currently limited to ManageSieve operations, but the other current sieve tools will be migrated to doveadm in the near future as well. + Added more debug output to binary up-to-date checking. - The Sieve interpreter now flushes duplicate database during start phase of result execution rather than commit phase. This makes sure locks on the duplicate database are released as soon as possible, preventing contention. - Performed a few optimizations in the lexical scanner of the language. - Fixed bug in `:matches' match-type that made a pattern without wildcards match as if there were a '*' at the beginning. - file storage: Restructured storage initialization to address backwards compatibility issues. - Fixed crash in validation of the string parameter of the comparator tag. - extprograms extension: Made sure supplemental group privileges are also dropped. This was a problem reported by Debian lintian. - Fixed bug in handling of binary errors for action side-effects and message overrides. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc1… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.7.rc1… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

5 12

Expunge (?)
by Muzaffer Tolga Ozses 12 Mar '15

12 Mar '15

Hi, I don't know if this is the correct term. Let me elaborate. From time to time, I want to expunge (?) the mail folder so that users' Trash'd mails don't occupy space. So, here are my questions: 1. Is this the correct term? 2. Is it a Good Idea™ to do it? Thanks, -- mto

2 2

Sieve security: Any way to protect credentials used in extprograms?
by E.B. 11 Mar '15

11 Mar '15

I need to connect to a database in a script called using Sieve extprograms plugin. When delivering mail, Sieve is running as the mail recipient user, which means any files, either the sieve script or the extprograms it invokes, are run under that user's permissions. What would be a way to hide the database credentials in a more restricted file? I can think of... * Store the credentials in the database itself, return them from a DICT lookup that is fed to the sieve script. The credentials would have to be duplicated for every user record in the database. * Somehow put the value in the Sieve environment, but I'm not sure how to get a value into the environment (just return it in a userdb lookup?) and then how to get at that value once I'm executing the sieve script (can I retrieve it with the "environment" extension?) Are there better ways? [Of course, if I could do more elaborate things like call a stored procedure from Dovecot DICT then I could avoid this situation]

2 1

Sieve reject with ORIG-TO vs TO
by E.B. 11 Mar '15

11 Mar '15

Hi, The bounce message generated by the reject extension has what looks like a hard coded message prefix that comes before the configurable reason text: "Your message to <username> was automatically rejected:" In some cases, the <username> is NOT the original-to address, which can cause confusion to the sender or expose private aliasing data that some people might want to hide. Is there a way to make the reject extension use the original-to address in that hard-coded message prefix? Is there a way to completely customize the FULL message? Is there a way to customize the headers for such messages?

2 1

FTS search with CLucene giving odd results/exposing config issue
by David Gessel 11 Mar '15

11 Mar '15

I recently got FTS search with Clucene working on FreeBSD 10.1 (I had some trouble with 9.3, postponed solving it, then restarted with 10.1 by manually installing libtextcat, a listed dependency on http://wiki2.dovecot.org/Plugins/FTS/Lucene, but not part of the FreeBSD makefile: maybe that helped, maybe it was irrelevant). However, I now get some anomalous results. I'm putting them together as they may be related. Or, maybe not. 1) Searching from Thunderbird returns 35x as many results for the same term as searching from the command line. I'm not sure if the indexes are created or enumerable. 2) There seems to be a glitch in the maildir naming structure that results in a double slash (//) which doesn't seem to impact IMAP serving or Sieve, but maybe is causing the problem above with Clucene. Any hints? If I run a search from Thunderbird and "run search on server" for a somewhat infrequently used term like "titanium," I get results in more or less every archive folder one by one over about 20 minutes of searching and get about 516 results. It seems to run a little faster without the "run search on server" checkbox selected, but Thunderbird on Windows is abandonware and the only useful datapoint is 516 results. Maybe it is time for Claws. Anyway, if I run: # doveadm search -u user(a)domain.com mailbox '*' body titanium doveadm(user(a)domain.com): Error: stat(/mail/domain.com/user//.dovecot.sieve/tmp) failed: Not a directory doveadm(user(a)domain.com): Error: Syncing mailbox dovecot.sieve failed: Internal error occurred. Refer to server log for more information. [2015-03-11 09:11:16] bcadc922ba26b953a25701002812f29a 812478 bcadc922ba26b953a25701002812f29a 9338037 bcadc922ba26b953a25701002812f29a 9342918 bcadc922ba26b953a25701002812f29a 9343205 bcadc922ba26b953a25701002812f29a 9346096 bcadc922ba26b953a25701002812f29a 9350977 bcadc922ba26b953a25701002812f29a 9351379 bcadc922ba26b953a25701002812f29a 9352318 bcadc922ba26b953a25701002812f29a 9352441 bcadc922ba26b953a25701002812f29a 9352501 3d5d982e3a89b853c12c01002812f29a 1901940 3d5d982e3a89b853c12c01002812f29a 1908073 3d5d982e3a89b853c12c01002812f29a 1941453 3d5d982e3a89b853c12c01002812f29a 2036962 3d5d982e3a89b853c12c01002812f29a 2038360 I get 15 results. # doveadm fetch -u user(a)domain.com "mailbox" mailbox-guid 3d5d982e3a89b853c12c01002812f29a uid 1908073 mailbox: INBOX All are from the inbox. This takes roughly 30 seconds (much faster, that's good, though still not super fast) and in the logs I see promising messages like: Mar 11 09:27:52 host dovecot: indexer-worker(user(a)domain.com): Indexed 3708 messages in Commerce but also slightly less promising messages like: Mar 11 09:27:52 host dovecot: indexer-worker(user(a)domain.com): Warning: Maildir /mail/domain.com/user//.Bulkmail: Expunged message reappeared, giving a new UID (old uid=9335155, file=1426089637.M350915P91305.host,S=23845,W=24282:2,) If I execute # doveadm index -A '*' I get doveadm(user(a)domain.com): Error: stat(/mail/domain.com/user//.dovecot.sieve/tmp) failed: Not a directory doveadm(user(a)domain.com): Error: Syncing mailbox dovecot.sieve failed: Internal error occurred. Refer to server log for more information. [2015-03-11 09:51:26] (there's nothing in the server log) But note in both previous results a double slash (//) in the directory structure. I don't think that's right. So: Does # doveadm search search subfolders? The internets say either '*' or INBOX should search the hierarchy and the search command does set off indexing operations on every subfolder as indicated by the logs, but the results are only from the top level folder.... perhaps that is related to... Why do some errors report a double slash (//) in directory names? I don't seem to be having any other symptoms (if, indeed, this is one) of incompatibilities. My sieve filters work just fine and are accessible from the managesieve plugin in Thunderbird. My config file is below: # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: FreeBSD 10.1-RELEASE amd64 auth_default_realm = domain.com auth_mechanisms = plain login auth_realms = domain.com domain2.org disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 hostname = domain.com imap_idle_notify_interval = 29 mins last_valid_gid = 5000 last_valid_uid = 5000 lda_mailbox_autocreate = yes listen = * mail_gid = 5000 mail_location = maildir:~:CONTROL=/var/no-quota/%u mail_plugins = quota mail_log notify fts fts_lucene mail_temp_dir = /var/tmp mail_uid = 5000 maildir_broken_filename_sizes = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate spamtest spamtestplus editheader mbox_lazy_writes = no namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. mime_parts mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_rule = *:storage=50G quota_rule2 = Trash:storage=+30%% quota_rule3 = Sent:storage=+30%% quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_before = /usr/local/etc/dovecot/sieve/ sieve_dir = ~/sieve sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric +editheader sieve_global_dir = /usr/local/etc/dovecot/sieve } postmaster_address = user(a)domain.com protocols = imap lmtp sieve sieve sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 128 M } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = required ssl_cert = </usr/local/etc/ca/host-cert.pem ssl_key = </usr/local/etc/ca/host-unencrypted-key.pem ssl_prefer_server_ciphers = yes userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota mail_log notify fts fts_lucene sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = quota mail_log notify fts fts_lucene imap_quota imap_zlib } protocol lmtp { mail_plugins = quota mail_log notify fts fts_lucene sieve } (END)

1 0

libdriver_msql.so
by kaniggl 11 Mar '15

11 Mar '15

Hello, i installed dovecot 2.11.1 on ubuntu Linux dadd3041 3.16.0-30-generic #40-Ubuntu SMP Mon Jan 12 22:07:11 UTC 2015 ppc64le ppc64le ppc64le GNU/Linux To make it clear, architecture is PowerPC 64bit Then i installed dovecot via apt-get. But the file /usr/lib/dovecot/modules/auth/libdriver_mysql.so is missing. So i compiled dovecot myself on this system and got a file /usr/lib/dovecot/modules/auth/libdriver_mysql.so Then i restartetd the server and try to do a login via a webmailer (roundcube), but i get no connection to the database server. This is found in /var/log/mail.log Mar 11 15:19:04 dadd3041 dovecot: master: Dovecot v2.2.9 starting up (core dumps disabled) Mar 11 15:19:04 dadd3041 postfix/master[3367]: reload -- version 2.11.1, configuration /etc/postfix Mar 11 15:19:04 dadd3041 postfix/master[3367]: terminating on signal 15 Mar 11 15:19:04 dadd3041 postfix/master[3597]: daemon started -- version 2.11.1, configuration /etc/postfix Mar 11 15:19:25 dadd3041 dovecot: auth: Error: dlopen(/usr/lib/dovecot/modules/auth/libdriver_mysql.so) failed: /usr/lib/dovecot/modules/auth/libdriver_mysql.so: wrong ELF class: ELFCLASS32 Mar 11 15:19:25 dadd3041 dovecot: auth: Fatal: Unknown database driver 'mysql' Mar 11 15:19:25 dadd3041 dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Mar 11 15:19:25 dadd3041 dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, TLS handshaking, session=<rJpS9AMR9wAAAAAAAAAAAAAAAAAAAAAB> I know this means it is not a 64bit object but how could i achieve to get right one? best regards, kaniggl

3 4

dec2str ...
by Hardy Flor 11 Mar '15

11 Mar '15

a very stupid question: What reason is there for an output with printf until dec2str to convert the numeric value to a string and not to use the format identifier "%d" or "u%"?

2 1

full text index "per user"?
by Ralf Hildebrandt 11 Mar '15

11 Mar '15

Is there any way of disabling the creation of a full text index on a per user basis? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 1

Deduplicate Public Folder
by Bobber 11 Mar '15

11 Mar '15

How do you perform the doveadm deduplicate command on public folders? If I specify a user, nothing is found. Using -A also doesn't seem to work. -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

2 1

Sieve extprograms socket vs. direct execution
by E.B. 11 Mar '15

11 Mar '15

Hi, I'm hoping to get some clarification of the differences between calling a script using the Sieve extprograms plugin execute method via direct execution or using the socket feature. Being naive, I see the socket option and think that way you tell Dovecot to spawn a daemon and I think that's going to be far superior in performance. But if that really was the difference, why would direct execution even be an option? (And doesn't the daemon still have to spawn a new shell every time if the target is a shell script? Does that defeat the purpose of having a daemon?) So I don't really know what the difference is, and under what circumstances you'd want to use one or the other. Can someone please help clarify?

1 0

Extending dict lookups (SQL)?
by E.B. 11 Mar '15

11 Mar '15

Hi, How difficult would it be to try to hack some extension to the Dovecot dict mechanism for someone unfamiliar with the code? I'm using SQL as a backend and am looking for, at a minimum, the ability to specify a WHERE clause in addition to the built-in one that feeds the current username. The field name to test the additional value against would be necessary as well of course. Naturally, full query customization would be great to have. Perhaps providing a mechanism for the caller to pass data for the extra WHERE clause is the hardest part, not sure... but it can't hurt to ask. Don't take this as lack of gratitude - I can work with what's there and greatly appreciate it.

1 0

Re: Outlook 2013/2010 nightmare #2
by Joseph Tam 11 Mar '15

11 Mar '15

"David.M.Clark" <david(a)davrom.com> writes: > So the bottom line for this particular site is: > > Set the "Root Folder" for IMAP in outlook to "mail". This is messy from > my beloved Linux command line perspective in that you end up with > ${HOME}/login_name/mail/mail. But it does work and stops the Outlook > crashes. If "root folder" is Outlook's parlance for IMAP prefix, you might find it helpful to configure a namespace alias. For examples, see http://wiki2.dovecot.org/Namespaces (Section Backwards Compatibility: UW-IMAP) It will map different npamespaces to the same folder so you don't have this mail/mail/ goofiness. > If you want to share a single e-mail account across multiple PCs running > Outlook 2013, you _cannot_ use the "Root Folder" of "mail" as I have > indicated above. The workaround is to create each subsequent PC with a > "mail2", "mail3" etc folder (without the quote marks of course). If you > set up two PCs with the same Root Folder, the new PC crashes out of > Outlook and eventually so does the original PC. The only way around this > is to delete the identity and PST files in Outlook and strictly set them > up again to different "mail" something folders. Almost reminds me of the > old MS "Share Violation" issue :-) > > So after the user is set to the mail2/mail3 folder and it appears under > the user's original "mail" folder, you then have to blow away the > mail2/mail3 folder and then do a symbolic link to the mail folder: > > ln -s mail mail2 Again, namespace aliases might help: you can configure as many as you like. It's a kludge though -- the behaviour you report is really bizarre. Joseph Tam <jtam.home(a)gmail.com>

1 0

Migrating from NetApp to ZFS
by Frido Otten 10 Mar '15

10 Mar '15

Hi All, We're currently in the process of migrating from a NetApp storage to a ZFS storage, both shared over NFS. We've ran into some problems which were solved by switching to dotlocks instead of flock. But now there's one problem left with the dotlock method. When connecting to Dovecot/IMAP, and moving messages from one folder to another, it is very slow and I'm suspecting this has all to do with the dotlock method. During this process of moving mail, the dotlock file is created and stays there for about 90 seconds. The mail client is unresponsive in this time period. This happens also when a new message is delivered to the mailbox. The dovecot example config talks about that dotlocking is using some tricks which may create more disk I/O than other locking methods. What are these tricks and can it be the cause of the slowness? We've tested it on different ZFS storages and the problem seems to only exist on ZFS storages which have their ZIL on SSD's Just creating and removing a file from the CLI is fast though. Regards, Frido

1 0

Re: Outlook 2013/2010 nightmare #2
by David.M.Clark 10 Mar '15

10 Mar '15

Yes Eric, Outlook also has a declaration that as of either version 2010 or 2013, they no longer download IMAP headers, they download the whole message - thank God for faster Internet connections these days - could you imagine that in the older dialup days? Still it is a waste of bandwidth and disk space to do this. I am so tired of how they claim to use the RFC and indicate they are 'compatible' with a certain protocol/procedure, but really just move the goal posts so you can only talk to M$ stuff at the back end using their enforcements. All part of locking people into the "perpetual upgrade" path I guess. On 03/10/2015 10:22 AM, Eric Broch wrote: > Not only does M$ Outlook not work well with others, it strips headers I > use for training spam filters. > > On 3/9/2015 5:48 PM, David.M.Clark wrote: >> Hi All and my sincere thanks to Jakob and Joseph for your responses. >> >> I got around the nightmare for this site but it is far from >> satisfactory and given both Thunderbird, Roundcube and the Android >> e-mail client work perfectly as expected, this following links >> comments enforce what I experienced over the weekend: >> >> http://comments.gmane.org/gmane.mail.imap.dovecot/79231 >> >> I have not struck this for other sites using Outlook 2013 (though I >> continually banter that Outlook version 'anything' is designed for MS >> Exchange and nothing else), but then again I have not had Outlook >> needing to share the same e-mail accounts across PCs. >> >> So the bottom line for this particular site is: >> >> Set the "Root Folder" for IMAP in outlook to "mail". This is messy >> from my beloved Linux command line perspective in that you end up with >> ${HOME}/login_name/mail/mail. But it does work and stops the Outlook >> crashes. >> >> If you set it to the Outlook recommended "INBOX" or "Inbox", you can't >> see or access subfolders. >> >> Now here comes the ugly part of Outlook 2013 using IMAP to Linux (at >> least for this site): >> >> If you want to share a single e-mail account across multiple PCs >> running Outlook 2013, you _cannot_ use the "Root Folder" of "mail" as >> I have indicated above. The workaround is to create each subsequent PC >> with a "mail2", "mail3" etc folder (without the quote marks of >> course). If you set up two PCs with the same Root Folder, the new PC >> crashes out of Outlook and eventually so does the original PC. The >> only way around this is to delete the identity and PST files in >> Outlook and strictly set them up again to different "mail" something >> folders. Almost reminds me of the old MS "Share Violation" issue :-) >> >> So after the user is set to the mail2/mail3 folder and it appears >> under the user's original "mail" folder, you then have to blow away >> the mail2/mail3 folder and then do a symbolic link to the mail folder: >> >> ln -s mail mail2 >> >> In this way, both users on the PCs will be seeing the same IMAP >> folders, being mail and mail2 on two different PCs. Naturally to add a >> third PC to this would be "mail3" etc. >> >> Now the other ugly part of this is you also need to update their >> .subscriptions file in ${HOME}/login_name/mail to show folders like: >> >> mail/Sent Items >> mail/Junk E-mails >> mail2/Sent Items >> mail2/Junk E-mails >> >> Given you would need to manually do this above, and is just not >> suitable, I have written two scripts to automate this process and it >> works cleanly so far. >> >> The first script does the automatic removal of the mail2/mail3 etc >> directory and creates the symbolic link, the second script is used to >> redo the .subscriptions file if the contents of the 'mail' directory >> change. >> >> You may need to mod these but I have a cron running as root to do this. >> >> Script 1 (mail_root_enforce): >> >> =----------------------------------------------------------------------------------= >> >> COMPLETE_HOME=/u/home >> cd ${COMPLETE_HOME} >> >> for USERHOME in * >> do >> ls -d ${USERHOME}/mail/mail? | while read CHECKME >> do >> JUST_CHECKME=`basename ${CHECKME}` >> if [ -d ${CHECKME} -a -L ${CHECKME} ] >> then >> #echo "${CHECKME} is ok" >> : >> else >> echo "${CHECKME} is _not_ ok" >> cd ${USERHOME}/mail >> rm -rf ${COMPLETE_HOME}/${CHECKME} >> ln -s mail ${JUST_CHECKME} >> fi >> done >> cd ${COMPLETE_HOME} >> done >> =----------------------------------------------------------------------------------= >> >> >> Script 2 (mail_multi_users): >> >> =----------------------------------------------------------------------------------= >> >> cd /u/home >> >> for THIS_USER in * >> do >> MORE_THAN_1=`ls -d ${THIS_USER}/mail/mail* | wc -l` >> if [ "${MORE_THAN_1}" -gt "1" ] >> then >> # echo "${THIS_USER} has more than one" >> ls ${THIS_USER}/mail/mail >${THIS_USER}/subcount >> if [ ! -f ${THIS_USER}/subcount_last ] >> then >> >${THIS_USER}/subcount_last >> fi >> ISDIFF=`diff ${THIS_USER}/subcount ${THIS_USER}/subcount_last | >> wc -l | awk '{print $1}'` >> if [ "${ISDIFF}" -gt "0" ] >> then >> # echo "Is Different" >> ls ${THIS_USER}/mail/mail >${THIS_USER}/subscription_tmp >> >${THIS_USER}/subscription_new >> for ROOT_MAIL_DIR in ${THIS_USER}/mail/mail* >> do >> MAIL_BASE_NAME=`basename ${ROOT_MAIL_DIR}` >> cat ${THIS_USER}/subscription_tmp | sed >> "s:^:$MAIL_BASE_NAME/:g" >>${THIS_USER}/subscription_new >> done >> cp ${THIS_USER}/subscription_new >> ${THIS_USER}/mail/.subscriptions >> chown ${THIS_USER}:popusers ${THIS_USER}/mail/.subscriptions >> cp ${THIS_USER}/subcount ${THIS_USER}/subcount_last >> fi >> fi >> done >> =----------------------------------------------------------------------------------= >> >> >> You will note the ${HOME} directories are all under /u/home so if you >> do sadly need to use these scripts, please change the /u/home to suite >> the ${HOME} location set on your server. I prefer to run this as root >> to enforce things and not have any funny permission errors, and also >> to save needing to run multiple instances for multiples users. >> >> One annoying caveat that the site will have to get used to: the mail2, >> mail3 folders do show up when using good e-mail clients like >> Thunderbird, SOGo, Roundcube or Android e-mail client. This is because >> they are seeing the contents of the .subscriptions file. I haven't >> looked into Dovecot doco for possible multiple .subscription files to >> make the folders bit look 'nicer'. I will look at something like >> 'namespace' to see if this might help. Please bear in mind this was in >> an emergency to get things at least 'working' so the users were happy >> when they hit the office on Monday. >> >> A documented story for your perusal and use if you are 'stuck' like I >> was. I will continue to try and see if there is a more elegant >> work-around but for now, this is all I can come up with. >> >> PS: I notice everyone suppresses their e-mail footer so doing the same >> here :-) >> -- As always, I remain at your service. Kindest Regards, David.M.Clark

3 2

Re: Outlook 2013/2010 nightmare #3
by David.M.Clark 10 Mar '15

10 Mar '15

Hi All, Sorry for the extra e-mail. Given I am helping roll out this identical setup again I am thinking I will test another approach which I am hoping will work but given having two or more PCs trying to access the 'mail' folder crashed at this site on the weekend, I went away from this. But in my thinking perhaps it 'might' work if same login ID is not used to access the exact same area. Example: 1. Setup user "accounts" and open the permissions of its folders. (${HOME} = /u/home/accounts) 2. Create "accounts2" but have its ${HOME} directory set to the same as "accounts". (${HOME} = /u/home/accounts) Make sure accounts2 can fully access everything - perhaps I will need to enforce a central GID (group ID) for each user to belong to (eg., accounts). 3. See if the same crash issue happens if using a different login name. This is using the reverse approach of not having separate Root Folder paths for the same Linux login ID. If this does work I can then reverse engineer the issue at the site over the weekend as well. Will keep you posted. -- As always, I remain at your service. Kindest Regards, David.M.Clark

1 0

Re: Outlook 2013/2010 nightmare #2
by David.M.Clark 10 Mar '15

10 Mar '15

Hi All and my sincere thanks to Jakob and Joseph for your responses. I got around the nightmare for this site but it is far from satisfactory and given both Thunderbird, Roundcube and the Android e-mail client work perfectly as expected, this following links comments enforce what I experienced over the weekend: http://comments.gmane.org/gmane.mail.imap.dovecot/79231 I have not struck this for other sites using Outlook 2013 (though I continually banter that Outlook version 'anything' is designed for MS Exchange and nothing else), but then again I have not had Outlook needing to share the same e-mail accounts across PCs. So the bottom line for this particular site is: Set the "Root Folder" for IMAP in outlook to "mail". This is messy from my beloved Linux command line perspective in that you end up with ${HOME}/login_name/mail/mail. But it does work and stops the Outlook crashes. If you set it to the Outlook recommended "INBOX" or "Inbox", you can't see or access subfolders. Now here comes the ugly part of Outlook 2013 using IMAP to Linux (at least for this site): If you want to share a single e-mail account across multiple PCs running Outlook 2013, you _cannot_ use the "Root Folder" of "mail" as I have indicated above. The workaround is to create each subsequent PC with a "mail2", "mail3" etc folder (without the quote marks of course). If you set up two PCs with the same Root Folder, the new PC crashes out of Outlook and eventually so does the original PC. The only way around this is to delete the identity and PST files in Outlook and strictly set them up again to different "mail" something folders. Almost reminds me of the old MS "Share Violation" issue :-) So after the user is set to the mail2/mail3 folder and it appears under the user's original "mail" folder, you then have to blow away the mail2/mail3 folder and then do a symbolic link to the mail folder: ln -s mail mail2 In this way, both users on the PCs will be seeing the same IMAP folders, being mail and mail2 on two different PCs. Naturally to add a third PC to this would be "mail3" etc. Now the other ugly part of this is you also need to update their .subscriptions file in ${HOME}/login_name/mail to show folders like: mail/Sent Items mail/Junk E-mails mail2/Sent Items mail2/Junk E-mails Given you would need to manually do this above, and is just not suitable, I have written two scripts to automate this process and it works cleanly so far. The first script does the automatic removal of the mail2/mail3 etc directory and creates the symbolic link, the second script is used to redo the .subscriptions file if the contents of the 'mail' directory change. You may need to mod these but I have a cron running as root to do this. Script 1 (mail_root_enforce): =----------------------------------------------------------------------------------= COMPLETE_HOME=/u/home cd ${COMPLETE_HOME} for USERHOME in * do ls -d ${USERHOME}/mail/mail? | while read CHECKME do JUST_CHECKME=`basename ${CHECKME}` if [ -d ${CHECKME} -a -L ${CHECKME} ] then #echo "${CHECKME} is ok" : else echo "${CHECKME} is _not_ ok" cd ${USERHOME}/mail rm -rf ${COMPLETE_HOME}/${CHECKME} ln -s mail ${JUST_CHECKME} fi done cd ${COMPLETE_HOME} done =----------------------------------------------------------------------------------= Script 2 (mail_multi_users): =----------------------------------------------------------------------------------= cd /u/home for THIS_USER in * do MORE_THAN_1=`ls -d ${THIS_USER}/mail/mail* | wc -l` if [ "${MORE_THAN_1}" -gt "1" ] then # echo "${THIS_USER} has more than one" ls ${THIS_USER}/mail/mail >${THIS_USER}/subcount if [ ! -f ${THIS_USER}/subcount_last ] then >${THIS_USER}/subcount_last fi ISDIFF=`diff ${THIS_USER}/subcount ${THIS_USER}/subcount_last | wc -l | awk '{print $1}'` if [ "${ISDIFF}" -gt "0" ] then # echo "Is Different" ls ${THIS_USER}/mail/mail >${THIS_USER}/subscription_tmp >${THIS_USER}/subscription_new for ROOT_MAIL_DIR in ${THIS_USER}/mail/mail* do MAIL_BASE_NAME=`basename ${ROOT_MAIL_DIR}` cat ${THIS_USER}/subscription_tmp | sed "s:^:$MAIL_BASE_NAME/:g" >>${THIS_USER}/subscription_new done cp ${THIS_USER}/subscription_new ${THIS_USER}/mail/.subscriptions chown ${THIS_USER}:popusers ${THIS_USER}/mail/.subscriptions cp ${THIS_USER}/subcount ${THIS_USER}/subcount_last fi fi done =----------------------------------------------------------------------------------= You will note the ${HOME} directories are all under /u/home so if you do sadly need to use these scripts, please change the /u/home to suite the ${HOME} location set on your server. I prefer to run this as root to enforce things and not have any funny permission errors, and also to save needing to run multiple instances for multiples users. One annoying caveat that the site will have to get used to: the mail2, mail3 folders do show up when using good e-mail clients like Thunderbird, SOGo, Roundcube or Android e-mail client. This is because they are seeing the contents of the .subscriptions file. I haven't looked into Dovecot doco for possible multiple .subscription files to make the folders bit look 'nicer'. I will look at something like 'namespace' to see if this might help. Please bear in mind this was in an emergency to get things at least 'working' so the users were happy when they hit the office on Monday. A documented story for your perusal and use if you are 'stuck' like I was. I will continue to try and see if there is a more elegant work-around but for now, this is all I can come up with. PS: I notice everyone suppresses their e-mail footer so doing the same here :-) -- As always, I remain at your service. Kindest Regards, David.M.Clark

1 0

Outlook 2013/2010 nightmare
by David.M.Clark 09 Mar '15

09 Mar '15

Hi All, This is my first post so forgive me if this hits the wrong list. I have been using dovecot for years happily with SendMail on mainly CentOS servers, and my customers are starting to more and more use Thunderbird, so my perfect model is: Linux --> Dovecot --> SendMail --> Thunderbird (or mobile phone e-mail app). I do have some customers using Outlook or Windows Live Mail, and these are for the most part working fine with IMAP - I don't do POP. My mod to the dovecot.conf file: disable_plaintext_auth=no My mod to conf.d/10-mail.conf: #mail_location = mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u My mod to conf.d/10-master.conf: #default_internal_user = dovecot service imap-login { inet_listener imap { port = 143 } inet_listener imap_second { port = 10143 } inet_listener imaps { #port = 993 #ssl = yes } - I do the 10143 bit so I can pseudo hide port 143 for clients with devices that access both internally and externally - port forwarded on MikroTik routers for my customers. All goes well for many years with the above configs, and continues to be awesome as always. Under the user's ${HOME} directory they end up with a lovely 'mail' directory and all of the e-mail client folders live in harmony under there. This weekend I am helping a customer cut over his customer from legacy POP based e-mail uses with splatterings of Outlook 2010 and 2013 throughout the company, to using Linux with IMAP in the setup as described above as per my standard configs. The issue starts when you add an IMAP user to the Outlook client and upon opening it, initially, it tries to find a "Sent" Items folder under IMAP to send from. To this end I have traditionally gone into the dialogue box that opens, click on the IMAP account to receive a list of possible folders, but it now immediately crashes indicating Outlook has had an error, and it all goes to hell from there. Outlook then cannot open but keeps crashing with its "unknown error". Up to last week at another site with Windows Live Mail, this was not an issue. By modifying the e-mail account via Control Panel, I can delete or modify the account and try again. Here is what I found: If I don't specify a 'root' folder under the "Advanced" tab which also contains the port selections for 143 and 25, it fails. If I follow the MS recommended root folder example from Microsoft and use INBOX, or Inbox, it 'does' stop the error but you can't create subfolders - I am assuming as this is picking up the .imap/INBOX folder or something and makes sense that it can't create folders under INBOX/Inbox, particularly if this is a file rather than a directory that dovecot/Outlook are pointing to. What I have found is I can 'lie' to Outlook and put in a 'mail' folder. This results in a ${HOME}/login_name/mail/mail folder, but I don't care, as it happily puts files under mail/mail. Now here is something totally strange: If I try to put this same account on another PC so users can 'share' the same e-mail account, even with my 'mail' root folder work-around, it crashes again. All through this, Thuderbird works fine and so does RoundCube - SOGo will be up and working a bit later once I get the initial part up and going... but I digress but good to know it is only Outlook doing this. To share multiple accounts I am currently getting the subsequent PCs that need to share a universal account to select a root folder mail2, mail3 etc. I then delete these folders and symbolic link the mail2, mail3 etc to the mail directory - yucky fix, but kind of works with some auto scripting of .subscriptions to follow so all of the Outlook clients sync to the one 'real' root folder. I have never seen this before and have customers running all kinds of IMAP e-mail clients to dovecot on Linux. I saw an MS posted bug on something for IMAP and they recommend rolling back MS updates to fix it - but I am not sure the client can or will do that. This kind of random issue that only affects this site at present is why I only recommend people use e-mail clients like Thunderbird because it just 'works'. The users at this site would not switch and will cite they have been working in a POP situation on their other Linux box since Adam was a boy. Any help would be very much appreciated. I like to think I can do this with my eyes shut by now, but this one has got me stumped. -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) =----------------------------------------------------------------------= Davrom Consulting Pty Ltd E-mail : david(a)davrom.com PO Box 1644, Sunnybank Hills, 4109 Twitter: @DavidClark1961 ABN: 81 096 990 804 MSN: david(a)davrom.com Phone/Fax: 61-7-32720267 Skype: dmc1961 Mobile: 0418-763124 Google: dmc1961(a)gmail.com Podcast: http://www.davrom.com/ldup/ldup_rss.xml =---------------------- http://www.davrom.com -------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =----------------------------------------------------------------------= Please note: Any e-mail communication bearing this signature is for the exclusive purpose of the sender and is not for publication without the expressed permission of the sender or respective sender's organisation. =----------------------------------------------------------------------=

2 1

Expunge messages older than
by absolutely_free＠libero.it 09 Mar '15

09 Mar '15

Hi, I am using Dovecot 2.2.13 on cPanel server. Is there a way to delete messages older than some date for a number of users (in every subfolder)? Thank you

3 2

Re: Outlook 2013/2010 nightmare
by Joseph Tam 09 Mar '15

09 Mar '15

"David.M.Clark" <david(a)davrom.com> writes: > I do have some customers using Outlook or Windows Live Mail, and these > are for the most part working fine with IMAP - I don't do POP. > ... > The issue starts when you add an IMAP user to the Outlook client and > upon opening it, initially, it tries to find a "Sent" Items folder under > IMAP to send from. To this end I have traditionally gone into the > dialogue box that opens, click on the IMAP account to receive a list of > possible folders, but it now immediately crashes indicating Outlook has > had an error, and it all goes to hell from there. Outlook then cannot > open but keeps crashing with its "unknown error". > Up to last week at another site with Windows Live Mail, this was not an > issue. Just a shot in the dark, but have you enabled the workarounds? http://wiki2.dovecot.org/Clients Some clients like, like Outlook, have known problems which dovecot can dance around. in 20-imap.conf # Workarounds for various client bugs: # delay-newmail: # Send EXISTS/RECENT new mail notifications only when replying to NOOP # and CHECK commands. Some clients ignore them otherwise, for example OSX # Mail (<v2.1). Outlook Express breaks more badly though, without this it # may show user "Message no longer in server" errors. Note that OE6 still # breaks even with this workaround if synchronization is set to # "Headers Only". # tb-extra-mailbox-sep: # Thunderbird gets somehow confused with LAYOUT=fs (mbox and dbox) and # adds extra '/' suffixes to mailbox names. This option causes Dovecot to # ignore the extra '/' instead of treating it as invalid mailbox name. # tb-lsub-flags: # Show \Noselect flags for LSUB replies with LAYOUT=fs (e.g. mbox). # This makes Thunderbird realize they aren't selectable and show them # greyed out, instead of only later giving "not selectable" popup error. # # The list is space-separated. imap_client_workarounds = delay-newmail Joseph Tam <jtam.home(a)gmail.com>

1 0

dovecot auth-worker error happens when I enabled the dovecot to consider both the system account and the MySQL virtual mailbox databases.
by Emmanuel Chanel 08 Mar '15

08 Mar '15

Version: 2.2.9 & 2.2.15 ( http://ppa.launchpad.net/malte.swart/dovecot-2.2/ubuntu ) OS: Ubuntu 14.04 Server LTS I installed Ubuntu 14.04.2 LTS newly on my new server... And I try to configure the mail server considering both my system account and the virtual mailboxes, by seeing https://www.exratione.com/2014/05/a-mailserver-on-ubuntu-1404-postfix-dovec… But when I configured by uncommenting #!include auth-sql.conf.ext , it doesn't auth... Possibly, it's a trouble with the configurations of postfix and of dovecot. But I don't understand why... When I enable either auth-system.conf.ext or auth-sql.conf.ext , it works... My doveconf -n http://pastebin.com/MU1LL63d dovecot-sql.conf.ext http://pastebin.com/PJkTnPB3 tail /var/log/mail.log by debug mode / dovecot 2.2.15 http://pastebin.com/1TRQL49d Mar 6 07:45:12 gateway dovecot: auth: Debug: client in: AUTH#0114#011PLAIN#011service=imap#011secured#011session=xS6uSpIQvQDAqAAC#011lip=192.168.0.1#011rip=192.168.0.2#011lport=143#011rport=38333 Mar 6 07:45:12 gateway dovecot: auth: Debug: client passdb out: CONT#0114#011 Mar 6 07:45:12 gateway dovecot: auth: Debug: client in: CONT<hidden> Mar 6 07:45:12 gateway dovecot: auth-worker(22933): Debug: pam(emmanuel,192.168.0.2): lookup service=dovecot Mar 6 07:45:12 gateway dovecot: auth: Error: auth worker: Aborted PASSV request for emmanuel: Worker process died unexpectedly Mar 6 07:45:12 gateway dovecot: auth-worker(22936): Debug: sql(emmanuel,192.168.0.2): query: SELECT username as user, password, '/home/vmail//emmanuel' as userdb_home, 'maildir:/home/vmail//emmanuel' as userdb_mail, 65000 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = 'emmanuel' AND active = '1' Mar 6 07:45:12 gateway dovecot: auth-worker(22933): Fatal: master: service(auth-worker): child 22933 killed with signal 11 (core dumped) Mar 6 07:45:12 gateway dovecot: auth-worker(22936): sql(emmanuel,192.168.0.2): unknown user Mar 6 07:45:12 gateway dovecot: auth-worker(23755): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 6 07:45:12 gateway dovecot: auth-worker(23755): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 6 07:45:14 gateway dovecot: auth: Debug: client passdb out: FAIL#0114#011user=emmanuel#011temp Mar 6 07:45:14 gateway dovecot: auth: Debug: client in: AUTH#0115#011LOGIN#011service=imap#011secured#011session=xS6uSpIQvQDAqAAC#011lip=192.168.0.1#011rip=192.168.0.2#011lport=143#011rport=38333 Mar 6 07:45:14 gateway dovecot: auth: Debug: client passdb out: CONT#0115#011VXNlcm5hbWU6 Mar 6 07:45:14 gateway dovecot: auth: Debug: client in: CONT<hidden> Mar 6 07:45:14 gateway dovecot: auth: Debug: client passdb out: CONT#0115#011UGFzc3dvcmQ6 Mar 6 07:45:14 gateway dovecot: auth: Debug: client in: CONT<hidden> Mar 6 07:45:14 gateway dovecot: auth-worker(22936): Debug: pam(emmanuel,192.168.0.2): lookup service=dovecot Mar 6 07:45:14 gateway dovecot: auth: Error: auth worker: Aborted PASSV request for emmanuel: Worker process died unexpectedly Mar 6 07:45:14 gateway dovecot: auth-worker(23755): Debug: sql(emmanuel,192.168.0.2): query: SELECT username as user, password, '/home/vmail//emmanuel' as userdb_home, 'maildir:/home/vmail//emmanuel' as userdb_mail, 65000 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = 'emmanuel' AND active = '1' Mar 6 07:45:14 gateway dovecot: auth-worker(22936): Fatal: master: service(auth-worker): child 22936 killed with signal 11 (core dumped) Mar 6 07:45:14 gateway dovecot: auth-worker(23755): sql(emmanuel,192.168.0.2): unknown user Mar 6 07:45:14 gateway dovecot: auth-worker(23764): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 6 07:45:14 gateway dovecot: auth-worker(23764): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 6 07:45:16 gateway dovecot: auth: Debug: client passdb out: FAIL#0115#011user=emmanuel#011temp Mar 6 07:45:16 gateway dovecot: auth: Debug: client in: AUTH#0116#011PLAIN#011service=imap#011secured#011session=xS6uSpIQvQDAqAAC#011lip=192.168.0.1#011rip=192.168.0.2#011lport=143#011rport=38333#011resp=<hidden> Mar 6 07:45:16 gateway dovecot: auth-worker(23755): Debug: pam(emmanuel,192.168.0.2): lookup service=dovecot Mar 6 07:45:16 gateway dovecot: auth: Error: auth worker: Aborted PASSV request for emmanuel: Worker process died unexpectedly Mar 6 07:45:16 gateway dovecot: auth-worker(23764): Debug: sql(emmanuel,192.168.0.2): query: SELECT username as user, password, '/home/vmail//emmanuel' as userdb_home, 'maildir:/home/vmail//emmanuel' as userdb_mail, 65000 as userdb_uid, 8 as userdb_gid FROM mailbox WHERE username = 'emmanuel' AND active = '1' Mar 6 07:45:16 gateway dovecot: auth-worker(23755): Fatal: master: service(auth-worker): child 23755 killed with signal 11 (core dumped) Mar 6 07:45:16 gateway dovecot: auth-worker(23764): sql(emmanuel,192.168.0.2): unknown user Mar 6 07:45:16 gateway dovecot: auth-worker(23767): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 6 07:45:16 gateway dovecot: auth-worker(23767): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 6 07:45:18 gateway dovecot: auth: Debug: client passdb out: FAIL#0116#011user=emmanuel#011temp -- Emmanuel Chanel( emmanuelchanel(a)gmail.com )

1 3

Sieve can't find Extprograms or Extdata
by E.B. 08 Mar '15

08 Mar '15

Hi, On a new install-from-source with Dovecot 2.2.16rc1, Piegeonhole 0.4.6 and a grab of the newest Extdata code, I confirmed basic Sieve functionality is working (made a simple sieve script with a test on message subject resulting in a fileinto action). But I cannot get Sieve to see Extdata or Extprograms. sievec reports "Warning: sieve: ignored unknown extension 'vnd.dovecot.filter' while configuring available extensions" and the same for vnd.dovecot.extdata. And of course for the user script, "error: require command: unknown Sieve capability `vnd.dovecot.filter'" (same with extdata) I'm pretty sure this is a library path problem, but I've tried symlinking and restarting dovecot with as many iterations of library paths as I can think of but still same problem. The lib90_sieve_extdata_plugin.so and lib90_sieve_extprograms_plugin.so are in /usr/local/lib/dovecot/sieve and all the rest of the normal dovecot libraries are one level above in /usr/local/lib/dovecot. I tried creating symlinks for a "modules" directory and a "modules/sieve" directory, I tried symlinking these two librarie files themselves into the top level dovecot library directory, and a few other ideas, but no luck. Is there a way I can tell where Sieve expects its libraries to reside? To see where it is looking? I didn't provide any arguments to the configure command for pigeonhole as well as extdata and it seems like the libs got placed somewhere sensible, but I don't know what else to do.

2 3

[PATCH] Fix dovecot 1.2 build with LibreSSL
by Bernard Spil 07 Mar '15

07 Mar '15

Hi All, mail/dovecot build fails when linked against LibreSSL. This is due to LibreSSL no longer including comp.h from ssl.h/ssl3.h. See https://wiki.freebsd.org/LibreSSL as well. This patch fixes the build failure. Build log attached as well (not any more, too large! Get it via link just above). Please commit this fix to the 1.2 branch (2.1 branch is not affected) Kind regards, Bernard Spil.

1 0

Identify mail for attachment hash
by Daniel Miller 06 Mar '15

06 Mar '15

How can I find the message associated with a given attachment hash? For example, if I know that: /ff/23/ff23873c712474ad0f48cbd81485eaeaba3d8468-e1b4513a2eb8eb53b16400009db5accb is missing, I want to find the message associated with it so I can determine if it's critical and I need to recover it from another source, or if I can simply delete the old message. -- Daniel

1 0

Sieve editheader should support adding Received and Auto-Submitted headers
by Lee Maguire 06 Mar '15

06 Mar '15

In order to simplify auto-response suppression and other filtering, I want to synthesise an Auto-Submitted header on notification mails that should have them but do not. In a sieve file I add the following: if anyof ( header :contains ["From","Sender"] “info(a)example.com" ) { if header :contains "Subject" [" just joined "," just left "] { if not exists "Auto-Submitted" { addheader "Auto-Submitted" "auto-generated (via sieve)"; } } However this doesn’t work and results in the following error > main script: line 205: warning: addheader action: specified header field `Auto-Submitted' is protected; modification denied. (Workaround for this specific issue would probably be to use a List-* header instead.) Looking at http://hg.rename-it.nl/dovecot-2.2-pigeonhole/file/c8edece267cd/src/lib-sie… I can see that "Auto-Submitted” and “Received” are hardcoded to be blocked without reference to whether they are to be added or removed. However, the hard restriction in RFC 5293 on Auto-Submitted and Received only applies to the use of deleteheader and not addheader. https://tools.ietf.org/html/rfc5293#section-6 > As a matter of local policy, implementations MAY limit which header > fields may be deleted and which header fields may be added. However, > implementations MUST NOT permit attempts to delete "Received" and > "Auto-Submitted" header fields and MUST permit both addition and > deletion of the "Subject" header field. Using Dovecot version 2.1.7 but I assume it’s not version specific issue.

2 1

LMTP error: Too many concurrent deliveries for user (in reply to end of DATA command)
by Ralf Hildebrandt 06 Mar '15

06 Mar '15

I updated dovecot today and all over a sudden I'm getting: Mar 6 14:40:46 mail postfix/lmtp[3150]: 3kz95y3nX3zCtTS: to=<recipient(a)backup.invalid>, relay=127.0.0.1[private/dovecot-lmtp], delay=88, delays=87/0.94/0.01/0.01, dsn=4.3.0, status=deferred (host 127.0.0.1[private/dovecot-lmtp] said: 451 4.3.0 <recipient(a)backup.invalid> Too many concurrent deliveries for user (in reply to end of DATA command)) Why is that? Which setting must I tweak? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 6

IP drop list
by Jim Pazarena 05 Mar '15

05 Mar '15

I wonder if there is an easy way to provide dovecot a flat text file of ipv4 #'s which should be ignored or dropped? I have accumulated 45,000+ IPs which routinely try dictionary and 12345678 password attempts. The file is too big to create firewall drops, and I don't want to compile with wrappers *if* dovecot has an easy ability to do this. If dovecot could parse a flat text file of IPs and drop connections it would sure put a dent in these attempts. Thanks.

15 28

Fwd: Re: IP drop list
by Jim Pazarena 05 Mar '15

05 Mar '15

On 2015-03-02 2:02 AM, Jochen Bern wrote: > On 03/01/2015 08:53 AM, Jim Pazarena wrote: >> I wonder if there is an easy way to provide dovecot a flat text file of >> ipv4 #'s which should be ignored or dropped? >> >> I have accumulated 45,000+ IPs which routinely try dictionary and >> 12345678 password attempts. The file is too big to create firewall >> drops [...] > > The inherent assumption here is that dovecot, using a "flat file", will > be able to process the block list more effectively than the firewall, > which is a tool written for the *purpose* but supposedly unable to even > *try* due to the list's size. That sounds ... counterintuitive. I am the original poster and just came back to this thread. When the first couple replies were "fail2ban" I lost interest. The reason I contemplated a flat text scan by dovecot is because, for the most part, my dovecot is low volume. So even if parsing a flat text file is less 'efficient' than a firewall insertion, it WOULD serve to defeat dictionary attacks rather readily. I already have a routine which scans my dovecot logs for goofy attacks such as dictionary or 12345 attempts. And since the attacks are pop/IMAP only, that is the only avenue which I wanted to defeat. This question garnered lots and lots of responses and I appreciate them all and read them all. And out of all the responses I think I will pursue the ipset routine. It seems easy enough and can act at the firewall level. The DNS RBL would be cool. I am also cognizant that 45,000 SHOULD have a TTL. However, these were IPs attempting to fetch email with obviously hacker type passwords. If, later, a given IP is re-assigned to a 'legitimate' person, they would still be able to send an email to me ' postmaster@ ' asking about an inability to fetch email. But parsing the flat text file would STILL be my preference. I'll look at the source and see if I can figure out where to inject such code. Like I said, my dovecot is low volume, so a fraction of a second at connection time is low impact. Considering that the flat text file may hang around in the memory cache it could even be less impact than low.

4 3

Receiving emails problem
by Gintare Ragaisiene 05 Mar '15

05 Mar '15

Hello, I have DirectAdmin system installed with CentOS OS. I created a user and a user email account. Then I tried to send email from my website (which is written on PHP5) to my mailbox. Everything seemed ok, but I did not received letter on the mailbox. The same is wehen I am trying to send through webmail SquirrelMail. I got a record on var/log/mailog: Mar 5 17:07:15 432282 dovecot[535]: imap-login: Login: user=<gintare>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=7134, secured, session=<Rdpd7IsQhgB/AAAB> Mar 5 17:07:15 432282 dovecot[535]: imap(gintare): Disconnected: Logged out in=79 out=766 Please, help me. Versions: DirectAdmin - 1.4 CentOS - 6.6 Dovecot - 2.2.15 SquirrelMail (wbmail) - 1.4.23 Thanks, Gintare

2 1

Dovecot Full Text Search: HTTP 500 : Unknown fieldType 'text_general' specified on field text. [SERIOUS]
by Kevin Laurie 05 Mar '15

05 Mar '15

Hi Muzzafer, I get the error as specified below when i try to added it in as a field:- I dont think text_general is a valid field? HTTP ERROR 500 Problem accessing /solr/. Reason: {msg=SolrCore 'collection1' is not available due to init failure: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml,trace=org.apache.solr.common.SolrException: SolrCore 'collection1' is not available due to init failure: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.core.CoreContainer.getCore(CoreContainer.java:745) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:307) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:207) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:557) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1075) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:384) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1009) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:255) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116) at org.eclipse.jetty.server.Server.handle(Server.java:368) at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489) at org.eclipse.jetty.server.BlockingHttpConnection.handleRequest(BlockingHttpConnection.java:53) at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:942) at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1004) at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:640) at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235) at org.eclipse.jetty.server.BlockingHttpConnection.handle(BlockingHttpConnection.java:72) at org.eclipse.jetty.server.bio.SocketConnector$ConnectorEndPoint.run(SocketConnector.java:264) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.solr.common.SolrException: Could not load conf for core collection1: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.core.ConfigSetService.getConfig(ConfigSetService.java:66) at org.apache.solr.core.CoreContainer.create(CoreContainer.java:489) at org.apache.solr.core.CoreContainer$1.call(CoreContainer.java:255) at org.apache.solr.core.CoreContainer$1.call(CoreContainer.java:249) at java.util.concurrent.FutureTask.run(FutureTask.java:262) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) ... 1 more Caused by: org.apache.solr.common.SolrException: Unknown fieldType 'text_general' specified on field text. Schema file is /opt/solr/solr/collection1/conf/schema.xml at org.apache.solr.schema.IndexSchema.readSchema(IndexSchema.java:595) at org.apache.solr.schema.IndexSchema.<init>(IndexSchema.java:166) at org.apache.solr.schema.IndexSchemaFactory.create(IndexSchemaFactory.java:55) at org.apache.solr.schema.IndexSchemaFactory.buildIndexSchema(IndexSchemaFactory.java:69) at org.apache.solr.core.ConfigSetService.createIndexSchema(ConfigSetService.java:90) at org.apache.solr.core.ConfigSetService.getConfig(ConfigSetService.java:62) ... 7 more Caused by: org.apache.solr.common.SolrException: Unknown fieldType 'text_general' specified on field text at org.apache.solr.schema.IndexSchema.loadFields(IndexSchema.java:638) at org.apache.solr.schema.IndexSchema.readSchema(IndexSchema.java:489) ... 12 more ,code=500} On Thu, Mar 5, 2015 at 5:04 PM, Muzaffer Tolga Ozses <tolga(a)ozses.net> wrote: > Sure thing > > On 5 March 2015 at 11:52, Kevin Laurie <superinterstellar(a)gmail.com> wrote: >> >> No i dont have it. >> there is body field though. I think text is needed. Let me add it in and >> see. >> Thanks >> >> >> On Thu, Mar 5, 2015 at 4:42 PM, Muzaffer Tolga Ozses <tolga(a)ozses.net> >> wrote: >> > Leon gave you the answer. Check if you have it, define if you don't, and >> > restart the service. >> > >> > On 5 March 2015 at 11:24, Kevin Laurie <superinterstellar(a)gmail.com> >> > wrote: >> >> >> >> Hi Muzaffer, >> >> Could you help by checking this? Should I provide my solrconfig.xml >> >> too? >> >> Please advise urgently. I really need this to work man.Thanks! >> >> >> >> >> >> >> >> >> >>  >> >> <schema name="dovecot" version="1.5"> >> >> >> >> <field name="_version_" type="long" indexed="true" stored="true"/> >> >> <field name="_root_" type="string" indexed="true" stored="false"/> >> >> >> >> <types> >> >>  >> >> <fieldType name="string" class="solr.StrField" omitNorms="true"/> >> >> <fieldType name="long" class="solr.LongField" omitNorms="true"/> >> >> <fieldType name="slong" class="solr.SortableLongField" >> >> omitNorms="true"/> >> >> <fieldType name="float" class="solr.FloatField" omitNorms="true"/> >> >> <fieldType name="boolean" class="solr.BoolField" omitNorms="true"/> >> >> >> >> <fieldType name="text" class="solr.TextField" >> >> positionIncrementGap="100"> >> >> <analyzer type="index"> >> >> <tokenizer class="solr.WhitespaceTokenizerFactory"/> >> >> <filter class="solr.StopFilterFactory" ignoreCase="true" >> >> words="stopwords.txt"/> >> >> <filter class="solr.WordDelimiterFilterFactory" >> >> generateWordParts="1" generateNumberParts="1" catenateWords="1" >> >> catenateNumbers="1" catenateAll="0"/> >> >> <filter class="solr.LowerCaseFilterFactory"/> >> >>  >> >> <filter class="solr.SnowballPorterFilterFactory" >> >> protected="protwords.txt"/> >> >> <filter class="solr.NGramFilterFactory" minGramSize="3" >> >> maxGramSize="15"/> >> >> <filter class="solr.RemoveDuplicatesTokenFilterFactory"/> >> >> </analyzer> >> >> <analyzer type="query"> >> >> <tokenizer class="solr.WhitespaceTokenizerFactory"/> >> >> <filter class="solr.SynonymFilterFactory" >> >> synonyms="synonyms.txt" ignoreCase="true" expand="true"/> >> >> <filter class="solr.StopFilterFactory" ignoreCase="true" >> >> words="stopwords.txt"/> >> >> <filter class="solr.WordDelimiterFilterFactory" >> >> generateWordParts="1" generateNumberParts="1" catenateWords="0" >> >> catenateNumbers="0" catenateAll="0"/> >> >> <filter class="solr.LowerCaseFilterFactory"/> >> >>  >> >> <filter class="solr.SnowballPorterFilterFactory" >> >> protected="protwords.txt"/> >> >> <filter class="solr.RemoveDuplicatesTokenFilterFactory"/> >> >> </analyzer> >> >> </fieldType> >> >> </types> >> >> >> >> >> >> <fields> >> >> <field name="id" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="uid" type="slong" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="box" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> <field name="user" type="string" indexed="true" stored="true" >> >> required="true" /> >> >> >> >> <field name="hdr" type="text" indexed="true" stored="false" /> >> >> <field name="body" type="text" indexed="true" stored="false" /> >> >> >> >> <field name="from" type="text" indexed="true" stored="false" /> >> >> <field name="to" type="text" indexed="true" stored="false" /> >> >> <field name="cc" type="text" indexed="true" stored="false" /> >> >> <field name="bcc" type="text" indexed="true" stored="false" /> >> >> <field name="subject" type="text" indexed="true" stored="false" /> >> >> </fields> >> >> >> >> <uniqueKey>id</uniqueKey> >> >> <defaultSearchField>body</defaultSearchField> >> >> <solrQueryParser defaultOperator="AND" /> >> >> </schema> >> >> >> >> >> >> On Thu, Mar 5, 2015 at 3:48 PM, Leon Kyneur <leon(a)dexterous.org> wrote: >> >> > In your schema.XML check you have defined: >> >> > >> >> > <field name="text" type="text_general" indexed="true" stored="false" >> >> > multiValued="true"/> >> >> > >> >> > On 05/03/2015 7:11 PM, "Kevin Laurie" <superinterstellar(a)gmail.com> >> >> > wrote: >> >> >> >> >> >> Hello, >> >> >> My dovecot constantly runs into this error. >> >> >> I want to fix this one last time, I am tired of troubleshooting so >> >> >> please someone give me a lasting and proper solution for this error. >> >> >> I >> >> >> think its a problem with the dovecot-solr module. >> >> >> >> >> >> Please tell me how do I find the root of this problem with Dovecot. >> >> >> There is a problem with the body search text field. It always >> >> >> fails(with no result), other searches work(ie. search date, subject >> >> >> etc, ) The field-text I believe is missing. Please help. Desperate >> >> >> here! >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> 2/25/2015, 11:32:30 PM ERROR SolrCore >> >> >> org.apache.solr.common. >> >> >> SolrException: undefined field text >> >> >> >> >> >> org.apache.solr.common.SolrException: undefined field text >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1269) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.schema.IndexSchema$SolrQueryAnalyzer.getWrappedAnalyzer(IndexSchema.java:434) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.lucene.analysis.DelegatingAnalyzerWrapper$DelegatingReuseStrategy.getReusableComponents(DelegatingAnalyzerWrapper.java:74) >> >> >> at >> >> >> org.apache.lucene.analysis.Analyzer.tokenStream(Analyzer.java:175) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.lucene.util.QueryBuilder.createFieldQuery(QueryBuilder.java:207) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.newFieldQuery(SolrQueryParserBase.java:374) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.getFieldQuery(SolrQueryParserBase.java:742) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.handleBareTokenQuery(SolrQueryParserBase.java:541) >> >> >> at org.apache.solr.parser.QueryParser.Term(QueryParser.java:299) >> >> >> at org.apache.solr.parser.QueryParser.Clause(QueryParser.java:185) >> >> >> at org.apache.solr.parser.QueryParser.Query(QueryParser.java:107) >> >> >> at >> >> >> >> >> >> org.apache.solr.parser.QueryParser.TopLevelQuery(QueryParser.java:96) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.parser.SolrQueryParserBase.parse(SolrQueryParserBase.java:151) >> >> >> at org.apache.solr.search.LuceneQParser.parse(LuceneQParser.java:50) >> >> >> at org.apache.solr.search.QParser.getQuery(QParser.java:141) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:148) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:197) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) >> >> >> at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) >> >> >> at >> >> >> >> >> >> >> >> >> org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:64) >> >> >> at org.apache.solr.core.SolrCore$5.call(SolrCore.java:1739) >> >> >> at java.util.concurrent.FutureTask.run(FutureTask.java:262) >> >> >> at >> >> >> >> >> >> >> >> >> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) >> >> >> at >> >> >> >> >> >> >> >> >> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) >> >> >> at java.lang.Thread.run(Thread.java:745) >> > >> > >> > >> > >> > -- >> > mto > > > > > -- > mto

2 2

Weird sub-folder error
by Christian Theune 05 Mar '15

05 Mar '15

Hi, I’m running dovecot 2.2.13 and I ran into a weird problem. A user migrated his mailboxes by letting users copy them from their old server to the new one through their MUA. All that went fine except for one very weird instance. The user is running Outlook 2010. The user has a sub-folder structure which dovecot places as dotted names beneath the Inbox. (E.g. Maildir/.my.sub.folders). After copying all data, that user came back to us and complained about missing mails in their folders. Apparently 3 of her folders disappeared. I found folders with similar (but different!) names in the dovecot storage but with no mails in them. After a while I noticed that something made dovecot create another level of nesting, like this: Maildir/.My.Folder/Subfolder In this case the Original folder structure was INBOX - My - Folder - Subfolder. When the user visited the subscription settings in her MUA she found the INBOX - My - Folder mailbox which was empty. The Subfolder was nowhere to be found. This appeared weird to me. I moved the Subfolder back directly under the Maildir directory and named it “.My.Folder.Subfolder”. doveadm now lists this folder correctly. I could not find whether this is a known bug - so I’m letting you know. Maybe you can help understand what happened. Sounds like a weird server-side bug to me - this shouldn’t happen, right? Cheers, Christian — Christian Theune · ct(a)flyingcircus.io · +49 345 219401 0 Flying Circus Internet Operations GmbH · http://flyingcircus.io Forsterstraße 29 · 06112 Halle (Saale) · Deutschland HR Stendal HRB 21169 · Geschäftsführer: Christian. Theune, Christian. Zagrodnick

2 4

Dovecot Full Text Search results in SolrException: undefined field text [SERIOUS]
by Kevin Laurie 05 Mar '15

05 Mar '15

Hello, My dovecot constantly runs into this error. I want to fix this one last time, I am tired of troubleshooting so please someone give me a lasting and proper solution for this error. I think its a problem with the dovecot-solr module. Please tell me how do I find the root of this problem with Dovecot. There is a problem with the body search text field. It always fails(with no result), other searches work(ie. search date, subject etc, ) The field-text I believe is missing. Please help. Desperate here! 2/25/2015, 11:32:30 PM ERROR SolrCore org.apache.solr.common. SolrException: undefined field text org.apache.solr.common.SolrException: undefined field text at org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1269) at org.apache.solr.schema.IndexSchema$SolrQueryAnalyzer.getWrappedAnalyzer(IndexSchema.java:434) at org.apache.lucene.analysis.DelegatingAnalyzerWrapper$DelegatingReuseStrategy.getReusableComponents(DelegatingAnalyzerWrapper.java:74) at org.apache.lucene.analysis.Analyzer.tokenStream(Analyzer.java:175) at org.apache.lucene.util.QueryBuilder.createFieldQuery(QueryBuilder.java:207) at org.apache.solr.parser.SolrQueryParserBase.newFieldQuery(SolrQueryParserBase.java:374) at org.apache.solr.parser.SolrQueryParserBase.getFieldQuery(SolrQueryParserBase.java:742) at org.apache.solr.parser.SolrQueryParserBase.handleBareTokenQuery(SolrQueryParserBase.java:541) at org.apache.solr.parser.QueryParser.Term(QueryParser.java:299) at org.apache.solr.parser.QueryParser.Clause(QueryParser.java:185) at org.apache.solr.parser.QueryParser.Query(QueryParser.java:107) at org.apache.solr.parser.QueryParser.TopLevelQuery(QueryParser.java:96) at org.apache.solr.parser.SolrQueryParserBase.parse(SolrQueryParserBase.java:151) at org.apache.solr.search.LuceneQParser.parse(LuceneQParser.java:50) at org.apache.solr.search.QParser.getQuery(QParser.java:141) at org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:148) at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:197) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:135) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1967) at org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:64) at org.apache.solr.core.SolrCore$5.call(SolrCore.java:1739) at java.util.concurrent.FutureTask.run(FutureTask.java:262) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745)

3 3

Re: Re: IP drop list
by Joseph Tam 05 Mar '15

05 Mar '15

Nick Edwards writes: > I thought Timo once said dovecot had tarpitting, its useless if it is > there, and if it is, it needs user configurable timings, or maybe its > one of those things thats been in the gunna happen list > for a long time, like other stuff If I remember correctly, I think this was the "auth_failure_delay" feature. However, these delays are only inserted into the same session -- no IP tracking is done so a BFD attacking host can just keep opening up new connections. Dave McGuire writes: >>>> Please add this support to iptables instead of Dovecot. It's a >>>> waste of effort to code it into every application that listens on >>>> the network. >>> >>> <head explodes> >>> >>> Would you care to integrate it into IOS on my Cisco as well? >>> >>> There are things connected to the Internet that aren't PCs running >>> Linux, you know. It may be hard to accept, but that's the way it is. >>> >> I assume your dovecot runs on some kind of *nix > > Of course. I run it under Solaris. Oddly enough, if you run some versions of Solaris, it uses IPFilter as the native firewall, and it *does* have userland hooks so that you can make pass/block decisions based on userland executable. Not well documented though (see auth rules). You would need a firewall rule like auth in proto tcp from any to any port = 143 flags S/SA keep state then write a program that does ioctl(ipauth) calls to inspect and accept/reject packets; not for the faint of heart. However, you can use whatever weird and wonderful methods you want to determine IMAP/POP/SMTP network access policy, including DNSRBL or parsing a text file. This thread seems to be spinning into non-dovecot subjects, and I'm not helping, so I'll stop. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: IP drop list
by Joseph Tam 05 Mar '15

05 Mar '15

Dave McGuire writes: >> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets >> >> then setup fail2ban to manage extrafields > > Now that's a very interesting idea, thank you! I will investigate this. If you don't expect yor firewall to handle 45K+ IPs, I'm not how you expect dovecot will handle a comma separated string with 45K+ entries any better. If you want to turn your global backlist into a per-user whitelist, that would be perfectly doable though. Joseph Tam <jtam.home(a)gmail.com>

14 31

Rebuilding SIS attachment links from log
by Daniel Miller 04 Mar '15

04 Mar '15

This seems simple enough...I'm just not script wizard. If someone can throw together a starting point I can test and tweak it from there. It seems to me: 1. Read /var/mail/mail.err or specified logfile 2. For each "failed: read(/var/mail/attachments/aa/bb/attachmentHash-userHash" line, a. Confirm /var/mail/attachments/aa/bb/hashes/attachmentHash exists i. If attachmentHash is missing display such for possible backup searching. b. create link attachmentHash-userHash to hashes/attachmentHash 3. Continue to end of file Can this be done via "pure" BASH? Need sed/awk as well? -- Daniel

3 3

[OT] Extdata / Extprograms Plugins on CentOS 7?
by E.B. 04 Mar '15

04 Mar '15

Hello, I want to install Dovecot Pigeonhole and use the Extdata and Extprograms plugins on CentOS 7. I prefer to install software via yum, and a reasonably new version of Dovecot is available in the CentOS repo. But according to the dovecot documentation, these plugins need to be compiled, so I don't know if yum is out of the question? * Does anyone know if either of these plugins built into the Pigeonhole that is available in the CentOS 7 extras repo? OR if there is a version of Pigeonhole available in a different 3rd party repo with what I want? (like EPEL, DAG, etc) * Is it possible to use these plugins with Pigeonhole installed from yum? Does the compilation requirement mean that I have to remove not only Pigeonhole, but also Dovecot itself from my system and build everything by hand? :-( THANK YOU!!!!!!

1 0

New FREAK SSL Attack CVE-2015-0204
by Adrian Minta 04 Mar '15

04 Mar '15

Hello, about the CVE-2015-0204, in apache the following config seems to disable this vulnerability: SSLProtocol All -SSLv2 -SSLv3 SSLCipherSuite HIGH:MEDIUM:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4 Is something similar possible with dovecot ? If yes, what are the implications with old mail clients ? -- Best regards, Adrian Minta

2 4

Re: Rebuilding SIS attachment links from log
by Daniel Miller 04 Mar '15

04 Mar '15

Well, with no guarantees or promises whatsoever...here's my first attempt. I'm certain someone else can come up with a much more robust solution but it's a starting point. Since I typically see a batch of the error messages during an FTS update, my current usage is: 1. doveadm fts rescan -u user-to-fix 2. Perform a fts search to do a full mailbox scan 3. Check the mail log to see the date/time of the errors (I usually have a window open with tail -f) 4. Something like "grep 'Mar 3 20:17' mail.log > mail.err" gives me a starting point execute dovesisfix and see if it helps. -- Daniel On 3/3/2015 1:08 PM, Daniel Miller wrote: > This seems simple enough...I'm just not script wizard. If someone can > throw together a starting point I can test and tweak it from there. > It seems to me: > > 1. Read /var/mail/mail.err or specified logfile > 2. For each "failed: > read(/var/mail/attachments/aa/bb/attachmentHash-userHash" line, > a. Confirm /var/mail/attachments/aa/bb/hashes/attachmentHash exists > i. If attachmentHash is missing display such for possible > backup searching. > b. create link attachmentHash-userHash to hashes/attachmentHash > 3. Continue to end of file > > Can this be done via "pure" BASH? Need sed/awk as well? >

1 0

ot: maildir has overdrawn his diskspace quota
by voytek＠sbt.net.au 04 Mar '15

04 Mar '15

I have Postfix/Dovecot with virtual domains, same setup unaltered since server was set up quite a while ago last month, added a new virtual domain, 'just like before'. but, today noticed this in the queue/log 'overdrawn his diskspace quota'[1]: user's Maildir cur has like 48,762,696 bytes (lot less than other users) tried some searches, found similar probs, but, no solution as yet any ideas ? after physically removing some emails from this user's 'cur', I re-queued 'stuck' message, it was then accepted # quota -g vmail # quota -u vmail # [1] # grep 719855FC42 /var/log/maillog Mar 3 15:20:58 emu postfix/smtpd[18535]: 719855FC42: client=mail-pa0-f51.google.com[209.85.220.51] Mar 3 15:20:58 emu postfix/cleanup[18631]: 719855FC42: message-id=<54f536ad.21da440a.6572.3c07(a)mx.google.com> Mar 3 15:21:01 emu postfix/qmgr[1906]: 719855FC42: from=<dsome1(a)gmail.com>, size=5487190, nrcpt=1 (queue active) Mar 3 15:21:01 emu postfix/virtual[20248]: 719855FC42: to=<anna(a)tld.com>, relay=virtual, delay=3.5, delays=3.4/0/0/0.08, dsn=4.2.2, status=deferred (maildir delivery failed: Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.) Mar 3 15:27:53 emu postfix/qmgr[1906]: 719855FC42: from=<dsome1(a)gmail.com>, size=5487190, nrcpt=1 (queue active) Mar 3 15:27:53 emu postfix/virtual[23352]: 719855FC42: to=<anna(a)tld.com>, relay=virtual, delay=415, delays=415/0.01/0/0.07, dsn=4.2.2, status=deferred (maildir delivery failed: Sorry, the user's maildir has overdrawn his diskspace quota, please try again later.)

1 0

Re: IP drop list
by Joseph Tam 03 Mar '15

03 Mar '15

Dave McGuire writes: >>>> then setup fail2ban to manage extrafields >>> >>> Now that's a very interesting idea, thank you! I will investigate this. >> >> If you don't expect yor firewall to handle 45K+ IPs, I'm not how you >> expect dovecot will handle a comma separated string with 45K+ entries >> any better. > > My firewall can handle that without breaking a sweat. I just haven't > found a way (that I'm comfortable with) to automatically inject rules > into it from a machine on the network. > > Doing it via a DNSBL is an elegant solution to the problem, IMO. I'm agnostic as far as which method you want to use. All I'm saying is that using dovecot's allow_net facility is as difficult, if not more so, than letting your firewall handle it. Joseph Tam <jtam.home(a)gmail.com>

4 3

Connect failed to database
by Dan LaSota 03 Mar '15

03 Mar '15

I have dovecot version 2.2.10 dovecot -n output below I am seeing connection errors being written to my dovecot error log: Mar 1 19:51:15 mail dovecot: auth-worker(2224): Error: mysql(localhost): Connect failed to database (servermail): Access denied for user 'usermail'@'localhost' (using password: YES) - waiting for 5 seconds before retry My connection script located at /etc/dovecot/dovecot-sql.conf.ext is like (password edited): driver = mysql connect = host=localhost dbname=servermail user='usermail' password='MY_SUPER_SECRET_PASSWORD' default_pass_scheme = SHA512-CRYPT password_query = SELECT email as user, password FROM virtual_users WHERE email='%u'; I have verified that I can gain access to the SQL database with # mysql -u usermail -p I can make select statements on the 'servermail' database and all of its tables. I've searched for similar errors from users, but most of the questions are unanswered, or answered incorrectly. I did follow one thread's suggest of setting the MYSQL password for the 'usermail' with OLD_PASSWORD instead of PASSWORD. I did that. I could still login from the shell using mysql -u usermail -p But dovecot still wrote the same error. (I did a flush privileges, and restarted mysql, and dovecot) I then set the password in SQL back using PASSWORD. (flush'd priveleges and restarte mysql and dovecot). Still Errors. Looking for leads. Thanks, Dan LaSota Instructional Designer, UAF eLearning (907) 451-4067 dan.lasota(a)alaska.edu http://elearning.uaf.edu dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.20.1.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) xfs auth_debug = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain mail_debug = yes mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap lmtp service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } verbose_ssl = yes

4 9

problem with dovecot/lmtp
by Dan LaSota 03 Mar '15

03 Mar '15

I am getting this in my errorlog for postfix/dovecot Mar 2 16:42:14 mail postfix/error[5074]: A689580F236: to=<root(a)mail.example.com>, relay=none, delay=21420, delays=21420/0.05/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to mail.example.com[private/dovecot-lmtp]: Connection refused) From my reading, I believe this has something to do with virtual_transport which I have set to: virtual_transport = lmtp:unix:private/dovecot-lmtp The socket file, exists: [root@mail ~]# ls -l /var/spool/postfix/private/dovecot-lmtp srw-------. 1 postfix postfix 0 Mar 2 09:14 /var/spool/postfix/private/dovecot-lmtp But I'm a little stumped as how to proceed. The only thing I think I understand is that postfix is trying to talk to dovecot-lmtp and dovecot-lmtp is refusing the connection. Am I reading that correct? What can I do about it? Thanks, Dan LaSota Instructional Designer, UAF eLearning (907) 451-4067 dan.lasota(a)alaska.edu http://elearning.uaf.edu

1 0

Quota and ldap
by Jean-François Sénéchal 02 Mar '15

02 Mar '15

Hello I try to install quota per usr, everything seems fine but the quota is not working Dovecot : 2.2.13 dovecot-ldap.conf.ext user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,gosaMailQuota=quota_rule=*:bytes=%$ 10-mail.conf mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = $mail_plugins quota /10-master.conf service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } 20-imapd.conf protocol imap { mail_plugins = $mail_plugins imap_quota } 20-lmtp.conf protocol lmtp { mail_plugins = $mail_plugins quota } 90-quota.conf plugin { quota_rule = *:storage=150M quota_rule2 = Trash:storage=+100M quota_grace = 10%% } plugin { quota = maildir:User quota } Command doveadm quota recalc return nothing (no error) My log Mar 2 11:41:58 domaine dovecot: imap-login: Login: user=<siroco>, method=PLAIN, rip=::1, lip=::1, mpid=3695, secured, session=<X+Yi3ksQdAAAAAAAAAAAAAAAAAAAAAAB> Mar 2 11:41:58 domaine dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Mar 2 11:41:58 domaine dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 2 11:41:58 domaine dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Mar 2 11:41:58 domaine dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Effective uid=5000, gid=5000, home=/var/spool/dovecot/mail/s/siroco Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Quota root: name=User quota backend=maildir args= Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Quota grace: root=User quota bytes=0 (10%) Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir:LAYOUT=fs Mar 2 11:41:58 domaine dovecot: imap(siroco): Debug: fs: root=/var/spool/dovecot/mail/s/siroco/Maildir, index=, indexpvt=, control=, inbox=/var/spool/dovecot/mail/s/siroco/Maildir,

3 11

Postfix - dovecot-lda -> Permission denied
by Wöltje, Marcus 02 Mar '15

02 Mar '15

Hi erveryone! I'm trying to run Postix and Dovecot on a Mac OS X, but somehow, it doesn't work. I probably messed up the privileges or something else. Hopefully someone of you, can help me figure it out. So far, Postfix is delivering the mail into ~/Maildir. But as soon as I add the line: mailbox_command = /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/dovecot-lda in /etc/postfix/main.cf I get the following entry in the mail.log. Feb 27 16:08:02 Nils-iMac.local local[53237]: fatal: execvp /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/dovecot-lda: Permission denied Feb 27 16:08:02 Nils-iMac.local postfix/local[53236]: B246837BE40: to=<marc(a)localhost.local>, orig_to=<marc@localhost>, relay=local, delay=1185, delays=1185/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure. Command output: local: fatal: execvp /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/dovecot-lda: Permission denied ) Here are the rights of dovecot-lda: -rwxrwx--- 1 root certusers 32144 Dec 5 04:41 /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/dovecot-lda Hope someone has an Idea. :) Bye, Marcus In case you need my doveconf: dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 6 first_valid_uid = 6 hostname = imap_capability = imap_client_workarounds = imap_id_log = * imap_id_send = "name" * "version" * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imap_urlauth_submit_user = submit imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ info_log_path = /Library/Logs/Mail/mail-info.log instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_mailbox_listid_autosave = no lda_original_recipient_header = libexec_dir = /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot listen = *, :: lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /Library/Logs/Mail/mail-err.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = certusers mail_home = mail_location = maildir:~/Maildir:INBOX=~/Maildir mail_log_prefix = "%s(pid %p user %u): " mail_max_bad_commands = 20 mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /Applications/Server.app/Contents/ServerRoot/usr/lib/dovecot mail_plugins = quota zlib acl fts fts_sk mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 200 M mmap_disable = no namespace acl-mailboxes { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/Users/%u/Maildir:INDEX=/Users%u/Maildi/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no driver = special_use = \Drafts } mailbox Junk { auto = no driver = special_use = \Junk } mailbox Sent { auto = no driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = separator = subscriptions = yes type = private } namespace list-archives { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%%u prefix = archives.%%u. separator = . subscriptions = no type = shared } passdb { args = default_fields = deny = no driver = od master = no override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb default_fields = deny = no driver = passwd-file master = no override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u stats_refresh = 30 secs stats_track_cmds = yes } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = postmaster@localhost protocols = imap pop3 lmtp sieve quota_full_tempfail = yes recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = _keytabusers group = idle_kill = 15 mins privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = _dovecot } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 5 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 200 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = _dovecot vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 5 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 200 process_min_avail = 0 protocol = pop3 service_count = 0 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service quota-exceeded { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot vsz_limit = 18446744073709551615 B } service quota-warning { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = _dovecot } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } # 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 14.1.0 x86_64 # NOTE: Send doveconf -n output instead when asking for help. aps_topic = auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = $ALL auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain login apop digest-md5 gssapi auth_proxy_self = auth_realms = LAPPENBUSCH auth_socket_path = /var/run/dovecot/auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %n auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = /Library/Logs/Mail/mail-debug.log default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = no dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 6 first_valid_uid = 6 hostname = imap_capability = imap_client_workarounds = imap_id_log = *

3 2

Re: Dovecot & LDAP Take #2: Authentication failed and logging
by Paolo Cravero 02 Mar '15

02 Mar '15

This is the user DN: > cn=Klara Fall,ou=People,dc=[domainname],dc=de According to your Dovecot configuration > auth_bind_userdn = cn=%u,ou=People,dc=**[domainname]**,dc=de if you login with "klarafall" it will be expanded into cn=klarafall,ou=People,dc=[domainname],dc=de which is not the correct DN for Mrs Klara. So if you login with "Klara Fall" it should work, but that will probably mess up the things on Dovecot filesystem. I am strongly against setting a static DN when dealing with LDAP authentication. LDAP servers are optimized to serve search requests, so let yours do the job. Allow Dovecot to lookup the correct DN based on the attribute you supply (uid) and then authenticate. This should be achieved if you comment out the auth_bind_userdn line. Paolo Cravero

3 2

mdbox attachment errors
by Daniel Miller 02 Mar '15

02 Mar '15

Getting some errors like: Feb 26 12:19:43 bubba dovecot: imap(dmiller(a)amfes.com): Error: read(attachments-connector(/var/mail/amfes.com/dmiller/mdbox/storage/m.7089… failed: read(/var/mail/attachments/f6/f4/f6f4f3b882bf3488af632389d4aaba8adc332b12-60ab750a1aa4b554da1600009db5accb[base64:18 b/l]) failed: open(/var/mail/attachments/f6/f4/f6f4f3b882bf3488af632389d4aaba8adc332b12-60ab750a1aa4b554da1600009db5accb) failed: No such file or directory (uid=19555, box=Sent) Feb 26 12:19:43 bubba dovecot: imap(dmiller(a)amfes.com): Disconnected: Internal error occurred. Refer to server log for more information. [2015-02-26 12:19:43] in=159 out=1003 Browsing to the ../attachments/f6/f4 folder, I find no files but a "hashes" folder, which has a f6f4f3b882bf3488af632389d4aaba8adc332b12 file of size that feels appropriate for the expected PDF attachment. -- Daniel

3 2

userdb passwd-file default_fields uid not expanding %variable
by Tim Jones 02 Mar '15

02 Mar '15

Hi all, I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 (and gid 'example.com' of 5001). Each domain\user has their own maildir inside their home, and a plain passwd-file with the virtual mail users associated with that domain. Version & config info: # dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%n /home/%d/mail_users driver = passwd-file } protocols = " imap lmtp pop3" ssl = no userdb { args = username_format=%n /home/%d/mail_users default_fields = uid=%d gid=%d home=/home/%d/mail/%n mail=maildir:/home/%d/mail/%n driver = passwd-file } Every time I try to authenticate via imap, I get the error > <timestamp> <host> dovecot: auth: Fatal: passwd-file userdb: Invalid uid: %d If I put fixed a uid and gid in the userdb default_fields line: > default_fields = uid=example.com gid=example.com home=/home/%d/mail/%n mail=maildir:/home/%d/mail/%n authentication passes without a problem, but of course, only for users of example.com. Checking the wiki (http://wiki2.dovecot.org/UserDatabase#Userdb_settings) clearly states that the default_fields values support %variables, so I'm not sure if I'm missing some other config required for this to work. Many thanks in advance, Tim Jones Software Development +34 612345678 C/ Quintanavides 15, Edificio 2, Planta 1ª Parque Empresarial Vía Norte de Metrovacesa Las Tablas 28050 Madrid Skype: tim.jones.fon All information in this email is confidential

2 3

Require certificate for external clients
by Karol Babioch 02 Mar '15

02 Mar '15

Hi list, I'm currently looking into ways of making use of client certificates. I want to force external clients (i.e. anything outside the local subnet) to use client certificates. It is my understanding that this in itself can be achieved with the "ssl_require_client_cert" setting. However, I also want local clients (i.e. anything from a specific subnet) to be able to authenticate by the usual means (i.e. password-based). As far as I know dovecot is not able to operate on multiple ports, as stated in the FAQ [1]. The redirect approach, which is also mentioned there, is of no help to me, because in my case I would need a different setup on both ports. Other suggestions [2] won't work in my case either. I probably could get away with using "imaps" for external clients, while using "imap" (without SSL) for internal ones. Having said this, I don't quite like the idea, especially since the traffic might pass through some potentially unsecure networks and I don't want to bother with VPN/SSH tunnels for that purpose. A native SSL/TLS solution would be very much appreciated. Is there a (recommended) way to do this? Thanks in advance. Best regards, Karol Babioch [1]: http://wiki.dovecot.org/QuestionsAndAnswers#Is_it_possible_to_have_Dovecot_… [2]: http://www.dovecot.org/list/dovecot/2010-November/054804.html

3 2

Re: Require certificate for external clients
by Joseph Tam 02 Mar '15

02 Mar '15

Karol Babioch <karol(a)babioch.de> writes: >> You can share libraries, binaries, >> log files, but use separate configuration files, specifying different >> ports/addresses/ssl-configs/auth/access parameters. Then you can fire >> them both up >> >> dovecot -c /dovecot/etc/dovecot-1.conf >> dovecot -c /dovecot/etc/dovecot-2.conf > > I will have to look into it. I'm afraid that I would have to fiddle > around with the default unit files. What are "unit files"? > Also I'm not completely sure how this would work with all of the > configuration files that have been split off into small chunks and get > included at some point. This is probably going to be messy rather > quickly :'(. I don't see why it would be messy. If the conf.d/* are the same, you can use the same config directory. If they differ, you can can copy those files to another config directory (e.g. conf-d/* -> conf-2.d/), modify the snippets that differ, then include this alternate set of configurations !include conf-2.d/* > Thanks for your suggestion. You're welcome. Joseph Tam <jtam.home(a)gmail.com>

1 0

dsync panic
by Greg Rivers 02 Mar '15

02 Mar '15

As per <http://wiki2.dovecot.org/Migration/Dsync>, I'm running the following command on a local dovecot server to replicate email for a single user from a remote IMAP server: doveadm -D \ -o imapc_host=remote.imap.server \ -o imapc_user=gcr \ -o imapc_password=XXXXXXXX \ -o imapc_list_prefix=IMAP \ -o imapc_features="rfc822.size fetch-headers" \ -o mail_prefetch_count=20 \ -o mail_fsync=never \ backup -R -u gcr imapc: This runs fine for a while and successfully copies quite a lot of mail, but always aborts before completion with the following error: dsync(gcr): Panic: file mail-transaction-log.c: line 271 (mail_transaction_log_rotate): assertion failed: (file->locked) The exit code is 262. Does anyone know why this might happen or how to fix it? -- Greg Rivers

1 0

Re: Require certificate for external clients
by Joseph Tam 01 Mar '15

01 Mar '15

Karol Babioch <karol(a)babioch.de> writes: > As far as I know dovecot is not able to operate on multiple ports, as > stated in the FAQ [1]. > > [1]: > http://wiki.dovecot.org/QuestionsAndAnswers#Is_it_possible_to_have_Dovecot_… That should be qualified as "Is it possible to have Dovecot imap/pop daemons listening on multiple ports for a single running instance." You can run two instances of dovecot, each on a different port or multi-homed listening address. You can share libraries, binaries, log files, but use separate configuration files, specifying different ports/addresses/ssl-configs/auth/access parameters. Then you can fire them both up dovecot -c /dovecot/etc/dovecot-1.conf dovecot -c /dovecot/etc/dovecot-2.conf That's the rough sketch of how to do it. Joseph Tam <jtam.home(a)gmail.com>

2 1

users of dbox format
by Andreas Kasenides 28 Feb '15

28 Feb '15

I am interested in finding out your experiences with using the dbox format (especially mdbox) if you use this format. I am contemplating changing my maildir setup to mdbox but I still need to make a case for it against maildir which has become a de-facto standard and provides sort of a secure basis in case of software changes. Your input will be appreciated. -- Andreas Kasenides Senior IT Officer Dept. of Computer Science, University of Cyprus Tel: 22892714, Fax: 22892701 (5B4ANK)

4 4

ACL Error
by Bobber 28 Feb '15

28 Feb '15

I'm trying to set up global ACLs. I have the following in the config file: > # acl > mail_plugins = acl > > protocol imap { > mail_plugins = $mail_plugins imap_acl > } > > plugin { > # Without global ACLs: > #acl = vfile > > # With global ACL files in /etc/dovecot/dovecot-acls file (v2.2.11+): > #acl = vfile:/etc/dovecot/dovecot-acl > acl = vfile:/usr/local/etc/dovecot/dovecot-acl > } And here is my dovecot-acl: > user=bobber lrwstipekxa > authenticated lr But when I restart dovecot and try to access folders, I get the following errors in the log file: > Error: Global ACL file /usr/local/etc/dovecot/dovecot-acl line 1: > Unknown ID 'lrwstipekxa' Any ideas what's causing this? -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

2 1

userdb passwd-file default_fields uid not expanding %variable
by Tim Jones 27 Feb '15

27 Feb '15

Hi all, I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 (and gid 'example.com' of 5001). Each domain\user has their own maildir inside their home, and a plain passwd-file with the virtual mail users associated with that domain. Version & config info: > # dovecot -n > # 2.2.13: /etc/dovecot/dovecot.conf > # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 > auth_mechanisms = plain login > auth_verbose = yes > disable_plaintext_auth = no > mail_location = mbox:~/mail:INBOX=/var/mail/%u > namespace inbox { > inbox = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = > } > passdb { > args = username_format=%n /home/%d/mail_users > driver = passwd-file > } > protocols = " imap lmtp pop3" > ssl = no > userdb { > args = username_format=%n /home/%d/mail_users > default_fields = uid=%d gid=%d home=/home/%d/mail/%n > mail=maildir:/home/%d/mail/%n > driver = passwd-file > } Every time I try to authenticate via imap, I get the error > <timestamp> <host> dovecot: auth: Fatal: passwd-file userdb: Invalid uid: > %d > If I put fixed a uid and gid in the userdb default_fields line: > default_fields = uid=example.com gid=example.com home=/home/%d/mail/%n > mail=maildir:/home/%d/mail/%n authentication passes without a problem, but of course, only for users of example.com. Checking the wiki (http://wiki2.dovecot.org/UserDatabase#Userdb_settings) clearly states that the default_fields values support %variables, so I'm not sure if I'm missing some other config required for this to work. Many thanks in advance, [image: Fon] <http://www.fon.com/>Tim JonesSoftware Development+34 612345678 C/ Quintanavides 15, Edificio 2, Planta 1ª Parque Empresarial Vía Norte de Metrovacesa Las Tablas 28050 MadridSkype: tim.jones.fonAll information in this email is confidential <http://corp.fon.com/legal/email-disclaimer>

1 0

Dovecot & LDAP Take #2: Authentication failed and logging
by David Scheele 27 Feb '15

27 Feb '15

Hi there, after banging my head against a wall for a bit I got more indepth with dovecot and am now much more knowledgeable about the system than before. But I still have two problems: 1.) For some reason my dovecot doesnt log correctly. I put debug_log to -1 and expected to see logs flooding in in my syslog. When I try to log in via telnet over imap and the login succeeds it loggs correctly. But when it fails there is no log entry. Any clue what might cause this? And now the big fish: 2.) Still hanging to log a user in over telnet via imap. I'm pretty sure i have misconfigured something. first of all: 2a.) Is the *passdb* and *userdb* ind the dovecot.conf still needed in the newest version? It appears to me that all authing runs over the *10-auth.conf*, *auth-ldap.conf.ext* and *dovecot-ldap.conf.ext *and the passdb and userdb settings might just be remnants of the past? or am i wrong here? 2b.) This is my config: *# 2.1.7: /etc/dovecot/dovecot.conf# OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.8 ext4auth_mechanisms = plain logindefault_login_user = vmaildisable_plaintext_auth = nofirst_valid_gid = 2222first_valid_uid = 2222listen = *mail_access_groups = vmailmail_debug = yesmail_location = maildir:/var/vmail/%d/%npassdb { args = scheme=SHA1 /etc/dovecot/passwd driver = passwd-file}protocols = imapservice auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root}service imap-login { process_min_avail = 1 user = vmail}ssl = nouserdb { args = uid=2222 gid=2222 home=/var/vmail/%d/%n allow_all_users=yes driver = static}* *hosts = [ <http://mailserver.realsecure.de/>hostname].[domainname].dedebug_level = -1auth_bind = yesauth_bind_userdn = cn=%u,ou=People,dc=**[domainname]* *,dc=debase = ou=People,dc=[domainname],dc=deuser_attrs = uidNumber=uiduser_filter = (&(objectClass=inetOrgPerson)(uid=%u))pass_attrs = uid=user,userPassword=passwordpass_filter = (&(objectClass=inetOrgPerson)(uid=%u))iterate_attrs = uid=useriterate_filter = (objectClass=inetOrgPerson)* The user I try to log in with is: *cn=Klara Fall,ou=People,dc=[domainname],dc=de* *objectclasses: inetOrgPerson, organizationalPerson, person, simpleSecurityObject,top* *sn=Fall* *userPassword is set* *mail: klara.fall(a)[domainname].de* *uid: klarafall* I want to try with auth bind because I think i understood whats going on with that. When i try to a login klarafall [password] it gives me a NO [AUTHENTICATIONFAILED] Authentication failed. Any clues? This would be much easier with logging... but see 1.) :) I feel I'm not far from the finish line. Best, David

2 2

postfix ldap unknown user
by Jean-François Sénéchal 27 Feb '15

27 Feb '15

Hi, My config dovecot 2.2.13 Postfix 2.9.6 Debian wheezy When I send a message to my user test (siroco) postfix said unknown user But the user exist : doveadm user siroco : field value uid 3002 gid 2000 home /var/spool/dovecot/mail/s/siroco mail maildir:~/Maildir:LAYOUT=fs postmap -vq siroco ldap:/etc/postfix/ldap_virtual_aliases.cf return siroco 2 questions : postfix search with siroco or with siroco(a)citoyens2015.marche.be ? postmap must return siroco or siroco(a)citoyen2015.marche.be ? And I don't know if I set for alias_maps, virtual_mailbox_maps, virtual_alias_maps ? My postconf alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, ldap:/etc/postfix/ldap-citoyen.cf append_dot_mydomain = no biff = no config_directory = /etc/postfix inet_interfaces = 172.17.1.232, 127.0.0.1 mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = marche.be myhostname = citoyen2015.marche.be mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relayhost = gatekeeper.marche.be smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) virtual_alias_maps = proxy:ldap:/etc/postfix/ldap_virtual_aliases.cf virtual_mailbox_domains = hash:/etc/postfix/virtual_domains virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap_virtual_recipients.cf virtual_transport = dovecot My ldap_virtual_recipients.cf (same in ldap-citoyen.cf and in ldap_virtual_aliases.cf) server_host = ldap.marche.be search_base = ou=Users,ou=Citoyens,dc=marche,dc=be scope = sub bind = no version = 3 #query_filter = (&(|(mail=%s)(gosaMailAlternateAddress=%s))(objectClass=gosaMailAccount)) query_filter = (|(gosaMailAlternateAddress=%s)(mail=%s)(uid=%s)) #result_attribute = uid result_attribute = gosaMailForwardingAddress *Error log * Feb 27 14:16:13 citoyen2015 postfix/trivial-rewrite[4917]: warning: do not list domain citoyen2015.marche.be in BOTH mydestination and virtual_mailbox_domains Feb 27 14:16:13 citoyen2015 postfix/local[4919]: E8C3920A: to=<siroco(a)citoyen2015.marche.be>, relay=local, delay=0.23, delays=0.13/0.01/0/0.1, dsn=5.1.1, status=bounced (unknown user: "siroco") Feb 27 14:16:13 citoyen2015 postfix/cleanup[4918]: 2C28A20C: message-id=<20150227131613.2C28A20C(a)citoyen2015.marche.be> Thanks

2 1

postfix ldap unknown user
by Jean-François Sénéchal 27 Feb '15

27 Feb '15

Hi, My config dovecot 2.2.13 Postfix 2.9.6 Debian wheezy When I send a message to my user test (siroco) postfix said unknown user But the user exist : doveadm user siroco : field value uid 3002 gid 2000 home /var/spool/dovecot/mail/s/siroco mail maildir:~/Maildir:LAYOUT=fs postmap -vq siroco ldap:/etc/postfix/ldap_virtual_aliases.cf return siroco 2 questions : postfix search with siroco or with siroco(a)citoyens2015.marche.be ? postmap must return siroco or siroco(a)citoyen2015.marche.be ? And I don't know if I set for alias_maps, virtual_mailbox_maps, virtual_alias_maps ? My postconf alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, ldap:/etc/postfix/ldap-citoyen.cf append_dot_mydomain = no biff = no config_directory = /etc/postfix inet_interfaces = 172.17.1.232, 127.0.0.1 mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = marche.be myhostname = citoyen2015.marche.be mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relayhost = gatekeeper.marche.be smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) virtual_alias_maps = proxy:ldap:/etc/postfix/ldap_virtual_aliases.cf virtual_mailbox_domains = hash:/etc/postfix/virtual_domains virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap_virtual_recipients.cf virtual_transport = dovecot My ldap_virtual_recipients.cf (same in ldap-citoyen.cf and in ldap_virtual_aliases.cf) server_host = ldap.marche.be search_base = ou=Users,ou=Citoyens,dc=marche,dc=be scope = sub bind = no version = 3 #query_filter = (&(|(mail=%s)(gosaMailAlternateAddress=%s))(objectClass=gosaMailAccount)) query_filter = (|(gosaMailAlternateAddress=%s)(mail=%s)(uid=%s)) #result_attribute = uid result_attribute = gosaMailForwardingAddress *Error log * Feb 27 14:16:13 citoyen2015 postfix/trivial-rewrite[4917]: warning: do not list domain citoyen2015.marche.be in BOTH mydestination and virtual_mailbox_domains Feb 27 14:16:13 citoyen2015 postfix/local[4919]: E8C3920A: to=<siroco(a)citoyen2015.marche.be>, relay=local, delay=0.23, delays=0.13/0.01/0/0.1, dsn=5.1.1, status=bounced (unknown user: "siroco") Feb 27 14:16:13 citoyen2015 postfix/cleanup[4918]: 2C28A20C: message-id=<20150227131613.2C28A20C(a)citoyen2015.marche.be> Thanks -- logomarche Jean-François Sénéchal Centre de Support Télématique Webmaster Rue des Carmes, 22 6900 Marche-en-Famenne Tél: 084/32 70 55 - Fax: 084/32 70 72 jean-francois.senechal(a)ac.marche.be <mailto:jean-francois.senechal@ac.marche.be> Retrouvez-nous sur www.marche.be <http://www.marche.be> et sur logofacebook <https://www.facebook.com/pages/Ville-de-Marche-en-Famenne/152999594777489> Disclaimer <https://www.marche.be/disclaimer/> | SVP, pensez à notre environnement avant d'imprimer ce mail

1 0

mdbox + sis + altstorage: error in attachments-connector (file not found)
by Paolo Cravero 26 Feb '15

26 Feb '15

Hello, first time here. I am playing with Dovecot because of its mdbox storage, SIS feature and altstorage ability. I authenticate against LDAP (passdb), but I don't fetch operational data from LDAP (mail_locations are static from config files and "user_attrs = =uid=500, =gid=500, =home=/maildata1/home/%d/%1n/%n"). On a daily basis I run "doveadm altmove -A savedbefore 5d" Thunderbird apparently works 100%, but only apparently. When accessing one of those mailboxes through Open-Xchange IMAP I got an error for the first time. Then I could reproduce it with Thunderbird as well, I simply had to open the message mentioned in the log: Feb 26 14:06:02 tst-msg03 dovecot: imap(paolo.cravero(a)csi.it): Error: read(attachments-connector(/maildata1/altstorage/csi.it/p/paolo.cravero/storage/m.35)) failed: read(/maildata1/attachments/40/68/40683f07fcbf1f95f09b273e472b3c7067f43210641baf6e3cce333a27b36e11-4a235a29fd05db54fd6800001117ea21[base64:19 b/l]) failed: open(/maildata1/attachments/40/68/40683f07fcbf1f95f09b273e472b3c7067f43210641baf6e3cce333a27b36e11-4a235a29fd05db54fd6800001117ea21) failed: No such file or directory (uid=5940, box=INBOX) Feb 26 14:06:02 tst-msg03 dovecot: imap(paolo.cravero(a)csi.it): Error: read(attachments-connector(/maildata1/altstorage/csi.it/p/paolo.cravero/storage/m.35)) failed: read(/maildata1/attachments/40/68/40683f07fcbf1f95f09b273e472b3c7067f43210641baf6e3cce333a27b36e11-4a235a29fd05db54fd6800001117ea21[base64:19 b/l]) failed: open(/maildata1/attachments/40/68/40683f07fcbf1f95f09b273e472b3c7067f43210641baf6e3cce333a27b36e11-4a235a29fd05db54fd6800001117ea21) failed: No such file or directory (uid=5940, box=INBOX) Feb 26 14:06:02 tst-msg03 dovecot: imap(paolo.cravero(a)csi.it): Disconnected: Internal error occurred. Refer to server log for more information. [2015-02-26 14:06:02] in=182 out=1266 This happens on many messages sitting in the altstorage that had an attachment. The detached attachment file does not exist. Sometimes not even the path is there (anymore?). At some point in time I have run "doveadm purge" on the mailbox in error, but I am not sure that is the culprit. Have I hit a bug or done something wrong? Please suggest tests to verify where I stand. Config dump follows. Paolo # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.5 (Santiago) ext3 auth_mechanisms = plain login disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep lmtp_save_to_detail_mailbox = yes mail_attachment_dir = /maildata1/attachments mail_attachment_hash = %{sha256} mail_debug = yes mail_gid = 500 mail_location = mdbox:/maildata1/main/%d/%1n/%n:ALT=/maildata1/altstorage/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n mail_plugins = quota mail_log notify lazy_expunge mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mdbox_rotate_size = 50 M namespace { hidden = no list = yes location = mdbox:/maildata1/main/%d/%1n/%n:INDEX=/maildata1/indexes/%d/%1n/%n:MAILBOXDIR=expunged prefix = .EXPUNGED/ subscriptions = no } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { lazy_expunge = .EXPUNGED/ mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size flags vsize quota = dict:User quota::file:%h/dovecot-quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail user = vmail } } service lmtp { inet_listener lmtp { address = 10.102.42.114 port = 24 } process_min_avail = 2 user = vmail } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota mail_log notify lazy_expunge sieve } protocol lda { mail_plugins = quota mail_log notify lazy_expunge sieve } protocol imap { mail_plugins = quota mail_log notify lazy_expunge imap_quota }

1 0

dsync backup touch source index files.
by Anton Chevychalov 26 Feb '15

26 Feb '15

Hi everyone, Can someone explain me why dsync need read-write access to source box when pulling data (dsync -R backup)? I am working on migration from Dovecot 1.x with maildir to latest Dovecot 2.2.15 with mdbox and found that there is no way to do this from ro filesystem (got "failed: Read-only file system" on access to /dovecot.index.log). I am wondering is it bug or feature? I am not sure that this is save to allow dsync v2.2.15 to have write access to v1.x indexes. -- Anton Chevychalov

3 2

btrfs for mail_attachment_dir
by Hardy Flor 26 Feb '15

26 Feb '15

Hello, I don't find any indication, that no btrfs for then filesystem for the path in "mail_attachment_dir" is to be used. but btrfs has a big problem with hard links in the same directory. Nuisance is the only deal with a different file system? Hardy

3 3

Mail migration / dsync
by Giedrius Tuminauskas 25 Feb '15

25 Feb '15

Hello, I am trying to migrate emails from: Mountain Lion OSX 10.8.5 (dovecot: 2.0.19apple1) to: RHEL 7.0 (dovecot: 2.2.10) Using command: dsync -m /Library/Server/Mail/Data/mail/XYZWXYZW-XYZW-XYZW-XYW-XYZXYZXYZXYZ/ -u giedriust mirror giedriust(a)192.168.xx.xx root(a)192.168.xx.xx's password: dsync-remote(giedriust(a)domainname.com): Error: dsync(local): Remote dsync doesn't use compatible protocol dsync-remote(giedriust(a)domainname.com): Error: dsync(local): Remote dsync doesn't use compatible protocol dsync-local(giedriust): Error: Invalid server handshake: VERSION dsync 3 2 Is there a way to synchronise all the emails and convert them from simple Maildir to Maildir (layout=fs) format? -- * Giedrius Tuminauskas*

2 1

"Temporary authentication failure" ? Cant connect with ldap user
by David Scheele 25 Feb '15

25 Feb '15

Hello there, first time writing. I'm relatively new to linux and have been tasked with setting up the following configuration: Debian Wheezy Server Postfix Dovecot OpenLDAP So, I set up the Server, installed and configured postfix, ldap and dovecot (in that order) and now simply try to log into the mail account with a used from the LDAP over telnet. The test looks like this: *|> telnet localhost 143* *| a bunch of stuff ending with:* *| OK [**] Dovecot ready.* *|> a login username userpassword* *| a NO [UNAVAILABLE] Temporary authentication failure. [host and date here]* In the logs it says *|[date] mailserver dovecot: auth: Error: LDAP: binding failed (dn cn=admin): Invalid credentials* But I KNOW the admin password I entered into the dovecot-lda.conf.ext is correct as I use it to log into the LDAP directory over jxplorer I also know the password for the user i try to log in with is correct as i set it myself over and over just to be sure there are no typos. I'm at a loss, I've been at this end for a few days now and can't find good tutorials online because its either always an old dovecot, postfix, ldap or debian version and somewhere in the middle it just stops because some file is completely missing. I get the impression I'm just not able-brained for linux useage. Anyway, here are a few more informations about the system: *Dovecot version 2.1.7* Output of grep -v '^ *$#.*$\?$' dovecot-sql.conf: *hosts = localhost* *dn = cn=admin* *dnpass = [password]* *sasl_bind = no* *tls = no* *auth_bind = yes* *ldap_version = 3* *base = dc=[domainname],dc=de* *user_attrs = uidNumber=uid,gidNumber=gid* *user_filter = (&(objectClass=posixAccount)(uid=%u))* *pass_attrs = uid=user,userPassword=password* Output of dovecot -n: *disable_plaintest_auth = no* *mail_location = mbox:~/mail:INBOX=/var/mail/%u* *[namespace config here]* *passdb {* *args = /etc/dovecot/dovecot-ldap.conf.ext* *driver = ldap* *}* *plugin {* *sieve = ~/.dovecot.sieve* *sieve_dir = ~/sieve* *}* *protocols = " imap pop3"* *ssl_cert = </etc/dovecot/dovecot.pem* *ssl_key = </etc/dovecot/private/dovecot.pem* *userdb {* *args = /etc/dovecot/dovecot-ldap.conf.ext* *driver =ldap* *}* *protocol pop3 {* *pop3_client_workarounds = outlook-no-nuls oe-ns-eoh* *pop3_uidl_format = %08Xu%08Xv* *}* Any help would be greatly apprechiated.... I'm going crazy over here. Thanks in advance, David

4 16

Metadata suport for public mailboxes
by Sergio Talens-Oliag 25 Feb '15

25 Feb '15

I'm using the latest version of dovecot (2.2.15) and I was trying to use a public namespace with metadata; I've found that it works for the users with enough permissions to set the metadata, but the values are set per user, that is, each user has its own metadata and does not see the values set by others. That sounds OK, as my mail_attribute_dict is configured as follows: mail_attribute_dict = file:/srv/vmail/%d/spool/%n/dovecot-metadata But for public mailboxes it would make sense to set the metadata in a user independent mode. Searching around I've found the following on the dovecot changelog: 2013-11-02 Timo Sirainen <tss(a)iki.fi> [...] TODO: - Metadata doesn't work for public namespaces. There should probably be a mail_attribute_public_dict setting for that. [...] So my guess that the mail_attribute_public_dict is not available. Is that the case or has it been implemented in a different way? Thanks in advance, Sergio -- Sergio Talens-Oliag <sto(a)iti.es> <http://www.iti.es/> Key fingerprint = FF77 A16B 9D09 FC7B 6656 CFAD 261D E19A 578A 36F2

1 0

Updating Dovecot
by Luca Bertoncello 25 Feb '15

25 Feb '15

Hi all! Currently I use Dovecot 1.2.9 from Ubuntu repositories. I'll try to upgrade Dovecot (to 2.2.15), compiling from sources. It seems not too difficult... :) Well, I see, that I have to recreate the configuration, since the old one can not be used with Dovecot2, OK, not a problem. Now: is there something special to be done to upgrade Dovecot or can I just stop the old version and start the new one and all runs without problem? Thanks a lot! Luca Bertoncello (lucabert(a)lucabert.de)

2 1

Re: Dovecot fsync question
by Christian Binder Stadt Freilassing 25 Feb '15

25 Feb '15

Hi list, is there a reason why nobody answers an my topics? Greetings Christian

1 0