- dovecot - dovecot.org

userdb-nss crash
by Yuriy Tabolin 18 Nov '14

18 Nov '14

Hi All. I have a some problem with dovecot, when I try to use nss in auth userdb. nss was setup to resolve users and group by winbind. nss and winbind works well, command "id user" shows remote user's info. I would like to use nss userdb, but dovecot crashes on start. Is this a bug or incorrect settings? Thank you for any help. dovecot log Nov 18 14:58:36 mail dovecot: auth: Panic: file userdb-nss.c: line 110 (userdb_nss_preinit): assertion failed: (bufsize > 0) Nov 18 14:58:36 mail dovecot: auth: Fatal: master: service(auth): child 19387 killed with signal 6 (core dumped) Nov 18 14:58:36 mail dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs # doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p12 amd64 ufs auth_cache_size = 256 M auth_failure_delay = 3 secs auth_username_format = %n auth_verbose = yes auth_winbind_helper_path = /usr/local/bin/ntlm_auth base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = * mail_location = maildir:/home/%u/Maildir passdb { args = dovecot driver = pam } protocols = imap service anvil { client_limit = 2051 } service auth { client_limit = 3000 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1000 process_min_avail = 5 service_count = 1 vsz_limit = 64 M } service imap { process_limit = 2048 vsz_limit = 256 M } ssl = no userdb { args = service=winbind driver = nss } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 } # gdb /usr/local/libexec/dovecot/auth /home/tabolin/auth.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols found)... Core was generated by `auth'. Program terminated with signal 6, Aborted. Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libcrypt.so.5...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypt.so.5 Reading symbols from /usr/lib/libpam.so.5...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libpam.so.5 Reading symbols from /usr/local/lib/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libldap-2.4.so.2 Reading symbols from /usr/local/lib/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/liblber-2.4.so.2 Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/lib/libssl.so.7...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.7 Reading symbols from /lib/libcrypto.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypto.so.7 Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x00000000114ece1a in kill () from /lib/libc.so.7 (gdb) # cat /etc/nsswitch.conf group: files winbind group_compat: nis hosts: files dns networks: files passwd: files winbind passwd_compat: nis shells: files services: compat services_compat: nis protocols: files rpc: files # cat /etc/pam.d/dovecot auth required /usr/local/lib/pam_winbind.so account required /usr/local/lib/pam_winbind.so -- <http://speechpro.com> С уважением, *Таболин Юрий Олегович* Системный администратор Центр Речевых Технологий Best regards, Tabolin Yuriy System administrator Speech Technology Center Тел/Tel: +7 (812) 325-8848, доб/ext 6225 Факс/Fax: +7 (812) 327-92-97 Моб/Mob: +7 (981) 130-23-03 <http://www.linkedin.com/company/speech-technology-center> <https://twitter.com/speechpro_ru> <http://vk.com/speechpro> <https://www.facebook.com/speechpro.ru>

1 0

custom ssh port doveadm sync
by dvm＠rdyn.net 18 Nov '14

18 Nov '14

Hi all, First sorry i really couldn't find it back been searching everywhere even the docs and its bit confusing. I am using # doveadm -D sync -u *(a)mydomain.net remote:myserver.net # which works perfect however for security reasons we now need to change the sshd port on the remote server. How do i tell doveadm to use a custom SSH port (would love to continue to use just the ssh connection), if anyone could explain that would be great, because all i found is custom tcp or tcp ssl which is not what we want to use, as i wish to stick with custom ssh port. Regards, r. -- This email was Virus checked by UTM 9. http://www.astaro.org

2 3

Different SSL certificates per IP and protocol
by tree 18 Nov '14

18 Nov '14

Hi Dovecot Users and Developers, I am hosting the server with multiple domains. I have setup the dovecot with the instructions from http://wiki2.dovecot.org/SSL/DovecotConfiguration Each domain has it's own ip address. However, when I connect via Thunderbird or any other mail clients, the client is ONLY picking up the top-level "default" ssl_key and ssl_cert and the certificat in /etc/ssl/dovecot.pem Is this a bug? This is on Debian Wheezy. Any help pointing in the right direction would be appreciated thanks. Here is the ssl section: ----------- ssl_cert = </etc/ssl/dovecot.pem ssl_key = </etc/ssl/dovecot.pem local 192.0.2.10 { # instead of IP you can also use hostname, which will be resolved protocol imap { ssl_cert = </etc/ssl/dovecot/imap-01.example.com.cert.pem ssl_key = </etc/ssl/dovecot/imap-01.example.com.key.pem } protocol pop3 { ssl_cert = </etc/ssl/dovecot/pop-01.example.com.cert.pem ssl_key = </etc/ssl/dovecot/pop-01.example.com.key.pem } } local 192.0.2.20 { protocol imap { ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem ssl_key = </etc/ssl/dovecot/imap-02.example.com.key.pem } protocol pop3 { ssl_cert = </etc/ssl/dovecot/pop-02.example.com.cert.pem ssl_key = </etc/ssl/dovecot/pop-02.example.com.key.pem } } -----------------------

2 1

Mail sync at filesystem level
by Cédric Jeanneret 18 Nov '14

18 Nov '14

Hello, I'm currently building a mail infra using some decentralized filesystem for the storage. As I'm wanting to get multiple "entry-points" (servers running dovecot + postfix + other mail-related stuff), all of them sharing the same storage (most probably xtreemfs), how will dovecot cope in this case? As I see things: server1 gets a mail for User1; it pushes it to the xtreemfs directory. server2 shares the same xtreemfs directory, thus it can access the same mail listing User1 connects to server2: will he see the new mail? Will dovecot on server2 know about it? Thanks! Cheers, C.

1 0

Understanding why Dovecot unexpectedly died
by Luca Bertoncello 18 Nov '14

18 Nov '14

Hi list! I use Dovecot 1.2.17 (I can't upgrade right now, due to many reasons), controlled by Pacemaker (I have an HA-Cluster). Now I see that Pacemaker restarts often Dovecot. I wrote my own script to manage Dovecot, since Pacemaker does not have his own. My script, by the "monitor" section has this: monitor) if [ ! -e $OCF_RESKEY_pid ]; then echo "stopped (no pidfile)" echo "DOVECOT STOPPED - NO PIDFILE" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_NOT_RUNNING else /bin/ps axuwf | /bin/grep `/bin/cat $OCF_RESKEY_pid` | /bin/grep -v grep > /dev/null 2>&1 if [ $? -ne 0 ]; then echo "stopped" echo "DOVECOT STOPPED - NO PROCESS" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_NOT_RUNNING else if [ "`/bin/netstat -tupan | /bin/grep dovecot | /bin/grep $OCF_RESKEY_bindaddr | /usr/bin/wc -l`" -ne 0 ]; then exit $OCF_SUCCESS else echo "DOVECOT STOPPED - NO LISTEN [`/bin/netstat -tupan | /bin/grep dovecot`]" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_ERR_GENERIC fi fi fi exit $OCF_SUCCESS ;; The "loggers" was added now to try to understand why it dies... Well, I can see in my syslog, when Pacemaker restarts Dovecot, these lines: ov 15 18:59:09 mail01 DOVECOT-MONITOR[530]: DOVECOT STOPPED - NO LISTEN [tcp 0 0 192.168.33.1:37545 192.168.33.3:3306 ESTABLISHED 637/dovecot-auth Nov 15 18:59:09 mail01 DOVECOT-MONITOR[530]: tcp 0 0 192.168.33.1:37537 192.168.33.3:3306 ESTABLISHED 529/dovecot-auth] So, there is no "dovecot"-Process listening anymore... Normally I have these: tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 192.168.33.1:40994 192.168.33.3:3306 VERBUNDEN 891/dovecot-auth tcp 0 0 192.168.33.1:40984 192.168.33.3:3306 VERBUNDEN 638/dovecot-auth tcp6 0 0 :::110 :::* LISTEN 634/dovecot tcp6 0 0 :::143 :::* LISTEN 634/dovecot tcp6 0 0 :::993 :::* LISTEN 634/dovecot tcp6 0 0 :::995 :::* LISTEN 634/dovecot In the mail.log and mail.err I can't see anything but: Nov 15 18:59:13 mail01 dovecot: Dovecot v1.2.17 starting up Nov 15 18:59:13 mail01 dovecot: auth-worker(default): mysql: Connected to 192.168.33.3 (exim) And in the syslos there is nothing about Dovecot... Any idea? Thanks a lot! Luca Bertoncello (lucabert(a)lucabert.de)

2 1

stop deletion of mails
by Edwardo Garcia 18 Nov '14

18 Nov '14

Is possible with dovecot? Legal department have told us we need to stop anyone from delete email on corporate mail server, so nobody, even managers can not anymore delete any mail?

4 4

LMTPS : TLS over LMTP not working
by Stanislas SABATIER 17 Nov '14

17 Nov '14

Hello, I tried to activate SSL on LMTP service, to secure connections between Postfix and Dovecot on my LAN, but Dovecot is not negociating a TLS session with Postfix. If I enforce TLS for LMTP at Postfix's side, communication between Postfix and Dovecot is not working. I put ssl = yes ssl_cert = </dovecot/ssl/ssl-LMTP.pem ssl_key = </dovecot/ssl/ssl-LMTP.key in section protocol LMTP within 20-lmtp.conf and service lmtp { inet_listener lmtp { name = dovecot_lmtp address = xx.xx.xx.xx port = 26 ssl = yes } process_min_avail = 5 } within 10-master.conf Did I miss something ? Thank you for your help. Regards, Stan

4 10

inbox parameter is ignored within location config for public namespaces?
by Dieter Knopf 17 Nov '14

17 Nov '14

Hello, i already asked a similiar question some month ago but still have no fix for my problem :-( This is my global location option in 10-mail.conf: mail_location = maildir:/home/vmail/%d/%n/MAILDIR:INBOX=/home/vmail/%d/%n/MAILDIR/.INBOX:INDEX=/home/vmail/%d/%n/INDEX/ This works fine, until i'm using a public namespace. The following namespace is a normal user too, every mail to bos(a)foo.eu is stored in /home/vmail/foo.eu/bos/MAILDIR (within the INBOX-folder) and this directory is used for the location of the namespace. Config: namespace { type = public separator = / prefix = BOS/ location = maildir:/home/vmail/foo.eu/bos/MAILDIR:INBOX=/home/vmail/foo.eu/bos/MAILDIR/.INBOX:INDEX=/home/vmail/foo.eu/bos/S_INDEX:INDEXPVT=/home/vmail/foo.eu/bos/S_INDEXPVT/%u subscriptions = yes } The namespace itself works fine and without a problem, but the INBOX folder is the main problem. Mail users agents like Thunderbird now shows a folder structure like: BOS (grey, not useable) - INBOX (the .INBOX folder) - Other folder 1 - Other folder 2 - Other folder 3 The INBOX-config works fine for every single user, but it don't work on namespaces? Is this a bug? Thanks Dieter

2 4

closed fd causes: lmtp(18385): Panic: epoll_ctl(del, 11) failed: Bad file descriptor
by Steffen Kaiser 17 Nov '14

17 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See the end of the message for a possible delete of a closed fd from epoll() problem. Every now and then I get a Panic after a successfull LMTP delivery: 2014-11-12 13:25:31 lmtp(20890): Info: Connect from local 2014-11-12 13:25:32 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:25:34 lmtp(20890): Info: Connect from local 2014-11-12 13:25:35 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:26:11 lmtp(20890): Info: Connect from local 2014-11-12 13:26:12 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:26:12 lmtp(20890): Info: Connect from local 2014-11-12 13:26:13 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:26:13 lmtp(20890): Info: Connect from local 2014-11-12 13:26:14 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:26:15 lmtp(20890): Info: Connect from local 2014-11-12 13:26:15 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:27:05 lmtp(20890): Info: Connect from local 2014-11-12 13:27:06 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:27:07 lmtp(20890): Info: Connect from local 2014-11-12 13:27:07 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:27:08 lmtp(20890): Info: Connect from local 2014-11-12 13:27:08 lmtp(20890): Info: Disconnect from local: Connection closed (in reset) 2014-11-12 13:27:18 lmtp(20890): Info: Connect from local 2014-11-12 13:27:18 lmtp(20890): Info: Disconnect from local: Successful quit 2014-11-12 13:27:25 lmtp(20890): Info: Connect from local 2014-11-12 13:27:25 lmtp(20890): Info: Disconnect from local: Successful quit lmtp(18385): Panic: epoll_ctl(del, 11) failed: Bad file descriptor Error: Raw backtrace: /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(+0x934c6) [0x7fafdc2c04c6] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(+0x949d0) [0x7fafdc2c19d0] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fafdc2c0879] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_loop_handle_remove+0x129) [0x7fafdc2dcc85] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(+0xacf16) [0x7fafdc2d9f16] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_remove+0x1d) [0x7fafdc2d9f5d] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(+0xbcd5c) [0x7fafdc2e9d5c] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(+0xbce13) [0x7fafdc2e9e13] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_stream_unref+0x7d) [0x7fafdc2cb30d] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(o_stream_unref+0x82) [0x7fafdc2e86ae] -> /usr/local/dovecot-2.2.15/lib/dovecot/libssl_iostream_openssl.so(+0x5b93) [0! x7fafdb69cb93] -> /usr/local/dovecot-2.2.15/lib/dovecot/libssl_iostream_openssl.so(+0x5ce9) [0x7fafdb69cce9] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(ssl_iostream_unref+0x36) [0x7fafdc2b8bb9] -> /usr/local/dovecot-2.2.15/lib/dovecot/libssl_iostream_openssl.so(+0x911a) [0x7fafdb6a011a] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_stream_unref+0x8e) [0x7fafdc2cb31e] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(o_stream_unref+0x82) [0x7fafdc2e86ae] -> dovecot2.2/lmtp [idling](client_input_handle+0x9d) [0x40560d] -> dovecot2.2/lmtp [idling]() [0x405637] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_loop_call_io+0xcd) [0x7fafdc2dae5b] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x1e4) [0x7fafdc2dcec0] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x18) [0x7fafdc2daff6] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(io_loop_run+0xaf) [0x7fafd! c2daf4f] -> /usr/local/dovecot-2.2.15/lib/dovecot/libdovecot.so.0(master_service_run+0x2e) [0x7fafdc25b1ad] -> dovecot2.2/lmtp [idling](main+0x146) [0x4050d6] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fafdbee9c8d] -> dovecot2.2/lmtp [idling]() [0x404db9] 2014-11-12 12:46:34 lmtp(18385): Fatal: master: service(lmtp): child 18385 killed with signal 6 (core dumped) Core was generated by `dovecot2.2/lmtp'. Program terminated with signal 6, Aborted. #0 0x00007fafdbefd1b5 in raise () from /lib/libc.so.6 (gdb) bt #0 0x00007fafdbefd1b5 in raise () from /lib/libc.so.6 #1 0x00007fafdbefffc0 in abort () from /lib/libc.so.6 #2 0x00007fafdc2c0515 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:202 #3 0x00007fafdc2c19d0 in i_internal_fatal_handler (ctx=0x7fff64e1b960, format=0x7fafdc3109fc "%s", args=0x7fff64e1b940) at failures.c:666 #4 0x00007fafdc2c0879 in i_panic (format=0x7fafdc3109fc "%s") at failures.c:276 #5 0x00007fafdc2dcc85 in io_loop_handle_remove (io=0x2093920, closed=false) at ioloop-epoll.c:150 #6 0x00007fafdc2d9f16 in io_remove_full (_io=0x205f078, closed=false) at ioloop.c:143 #7 0x00007fafdc2d9f5d in io_remove (io=0x205f078) at ioloop.c:157 #8 0x00007fafdc2e9d5c in stream_closed (fstream=0x205ef90) at ostream-file.c:57 #9 0x00007fafdc2e9e13 in o_stream_file_close (stream=0x205ef90, close_parent=false) at ostream-file.c:78 #10 0x00007fafdc2cb30d in io_stream_unref (stream=0x205ef90) at iostream.c:41 #11 0x00007fafdc2e86ae in o_stream_unref (_stream=0x2079308) at ostream.c:88 #12 0x00007fafdb69cb93 in openssl_iostream_free (ssl_io=0x20792e0) at iostream-openssl.c:273 #13 0x00007fafdb69cce9 in openssl_iostream_unref (ssl_io=0x20792e0) at iostream-openssl.c:289 #14 0x00007fafdc2b8bb9 in ssl_iostream_unref (_ssl_io=0x2079670) at iostream-ssl.c:126 #15 0x00007fafdb6a011a in o_stream_ssl_destroy (stream=0x2079590) at ostream-openssl.c:28 #16 0x00007fafdc2cb31e in io_stream_unref (stream=0x2079590) at iostream.c:42 #17 0x00007fafdc2e86ae in o_stream_unref (_stream=0x7fff64e1bcd8) at ostream.c:88 #18 0x000000000040560d in client_input_handle (client=0x205e160) at client.c:139 #19 0x0000000000405637 in client_input (client=0x205e160) at client.c:146 #20 0x00007fafdc2dae5b in io_loop_call_io (io=0x20c3c50) at ioloop.c:501 #21 0x00007fafdc2dcec0 in io_loop_handler_run_internal (ioloop=0x2039720) at ioloop-epoll.c:220 #22 0x00007fafdc2daff6 in io_loop_handler_run (ioloop=0x2039720) at ioloop.c:548 #23 0x00007fafdc2daf4f in io_loop_run (ioloop=0x2039720) at ioloop.c:525 #24 0x00007fafdc25b1ad in master_service_run (service=0x20395b0, callback=0x404e74 <client_connected>) at master-service.c:566 #25 0x00000000004050d6 in main (argc=1, argv=0x2039390) at main.c:123 strace shows this: read(11, "\27\3\1\0 q\r\252\3551\21\237l\33\330\33\303\340\306l\334k\0360p\303)HF\331\234g"..., 1261) = 37 read(11, 0xf09908, 1224) = -1 EAGAIN (Resource temporarily unavailable) epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLPRI|EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLPRI|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 write(11, "\27\3\1\0 \204\375\373!\253\263n\204\274duj/\n\202\236\373\342\303[\22\17\264\10\23\346\225"..., 90) = 90 epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLPRI|EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 write(2, "\1\01028256 prefix=lmtp(28256): \n", 29) = 29 write(2, "\1\00228256 Disconnect from local: S"..., 47) = 47 epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLPRI|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLIN|EPOLLPRI|EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 epoll_ctl(10, EPOLL_CTL_MOD, 11, {EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 epoll_ctl(10, EPOLL_CTL_DEL, 11, {0, {u32=15754432, u64=15754432}}) = 0 write(11, "\25\3\1\0 \232h\200\203\3\350\34\265\1\305\6\302\276\272BD \236\353\267 \1\24\16\327\16I"..., 37) = 37 epoll_ctl(10, EPOLL_CTL_ADD, 11, {EPOLLOUT|EPOLLERR|EPOLLHUP, {u32=15754432, u64=15754432}}) = 0 close(11) = 0 write(5, "`n\0\0M\0\0\0\1\0\0\0", 12) = 12 epoll_ctl(10, EPOLL_CTL_DEL, 11, {0, {u32=15754432, u64=15754432}}) = -1 EBADF (Bad file descriptor) write(2, "\1\00628256 epoll_ctl(del, 11) faile"..., 55) = 55 lsof shows for fd's 10 and 11: lmtp 28256 root 10u 0000 0,9 0 548 anon_inode lmtp 28256 root 11u unix 0xffff880039336100 0t0 633297 /var/run/dovecot2.2/lmtp my man epoll says: Q6 Will closing a file descriptor cause it to be removed from all epoll sets automatically? A6 Yes, but be aware of the following point. A file descriptor is a reference to an open file description (see open(2)). Whenever a descriptor is duplicated via dup(2), dup2(2), fcntl(2) F_DUPFD, or fork(2), a new file descriptor referring to the same open file description is created. An open file description continues to exist until all file descriptors referring to it have been closed. A file descriptor is removed from an epoll set only after all the file descriptors referring to the underlying open file description have been closed (or before if the descriptor is explicitly removed using epoll_ctl() EPOLL_CTL_DEL). This means that even after a file descriptor that is part of an epoll set has been closed, events may be reported for that file descriptor if other file descriptors referring to the same under‐ lying file description remain open. So the close(11) should be enough to remove the fd 11 from epoll(10) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBVGNvlHz1H7kL/d9rAQKYcAf/dJKQGFqi8wZBwG1GevEc+DYJeZYGSUxB YOtMV+szUrVyl+vD0GZNyXKotO6/xn0gipeV1tLTZ1xIg7NIsVcJ2/DC1WENenrE YePmuuX/TQNpj7nOcQiATFtOtenqV9itwm5zrhTN1vzjyVbEnPwhVjsaOAnaUk9u HN/BdxTazDd7QTEQmJNMKJBFyg/Im0ktJpo/eAKuysv/mcZ9HOorTQhtocK7Goro YqOWacuEZVA0TUtD1hqDn9OfvEymp0oPoM8gEYON7lK4OQ9d6+hWMpkH5BG5x+7Z ZPmq9xUJW17tcbe2imKkXw+RBRNofgf5GyhMwNVoLhbOKa29tYWqXw== =yIiy -----END PGP SIGNATURE-----

2 4

Optional mail attribute in ldap
by Alexandros Soumplis 17 Nov '14

17 Nov '14

Hello, I am using an ldap database (active directory) for dovecot authentication and I am trying to change the mail location for some users only, thus any mail should be delivered to the default location unless the ldap query returns a successful result which defines the mail variable. I have chosen the AD atttribute "otherMailbox" and added for the required user the value "=mail=mdbox:/newmailboxes/%Lu/". It seems not to work and mails still get delivered to the default location. Any suggestions ? a.

1 0

Understanding filesystem quotas
by Chris Szilagyi 15 Nov '14

15 Nov '14

Hello: I've been trying to set up filesystem quotas for IMAP, and cannot seem to get it to work. In IMAP clients it either shows quota unavailable or unknown. I've read the documentation several times. I've enabled the quota plugins and to my knowledge that part is good. I've edited the file 90-quota.conf and uncommented these lines and set them as follows: plugin { quota_rule = *:storage=1G } plugin { quota = fs:User quota:user } To my knowledge, this should enable filesystem quotas by user. However when I run "doveadm quota get -u username", it shows: Quota name Type Value Limit % User quota STORAGE 0 - 0 So basically all zeros. I've also tried running "doveadm -Dv quota get -u username" and don't see anything that stands out or that would indicate an issue. It shows the correct block device and such. I know filesystem quotas are working as I can run "quota username" and it shows the usage. The reason I picked filesystem quotas is because we have /var/spool/mail/username (spool file), and /home/username/mail on the same partition, and because it sounds like it's fast and doesn't require disk I/O. But I'm trying to also figure out by setting the "storage=" command in Dovecot, do I even need to set a hard and soft limit on the filesystem quota then? I would prefer to let Dovecot enforce quotas rather than rely on the filesystem quota mechanism, but keep disk I/O down. Any help would be greatly appreciated on this. Thank you. -- Chris

3 8

Using dovecot-lda with sendmail
by Chris Szilagyi 15 Nov '14

15 Nov '14

Hello: I'm trying to get dovecot-lda to work with sendmail on a CentOS 7 server. I've tried following the instructions at the wiki, http://wiki2.dovecot.org/LDA/Sendmail, by adding the lines to /etc/mail/sendmail.mc, recompiling to /etc/mail/sendmail.cf and restarting sendmail -- the process for any sendmail config change. However it is still not working and in the maillog, it shows: sendmail[31949]: sAEM4GTt031742: to=<user@localhost>, ctladdr=<test@localhost> (1000/1000), delay=00:08:31, xdelay=00:00:00, mailer=local, pri=210942, dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/dovecot-lda) exited with EX_TEMPFAIL I verified that SELinux is not interfering in this case. I see talk of having sendmail run /usr/libexec/dovecot/dovecot-lda as other users, but I see that the file on my system is uid/gid as: root/root. Is there a way to get this working? Thanks much! -- Chris

2 3

Re: Dovecot Cur and New Directories are empty
by Joseph Tam 15 Nov '14

15 Nov '14

Nguyen Dinh Phuoc Thanh writes: > Recently, we faced an issue with dovecot. Mail delivered to New > directory, but after we used Outlook to connect with POP3 protocol, > there was no email delivered to Outlook and New/Cur directory was empty. > If we don't use Outlook to connect, after a few minutes, it is empty > also. > Would you please help me to solve this issue? Another POP3 client accessing the same account but not configured to keep message on server? Check logs to rule that out. Joseph Tam <jtam.home(a)gmail.com>

2 2

Evolution clientware and Dovecot
by The Doctor 14 Nov '14

14 Nov '14

Got a customer using Evolution 2.12.3 and was using SSL and could not retrieve e-mail in the last week. Got the custome to turn off SSL and he was able to retrieve e-mail. Recently I compiled SSL so that any comprimise was removed and then all apps using SSL including dovecot was recompiled. Could this be an app/Evolution issue? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism Lest we forget 2014

2 1

Dovecot wiki LMTP description
by Ron Leach 14 Nov '14

14 Nov '14

List, we are planning a new configuration to which we'll migrate an existing installation shortly. We are hoping to use Dovecot LMTP and have a query about the wiki entry for LMTP http://wiki2.dovecot.org/LMTP where it suggests this config: service lmtp { inet_listener lmtp { address = 192.168.0.24 127.0.0.1 ::1 port = 24 } Does this example mean that LMTP will only listen for input messages from the interface with IP address 192.168.0.24 (plus localhost)? If so, I probably haven't understood how LMTP is intended to work. Is there a reason why we want to limit LMTP to listening for messages from a specific IP on the network? I need to understand that so that I replace ...24 with a suitable host interface that exists on our LAN (we don't have a host at 192.168.0.24). Apologies for what must seem, to people using LMTP, a very basic question. Nevertheless, I would be grateful for any clarification. regards, Ron

3 3

[PATCH]: libexttextcat from libreoffice
by Arkadiusz Miśkiewicz 14 Nov '14

14 Nov '14

Hello. There is libexttextcat version provided by libreoffice team http://www.freedesktop.org/wiki/Software/libexttextcat http://dev-www.libreoffice.org/src/libexttextcat/ which uses pkgconfig. Library name is different: libexttextcat-2.0.so so dovecot configure doesn't find it. Something like this is needed: --- dovecot-2.2.15/configure.ac~ 2014-10-25 05:57:08.000000000 +0200 +++ dovecot-2.2.15/configure.ac 2014-11-14 08:49:02.888452270 +0100 @@ -2747,10 +2747,16 @@ have_lucene_textcat=yes AC_DEFINE(HAVE_LUCENE_TEXTCAT,, Define if you want textcat support for CLucene) ], [ - AC_CHECK_LIB(exttextcat, special_textcat_Init, [ - have_lucene_exttextcat=yes - AC_DEFINE(HAVE_LUCENE_EXTTEXTCAT,, Define if you want textcat (Debian version) support for CLucene) - ]) + if test "$PKG_CONFIG" != "" && $PKG_CONFIG --exists libexttextcat 2>/dev/null; then + PKG_CHECK_MODULES(LIBEXTTEXTCAT, libexttextcat) + LIBS="$LIBS $LIBEXTTEXTCAT_LIBS" + AC_DEFINE(HAVE_LUCENE_EXTTEXTCAT,, Define if you want textcat (LibreOffice version) support for CLucene) + else + AC_CHECK_LIB(exttextcat, special_textcat_Init, [ + have_lucene_exttextcat=yes + AC_DEFINE(HAVE_LUCENE_EXTTEXTCAT,, Define if you want textcat (Debian version) support for CLucene) + ]) + fi ]) ], [ if test $want_stemmer = yes; then -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

Dovecot Cur and New Directories are empty
by Nguyen Dinh Phuoc Thanh 14 Nov '14

14 Nov '14

Hi, Recently, we faced an issue with dovecot. Mail delivered to New directory, but after we used Outlook to connect with POP3 protocol, there was no email delivered to Outlook and New/Cur directory was empty. If we don't use Outlook to connect, after a few minutes, it is empty also. Would you please help me to solve this issue? Below is the result from "dovecot -n" --------------------------------------------------------------------- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.el6.x86_64 x86_64 CentOS release 6.6 (Final) ext4 auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log dict { quotadict = mysql:/etc/zpanel/configs/dovecot2/dovecot-dict-quota.conf } disable_plaintext_auth = no first_valid_gid = 12 first_valid_uid = 101 info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/var/zpanel/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded- character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify passdb { args = /etc/zpanel/configs/dovecot2/dovecot-mysql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls quota = maildir:User quota sieve = ~/dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /var/zpanel/sieve/ sieve_global_path = /var/zpanel/sieve/globalfilter.sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M trash = /etc/zpanel/configs/dovecot2/dovecot-trash.conf } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service dict { unix_listener dict { group = mail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service imap { vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } } ssl = no userdb { args = /etc/zpanel/configs/dovecot2/dovecot-mysql.conf driver = sql } protocol lda { mail_plugins = quota sieve postmaster_address = postmaster(a)###.com } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = quota imap_quota trash } protocol lmtp { mail_plugins = quota sieve } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } ---------------------------------------------------------------- Thanks, Thanh

2 1

automatically create Spam mailbox
by Cliff Hayes 14 Nov '14

14 Nov '14

I am trying to set up dovecot to automatically create a Spam mailbox for every user. http://wiki2.dovecot.org/MailboxSettings shows how to do this but not what config file to put it in so I assume 10-mail.conf. When I put it in there as follows... namespace inbox { mailbox Spam { auto = create special_use = \Junk } } ... I get the following error ... doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-mail.conf line 107: Unknown setting: mailbox How do I create the mailbox?

4 3

Core Dump upon startup (SEGV) - v2.2.10
by Don Levey 14 Nov '14

14 Nov '14

123456789012345678901234567890123456789012345678901234567890123456789012 I appear to have taken a mostly-working installation and mucked it up. In my recent messages I mentioned how I was having difficuilty in making my wife's email readable in Squirrelmail; this was solved with directory permissions. However, my usual email client is Thunderbird; I was holding off on using that as there appeared to be authentication issues. Today was my opportunity to start debugging those; it occurred to me that I might have issues with PKI and tried to make/install working certificates. When this didn't work, I though to just scrub the installation and start over. On my CentOS 7 system I erased and reinstalled from RPM. With what should have been working certificates, I ran through the config files, and then restarted to the following error: [root@dungeon dovecot]# systemctl -l status dovecot.service dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; disabled) Active: failed (Result: core-dump) since Thu 2014-11-13 19:05:52 EST; 30min ago Process: 23700 ExecStart=/usr/sbin/dovecot -F (code=dumped, signal=SEGV) Process: 23695 ExecStartPre=/usr/libexec/dovecot/prestartscript (code=exited, status=0/SUCCESS) Main PID: 23700 (code=dumped, signal=SEGV) Nov 13 19:05:52 dungeon.the-leveys.us systemd[1]: Started Dovecot IMAP/POP3 email server. Nov 13 19:05:52 dungeon.the-leveys.us systemd[1]: dovecot.service: main process exited, code=dumped, status=11/SEGV Nov 13 19:05:52 dungeon.the-leveys.us systemd[1]: Unit dovecot.service entered failed state. I can't run dovecot -n: [root@dungeon dovecot]# dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf Segmentation fault (core dumped) The log file shows: Nov 13 18:48:46 anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 13 18:48:46 master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 13 18:48:46 log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Here's what I get from the gdb command specified: [root@dungeon log]# gdb /usr/libexec/dovecot/imap /var/core/6538 GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-51.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib/debug/usr/libexec/dovecot/imap.debug...done. done. warning: core file may not match specified executable file. [New LWP 6538] Core was generated by `/usr/bin/doveconf -f service=master -c /etc/dovecot/dovecot.conf -m master -p -'. Program terminated with signal 11, Segmentation fault. #0 0x00007f1f3dd1db5b in ?? () (gdb) I tried talking to IMAP directly as per the website, but was unable to make it crash (and I don't know enough IMAP to do anything more than the exmaple commands). I don't know what else to include... Thank you, -Don

1 0

Migrate system users to virtual users
by Ron Leach 13 Nov '14

13 Nov '14

List, good afternoon, We are at the planning stage of wanting to migrate from an existing installation onto a new machine, and also to change from system users to virtual users. May I check that our ideas for user id are correct? I am not sure whether we will encounter a 'permissions' and 'user id' problem when moving from a system-user scheme to a virtual scheme. We use Maildir, and the maildirs at the moment are in their users' linux /home directories. After reading the wiki, we think that the 'single system user for vmail' arrangement, ie just one system user to manage all the mail for all virtual users, will work for us. I think that means that the permissions on all our existing 'system-user-oriented' maildirs will have to be changed (in the new machine) so that they are owned by the 'single-system-user', such as 'vmail'. One thought was to first copy the existing maildirs into the new virtual user file system tree, and then, second, change the owners and permissions on the maildirs and directories and messages to permit control by 'vmail'. From the point of view of transferring all the mail files, is that all we would have to do? (Of course, we would also have to create the virtual users and their passwords, and arrange the appropriate password lookups etc, but that's not the direct topic of this post. And that arrangement has to be compatible with the MTA, as well.) If we do copy the maildirs and change the permissions, does all the metadata that the clients, or Dovecot, use to detect new, existing, or downloaded mail remain valid? Or should we use a different approach? Grateful for any comment regards, Ron

3 2

Bug (?) while listing imap folder
by Alexandros Soumplis 13 Nov '14

13 Nov '14

Dear All, I think I've hit a bug after migrating our mail server to the newest version of dovecot (version 2.2.15). When I try to list all imap folders for one user the imap process crashes. The listing to a specific folder (ex. INBOX) works fine, only the "*" crashes. Client side: --------------------- [root@mb log]# telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] __mb__ ready a login soumplis MYPASS a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY] Logged in a list "" "*" Connection closed by foreign host. Server Log: --------------------- Nov 13 13:53:57 mb00 dovecot: imap-login: Login: user=<soumplis>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=60544, secured, session=<pXzTKrwH0wB/AAAB> Nov 13 13:53:59 mb00 dovecot: imap(soumplis): Panic: file buffer.c: line 309 (buffer_set_used_size): assertion failed: (used_size <= buf->alloc) Nov 13 13:53:59 mb00 dovecot: imap(soumplis): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x7466e) [0x7f06237f466e] -> /usr/lib64/dovecot/libdovecot.so.0(+0x7474e) [0x7f06237f474e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f06237a4aa6] -> /usr/lib64/dovecot/libdovecot.so.0(+0x71172) [0x7f06237f1172] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_list_index_iter_next+0x16c) [0x7f0623afca0c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x987df) [0x7f0623b007df] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x2a0) [0x7f0623b01460] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x99fb1) [0x7f0623b01fb1] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x987df) [0x7f0623b007df] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0x40e) [0x7f0623b015ce] -> dovecot/imap [soumplis 127.0.0.1 list](+0x10d59) [0x7f0623fbed59] -> dovecot/imap [soumplis 127.0.0.1 list](cmd_list_full+0x528) [0x7f0623fbf5e8] -> dovecot/imap [soumplis 127.0.0.1 list](command_exec+0x3c) [0x7f0623fc724c] -> dovecot/imap [soumplis 127.0.0.1 list](+0x180ff) [0x7f0623fc60ff] -> dovecot/imap [soumplis 127.0.0.1 list](+0x18191) [0x7f0623fc6191] -> dovecot/imap [soumplis 127.0.0.1 list](client_handle_input+0x14d) [0x7f0623fc64ed] -> dovecot/imap [soumplis 127.0.0.1 list](client_input+0x85) [0x7f0623fc68b5] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f06238067fc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xcb) [0x7f062380782b] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f0623806869] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f06238068e8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f06237aa0a3] -> dovecot/imap [soumplis 127.0.0.1 list](main+0x2d4) [0x7f0623fba4f4] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f06233e0af5] -> dovecot/imap [soumplis 127.0.0.1 list](+0xc661) [0x7f0623fba661] Nov 13 13:53:59 mb00 dovecot: imap(soumplis): Fatal: master: service(imap): child 60544 killed with signal 6 (core dumps disabled) Our current configuration: ---------------------------------------------------------- # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.8.1.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) xfs auth_cache_negative_ttl = 0 auth_cache_size = 128 M auth_username_chars = auth_username_format = %Ln deliver_log_format = msgid=%m: Subject=%s, From=%f, Physical Size=%p, Virtual Size=%w, %$ disable_plaintext_auth = no imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags login_greeting = __mb__ ready mail_attachment_dir = /SILO/attachments mail_attachment_fs = sis posix:mode=660 mail_cache_min_mail_count = 10 mail_gid = mailuser mail_home = /SILO/homes/%Ln mail_location = mdbox:/SILO/mailboxes/%Ln/mdbox:INDEX=/SILO/indexes/%Ln mail_plugins = " zlib" mail_uid = mailuser mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl mdbox_preallocate_space = yes mdbox_rotate_interval = 1 days mdbox_rotate_size = 64 M namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox "Report NO Spam" { auto = subscribe } mailbox "Report Spam" { auto = subscribe } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/conf.d/dovecot-ldap.conf.ext driver = ldap } passdb { driver = pam } plugin { acl_anyone = allow acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes sieve = /SILO/sieves/%Ln/dovecot.sieve sieve_dir = /SILO/sieves/%Ln/ sieve_global_dir = /SILO/sieves } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_enable_last = yes pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s %u pop3_reuse_xuidl = yes pop3_save_uidl = yes protocols = imap pop3 lmtp sieve service imap { process_limit = 4192 vsz_limit = 1 G } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 5 } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 1 } ssl_ca = /etc/pki/tls/certs/chain-pem ssl_cert = </etc/pki/tls/certs/cert-pem ssl_key = </etc/pki/tls/private/mb.key ssl_prefer_server_ciphers = yes syslog_facility = local3 userdb { args = /etc/dovecot/conf.d/dovecot-ldap-userdb.conf.ext driver = ldap } userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log mail_plugins = " zlib sieve" } protocol imap { mail_max_userip_connections = 64 } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } I have also tried with strace of the process to pinpoint the problem by first listing INBOX and then *. It seems that it crashes while opening dovecot.list.index read(7, "a list \"\" \"INBOX\"\r\n", 8162) = 19 brk(0) = 0x7fb688573000 brk(0x7fb688594000) = 0x7fb688594000 stat("/SILO/mailboxes/soumplis/Maildir/cur", {st_mode=S_IFDIR|0700, st_size=274432, ...}) = 0 brk(0) = 0x7fb688594000 brk(0) = 0x7fb688594000 brk(0x7fb688593000) = 0x7fb688593000 brk(0) = 0x7fb688593000 stat("/SILO/mailboxes/soumplis/Maildir", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 open("/SILO/mailboxes/soumplis/Maildir/dovecot.list.index.log", O_RDWR|O_APPEND) = 4 fstat(4, {st_mode=S_IFREG|0600, st_size=17440, ...}) = 0 pread(4, "\1\2(\0#1ZTv\0\0\0u\0\0\0000\200\0\0\267\210dT\0\0\0\0\0\0\0\0\1\0\0\0\0\0\0\0", 40, 0) = 40 open("/SILO/mailboxes/soumplis/Maildir/dovecot.list.index", O_RDWR) = 12 fstat(12, {st_mode=S_IFREG|0600, st_size=4424, ...}) = 0 pread(12, "\7\3x\0\30\5\0\0P\0\0\0\1\0\0\0#1ZT\0\0\0\0#1ZT.\0\0\0'\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0u\0\ read(7, "a list \"\" \"*\"\r\n", 8143) = 15 stat("/SILO/mailboxes/soumplis/Maildir/cur", {st_mode=S_IFDIR|0700, st_size=274432, ...}) = 0 stat("/SILO/mailboxes/soumplis/Maildir/dovecot.list.index.log", {st_mode=S_IFREG|0600, st_size=17440, ...}) = 0 fstat(4, {st_mode=S_IFREG|0600, st_size=17440, ...}) = 0 fstat(4, {st_mode=S_IFREG|0600, st_size=17440, ...}) = 0 write(2, "\1\01059391 prefix=imap(soumplis): \n", 32) = 32 write(2, "\1\00659391 file buffer.c: line 309 (buffer_set_used_size): assertion failed: (used_size <= buf->alloc)\n", 100) = 100 Any help will be greatly appreciated! -- Alexandros Soumplis Systems Engineer (M.Sc, RHCE, VCP, SCSA) National Documentation Center / N.H.R.F. Information Systems Department 48, Vas. Constantinou Av. 116 35 Athens, Greece phone: +30 210 7273984 fax: +30 210 7252223 email:soumplis@ekt.gr http://www.ekt.gr

1 0

R: Re: pop3/imap hanging processes
by absolutely_free＠libero.it 13 Nov '14

13 Nov '14

Sorry, I checked and it's already ok: # dovecot -a |grep shutdown shutdown_clients = yes >----Messaggio originale---- >Da: eduardo(a)freedominterface.org >Data: 13/11/2014 2.18 >A: <dovecot(a)dovecot.org> >Ogg: Re: pop3/imap hanging processes > >Take a look at ' shutdown_clients' parameter. > >http://wiki2.dovecot.org/RunningDovecot > >On 11/12/2014 07:37 PM, absolutely_free(a)libero.it wrote: >> Hi, I am using Dovecot 2.0.9 on CentOS server.I noticed that when I type: service dovecot stop, there are several imap / pop3 dovecot processes that remain active.Which parameter controls this?How can I have dovecot closing these processes more quickly?Thank you >

1 0

R: Re: pop3/imap hanging processes
by absolutely_free＠libero.it 13 Nov '14

13 Nov '14

Thank you very much! >----Messaggio originale---- >Da: eduardo(a)freedominterface.org >Data: 13/11/2014 2.18 >A: <dovecot(a)dovecot.org> >Ogg: Re: pop3/imap hanging processes > >Take a look at ' shutdown_clients' parameter. > >http://wiki2.dovecot.org/RunningDovecot > >On 11/12/2014 07:37 PM, absolutely_free(a)libero.it wrote: >> Hi, I am using Dovecot 2.0.9 on CentOS server.I noticed that when I type: service dovecot stop, there are several imap / pop3 dovecot processes that remain active.Which parameter controls this?How can I have dovecot closing these processes more quickly?Thank you >

1 0

Execution of sieve script failed HG 3db5fbb216d3
by Thomas Leuxner 13 Nov '14

13 Nov '14

# 2.2.15 (3db5fbb216d3): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 [...] The latest HG commits produce the following sieve execution error. There is no error log created though... Nov 13 08:54:11 nihlus dovecot: lmtp(tlx(a)leuxner.net): kFEQG6JjZFQZBAAAgUOSbA: sieve: msgid=<hg.e3b52d11d038.1415865308.6920021320469856403@talvi>: stored mail into mailbox 'INBOX' Nov 13 08:54:11 nihlus dovecot: lmtp(tlx(a)leuxner.net): kFEQG6JjZFQZBAAAgUOSbA: sieve: Execution of script /var/vmail/domains/leuxner.net/tlx/.dovecot.sieve;name=dovecot failed, but implicit keep was successful (user logfile /var/vmail/domains/leuxner.net/tlx/.dovecot.sieve.log may reveal additional details) Regards Thomas

3 4

Error using Tika as meta extractor with solr
by Davide 13 Nov '14

13 Nov '14

Hi to all, i have a dovecot 2.2.15 installation which uses tika and solr for indexing and meta extraction from messages: this is my doveconf -n output # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 auth_cache_negative_ttl = 10 mins auth_cache_size = 8 M auth_cache_ttl = 20 mins debug_log_path = /var/log/dovecot/dovecot-debug.log first_valid_gid = 89 first_valid_uid = 89 info_log_path = /var/log/dovecot/dovecot.log last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 127.0.0.1 log_path = /var/log/dovecot/dovecot-err.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = never mail_gid = 89 mail_location = maildir:~/Maildir:INDEX=/mnt/ramdisk/%u mail_plugins = " notify zlib quota fts fts_solr" mail_uid = 89 mailbox_list_index = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/var/mail/public prefix = Public/ separator = / subscriptions = no type = public } passdb { args = webmail=127.0.0.1 cache_key=%u%s driver = vpopmail } plugin { antispam_backend = crm114 antispam_crm_args = -u;/opt/crm114;--fileprefix=/opt/crm114/;--config=/usr/share/crm114/mailfilter.cf antispam_crm_binary = /usr/share/crm114/mailreaver.crm antispam_crm_notspam_arg = --good antispam_crm_spam_arg = --spam antispam_signature = X-CRM114-CacheID antispam_spam_pattern_ignorecase = crm-spam* antispam_trash_pattern_ignorecase = Trash* antispam_unsure_pattern_ignorecase = crm-unsure* fts = solr fts_solr = url=http://192.168.119.5:8983/solr/ break-imap-search fts_tika = http://192.168.119.5:9998/tika/ mail_log_events = delete undelete expunge copy mail_log_fields = uid box msgid size mail_log_group_events = quota = dict:::redis:host=127.0.0.1:prefix=user/ quota_rule2 = Trash:storage=+20%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /usr/local/lib/dovecot/sieve/default.sieve sieve_default = /usr/local/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_global_dir = /usr/local/lib/dovecot/sieve/ zlib_save = gz zlib_save_level = 9 } protocols = imap sieve service auth { unix_listener auth-master { group = vchkpw mode = 0600 user = vpopmail } unix_listener auth-userdb { group = vchkpw mode = 0600 user = vpopmail } } service decode2text { executable = script /usr/local/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 user = dovecot } } service imap-login { executable = /usr/local/libexec/dovecot/imap-login inet_listener imaps { address = 192.168.10.50 } process_limit = 500 process_min_avail = 2 service_count = 0 } service imap { executable = /usr/local/libexec/dovecot/imap } service managesieve-login { executable = managesieve-login inet_listener sieve { address = 127.0.0.1 port = 4190 } process_min_avail = 2 service_count = 0 } service managesieve { process_limit = 10 } service quota-warning { executable = script /usr/local/libexec/dovecot/quota-warning unix_listener quota-warning { mode = 0660 user = vpopmail } user = vpopmail } ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem ssl_protocols = !SSLv2 !SSLv3 userdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } userdb { args = quota_template=quota_rule=*:storage=100M driver = vpopmail } protocol sieve { info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-error.log managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_max_line_length = 64 k mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " notify zlib quota fts fts_solr imap_quota mail_log antispam imap_zlib" } protocol lda { auth_socket_path = /usr/local/var/run/dovecot/auth-userdb deliver_log_format = msgid=<%f>-<%s>-%m: %$ hostname = mail.cgilfe.it info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_fsync = optimized mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = " notify zlib quota fts fts_solr mail_log sieve" postmaster_address = postmaster(a)mail.cgilfe.it rejection_reason = Il messaggio destinato a <%t> è stato automaticamente rifiutato:%n%r rejection_subject = Messaggio Rifiutato: %s submission_host = 127.0.0.1 } If i throw a command like this doveadm -Dv index -u davide.marchi(a)mail.cgilfe.it INBOX i receive the error that i attach to this message Any idea about the reason of error and how can i resolve it? -- *Davide Marchi Teorema Ferrara Srl** **Via Spronello, 7 - Ferrara - 44121 05327831610532783368 davide.marchi(a)mail.cgilfe.it davide.marchi73 Web: http://www.cgilfe.it* * CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

1 0

Dovecot 2.2.15 imap crash/panic (with core dumped)
by Alessio Cecchi 13 Nov '14

13 Nov '14

Hi, after upgrade to Dovecot >= 2.2.14rc1 sometimes I found this error/crash in the log (never happened with 2.2.13), I'm the only one? Can be fix? Nov 11 17:44:26 imap(info(a)myemail.com): Error: Corrupted transaction log file /home/domains/myemail.com/info/Maildir/dovecot.index.log seq 190: Invalid transaction log size (32756 vs 32772): /home/domains/myemail.com/info/Maildir/dovecot.index.log (sync_offset=32756) Nov 11 17:44:26 imap(info(a)myemail.com): Error: Log synchronization error at seq=0,offset=0 for /home/domains/myemail.com/info/Maildir/dovecot.index: Append with UID 10777, but next_uid = 10778 Nov 11 17:44:26 imap(info(a)myemail.com): Error: /home/domains/myemail.com/info/Maildir/dovecot.index view syncing failed to apply changes Nov 11 17:44:26 imap(info(a)myemail.com): Panic: file index-sync.c: line 265 (index_mailbox_sync_next_expunge): assertion failed: (range->seq2 <= ctx->messages_count) Nov 11 17:44:26 imap(info(a)myemail.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x75e1a) [0x7fbbd213ae1a] -> /usr/lib/dovecot/libdovecot.so.0(+0x75e96) [0x7fbbd213ae96] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fbbd20ec2bf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb219c) [0x7fbbd245719c] -> dovecot/imap(imap_sync_more+0xc3) [0x41fd13] -> dovecot/imap() [0x420437] -> dovecot/imap(cmd_sync_delayed+0x209) [0x4208f9] -> dovecot/imap(client_handle_input+0x1ed) [0x4178dd] -> dovecot/imap(client_input+0x6f) [0x417b9f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x5b) [0x7fbbd214c0db] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xaf) [0x7fbbd214d27f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fbbd214c169] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fbbd214c1f8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fbbd20f1193] -> dovecot/imap(main+0x2b0) [0x4210d0] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7fbbd1d81cad] -> dovecot/imap() [0x40bea9] Nov 11 17:44:26 imap(info(a)myemail.com): Fatal: master: service(imap): child 13586 killed with signal 6 (core dumped) # gdb /usr/libexec/dovecot/imap /home/domains/myemail.com/info/core Reading symbols from /usr/libexec/dovecot/imap...done. warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /usr/lib/dovecot/lib01_acl_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib01_acl_plugin.so Reading symbols from /usr/lib/dovecot/lib02_imap_acl_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib02_imap_acl_plugin.so Reading symbols from /usr/lib/dovecot/lib10_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib10_quota_plugin.so Reading symbols from /usr/lib/dovecot/lib11_imap_quota_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib11_imap_quota_plugin.so Reading symbols from /usr/lib/dovecot/lib20_expire_plugin.so...done. Loaded symbols for /usr/lib/dovecot/lib20_expire_plugin.so Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/libgcc_s.so.1 Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00007fbbd1d94ed5 in raise () from /lib/libc.so.6 (gdb) bt full #0 0x00007fbbd1d94ed5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007fbbd1d97ce0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007fbbd213ae10 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:202 backtrace = 0x13a71d8 "/usr/lib/dovecot/libdovecot.so.0(+0x75e1a) [0x7fbbd213ae1a] -> /usr/lib/dovecot/libdovecot.so.0(+0x75e96) [0x7fbbd213ae96] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fbbd20ec2bf] -> /usr/lib/d"... #3 0x00007fbbd213ae96 in i_internal_fatal_handler (ctx=0x7fff8637e780, format=<value optimized out>, args=<value optimized out>) at failures.c:666 status = 0 #4 0x00007fbbd20ec2bf in i_panic (format=0x3512 <Address 0x3512 out of bounds>) at failures.c:276 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff8637e860, reg_save_area = 0x7fff8637e7a0}} #5 0x00007fbbd245719c in index_mailbox_sync_next_expunge (ctx=0x142b410, sync_rec_r=<value optimized out>) at index-sync.c:265 range = 0x13cdfd0 __FUNCTION__ = "index_mailbox_sync_next_expunge" #6 0x000000000041fd13 in imap_sync_more (ctx=0x13c3d80) at imap-sync.c:536 str = 0x13a7050 ret = <value optimized out> __FUNCTION__ = "imap_sync_more" #7 0x0000000000420437 in cmd_sync_continue (sync_cmd=0x1431700) at imap-sync.c:658 cmd = <value optimized out> prev = <value optimized out> client = 0x1430b00 ctx = 0x13c3d80 ret = <value optimized out> __FUNCTION__ = "cmd_sync_continue" #8 0x00000000004208f9 in cmd_sync_client (client=<value optimized out>) at imap-sync.c:748 ctx = 0x0 flags = <value optimized out> client = 0x1430b00 imap_flags = <value optimized out> no_newmail = <value optimized out> #9 cmd_sync_delayed_real (client=<value optimized out>) at imap-sync.c:878 cmd = <value optimized out> #10 cmd_sync_delayed (client=<value optimized out>) at imap-sync.c:886 _data_stack_cur_id = 3 ret = <value optimized out> #11 0x00000000004178dd in client_handle_input (client=0x1430b00) at imap-client.c:908 ret = true remove_io = false handled_commands = true __FUNCTION__ = "client_handle_input" #12 0x0000000000417b9f in client_input (client=0x1430b00) at imap-client.c:935 cmd = <value optimized out> output = 0x1431540 bytes = <value optimized out> __FUNCTION__ = "client_input" #13 0x00007fbbd214c0db in io_loop_call_io (io=0x1431610) at ioloop.c:498 ioloop = 0x13af730 t_id = 2 __FUNCTION__ = "io_loop_call_io" ---Type <return> to continue, or q <return> to quit--- #14 0x00007fbbd214d27f in io_loop_handler_run_internal (ioloop=<value optimized out>) at ioloop-epoll.c:220 ctx = 0x13b03c0 event = 0x13b1230 list = 0x13d3630 io = 0x3512 tv = {tv_sec = 1799, tv_usec = 999656} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false __FUNCTION__ = "io_loop_handler_run_internal" #15 0x00007fbbd214c169 in io_loop_handler_run (ioloop=0x3512) at ioloop.c:545 No locals. #16 0x00007fbbd214c1f8 in io_loop_run (ioloop=0x13af730) at ioloop.c:522 __FUNCTION__ = "io_loop_run" #17 0x00007fbbd20f1193 in master_service_run (service=0x13af5c0, callback=0x3512) at master-service.c:566 No locals. #18 0x00000000004210d0 in main (argc=1, argv=0x13af390) at main.c:412 set_roots = {0x429200, 0x0} login_set = {auth_socket_path = 0x13a7050 "\210p:\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x4212d0 <login_client_connected>, failure_callback = 0x421270 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> (gdb) # 2.2.15: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.6 (3e924b1b6c5c+) # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.10 auth_cache_negative_ttl = 10 mins auth_cache_size = 8 M auth_cache_ttl = 20 mins auth_worker_max_count = 50 deliver_log_format = msgid=%m, from=%f, subject="%s": %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 89 first_valid_uid = 89 imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins imap_logout_format = in=%i out=%o session=<%{session}> last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota acl expire mailbox_list_index = yes maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = username_format=%Ld /etc/dovecot/denylogin.txt deny = yes driver = passwd-file } passdb { args = cache_key=%s%u webmail=192.168.1.2 driver = vpopmail } plugin { acl = vfile acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire quota = maildir:UserQuota quota2 = dict:Quota Usage::noenforcing:proxy::sqlquota quota_grace = 10M quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate -vacation } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o, session=<%{session}> protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth { client_limit = 6500 unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { process_limit = 500 unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { process_min_avail = 4 service_count = 0 } service imap { process_limit = 5000 service_count = 100 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 0 } service pop3 { process_limit = 1023 service_count = 100 } service quota-warning { executable = script /etc/dovecot/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </etc/ssl/wildcard.pem ssl_key = </etc/ssl/wildcard.key ssl_protocols = !SSLv2 !SSLv3 submission_host = localhost userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol lda { mail_location = maildir:~/Maildir:INDEX=MEMORY mail_plugins = quota acl expire sieve } protocol imap { mail_max_userip_connections = 15 mail_plugins = quota acl expire imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 2 } protocol pop3 { mail_max_userip_connections = 5 }

2 1

pop3/imap hanging processes
by absolutely_free＠libero.it 13 Nov '14

13 Nov '14

Hi, I am using Dovecot 2.0.9 on CentOS server.I noticed that when I type: service dovecot stop, there are several imap / pop3 dovecot processes that remain active.Which parameter controls this?How can I have dovecot closing these processes more quickly?Thank you

2 1

Query: SELECT "INBOX" permission denied
by Don Levey 12 Nov '14

12 Nov '14

Yesterday I was forced to migrate servers due to a hardware failure. I have been able to bring up my mail server, and set up Squirrelmail and Dovecot. I am able to access (via Squirrelmail) all users' mail except one - which happens to be my wife's, so it would be really helpful if I could get that working too. I am able to log in, but see the following message in the main pane: ERROR: Could not complete request. Query: SELECT "INBOX" Reason Given: [NOPERM] Permission denied I have see similar errors in my searches, but they all relate to *creating* files (inbox, sent, etc). The files do already exist here, they used to work in the same directory structure on the old server configuration, and I can see no relative difference between this user's files/permissions and working users' files/permissions. Suggestions are welcome; thanks in advance, -Don Here are the vitals: Version: 2.2.10 OS: CentOS 7 # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.9.3.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) ext3 auth_mechanisms = plain login disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_location = mbox:/home/%u/~mail:INBOX=/var/spool/mail/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } [root@dungeon sandra]# ls -la /var/spool/mail total 2097152 drwxrwxr-x. 2 root mail 4096 Nov 11 22:10 . drwxr-xr-x. 16 root root 4096 Nov 11 14:21 .. -rw-rw----. 1 sandra mail 625547161 Nov 11 21:32 sandra -rw-rw----. 1 spamtrap_000 mail 26773946 Nov 11 20:53 spamtrap_000 -rw-rw----. 1 spamtrap_001 mail 3092961 Nov 11 22:10 spamtrap_001 -rw-rw----. 1 spamtrap_002 mail 8778257 Nov 11 00:03 spamtrap_002 -rw-rw----. 1 spamtrap_003 mail 63579856 Nov 11 21:21 spamtrap_003 Her directory: [root@dungeon .imap]# ls -la total 100 drw-------. 25 sandra sandra 4096 Jul 1 2008 . drwx------. 4 sandra sandra 4096 Nov 10 10:48 .. drwx------. 2 sandra sandra 4096 Jul 1 2008 bday drwx------. 2 sandra sandra 4096 Jul 1 2008 beads drwx------. 2 sandra sandra 4096 Jul 1 2008 books drwx------. 2 sandra sandra 4096 Jul 1 2008 Drafts drwx------. 2 sandra sandra 4096 Jul 1 2008 ham drwx------. 2 sandra sandra 4096 Nov 11 21:39 INBOX drwx------. 2 sandra sandra 4096 Jul 1 2008 Sent drwx------. 2 sandra sandra 4096 Jul 1 2008 spam drwx------. 2 sandra sandra 4096 Jul 1 2008 Trash drwx------. 2 sandra sandra 4096 Jul 1 2008 Work A working directory: [root@dungeon .imap]# ls -la total 56 drwx------. 14 spamtrap_003 spamtrap_003 4096 Oct 23 19:22 . drwx------. 3 spamtrap_003 spamtrap_003 4096 Nov 10 09:15 .. drwx------. 2 spamtrap_003 spamtrap_003 4096 Jun 8 08:40 Deleted Messages drwx------. 2 spamtrap_003 spamtrap_003 4096 Aug 11 2011 Drafts drwx------. 2 spamtrap_003 spamtrap_003 4096 Mar 18 2011 ham drwx------. 2 spamtrap_003 spamtrap_003 4096 Nov 11 21:21 INBOX drwx------. 2 spamtrap_003 spamtrap_003 4096 Oct 18 2013 Sent drwx------. 2 spamtrap_003 spamtrap_003 4096 Aug 28 09:55 Sent Messages drwx------. 2 spamtrap_003 spamtrap_003 4096 Oct 6 20:11 spam drwx------. 2 spamtrap_003 spamtrap_003 4096 Nov 11 21:21 Trash

3 4

Some of the mail on the server to duplicate.
by オーエフ・テック　榊 12 Nov '14

12 Nov '14

I am using dovecot in mbox format. I'm going to set to leave the 30-day mail to the server with the mail client. The other day, some of email was received duplicate When receive mail. Mail does not arrive between Nov 4 11:09:03 and Nov 4 11:13:25. There should be the 259 (274-15) messages at the time of Nov 4 11:09:03 on the server from the log. But there were the 280 messages at the time of Nov 4 11:13:25 and 21 messages was a duplicate. Do you know the cause? /var/log/maillog -------------------------------------------------- Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Loading modules from directory: /usr/lib/dovecot/pop3 Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Module loaded: /usr/lib/dovecot/pop3/drac.so Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): Effective uid=1000, gid=1000 Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): [drac]: login by xxxx from 153.219.140.xxx Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): mbox: data=/home/xxx/mail:INBOX=/var/spool/mail/xxx Nov 4 11:08:14 xxxxxxxx dovecot: POP3(xxxx): mbox: root=/home/xxx/mail, index=/home/xxx/mail, inbox=/var/spool/mail/xxx Nov 4 11:09:03 xxxxxxxx dovecot: POP3(xxxx): Disconnected: Logged out top=0/0, retr=32/209178, del=15/274, size=3554823 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Loading modules from directory: /usr/lib/dovecot/pop3 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Module loaded: /usr/lib/dovecot/pop3/drac.so Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): Effective uid=1000, gid=1000 Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): [drac]: login by xxxx from 153.219.140.xxx Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): mbox: data=/home/xxx/mail:INBOX=/var/spool/mail/xxx Nov 4 11:13:25 xxxxxxxx dovecot: POP3(xxxx): mbox: root=/home/xxx/mail, index=/home/xxx/mail, inbox=/var/spool/mail/xxx Nov 4 11:13:27 xxxxxxxx dovecot: POP3(xxxx): Disconnected: Logged out top=0/0, retr=42/279598, del=0/280, size=3346231 -------------------------------------------------- dovecot -n -------------------------------------------------- # 1.0.7: /etc/dovecot.conf protocols: imaps pop3s ssl_ca_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.cacert.pem ssl_cert_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.crt ssl_key_file: /etc/mail/certs/mail.xxxxxxxx.co.jp.key ssl_cipher_list: ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:!LOW login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: ready. mail_access_groups: mail mail_privileged_group: mail mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_debug: yes mbox_write_locks: dotlock fcntl mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/rawlog /usr/libexec/dovecot/pop3 mail_plugins(default): drac mail_log mail_plugins(imap): drac mail_log mail_plugins(pop3): drac mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 pop3_reuse_xuidl(default): no pop3_reuse_xuidl(imap): no pop3_reuse_xuidl(pop3): yes pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes auth default: passdb: driver: pam userdb: driver: passwd plugin: drac_host: xxx.xxx.xxx.xxx -------------------------------------------------- uname -a -------------------------------------------------- Linux xxxxxxxx.co.jp 2.6.18-371.9.1.el5PAE #1 SMP Tue Jun 10 19:05:56 EDT 2014 i686 i686 i386 GNU/Linux --------------------------------------------------

1 1

Disabling SSLv3 protocol
by Timo Sirainen 12 Nov '14

12 Nov '14

Since people are now talking about the SSLv3 security hole and how to disable it, here's a thread where you can talk about that. In Dovecot v2.1+ you can disable SSLv3 by setting: ssl_protocols = !SSLv2 !SSLv3 In older versions you'd have to patch the source code. Attached a patch against v2.0. I don't know if there are any clients that would break by disabling SSLv3. I'd expect all the clients to use the system (or otherwise generic) SSL libraries, which would automatically choose the TLS protocol over SSL. So my guess is that unless somebody is using over a 10 year old client there wouldn't be any problems. Maybe some old mobile phones might be using SSL.. If you find out about any clients that require SSLv3 I'd like to know about it. For Dovecot v2.3 I could maybe disable SSLv3 by default if there's no real need for it. (Also: Don't be confused by SSL/TLS protocols vs. SSL port/STARTTLS, as described in http://wiki2.dovecot.org/SSL. For example https://en.wikipedia.org/wiki/Comparison_of_email_clients#SSL_and_TLS_suppo… is irrelevant here.)

3 4

New director features
by Timo Sirainen 12 Nov '14

12 Nov '14

I implemented a couple of larger director changes today. These could still be changed a bit if somebody has any ideas. http://hg.dovecot.org/dovecot-2.2/rev/b9df3d654710 Support for director "tags", which allow creating multiple Dovecot backend groups using a single director ring. So you can mark different backend hosts with @tag names and then have passdb lookup return the wanted tag for each user. Note that because director works using user hashes, two users with the same hash can't be in different backend groups. Use "doveadm director map -u user@domain" to see which hash is used by the user@domain. http://hg.dovecot.org/dovecot-2.2/rev/b9df3d654710 Added director_consistent_hashing=yes setting so users don't move around much when backend servers are added/removed. Ideally at some point this setting will be removed and directors will automatically switch to it when all the directors in the ring support it.

1 0

Re: Virtual User Authentication
by Joseph Tam 12 Nov '14

12 Nov '14

Jerry <jerry(a)seibercom.net> writes: > Personally, I am not a fan of this multiple file configuration scenario. Then don't use it. Concatenate all the included files together and throw out the settings you don't need. My (single) config file is ~340 lines, 2/3 of which are comments. Joseph am <jtam.home(a)gmail.com>

1 0

Re: Help with last_login plugin
by Pascal Volk 11 Nov '14

11 Nov '14

On 11/11/2014 08:55 PM, Jorge Bastos wrote: > Hi, > > > > I want to have a datetime column in my users table, to have the value > updated every time my users login via POP3/IMAP. > > Last_login is new but I don't see any query example, or field names or so. > > > > Does anyone can give an help on this? > This topic was discussed a few days ago. See http://dovecot.org/list/dovecot/2014-October/098300.html Regards, Pascal -- The trapper recommends today: cafefeed.1431522(a)localdomain.org

1 0

Help with last_login plugin
by Jorge Bastos 11 Nov '14

11 Nov '14

Hi, I want to have a datetime column in my users table, to have the value updated every time my users login via POP3/IMAP. Last_login is new but I don't see any query example, or field names or so. Does anyone can give an help on this? Thanks,

1 0

FTS-Solr: indexer-worker does not find mailbox
by Marc Stürmer 11 Nov '14

11 Nov '14

Greetings, I am running Dovecot v. 2.2.13 on a Gentoo Box. Mail users are virtual, data for them is stored in a MySQL-DB, Sieve is enabled and deliver is the LDA in conjunction with Postfix. This setup has been running for a few years now without problems, the configuration works. Some weeks ago the setup was still on a Ubuntu 12.04 LTS box, and Dovecot was v. 2.0.9. I've installed a Tomcat there with Solr and configured the FTS-Solr plugin from Dovecot. Worked like a charm without any problems at all. Now the same setup on the Gentoo box does not work at all; either indexer-worker does not find the directory or is just indexing 0 messages. Solr is also installed again (v. 3.6.0) on Tomcat, and Solr is running properly. I checked it with my browser and the logs, they are showing no errors. gentoo ~ # dovecot --version 2.2.13 dovecot -n: http://pastebin.com/NqLfrbp8 dovecot-sql.conf: http://pastebin.com/KLf4pjJZ Debug log. Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker: Debug: auth input: mail(a)marc-stuermer.de home=/var/kunden/mail/ mail=maildir:marc/mail@marc-stuermer.de/ uid=9997 gid=9997 Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker: Debug: Added userdb setting: mail=maildir:marc/mail@marc-stuermer.de/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Effective uid=9997, gid=9997, home=/var/kunden/mail/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:marc/mail@marc-stuermer.de/ Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: maildir++: root=marc/mail(a)marc-stuermer.de, index=, indexpvt=, control=, inbox=marc/mail(a)marc-stuermer.de, alt= Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace INBOX.: marc/mail(a)marc-stuermer.de doesn't exist yet, using default permissions Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace INBOX.: Using permissions from marc/mail(a)marc-stuermer.de: mode=0700 gid=default Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 11 20:12:14 kraftzwerg dovecot: indexer-worker(mail(a)marc-stuermer.de): Debug: Syncing mailbox INBOX.gentoo failed: Mailbox doesn't exist: INBOX.gentoo Nov 11 20:12:14 kraftzwerg dovecot: imap(mail(a)marc-stuermer.de): Error: indexer failed to index mailbox INBOX.gentoo So the question is: where's the error and how to fix it? I am kinda clueless right now. Thanks in advance, Marc

1 0

Virtual User Authentication
by Jerry 11 Nov '14

11 Nov '14

I have only "virtual users" on the system that I maintain. I am using Postfix which is configured to use Devecot for authentication. I get several attempts everyday to hack into the system, both via Postfix and directly via Dovecot. The following is from the dovecot log: Nov 11 04:14:48 auth-worker(21005): Error: pam(monica,69.193.88.146): pam_authenticate() failed: authentication error (/etc/pam.d/dovecot missing?) Now, I do not use "pam" on this system. Is there a way I can eliminate Dovecot from trying to use it? -- Jerry

4 5

Replication Advice Needed
by Asai 11 Nov '14

11 Nov '14

I successfully set up Dovecot replication, having 2 servers syncing with each other. While I had both servers in the same room on a Gigabit network, they were syncing fine. But I took one to another location, and syncing was turned off for about 2 weeks. Now I've turned both back on, they're sort of syncing, but not really. The one remote server is not populating emails into various folders and it really should be cranking to sync those emails. Do anyone have any insights on how we could troubleshoot this? -- --Asai

1 0

deliver an email to a large number of local users directly via doveadm
by Mahdi Mahdi 11 Nov '14

11 Nov '14

Hello,We have a mail service that uses postfix and dovecot. We would like to send an email to a large number of users(about 100K). However, it takes too long to send the email through smtp. Is there any solution to deliver the email locally to all user mailboxes directly.dovecot uses lmtp for transfering local emails. the worst solutoin is that copy the email to all mailboxes via linux file system. But we would prefer to use some tools provided by dovecot like doveadm. is there any way to do this job?

2 1

help by recovering a mailbox - maildir and dovecot 2.2.13
by Götz Reinicke - IT Koordinator 11 Nov '14

11 Nov '14

Hi, an user screwd up his mailbox in such a way, that I dont see how to get it back in the right order. E.g. in the subcriptions file there is a folder Studienjahr 2014 - 2015.Pitchings in the filesystem there this folder is in trash and without spaces between the years: .Trash.Studienjahr 2014-2015.Pitchings in the Filesystem ther is no folder Studienjahr 2014-2015 Currently he uses our sogo as email client ant there are some folders to showing up but some are empty, some cant be deleted ... So any help and suggestion in recovering this structure is welcome! Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 1

mail-storage.c:2222:mailbox_copy assertion failed: (!ctx->unfinished)
by Giel van Schijndel 10 Nov '14

10 Nov '14

Hi, I see a lot of crashes in my syslog lately. Specifically a sequence of errors exactly like this (only the timestamp differs). > Nov 10 21:29:53 khitomer dovecot: imap-login: Login: user=<user@hostname>, method=PLAIN, rip=XXXX, lip=YYYY, mpid=ZZZZ, TLS, session=<TTTT> > Nov 10 21:29:53 khitomer dovecot: imap(user@hostname): Panic: file mail-storage.c: line 2222 (mailbox_copy): assertion failed: (!ctx->unfinished) > Nov 10 21:29:53 khitomer dovecot: imap(user@hostname): Fatal: master: service(imap): child 35108 killed with signal 6 (core not dumped) I have the mail storage on ZFS, one separate filesystem per user and another for the lucene indexes. I.e. these are separate ZFS filesystems (not pools): > /var/mail/vhosts/%d/%n > /var/mail/vhosts/%d/%n/lucene-indexes Any idea what could be going wrong? partial config (without LDA, SSL and auth portions): > # 2.2.15: /usr/local/etc/dovecot/dovecot.conf > # OS: FreeBSD 10.0-RELEASE-p12 amd64 > mail_gid = mail > mail_location = maildir:~/Maildir/ > mail_plugins = acl mailbox_alias quota virtual > mail_privileged_group = mail > mail_uid = vmail > namespace { > list = yes > location = maildir:/var/mail/public:INDEXPVT=~/Maildir/public > prefix = Public. > separator = . > subscriptions = no > type = public > } > namespace { > list = children > location = maildir:%%h/Maildir/:INDEX=~/Maildir/shared/%%n > prefix = shared.%%n. > separator = . > subscriptions = no > type = shared > } > namespace { > location = virtual:~/Maildir/virtual > prefix = virtual. > separator = . > type = private > } > namespace inbox { > inbox = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > auto = create > special_use = \Junk > } > mailbox Sent { > auto = create > special_use = \Sent > } > mailbox Trash { > auto = create > special_use = \Trash > } > mailbox virtual.All { > special_use = \All > } > prefix = > separator = . > } > plugin { > acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=10 > acl_anyone = allow > acl_shared_dict = file:/var/mail/vhosts/%d/shared-mailboxes.db > antispam_backend = mailtrain > antispam_mail_notspam = -g > antispam_mail_sendmail = /usr/bin/nice > antispam_mail_sendmail_args = /usr/local/bin/python2;-W;ignore;/usr/local/bin/sb_filter.py;-d;%h/.hammiedb;-f > antispam_mail_spam = -s > antispam_spam = SPAM;Spam;Junk > antispam_trash = Trash > antispam_unsure = Filtered-Spam;Possible-Spam > fetchmail_pidfile = %h/.fetchmail.pid > fts = lucene > fts_autoindex = yes > fts_autoindex_max_recent_msgs = 30 > fts_decoder = decode2text > fts_index_timeout = 60 > fts_lucene = whitespace_chars=@. mime_parts > mailbox_alias_new = Sent Messages > mailbox_alias_new2 = Sent Items > mailbox_alias_old = Sent > mailbox_alias_old2 = Sent > quota = maildir:User quota > quota_grace = 10%% > quota_rule = *:storage=1G > quota_rule2 = Trash:storage=+100M > quota_rule3 = Junk:ignore > quota_rule4 = Possible-Spam:ignore > quota_rule5 = Filtered-Spam:ignore > recipient_delimiter = + > } > postmaster_address = postmaster@$hostname > protocols = imap lmtp sieve > quota_full_tempfail = yes > service auth-worker { > user = $default_internal_user > } > service imap-login { > inet_listener imaps { > port = 993 > ssl = yes > } > } > service imap { > drop_priv_before_exec = yes > } > userdb { > args = username_format=%u /usr/local/etc/dovecot/users > default_fields = home=/var/mail/vhosts/%d/%n > driver = passwd-file > } > protocol imap { > mail_max_userip_connections = 25 > mail_plugins = acl mailbox_alias quota virtual imap_acl zlib imap_zlib imap_quota expire fetchmail_wakeup antispam > } -- Met vriendelijke groet, With kind regards, Giel van Schijndel -- "It would seem that perfection is attained not when no more can be added, but when no more can be removed." -- Antoine de Saint Exupéry

1 0

mail location change results in various errors
by Cliff Hayes 10 Nov '14

10 Nov '14

I have a sendmail/dovecot imap/pop3 system that has been running with the following mail_location: mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u In order to reduce errors and simplify operation I removed imap and am now only responding to pop3. I'd like to also simplify the mail_location to get rid of index errors since I don't need indexes: mail_location = mbox:/var/spool/mail:INBOX=/var/spool/mail/%n But when I applied the new mail_location I began to get the following five errors: Nov 6 23:17:24 sendmail dovecot: pop3(chayes): Warning: UIDVALIDITY changed (1132434125 -> 1205169149) in mbox file /var/spool/mail/chayes Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Panic: Message unexpectedly expunged from index Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e2a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e6e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x3340019eb3] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62567ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef6256e75] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62928ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_set_seq+0x76) [0x3ef6294ae6] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef625698c] -> dovecot/pop3() [0x405ec7] -> dovecot/pop3(client_command_execute+0x6d7) [0x4071c7] -> dovecot/pop3(client_handle_input+0x78) [0x405618] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x3340052c36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x3340053a57] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x3340052778] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x334003e3c3] -> dovecot/pop3(main+0x283) [0x403cc3] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x359f821a05] -> dovecot/pop3() [0x403e2d] Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Fatal: master: service(pop3): child 3358 killed with signal 6 (core dumps disabled) Nov 6 23:18:00 sendmail dovecot: pop3(jbkirk): Error: open(/var/spool/mail/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=2151(jbkirk) egid=12(mail) missing +r perm: /var/spool/mail/.imap/INBOX/dovecot.index.log, dir owned by 3575:12 mode=0770) dovecot -n output # 2.1.16: /etc/dovecot/dovecot.conf # OS: Linux 3.9.2-200.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } What do I need to do to transition to the new mail_location without the errors? Thanks in advance.

1 0

Performance issue
by absolutely_free＠libero.it 10 Nov '14

10 Nov '14

Hi, Since few days I noticed very high load on my mailserver (Centos 6.6 64bit, 8 GB RAM, 2 x CPU 3.00GHz I am using Dovecot + Postfix + Roundcube + Nginx. I have about 10000 users. Spool is on network attached storage (Coraid). File system is ext4 (mounted with noatime). Problem appears almost every morning (while load is normal during afternoon). I suspect that this can be related to some user that have so many messages in his mailbox. How can I troubleshoot this? Here some messages that I got in maillog: Warning: Maildir: Scanning /var/spool/pop/domains/xxxx.it/YYYYYYYYY/Maildir/new took 71 seconds (1 readdir()s, 1 rename()s to cur/) Warning: Maildir /var/spool/pop/domains/zzzz/WWWWWWWWWWWW/Maildir/.Trash: Synchronization took 74 seconds (5 new msgs, 0 flag change attempts, 0 expunge attempts) dovecot: imap(xxxx(a)zzzz.it): Warning: Inotify instance limit for user 89 (UID postfix) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances tail: inotify cannot be used, reverting to polling: Too many open files My relevant dovecot conf: mail_location = maildir:/coraid-s2l2/domains namespace { type = private separator = . prefix = INBOX. inbox = yes } mail_uid = 89 mail_gid = 89 mail_fsync = never first_valid_uid = 89 first_valid_gid = 89 maildir_very_dirty_syncs = yes mbox_write_locks = fcntl thank you very much!

2 1

Best practise for deleting with Thunderbird
by Stefan G. Weichinger 09 Nov '14

09 Nov '14

As I mentioned in another thread I set up these 2 namespaces for a couple of users: namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/home/vmail/oeffentlich:INDEXPVT=/home/vmail/public/index/%d/%u/index prefix = Oeffentlich/ separator = / subscriptions = yes type = public } It is planned that they all will use Thunderbird (on MS Windows) to access their mailboxes. Now when I create a folder in the public space and try to delete it via thunderbird I get something like: "Renaming not supported across non-private namespaces" As far as I found out by browsing the web this is related to Thunderbird trying to move (=rename) the mail from the public to the private namespace, correct? Setting TB to immediately remove mails (tested that, this works) seems a bit scary to me: this removes a safety layer for the users because this would also apply to their personal maildirs. Is there any more elegant way of solving this? Do I have to set up some kind of ACLs? Some kind of "public paperbin folder" ?? Pls help me to understand this better ;-) Regards, Stefan

3 6

Improvement proposal
by Jorge Bastos 09 Nov '14

09 Nov '14

Hi, I'd like to purpose a small improvement. When a user has a quota set in message limit instead of bytes, the returning message it's the same as in bytes limit quota (Quota exceeded (mailbox for user is full)) If possible, when the user has the message limit, it could return something different like: Quota exceeded (max messages reached for user) Thanks, Jorge,

1 0

Re: Help on dict with QUOTA / perms
by Gedalya 09 Nov '14

09 Nov '14

On 11/08/2014 10:55 AM, Jorge Bastos wrote: > Hi, > > Ok managed to solve this with the permissions on the socket. > > One related question, the quota units are only Kb,M,G ? not possible to > define it in bytes? You can http://wiki2.dovecot.org/Quota/Configuration#Limit_configuration

2 1

Dovecot quota via custom column
by Filip Bartmann 08 Nov '14

08 Nov '14

Hello, we have multiple domains connected to single user account and we want to have quota counted via this column - called account_id. Users are stored in mysql database. --------------------------------------------------------------------------------- iterate_query = SELECT email AS user FROM mailboxes user_query=SELECT email, 501 AS uid, 501 AS gid, CONCAT('*:storage=',quota,'M') AS quota_rule FROM mailboxes AS m WHERE email='%u' password_query=SELECT email AS user, pw_hash AS password, CONCAT('*:storage=',quota,'M') AS userdb_quota_rule FROM mailboxes AS e WHERE email='%u' --------------------------------------------------------------------------------- We have quota stored in dovecot dictionary and as usable variables we found only - http://wiki2.dovecot.org/Variables. Is there any way to do use account_id as quota username? Thanks, Filip Bartmann

1 0

RE: Help on dict with QUOTA / perms
by Jorge Bastos 08 Nov '14

08 Nov '14

Hi, Ok managed to solve this with the permissions on the socket. One related question, the quota units are only Kb,M,G ? not possible to define it in bytes? > -----Original Message----- > From: dovecot [mailto:dovecot-bounces@dovecot.org] On Behalf Of Jorge > Bastos > Sent: sábado, 8 de Novembro de 2014 14:22 > To: 'Dovecot Mailing List' > Subject: Help on dict with QUOTA / perms > > I'm setting up quota for my users, my users have a UID starting on > >5000 and GID = 5000, and when I query the quota, for example in IMAP, > I get: > > > > Nov 8 14:13:28 fastmail dovecot: imap-login: Login: user=<a(a)a.com>, > method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=18660, secured, > session=<uByciFkH2gB/AAAB> > > Nov 8 14:13:37 fastmail dovecot: imap(a(a)a.com): Error: > net_connect_unix(/var/run/dovecot/dict) failed: Permission denied > (euid=5000(<unknown>) egid=5000(<unknown>) missing +r perm: > /var/run/dovecot/dict, dir owned by 0:0 mode=0755) > > > > Question is, should I have the GID on the users set to 0, or is there > another way to workaround it? > > > > Thanks,

1 0

Help on dict with QUOTA / perms
by Jorge Bastos 08 Nov '14

08 Nov '14

I'm setting up quota for my users, my users have a UID starting on >5000 and GID = 5000, and when I query the quota, for example in IMAP, I get: Nov 8 14:13:28 fastmail dovecot: imap-login: Login: user=<a(a)a.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=18660, secured, session=<uByciFkH2gB/AAAB> Nov 8 14:13:37 fastmail dovecot: imap(a(a)a.com): Error: net_connect_unix(/var/run/dovecot/dict) failed: Permission denied (euid=5000(<unknown>) egid=5000(<unknown>) missing +r perm: /var/run/dovecot/dict, dir owned by 0:0 mode=0755) Question is, should I have the GID on the users set to 0, or is there another way to workaround it? Thanks,

1 0

Virtual alias with dovecot
by Jorge Bastos 08 Nov '14

08 Nov '14

Hi, I've setup virtual alias/users/domains with postfix and dovecot, so far so good. In the alias table I set the information of the source and destination address, but then I try to send an email to the alias, dovecot complains about it. What am I doing wrong? Nov 7 23:04:13 fastmail dovecot: lmtp(4687): Connect from local Nov 7 23:04:13 fastmail postfix/lmtp[6556]: 1D2AC100E0A: to=<b(a)a.com>, relay=fastmail.domain.pt[private/dovecot-lmtp], delay=6.3, delays=6.2/0/0/0.06, dsn=5.1.1, status=bounced (host fastmail.domain.pt[private/dovecot-lmtp] said: 550 5.1.1 <b(a)a.com> User doesn't exist: b(a)a.com (in reply to RCPT TO command)) Nov 7 23:04:13 fastmail dovecot: lmtp(4687): Disconnect from local: Successful quit Postfix alias conf: virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf cat mysql-virtual-alias-maps.cf user = posuser password = popass hosts = 127.0.0.1 dbname = postfix query = SELECT deliver_to FROM dovecot_aliases WHERE alias='%s' where the table structure is: CREATE TABLE `dovecot_aliases` ( `id` int(11) NOT NULL, `alias` varchar(255) NOT NULL, `deliver_to` varchar(255) NOT NULL, PRIMARY KEY (`id`) ) ENGINE=MyISAM DEFAULT CHARSET=utf8 ROW_FORMAT=DYNAMIC; Records are, considering that the main address is a(a)a.com: Insert into dovecot_alias values (1,'b(a)a.com','a(a)a.com'); Should be postfix that should had send this to the main address right? What could be wrong? SQL Logs for this, show's that dovecot considered the alias to check if the users exists instead of the real address: 141107 23:18:12 45 Connect postfix_usr@localhost on postfix 45 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='ola.pt' 46 Connect postfix_usr@localhost on postfix 46 Query SELECT 1 FROM dovecot_domains WHERE domain='ola.pt' and status='true' 141107 23:18:16 45 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='a.com' 46 Query SELECT 1 FROM dovecot_domains WHERE domain='a.com' and status='true' 47 Connect postfix_usr@localhost on postfix 47 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='b(a)a.com' 141107 23:18:22 45 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='a.com' 46 Query SELECT 1 FROM dovecot_domains WHERE domain='a.com' and status='true' 48 Connect postfix_usr(a)192.168.69.223 on postfix 48 Query select uid,gid from dovecot_users where username='b(a)a.com' 49 Connect postfix_usr@localhost on postfix 49 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='ola(a)ola.pt' 49 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='@ola.pt' 45 Query SELECT deliver_to FROM dovecot_aliases WHERE alias='ola.pt' 46 Query SELECT 1 FROM dovecot_domains WHERE domain='ola.pt' and status='true' PS: offtopic, don't understand why postfix queries the sender domain in the domains table and the sender email in the alias table. Thanks in advanced, Jorge,

1 0

mail location change results in various errors
by Cliff Hayes 07 Nov '14

07 Nov '14

I have a sendmail/dovecot imap/pop3 system that has been running with the following mail_location: mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u In order to reduce errors and simplify operation I removed imap and am now only responding to pop3. I'd like to also simplify the mail_location to get rid of index errors since I don't need indexes: mail_location = mbox:/var/spool/mail:INBOX=/var/spool/mail/%n But when I applied the new mail_location I began to get the following five errors: Nov 6 23:17:24 sendmail dovecot: pop3(chayes): Warning: UIDVALIDITY changed (1132434125 -> 1205169149) in mbox file /var/spool/mail/chayes Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Panic: Message unexpectedly expunged from index Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e2a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e6e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x3340019eb3] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62567ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef6256e75] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62928ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_set_seq+0x76) [0x3ef6294ae6] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef625698c] -> dovecot/pop3() [0x405ec7] -> dovecot/pop3(client_command_execute+0x6d7) [0x4071c7] -> dovecot/pop3(client_handle_input+0x78) [0x405618] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x3340052c36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x3340053a57] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x3340052778] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x334003e3c3] -> dovecot/pop3(main+0x283) [0x403cc3] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x359f821a05] -> dovecot/pop3() [0x403e2d] Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Fatal: master: service(pop3): child 3358 killed with signal 6 (core dumps disabled) Nov 6 23:18:00 sendmail dovecot: pop3(jbkirk): Error: open(/var/spool/mail/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=2151(jbkirk) egid=12(mail) missing +r perm: /var/spool/mail/.imap/INBOX/dovecot.index.log, dir owned by 3575:12 mode=0770) dovecot -n output # 2.1.16: /etc/dovecot/dovecot.conf # OS: Linux 3.9.2-200.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } What do I need to do to transition to the new mail_location without the errors? Thanks in advance.

1 0

building latest stable for ubuntu 14.04
by Eduardo Casarero 07 Nov '14

07 Nov '14

Hi list, Does anybody have some notes/blog post/etc about building dovecot deb packages?

3 2

mail location change generates various errors
by Cliff Hayes 07 Nov '14

07 Nov '14

I have a sendmail/dovecot imap/pop3 system that has been running with the following mail_location: mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u In order to reduce errors and simplify operation I removed imap and am now only responding to pop3. I'd like to also simplify the mail_location to get rid of index errors since I don't need indexes: mail_location = mbox:/var/spool/mail:INBOX=/var/spool/mail/%n But when I applied the new mail_location I began to get the following five errors: Nov 6 23:17:24 sendmail dovecot: pop3(chayes): Warning: UIDVALIDITY changed (1132434125 -> 1205169149) in mbox file /var/spool/mail/chayes Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Panic: Message unexpectedly expunged from index Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e2a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3340045e6e] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x3340019eb3] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62567ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef6256e75] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef62928ed] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_set_seq+0x76) [0x3ef6294ae6] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3ef625698c] -> dovecot/pop3() [0x405ec7] -> dovecot/pop3(client_command_execute+0x6d7) [0x4071c7] -> dovecot/pop3(client_handle_input+0x78) [0x405618] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x3340052c36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x3340053a57] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x3340052778] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x334003e3c3] -> dovecot/pop3(main+0x283) [0x403cc3] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x359f821a05] -> dovecot/pop3() [0x403e2d] Nov 6 23:17:26 sendmail dovecot: pop3(chayes): Fatal: master: service(pop3): child 3358 killed with signal 6 (core dumps disabled) Nov 6 23:18:00 sendmail dovecot: pop3(jbkirk): Error: open(/var/spool/mail/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=2151(jbkirk) egid=12(mail) missing +r perm: /var/spool/mail/.imap/INBOX/dovecot.index.log, dir owned by 3575:12 mode=0770) dovecot -n output # 2.1.16: /etc/dovecot/dovecot.conf # OS: Linux 3.9.2-200.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = pop3 ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } What do I need to do to transition to the new mail_location without the errors? Thanks in advance.

2 1

Dovecot replication causing deleted emails to reappear
by Asai 06 Nov '14

06 Nov '14

Greetings, I've set up replication successfully on two Dovecot servers. I had fully synced the servers but then took one offline for 2 weeks. When I restored it, the servers synced but ended up replacing deleted emails in random people's inboxes. I'm using maildir. Does anyone have any insights as to correcting this issue? Asai -- --Asai

1 0

Dovecot-lda permission errors or maybe authentication errors?
by Robert Kryger 06 Nov '14

06 Nov '14

I am a new dovecot user who recently transitioned my old mailserver to a new CentOS/Postfix/Dovecot system. I am running a simple configuration with about a dozen system users and Maildir folders. The e-mail setup seems to be running fine when I use the default local-delivery-agent in Postfix. However, I am trying to use the dovecot-lda instead so I can take advantage of the sieve functionality. I have tried to specify the dovecot-lda in two ways. First, in the /etc/postfix/main.cf file: mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" or alternatively, I leave the mailbox_command blank and specify the following in the .forward file of a test user: | "/usr/libexec/dovecot/dovecot-lda" Either approach gives me the same error(s). When a mail message is sent to the test user USER1, the following errors appear in the dovecot-lda error file: Nov 04 08:47:29 lda(user1): Error: chdir(/home/user1/) failed: Permission denied (euid=524(user1) egid=524(user1) stat() failed: No such file or directory, euid is not dir owner) Nov 04 08:47:29 lda(user1): Error: chdir(/home/user1) failed: Permission denied Nov 04 08:47:29 lda(user1): Error: user user1: Initialization failed: Namespace 'INBOX.': stat(/home/user1/Maildir) failed: Permission denied (euid=524(user1) egid=524(user1) stat() failed: No such file or directory, euid is not dir owner) Nov 04 08:47:29 lda(user1): Fatal: Invalid user settings. Refer to server log for more information. Nov 04 08:47:29 lda(user1): Error: chdir(/home/user1/) failed: Permission denied (euid=524(user1) egid=524(user1) stat() failed: No such file or directory, euid is not dir owner) Nov 04 08:47:29 lda(user1): Error: chdir(/home/user1) failed: Permission denied Nov 04 08:47:29 lda(user1): Error: user user1: Initialization failed: Namespace 'INBOX.': stat(/home/user1/Maildir) failed: Permission denied (euid=524(user1) egid=524(user1) stat() failed: No such file or directory, euid is not dir owner) Nov 04 08:47:29 lda(user1): Fatal: Invalid user settings. Refer to server log for more information. At first, I interpreted this to mean the file permissions were not set correctly on the home directory or the Maildir folder. However, I have opened these up to full rwx access for everyone and I still get the same errors. Alternatively, perhaps this is related somehow to the dovecot-lda authentication process via the password or user databases, but I can't make any sense of the documentation. Can anyone suggest what might be wrong or how to better diagnose? For reference, I am running dovecot version 2.0.9. The dovecot-lda process also outputs the following messages (not errors) when a test message is sent to the USER1 account: Nov 04 08:47:29 lda: Debug: Loading modules from directory: /usr/lib64/dovecot Nov 04 08:47:29 lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Nov 04 08:47:29 lda(user1): Debug: Effective uid=524, gid=524, home=/home/user1 Nov 04 08:47:29 lda(user1): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Nov 04 08:47:29 lda(user1): Debug: maildir++: root=/home/user1/Maildir, index=, control=, inbox=/home/user1/Maildir Nov 04 08:47:29 lda: Debug: Loading modules from directory: /usr/lib64/dovecot Nov 04 08:47:29 lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Nov 04 08:47:29 lda(user1): Debug: Effective uid=524, gid=524, home=/home/user1 Nov 04 08:47:29 lda(user1): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Nov 04 08:47:29 lda(user1): Debug: maildir++: root=/home/user1/Maildir, index=, control=, inbox=/home/user1/Maildir The output of dovecot -n is: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login disable_plaintext_auth = no login_trusted_networks = 71.xx.xx.xx 71.xx.xx.xy 71.xx.xx.xz 71.xx.xx.yx mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = home/sieve sieve_max_script_size = 1M } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = sieve postmaster_address = postmaster(a)xxxxxxx.com }

3 7

Re: Dovecot-lda permission errors or maybe authentication errors?
by Alexander Dalloz 06 Nov '14

06 Nov '14

Am 06.11.2014 um 09:01 schrieb Steffen Kaiser: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Wed, 5 Nov 2014, Alexander Dalloz wrote: > > Dear Alexander, > >> Run "sestatus" and you'll see. >> >> Run "grep -i AVC /var/log/audit/audit.log" to identify SELinux caused >> denials. > > because I saw this type of question quite too often, I added this info > to the Wiki2 (to be revised by Timo): > http://master.wiki2.dovecot.org/WhyDoesItNotWork > > I copy'n'pasted your sentences, if you don't mind. > > Kind regards, > > - -- Steffen Kaiser Hello Steffen, sure I am fine with that. Even better it would be to have a recipe for a custom SELinux policy to not be mislead switching off SELinux at all. Such a custom policy is necessary when storing mail in the user's homedir because files created there get a wrong SELinux context for that usecase by default. An general overview about this topic can be found on http://wiki.centos.org/HowTos/SELinux Kind regards Alexander

1 0

Can I take mail from Maildir mailbox and deliver it as new?
by James Pryor 06 Nov '14

06 Nov '14

Hello list, I have a need for someone to point me in the right direction. Our old email system (system A) had an account that acted as a mailing list accumulator/archiver. This account was a member of every list and mail would be sent to it's address. The strange part is that email was not delivered to system A because there was a . (dot) forward alias to another machine (system B) that runs sendmail. System B's sendmail then slurped up the incoming mail and processed it in some fashion which I do not care about. On our new mail server (system C (OS is RHEL6.5, dovecot-2.0.9-7.el6_5.1.x86_64, postfix-2.6.6-6.el6_5.x86_64)), I performed a bulk Linux account and mailbox migration from system A to system C using postfix/dovecot/imapsync. But I forgot to put the alias in place on system C to send all incoming that special account's mail on system B. So mail started to get delivered to local user ar_list on system C. So now I have a Maildir format mailbox on system C that has mail in it and I want to be able to manipulate and/or re-send those emails as new mail to system B. Once it is received by sendmail on system B, then I don't care about it any more. Is there a way to take mail sitting on disk in a mailbox and deliver it as if it was new mail to some other machine? Thanks, James -bash-4.1$ ls -l total 566 drwx------ 2 ar_list users 2048 Aug 7 21:29 cur -rw------- 1 ar_list users 12556 Oct 8 17:09 dovecot.index -rw------- 1 ar_list users 378880 Oct 9 14:41 dovecot.index.cache -rw------- 1 ar_list users 2580 Oct 9 14:41 dovecot.index.log -rw------- 1 ar_list users 65549 Oct 9 14:41 dovecot-uidlist -rw------- 1 ar_list users 8 Aug 7 19:38 dovecot-uidvalidity -r--r--r-- 1 ar_list users 0 Aug 7 19:38 dovecot-uidvalidity.53e40ddc drwx------ 2 ar_list users 100352 Oct 9 14:41 new drwx------ 2 ar_list users 2048 Oct 9 14:41 tmp -bash-4.1$ ls new/ | wc -l 1020 -bash-4.1$ ls cur | wc -l 25

3 3

Re: Dovecot-lda permission errors or maybe authentication errors?
by Robert Kryger 06 Nov '14

06 Nov '14

Alexander, You are absolutely right - I apologize for my confusion regarding SElinux. In fact, when I turn off SElinux in /etc/selinux/config (setting SELINUX=disabled, instead of =enforcing) then dovecot-lda starts working. Thanks for the advice - I have been fighting with this for several weeks without making headway! Robert

1 0

gssapi considered as PLAIN?
by Harry Schmalzbauer 05 Nov '14

05 Nov '14

Hello, as soon as I set "disable_plaintext_auth = yes", AUTH=GSSAPI vanishes from capabilities. ([CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=GSSAPI AUTH=PLAIN AUTH=LOGIN] vs [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS LOGINDISABLED]) Why? I'm wondering especially because at http://wiki2.dovecot.org/Authentication/Mechanisms, GSSAPI is correctly listed under “Non-plaintext authentication“. Thanks, -Harry

3 7

ntlm_auth seems ok, initial auth failure with dovecot2 (and winbind 4.1.13)
by Harry Schmalzbauer 05 Nov '14

05 Nov '14

Hello, I've read quite often that there are problems with ntlm_auth helper (last one here http://www.dovecot.org/list/dovecot/2014-June/096561.html) But haven't found any confirmation, neither it's working for anybody else nor that it's known taht this issue needs debuging. Like for ohers, my authentication tests from the commandline with ntlm_auth exactly give expected results. But initial authentication (with Outlook) fail at first, but after entering the user's password, nevertheless succeeds with mech=NTLM. See the attached ntlm-log.txt Can't exactly tell when this regression occured, one year ago nobody had to enter his password, it worked like intended with Outlook (which still is version 2010). Any idea how to debug? It could be also a regression in samba, both highly appreciated applications were upgraded at the same time… Thanks, -Harry

1 0

doveadm index message-decoder assertion failed
by cs+dovecot＠ctzen.com 05 Nov '14

05 Nov '14

Hi, I've setup FTS using lucene and it should be working, the lucene index is updated when mail arrives. I also managed to reindex my INBOX: doveadm index -u foo -q INBOX However, when I try to index an Archives folder: doveadm index -u foo -q Archives, the index-work crashed with this log message: dovecot: indexer-worker(foo): Panic: file message-decoder.c: line 363 (message_decode_body): assertion failed: (ctx->translation_size <= sizeof(ctx->translation_buf)) dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for foo dovecot: indexer-worker(foo): Fatal: master: service(indexer-worker): child 28730 killed with signal 6 (core dumps disabled) The Archives folder has 22317 messages. Please help. dovecot --version 2.2.15 dovecot -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-STABLE i386 auth_username_format = %Ln first_valid_gid = 1000 first_valid_uid = 1000 login_trusted_networks = xxx.xxx.xxx.x/24 mail_location = maildir:~/Maildir mail_plugins = " fts fts_lucene" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { antispam_backend = spool2dir antispam_spam = Junk antispam_spool2dir_notspam = /var/spool/dovecot-antispam/queue/ham-%%020lu-%u-%%05lu antispam_spool2dir_spam = /var/spool/dovecot-antispam/queue/spam-%%020lu-%u-%%05lu antispam_trash = Trash fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. } protocols = imap lmtp sieve service imap-login { inet_listener imap { address = xxx.xxx.xxx.x } inet_listener imaps { address = xxx.xx.xx.xx } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = xxx.xx.xx.xx xxx.xxx.xx.x port = 4190 } } ssl_cert = </var/ssl/crts/mail.crt ssl_key = </var/ssl/keys/ssl-npp.key userdb { driver = passwd } protocol lmtp { mail_plugins = " fts fts_lucene sieve" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " fts fts_lucene antispam" }

2 2

calling post-login script with doveadm
by Héctor Moreno Blanco 05 Nov '14

05 Nov '14

Hello everyone, I'm trying to execute some commands with doveadm but I need some information loaded in a post-login script before running these commands. Is possible to run the post-login script while executing doveadm? I've found how to do something similar with -o key=value to override settings, but I want to change a namespace location, as done in the post-login script: ... export USERDB_KEYS="$USERDB_KEYS namespace/archivo/location" exec env "NAMESPACE/ARCHIVO/LOCATION=$location" "$@" ... Thank you very much in advanced. Kind regards. Héctor Moreno P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

1 1

Re: Example records for SQL AUTH
by James 05 Nov '14

05 Nov '14

On 03/11/2014 22:29, Jorge Bastos wrote: > Password_query: > > password_query = select username, domain,password from users where > username='%u' and domain='%d' and active='true' > Try "... username='%n' ..." not %u From doc/dovecot/example-config/dovecot-sql.conf # Commonly used available substitutions (see http://wiki.dovecot.org/Variables # for full list): # %u = entire user@domain # %n = user part of user@domain # %d = domain part of user@domain James.

1 0

Public mailbox confusion
by Stefan G. Weichinger 05 Nov '14

05 Nov '14

greets, I am quite sure I ask some faq here ... sorry, but I am confused by the many options and choices here. What I want to do is: I migrate lots of public folders from a MS Exchange Server ... The customer wants that there is a "Public" folder containing all these hundreds of folders, the public folder should be visible for all the dovecot-users and all the subfolders should be automatically subscribed as soon a new user logs in. What I have now: namespace { type = private separator = / prefix = inbox = yes } namespace { type = public separator = / prefix = Public/ location = maildir:/home/vmail/public:INDEXPVT=/home/vmail/public/index/%d/%u/index subscriptions = yes } As far as I see from testing this doesn't yet work that way. When I open the mailbox with eg. roundcube I see "Public" but nothing below it ... Could someone please give me a good pointer here? Thanks! Stefan

2 4

sieve replication and .dovecot.lda-dupes
by Jan Behrend 05 Nov '14

05 Nov '14

Hello list, I have a replicated dovecot with two servers. People seem to get vacation responses more often then it is specified in "days: XX", depending on which dovecot instance they receive the incoming mail. Is ".dovecot.lda-dupes" replicated? The other problem is that the vacation response is coming from the wrong address depending on which field the recipient was listed: "to:" or "cc:" Here is my test example: g9-rz has the vacation rule set up: date | mail -s test -r jbehrend(a)mpifr-bonn.mpg.de -c g9-rz(a)mpifr-bonn.mpg.de jan(a)flatpick.de and this returns this vacation response: ### snip ### Return-Path: <> Delivered-To: <jbehrend(a)mpifr-bonn.mpg.de> Received: from mail2.mpifr-bonn.mpg.de ([134.104.18.60]) by mailbox2.mpifr-bonn.mpg.de (Dovecot) with LMTP id +pgPDzm1WFSn9wAAvl5QjA for <jbehrend(a)mpifr-bonn.mpg.de>; Tue, 04 Nov 2014 12:16:13 +0100 X-Sieve: Pigeonhole Sieve 0.4.2 Message-ID: <dovecot-sieve-1415099773-541512-0(a)mailbox1.mpifr-bonn.mpg.de> Date: Tue, 04 Nov 2014 12:16:13 +0100 From: jan(a)flatpick.de To: <jbehrend(a)mpifr-bonn.mpg.de> Subject: Vacation In-Reply-To: <E1Xlc5t-0001LT-Bu(a)jb1.mpifr-bonn.mpg.de> References: <E1Xlc5t-0001LT-Bu(a)jb1.mpifr-bonn.mpg.de> Auto-Submitted: auto-replied (vacation) Precedence: bulk MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Evolution-Source: 1385020682.6450.3@jb1 Ain't here! Go away or something ... Cheers ### snip ### I would expect "g9-rz(a)mpifr-bonn.mpg.de" in the from: field. Is this correct? Cheers Jan -- MAX-PLANCK-INSTITUT fuer Radioastronomie Jan Behrend - Rechenzentrum ---------------------------------------- Auf dem Huegel 69, D-53121 Bonn Tel: +49 (228) 525 359, Fax: +49 (228) 525 229 jbehrend(a)mpifr-bonn.mpg.de http://www.mpifr-bonn.mpg.de

2 1

error using fts/tika
by Infoomatic 04 Nov '14

04 Nov '14

Hi, I played around a bit and tried to get tika to run with dovecot. In the end I was at least a bit successful. However, when I tried to index my inbox with "doveadm index -A '*'" I get: doveadm(infoomatic): Error: fts_tika: PUT http://localhost:8081/tika failed: 500 Server Error doveadm(infoomatic): Warning: I/O leak: 0x7f4f697bb170 (line 127, fd 24) doveadm(infoomatic): Panic: file ioloop-iolist.c: line 22: unreached doveadm(infoomatic): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x67f30) [0x7f4f697e8f30] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f4f697e8f9a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4f6979c515] -> /usr/lib/dovecot/libdovecot.so.0(+0x79b0d) [0x7f4f697fab0d] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handle_add+0x3b) [0x7f4f697fb2ab] -> /usr/lib/dovecot/libdovecot.so.0(+0x78cf1) [0x7f4f697f9cf1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_move_io+0x3e) [0x7f4f697fa93e] -> /usr/lib/dovecot/libdovecot.so.0(connection_switch_ioloop+0x14) [0x7f4f697e6df4] -> /usr/lib/dovecot/libdovecot.so.0(http_client_switch_ioloop+0x28) [0x7f4f697bf8e8] -> /usr/lib/dovecot/libdovecot.so.0(+0x36a86) [0x7f4f697b7a86] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x29) [0x7f4f68d9f069] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x3547) [0x7f4f68d9b547] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0x35c) [0x7f4f68faaffc] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd3ee) [0x7f4f68fb03ee] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_precache+0x19) [0x7f4f69ac3c39] -> doveadm() [0x419501] -> doveadm() [0x4153c3] -> doveadm(doveadm_mail_try_run+0x48c) [0x4162ac] -> doveadm(main+0x3d8) [0x412588] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f4f693dcec5] -> doveadm() [0x4127a4] Aborted (core dumped) The last messages of the tika-server: Nov 04, 2014 10:18:17 PM org.apache.tika.server.TikaResource logRequest INFO: tika (video/x-ms-wmv) Nov 04, 2014 10:18:17 PM org.apache.tika.server.TikaResource$3 write WARNING: tika: Text extraction failed org.apache.tika.exception.TikaException: Unexpected RuntimeException from org.apache.tika.server.TikaResource$1@44742f73 Nov 04, 2014 10:18:17 PM org.apache.cxf.jaxrs.utils.JAXRSUtils logMessageHandlerProblem SEVERE: Problem with writing the data, class org.apache.tika.server.TikaResource$3, ContentType: text/plain Nov 04, 2014 10:18:17 PM org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse WARNING: javax.ws.rs.WebApplicationException: HTTP 415 Unsupported Media Type dovecot -n: # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-39-generic x86_64 Ubuntu 14.04.1 LTS ext4 auth_username_format = %n disable_plaintext_auth = no mail_gid = vmail mail_home = /var/lib/vmail/home/%u mail_location = mdbox:/var/lib/vmail/mail/%u mail_plugins = fts fts_solr mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate imapflags mdbox_rotate_size = 32 M namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://localhost:8080/solr/ break-imap-search fts_tika = http://localhost:8081/tika sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags } protocols = " imap sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = fts fts_solr sieve } Has anyone hints? Or do the devs want some more information for debugging? best regards, infoomatic

1 0

Re: authentication issues with ipad / mac email client
by Rajesh M. 04 Nov '14

04 Nov '14

hi i am using dovecot version2.2.7 provided by qmailtoaster - 64 bit on centos 6.5 64 bit system - 16 gb ram with a hex core processor. i was using qmail pop3 on a 32 bit system for the past over 7 years and had absolutely no issues. with dovecot pop3 i have started receiving a variety of problems mac machines and ipads -- port 110 does not work at all. i have to use port 995 only. i have allowed plain text auth. thunderbird works perfectly -- both imap and pop3 with port 110 and port 995 outlook 2010 also works but incase of one customer the mail download is very slow. i have a windows servers with mailenable mail server and the same customer could download perfectly from those windows servers. i am using the default "service pop3" settings Do i need to increase the memory settings / for pop3 login similar to imap login which i am missing out like what is configured for imap. (pl see config file below) My mail server is busy with around 4000 mailboxes and transacting over 200k emails per day. atleast around 250 simultaneous pop3 connections during peak hours. # dovecot -a | grep pop3_uidl_format pop3_uidl_format = %08Xu%08Xv [root@ns1 spamassassin]# dovecot -n # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) auth_cache_negative_ttl = 0 auth_cache_size = 32 M auth_cache_ttl = 30 mins auth_mechanisms = plain login digest-md5 cram-md5 default_login_user = vpopmail disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = ready. mail_max_userip_connections = 50 mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin { quota = maildir:ignore=Trash quota_rule = ?:storage=0 } protocols = imap pop3 service imap-login { client_limit = 256 process_limit = 400 process_min_avail = 4 service_count = 0 vsz_limit = 384 M } ssl_cert = </var/qmail/control/servercert.pem ssl_dh_parameters_length = 2048 ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = " quota imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = no pop3_no_flag_updates = yes } i am really puzzled because dovecot was highly recommended by all. thanks for all your help rajesh ----- Original Message ----- From: Daniel Parthey [mailto:pada@posteo.de] To: 24x7server@24x7server.net,dovecot@dovecot.org Sent: Sat, 01 Nov 2014 09:34:53 +0100 Subject: Re: authentication issues with ipad / mac email client Hi, please post * output of "doveconf -n" * error log messages from dovecot for failed vs. succeeded login Regards Daniel

1 0

Re: Example records for SQL AUTH
by deoren 04 Nov '14

04 Nov '14

On 11/3/2014 4:29 PM, Jorge Bastos wrote: > Hi, > > > > Where can I get examples for the records for the "users" table? If I understand your question properly and you're looking for examples of creating new virtual users, then this guide covers that: https://www.linode.com/docs/email/email-with-postfix-dovecot-and-mysql You would have to adjust to fit your chosen schema of course as theirs is a much simpler setup that excludes the uid, gid, and home values. > > For SHA512-CRYPT, I tried: > > > > replace into users values ('a(a)a.com','a.com',ENCRYPT('b', CONCAT('$6$', > SUBSTRING(SHA(RAND()), -16))),'',0,0,'true'); > > > > schema is: > > CREATE TABLE `users` ( > > `username` varchar(255) NOT NULL, > > `domain` varchar(255) NOT NULL, > > `password` varchar(255) NOT NULL, > > `home` varchar(255) NOT NULL, > > `uid` int(11) NOT NULL, > > `gid` int(11) NOT NULL, > > `active` enum('true','false') NOT NULL DEFAULT 'true', > > PRIMARY KEY (`username`) > > ) ENGINE=InnoDB DEFAULT CHARSET=utf8 > > > > Password_query: > > password_query = select username, domain,password from users where > username='%u' and domain='%d' and active='true' What does your auth-sql-conf.ext file look like? With as much information as you already have in your database schema you may want to look at using the Prefetch userdb. http://wiki2.dovecot.org/UserDatabase/Prefetch P.S. Apologies for the duplication. I forgot to reply to the list with my last response.

1 0

SSL Client authentication with trustcenter-certificate
by dovecot.pkoch＠dfgh.net 04 Nov '14

04 Nov '14

Dear reader, we are using dovecot 2.2.7 and like it very much. Authentication is done via a checkpassword program that does two things: 1) check wether the client has connected via SSL using a client certificate 2) check wether the client is using a one time password generator Most of our users are using certificates that we have created ourself. These certificates contain a x500uniqueidentifier. But some users are using certificates from a german trust center and these certificates do not contain a x500uniqueIdentifier nor something similar. I would like to map these certificates to user accounts and my first idea was to do so from my checkpassword programm. But how do I find out the client-certificate from within a checkpassword script. I tried to add an additional entry to auth_request_var_expand_static_tab and fill in that environment variable in auth_request_get_var_expand_table_full() (both in src/auth/auth-request.c). But where do I find the SSL-context from which I can extract the client certificate? Kind regards Peter Koch

1 0

Example records for SQL AUTH
by Jorge Bastos 04 Nov '14

04 Nov '14

Hi, Where can I get examples for the records for the "users" table? For SHA512-CRYPT, I tried: replace into users values ('a(a)a.com','a.com',ENCRYPT('b', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16))),'',0,0,'true'); schema is: CREATE TABLE `users` ( `username` varchar(255) NOT NULL, `domain` varchar(255) NOT NULL, `password` varchar(255) NOT NULL, `home` varchar(255) NOT NULL, `uid` int(11) NOT NULL, `gid` int(11) NOT NULL, `active` enum('true','false') NOT NULL DEFAULT 'true', PRIMARY KEY (`username`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8 Password_query: password_query = select username, domain,password from users where username='%u' and domain='%d' and active='true' What could I be missing? but logs says user is not found in userdb: Nov 3 22:17:24 fastmail dovecot: auth: Error: sql(a(a)a.com,127.0.0.1,<JIsTtvsGZwB/AAAB>): user not found from userdb Nov 3 22:17:24 fastmail dovecot: pop3: Error: Authenticated user not found from userdb, auth lookup id=3938844673 (client-pid=10240 client-id=1) Nov 3 22:17:24 fastmail dovecot: pop3-login: Internal login failure (pid=10240 id=1) (internal failure, 1 successful auths): user=<a(a)a.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10247, secured, session=<JIsTtvsGZwB/AAAB>

1 0

Postlogin script in v1
by List 03 Nov '14

03 Nov '14

Does dovecot-1.0.7-7.el5 support postlogin scripting?

2 1

Released Pigeonhole v0.4.6 for Dovecot v2.2.15.
by Stephan Bosch 02 Nov '14

02 Nov '14

Hello Dovecot users, Version 0.4.5 introduced one new 'feature', but it caused build problems. This release fixes that. If you've successfully installed 0.4.5, you do not need to upgrade. Changelog v0.4.6: - After make distclean, the distributed tarball would fail to recompile. This causes problems for some distribution builds. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.6.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.6.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Released Pigeonhole v0.4.5 for Dovecot v2.2.15.
by Stephan Bosch 02 Nov '14

02 Nov '14

Hello Dovecot users, Unfortunately, Pigeonhole v0.4.4 had a rather big issue with error handling and the execution of the implicit keep. This problem presented itself for example when users exceeded their quota. This did not result in the proper rejection message. This is why I quickly release a new version. Changelog v0.4.5: + Added a Pigeonhole version banner to doveconf output. This way, future bug reports will also include Pigeonhole version information. - Fixed handling of implicit keep. Last version erroneously reported that implicit keep succeeded after an earlier failure, while it in fact had failed. Particularly occurred for mailbox quota errors. - Fixed segfault occurring on SunOS systems when there is no active script. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.5.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.5.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

4 4

Sa-learn-pipe.sh script modification
by Pierre Barre 01 Nov '14

01 Nov '14

Hello, I've seen on this wiki page: http://wiki2.dovecot.org/Plugins/Antispam A script called "sa-learn-pipe.sh". I've tested it but it slow things down because dovecot wait for the script termination. So, I've made a modification. Now, the task is running in the background and dovecot move the mail without waiting for the script termination: #!/bin/bash echo /usr/bin/sa-learn $* /tmp/sendmail-msg-$$.txt echo "$$-start ($*)" >> /tmp/sa-learn-pipe.log #echo $* > /tmp/sendmail-parms.txt cat<&0 >> /tmp/sendmail-msg-$$.txt /usr/bin/sa-learn $* /tmp/sendmail-msg-$$.txt && rm -f /tmp/sendmail-msg-$$.txt & echo "$$-end" >> /tmp/sa-learn-pipe.log exit 0 I want know if this can cause any problem ? Thanks. -- Best regards, Pierre Barre.

1 0

Corrupted SSL parameters file in state_dir with HG 267bca7a62fb
by Thomas Leuxner 01 Nov '14

01 Nov '14

Hi, with the latest HG 267bca7a62fb the following error started to appear in the logs: Oct 31 09:39:07 nihlus dovecot: master: Dovecot v2.2.15 (267bca7a62fb) starting up for imap, lmtp [...] Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Corrupted SSL parameters file in state_dir: ssl-parameters.dat - disabling SSL 360 Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Couldn't initialize SSL parameters, disabling SSL Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Connect from local This most likely has been introduced with a commit after the previous build installed (aa5dde56424f). I did not find options to disable SSL for LMTP either, as in my setup I'm using a UNIX socket. Regards Thomas

4 4

authentication issues with ipad / mac email client
by Rajesh M. 01 Nov '14

01 Nov '14

hi we are using using qmail toaster with dovecot pop3 and imap client outlook and thunderbird works fine in case of several ipad / mac email clients imap works fine but pop3 logins are not working with 110 port my dovecot config file is given below could somebody help please # Settings for 'stock' qmail-toaster disable_plaintext_auth = no default_login_user = vpopmail mail_max_userip_connections = 50 service imap-login { service_count = 0 client_limit = 256 process_min_avail = 4 vsz_limit = 384M process_limit = 400 } auth_cache_size = 32M auth_cache_ttl = 1800 auth_cache_negative_ttl = 0 auth_mechanisms = plain login digest-md5 cram-md5 auth_username_format = %Lu first_valid_uid = 89 first_valid_gid = 89 log_path = /var/log/dovecot.log login_greeting = ready. mail_plugins = $mail_plugins quota plugin/quota = maildir protocols = imap pop3 ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem # the following will likely be the default at some point ssl_dh_parameters_length = 2048 namespace { inbox = yes location = prefix = # prefix = INBOX. # Use 'prefix = INBOX.' for Courier-IMAP compatible transparent migration. # This forces all client apps to create subfolders underneath/within # the inbox instead of adjacent to it. It's not necessary to be that way. # FWIW, shubes thinks this setting is annoying/rediculous/retarded. # As a practical example, having no prefix allows mobile users to select # which folders get synchronized. Otherwise their whole mailbox is # synchronized, and they have no way to choose which folders they want sync'd. separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } protocol imap { imap_client_workarounds = "delay-newmail" mail_plugins = $mail_plugins imap_quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = no # pop3_uidl_format = UID%u-%v pop3_no_flag_updates=yes } userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } plugin { quota = maildir:ignore=Trash quota_rule = ?:storage=0 } thank you very much, rajesh

3 2

SSLv3 attack on pop3?
by Hans Morten Kind 31 Oct '14

31 Oct '14

We turned off SSLv3 support on our pop/imap running dovecot on Oct 16th, we did check that all users where using TLSv1 and there have been no complaints (except one old windows-phone). But at 13:00 UTC today, suddenly strange entries is seen in the logfile: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10 Followed by: pop3-login: Disconnected (no auth attempts in 2 secs) user=<>, rip= Some 20 ips have been seen so far, all ips are uniq and none have used our server lately. Just one resoved and it's name ends .cn, some lookups with whois leads to the same origin for all. This makes me anxious that some have made some poodle-like thing for pop3? hmk

2 2

vpopmail, open_smtp_relay and non-PLAIN auth mechs
by Jim Jagielski 31 Oct '14

31 Oct '14

I've noticed that if using the vpopmail auth setup, that the roaming-user functionality provided via open_smtp_relay() is only done if the auth mechanism is PLAIN. For example, if the client authenticates via DIGEST-MD5, the open relay file is not updated, as it should be. This is due to the call to open_smtp_relay only being done via vpopmail_verify_plain(). Instead, imo, that call should be done in auth_request_success() in the auth-request.c file, so that it is done however the authentication is done, as long as it is successful. Attached is a patch for 2.2.15. Let me know if attachments are not the preferred method and I'll cut/paste. tia! -- Jim Jagielski

2 2

Can someone explain this Sent thread sorting?
by Philip Rhoades 31 Oct '14

31 Oct '14

People, I attach a screen capture of my RoundCubeMail Sent box - why does the second item on the list, which is a separate reply to the thread above it, get sorted to position 2? By the date, and being a single mail, it should be much further down the screen . . I presume it is because the Subject is the same? Thanks, Phil. -- Philip Rhoades GPO Box 3411 Sydney NSW 2001 Australia E-mail: phil(a)pricom.com.au

2 1

Question wrt. dovecot replicator
by Remko Lodder 30 Oct '14

30 Oct '14

Hi People, I recently setup a replication service within dovecot between two machines in different datacenters, which has the following configuration; (yes it is hashed out, because I needed to) #service replicator { # unix_listener replicator-doveadm { # mode = 0666 # } # process_min_avail = 1 #} # #service aggregator { # fifo_listener replication-notify-fifo { # mode = 0666 # #user = vmail # } # unix_listener replication-notify { # mode = 0666 # #user = vmail # } #} # #service doveadm { # inet_listener { # port = 12346 # } #} # ##doveadm_port = 12346 #doveadm_password = XXXXXXX #replication_max_conns = 30 # and a mail_replica = tcp:host{a,b}:12346 configuration on each host so that they are pointing to eachother; This seems to work fine for most accounts, for example: I never experienced issues with this. However, several other accounts (with a large variety of clients) got duplicated emails. Looking with doveadm I only noticed that the numbers of the messages are closely related to eachother but one number incremented. So they cannot be deleted with the deduplicator function. The replication is provided over TCP only, the connection streams over an OpenVPN tunnel so that the contents are protected, the machines are located in different Datacenters but close to eachother. How can I determine why there are duplicated emails? What kind of messages should I specifically look for? Can I set this up for a few selected accounts instead of all accounts like it was currently? To make sure I do not make things worse for others then needs to be :-) The service had been disabled for the time being to prevent the other users from getting duplicated emails. Thanks for the advice in advance! Cheers Remko -- /"\ Best regards, | remko(a)FreeBSD.org \ / Remko Lodder | remko@EFnet X http://www.evilcoder.org/ | / \ ASCII Ribbon Campaign | Against HTML Mail and News

3 6

different mail location in different namespace
by Héctor Moreno Blanco 30 Oct '14

30 Oct '14

Hello everyone, We have Dovecot 2.1.6. With different Namespaces: ... mail_location = maildir:%h/Maildir ... namespace { separator = . prefix = inbox = yes type = private } namespace { inbox = no location = prefix = INBOX. separator = . hidden = yes type = private list = no } namespace { location = maildir:/buzon/archivo/%u/_ARCHIVO prefix = _ARCHIVO. hidden = yes separator = . type = private } We take the attribute "home directory" from the LDAP in the userdb attributes. We would like to modify this attribute for the Namespace ARCHIVO. For example, if a home directory is /buzon/buzon1/11111111, the mail location for ARCHIVO would be /buzon/archivo1/11111111. Is this modification possible without adding another attribute at the LDAP (just editing the attribute)? Thank you very much in advanced. Kind regards. Héctor Moreno. P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 4

Bug in the combination of Lazy_expunge and acl plugin
by Philipp Faeustlin 30 Oct '14

30 Oct '14

Hello Timo, Hello Dovecot Developers, Hello everyone on the list, I think I have some bug, because I haven't found a working configuration till now. I use latest dovecot 2.2.13 from the dovecot-ee repository, with acl and the lazy_expunge plugin. My configuration for shared folders work fine with lazy_expunge disabled. If I enable lazy_expunge and the user (named userA), which I'm testing with, got no shared folders, then lazy_expunge is working as supposed. Now I add some shared folder for example per doveadm: doveadm acl set -u userB(a)domain.de INBOX user=userA(a)domain.de lookup read write write-seen write-deleted insert expunge create After that every list command fails with: Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' '.EXPUNGED/' is the name for the namespace of lazy_expunge. Easiest way for me to reproduce the error is: doveadm mailbox list -u userA(a)domain.de which results in: ----------------- Trash Drafts Sent doveadm(userA(a)domian.de): Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' ------------------ I hope someone can confirm this behavior and or give me some hints to get rid of it. Regards Philipp Fäustlin

1 0

Bug in fts (solr?, Maildir?) incorrect last_indexed_uid
by Karl O. Pinc 30 Oct '14

30 Oct '14

Hi, I thought I should document this. (Dovecot 2.2.9, see config at bottom.) I installed dovecot and then converted a number of mbox mailboxes to Maildir, and had a number of pre-existing Maildir mailboxes. I then installed the debian (wheezy) fts-solar and jetty packages, and tested my inbox using the "telnet localhost imap ... 3 SEARCH text "test" method as described on the dovecot wiki. Everything seemed to work. But when I used balsa to search a mailbox other than my inbox, I got no results. "doveadm dump" on the searched mailbox showed that "last_indexed_uid" to be the last uid of my inbox. Stopping dovecot, deleting out the dovecot-index* files, starting dovecot, and re-running "doveadm dump" showed a non-existant last_indexed_uid -- that is, last_indexed_uid did not show up in the dump output. Using the telnet method above to attempt to search again yielded no results, but this time (I think, I also tried various times with balsa) the last_indexed_uid value was that of the last uid in my trash mailbox. I don't believe I'd yet tried fts on my trash. Using balsa as an imap client the results were very consistent; every Maildir where "doveadm dump" returned no last_indexed_uid value had the last_indexed_uid set to that of the inbox's largest uid. Running "doveadm fts rescan -u foo" fixed the problem. (FWIW, now all the Maildirs seem to have a last_indexed_uid=0.) Regards, Karl <kop(a)meme.com> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-486 i686 Debian 7.7 default_vsz_limit = 1 G disable_plaintext_auth = no mail_location = maildir:~/Maildir:INBOX=~/Maildir/.inbox mail_plugins = fts fts_solr namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } namespace unconverted { hidden = no list = yes location = mbox:~/mail prefix = unconverted/ separator = / subscriptions = yes type = private } passdb { driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://localhost:8983/solr/ } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl = required ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd }

1 1

Quota reporting
by Hanns Mattes 30 Oct '14

30 Oct '14

Hi, my main server will be upgraded from Dovecot 1.2something to 2.2. For testing I've installed a setup with postfix, handing malis as a relay via lmtp. So far it's up and running - really nice. AFAICS there's one issue left: Thunderbird and Kmail don't show the quota status. Using doveadm quota the information is shown correctly, even the user-specific values (coming from openldap) are set correctly. I think, I miss something obvious ... (and besides quota - any configuration hint is very welcome) linux:/etc/dovecot # doveconf -n # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.10-1.40-desktop x86_64 openSUSE 12.3 (x86_64) auth_master_user_separator = * auth_mechanisms = plain login digest-md5 cram-md5 apop auth_verbose = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota zlib fts fts_lucene trash" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts_autoindex = yes fts_lucene = whitespace_chars=@. quota = maildir:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 100M quota_rule = *:storage=1000M quota_rule2 = Trash:storage=+10%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_redirects = 32 trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = gz zlib_save_level = 6 } postmaster_address = admin(a)93er.net protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/dovecot/brueckokomplett2014.crt ssl_key = </etc/dovecot/brueckofrei2014.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota zlib fts fts_lucene trash quota sieve" } protocol lda { mail_plugins = " quota zlib fts fts_lucene trash" } protocol imap { mail_plugins = " quota zlib fts fts_lucene trash quota imap_quota imap_zlib" } here is dovecot-ldap.conf.ext: hosts = 127.0.0.1 192.168.0.1 dn = cn=Manager,dc=dies,dc=jenes dnpass = ganzgeheim auth_bind = no base = ou=virtualmail,dc=dies,dc=jenes scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,quota=quota_rule=*:\ storage=%$M user_filter = (&(objectClass=CourierMailAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber\ =userdb_uid,gidNumber=userdb_gid,quota=userdb_quota_rule=*:storage=%M pass_filter = (&(disableimap=FALSE)(objectClass=CourierMailAccount)(uid=%u)) iterate_attrs = uid=user iterate_filter = (objectClass=CourierMailAccount) default_pass_scheme = PLAIN Any ideas? Thanks in advance regards Hanns

2 4

Renaming not supported across conflicting directory - why?
by Arkadiusz Miśkiewicz 30 Oct '14

30 Oct '14

I wonder what is point of checkign file/dir create mode like this? Here it makes problems since some folders have different permissions than others but both are accessible/writable by user. So renaming is possible (as renaming according to unix permissions). Yet dovecot artificially prevents this. /* if we're renaming under another mailbox, require its permissions to be same as ours. */ if (strchr(newname, mailbox_list_get_hierarchy_sep(newlist)) != NULL) { struct mailbox_permissions old_perm, new_perm; mailbox_list_get_permissions(oldlist, oldname, &old_perm); mailbox_list_get_permissions(newlist, newname, &new_perm); if ((new_perm.file_create_mode != old_perm.file_create_mode || new_perm.dir_create_mode != old_perm.dir_create_mode || new_perm.file_create_gid != old_perm.file_create_gid)) { mailbox_list_set_error(oldlist, MAIL_ERROR_NOTPOSSIBLE, "Renaming not supported across conflicting " "directory permissions"); return -1; } } -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

Sieve plus addressed mail filtering
by Peter Chiochetti 30 Oct '14

30 Oct '14

Today I learned, that to filter incoming plus addressed mail (user+tag@…) I had to deviate from the documentation. There it reads: if envelope :detail "to" "spam"{ fileinto "Spam"; } Instead I had to write: if address :is :detail "To" "tag"{ fileinto "Tagged"; } Dovecot version is 2.2.13-1+bigmichi1~precise+1 -- peter

2 3

Released Pigeonhole v0.4.4 for Dovecot v2.2.15.
by Stephan Bosch 30 Oct '14

30 Oct '14

Hello Dovecot users, It's been about 5 months since the last Pigeonhole release, so it is high time for a new one. However, the main reason to make a release now is the fact that Dovecot v2.2.15 has one change that causes problems with the previous release of Pigeonhole. Unlike recent earlier releases, this release has a few big new features. Most notably, I implemented a generic Sieve script storage framework. This means that it is now relatively easy to implement a storage driver to retrieve Sieve scripts from a location other than the file system. An important effect of this new implementation is that these alternative storage locations can also be used with sieve_before/sieve_after. Also, storing Sieve scripts there using ManageSieve is also possible, provided that the driver provides an implementation. I used the new framework to implement an LDAP storage driver. However, it is read-only, which means that it doesn't currently provide ManageSieve support. Several bugs were fixed. The most nasty ones were related to the doveadm-sieve plugin (which is one of the reasons why this release took so long). The new script storage driver framework entailed large changes in this plugin, so many of these problems were addressed implicitly. Hopefully, all problems are solved now. Changelog v0.4.4: * Added support for Japanese mail addresses with dots at non-standard places in localpart. * Changed handling of ENOSPACE into a normal temporary failure and added handling of ENOQUOTA as a user error. * Restructured result execution, so that all actions which involve mail storage are always committed before all others. + Implemented support for generic Sieve storages. Using alternative storages now also possible for sieve_before/sieve_after. + Implemented storage driver for retrieving Sieve scripts from LDAP. This currently cannot be used with ManageSieve. + Implemented sieve_redirect_envelope_from setting, which allows configuring the envelope sender of redirected messages. - Fixed handling of mail storage errors occurring while evaluating the input message. - managesieve-login: - Removed bogus ALERT response code returned for AUTHENTICATE command. - Fixed handling of invalid initial response argument to AUTHENTICATE command. - Fixed handling of stream errors in lexical scanner. - Fixed handling of SMTP errors. Permanent and temporary errors were mixed up. - Fixed several problems reported by CLang 3.4. - duplicate extension: Fixed erroneous compile error about conflicting tags when `:handle' argument was used last. - relational extension: Fixed error handling of `:value' match. - editheader extension: Fixed header unfolding and header iteration. - mailbox extension: Fixed the `:create' tag, which erroneously subscribed an existing folder. - extprograms plugin: Fixed handling of error codes. - doveadm-sieve plugin: Fixed several bugs. Synchronization of symbolic link in the file storage should now also work properly. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.4.tar… http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.4.tar… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 5

v2.2.15 released
by Timo Sirainen 30 Oct '14

30 Oct '14

http://dovecot.org/releases/2.2/dovecot-2.2.15.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.15.tar.gz.sig Some small fixes and changes to v2.2.14. This release is mainly in the hope that it could still make it into the next Debian stable instead of v2.2.14 - mainly because of a couple of new assert crashes that started happening in v2.2.14 and should be fixed now. * Plugins can now print a banner comment in doveconf output (typically the plugin version) * Replication plugin now triggers low (instead of high) priority for mail copying operations. * IMAP/POP3/ManageSieve proxy: If destination server can't be connected to, retry connecting once per second up to the value of proxy_timeout. This allows quick restarts/upgrades on the backend server without returning login failures. * Internal passdb lookups (e.g. done by lmtp/doveadm proxy) wasn't returning failure in some situations where it should have (e.g. allow_nets mismatch) * LMTP uses mail_log_prefix now for logging mail deliveries instead of a hardcoded prefix. The non-delivery log prefix is still hardcoded though. + passdb allow_nets=local matches lookups that don't contain an IP address (internally done by Dovecot services) + Various debug logging and error logging improvements - Various race condition fixes to LAYOUT=index - v2.2.14 virtual plugin crashed in some situations

8 13

smtp lastlogin
by Eduardo Ramos 30 Oct '14

30 Oct '14

Hey guys! I've been googling without success. Do anyone know if there is a way to track last login of a smtp authentication? I've tried without success using: service auth { executable = auth lastlogin unix_listener auth-userdb { } unix_listener /var/spool/postfix/private/auth { mode = 0660 group = postfix } } service lastlogin { executable = script-login -d /usr/local/bin/lastlogin.sh unix_listener lastlogin { user = $default_internal_user mode = 0666 } }

3 2

[Pigeonhole] Problem compiling latest snapshot
by Bernd Kuhls 29 Oct '14

29 Oct '14

Hi, http://hg.rename-it.nl/dovecot-2.2-pigeonhole/rev/a1e57385b267 added the use of update-version.sh, but this file and is-tagged.py are not included in Pigeonhole, only in Dovecot sourcecode. Therefore pigeonhole- version.h is not generated during compilation leading to a compile error: ../../../../src/lib-sieve/sieve-config.h:8:32: fatal error: pigeonhole- version.h: No such file or directory #include "pigeonhole-version.h" Regards, Bernd

2 1

Pigeonhole 0.4.4 error with no sieve rules
by James 29 Oct '14

29 Oct '14

I have built and installed Pigeonhole 0.4.4 with Dovecot 2.2.15. For users with no sieve at all I am getting an error on delivery. Delivery is from exim via lmtp. Syslog: Oct 28 11:03:50 mailhost dovecot: [ID 583609 mail.crit] lmtp(18915): Fatal: master: service(lmtp): child 18915 killed with signal 11 (core not dumped - set service lmtp { drop_priv_before_exec=yes }) There is no global sieve script because there is no global sieve rule. Where an account has sieve rules delivery works as expected. To make it work again I've gone back to 2.2.15 with 0.4.3. James.

3 10

Dovecot 2.2.14 and per user \Seen flags
by Thomas Robers 29 Oct '14

29 Oct '14

Hello, I have a Dovecot Installation Version 2.2.14 on CentOS 6.5 with shared folder. UserA shares his INBOX to user UserB. I activated "per user \Seen flags" with location = maildir:%%h/Maildir:INDEX=%h/shared/%%u:CONTROL=%h/shared/%%u:INDEXPVT=%h/shared I think the INDEXPVT setting activates this setting, right? I activated this setting when there were already several accounts in use. Before we used shared \Seen flags. But this setting doesn't work on my system. For example UserB marks several Messages as read in a shared INBOX from UserA and erverything seems alright but then suddenly all seen Messages are marked as unread again and I see the following error message in the log file: Oct 27 14:40:48 mail dovecot: imap(UserB(a)tutech.de): Error: /export/home/imap/UserB(a)tutech.de /shared/.INBOX/dovecot.index.pvt reset, view is now inconsistent Oct 27 14:40:48 mail dovecot: imap(UserB(a)tutech.de): Disconnected: BUG: Unknown internal error in=1020 out=2757 My Dovecot configuration is: root@mail:~# doveconf -n # 2.2.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl zlib managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate mbox_write_locks = fcntl namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEX=%h/shared/%%u:CONTROL=%h/shared/%%u:INDEXPVT=%h/shared prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 process_min_avail = 20 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain ssl_key = </etc/pki/dovecot/private/mail.tutech.de.key ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl zlib sieve } protocol imap { mail_plugins = acl zlib imap_zlib imap_acl } I don't know, is there something wrong with my configuration, am I missing sonething? Any hint would be helpful. Thank you Best regards Thomas

2 2

Panic: file istream-qp-decoder.c
by Urban Loesch 29 Oct '14

29 Oct '14

Hi, I'm running Dovecot EE Version with Debian Squeeze. Version info: ii dovecot-ee-core 1:2.2.13.31-1 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-ee-dbg 1:2.2.13.31-1 debug symbols for Dovecot ii dovecot-ee-imapd 1:2.2.13.31-1 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-ee-lmtpd 1:2.2.13.31-1 secure LMTP server for Dovecot ii dovecot-ee-managesieved 0.4.3-7 secure ManageSieve server for Dovecot ii dovecot-ee-mysql 1:2.2.13.31-1 MySQL support for Dovecot ii dovecot-ee-pop3d 1:2.2.13.31-1 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-ee-sieve 0.4.3-7 sieve filters support for Dovecot Yesterday I got the following errors in the error log: Oct 28 18:29:05 mailstore dovecot: imap(user(a)domain.com pid:37052 session:<0K7g+34GIwDD/vzI>): Panic: file istream-qp-decoder.c: line 102 (i_stream_qp_decoder_read): assertion failed: (ret < 0) Oct 28 18:29:05 mailstore dovecot: imap(user(a)domain.com pid:37052 session:<0K7g+34GIwDD/vzI>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6d75a) [0x7f9bcee0275a] -> /usr/lib/dovecot/libdovecot.so.0(+0x6d7d6) [0x7f9bcee027d6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f9bcedba5bf] -> /usr/lib/dovecot/libdovecot.so.0(+0x5a86c) [0x7f9bcedef86c] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x63) [0x7f9bcee0b533] -> /usr/lib/dovecot/libdovecot.so.0(+0x7bc5c) [0x7f9bcee10c5c] -> /usr/lib/dovecot/libdovecot.so.0(+0x7c0c8) [0x7f9bcee110c8] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x63) [0x7f9bcee0b533] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x52) [0x7f9bcee0b8a2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa44ea) [0x7f9bcf10c4ea] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x135) [0x7f9bcf10c9b5] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_stream+0x61) [0x7f9bcf0e34f1] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0xb0) [0x7f9bcf142f20] -> dovecot/imap() [0x41ba26] -> dovecot/imap() [0x419b4a] -> dovecot/imap(imap_fetch_more+0x31) [0x419d81] -> dovecot/imap(cmd_fetch+0x49d) [0x40e88d] -> dovecot/imap(command_exec+0x3d) [0x41813d] -> dovecot/imap() [0x417230] -> dovecot/imap() [0x41731d] -> dovecot/imap(client_handle_input+0x11d) [0x41759d] -> dovecot/imap(client_input+0x6f) [0x41792f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f9bcee12f1e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xaf) [0x7f9bcee1409f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f9bcee12fa9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f9bcee13038] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f9bcedbf3e3] -> dovecot/imap(main+0x2a7) [0x420e97] Oct 28 18:29:05 mailstore dovecot: imap(user(a)domain.com pid:37052 session:<0K7g+34GIwDD/vzI>): Fatal: master: service(imap): child 37052 killed with signal 6 (core dumps disabled) Oct 28 18:29:58 mailstore dovecot: imap(user(a)domain.com pid:38868 session:<eAIJ/34GpADD/vzI>): Panic: file istream-qp-decoder.c: line 102 (i_stream_qp_decoder_read): assertion failed: (ret < 0) Oct 28 18:29:58 mailstore dovecot: imap(user(a)domain.com pid:38868 session:<eAIJ/34GpADD/vzI>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6d75a) [0x7f8f7cb9275a] -> /usr/lib/dovecot/libdovecot.so.0(+0x6d7d6) [0x7f8f7cb927d6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f8f7cb4a5bf] -> /usr/lib/dovecot/libdovecot.so.0(+0x5a86c) [0x7f8f7cb7f86c] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x63) [0x7f8f7cb9b533] -> /usr/lib/dovecot/libdovecot.so.0(+0x7bc5c) [0x7f8f7cba0c5c] -> /usr/lib/dovecot/libdovecot.so.0(+0x7c0c8) [0x7f8f7cba10c8] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x63) [0x7f8f7cb9b533] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x52) [0x7f8f7cb9b8a2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa44ea) [0x7f8f7ce9c4ea] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x135) [0x7f8f7ce9c9b5] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_stream+0x61) [0x7f8f7ce734f1] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0xb0) [0x7f8f7ced2f20] -> dovecot/imap() [0x41ba26] -> dovecot/imap() [0x419b4a] -> dovecot/imap(imap_fetch_more+0x31) [0x419d81] -> dovecot/imap(cmd_fetch+0x49d) [0x40e88d] -> dovecot/imap(command_exec+0x3d) [0x41813d] -> dovecot/imap() [0x417230] -> dovecot/imap() [0x41731d] -> dovecot/imap(client_handle_input+0x11d) [0x41759d] -> dovecot/imap(client_input+0x6f) [0x41792f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f8f7cba2f1e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xaf) [0x7f8f7cba409f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f8f7cba2fa9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f8f7cba3038] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8f7cb4f3e3] -> dovecot/imap(main+0x2a7) [0x420e97] Oct 28 18:29:58 mailstore dovecot: imap(user(a)domain.com pid:38868 session:<eAIJ/34GpADD/vzI>): Fatal: master: service(imap): child 38868 killed with signal 6 (core dumps disabled) The user uses Horde Webmail 5.2 to access his mailbox and there are about 1300 active session running curently on that server. Many thanks Urban Loesch

1 0

maildir++ quota support on dovecot
by Mirko ML 28 Oct '14

28 Oct '14

Some information about maildir++ that I have read: http://www.inter7.com/courierimap/README.maildirquota.html http://wiki2.dovecot.org/Quota/Maildir When I have to deliver a message with an MDA I can use dovecot-lda. If I have enabled "quota = maildir:User quota" I am pretty sure that in the mailbox on file system I find a file named "maildirsize" maildirsize on top contain something like this "xxxxxxxxxxS" that specifies the SIZE quota in bytes. LDA could delivery the message only when the SIZE written in mailbox is less than the SIZE defined by mail admin. "Each member of the list consists of an integer followed by a letter, specifying the nature of the quota. Currently defined quota types are 'S' - total size of all messages, and 'C' - the maximum count of messages in the maildir. For example, 10000000S,1000C specifies a quota of 10,000,000 bytes or 1,000 messages, whichever comes first." For this reason the value in bytes defined for the user must have S at the end. At the moment quota-maildir.c contains a control for S or C so I can find this in log: Quota rule: root=User quota mailbox=* bytes=20971520 messages=0 But quota-util.c do not contains a control for C and S, so probably the support of maildir++ format is not complete. Please let me know if I am wrong. -- Ciao Mirko

1 0

Namespaces (or another way) to put messages in a different drive
by Paulino Michelazzo 28 Oct '14

28 Oct '14

Hello people, I have a situation where I need to create a mailbox for clients where they put old messages (> 1year) but I would like to create this mailbox in a different disk. I have a server with the mailboxes and a storage mapped using NFS just to create those mailboxes for old messages. I was trying to namespaces but every time that I make the configurations, the authentication system stop and the clients can’t log in. I really don’t know if this is the best approach for my situation (mailbox with old emails in a storage) and, if namespaces can solve it. The infos that I have are: Dovecot version 2.1.7 mailboxes: Namespace configs: namespace { type = private separator = / prefix = #location defaults to mail_location. inbox = yes } namespace { type = private separator / prefix = storage/ location = /mnt/exibstor/%u inbox = no hidden = no list = yes } If someone knows how can I do that, I really appreciate it. Best regards, Paulino Michelazzo

1 0

dovecot ldap quota
by Mirko ML 28 Oct '14

28 Oct '14

First of all: doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.7 ext4 auth_mechanisms = plain login disable_plaintext_auth = no mail_debug = yes mail_gid = vmail mail_location = maildir:/home/vmail/domains/%d/%n mail_plugins = " quota" mail_temp_dir = /var/tmp mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave spamtest spamtestplus namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename quota = maildir:User quota sieve = ~/.dovecot.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric sieve_global_dir = /var/lib/dovecot/sieve/global/ } protocols = " imap sieve pop3" service auth { unix_listener auth-userdb { user = vmail } } service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service pop3-login { inet_listener pop3 { address = * port = 110 } inet_listener pop3s { address = * port = 995 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh grep -v '^ *$#.*$\?$' dovecot-ldap.conf.ext uris = ldap://localhost dn = cn=phamm,o=hosting,dc=example,dc=com dnpass = ops auth_bind = yes ldap_version = 3 base = o=hosting,dc=example,dc=com deref = never user_attrs = quota=quota_rule=*:bytes=%$ user_filter = (&(objectClass=VirtualMailAccount)(accountActive=TRUE)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=VirtualMailAccount)(accountActive=TRUE)(mail=%u)) And at the end the problem that i see on log: Oct 27 20:42:36 mail dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Oct 27 20:42:36 mail dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Oct 27 20:42:36 mail dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:bytes=20971520S Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Debug: Effective uid=1001, gid=1001, home= Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Debug: Quota root: name=User quota backend=maildir args= Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Debug: Quota rule: root=User quota mailbox=* bytes=20971520 messages=0 Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Error: user ops(a)klez.it: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:bytes=20971520S: Invalid rule limit value 'bytes=20971520S': Unknown unit: S Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Error: Invalid user settings. Refer to server log for more information. I cant understand this 2 line: Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Debug: Quota rule: root=User quota mailbox=* bytes=20971520 messages=0 Oct 27 20:42:36 mail dovecot: imap(ops(a)klez.it): Error: user ops(a)klez.it: Initialization failed: Failed to initialize quota: Invalid quota root quota: Invalid rule *:bytes=20971520S: Invalid rule limit value 'bytes=20971520S': Unknown unit: S This is a situation that I want to migrate from courier to dovecot.. I see this post http://y6.gl/nnheTd that seems to have my problem. Could you help me to prepare a working conf? So I can write a simple doc for this? TIA -- Ciao Mirko

3 3

how to migration exchange'mail to dovecot?
by 576709166 28 Oct '14

28 Oct '14

hi : i want to migration all users's mails of exchange server to our dovecot:but i don't know how to do this ? i know that exchange server can put users's mails to file.pst , but i don't know hwo to convent file.pst to file.eml . please help thanks !

2 1

Error renaming folders with spaces
by mtrainer＠cloud-free.com 28 Oct '14

28 Oct '14

Hi All, I am getting frequent errors of the form below. In most cases the path has spaces in it. Oct 24 07:27:08 mailstore03 dovecot: imap(sam(a)userdomain.com.au): Error: rename(/home8/rs7-username/mail/xyzmortgages.com.au/sam/.Valuations - ABC, /home8/rs7-username/mail/xyzmortgages.com.au/sam/.Valuations - ABC/Subfolder) failed: Invalid argument The user home directories are on NFSv3 and are the user attributes are stored in ldap. My config is below. Any ideas what is causing these errors? Thanks Murray # doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=40960 } is lower than required under max. load (41280) doveconf: Warning: service anvil { client_limit=40970 } is lower than required under max. load (41183) # OS: Linux 3.14-0.bpo.2-amd64 x86_64 Debian 7.5 auth_cache_size = 64 M auth_cache_ttl = 2 hours auth_failure_delay = 0 auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" auth_username_translation = +@ auth_worker_max_count = 256 base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 mail_fsync = always mail_location = maildir:~/ maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile quota = maildir quota_rule = INBOX.Trash:ignore } protocols = " imap lmtp sieve pop3" service anvil { client_limit = 40970 } service auth-worker { user = dovecot } service auth { client_limit = 40960 unix_listener auth-userdb { group = mail mode = 0666 user = dovecot } } service imap-login { chroot = login inet_listener imap { address = *, [::] port = 143 } inet_listener imaps { address = * port = 993 ssl = yes } process_limit = 20480 process_min_avail = 32 service_count = 0 user = dovecot vsz_limit = 256 M } service imap { process_limit = 40960 vsz_limit = 512 M } service lmtp { inet_listener lmtp { address = 27.54.95.43 port = 24 } process_min_avail = 32 } service managesieve-login { client_limit = 40960 process_limit = 120 process_min_avail = 5 service_count = 0 vsz_limit = 64 M } service managesieve { process_limit = 4096 vsz_limit = 256 M } service pop3-login { chroot = login inet_listener pop3 { address = *, [::] port = 110 } inet_listener pop3s { address = * port = 995 ssl = yes } process_limit = 20480 process_min_avail = 32 service_count = 0 user = dovecot vsz_limit = 256 M } service pop3 { process_limit = 40960 vsz_limit = 256 M } ssl_cert =

2 4

doveadm throws Panic: file dsync-mailbox-tree-fill.c: line 65
by Cassidy Larson 28 Oct '14

28 Oct '14

Running 2.2.15 on FreeBSD 10.0. Forcing replication with: doveadm replicator replicate -f user(a)host.com on one user that I've seen some syslogs show up to see what's going on. Other users are fine. When I run the above command on the one user it produces a core dump. See below for syslog output and full backtrace: syslog output: Oct 26 22:44:09 d3cstorage dovecot: dsync-server(user(a)host.com): Panic: file dsync-mailbox-tree-fill.c: line 65 (dsync_mailbox_tree_get_selectable): assertion failed: (status_r->uidvalidity != 0) Oct 26 22:44:09 d3cstorage dovecot: dsync-server(user(a)host.com): Fatal: master: service(doveadm): child 67571 killed with signal 6 (core dumped) Oct 26 22:44:09 d3cstorage kernel: pid 67571 (doveadm-server), uid 127: exited on signal 6 (core dumped) bt full: #0 0x0000000040f73e1a in kill () from /lib/libc.so.7 #1 0x0000000040f72ac9 in abort () from /lib/libc.so.7 #2 0x0000000040bd6fa4 in default_fatal_handler () from /usr/local/lib/dovecot/libdovecot.so.0 #3 0x0000000040bd7ca1 in i_set_failure_internal () from /usr/local/lib/dovecot/libdovecot.so.0 #4 0x0000000040bd7249 in i_panic () from /usr/local/lib/dovecot/libdovecot.so.0 #5 0x0000000000428014 in dsync_mailbox_tree_fill () #6 0x000000000041e0e6 in dsync_brain_mailbox_trees_init () #7 0x000000000041bb27 in dsync_brain_run () #8 0x000000000041b41f in dsync_brain_master_init () #9 0x000000000042ac54 in dsync_ibc_init_stream () #10 0x0000000040be9443 in io_loop_call_io () from /usr/local/lib/dovecot/libdovecot.so.0 #11 0x0000000040beaafd in io_loop_handler_run_internal () from /usr/local/lib/dovecot/libdovecot.so.0 #12 0x0000000040be9688 in io_loop_run () from /usr/local/lib/dovecot/libdovecot.so.0 #13 0x000000000040ec49 in doveadm_dsync_main () #14 0x0000000000410fe9 in doveadm_mail_single_user () #15 0x000000000041a89c in client_connection_create () #16 0x0000000040be9443 in io_loop_call_io () from /usr/local/lib/dovecot/libdovecot.so.0 #17 0x0000000040beaafd in io_loop_handler_run_internal () from /usr/local/lib/dovecot/libdovecot.so.0 #18 0x0000000040be9688 in io_loop_run () from /usr/local/lib/dovecot/libdovecot.so.0 #19 0x0000000040b90a58 in master_service_run () from /usr/local/lib/dovecot/libdovecot.so.0 #20 0x000000000041ae15 in main () Config snippets: service doveadm { drop_priv_before_exec = yes inet_listener { port = 12345 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { group = mailsys mode = 0666 user = mailsys } unix_listener replicator { group = mailsys mode = 0666 user = mailsys } } Anything else I can provide? Thanks! Cassidy

2 4

dsync-server throwing Resource temporarily available
by Cassidy Larson 28 Oct '14

28 Oct '14

Running 2.2.15 on FreeBSD 10.0 with two back end storage boxes using TCP to sync. Seeing a couple of users that always seem to be throwing these kind of errors in the logs: dovecot: dsync-server(user(a)host.com): Error: write(/var/run/dovecot/replicator-doveadm) failed: Resource temporarily unavailable Just wondering what's the proper course of action to fix it? Thanks.

2 1

An easy fix for "dovecot.map.index corrupted: map_uid=xxxx refcount too low"?
by Ralf Hildebrandt 28 Oct '14

28 Oct '14

Is there an easy way of "fixing" these? Oct 26 13:24:52 imap(account@domain): Error: mdbox map /var/mail/domain/account/mdbox/storage/dovecot.map.index corrupted: map_uid=2700 refcount too low (dovecot 2.1.17) -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 1

Sieve: carry global variables from sieve_before to user sieve scripts
by Alexander 'Leo' Bergolth 26 Oct '14

26 Oct '14

Hi! Is there a way to initialize global variables with default values in sieve_before scripts that can be used in the sieve_default script or in user scripts? I've tried the following code but this doesn't work.. before.d/10-set-defaults.sieve: -------------------- 8< -------------------- require ["variables", "include"]; require "vnd.dovecot.debug"; set "global.S_TESTVAR leo"; debug_log "LEO SIEVE: in before.d/10-set-defaults, S_TESTVAR: ${global.S_TESTVAR}"; -------------------- 8< -------------------- default.sieve: -------------------- 8< -------------------- require ["variables", "include"]; require "vnd.dovecot.debug"; global "S_TESTVAR"; debug_log "LEO SIEVE: in default.sieve: S_TESTVAR: ${global.S_TESTVAR}, ${S_TESTVAR}"; -------------------- 8< -------------------- Is there any other way to set up defaults in a global sieve script? Cheers, --leo -- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria

2 2

imap-postlogin and doveadm
by Hans Morten Kind 26 Oct '14

26 Oct '14

We are configuring location= running a bash-script during imap-postlogin setting $MAIL in $USERDB_KEYS, as described in wiki/PostLoginScripting.txt This works fine. However, running a command like 'dovadm index [-u user] folder' only works for users with settings that match the default in mail_location= Would it be possible to make the location available for doveadm in a similar way, either with command line arguments or in the enviroment? hmk

3 4

master: Error: service(log): command startup failed, throttling for 2 secs
by Reindl Harald 26 Oct '14

26 Oct '14

master: Error: service(log): command startup failed, throttling for 2 secs i see that due restart on any machine acting as IMAP/POP3 proxy why?

2 7

Dovecote 1.2.17 poodle
by Marc Rantanen 26 Oct '14

26 Oct '14

Hi, how do I protect dovecot 1.2.17 against poodle? Br /Marc

5 8

Dynamic tags in email address
by Felix Gustavsson 25 Oct '14

25 Oct '14

I'm trying to get dynamic tagging (user+sometag(a)example.com) to work on a mail server I'm setting up, however it only works as long as it's sent to the main user and not to aliases. virtual-alias-maps query: SELECT get_email_alias_dyn('%s') virtual-mailbox-domains query: SELECT 1 FROM domain WHERE name='%s' virtual-mailbox-maps query: SELECT 1 FROM user_alias INNER JOIN domain ON user_alias.domainID = domain.id WHERE user_alias.primary = 1 AND CONCAT(user_alias.name, '@', domain.name)='%s' "get_email_alias_dyn()" is a stored function which returns the destination email, so alias+tag(a)example.com returns user(a)example.com, alias(a)example.com returns user(a)example.com and so on. It works perfectly fine when the mail does not contain any tags (alias(a)example.com or user(a)example.com) or if it's the primary email which contains tags (user+sometag(a)example.com) but when it's tags on an alias the mail is bounced due to "user unknown". I tried modifying the dovecot service in master.cf so the addresses can be filtered with Sieve (http://wiki2.dovecot.org/LDA/Postfix) but that did not solve the issue either, so I have not idea where it goes wrong or how to solve it. I have included the logs from when I sent to alias+tag(a)example.com below: Oct 25 19:54:20 xx postfix/smtpd[10987]: connect from mail-wg0-f50.google.com[74.125.82.50] Oct 25 19:54:21 xx postfix/smtpd[10987]: 10585DFA63: client=mail-wg0-f50.google.com[74.125.82.50] Oct 25 19:54:21 xx postfix/cleanup[10995]: 10585DFA63: message-id=<CAGPeO-YcJwbRJb-Gfga+G_vKqj9cm80rMZf9LAfENRCFfxLVAg(a)mail.gmail.com> Oct 25 19:54:25 xx postfix/qmgr[9945]: 10585DFA63: from=<xx(a)gmail.com>, size=1743, nrcpt=1 (queue active) Oct 25 19:54:25 xx postfix/smtpd[10987]: disconnect from mail-wg0-f50.google.com[74.125.82.50] Oct 25 19:54:25 xx dovecot: auth-worker(11000): mysql(127.0.0.1): Connected to database mailcp Oct 25 19:54:25 xx postfix/pipe[10998]: 10585DFA63: to=<xx+test(a)xx.com>, relay=dovecot, delay=5.4, delays=5.4/0/0/0.03, dsn=5.1.1, status=bounced (user unknown) Oct 25 19:54:25 xx postfix/cleanup[10995]: D39B2DFC7D: message-id=<20141025175425.D39B2DFC7D(a)xx.com> Oct 25 19:54:25 xx postfix/bounce[11002]: 10585DFA63: sender non-delivery notification: D39B2DFC7D Oct 25 19:54:25 xx postfix/qmgr[9945]: D39B2DFC7D: from=<>, size=3937, nrcpt=1 (queue active) Oct 25 19:54:25 xx postfix/qmgr[9945]: 10585DFA63: removed Oct 25 19:54:26 xx postfix/smtp[11004]: D39B2DFC7D: to=<xx(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.195.27]:25, delay=0.24, delays=0/0/0.16/0.07, dsn=2.0.0, status=sent (250 2.0.0 OK 1414259666 d8si5463492wiv.41 - gsmtp) Oct 25 19:54:26 xx postfix/qmgr[9945]: D39B2DFC7D: removed The dovecot-sql.conf.ext file looks like this: driver = mysql connect = host=127.0.0.1 dbname=mailcp user=mailcp password=xxx default_pass_scheme = SHA512-CRYPT password_query = SELECT CONCAT(user_alias.name, '@', domain.name) as user, user.password as password, concat('*:bytes=', (CASE WHEN user.quota -1 THEN user.quota ELSE domain.quota END)*1000000) AS userdb_quota_rule FROM user INNER JOIN user_alias ON user.id = user_alias.userID AND user_alias.primary = 1 INNER JOIN domain ON user_alias.domainID = domain.id WHERE CONCAT(user_alias.name, '@', domain.name) ='%u' AND user.status = 1 user_query = SELECT CONCAT('/var/mail/vmail/', domain.name, '/', user_alias.name) as home, 5000 AS uid, 5000 AS gid, concat('*:bytes=', (CASE WHEN user.quota != -1 THEN user.quota ELSE domain.quota END)*1000000) AS userdb_quota_rule FROM user INNER JOIN user_alias ON user.id = user_alias.userID AND user_alias.primary = 1 INNER JOIN domain ON user_alias.domainID = domain.id WHERE CONCAT(user_alias.name, '@', domain.name) ='%u' AND user.status = 1

2 2

Sieve duplicate detection
by Bruce Bodger 25 Oct '14

25 Oct '14

Good day, Gents. We are running: dovecot 1.2.17 dovecot-1.2-sieve-0.1.19 dovecot-1.2-managesieve-0.11.13 postfix 2.4.3 on OS X 10.5.8 server. Only about 15 users access the server. No problems. My question is... what would I have to upgrade, and to what version, in order to take advantage of pigeonhole sieve's duplicate detection (vnd.dovecot.duplicate) functionality? Thank you very much. Bruce

1 0

Invoking the spam checker on the sieve script
by Alejandro Exojo 25 Oct '14

25 Oct '14

Hi. TL/DR version: Is it advisable to invoke an spam checker from the sieve script, and then, once the message is filtered, decide if should be moved to a certain spam folder? A bit more context on why I'm considering this: I'm just a geek who wants to handle his own mail, but not a great experience as a system administrator. I don't have any corporate setup, just a simple VPS with me as the only user. Previously I fetched all my mail through POP, and in the client of my PC I moved (lots of) mailing list traffic to its folders. Then, for those remaining messages (and only those remaining) I passed the spam filter and moved to spam folder. That's a significant saving since I have many mailing list subscriptions, and now I'm even using rss2email, so I have lots of email that is not spam. I moved to IMAP and my filters are server side with sieve, but I don't have spam filtering yet. I thought I could replicate the setup easily, but it seems nobody is doing that, and everyone has the mail already scored when it reaches sieve. Seems like the "extprograms" extension would be a fit, but again, nobody seems to mention on documentation, so I'm fearing I'm probably wrong. Suggestions? Thank you very much! -- Alex (a.k.a. suy) | GPG ID 0x0B8B0BC2 http://barnacity.net/ | http://disperso.net

5 8

Multiple user attributes in LDAP
by CARDENAS Eduardo SIDOR 25 Oct '14

25 Oct '14

Hello, I have an issue with dovecot and Ldap… Any help will be grateful… I have dovecot 1.2.15 and i want to know if in that version can i use two values returned from LDAP in the user_attrs template? Thanking you in anticipation… -- " Notificación Automática: Este mensaje y cualquier archivo que se adjunte contiene información privilegiada y confidencial. Es para uso exclusivo del destinatario. Si usted ha recibido esta comunicación por error, por favor avísenos inmediatamente. Automatic notification: This e-mail and any file transmitted with it are confidential and may be legally privileged. It is intended solely for the addressee and may not be disclosed to or used by anyone other than the addressee. If you have received this e-mail by mistake , please advise the sender immediately"

3 3

Where can I find change logs/release notes for Dovecot EE releases?
by deoren 25 Oct '14

25 Oct '14

I searched for them and haven't come across them yet. Could any point me in the right direction? Specifically the Ubuntu 12.04 package notes if they're split out. Thanks!

4 4

2.2.14 Panic in sync_expunge_range()
by Hans Morten Kind 25 Oct '14

25 Oct '14

I am getting some panics after upgrading from 2.2.13 to 2.2.14 This panic happens for one user only, he is subscribed to 86 folders, on two of them this panic happens quite often - several times a day. The mbox folders seems OK, less than 30M with 30 and 200 messages. Panic: file mail-index-sync-update.c: line 250 (sync_expunge_range): assertion failed: (count > 0) hmk GNU gdb 6.8 Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-pc-solaris2.10"... Reading symbols from /datapool/local/dovecot-2.2.14/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /local/dovecot-2.2.14/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /datapool/local/dovecot-2.2.14/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /local/dovecot-2.2.14/lib/dovecot/libdovecot.so.0 Reading symbols from /datapool/local/program/lib/libssl.so.1.0.0...done. Loaded symbols for /local/program/lib/libssl.so.1.0.0 Reading symbols from /datapool/local/program/lib/libcrypto.so.1.0.0...done. Loaded symbols for /local/program/lib/libcrypto.so.1.0.0 Reading symbols from /datapool/local/program/lib/libz.so...done. Loaded symbols for /local/program/lib/libz.so Reading symbols from /lib/libm.so.2...done. Loaded symbols for /lib/libm.so.2 Reading symbols from /datapool/local/program/lib/libiconv.so.2...done. Loaded symbols for /local/program/lib/libiconv.so.2 Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libsocket.so.1...done. Loaded symbols for /lib/libsocket.so.1 Reading symbols from /lib/libsendfile.so.1...done. Loaded symbols for /lib/libsendfile.so.1 Reading symbols from /lib/libc.so.1...done. Loaded symbols for /lib/libc.so.1 Reading symbols from /lib/libdl.so.1...done. Loaded symbols for /lib/libdl.so.1 Reading symbols from /usr/lib/libz.so...done. Loaded symbols for /usr/lib/libz.so Reading symbols from /lib/libaio.so.1...done. Loaded symbols for /lib/libaio.so.1 Reading symbols from /lib/libmd.so.1...done. Loaded symbols for /lib/libmd.so.1 Reading symbols from /lib/ld.so.1...done. Loaded symbols for /lib/ld.so.1 Core was generated by `dovecot/imap imap-postlogin'. Program terminated with signal 6, Aborted. [New process 76621 ] #0 0xfe7fc8e5 in _lwp_kill () from /lib/libc.so.1 #0 0xfe7fc8e5 in _lwp_kill () from /lib/libc.so.1 No symbol table info available. #1 0xfe7f7765 in thr_kill () from /lib/libc.so.1 No symbol table info available. #2 0xfe7a376f in raise () from /lib/libc.so.1 No symbol table info available. #3 0xfe7829e1 in abort () from /lib/libc.so.1 No symbol table info available. #4 0xfeda13ba in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:152 backtrace = 0x8093660 "0xfeda22d7 -> 0xfeda15d3 -> 0xfef31e5f -> 0xfef32d65 -> 0xfef3349e -> 0xfef33b77 -> 0xfef1dcbd -> 0xfef170e4 -> 0xfef173a4 -> 0xfef1767d -> 0xfef03e09 -> 0xfeea5540 -> 0xfeea5714 -> 0xfeea5857 -> 0xfe"... #5 0xfeda22d7 in i_internal_fatal_handler (ctx=0x8047400, format=0xfef5ebc8 "file %s: line %d (%s): assertion failed: (%s)", args=0x8047424 ".ìõþú") at failures.c:152 status = 0 #6 0xfeda15d3 in i_panic (format=0xfef5ebc8 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:152 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = 0x8047424 ".ìõþú" #7 0xfef31e5f in sync_expunge_range (ctx=0x8047600, seqs=0x80474d8) at ../../src/lib/array.h:197 map = (struct mail_index_map *) 0x80c5d90 range = (const struct seq_range *) 0x8093430 i = 134509780 count = 0 dest_seq1 = 562 prev_seq2 = 562 orig_rec_count = 4277606968 __FUNCTION__ = "sync_expunge_range" #8 0xfef32d65 in mail_index_sync_record_real (ctx=0x8047600, hdr=0x80b5d28, data=0x80b5df8) at ../../src/lib/array.h:197 rec = (const struct mail_transaction_expunge_guid *) 0x80b8968 end = (const struct mail_transaction_expunge_guid *) 0x80b8968 seqs = {arr = {buffer = 0x8093410, element_size = 8}, v = 0x8093410, v_modifiable = 0x8093410} seq = 0 modseq = 32612 ret = 0 __FUNCTION__ = "mail_index_sync_record_real" #9 0xfef3349e in mail_index_sync_record (ctx=0x8047600, hdr=0x80b5d28, data=0x80b5df8) at ../../src/lib/array.h:197 _data_stack_cur_id = 5 ret = 1 #10 0xfef33b77 in mail_index_sync_map (_map=0x80b5400, type=MAIL_INDEX_SYNC_HANDLER_HEAD, force=true) at ../../src/lib/array.h:197 map = (struct mail_index_map *) 0x0 index = (struct mail_index *) 0x80b53b0 view = (struct mail_index_view *) 0x80ab8b0 sync_map_ctx = {view = 0x80ab8b0, modseq_ctx = 0x809ca50, cur_ext_map_idx = 0, ext_intro_seq = 5, ext_intro_offset = 52, ext_intro_end_offset = 84, expunge_handlers = {arr = { buffer = 0x0, element_size = 0}, v = 0x0, v_modifiable = 0x0}, extra_contexts = {arr = { buffer = 0x809c348, element_size = 4}, v = 0x809c348, v_modifiable = 0x809c348}, unknown_extensions = 0x0, type = MAIL_INDEX_SYNC_HANDLER_HEAD, sync_handlers_initialized = 0, expunge_handlers_set = 0, expunge_handlers_used = 0, cur_ext_ignore = 0, internal_update = 0, errors = 0} thdr = (const struct mail_transaction_header *) 0x80b5d28 tdata = (const void *) 0x80b5df8 prev_seq = 5 start_offset = 0 prev_offset = 144 ret = 1 had_dirty = false reset = true __FUNCTION__ = "mail_index_sync_map" #11 0xfef1dcbd in mail_index_map (index=0x80b53b0, type=MAIL_INDEX_SYNC_HANDLER_HEAD) at mail-index-map-read.c:35 ret = 1 __FUNCTION__ = "mail_index_map" #12 0xfef170e4 in mail_index_try_open (index=0x80b53b0) at ../../src/lib/array.h:197 ret = 134919688 __FUNCTION__ = "mail_index_try_open" #13 0xfef173a4 in mail_index_open_files (index=0x80b53b0, flags=21) at ../../src/lib/array.h:197 ret = 1 #14 0xfef1767d in mail_index_open (index=0x80b53b0, flags=21) at ../../src/lib/array.h:197 ret = 134960048 __FUNCTION__ = "mail_index_open" #15 0xfef03e09 in index_storage_mailbox_open (box=0x80b47c8, move_to_memory=false) at index-storage.c:39 ibox = (struct index_mailbox_context *) 0x80b4a80 index_flags = 21 ret = 0 __FUNCTION__ = "index_storage_mailbox_open" #16 0xfeea5540 in mbox_mailbox_open_finish (mbox=0x80b47c8, move_to_memory=false) at mbox-storage.c:77 No locals. #17 0xfeea5714 in mbox_mailbox_open_existing (mbox=0x80b47c8) at mbox-storage.c:77 box = (struct mailbox *) 0x80b47c8 rootdir = 0xfeea581f "\215\225`ÿÿÿ\211T$\004\211\004$è\023¨ûÿ\211Eð\203}ð" box_path = 0x80b4b78 "/Home/USER/mail/pro/triad" move_to_memory = false #18 0xfeea5857 in mbox_mailbox_open (box=0x80b47c8) at mbox-storage.c:77 mbox = (struct mbox_mailbox *) 0x80b47c8 st = {st_dev = 82051096, st_pad1 = {0, 0, 0}, st_ino = 4141941, st_mode = 33152, st_nlink = 1, st_uid = 32440, st_gid = 4601, st_rdev = 0, st_pad2 = {0, 0}, st_size = 16826589, st_atim = { tv_sec = 1411034237, tv_nsec = 0}, st_mtim = {tv_sec = 1413152136, tv_nsec = 0}, st_ctim = { tv_sec = 1413659956, tv_nsec = 975959000}, st_blksize = 8192, st_blocks = 33016, st_fstype = "nfs", '\0' <repeats 12 times>, st_pad4 = {0, 0, 0, 0, 0, 0, 0, 0}} ret = 0 #19 0xfeec94cc in mailbox_open_full (box=0x80b47c8, input=0x0) at ../../src/lib/array.h:197 _data_stack_cur_id = 4 ret = 143 #20 0xfeec9807 in mailbox_open (box=0x80b47c8) at ../../src/lib/array.h:197 No locals. #21 0xfef024ec in index_storage_get_status (box=0x80b47c8, items=23, status_r=0x8047a04) at index-status.c:23 No locals. #22 0xfeeca8ac in mailbox_get_status (box=0x80b47c8, items=23, status_r=0x8047a04) at ../../src/lib/array.h:197 __FUNCTION__ = "mailbox_get_status" #23 0x08073ddb in imap_status_get (cmd=0x80b1fb8, ns=0x80ab1b0, mailbox=0x8093318 "pro/triad", items=0x8047a70, result_r=0x8047a04) at imap-status.c:23 client = (struct client *) 0x80b17b0 box = (struct mailbox *) 0x80b47c8 errstr = 0x8064d84 "\205Àu\034\213\205hÿÿÿÇD$\004\005" ret = 0 #24 0x08064e65 in cmd_status (cmd=0x80b1fb8) at cmd-status.c:23 client = (struct client *) 0x80b17b0 args = (const struct imap_arg *) 0x80ab240 list_args = (const struct imap_arg *) 0x80ab328 items = {status = 23, metadata = 0} result = {status = {messages = 0, recent = 0, unseen = 0, uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, first_recent_uid = 0, last_cached_seq = 0, highest_modseq = 0, highest_pvt_modseq = 0, keywords = 0x0, permanent_flags = 0, permanent_keywords = 0, allow_new_keywords = 0, nonpermanent_modseqs = 0, no_modseq_tracking = 0, have_guids = 1, have_save_guids = 0, have_only_guid128 = 0}, metadata = { guid = "\000\000\000\000\001\000\000\000\r\000\000\000\033\000\000", virtual_size = 2199023255593, cache_fields = 0xfe7a67f2, precache_fields = 134861792, backend_ns_prefix = 0x80921a8 "0(\t\b\030", backend_ns_type = 134511236}, error = 134654712, errstr = 0x80b2038 "STATUS"} ns = (struct mail_namespace *) 0x80ab1b0 mailbox = 0x8093318 "pro/triad" orig_mailbox = 0x80ab2f8 "pro/triad" selected_mailbox = false #25 0x0806aa61 in command_exec (cmd=0x80b1fb8) at imap-commands.c:101 hook = (const struct command_hook *) 0x809bfd8 ret = 8 #26 0x080699d2 in client_command_input (cmd=0x80b1fb8) at imap-client.c:130 client = (struct client *) 0x80b17b0 command = (struct command *) 0x3 __FUNCTION__ = "client_command_input" #27 0x08069cb7 in client_command_input (cmd=0x80b1fb8) at imap-client.c:130 client = (struct client *) 0x80b17b0 command = (struct command *) 0x809d3d4 __FUNCTION__ = "client_command_input" #28 0x08069dba in client_handle_next_command (client=0x80b17b0, remove_io_r=0x8047b9d) at imap-client.c:130 No locals. #29 0x08069e57 in client_handle_input (client=0x80b17b0) at imap-client.c:130 _data_stack_cur_id = 3 ret = 10 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #30 0x08069fe0 in client_input (client=0x80b17b0) at imap-client.c:130 cmd = (struct client_command_context *) 0x80aa9a4 output = (struct ostream *) 0x80abe08 bytes = 55 __FUNCTION__ = "client_input" #31 0xfedba96d in io_loop_call_io (io=0x80abe70) at ioloop.c:28 ioloop = (struct ioloop *) 0x809bf20 t_id = 2 __FUNCTION__ = "io_loop_call_io" #32 0xfedbc0cc in io_loop_handler_run_internal (ioloop=0x809bf20) at ioloop-poll.c:96 ctx = (struct ioloop_handler_context *) 0x809ca10 pollfd = (struct pollfd *) 0x809e0a8 tv = {tv_sec = 1799, tv_usec = 999672} io = (struct io_file *) 0x80abe70 msecs = 1800000 ret = 0 call = true #33 0xfedbab06 in io_loop_handler_run (ioloop=0x809bf20) at ioloop.c:28 No locals. #34 0xfedbaa5d in io_loop_run (ioloop=0x809bf20) at ioloop.c:28 __FUNCTION__ = "io_loop_run" #35 0xfed41db1 in master_service_run (service=0x809be68, callback=0x80771da <client_connected>) at master-service.c:75 No locals. #36 0x08077577 in main (argc=2, argv=0x809bc78) at main.c:72 set_roots = {0x8092fe0, 0x0} login_set = {auth_socket_path = 0x80930e8 "", postlogin_socket_path = 0x8093120 "", postlogin_timeout_secs = 60, callback = 0x8076f4e <login_client_connected>, failure_callback = 0x807715d <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = -1

2 1

Properly "locking" a useraccount (on a proxy)
by Ralf Hildebrandt 25 Oct '14

25 Oct '14

I'm preparing a migration of several mailboxes to another machine. The different useraccounts are distributed to different backend machines by means of a dovecot LMTP/IMAP/POP proxy. Proxying is working really well (now that the kernel does as it should). But how can I "lock" a user during migration? The plan is: ============ * lock the user * kick the user (doveadm kick) * migrate mailbox (some rsync magic) * unlock the user again But how would I lock the user? What locking needs to achieve: 1) Disallow IMAP/POP login (that's easy!) 2) defer LMTP delivery somehow (Postfix is talking to dovecot's LMTP server) Because currently, we're seeing dovecot trying local delivery on the proxy machine once an account is locked (probably because LMTP proxying uses passdb lookups, and since that one is failing it's using the userdb lookup?): Oct 21 20:15:27 lmtp(87892): Error: user sys4(a)test.invalid: Initialization failed: Namespace '': mkdir(/var/mail/test.invalid/sys4/mdbox/mailboxes) failed: Permission denied (euid=10000(vmail) egid=10000(vmail) missing +w perm: /var/mail, we're not in group 8(mail), dir owned by 0:8 mode=0775) Admittedly, this is somehow working. But it's not very elegant to use a side-effect. Is the a reserved userdb/passwd return value which will let dovecot "tempfail" in a n elegant fashion? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

5 7

Dovecot Master/Master Replication Problem
by Felix Amler 25 Oct '14

25 Oct '14

Hi, I've set up 2 servers with dovecot 2.2.9 using maildir using structure: /var/maildir/domain/localpart Server A: mx1.xxx.de Server B: mx2.xxx.de Mails are delivered to dovecot only on server A by exim4/dovecot deliver replication to Server B works immediatelly: mark mail as read on server A, mail is marked as read on server B. BUT: when i mark a mail as read on Server B, noting happens. On Server A I get messages like this in dovecot-error.log: 2014-10-22 22:35:05 dsync-server(localpart(a)domain.de): Error: stat(/var/maildir/domain.de/localpart/.dovecot-sync.lock/tmp) failed: Not a directory 2014-10-22 22:35:05 dsync-server(localpart(a)domain.de): Error: Failed to access mailbox dovecot-sync.lock: Internal error occurred. Refer to server log for more information. [2014-10-22 22:35:05] I googled a bit, this could habben if there is a file ".dovecot-sync.lock" in the maildir, but I've double checked that, there is no such file... Why does it work in one direction, but not in the other? Please help best regards Felix

2 1

Replication .dovecot-sync.lock
by Hans-Werner Paulsen 25 Oct '14

25 Oct '14

Hello all, I have set up two servers with dovecot and replication. The mail location is mail_location = sdbox:/var/spool/mail/%u Everything works fine when I override the homedirectories userdb { driver = passwd override_fields = home=/var/spool/mail/%u } But, when I do not override the homedirectories, replication does not work, and the following error is logged: Oct 24 14:40:45 dsync-local(hans): Error: Couldn't create lock /afs/mpa/home/hans/.dovecot-sync.lock: Permission denied With a self-written module an IMAP user can get access to his homedirectory: protocol imap { mail_plugins = afsToken } The user has to type in his password. Obviously this does not work for replication. Is there a way to specify a different location for the lockfile? Isn't better to use the maildirectory but the homedirectory? Is there a way to set the homedirectory differently for replication? Thank you for any help. HW -- Hans-Werner Paulsen hans(a)MPA-Garching.MPG.DE MPI für Astrophysik Tel 089-30000-2602 Karl-Schwarzschild-Str. 1 Fax 089-30000-2235 D-85741 Garching

2 1

2.2.14 and "Panic: file virtual-sync.c"
by Michael Köhler 25 Oct '14

25 Oct '14

Hi, after upgrading to 2.2.14 (debian wheezy with apt source from rename-it.nl) I´ve got from time to time a panic in virtual plugin. Here are an excerpt from the log file: ---------------------------------- Oct 21 20:44:15 mailserver dovecot: imap(michael@DOMAIN): flag_change: box=Virtual.Ungelesen, uid=1, msgid=<54466F71.3050702(a)makomi.de>, size=1661, flags=(\Seen \Draft \Recent) Oct 21 20:44:15 mailserver dovecot: imap(michael@DOMAIN): Panic: file virtual-sync.c: line 1115 (virtual_sync_backend_box): assertion failed: (array_count(&bbox->sync_pending_removes) == 0) Oct 21 20:44:15 mailserver dovecot: imap(michael@DOMAIN): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x752af) [0x7f5f2630e2af] -> /usr/lib/dovecot/libdovecot .so.0(+0x7530e) [0x7f5f2630e30e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5f262c05de] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x266c ) [0x7f5f24abb9cc] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x35) [0x7f5f26601195] -> dovecot/imap(imap_sync_init+0x7a) [0x41faaa] -> dovecot/imap(cmd_sync_dela yed+0x190) [0x420710] -> dovecot/imap(client_handle_input+0x1d5) [0x417a35] -> dovecot/imap(client_input+0x72) [0x417d22] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x5b) [ 0x7f5f263200fb] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbb) [0x7f5f2632117b] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f5f26320189] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f5f26320208] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5f262c5ab3] -> dovecot/imap(main+0x2a1) [0x 40c311] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5f25f2bead] -> dovecot/imap() [0x40c475] Oct 21 20:44:15 mailserver dovecot: imap(michael@DOMAIN): Fatal: master: service(imap): child 31075 killed with signal 6 (core dumps disabled) ————————————————— Are the problem well-known? And what could I do? Thanks, Michael

2 1

dovecot-lda from postfix on remote dovecot server
by nik600 25 Oct '14

25 Oct '14

Dear all i've got many SMTP front-end that filter the mail and do some custom stuff... then when i've decided the final destination i'd like to call /usr/lib/dovecot/dovecot-lda to deliver the mail. Actually i have in master.cf: #####################à dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail null_sender= argv=/usr/lib/dovecot/dovecot-lda -f ${sender} -d ${recipient} #####################à I'd like to know if is possible to use some other command or some additional parameter to deliver the mail to a remote dovecot server. Thanks -- /*************/ nik600 http://www.kumbe.it

3 3

Replication only sporadic
by Lucas Rothamel - Eye Catching Webdesign 24 Oct '14

24 Oct '14

Hello dear Dovecot Gurus, I am setting up two servers with Dovecot replication as hot-standby servers for a small high availability cluster, switch-over through DNS-redirect. For testing purposes, both servers are generating a small test mail every few minutes and delivering to the local dovecot each. In my mail client, I added both servers through IMAP to watch how the replication is working. However, I noted that replication is very sporadic: sometimes a new email is received "instantaneous" by both servers, then no replication updates are visible for hours, and suddenly all missing mail appear in the other server. Why is this? Can this be changed to be more realtime? Thank you! Lucas doveconf -n: # 2.2.14: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.7 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/home/%d/%n/Maildir mail_plugins = " notify replication" mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@... quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = ... ssl_key = ... userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { info_log_path = /var/log/dovecot-lda.log mail_plugins = quota postmaster_address = ... } -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

1 0

Sieve Advice Needed, Please
by Casey Bralla 24 Oct '14

24 Oct '14

Anybody here familiar with the Sieve language? I'm rebuilding my mail server, and I am working with the sieve language to automatically filter spam into a separate account. However, I've hit a snag that I can't get around. BTW, I'm using a clean install of dovecot, postfix, spamassassin on Debian 7.5. I want to do server-side spam filtering, so I've got spamasassin identifying spam, and then have sieve sorting the mail to a special spam folder. I can easily send spam to special folder in the inbox for each mail user, but I wanted to have a single mail account for spam. I can use the "redirect" sieve command to send anything with the X-spam-flag set, but this triggers an error and bounces the offending mail. The bounce message is: From: MAILER-DAEMON(a)NerdWorld.org (Mail Delivery System) To: casey(a)vmailservertest.nerdworld.org Subject: Undelivered Mail Returned to Sender Date: Sun, 19 Oct 2014 16:41:49 -0400 (EDT) This is the mail system at host VMailServerTest.NerdWorld.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <spam(a)vmailservertest.nerdworld.org>: mail forwarding loop for spam(a)vmailservertest.nerdworld.org From: casey(a)vmailservertest.nerdworld.org Date: Sun, 19 Oct 2014 16:41:20 -0400 (EDT) viagra!!!! www.viagra.com I think this is a recursion problem, since the redirected mail has to go through the spamassassin check and sieve again. I tried to get clever and prevent the recursion, but I'm not clever enough. Here is my sieve rule file. # # # A rule to move spam to the spam user # based on spamassassin setting the spam flag # # # require ["redirect"]; (Not needed, since it is part of the basis sieve spec) # # rule:[SPAM] if header :contains "X-Spam-Flag" ["YES"] { if address :is "to" "Spam(a)VMailServerTest.NerdWorld.org" { keep; } else { redirect "spam(a)VMailServerTest.NerdWorld.org"; } } # # # Anybody able to give me any advice? TIA -- Casey Bralla Chief Nerd in Residence The NerdWorld Organisation www.NerdWorld.org

3 2

Re: special "what's my ip" pop account
by Joseph Tam 24 Oct '14

24 Oct '14

Steffen Kaiser writes: > let's put aside the question, if this way is sensible or not. [... continuing in nonsensible mode ...] > And if you are at it, maybe a dummy server with a self-made script that > returns "+OK POP3 your IP is ....", then return +FAIL for any further > command. Been there, done that (for a different problem). Not all mail readers will show you banners; to make this really work, you have to implement USER and PASS (accepts anything), STAT and LIST (one message available), RETR (dump your informational message payload), QUIT (disconnect), maybe TOP, and everything else is an +OK no-op. I patched Qualcomm's qpopper to do this. As to whether the OP *should* do this, definitely not. Find a better solution. Joseph Tam <jtam.home(a)gmail.com>

1 0

Public root folder is \Noselect
by G H 23 Oct '14

23 Oct '14

I am utilizing a public namespace via http://wiki2.dovecot.org/SharedMailboxes/Public and using sdbox storage format. How can I get rid of the \Noselect flag that is set by default for this folder? IMAP output: b LIST "" "*" * LIST (\HasNoChildren \Sent) "/" Sent * LIST (\HasNoChildren \Trash) "/" Trash * LIST (\Noselect \HasNoChildren) "/" Public * LIST (\HasNoChildren) "/" INBOX If this is not possible, what is the best way to create a sub-folder in here upon system setup (one w/o a \Noselect flag)? Thanks, G H

1 0

special "what's my ip" pop account
by A. Schulze 23 Oct '14

23 Oct '14

Hello, I like to enable the allow_nets Feature (http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets) for my customers. To help them knowing there own IP I imagine a special mailbox/loginuser at the pop3 server. That user could give a valid pop3 answer from a dummy pop3 server or simply throw a login error with customised answer containing the IP information. Has anybody done something similar or ideas to build such a system? Thanks for ideas Andreas

4 6

What is the correct way to configure the mail_location option for Mailidr format?
by deoren 23 Oct '14

23 Oct '14

Short version: What is the correct way to configure the mail_location option for Mailidr format? I've long had it setup this way: mail_location = maildir:/var/vmail/%d/%n based on this guide: https://www.linode.com/docs/email/postfix/email-with-postfix-dovecot-and-my… Is that correct? Longer version: After upgrading from Dovecot v2.0.x to v2.2.x yesterday I'm coming to the conclusion that I've got it configured wrong. This is probably compounded by my bright idea of explicitly setting the path separator prior to the upgrade like so: separator = . Because we're using Maildir I thought it would be useful to explicitly set the separator value to what the default is for Maildir. I figured this would be a good way to remind myself what the separator is by default. I also figured while I was merging the conf changes between v2.0 and v2.2 I could roll that additional change in also. Looks like that was a bad idea to include unnecessary changes until things had stabilized. I should know better; I was too optimistic for my own good. Here is an example error message I ran into: stat(/var/vmail/example.com/username/.dovecot.lda-dupes/tmp) failed: Not a directory which is nearly identical (other than leading path) to what is shown here: http://www.dovecot.org/list/dovecot/2010-April/048227.html Steffen Kaiser responded with, "You should not (must not) have home == maildir root." That is when I double-checked the guide that I mentioned above and found that I had followed their directions exactly for that conf setting. Looking at some other guides/tutorials shows something more like: mail_location = maildir:/var/vmail/%d/%n/Maildir I assume the latter is how it's supposed to be done? If so, that would explain the problems I've had with Sieve scripts in the past until I explicitly set 'sieve_dir' like so: sieve_dir = /var/vmail/sieve/%d/%n/sieve_dir I did review the official docs here: http://wiki2.dovecot.org/MailLocation/Maildir but I didn't find where it explicitly warns against setting home == maildir root. It should probably be apparent, but it wasn't to me when I first configured that setting. Thanks in advance for your help. If it turns out that the linode.com guide is wrong I'll create a Pull request to have that guide updated.

3 6

Re: dictionary attack defense
by Joseph Tam 23 Oct '14

23 Oct '14

Cliff Hayes writes: > a) I read about auth_failure_delay even before I posted my question and > I could not figure out the one-line explanation in the dovecot wiki: > "Number of seconds to delay before replying to failed authentications." > It's delaying a reply. Does that mean the hacker can keep asking as > fast as he wants? As Reindl states, authentication is a synchronous operation so the BFD attacker must wait for a reply before continuing. An attacker can get around this by running a botnet against you or opening up many concurrent connections (I think the latter can be capped), but I've rarely seen this. A botnet attack will defeat IP based blocking anyways. > Is it per user or per IP? Irrelevant -- there is no tracking. It's simply pauses the reply to bad auth attempts and tarpits the session. auth_failure_delay does not block BFD attacks, but makes it infeasable for reasonable strength passwords. It's simpler to implement, robust, and fault tolerant (e.g. a user cannot accidentally lock themselves out requiring administrative intervention to restore immediate access, or repeated failures from a NAT'd network does not DoS everything within the NAT'd network). Joseph Tam <jtam.home(a)gmail.com>

1 0

How to configure read-only access during a migration?
by Jeffrey Tunison 22 Oct '14

22 Oct '14

Hi. I would appreciate your advice about this PROBLEM: ======================================================= Find the simplest way to configure a Dovecot 2.2.10 IMAP server to access existing email users' (mbox-format) mail folders via a master_user ****in read-only mode.**** (I've got the master_user access working.) Simplest because while I'm proficient at UNIX systems administration, I'm under time pressure and dovecot has a lot of configuration flexibility. Identifying the right way to do this is proving time- consuming. Namespaces? ACL's? Passdb's? Mounting the mail-containing file systems in read-only mode did not work. (Would it have worked if I had disabled all file-locking rules (if so, how?)?) I thought it was time to bring in the dovecot wizards. You! GOAL: ======================================================= Without knowing or changing users' passwords, migrate several hundred users of dovecot IMAP to MS Exchange using the commercial product Transend. I'm manging the dovecot side, someone else is doing the Transend/Exchange piece. Migration would occur in batches due to slowness of the Transend side when dealing with users with email collections over a few gigabytes. I have a production IMAP server (dovecot 1.0.13 on 32-bit RHEL 4.9). Let's call it PROD for short. Users INBOXes are stored locally on PROD. Their other mail folders are stored on a second machine and accessed via NFS. Those other folders contain the great majority of the email to be migrated. Let's call the NFS server MIGR for short. On MIGR, I've set up a migration IMAP server (dovecot 2.2.10 on 64-bit RHEL 5.10). MIGR is a dedicated NFS server with newer hardware than PROD. It has an unused Ethernet NIC I can tell Transend to use. Both PROD and MIGR use NIS for authentication. Therefore PAM is consulted for passdb information, normally. No SQL db's used. I set up the second server (MIGR) for several reasons: 1) there are some users mail folders larger than the 32-bit file size limit found on the PROD server. 2) the bulk of the email is stored locally on the MIGR server. 3) the version of dovecot is much newer and therefore more likely to have fewer bugs and more configuration options. 4) I don't want to modify the production environment except where really necessary. Pointing Transend at MIGR instead of PROD seems like it will be faster and better. Telling end-users to use MIGR instead of PROD would allow them to verify that their email came across okay (into MS Exchange) without being able to modify the original copy of email (in Dovecot). In the days and weeks after migration. I'd like to disable access ***for a batch of users*** on the PROD server at the time the migration begins for that batch. I may need to re-enable access on PROD for certain users if the migration does not succeed. Transend has been dying on a number of test users despite tweaking its parameters in consultation with the vendor. "Corrupt" messages seem to be the issue. Users (or sysadmins) might be required to identify and delete the offending messages before we retry their migration. (Which folders and which messages are causing problems will hopefully be discernible in Transend logs.) Ha! If you've read this far, then I'd also say that I welcome any advice on changes to increase performance on MIGR, such as whether trying to minimize indexing as I've done is useful. Current configurations of the two servers follow. =========================================================================== PRODUCTION: =========================================================================== # 1.0.13: /etc/dovecot.conf log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.log protocols: imaps imap listen: *:143 ssl_listen: *:993 ssl_cert_file: /etc/pki/dovecot/certs/dovecot.pem ssl_key_file: /etc/pki/dovecot/private/dovecot.key login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_processes_count: 20 login_max_processes_count: 500 max_mail_processes: 1524 first_valid_uid: 100 mail_location: mbox:~/Mail:INBOX=/var/mail/%u:INDEX=/var/spool/dovecot-indexes/%u/ mbox_read_locks: dotlock mbox_write_locks: dotlock mbox_dotlock_change_timeout: 60 mbox_min_index_size: 2048 namespace: type: private separator: / inbox: yes namespace: type: private separator: / prefix: Mail/ hidden: yes namespace: type: private separator: / prefix: ~/Mail/ hidden: yes namespace: type: private separator: / prefix: mail/ hidden: yes namespace: type: private separator: / prefix: ~/mail/ hidden: yes auth default: master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot.deny deny: yes passdb: driver: passwd-file args: /etc/dovecot.transend master: yes passdb: driver: shadow passdb: driver: pam userdb: driver: passwd =========================================================================== MIGRATION: =========================================================================== # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.18.1.el5 x86_64 Scientific Linux release 5.10 (Boron) auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no first_valid_uid = 100 log_path = /var/log/dovecot.log mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/spool/concmail/%u:INDEX=MEMORY mbox_min_index_size = 50048 B mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } namespace one { hidden = yes location = prefix = Mail/ separator = / } namespace three { hidden = yes location = prefix = mail/ separator = / } passdb { args = /etc/dovecot/deny-users deny = yes driver = passwd-file } passdb { args = /etc/dovecot/dovecot.transend driver = passwd-file master = yes } passdb { driver = pam } protocols = imap service imap-login { process_min_avail = 15 service_count = 10 } service imap { executable = imap postlogin process_limit = 2048 } service postlogin { executable = script-login -d rawlog } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } deny = yes driver = passwd-file } passdb { args = /etc/dovecot/dovecot.transend driver = passwd-file master = yes } passdb { driver = pam } protocols = imap service imap-login { process_min_avail = 15 service_count = 10 } service imap { executable = imap postlogin process_limit = 2048 } service postlogin { executable = script-login -d rawlog } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 1000 }

1 0

dictionary attack defense
by Cliff Hayes 22 Oct '14

22 Oct '14

Does dovecot have any dictionary attack defenses yet? In the past I have had to implement defense from outside dovecot, but since dovecot is at the front lines and therefore is the first to know I'm hoping by now there is something we can set. For example, a limit on access failures per minut/hour/day or some such. If not why not?

4 8

authenticate plain, and virtual users
by Eric Abrahamsen 22 Oct '14

22 Oct '14

I'm running dovecot 2.2.14 on Archlinux. I've been using it with the isync syncing utility for quite some time with no problems, using the LOGIN authentication mechanism. Recently Isync was updated to support PLAIN, and I'm having trouble moving to that. The authenticate string that isync is sending is not the one that dovecot is expecting. I suspect this is because of how I have virtual users set up on my machine. This is a personal laptop, no other users, and so I didn't want to go through the rigmarole of creating more system users just for mail accounts. I also wanted everything stored under my home directory. So my dovecot config looks like this: # 2.2.14: /etc/dovecot/dovecot.conf # OS: Linux 3.16.4-1-ARCH i686 auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_plugins = " fts fts_lucene" passdb { args = username_format=%u /etc/dovecot/passwd driver = passwd-file } plugin { fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. } protocols = imap ssl = no userdb { args = uid=eric gid=users home=/home/eric/.mail/%d/%n username_format=%u default_fields = mail=maildir:/home/eric/.mail/%d/%n/mail driver = static } My /etc/dovecot/passwd looks like this: eric@ericabrahamsen.net:{PLAIN}password1 eric@paper-republic.org:{PLAIN}password2 When isync tries to log into the local dovecot using PLAIN, it sends the base64-encoded version of this string: eric(a)paper-republic.org\0eric\0password2 With my current dovecot config, telnet experimentation shows that dovecot will accept either of these two: \0eric(a)paper-republic.org\0password2 eric@paper-republic.org\0eric@paper-republic.org\0password2 Ie, either with or without the authorization ID, just like it says at http://wiki2.dovecot.org/Debugging/Authentication Given that I'm unlikely to be able to change how isync sends the string (and that it's really doing the right thing), are there alterations I can make to my dovecot config to get it to accept the authenticate string that isync is sending? Ideally, can I do that without having to set up system users? I've already tried using the other fields in the passwd file, putting "eric" and "eric(a)paper-republic.org" into the UID fields, just in case. No dice. Thanks in advance for any advice! Eric

1 0

Multiple user attributes in LDAP userdb query strings
by BINOTTO Luis SIDOR 21 Oct '14

21 Oct '14

Hello list, I have an issue with dovecot and Ldap... Any help will be grateful... I have my virtual users stored in an Active Directory database. I am using 2 attributes in AD to locate the user account: mail (their primary email address) and proxyAddresses (a multivalue attribute containing their mail aliases). I also control the mount point in which the mail is located with another attribute in AD, in this case I used "pager". I have dovecot 1.2.15 and there are no immediate plans to upgrade it. I configured Dovecot's deliver process in order to integrate sieve capability. I have configured userdb ldap and passdb ldap in Dovecot and have set up master and client sockets. I am using maildir format for directory layout. The problem is to set the variables home and mail that will define the mail location. The format must be like this: home: /Mailboxes/<mount point>/<user login>/ mail: /Mailboxes/<mount point>/<user login>/Maildir So, for a particular user (Login: user1, smtp: user1(a)domain1.com, alias smtp: user1_alias(a)domain1.com) the variables will be: home: /Mailboxes/AdmUsers/user1/ mail: /Mailboxes/AdmUsers/user1/Maildir Active Directory has the values in: mail:(user1@domain1.com), proxyAddresses:(user1_alias@domain1.com), sAMAaccountName(user1). I have defined home and mail in dovecot-ldap.conf. # User attributes are given in LDAP-name=dovecot-internal-name list. The # internal names are: # uid - System UID # gid - System GID # home - Home directory # mail - Mail location # # There are also other special fields which can be returned, see # http://wiki.dovecot.org/UserDatabase/ExtraFields user_attrs = pager=home=/mailboxes/%$/%u,mobile=quota_rule=*:storage=%$M If the mail is sent to the Principal SMTP (user1(a)domain1.com) in which the user part (%u) is the same as sAMAccountName, it works. The variable home is set correctly (home: /Mailboxes/AdmUsers/user1/). The problem is when the mail is sent to the smtp alias, in which the variable home is set incorrectly (home: /Mailboxes/AdmUsers/user1_alias/). There is a way to set two values to user_attrs?, in this case I would need to set pager and sAMAccountName (instead of %u), to it. Thanking you in anticipation... Attached is the out of dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.7 log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_uid: 16343 mail_gid: 16343 mail_location: maildir:~/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): autocreate deleted_to_trash quota imap_quota expire mail_plugins(imap): autocreate deleted_to_trash quota imap_quota expire mail_plugins(pop3): quota expire mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: postmaster(a)domain1.com mail_plugins: quota expire log_path: /var/log/dovecot.log auth default: mechanisms: gssapi gss-spnego login ntlm plain username_format: %Ln use_winbind: yes passdb: driver: pam userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: autocreate: Deleted Items autocreate: Sent Items autosubscribe: Deleted Items autosubscribe: Sent Items deleted_to_trash_folder: Sent Items quota: maildir:User quota quota_rule: *:storage=100M quota_rule2: Deleted Items:ignore quota_warning: storage=80%% /etc/dovecot/scripts/quota-warning.sh 80 quota_warning2: storage=90%% /etc/dovecot/scripts/quota-warning.sh 90 quota_warning3: storage=99%% /etc/dovecot/scripts/quota-exceeded.sh 100 expire: "Deleted Items" 1 "Deleted Items/*" 1 expire_dict: proxy::expire dict: expire: pgsql:/etc/dovecot/dovecot-dict-expire.conf " Notificacion Automatica: Este mensaje y cualquier archivo que se adjunte contiene informacion privilegiada y confidencial. Es para uso exclusivo del destinatario. Si usted ha recibido esta comunicacion por error, por favor avisenos inmediatamente. Automatic notification: This e-mail and any file transmitted with it are confidential and may be legally privileged. It is intended solely for the addressee and may not be disclosed to or used by anyone other than the addressee. If you have received this e-mail by mistake , please advise the sender immediately"

1 0

Proxy problem: "imap-login: Error: proxy(USERNAME): connect(10.x.x.178, 993) failed: Cannot assign requested address (after 0 secs, local=10.x.x.104)"
by Ralf Hildebrandt 21 Oct '14

21 Oct '14

After fixing the "duplicate compression" problem, we're now encountering "imap-login: Error: proxy(USERNAME): connect(10.x.x.178, 993) failed: Cannot assign requested address (after 0 secs, local=10.x.x.100)" in the logs. We already tried raising the ulimit, the max number of open files. Once we reach about 25k connections, we're getting the error above... for all local addresses. It seems as if the system cannot create any more outgoing connections. We already optimized: ---- snip ---- net.ipv4.tcp_fin_timeout=5 # down from 30s net.ipv4.tcp_tw_reuse=1 net.ipv4.tcp_tw_recycle=1 # http://redis4you.com/articles.php?id=012&name=Redis+high+traffic+connection… net.ipv4.ip_local_port_range=10000 65000 # http://www.fromdual.com/huge-amount-of-time-wait-connections net.ipv4.netfilter.ip_conntrack_max=524288 ---- snip ---- But still we get (once the load is rising beyond some point): # fgrep "Cannot assign requested address" /var/log/dovecot/dovecot.log |awk '{print $NF}' | sort | uniq -c | sort -n 142 local=10.x.x.100) 147 local=10.x.x.107) 148 local=10.x.x.106) 151 local=10.x.x.104) 151 local=10.x.x.109) 152 local=10.x.x.105) 156 local=10.x.x.110) 162 local=10.x.x.102) 165 local=10.x.x.101) 178 local=10.x.x.103) 189 local=10.x.x.108) We're using multiple local addresses when proxying to the backends -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

4 7

only inbox folder after courier-imap migration
by Luciano Gabriel Andino 21 Oct '14

21 Oct '14

Hello, after courier-dovecot-migrate.pl, the only folder appears in webmail menu is "Inbox". The others still are in Maildir "Maildir/.myfolder" and contains its "dovecot-uidlist" and "dovecot-keywords" files. May I need to edit some file? -- Saludos!! Luciano Andino GNU/Linux user #185103 Santa Fe - Argentina -----------------------------------------------

1 0

Dovecot Auth Issue
by Austin Einter 21 Oct '14

21 Oct '14

Dear All I have been able to setup postfix and dovecot. Through command line, I can send mail out. Now I have installed roundcube in mail server side, and I am able to access like https://mydomain/webmail.com Login was failing. Then I debugged and modified settings in dovecot and using PAM for authentication. Now I trying to login to email server. I am not sure if authentication by dovecot and pam is successful. I enabled logging for dovecot. The below logs I get when a user "try" logs in. Oct 21 07:44:55 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Oct 21 07:44:55 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Oct 21 07:44:55 auth: Debug: auth client connected (pid=15357) Oct 21 07:44:55 auth: Debug: client in: AUTH 1 PLAIN service=imap secured lip=128.199.214.27 rip=128.199.214.27 lport=993 rport=43323 resp=AHRyeUBsb2FkbXVsdGlwbGllci5jb20AdHJ5MTIz Oct 21 07:44:55 auth-worker: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Oct 21 07:44:55 auth-worker: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Oct 21 07:44:55 auth-worker: Debug: pam(try,128.199.214.27): lookup service=dovecot Oct 21 07:44:55 auth-worker: Debug: pam(try,128.199.214.27): #1/1 style=1 msg=Password: Oct 21 07:44:55 auth: Debug: client out: OK 1 user=try Oct 21 07:44:55 auth: Debug: master in: REQUEST 1571291137 15357 1 b3cc155dfd3bb2fd576bfeeceaf1ce3d Oct 21 07:44:55 auth: Debug: passwd(try,128.199.214.27): lookup *Oct 21 07:44:55 auth: Debug: master out: USER 1571291137 try home=/var/mail/ mail=maildir:/var/mail/try system_groups_user=try uid=5001 gid=5001*Oct 21 07:44:55 imap-login: Info: Login: user=<try>, method=PLAIN, rip=128.199.214.27, lip=128.199.214.27, mpid=15361, TLS *Oct 21 07:44:55 imap(try): Info: Disconnected: Logged out bytes=29/399* >From the logs above (in bold), I hope auth is successful, then in last line why it is logging out.., I am confused , not sure if auth is completely successful or not. Kindly experts please help. Best Regards, Austin

1 0

SMTP authentication setup
by Brian 21 Oct '14

21 Oct '14

At my company we've had a longstanding problem of not being able to send email from devices outside of our internal network and any specific IP address that we open the relay to. As it turns out, SASL has never been set up. I need to set up SASL ASAP but none of the guides I've found seem to work. This is the latest guide I tried: http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL I did everything on here minus the last part because it's on the same server. Also, instead of submission inet n - - - - smtpd I did: 127.0.0.1:1025 inet n - - - - smtpd After all is done, however, I'm unable to send any mail. Thunderbird just says sending message but doesn't send and I don't even get an error. I end up having to disable SASL again before I can send mail. Dovecot version 2.0.9 Postfix version 2.6.6 CentOS 6 I have Postfix, Dovecot, and ASSP on the same server. Thanks everyone. -- This email was Virus checked by Astaro Security Gateway. http://www.sophos.com

4 5

90-sieve.conf syntax - moving from v2.0.x to v2.2.x
by deoren 21 Oct '14

21 Oct '14

Hi, I'm currently running version v2.0.x in production (using Maildir storage) and it's been working well. I'm interested in moving to version 2.2.x and am preparing a test server to do so. As I have been merging the conf file changes between the two versions I noticed syntax changes for the 90-sieve.conf file. There are now 'locations' and presumably to keep referring to local content I'll need to use the 'file:' location type. On my production box (v2.0.x) I have 90-sieve.conf configured like so: sieve = /var/vmail/sieve/%d/%n/.dovecot.sieve sieve_default = /var/vmail/sieve/global.sieve sieve_dir = /var/vmail/sieve/%d/%n/sieve_dir Inside of the /var/vmail/sieve/%d/%n/ directory (i.e., /var/vmail/sieve/example.com/testuser/) I find: drwxr-xr-x 3 vmail vmail 64 Oct 19 12:07 . drwxr-xr-x 9 vmail vmail 101 Jun 21 10:47 .. lrwxrwxrwx 1 vmail vmail 25 Jun 21 11:10 .dovecot.sieve -> sieve_dir/roundcube.sieve -rw------- 1 vmail vmail 3694 Oct 19 12:07 .dovecot.svbin drwx------ 3 vmail vmail 38 Oct 19 11:58 sieve_dir and that works well. I look at the current wiki documentation: http://wiki2.dovecot.org/Pigeonhole/Sieve/Configuration and I find that the 'seive_dir' conf option is still listed, but the comments for it appear very similar to the comments that precede the 'sieve' conf option in the stock 90-sieve.conf file: # The location of the user's main Sieve script or script storage. The LDA # Sieve plugin uses this to find the active script for Sieve filtering at # delivery. The "include" extension uses this location for retrieving # :personal" scripts. This is also where the ManageSieve service will store # the user's scripts, if supported. Assuming that the 'sieve' and 'sieve_dir' conf settings have not been merged into just 'sieve' (and that I need to use the 'file:' location specifier), is this how I would configure the two settings for Dovecot 2.2.x? sieve = file:/var/vmail/sieve/%d/%n;active=~/.dovecot.sieve sieve_dir = file:/var/vmail/sieve/%d/%n/sieve_dir If the two have been merged, how would I go about configuring the 90-sieve.conf file to get the same results? Thanks for your help.

1 1

Re: last_login plugin with MySQL
by Joseph Tam 21 Oct '14

21 Oct '14

Michael Cramer <michael(a)bigmichi1.de> writes: > anybody knows how this can be achieved with postgresql, because 'ON > DUPLICATE KEY UPDATE' syntax is mysql specific A clear, concise explanation of consistency problems with SQL update-or-insert ("upsert") operation, including a PostgreSQL implementation: http://www.depesz.com/2012/06/10/why-is-upsert-so-complicated/ Joseph Tam <jtam.home(a)gmail.com>

1 0

replication sieve settings
by Martin Schmidt 20 Oct '14

20 Oct '14

Hello, can someone give me a hint, where to find an info, how to setup dovecote replication with sieve? On my active.active setup, it replicates the user mdboxes and sieve works also, on the active destination fileserver. Client changes the sieve, tests work fine. But the sieve file won't get replicated to the replica server. As i've researched, it was introduced in dovecot v2.2.rc3 Is it default, that doveadm replicator replicate '*' includes the sieve and i made a config error? Or is there an option to set for the replication service? On dovecot director server, i've set director in conf.d/20-managesieve.conf service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } and added sieve to plugins in conf.d/20-lmtp.conf protocol lmtp { mail_plugins = $mail_plugins sieve } doveconf -n ... director_mail_servers = 192.168.200.10 192.168.200.11 director_servers = 192.168.200.1:9090 192.168.200.2:9090 disable_plaintext_auth = no doveadm_port = 24245 lmtp_proxy = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = " imap lmtp sieve pop3" ... service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } ... protocol lmtp { auth_socket_path = director-userdb mail_plugins = " sieve" } ... Thank you Martin Schmidt Germany

1 0

fixes for quota support on NetBSD
by Thomas Klausner 20 Oct '14

20 Oct '14

Hi! dovecot-2.2.13 already has quota support for NetBSD, but it's buggy. The attached patches by Manuel Bouyer <bouyer(a)NetBSD.org> fix the issues. There is one thing that's not nice in them: one include is now for "/usr/include/quota.h" since dovecot comes with its own file "quota.h" which is earlier in the search path. Perhaps dovecot's copy can be renamed to dovecot-quota.h or to some other non-conflicting name? Cheers, Thomas

1 1

2.2.14 Panic in imap_fetch_more()
by Hans Morten Kind 20 Oct '14

20 Oct '14

This panic happens with different users, and it also occured in 2.2.13 Panic: file imap-fetch.c: line 556 (imap_fetch_more): assertion failed: (ctx->client->output_cmd_lock == NULL || ctx->client->output_cmd_lock == cmd) hmk GNU gdb 6.8 Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i386-pc-solaris2.10"... Reading symbols from /datapool/local/dovecot-2.2.14/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /local/dovecot-2.2.14/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /datapool/local/dovecot-2.2.14/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /local/dovecot-2.2.14/lib/dovecot/libdovecot.so.0 Reading symbols from /datapool/local/program/lib/libssl.so.1.0.0...done. Loaded symbols for /local/program/lib/libssl.so.1.0.0 Reading symbols from /datapool/local/program/lib/libcrypto.so.1.0.0...done. Loaded symbols for /local/program/lib/libcrypto.so.1.0.0 Reading symbols from /datapool/local/program/lib/libz.so...done. Loaded symbols for /local/program/lib/libz.so Reading symbols from /lib/libm.so.2...done. Loaded symbols for /lib/libm.so.2 Reading symbols from /datapool/local/program/lib/libiconv.so.2...done. Loaded symbols for /local/program/lib/libiconv.so.2 Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libsocket.so.1...done. Loaded symbols for /lib/libsocket.so.1 Reading symbols from /lib/libsendfile.so.1...done. Loaded symbols for /lib/libsendfile.so.1 Reading symbols from /lib/libc.so.1...done. Loaded symbols for /lib/libc.so.1 Reading symbols from /lib/libdl.so.1...done. Loaded symbols for /lib/libdl.so.1 Reading symbols from /usr/lib/libz.so...done. Loaded symbols for /usr/lib/libz.so Reading symbols from /lib/libaio.so.1...done. Loaded symbols for /lib/libaio.so.1 Reading symbols from /lib/libmd.so.1...done. Loaded symbols for /lib/libmd.so.1 Reading symbols from /lib/ld.so.1...done. Loaded symbols for /lib/ld.so.1 Core was generated by `dovecot/imap imap-postlogin'. Program terminated with signal 6, Aborted. [New process 79111 ] #0 0xfe7fc8e5 in _lwp_kill () from /lib/libc.so.1 #0 0xfe7fc8e5 in _lwp_kill () from /lib/libc.so.1 No symbol table info available. #1 0xfe7f7765 in thr_kill () from /lib/libc.so.1 No symbol table info available. #2 0xfe7a376f in raise () from /lib/libc.so.1 No symbol table info available. #3 0xfe7829e1 in abort () from /lib/libc.so.1 No symbol table info available. #4 0xfeda13ba in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:152 backtrace = 0x8093560 "0xfeda22d7 -> 0xfeda15d3 -> 0x806d60b -> 0x805d326 -> 0x806aa61 -> 0x80699d2 -> 0x8069cb7 -> 0x8069d15 -> 0x8069e57 -> 0x8069fe0 -> 0xfedba96d -> 0xfedbc0cc -> 0xfedbab06 -> 0xfedbaa5d -> 0xfed41db1 -"... #5 0xfeda22d7 in i_internal_fatal_handler (ctx=0x80479e0, format=0x807f310 "file %s: line %d (%s): assertion failed: (%s)", args=0x8047a04 "\236ó\a\b,\002") at failures.c:152 status = 0 #6 0xfeda15d3 in i_panic (format=0x807f310 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:152 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = 0x8047a04 "\236ó\a\b,\002" #7 0x0806d60b in imap_fetch_more (ctx=0x80c20e0, cmd=0x80c2018) at ../../src/lib/array.h:158 ret = 135365712 __FUNCTION__ = "imap_fetch_more" #8 0x0805d326 in cmd_fetch (cmd=0x80c2018) at cmd-fetch.c:37 client = (struct client *) 0x80b17b8 ctx = (struct imap_fetch_context *) 0x80c20e0 args = (const struct imap_arg *) 0x80c99f0 next_arg = (const struct imap_arg *) 0x80c9a20 list_arg = (const struct imap_arg *) 0x8047a98 search_args = (struct mail_search_args *) 0x0 qresync_args = {qresync_sample_seqset = 0x80c20a8, qresync_sample_uidset = 0x807ee7e} messageset = 0x80c9ab8 "1899" send_vanished = false ret = 1 #9 0x0806aa61 in command_exec (cmd=0x80c2018) at imap-commands.c:101 hook = (const struct command_hook *) 0x809bfd8 ret = 8 #10 0x080699d2 in client_command_input (cmd=0x80c2018) at imap-client.c:130 client = (struct client *) 0x80b17b8 command = (struct command *) 0x3 __FUNCTION__ = "client_command_input" #11 0x08069cb7 in client_command_input (cmd=0x80c2018) at imap-client.c:130 client = (struct client *) 0x80b17b8 command = (struct command *) 0x809d41c __FUNCTION__ = "client_command_input" #12 0x08069d15 in client_handle_next_command (client=0x80b17b8, remove_io_r=0x8047b9d) at imap-client.c:130 No locals. #13 0x08069e57 in client_handle_input (client=0x80b17b8) at imap-client.c:130 _data_stack_cur_id = 3 ret = 10 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #14 0x08069fe0 in client_input (client=0x80b17b8) at imap-client.c:130 cmd = (struct client_command_context *) 0x80aa9ac output = (struct ostream *) 0x80abe10 bytes = 1143 __FUNCTION__ = "client_input" #15 0xfedba96d in io_loop_call_io (io=0x80b7fc8) at ioloop.c:28 ioloop = (struct ioloop *) 0x809bf20 t_id = 2 __FUNCTION__ = "io_loop_call_io" #16 0xfedbc0cc in io_loop_handler_run_internal (ioloop=0x809bf20) at ioloop-poll.c:96 ctx = (struct ioloop_handler_context *) 0x809ca10 pollfd = (struct pollfd *) 0x809e0a8 tv = {tv_sec = 299, tv_usec = 996793} io = (struct io_file *) 0x80b7fc8 msecs = 299997 ret = 0 call = true #17 0xfedbab06 in io_loop_handler_run (ioloop=0x809bf20) at ioloop.c:28 No locals. #18 0xfedbaa5d in io_loop_run (ioloop=0x809bf20) at ioloop.c:28 __FUNCTION__ = "io_loop_run" #19 0xfed41db1 in master_service_run (service=0x809be68, callback=0x80771da <client_connected>) at master-service.c:75 No locals. #20 0x08077577 in main (argc=2, argv=0x809bc78) at main.c:72 set_roots = {0x8092fe0, 0x0} login_set = {auth_socket_path = 0x80930e8 "\2201\t\b\200", postlogin_socket_path = 0x8093120 "UID FETCH UID FETCH UID FETCH", postlogin_timeout_secs = 60, callback = 0x8076f4e <login_client_connected>, failure_callback = 0x807715d <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = -1

1 0

last_login plugin with MySQL
by Luigi Rosa 20 Oct '14

20 Oct '14

Hi, I have a Dovecot test installation with MySQL userbase and authentication where I am trying to setup last_login plugin with SQL dictionary I read http://wiki2.dovecot.org/Plugins/LastLogin and I addes this to my configuration plugin { last_login_dict = sql:/etc/dovecot/dovecot-sql.conf.ext } mail_plugins = $mail_plugins stats protocol imap { mail_plugins = $mail_plugins imap_stats last_login } When I log in with IMAP I get this error: Error: last_login_dict: dict_init(sql:/etc/dovecot/dovecot-sql.conf.ext) failed: Unknown dict module: sql /etc/dovecot/dovecot-sql.conf.ext is the file taht contains the SQL configuration. If I put mysql instead of sql the result is the same: Error: last_login_dict: dict_init(mysql:/etc/dovecot/dovecot-sql.conf.ext) failed: Unknown dict module: mysql The output of doveconf -n follows. Do you have any idea on how to use MySQL for last_login? Ciao, luigi # 2.2.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) auth_cache_negative_ttl = 0 auth_cache_size = 100 k auth_cache_ttl = 8 hours auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes base_dir = /var/run/dovecot/ listen = 127.0.0.1, 10.19.67.253 login_greeting = Ready. login_trusted_networks = 10.xx.xx.0/24, 2001:xxxx:xxxx:xxxx::/64 mail_plugins = " stats" mailbox_list_index = yes maildir_stat_dirs = yes passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { last_login_dict = mysql:/etc/dovecot/dovecot-sql.conf.ext sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_refresh = 10s stats_track_cmds = yes } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service stats { fifo_listener stats-mail { mode = 0666 } } ssl_cert = </etc/xxxxx/xxxxxx.luigirosa.com.crt ssl_dh_parameters_length = 2048 ssl_key = </etc/xxxxx/xxxxx.luigirosa.com.key ssl_parameters_regenerate = 202 hours ssl_protocols = !SSLv2 !SSLv3 syslog_facility = local5 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = sieve } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = " stats imap_stats last_login" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls pop3_uidl_format = %08Xu%08Xv } -- / +--[Luigi Rosa]-- \ Microsoft launches site to help those with H1N1. No help for those with Windows 7 --fark.com

5 16

Re: doveadm-move(1)
by Joseph Tam 19 Oct '14

19 Oct '14

Pascal Volk writes: >> Cut&pasted off the terminal man page output. Looking into >> man1/doveadm-move.1, I see >> >> .B doveadm move \-u jane Archive/2011/09 mailbox INBOX BEFORE \(rs >> .B 2011-10-01 SINCE 01-Sep-2011 >> >> so it's a problem with my nroff, not dovecot's man pages. (Hmm, it >> happens with groff too -- it appears to be some sort of line length bug.) > > Well, there was a problem with non-escaped dashes. But that was fixed 10 > months ago: > http://hg.dovecot.org/dovecot-2.2/diff/8a3d0426f514/doc/man/doveadm-move.1.… Nope, that didn't fix it. > I'm not sure, if that is the reason for the problem. > > Which OS, *roff are you using? Maybe I'm able to reproduce the problem. :-) It's Solaris10 nroff, and GNU groff 1.19.1. Ancient stuff so I wouldn't spend too much time looking at it. It's weird that two independent software implementations would do the same thing. Joseph Tam <jtam.home(a)gmail.com>

2 1

Fwd: Re: Wiki advice on running getmail on INBOX access - how does that work?
by c128 mail 19 Oct '14

19 Oct '14

Just re-tried this, and it doesn't seem to fire getmail on access for me. My incrontab is as follows: /home/user/Maildir/cur/ IN_ALL_EVENTS,IN_ONESHOT /home/user/bin/mvmail.sh The incrontab rule does work, but only if I make a physical change in /home/user/Maildir/cur/ e.g. by moving a mail from another folder in there. Just accessing the particular inbox doesn't seem to trigger anything. On 18/10/14 19:54, c128 mail wrote: > Yeah, I see what you mean - it should trigger by IN_ACCESS (from > IN_ALL_EVENTS) shouldn't it. I hadn't previously scanned over the full > set of events: > http://manpages.ubuntu.com/manpages/intrepid/man5/incrontab.5.html > > I'll set this up again and report back one way or another. > > Thanks. > > On 18/10/14 19:50, Gedalya wrote: >> On 10/18/2014 02:38 PM, c128 mail wrote: >>> > What exactly did happen? >>> >>> Oh, yeah, didn't make that clear ;-) >>> >>> Nothing happened...not without coaxing. >>> >>> If I forced a change to the directory, then it worked - but there >>> wouldn't be a change to the directory in normal operation, other than >>> by mail population? >> It's not supposed to require changes. Note the IN_ALL_EVENTS definition. >> This would include any attempt to open the directory and take a peek. >> If you configured it according to the wiki and it's not working then we >> have troubleshooting to do, but that's the theory. >> I'm not familiar with incron but I've worked with Linux's inotify. >> >>> >>> On 18/10/14 19:28, Gedalya wrote: >>>> On 10/18/2014 01:24 PM, c128 mail wrote: >>>>> Hi, >>>>> >>>>> I'm currently running getmail in a cron job every 2 minutes, so I was >>>>> quite intrigued by this on the wiki: >>>>> >>>>> http://wiki2.dovecot.org/HowTo/TriggerGetmailOnIMAPAccess >>>>> >>>>> Thing is - I couldn't see how it would work and, when I tried it, it >>>>> didn't work (at least not for me). >>>> What exactly did happen? >>>> >>>>> >>>>> It details using incrontab to monitor /home/username/.maildir/cur in >>>>> order to trigger getmail. >>>>> >>>>> However, "cur" won't change unless populated with mail...as an initial >>>>> result of actually running getmail? Seems like a chicken and egg >>>>> situation. >>>> access != change >>>> >>>>> >>>>> I reckon I'm missing something fundamental :-), but what is it? >>>>> >>>>> Ta. >>>> >>

3 7

sieve folder separator
by Thomas Koch 19 Oct '14

19 Oct '14

Hi, I'm moving from one email provider (me) to another (mailbox.org) and observed that the new provider uses "/" instead of "." as a folder separator. Now I need to adapt my sieve script. It's not too much work and I can even just define a variable at the beginning of my script: set "SEP" "/" But it would be great, if SIEVE would come with a predefined constant for the folder separator. Or does this already exists and I didn't find it? Thank you, Thomas Koch

2 1

Wiki advice on running getmail on INBOX access - how does that work?
by c128 mail 18 Oct '14

18 Oct '14

Hi, I'm currently running getmail in a cron job every 2 minutes, so I was quite intrigued by this on the wiki: http://wiki2.dovecot.org/HowTo/TriggerGetmailOnIMAPAccess Thing is - I couldn't see how it would work and, when I tried it, it didn't work (at least not for me). It details using incrontab to monitor /home/username/.maildir/cur in order to trigger getmail. However, "cur" won't change unless populated with mail...as an initial result of actually running getmail? Seems like a chicken and egg situation. I reckon I'm missing something fundamental :-), but what is it? Ta.

2 4

Recap: last_login plugin with MySQL
by Luigi Rosa 18 Oct '14

18 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With many thanks to Gedalya and Sven Hartge Situation: Dovecot installation with userbase in a MySQL table with the same structure described in Postfix.Admin installation; filesystem permission is flat with a single user (vmail) who owns maildir mailbox files and directories. Procedure to implement last-login plugin to update mailbox table. The lastlogin value is an integer in time() format Alter mailbox SQL table to add a `lastlogin` unsigned int field Add this to 10-master.conf service dict { unix_listener dict { mode = 0660 user = vmail } } In 90-plugin.conf add this: plugin { last_login_dict = proxy::lastlogin last_login_key = last-login/%u # default } dict { lastlogin = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } Enable last login for IMAP and POP3: protocol imap { mail_plugins = $mail_plugins last_login } protocol pop3 { mail_plugins = $mail_plugins last_login } Finally edit dovecot-dict-sql.conf.ext and add this lines: connect = {same values as dovecot-sql.conf.ext} map { pattern = shared/last-login/$user table = mailbox username_field = username value_field = lastlogin fields { username = $user } } Ciao, luigi - -- / +--[Luigi Rosa]-- \ After things have gone from bad to worse, the cycle will repeat itself. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUQp/PAAoJEO5WT/qgw4yKLscP/1ysmNOP23fQeqN2I7gxfhKp 4TF0Buf0rxKjxzjE5jcw4T/vDKhdjj2uaYtpUkE188l+tmGdeQ55ENyXEml/Svvw eEs9Kc2UJTlSQpQFpspUezvOtPwgb0L3720rCqs61BshGFgpZsiUEpPW8mHeVoo1 j5zmo9TVdrSPr8XqLzoR+fdIamZRzZH2pLA9x9cgzsVMmqSlMm4Xv3f/JMloNs98 fwWo13Ji5uFCRbbMmNUDCDOpd4wPYZ7ASS64Jf9nR4DZ75fnQmRgvsbl3EWicrqT 94Z4hlSEkOYWxDzooFta37+Sp61IjQWkWFiM+0260Q5u8IArpatW+tT2eD3jzaxP Gu0HB8jg+bT9cXXtfo1HyA+JYswEtwKiUvUKa/09j6oDGgBD2KR1yhDJNsZsJXkB bEKsACdSztEvfe9j91AzW8S/W3Uk5c7l9RH1CXVNTCbQXaeagScAguh94KKP0oiW P43mBkuFg2mM+5+bXz0U8EYfswt/zYkp/pKFajEwyXIWdeUICPmFJA+GKpBXeJPn CL8nJCnUpKNsy85+Z6MXYXIv6a0D0utocdsQzR8gjG2whNnv7EFeHa2hyagKfG5g ydOSG6tKlWHCOSFaTogmUVZVXEGsE1gUmJZMeoyZVI5jEl3b3KJSTxB7QHtMsm5q NOyZ+PdNJtyDC8n4T48t =MJj6 -----END PGP SIGNATURE-----

1 0

[Dovecot] Disk Encryption
by Simon Brereton 17 Oct '14

17 Oct '14

Hi As I understand it email headers need to be unencrypted (otherwise DKIM doesn't work). From the MUA to either Postfix, or Dovecot the connection is (or can/should be) secured with TLS/SSL. What I would like to know is if it is possible to encrypt the mailstore? Postfix is using Dovecot for delivery so it's only Dovecot that would need to encrypt/decrypt the mailstore. Is this possible? Is there a terrible reason to do it even if it is possible? I realise that from MTA to MTA there's no guarantee of encryption (and in fact it's very unlikely unless keys have been exchanged), but my primary goal is supplement the physical security of the mail store of mails we already have or have sent. Mostly just idle curiosity as to what has been done, or what could be done. What is worth doing is a separate thread entirely. Thanks. Simon

11 28

High memory usage
by Hanna Ruotsalainen 17 Oct '14

17 Oct '14

Hi I recently (about 2 weeks ago) moved over my users over to a new version of dovecot (2.0.9) and now the memory usage on the new server seems much higher than it was before. The new server is a CentOS 6 VM with 4 GB of RAM and 4 CPUs and according to top, it's used up all of the RAM and all of the Swap. Here's a sample of the output from top (sorted by allocated memory). top - 10:42:36 up 22 days, 21:57, 1 user, load average: 1.04, 1.40, 1.52 Tasks: 1643 total, 1 running, 1642 sleeping, 0 stopped, 0 zombie Cpu(s): 0.7%us, 0.7%sy, 0.0%ni, 93.3%id, 5.1%wa, 0.0%hi, 0.1%si, 0.0%st Mem: 3924432k total, 3779236k used, 145196k free, 23740k buffers Swap: 4063228k total, 3181164k used, 882064k free, 156420k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 16738 root 20 0 399m 182m 436 S 0.0 4.8 5:50.58 config 18790 dovenull 20 0 54528 11m 2036 S 0.0 0.3 0:00.05 imap-login 22277 dovenull 20 0 54528 11m 2156 S 0.0 0.3 0:00.04 imap-login 22796 dovenull 20 0 54528 11m 2140 S 0.0 0.3 0:00.03 imap-login 22749 dovenull 20 0 54528 11m 2148 S 0.0 0.3 0:00.03 imap-login 22825 dovenull 20 0 54528 11m 2156 S 0.0 0.3 0:00.03 imap-login This is with 1015 imap processes and 484 imap-login processes. The old version was 1.0.rc15 and running on a CentOS 4 box with 2GB of RAM. It was overloaded but the RAM usage wasn't maxed out like this one is (not much swap usage and a large amount of cached memory). Is this amount of memory usage normal? What could be causing it, if it isn't? Thanks for your help, Hanna Here is the output of dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 CentOS release 6.5 (Final) nfs auth_verbose = yes disable_plaintext_auth = no listen = * login_greeting = Ready. mail_debug = yes mail_location = maildir:/mail/%1Lu/%u:INDEX=/var/cache/dovecot/indexes/%1Lu/%u mail_plugins = " mail_log notify" maildir_very_dirty_syncs = yes mbox_lazy_writes = no namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap-pass.conf driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } protocols = imap pop3 service anvil { client_limit = 1250 } service auth { client_limit = 4300 user = root } service imap-login { process_limit = 600 service_count = 1 } service imap { process_limit = 1536 } service pop3-login { process_limit = 600 service_count = 1 } service pop3 { process_limit = 1536 } ssl_ca = </etc/pki/tls/certs/ca-bundle.crt ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap-user.conf driver = ldap } version_ignore = yes protocol imap { mail_max_userip_connections = 10 ssl_cert = </etc/pki/dovecot/certs/imap.ecuad.ca.pem ssl_key = </etc/pki/dovecot/private/imap.ecuad.ca.pem } protocol pop3 { pop3_uidl_format = %08Xv%08Xu ssl_cert = </etc/pki/dovecot/certs/pop.ecuad.ca.pem ssl_key = </etc/pki/dovecot/private/pop.ecuad.ca.pem } protocol lda { postmaster_address = _postmaster(a)example.com_ } -- Hanna Ruotsalainen Coordinator of Information Applications, IT Services | tel 604 844 3875 local 3875 emily carr university of art + design <http://www.ecuad.ca> | 1399 Johnston Street, Vancouver BC V6H 3R9

1 0

replicating (manage)sieve - no symlink on replica?
by Philipp 17 Oct '14

17 Oct '14

2.2.13/0.4.2, both from source-tarball, no fancy options. tcp-replication between two nodes and following plugin parameters (same on both sides, except the ip-addr) plugin { sieve_before = /home/ssfn/etc/dovecot/sieve.default sieve_global_dir = /home/ssfn/etc/dovecot sieve = ~/.dovecot.sieve sieve_dir = ~/.sieve sieve_extensions = +vnd.dovecot.duplicate sieve_duplicate_period = 6h mail_replica = tcp:10.66.50.15:9993 } mail_location = sdbox:/home/ssfn/var/mail/boxes/%n mail_home = /home/ssfn/var/mail/boxes/%n Testbed: user getting first email delivered, the subdir %n/.sieve/tmp is automatically created as expected. User logs into managesieve on node1 and uploads a script. The %n/.sieve/managesieve.sieve and the symlink .dovecot.sieve -> .sieve/managesieve.sieve is created as expected. One node2 (via replica) happens: automatically create %n/.sieve/tmp automatically create/sync %n/.sieve/managesieve.sieve just NOT the symlink .dovecot.sieve -> .sieve/managesieve.sieve Logfiles for lmtp,doveadm,dsync-local dont indicate an error why it could not create the link or such, to me it looks like it wouldnt even try. mail-syncing works flawlessly (for delivery, just read about the expunge .. hum.) I tried to force a full-resync via doveadm replicator afterwards, to no change on the matter. Any input? Log from node2 after the moment managesieve saves everything correctly on node1: Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: auth input: user=ssfntest Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: auth input: ssfntest Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: Added userdb setting: plugin/=yes Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: Effective uid=993, gid=993, home=/home/ssfn/var/mail/boxes/ssfntest Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/home/ssfn/var/mail/boxes/ssfntest:INDEX=/home/ssfn/var/mail/index/ssfntest:ALT=/home/ssfn/var/mail/alternate/ssfntest Sep 11 15:20:12 doveadm(10.66.30.15,ssfntest): Debug: fs: root=/home/ssfn/var/mail/boxes/ssfntest, index=/home/ssfn/var/mail/index/ssfntest, indexpvt=, control=, inbox=, alt=/home/ssfn/var/mail/alternate/ssfntest Sep 11 15:20:12 dsync-server(ssfntest): Debug: Namespace : Using permissions from /home/ssfn/var/mail/boxes/ssfntest: mode=0700 gid=default Sep 11 15:20:12 dsync-server(ssfntest): Debug: doveadm-sieve: Iterating Sieve mailbox attributes Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve: Pigeonhole version 0.4.2 initializing Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve-storage: using active sieve script path: /home/ssfn/var/mail/boxes/ssfntest/.dovecot.sieve Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve-storage: using sieve script storage directory: /home/ssfn/var/mail/boxes/ssfntest/.sieve Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve-storage: permission lookup failed from /home/ssfn/var/mail/boxes/ssfntest/.sieve Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve-storage: created storage directory /home/ssfn/var/mail/boxes/ssfntest/.sieve/tmp Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve-storage: relative path to sieve storage in active link: .sieve/ Sep 11 15:20:12 dsync-server(ssfntest): Debug: sieve: script file /home/ssfn/var/mail/boxes/ssfntest/.sieve/managesieve.sieve not found Sep 11 15:20:12 dsync-server(ssfntest): Debug: doveadm-sieve: Value missing for key `vendor/vendor.dovecot/pvt/server/sieve/files/managesieve' (last change: 1970-01-01 01:00:00) Sep 11 15:20:13 dsync-server(ssfntest): Debug: doveadm-sieve: Assigned value for key `vendor/vendor.dovecot/pvt/server/sieve/files/managesieve' FS tree node2 after that: [..boxes]# find ssfntest -ls|grep -v mailb 24442 4 drwx------ 4 ssfnimp dlagimp 4096 Sep 11 15:20 ssfntest 21048 4 drwx------ 3 ssfnimp dlagimp 4096 Sep 11 15:20 ssfntest/.sieve 21052 4 drwx------ 2 ssfnimp dlagimp 4096 Sep 11 15:20 ssfntest/.sieve/tmp 21056 4 -rw------- 1 ssfnimp dlagimp 69 Sep 11 15:20 ssfntest/.sieve/managesieve.sieve 21016 0 lrwxrwxrwx 1 ssfnimp dlagimp 38 Sep 11 15:05 ssfntest/dbox-alt-root -> /home/dlag/var/mail/alternate/ssfntest FS tree node1 "before": [..boxes]# find ssfntest -ls|grep -v mailb 1835841 4 drwx------ 4 ssfnimp ssfnimp 4096 Sep 11 15:20 ssfntest 1835861 0 lrwxrwxrwx 1 ssfnimp ssfnimp 24 Sep 11 15:05 ssfntest/.dovecot.sieve -> .sieve/managesieve.sieve 1835854 4 -rw------- 1 ssfnimp ssfnimp 8 Sep 11 15:05 ssfntest/dovecot-uidvalidity 1835856 4 drwx------ 3 ssfnimp ssfnimp 4096 Sep 11 15:20 ssfntest/.sieve 1835857 4 drwx------ 2 ssfnimp ssfnimp 4096 Sep 11 15:20 ssfntest/.sieve/tmp 1835860 4 -rw------- 1 ssfnimp ssfnimp 69 Sep 11 15:20 ssfntest/.sieve/managesieve.sieve 1835846 0 lrwxrwxrwx 1 ssfnimp ssfnimp 38 Sep 11 15:05 ssfntest/dbox-alt-root -> /home/ssfn/var/mail/alternate/ssfntest

3 2

Re: Unable to get virtual users set up with database auth
by Gedalya 17 Oct '14

17 Oct '14

When you reply, try to make sure you reply to the list (dovecot(a)dovecot.org) in Thunderbird you should have a Reply List button, or just use reply to all. btw I meant: the output of the 'dovecot -n' command, sorry :D OK so, first of all, lda doesn't do any passdb lookup at all, only userdb. It doesn't have any password to check. Just as a comment, your password query could just as well be: password_query = SELECT uPass as password FROM users WHERE uName = '%n' AND uDomain = '%d' auth_username_format = %Lu -- which I believe is set by default, would lowercase the username for you on the way in from the client, so if all your usernames are meant to be purely lowercase, there is no need to return these fields from the database. Set it explicitly just to be sure. You're using a somewhat old version, I'm not sure how it was back then. Either way, this shouldn't be affecting lda. Now, this seems to be wrong. mail_location = mbox:/var/spool/mail/%u:INBOX=/var/spool/mail/%u You probably want it more like: mbox:~/mail:INBOX=/var/spool/mail/%u The first value, ~/mail, will be a /mail directory under the 'home' directory set in your static userdb, and that's where mailboxes (folders) other than INBOX will be stored. It must be a directory, not a file! I'm a little confused about some of the other details in your log. Let's try to correct your mail_location first and see where that takes us. Also, under namespace, you might as well comment out the 'location = ' and 'prefix = ' lines, though I'm not sure it matters. On 10/16/2014 12:51 PM, Cliff Hayes wrote: > Here it is: > > [root@avalon dovecot]# dovecot -n output > # 2.0.9: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-431.29.2.el6.x86_64 x86_64 Scientific Linux release > 6.5 (Carbon) ext4 > auth_debug = yes > auth_debug_passwords = yes > auth_verbose = yes > auth_verbose_passwords = plain > first_valid_uid = 496 > mail_access_groups = mail > mail_debug = yes > mail_location = mbox:/var/spool/mail/%u:INBOX=/var/spool/mail/%u > mbox_write_locks = fcntl > namespace { > hidden = no > inbox = yes > list = yes > location = > prefix = > separator = . > subscriptions = yes > type = private > } > passdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > protocols = imap > ssl_ca = </etc/pki/dovecot/certs/intermediate.crt > ssl_cert = </etc/pki/dovecot/certs/avalon20140929.crt > ssl_key = </etc/pki/dovecot/private/avalon20140929.key > userdb { > args = uid=497 gid=12 home=/var/email/%u > driver = static > } > verbose_ssl = yes > protocol imap { > imap_id_log = * > } > > [root@avalon dovecot]# cat dovecot-sql.conf.ext > > driver = mysql > > default_pass_scheme = PLAIN > > connect = host=localhost dbname=email user=blah password=blah > > password_query = SELECT uName as user, uNameDomain as username, > uDomain as domain, uPass as password FROM users WHERE uName = '%n' AND > uDomain = '%d' > > > > > On 10/16/2014 11:24 AM, Gedalya wrote: >> On 10/16/2014 12:19 PM, Cliff Hayes wrote: >>> well i don't want to use system users. but how do I assign a UID and >>> GID to virtual users to eliminate the permissions errors? >>> >> For dovecot, it is like this: >> http://wiki2.dovecot.org/AuthDatabase/SQL#User_database_lookups >> >> I don't know if this would be OK with your sendmail side. >> >> You should really post your complete dovecot config (dovecot -n output + >> any ".ext" files) so that we can get a better picture. >>

2 1

ssd for /home
by Luciano Gabriel Andino 16 Oct '14

16 Oct '14

Hi, I am thinking to change sata disk for /home and I want to know if change to a SSD hd, is a good option. I have 30-40 accounts with 30-50K email in boxes. -- Saludos!! Luciano Andino GNU/Linux user #185103 Santa Fe - Argentina -----------------------------------------------

4 3

dsync duplicating identical messages
by Bruno Viaris 16 Oct '14

16 Oct '14

Dear list, I’m trying to setup dovecot/postfix/getmail for a single user application: I have 3 email accounts and 2 main computers (home and work). I want to have an imap server on each machine with sync/replication so that read/reply/delete status and sorting into folders are identical. This part is achieved via dsync and seems to work. Messages are fetched from my ISPs with getmail on both machines. The problem I have is that dsync does not see that a message already fetched on both sides is identical, and duplicates it. I use sdbox (because I like the compression option and the separate storage of attachments). The content of the messages (headers and body) are identical, but the sdbox files have differences in the header and/or trailer. In fact, for each incoming message, I get 4 slightly different files (2 on each machine). Do you know where I could find documentation on how dsync compares messages, and also on sdbox file format ? If you explain me that there is no way to prevent this duplication and that anyway dsync does the right thing, I will probably use getmail only on one machine and let dsync propagate the messages to the other site, but I will miss the redundancy (and some speed) of my wished setup... Thanks -- Bruno P.S. : Background: Home has DSL with 10 MBit/s down and 1 MBit/s up, and full control over NAT / firewall Work internet access is limited by the 100 MBit LAN and has strict firewall and complicated VPN. So it is not easy for my home email client to access the imap server of my work machine, and it is slow for my work email client to access my home imap server. I don’t trust any company for archiving my emails.

2 1

Re: Unable to get virtual users set up with database auth
by Gedalya 16 Oct '14

16 Oct '14

On 10/16/2014 12:19 PM, Cliff Hayes wrote: > well i don't want to use system users. but how do I assign a UID and > GID to virtual users to eliminate the permissions errors? > For dovecot, it is like this: http://wiki2.dovecot.org/AuthDatabase/SQL#User_database_lookups I don't know if this would be OK with your sendmail side. You should really post your complete dovecot config (dovecot -n output + any ".ext" files) so that we can get a better picture.

1 0

Unable to get virtual users set up with database auth
by Cliff Hayes 16 Oct '14

16 Oct '14

I can't seem to get imap virtual users to work with database authentication on new Scientific Linux 6.5 server with Sendmail 8.14.4 & Dovecot 2.0.9 Apparently I have to also create system users because sendmail/procmail/dovecot want to check directory ownership. So I created a database, made entry for the user, created the user chayes on the system. But %u always contains just chayes instead of chayes(a)domain.tld even though I tried different select statements to put the entire username in the username field. This causes the following errors: Oct 16 00:10:26 avalon sendmail[2536]: s9G5APo9002535: forward /var/spool/mail/chayes(a)domain.tld/chayes/.forward.avalon: Group writable directory Oct 16 00:10:26 avalon sendmail[2536]: s9G5APo9002535: forward /var/spool/mail/chayes(a)domain.tld/chayes/.forward: Group writable directory Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Effective uid=497, gid=497, home=/var/spool/mail/chayes(a)domain.tld/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Home dir not found: /var/spool/mail/chayes(a)domain.tld/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/var/spool/mail/chayes:INBOX=/var/spool/mail/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: fs: root=/var/spool/mail/chayes, index=, control=, inbox=/var/spool/mail/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Error: user chayes: Initialization failed: Namespace '': mbox: mbox root directory can't be a file: /var/spool/mail/chayes (http://wiki.dovecot.org/MailLocation/Mbox) Oct 16 00:10:26 avalon dovecot: lda(chayes): Fatal: Invalid user settings. Refer to server log for more information. protocols = imap mail_location = mbox:/var/spool/mail/%u:INBOX=/var/spool/mail/%u password_query = SELECT uNameDomain as username, uDomain as domain, uPass as password FROM users WHERE uName = '%n' AND uDomain = '%d' also tried password_query = SELECT uName as username, uDomain as domain, uPass as password FROM users WHERE uName = '%n' AND uDomain = '%d' # file: /etc/procmailrc # system-wide settings for procmail SHELL="/bin/bash" SENDMAIL="/usr/sbin/sendmail -oi -t" LOGFILE="/var/log/procmail.log" DROPPRIVS=yes DELIVER="/usr/libexec/dovecot/deliver" #MAILDIR=$HOME/ #DEFAULT=$HOME/ :0 w * ^X-Spam-Status: Yes | $DELIVER -m spam :0 w | $DELIVER Thanks in advance

3 4

Unable to get virtual users set up with database auth
by Cliff Hayes 16 Oct '14

16 Oct '14

I can't seem to get imap virtual users to work with database authentication on new Scientific Linux 6.5 server with Sendmail 8.14.4 & Dovecot 2.0.9 Apparently I have to also create system users because sendmail/procmail/dovecot want to check directory ownership. So I created a database, made entry for the user, created the user chayes on the system. But %u always contains just chayes instead of chayes(a)domain.tld even though I tried different select statements to put the entire username in the username field. This causes the following errors: Oct 16 00:10:26 avalon sendmail[2536]: s9G5APo9002535: forward /var/spool/mail/chayes(a)domain.tld/chayes/.forward.avalon: Group writable directory Oct 16 00:10:26 avalon sendmail[2536]: s9G5APo9002535: forward /var/spool/mail/chayes(a)domain.tld/chayes/.forward: Group writable directory Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Effective uid=497, gid=497, home=/var/spool/mail/chayes(a)domain.tld/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Home dir not found: /var/spool/mail/chayes(a)domain.tld/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/var/spool/mail/chayes:INBOX=/var/spool/mail/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Debug: fs: root=/var/spool/mail/chayes, index=, control=, inbox=/var/spool/mail/chayes Oct 16 00:10:26 avalon dovecot: lda(chayes): Error: user chayes: Initialization failed: Namespace '': mbox: mbox root directory can't be a file: /var/spool/mail/chayes (http://wiki.dovecot.org/MailLocation/Mbox) Oct 16 00:10:26 avalon dovecot: lda(chayes): Fatal: Invalid user settings. Refer to server log for more information. protocols = imap mail_location = mbox:/var/spool/mail/%u:INBOX=/var/spool/mail/%u password_query = SELECT uNameDomain as username, uDomain as domain, uPass as password FROM users WHERE uName = '%n' AND uDomain = '%d' also tried password_query = SELECT uName as username, uDomain as domain, uPass as password FROM users WHERE uName = '%n' AND uDomain = '%d' # file: /etc/procmailrc # system-wide settings for procmail SHELL="/bin/bash" SENDMAIL="/usr/sbin/sendmail -oi -t" LOGFILE="/var/log/procmail.log" DROPPRIVS=yes DELIVER="/usr/libexec/dovecot/deliver" #MAILDIR=$HOME/ #DEFAULT=$HOME/ :0 w * ^X-Spam-Status: Yes | $DELIVER -m spam :0 w | $DELIVER Thanks in advance

1 0

[Dovecot/VirtualUsers/VirtualMailBoxes] No mails into mua
by aleskandro 16 Oct '14

16 Oct '14

Hi all, I've configured postfix with multiple host and virtual mailboxes (main.cf is here: http://pastebin.com/798VVxbv) So I can receive email to vuser(a)mydomain.tld into /var/mail/vhosts/mydomain.tld/vuser file. Now I'm configuring dovecot 2.2.13-r1; this is my dovecot -n and /etc/dovecot/passwddir/mydomain.tld/passwd: http://pastebin.com/b4xcjj7t - The auth and server subscribe from a mua is ok and in the vuser file there are some mails but I can't see them in my mua. mail.log doesn't report any error. Where I'm wrong? Aleskandro

2 1

Strange quota warning behavior
by Gordon Grubert 16 Oct '14

16 Oct '14

Hi, we are using dovecot 2.2.14. So far, we used the following quota warning configuration quota_rule = *:storage=10G quota_warning = storage=90%% quota-warning 90 %n quota_warning2 = storage=80%% quota-warning 80 %n quota_warning3 = storage=70%% quota-warning 70 %n This works fine. Now, we wanted to add the all clear feature for the quota warning by adding this line: quota_warning4 = -storage=70%% quota-warning 70 %n below The result is really strange. Test 1: 70% exceeded: warning3 executed => OK fall below 70%: quota_warning2 executed => NOT OK quota_warning4 executed => OK Test 2: 70% exceeded: warning3 executed => OK 80% exceeded: warning2 executed => OK fall below 80% (but still more than 70%): quota_warning executed => NOT OK fall below 70%: quota_warning2 executed => NOT OK quota_warning4 executed => OK At the moment, we are running the minimal configuration quota_warning = storage=70%% quota-warning 70 %n quota_warning2 = -storage=70%% quota-warning 70 %n below working like expected (warning when exceeding 70% and all clear when falling below 70%). Does anybody know if there is an error in our configuration or maybe, could this be a bug in dovecot? Best regards, Gordon -- Technischer Leiter & stellv. Direktor Universitätsrechenzentrum (URZ) E.-M.-Arndt-Universität Greifswald Felix-Hausdorff-Str. 12 17489 Greifswald Germany Tel. +49 3834 86 1456 Fax. +49 3834 86 1401

1 0

index problem with only 1 folder of 1 box
by Guillaume 16 Oct '14

16 Oct '14

Hello, First of all, sorry for my poor english level. I pass to solr indexing. All is OK, except for the inbox of one of the mailboxes. For this inbox (other folders of the same mailbox have no problems), when i do text search, there is always no response. Others mailboxes have no problems. If i do a : "doveadm -Dv fts rescan -u mybox(a)domain.tld", i can do one and only one search with the correct response. It index the folder, take a few seconds and give me the good answer. If i redo the same search, it's extremly quick with no answers. It's like a cache problem but i don't know where and why... Logs are not very verbose... Here is an example of command line search : ---------------------------------------- $ nc 127.0.0.1 143 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Bienvenue sur le serveur IMAP de Domain.tld 10 LOGIN "mybox(a)domain.tld" "MyBigSecret" 10 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY QUOTA] Logged in 20 SELECT INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft unknown-2 unknown-9 unknown-0 unknown-10 unknown-1 unknown-4 $MDNSent unknown-3 unknown-8 $Forwarded NonJunk) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft unknown-2 unknown-9 unknown-0 unknown-10 unknown-1 unknown-4 $MDNSent unknown-3 unknown-8 $Forwarded NonJunk \*)] Flags permitted. * 8437 EXISTS * 0 RECENT * OK [UIDVALIDITY 1412669180] UIDs valid * OK [UIDNEXT 8439] Predicted next UID * OK [HIGHESTMODSEQ 20] Highest 20 OK [READ-WRITE] Select completed (0.000 secs). 30 SEARCH text "coucou" * OK Indexed 14% of the mailbox, ETA 0:57 * OK Indexed 29% of the mailbox, ETA 0:47 * OK Indexed 72% of the mailbox, ETA 0:11 * OK Mailbox indexing finished * SEARCH 35 108 153 175 176 182 348 357 360 431 472 479 520 574 575 576 577 578 586 949 984 1025 1032 1033 1034 1087 1099 1129 1284 1313 1314 1315 1366 1372 1465 1538 1711 1726 1758 1759 1969 1981 1983 1984 2036 2077 2104 2116 2162 2181 2193 2437 2504 2587 2663 2808 2809 2854 2861 2862 3076 3087 3088 3137 3188 3189 3190 3191 3192 3193 3196 3197 3250 3251 3252 3327 3328 3329 3330 3331 3332 3379 3464 3481 3494 3521 3528 3582 3589 3593 3596 3651 3667 3672 3695 3787 3789 3939 3940 3941 3942 3943 3944 3945 3946 4019 4020 4034 4043 4134 4146 4175 4241 4346 4379 4422 4490 4491 4537 4540 4542 4543 4544 4550 4627 4727 4742 4767 4790 4817 4828 4831 4839 4862 4888 4899 4901 4906 4911 4916 4957 4999 5003 5004 5008 5009 5010 5011 5012 5013 5039 5062 5081 5092 5119 5138 5145 5150 5152 5185 5186 5187 5216 5246 5247 5282 5283 5314 5316 5320 5322 5325 5337 5353 5360 5363 5385 5432 5447 5472 5485 5496 5498 5500 5528 5551 5564 5567 5595 5598 5642 5794 5841 5896 5933 5960 5961 5994 6001 6005 6016 6017 6051 6075 6125 6152 6163 6215 6238 6239 6240 6241 6287 6311 6342 6350 6353 6357 6369 6431 6472 6689 6928 6945 6951 7026 7030 7045 7046 7115 7210 7212 7214 7230 7256 7295 7298 7340 7489 7490 7492 7654 7655 7658 7660 7676 7767 7768 7800 7801 7913 7937 7956 8075 8085 8102 8111 8144 8266 8329 8333 8394 8395 8431 30 OK Search completed (36.029 secs). 40 SEARCH text "coucou" * SEARCH 40 OK Search completed (0.002 secs). 50 SEARCH text "blabla" * SEARCH 50 OK Search completed (0.002 secs). 60 LOGOUT * BYE Logging out 60 OK Logout completed. ---------------------------------------- To close this question, here is dovecot -n: ---------------------------------------- # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-36-generic x86_64 Ubuntu 14.04.1 LTS ext4 auth_mechanisms = plain login debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no first_valid_uid = 5000 hostname = mailserver.domain.tld info_log_path = /var/log/dovecot-info.log last_valid_uid = 5000 lda_mailbox_autocreate = yes lda_original_recipient_header = X-Original-To listen = * log_path = /var/log/dovecot-err.log login_greeting = Bienvenue sur le serveur IMAP de Domain.tld mail_debug = yes mail_gid = 5000 mail_location = maildir:/data/mails/%d/%n mail_plugins = " quota fts fts_solr" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = solr fts_autoindex = yes fts_solr = break-imap-search url=http://localhost:8080/solr/ quota = maildir:User quota sieve = /home/vmail/managesieve/.%n(a)%d.sieve sieve_dir = /home/vmail/managesieve/%d/%n sieve_global_dir = /home/vmail/sieve/ } postmaster_address = postmaster(a)domain.tld protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = root mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </data/certificats/web/domain.tld/ca.pem ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " quota fts fts_solr sieve" } protocol imap { mail_plugins = " quota fts fts_solr imap_quota" } ------------------------------- By the way, i try to clean solr cache with an : echo 1 > /proc/sys/vm/drop_caches and a restart of the server, but there is always the same problem... Does anyone have an idea to explore? sincerly yours, Guillaume

2 4

Re: doveadm-move(1)
by Joseph Tam 16 Oct '14

16 Oct '14

Pascal Volk writes: >> EXAMPLE >> Move janes messages - received in September 2011 - from her >> INBOX into her archive. >> >> doveadm move -u jane Archive/2011/09 mailbox >> 2011-10-01 SINCE 01-Sep-2011 >> >> [Is this a typo: "2011-10-01" should be "INBOX"?] >> ? > > Where did you find this example? Cut&pasted off the terminal man page output. Looking into man1/doveadm-move.1, I see .B doveadm move \-u jane Archive/2011/09 mailbox INBOX BEFORE \(rs .B 2011-10-01 SINCE 01-Sep-2011 so it's a problem with my nroff, not dovecot's man pages. (Hmm, it happens with groff too -- it appears to be some sort of line length bug.) > Also http://wiki2.dovecot.org/Tools/Doveadm/Move#section_example > shows the correct example. Yes, this makes much more sense. Joseph Tam <jtam.home(a)gmail.com>

2 1

pop3-login segfaulting
by James Shewey 16 Oct '14

16 Oct '14

I upgraded dovecot from v1 to v2 as part of a CentOS upgrade (5.6->6.5) and am now running on 2.0.9. Any time I connect to the pop or imap ports however I get "master: Error: service(imap-login): child 2860 killed with signal 11 (core not dumped - add -D parameter to service imap-login { executable }" after following the core dump instructions at http://www.dovecot.org/bugreport.html. The problem is that I'm not sure how these processes are spawned in order to add the switch. Can I spawn them directly? If so, I ought to be able to do an strace to track down the issue as well. Regards, James Shewey NOC Systems Administrator I Product Support Engineering [Description: Panasonic Avionics] Panasonic Avionics Corporation Phone: +1 (949) 672-2000 Direct: +1 (949) 595-5187

2 2

Permissions problem on new installation
by Cliff Hayes 15 Oct '14

15 Oct '14

I am setting up a new mail server using imap only on Scientific Linux 6.5 and dovecot 2.0.9. How do I fix this problem? I keep getting these errors regardless of permissions ... even up to 777. Oct 15 13:56:01 avalon dovecot: imap(chayes(a)domain.tld): Error: opendir(/var/email/chayes(a)domain.tld/Maildir) failed: Permission denied (euid=497(chayes) egid=12(mail) missing +r perm: /var/email/chayes(a)domain.tld/Maildir, euid is not dir owner) Oct 15 13:56:01 avalon dovecot: imap(chayes(a)domain.tld): Error: opendir(/var/email/chayes(a)domain.tld/Maildir) failed: Permission denied (euid=497(chayes) egid=12(mail) missing +r perm: /var/email/chayes(a)domain.tld/Maildir, euid is not dir owner) Oct 15 13:56:01 avalon dovecot: imap(chayes(a)domain.tld): Error: opendir(/var/email/chayes(a)domain.tld/Maildir/new) failed: Permission denied (euid=497(chayes) egid=12(mail) missing +r perm: /var/email/chayes(a)domain.tld/Maildir/new, euid is not dir owner) Oct 15 13:56:07 avalon dovecot: imap(chayes(a)domain.tld): Error: opendir(/var/email/chayes(a)domain.tld/Maildir/new) failed: Permission denied (euid=497(chayes) egid=12(mail) missing +r perm: /var/email/chayes(a)domain.tld/Maildir/new, euid is not dir owner) Yet when i check, chayes is directory owner as follows (currently showing 760 but I've tried everything): drwx------. 3 chayes mail 4096 Oct 15 12:56 chayes(a)domain.tld drwxrwx---. 6 chayes mail 4096 Oct 15 13:55 Maildir drwxrw----. 2 chayes mail 4096 Oct 15 12:56 cur -rw-------. 1 chayes mail 104 Oct 15 12:56 dovecot.index.log -rw-------. 1 chayes mail 0 Oct 15 12:56 dovecot.mailbox.log -rw-------. 1 chayes mail 51 Oct 15 12:56 dovecot-uidlist drwxrw----. 2 chayes mail 4096 Oct 15 12:56 new -rw-------. 1 chayes mail 6 Oct 15 12:56 subscriptions drwxrw----. 2 chayes mail 4096 Oct 15 12:56 tmp dovecot config: protocols = imap mail_access_groups=mail mail_location = maildir:~/Maildir Thanks in advance.

1 1

Re: delete/archive old mail
by Joseph Tam 15 Oct '14

15 Oct '14

"F." <sottilette(a)rfx.it> writes: >>> doveadm-altmove seems interesting, but in the man page it is reported >>> only work with dbox (dbox-only), and my inboxes are in mbox format. >>> >>> Any other advice? > > As I originally wrote, my need is script or a command like the old > Expire_mail.pl that parse a local mbox folder and move/copy mail older > than NN days to another local mbox folder. > Probably for a Perl programmer is only matter of modify this script or > something similar. > I searched in docs, wiki, ... but not noticied something that can simply > be inserted in a cron job to do the work. > > Only migration tools or complex (for me), library that can be used to > manipulate folders :-) I don't understand how you could have found doveadm-altmove, but miss doveadm-move -- doesn't this dovecot command do exactly what you want? $ man doveadm-move NAME doveadm-move - Move messages matching the given search query into another mailbox ... EXAMPLE Move janes messages - received in September 2011 - from her INBOX into her archive. doveadm move -u jane Archive/2011/09 mailbox 2011-10-01 SINCE 01-Sep-2011 [Is this a typo: "2011-10-01" should be "INBOX"?] The example is fairly close to what you want. Apart from the obvious change to user and mailbox name, the condition would be "savedbefore ${NN}d". You might have to follow this up with an expunge if this operation does not do that. Joseph Tam <jtam.home(a)gmail.com>

2 1

mmap_disable=yes not honored always
by Peter Benko 15 Oct '14

15 Oct '14

Hi all, I'm experimenting with having the mail store on a 9p file system that lacks mmap() functionality. So I disabled it in dovecot: mmap_disable = yes However, I keep getting the following error messages in my log: Oct 15 16:55:00 computer-name dovecot: imap user(a)domain.com[192.168.1.3] Error: mmap() failed with file /mail/mailboxes/domain.com/user/indexpvt-accounts/other-user/mailboxes/INBOX/dovecot.index.pvt.log: Invalid argument I only get those messages for the shared folder's private indexes. This setup works perfectly on an ext2/3/4 fs. Any opinions, is this a bug? Is mmap_disable not mandatory for all operations? Best regards, Peter

1 0

Request to list owner
by Jorge Bastos 15 Oct '14

15 Oct '14

Hi list owner, Sorry for this. Is it possible to change the reply-to in mailman to be the list, and not the person who replied? Also the [Dovecot] on the subject would be handy. Just two things to get better. Thanks,

10 15

permissions when moving mails
by Alexander 'Leo' Bergolth 15 Oct '14

15 Oct '14

Hi! I am using Unix groups to control access to shared mailboxes. This works fine as long as files are not moved between mailboxes that are owned by different groups. The move operation doesn't change group ownership of the mail. Is there a way to force dovecot to e.g. inherit the ownership from the parent folder, not only for new messages bot also for messages moved from one folder to another? The wiki says: http://wiki2.dovecot.org/SharedMailboxes/Permissions -------------------- 8< -------------------- When mails are copied between Maildirs, it's usually done by hard linking. If the source and destination directory permissions are different, Dovecot create a new file and copies data the slow way so that it can assign the wanted destination permissions. The source and destination permission lookups are done only by looking at the mailbox root directories' permissions, not individual mail files. This may become a problem if the mail files' permissions aren't as Dovecot expects. -------------------- 8< -------------------- Does dovecot only look at the permissions or does it also take user/group ownership into account? The behavior I experience is that even though the mailbox directories are owned by different groups, dovecot doesn't copy the mails. (See my example below.) Setting maildir_copy_with_hardlinks = no seems to fix the problem but maybe this behavior should be considered as a bug? I am using dovecot 2.2.14 and maildir mailboxes. Cheers, --leo P.S.: Here is an example of the current behavior: before the move from PAS to GSD: -------------------- 8< -------------------- GSD/.Eingang/cur/: total 0 drwxrws--- 2 nobody gsd 6 Oct 13 13:46 . drwxrws--- 5 nobody gsd 81 Oct 15 09:41 .. PAS/.Eingang/cur/: total 4 drwxrws--- 2 nobody pas 89 Oct 15 09:39 . drwxrws--- 5 nobody pas 79 Oct 15 09:39 .. -rw-rw-r-- 1 nobody pas 4073 Jul 8 08:14 1404967500.M656935P20690.samba.intern.rk-klosterneuburg.at,S=4073,W=4213:2,S -------------------- 8< -------------------- after the move: -------------------- 8< -------------------- GSD/.Eingang/cur/: total 4 drwxrws--- 2 nobody gsd 87 Oct 15 09:42 . drwxrws--- 5 nobody gsd 81 Oct 15 09:42 .. -rw-rw-r-- 1 nobody pas 4073 Jul 8 08:14 1413358925.M22574P3008.samba.intern.rk-klosterneuburg.at,S=4073,W=4213:2,S PAS/.Eingang/cur/: total 0 drwxrws--- 2 nobody pas 6 Oct 15 09:42 . drwxrws--- 5 nobody pas 79 Oct 15 09:42 .. -------------------- 8< -------------------- Mailbox directories are: -------------------- 8< -------------------- drwxrws--- 4 nobody pas 143 Nov 25 2013 PAS drwxrws--- 5 nobody pas 79 Oct 15 09:57 PAS/.Eingang drwxrws--- 10 nobody gsd 4096 Dec 11 2013 GSD drwxrws--- 5 nobody gsd 81 Oct 15 09:42 GSD/.Eingang -------------------- 8< -------------------- (In my own litte world, the mail should now be owned by the gsd group.. :-)) -- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria

1 0

Dbox and Exim
by C Peters 15 Oct '14

15 Oct '14

The Dovecot wiki [1] doesn't list either Exim, Postfix or anything else as supporting the dbox. I did some searching in the Exim archives and have found only one message mentioning dbox, sdbox or mdbox. [2] I think an RFC would go a long way towards getting the format supported. Has Timo, or anyone else, considered submitting an RFC to the IETF? My question was how are we going to use it if Exim doesn't support it. It looks like we can filter it and convert it with dovecot-lda. [3] I have generally avoided using Procmail for a few years because of various problems and it's a dead software project that hasn't been developed in what 15 to 20 years. I am thinking about trying it with Exim's built in Maildrop filtering support. Has anybody tried that? What else are people using to enable dbox? The more specific question on the problem I am trying to solve. I have been using mbox for years, and I can't even get Dovecot, IMAP and Thunderbird working on the LAN because it can't handle the GB's of old mail. Mutt works on the local machine, but I want something that works while I am using something other than ssh and mutt. For example I want to try Mailpile and K9. I would like to try dbox, but given it's lack of support in Exim or Postfix, I'll probably convert to maildir. Thanks, Chuck 1. http://wiki2.dovecot.org/MailboxFormat 1. https://lists.exim.org/lurker/message/20110220.014144.87010abd.en.html Thread view: https://lists.exim.org/lurker/thread/20110216.223226.015539ba.en.html#i2011… 2. http://ramblings.narrabilis.com/mdboxprocmail

7 9

Proxy problem: "[COMPRESSIONACTIVE] TLS compression already enabled"
by Ralf Hildebrandt 15 Oct '14

15 Oct '14

We're proxying using 2.2.14~rc1 (on our IMAP Proxy) to two dovecot backend servers running dovecot-2.2.13-r1 When we're using Thundebird to connect to the dovecot proxy, we're getting the message "The mail server for account ACCOUNTNAME responded: [COMPRESSIONACTIVE] TLS compression already enabled" But why? Capabilities reported by the proxy: . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY COMPRESS=DEFLATE QUOTA] Logged in Capabilities of the backend servers when connecting directly: . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY COMPRESS=DEFLATE QUOTA] Logged in -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 5

bandwidth shaping
by Alan Bailward 14 Oct '14

14 Oct '14

Hey all, sorry if this has been asked before, but I haven’t really found a good solution. I have a mac at home and randomly, maybe once a week or once a month, Mail.app will go crazy and use as much bandwidth as I have to pull down mail. I’m not home so I can’t tell what it’s done or why, and sometimes it stops after an hour, sometimes it goes all night, leaving me with a potentially big bandwidth bill for my colo’d server which hosts my mail (dovecot 1.2.9, postfix 2.7.0 on Ubuntu LTS 10.04). I’m wondering if there’s a way to restrict bandwidth that’s the “accepted” and proper way with dovecot? There isn’t anything (AFAICT) built into dovecot, and the alternative seems to be setting up bandwidth shaping with ‘ip’, but that is a pretty horrible nest of ugliness. Is there a fairly simple setup to set it so imap/pop traffic can only ever use 1mb/s (or some arbitrary number)? I’m not looking for a one liner, but each time this happens I say “I’m going to figure this out and fix this”, then get lost in ip and shaping queues and give up in frustration until the next time it happens, when I say “I’m *really* going to figure this out this time…”. Anyone have any pointers? TIA Alan

2 1

auth-worker goes wild
by Hans Morten Kind 14 Oct '14

14 Oct '14

dovecot-2.2.13 running on Solaris-10, app 5000 concurrent connections, and a pretty standard config where passdb is set up with driver = pam. We have had some situations where an auth-worker gets into a loop, the load on the server rises and the auth-master seems blocked untill finally no new imap nor pop session are accepted. A 'doveadm reload' restores normal operations. With debug logging enabled we are observing this: auth: Debug: pam(,10.10.30.33,<7WMu3UkEGQCBsR4h>): cache miss auth-worker(24556): Debug: pam(,10.10.30.33): lookup service=dovecot auth-worker(24556): Debug: pam(,10.10.30.33): #1/1 style=2 msg=Please enter user name: ... auth-worker(24556): Debug: pam(,10.10.30.33): #1/1 style=2 msg=Please enter user name: etc etc After some time dovecot only logs Warning: Auth process not responding, delayed sending initial response (greeting) Disconnected: Auth process broken (disconnected before auth was ready, waited 26 secs) 'truss -wall -aep PID' on the looping auth-worker shows the loop: 0.0757 write(2, 0x080AE0C0, 71) = 71 0101 2 4 5 5 6 p a m ( , 1 0 . 1 0 . 3 0 . 3 3 ) : # 1 / 1 s t y l e = 2 m s g = P l e a s e e n t e r u s e r n a m e : \n 0.0826 write(2, 0x080AE0C0, 71) = 71 0101 2 4 5 5 6 p a m ( , 1 0 . 1 0 . 3 0 . 3 3 ) : # 1 / 1 s t y l e = 2 m s g = P l e a s e e n t e r u s e r n a m e : \n The host at 10.10.30.33 is running RoundCube for app 1000 concurrent users. This problem started after we provided our users RoundCube, and every time we end up in this stuck situation, it is the RoundCube-server making the connections where the username has zero length. I am unable to reproduce how RoundCube puts dovecot into this mess. With the enclosed patch installed, the loop terminates and normal operation are restored immediately: auth: Debug: pam(,10.10.30.33,<Q8kV6AEFYwCBsR4h>): cache miss auth-worker(18658): Debug: pam(,10.10.30.33): lookup service=dovecot auth-worker(18658): Debug: pam(,10.10.30.33): #1/1 style=2 msg=Please enter user name: auth-worker(18658): Fatal: NO USER? auth-worker(18658): Error: Raw backtrace: 0xfef0798c -> 0xfef06d3b -> 0x807ca6e -> 0xfecc460e -> 0xfecc1d1e -> 0xfe3c0af4 -> 0xfecc2608 -> 0xfecc27f1 -> 0x807cc5e -> 0x807d162 -> 0x807d310 -> 0x8069ca1 -> 0x806ab72 -> 0x806aeec -> 0xfef1e866 -> 0xfef2001c -> 0xfef1e9ff -> 0xfef1e956 -> 0xfeeb0172 -> 0x8071bf2 -> 0x805a650 auth: Error: auth worker: Aborted PASSV request for : Worker process died unexpectedly I think however, that the pam driver should not have been initiated when the username has zero length, definitely there is nobody around to answer the prompt for a username ... hmk

2 2

Doveadm quota recalc sets quota for wrong quota root
by Rick van den Hof 14 Oct '14

14 Oct '14

Hi, In our setup, we use two quota roots. One for user quota and one for domain quota. If a user has no quota, then the domain quota is applied. For a user with user quota this is how it looks: # doveadm quota get -u test(a)shellz.nl Quota name Type Value Limit % Domain quota STORAGE 1439155 2560000 56 Domain quota MESSAGE 21257 - 0 User quota STORAGE 0 102400 0 User quota MESSAGE 0 - 0 In this case, the whole domain contains 21257 messages but the account itself contains 0. For a user with only domain quota, this is how it looks: # doveadm quota get -u rick(a)shellz.nl Quota name Type Value Limit % Domain quota STORAGE 1439155 2560000 56 Domain quota MESSAGE 21257 - 0 User quota STORAGE 693299 - 0 User quota MESSAGE 12876 - 0 So far so good. My account contains 12876 messages. Now I've sent a message containing a 1mb.bin as attachment to test(a)shellz.nl: # doveadm quota get -u test(a)shellz.nl Quota name Type Value Limit % Domain quota STORAGE 1440540 2560000 56 Domain quota MESSAGE 21258 - 0 User quota STORAGE 1384 102400 1 User quota MESSAGE 1 - 0 Seems to be fine, the message on disk is indeed 1.4MB and this has been added to both domain and user quota. Now see what happens when I run the following command: # doveadm quota recalc -u test(a)shellz.nl # doveadm quota get -u test(a)shellz.nl Quota name Type Value Limit % Domain quota STORAGE 1384 2560000 0 Domain quota MESSAGE 1 - 0 User quota STORAGE 1384 102400 1 User quota MESSAGE 1 - 0 The recalc action has updated the domain usage to reflect the specific user's usage (my 12876 messages are no longer counted). We log domain usage (usage_domain) in a seperate table from mailbox usage (usage_mailbox). These are the queries that set the usage: 256 Query BEGIN 256 Query DELETE FROM usage_domain WHERE domain = 'shellz.nl' 256 Query DELETE FROM usage_domain WHERE domain = 'shellz.nl' 256 Query INSERT INTO usage_domain (bytes,domain) VALUES ('1418118','shellz.nl') ON DUPLICATE KEY UPDATE bytes='1418118' 256 Query INSERT INTO usage_domain (messages,domain) VALUES ('1','shellz.nl') ON DUPLICATE KEY UPDATE messages='1' 256 Query COMMIT 257 Query BEGIN 257 Query DELETE FROM usage_mailbox WHERE userdomain = 'test(a)shellz.nl' 257 Query DELETE FROM usage_mailbox WHERE userdomain = 'test(a)shellz.nl' 257 Query INSERT INTO usage_mailbox (bytes,userdomain) VALUES ('1418118','test(a)shellz.nl') ON DUPLICATE KEY UPDATE bytes='1418118' 257 Query INSERT INTO usage_mailbox (messages,userdomain) VALUES ('1','test(a)shellz.nl') ON DUPLICATE KEY UPDATE messages='1' 257 Query COMMIT How do I prevent this from happening? It should only update the usage_mailbox table when I run the recalc command. Could this be because we use seperate tables for domain and user usage? dovecot -n: # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-37-generic x86_64 Ubuntu 14.04.1 LTS auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890+=_.-@& dict { expire = mysql:/etc/dovecot/dovecot-sql-expire.conf quotadomaindict = mysql:/etc/dovecot/dovecot-sql-quota-domain.conf quotauserdict = mysql:/etc/dovecot/dovecot-sql-quota-user.conf } disable_plaintext_auth = no listen = *,[::] mail_fsync = never mail_location = maildir:~/Maildir mail_plugins = quota expire managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql-user.conf driver = sql } plugin { expire = Trash expire2 = Spam expire_dict = proxy::expire mail_log_events = delete copy save expunge mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:Domain quota:%d:proxy::quotadomaindict quota_rule2 = Trash:ignore quota_warning = storage=99%% doquotawarning 99 %u quota_warning2 = storage=95%% doquotawarning 95 %u quota_warning3 = storage=75%% doquotawarning 75 %u quota2 = dict:User quota::proxy::quotauserdict quota2_rule2 = Trash:ignore quota2_warning = storage=99%% doquotawarning 99 %u quota2_warning2 = storage=95%% doquotawarning 95 %u quota2_warning3 = storage=75%% doquotawarning 75 %u } protocols = imap pop3 service auth-worker { unix_listener auth-worker { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service doquotawarning { executable = script /usr/bin/doquotawarning.py unix_listener doquotawarning { user = vmail } user = vmail } service imap-login { chroot = process_limit = 200 process_min_avail = 2 } service imap { executable = imap postlogin } service managesieve-login { chroot = } service pop3-login { chroot = process_limit = 50 process_min_avail = 2 } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login /usr/local/postfixint/dolastlogin.py user = $default_internal_user } ssl_cert = </etc/ssl/certs/wild.totaal.net/wild.totaal.net.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/certs/wild.totaal.net/wild.totaal.net.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql-user.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep imap_logout_format = bytes=%i/%o mail_max_userip_connections = 50 mail_plugins = quota imap_quota mail_log notify expire } protocol pop3 { mail_max_userip_connections = 50 mail_plugins = quota expire pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = %f } protocol lda { deliver_log_format = msgid=%m: %$ mail_fsync = optimized mail_plugins = quota sieve expire postmaster_address = hostmaster(a)vps04.totaal.net rejection_reason = Your message to <%t>' was automatically rejected:%n%r } dovecot-sql-quota-domain.conf: connect = xxx map { pattern = priv/quota/storage table = usage_domain username_field = domain value_field = bytes } map { pattern = priv/quota/messages table = usage_domain username_field = domain value_field = messages } dovecot-sql-quota-user.conf: connect = xxx map { pattern = priv/quota/storage table = usage_mailbox username_field = userdomain value_field = bytes } map { pattern = priv/quota/messages table = usage_mailbox username_field = userdomain value_field = messages } Thanks in advance to anyone who might be able to shed some light in this situation :). Kind regards, Rick van den Hof -- Manager Engineering Totaalnet Internet Works B.V. IJsselburcht 4e 6825 BP Arnhem +31(0)26-3844944 | r.vandenhof(a)tiw.eu (PGP Key: 0x5A66E935)

2 1

Re: delete/archive old mail
by F. 14 Oct '14

14 Oct '14

>>>> Hi everybody, >>>> I store user's mail in the old mbox format. >>>> I have many scripts to manage users that works fine with mbox. >>>> I use the very old Expire_mail.pl script to delete mail older than NN >>>> days for selected users (nightly cron job). Still works fine with my >>>> CentOS dovecot-2.0.16. >>>> Now I want move the mail to a sort of archive folder instead of simply >>>> deleting it from the inbox for some users. >>>> Is there a similar script or some simple triks? >>>> >>>> Thanks, F. >>> >>> perhaps you will find some ideas here >>> >>> https://sys4.de/de/blog/2013/02/07/mailarchiv-mit-dovecot-und-postfix-sorti… >>> >>> >>> ... >>> #/bin/bash >>> YEAR=`/bin/date +%Y` >>> /usr/bin/doveadm expunge -d -u *(a)backup.server.org mailbox >>> user-backup\*$YEAR*\* savedbefore 10d >>> ... >> >> Thanks for replay. >> My German is really poor, but from a quick look of the example above and >> man doveadm[-expunge], seems that it can be used to replace the old >> Expire_mail.pl (I need to study the right syntax ...) >> >> But still there is the move/archive old mail activity not solved. > > i use the bc feature of postfix to move a copy of all mail per > maildomain into a backup maildomain archive folder, as this is done via lmtp > i am able to sort mails via sieve per user and date folder, depending > on how you like to setup you may use imap acl to give seen rights to the > orig user, so the may restore their own mail whenever they want and/or > their domain postmaster can do it for them. > > But thats only one chance you can do it, you have to decide what fits > best to your needs. > > >> >> doveadm-altmove seems interesting, but in the man page it is reported >> only work with dbox (dbox-only), and my inboxes are in mbox format. >> >> Any other advice? Sorry for the replay to sender instead of the list. As I originally wrote, my need is script or a command like the old Expire_mail.pl that parse a local mbox folder and move/copy mail older than NN days to another local mbox folder. Probably for a Perl programmer is only matter of modify this script or something similar. I searched in docs, wiki, ... but not noticied something that can simply be inserted in a cron job to do the work. Only migration tools or complex (for me), library that can be used to manipulate folders :-) Thanks, F.

1 0

Re: Mailbox format
by Robert Schetterer 14 Oct '14

14 Oct '14

Am 13.10.2014 um 23:29 schrieb Jorge Bastos: > Guys, > > Whats the best mailbox format: > - dbox > - mbox > - maildir > - ?!? there is no universal answer to this a minimum answer might be, maildir is ok in a small non cluster setup ever, please study wiki and archive for more info Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 1

[Pigeonhole Sieve interpreter] :create argument and lda_mailbox_autosubscribe setting
by Vivien Lacourba 14 Oct '14

14 Oct '14

Hi, I am using dovecot and dovecot-sieve packages from Debian Wheezy (2.1.7-7+deb7u1). I noticed that while using ":create" (from the mailbox extension) in my Sieve filter and "lda_mailbox_autosubscribe = yes" in Dovecot's LDA config it automatically subscribes to the destination mailbox even if that mailbox already existed. Reading Dovecot's documentation and the mailbox extension RFC it seems subscription should happen only if it is a newly created mailbox and should not happen if the mailbox already existed. http://tools.ietf.org/html/rfc5490#section-3.2 [[ 3.2. ":create" Argument to "fileinto" Command (...) If the mailbox already exists, this argument is ignored. (...) ]] /etc/dovecot/conf.d/15-lda.conf [[ # Should automatically created mailboxes be also automatically subscribed? lda_mailbox_autosubscribe = yes ]] Also I noticed that if I don't use ":create" in my filters and instead set "lda_mailbox_autocreate = yes" in Dovecot's LDA config, then this time the behavior looks correct as the automatic subscription will only happen for a newly created mailbox. Thanks, Vivien -- Vivien Lacourba World Wide Web Consortium Systems & Network Engineer http://www.w3.org vivien(a)w3.org Tel: +33.4.92.38.78.89 http://www.w3.org/People/Vivien Fax: +33.4.92.38.78.22 -- Vivien Lacourba World Wide Web Consortium Systems & Network Engineer http://www.w3.org vivien(a)w3.org Tel: +33.4.92.38.78.89 http://www.w3.org/People/Vivien Fax: +33.4.92.38.78.22

2 1

Re: Mailbox format
by Gedalya 14 Oct '14

14 Oct '14

On 10/13/2014 05:29 PM, Jorge Bastos wrote: > Guys, > > Whats the best mailbox format: > - dbox Dovecot-specific. Higher performance, saves I/O. > - mbox Don't bother. > - maildir Simple, compatible, resilient. > - ?!? > > Pros and cons? > No short answer is the right answer. Try to thoroughly read http://wiki2.dovecot.org/MailboxFormat and child pages.

1 0

Re: Compile dovecot with sieve/managesieve support
by Daniel Parthey 14 Oct '14

14 Oct '14

Hi, please have a look at http://wiki2.dovecot.org/Pigeonhole/Installation Kind regards Daniel

1 0

Mailbox format (was: RE: Compile dovecot with sieve/managesieve support)
by Jorge Bastos 14 Oct '14

14 Oct '14

Guys, Whats the best mailbox format: - dbox - mbox - maildir - ?!? Pros and cons? > -----Original Message----- > From: dovecot [mailto:dovecot-bounces@dovecot.org] On Behalf Of Jorge > Bastos > Sent: segunda-feira, 13 de Outubro de 2014 21:35 > To: dovecot(a)dovecot.org > Subject: RE: Compile dovecot with sieve/managesieve support > > I see, > > If i need anything else i'll post, > > Thanks, > > > -----Original Message----- > > From: Larry Rosenman [mailto:larryrtx@gmail.com] > > Sent: segunda-feira, 13 de Outubro de 2014 21:05 > > To: Jorge Bastos > > Subject: Re: Compile dovecot with sieve/managesieve support > > > > Pigeonhole does ManageSieve as well...... > > > > On 10/13/14, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > > > Larry & Pascal, > > > > > > Thanks for the reply. > > > > > > Ok this is the lib for sieve, and the sieved, I see in debian > > packages > > > that there is a dovecot-managesieved, the daemon, does this > > pigeonhole > > > is the daemon also? > > > > > >> -----Original Message----- > > >> From: Larry Rosenman [mailto:larryrtx@gmail.com] > > >> Sent: segunda-feira, 13 de Outubro de 2014 20:12 > > >> To: Jorge Bastos > > >> Subject: Re: Compile dovecot with sieve/managesieve support > > >> > > >> look at pigeonhole. That's the Sieve implementation for Dovecot > > >> 2.x > > >> > > >> On 10/13/14, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > > >> > Hi guys, > > >> > > > >> > > > >> > > > >> > I'd like to have dovecot with sieve support, but can't find any > > >> > information on how to enable the sieve/managesieve support. > > >> > > > >> > Does anyone can light me up on this? > > >> > > > >> > > > >> > > > >> > Thanks, > > >> > > > >> > > > >> > > > >> > > >> > > >> -- > > >> Larry Rosenman http://www.lerctr.org/~ler > > >> Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com > > >> US Mail: 108 Turvey Cove, Hutto, TX 78634-5688 > > > > > > > > > -- > > Larry Rosenman http://www.lerctr.org/~ler > > Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com > > US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

1 0

RE: Compile dovecot with sieve/managesieve support
by Jorge Bastos 13 Oct '14

13 Oct '14

I see, If i need anything else i'll post, Thanks, > -----Original Message----- > From: Larry Rosenman [mailto:larryrtx@gmail.com] > Sent: segunda-feira, 13 de Outubro de 2014 21:05 > To: Jorge Bastos > Subject: Re: Compile dovecot with sieve/managesieve support > > Pigeonhole does ManageSieve as well...... > > On 10/13/14, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > > Larry & Pascal, > > > > Thanks for the reply. > > > > Ok this is the lib for sieve, and the sieved, I see in debian > packages > > that there is a dovecot-managesieved, the daemon, does this > pigeonhole > > is the daemon also? > > > >> -----Original Message----- > >> From: Larry Rosenman [mailto:larryrtx@gmail.com] > >> Sent: segunda-feira, 13 de Outubro de 2014 20:12 > >> To: Jorge Bastos > >> Subject: Re: Compile dovecot with sieve/managesieve support > >> > >> look at pigeonhole. That's the Sieve implementation for Dovecot 2.x > >> > >> On 10/13/14, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > >> > Hi guys, > >> > > >> > > >> > > >> > I'd like to have dovecot with sieve support, but can't find any > >> > information on how to enable the sieve/managesieve support. > >> > > >> > Does anyone can light me up on this? > >> > > >> > > >> > > >> > Thanks, > >> > > >> > > >> > > >> > >> > >> -- > >> Larry Rosenman http://www.lerctr.org/~ler > >> Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com > >> US Mail: 108 Turvey Cove, Hutto, TX 78634-5688 > > > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com > US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

1 0

RE: Compile dovecot with sieve/managesieve support
by Jorge Bastos 13 Oct '14

13 Oct '14

Larry & Pascal, Thanks for the reply. Ok this is the lib for sieve, and the sieved, I see in debian packages that there is a dovecot-managesieved, the daemon, does this pigeonhole is the daemon also? > -----Original Message----- > From: Larry Rosenman [mailto:larryrtx@gmail.com] > Sent: segunda-feira, 13 de Outubro de 2014 20:12 > To: Jorge Bastos > Subject: Re: Compile dovecot with sieve/managesieve support > > look at pigeonhole. That's the Sieve implementation for Dovecot 2.x > > On 10/13/14, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > > Hi guys, > > > > > > > > I'd like to have dovecot with sieve support, but can't find any > > information on how to enable the sieve/managesieve support. > > > > Does anyone can light me up on this? > > > > > > > > Thanks, > > > > > > > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com > US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

1 0

Re: Compile dovecot with sieve/managesieve support
by Pascal Volk 13 Oct '14

13 Oct '14

On 10/13/2014 07:10 PM, Jorge Bastos wrote: > Hi guys, > > > > I'd like to have dovecot with sieve support, but can't find any information > on how to enable the sieve/managesieve support. > > Does anyone can light me up on this? http://wiki2.dovecot.org/Pigeonhole should provide all the information you need. Regards, Pascal -- The trapper recommends today: defaced.1428621(a)localdomain.org

1 0

Compile dovecot with sieve/managesieve support
by Jorge Bastos 13 Oct '14

13 Oct '14

Hi guys, I'd like to have dovecot with sieve support, but can't find any information on how to enable the sieve/managesieve support. Does anyone can light me up on this? Thanks,

1 0

To dovecot-ee or not to dovecot-ee
by Jens Dueholm Christensen 13 Oct '14

13 Oct '14

Hi At the moment I'm running an ageing 2.0.13 install that need to be upgraded and moved to new HW. I was looking around, and saw that dovecot-ee is listed as a "free" (ie. 0$) product on dovecot.fi. Apart from the need to register an account in order to "purchase" an -ee license, are there any cavats by switching to the -ee version compared to compiling and running the regular releases? I've got no problems with downloading, building and installing the normal releases and I have no need for object storage, so will the -ee version give me anything else but access to a YUM repo and RPM packages? Regards, Jens Dueholm Christensen Survey IT

3 2

Dovecot domain quota
by Filip Bartmann 13 Oct '14

13 Oct '14

I have dovecot version 2.1.7 and I have quota configured as: ----------------------------------- dict { quota_domain = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } mail_plugins = quota protocol imap { mail_plugins = quota quota imap_quota } plugin { quota = dict:domain:%d:proxy::quota_domain quota_rule = *:storage=1M quota_rule2 = Trash:storage=+100M } ----------------------------------- /etc/dovecot/dovecot-dict-sql.conf.ext: ----------------------------------- map { pattern = priv/quota/storage table = quota_dict username_field = domain value_field = bytes } map { pattern = priv/quota/messages table = quota_dict username_field = domain value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } ----------------------------------- But the problem is that quota table created as: ----------------------------------- CREATE TABLE `quota_dict` ( `domain` varchar(255) NOT NULL, `bytes` bigint(20) NOT NULL DEFAULT '0', `messages` int(5) NOT NULL DEFAULT '0', PRIMARY KEY (`domain`) ) ENGINE=InnoDB DEFAULT CHARSET=latin1 ----------------------------------- counts quota only for last user as defined /etc/dovecot/users or in database table. So if I have in /etc/dovecot/users (the contents is from testing VPS): ----------------------------------- test@debian.jd:{plain}radegast:8:8::/srv/mail/debian.jd/::userdb_quota_rule=*:storage=500k bartmann@debian.jd:{plain}radegast:8:8::/srv/mail/debian.jd/::userdb_quota_rule=*:storage=500k ----------------------------------- After running `doveadm quota recalc -A` I have in my db: ----------------------------------- +-----------+--------+----------+ | domain | bytes | messages | +-----------+--------+----------+ | debian.jd | 505758 | 81 | +-----------+--------+----------+ ----------------------------------- whith is from account bartmann(a)debian.jd not both accounts at testing VPS domain debian.jd. The same is with quota enforcing - quota if enforced on the latter of the accounts in /etc/dovecot/users on testing machine or database in production machine. What I do wrong? Thanks Filip Bartmann

4 5

delete/archive old mail
by sottilette＠rfx.it 13 Oct '14

13 Oct '14

Hi everybody, I store user's mail in the old mbox format. I have many scripts to manage users that works fine with mbox. I use the very old Expire_mail.pl script to delete mail older than NN days for selected users (nightly cron job). Still works fine with my CentOS dovecot-2.0.16. Now I want move the mail to a sort of archive folder instead of simply deleting it from the inbox for some users. Is there a similar script or some simple triks? Thanks, F.

2 1

2.2.14rc1 - dsync in backup mode still changes source permissions
by Peter Mogensen 13 Oct '14

13 Oct '14

Hi, It seems we are still able to reproduce this: http://www.dovecot.org/list/dovecot/2014-May/096367.html However... there's no longer any error-messages. It just silently changes permissions on some dovecot files in the source maildir. (most often dovecot-uidlist) We're running dsync as root, with hardwired userdb values for other reasons. So it has the OS permissions to change source. But still, running in "backup" shouldn't change source ever, should it? The command line is of this format - running on destination-host: # dsync -R -o mail_home=/users/user/maildir backup ssh -c arcfour -o StrictHostKeyChecking=no -i /root/.ssh/id-rsa-dsync source-host "dsync -o mail_home=/users/user/maildir" /Peter

2 4

Permissions for shared mail don't work
by Damien Desfontaines 12 Oct '14

12 Oct '14

Good morning, I'm using dovecot v.2.1.7 on Debian Sid, and the output of dovecot -n is available here: http://paste.fulltxt.net/C-O I'm trying to make the mailbox of (system) user "spam" available to user "ted". I followed these instructions: http://wiki2.dovecot.org/SharedMailboxes/Permissions and it doesn't seem to work. To be more precise: - I manually (and recursively) changed the permissions of all files in ~spam/Mail to 660 (and 770 for the directories); - I manually (and recursively) changed the group owner of everything in ~spam/Mail to "mailperso", where "mailperso" is a group whose users are spam and ted; - I added « mail_access_groups=mailperso » into my dovecot config; - and I restarted dovecot. But still, when I send a new email to spam, it appears as being owned by group "spam" and having permissions set to 600, so I can't access it with user "ted". I also tried to set the setgid bit for ~spam/Mail, it didn't change anything, and when I recursively set the setgid for all subdirectories of ~spam/Mail, it gives new mails the correct group (mailperso) but not the correct permissions. Have I missed something, or is this a bug? Thanks in advance and best regards, Damien

1 0

Re: New to list / SQL AUTH
by Gedalya 12 Oct '14

12 Oct '14

On 10/11/2014 05:36 PM, Jorge Bastos wrote: > For each new user, does the directories on the filesystem will be > auto-created on 1st login? Yes, as far as permissions on parent directories allow.

1 0

courier-imap to dovecot
by Luciano Gabriel Andino 12 Oct '14

12 Oct '14

Hello! I am here since my boxes (40000 emails in folders) are not usable with roundcube and courier-imap. Server is core 2 quad, 4GB RAM and 1TB HD. Which are steps for migration for about 40 Maildir boxes to dovecot? -- Saludos!! Luciano Andino GNU/Linux user #185103 Santa Fe - Argentina -----------------------------------------------

1 0

New to list / SQL AUTH
by Jorge Bastos 12 Oct '14

12 Oct '14

Hi, I'm new to dovecot, and I was reading the manual, to use SQL auth along with virtual domains. So far, it's perfect and does what I need, except for one thing. For each new user, does the directories on the filesystem will be auto-created on 1st login? Thanks in advanced,

1 0

dovecot replication (active-active) - server specs
by Martin Schmidt 11 Oct '14

11 Oct '14

Hello, i have some questions about the new dovecot replication and mdbox format. my company has currently 3 old dovecot 2.0.x fileserver/backend with ca. 120k mailboxes and ca. 6 TB data used. They are synchronised per drbd/corosync. Each fileserver/backend have ca. 40k mailboxes im Maildir format. Our MX server is delivering ca. 30 GB new mails per day. Two IMAP proxy server get the connections from the users. Atm. without dovecot director. We've got around 700k connections per day (imap 200k / pop3 500k) The system is getting issues because the fileserver still have old slow HDDs. Users sometime get connection timeouts, because the fileserver can not answer fast enough due to I/O waiting lag. So we want to make a new system. We desire the new system to use mdbox format ( bigger files, less I/O) and replication through dovecot replication (active/active) instead of drbd. Each fileserver should know every mailbox/user and for the time being 2 dovecot proxies for the user connections (IMAP/POP). (later after the migration from the old system to the new, dovecot director instead of proxies, for caching reasons). we've got 2 new fileservers, they have each SSD HDDs for "new-storage" and 7200rpm SATA HDDs on RAID 5 with 10 TB for "alt-storage" 32 GB RAM per Server Do you have some tips for the system? Do you believe 32 GB RAM are enough for one fileserver each and have you experience with the I/O Waiting problem with huge amounts of Data on the alt-storage? Could there be issues with the RAM, if one fileserver has a downtime, so the second one has to take over all mailboxes for a short amount of time? In general are only 2 new fileserver enough or should we think in bigger dimensions, like 4 fileserver Storage expansion in the new servers should not be a problem (bigger HDDs and a few slots free, so we can expand the raid 5). thank you kind regards Martin Schmidt

4 4

Re: question: dovecot lda running as special user (vmail) or normal user (marcel)?
by marcel.cochem 11 Oct '14

11 Oct '14

Dear Mailing List, (version and dovecot -n at the bottom) (Sorry for the bad English in this mail :) ) I'm new to dovecot and wanted to build my own mailserver using dovecot+postfix. I currently have a Problem with Permissions with my mailfolder. I could solve it easily if i set it with chmod to 777. but thats no real solution. While reading my log files i see a lot messages like: Oct 10 05:19:52 lda(owncloud): Error: user owncloud: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/home/vmail/example.com/owncloud/mail) failed: Permission denied (euid=100(owncloud) egid=1004(owncloud) missing +x perm: /home/vmail, dir owned by 5000:5000 mode=0700) Oct 10 05:19:52 lda(owncloud): Fatal: Invalid user settings. Refer to server log for more information. So Currently two Users need to acces the mail-folder: 1. The user itself (here: owncloud) 2. The vmail user I want to use dovecot with virtual users. Now the question is: shouldn't the directory be accessed only by the vmail user? and not by the owncloud user? Second Quest: If it's correct that the access is made by 2 users: what rights do they need? I Cant add all users to the group vmail and set g+rwx Permissions (every user could read mails from other users, and even edit them!) Thanks a Lot. Kind Regards, Marcel ------------------------------ ------------------------------------------------------------------------------------ dovecot --version 2.2.13 dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-37-generic x86_64 Ubuntu 14.04.1 LTS ext4 auth_mechanisms = plain login auth_verbose = yes info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_home = /home/vmail/example.com/%n mail_location = maildir:/home/vmail/example.com/%n/mail:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = username_format=%u scheme=ssha512 /etc/dovecot/passwd.db driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_after = /home/vmail/sieve-after sieve_before = /home/vmail/sieve-before sieve_dir = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/ssl_main.crt ssl_cipher_list = ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS ssl_client_ca_dir = /etc/ssl/certs ssl_key = </etc/ssl/private/ssh_main_insecure userdb { args = uid=5000 gid=5000 home=/home/vmail/example.com/%n driver = static } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 10 } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster(a)example.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } On Fri, Oct 10, 2014 at 10:13 AM, marcel.cochem < marcel.cochem(a)googlemail.com> wrote: > Dear Mailing List, > > (version and dovecot -n at the bottom) > (Sorry for the bad English in this mail :) ) > > I'm new to dovecot and wanted to build my own mailserver using > dovecot+postfix. > I currently have a Problem with Permissions with my mailfolder. > I could solve it easily if i set it with chmod to 777. but thats no real > solution. > > While reading my log files i see a lot messages like: > Oct 10 05:19:52 lda(owncloud): Error: user owncloud: Initialization > failed: Initializing mail storage from mail_location setting failed: > stat(/home/vmail/example.com/owncloud/mail) failed: Permission denied > (euid=100(owncloud) egid=1004(owncloud) missing +x perm: /home/vmail, dir > owned by 5000:5000 mode=0700) > Oct 10 05:19:52 lda(owncloud): Fatal: Invalid user settings. Refer to > server log for more information. > > So Currently two Users need to acces the mail-folder: > 1. The user itself (here: owncloud) > 2. The vmail user > > I want to use dovecot with virtual users. Now the question is: shouldn't > the directory be accessed only by the vmail user? and not by the owncloud > user? > > Second Quest: > If it's correct that the access is made by 2 users: what rights do they > need? > I Cant add all users to the group vmail and set g+rwx Permissions (every > user could read mails from other users, and even edit them!) > > Thanks a Lot. > Kind Regards, > > Marcel > > ------------------------------------------------------------------------------------------------------------------ > > dovecot --version > 2.2.13 > > dovecot -n > # 2.2.13: /etc/dovecot/dovecot.conf > # OS: Linux 3.13.0-37-generic x86_64 Ubuntu 14.04.1 LTS ext4 > auth_mechanisms = plain login > auth_verbose = yes > info_log_path = /var/log/dovecot-info.log > log_path = /var/log/dovecot.log > mail_home = /home/vmail/example.com/%n > mail_location = maildir:/home/vmail/example.com/%n/mail:LAYOUT=fs > managesieve_notify_capability = mailto > managesieve_sieve_capability = fileinto reject envelope encoded-character > vacation subaddress comparator-i;ascii-numeric relational regex imap4flags > copy include variables body enotify environment mailbox date ihave duplicate > namespace inbox { > inbox = yes > location = > mailbox Drafts { > auto = subscribe > special_use = \Drafts > } > mailbox Junk { > auto = subscribe > special_use = \Junk > } > mailbox Sent { > auto = subscribe > special_use = \Sent > } > mailbox "Sent Messages" { > auto = subscribe > special_use = \Sent > } > mailbox Trash { > auto = subscribe > special_use = \Trash > } > prefix = > } > passdb { > args = username_format=%u scheme=ssha512 /etc/dovecot/passwd.db > driver = passwd-file > } > plugin { > sieve = ~/.dovecot.sieve > sieve_after = /home/vmail/sieve-after > sieve_before = /home/vmail/sieve-before > sieve_dir = ~/sieve > } > protocols = imap sieve > service auth { > unix_listener /var/spool/postfix/private/dovecot-auth { > group = postfix > mode = 0660 > user = postfix > } > } > ssl_cert = </etc/ssl/certs/ssl_main.crt > ssl_cipher_list = > ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS > ssl_client_ca_dir = /etc/ssl/certs > ssl_key = </etc/ssl/private/ssh_main_insecure > userdb { > args = uid=5000 gid=5000 home=/home/vmail/example.com/%n > driver = static > } > protocol imap { > imap_client_workarounds = delay-newmail tb-extra-mailbox-sep > mail_max_userip_connections = 10 > } > protocol lda { > deliver_log_format = msgid=%m: %$ > mail_plugins = sieve > postmaster_address = postmaster(a)example.com > quota_full_tempfail = yes > rejection_reason = Your message to <%t> was automatically rejected:%n%r > } > >

2 2

]UG] Dovecot 2.2.9 SSL client cert verification fails: openssl verify: OK
by Daniel Dickinson 11 Oct '14

11 Oct '14

Greetings all, I have verified a bug that has long been attributed to lack of knowledge on the part of the user. Dovecot rejects StartSSL client certificates due to reject StartSSL root CA when doing client verification even though the appropriately constructed ca-bundle.pem has been created and applied vi ssl_ca = </etc/dovecot/ca-bundle.pem. openssl verify -CAfile ca-bundle.pem -crl_check_all -policy_check -x509_strict -verbose client-cert.pem returns: client-cert.pem: OK However dovecot reports the following: Oct 11 01:41:17 hostname dovecot: imap-login: Invalid certificate: unable to get local issuer certificate: /C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority Oct 11 01:41:17 hostname dovecot: imap-login: Invalid certificate: certificate not trusted: /C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority Oct 11 01:41:17 hostname dovecot: imap-login: Invalid certificate: unable to get certificate CRL: /C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority Oct 11 01:41:17 hostname dovecot: imap-login: Valid certificate: /C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 1 Primary Intermediate Client CA Also reports the client certificate as valid. The certificate bundle was created as follows: openssl x509 -in sub.class1.client.pem -subject -issuer >ca-bundle.pem cat class1-client-crl.pem >>ca-bundle.pem openssl x509 -in startcom-root-ca.pem -subject -issuer >>ca-bundle.pem cat startcom-root-ca-crl.pem >>ca-bundle.pem Furthermore exim, Thunderbird, and Firefox are all perfectly happy with the certificates (and exim has no problem verifying the client certificates). Further, there are many more messages regarding issues with users of dovecot having issues with StartCom client certificates who have reported following all the steps than with Cyrus or Courier. Oh, and client verification of server-side certificate works fine with server-side certificate bundle (cat server.pem startcom-intermediate.pem startcom-root-ca.pem >dovecot.pem) Relevant dovecot -n included below: auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 otp auth_ssl_require_client_cert = yes auth_verbose = yes ssl = required ssl_ca = </etc/dovecot/ca-bundle.pem ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem ssl_verify_client_cert = yes verbose_ssl = yes OS is Debian Wheezy with latest updates and (just today in hopes it had been fixed, same error occurs with Wheezy's dovecot = 2.1.7) dovecot 2.2.9 from backports. amd64 architecture. Please CC me as I am not subscribed to the list. Regards, Daniel

1 0

Error with dovecot 2.2.14rc1
by Mark Sapiro 10 Oct '14

10 Oct '14

I don't know if this is significant or not, but it is at least unusual here. First we see this: > Oct 9 10:10:03 sbh16 dovecot: imap(mark): Error: Sync failed for mbox file /var/spool/mail/mark: seq=393 uid=201517 uid_broken=0 originally needed 0 bytes, now needs 66 bytes which has apparently added 66 bytes to UID 201517 Then, later we see: > Oct 9 11:26:19 sbh16 dovecot: imap(mark): Error: Cached message size larger than expected (32353 > 32287) > Oct 9 11:26:19 sbh16 dovecot: imap(mark): Error: Corrupted index cache file /home/mark/Mail/.imap/INBOX/dovecot.index.cache: Broken physical size for mail UID 201517 > Oct 9 11:26:19 sbh16 dovecot: imap(mark): Error: read(/var/spool/mail/mark) failed: Cached message size larger than expected (32353 > 32287) (FETCH BODY[] for mailbox INBOX UID 201517) > Oct 9 11:26:19 sbh16 dovecot: imap(mark): Disconnected: FETCH read() failed in=10948 out=1206206 As of now (almost 22 hours later) these are the only dovecot Error messages in the log. Going back a full month, we see this under dovecot 2.2.13 > Sep 9 10:18:01 sbh16 dovecot: imap(mark): Error: Sync failed for mbox file /var/spool/mail/mark: seq=198 uid=198968 uid_broken=0 originally needed 0 bytes, now needs 66 bytes but no subsequent errors like yesterday. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Migrating to Dovecot EE
by Philipp Resch 10 Oct '14

10 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everyone! I am currently running dovecot 2.2.9 on my Debian Wheezy system. As this version is a bit outdated and I'm not too keen on compiling Dovecot myself I was thinking about moving to the Dovecot EE repository. I already have access to the repository, and now before I starting "apt-getting" all kinds of packages: What would be the best way on moving to the Dovecot EE repository? Just doing an apt-get install dovecot-ee? Will it replace the current version? Or should the old version be removed before installing the new one? Has anyone ever done this and has some advice for me? Thanks in advance, Philipp -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJUN50yAAoJEC6sCbYfpzg9ilcH/iREEyhyygKEVrCyLRjutcLm iLa63KHCFGFjU3b5igZFD+Jv1uZmHfyLh+ZFz0ditHmS1jbNE49WKGawAuoBb3lv VqMCex3qsOA9OVdAbPYUCecs7K18Oo8DjwFpI4Sn70flsaFpo3JS32I/dZ9OMF7d p9O/G1PfJ4mw4zWC0HGgE7kluYytPBJTw2rqqAyjHXypQhcpiF+HHtFm/pX9SF4U b4K5YqfFJE/Bk7YYEdnQFyribcDxkllIzeAt09EhpEwZHK8MTWi92PwnHDcTX3M4 P7JnmSO3YtfSphbqDOFZgAYz2otEAPgysXu3v4asLkcoiPQb/H7hUlcNZyzLeIo= =fu6j -----END PGP SIGNATURE-----

2 1

question: dovecot lda running as special user (vmail) or normal user (marcel)?
by marcel.cochem 10 Oct '14

10 Oct '14

Dear Mailing List, (version and dovecot -n at the bottom) (Sorry for the bad English in this mail :) ) I'm new to dovecot and wanted to build my own mailserver using dovecot+postfix. I currently have a Problem with Permissions with my mailfolder. I could solve it easily if i set it with chmod to 777. but thats no real solution. While reading my log files i see a lot messages like: Oct 10 05:19:52 lda(owncloud): Error: user owncloud: Initialization failed: Initializing mail storage from mail_location setting failed: stat(/home/vmail/example.com/owncloud/mail) failed: Permission denied (euid=100(owncloud) egid=1004(owncloud) missing +x perm: /home/vmail, dir owned by 5000:5000 mode=0700) Oct 10 05:19:52 lda(owncloud): Fatal: Invalid user settings. Refer to server log for more information. So Currently two Users need to acces the mail-folder: 1. The user itself (here: owncloud) 2. The vmail user I want to use dovecot with virtual users. Now the question is: shouldn't the directory be accessed only by the vmail user? and not by the owncloud user? Second Quest: If it's correct that the access is made by 2 users: what rights do they need? I Cant add all users to the group vmail and set g+rwx Permissions (every user could read mails from other users, and even edit them!) Thanks a Lot. Kind Regards, Marcel ------------------------------ ------------------------------------------------------------------------------------ dovecot --version 2.2.13 dovecot -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-37-generic x86_64 Ubuntu 14.04.1 LTS ext4 auth_mechanisms = plain login auth_verbose = yes info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_home = /home/vmail/example.com/%n mail_location = maildir:/home/vmail/example.com/%n/mail:LAYOUT=fs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = username_format=%u scheme=ssha512 /etc/dovecot/passwd.db driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_after = /home/vmail/sieve-after sieve_before = /home/vmail/sieve-before sieve_dir = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/ssl_main.crt ssl_cipher_list = ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS ssl_client_ca_dir = /etc/ssl/certs ssl_key = </etc/ssl/private/ssh_main_insecure userdb { args = uid=5000 gid=5000 home=/home/vmail/example.com/%n driver = static } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 10 } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster(a)example.com quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r }

1 0

Keywords & sync
by Ralf Hildebrandt 10 Oct '14

10 Oct '14

We're using keywords within Thunderbird, and we're syncing those using IMAP. When using more than 5 keywords, we're envcountering problems - they're only partially being synced (between two clients, but not all clients). Any idea why this could be happening? The introduction of tagging in Thunderbird is described here: <https://bugzilla.mozilla.org/show_bug.cgi?id=114656> -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

6 5

Send an alert on master user login
by Andre Rodier 09 Oct '14

09 Oct '14

Hello, I want to know if there is an option in Dovecot to send an alert, or run a script when someone is using the master user facility. I can do something myself with fail2ban, but maybe there is an option in Dovecot? Thanks. André.

2 4

Sieve filter extracting wrong header value on certain mail messages
by gowen (dovecot) 09 Oct '14

09 Oct '14

# 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.15.4-x86_64-linode45 x86_64 openSUSE 12.3 (x86_64) Short version: 1) I filter out spam by using a dovecot sieve filter to act based on a header inserted by bogofilter 2) In some cases, sieve fails to correctly file based on this header 3) Testing with sieve-test indicates that it's testing the wrong header 4) Suggestions? Am I doing something wrong? Is there a problem with these headers that bends test-sieve out of shape? 5) Test files from below are also available via http://www.swynwyr.com/sieve-test/ Any help is appreciated!!! Long version with full details: Here is the simple sieve filter I'm using to test, and two different variants of an email which triggers this problem. I basically deleted things one by one from an original email (1) to get minimal testcases that triggered (2) or did not trigger (3) the problem. The filter: === begin test.sieve === require ["fileinto", "body", "regex"]; if header :contains "X-Bogosity" "Spam," { fileinto "SPAM.SPAM"; stop; } elsif header :contains "X-Bogosity" "Unsure," { fileinto "SPAM.UNSURE"; stop; } keep; stop; === end test.sieve === Here is an example email that will cause this filter to not function as expected: === begin message.2 === Return-Path: <alora(a)promosforusio.org> Subject: =?utf-8?B?QUhTIEtpdGNoZW4gTWFrZW92ZXIgR2l2ZWF3YXkg?= Subject: ÎHS KitÑhen ÎakÐµovÐµr GivÐµaway Subject: =?ISO-8859-1?Q?AHS Kitchen Makeover Giveaway =A0=A0=A0?= Subject: Subject: AHS Kitchen Makeover Giveaway X-Bogosity: Spam, tests=bogofilter, spamicity=1.000000, version=1.2.3 Home Warranty Summer Giveaway === end message.2 === If I run test-sieve on this, we can clearly see in the trace log that when it's supposed to test for header "X-Bogosity" it in fact looks at one of the multiple "Subject" headers. Note that the result is storing in INBOX rather than SPAM.SPAM, and that the "matching value" for "X-Bogosity headers" is actually the contents of the final "Subject" header in the test on line 3. In the second test, on line 6, it uses a different and correct value for the same header! But too late to help as the first test was the one it should have had a match on. === begin session === $ sieve-test -t trace2.log -Tlevel=matching test.sieve message.2 Performed actions: * store message in folder: INBOX Implicit keep: (none) sieve-test(gowen): Info: final result: success $ cat trace2.log ## Started executing script 'test' 3: header test 3: starting `:contains' match with `i;ascii-casemap' comparator: 3: extracting `X-Bogosity' headers from message 3: matching value `AHS Kitchen Makeover Giveaway' 3: with key `Spam,' => 0 3: finishing match with result: not matched 3: jump if result is false 3: jumping to line 6 6: header test 6: starting `:contains' match with `i;ascii-casemap' comparator: 6: extracting `X-Bogosity' headers from message 6: matching value `Spam, tests=bogofilter, spamicity=1.000000, version=1.2.3' 6: with key `Unsure,' => 0 6: finishing match with result: not matched 6: jump if result is false 6: jumping to line 11 11: keep action; store message in default mailbox 12: stop command; end all script execution ## Finished executing script 'test' $ === end session === Now lets remove the "Return-Path" from that message. (Of the original 26 headers, all but the 7 shown in message.2 could be removed and still have this message break the filter). This alters thing enough that sieve starts working as expected (in fact, removing any one of the 6 non-X-Bogosity headers will cause this to start working). === begin message.3 === Subject: =?utf-8?B?QUhTIEtpdGNoZW4gTWFrZW92ZXIgR2l2ZWF3YXkg?= Subject: ÎHS KitÑhen ÎakÐµovÐµr GivÐµaway Subject: =?ISO-8859-1?Q?AHS Kitchen Makeover Giveaway =A0=A0=A0?= Subject: Subject: AHS Kitchen Makeover Giveaway X-Bogosity: Spam, tests=bogofilter, spamicity=1.000000, version=1.2.3 Home Warranty Summer Giveaway === end message.3 === Now when we run test-sieve it works as expected, filing into SPAM.SPAM and showing the correct matching value for line 3: === begin session === $ sieve-test -t trace3.log -Tlevel=matching test.sieve message.3 Performed actions: * store message in folder: SPAM.SPAM Implicit keep: (none) sieve-test(gowen): Info: final result: success $ cat trace3.log ## Started executing script 'test' 3: header test 3: starting `:contains' match with `i;ascii-casemap' comparator: 3: extracting `X-Bogosity' headers from message 3: matching value `Spam, tests=bogofilter, spamicity=1.000000, version=1.2.3' 3: with key `Spam,' => 1 3: finishing match with result: matched 3: jump if result is false 3: not jumping 4: fileinto action 4: store message in mailbox `SPAM.SPAM' 5: stop command; end all script execution ## Finished executing script 'test' $ === end session ===

3 3

mailbox in different filesystem
by Héctor Moreno Blanco 08 Oct '14

08 Oct '14

Hello everyone, We have Dovecot 2.1.6 with Maildir. We would like to perform some kind of mail archiving with a mailbox in a different storage, for example a mailbox called ARCHIVED, with different disks (slower...). Is possible to locate this mailbox in other storage (SAS, Fiber...) and how can we do it? Thank you very much in advanced. Kind regards. Héctor Moreno P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 2

Re: Help with shared folder
by Eduardo Ramos 07 Oct '14

07 Oct '14

Sorry Gianluca, I know IMP/Horde just by name. Some googling show me that the option: $servers['advanced'] = array(...,'acl' => true,...) could help you, but you can get some issues: https://sys4.de/en/blog/2013/11/06/imap-acl-dovecot-horde-5-imp-6-warning/ On 10/07/2014 09:30 AM, Gianluca Calloni wrote: > HI Eduardo. > > > > Thank you for your replay.. > > > > You know if there is a plug-in also for Horde webmail GUI? > > > > Unfortunately we use outlook and it seems there is not addon for this.

2 1

Re: Help with shared folder
by Gianluca Calloni 07 Oct '14

07 Oct '14

HI Eduardo. Thank you for your replay.. You know if there is a plug-in also for Horde webmail GUI? Unfortunately we use outlook and it seems there is not addon for this.

1 0

dovecot 2.1 new imap folder permissions
by Stefanos Gerangelos 07 Oct '14

07 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I hope this is the appropriate place to ask. I am migrating an old mail (postfix/dovecot) server to a new one. Everything works much as expected. I have a small obstacle though. I use mbox format and the setup is pretty much simple. Suppose a user's home directory is the following: # ls -ld /home/foo drwxr-xr-x 3 foo users 4096 Oct 4 13:28 foo and the respective /var/mail: # ls -ld /var/mail/foo - -rw------- 1 foo mail 0 Oct 4 23:45 /var/mail/foo In the old server when the user tried to create a new test imap folder (from an imap client), then the newly created file would be: # ls -l /home/foo/ - -rw------- 1 foo users 0 Oct 2 02:08 test This is the desired behavior. In the new dovecot 2.1 server the following file permissions will apply: # ls -l /home/foo/ - -rw-r--r-- 1 foo users 0 Oct 2 02:08 test I finally noticed that if I chmod the /home/foo to 711, then the new file will have the desired (600) permissions. So, I can make a umask for the new users (login.defs), but that doesn't sound a pretty solution. Do you have anything else to suggest? If you need any .conf file, let me know. Thanks in advance! - --Stefanos -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJUM9k6AAoJEDvFaozEhZub3rwIAKglt/6iAU61rCfWJf6yfMZY HNp3rXz4WDbxhOT+eeuoHNN4QLQFTVmjYoqGpqJEazntdMKJqJ1At3osGtzUMYDe iMuhsbcP+tpMAkeFcYB69cW+HvcmWsPafRJoCgziHapT2VxluWH0rfZIDGmvBI5e kQ31ef9IHZjiBwyKf37e8QraU85HDXgF6AhcJ5I7PlDcJDW/jFGFKOUwDoKJ2BU9 JMUBWDALUZ9Uosd+8P8b11TcjjGdakKBPozvu8aAOKd9jz3G9bvatdHnZkD/OJFl pIrnrQuaBA1bW4UP8nTTSyQVuvLKYpMLbN+NTym8SaEU3BwjirWbRDozHLugXio= =lpy7 -----END PGP SIGNATURE-----

1 0

Re: Help with shared folder
by Eduardo Ramos 07 Oct '14

07 Oct '14

Hi Gianluca, I have roundcubemail as webmail. It has a plugin called 'acl', that allows users create acls easly. My users use to use thunderbird too, and the solution is that add-on: https://addons.mozilla.org/en-US/thunderbird/addon/imap-acl-extension/ On 10/06/2014 09:49 AM, Gianluca Calloni wrote: > Hi dovecot guru.. > > > > I need some help configuring shared folder in my server.. > > This is the situation: > > DOVECOT 2.0.19 > > with POSTFIX - CLAMAV - AMAVISD - SPAMASSASSIN > > > > This is the production server and sharing folder between user work.. > > But i need some explanation.. > > > > 1) It's possible to share only a subfolder (E.G. => .INBOX.ESTERO) without > share the main folder .INBOX? > > 2) Which is the best way (or best practice) to manage the dovecot-acl and > dovecot-acl-list file?? Actually, i modifiy the dovecot-acl by hand (vi > editor). but every time i modify it i need to restart the dovecot server to > apply the configuration. And i need to reset the /var/run/dovecot/dict owner > and group cause with dovecot restart the file go back in root:root owner - > group > > > > > > Thank's in advance. > > > > Gianluca

1 0

Dovecot writing to mailbox user@domain
by John Oliver 06 Oct '14

06 Oct '14

centOS 6.5, dovecot-2.0.9-7.el6_5.1.x86_64 This is frustrating, because I had it working before... I could deliver an email to a user user@domain, then connect to dovecot IMAP and see the mail, no problem! Then I was told we had to use cyrus, and I was dealing with it for a few weeks. Now we're back to dovecot, and the last backup I had of that config has postfix delivering mail to /var/vmail/username as I want and expect, but dovecot looks for and creates /var/vmail/user@domain which I DON'T want [joliver@test ~]$ dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4 auth_username_format = %Lu mail_access_groups = mail mail_location = maildir:/var/vmail/%u/Maildir mail_privileged_group = mail mbox_write_locks = fcntl passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = imap ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = uid=504 gid=505 home=/var/vmail/%u driver = static } [joliver@test ~]$ cat /etc/dovecot/dovecot-ldap.conf.ext hosts = localhost auth_bind = no ldap_version = 3 debug_level = 0 default_pass_scheme = SSHA base = ou=Users,dc=test,dc=com scope = subtree pass_filter = (&(objectClass=user)(uid=%u)) pass_attrs = mail=user,userPassword=password -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

2 1

How best to confirm that dovecot LDA logging is working correctly?
by Ben Johnson 06 Oct '14

06 Oct '14

Hello! I've posted to the list several times about a strange issue I'm having with dovecot LDA. When dovecot-lda is called in the context of a pipe script that is executed as the "vmail" user via the Dovecot Antispam plugin, dovecot-lda exits prematurely with status code 134. The dovecot deliver manual at http://wiki2.dovecot.org/LDA#logging states very clearly, "If dovecot-lda fails to write to log files it exits with temporary failure." That's a curious note, because I believe that a "temporary failure" exit code may be what I'm dealing with here. When I drag an email from Inbox to SPAM to trigger Antispam, I see only this (and no further output beyond the last line) in syslog, which is the configured logging destination for LDA: imap: antispam: mailbox_is_unsure(Junk): 0 imap: antispam: mailbox_is_trash(INBOX): 0 imap: antispam: mailbox_is_trash(Junk): 0 imap: antispam: mail copy: from trash: 0, to trash: 0 imap: antispam: mailbox_is_spam(INBOX): 0 imap: antispam: mailbox_is_spam(Junk): 1 imap: antispam: mailbox_is_unsure(INBOX): 0 imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 imap: antispam: running mailtrain backend program /bin/bash imap: antispam: running mailtrain backend program /bin/bash imap: antispam: running mailtrain backend program parameter 1 /usr/local/bin/sa-learn-pipe.sh imap: antispam: running mailtrain backend program parameter 2 --spam By contrast, if I "su" to the "vmail" user and call the LDA executable with the same arguments that my pipe script does, I see all of the expected output in syslog, AND the message is delivered successfully: /usr/lib/dovecot/deliver -d "sa-training(a)localhost.com" -m "Training.SPAM" -p "/tmp/sendmail-msg-25169.txt" lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so lda: Debug: auth input: sa-training(a)localhost.com home=/var/vmail/localhost.com/sa-training mail=maildir:/var/vmail/localhost.com/sa-training/Maildir uid=5000 gid=5000 quota_rule=*:storage=0B sieve=/var/vmail/localhost.com/sa-training/.sieve lda: Debug: Added userdb setting: mail=maildir:/var/vmail/localhost.com/sa-training/Maildir lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=0B lda: Debug: Added userdb setting: plugin/sieve=/var/vmail/localhost.com/sa-training/.sieve lda(sa-training(a)localhost.com): Debug: Effective uid=5000, gid=5000, home=/var/vmail/localhost.com/sa-training lda(sa-training(a)localhost.com): Debug: Quota root: name=user backend=dict args=:file:/var/vmail/localhost.com/sa-training/.quotausage lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=* bytes=0 messages=0 lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=Trash bytes=+104857600 messages=0 lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=Junk ignored lda(sa-training(a)localhost.com): Debug: Quota rule: root=user mailbox=INBOX bytes=+104857600 messages=0 lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-reached 100 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=yes command=quota-below below sa-training(a)localhost.com localhost.com lda(sa-training(a)localhost.com): Debug: Quota grace: root=user bytes=0 (10%) lda(sa-training(a)localhost.com): Debug: dict quota: user=sa-training(a)localhost.com, uri=file:/var/vmail/localhost.com/sa-training/.quotausage, noenforcing=0 lda(sa-training(a)localhost.com): Debug: maildir++: root=/var/vmail/localhost.com/sa-training/Maildir, index=, indexpvt=, control=, inbox=/var/vmail/localhost.com/sa-training/Maildir, alt= lda(sa-training(a)localhost.com): Debug: Quota root: name=user backend=dict args=:file:/var/vmail//raw mail user/.quotausage lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-reached 100 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 raw mail user lda(sa-training(a)localhost.com): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=yes command=quota-below below raw mail user lda(sa-training(a)localhost.com): Debug: Quota grace: root=user bytes=0 (10%) lda(sa-training(a)localhost.com): Debug: dict quota: user=raw mail user, uri=file:/var/vmail//raw mail user/.quotausage, noenforcing=0 lda(sa-training(a)localhost.com): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= lda(sa-training(a)localhost.com): Debug: Destination address: sa-training(a)localhost.com (source: user@hostname) lda(sa-training(a)localhost.com): Debug: sieve: Pigeonhole version 0.4.2 initializing lda(sa-training(a)localhost.com): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. lda(sa-training(a)localhost.com): Debug: sieve: using the following location for user's Sieve script: /var/vmail/localhost.com/sa-training/.sieve;name=main script lda(sa-training(a)localhost.com): Debug: sieve: loading script /var/vmail/localhost.com/sa-training/.sieve;name=main script lda(sa-training(a)localhost.com): Debug: sieve: script binary /var/vmail/localhost.com/sa-training/.sieve.svbin successfully loaded lda(sa-training(a)localhost.com): Debug: sieve: binary save: not saving binary /var/vmail/localhost.com/sa-training/.sieve.svbin, because it is already stored lda(sa-training(a)localhost.com): Debug: sieve: executing script from /var/vmail/localhost.com/sa-training/.sieve.svbin lda(sa-training(a)localhost.com): sieve: msgid=<20141003110532.045EE6060D(a)localhost.com>: stored mail into mailbox 'Training.SPAM' I'm trying to make sense of this behavior; the implication seems to be that dovecot-lda is crashes immediately, before it can log anything, when it's triggered via Antispam. Is there some way to determine what's happening? I've posted coredump and trace information previously, and nobody replied. Thanks for any help! -Ben

1 0

Default file names for sent, trash, etc.
by bor400 06 Oct '14

06 Oct '14

Hi, I use dovecot 2.1 with mbox (pop3 imap). For imap I want set dovecot compatibile with my webmail. My webmail use filename for mbox as "sent-mail" , "mail-trash", etc. How I can change from default "Sent" to check (create) "sent-mail" file ? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Default-file-names-for-sent-trash-etc-… Sent from the Dovecot mailing list archive at Nabble.com.

2 1