- dovecot - dovecot.org

[Dovecot] qmail dovecot lda
by Florin Portase 06 Feb '14

06 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SETUP: qmail + dovecot 2.2.10 + pigeonhole 0.4.2 I have a user who's quota is at 98% so theoretically when this user is receiving any mails qmail shout send a rejection message like user is overquota /vpopmail/domains/medianetork.ro/.qmail-default #| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox | DTLINE=${DTLINE/$USER-} /var/qmail/bin/preline -f /usr/libexec/dovecot/dovecot-lda -d $EXT@$USER -a $EXT@$USER If I let enabled only this line | /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox everything is working OK 1st test: from yahoo mail - - send an _attachment of 2mb ( way over quota ) and the response: @4000000052f370fd3381b504 info msg 3793: bytes 4268 from <<>@medianetork.ro> qp 19703 uid 420 @4000000052f370fd3381b8ec starting delivery 6: msg 3793 to remote pflorin1(a)yahoo.com @4000000052f370fd3381b8ec status: local 0/10 remote 1/120 @4000000052f371011135ec04 delivery 6: success: 66.196.118.33_accepted_message./Remote_host_said:_250_ok_dirdel/ @4000000052f371011135f3d4 status: local 0/10 remote 0/120 2nd test: from lotus domino - - send an _attachment of 2mb ( way over quota ) @4000000052f34f832bc8fa0c info msg 3774: bytes 3444 from <<>@medianetork.ro> qp 13708 uid 420 @4000000052f34f832bc8fa0c starting delivery 2: msg 3774 to remote pflorin1(a)fr.ibm.com @4000000052f34f832bc8fdf4 status: local 0/10 remote 1/120 @4000000052f34f84346185e4 delivery 2: failure: Connected_to_195.75.94.105_but_sender_was_rejected./Remote_host_said:_501_Syntax_error_in_parameters_or_arguments:_(-132)/ Also gmail complains about Syntax error -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS839EAAoJECEzxtLP+204PG8H/3+melSRQ9zWlqaY77rnxIIV 7fV3c6DFvwWeBr7MJx7MAtWRljzyS8dMLkNrfqvZlhWBRljinV3P8iX8m+ZT6wKG 42H5BLCRPhXccppFvYwTL22CNFO0+ZKdhogFFrr3bBxdoir3xW+rG9dUDw+uvQZw y2R6zUp4o33nBKq44mfvIOV8/kwDiVdxN+p/pbs/QFsvtFJh+NI39F9mxWFMkTAk leQjjSrKSw/yKBXjWRT4Gu35XrqylbUHo8n9EzS6jP47OE2DAHMhfKI8/0qCHcNK R3NiWu7xvW8GX66zhF3LUZN5ojAxniZ+AvJ+q016BQi7EWMeNcR7a/o8bavSaMg= =kcDs -----END PGP SIGNATURE-----

2 1

[Dovecot] mime support for pigeonhole
by Tim Dickson 06 Feb '14

06 Feb '14

is there any chance of rfc5703 (mime support/extension) being added to pigeonhole? I am trying to filter mail with .exe and .zip attachments, to no success. I have tried *header :contains "x-attached" [".zip", ".exe"] *but emails i'm getting don't have x-attached. a sample snippet is below. Subject: testa1 Content-Type: multipart/mixed; boundary="------------020304040002050407030900" This is a multi-part message in MIME format. --------------020304040002050407030900 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit this has a compressed file added a1 --------------020304040002050407030900 Content-Type: application/x-zip-compressed; name="pinglog.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="pinglog.zip" I have tried *header :contains ["Content-Type","name","filename"] ["application/x-zip-compressed",".zip",".exe"]* but that doesn't work either. I can't use body because that doesn't include the mime headers, so the only way I can see is to use mime (aka rfc5703) I am using dovecot 2.1.8 with pigeonhole 0.3.3 (and am about to use dovecot 2.2.9 with pigeonhole 0.4.2 on another server) If I'm just missing the point, or there is already support, please point me in the right direction.

6 7

[Dovecot] Mail location security
by Roman Gelfand 06 Feb '14

06 Feb '14

I am not sure I understood this issue correctly... When using maildir with ie ldap. Suppose ldap attribute settings say gid 8 and uid 999, Those are the permissions for every email address. If so, someone who has access to one email user on the server, has access to all. If this is so, is using mailbox instead of maildir resolve this problem? Thanks in advance

2 1

[Dovecot] userdb section not recognized in dovecot.conf. Help?
by CypherPunk 06 Feb '14

06 Feb '14

I'm following a tutorial[1] on how to configure dovecot and the tutorial says to insert the following configuration options into the dovecot.conf file: disable_plaintext_auth = no mail_privileged_group = mail mail_location = mbox:~/mail:INBOX=/var/mail/%u userdb { driver = passwd } This seems to have worked for a lot of others using this tutorial but not for me. When I try to start dovecot, I am told that the section at userdb is an unknown section type. I've spent the last few hours on Google searching this out and I've gotten conflicting answers that don't make sense. Is this the proper way to use the userdb directive? For information, I've also tried userdb{ driver = passwd-file } and that didn't work either. So I'm assuming that perhaps userdb is deprecated somehow but I don't know what to replace it with. Can someone point me in the right direction? Many Thanks! CypherPunk [1] https://www.digitalocean.com/community/articles/how-to-set-up-a-postfix-e-m…

2 1

[Dovecot] Debian Wheezy-Backports - Dovecot (1:2.2.9-1~bpo70+1) missing xz compression support?
by T.B. 05 Feb '14

05 Feb '14

Hallo Everyone, since some days a new dovecot version is available in Debian "wheezy-backports": (1:2.2.9-1~bpo70+1) wheezy-backports As described in http://wiki2.dovecot.org/Plugins/Zlib and http://www.dovecot.org/doc/NEWS-2.2 "xz"-compression is available since Dovecot version 2.2.9. Today I tried to convert my mailboxes with the new xz compression. Therfore I changed my config as follows: /etc/dovecot/conf.d/10-mail.conf: # Space separated list of plugins to load for all services. Plugins specific to IMAP, LDA, etc. are added to this list in their own .conf files. mail_plugins = zlib acl fts fts_solr /etc/dovecot/conf.d/90-plugin.conf: # Enable these only if you want compression while saving: zlib_save_level = 9 # 1..9 zlib_save = xz # gz or bz2 or xy Now I tried to convert my mailboxes - but somehow, something goes wrong: root@SERVER:/# dovecot --version 2.2.9 root@SERVER:/# dsync mirror mdbox:/srv/converted_vmail/ doveadm(root): Error: zlib_save: Support not compiled in for handler: xz dsync(root): Error: zlib_save: Support not compiled in for handler: xz Where is the failure? Did the packet maintainer forget to activate xz? I can't find anything xz related in the debian package changelog: http://metadata.ftp-master.debian.org/changelogs//main/d/dovecot/dovecot_2.… Should I contact the Debian packet maintainer? http://packages.qa.debian.org/d/dovecot.html Best regards T.B.

2 2

[Dovecot] How to archive mails on different server
by Anant Saraswat 05 Feb '14

05 Feb '14

Hi Guys, I want to make some new changes to my exim mail server So if any user archive his/her mail they will save on any other server not on Exim server , and whenever user want to search for any old mail he will go to archive folder and can search it from there.... So basically i want to setup a diffrent server for archiving and want to connect it to my Exim server. So whevever user archive his/her mail it will autometically save to diffrent server. So is it possible using any plugin , or something else . I am using Roundcube,Exim 4.72, Dovecot(LMTP). Regards, Anant Saraswat

2 1

[Dovecot] imap2json
by Kai Hendry 05 Feb '14

05 Feb '14

Hi there, I've started work on a side project that I've been long wanting to do; better HTML archives of email. https://github.com/kaihendry/imap2json I'm just designing the JSON schema atm, and I thought it would be good to get your feedback (Esp Timo) before I make a horrible mistake. https://github.com/kaihendry/imap2json/blob/master/JSON-design.mdwn Is it a good idea to base the id of a converation by the sha1sum of the first message for example? Any other tips or words of encouragement would be great. Kind regards,

1 1

[Dovecot] Dovecot 2.2.10 shared mailbox
by Florin Portase 05 Feb '14

05 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well, after some debugging I've decided to do some more changes: namespace { type = public prefix = Shared. separator = . list = children location = maildir:/home/vpopmail/Public/Maildir subscriptions = yes inbox = no } So, WORKING againg!! Question is: is namespace = shared deprecated ???????? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS8fx2AAoJECEzxtLP+204oAIIAMnElUi3izL/ytiDROGjVJl4 RdWkKb+2x55ANfNbB+tbMaG5CmCUi0qfS0Z6K2pKke/UxnR4RAWVZGxZ7ESl0MIs LtHKt1uv/pnoR4htO+QhloYIBzbs9Cpf8Nu7sWaxOsWl6Y7m3p9FqNvLBFYrzVsM Yx/G85GCyAlPHtpBuCtbNtLsuc4Oeh+cXbYMAu3+YiTcU9VB3Dhw21ViI3PgglYV Ffz/J+xtkvvNlcvmxX4Aqspv1LHK76nvBnYN/pDDHAgJNyGl0pOqo9HjVKZAlFZP Rg25EpuoaMZhHIMB2R5EAIHQddzBOqQc2OrWognvmB+7e+8qUtQMjpougamPg8w= =Y/hd -----END PGP SIGNATURE-----

1 0

[Dovecot] Applying a DNS RBL to deny authentication?
by Marc Perkel 05 Feb '14

05 Feb '14

Hope to get some attention about this idea to reduce hacking passwords. Here is a list of about 700,000 IP addresses that are hacking passwords through SMTP AUTH http://ipadmin.junkemailfilter.com/auth-hack.txt This is a list of IP addresses that attempted to authenticate against my fake AUTH advertizing on servers with no authentication. We do front end spam filtering for thousands of domains and I decided to advertize authentication where there is none and I accept and blackhole all authenticated email to those servers. I have harvested the IP addresses in this list that is available through an RBL. It seems to me that a nice dovecot feature would be the ability to do a black list check against IP addresses connecting and deny access if listed. Thoughts?

4 3

Re: [Dovecot] Dovecot 2.2.10 shared mailbox
by Joseph Tam 05 Feb '14

05 Feb '14

Florin Portase writes: > type of error: COREDUMP > Feb 04 11:49:59 imap(portase.florin(a)medianetork.ro): Fatal: master: > service(imap): child 23391 killed with signal 11 (core dumped) > > Disabling of shared mailbox results in correct functioning of dovecot. > To mention again: dovecot version previous to 2.2 was working OK. Debugging of this sort usually requires submitting a core dump traceback http://dovecot.org/bugreport.html This might be a known issue (check the Dovecot archives). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] dsync backup; compressed to uncompressed
by Michael Smith (DF) 05 Feb '14

05 Feb '14

I need to backup some of the mailboxes on our system. We are currently using mdbox with zlib compression plugin. The backups need to be maildir without compression. How can I accomplish this using dsync? The following just causes each msg file in maildir to be compressed as well. dsync -f -u user1 backup maildir:/var/tmp/user1 While this just causes the dsync to fail while spewing a bunch of errors because it can no longer read the compressed mdbox files. dsync -f -u user1 -o mail_plugins= backup maildir:/var/tmp/user1 # doveconf -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_debug_passwords = yes auth_default_realm = domain1.net auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no dotlock_use_excl = no lda_mailbox_autocreate = yes lock_method = dotlock mail_access_groups = mail mail_debug = yes mail_fsync = always mail_location = mdbox:~/mail:INDEX=~/index mail_plugins = quota zlib mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_read_locks = dotlock mbox_write_locks = dotlock mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 20 M mmap_disable = yes namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Sent autosubscribe5 = INBOX mail_max_userip_connections = 10 managesieve_max_line_length = 65536 quota = dict:User quota::file:%h/dovecot.quota quota2_rule = Trash:storage=+10%% quota3_rule = Junk:storage=+20%% quota_rule = *:storage=100M:messages=100000 recipient_delimiter = + sieve_before = /var/opt/mail/global.sieve/ zlib_save = gz zlib_save_level = 9 } pop3_reuse_xuidl = yes protocols = imap pop3 sieve lmtp service auth { inet_listener auth { port = 113 } unix_listener auth-userdb { user = nobody } } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 10 service_count = 1 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota zlib sieve } protocol imap { mail_plugins = quota zlib imap_quota } protocol sieve { mail_max_userip_connections = 10 mail_plugins = quota zlib managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } protocol lmtp { mail_plugins = quota zlib sieve }

2 2

[Dovecot] BLF-CRYPT passwords
by KT Walrus 04 Feb '14

04 Feb '14

I’m using the Dovecot Enterprise Edition on Centos 6.5, but Blowfish password hashes don’t seem to work. What can I do to enable Blowfish hashes for passwords? Maybe I don’t have my installation configured properly? Note that I really want to use the existing Blowfish hashes in my MySQL database for Dovecot Authentication. The hashes are generated by PHP crypt() that has Blowfish support built-in. I looked at PHP’s sources, and PHP uses crypt_blowfish.c from http://www.openwall.com/crypt/. This code is in the public domain and could easily be used by Dovecot to support Blowfish passwords on all platforms (if Dovecot doesn’t already support Blowfish on all platforms). Kevin

2 1

[Dovecot] Namespace Mistake
by Silvio Siefke 04 Feb '14

04 Feb '14

Hello, i try to setup the Dovecot Tutorial on http://wiki2.dovecot.org/HowTo/VirtualUserFlatFilesPostfix But when send message i become the follow error message: <dovecot.log> Feb 03 18:06:09 lmtp(8386, webmaster(a)silviosiefke.com) Error: user webmaster(a)silviosiefke.com: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" <dovecot-debug.log> Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: Effective uid=5000, gid=5000, home=/var/vmail/silviosiefke.de/webmaster Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/maildir Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: maildir++: root=/var/vmail/silviosiefke.de/webmaster/maildir, index=, indexpvt=, control=, inbox=/var/vmail/silviosiefke.de/webmaster/maildir, alt= Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: initializing backend with data: vfile:/var/vmail/conf.d/silviosiefke.de/acls:cache_secs=300 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: acl username = webmaster(a)silviosiefke.de Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: owner = 1 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl vfile: Global ACL directory: /var/vmail/conf.d/silviosiefke.de/acls Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: Namespace : type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/var/vmail/public:LAYOUT=fs:INDEX=~/public Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: fs: root=/var/vmail/public, index=/var/vmail/silviosiefke.de/webmaster/public, indexpvt=, control=, inbox=, alt= Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: initializing backend with data: vfile:/var/vmail/conf.d/silviosiefke.de/acls:cache_secs=300 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: acl username = webmaster(a)silviosiefke.de Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: owner = 0 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl vfile: Global ACL directory: /var/vmail/conf.d/silviosiefke.de/acls Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/maildir Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: maildir++: root=/var/vmail/silviosiefke.de/webmaster/maildir, index=, indexpvt=, control=, inbox=, alt= Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: initializing backend with data: vfile:/var/vmail/conf.d/silviosiefke.de/acls:cache_secs=300 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: acl username = webmaster(a)silviosiefke.de Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl: owner = 1 Feb 03 18:06:09 lmtp(8389, webmaster(a)silviosiefke.de) Debug: acl vfile: Global ACL directory: /var/vmail/conf.d/silviosiefke.de/acls <mail.log> Feb 3 18:06:09 ks3374456 postfix/lmtp[8384]: E529E2452CC: to=<webmaster(a)silviosiefke.com>, relay=ks3374456.kimsufi.com[private/dovecot-lmtp], delay=350, delays=350/0.02/0.06/0.02, dsn=4.3.0, status=deferred (host ks3374456.kimsufi.com[private/dovecot-lmtp] said: 451 4.3.0 <webmaster(a)silviosiefke.com> Temporary internal error (in reply to end of DATA command)) Feb 3 18:06:09 ks3374456 postfix/lmtp[8385]: 7F6A12452C5: to=<webmaster(a)silviosiefke.de>, relay=ks3374456.kimsufi.com[private/dovecot-lmtp], delay=408, delays=408/0.02/0.05/0.02, dsn=4.3.0, status=deferred (host ks3374456.kimsufi.com[private/dovecot-lmtp] said: 451 4.3.0 <webmaster(a)silviosiefke.de> Temporary internal error (in reply to end of DATA command)) Feb 3 18:06:23 ks3374456 postfix/smtpd[8393]: connect from mail156.grifadder.com[85.187.97.156] Feb 3 18:06:23 ks3374456 postfix/smtpd[8393]: NOQUEUE: reject: RCPT from mail156.grifadder.com[85.187.97.156]: 450 4.1.1 <info(a)silviosiefke.de>: Recipient address rejected: unverified address: host ks3374456.kimsufi.com[private/dovecot-lmtp] said: 550 5.1.1 <info(a)silviosiefke.de> User doesn't exist: info(a)silviosiefke.de (in reply to RCPT TO command); from=<bounce-2696-15045860-2900-248(a)hausgif.com> to=<info(a)silviosiefke.de> proto=ESMTP helo=<mail156.grifadder.com> Feb 3 18:06:23 ks3374456 postfix/smtpd[8393]: disconnect from mail156.grifadder.com[85.187.97.156] # dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.10.23-xxxx-std-ipv6-64 x86_64 Gentoo Base System release 2.2 debug_log_path = /var/log/dovecot-debug.log info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/maildir mail_plugins = acl managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { list = yes location = maildir:/var/vmail/public:LAYOUT=fs:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve } protocols = imap lmtp service auth-worker { user = dovecot } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = dovecot } service imap-login { inet_listener imap { address = 37.187.103.194 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/dovecot/server.pem ssl_key = </etc/ssl/dovecot/server.key userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl sieve postmaster_address = webmaster(a)silviosiefke.com } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = acl imap_acl mail_log notify Thank you for help & Nice Day Silvio

3 3

Re: [Dovecot] mail_log_events, but who exactly triggered events? [feature request]
by Arkadiusz Miśkiewicz 04 Feb '14

04 Feb '14

On Tuesday 04 of February 2014, Steffen Kaiser wrote: > On Tue, 4 Feb 2014, Arkadiusz Miśkiewicz wrote: > > Date: Tue, 4 Feb 2014 13:09:15 +0100 > > From: Arkadiusz Miśkiewicz <arekm(a)maven.pl> > > To: dovecot(a)dovecot.org > > Subject: Re: [Dovecot] mail_log_events, > > > > but who exactly triggered events? [feature request] > > > > On Thursday 30 of January 2014, Steffen Kaiser wrote: > >> On Thu, 30 Jan 2014, Reindl Harald wrote: > >>> Am 30.01.2014 12:04, schrieb Arkadiusz Miśkiewicz: > >>>> On Thursday 30 of January 2014, Reindl Harald wrote: > >>>>> Am 30.01.2014 10:50, schrieb Arkadiusz Miśkiewicz: > >>>>>> mail_log_events is nice addition but how to log who exactly > >>>>>> triggered particular event? For example 5 users from 5 IP addresses > >>>>>> uses single imap user/mailbox. > >>>>>> > >>>>>> One of them deletes email and I'm logging delete related events. The > >>>>>> only logged thing is: > >>>>>> > >>>>>> dovecot: imap(user): delete: box=INBOX, uid=673287, > >>>>>> msgid=<some@thing>, size=1230 > > > > Here is a feature request: > > > > Add optionally (or unconditionally) logging of session id in > > mail_log_events. > > > > Timo, is this possible? > > > > (the same session id that appears in login log entries: dovecot: > > imap-login: Login: user=<someone2>, method=PLAIN, rip=aaa, lip=yyy, > > mpid=11682, TLS, session=<U1lD9y3xoQBPuvZx>) > > > > So for example this would get logged: > > dovecot: imap(user): delete: box=INBOX, uid=673287, msgid=<some@thing>, > > size=1230, session=<U1lD9y3xoQBPuvZx> > > did you've tried this: > http://wiki2.dovecot.org/Variables > there is the session variable and the mail_log_prefix setting. Should > work, IMHO. Wow, easy. Works nicely. Thanks! -- Arkadiusz Miśkiewicz, arekm / maven.pl

1 0

[Dovecot] Duplicate namespace prefix: ""
by Silvio Siefke 04 Feb '14

04 Feb '14

Hello, i try to run the mail system which explain dovecot in the wiki. http://wiki2.dovecot.org/HowTo/VirtualUserFlatFilesPostfix I have that complete write in the config, only the domain and user settings i changed. But something is wrong but i not found where is the mistake. <dovecot.log> Feb 03 16:12:52 lmtp(1079, webmaster(a)silviosiefke.de) Error: user webmaster(a)silviosiefke.de: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" <mail.log> Feb 3 16:16:14 ks3374456 postfix/qmgr[1067]: 311A324525D: from=<double-bounce(a)ks3374456.kimsufi.com>, size=254, nrcpt=1 (queue active) Feb 3 16:16:14 ks3374456 postfix/lmtp[1308]: 311A324525D: to=<info(a)silviosiefke.de>, relay=ks3374456.kimsufi.com[private/dovecot-lmtp], delay=0.09, delays=0.04/0.01/0/0.04, dsn=5.1.1, status=undeliverable (host ks3374456.kimsufi.com[private/dovecot-lmtp] said: 550 5.1.1 <info(a)silviosiefke.de> User doesn't exist: info(a)silviosiefke.de (in reply to RCPT TO command)) Feb 3 16:16:14 ks3374456 postfix/qmgr[1067]: 311A324525D: removed Has someone an idea what can be wrong. Thank you for help & Nice Day Silvio

2 2

[Dovecot] mail_log_events, but who exactly triggered events?
by Arkadiusz Miśkiewicz 04 Feb '14

04 Feb '14

Hi. mail_log_events is nice addition but how to log who exactly triggered particular event? For example 5 users from 5 IP addresses uses single imap user/mailbox. One of them deletes email and I'm logging delete related events. The only logged thing is: dovecot: imap(user): delete: box=INBOX, uid=673287, msgid=<some@thing>, size=1230 which tells me nothing about who triggered it actually (note all 5 users were logged in at deletion time) How to solve this problem? Thanks, -- Arkadiusz Miśkiewicz, arekm / maven.pl

3 6

[Dovecot] Dovecot 2.2.10 shared mailbox
by Florin Portase 04 Feb '14

04 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 During some errors with domain dovecot.org, I didn't receive any answer. So here is output of dovecot -n first_valid_uid = 420 info_log_path = /var/log/dovecot/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/errors.log mail_plugins = " zlib expire acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = no list = children location = maildir:/home/vpopmail/Public/Maildir prefix = Shared. separator = . subscriptions = yes type = shared } namespace { hidden = no inbox = yes list = yes location = mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { driver = vpopmail } plugin { acl = vfile expire = INBOX.Trash expire2 = INBOX.Spam expire3 = INBOX.Junk quota = maildir quota_rule2 = INBOX.Trash:ignore quota_rule3 = INBOX.Sent:ignore sieve = ~/Maildir/sieve/dovecot.sieve sieve_after = ~/Maildir/sieve/01_vacation.sieve sieve_before = /etc/dovecot/sieve/global.sieve sieve_dir = ~/Maildir/sieve sieve_global_dir = /etc/dovecot/sieve/ sieve_quota_max_scripts = 50 zlib_save = bz2 } protocols = imap sieve pop3 service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/run/auth-master { group = vchkpw mode = 0660 user = vpopmail } unix_listener /var/run/private/auth { group = mode = 0666 user = } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = dovecot vsz_limit = 8 G } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = 0.0.0.0 port = 143 ssl = no } inet_listener imaps { address = 0.0.0.0 port = 993 ssl = yes } privileged_group = process_limit = 128 process_min_avail = 3 protocol = imap service_count = 1 type = login user = dovecot vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 50 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 128 process_min_avail = 3 protocol = sieve service_count = 1 type = login user = dovecot vsz_limit = 64 M } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = 0.0.0.0 port = 110 ssl = no } inet_listener pop3s { address = 0.0.0.0 port = 995 ssl = yes } privileged_group = process_limit = 128 process_min_avail = 3 protocol = pop3 service_count = 1 type = login user = dovecot vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 50 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } ssl_cert = </var/qmail/control/servercert.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </var/qmail/control/servercert.pem userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } verbose_proctitle = yes verbose_ssl = yes protocol imap { imap_max_line_length = 64 k mail_plugins = quota imap_quota zlib imap_zlib acl imap_acl expire } protocol pop3 { mail_plugins = quota pop3_no_flag_updates = no pop3_uidl_format = %v-%u } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lda { auth_socket_path = /var/run/auth-master info_log_path = /var/log/dovecot-lda/lda.log log_path = /var/log/dovecot-lda/lda-errors.log mail_fsync = optimized mail_plugins = sieve quota autocreate expire postmaster_address = angryninja(a)medianetork.ro sendmail_path = /var/qmail/bin/sendmail } protocol lmtp { mail_fsync = optimized } type of error: COREDUMP Feb 04 11:49:59 imap(portase.florin(a)medianetork.ro): Fatal: master: service(imap): child 23391 killed with signal 11 (core dumped) Disabling of shared mailbox results in correct functioning of dovecot. To mention again: dovecot version previous to 2.2 was working OK. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS8McEAAoJECEzxtLP+204yTIIAI9wH1KKwImdBRipKX12ibfT q+WPazWE5gTRNTf+BG4yaxE+UKtm6KchJovTGdALdfShU24pELl0NEAt3j5OHIsA 5OP3nMddhySzN8DicWarp3eKfYb4itBuHvHaJAtLH9wtgWtqDjYw2q3sy+qNw+zN 6p8KFnNVKi53dgUkog+wb4cOSVjVnmIzSpU7PNNRU+dMaKpbARiWBPXP5sp/B9px RZCmvDedJhHb083KQDqNtR/mlTOhciC8oU/9Nn5WZmaTJAe4gusiRISAWhmH9fnJ IUV6DeEGZ8fbmHdXOQ2U72gPiXyxtFjTc8kURWhbhuzgeKLsSGennV/wLv0U7lw= =tDEn -----END PGP SIGNATURE-----

1 0

[Dovecot] zlib unexpected EOF
by Anand Kumria 04 Feb '14

04 Feb '14

Hi, I am seeing occasional log entries like: Feb 4 06:20:01 mail1 dovecot: imap(user(a)example.com): Error: read(<imap client>) failed: zlib.read(<imap client>): unexpected EOF at 894774 Feb 4 06:20:01 mail1 dovecot: imap(user(a)example.com): Disconnected in APPEND (1 msgs, 201 secs, 0/5180550 bytes) in=894774 out=643701 I've been able to correlate this to users - using Thunderbird - complaining that they have been unable to "send email". Is the problem on the Dovecot side, their side or something else? If on the Dovecot any pointers and what I should look at? Thanks, Anand

2 1

[Dovecot] Dovecot2 + Quota
by drum.lucas＠gmail.com 04 Feb '14

04 Feb '14

Hello! I need to configure Quota on Roundcubemail with Dovecot2. So, I did: 90-quota.conf: # SQL backend: quota = dict:User quota::proxy::sqlquota quota_rule = *:storage=20M:messages=1000 } dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } OK, works! but, My webmail shows me 20M of quota. But on my Postfixadmin I configured 200M. How can I fix this? Att; *Lucas Possamai* http://about.me/lucaspossamai https://www.digitalocean.com/?refcode=25021cb7dbdf

4 5

[Dovecot] Dovecot auth user lookup patch for maildrop 2.7.1
by Osamu Aoki 03 Feb '14

03 Feb '14

Hi, I just updated patch for maildrop to 2.7.1 which moved many directories to libs/. http://anonscm.debian.org/gitweb/?p=collab-maint/maildrop.git;a=blob;f=debi… Osamu

1 0

[Dovecot] Dovecot 2.2.10 shared mailbox
by Florin Portase 03 Feb '14

03 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, I've just upgraded my dovecot from version 2.1.7 to 2.2.10 and since then I encounter errors when I'm enabling SHARED MAILBOX: here is part of dovecot.conf: .................... mail_plugins = $mail_plugins zlib expire acl namespace { type = shared prefix = Shared. separator = . list = children location = maildir:/home/vpopmail/Public/Maildir subscriptions = yes } namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . subscriptions = yes type = private mailbox Trash { auto = subscribe special_use = \Trash } ................ protocol imap { imap_max_line_length = 64 k #mail_plugins = quota imap_quota autocreate zlib imap_zlib acl imap_acl expire mail_plugins = quota imap_quota zlib imap_zlib acl imap_acl expire } ................... plugin { quota = maildir quota_rule2 = INBOX.Trash:ignore quota_rule3 = INBOX.Sent:ignore ##autocreate = INBOX.Spam ##autosubscribe = INBOX.Spam expire = INBOX.Trash expire2 = INBOX.Spam expire3 = INBOX.Junk zlib_save = bz2 acl = vfile } To mention: on version 2.1.xx the shared mail box was working flawless. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS68NDAAoJECEzxtLP+204uKIIAKFjl28qHPJvrR9ipO3NMAAx fRMiZ8I9cVaJpqYmOKnBgChPzexE3Mh3lStP+jfX12OaJ8Fgk9r0yPXwAILpY2Ef 7Uirpj0iL5pIwGhTURzt+sgbxu24YdJMRrHr5OtL0H+e1rP27injAaZYPhr4A2bk QbbhQic62S+5KNvYC/O4154fwlcgBDRkfSvlg8scq4h5faDrOR30Gjouf4PV6ZBe jwp3rGGyNOc52LyQKqBxA/JyiOXjEvamldIe0Ubjm9bh2EOmOkCdhC/OWpBRT+I0 A36syB+ouO4GXqDGWeMD8i8HD0o4eVfU11cJCDAB2tMrdSP8b2PTBWMHI65aud4= =+XmP -----END PGP SIGNATURE-----

2 1

[Dovecot] lmtp_save_to_detail_mailbox per address?
by Andrew Ray 03 Feb '14

03 Feb '14

Is there any way to control/disable this for certain mailboxes? For one account (that handles bounces) I need it disabled, for all the other (normal) accounts its great. -- Andrew Ray

3 2

[Dovecot] Assertion failed with imapc after upgrading Dovecot from 2.1.7 to 2.2.9
by Sylvain 29 Jan '14

29 Jan '14

Hi ! I have an old Courier IMAP and in front of it, I have put a proxy cache with Dovecot/imapc. I use Debian Wheezy (stable) which package Dovecot in version 2.1.7. I have tested the upgrade to Debian Jessie (testing) which package Dovecot in version 2.2.9 but an assertion is thrown : dovecot: imap(xxx): Panic: file imapc-list.c: line 499 (imapc_list_delete_unused_indexes): assertion failed: (strncmp(vname, fs_list->ns->prefix, fs_list->ns->prefix_len) == 0) I have checked source code and have seen that if *imapc_list_prefix* is not set, assertion will not be "walked". It's works but special inbox aren't detected correctly in email clients. If I understand the meaning of *vname* variable, it is because our Courier IMAP send us "INBOX" which is the value of my *imapc_list_prefix* and thus, assertion is thrown. Here some details of my tests : Courier IMAP : * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING for distribution information. a login xxx xxx a OK LOGIN Ok. a list "" "*" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Junk" * LIST (\Unmarked \HasChildren) "." "INBOX" a OK LIST completed Dovecot version 2.1.7 : * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a login xxx xxx a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE] Logged in a list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren \Drafts) "." "INBOX.Drafts" * LIST (\HasNoChildren \Trash) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren \Sent) "." "INBOX.Sent" * LIST (\HasNoChildren \Junk) "." "INBOX.Junk" a OK List completed. Dovecot version 2.2.9 : * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a login xxx xxx a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in a list "" "*" Connection closed by foreign host. And the dovecot configuration relative to the inbox : imapc_list_prefix = INBOX namespace inbox { inbox = yes separator = . prefix = INBOX. } Any help will be welcome :) Sylvain

1 1

[Dovecot] Shared mailbox ACL
by Alex Ferrara 29 Jan '14

29 Jan '14

Hi everyone, I am having some trouble with shared folders in trying to replicate how we use them with a Cyrus backend. The auth database is Samba4 active directory, so I am using an LDAP lookup to authenticate and forcing the UID and GID to be all the same. I have a post-login script that sets the group ACL, and this seems to be working fine. /mnt/mail is an NFS mount to a FreeNAS machine, and there is only one Dovecot server connecting to that NFS share. I have been able to get the inbox of the shared mailbox to appear in Thunderbird, but I would like to allow all subfolders to have the same ACLs. Is there a way to do this without having an ACL entry for each folder in the dovecot-acl file? I also cannot seem to create folders under the shared inbox. Thanks. Below is the output of /mnt/mail/acl/shared-mailboxes shared/shared-boxes/group/accounting/accounting 1 shared/shared-boxes/group/team1/team1 1 shared/shared-boxes/group/team2/team2 1 Below is the output of dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-22-pve x86_64 Debian 7.3 nfs auth_mechanisms = plain login auth_username_format = %n mail_debug = yes mail_location = maildir:/mnt/mail/mailboxes/%n/Maildir:INDEX=/var/local/dovecot-indexes/%n mail_plugins = acl mail_shared_explicit_inbox = no managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = yes location = maildir:/mnt/mail/mailboxes/%%n/Maildir:INDEX=/var/local/dovecot-shared/%%n prefix = ZGroup/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/mnt/mail/acl/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-postlogin { executable = script-login /usr/local/bin/postlogin.py user = vmail } service imap { executable = imap imap-postlogin } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = acl imap_acl }

2 4

Re: [Dovecot] Architecture for large Dovecot cluster
by Joseph Tam 29 Jan '14

29 Jan '14

>> Just a guess, but I expect the difference is because NetApp de-dupes >> by checksumming blocks and mark whole blocks as duplicates if they >> have the same checksum. > > True, the start of the message is always at byte 0, but because of > different header length per user for the same message (different mail > address with different lengths) the body will never start at the same > byte. Oh yes, that's right. I confused maildir format with sendmail queue files that separates header and body. There is still some similarlity for mass mailouts to the same mail domain: they will have almost identical headers +/- message IDs and a few bytes here and there, but as you say, SiS is the way to go for deduping bulky message attachments. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] recipient_delimiter -- feature request
by Andrew Ray 29 Jan '14

29 Jan '14

Hi, It would be nice if the recipient_delimiter configuration option supported multiple recipient delimiters as Postfix now does. e.g. now if I set: recipient_delimiter = +- in Postfix, then test-extension(a)sample.com and test+extension(a)sample.com are both recognized. But if I set: recipient_delimiter = +- in Dovecot, neither of the above are recognized and instead test+-extension(a)sample.com is valid. Well, presently this feature isn't that important to me, but I imagine it could be a source of confusion for people who are migrating from say qmail to postfix (as I am doing) and notice Postfix's cool ability to support both types of delimiters and assume Dovecot will as well (as I did). Thanks, Andrew Ray -- Andrew Ray +1 404-418-5443 +421 (0) 917 832 253 http://guns.freedomlives.net/

2 2

[Dovecot] post-login scripting failing with "denied access to user" v2.1.7
by Frank 29 Jan '14

29 Jan '14

I am trying to have a default sieve rule for new mailboxes that can be edited by users using the round cube sieve plugin. It would actually be better executed when a new user is created but my postfixadmin runs on a separate machine so that's a bit tricky. The "sieve-default =" setting won't quite achieve what I want as I want users to be able to edit the default rule (to adjust SPAM level) Mail works fine before I add my post-login script to 10-master.conf ---------------------- service imap { # tell imap to do post-login lookup using a socket called "imap-postlogin" executable = imap imap-postlogin } service imap-postlogin { # all post-login scripts are executed via script-login binary executable = script-login /etc/dovecot/custom_sieve/postlogin.sh # the script process runs as the user specified here (v2.0.14+): user = mail # also tried $default_internal_user and root # this UNIX socket listener must use the same name as given to imap executable unix_listener imap-postlogin { } } After adding this setting, login fails and gives the error below. It certainly looks like a permission issue, but I have checked my script is executable and owned by vmail:vmail. The bash script executes fine as the mail user. The other possibility is that dovecot is denying access to the $HOME variable, but that seems unlikely. Nevertheless, I am stuck! Log shows: ------------------ dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) dovecot: auth-worker(17522): mysql(database1): Connected to database postfixadmin dovecot: imap-login: Login: user=<test2(a)fqdn.net>, method=PLAIN, rip=10.0.3.120, lip=10.0.1.180, mpid=17524, TLS, session=<+blqxxxxxxxxxM> dovecot: imap(test2(a)fqdn.net): Post-login script denied access to user test2(a)fqdn.net BASH script: /etc/dovecot/custom_sieve/postlogin.sh -------------------------------------------------- #!/bin/sh if [ ! -f $HOME/dovecot.sieve ] # if file doesn't exist then mkdir -p $HOME/sieve cp /etc/dovecot/custom_sieve/default.sieve $HOME/sieve/managesieve.sieve ln -s $HOME/sieve/managesieve.sieve $HOME/dovecot.sieve fi DEFAULT SIEVE RULE: /etc/dovecot/custom_sieve/default.sieve ----------------------------------- require ["fileinto"]; # rule:[SPAM] if header :contains "X-Spam-Level" "**********" { fileinto "Junk"; } Config ======= # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext4 dict { sqldomainquota = mysql:/etc/dovecot/dovecot-sql-domain.conf sqluserquota = mysql:/etc/dovecot/dovecot-dict-sql-user.conf } mail_location = maildir:/home/vmail/%d/%n/Maildir:INDEX=/home/vmail/%d/%n/Maildir/indexes mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User Quota::proxy::sqluserquota quota_rule2 = Trash:storage=+100M sieve = ~/../.dovecot.sieve sieve_dir = ~/../sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-postlogin { executable = script-login /var/spool/mail/postlogin.sh user = vmail } service imap { executable = imap imap-postlogin } ssl_cert = </etc/ssl/mailserver/mailserver.pem ssl_key = </etc/ssl/mailserver/private/mailserver_dcp.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota sieve" postmaster_address = hidden(a)fqdn.net } protocol imap { mail_plugins = " quota imap_quota" }

2 2

Re: [Dovecot] Architecture for large Dovecot cluster
by Joseph Tam 28 Jan '14

28 Jan '14

Sven Hartge <sven(a)svenhartge.de> wrote: > Interesting datapoint: NetApp Deduplication did only recover about 1% of > storage space with mdbox-based mail storage, while on an maildir-based > mail storage, the rate was about 15%. (This was tested with a copy of > real user data, so is accurate for my workload.) Just a guess, but I expect the difference is because NetApp de-dupes by checksumming blocks and mark whole blocks as duplicates if they have the same checksum. The message body has the same block offset in maildir (i.e. the start of a message is at byte 0), whereas mdbox might align message body anywhere in a block, so you might have 512 different block configurations for the same message. I don't know whether message alignment would be a worthwhile optimization for mdbox. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] Architecture for large Dovecot cluster
by Stan Hoeppner 28 Jan '14

28 Jan '14

This went to me only so bringing back on list. On 1/24/2014 11:09 AM, Tom Johnson wrote: > Is anybody using the Object Storage plugin for large-scale > installations? I've not used it. > We're considering it, but are thinking of an in-house > S3 storage system (riak, or ceph, or ?) Looking to support perhaps > 300k users. I was thinking that if we use a bank of dovecot servers > (with director) with ssds as cache, we might be able to consolidate > all the storage on something like a riak cluster, which would make > scaling simple and inexpensive - certainly much less than a NetApp > solution. Everything costs less than a NetApp...except an EMC. > If anyone has any first-hand experience (or even > off-the-top-of-their-head thoughts), I'd love to hear them) Distributed filesystems give you the advantage of a single filesystem namespace with massive amounts of storage, fairly easy addition of storage space, and distributed replication to allow failure of a storage node without service interruption. Replication mitigates node failure, but not disk failure, so you still need RAID in each node. So you have RAID6 in a node and filesystem block mirroring amongst nodes. Thus storage utilization is -worse- than direct attach, CFS on SAN, or NFS head attached RAID10 and far worse than RAID6 in these 3 setups. And if using large SSD cache you'd surely use RAID6 with DAS, CFS, or NFS. You'd need half as many disk drives vs DFS. Each DFS expansion, assuming the typical model, entails the cost of a server, RAID HBA (unless using md) and disks, not strictly buying disks as with DAS, CFS/SAN, or NFS filer. Then you also need more switch ports, more power connections, greater UPS capacity due to all the CPUs, RAM, etc in the nodes. And you'll have a higher electric bill. So while a distributed filesystem storage architecture may seem less expensive it may not be. And just as one can build a DIY DFS cluster, one can also build a DIY NFS cluster instead of buying a NetApp, saving significant cash on the front end box and on disks since you'd need half as many vs a distributed filesystem architecture, though failure of one node may not be quite as graceful as with a NetApp losing a controller board. -- Stan

3 4

[Dovecot] Replication - what am I doing wrong?
by IT geek 31 27 Jan '14

27 Jan '14

Hi, I'm having issues getting replication working, and I'm not also not having much luck finding help on it. So I'm wondering... am I not asking the right questions? Or am I not providing enough information... or do we just not know how this aspect of the technology works? If it's the former, then any pointers on what questions to ask or information to provide would be very helpful. If the community genuinely doesn't know how this works then that's okay too - I will look at another solution (if one exists) and try to move on. But if I can get this working then that would be amazing as I really like Dovecot and would be gutted to move away from it. -Mark

2 2

[Dovecot] managesieve - point me in the right direction?
by erik 27 Jan '14

27 Jan '14

Hi, I am using Dovecot 2.1.16. I'm trying to get Roundcube to talk to the managesieve plugin. Postfix/Dovecot/Roundcube all exist on the same server. I'd like to get managesieve working. I've gone through a few guides, such as: https://wiki.archlinux.org/index.php/dovecot#Sieve But so far roundcube won't connect to the managesieve plugin. ("Cant reach server"). I see that port 4190 is listening and I can telnet to that port: Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN LOGIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." I'm not sure what else to check. Any help appreciated!

2 1

[Dovecot] Panic: file index-mailbox-check.c: line 75 (index_mailbox_check_add): assertion failed: (box->notify_min_interval > 0)
by Kevin Holly 27 Jan '14

27 Jan '14

Hey guys, i have a weird problem i'm trying to fix since 5 months now, but i really couldn't find any explanation, why this happens and how it can be fixed. My client is Thunderbird, my dovecot version is 2.1.7-7 from the official Debian repo. If you want to see my config i'll grab all the fils together and send it to you. This is the error i'm always getting when my client tries to get new mails, which i want to get rid off: http://sprunge.us/NZhf Jan 25 11:49:30 old dovecot: auth-worker(15979): Debug: sql(root(a)hallowe.lt,81.217.212.85): query: SELECT password FROM mailbox WHERE username = 'root(a)hallowe.lt' Jan 25 11:49:30 old dovecot: auth: Debug: client out: OK#0111#011user=root(a)hallowe.lt Jan 25 11:49:30 old dovecot: auth-worker(15979): Debug: sql(root(a)hallowe.lt,81.217.212.85): SELECT CONCAT('maildir:/var/vmail/',maildir) AS mail, 1000 AS uid, 1000 AS gid FROM mailbox WHERE username = 'root(a)hallowe.lt' Jan 25 11:49:30 old dovecot: auth: Debug: master out: USER#0113983671297#011root@hallowe.lt#011mail=maildir:/var/vmail/hallowe.lt/root/#011uid=1000#011gid=1000 Jan 25 11:49:30 old dovecot: imap-login: Login: user=<root(a)hallowe.lt>, method=PLAIN, rip=81.217.212.85, lip=10.111.56.107, mpid=17606, TLS, session=<rQGqOsnwuABR2dRV> Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: Effective uid=1000, gid=1000, home= Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: quota: No quota setting - plugin disabled Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Debug: maildir++: root=/var/vmail/hallowe.lt/root, index=, control=, inbox=/var/vmail/hallowe.lt/root, alt= Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Panic: file index-mailbox-check.c: line 75 (index_mailbox_check_add): assertion failed: (box->notify_min_interval > 0) Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f858118714a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f858118718e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f858115e82a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x99027) [0x7f858146b027] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x4ccc9) [0x7f858141ecc9] -> dovecot/imap(cmd_idle+0x66) [0x7f8581907c96] -> dovecot/imap(command_exec+0x3c) [0x7f858190dedc] -> dovecot/imap(+0x11f2e) [0x7f858190cf2e] -> dovecot/imap(+0x11fda) [0x7f858190cfda] -> dovecot/imap(client_handle_input+0x11d) [0x7f858190d23d] -> dovecot/imap(client_input+0x65) [0x7f858190db35] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f8581194016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f8581194cc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f8581193a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8581180483] -> dovecot/imap(main+0x297) [0x7f85819053e7] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f8580dd7ead] -> dovecot/imap(+0xa561) [0x7f8581905561] Jan 25 11:49:30 old dovecot: imap(root(a)hallowe.lt): Fatal: master: service(imap): child 17606 killed with signal 6 (core dumps disabled) I asked for this in the irc already but got no answer. I would be really happy if someone can help me with this. Thank you very much! Best regards, Kevin Holly - root(a)hallowe.lt - http://hallowe.lt/

2 3

[Dovecot] outlook will not sync
by Eric Broch 27 Jan '14

27 Jan '14

Dovecot users list, I started having problems with Outlook not syncing with Dovecot a public imap folder upon issuing a send/receive in the client; eventually Outlook timed out, and I received the following error in the Dovecot log. Jan 23 09:20:23 imap(user(a)mydom.com): Error: FETCH [] for mailbox projects.myfolder UID 120 got too little data: 7744 vs 7759 Jan 23 09:20:23 imap(user(a)mydom.com): Error: Maildir filename has wrong W value: /home/vpopmail/domains/mydom.com/shared/projects/.myfolder/cur/1384292337.M440452P9788.mail.mydom.com,S=265901,W=269597:2,Sc Jan 23 09:20:23 imap(user(a)mydom.com): Error: Corrupted index cache file /home/vpopmail/domains/mydom.com/shared/projects/.myfolder/dovecot.index.cache: Broken virtual size for mail UID 120 Jan 23 09:20:23 imap(user@mydom): Info: Disconnected: FETCH failed bytes=175/270387 However, I've since removed the file manually, deleted the old folder and recreated it and Outlook will still not sync even in the absence of the above error. Has anyone seen this issue--slow to no Outlook performance with dovecot--before, and/or does anyone have a solution or point me in the right direction? Thanks! Eric I'm using dovecot 2.0.17 with the following configuration # 2.0.17 (684381041dc4+): /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-371.1.2.el5 x86_64 CentOS release 5.10 (Final) auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 32 M auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login digest-md5 cram-md5 auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 89 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot toaster ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 20 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { hidden = no inbox = yes list = yes location = prefix = INBOX. separator = . subscriptions = yes type = private } namespace { hidden = no inbox = no list = yes location = maildir:/home/vpopmail/domains/acemt.com/shared/projects prefix = projects. separator = . subscriptions = yes type = public } passdb { args = cache_key=%u webmail=127.0.0.1 deny = no driver = vpopmail master = no pass = no } plugin { quota = maildir } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = imap quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </var/qmail/control/servercert.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_key = </var/qmail/control/servercert.pem ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_client_workarounds = delay-newmail }

3 2

[Dovecot] dsync failed
by Mario Arnold 26 Jan '14

26 Jan '14

Hello, Since i updated to 2.2.10 there is a problem with dsync: dsync -v -u test(a)vtlx.de backup $SSH -i $KEY -p $PORT $RHOST dsync -u test(a)vtlx.de dsync-remote(test(a)vtlx.de): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/server/sieve/files/t1: Internal attributes cannot be changed directly doveconf -n # 2.2.10 (6018854c8c91): /etc/dovecot/dovecot.conf # OS: Linux 3.12.6-domU i686 Debian jessie/sid ext3 ... managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave ... plugin { ... sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ... protocols = " imap lmtp sieve pop3" Do I need to reconfigure something? Thank you for any hints -- 中華人民共和國

1 0

[Dovecot] userdb maildir permission denied in 2.1.7
by Chris 26 Jan '14

26 Jan '14

Dear All, I'm using version 2.1.7 which currently ships with debian stable. I'd like to use userdb { driver = passwd-file args = username_format=%n /etc/dovecot/users default_fields = uid=vmail gid=vmail override_fields = skip = never result_failure = continue result_internalfail = continue result_success = return-ok } from [1]. The error message is: Jan 25 14:02:03 post1 dovecot: lda(chris): Error: user chris: Initialization failed: Namespace '': stat(/home/vmail/chris/Maildir) failed: Permission denied (euid=1000(chris) egid=1000(chris) missing +x perm: /home/vmail/chris, dir owned by 1001:1001 mode=0700) The skip and result_* commands aren't supported. My users file: chris:{MD5-CRYPT}$1$3uC3URg......:::/home/vmail/chris/:/bin/false:: Dovecot should access the Maildir with vmail:vmail (1001:1001) and not chris:chris (1000:1000)! Thank you in advance! - Chris [1] http://wiki2.dovecot.org/UserDatabase

2 2

[Dovecot] dovecot produces messages dupes after nfs problems
by Patrick Westenberg 25 Jan '14

25 Jan '14

Hi everyone, some days ago I had trouble with my NFS-Server (high delays) which caused dovecot lmtp to deliver the same message several times (up to 10x). I recognized some old/unused .nfsXXXX files in the maildirs which seemed to be index files. I deleted them and everything was fine again. However, there are still 2-3 mailboxen where mails (old and new ones) are delivered multiple times. All duplicates have no "received from" headers. Seperate lmtp log shows only one delivery. Any hint or advice what might be wrong? Regards Patrick # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login disable_plaintext_auth = no dotlock_use_excl = no hostname = mb02.wk-serv.net listen = 172.17.1.2 log_path = /var/log/dovecot.log login_trusted_networks = 172.17.1.3 172.17.1.4 mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service lmtp { executable = lmtp -L inet_listener lmtp { address = 172.17.1.2 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = quota imap_quota }

3 5

[Dovecot] Architecture for large Dovecot cluster
by Murray Trainer 25 Jan '14

25 Jan '14

Hi All, I am trying to determine whether a mail server cluster based on Dovecot will be capable of supporting 500,000+ mailboxes with about 50,000 IMAP and 5000 active POP3 connections. I have looked at the Dovecot clustering suggestions here: http://blog.dovecot.org/2012/02/dovecot-clustering-with-dsync-based.html and some other Dovecot mailing list threads but I am not sure how many users such a setup will handle. I have a concern about the I/O performance of NFS in the suggested architecture above. One possible option available to us is to split up the mailboxes over multiple clusters with subsets of domains. Is there anyone out there currently running this many users on a Dovecot based mail cluster? Some suggestions or advice on the best way to go would be greatly appreciated. Thanks Murray

9 10

[Dovecot] Dovecot on Solaris 10 Segmentation Fault
by Thomas 24 Jan '14

24 Jan '14

Hello, make check on Solaris 10 throws a segmentation fault. The error is independent of the compiler (SunStudio/GCC) and processor architecture (SPARC/x86) and 32 or 64 bit binary. Dovecot Version: 2.2.10 OS: Solaris 10/SPARC & x86 SunStudion Compiler cc: Sun C 5.10 SunOS_sparc Patch 141861-10 2012/11/07 GCC gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath) The error occurs first in: src/lib-http/test-http-url Line 317/318: test_out(t_strdup_printf("url->user = %s", urlp->user), urlp->user == urlt->user); (if commenting out these lines, then it segfaults just in the next test) %make check <--- cut out lot of good output ---> http date invalid [42]: parse Sun Nov 6 08:49:37 0000 ............... : ok http date invalid [42] ............................................... : ok 0 / 150 tests failed http url valid [0]: http_url_parse(http://localhost) ................. : ok http url valid [0]: url->host_name = localhost ....................... : ok http url valid [0]: url->port = (unspecified) ........................ : ok http url valid [0]: url->host_ip = (unspecified) ..................... : ok /bin/bash: line 1: 28764 Segmentation Fault (core dumped) ./$bin gmake[2]: *** [check-test] Error 1 gmake[2]: Leaving directory `/data/obj/dovecot-2.2.10/src/lib-http' gmake[1]: *** [check-recursive] Error 1 gmake[1]: Leaving directory `/data/obj/dovecot-2.2.10/src' gmake: *** [check-recursive] Error 1 % pstack /var/core/core.test-http-url.28764 core '/var/core/core.test-http-url.28764' of 28764: ./test-http-url ff122d50 strlen (3365e, ffbff6fc, ffbfecf9, 0, 0, 0) + 50 ff191c3c vsnprintf (4a638, 10e, 33650, ffbff6f8, 7ffffc00, 2400) + 6c 0002be0c t_strdup_printf (4a638, 2340, 48118, 2e, 48110, e) + 6c 0001635c ???????? (0, 0, 47800, 335c4, 80000000, 40000000) 0001924c test_run (fffd3268, 2cc00, ffbff94c, 2380, 2000, 47e94) + 6c 00016008 _start (0, 0, 0, 0, 0, 0) + 108 % dbx test-http-url /var/core/core.test-http-url.28884 (dbx) examine 0xff122d5c: strlen+0x005c: 0x98132101 (dbx) regs current frame: [1] g0-g1 0x00000000 0x00000000 0x00000000 0x0004a638 g2-g3 0x00000000 0x0004a3bc 0x00000000 0x0004a3b8 g4-g5 0x00000000 0x0004a3c8 0x00000000 0x00000270 g6-g7 0x00000000 0x00000000 0x00000000 0xff272a00 o0-o1 0x00000000 0x00000000 0x00000000 0xfffffaf0 o2-o3 0x00000000 0x00000000 0x00000000 0xffbff798 o4-o5 0x00000000 0x00000000 0x00000000 0x0000002b o6-o7 0x00000000 0xffbfe920 0x00000000 0xff18f498 l0-l1 0x00000000 0x00000073 0x00000000 0x00000000 l2-l3 0x00000000 0x00000000 0x00000000 0x00001000 l4-l5 0x00000000 0x00000000 0x00000000 0x00000000 l6-l7 0x00000000 0xff236c99 0x00000000 0x00000000 i0-i1 0x00000000 0x0003365e 0x00000000 0xffbff8dc i2-i3 0x00000000 0xffbfeed9 0x00000000 0x00000000 i4-i5 0x00000000 0x00000000 0x00000000 0x00000000 i6-i7 0x00000000 0xffbff7b0 0x00000000 0xff191c3c y 0x00000000 0x00000000 ccr 0x00000000 0xfe401005 pc 0x00000000 0xff122d50:strlen+0x50 ld [%o2], %o1 npc 0x00000000 0xff122d54:strlen+0x54 sethi %hi(0x1010000), %o4 (dbx) dis 0xff122d3c 0xff122d3c: strlen+0x003c: be,pn %icc,strlen+0xcc ! 0xff122dcc 0xff122d40: strlen+0x0040: btst 255, %o1 0xff122d44: strlen+0x0044: be,pn %icc,strlen+0xcc ! 0xff122dcc 0xff122d48: strlen+0x0048: inc %o2 0xff122d4c: strlen+0x004c: inc %o2 0xff122d50: strlen+0x0050: ld [%o2], %o1 0xff122d54: strlen+0x0054: sethi %hi(0x1010000), %o4 0xff122d58: strlen+0x0058: sethi %hi(0x80808000), %o5 0xff122d5c: strlen+0x005c: bset 257, %o4 0xff122d60: strlen+0x0060: bset 128, %o5 % truss -f ./test-http-url <--- cut out the beginning of output ---> 28884: open("/platform/SUNW,SPARC-Enterprise-T5220/lib/libc_psr.so.1", O_RDONLY) = 3 28884: mmap(0x00010000, 9244, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_ALIGN, 3, 0) = 0xFF0E0000 28884: munmap(0xFF0E2000, 1052) = 0 28884: close(3) = 0 28884: getpid() = 28884 [28883] 28884: brk(0x0004A3A8) = 0 28884: brk(0x000543A8) = 0 28884: sysinfo(SI_HOSTNAME, "badile", 255) = 7 28884: getpid() = 28884 [28883] 28884: ioctl(1, TCGETA, 0xFFBFF664) = 0 28884: fstat64(1, 0xFFBFF580) = 0 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : http_url_parse(http://localhost)28884: write(1, " : h t t p _ u r l _ p".., 34) = 34 ................. : ok 28884: write(1, " . . . . . . . . . . .".., 24) = 24 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->host_name = localhost28884: write(1, " : u r l - > h o s t _".., 28) = 28 ....................... : ok 28884: write(1, " . . . . . . . . . . .".., 30) = 30 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->port = (unspecified)28884: write(1, " : u r l - > p o r t ".., 27) = 27 ........................ : ok 28884: write(1, " . . . . . . . . . . .".., 31) = 31 http url valid [0]28884: write(1, " h t t p u r l v a l".., 18) = 18 : url->host_ip = (unspecified)28884: write(1, " : u r l - > h o s t _".., 30) = 30 ..................... : ok 28884: write(1, " . . . . . . . . . . .".., 28) = 28 28884: Incurred fault #6, FLTBOUNDS %pc = 0xFF122D50 28884: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 28884: Received signal #11, SIGSEGV [default] 28884: siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000 % apptrace -f ./test-http-url <--- cut out the beginning of output ---> 28897:-> test-http-url -> libc.so.1:int fputs(const char * = 0x33618 "url->host_ip = (unspecified)", FILE * = 0xfef2759c) : url->host_ip = (unspecified) 28897:<- test-http-url -> libc.so.1:fputs() = 0x1c 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x20, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x20 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0x2e, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0x2e 28897:-> test-http-url -> libc.so.1:size_t fwrite(const void * = 0x33e28, size_t = 0x1, size_t = 0x3, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:fwrite() = 0x3 28897:-> test-http-url -> libc.so.1:size_t fwrite(const void * = 0x33e2c, size_t = 0x1, size_t = 0x2, FILE * = 0xfef2759c) 28897:<- test-http-url -> libc.so.1:fwrite() = 0x2 28897:-> test-http-url -> libc.so.1:int __flsbuf(int = 0xa, FILE * = 0xfef2759c) ..................... : ok 28897:<- test-http-url -> libc.so.1:__flsbuf() = 0xa 28897:-> test-http-url -> libc.so.1:int vsnprintf(char * = 0x4a638 "", size_t = 0x10e, const char * = 0x33650 "url->user = %s", va_list = 0xffbff998) apptrace: ./test-http-url: Segmentation Fault(Core dump) Any help about this? Cheers Thomas

2 1

[Dovecot] passphrases
by Benjamin Connelly 24 Jan '14

24 Jan '14

Is there any way to configure the dovecot-sql.conf.ext "connect =" line to use a password= string that contains spaces? (I've tried single quotes, double quotes, escaping the space with backslash. . .) Ben

2 1

[Dovecot] questions about SETQUOTA
by Michael Cramer 24 Jan '14

24 Jan '14

hi, i tried to setup my configuration to use the SETQUOTA command but the only thing i got is: 3 setquota "User quota" (storage 12345) 3 OK Setquota completed. but nothing is changed in database. i modified the password_query and the user_query to return the admin and userdb_admin field, both set to y. all other changes that are done are like in the wiki http://wiki2.dovecot.org/Quota/Configuration enabling debug doesn't show anything in debug.log

2 2

[Dovecot] Dovecot imap-postlogin failed
by Sayajin 24 Jan '14

24 Jan '14

*** This is 2 posts combined into one which I had asked on linuxquestions.org and never got an answer *** Hi, In short I am trying to run a bash script which will then update a mysql database with the last login date/time & last IP for each mailbox. I have searched google dead but still cant figure out what im doing wrong or if there is some issue with the centos 6 rpm's for dovecot. -- - 1st i had the default dovecot in the centos 6 repo's which is version: 2.0.9 - I read that there was an issue with the script-login binary which was fixed in version 2.0.14, so i updated dovecot to version 2.2.7. - This sadly did not fix my issue with the bash script excecuting. In my /etc/dovecot/conf.d/10-master.conf i have the following service imap { executable = imap imap-postlogin } service imap-postlogin { executable = script-login /var/www/lighttpd/mail-admin/scripts/lastLogin.sh } But when i try login i still get the same error as with the previous version: - Nov 27 14:44:36 dovecot: imap(MaIlBoX(a)DoMaIn.co.za): Error: net_connect_unix(/var/run/dovecot/imap-postlogin) failed: No such file or directory - One thing i did notice on the one site was that someone had a ls of their /var/run/dovecot directory, and in there was a binary called imap-postlogin. - But i dont have that binary anywhere on my server, with the old or new version of dovecot. Please any help would be appreciated. ===================================================== ===================================================== Ok well i tried a few other things and got it working a bit more. So the variables that i needed are now being set correctly etc, but im getting authentication errors now which I was not before. my setup in 10-master.conf now looks like the following: service imap-postlogin { executable = script-login /var/www/lighttpd/mail-admin/scripts/lastLogin.sh unix_listener imap-postlogin { user = root } } service imap { executable = imap imap-postlogin } My lastLogin.sh bash script has the following in it for debugging echo "$(date +%Y.%m.%d-%H:%M:%S)"; echo "User: ${USER}" >> /tmp/tracking.log 2>&1; echo "Home: ${HOME}" >> /tmp/tracking.log 2>&1; echo "Client IP: ${IP}" >> /tmp/tracking.log 2>&1; echo "Server IP: ${LOCAL_IP}" >> /tmp/tracking.log 2>&1; The output to my /tmp/tracker.log is the following User: user(a)domain.com Home: /var/spool/mail/domain.com/user Client IP: x.x.x.x Server IP: y.y.y.y The Authentication Error I am getting now dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat dovecot: auth: Debug: auth client connected (pid=25865) dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=VPOQpNvsPwDELro2#011lip=X.X.X.X#011rip=Y.Y. Y.Y#011lport=143#011rport=58175 dovecot: auth: Debug: client passdb out: CONT#0111#011 dovecot: auth: Debug: client in: CONT#0111#011AHN1cHBvcnRAYmxhY2tsaXN0Ym94LmNvbQBzQHlAajFu (previous base64 data may contain sensitive data) dovecot: auth-worker(25868): Debug: Loading modules from directory: /usr/lib64/dovecot/auth dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so dovecot: auth-worker(25868): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so dovecot: auth-worker(25868): Debug: sql(user=user(a)domain.com,Y.Y.Y.Y): query: SELECT CONCAT(mailboxes.local_part,'@',domains.fqdn) as `user`, mailboxes.password AS `password`,'/var/spool/mail/domain.com/user' AS `userdb_home`, 8 AS `userdb_uid`, 12 AS `userdb_gid` FROM `mailboxes`, `domains` WHERE mailboxes.local_part = 'user' AND mailboxes.active = 1 AND mailboxes.domain_name = domains.fqdn AND domains.fqdn = 'domain.com' AND domains.active = 1 dovecot: auth: Debug: client passdb out: OK#0111#011user=user(a)domain.com dovecot: auth: Debug: master in: REQUEST#0112408185857#01125865#0111#0117b2d33b66e121f24e5393e87c3ae855f#011session_pid=25870#011requ est_auth_token dovecot: auth-worker(25868): Debug: sql(user=user(a)domain.com,Y.Y.Y.Y): SELECT '/var/spool/mail/domain.com/user' AS `home`, 8 AS `uid`, 12 AS `gid` dovecot: auth: Debug: master userdb out: USER#0112408185857#011user=user@domain.com#011home=/var/spool/mail/domain.com/user#011uid=8#011gid=12#011auth_token=505201029f52ca4318f4a283c1ad5449afd407d3 dovecot: imap-login: Login: user=<user=user(a)domain.com>, method=PLAIN, rip=Y.Y.Y.Y, lip=X.X.X.X, mpid=25870, TLS, session=<VPOQpNvsPwDELro2> dovecot: imap(user=user(a)domain.com): Debug: Effective uid=8, gid=12, home=/var/spool/mail/domain.com/user dovecot: imap(user=user(a)domain.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/spool/mail/domain.com/user dovecot: imap(user=user(a)domain.com): Debug: maildir++: root=/var/spool/mail/domain.com/user, index=, indexpvt=, control=, inbox=/var/spool/mail/domain.com/user, alt= -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-imap-postlogin-failed-tp46436.… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] doveadm stats top exit with error
by Andreas Schulze 23 Jan '14

23 Jan '14

Hello, looks like a cosmetical problem but I like to mention it though: doveadm stats top is interactive. To exit I press as usual CTRL+C and get ^Cdoveadm(root): Error: close(-1[doveadm-stats.c:496]) failed: Interrupted system call It's dovecot-2.2.10. Andreas

1 0

[Dovecot] Writing an FTS plugin
by John Morrissey 23 Jan '14

23 Jan '14

Hi, I'm having some trouble writing an FTS plugin that uses notmuch (http://notmuchmail.org/) as the backend. As a proof of concept, I'm adding a hardcoded UID to the search results in the plugin's lookup handler: seq_range_array_add(&result->definite_uids, 1, 42); but this UID is never returned by IMAP SEARCH commands. I know the plugin is being used, since I'm also syslogging immediately before the call to seq_range_array_add(). Interestingly, SEARCH commands return correct results (based on the mailbox content and the search terms specified), but I'm not sure where those results are coming from. The notmuch plugin is the only configured FTS plugin: mail_plugins = $mail_plugins fts fts_notmuch plugin { fts = notmuch } What might I be doing wrong? Additionally, notmuch returns message filenames, which I'll need to translate to UIDs. I've seen maildir_uidlist_get_uid(), but I'm not sure where to get the struct maildir_uidlist arg it needs. notmuch only supports the Maildir format, so using a maildir_* function seems a reasonably safe assumption, but is there a better way? john -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

1 1

[Dovecot] IMAP ANNOTATE Extension RFC5257
by Sebastian Schlatow 23 Jan '14

23 Jan '14

Hello, Does Dovecot support the IMAP ANNOTATE Extension RFC5257 http://tools.ietf.org/html/rfc5257? If not, are there any plans to implement the extension? If not, why there is no plan to implement this feature? Regards Sebastian

5 6

[Dovecot] Problem with LDA. When vacation auto-reply sent, the field from=<>.
by Dmitry 23 Jan '14

23 Jan '14

Hi, My problem is that when vacation auto-reply sent the field from=<> Because of this does not work "sender_dependent_relayhost_maps" in postfix. My scheme is: There are several postfix on different machines 1.1.1.1 - domain1 2.2.2.2 - domain2 3.3.3.3 - domain3 All they send messages to one server virtual_transport = lmtp:10.10.10.10:24 where mail is stored. In 10.10.10.10 installed dovecot 2.2.9, dovecot-pigeonhole 0.4.2 and another posfix In postfix inet_interfaces = 10.10.10.10 sender_dependent_relayhost_maps = hash:$config_directory/relayhost_maps relayhost_maps @domain1 [1.1.1.1] @domain2 [2.2.2.2] @domain3 [3.3.3.3] Sieve script make from Roundcube require ["vacation"]; # rule:[autoreply] if true { vacation :days 1 :subject "Test." "Test."; } (if add [":from" string] nothing changes) The letter comes, script fulfills, vacation auto-reply sent. But either /usr/sbin/sendmail -i -f <> -- user@senddomain or, if write in 15-lda.conf submission_host = 10.10.10.10:25 postfix log Jan 1 00:00:00 mail pf-OUT/cleanup[6098]: 4CD104A8A4: message-id=<dovecot-sieve-1390316174-295666-0@mail> Jan 1 00:00:00 mail pf-OUT/qmgr[5950]: 4CD104A8A4: from=<>, size=693, nrcpt=1 (queue active) How to make dovecot and dovecot-pigeonhole write in field MAIL FROM:? Also, I noticed that does not work protocol lda { .. # remember to give proper permissions for these files as well log_path = /var/log/dovecot-lda-errors.log info_log_path = /var/log/dovecot-lda.log } from http://wiki2.dovecot.org/LDA Logs are not written. Thanks and regards, Dmitry

3 6

[Dovecot] beginners sieve: copy not move to subfolder?
by voytek＠sbt.net.au 22 Jan '14

22 Jan '14

I'm trying to learn how do basic stuff with sieve; I pasted this from a tutorial, it works fine, mail is delivered to 'friends' BUT, what should I do to keep mail in main inbasket as well as, copy to subbasket ? tried 'copy' but failed so far main_script: line 6: error: unknown command 'copy' (only reported once at first occurence). even after I added 'copy' to 'require' still failed ? ------------------------------------ require ["fileinto", "reject"]; # Daffy Duck is a good friend of mine. if address :is "from" "daffy.duck(a)example.com" { fileinto "friends"; }

3 2

[Dovecot] IDLE dropping EXISTS events on mass message arrival
by Eric Wong 22 Jan '14

22 Jan '14

Hi, I'm not sure if this is some throttling/DoS protection or a bug. I didn't see notice anything like it mentioned looking at the NEWS file from hg, this is on 2.1.7 on Debian stable. I have a client doing IDLE on INBOX.vomiteer. When individual messages arrive with some time interval in between them, I get EXISTS events for each message as expected. However, when I store a bunch of messages at once (via tag + mass copy in mutt on a fast-ish connection), I get a few EXISTS events (sometimes one, sometimes two) even though I copied a lot of new messages over. I expected to get an EXISTS event for each message which arrived, but perhaps there's some sort of DoS/throttling mechanism. strace -t -s4096 output of the dovecot process below: fd=13 is inotify, you'll see large read(13, ... indicating multiple filenames from inotify. However, only one EXISTS message got written to the socket. I've filtered out the gettimeofday syscalls for brevity. 07:30:02 epoll_wait(9, {}, 6, 3937) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:06 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=25920, ...}) = 0 07:30:06 fstat64(10, {st_mode=S_IFREG|0600, st_size=25920, ...}) = 0 07:30:06 epoll_wait(9, {}, 6, 7865) = 0 07:30:14 setsockopt(11, SOL_TCP, TCP_CORK, [1], 4) = 0 07:30:14 write(11, "* OK Still here\r\n", 17) = 17 07:30:14 setsockopt(11, SOL_TCP, TCP_CORK, [0], 4) = 0 07:30:14 time(NULL) = 1390289414 07:30:14 epoll_wait(9, {{EPOLLIN, {u32=4159555408, u64=4159555408}}}, 6, 22124) = 1 07:30:17 read(13, "\2\0\0\0\200\0\0\0\t\365\r\0000\0\0\0001390289417.M94623P14841.dcvr,S=1580,W=1619:2,S\0\0\2\0\0\0\200\0\0\0\n\365\r\0000\0\0\0001390289417.M94624P14841.dcvr,S=1580,W=1619:2,S\0\0\2\0\0\0\200\0\0\0\v\365\r\0000\0\0\0001390289417.M94625P14841.dcvr,S=1422,W=1460:2,S\0\0\2\0\0\0\200\0\0\0\f\365\r\0000\0\0\0001390289417.M94626P14841.dcvr,S=1422,W=1460:2,S\0\0\2\0\0\0\200\0\0\0\r\365\r\0000\0\0\0001390289417.M94627P14841.dcvr,S=1861,W=1907:2,S\0\0\2\0\0\0\200\0\0\0\16\365\r\0000\0\0\0001390289417.M94628P14841.dcvr,S=1861,W=1907:2,S\0\0\2\0\0\0\200\0\0\0\17\365\r\0000\0\0\0001390289417.M94629P14841.dcvr,S=4732,W=4854:2,S\0\0\2\0\0\0\200\0\0\0\20\365\r\0000\0\0\0001390289417.M94630P14841.dcvr,S=4732,W=4854:2,S\0\0\2\0\0\0\200\0\0\0\21\365\r\0000\0\0\0001390289417.M94631P14841.dcvr,S=4028,W=4128:2,S\0\0\2\0\0\0\200\0\0\0\22\365\r\0000\0\0\0001390289417.M94632P14841.dcvr,S=4028,W=4128:2,S\0\0\2\0\0\0\200\0\0\0\23\365\r\0000\0\0\0001390289417.M94633P14841.dcvr,S=3865,W=3968:2,S\0\0\2\0\0\0\200\0\0\0\24\365\r\0000\0\0\0001390289417.M94634P14841.dcvr,S=3865,W=3968:2,S\0\0", 32768) = 768 07:30:17 epoll_wait(9, {{EPOLLIN, {u32=4159555408, u64=4159555408}}}, 6, 499) = 1 07:30:17 read(13, "\2\0\0\0\200\0\0\0\25\365\r\0000\0\0\0001390289417.M94635P14841.dcvr,S=4092,W=4189:2,S\0\0\2\0\0\0\200\0\0\0\26\365\r\0000\0\0\0001390289417.M94636P14841.dcvr,S=4092,W=4189:2,S\0\0\2\0\0\0\200\0\0\0\27\365\r\0000\0\0\0001390289417.M94637P14841.dcvr,S=1517,W=1552:2,S\0\0\2\0\0\0\200\0\0\0\30\365\r\0000\0\0\0001390289417.M94638P14841.dcvr,S=1517,W=1552:2,S\0\0", 32768) = 256 07:30:17 epoll_wait(9, {}, 6, 498) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/new", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/cur", {st_mode=S_IFDIR|0700, st_size=12288, ...}) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 fstat64(10, {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 pread64(10, "\200\200\200\207@\0\0\20\0\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\1\0\0\0\200\200\200\214\0\1\0\20\0\0$\0\337!\336R\344\231\2L\0\0\0\0\t\"\336R\t\"\336R\0\0\0\0\t\"\336R\0\0\0\0007\n\0\0\200\200\200\204 \0\0\20@\0\4\0\234e\0\0\200\200\200\242\2\0\0\20\317\0\0\0\10\0\0\0\320\0\0\0\10\0\0\0\321\0\0\0\10\0\0\0\322\0\0\0\10\0\0\0\323\0\0\0\10\0\0\0\324\0\0\0\10\0\0\0\325\0\0\0\10\0\0\0\326\0\0\0\10\0\0\0\327\0\0\0\10\0\0\0\330\0\0\0\10\0\0\0\331\0\0\0\10\0\0\0\332\0\0\0\10\0\0\0\333\0\0\0\10\0\0\0\334\0\0\0\10\0\0\0\335\0\0\0\10\0\0\0\336\0\0\0\10\0\0\0\200\200\200\207@\0\0\20\1\0\0\0\0\260\2L\0\0\0\0\4\0\4\0\1\0\0\0\200\200\200\242\0\2\0\20\317\0\0\0\250\275\0\0\320\0\0\0\234\277\0\0\321\0\0\0|\301\0\0\322\0\0\0|\304\0\0\323\0\0\0\200\307\0\0\324\0\0\0|\312\0\0\325\0\0\0h\315\0\0\326\0\0\0\\\320\0\0\327\0\0\0\224\323\0\0\330\0\0\0\210\325\0\0\331\0\0\0h\327\0\0\332\0\0\0h\332\0\0\333\0\0\0l\335\0\0\334\0\0\0h\340\0\0\335\0\0\0T\343\0\0\336\0\0\0H\346\0\0\200\200\200\204 \0\0\0200\0\4\0\337\0\0\0", 8192, 25920) = 408 07:30:17 pread64(10, "", 8192, 26328) = 0 07:30:17 stat64("/home/ew/.maildir/.INBOX.vomiteer/dovecot.index.log", {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 fstat64(10, {st_mode=S_IFREG|0600, st_size=26328, ...}) = 0 07:30:17 time(NULL) = 1390289417 07:30:17 setsockopt(11, SOL_TCP, TCP_CORK, [1], 4) = 0 07:30:17 write(11, "* 32 EXISTS\r\n", 13) = 13 07:30:17 setsockopt(11, SOL_TCP, TCP_CORK, [0], 4) = 0 07:30:17 epoll_wait(9, <unfinished ...> (Nothing happened after this) # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.9.2-x86_64-xxxxxx x86_64 Debian 7.3 auth_mechanisms = plain login log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = never mail_location = maildir:~/.maildir mail_max_userip_connections = 666 mail_privileged_group = mail passdb { driver = shadow } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { address = 127.0.0.1 port = 1434 } process_limit = 10 process_min_avail = 1 } service imap { process_limit = 32 } service pop3-login { process_limit = 10 process_min_avail = 1 } service pop3 { process_limit = 32 } ssl = no userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)dcvr.yhbt.net } -- Eric Wong

2 1

[Dovecot] AD Kerberos and Dovecot
by Christian Felsing 22 Jan '14

22 Jan '14

Hello, I got stucked on Kerberos auth with Dovecot: Jan 22 17:48:36 test dovecot: auth: Error: LDAP: binding failed (dn cn=AUTH\_ldap): Local error, SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_1003' not found) kinit and and ldapsearch with gssapi auth are working. Are there instructions how to set up Kerberos auth with Dovecot and Active Directory? How does Dovecot handle Kerberos tickets? best regards Christian

1 0

[Dovecot] master password
by Marc Perkel 21 Jan '14

21 Jan '14

This is probably easy but how would a set a secret static master password so that if I typed it in for any login it would be happy? I can't use the * separator method in this case because it screws up squirrelmail.

2 1

[Dovecot] Shared mailboxes / IMAP folder performance
by Sebastian Schlatow 21 Jan '14

21 Jan '14

Hello, how performant is an IMAP shared folder / mailbox if it contains 2 million mails? Is it possible two have such a quantity of mails in a shared folder? Is it possible to search that shared folder for mails in a fast way? Regards Sebastian

2 3

[Dovecot] Failure in doveconf
by Andrew Ray 21 Jan '14

21 Jan '14

I ran into a problem while configuring dovecot. Quickly reading the paragraph below, I saw "yes" as one of the options, and put that into the config, as below: # In case of password mismatches, log the attempted password. Valid values are # no, plain and sha1. sha1 can be useful for detecting brute force password # attempts vs. user simply trying the same password over and over again. # You can also truncate the value to n chars by appending ":n" (e.g. sha1:6). auth_verbose_passwords = yes The result from doveconf -n was: doveconf: Error: x�η doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: 0pη (where the error message was always a changing, apparently random set of characters.) So I managed, by going back through the config file and commenting out options, to find this was the problem and then finally read what are the acceptable values. Any other place that I have tried to give a non acceptable value I get a reasonable error message with line number and problem. Well, now I fixed my original problem, but something needs to be adjusted in the error handling code. Sincerely, Andrew Ray -- Andrew Ray +1 404-418-5443 +421 (0) 917 832 253 http://guns.freedomlives.net/

1 0

[Dovecot] forwarded message is broken in 2.2.10 with pigeonhole-0.4.2
by Burckhard Schmidt 21 Jan '14

21 Jan '14

Hi, forwarding a message with sieve like redirect:copy "me(a)other.domain"; was working without any problem until dovecot-2.1.17, dovecots lmtp and dovecot-2.1-pigeonhole-0.3.5. Using dovecot-2.2.10 , dovecots lmtp and dovecot-2.2-pigeonhole-0.4.2 the structure of a forwarded message is broken. Content of a message is not displayed or an attachment (for instance pdf) can not be opened by (different) clients. Writing a html mail or plain one makes no different. I have compared two messages and the main different is a missing Content-Type: multipart/alternative; boundary="...." to encapsulate the body of the forwarded message. Was it lost in sieve? Here parts of a "well" forwarded message: Return-Path: ... ... Received: by mails.cms.hu-berlin.de (Postfix, from userid 29) id A78C738734; Tue, 14 Jan 2014 17:10:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.3.5 X-Sieve-Redirected-From: schmidt(a)mails.cms.hu-berlin.de Delivered-To: <schmidt(a)mails.cms.hu-berlin.de> Received: from mails.cms.hu-berlin.de by suncom1 (Dovecot) with LMTP id p8HoIn9h1VKnTwAA9XuJ/g for <schmidt(a)mails.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:10:54 +0100 ... Message-ID: <52D5618D.6050905(a)gmail.com> Date: Tue, 14 Jan 2014 17:10:53 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: schmidt(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------070108020005050001040207" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------070108020005050001040207 Content-Type: multipart/alternative; boundary="------------090806050202050708030507" --------------090806050202050708030507 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit Hallo. text --------------090806050202050708030507 Content-Type: text/html; charset=ISO-8859-15 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-15"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hallo. text P. </body> </html> --------------090806050202050708030507-- --------------070108020005050001040207 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz9MNCjcyIDAgb2JqDTw ... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------070108020005050001040207-- message end Now a broken message without "Content-Type: multipart/alternative;": Return-Path: ... ... Received: by mail5.cms.hu-berlin.de (Postfix, from userid 29) id 47C4C6D46E; Tue, 14 Jan 2014 17:43:54 +0100 (CET) X-Sieve: Pigeonhole Sieve 0.4.2 X-Sieve-Redirected-From: testuser(a)mail5.cms.hu-berlin.de Delivered-To: <testuser(a)mail5.cms.hu-berlin.de> Received: from mail5.cms.hu-berlin.de by suncom5 (Dovecot) with LMTP id mnY0AEpp1VLsaQAA0tuC1A for <testuser(a)mail4.cms.hu-berlin.de>; Tue, 14 Jan 2014 17:43:54 +0100 ... Message-ID: <52D56948.1090704(a)gmail.com> Date: Tue, 14 Jan 2014 17:43:52 +0100 From: xy <xy(a)gmail.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: testuser(a)hu-berlin.de Subject: from gmail with attachment Content-Type: multipart/mixed; boundary="------------030506080302040201020604" X-ENVELOPE-TO: <me(a)other.domain> This is a multi-part message in MIME format. --------------030506080302040201020604 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit text. --------------030506080302040201020604 Content-Type: application/pdf; name="auftrag-2014-eng-Hinweise.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="auftrag-2014-eng-Hinweise.pdf" JVBERi0xLjYNJeLjz... ... c3RyZWFtDWVuZG9iag1zdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --------------030506080302040201020604-- message end -- Mit freundlichen Grüßen --- Burckhard Schmidt Abteilung Systemsoftware und Kommunikation ZE Computer- und Medienservice der Humboldt-Universität zu Berlin Postanschrift: Unter den Linden 6, 10099 Berlin Standort: Rudower Chaussee 26; 12489 Berlin Tel.: +49-30-2093-70058 Fax: +49-30-2093-2959 Mail: bschmidt(a)cms.hu-berlin.de

3 12

[Dovecot] Dovecot doesn't seem to report all subfolders to Thunderbird
by dovecot＠voidptr.de 21 Jan '14

21 Jan '14

Hi, I've recently migrated my emails from a Yahoo account to my own mailserver on a VPS. Ever since then, Thunderbird seems to have issues with the mailbox's directory structure: When I start Thunderbird, it immediately deletes the local copies of all 3rd-level folders (i.e. subfolders of a subfolder of a folder in the mailbox root). Since that didn't happen with the Yahoo account, I assume it's some kind of error or misconfiguration of Dovecot. Here's an example of the mailbox structure: voidptr.de '-> University '-> IEEE '-> Conference "University" and "IEEE" work without problems, but "Conference" gets deleted locally every time I start Thunderbird. When I collapse and re-expand "University" in the folder panel, all subfolders (including "Conference") reappear, but Thunderbird has to re-download the contents of "Conference", since it deleted the local copies earlier. It looks as if Dovecot only reported the topmost two folder levels when Thunderbird requests a folder list... Is there any way I can change that behavior? Nils $ doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab078.22 x86_64 Debian 7.3 auth_verbose = yes mail_location = maildir:~/Maildir:LAYOUT=fs namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=SHA512-CRYPT username_format=%n /etc/dovecot/users driver = passwd-file } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 0 } } ssl = required ssl_cert = </etc/ssl/certs/own/voidptr.de.pem ssl_key = </etc/ssl/certs/own/voidptr.de.key userdb { args = username_format=%n /etc/dovecot/users default_fields = home=/home/%n driver = passwd-file }

3 4

[Dovecot] Sieve Filter based on Email Body
by Roman Gelfand 21 Jan '14

21 Jan '14

Is it possible to file emails based on the contents of email body? If yes, can you point me to an example. Thanks in advance

2 1

[Dovecot] A variable for the unix user or home path would be useful in some cases
by interfaSys sàrl 20 Jan '14

20 Jan '14

Hello, In our hosting environment, we let users share mailboxes across all their domains and think it's best if the shared mailbox listing (in a file) stays in their unix home path. That would be: /home/USER/imap/shared-mailboxes.db Unfortunately, it seems there is no way to generate that path using a variable. Something like this would be convenient: acl_shared_dict = file:%v/imap/shared-mailboxes.db Instead, we have to use something like this: acl_shared_dict = file:~/../../../shared-mailboxes.db which only works for virtual users. Did somebody solve this another way? Could we have the unix user or home path as a variable? Or could we have a modifier giving us the path or the unix user based on the unix UID? Cheers, Olivier

1 0

Re: [Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 20 Jan '14

20 Jan '14

When I did upgrade, 2.2.7 was the latest release. When I ran into the problem, I checked back and found 2.2.8 and 2.2.9 were released shortly one after another. It seemed these releases were sort of buggy. I would like to know if what I described in my previous email was an known issue and was addressed before upgrade to 2.2.10. We are using dovecot as our internal mail service. So stable is most important to us. Regards,

1 0

[Dovecot] mail check
by Paolo 20 Jan '14

20 Jan '14

Is there some simple script that parsing the dovecot.info.log can give me a list of the mail checks for a user (better if reports also the type (POP/IMAP), and result of the sessions (Ok/Fail/Error/...))? Regards, Paolo

2 2

[Dovecot] auth_default_realm, pam_krb5, gssapi
by Sergey Urushkin 20 Jan '14

20 Jan '14

Hi, Just writing here my note about auth_default_realm, pam_krb5 and gssapi. It seems that 'pam' passdb and 'gssapi' auth_mechanism doesn't honor 'auth_default_realm' setting, at least in several setups I deal with. Here is a part of the config: passdb { args = max_requests=100 cache_key=%u%r dovecot driver = pam } auth_default_realm = REALM.COM auth_mechanisms = plain login apop gssapi auth_username_format = %Uu The problem is that pam_krb5 strips default realm from username (by default), even if auth_default_realm is specified and even if user logs in as 'user1(a)realm.com' (with domain part). A part of auth.log: mail auth: pam_krb5(dovecot:auth): user USER1 authenticated as USER1(a)REALM.COM The same for GSSAPI auth, if specified authorization name doesn't contain domain part. A part of mail.log: mail dovecot: imap-login: Login: user=<USER1>, method=GSSAPI, rip=172.16.0.1, lip=192.168.1.1, mpid=5828, TLS, session=<bpzvRmDwPACsFwCX> For several reasons I do need username inside dovecot to contain domain part. So, I found a solution to this problem - modifying /etc/krb5.conf this way: [libdefaults] default_realm = REALM.COM [realms] REALM.COM = { auth_to_local = RULE:[1:$1@$0] } This will add realm part to the local username despite using default realm. Maybe it's better to put this example to the wiki? Tested with ubuntu 12.04 and dovecot 2.2.10, mit kerberos 1.10, amd64. Taking the opportunity, I'd like to ask, is there a way to make usernames case insensitive while using GSSAPI. The case: klist shows: Principal: user1(a)REALM.COM username in thunderbird 'uSer1(a)REALM.COM'. Dovecot gives me this message (I use auth_username_format=%Uu for pam_krb5 to be able to login with lowercase realm): dovecot: auth: gssapi(USER1(a)REALM.COM,172.16.0.1,<IIgwMGbw3ACsFgA4>): User not authorized to log in as USER1(a)REALM.COM As I know kerberos usernames are case insensitive (user part), at least kinit and windows against AD works that way. Seems that k5credentials passdb extra field will not help here too. Does anyone have an idea? Thanks. -- Best regards, Sergey Urushkin

1 0

[Dovecot] New document on troubleshooting Dovecot IMAP
by Steve Litt 20 Jan '14

20 Jan '14

Hi all, Check out my new document on troubleshooting Dovecot IMAP: http://www.troubleshooters.com/emailtech/imap_troubleshooting.htm Thank you to all those, on this mailing list and on the #dovecot IRC channel, for helping me with this. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] Shared Folters with LDA/Sieve
by Dieter Knopf 19 Jan '14

19 Jan '14

Hello, i'm searching for a way to use Shared mailboxes with Sieve Filtering. I need global email addresses like: info(a)foo.tld contact(a)foo.tld help(a)foo.tld Every address with own Sieve-rules for filtering and sorting of incoming mails. Now every user needs access to this folders, but how? How should i create the "global" addresses? I already found http://wiki2.dovecot.org/SharedMailboxes/Public , but that's just a public namespace. Is there any FAQ available for this? Thank you very much Dieter

4 4

[Dovecot] Dovecot - not pulling pop3s email from virtual mbox
by Ganesh Hariharan 18 Jan '14

18 Jan '14

Hi All, I am bit strugging to get this work, and bit perplexed to set the right configuration to get this work, btw: I am using passdb without any DB based auth. the latest logs after debug mode setting is below Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libdriver_sqlite.so Jan 16 09:27:04 ns dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/auth/libmech_gssapi.so Jan 16 09:27:04 ns dovecot: auth: Error: passwd-file /etc/dovecot/users: User info(a)ghhdomain.com has invalid GID '/var/spool/mail/ghhdomain/info/' Jan 16 09:27:04 ns dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 0 users Jan 16 09:27:04 ns dovecot: auth: Fatal: No passdbs specified in configuration file. CRAM-MD5 mechanism needs one Jan 16 09:27:04 ns dovecot: master: Error: service(auth): command startup failed, throttling Please see my configs 10-mail.conf mail_location = maildir:/var/spool/mail/%d/%n 10-ssl.conf # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt> ssl = yes ssl_cert = </etc/postfix/newcert.pem ssl_key = </etc/postfix/newkey.pem auth-system.conf.ext #passdb { #driver = passwd-file #args = scheme=cram-md5 username_format=%u /etc/dovecot/passwd #} userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } auth-passwdfile.conf.ext passdb { driver = passwd-file args = scheme=CRYPT username_format=%u /etc/dovecot/users } users file look like this info(a)ghhdomain.com: {CRAM-MD5}e02d374fde0dc75a17a557039a3a5338c7743304777dccd376f332bee68d2cf6:503:503 I created using doveadm pw , and pasted the output to the above file Please let me know what went wrong, and what I need to do now... thanks G. userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users I have made a mess of these configuration after many tries.. yet not sure what is the simple steps to make it work

2 7

[Dovecot] Sizing MTA servers
by Murray Trainer 18 Jan '14

18 Jan '14

Hi All, This is probably a bit off-topic but does anyone have any idea about sizing MTA servers. We have about 200,000 emails/hr incoming and outgoing. I am intending using Exim and Spamassassin on each MTA. How many servers using recent hardware would I need to cope with this mail throughput? What is more important on the servers, CPU or RAM? Should I have mail going both directions on each server or dedicate a pair each for incoming and outgoing mail> Thanks for any feedback. Murray

5 5

[Dovecot] doveconf base_dir
by Andreas Schulze 18 Jan '14

18 Jan '14

Hello, today I run the command "doveadm auth cache flush" for the first time. # doveadm auth cache flush doveadm(root): Error: userdb lookup: connect(/var/run/dovecotauth-master) failed: No such file or directory 0 cache entries flushed # base_dir was the only item contain 'run' and it did not end with a / So I tried to set base_dir to /var/run/dovecot/ and could now rerun "doveadm auth cache flush" without problems. I compile dovecot from source and found --with-rundir=/var/run/dovecot as an option to configure. I changed to /var/run/dovecot/, recompile and removed the base_dir setting in dovecot.conf again. Now "doveadm auth cache flush" work out of the box. doveconf -d base_dir is var/run/dovecot/. Finaly I compiled dovecot with --localstatedir=/var and removed --with-rundir from configure. The resulting package had again base_dir = /var/run/dovecot so "doveadm auth cache flush" don't work. looks like somewhere the missing / should be added in case base_dir has no trailing / without special configuration. Andreas

1 0

[Dovecot] imap abort after upgrade from 2.2.4 to 2.2.7
by morrison 17 Jan '14

17 Jan '14

Hi, I used to use dovecot 2.2.4. I saw lots of warnings saying 'Extension header update points outside header size'. I upgraded to dovecot 2.2.7, based on the discussion in mail list. Now, I see lots of imap aborts around: src/lib-index/mail-index-transaction-export.c:203: i_assert(u32.offset + u32.size <= ext_hdr_size); I also noticed, in some mailbox, imap process kept abort until all index files in the mailbox were manually deleted. Did someone run into the same problem and any solution to this? Thanks,

4 4

[Dovecot] Dovecot IMAP proxy for gmail IMAP server
by CM Reddy 17 Jan '14

17 Jan '14

Hi All, I am experimenting to use Dovecot as an IMAP proxy to GMAIL server. I would like configure my localhost as an Dovecot IMAP proxy and trying to access my GMAIL using the Thunderbird email client. Please share the steps to configure and access my mails from GMAIL server. - Thanks CM Reddy

2 1

[Dovecot] Use dovecot for enterprise
by ♥ NiNJA ♂ 17 Jan '14

17 Jan '14

Hi guys I like to know is it possible to create Unlimited number of email accounts with Unlimited Storage in each email ? Does anybody do it ? Does dovecot good enough for having more than millions of users ? Thanks :-)

3 2

[Dovecot] Changing user specific configs one at a time using userdb text file to override defaults...
by Charles Marcus 17 Jan '14

17 Jan '14

Hi all, Ok, I'm now interested in testing converting users one at a time to mdbox+SIS, but want to make sure I understand how to do this. It appears the best way - for smaller installations at least - is to just use a simple text file userdb to override the defaults, then once all of the users have been converted, change the defaults and remove the userdb txt file overrides. So, would love to hear details from others who have done something like this. Thx! -- Best regards, Charles

1 0

[Dovecot] Getting more out of the %w variable.
by Julian PG 17 Jan '14

17 Jan '14

Hello Dovecot community, I have a backend database application that handles all system wide user authentication (from web to mail and more). Passwords are not stored in plain text. So I would like to support more than PLAIN. Perhaps at least CRAM-MD5 or DIGEST-MD5 for example. Even though connections over TLS are encouraged (and even enforced). Some MUA and users still think its a better idea than PLAIN (even sent over an encrypted session). I have a vague memory of getting some warnings with thunderbird in regards to the use of PLAIN. Of course the %w variable would have to include the challenge as well as the response. Or perhaps even a seperate variable for the challenge? Or course at the moment the %w variable is an empty string for anything other than PLAIN. This would make some users and MUAs happy (even though pointless over TLS - I agree). Your thoughts would be appreciated. Regards, Julian. -- Not time for sigs!

2 1

[Dovecot] Received: header showing 127.0.0.1 after switch to dovecot LDA?
by Charles Marcus 16 Jan '14

16 Jan '14

Hi all, I'm guessing this is correct behavior, but wanted to make sure... I noticed that for locally delivered messages (between 2 local users inside our domain, so they never leave the server), the first Received: header line content changed after I switched to the dovecot LDA. Before, using postfix/virtual for delivery, the header looked like this: Received: from [192.168.1.25] (client.example.com [192.168.1.25]) by smtp.example.com (Postfix) with ESMTPSA id 67E33A20542; Wed, 6 Jun 2012 10:55:55 -0400 (EDT) But now it looks like this: Received: from [127.0.0.1] (client.example.com.com [192.168.1.14]) by smtp.example.com (Postfix) with ESMTPSA id 4EEF7802AF325 for <me(a)example.com>; Wed, 15 Jan 2014 18:29:17 -0500 (EST) so, 2 questions... 1. Why does it show 127.0.0.1 instead of the client IP, and 2. Why did postfix/virtual include the "for <me(a)example.com>;" but the dovecot LDA doesn't? Thanks, -- Best regards, Charles

2 1

[Dovecot] Replication file sizes
by IT geek 31 16 Jan '14

16 Jan '14

Hi, I'm using Dovecot 2.2.9 to replicate my mailbox to a remote server. My mailbox on ServerA is 235Mb, but on ServerB it ends up being 358Mb. Does anyone know why this is? Shouldn't they be the same size? doveconf -n from ServerA: # 2.2.9: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 first_valid_uid = 1003 last_valid_uid = 1020 listen = 192.168.1.1 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = tcp:serverb.test.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/servera.test.com.crt ssl_key = </etc/openssl/private/serverb.test.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)test.com

1 0

[Dovecot] Dovecot 2 separate login for POP3 connections ?
by BONNET, Frank 16 Jan '14

16 Jan '14

Hello Is it possible to configure a separate logfile for incoming POP3 connections ( dovecot 2.2.9 ) thanks

3 3

[Dovecot] mail-filter always results in corrupted indexes
by martijn.list 16 Jan '14

16 Jan '14

Hi, I'm experimenting with the mail-filter plugin but whenever I add anything to a message, it always results in an corrupted cache: from the logs: Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Corrupted index cache file /var/vmail/martijn=djigzo.com(a)ciphermail.private/dovecot.index.cache: Broken physical size for mail UID 76 Dec 14 16:09:55 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: read() failed: Invalid argument Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Cached message size smaller than expected (773 < 777) Dec 14 16:10:02 ciphermail-webmail dovecot: imap(martijn=djigzo.com(a)ciphermail.private): Error: Maildir filename has wrong S value, renamed the file from /var/vmail/martijn=djigzo.com@ciphermail.private/cur/1387033802.M114583P9631.ciphermail-webmail,S=773,W=791:2, t A do-nothing filter that just sends the input to the output works but whenever I add something trivial to the message, the cache is always corrupted. I using Dovecot 2.2.9.1 (from the deb archives). I use the following trivial test to add some XXX chars and and later remove them. In mail-filter.sh I append some chars and in mail-filter-out I filter these chars out (this is just a test) cat > /tmp/dovecot-in.txt echo "XXX" >> /tmp/dovecot-in.txt cat /tmp/dovecot-in.txt mail-filter-out: cat > /tmp/dovecot-out.txt sed -i /XXX/d /tmp/dovecot-out.txt cat /tmp/dovecot-out.txt Any idea what I'm doing wrong? Kind regards, Martijn Brinkers

5 6

Re: [Dovecot] Couldn't drop privileges
by Joseph Tam 16 Jan '14

16 Jan '14

From: CM Reddy <cmreddy(a)armor5.com> > userdb { > args = username_format=%u /etc/dovecot/users > driver = passwd-file > } > ... > Log information: > ... > Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap(armor5): Error: user > armor5: Couldn't drop privileges: User is missing GID (see mail_gid setting) Fairly self-explanatory, isn't it? It appears your userdb does not specify GID for a user. Either define it, or ... In share/doc/dovecot/example-config/conf.d/10-mail.conf: # System user and group used to access mails. If you use multiple, userdb # can override these by returning uid or gid fields. You can use either numbers # or names. <doc/wiki/UserIds.txt> #mail_uid = ... if all your users share the the same GID, set it here. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] [Dovecot auth crash]
by Jeremy SPIESSER 16 Jan '14

16 Jan '14

Hi, I have a problem with dovecot auth and i don't know what happen .. running dovecot 2.1.7 When i try a login with user there is a crash in auth process: Jan 16 02:56:52 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:52 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7fcc4b30d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7fcc4b30d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fcc4b2e482a] -> dovecot/auth(+0x14af2) [0x7fcc4b78eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7fcc4b790102] -> dovecot/auth(+0x1da10) [0x7fcc4b797a10] -> dovecot/auth(auth_request_handler_auth_continue+0xe2) [0x7fcc4b791cf2] -> dovecot/auth(+0x10420) [0x7fcc4b78a420] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fcc4b31a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7fcc4b31acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fcc4b319a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fcc4b306483] -> dovecot/auth(main+0x323) [0x7fcc4b788863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fcc4a70cead] -> dovecot/auth(+0xea75) [0x7fcc4b788a75] Jan 16 02:56:52 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28622 killed with signal 6 (core dumps disabled) Jan 16 02:56:52 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:56:53 az-mail14 dovecot: auth: Panic: file auth-request.c: line 618 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Jan 16 02:56:53 az-mail14 dovecot: auth: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f262370d14a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f262370d18e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f26236e482a] -> dovecot/auth(+0x14af2) [0x7f2623b8eaf2] -> dovecot/auth(auth_request_verify_plain+0x22) [0x7f2623b90102] -> dovecot/auth(+0x1da10) [0x7f2623b97a10] -> dovecot/auth(+0x127f3) [0x7f2623b8c7f3] -> /usr/lib/dovecot/libdovecot.so.0(+0x390e5) [0x7f26237020e5] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f262371a016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f262371acc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f2623719a28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f2623706483] -> dovecot/auth(main+0x323) [0x7f2623b88863] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f2622b0cead] -> dovecot/auth(+0xea75) [0x7f2623b88a75] Jan 16 02:56:53 az-mail14 dovecot: auth: Fatal: master: service(auth): child 28632 killed with signal 6 (core dumps disabled) Jan 16 02:56:53 az-mail14 dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=28621, EOF) Jan 16 02:57:13 az-mail14 dovecot: imap-login: Disconnected (auth process communication failure): user=<>, method=PLAIN, rip=172.16.21.3, lip=172.16.21.100, TLS, session=<yDZIvQzwogCsEBUD> Dovecot run with this config file: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 10000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 1000 default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = no doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 10 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:/data/vmail/%d/%n/Maildir:INDEX=/dev/shm/dovindex/%u mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_prefetch_count = 100 mail_privileged_group = mail_save_crlf = no mail_shared_explicit_inbox = yes mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = yes passdb { args = /data/vmail/conf/dovecot_shadow default_fields = deny = no driver = passwd-file master = yes override_fields = pass = no } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 12 hours replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 4096 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 1 G } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2000 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/ssl/gandi.pem ssl_cert = </etc/ssl/cert-azuria.net.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/azuria.key ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = uid=1003 gid=1003 home=/data/vmail/%d/%n/Maildir default_fields = driver = static override_fields = } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_idle_notify_interval = 2 mins imap_max_line_length = 1 M mail_max_userip_connections = 10000 } protocol pop3 { pop3_enable_last = yes pop3_fast_size_lookups = no pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb log_path = /data/vmail/log/dovecot-deliver.log mail_plugins = cmusieve quota postmaster_address = postmaster(a)azuria.net } I try to find answers on forums and the internet but I found nothing. Can you help me with this problem? Thanks you! -- -- *Jeremy SPIESSER * 34 bd des Italiens 75009 Paris *tel:*01 44 54 30 00 *mob:*06 22 12 81 75 *fax:*01 70 24 83 67 www.azuria.net <http://www.azuria.net/> prefix et peering <https://lg.azuria.net/>

1 0

[Dovecot] EAGAIN in dict proxy
by Richard Platel 15 Jan '14

15 Jan '14

Hello, We’re using a custom program to manage quotas talking to dovecot via the dovecot dict proxy protocol over a unix socket: plugin { quota = dict:User quota::proxy:/var/run/auth_proxy_dovecot/quotasocket:quota } Dovecot gets slammed with quota requests periodically, seemingly because Thunderbird thought it would be a good idea to hardcode having a quota check at 45 seconds past the minute, and thus every Thunderbird client makes several GETQUOTAROOT requests simultaneously. This causes dovecot to make many client connections to the quota proxy, and many of them fail with EAGAIN. In the log we see: Jan 15 16:52:46 imap25 dovecot: imap(rplatel(a)tucows.com): Error: net_connect_unix(/var/run/auth_proxy_dovecot/quotasocket) failed: Resource temporarily unavailable And the client gets: * QUOTAROOT Spam "User quota"[0d][0a] * QUOTA "User quota" ()[0d][0a] * BAD Internal quota calculation error[0d][0a] 19 OK Getquotaroot completed.[0d][0a] Thunderbird transparently disconnects and reconnects at this point but obviously this is not ideal. Writing some toy programs, I found that even making a forked server with several processes doing nothing but accept()ing on the listening socket, with a high number for the listen queue, it’s easy to overwhelm it with simultaneous clients who then get EAGAIN. If the clients do indeed immediately try again, they are successful. (An INET listening socket does not seem to have this problem, incidentally) All of this is a long-winded way of saying that I believe in lib-dict/dict-client.c:client_dict_connect() the call to net_connect_unix should be a call to net_connect_unix_with_retries() with a small timeout. It would also be useful for us if an INET socket could be used.

1 0

[Dovecot] int/ext mailserver
by Mr.Pine 15 Jan '14

15 Jan '14

I 'm using potfix-dovcote as an internal mail server(local.myco.com) and wan to run another potfix-dovcote as an external mail server (myco.com) on Internet.75% of my users should only work internally(no external mail) but the rest of users (25%)should be able to send mail to external network! These users have the same username on myco.com. I use smtp_generic_maps to map int username of these users to ext. one. For eg. All email send by test(a)local.myco.com map to test(a)myco.com. So anyone got these mails can reply them. I know that getmail is the tools that can get mails from users external mailbox and put them into int. mailbox. 1. I have a root access to ext mail server. But do not know my ext user password!. How can I use getmail to move ext mail to internal one?! 2. What is your idea about syncing users password in internal/external mail server?! I think its needed for getmail! 3. How can I restrict my internal users to send mail only internally!? I appreciated any help!! TNX

2 1

[Dovecot] restored mails
by Wojciech Giel 15 Jan '14

15 Jan '14

Hello, I am running dovecot 2.1 on debian wheezy . We are using maildir format. one of our uses deleted content of INBOX folder during xmass. he wants these messages back. I had these mail on tape. I have restored them to his inbox/cur directory but dovecot is not indexing them. Email client shows empty inbox as well. tried manually run: doveadm index -u john -q INBOX no change. deleting indexes didn't help. How to restore these email? thanks Woj my config: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 auth_debug = yes auth_mechanisms = plain login cram-md5 auth_verbose = yes listen = * log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = IMAP Server is ready. mail_debug = yes mail_location = maildir:~/Maildir:INDEX=~/dovecot-control/indexes:CONTROL=~/dovecot-control:LAYOUT=fs mail_plugins = " quota trash" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } passdb { args = scheme=cram-md5 /etc/dovecot/passwd driver = passwd-file } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_mail_sendmail = /usr/bin/sa-learn-pipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam = Junk;Spam antispam_trash_pattern = Trash;Deleted * antispam_verbose_debug = 0 autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_default = /var/spool/dovecot/default.sieve sieve_dir = ~/sieve sieve_global_dir = /var/spool/dovecot/ trash = /etc/dovecot/dovecot-trash.conf.ext } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 2000 } } service quota-warning { executable = script /usr/bin/dovecot-quota-warning.sh user = postfix } ssl_ca = </etc/postfix/ssl/cacert.pem ssl_cert = </etc/postfix/ssl/servercrt.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP-ADH-DES-CBC-SHA:!EXP-EDH-RSA-DES-CBC-SHA:!EXP-DES-CBC-SHA:!EXP-RC2-CBC-MD5:!EXP-RC4-MD5:!EXP-ADH-RC4-MD5:!ADH-DES-CBC3-SHA:!ADH-RC4-MD5:!ADH-DES-CBC3-SHA:!ADH-AES128-SHA:!ADH-AES256-SHA:!ADH-RC4-MD5:!RC4 ssl_key = </etc/postfix/ssl/serverkey.pem userdb { args = /etc/dovecot/passwd driver = passwd-file } userdb { driver = passwd } protocol lda { deliver_log_format = msgid=%m: %$ info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = " quota trash autocreate sieve" postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep delay-newmail tb-lsub-flags mail_max_userip_connections = 10 mail_plugins = " quota trash imap_quota autocreate antispam" } 1379333576.M520387P21423.pine,S=5016,W=5183:2,S 1389710739.M139355P6177.pine,S=38933,W=39648:2,Sd 1379340386.M670300P24951.pine,S=2282,W=2328:2,S 1389710937.M15977P6316.pine,S=20426,W=20831:2,Sd 1379342173.M207466P25909.pine,S=2649,W=2700:2,S 1389715067.M350398P8795.pine,S=18288,W=18549:2,Sd 1379343332.M808399P26628.pine,S=3862,W=3952:2,S 1389715305.M250290P8929.pine,S=4264,W=4346:2,Sd 1379343742.M248785P27359.pine,S=4772,W=4891:2,RS 1389723554.M26883P13831.pine,S=47655,W=47979:2,d 1379343783.M47728P27388.pine,S=22571,W=23053:2,S root@pine:/home/john/Maildir/INBOX/cur#

3 3

[Dovecot] Why does dovecot require the {} password sheme even if there is a $ crypt scheme.
by da-dovecotlist-15＠abelonline.de 15 Jan '14

15 Jan '14

The wiki[1] says: If all the passwords are in same format, you can use default_pass_scheme to specify it. Otherwise each password needs to be prefixed with "{password-scheme}", for example "{plain}plaintext-password". Why doesn't dovecot recognize the crypt scheme identifier ($1$ for MD5-CRYPT, $6$ for SHA512-CRYPT etc.)? At the moment I have to have the following in my db for dovecot to work: {SHA512-CRYPT}$6$salt$passwordhash [1]http://wiki2.dovecot.org/AuthDatabase/SQL

2 2

[Dovecot] Proxying to MS Exchange 2013
by Matheus Fontes 15 Jan '14

15 Jan '14

Hi All, I'm new in dovecot list but I already read a thread with same problem: http://www.dovecot.org/list/dovecot/2013-June/091017.html If I try to proxy imap to exchange i got timeout on proxy connection. Someone solved this problem? thanks Matheus Fontes

1 0

[Dovecot] Thanks for the help
by Steve Litt 15 Jan '14

15 Jan '14

Hi all, I'd like to thank the people on #dovecot, especially jaybe, for helping me fix my Dovecot after a reinstall broke it. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

1 0

[Dovecot] dsync mbox to maildir migration does not delete, deleted e-mails
by A M 15 Jan '14

15 Jan '14

Hello, I am planning to migrate all users from mbox to maildir. I am trying to do it with minimum downtime. (~100GB data) All users are currently using POP3. Dovecot version is 2.2.10 (latest). Command used is: dsync -u username mirror maildir:~/Maildir Process I plan is: (omitting steps related to sendmail / procmail) 1) keep dovecot running (with mail_location as mbox) 2) dsync for all users (this may take 3-4 hours or more) 3) (downtime starts) stop dovecot and sendmail (to stop new e-mails) 4) block pop3, imap ports on firewall (so users can not connect) 5) start dovecot (still with mbox) 6) dsync again to sync e-mails arrived between step 2 and 3 7) dsync again (just to make sure!) 8) (downtime ends) restart dovecot (with mail_location as maildir) Now, here is my problem. Lets say there is user joe, who has 50 NEW e-mails in mbox (INBOX). Step 2 perfectly syncs his 50 e-mails to 'new' folder of maildir. Now in the mean time, before step 3, he connected via POP3 and downloaded and deleted 50 e-mails. Now when we reach step 6 (re-sync), what I expected was dsync will detect that 50 e-mails are deleted and it will delete 50 e-mails from 'new' directory of maildir. But that is not happening. 50 e-mails are still there. I fear that these e-mails will be re-downloaded on his Outlook once I switch dovecot to maildir. This will happen for each and every user which will cause huge mess. So how to tell, dsync to delete non-existent e-mails which are no more there in mbox (INBOX)? Thanks in advance, Regards, A M

1 1

[Dovecot] Dovecot service not responding after about a week of uptime
by Matthieu 15 Jan '14

15 Jan '14

Hello, I am running a dovecot 2.1.13 server and lately it stops responding after about a week of uptime. Simply restarting the dovecot service solves the issue. I tried to look a bit in my maillog file but did not find anything obvious. During the time when the server is not responding I can still see imap-login entries from the connection attempt by my email client. Any help about how to diagnose the problem would be appreciated. Thanks, Matthieu

5 13

[Dovecot] panic!
by LuKreme 14 Jan '14

14 Jan '14

(I will not make a joke about the streets of Carlyle) Jan 13 19:09:07 mail dovecot: lda(john(a)example.com): Panic: file mail-transaction-log-file.c: line 1148 (mail_transaction_log_file_get_highest_modseq_at): assertion failed: (offset <= file->sync_offset) Jan 13 19:09:08 mail kernel: pid 8435 (dovecot-lda), uid 89: exited on signal 6 (core dumped) Jan 13 19:14:16 mail dovecot: lda(john(a)example.com): Panic: file mail-transaction-log-file.c: line 1148 (mail_transaction_log_file_get_highest_modseq_at): assertion failed: (offset <= file->sync_offset) Jan 13 19:14:16 mail kernel: pid 9648 (dovecot-lda), uid 89: exited on signal 6 (core dumped) Just the one user, seems to happen every time he checks mail. I am not using LDA at all. $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } -- How soon after the U.S. Postal Service issues the Calvin stamp will you send a letter with one on the envelope? Watterson: Immediately. I'm going to get in my horse and buggy and snail-mail a check for my newspaper subscription.

1 1

[Dovecot] Fatal: master: service(lmtp): child n killed with signal 11 (core dumped) - in mail_cache_header_fields_read
by Maciej Uhlig 14 Jan '14

14 Jan '14

This is log from dovecot 2.1.17 (I had to downgrade from 2.2.10 because lot of problems) on CentOS 6.5: 2014-01-14T18:36:03+01:00 server/a.b.c.d dovecot: lmtp(5927): Fatal: master: service(lmtp): child 5927 killed with signal 11 (core dumped) # uname -a Linux server 2.6.32-431.1.2.0.1.el6.x86_64 #1 SMP Fri Dec 13 13:06:13 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux (gdb) bt full #0 0x00007fb14b9b3bb5 in mail_cache_header_fields_read () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #1 0x00007fb14b9b19aa in mail_cache_open_and_verify () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0x00007fb14b9b35bd in mail_cache_register_get_list () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0x00007fb14b9a11a7 in index_mail_parse_header_init () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #4 0x00007fb14b9a1ff8 in index_mail_cache_parse_init () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #5 0x00007fb14b94c982 in maildir_save_add () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #6 0x00007fb14b94ccd8 in maildir_save_begin () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #7 0x00007fb14b031b23 in quota_save_begin () from /usr/local/dovecot/lib/dovecot/lib10_quota_plugin.so ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #8 0x00007fb14b982552 in mailbox_save_begin () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #9 0x00007fb14b97ae8f in mail_storage_copy () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #10 0x00007fb14b948ef6 in maildir_copy () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #11 0x00007fb14ae25551 in notify_copy () from /usr/local/dovecot/lib/dovecot/lib15_notify_plugin.so No symbol table info available. #12 0x00007fb14b031907 in quota_copy () from /usr/local/dovecot/lib/dovecot/lib10_quota_plugin.so No symbol table info available. #13 0x00007fb14b9824aa in mailbox_copy () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #14 0x00007fb14a9d7dc6 in act_store_execute () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #15 0x00007fb14a9ce0f4 in _sieve_result_implicit_keep () ---Type <return> to continue, or q <return> to quit--- from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #16 0x00007fb14a9cfe27 in sieve_result_execute () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #17 0x00007fb14a9df918 in sieve_multiscript_run () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #18 0x00007fb14ac2189e in lda_sieve_deliver_mail () from /usr/local/dovecot/lib/dovecot/lib90_sieve_plugin.so No symbol table info available. #19 0x00007fb14bc1d305 in mail_deliver () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot-lda.so.0 No symbol table info available. #20 0x00000000004054c3 in client_input_data_handle () No symbol table info available. #21 0x00007fb14b6ba146 in io_loop_call_io () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot.so.0 No symbol table info available. #22 0x00007fb14b6bb46d in io_loop_handler_run () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot.so.0 No symbol table info available. #23 0x00007fb14b6ba0e8 in io_loop_run () ---Type <return> to continue, or q <return> to quit--- from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot.so.0 No symbol table info available. #24 0x00007fb14b6a4043 in master_service_run () from /usr/local/dovecot-2.1.17/lib/dovecot/libdovecot.so.0 No symbol table info available. #25 0x0000000000404096 in main () No symbol table info available. (gdb) MU

1 0

[Dovecot] Dovecot LMTP does not pass envelope recipient +detail to sieve
by Greg Rivers 14 Jan '14

14 Jan '14

I found this[1] thread that describes the same problem with dovecot-LDA, but the solution (add X-Original-To: header) has no effect with LMTP. My sendmail LMTP configuration: FEATURE(`local_lmtp',`[IPC]',`FILE /var/run/dovecot/lmtp') Sendmail's address test indicates that sendmail is providing user+detail to LMTP (see below). Except for this problem, dovecot, LMTP, and sieve are all working perfectly. Is there something I'm missing, or is this a bug? [1] http://dovecot.org/pipermail/dovecot/2012-July/136987.htm Script started on Sun Jan 5 23:25:04 2014 $ doveconf -n # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.2-STABLE amd64 auth_verbose = yes mail_debug = yes mail_location = mdbox:~/.mdbox mail_plugins = " quota" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader vnd.dovecot.debug vnd.dovecot.duplicate imapflags notify vnd.dovecot.pipe vnd.dovecot.filter vnd.dovecot.execute namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = %s driver = pam } plugin { quota = fs:%n@%{hostname} %h %Us %{pid}: quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = ~/sieve/sieve-execute sieve_execute_socket_dir = sieve-execute sieve_extensions = +notify +imapflags +editheader +vnd.dovecot.duplicate +vnd.dovecot.pipe +vnd.dovecot.filter +vnd.dovecot.execute +vnd.dovecot.debug sieve_filter_bin_dir = ~/sieve/sieve-filter sieve_filter_socket_dir = sieve-filter sieve_global_dir = /usr/local/etc/dovecot/sieve sieve_max_actions = 0 sieve_max_redirects = 16 sieve_max_script_size = 0 sieve_pipe_bin_dir = ~/sieve/sieve-pipe sieve_pipe_socket_dir = sieve-pipe sieve_plugins = sieve_extprograms } postmaster_address = postmaster(a)tharned.org protocols = imap lmtp sieve quota_full_tempfail = yes service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = dovecot } user = dovecot } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota sieve" } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_max_userip_connections = 100 mail_plugins = " quota imap_quota" } $ sendmail -bt ADDRESS TEST MODE (ruleset 3 NOT automatically invoked) Enter <ruleset> <address> > =M mailer 0 (prog): P=/bin/sh S=EnvFromL/HdrFromL R=EnvToL/HdrToL M=0 U=-1:-1 F=9DFMeloqsu L=0 E=\n T=X-Unix/X-Unix/X-Unix r=100 A=sh -c $u mailer 1 (*file*): P=[FILE] S=parse/parse R=parse/parse M=0 U=-1:-1 F=9DEFMPloqsu L=0 E=\n T=X-Unix/X-Unix/X-Unix r=100 A=FILE $u mailer 2 (*include*): P=/dev/null S=parse/parse R=parse/parse M=0 U=-1:-1 F=su L=0 E=\n T=<undefined>/<undefined>/<undefined> r=100 A=INCLUDE $u mailer 3 (local): P=[IPC] S=EnvFromSMTP/HdrFromL R=EnvToL/HdrToL M=0 U=-1:-1 F=/59:@ADFMPSXlmnqswz| L=0 E=\r\n T=DNS/RFC822/SMTP r=100 A=FILE /var/run/dovecot/lmtp mailer 4 (smtp): P=[IPC] S=EnvFromSMTP/HdrFromSMTP R=EnvToSMTP/EnvToSMTP M=0 U=-1:-1 F=DFMXmu L=990 E=\r\n T=DNS/RFC822/SMTP r=100 A=TCP $h mailer 5 (esmtp): P=[IPC] S=EnvFromSMTP/HdrFromSMTP R=EnvToSMTP/EnvToSMTP M=0 U=-1:-1 F=DFMXamu L=990 E=\r\n T=DNS/RFC822/SMTP r=100 A=TCP $h mailer 6 (smtp8): P=[IPC] S=EnvFromSMTP/HdrFromSMTP R=EnvToSMTP/EnvToSMTP M=0 U=-1:-1 F=8DFMXmu L=990 E=\r\n T=DNS/RFC822/SMTP r=100 A=TCP $h mailer 7 (dsmtp): P=[IPC] S=EnvFromSMTP/HdrFromSMTP R=EnvToSMTP/EnvToSMTP M=0 U=-1:-1 F=%DFMXamu L=990 E=\r\n T=DNS/RFC822/SMTP r=100 A=TCP $h mailer 8 (relay): P=[IPC] S=EnvFromSMTP/HdrFromSMTP R=MasqSMTP/MasqSMTP M=0 U=-1:-1 F=8DFMXamu L=2040 E=\r\n T=DNS/RFC822/SMTP r=100 A=TCP $h > /try local gcr+DeTaIl(a)tharned.org Trying envelope recipient address gcr+DeTaIl(a)tharned.org for mailer local canonify input: gcr + DeTaIl @ tharned . org Canonify2 input: gcr + DeTaIl < @ tharned . org > Canonify2 returns: gcr + DeTaIl < @ tharned . org . > canonify returns: gcr + DeTaIl < @ tharned . org . > 2 input: gcr + DeTaIl < @ tharned . org . > 2 returns: gcr + DeTaIl < @ tharned . org . > EnvToL input: gcr + DeTaIl < @ tharned . org . > EnvToL returns: gcr + DeTaIl final input: gcr + DeTaIl final returns: gcr + DeTaIl Rcode = 0, addr = gcr+DeTaIl > ^D $ cat .dovecot.sieve require ["envelope", "subaddress", "variables", "vnd.dovecot.debug"]; if envelope :matches "to" "*" { set "to" "${1}"; } if envelope :user :matches "to" "*" { set "user" "${1}"; } if envelope :detail :matches "to" "*" { set "detail" "${1}"; } if envelope :matches "from" "*" { set "from" "${1}"; } debug_log "EnvelopeTo=${to}, EnvelopeFrom=${from}"; debug_log "EnvelopeToUser=${user}, EnvelopeToDetail=${detail}"; $ telnet localhost smtp Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 tharned.org ESMTP Sendmail 8.14.7/8.14.7; Sun, 5 Jan 2014 23:56:22 -0600 (CST) mail from:<gcr(a)tharned.org> 250 2.1.0 <gcr(a)tharned.org>... Sender ok rcpt to:<gcr+DeTaIl(a)tharned.org> 250 2.1.5 <gcr+DeTaIl(a)tharned.org>... Recipient ok data 354 Enter mail, end with "." on a line by itself . 250 2.0.0 s065uMYM069381 Message accepted for delivery quit 221 2.0.0 tharned.org closing connection Connection closed by foreign host. $ tail -4 .dovecot.sieve.log sieve: info: started log at Jan 05 23:57:21. main script: line 5: info: DEBUG: EnvelopeTo=gcr, EnvelopeFrom=gcr(a)tharned.org. main script: line 9: info: DEBUG: EnvelopeToUser=gcr, EnvelopeToDetail=. info: msgid=<201401060557.s065uMYM069381(a)tharned.org>: stored mail into mailbox 'INBOX'. $ exit Script done on Sun Jan 5 23:57:55 2014 -- Greg Rivers

6 15

[Dovecot] Sieve - not functioning for additional email aliases.
by Jacek Osiecki 14 Jan '14

14 Jan '14

Hi, On one of my servers (old one, version 1.2.5) user reported that vacation message for basic address works fine, but not for the aliases. I know that this is an old version, but we can't simply switch them to the most current dovecot release without preparing and testing everything... So I'm rather asking for help with debugging the case :) This person has email my.name(a)olddomain.pl. However, they are switching to new domain - newdomain.pl - and it is becoming their main brand. So temporarily olddomain.pl is still their "home" domain, but there is a domain alias newdomain->olddomain. The sieve file is simple: forward message and reply with vacation: ---- require ["copy","vacation"]; # rule:[redirect] if anyof (true) { redirect :copy "my.boss(a)newdomain.pl"; vacation :days 1 :addresses ["my.name(a)olddomain.pl","my.name(a)newdomain.pl"] text: I'm unavailable now. Please contact my boss: my.boss(a)newdomain.pl Greetings . ; } ---- When I send email to my.name(a)olddomain.pl - it is sent to my.boss(a)newdomain.pl and I receive the vacation message. When I send it to the alias (my.name(a)newdomain.pl) - none of above is done. Any idea how I can debug it? Running test-sieve does not help - it claims that will simply forward and deliver the message... Greetings, -- Jacek Osiecki joshua(a)ceti.pl GG:3828944 I don't want something I need. I want something I want.

3 2

[Dovecot] dict ldap
by me＠electronico.nc 14 Jan '14

14 Jan '14

Hello everybody, Dovecot 2.2.6 with LDAP auth against AD (Samba4). I would like to know if it's possible to specify an LDAP transport for dict (something like dovecot-dict-ldap.conf.ext). I'm in need to setup shared mailboxes and if I could query LDAP, that would help a lot. IE : user1 user2 user3 are in OU=group1, so group1 (setup as user in AD) would share its mailbox with user1 user2 and user3. Thanks in advance for your time. Nicolas

1 0

[Dovecot] Couldn't drop privileges
by CM Reddy 13 Jan '14

13 Jan '14

Hi All, I have configured the dovecot from sources based on the instructions in the following link. http://wiki2.dovecot.org/CompilingSource Tried to test the installation: 1. Started dovecot successfully. 2. Failed to Login command with an error. -Lenovo-G500s:~$ telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Hi Dovecot ready. a login armor5 abc123 * BYE Internal error occurred. Refer to server log for more information. Connection closed by foreign host. Configuration is: ------------------------ Lenovo-G500s:~$ doveconf -n # 2.2.10: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.8.0-29-generic x86_64 Ubuntu 12.04.3 LTS auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no login_greeting = Hi Dovecot ready. mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } Log information: ---------------------- Jan 13 16:42:34 cmreddy-Lenovo-G500s dovecot: auth: Debug: auth client connected (pid=5166) Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=+CqxJ9jvkgB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=33682#011resp=<hidden> Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: passwd-file(armor5,127.0.0.1,<+CqxJ9jvkgB/AAAB>): lookup: user=armor5 file=/etc/dovecot/users Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: client passdb out: OK#0111#011user=armor5 Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: master in: REQUEST#0111108344833#0115166#0111#011d026da1fc2ca16d0208eec7bc369ac2d#011session_pid=5169#011request_auth_token Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: passwd-file(armor5,127.0.0.1,<+CqxJ9jvkgB/AAAB>): lookup: user=armor5 file=/etc/dovecot/users Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: auth: Debug: master userdb out: USER#0111108344833#011armor5#011uid=1001#011home=/home/armor5#011auth_token=555c47f35a67f94f519da93affe91abef29550fb Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap-login: Login: user=<armor5>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=5169, secured, session=<+CqxJ9jvkgB/AAAB> Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap(armor5): Error: user armor5: Couldn't drop privileges: User is missing GID (see mail_gid setting) Jan 13 16:42:44 cmreddy-Lenovo-G500s dovecot: imap(armor5): Error: Internal error occurred. Refer to server log for more information. Please help in resolving this issue. - Thanks CM Reddy

2 1

[Dovecot] Slow authentication performance when switching folder
by ra＠rz.uni-frankfurt.de 13 Jan '14

13 Jan '14

Hello, we have a problem with Dovecot 2.2.9 running on an AIX 7.1 and compiled with xlc. At first we configured passdb to use our ldap directory via pam and experienced an Internal login failure like the following one Jan 13 16:20:02 imap-login: Info: Internal login failure (pid=29818948 id=1) (internal failure, 1 successful auths): user=<user>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=yyy.yyy.yyy.yyy, TLS, session=<r/P1m9vv5ACNAv6j> I read that this error occurs if the last passdb returns a continue and there is no other passdb to ask. We added two more passdb to rule out that pam is the problem. We added ldap directly and as third a fallback passwd file, but we still get the Internal login failure. As far as i can see this only occurs if i switch to another folder and i´m being reauthenticated. Are there any suggestions on what is going wrong? Any push in the right direction would be appreciated. kind regards Manuel PS: This is the dump of our dovecot configuration file: doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (32768) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (24579) # OS: AIX 1 00F7B83D4C00 auth_debug = yes auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890- auth_username_format = %n auth_username_translation = AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot-imap default_process_limit = 8192 disable_plaintext_auth = no first_valid_uid = 100 info_log_path = /mailbase/dovecot/2.2.9/log/dovecot_imap_debug.log log_path = /mailbase/dovecot/2.2.9/log/dovecot_imap.log login_greeting = University-Frankfurt-IMAP-Horde ready. mail_access_groups = mhs mail_debug = yes mail_fsync = never mail_location = mbox:~/:INBOX=/var/spool/mail/%u:INDEX=/var/mail-indexes/%u mailbox_idle_check_interval = 90 secs mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = / type = private name = } passdb { args = username_format=%u /mailbase/etc/passwd driver = passwd-file } passdb { args = %s driver = pam } plugin { stats_refresh = 30 secs stats_track_cmds = yes } service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service { inet_listener { address = * port = 0 name = imap } inet_listener { address = * port = 993 name = imaps } name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service { inet_listener { address = 10.1.1.40 port = 0 name = pop3 } inet_listener { address = * port = 0 name = pop3s } name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl_cert = </etc/ssl/certs/thot_mit_chain.crt ssl_key = </etc/ssl/certs/private_key_thot.rz.pem userdb { driver = passwd } userdb { args = /mailbase/dovecot/2.2.9/etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = " stats imap_stats" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service imap-urlauth { name = imap-urlauth-login } service imap-urlauth-worker { name = imap-urlauth-worker } service token-login/imap-urlauth { name = imap-urlauth } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator-doveadm { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

1 0

[Dovecot] Fatal: master: service(imap): child n killed with signal 11 (core dumped) - in mail_cache_header_fields_read
by Maciej Uhlig 13 Jan '14

13 Jan '14

This is log from dovecot 2.2.10: 2014-01-13T15:34:39+01:00 server/a.b.c.d dovecot: imap(user@domain): Fatal: master: service(imap): child 6290 killed with signal 11 (core dumped) (gdb) bt full #0 0x00007fe78683aba5 in mail_cache_header_fields_read () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #1 0x00007fe78683890a in mail_cache_open_and_verify () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0x00007fe78683c339 in mail_cache_field_exists () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0x00007fe78683c459 in mail_cache_lookup_field () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #4 0x00007fe786821949 in index_mail_cache_lookup_field () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #5 0x00007fe7868222d6 in index_mail_update_access_parts () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #6 0x00007fe786822676 in index_mail_set_seq () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #7 0x00007fe786829f51 in search_more () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #8 0x00007fe78682a778 in index_storage_search_next_nonblock () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #9 0x00007fe786800257 in mailbox_search_next_nonblock () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #10 0x00007fe7868002b6 in mailbox_search_next () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #11 0x000000000041b637 in imap_fetch_more_int () No symbol table info available. #12 0x000000000041b871 in imap_fetch_more () No symbol table info available. #13 0x000000000040d8ae in cmd_fetch () No symbol table info available. #14 0x0000000000418acd in command_exec () No symbol table info available. #15 0x0000000000417b10 in client_command_input () No symbol table info available. #16 0x0000000000417c25 in client_command_input () No symbol table info available. #17 0x00000000004180b5 in client_handle_input () ---Type <return> to continue, or q <return> to quit--- No symbol table info available. #18 0x000000000041892f in client_input () No symbol table info available. #19 0x00007fe786522c66 in io_loop_call_io () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 No symbol table info available. #20 0x00007fe786523fd5 in io_loop_handler_run () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 No symbol table info available. #21 0x00007fe786522bd8 in io_loop_run () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 No symbol table info available. #22 0x00007fe7864cd483 in master_service_run () from /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 No symbol table info available. #23 0x0000000000422807 in main () No symbol table info available. (gdb) MU

1 0

[Dovecot] Fwd: problem with Error: net_connect_unix(/var/run/dovecot/dict) failed: Permission denied
by mozek007 13 Jan '14

13 Jan '14

Hi, $ dovecot --version 2.1.7 afrer i send email: log: tail -f /var/log/* <code style='overflow:scroll'>==> sieve.log <== Jan 10 20:44:14 lda(test(a)test.cz<a target='_blank' href='mailto:test@vinotekaolvi.cz'></a>): Error: net_connect_unix(/var/run/dovecot/dict) failed: Permission denied (euid=2000(vmail) egid=2000(vmail) missing +r perm: /var/run/dovecot/dict, dir owned by 0:0 mode=0755) Jan 10 20:44:14 lda(test(a)test.cz<a target='_blank' href='mailto:test@vinotekaolvi.cz'></a>): Error: Internal quota calculation error Jan 10 20:44:14 lda(test(a)test.cz): Info: msgid=<<a target='_blank' href='mailto:1Qg.7WxZ.46PKIvcQWgrs.1Iq4r%7B@seznam.cz'>1Qg.7WxZ.sdfs.1Iq4r{(a)seznam.cz</a>>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2014-01-10 20:44:14]</code> <code>$ cat /etc/dovecot/dovecot.conf | grep -v "^ *#" | grep -v "^ *$" protocols = pop3 imap sieve listen = * mail_uid = 2000 mail_gid = 2000 first_valid_uid = 2000 last_valid_uid = 2000 auth_master_user_separator = * log_path = /var/log/dovecot.log disable_plaintext_auth = yes auth_default_realm = test.cz plugin { quota_warning = storage=85%% /usr/local/bin/dovecot-quota-warning.sh 85 quota_warning2 = storage=90%% /usr/local/bin/dovecot-quota-warning.sh 90 quota_warning3 = storage=95%% /usr/local/bin/dovecot-quota-warning.sh 95 } ssl = required verbose_ssl = no ssl_key = </etc/ssl/private/iRedMail.key ssl_cert = </etc/ssl/certs/iRedMail_CA.pem ssl_ca = </etc/ssl/certs/iRedMail_CA.pem mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ plugin { quota = dict:user::proxy::quotadict quota_rule = *:storage=0 } dict { } plugin { auth_socket_path = /var/run/dovecot/auth-master } plugin { sieve = /%Lh/sieve/dovecot.sieve } protocol lda { postmaster_address = root auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve autocreate log_path = /var/log/sieve.log } protocol imap { mail_plugins = quota imap_quota autocreate imap_client_workarounds = tb-extra-mailbox-sep } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } service auth { unix_listener /var/spool/postfix/dovecot-auth { user = postfix group = postfix mode = 0666 } unix_listener auth-master { user = vmail group = vmail mode = 0666 } unix_listener auth-userdb { user = vmail group = vmail mode = 0660 } } passdb { args = /etc/dovecot/dovecot-master-users-password master = yes driver = passwd-file } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk } dict { quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } namespace { type = private separator = / prefix = inbox = yes } namespace { type = shared separator = / prefix = Shared/%%u/ location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u subscriptions = yes list = children } plugin { acl = vfile acl_shared_dict = proxy::acl } dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf } protocol sieve { } plugin { sieve = /var/vmail/sieve/%Ld/%Ln/dovecot.sieve sieve_dir = /var/vmail/sieve/%Ld/%Ln }</code> <code>$ ll /var/run/dovecot/ | grep dict srw------- 1 root root 0 led 10 20:52 dict</code> So, when i change chmod on /var/run/dovecot/dict, after $ /etc/init.d/ dovecot restart is default. So, how i can change user group or user or something other? I'm trying and googling this resolved about 6 hours. No results :( Thanks for any reply.

3 2

[Dovecot] it's possible to send email from the system after the mailbox quota is full
by ihab 13 Jan '14

13 Jan '14

it's possible to send email from the system after the mailbox quota is full i don't want warning mail i want something else because when i use warning on 100% or 99% or less some times the last message be too large (so if just 5% is free from quota size and the last msg size is 6% from quota ) after that the mailbox will not receive this message or warning message . -- View this message in context: http://dovecot.2317879.n4.nabble.com/it-s-possible-to-send-email-from-the-s… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] 2.2.10 - core dumps
by Jernej Porenta 13 Jan '14

13 Jan '14

Heya, We are occasionally seeing core dumps with dovecot 2.2.10, which are mostly like this: Jan 11 18:31:08 hostname dovecot: imap(username): Panic: file mail-index-transaction-update.c: line 19 (mail_index_transaction_lookup): assertion failed: (seq >= t->first_new_seq && seq <= t->last_new_seq) Jan 11 18:31:08 hostname dovecot: imap(username): Error: Raw backtrace: /opt/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 [0x2b657523aa3a] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 [0x2b657523aaa6] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot.so.0 [0x2b6575239b83] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 [0x2b6574f83458] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 [0x2b6574f86458] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mail_cache_decision_state_update+0xbe) [0x2b6574f7605e] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mail_cache_lookup_headers+0x87) [0x2b6574f77ba7] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 [0x2b6574f64919] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(index_mail_get_first_header+0x50) [0x2b6574f64e80] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 [0x2b6574f5fda1] -> /opt/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0 [0x2b6574f5fee9] -> /opt/dovecot-2.2.10/lib/dovecot/libdove Jan 11 18:31:08 hostname dovecot: imap(username): Fatal: master: service(imap): child 13548 killed with signal 6 (core dumps disabled) # dovecot -n is available here: http://pastebin.com/RE91aRi5 other raw traces are available here: http://pastebin.com/M1S33NYn Would you recommend deleting all the index files or rather capturing core dump file for further analysis? Or maybe something completely different ;) thank you in advance, cheers, Jernej

1 0

[Dovecot] [OT] cool bash script for cron with seconds resolution
by Marc Perkel 13 Jan '14

13 Jan '14

Short bash script to run a program 30 20 15 12 10 6 5 4 3 2 executions per minute. http://wiki.junkemailfilter.com/index.php/How_to_run_a_Linux_script_every_f…

2 1

[Dovecot] dsync error: gz trailer has wrong CRC value
by Joe Beaubien 13 Jan '14

13 Jan '14

A few days ago by dovecot installation started behaving weirdly. First it was doveadm fts optimize which would fail (a thread running about that) and now it's dsync, which means my backups are not working. This all started a few days ago, which I find a little weird, because I haven't messed around with the dovecot setup in months. I've been searching the internet, but didn't find anything useful yet. Would anyone know how to fix the errors in the log below? Thanks, -Joe dovecot version is 2.1.7 Here is the log: dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): gz trailer has wrong CRC value at 16966298 dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Error: read(msg input) failed: Invalid argument dsync(archive): Error: zlib.read(/mba_data/emails/archive/storage/m.1885): missing gz header at 16973513 dsync(archive): Panic: file mail-index-transaction-update.c: line 906 (mail_index_update_ext): assertion failed: (seq > 0 && (seq <= mail_index_view_get_messages_count(t->view) || seq <= t->last_new_seq)) dsync(archive): Error: Raw backtrace: /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(+0x4203a) [0x7f3a5150503a] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f3a515050fa] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3a514dc3f0] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mail_index_update_ext+0x1c7) [0x7f3a51804927] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(+0xa8746) [0x7f3a517f7746] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mail_cache_transaction_commit+0x4c) [0x7f3a517f7a2c] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(+0xa8af3) [0x7f3a517f7af3] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(+0xa2cea) [0x7f3a517f1cea] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x84) [0x7f3a51800754] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x8a) [0x7f3a517f209a] -> /opt/dovec ot/lib/d ovecot/lib20_zlib_plugin.so(+0x3b7a) [0x7f3a4fe8cb7a] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(+0xb481) [0x7f3a5009b481] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3d) [0x7f3a517c9c4d] -> /opt/dovecot/bin/dsync() [0x4297e6] -> /opt/dovecot/bin/dsync() [0x42b222] -> /opt/dovecot/bin/dsync(dsync_worker_select_mailbox+0x2e) [0x4291be] -> /opt/dovecot/bin/dsync() [0x424c75] -> /opt/dovecot/bin/dsync() [0x424db7] -> /opt/dovecot/bin/dsync(dsync_brain_msg_sync_more+0x22c) [0x4245ec] -> /opt/dovecot/bin/dsync(dsync_brain_sync+0x459) [0x422fc9] -> /opt/dovecot/bin/dsync() [0x423e61] -> /opt/dovecot/bin/dsync(dsync_brain_sync+0x7f1) [0x423361] -> /opt/dovecot/bin/dsync() [0x423cdc] -> /opt/dovecot/bin/dsync(dsync_brain_sync+0x832) [0x4233a2] -> /opt/dovecot/bin/dsync(dsync_brain_sync_all+0x18) [0x423ee8] -> /opt/dovecot/bin/dsync() [0x420f36] -> /opt/dovecot/bin/dsync() [0x4215b2] -> /opt/dovecot/bin/dsync() [0x40e798]

1 0

[Dovecot] Panic: file buffer.c: line 307 (buffer_set_used_size): assertion failed: (used_size <= buf->alloc)
by Maciej Uhlig 11 Jan '14

11 Jan '14

This is log from dovecot 2.2.10: 2014-01-11T09:55:14+01:00 server/a.b.c.d dovecot: imap(user@domain): Error: Corrupted transaction log file /pracmail/domain/user/mail/.sent-mail/dovecot.index.log seq 16777216: log file shrank (868 < 6144) (sync_offset=6144) 2014-01-11T09:55:14+01:00 server/a.b.c.d dovecot: imap(user@domain): Panic: file buffer.c: line 307 (buffer_set_used_size): assertion failed: (used_size <= buf->alloc) 2014-01-11T09:55:14+01:00 server/a.b.c.d dovecot: imap(user@domain): Error: Raw backtrace: /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(+0x6c2fa) [0x7f0704fa22fa] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(+0x6c366) [0x7f0704fa2366] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f0704f5802f] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(+0x67489) [0x7f0704f9d489] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_file_open+0x2c0) [0x7f07052ed120] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mail_transaction_log_open+0xb8) [0x7f07052e99b8] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(+0xc1784) [0x7f07052cf784] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mail_index_open+0xf0) [0x7f07052cfac0] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(index_storage_mailbox_open+0xac) [0x7f07052c0fac] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(+0x4d43a) [0x7f070525b43a] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(+0x4d50f) [0x7f070525b50f] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(+0x84054) [0x7f0705292054] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0xf) [0x7f070529220f] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x4a) [0x7f07052bfc2a] -> /usr/local/dovecot/lib/dovecot/lib10_quota_plugin.so(+0xb8ac) [0x7f0704d1c8ac] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot-storage.so.0(mailbox_get_status+0x8c) [0x7f0705291ebc] -> dovecot/imap(imap_status_get+0x7a) [0x42058a] -> dovecot/imap(cmd_status+0x15d) [0x413a0d] -> dovecot/imap(command_exec+0x3d) [0x418acd] -> dovecot/imap() [0x417b10] -> dovecot/imap() [0x417c25] -> dovecot/imap(client_handle_input+0x125) [0x4180b5] -> dovecot/imap(client_input+0x6f) [0x41892f] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f0704fb2c66] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x95) [0x7f0704fb3fd5] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f0704fb2bd8] -> /usr/local/dovecot-2.2.10/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f0704f5d483] -> dovecot/imap(main+0x2a7) [0x422807] 2014-01-11T09:55:14+01:00 server/a.b.c.d dovecot: imap(user@domain): Fatal: master: service(imap): child 25125 killed with signal 6 (core dumped) 2014-01-11T09:55:15+01:00 server/a.b.c.d dovecot: imap(user@domain): Error: Transaction log file /pracmail/us.edu.pl/user/mail/.sent-mail/dovecot.index.log: marked corrupted Unfortunately I'm not able to find core file although 'core dumped' is written to the log. MU

1 0

[Dovecot] Dovecot quota with MySQL - username issue
by michael 11 Jan '14

11 Jan '14

Hi all, I'm using Dovecot 2.2.8 with quota using a MySQL backend. The Quota plugin is listed for POP3, IMAP and LDA. When it is enabled for LDA, it populates the "username" field in the MySQL table with e mail addresses. I end up with a mixture of email addresses and usernames, which causes things to not fully work. It *should* be just usernames. the LDA SQL statement is: user_query = \ SELECT mailboxes.username, accounts.uid, accounts.uid AS gid, \ concat('/home/',mailboxes.username) AS home, \ (SELECT IF(accounts.new_mail_fmt=1, \ CONCAT('Maildir:',home,'/Maildir'), \ CONCAT('mbox:',home,'/Maildir:INBOX=/var/spool/mail/',mailboxes.username))) AS mail_location \ FROM mailboxes JOIN accounts ON accounts.username=mailboxes.username \ WHERE (mailboxes.email='%u' || \ (mailboxes.email=CONCAT('@','%d') AND (SELECT COUNT(email) FROM mailboxes \ WHERE email='%u') = 0) AND mailboxes.active IS TRUE) It clearly knows the username. Usernames on this system are just names, not full email addresses. The configuration of Quota Dict is: dovecot.conf dict/quotadict = mysql:/etc/dovecot/dovecot-dict-sql.conf ... quota = dict:user::proxy::quotadict dovecot-dict-sql.conf map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } Can this be fixed? Michael

2 1

[Dovecot] error when running fts optimize
by Joe Beaubien 11 Jan '14

11 Jan '14

Since yesterday, when I run "fts optimize", I get an error. Command: doveadm -v fts optimize -u formulaire Error: Jan 10 18:05:20 mba dovecot: indexer-worker(formulaire): Error: lucene index /mba_data/emails/formulaire/lucene-indexes: IndexWriter::optimize() failed (#9): bit out of range Does anyone have any idea what causes this and how to fix it? Thanks, Joe Beaubien

1 0

[Dovecot] Possible to force cipher order?
by Matthias Rieber 10 Jan '14

10 Jan '14

Hi, is it possible to force the server cipher order instead of the clients preferences? When I connect with openssl using these ciphers: 'RC4-SHA:DHE-RSA-AES256-GCM-SHA384' -> RC4-SHA will be selected and with 'DHE-RSA-AES256-GCM-SHA384:RC4-SHA' -> DHE-RSA-AES256-GCM-SHA384 It seems to be recommended for webservers to override that due to bad clients choices and increasing knowledge, like RC4 vs. BEAST, AES128 better (theoretical) than AES256. Regards, Matthias

1 1

[Dovecot] Message filtering capability at IMAP proxy
by CM Reddy 10 Jan '14

10 Jan '14

Hi, I would like process the messages at Dovecot IMAP proxy. In one of the documents, it was mentioned that Dovecot proxy currently supports on the fly message filtering in latest releases. Will it it possible to extend the filtering feature to handle the following requirements. 1. Parse the email at IMAP proxy. 2. Replace the links with some other secure links. 3. Replace the attachments with some other document. It would be great, if any one can provide some pointers to move forward. - Thanks in advance CM Reddy

2 1

Re: [Dovecot] imap auto create mailbox: we're not in group 8(mail)
by Joseph Tam 10 Jan '14

10 Jan '14

Adrian Zaugg writes: > How can I configure the auto create mailbox feature that it works and > let run LMTP and IMAP process as user %u and group mail and let create > the mailboxes in /var/mail as (example user tester) with the following > permissions: > > /var/mail: > > drwxrwx--x root mail 3072 Dec 18 01:43 . > drwx------ tester tester 1024 Jan 09 12:53 tester This is probably what you need: # Group to enable temporarily for privileged operations. Currently this is # used only with INBOX when either its initial creation or dotlocking fails. # Typically this is set to "mail" to give access to /var/mail. mail_privileged_group = mail > ...or do I need a different approach? You could also chmod 1777 /var/mail but this will allow arbitrary uses who have filesystem access to create their own files here, and maybe DoS a new user from being created (or maybe even anticipate a new mailbox, create one with mode 0777 and wait to intercept mail?). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] LDA quota rejection
by Davide 09 Jan '14

09 Jan '14

Hi to all, i have dovecot 2.2.5 and i have implemented lda rejection through quota full this is my dovecot conf protocol lda { mail_fsync = optimized auth_socket_path = /usr/local/var/run/dovecot/auth-userdb deliver_log_format = msgid=<%f>-<%s>-%m: %$ hostname = mail.cgilfe.it info_log_path = /var/log/dovecot/dovecot-deliver.log log_path = /var/log/dovecot/dovecot-deliver.log mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = $mail_plugins mail_log sieve postmaster_address = postmaster(a)mail.cgilfe.it rejection_subject = Rifiutato: %s rejection_reason = Messaggio a <%t> automaticamente rifiutato:%n%r submission_host = 192.16X.XXX.XX0 } If user over quota receive a messagge internally all is ok but if the user receive a mail from external domains nothing to the sender is sentback. Thanks in advance to all for possible help. -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

4 3

[Dovecot] imap auto create mailbox: we're not in group 8(mail)
by Adrian Zaugg 09 Jan '14

09 Jan '14

Dear List Somehow I don't understand the intended work flow to have new mailboxes auto created. On login of a new user with no mailbox, I get 2014-01-09 12:53:06 imap(tester): Error: user tester: Initialization failed: Namespace '': mkdir(/var/mail/tester) failed: Permission denied (euid=1016(tester) egid=1016(tester) missing +w perm: /var/mail, we're not in group 8(mail), dir owned by 0:8 mode=0771) The imap process runs as the user the login performed and thus it has only the privileges of that user. This is good and desired, when a mailbox already exists. I do not want to allow all users to write to /var/mail, only they should write to their dirs inside /var/mail. Same story for LMTP, if no mailbox exists yet: 2014-01-09 13:01:47 lmtp(20416, tester): Error: user tester: Initialization failed: Namespace '': mkdir(/var/mail/tester) failed: Permission denied (euid=1016(tester) egid=1016(tester) missing +w perm: /var/mail, we're not in group 8(mail), dir owned by 0:8 mode=0771) How can I configure the auto create mailbox feature that it works and let run LMTP and IMAP process as user %u and group mail and let create the mailboxes in /var/mail as (example user tester) with the following permissions: /var/mail: drwxrwx--x root mail 3072 Dec 18 01:43 . drwx------ tester tester 1024 Jan 09 12:53 tester ...or do I need a different approach? Thank you for helping me. Best regards, Adrian. My setup: ======== * Exim delivers to LMTP socket as user %u, group mail * maildir storage in /var/mail doveconf -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 ext3 auth_cache_negative_ttl = 0 auth_cache_size = 5 M auth_cache_ttl = 4 hours auth_failure_delay = 3 secs auth_mechanisms = plain login digest-md5 cram-md5 apop rpa auth_username_format = %n auth_verbose = yes auth_worker_max_count = 128 first_valid_gid = 1000 first_valid_uid = 1000 last_valid_gid = 60000 last_valid_uid = 60000 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_location = maildir:/var/mail/./%u/:INDEX=MEMORY mail_prefetch_count = 1024 maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vacation-seconds namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = scheme=SHA512-CRYPT username_format=%u /etc/cram-md5.pwd driver = passwd-file } plugin { sieve = /var/mail/%u/sieve/.dovecot.sieve sieve_before = /var/mail/%u/sieve/vacation.sieve sieve_dir = /var/mail/%u/sieve sieve_extensions = +vacation +vacation-seconds sieve_max_actions = 1024 sieve_vacation_default_period = 12d sieve_vacation_max_period = 0 sieve_vacation_min_period = 1d } postmaster_address = postmaster@XXXX protocols = " imap lmtp sieve pop3" service auth-worker { user = $default_login_user } service auth { group = mail-security unix_listener auth-client { mode = 0660 user = Debian-exim } unix_listener auth-userdb { mode = 0666 } user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 5 } service lmtp { process_min_avail = 10 unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 256 } ssl_cert = </etc/ssl/XXXX ssl_cipher_list = DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:+TLSv1:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!PSK:!SRP:!SSLv2:!3DES:!DSS ssl_key = </etc/ssl/XXXX ssl_parameters_regenerate = 128 hours userdb { args = blocking=no driver = passwd override_fields = home=/var/mail/%u mail=maildir:/var/mail/%u } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 64 } protocol pop3 { mail_max_userip_connections = 32 pop3_client_workarounds = oe-ns-eoh pop3_save_uidl = yes }

2 2

Re: [Dovecot] BUG report: doveadm HEADER <field> <pattern> when concatenating with another Search key
by Joseph Tam 09 Jan '14

09 Jan '14

> So E.g. When doing > doveadm fetch -u exampleuser hdr SUBJECT Silvester HEADER > Return-Path someuser(a)example.com > > it initially outputs 13 headers (same as when using with SUBJECT Silvester > only) , when piping it to "grep -i 'Return-Path'" it even found only 3 out > of 13 headers containing a Return-Path at all, 2 of them different than > someuser(a)example.com - so SAME behaviour as with search. I tried using logical conjections of header searches and it works with my installation of dovecot, so either it's a bug introduced later than 2.1.16, or perhaps it from the different search engine you use (I use the default that comes with dovecot -- squat?). Sorry, can't help you out further. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Disallow certain characters in foldernames?
by Charles Marcus 08 Jan '14

08 Jan '14

Is there a way to do this in dovecot? Similar to how you can When using Maildir and Thunderbird, if a user tries to a create folder named "test.1" or "test/1", dovecot will happily create a folder called "test", with a subfolder called "1". Worse, the top level folder "test" is greyed out, which is how Thunderbird displays a folder that can contain only other folders, not both folders and files. I want to disallow this. Obviously I'd prefer if Thunderbird would display a meaningful error, but most likely dovecot cannot control that. I don't really care if the user just gets some kind of weird generic error or not, I'd just prefer to prevent dovecot from creating the problematic folders, and explain the problem to the user if/when they call about it (after NOT reading my carefully crafted documentation explaining the illegal characters that cannot be used in foldernames). -- Best regards, Charles

2 3

[Dovecot] acl, shared folders
by Infoomatic 08 Jan '14

08 Jan '14

Hi list, After spending quite some time to figure out how users can share folders I now hope someone of you could help me out. I am quite sure its just a stupid mistake/misunderstanding ... I am using Ubuntu 12.04 LTS with the shipped dovecot 2.0.19 When I login via telnet as user1 I get the following: 1 create folder1 1 OK Create completed. 2 setacl folder1 user2 rli 2 OK Setacl complete. 3 getacl folder1 * ACL "folder1" "user2" ilr "user1" lrwstipekxacd 3 OK Getacl completed. This seems fine. However, there is nothing listed in the account of user2. I think the mistake is in the namespace configuration of "location" or "prefix" Please help! Thanks! infoomatic # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-45-generic x86_64 Ubuntu 12.04.3 LTS ext4 auth_username_format = %n disable_plaintext_auth = no mail_debug = yes mail_gid = vmail mail_home = /var/lib/vmail/home/%u mail_location = mdbox:/var/lib/vmail/mail/%u mail_plugins = " acl zlib fts fts_solr acl" mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags mdbox_rotate_size = 64 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = mdbox:/var/lib/vmail/mail/%%n/mailboxes/shared/%n prefix = shared/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/lib/vmail/shared-mailboxes fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags zlib_save = bz2 zlib_save_level = 6 } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } service managesieve-login { inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = " sieve acl" } protocol imap { mail_plugins = " acl imap_acl" }

2 2

[Dovecot] Dovecot deliver into folder question
by Marc Perkel 08 Jan '14

08 Jan '14

If I want to user dovecot deliver into a folder that is not at the root level - how do I do that? How do I specify a folder in a folder?

4 7

[Dovecot] LMTP with virtual and system users
by Philipp Kolmann 08 Jan '14

08 Jan '14

Hi, I have a mailsystem where i have some local users with shell access and full home dirs which receive mail and also several SQL virtual users only for mail. With the virtual users, everything works fine. Mail is delivered via LMTP and also sieve works :) The SQL Lookup knows what to do with username(a)domain.com The problem is the system user. If exim delivers the mail to the lmtp socket, the LMTPd can't find username(a)local.host I would be able to specify the global auth_username_format=%n but then my SQL queries break and I like the possibility to have xx(a)domain1.com and xx(a)domain2.com routed to two different accounts. As I have seen in the source, I can't specify username_format=%n in the passdb { driver = pam } backend. Do you have any suggestion how to solve this issue? thanks Philipp

3 6

[Dovecot] Question re: filesystem permissions
by Charles Marcus 08 Jan '14

08 Jan '14

Hi all, I want to make sure the filesystems are correct/optimal and secure as possible. This is a virtual hosting setup only (no system users), and dovecot is currently running in high performance mode (I'm thinking I want to change that too, so wondering if that would affect the permissions)... /var/vmail (and everything under it) is owned by vmail:vmail. Current permissions are: /var/vmail 755 /var/vmail/example1.com 777 /var/vmail/example2.com 777 /var/vmail/example1.com/user1 755 (all other user home dirs are the same) /var/vmail/example1.com/user1/Maildir 700 (all other user Maildirs and all subdirs are the same) All files are 600, with the exception of the dovecot-uidvalidity.blahblah files, which are 444 So... is this right? Anything need to be changed? Thanks, -- Best regards, Charles

3 6

[Dovecot] virtual mailboxes folder structure
by Marco Cusano 08 Jan '14

08 Jan '14

Hi, I am trying to find a way to list my virtual mailboxes hiding the namespace prefix into my imap client. Fore example now my “All” mailbox is listed under virtual/ as: Inbox Sent Drafts Spam Trash - virtual All I would like to list as this: Inbox Sent Drafts Spam Trash All This is my 10-mail.conf: http://pastebin.com/DumEbbmy and this is my 15-mailboxes.conf: http://pastebin.com/QFzWGzyC I thought that the list = children paramenter would do but it did not. Thank you

1 0

Re: [Dovecot] BUG report: doveadm HEADER <field> <pattern> when concatenating with another Search key
by megodin＠inboxalias.com 08 Jan '14

08 Jan '14

Hey Joseph! Thanks for testing. > I couldn't recreate this with 2.1.16. Also, my version of "doveadm > search" does not accept missing header patterns. Is this corroborated > by dumping out the header with this same search query? > > doveadm fetch -u exampleuser hdr SUBJECT Silvester \ > HEADER Return-Path someuser at example.com Yes, it's same phenomenon when dumping with fetch. Of course you can only test this properly when you really have some mails with corresponding existing Header fields. (You can also try out other HEADER fields, like Reply-To, References, X-Spam-Score or whatever - just look at some mail headers of your mails and try it with existing fields.) So E.g. When doing doveadm fetch -u exampleuser hdr SUBJECT Silvester HEADER Return-Path someuser(a)example.com it initially outputs 13 headers (same as when using with SUBJECT Silvester only) , when piping it to "grep -i 'Return-Path'" it even found only 3 out of 13 headers containing a Return-Path at all, 2 of them different than someuser(a)example.com - so SAME behaviour as with search. Maybe also relevant, as mail format I'm using sdbox (on a larger user base of 40.000 people). -- (relevant part) of dovecot -n # 2.2.5.5 (e5350245ad9b): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.23.2.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.4 (Santiago) nfs auth_cache_size = 100 M auth_cache_ttl = 10 mins auth_master_user_separator = * auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes disable_plaintext_auth = no import_environment = TZ DEBUG_OUTOFMEM DOVECOT_HOSTDOMAIN listen = * lock_method = dotlock mail_fsync = always mail_home = /mnt/nfs/vmails/%u mail_location = sdbox:/mnt/nfs/vmails/%u/mail:ALT=/mnt/archivnfs/vmails/%u/mail mail_plugins = " quota fts fts_lucene" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes service imap-login { process_limit = 200 process_min_avail = 8 service_count = 0 vsz_limit = 512 M } service imap { client_limit = 1 process_limit = 10000 } service pop3-login { process_limit = 200 process_min_avail = 8 } service pop3 { process_limit = 10000 } verbose_proctitle = yes protocol lda { mail_plugins = " quota fts fts_lucene sieve" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 50 mail_plugins = " quota fts fts_lucene imap_quota" } _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] how to separate virtual delivery and authentication?
by Mihai Badici 08 Jan '14

08 Jan '14

I have a "pure ldap" setting with postfix and dovecot. When using dovecot delivery, the recipient is checked via ldap. The same ldap query is used when authenticate. So, if I want to authenticate with the uid , I can't use a filter like uid=%u because the delivery will fail. I don't want to use %nor something else because I could use multiple e-mail addresses on a single account. I actually use a filter like ( mail=%u)|(uid=%u) but I think for more complex situations should be better to have two separate filters, one for authentication and the other for the delivery. What is your oppinion? -- Mihai Bădici http://mihai.badici.ro

2 7

Re: [Dovecot] BUG report: doveadm HEADER <field> <pattern> when concatenating with another Search key
by Joseph Tam 08 Jan '14

08 Jan '14

On Wed, 8 Jan 2014, dovecot-request(a)dovecot.org wrote: > doveadm search -u exampleuser SUBJECT Silvester > (outputs correctly 10 matches) > > ... > > doveadm search -u exampleuser SUBJECT Silvester HEADER Return-Path > someuser(a)example.com > (gives exactly the same output - but this is WRONG, as the given Subject > AND Return-Path is really only found in 1 Message - uid 15697) I couldn't recreate this with 2.1.16. Also, my version of "doveadm search" does not accept missing header patterns. Is this corroborated by dumping out the header with this same search query? doveadm fetch -u exampleuser hdr SUBJECT Silvester \ HEADER Return-Path someuser(a)example.com Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot can't find CLucene's libstemmer on FreeBSD
by interfaSys sàrl 08 Jan '14

08 Jan '14

Hello, A set of patches was created by Lawrence Chen for the Dovecot2 port so that it could recognise and use libstemmer and libexttextcat. They can't be used as is as he's replacing statements with something that works only on FreeBSD, but I think it would be a good idea to try and include some of his fixes. http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/175813 Cheers, Olivier

1 0

Re: [Dovecot] using OR in doveadm search query
by Joseph Tam 08 Jan '14

08 Jan '14

> > This works for me (at least with tcsh): > > > > $ doveadm search mailbox "shared/* OR (SUBJECT a) (SUBJECT b)" > doveadm does not complain anymore but it does not find anything. I guess > because now the query has become a mailbox name that does not exist. ( I > am using dovecot 2.2.9) Each search token ought to be a command line argument to doveadm, so if you're looking for all message with the string "a" or "b" in the subject in mailboxes shared/*, then this should be the correct syntax, with all arguments sufficiently escaped from shell interpretation: doveadm search mailbox shared/\* $ SUBJECT a OR SUBJECT b $ (Delete "OR" if both strings must be in the subject: expressions are implicitly AND'd if not OR'd. In fact, you can also remove the parenthesis since precedence doesn't matter anymore.) You can check the search query by fetching some values using the same query: doveadm fetch 'mailbox hdr' mailbox shared/\* $ SUBJECT a OR SUBJECT b $ Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Mailbox autocreate feature cannot create folders
by interfaSys sàrl 08 Jan '14

08 Jan '14

Hello, The "new" way of creating default mailboxes doesn't work for us. There seems to be a permission problem. We get this in the logs: imap(testuser(a)domain.com): Error: nfs_flush_file_handle_cache_dir: rmdir(/var/mail) failed: Device busy That error message has nothing to do with NFS (not used) or /var/mail and appears every time an app is requesting a list of folders via IMAP and only if we enable the autocreate feature. We're using mdbox, emails are delivered via LDA and the folder permissions look like this: # la /home/user/imap/domain.com/testuser/mdbox/mailboxes/ total 5 drwx------ 3 user mail 3B Jan 5 19:33 INBOX drwx------ 3 user mail 3B Jan 5 19:33 . drwx------ 4 user mail 8B Jan 7 02:43 .. The mailbox definitions used come straight from the wiki: http://wiki2.dovecot.org/MailboxSettings I've enabled debugging, but there is no mention of the mailboxes to create: Debug: dict quota... Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:~/mdbox Debug: fs:... Debug: acl:... ... Here is what works: - Autocreate plugin - Creating folders via various clients So, it seems Dovecot can create folders, just not using that feature. If that's not a bug, would there be a way to make it work without altering permissions? Cheers, Olivier

1 0

[Dovecot] inotify max_user instances
by Charles Marcus 07 Jan '14

07 Jan '14

Hello, Timo, last year when you remoted into our server and performed the migration from courier-imap, we ran into this issue, and you solved it by doing: echo 1024 > /proc/sys/fs/inotify/max_user_instances Then you said you were going to solve this permanently by changing the init script... Here is what you said (this is from the skype chat): [2012-06-04 10:40:43 AM] timosirainen: probably put to dovecot init script or something I guess I could manually modify my init script, but I'm clueless as to where.how. The current (gentoo) init script is: > #!/sbin/runscript > # Copyright 1999-2012 Gentoo Foundation > # Distributed under the terms of the GNU General Public License, v2 or > later > # $Header: > /var/cvsroot/gentoo-x86/net-mail/dovecot/files/dovecot.init-r4,v 1.1 > 2012/12/01 10:40:49 eras Exp $ > > extra_started_commands="reload" > > depend() { > need localmount > before postfix > after bootmisc ldap mysql ntp-client ntpd postgresql saslauthd > slapd > use logger net > } > > checkconfig() { > DOVECOT_INSTANCE=${SVCNAME##*.} > if [ -n "${DOVECOT_INSTANCE}" -a "${SVCNAME}" != "dovecot" ]; then > DOVECOT_CONF=/etc/dovecot/dovecot.${DOVECOT_INSTANCE}.conf > else > DOVECOT_CONF=/etc/dovecot/dovecot.conf > fi > if [ ! -e ${DOVECOT_CONF} ]; then > eerror "You will need an ${DOVECOT_CONF} first" > return 1 > fi > if [ -x /usr/sbin/dovecot ]; then > DOVECOT_BASEDIR=$(/usr/sbin/dovecot -c ${DOVECOT_CONF} > -a | grep '^base_dir = ' | sed 's/^base_dir = //') > else > eerror "dovecot not executable" > return 1 > fi > DOVECOT_BASEDIR=${DOVECOT_BASEDIR:-/var/run/dovecot} > DOVECOT_PIDFILE=${DOVECOT_BASEDIR}/master.pid > } > > start() { > checkconfig || return 1 > ebegin "Starting ${SVCNAME}" > start-stop-daemon --start --exec /usr/sbin/dovecot \ > --pidfile "${DOVECOT_PIDFILE}" -- -c "${DOVECOT_CONF}" > eend $? > } > > stop() { > checkconfig || return 1 > ebegin "Stopping ${SVCNAME}" > start-stop-daemon --stop --exec /usr/sbin/dovecot \ > --pidfile "${DOVECOT_PIDFILE}" > eend $? > } > > reload() { > checkconfig || return 1 > ebegin "Reloading ${SVCNAME} configs and restarting auth/login > processes" > start-stop-daemon --signal HUP --exec /usr/sbin/dovecot \ > --pidfile "${DOVECOT_PIDFILE}" > eend $? > } Suggestions? -- Best regards, Charles

2 2

[Dovecot] Panic: file mailbox-list-maildir.c: line 133: unreached
by Raúl Massano Brás 07 Jan '14

07 Jan '14

Hi I am using dovecot 2.0.9 on CentOS 6.4 The following error appears in the logs when users connect to the imap server using MACs. All other clients that I tested work fine. ###### BEGIN ERROR ###### Jan 5 18:04:25 mail dovecot: imap(jcf): Panic: file mailbox-list-maildir.c: line 133: unreached Jan 5 18:04:25 mail dovecot: imap(user): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x3ca6a) [0x7f991df2ca6a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x3cab6) [0x7f991df2cab6] -> /usr/lib64/dovecot/libdovecot.so.0(+0x16dba) [0x7f991df06dba] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x3eace) [0x7f991e1aface] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_list_is_valid_pattern+0x26) [0x7f991e1a4f86] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x3c861) [0x7f991e1ad861] -> /usr/lib64/dovecot/libdovecot-storage.so.0(fs_list_iter_next+0x2f) [0x7f991e1ad3ff] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_list_iter_next+0xa) [0x7f991e1a490a] -> dovecot/imap() [0x40b399] -> dovecot/imap(cmd_list_full+0x426) [0x40c246] -> dovecot/imap() [0x40f8cd] -> dovecot/imap() [0x40f9ba] -> dovecot/imap(client_handle_input+0x135) [0x40fbe5] -> dovecot/imap(client_input+0x5f) [0x41050f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x48) [0x7f991df37e08] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f991df38d7f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f991df37d98] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f991df26203] -> dovecot/imap(main+0x2f9) [0x418809] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f991d76fcdd] -> dovecot/imap() [0x408229] ###### END ERROR ###### The dovecot configuration is: ###### BEGIN CONFIG ###### # dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.23.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) disable_plaintext_auth = no mail_access_groups = mail mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mbox_write_locks = fcntl namespace { hidden = yes inbox = yes list = yes location = mbox:~/mail:INBOX=/var/spool/mail/%u prefix = "#mbox/" separator = / type = private } namespace { location = maildir:~/Maildir prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ssl_ca = </etc/pki/tls/certs/TERENA.crt ssl_cert = </etc/pki/tls/certs/mail.iseg.ulisboa.pt.crt ssl_key = </etc/pki/tls/private/mail.iseg.ulisboa.pt.key syslog_facility = local0 userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } ###### END CONFIG ###### I don't know what to do to allow MAC users to use the system. Can anyone help? Thank you, -- Raúl Brás Instituto Superior de Economia e Gestão Universidade de Lisboa

2 2

[Dovecot] using OR in doveadm search query
by W. de Hoog 07 Jan '14

07 Jan '14

Hi, I am trying to create an OR query but no success yet: $ doveadm search mailbox shared/* OR SUBJECT "a" SUBJECT "b" doveadm(neil): Fatal: Use parenthesis when mixing ANDs and ORs $ doveadm search mailbox shared/* OR $SUBJECT "a"$ $SUBJECT "b"$ doveadm(neil): Fatal: Unknown argument (SUBJECT $ doveadm search mailbox shared/* $OR \(SUBJECT "a"$ $SUBJECT "b"$\) doveadm(neil): Fatal: Unknown argument (OR What is the correct syntax for such a query? -- Willem-Jan de Hoog

2 2

[Dovecot] What's the parameter -w for dovecot-auth: dovecot -w
by ldaamandy 07 Jan '14

07 Jan '14

hello: What's the parameter -w for dovecot-auth: dovecot -w my service of dovecot-auth always activing two: one is" dovecot-auth" , the other is" dovecot-auth -w" i don't know the diffevent between them amandy thanks!

2 4

[Dovecot] need assistance migrating between apple servers
by Raymond Norton 06 Jan '14

06 Jan '14

I am attempting to move imap folders from an Apple Snow Leopard server to a new Apple Mavericks server. Dovecot --version is not working , but I believe the old server is running dovecot 1.1.2 and can confirm the new one is running 2.2.x. I have tried taring and moving folders, but have not been able to get the transfered messages and folders to show up in user accounts (new messages show up fine). I have attempted to recreate index files, but that has not worked either. The last attempt I made to migrate was to use dsync, but it does not exist on the old server and I do not see a way to install it. What method would work best to migrate or move files and folders from the old server and get them to show up for clients on using the new server? -- Raymond Norton LCTN 952.955.7766 Sent from My Desktop

2 1

[Dovecot] virtual mailboxes folder structure
by Marco Cusano 06 Jan '14

06 Jan '14

Hi, I am trying to find a way to list my virtual mailboxes hiding the namespace prefix into my imap client. Fore example now my “All” mailbox is listed under virtual/ as: Inbox Sent Drafts Spam Trash virtual All I would like to list as this: Inbox Sent Drafts Spam Trash All This is my 10-mail.conf: http://pastebin.com/DumEbbmy and this is my 15-mailboxes.conf: http://pastebin.com/QFzWGzyC I thought that the list = children paramenter would do but it did not. Thank you

1 0

[Dovecot] virtual mailboxes folder structure
by Marco Cusano 06 Jan '14

06 Jan '14

Hi, I am trying to find a way to list my virtual mailboxes hiding the namespace prefix into my imap client. Fore example now my “All” mailbox is listed under virtual/ as: Inbox Sent Drafts Spam Trash virtual All I would like to list as this: Inbox Sent Drafts Spam Trash All This is my 10-mail.conf: http://pastebin.com/DumEbbmy and this is my 15-mailboxes.conf: http://pastebin.com/QFzWGzyC I thought that the list = children paramenter would do but it did not. Thank you

1 0

[Dovecot] [SIEVE] Locking Errors with vnd.dovecot.duplicate Extension
by Daniel Parthey 06 Jan '14

06 Jan '14

Hi, we are running a 4 host setup which each hosts a director+mailbox which is mounted via NFSv4 from a DRBD cluster. * Dovecot upstream release 2.1.16 * Doveadm batch subcommand fix - http://hg.dovecot.org/dovecot-2.1/raw-rev/850b5d8bbcc9 * Pigeonhole release 0.3.4 Now we would like to remove duplicate Mails using the vnd.dovecot.duplicate extension using a SIEVE script like this: require ["vnd.dovecot.duplicate", "fileinto", "mailbox", "regex", "vacation", "variables"]; if duplicate { fileinto :create "Trash"; } But as soon as we start delivering duplicate mails, we're sometimes getting locking errors from the mailbox (which is responsible for the user) according to the director: Dec 27 16:36:30 10.129.3.213 dovecot: lmtp(27975, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:33 10.129.3.213 dovecot: lmtp(27987, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:35 10.129.3.213 dovecot: lmtp(27994, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:36 10.129.3.213 dovecot: lmtp(28011, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:36 10.129.3.213 dovecot: lmtp(28013, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:38 10.129.3.213 dovecot: lmtp(28017, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:39 10.129.3.213 dovecot: lmtp(28025, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:42 10.129.3.213 dovecot: lmtp(28037, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Dec 27 16:36:43 10.129.3.213 dovecot: lmtp(27973, user001(a)example.org) Error: Creating lock file for /mail/dovecot/example.org/user001/.dovecot.lda-dupes timed out in 20 secs Configs and Error log is attached. Any idea how to mitigate these locking issues? Regards Daniel

1 0

[Dovecot] disable_plaintext_auth = yes not showing in doveconf -n output?
by Charles Marcus 04 Jan '14

04 Jan '14

I have it set, but it doesn't show up. However, I noticed that it does show as enabled by default in doveconf -a output. Is this why it doesn't show up in doveconf -n output? -- Best regards, Charles

4 5

[Dovecot] RFE: IMAP LIST Extension for Special-Use Mailboxes
by Patrick Ben Koetter 03 Jan '14

03 Jan '14

Timo, would you consider adding support for "IMAP LIST Extension for Special-Use Mailboxes" <http://www.rfc-editor.org/rfc/rfc6154.txt> any time near in the future? I would really love to get rid of all those folders created by all those different mail clients just because they can't agree to use the same folder for special purpose. Obviously clients need to support it too. Having Dovecot support it certainly would make them adopt the standard sooner. p@rick -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

10 17

[Dovecot] Allow both SSL/993 and STARTTLS/143 connections (secure only)
by Charles Marcus 03 Jan '14

03 Jan '14

Hi all, Ok, up until now, I've only always allowed IMAPS connections to dovecot on port 993. I want to also start allowing clients to user port143+STARTTLS, but I walso want to make sure both ports are locked down to ONLY allow secure connections. So... is disable_plaintext_auth = yes in the main config enough to accomplish this? http://wiki2.dovecot.org/SSL/DovecotConfiguration says: There are a couple of different ways to specify when SSL/TLS is required: * disable_plaintext_auth=yes allows plaintext authentication <http://wiki2.dovecot.org/Authentication/Mechanisms> only when SSL/TLS is used first. * ssl = required requires SSL/TLS also for non-plaintext authentication <http://wiki2.dovecot.org/Authentication/Mechanisms>. * If you have only plaintext mechanisms enabled (auth { mechanisms = plain login } ), you can use either (or both) of the above settings. They behave exactly the same way then and the comments in 10-auth.conf say: # Disable LOGIN command and all other plaintext authentications unless # SSL/TLS is used (LOGINDISABLED capability). Note that if the remote IP # matches the local IP (ie. you're connecting from the same computer), the # connection is considered secure and plaintext authentication is allowed. # See also ssl=required setting. #disable_plaintext_auth = yes These seem to be saying that all I need to do is set either or both (ssl-required and/or disable_plaintext_auth=yes). I'm looking for the simplest, and don't like redundant/unnecessary settings, so... which is the best/preferred way? And what is the difference between ssl=required and disable_plaintext_auth=yes? Thanks, -- Best regards, */Charles/***

2 3

[Dovecot] How to remove Dovecot (LMTP) information from Email header
by Anant 02 Jan '14

02 Jan '14

Hello All, I want to remove Dovecot (LMTP) information from Email Header, Please help me. I am using Dovecot 2.0.9 with Exim. Received: from XX.XXblue.co.uk by XX.XXblue.co.uk*(Dovecot) with LMTP id* XIuTJkJFxVLKTwAAG2fxGQ for <anant.saraswat(a)techblue.co.uk>; Thu, 02 Jan 2014 10:59:28 +0000 Received: from [210.7.64.2] (helo=[192.168.100.71]) by solo.techblue.co.uk with esmtp (Exim 4.72) (envelope-from <sysadmin(a)techblue.co.uk>) id 1Vyfzr-0005Oy-7H for anant.saraswat(a)techblue.co.uk; Thu, 02 Jan 2014 10:59:28 +0000 Thanks & Regards, Anant Saraswat

2 2

[Dovecot] Problem building dovecot 2.2.10 with pigeonhole 0.4.2
by Nikolaos Milas 02 Jan '14

02 Jan '14

Hi, I am on CentOS 5.10 x86_64 and I am trying to build RPMs for Dovecot 2.2.10 with pigeonhole 0.4.2. I am getting an error that autogen.sh is missing from pigeonhole 0.4.2 source (as available from: http://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.2.tar…) /var/tmp/rpm-tmp.89185: line 92: /home/mockbuild/rpmbuild/BUILD/dovecot-2.2.10/dovecot-2.2-pigeonhole-0.4.2/autogen.sh: No such file or directory Indeed, the file is missing, as: tar --list -f dovecot-2.2-pigeonhole-0.4.2.tar.gz | grep autogen ...produces no output. However, I managed to use the latest source code: http://hg.rename-it.nl/dovecot-2.2-pigeonhole/shortlog/32beba3bfd8d which does contain an autogen.sh, and this package worked fine. I guess the released source tar pack should be updated? Thanks and regards, Nick

2 1

[Dovecot] Dovecot doesn't seem to read userdb for the first delivery
by phuhimself＠phunehehe.net 02 Jan '14

02 Jan '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello List, First of all, this is my first post so please bear with me if I miss something. I'm using Postfix with Dovecot 2.0.19 as the LDA. The home directory is of the form `/var/mail/virtual/<domain>/<username>`. The mail directory is under the home directory and named `mail`. `mail_location` is left empty, and userdb is specified using SQL: user_query = SELECT uid AS uid, \ gid AS gid, \ homedir AS home, \ maildir AS mail \ FROM users WHERE email = '%u' Everything had been fine, until I added a new user. In the log, Dovecot complains that it doesn't have permission to create the mail directory (email address replaced): > Jan 2 05:46:19 mail1 dovecot: lda(test(a)test.com): Error: user > test(a)test.com: > Initialization failed: Initializing mail storage from mail_location > setting > failed: mkdir(mail) in directory /var/spool/postfix failed: Permission > denied > (euid=5000(virtual) egid=5000(virtual) missing +w perm: > /var/spool/postfix, > dir owned by 0:0 mode=0755) Sometimes it complains about /run/dovecot instead of /var/spool/postfix, but I think that doesn't really matter. I think not specifying `mail_location` confused Dovecot, as explained in [MailLocation][1]. When I put in the right value for `mail_location` the error went away. What I don't understand is, it is said in the [same document][1] that the userdb field `mail` will override `mail_location` anyway. I would think that I can skip `mail_location` if I specify userdb `mail` for all users. Is the document wrong? Thanks, Phu [1]: http://wiki2.dovecot.org/MailLocation -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v.1.20131017 Comment: http://openpgpjs.org wsFcBAEBCAAQBQJSxRknCRD8UQvv5Zm+EAAAj68P/iidn6jYSNlhLY2640Qg vPC9xg0lhH/LJLEMMK+oSDnOmF+Hjtm/IMctOVDiTnPfdbvoC9oE4RWnKlL0 /couQQHQKjh2L2mqN50buROjUQyR+pQXGNfVGS+jq74S30299/VnH+gWPUSV xYRb1i6wuKVGCCNRF3vJHZs1eCiEFKpvC4LUiI5yarclCUE4mCtRO97Iadu/ GTaXn3euy5/5dyZEiPvld5IcGJ0BMC5RJiHb89EpN7A5J+4MvlMNUdcPYgcF j+ilwsOCpchj1AfjLnosnpCJRysin8aYj9mxGC+gR2/fAIm242qBNrVpnLQM IjP8G1pKhxKzQx2jFnENvhTKaxDSIWva0u/CSxSiCE3Kepj1b39qsjFlM8k7 0/EzoWf1rxzy0kQQ1qNeoz1Ta93D2cWQkTj6AK6kVmtmt9iaqzjGU+n7w3ae n+hoYs19r8LnhqSrlAX/N10h7/B++SRJG81EUB4tJF+LtRknFJa1qyr7Guh/ mOieUupr9Ks5WlPYaZ77t61FZauI0bK716p+J5C/f75EdWMrUInVumGletk/ FIaILS6nhq+D6SvrqiVseKvhjc+6p4HoeNVotceus+yssNmkniey5j3Hs0H5 EPmmkAT+hNN5R0wcbj2LaErG3VQ6SGMdY/suIJQb1Aq08nymtVaA2mS8Tcnm Z+O+ =pqon -----END PGP SIGNATURE-----

1 0

[Dovecot] Wrong file accessed after file was renamed because of wrong size
by Rolf Eike Beer 01 Jan '14

01 Jan '14

I'm migrating from Courier-IMAP. On first access of folders I get this log (slightly anonymized): Jan 1 18:38:27 mail dovecot: imap(username): Error: Cached message size smaller than expected (1452 < 1668) Jan 1 18:38:27 mail dovecot: imap(username): Error: Maildir filename has wrong S value, renamed the file from /var/vpopmail/domains/domain/username/.maildir/cur/1206559119.14350.mail,S=1452:2,RS to /var/vpopmail/domains/domain/username/.maildir/cur/1206559119.14350.mail,S=1668:2,RS Jan 1 18:38:27 mail dovecot: imap(username): Error: Corrupted index cache file /var/vpopmail/domains/domain/username/.maildir/dovecot.index.cache: Broken physical size for mail UID 161 Jan 1 18:38:27 mail dovecot: imap(username): Error: read(/var/vpopmail/domains/domain/username/.maildir/cur/1206559119.14350.mail,S=1452:2,RS) failed: Invalid argument Jan 1 18:38:27 mail dovecot: imap(username): Disconnected: Internal error occurred. Refer to server log for more information. [2014-01-01 18:38:27] in=135 out=63515 This is the same in 2.2.6 and 2.2.10. Greetings, Eike

1 0

[Dovecot] How to add dovecot plugin?
by Timothy Murphy 31 Dec '13

31 Dec '13

I'm running dovecot version 2.0.9 under CentOS-6.5 . I want to add the following plugin: ==================== require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spam"; } ==================== Could some kind soul tell me where exactly I should place this script (eg "anywhere in /etc/dovecot/dovecot.conf" or "anywhere in /etc/dovecot/conf.d/90-plugin.conf"), and do I need to take any other action? Actually, the folder I should like spam to go to is ~/Maildir/.Spam/cur/ - should I modify the above script? If these queries are anwered clearly in some dovecot documentation, please point me to that. -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

2 1

Re: [Dovecot] pop3 rate limit
by michael 30 Dec '13

30 Dec '13

On 2013-12-29 02:05, Christian Rößner wrote: > Hi, > > we have customers with Exchange servers that are polling for new mail > every minute with dozens of pop3 accounts. I am looking for a > mechanism to rate limit this per user. So what I am looking for is a > way to block users from polling, if a user asks for new mail more > than > every 5 minutes (for example). > > Is this possible? Can this be achieved within Dovecot or does it need > external scripting? (I thought about fail2ban, but also want IPv6 > support) > > Thanks in advance > > -Christian Rößner See: www.policyd.org You'll need to use v2.1 to get IPV6 support. Michael Hallager

6 10

[Dovecot] Warning: fscking index file /.../dovecot.index
by Alex Vitola 30 Dec '13

30 Dec '13

We have often found the below error in VPS servers using OpenVZ, and some cases using OpenStack, in neither case is used for storage or sharing ISCSI or NFS Client can not receive messages via POP3 or IMAP In /var/log/maillog the message below is seen Oct 31 15:28:26 vps dovecot: pop3(user(a)domain.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x2b3718e07400] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b3718e07456] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b3718e06df3] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b3718b6566b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x89) [0x2b3718b5ced9] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b3718aeae4d] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b3718aea357] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b3718aea698] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xbb) [0x2b3718aea83b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x2b3718b15e31] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x2b3718b18537] -> dovecot/pop3(client_create+0x332) [0x405702] -> dovecot/pop3 [0x40414b] -> dovecot/pop3 [0x404708] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b3718dc9a52] -> /usr/lib Both POP3 as IMAP Oct 31 15:24:42 vps dovecot: imap(user(a)domain.com): Warning: fscking index file /home/user/mail/domain.com/user/dovecot.index Oct 31 15:28:26 vps dovecot: pop3(user(a)domain.com): Warning: fscking index file /home/user/mail/domain.com/user/dovecot.index Today I do to solve this the procedure below - Access the directory mailbox - Remove files dovecot.index * - Run the command doveadm index-u $ user @ $ domain-q INBOX The question is for what reason this only occurs with VPS servers, I do not find this error on any single physical server to virtual and dovecot settings are the same. att Alex Vitola

1 0

[Dovecot] dovecot 2.2.10 - imap: Error: Can't load plugin imap_stats_plugin:
by giovanni＠neweden.uk.to 30 Dec '13

30 Dec '13

dovecot 2.2.10 is raising this error on my installation. Dec 30 13:57:59 imap: Error: Can't load plugin imap_stats_plugin: Plugin stats must be loaded also (you must set: mail_plugins=$mail_plugins stats) Dec 30 13:57:59 imap: Fatal: Couldn't load required plugins This error occurs at logging phase. The dovecot configuration looks correct to me, here below an excerpt of it: ... ... mail_plugins=$mail_plugins stats protocol imap { mail_plugins = $mail_plugins imap_stats } plugin { # how often to session statistics stats_refresh = 30 secs # track per-IMAP command statistics stats_track_cmds = yes } ... ... I was already using this configuration but only now I am getting this error. From STRACE I see that the stat plugin is correctly localed . Is anybody else getting this error? or am I missing something? Here below an except of the strace message. [pid 17112] open("/usr/local/lib/dovecot/lib95_imap_stats_plugin.so", O_RDONLY) = 14 [pid 17112] read(14, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\t\0\0004\0\0\0"..., 512) = 512 [pid 17112] fstat64(14, {st_mode=S_IFREG|0755, st_size=53122, ...}) = 0 [pid 17112] mmap2(NULL, 8908, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 14, 0) = 0xf7609000 [pid 17112] mmap2(0xf760b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 14, 0x1) = 0xf760b000 [pid 17112] close(14) = 0 [pid 17112] open("/usr/local/lib/dovecot/lib90_stats_plugin.so", O_RDONLY) = 14 [pid 17112] read(14, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\24\0\0004\0\0\0"..., 512) = 512 [pid 17112] fstat64(14, {st_mode=S_IFREG|0755, st_size=100054, ...}) = 0 [pid 17112] mmap2(NULL, 20320, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 14, 0) = 0xf7604000 [pid 17112] mmap2(0xf7608000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 14, 0x3) = 0xf7608000 [pid 17112] close(14) = 0 [pid 17112] write(2, "\1\01017112 prefix=imap: \n", 22) = 22 [pid 17112] write(2, "\1\00417112 Can't load plugin imap_s"..., 127) = 127 [pid 17112] munmap(0xf7609000, 8908) = 0 [pid 17112] munmap(0xf7604000, 20320) = 0 [pid 17112] write(2, "\1\00517112 Couldn't load required p"..., 39) = 39 [pid 17112] exit_group(89) = ? Process 17112 detached

2 2

[Dovecot] dsync-local crashes due to assertion failures
by Fabian Groffen 30 Dec '13

30 Dec '13

Hi, I have two servers that share nothing, running dovecot version 2.2.9. The first server hosts the original mail base, which I want to sync using dovecot to the second server. With some trial and error I managed to get synchronisation running using tcp sockets. Now for some accounts I see dsync-local crashing on the server that has the original mail base (which is still the only of the two that receives new mail). The log shows: Dec 8 03:13:14 zeus dovecot: dsync-local(someuser): Panic: file mail-index-tr ansaction-export.c: line 203 (log_append_ext_hdr_update): assertion failed: (u32 .offset + u32.size <= ext_hdr_size) Dec 8 03:13:14 zeus dovecot: dsync-local(someuser): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x70ea0) [0x7f3ee4137ea0] -> /usr/lib64/dovecot/libdovecot.so.0(+0x70efe) [0x7f3ee4137efe] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3ee40ebd2c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_export+0xbed) [0x7f3ee442e89d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x89104) [0x7f3ee442d104] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0xb2) [0x7f3ee442d592] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit+0xc) [0x7f3ee442d63c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0xb6) [0x7f3ee44372b6] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x335d6) [0x7f3ee43d75d6] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x328bc) [0x7f3ee43d68bc] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x32d83) [0x7f3ee43d6d83] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xd9) [0x7f3ee43d7199] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x2e) [0x7f3ee43e7f2e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7f3ee43e8047] -> dovecot/doveadm-server(dsync_brain_master_send_mailbox+0xcf) [0x41f17f] -> dovecot/doveadm-server(dsync_brain_run+0x2c8) [0x41d738] -> dovecot/doveadm-server() [0x41dd70] -> dovecot/doveadm-server() [0x42eda0] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f3ee41495a6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xbd) [0x7f3ee414a62d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3ee4149008] -> dovecot/doveadm-server() [0x41bb6c] -> dovecot/doveadm-server() [0x40ee3b] -> dovecot/doveadm-server() [0x419581] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f3ee41495a6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xbd) [0x7f3ee414a62d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3ee4149008] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3ee40f1643] Dec 8 03:13:14 zeus dovecot: dsync-local(someuser): Fatal: master: service(doveadm): child 14116 killed with signal 6 (core dumps disabled) It seems that despite these crashes, some data is being transferred. Newer accounts seem not to have problems, this happens with older accounts only, for as far as I can see. I tried removing the index files, but that didn't seem to help. Any ideas on what I can do here? Both servers are configured to use maildir storage. Thanks, Fabian -- Fabian Groffen Gentoo on a different level

1 1

[Dovecot] pop3 rate limit
by Christian Rößner 30 Dec '13

30 Dec '13

Hi, we have customers with Exchange servers that are polling for new mail every minute with dozens of pop3 accounts. I am looking for a mechanism to rate limit this per user. So what I am looking for is a way to block users from polling, if a user asks for new mail more than every 5 minutes (for example). Is this possible? Can this be achieved within Dovecot or does it need external scripting? (I thought about fail2ban, but also want IPv6 support) Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 1

[Dovecot] Sieve's spamtest always returns 0
by martin f krafft 28 Dec '13

28 Dec '13

I am a bit at a loss here with Sieve (pigeonhole) and the spamtest extension. I am using Dovecot 2.1.7 (backported to Debian squeeze), which comes with Pigeonhole 0.3.0. Messages are scanned with SpamAssassin, which adds a header like X-Spam-Status: Yes, score=84.6 required=5.0 tests=… and so I configured spamtest in conf.d/90-plugin.conf like so: sieve_spamtest_status_type = score sieve_spamtest_status_header = X-Spam-Status: [^,]*, score=(-?[[:digit:]]+\.[[:digit:]]).* sieve_spamtest_max_header = X-Spam-Status: [^,]*, score=[^[:space:]]+ required=(-?[[:digit:]]+\.[[:digit:]]).* I tested those regular expressions with sed -r, e.g. % sed -rne "s@^X-Spam-Status: [^,]*, score=-?[[:digit:]]+\.[[:digit:]] required=(-?[[:digit:]]+\.[[:digit:]]).*@\1@p" mailfile 5.0 and they work. Unfortunately, in sieve scripts, the spamtest value is always 0, which is indicative of the spamtest "not having run", which in this case I assume means that the regular expression didn't match. Am I right in assuming that the matching happens at the time of evaluation, and so adding the headers using vnd.dovecot.filter just before works? Or does the spamtest matching happen before the sieve scripts are executed? Can you see any other reason why spamtest always yields a value of 0? Thanks, -- martin | http://madduck.net/ | http://two.sentenc.es/ "those who are faithful know only the trivial side of love: it is the faithless who know love's tragedies." -- oscar wilde spamtraps: madduck.bogus(a)madduck.net

3 4

[Dovecot] Dovecot 'Submission' service?
by Charles Marcus 27 Dec '13

27 Dec '13

I do recall this being discussed, but I can't remember if it is actually in a working state now or not. According to the wiki, it is a work in progress: http://wiki2.dovecot.org/Roadmap?highlight=%28submission%29 So - is it in a functional state yet? Thanks, -- Best regards, */Charless/***

2 2

[Dovecot] Using DSync to convert from maildir to m/sdbox during migration of mail to new server
by Charles Marcus 27 Dec '13

27 Dec '13

Ok, now to work out the precise method (config for the target server and dsync command) to use to perform the migration from the old server to the new one, converting to dbox (s or m, depending on how the other thread discussing this turns out). I'll update the old server to 2.2.10 tomorrow morning so they're both at the same version. So, assuming both servers are running 2.2.10, with OldServer: mail_location = maildir:~/:INDEX=MEMORY and NewServer: mail_location = sdbox:~/sdbox or mail_location = mdbox:~/mdbox After reading and re-reading: http://wiki2.dovecot.org/Tools/Dsync I'm not so sure... First problem - apparently it can only be used one user at a time? And - do you have to actually know the users password too? If so, then this probably isn't going to be easier, and maybe even harder than just rsyncing everything, then slowly converting each user one at a time. -- Best regards, */Charles/*

1 0

[Dovecot] Migrating from Maildir to dbox+SIS... sdbox or mdbox?
by Charles Marcus 27 Dec '13

27 Dec '13

Ok... Now that I've got the niggling issues resolved, on to bigger and better things. I want to convert everyone from Maildir to dbox and enable SIS (our users use a lot of large attachments), and after some reading/googling, I think it may be better to use dsync instead of rsync for the actual migration after all since it will do this at the same time as the syncing. If I'm not mistaken, once I've figured out the correct syntax for the command, I should be able to do the conversion and migration at the same time. So, that is what I want to do, but I still have to choose between sdbox and mdbox. I tend to feel a little safer with sdbox, just because it seems more stable - and I like the idea that if a file gets corrupted somehow, then it is only that one mail that may potentially be lost, but if mdbox indexes get corrupted, you are guaranteed to lose messages (maybe a lot)... But I also really like the idea of an order of magnitude fewer actual files (would make rsync based backups much faster, etc). Timo - the last comments I was able to find from you were back in 2011... would you mind commenting on the current stated of dbox - especially mdbox, as far as reliability goes? The 'scary warnings' about how important the index files are ... well ... scares me... ;) I know there were definitely some issues with mdbox a few years ago - I found the old thread from 2011, but nothing substantial since, so... So... are there any people here, especially larger installs, using mdbox? sdbox? I'd especially be interested in hearing from anyone who has used both, and picked one over the other, and their reasons for doing so. Thanks, -- Best regards, */Charles/*

1 0

[Dovecot] Enabling SIS (single instance storage)
by Charles Marcus 27 Dec '13

27 Dec '13

Ok, didn't find much on this... The bottom of /etc/dovecot/conf.d/10-mail.conf has the following settings: #mail_attachment_dir = #mail_attachment_min_size = 128k #mail_attachment_fs = sis posix #mail_attachment_hash = %{sha1} all of which are apparently the defaults according to doveconf -d output - so no need to set them explicitly, unless I want to change them, right? So, enable the first one - but - the comments don't say anything about supporting variables. I'm assuming you can, otherwise all attachments for all domains would be in a single directory, which some admins might not like (I wouldn't)... so hopefully I can just set it to this: mail_attachment_dir = /var/vmail/%d/.attachments So how does this work during conversion? Users still on maildir simply don't engage it? But as users are converted to dbox, all attachments are de-duped, and then new mails coming in with attachments (for converted users) are de-duped at delivery? The wiki could do with a bit more on enabling and implementing it, especially what to expect when enabling it for the first time on a production system and what to expect along the way when converting existing users... -- Best regards, */Charles/*

1 0

[Dovecot] mail_location, user 'home', questions
by Charles Marcus 27 Dec '13

27 Dec '13

Hi all, Ok, another question... I always like changes to the default settings whenever possible (KISS principle)... So, according to the dovecot wiki, the default location for a maildir setup is: mail_location = maildir:~/Maildir However, when I first tried to access mail on the new box, something wasn't right, and I ended up having to change this to: mail_location = maildir:~ to get mail to display correctly. The filesystem for a users maildir currently has everything (cur/new/tmp, and the individual folders) inside that users directory, ie: /var/vmail/example.com/user/ Do I need to change this so that everything is under a 'Maildir' subdirectroy inside the users directory, like: /var/vmail/example.com/user/Maildir/ ? Also, I'm aware that it is important that even virtual users have valid 'homes', but I'm confused as to where these are (or are supposed to be) by default. My sql query currently contains: user_query = \ SELECT CONCAT('/var/vmail/', maildir) AS home \ FROM mailbox WHERE username = '%u' iterate_query = SELECT username AS user FROM mailbox So... what exactly is this saying? That the users 'home' is '/var/vmail'? Or does it automatically append %d/%u? I'm specifically wondering if the intention for the defaults is for the users home to be: /var/vmail/example.com/user and the users maildirs to be in: /var/vmail/example.com/user/Maildir Would appreciate some clarification... It wouldn't be hard to mv all of the users maildirs to a Maildir subfolder after the sync, but I want to know for sure that that is what I should/need to do... Thanks, -- Best regards, */Charles/*

1 1

[Dovecot] dovecot-postfix stack imap_client_workarounds
by thufir 27 Dec '13

27 Dec '13

To use dovecot-postfix stack with thunderbird, do I put the configuration into /usr/share/dovecot/protocols.d/impad.protocol? That would seem to be how the stack is configured. "Thunderbird To use with Thunderbird, edit the file /etc/dovecot/dovecot.conf: protocol imap { ... login_greeting_capability = yes imap_client_workarounds = tb-extra-mailbox-sep }" https://help.ubuntu.com/community/Dovecot thufir@dur:~$ thufir@dur:~$ cat /usr/share/dovecot/protocols.d/imapd.protocol protocols = $protocols imap thufir@dur:~$ thufir@dur:~$ dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-44-generic i686 Ubuntu 12.04.3 LTS mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } thufir@dur:~$ thufir@dur:~$ thanks, Thufir

2 1

[Dovecot] Thunderbird message cache out of sync after repetitive rsyncs...
by Charles Marcus 27 Dec '13

27 Dec '13

Ok, hopefully there is a solution to this. I've been experimenting with multiple rsyncs in preparation for pulling the trigger on the mail server switch, but have a problem that I really want to fox before doing so. Apparently something causes Thunderbirds local message cache to get out of sync with dovecot after a sync. Here is the series of commands I'm running: 1. stop postfix, stop dovecot on new server 2. rsync -rltgovDHP --delete --exclude-from 'excludes.txt' /path/to/vmail/example.com/ /var/vmail/example.com/ 3. chown vmail:vmail /var/vmail 4. start dovecot, start postfix ls -al /var/vmail/example.com/user/cur shows all of the messages that should be there, and all perms are correct. Go to my account that is pointed to this mail server/account, and none of the new messages show up. Also, some messages are still showing up that shouldn't. I've tried compacting the folders, closing/relaunching Thunderbird, but nothing helps. The only way to get them to show up is to go to the local Thunderbird cache for the account, and delete the files associated with the folder having the problem. The problem is, ALL folders will have this problem, which means that everyone will need to delete ALL of their local cahced folders. This will be a major support problem. Anyone have any ideas? -- Best regards, */Charles/*

5 16

[Dovecot] Server Migration Attempt - new messages DELETED after secondary rsyncs
by Charles Marcus 27 Dec '13

27 Dec '13

Starting a new thread, as I've got a lot more details now... First, I know this may be (or is even likely) something weird happening with Thunderbird, but the bottom line is, I have to find a resolution or a workaround or something, or I will be unable to pull the trigger on the server migration. It is simply unacceptable to lose ANY mails doing this. Goal: migrate mailstore from old server to new server using rsync Thunderbird (24.2) is set up to access the new account for testing Problem: after rsync, ls shows new messages (11 for the 27th), but when Thunderbird accesses the maildir again after another rsync, MOST (but not all) of the new messages are deleted (only one for the 27th remains) Timo - I'd be happy to do anything necessary to track this down if you'll just tell me what you need... Note: if you are pretty confident that upgrading dovecot on the old server and using dsync to do the migration will solve the problem, obviously I'm willing to do that if there is no other choice, but... I hope you'll want to get to the bottom of this regardless, as, according to you and everything I've read, it should work without losing any emails... Ok, as to details... Source (ol/active server): dovecot 2.1.17, postfix virtual for delivery, vmail owned by postfix:postfix Note: using prefix=INBOX. courier compatibility namespace Target: dovecot 2.2.10, dovecot LDA, vmail owned by vmail:vmail, nothing being actively delivered (yet) Note: NOT using prefix=INBOX. courier compatiblity namespace Both doveconf -n outputs at end of this message *** Could the different namespaces, or differing dovecot versions cause this? Current /snapshot/ being used was taken at about 3:48am this morning rsync command (dovecot is STOPPED before performing, source is the latest snapshot of the active server): rsync -rltgovDHP --delete --delete-excluded --exclude-from '/path/to/excludes.txt' /snapshot/.../vmail/example.com/user/ /.../vmail/example.com/user/ I'm only syncing the one user until I get this problem resolved as it is faster. excludes.txt contains only (just to eliminate these which are still on the source): courierimap* Right after the rsync: ls -al /.../user (changes depending on what is in includes.txt) -rw------- 1 vmail vmail 51 Dec 18 10:13 dovecot-keywords -rw------- 1 vmail vmail 221638 Dec 27 02:42 dovecot-uidlist -rw------- 1 vmail vmail 8 Dec 18 09:56 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Jun 9 2012 dovecot-uidvalidity.4fd32805 ls -al /.../user/cur (copy/pasted newest thru 12/25 - this list is always the same after a sync) -rw------- 1 vmail vmail 24904 Dec 25 15:47 1388004452.Vfe02Ic72976M281736.oldhost.example.com:2, -rw------- 1 vmail vmail 5825360 Dec 25 22:52 1388029948.Vfe02Ic7306fM556006.oldhost.example.com:2, -rw------- 1 vmail vmail 27718 Dec 26 02:19 1388042391.Vfe02Ic33b40M543019.oldhost.example.com:2, -rw------- 1 vmail vmail 28083 Dec 26 07:11 1388059893.Vfe02Ic76388M193423.oldhost.example.com:2,S -rw------- 1 vmail vmail 100651 Dec 26 08:02 1388062961.Vfe02Ic763c2M415005.oldhost.example.com:2, -rw------- 1 vmail vmail 5286 Dec 26 09:41 1388068882.Vfe02Ic7642dM83715.oldhost.example.com:2,S -rw------- 1 vmail vmail 53203 Dec 26 09:55 1388069721.Vfe02Ic7646fM716189.oldhost.example.com:2,S -rw------- 1 vmail vmail 12039 Dec 26 12:48 1388080111.Vfe02Ic76742M972942.oldhost.example.com:2,RS -rw------- 1 vmail vmail 13531 Dec 26 13:14 1388081648.Vfe02Ic7674cM68343.oldhost.example.com:2,S -rw------- 1 vmail vmail 25161 Dec 26 15:47 1388090846.Vfe02Ic768acM489505.oldhost.example.com:2, -rw------- 1 vmail vmail 5037 Dec 26 16:27 1388093257.Vfe02Ic76918M766778.oldhost.example.com:2, -rw------- 1 vmail vmail 3157 Dec 26 17:01 1388095312.Vfe02Ic76997M703744.oldhost.example.com:2, -rw------- 1 vmail vmail 22480 Dec 26 17:50 1388098239.Vfe02Ic769deM225078.oldhost.example.com:2, -rw------- 1 vmail vmail 10043 Dec 26 19:59 1388105984.Vfe02Ic76a25M12505.oldhost.example.com:2, -rw------- 1 vmail vmail 10635 Dec 26 21:11 1388110298.Vfe02Ic76a65M649895.oldhost.example.com:2, -rw------- 1 vmail vmail 8695 Dec 26 21:11 1388110319.Vfe02Ic76a6fM696948.oldhost.example.com:2, -rw------- 1 vmail vmail 11045 Dec 26 21:56 1388112965.Vfe02Ic76a57M185504.oldhost.example.com:2, -rw------- 1 vmail vmail 823 Dec 26 22:40 1388115600.Vfe02Ib61cf5M913598.oldhost.example.com:2,ST -rw------- 1 vmail vmail 815 Dec 26 22:40 1388115627.Vfe02Ib63443M811945.oldhost.example.com:2,ST -rw------- 1 vmail vmail 785 Dec 26 22:40 1388115628.Vfe02Ib659c9M617314.oldhost.example.com:2,ST -rw------- 1 vmail vmail 6156 Dec 27 00:05 1388120705.Vfe02Ib7aa31M58188.oldhost.example.com:2,ST -rw------- 1 vmail vmail 869 Dec 27 00:05 1388120713.Vfe02Ib8506aM185504.oldhost.example.com:2,ST -rw------- 1 vmail vmail 925 Dec 27 00:29 1388122155.Vfe02Ibb2a1fM764275.oldhost.example.com:2,ST -rw------- 1 vmail vmail 823 Dec 27 00:38 1388122687.Vfe02Ic2f69aM168075.oldhost.example.com:2,ST -rw------- 1 vmail vmail 801 Dec 27 00:38 1388122696.Vfe02Ic31befM507147.oldhost.example.com:2,ST -rw------- 1 vmail vmail 801 Dec 27 00:38 1388122709.Vfe02Ic3ac2bM981625.oldhost.example.com:2,ST -rw------- 1 vmail vmail 4576 Dec 27 00:57 1388123820.Vfe02Ic769e8M270744.oldhost.example.com:2,ST -rw------- 1 vmail vmail 8379 Dec 27 01:33 1388126003.Vfe02Ib7fd87M510118.oldhost.example.com:2,ST -rw------- 1 vmail vmail 27647 Dec 27 02:20 1388128838.Vfe02Ic7610fM483481.oldhost.example.com:2, -rw------- 1 vmail vmail 6373 Dec 27 02:42 1388130144.Vfe02Ic76a99M631316.oldhost.example.com:2,ST -rw------- 1 vmail vmail 3906 Dec 27 03:01 1388131281.Vfe02Ic76a9cM599830.oldhost.example.com:2,ST Start dovecot, select INBOX in Thunderbird for this account, it only displays these (I got this ls output from AFTER the messages in the cur directory are deleted per below - before doing any of the 3 aqctions below, ALL of the messages show in the ls output): ls -al /.../user/cur -rw------- 1 vmail vmail 24904 Dec 25 15:47 1388004452.Vfe02Ic72976M281736.oldhost.example.com:2, -rw------- 1 vmail vmail 5825360 Dec 25 22:52 1388029948.Vfe02Ic7306fM556006.oldhost.example.com:2, -rw------- 1 vmail vmail 27718 Dec 26 02:19 1388042391.Vfe02Ic33b40M543019.oldhost.example.com:2, -rw------- 1 vmail vmail 28083 Dec 26 07:11 1388059893.Vfe02Ic76388M193423.oldhost.example.com:2,S -rw------- 1 vmail vmail 100651 Dec 26 08:02 1388062961.Vfe02Ic763c2M415005.oldhost.example.com:2, -rw------- 1 vmail vmail 5286 Dec 26 09:41 1388068882.Vfe02Ic7642dM83715.oldhost.example.com:2,S -rw------- 1 vmail vmail 53203 Dec 26 09:55 1388069721.Vfe02Ic7646fM716189.oldhost.example.com:2,S -rw------- 1 vmail vmail 12039 Dec 26 12:48 1388080111.Vfe02Ic76742M972942.oldhost.example.com:2,RS -rw------- 1 vmail vmail 13531 Dec 26 13:14 1388081648.Vfe02Ic7674cM68343.oldhost.example.com:2,S -rw------- 1 vmail vmail 25161 Dec 26 15:47 1388090846.Vfe02Ic768acM489505.oldhost.example.com:2, -rw------- 1 vmail vmail 5037 Dec 26 16:27 1388093257.Vfe02Ic76918M766778.oldhost.example.com:2, -rw------- 1 vmail vmail 3157 Dec 26 17:01 1388095312.Vfe02Ic76997M703744.oldhost.example.com:2, -rw------- 1 vmail vmail 22480 Dec 26 17:50 1388098239.Vfe02Ic769deM225078.oldhost.example.com:2, -rw------- 1 vmail vmail 10043 Dec 26 19:59 1388105984.Vfe02Ic76a25M12505.oldhost.example.com:2, -rw------- 1 vmail vmail 10635 Dec 26 21:11 1388110298.Vfe02Ic76a65M649895.oldhost.example.com:2, -rw------- 1 vmail vmail 8695 Dec 26 21:11 1388110319.Vfe02Ic76a6fM696948.oldhost.example.com:2, -rw------- 1 vmail vmail 11045 Dec 26 21:56 1388112965.Vfe02Ic76a57M185504.oldhost.example.com:2, -rw------- 1 vmail vmail 27647 Dec 27 02:20 1388128838.Vfe02Ic7610fM483481.oldhost.example.com:2, This is weird, because it does show ONE new message from the 27th. And again, ls -al on the cur dir at this point still shows ALL of the messages (11 for the 27th, and 18 for the 26th) shown in the FIRST ls output, ABOVE this second listing (which is shown only to show you what Thunderbird is seeing, and what shows in the ls output AFTER doing any of the 3 actions below). Now... Doing ANY of the following results in MOST (BUT NOT ALL) OF THE NEW MESSAGES BEING DELETED ON THE SERVER - ie, ls -al output changes to the match what is immediately above (what was showing in Thunderbird right after selecting the Inbox right after the rsync). 1. Right-click on the Inbox > Properties > Repair Folder (in Thunderbird) 2. Right-click on INBOX > Compact (in Thunderbird) 3. Manually deleting the .msf file for the INBOX Obviously, I must find a resolution for this before I can pull the trigger on this migration. ************************************************************************ old server dovecon -n: oldhost : Fri Dec 27, 05:59:12 : ~ # doveconf -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10.7-gentoo-r1 x86_64 Gentoo Base System release 2.2 auth_default_realm = example.com auth_mechanisms = plain login first_valid_uid = 207 last_valid_uid = 207 listen = * login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport} mpid=%e %c session=<%{session}> mail_gid = 207 mail_location = maildir:~/:INDEX=MEMORY mail_uid = 207 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } } service imap-login { service_count = 0 } service imap { process_limit = 2048 } ssl = required ssl_cert = </etc/ssl/myCerts/imap.pem ssl_key = </etc/ssl/myCerts/imap_key.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol smtp { auth_verbose = yes } protocol lda { mail_plugins = sieve } protocol imap { mail_max_userip_connections = 20 } oldhost : Fri Dec 27, 08:22:04 : ~ ********************************************************** new server dovecot -n: host : Fri Dec 27, 08:13:34 : ~ # doveconf -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.17-gentoo x86_64 Gentoo Base System release 2.2 auth_default_realm = example.com auth_mechanisms = plain login first_valid_uid = 200 last_valid_uid = 200 listen = * login_log_format_elements = user=<%u> method=%m %c rip=%r lport=%{lport} mail_gid = vmail mail_location = maildir:~ mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { service_count = 0 } service imap { process_limit = 2048 } ssl = required ssl_cert = </etc/ssl/myCerts/imap.pem ssl_key = </etc/ssl/myCerts/imap_key.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol smtp { auth_verbose = yes } protocol lda { auth_verbose = yes mail_plugins = sieve } protocol imap { mail_max_userip_connections = 20 } host : Fri Dec 27, 08:19:59 : ~ -- Best regards, */Charles/*

3 4

[Dovecot] v2.2.10 released
by Timo Sirainen 27 Dec '13

27 Dec '13

http://dovecot.org/releases/2.2/dovecot-2.2.10.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.10.tar.gz.sig I've been really busy the last few months, as I guess people in Dovecot mailing list have seen since I haven't been very responsive. There are at least some dsync bugs I haven't had time to look into yet. The busyness probably continues for a while more, but the next year is looking much better for me and for Dovecot in general. We're planning to hire a few more Dovecot coders at some point, so if you're interested send me an email. :) + auth: passdb/userdb dict rewrite to support much more complex setups. See doc/example-config/dovecot-dict-auth.conf.ext. The old settings will continue to work. + auth: Added userdb result_success/failure/tempfail and skip settings, similar to passdb's. See http://wiki2.dovecot.org/UserDatabase + imap: Implemented SETQUOTA command for admin user when quota_set is configured. See http://master.wiki2.dovecot.org/Quota/Configuration + quota: Support "*" and "?" wildcards in mailbox names in quota_rules + mysql: Added ssl_verify_server_cert=no|yes parameter. This currently defaults to "no" to make sure nothing breaks, but likely will become "yes" in Dovecot v2.3. + ldap: Added blocking=yes setting to use auth worker processes for ldap lookups. This is a workaround for now to be able to use multiple simultaneous LDAP connections. + pop3c+dsync performance improvements - quota-status: quota_grace was ignored - ldap: Fixed memory leak with auth_bind=yes and without auth_bind_userdn. - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when CONDSTORE/QRESYNC has never before been enabled for the mailbox. - imap: Fixes to handling mailboxes without permanent modseqs. (When [NOMODSEQ] is returned by SELECT, mainly with in-memory indexes.) - imap: Various fixes to METADATA support. - stats plugin: Processes that only temporarily dropped privileges (e.g. indexer-worker) may have been logging errors about not being able to open /proc/self/io.

3 2

[Dovecot] Question about mailformat migration
by Davide 27 Dec '13

27 Dec '13

Hi to all, my question is if it's possible to retrive only mail location and mailformat with user_query and for authentication to use vpopmail plugins for dovecot version 2.2.5 i want to put a column in my mysql tables that inherit to user (vpopmail db) like "maildir format" -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

1 0

[Dovecot] obox_fs and Dropbox, someone uses it?
by Alessio Cecchi 27 Dec '13

27 Dec '13

I purchased the license for the Dovecot Object Storage for Dropbox to test this functionality on a personal domain. Unfortunately I can not make it work, I create the token for my Dropbox account from here https://dropbox.dovecot.fi/ and setup in dovecot configuration. When I try to login with an user I found these errors in log file: ============ Dec 27 10:52:16 mail dovecot: imap-login: Login: user=<dovecot1(a)test.it>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=8844, secured, session=<xxCXDIHuTQB/AAAB> Dec 27 10:52:16 mail dovecot: metacache-worker(8839): Error: fs-dropbox: GET 1/metadata/sandbox/dovecot1(a)test.it/idx/?file_limit=25000 failed: 401 Unauthorized Dec 27 10:52:16 archiviomail dovecot: metacache-worker(8839): Error: Failed to iterate dovecot1(a)test.it/idx/: GET 1/metadata/sandbox/dovecot1(a)test.it/idx/?file_limit=25000 failed: 401 Unauthorized Dec 27 10:52:16 mail dovecot: imap(dovecot1(a)test.it): Error: user dovecot1(a)test.it: Initialization failed: Namespace '': obox: USER-REF: /var/run/dovecot/metacache returned failure Dec 27 10:52:16 mail dovecot: imap(dovecot1(a)test.it): Error: Invalid user settings. Refer to server log for more information. Dec 27 10:52:16 mail dovecot: imap-login: Login: user=<dovecot1(a)test.it>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=8846, secured, session=<NTSaDIHuTgB/AAAB> ============= I do not think it's a problem of my configuration, if instead of Dropbox use AWS S3 works fine, seems to be a token problem (401 Unauthorized). The plugin configuration is this: ### Dropbox plugin { obox_fs = fscache 10G:/var/lib/dovecot/cache:dropbox:https://XXXX:YYYY@dropbox/ } Anyone successfully used this setup?

1 0

[Dovecot] German Umlauts in folder name and sieve
by Christian Rößner 27 Dec '13

27 Dec '13

Hi, I had created an imap folder that has German Umlauts in it: „RA Rößner - Merle“ When finished, the result looks like this on filesystem: drwx------ 3 vmail vmail 4096 Dec 27 11:02 RA Ro&AwgA3w-ner - Merle/ I wrote this sieve script (with SOGo): if anyof (address :regex "from" "@.*\\.ra-roessner-merle\\.de") { fileinto "RA Ro&AwgA3w-ner - Merle"; stop; } That creates a new IMAP folder with exactly this strange name. Can I change this somehow? # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.11.2-hardened x86_64 Gentoo Base System release 2.2 auth_master_user_separator = * auth_mechanisms = plain login cram-md5 digest-md5 ntlm auth_verbose = yes default_vsz_limit = 512 M hostname = mail.roessner-net.de imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_access_groups = vmail mail_attachment_dir = /var/mail/virtual/copymail/attachments mail_gid = vmail mail_location = mdbox:~/mdbox mail_plugins = quota acl fts fts_lucene zlib mail_log notify mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 128 M namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk-E-Mail { auto = subscribe special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox junkmail { special_use = \Junk } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/virtual/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. quota = dict:User quota::file:%h/mdbox/dovecot-quota quota_grace = 10%% quota_rule = *:storage=300M:messages=20000 quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/lmtp-dovecot { group = postfix mode = 0666 user = postfix } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/ssl/certs/mail.roessner-net.de.pem ssl_key = </etc/ssl/private/mail.roessner-net.de.key.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = quota acl fts fts_lucene zlib mail_log notify sieve } protocol lda { mail_plugins = quota acl fts fts_lucene zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl fts fts_lucene zlib mail_log notify imap_quota imap_acl imap_zlib } Thanks in advance -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 2

[Dovecot] Question re: indexes
by Charles Marcus 26 Dec '13

26 Dec '13

Hi all, On the old/current dovecot server, I have disabled on disk indexes: mail_location = maildir:~/:INDEX=MEMORY On the new server, I removed the 'INDEX=MEMORY' part, and I now see some new index related files, but what I don't see is the main dovecot.index file... I only have: dovecot.index.cache and dovecot.index.log So... where is the main dovecot.index file? -- Best regards, */Charles/*

1 1

[Dovecot] SHA512-CRYPT scheme fails password verification
by Jouko Nikula 25 Dec '13

25 Dec '13

Hello, If I try to use the crypt schemes provided by libc. I fail as follows: jnikula@jlaptop:~/$ doveadm pw -s SHA512-CRYPT -p 123456 {SHA512-CRYPT}$6$to2umWLDtqvzS8SV$ZGpBeGNKuUN/2HKG6I2BEAt.Gzrz/y.SZDkos2GT2ik8obnp3XCFWfVsKVriJa6jjHULmLIqCSSyaF5YrTH7u. jnikula@jlaptop:~/$ doveadm pw -t {SHA512-CRYPT}$6$to2umWLDtqvzS8SV$ZGpBeGNKuUN/2HKG6I2BEAt.Gzrz/y.SZDkos2GT2ik8obnp3XCFWfVsKVriJa6jjHULmLIqCSSyaF5YrTH7u. -p 123456 doveadm(jnikula): Fatal: reverse password verification check failed: Password mismatch Using SHA512 sum scheme (-s SHA512) works ok in the same manner. I have dovecot version 2.2.9 on Linux 3.11.0-14-generic x86_64 Ubuntu 13.10 and I get the same results on 32-bit Debian as well. Does anyone have idea what's wrong? Thanks in advance, Jouko Nikula

2 2

[Dovecot] Patch for Dovecot's quota policy daemon
by Peer Heinlein 24 Dec '13

24 Dec '13

Hi Timo, we wrote a simple Patch for the Dovecot quota policy daemon. If a user is over quota, I prefer blocking the user sending e-mails, so I need a policy daemon, that's able to use the envelope or sasl sender as lookup key. I'd be happy if that patch can become part of the normale Dovecot releases. Peer -------- Original-Nachricht -------- Betreff: Re: Fwd: Quota-Patch Datum: Wed, 11 Dec 2013 17:33:45 +0100 Von: Stephan Seitz <s.seitz(a)heinlein-support.de> Organisation: Heinlein Support GmbH An: Peer Heinlein <p.heinlein(a)heinlein-support.de> Parameter r Code ENUM QUOTA_MATCH_RECIPIENT Stringmatch recipient= ${recipient} This macro expands to the complete recipient address. A command-line argument that contains ${recipient} expands to as many command-line arguments as there are recipients. This information is modified by the hqu flags for quoting and case folding. Parameter S Code ENUM QUOTA_MATCH_SASLSENDER Stringmatch sasl_sender= ${sasl_sender} This macro expands to the SASL sender name (i.e. the original submitter as per RFC 4954) in the MAIL FROM command when the Postfix SMTP server received the message. This feature is available as of Postfix 2.2. Parameter U Code ENUM QUOTA_MATCH_SASLUSER Stringmatch sasl_username= ${sasl_username} This macro expands to the SASL user name in the AUTH command when the Postfix SMTP server received the message. This feature is available as of Postfix 2.2. Parameter s Code ENUM QUOTA_MATCH_SENDER Stringmatch sender= ${sender} This macro expands to the envelope sender address. By default, the null sender address expands to MAILER-DAEMON; this can be changed with the null_sender attribute, as described above. This information is modified by the q flag for quoting. -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 0

[Dovecot] Eliminate legacy INBOX namespace - how?
by Charles Marcus 24 Dec '13

24 Dec '13

Hi all, Our mailstore was converted from a Courier-IMAP system last year, but I am planning a migration to a shiny new VM, and would really like to clean things up and do away with the legacy INBOX namespace. My goal is to simplify IMAP client setup - no special 'INBOX' namespace needed, they just enter the server info and credentials. Also important because I will be rolling out SOGo, which has a nice web interface, and I want the mailstore to be as close to default dovecot settings as possible - although I do plan on converting from maildir to mdbox when I do the conversion I also don't want other folders to show up as subfolders of the Inbox in IMAP clients, they should all show up on the same level as the Inbox. I've read http://wiki2.dovecot.org/Migration/Courier, but I don't see anything about how to eliminate this stupid legacy INBOX. namespace, so that new IMAP clients won't show all folders as subfolders of the INBOX unless/until they add the INBOX namespace prefix in the advanced settings. I've also been reading http://wiki2.dovecot.org/Namespaces, but I'm still confused as to how to go about this. Currently I have: namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } The wiki recommends avoiding the 'alternative' of having two different namespaces, so I don't want to do that. Also - it would be ok if existing clients had temporary issues displaying folders properly until the INBOX prefix was removed (I would give everyone plenty of advance warning). Anyone ever done this before? Any suggestions Timo? Note: I am planning a migration to a new mail server (VM), so could make any filesystem layout changes when I do this if necessary. Thanks, -- Best regards, */Charles/*

5 6

[Dovecot] Sieve Addon in thunderbird is not showing Vacation in action list
by Anant 23 Dec '13

23 Dec '13

Hello guys, I am using "dovecot-2.2-pigeonhole-0.4.2" ( Sieve <http://www.sieve.info/> Support for Dovecot <http://www.dovecot.org/> ) , Now I can set Vacation mail using Roundcube and it is working fine. now i want to set Vacation/outofoffice mail from thunderbird 24.0 , I have installed pluginsieve-0.2.3d.xpi <https://github.com/thsmi/sieve/blob/master/nightly/0.2.3/sieve-0.2.3d.xpi?r…> for thunderbird from "https://github.com/thsmi/sieve/tree/master/nightly" But I am not able to set vacation as it is not giving me an option with reply option. *Even if i will create a vacation mail in Roundcube , my thunderbird plugin was unable to understand that filter. getting an error / //Error while parsing script.// // } expected but found: vacation :subject "not available" "not here"; } .../ and my source code for sieve filter is look like ///require ["vacation"];// //# rule:[vacation]// //if true// //{// // vacation :subject "not available" "not here";// //}/ *I am only able to Enable one filter at a time in thunderbird. And I am not sure it is the right place to post that stuff.. So please guide me as well if I am wrong. Regards, Anant Saraswat

1 0

[Dovecot] Is the users password available from a mail_filter?
by martijn.list 23 Dec '13

23 Dec '13

Hi, I'm working on a Dovecot encryption module which uses the mail filter plugin to encrypt/decrypt the message "on the fly". I was wondering whether it is possible to access the password (or a hashed password) of the user. It seems that only the user (using the %u parameter) is available to the mail_filter plugin. Any idea how to get hold of the (possibly hashed) password? Kind regards, Martijn Brinkers

1 0

[Dovecot] search gives variable/different results
by W. de Hoog 23 Dec '13

23 Dec '13

Hi, When I perform a search using doveadm every time it returns different results. For example: $ doveadm search mailbox shared/\* TO stromvers 938ff10527d6be515f5900007b46f991 6 938ff10527d6be515f5900007b46f991 7 938ff10527d6be515f5900007b46f991 8 $ doveadm search mailbox shared/\* TO stromvers 6a8ff10527d6be515f5900007b46f991 1 6a8ff10527d6be515f5900007b46f991 3 6a8ff10527d6be515f5900007b46f991 4 938ff10527d6be515f5900007b46f991 1 938ff10527d6be515f5900007b46f991 2 938ff10527d6be515f5900007b46f991 3 938ff10527d6be515f5900007b46f991 6 938ff10527d6be515f5900007b46f991 7 938ff10527d6be515f5900007b46f991 8 $ doveadm search mailbox shared/\* TO stromvers 938ff10527d6be515f5900007b46f991 6 938ff10527d6be515f5900007b46f991 7 938ff10527d6be515f5900007b46f991 8 $ doveadm search mailbox shared/\* TO stromvers 938ff10527d6be515f5900007b46f991 7 938ff10527d6be515f5900007b46f991 8 $ doveadm search mailbox shared/\* TO stromvers 6a8ff10527d6be515f5900007b46f991 1 6a8ff10527d6be515f5900007b46f991 3 6a8ff10527d6be515f5900007b46f991 4 $ dovecot -n # 2.2.9 (5c170e0786f3): /etc/dovecot/dovecot.conf # OS: Linux 3.12.0-031200-generic x86_64 Ubuntu 13.10 auth_verbose = yes disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_debug = yes mail_plugins = fts fts_squat mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / } namespace { list = yes location = sdbox:/home/imapshared-sdbox prefix = shared/ separator = / subscriptions = no type = public } namespace inbox { location = sdbox:~/sdboxmail mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } plugin { fts = squat fts_autoindex = yes fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_ssl = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags } -- Willem-Jan de Hoog

1 2

[Dovecot] [help]how to config the dovecot authentication by the other servers
by wuwei 23 Dec '13

23 Dec '13

hi i am the postfix+dovecot.for example,there are three servers: server 1 for postfix server 2 for dovecot server 3 for auth server how could i let the dovecot(2.29) authenticated by the other servers? i config the postfix auth-type to dovecot.how could i config the dovecot authenticated by the server 3 with tcp/ip socket?or is there are any samples?i have found in http://wiki2.dovecot.org/. *at first i try to use memcached ,these are the configure:* *./dovecot-dict-auth.conf.ext* uri = memcached:host=172.24.140.252:port=12000 password_key = dovecot/passdb/%u user_key = dovecot/userdb/%u value_format = json iterate_disable = yes default_pass_scheme = plain * ./10-auth.conf* auth_mechanisms = plain login !include auth-dict.conf.ext *./auth-dict.conf.ext* passdb { driver = dict args = /usr/local/dovecot/etc/dovecot/dovecot-dict-auth.conf.ext } userdb { driver = prefetch #args = /etc/dovecot/dovecot-dict-auth.conf.ext } *in memcached i put some data in：* set dovecot/passdb/test(a)test.com 0 0 103 {'uid':'123','gid':'123','home':'/home/username','username':'test(a)test.com','password':'test(a)test.com'} STORED set dovecot/passdb/test 0 0 103 {'uid':'123','gid':'123','home':'/home/username','username':'test(a)test.com','password':'test(a)test.com'} STORED set test 0 0 103 {'uid':'123','gid':'123','home':'/home/username','username':'test(a)test.com','password':'test(a)test.com'} STORED set test(a)test.com 0 0 103 {'uid':'123','gid':'123','home':'/home/username','username':'test(a)test.com','password':'test(a)test.com'} STORED i reload dovecot and postfix.postfix connect to dovect is ok!i open the debug log .the memcached tell that it has received a connection.and the dovecot also said has connect to the memcached ,but after 30s,the connect to the memcached auto broken by out of time.here some logs: * dovcot logs:* Dec 23 16:45:57 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Dec 23 16:45:57 auth: Debug: Read auth token secret from /usr/local/dovecot/var/run/dovecot/auth-token-secret.dat Dec 23 16:45:57 auth: Debug: auth client connected (pid=0) Dec 23 16:46:08 auth: Debug: client in: AUTH 1 login service=smtp nologin lip=172.24.140.228 rip=192.168.3.29 Dec 23 16:46:08 auth: Debug: client passdb out: CONT 1 VXNlcm5hbWU6 Dec 23 16:46:22 auth: Debug: client in: CONT 1 OTY1ZWI3MmM5MmE1NDlkZA== (previous base64 data may contain sensitive data) Dec 23 16:46:22 auth: Debug: client passdb out: CONT 1 UGFzc3dvcmQ6 Dec 23 16:46:39 auth: Debug: client in: CONT 1 OTY1ZWI3MmM5MmE1NDlkZA== (previous base64 data may contain sensitive data) Dec 23 16:46:39 auth-worker(27884): Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Dec 23 16:46:39 auth-worker(27884): Debug: dict(965eb72c92a549dd,192.168.3.29): lookup shared/dovecot/passdb/965eb72c92a549dd Dec 23 16:47:11 auth: Debug: client passdb out: FAIL 1 user=965eb72c92a549dd temp Dec 23 16:47:09 debian228 dovecot: auth-worker(27884): Error: memcached: Lookup timed out in 30.000 secs Dec 23 16:47:09 debian228 dovecot: auth-worker(27884): Error: dict(965eb72c92a549dd,192.168.3.29): Lookup failed i don't know why it happened.and why it look up key with prefix "shared/".until now i found that the key is password "965eb72c92a549dd"(password is the same as username before).what will happened if there two people with the same password.it seams that i should use the userdb! is someone could give me a sample?what could i do if there has two or more memcached servers?so ,i think of that if there has some config to connect to the tcp socket server.and the server implement by java or any other language by the developer itself. thank you for you help! -- View this message in context: http://dovecot.2317879.n4.nabble.com/help-how-to-config-the-dovecot-authent… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] [dovecot-2.2.5] Duplicates in mdbox
by radek 23 Dec '13

23 Dec '13

Hi I have strange situation with one of mailboxes in mdbox format. Some messages are duplicated, not all. I am sure that is not sieve or another mail client issue, because access is via roundcube without sieve plugin. In maillog I have not found any suspicious information about this problem and i can see that from postfix do dovecot-lda was piped only one copy of message. Radek

2 1

[Dovecot] Horde + dovecot metadata support
by Andreas Schulze 23 Dec '13

23 Dec '13

Hello, Horde (http://horde.org) has the ability to store its preferences direct into a users imap mailbox using imap metadata extension. There are two implementations of the imap extension. 1. a dovecot plugin: http://hg.dovecot.org/dovecot-metadata-plugin 2. dovecot itself: http://www.dovecot.org/list/dovecot/2013-November/093243.html I setup Horde and dovecot-2.2.5 to use this extension and it works well using 1.) Now, with dovecot-2.2.9, the plugin fail to compile (unrelated problem on my side). So I tried 2.) But here I get a Horde-Error "Error in IMAP command GETMETADATA: Invalid arguments." I enables mail_debug but saw no helpfull logging. mail_attribute_dict = file:/tmp/%Lu/dovecot-attributes remote horde.testserver.ip/32 { imap_metadata = yes mail_debug = yes } Also I created directory /tmp/$my_login_id (mode 777) but dovecot also created no files. neither it logs anything about it. This is a sample imap session generated by horde: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 AUTHENTICATE PLAIN *** 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA QUOTA] Logged in 2 NAMESPACE * NAMESPACE (("" ".")) NIL NIL 2 OK Namespace completed. 3 LIST () "" (*) * LIST () "." INBOX 3 OK List completed. 4 GETMETADATA "*" (/shared/vendor/kolab/folder-type) 4 BAD Error in IMAP command GETMETADATA: Invalid arguments. 5 LOGOUT * BYE Logging out 5 OK Logout completed. Are there any hints or is the metadata extension just not fully implemented in dovecot? Thanks, Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

3 3

[Dovecot] auth: Error: net_accept() failed: Too many open files
by boyd yang 23 Dec '13

23 Dec '13

Hi All, I got below errors when I do some 2000 users concurrency test against dovecot 2.1.7. Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files Dec 23 10:18:52 auth: Error: net_accept() failed: Too many open files I seems the auth process become the bottleneck as there is only one auth process. service auth-worker { process_limit = 1000 } service imap-login { process_min_avail = 48 service_count = 0 } service imap { process_limit = 10240 process_min_avail = 8 } I find that the auth process does not open too many files with lsof, and my limit is very big(1000000). How to fix this? Thanks!

1 0

[Dovecot] move mailbox to LAYOUT=fs
by Andreas Schulze 23 Dec '13

23 Dec '13

Hello, I think about migrating small servers storage to LAYOUT=fs (http://wiki2.dovecot.org/MailLocation/Maildir#Directory_layout) Is there a smooth way to adjust the existing folders? Andreas

1 0

[Dovecot] TLS SNI with Dovecot
by Michael Neurohr 23 Dec '13

23 Dec '13

Hi! I've been using Dovecot for one single Domain with SSL certificates. Now I would like to use Dovecot with several Domains and proper SSL certificates. I tried to setup TLS SNI but it does not work. What I basically did was just adding local_name imap.samsoft.at { ssl_cert = </etc/ssl/private/mailserver/imap.samsoft.at.crt ssl_key = </etc/ssl/private/mailserver/imap.samsoft.at.key } for the additional domain. When trying to login via IMAP, I see the following lines in the log file: =================================================================== Dec 22 21:01:05 mx0 dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=554: fatal bad certificate [151.236.5.22] Dec 22 21:01:05 mx0 dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [151.236.5.22] Dec 22 21:01:05 mx0 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=151.236.5.22, lip=151.38.7.25, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate: SSL alert number 42, session=<Rg5EzyXutgCX7AaF> =================================================================== The actual Dovecot config is pasted below. How can I solve that and server different certificates on the same IP Address? Thanks, Michael doveconf -n # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab076.8 i686 CentOS release 6.5 (Final) simfs auth_mechanisms = plain login mail_location = maildir:/var/mail/vhosts/%d/%n mail_plugins = notify mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --source=error;--signature=%%s;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items;Deleted Messages sieve = /var/mail/vhosts/sieve-scripts/%d/%n/.dovecot.sieve sieve_before = /var/mail/vhosts/sieve-scripts/before sieve_dir = /var/mail/vhosts/sieve-scripts/%d/%n/sieve sieve_extensions = +imapflags } postmaster_address = postmaster(a)changed.at protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service dict { unix_listener dict { user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/ssl/private/mailserver/ca-bundle.crt ssl_cert = </etc/ssl/private/mailserver/mx0.domain1.at.pem ssl_key = </etc/ssl/private/mailserver/mx0.domain1.at.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = antispam } local_name imap.samsoft.at { ssl_cert = </etc/ssl/private/mailserver/imap.samsoft.at.crt ssl_key = </etc/ssl/private/mailserver/imap.samsoft.at.key }

3 3

[Dovecot] Duplicated (but only for unread) messages after second rsync pass...
by Charles Marcus 22 Dec '13

22 Dec '13

Ok, I know I should probably be using dsync for this, but I'm more familiar with rsync, and didn't think this would be a problem. Here is what I am doing, and what is apparently happening (only done this once, but I'm guessing it will happen each time): rsync -avHP /mnt/vmail/example.com/user1/ /var/vmail/example.com/user1/ chown -R vmail:vmail /var/vmail/example.com Ok, so far so good, everything works fine accessing the mails (I'm using Thunderbird). Now I do another rsync, but this time I did the entire mailstore: rsync -avHP /mnt/vmail/example.com/ /var/vmail/example.com/ chown -R vmail:vmail /var/vmail/example.com Right after I started up dovecot again, I hot a bunch of these in the logs: 2013-12-22T09:52:51-05:00 newhost dovecot: imap(user1(a)example.com): Warning: Maildir /var/vmail/example.com/user1/: Expunged message reappeared, giving a new UID (old uid=45516, file=1387468268.Vfe02Ic1343fM845754.oldhost.sub.example.com:2,ST) 2013-12-22T09:52:51-05:00 newhost dovecot: imap(user1(a)example.com): Warning: Maildir /var/vmail/example.com/user1/: Expunged message reappeared, giving a new UID (old uid=45518, file=1387468645.Vfe02Ic73e0eM530539.oldhost.sub.example.com:2,ST) The problem is, it looks like every single message that was flagged as unread is now duplicated on the new system. Also - not that this is a problem, but all of the old messages have the fqdn of the old server in the individual email file names - oldhost.sub.example.com - while the new ones only have the local hostname (newhost) Did I do something wrong? Or is this going to be an unavoidable problem if I want to use rsync to do the final migration that using dsync would avoid? Thanks, -- Best regards, */Charles /*

3 4

[Dovecot] Dovecot proxying with LDAP - an example?
by Graham Leggett 22 Dec '13

22 Dec '13

Hi all, I have been struggling trying to understand the syntax to configure dovecot as a proxy against an LDAP server. As a single server dovecot works great. Now I want to add the "mailHost" attribute which, if present, should indicate the DNS name of the host that contains the person's mailbox. If the mailHost matches the local hostname, the mailbox should be served locally as it already does now. If the mailHost is not the local hostname, dovecot should proxy the request to the given server using SSL on port 993. The docs at http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy suggest that proxy_always is what I am looking for, but I cannot find any worked examples of how this might work. Has anyone attempted this before? What I have so far is this, but no proxying seems to take place: pass_attrs = mail=user,userPassword=password,\ mailMessageStore=userdb_mail,=proxy_always=y,mailHost=host,=ssl=yes Can anyone confirm? I am using dovecot v2.0.9 as provided out the box by RHEL6. Regards, Graham --

1 0

[Dovecot] 'unknown user' using dovecot LDA
by Charles Marcus 22 Dec '13

22 Dec '13

Ok, one more issue to resolve. The old server was still using the postfix/virtual for delivery, but the new one is using the dovecot LDA. Now, when an email generated locally by a cron job is delivered, this shows in the log: 2013-12-22T10:29:55-05:00 host postfix/pickup[31400]: C67FD90F676B2: uid=0 from=<newsrv+rkhunter(a)example.com> 2013-12-22T10:29:55-05:00 host postfix/cleanup[22349]: C67FD90F676B2: message-id=<20131222152955.C67FD90F676B2(a)smtp2.example.com> 2013-12-22T10:29:55-05:00 host postfix/qmgr[31401]: C67FD90F676B2: from=<newsrv+rkhunter(a)example.com>, size=1555, nrcpt=1 (queue active) 2013-12-22T10:29:55-05:00 host dovecot: auth-worker(22365): passwd(user1(a)example.com): unknown user 2013-12-22T10:29:55-05:00 host dovecot: lda(user1(a)example.com): msgid=<20131222152955.C67FD90F676B2(a)smtp2.example.com>: saved mail to INBOX 2013-12-22T10:29:55-05:00 host postfix/pipe[22361]: C67FD90F676B2: to=<user1+rkhunter-report(a)example.com>, relay=dovecot, delay=0.06, delays=0.02/0/0/0.04, dsn=2.0.0, status=sent (delivered via dovecot service) 2013-12-22T10:29:55-05:00 host postfix/qmgr[31401]: C67FD90F676B2: removed The mail was delivered (as the log also clearly shows), but what is with the 'unknown user'? I'm not sure how I can test my maps with dovecot, but testing with postfix shows: # postmap -q user1(a)example.com mysql:/etc/postfix/maps/mysql/vmm.cf example.com/user1/ Which is correct. And my dovecot-sql-conf.ext contains: driver = mysql connect = "host=localhost dbname=db_name user=dbuser password=password" default_pass_scheme = CRYPT password_query = \ SELECT username AS user, password \ FROM mailbox WHERE username = '%u' user_query = \ SELECT CONCAT('/var/vmail/', maildir) AS home \ FROM mailbox WHERE username = '%u' iterate_query = SELECT username AS user FROM mailbox I confirmed the db info is identical to what postfix is using. Oh - and in order to make sure that all usernames are lowercased, shouldn't I change '%u' above to '%Lu'? Appreciate any suggestions on where to go next... thanks -- Best regards, */Charles/*

3 4

[Dovecot] New server missing auth-worker entries in logs
by Charles Marcus 22 Dec '13

22 Dec '13

Hi all, Ok, I'm making progress on my new server, but there is an entry in the logs on the old/current server that is not showing p on the new one... lines like: dovecot: auth-worker(20284): mysql(localhost): Connected to database my_auth_db I've looked everywhere, compared settings, etc, and can't seem to find why I get this line on the old server and odn't on the new one. Anyone have a clue stick? Thanks

2 2

[Dovecot] File descriptor leak in sieve-extprograms
by Kirill A. Shutemov 21 Dec '13

21 Dec '13

I've tried to use sieve-filter for my inbox (~6000 messages). It failed after some work with this backtrace: sieve-filter(kas): Error: socketpair() failed: Too many open files sieve-filter(kas): Panic: file script-client-local.c: line 155 (script_client_local_disconnect): assertion failed: (pid >= 0) sieve-filter(kas): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x66a71) [0x7f020e717a71] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f020e717ada] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f020e6d32ee] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(+0x4baf) [0x7f020dae0baf] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(+0x58ca) [0x7f020dae18ca] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(script_client_fail+0x2f) [0x7f020dae199f] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(script_client_run+0xc4) [0x7f020dae1fd4] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(+0x6134) [0x7f020dae2134] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x3ac) [0x7f020ecd1adc] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x4a) [0x7f020ece05aa] -> /usr/bin/sieve-filter(main+0x6a9) [0x403b49] -> /usr/lib/libc.so.6(__libc_start_ma in+0xf5) [0x7f020e327bc5] -> /usr/bin/sieve-filter() [0x404111] The reason is file descriptor leak in "script client local". script_client_local_close_output() shutdowns write side of descriptor and sets sclient->fd_out to -1, but never closes the descriptor. I've tried to fix this by the patch below. Tests works fine, but sieve-filter crashed in other way: sieve-filter(kas): Panic: epoll_ctl(del, 13) failed: Bad file descriptor sieve-filter(kas): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x66a71) [0x7f0ed406fa71] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f0ed406fada] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f0ed402b2ee] -> /usr/lib/dovecot/libdovecot.so.0(+0x776f5) [0x7f0ed40806f5] -> /usr/lib/dovecot/libdovecot.so.0(+0x8009a) [0x7f0ed408909a] -> /usr/lib/dovecot/libdovecot.so.0(io_stream_unref+0x25) [0x7f0ed40764c5] -> /usr/lib/dovecot/libdovecot.so.0(o_stream_unref+0x26) [0x7f0ed4088136] -> /usr/lib/dovecot/libdovecot.so.0(+0x80e48) [0x7f0ed4089e48] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x27) [0x7f0ed407fa47] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f0ed40807d7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f0ed407f5e8] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(script_client_run+0x9c) [0x7f0ed343af8c] -> /usr/lib/dovecot/modules/sieve/lib90_sieve_extprograms_plugin.so(+0x6114) [0x 7f0ed343b114] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x3ac) [0x7f0ed4629adc] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x4a) [0x7f0ed46385aa] -> /usr/bin/sieve-filter(main+0x6a9) [0x403b49] -> /usr/lib/libc.so.6(__libc_start_main+0xf5) [0x7f0ed3c7fbc5] -> /usr/bin/sieve-filter() [0x404111] I failed to unfold this in a reasonable time. Any ideas? diff --git a/src/plugins/sieve-extprograms/script-client-local.c b/src/plugins/sieve-extprograms/script-client-local.c index 56d32f707c09..f54ef82132cf 100644 --- a/src/plugins/sieve-extprograms/script-client-local.c +++ b/src/plugins/sieve-extprograms/script-client-local.c @@ -139,7 +139,6 @@ static int script_client_local_close_output(struct script_client *sclient) i_error("shutdown(%s, SHUT_WR) failed: %m", sclient->path); return -1; } - sclient->fd_out = -1; return 1; } diff --git a/src/plugins/sieve-extprograms/script-client.c b/src/plugins/sieve-extprograms/script-client.c index 06a5d5d54ba9..6fefca4c9f26 100644 --- a/src/plugins/sieve-extprograms/script-client.c +++ b/src/plugins/sieve-extprograms/script-client.c @@ -68,7 +68,8 @@ static void script_client_disconnect if (sclient->fd_in != -1 && close(sclient->fd_in) < 0) i_error("close(%s) failed: %m", sclient->path); - if (sclient->fd_out != -1 && sclient->fd_out != sclient->fd_out) + if (sclient->fd_out != -1 && sclient->fd_out != sclient->fd_in + && close(sclient->fd_out) < 0) i_error("close(%s/out) failed: %m", sclient->path); sclient->fd_in = sclient->fd_out = -1; -- Kirill A. Shutemov

3 6

[Dovecot] Errors in log file
by Christian Rößner 21 Dec '13

21 Dec '13

Hi, just wonder about some errors I found with: doveadm log errors: … Dec 16 17:21:55 imap(roessner@****): Error: stat(/srv/mail/virtual/*****/roessner/.dovecot.sieve/tmp) failed: Not a directory … And this is correct, it is a link: .dovecot.sieve -> sieve/default.sieve I do not see, where I have an error in my config ;) root@mx ~ # doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.11.2-hardened x86_64 Gentoo Base System release 2.2 ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes default_vsz_limit = 512 M disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_access_groups = mail mail_attachment_dir = /srv/mail/copymail/attachments mail_gid = mail mail_location = maildir:/srv/mail/virtual/%d/%n mail_plugins = quota acl fts fts_lucene zlib mail_log notify listescape mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk-E-Mail { auto = subscribe special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/sbin/ispcp-decrypt.py driver = checkpassword } plugin { acl = vfile acl_shared_dict = file:/srv/mail/virtual/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. quota = dict:User quota::file:/srv/mail/virtual/%d/%n/dovecot-quota quota_grace = 10%% quota_rule = *:storage=2G:messages=20000 quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)deltaweb.de protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener /var/spool/postfix.relay/private/auth { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } user = vmail } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = ::1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/ssl/certs/mx_deltaweb_de.crt ssl_key = </etc/ssl/private/mx_deltaweb_de.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota acl fts fts_lucene zlib mail_log notify listescape sieve } protocol lda { mail_plugins = quota acl fts fts_lucene zlib mail_log notify listescape sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl fts fts_lucene zlib mail_log notify listescape imap_quota imap_acl imap_zlib } Any ideas? Thanks in advance :) Kind regards -Christian Rößner -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

3 5

[Dovecot] Ignoring mount points for secondary dovecot instance does not seem to work
by Jouko Nikula 21 Dec '13

21 Dec '13

Hello, I tried to ignore all mountpoints in Dovecot. I have two dovecot instances running: root@fileserver# doveadm instance list path name last used running /usr/local/var/run/dovecot dovecot 2013-12-21 08:09:34 yes /var/run/dovecot.smtp smtp-auth 2013-12-21 08:09:34 yes I give commands: root@fileserver# doveadm mount add '/*' ignore root@fileserver# doveadm -i smtp-auth mount add '/*' ignore And then restart dovecot. In the log I can see that the main instance is now ignoring my mountpoints, but the smtp-auth instance is still warning about my mountpoints. Is this a bug or am I missing something? My configurations are as follows: root@fileserver# doveconf -ni smtp-auth # 2.2.9: /usr/local/etc/dovecot/dovecot.conf.smtp # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 auth_mechanisms = plain login base_dir = /var/run/dovecot.smtp/ first_valid_uid = 123 instance_name = smtp-auth log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = mail mail_location = maildir:~/mail mail_uid = vmail passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = dovecot driver = pam } protocols = service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/imapd.pem ssl_key = </etc/ssl/private/imapd.pem userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } root@fileserver# doveconf -n # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 auth_mechanisms = plain login first_valid_uid = 123 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = mail mail_location = maildir:~/mail mail_uid = vmail passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = session=yes dovecot driver = pam } protocols = imap service auth-worker { user = vmail } ssl_cert = </etc/ssl/certs/imapd.pem ssl_key = </etc/ssl/private/imapd.pem userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } regards, - Jouko

1 0

[Dovecot] Thank you!
by Steve Litt 20 Dec '13

20 Dec '13

Hi all, I've been on this list for 18 months but almost completely as a lurker. You know why? Because Dovecot never, ever, ever screws up on me or displays unexpected behavior, so I never have technical questions. Thank you for producing such a rock solid piece of software! SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

1 0

Re: [Dovecot] configure lmtp to deliver to email addresses case insensitively
by Adrian Zaugg 20 Dec '13

20 Dec '13

Hi David > I believe RFC822 email addresses are case-insensitive, and (in some RFC 2821, Page 13, 1st paragraph: "The local-part of a mailbox MUST BE treated as case sensitive. Therefore, SMTP implementations MUST take care to preserve the case of mailbox local-parts. Mailbox domains are not case sensitive. In particular, for some hosts the user "smith" is different from the user "Smith". However, exploiting the case sensitivity of mailbox local-parts impedes interoperability and is discouraged." (http://tools.ietf.org/html/rfc2821#section-2.4) > cases, especially ones where there's just a mail server) it's entirely > possible that people remember their account names with some capital > letters that aren't in user db. (System knows you as > "mrsmithy(a)mail.domain", while the user may remember the account as > "MrSmithy(a)mail.domain" or "MrsMithy(a)mail.domain"...). Also, people with I just want login names to be case sensitive but not email addresses, and in spite of being treated as case insensitive email addresses should retain their case, just like defined and suggested in the RFC. This reduces support calls because it's con-formant and we have a clear policy: Usernames are always lower case, non-email addresses, the same simple and short name for all our services. There is nothing easier than this. We use this since 17 years and it works without confusion. If a user now spots that suddendly any capitalization of usernames is working when logging in to the webmail, how can I explain that this doesn't work with other services like FTP? > smartphones may not notice that the phone "helpfully" uppercased the > first letter of a lowercase user name. Forcing case reduces support > calls, which is always a good thing. That's why email addresses should be allowed containing capitalizations. On smartphone people tend to use MUAs and there the username is saved and not entered each and every time, so for the username this is less true, I think. Back to dovecot: Using LDA as a transport for the dovecot store, it used to work perfectly (with dovecot 1.x). It's just LMTP that spits, because it looks up the local part in the userdb, which is PAM in our case. I won't change PAM to act case insensitive: I'm not in the position to change a common sense in the computing world as it always was. It's enough Microsoft did that and probably just because of that we're having this discussion here... However, it's maybe best to lowercase the local part in the exim lmtp-transport and leave dovecot's LMTP in peace. Best regards, Adrian.

3 8

[Dovecot] Does quota-status respect quota_grace?
by Jiri Bourek 20 Dec '13

20 Dec '13

Hello, I have Dovecot 2.2.9 from Debian repository running on AMD64, ext4 filesystem for mail storage. Each mailbox has its own system user, quotas are enforced by file system. Quota settings in configuration are as follows (from doveconf -n): quota = fs:Domain quota:group:inode_per_mail quota2 = fs:Mailbox quota:user:inode_per_mail quota2_grace = 18%% quota_grace = 18%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO Quota rules are read from PostgreSQL (snippet) user_query = ... '*:bytes=' || domains.quota_size || 'M:messages=' || domains.quota_files as quota_rule, \ '*:bytes=' || mailboxes.quota_size || 'M:messages=' || mailboxes.quota_files as quota2_rule, \ ... As far as I can tell, quota enforcing in dovecot-lda works correctly. User is allowed one message which brings him over quota (provided the message fits into filesystem quota hard limit and quota_grace value), every other message after that is rejected. However policy service quota-status for Postfix seems to ignore the quota_grace value. When a message arrives which would make user go over quota (but which would not make him exceed the grace limit value), Postfix checks the policy service and is told to reject the message. I checked and dovecot itself is fine with the message - if I try to send it with the policy service check disabled, Postfix accepts it and so does dovecot-lda, the message is delivered into mailbox. My question is - is that intended behavior or bug in the quota-status? Appending some lines from debug log - as far as I can see there's not much in it though: dovecot: quota-status: Debug: Added userdb setting: mail=maildir:/home/mailboxes/t/e/test.info/test/:LAYOUT=fs:INDEX=/var/lib/dovecot-data/index/1010:CONTROL=/var/lib/dovecot-data/control/1010 dovecot: quota-status: Debug: Added userdb setting: plugin/quota2_rule=*:bytes=11M:messages=110 dovecot: quota-status: Debug: Added userdb setting: plugin/quota_rule=*:bytes=15M:messages=150 dovecot: quota-status(test(a)test.info): Debug: Effective uid=1010, gid=1007, home=/home/mailboxes/t/e/test.info/test/ dovecot: quota-status(test(a)test.info): Debug: Quota root: name=Domain quota backend=fs args=group:inode_per_mail dovecot: quota-status(test(a)test.info): Debug: Quota rule: root=Domain quota mailbox=* bytes=15728640 messages=150 dovecot: quota-status(test(a)test.info): Debug: Quota grace: root=Domain quota bytes=2831155 (18%) dovecot: quota-status(test(a)test.info): Debug: Quota root: name=Mailbox quota backend=fs args=user:inode_per_mail dovecot: quota-status(test(a)test.info): Debug: Quota rule: root=Mailbox quota mailbox=* bytes=11534336 messages=110 dovecot: quota-status(test(a)test.info): Debug: Quota grace: root=Mailbox quota bytes=2076180 (18%) dovecot: quota-status(test(a)test.info): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/mailboxes/t/e/test.info/test/:LAYOUT=fs:INDEX=/var/lib/dovecot-data/index/1010:CONTROL=/var/lib/dovecot-data/control/1010 dovecot: quota-status(test(a)test.info): Debug: fs: root=/home/mailboxes/t/e/test.info/test, index=/var/lib/dovecot-data/index/1010, indexpvt=, control=/var/lib/dovecot-data/control/1010, inbox=/home/mailboxes/t/e/test.info/test, alt= dovecot: quota-status(test(a)test.info): Debug: fs quota add mailbox dir = /home/mailboxes/t/e/test.info/test dovecot: quota-status(test(a)test.info): Debug: fs quota block device = /dev/sdc1 dovecot: quota-status(test(a)test.info): Debug: fs quota mount point = /home dovecot: quota-status(test(a)test.info): Debug: fs quota mount type = ext4

3 5

[Dovecot] mirror to download dovecot
by Edwardo Garcia 20 Dec '13

20 Dec '13

Halo, Is mirror to get 2.2.9? cannot get dovecot.org, this time out 4 xe-0-1-0-1-3664.r00.saplbr01.br.bb.gin.ntt.net (200.15.0.45) 6.946 ms 7.093 ms 6.899 ms 5 xe-4-1-3.r20.miamfl02.us.bb.gin.ntt.net (129.250.3.217) 118.130 ms 118.111 ms 118.117 ms 6 ae-1.r05.miamfl02.us.bb.gin.ntt.net (129.250.2.185) 118.592 ms 118.735 ms 118.628 ms 7 * * * 8 * * * 9 * * * I use to get from dovecot.ausics.org but fail connect too, seem has DNS 127.0.0.1 ????? is any others run mirror?

3 3

[Dovecot] reproducible dsync backup panic (dovecot 2.2.7)
by Peter Benko 20 Dec '13

20 Dec '13

Hi all, I'm receiving a reproducible dsync backup panic for some of my users. The error message is as follows: dsync-remote(user@<removed>): Panic: file dsync-brain-mailbox-tree-sync.c: line 111 (dsync_brain_mailbox_tree_sync_change): assertion failed: (brain->no_backup_overwrite) dsync-remote(user@<removed>): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x69b70) [0x7f922dad9b70] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f922dad9c4a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f922da94725] -> /usr/bin/dsync(dsync_brain_mailbox_tree_sync_change+0x382) [0x42f912] -> /usr/bin/dsync(dsync_brain_recv_mailbox_tree_deletes+0x10b) [0x42f4db] -> /usr/bin/dsync(dsync_brain_run+0x305) [0x42c6f5] -> /usr/bin/dsync() [0x42cbe8] -> /usr/bin/dsync() [0x43e040] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f922daea066] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f922daeaf07] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f922dae9b78] -> /usr/bin/dsync() [0x4297f9] -> /usr/bin/dsync() [0x4133cd] -> /usr/bin/dsync(doveadm_mail_try_run+0x251) [0x414091] -> /usr/bin/dsync(main+0x3c8) [0x412f78] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f922d704ead] -> /usr/bin/dsync() [0x413191] dsync-local(user@<removed>): Error: read(<remote-mail-server>) failed: EOF dsync-local(user@<removed>): Error: Remote command returned error 134 The command I'm using to back up individual user's mail is something like: sudo -u vmail dsync -v -u user(a)server.com -R backup ssh -i sshid-file login(a)server.com sudo -u vmail dsync -v -u user(a)server.com I use the above command at the backup server. The error started to appear a few weeks after we started using the new mail system. First it appeared for a single user, now it appears for some more users as well. It is deterministic and reproducible. Any ideas? I included the relevant part of my config below. Best regards, Peter ------------------------------------------------------------------- # 2.2.7 (5c876ed0c3e0): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_master_user_separator = * auth_mechanisms = plain login hostname = <removed> listen = * login_greeting = $hostname IMAP server mail_attachment_dir = /mail/mailboxes/%d/_attachments_ mail_attachment_fs = sis-queue $mail_attachment_dir/queue:posix mail_attachment_min_size = 16 k mail_location = mdbox:~ mail_plugins = " zlib acl" mdbox_rotate_interval = 5 days mdbox_rotate_size = 5 M namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = mdbox:/mail/mailboxes/%%d/%%n:INDEX=/mail/mailboxes/%%d/%%n prefix = Accounts/%%n/ separator = / subscriptions = no type = shared } passdb { args = /mail/config/dovecot/passwd driver = passwd-file } passdb { args = /mail/config/dovecot/passwd-master driver = passwd-file master = yes pass = yes } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/mail/mailboxes/%d/shared-mailboxes.db zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster@<removed> protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } syslog_facility = local6 userdb { args = uid=vmail gid=vmail master_user=%u home=/mail/mailboxes/%d/%n driver = static } protocol imap { mail_plugins = " zlib acl imap_acl" }

2 1

[Dovecot] auth failures
by Andreas Schulze 19 Dec '13

19 Dec '13

Hello, last week and today our dovecot pop3 server stopped responding. Without any other logentries dovecot start to log only this: Dec 12 09:14:12 mbox1 dovecot: auth: Error: ldap(testuser,192.0.2.110,<FBZH7lHtAQAK/FCj>): ldap_search(base=ou=accounts,dc=example,dc=de filter=(&(|(uid=testuser)(mail=testuser))(!(state=blocked)))) failed: Operations error For every pop3 Session, ~2000 per Minute ..., over 10 Minutes I send dovecot a SIGTERM. After dovecot was started again, all was fine again. # doveconf -n http://postmaster.datev.de/tmp/dovecot.conf The LDAP-Server itself did resond to queries in the same timeframe. I know this because the MTA on the same host was able to deliver messages into mailboxes. Any hints? Thanks Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 1

[Dovecot] External auth
by eechim enorniel 19 Dec '13

19 Dec '13

Hello, I saw a lot of tutorials about setting postfix with dovecot sasl but I would like more. I want to set a SSO system with roundcube on dovecot. I would like to know how to make dovecot work with sasl or saml, not as a provider but as a service plugging on an external provider. I saw there is an EXTERNAL auth mechanism but I didn't find any doc about it. Can you help me ? Thanks.

2 1

[Dovecot] Mailbox with .broken files
by Michael Smith (DF) 19 Dec '13

19 Dec '13

We're using Dovecot 2.2.4 and mdbox storage with compression. I noticed yesterday that at least one of the accounts has unusual files in it's mail/storage directory. This account has approximately 17.5G of compressed mail, across about 750 storage files (m.###) using 8G of storage. Starting on Dec 11, storage files m.409 through m.731 have not only their m.### file, but also a m.###.broken file. At the same time .temp.<unix time>.<unique id>.<hostname> files also started showing up... ... -rw--w---- 1 user123 mail 3225 Dec 12 04:38 m.708 -rw--w---- 1 user123 mail 167106 Dec 12 03:35 m.708.broken -rw--w---- 1 user123 mail 46155 Dec 12 04:38 m.709 -rw--w---- 1 user123 mail 177267 Dec 12 03:40 m.709.broken -rw--w---- 1 user123 mail 20965889 Nov 26 19:22 m.71 -rw--w---- 1 user123 mail 133248 Dec 12 04:38 m.710 -rw--w---- 1 user123 mail 264361 Dec 12 03:40 m.710.broken -rw--w---- 1 user123 mail 103407 Dec 12 04:38 m.711 -rw--w---- 1 user123 mail 627736 Dec 12 03:40 m.711.broken -rw--w---- 1 user123 mail 5132 Dec 12 04:38 m.712 -rw--w---- 1 user123 mail 136244 Dec 12 03:40 m.712.broken -rw--w---- 1 user123 mail 187224 Dec 12 04:38 m.713 -rw--w---- 1 user123 mail 351104 Dec 12 03:45 m.713.broken -rw--w---- 1 user123 mail 435793 Dec 12 04:38 m.714 -rw--w---- 1 user123 mail 566906 Dec 12 03:45 m.714.broken -rw--w---- 1 user123 mail 60916 Dec 12 04:38 m.715 -rw--w---- 1 user123 mail 192028 Dec 12 03:50 m.715.broken -rw--w---- 1 user123 mail 38051 Dec 12 04:38 m.716 -rw--w---- 1 user123 mail 169163 Dec 12 03:50 m.716.broken -rw--w---- 1 user123 mail 226067 Dec 12 04:38 m.717 -rw--w---- 1 user123 mail 389948 Dec 12 04:00 m.717.broken ... -rw--w---- 1 user123 mail 20967506 Dec 2 17:32 m.96 -rw--w---- 1 user123 mail 20967131 Dec 2 18:40 m.97 -rw--w---- 1 user123 mail 20969078 Dec 2 18:38 m.98 -rw--w---- 1 user123 mail 20963978 Dec 2 19:23 m.99 -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813944.P9142Q0M123686.myhost -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813967.P9213Q0M387733.myhost -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813970.P9231Q0M371190.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813972.P9173Q0M932070.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813972.P9239Q0M114754.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813983.P9261Q0M640646.myhost -rw--w---- 1 user123 mail 1048632 Dec 11 20:06 .temp.1386814038.P9515Q0M530600.myhost I'm not really seeing anything that stands out in the maillog during this time. What caused this problem? How concerned should I be about possible lost email? This is a production environment. Below is the dovecot -n output. -- Michael Smith # dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_debug_passwords = yes auth_default_realm = mydomain.com auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no dotlock_use_excl = no lda_mailbox_autocreate = yes lock_method = dotlock mail_access_groups = mail mail_debug = yes mail_fsync = always mail_location = mdbox:~/mail:INDEX=~/index mail_plugins = quota zlib mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_read_locks = dotlock mbox_write_locks = dotlock mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 20 M mmap_disable = yes namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Sent autosubscribe5 = INBOX mail_max_userip_connections = 10 managesieve_max_line_length = 65536 quota = dict:User quota::file:%h/dovecot.quota quota2_rule = Trash:storage=+10%% quota3_rule = Junk:storage=+20%% quota_rule = *:storage=100M:messages=100000 recipient_delimiter = + sieve_before = /var/opt/mail/global.sieve/ zlib_save = gz zlib_save_level = 9 } pop3_reuse_xuidl = yes protocols = imap pop3 sieve lmtp service auth { inet_listener auth { port = 113 } unix_listener auth-userdb { user = nobody } } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 10 service_count = 1 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota zlib sieve } protocol imap { mail_plugins = quota zlib imap_quota } protocol sieve { mail_max_userip_connections = 10 mail_plugins = quota zlib managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } protocol lmtp { mail_plugins = quota zlib sieve }

2 1

Re: [Dovecot] Mailbox with .broken files
by Michael Smith (DF) 19 Dec '13

19 Dec '13

Anyone have any feedback, guidance or suggestions on this? Timo? -----Original Message----- From: Michael Smith (DF) [mailto:msmith@datafoundry.com] Sent: Friday, December 13, 2013 9:49 AM To: 'dovecot(a)dovecot.org' Subject: [Dovecot] Mailbox with .broken files We're using Dovecot 2.2.4 and mdbox storage with compression. I noticed yesterday that at least one of the accounts has unusual files in it's mail/storage directory. This account has approximately 17.5G of compressed mail, across about 750 storage files (m.###) using 8G of storage. Starting on Dec 11, storage files m.409 through m.731 have not only their m.### file, but also a m.###.broken file. At the same time .temp.<unix time>.<unique id>.<hostname> files also started showing up... ... -rw--w---- 1 user123 mail 3225 Dec 12 04:38 m.708 -rw--w---- 1 user123 mail 167106 Dec 12 03:35 m.708.broken -rw--w---- 1 user123 mail 46155 Dec 12 04:38 m.709 -rw--w---- 1 user123 mail 177267 Dec 12 03:40 m.709.broken -rw--w---- 1 user123 mail 20965889 Nov 26 19:22 m.71 -rw--w---- 1 user123 mail 133248 Dec 12 04:38 m.710 -rw--w---- 1 user123 mail 264361 Dec 12 03:40 m.710.broken -rw--w---- 1 user123 mail 103407 Dec 12 04:38 m.711 -rw--w---- 1 user123 mail 627736 Dec 12 03:40 m.711.broken -rw--w---- 1 user123 mail 5132 Dec 12 04:38 m.712 -rw--w---- 1 user123 mail 136244 Dec 12 03:40 m.712.broken -rw--w---- 1 user123 mail 187224 Dec 12 04:38 m.713 -rw--w---- 1 user123 mail 351104 Dec 12 03:45 m.713.broken -rw--w---- 1 user123 mail 435793 Dec 12 04:38 m.714 -rw--w---- 1 user123 mail 566906 Dec 12 03:45 m.714.broken -rw--w---- 1 user123 mail 60916 Dec 12 04:38 m.715 -rw--w---- 1 user123 mail 192028 Dec 12 03:50 m.715.broken -rw--w---- 1 user123 mail 38051 Dec 12 04:38 m.716 -rw--w---- 1 user123 mail 169163 Dec 12 03:50 m.716.broken -rw--w---- 1 user123 mail 226067 Dec 12 04:38 m.717 -rw--w---- 1 user123 mail 389948 Dec 12 04:00 m.717.broken ... -rw--w---- 1 user123 mail 20967506 Dec 2 17:32 m.96 -rw--w---- 1 user123 mail 20967131 Dec 2 18:40 m.97 -rw--w---- 1 user123 mail 20969078 Dec 2 18:38 m.98 -rw--w---- 1 user123 mail 20963978 Dec 2 19:23 m.99 -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813944.P9142Q0M123686.myhost -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813967.P9213Q0M387733.myhost -rw--w---- 1 user123 mail 294968 Dec 11 20:05 .temp.1386813970.P9231Q0M371190.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813972.P9173Q0M932070.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813972.P9239Q0M114754.myhost -rw--w---- 1 user123 mail 327736 Dec 11 20:05 .temp.1386813983.P9261Q0M640646.myhost -rw--w---- 1 user123 mail 1048632 Dec 11 20:06 .temp.1386814038.P9515Q0M530600.myhost I'm not really seeing anything that stands out in the maillog during this time. What caused this problem? How concerned should I be about possible lost email? This is a production environment. Below is the dovecot -n output. -- Michael Smith # dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_debug_passwords = yes auth_default_realm = mydomain.com auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no dotlock_use_excl = no lda_mailbox_autocreate = yes lock_method = dotlock mail_access_groups = mail mail_debug = yes mail_fsync = always mail_location = mdbox:~/mail:INDEX=~/index mail_plugins = quota zlib mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_read_locks = dotlock mbox_write_locks = dotlock mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 20 M mmap_disable = yes namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Sent autosubscribe5 = INBOX mail_max_userip_connections = 10 managesieve_max_line_length = 65536 quota = dict:User quota::file:%h/dovecot.quota quota2_rule = Trash:storage=+10%% quota3_rule = Junk:storage=+20%% quota_rule = *:storage=100M:messages=100000 recipient_delimiter = + sieve_before = /var/opt/mail/global.sieve/ zlib_save = gz zlib_save_level = 9 } pop3_reuse_xuidl = yes protocols = imap pop3 sieve lmtp service auth { inet_listener auth { port = 113 } unix_listener auth-userdb { user = nobody } } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 10 service_count = 1 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota zlib sieve } protocol imap { mail_plugins = quota zlib imap_quota } protocol sieve { mail_max_userip_connections = 10 mail_plugins = quota zlib managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } protocol lmtp { mail_plugins = quota zlib sieve }

1 0

[Dovecot] v2.2.9 released
by Timo Sirainen 19 Dec '13

19 Dec '13

http://dovecot.org/releases/2.2/dovecot-2.2.9.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.9.tar.gz.sig + Full text search indexing can now be done automatically after saving/copying mails by setting plugin { fts_autoindex=yes } + replicator: Added replication_dsync_parameters setting to pass "doveadm sync" parameters (for controlling what to replicate). + Added mail-filter plugin + Added liblzma/xz support (zlib_save=xz) - v2.2.8's improved cache file handling exposed several old bugs related to fetching mail headers. - v2.2.7's iostream handling changes were causing some connections to be disconnected before flushing their output (e.g. POP3 logout message wasn't being sent)

7 9

[Dovecot] zlib plugin question
by Przemysław Orzechowski 19 Dec '13

19 Dec '13

Hi Is it possible to compress incoming mails delivered via dovecots LDA when using dovecot --version 1.2.9 or do i have to compress them via cron?

2 2

[Dovecot] problem with password in a changing scenario
by Angel Luis Mateo Martinez 19 Dec '13

19 Dec '13

Hello, I'm having a problem with with password changing. According to http://wiki2.dovecot.org/Authentication/Caching, I understand "normal scenario" and "Using old cached password scenario", but I'm having a problem with the "Early change scenario". I understand that in this case, if in step 4 user tries password Y, then this password is not tried again and login fails. But if the user tries another password Z, then is it test it? Or does it directly fail? I think that it is directly failing. And here is my problem... I am using dovecot with a ldap backend and another pam backend. The first one is users connecting with an email client. The other one applies when the ldap backend fails and it is use for connections from our webmail, which is integrated in our CAS SSO environment (it has running an imap proxy too). Sometimes (the only scenari we were able to reproduce is with users that for some reason has two SSO sessions opened) dovecot receives an invalid CAS ticket, then authentication fails, and no newer tickets are tried until cache is clean. That's why I think that in this scenario another Z password is even tried. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

[Dovecot] letters local filter duplicated
by John Smith 18 Dec '13

18 Dec '13

two servers with replicated master/master. dovecot.conf = http://pastebin.com/jVnvyWZM with this setup letters processed local filter duplicated. ie when the mail client receives a letter begins processing using rules (filters) to move the letters in a different folder. summarized in this folder is two duplicate letters. if you disable the filter, the message is not duplicated. But does not move to another location. -- Best Regards, Evgeny Senior System Administrator OOO "Vaz Service Hurley"

3 4

[Dovecot] Size detection/replair does not work with zlib
by Roland Rosenfeld 18 Dec '13

18 Dec '13

Hi! Usually dovecot auto detects or repairs the size of a maildir message. So I can place a message named "foo" in the cur directory and dovecot uses it. Now I tried the same with a zlib compressed message but here dovecot doesn't recognize/repair the size of the message. When I access this folder via IMAP the connection is diconnected and in dovecot logs I see the following error messages: Error: Cached message size smaller than expected (805 < 2666) Error: Corrupted index cache file /somedir/dovecot.index.cache: Broken physical size for mail UID 23 Error: read() failed: Input/output error (FETCH for mailbox INBOX UID 23) Disconnected: Internal error occurred. Refer to server log for more information. [2013-12-12 10:54:18] in=321 out=1977 As you can see in the first line, dovecot does know the compressed size of the file (805) as well as the uncompressed size (2666), but it isn't able to repair its index for this. If I modify the setup a little with a standard file naming but with a wrong file size in S-flag (compressed size instead of uncompressed size), the log entries become stranger: Error: Cached message size smaller than expected (805 < 2666) Error: Maildir filename has wrong S value, renamed the file from /somedir/cur/1386772057.M152553P9709.host,S=805:2, to /somedir/cur/1386772057.M152553P9709.host,S=805:2, So here dovecot detects the wrong S value, but instead of fixing it by using the uncompressed size, it renames to the same file name as before... All the above was tested with dovecot 2.1.17. We did a short cross test with 2.2.9 which gives somewhat different error messages, but also isn't able to detect/repair the (uncompressed) file size: Error: Cached message size smaller than expected (805 < 2666) Error: Corrupted index cache file /somedir/dovecot.index.cache: Broken physical size for mail UID 23 Error: read(zlib(/somedir/cur/foo)) failed: Invalid argument We also noticed that on both dovecot versions after trying to access the above file, dovecot.index.cache is always deleted and not rebuild... Is all this intended behavior? It sounds different to the standard behavior of dovecot, that repairs broken folders if possible... Ciao Roland

4 3

[Dovecot] configure lmtp to deliver to email addresses case insensitively
by Adrian Zaugg 17 Dec '13

17 Dec '13

Dear List Using dovecot 2.1.7 with LMTP and exim4 I want to accept local parts regardless of their case. Exim does all virtual alias handling and delivers the messages to dovecot LMTP addressed to the right mailbox name. This works well except for addresses which do not need to be resolved by exim and which do have the "wrong" case in the local part. For example: There is a mailbox and a user on the mailsystem "example.org" called "user". Mails to "user(a)example.org" get delivered just as they should. If an incoming message is addressed to "USER(a)example.org" with upper case local part, exim passes the message to LMTP with the case unaltered (RFC 2821 conform), but LMTP fails with: LMTP error after RCPT TO:<USER(a)example.org>: 550 5.1.1 <USER(a)example.org> User doesn't exist: USER(a)example.org How can I tell dovecot to deliver "USER" to the mailbox "user" aswell? Thank you for your help. Best regards, Adrian. (I have tried to use %Ln and %Lu in mail_location setting with no success.)

5 9

[Dovecot] Dovecot proxy and Postfix SASL
by Andreas Kasenides 17 Dec '13

17 Dec '13

Can somebody please verify that currently (v 2.2.9) SMTP AUTH using SASL from Postfix with Dovecot proxy is still not supported as discussed in these threads (especially the first one)? http://www.dovecot.org/list/dovecot/2012-August/067977.html http://www.dovecot.org/list/dovecot/2011-May/059107.html As I understand it is possible to use saslauthd to do this by using the remote imap option (rimap). Such a facility is important since I am attempting to separate the outward facing servers (dovecot proxy, postfix relay) that have no knowledge of user databases from the backends. thanx Andreas

1 1

[Dovecot] Accessing plain text password from memory
by Stanislas SABATIER 17 Dec '13

17 Dec '13

Is there a way to retrieve the client's password in plain text from memory ? I don't store the password in plain text in my postgreSQL but I need it when the client is connected to make crypto computation. If I write a plugin to do the job, how could I retrieve the plain text password from master ? Thank you for your help, Regards, Stan. --------------------------------------------------------------- Stanislas SABATIER s.sabatier(a)pobox.com ---------------------------------------------------------------

6 9

[Dovecot] Postfix + Dovecot & mail-stack-delivery Outlook Problem
by Sami Mäntysaari 16 Dec '13

16 Dec '13

Hello all readers of the list, I wish to get Microsoft Outlook 2010 workin with mail-stack-delivery setup. Logs when trying to setup accaunt in Microsoft Outlook 2010: ec 14 22:38:31 ip-172-31-7-147 dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:38:31 ip-172-31-7-147 dovecot: pop3-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:38:31 ip-172-31-7-147 dovecot: pop3-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, TLS Dec 14 22:38:31 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, TLS Dec 14 22:38:32 ip-172-31-7-147 dovecot: pop3-login: Aborted login (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:38:33 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, TLS Dec 14 22:38:33 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:39:17 ip-172-31-7-147 dovecot: pop3-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, TLS handshaking: Disconnected Dec 14 22:39:18 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, TLS handshaking: Disconnected Dec 14 22:39:22 ip-172-31-7-147 postfix/submission/smtpd[8237]: connect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:22 ip-172-31-7-147 postfix/submission/smtpd[8237]: lost connection after UNKNOWN from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:22 ip-172-31-7-147 postfix/submission/smtpd[8237]: disconnect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:22 ip-172-31-7-147 postfix/submission/smtpd[8237]: connect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:23 ip-172-31-7-147 postfix/submission/smtpd[8237]: lost connection after UNKNOWN from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:23 ip-172-31-7-147 postfix/submission/smtpd[8237]: disconnect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:23 ip-172-31-7-147 postfix/submission/smtpd[8239]: connect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:23 ip-172-31-7-147 postfix/submission/smtpd[8237]: connect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8239]: lost connection after STARTTLS from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8239]: disconnect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8237]: lost connection after STARTTLS from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8237]: disconnect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8239]: connect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8237]: connect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8239]: lost connection after EHLO from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8239]: disconnect from unknown[2001:470:28:743:4923:c01c:c89a:567a] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8237]: lost connection after EHLO from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:39:24 ip-172-31-7-147 postfix/submission/smtpd[8237]: disconnect from cable-tku-58c3cc-203.dhcp.inet.fi[88.195.204.203] Dec 14 22:40:13 ip-172-31-7-147 dovecot: imap-login: Login: user=<sm>, method=PLAIN, rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2, mpid=8243, TLS Dec 14 22:40:57 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:40:57 ip-172-31-7-147 dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:40:58 ip-172-31-7-147 dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:42:44 ip-172-31-7-147 dovecot: imap-login: Disconnected (no auth attempts): rip=2001:470:28:743:4923:c01c:c89a:567a, lip=2001:470:1f08:ddd::2 Dec 14 22:42:45 ip-172-31-7-147 postfix/anvil[8238]: statistics: max connection rate 3/60s for (submission:2001:470:28:743:4923:c01c:c89a:567a) at Dec 14 22:39:24 Dec 14 22:42:45 ip-172-31-7-147 postfix/anvil[8238]: statistics: max connection count 1 for (submission:2001:470:28:743:4923:c01c:c89a:567a) at Dec 14 22:39:22 Dec 14 22:42:45 ip-172-31-7-147 postfix/anvil[8238]: statistics: max cache size 2 at Dec 14 22:39:22 Telnet log while connected over IPV6 to port 587 on mail server: Trying 2001:470:1f08:ddd::2... Connected to 2001:470:1f08:ddd::2. Escape character is '^]'. 220 mail.sami-mantysaari.biz ESMTP Postfix ehlo samip537.tk 250-mail.sami-mantysaari.biz 250-PIPELINING 250-SIZE 10240000 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN quit 221 2.0.0 Bye Connection closed by foreign host. Any seggestions what to try in order to get this to work?

5 11

[Dovecot] connection Dovecot to samba4
by Pascal den Bekker 16 Dec '13

16 Dec '13

Hello, I am trying to setup samba4/openchange and dovecot. Does anyone has experiences concering dovecot connecting to samba4 ?? I tried the following: /etc/dovecot.conf: protocols = imap sieve mail_location = maildir:/data/mail/%d/%n/Maildir mail_access_groups = vmail mail_privileged_group = vmail first_valid_uid = 110 last_valid_uid = 110 first_valid_gid = 115 last_valid_gid = 115 log_path = /var/log/dovecot log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Welcome to domain.local. service imap { inet_listener { port=143 } } protocol lda { log_path = /var/log/mail/dovecot-deliver.log auth_socket_path = /var/run/dovecot/auth-master postmaster_address = postmaster(a)domain.local mail_plugins = sieve } service managesieve { inet_listener { port=12000 } } auth_verbose = yes auth_debug = yes service auth { unix_listener /var/spool/postfix/private/auth { group = vmail mode = 0660 user = postfix } } #service auth-userdb { # user = vmail # } #user = root #} passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } plugin { sieve = /data/mail/%d/%n/sieverc sieve_storage=/data/mail/%d/%n/sieve sieve_max_redirects = 20 } debug_log_path = /var/log/dovecot-debug.log dict { } /etc/dovecot/dovecot-ldap-passdb.conf hosts = localhost auth_bind = yes auth_bind_userdn = cn=%u,cn=Users,dc=domain,dc=local ldap_version = 3 base = cn=Users,dc=domain,dc=local pass_filter = (&(objectClass=person)(cn=%u)(mail=*)) /etc/dovecot/dovecot-ldap-userdb.conf: hosts = localhost dn = cn=ldap,cn=Users,DC=domain,DC=local dnpass = password ldap_version = 3 base = cn=Users,DC=domain,DC=local #user_attrs = user_attrs=uid=5000,=gid=5000,=home=/data/mail/%d/%n,mail=/data/mail/%d/%u/Maildir user_filter = (&(objectClass=person)(cn=%u)(mail=*)) iterate_attrs = cn=user iterate_filter = (objectClass=person) When I try to login with useraccountadministrator I get the following error messages: 2013-12-16 11:28:29 auth: Info: ldap(ldap,127.0.0.1,<N3HjRaTtdAB/AAAB>): unknown user 2013-12-16 11:28:29 auth: Error: userdb(ldap,127.0.0.1,<N3HjRaTtdAB/AAAB>): user not found from userdb ldap 2013-12-16 11:28:29 imap: Error: Authenticated user not found from userdb, auth lookup id=783810561 (client-pid=3809 client-id=1) 2013-12-16 11:28:29 imap-login: Info: Internal login failure (pid=3809 id=1) (internal failure, 1 succesful auths): user=<ldap>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3810, secured, session=<N3HjRaTtdAB/AAAB> Can someone tell me what I am doing wrong, or is there way to test to dovecot ldap connection string ?? Cheers, - Pascal -- Pascal den Bekker Linux System Administrator Affinitas GmbH | Kohlfurter Straße 41/43 | 10999 Berlin | Germany email: pascal_den.bekker(a)affinitas.de | tel: +49 30 868 000 140 www.edarling.de | www.shopaman.de Geschäftsführer: Lukas Brosseder, David Khalil, Michael Schrezenmaier Eingetragen beim Amtsgericht Berlin-Charlottenburg, HRB 115958

4 7

[Dovecot] Turn of mount point adding?
by Scott Galambos 16 Dec '13

16 Dec '13

I'm running dovecot 2.2.5 and would like to completely turn off all automatic adding of mount points. So var/lib/dovecot/mounts would be empty essentially. Is this possible? Somehow dovecot always adds a mount point that does not exist and was removed a long time ago. I've dove: doveadm mount add '/my custom path/*' ignore but it still will add mount points in the "mounts" file and flag them as online. for example: ignore /apps/proftp/servers/ftp.domain.ca/* ignore /mnt/* online / online /apps/proftp/servers/ftp.domain.ca/www.site1.com online /apps/proftp/servers/ftp.domain.ca/www.site2.com online /apps/proftp/servers/ftp.domain.ca/www.site3.com what does it list site1, 2 and 3 if its suppose to ignore the root path with the first line? I would to completely disable all mountpoints. Even "doveadm mount add '/*' ignore" should render a mounts file empty on reboot correct? It doesn't and keeps rebuilding it.

3 3

[Dovecot] Is mail deleted when mail-filter fails?
by martijn.list 15 Dec '13

15 Dec '13

Hi, While experimenting with the mail-filter, during some tests my filter failed with a non-zero exit code and did not write any data to the output. This seems to result in a lost email. Is this correct? Is there a way to gracefully handle error from a mail-filter out script? Kind regards, Martijn Brinkers

1 1

[Dovecot] Possible pigeonhole dealing with negative numerical values
by Sam Mulvey 14 Dec '13

14 Dec '13

Using dovecot 2.2.9 and pigeonhole 0.4.2 The system is a Xen VM running Arch Linux x86_64, presently up to date, on an XFS filesystem in an LVM2 partition. After recently updating my mail server, I found that a sieve rule I had which would check X-Spam-Score for a value over a certain number, in my case 2.5. In my most recent update, negative values would trip the rule. Here's the rule in question: # rule:[Spam Filter Subject] if anyof (header :contains "Subject" "[SPAM]", header :value "gt" :comparator "i;as cii-numeric" "X-Spam-Score" "2.5") { fileinto "Spam Box"; stop; } I have a successful work-around by checking the numerical value and also insuring that the header doesn't contain a '-', and things work as they should. Possible the bug could be in my Sieve interface, which is a RoundCube plugin. Otherwise things are working great. If there's anything I can add, please let me know. Thanks! -Sam dovecot -n output: # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.12.4-1-ARCH x86_64 xfs auth_cache_size = 512 k auth_cache_ttl = 10 mins auth_mechanisms = plain login auth_verbose = yes default_internal_user = mailstore first_valid_gid = 50 first_valid_uid = 50 hostname = tacomatelematics.com last_valid_gid = 50 last_valid_uid = 50 lda_mailbox_autocreate = yes mail_gid = 50 mail_location = maildir:/var/spool/mail/%d/%n/Maildir/ mail_privileged_group = postfix mail_uid = 50 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)tacomatelematics.com protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = mailstore mode = 01130 user = mailstore } unix_listener auth-userdb { group = mailstore mode = 0600 user = mailstore } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/certificate.pem ssl_key = </etc/certificate.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" }

2 1

[Dovecot] v2.2.8 released
by Timo Sirainen 13 Dec '13

13 Dec '13

http://dovecot.org/releases/2.2/dovecot-2.2.8.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.8.tar.gz.sig + Mail cache lookups work for the mail being saved. This improves performance by avoiding the need to parse the mail multiple times when using some plugins (e.g. mail_log). + Mail cache works for recently cached data also with in-memory indexes. + imapc: Many performance improvements, especially when working with dsync. Also added imapc_feature=fetch-headers which allows using FETCH BODY.PEEK[HEADER.FIELDS (..)] to avoid reading the entire header. + mail_location = ..:FULLDIRNAME=dbox-Mails is the same as :DIRNAME=dbox-Mails, but it will also be used for :INDEX and :CONTROL directories. (It should have worked this way from the beginning, but can't be changed anymore without breaking existing installations). - Fixed infinite loop in message parsing if message ends with "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't trigger this, because messages must end with an "LF.". A user could trigger this for him/herself though. - lmtp: Client was sometimes disconnected before all the output was sent to it. - imap_zlib plugin caused crashes during client disconnection in v2.2.7 - replicator: Database wasn't being exported to disk every 15 minutes as it should have. Instead it was being imported, causing "doveadm replicator remove" commands to not work very well.

5 9

Re: [Dovecot] Dsync error: Couldn't drop privileges: getgrnam
by Joseph Tam 13 Dec '13

13 Dec '13

Alan McGinlay wrote: > Can't believe I'm the only one with this error, googled it and there is > nothing. Sorry to whine but I am getting desperate here! I googled "safe_mkstemp permission denied" and first hit is this thread dovecot.org/list/dovecot/2010-August/052319.html which mentions this error coming about from chrooting users. Looking back on your post, I see http://www.dovecot.org/list/dovecot/2013-December/093900.html mail_chroot = /var/vmail As long as your desperate, maybe try leaving this setting empty? (This doesn't explain why it's not deterministic though.) Try process traces -- I do when I'm stumped. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] dovecot-imapd eating 100% cpu every once in a while
by Nikolaus Rath 13 Dec '13

13 Dec '13

Hello, About once or twice a week, dovecot's imap-login process on my system seems gets out of control, eating 100% CPU for about 2 hours. Afterwards everything seems to go back to normal. I am using Dovecot 2.1.7 on a 64 bit Debian wheezy system. When running gdb on the process in this stage, I get the following traceback: #0 0x00007fcba50c5a90 in read () from /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007fcba4aa01aa in ?? () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #2 0x00007fcba4a9df09 in BIO_read () from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 #3 0x00007fcba4dbac8c in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 #4 0x00007fcba4dbbe75 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 #5 0x00007fcba4dbd8d0 in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 #6 0x00007fcba4dad07a in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 #7 0x00007fcba4db143b in ?? () from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 #8 0x00007fcba5622b61 in ssl_handshake (proxy=0x7fcba7870bb0) at ssl-proxy-openssl.c:465 #9 ssl_step (proxy=0x7fcba7870bb0) at ssl-proxy-openssl.c:528 #10 0x00007fcba53d2016 in io_loop_call_io (io=0x7fcba786fc80) at ioloop.c:379 #11 0x00007fcba53d2cc7 in io_loop_handler_run (ioloop=ioloop@entry=0x7fcba778c6e0) at ioloop-epoll.c:213 #12 0x00007fcba53d1a28 in io_loop_run (ioloop=0x7fcba778c6e0) at ioloop.c:398 #13 0x00007fcba53be483 in master_service_run (service=0x7fcba778c590, callback=callback@entry=0x7fcba5620100 <client_connected>) at master-service.c:544 #14 0x00007fcba562079e in login_binary_run (binary=<optimized out>, argc=1, argv=0x7fcba778c370) at main.c:406 #15 0x00007fcba5015ead in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6 #16 0x00007fcba5a52b2d in _start () strace -tt says: 16:14:19.693378 gettimeofday({1381421659, 693415}, NULL) = 0 16:14:19.693490 time(NULL) = 1381421659 16:14:19.693588 read(18, 0x7fcba7876a43, 5) = -1 EAGAIN (Resource temporarily unavailable) 16:14:19.693688 epoll_wait(14, {{EPOLLOUT, {u32=2810463600, u64=140512665552240}}}, 10, 4294967295) = 1 16:14:19.693796 gettimeofday({1381421659, 693823}, NULL) = 0 16:14:19.693890 time(NULL) = 1381421659 16:14:19.693984 read(18, 0x7fcba7876a43, 5) = -1 EAGAIN (Resource temporarily unavailable) 16:14:19.694084 epoll_wait(14, {{EPOLLOUT, {u32=2810463600, u64=140512665552240}}}, 10, 4294967295) = 1 16:14:19.694177 gettimeofday({1381421659, 694203}, NULL) = 0 16:14:19.694269 time(NULL) = 1381421659 16:14:19.694399 read(18, 0x7fcba7876a43, 5) = -1 EAGAIN (Resource temporarily unavailable) 16:14:19.694563 epoll_wait(14, {{EPOLLOUT, {u32=2810463600, u64=140512665552240}}}, 10, 4294967295) = 1 16:14:19.694706 gettimeofday({1381421659, 694757}, NULL) = 0 16:14:19.694849 time(NULL) = 1381421659 16:14:19.694976 read(18, 0x7fcba7876a43, 5) = -1 EAGAIN (Resource temporarily unavailable) 16:14:19.695091 epoll_wait(14, {{EPOLLOUT, {u32=2810463600, u64=140512665552240}}}, 10, 4294967295) = 1 16:14:19.695201 gettimeofday({1381421659, 695230}, NULL) = 0 16:14:19.695300 time(NULL) = 1381421659 16:14:19.695420 read(18, 0x7fcba7876a43, 5) = -1 EAGAIN (Resource temporarily unavailable) 16:14:19.695555 epoll_wait(14, <unfinished ...> dovecot -n output is: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext3 first_valid_uid = 8 last_valid_uid = 8 mail_access_groups = spamd-clients mail_gid = mail mail_location = mdbox:/var/spool/mail/%n/mdbox mail_plugins = fts quota fts_lucene mail_uid = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA512-CRYPT username_format=%n /etc/dovecot/users driver = passwd-file } plugin { antispam_backend = pipe antispam_pipe_program = /usr/local/bin/spamc_wrapper antispam_pipe_program_notspam_args = -L;ham antispam_pipe_program_spam_args = -L;spam antispam_spam = Spam antispam_trash = Trash;Papierkorb fts = lucene fts_lucene = whitespace_chars=@. quota = dict:User quota::file:%h/quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve" service auth { unix_listener auth-client { mode = 0600 user = Debian-exim } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 2003 } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = username_format=%n /etc/dovecot/users driver = passwd-file override_fields = home=/var/spool/mail/%n } protocol lmtp { mail_plugins = fts quota fts_lucene sieve } protocol lda { mail_plugins = fts quota fts_lucene sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = fts quota fts_lucene imap_quota antispam } Is this a bug in dovecot, or am I doing something wrong? Is there something I can do to debug this further? Best, Nikolaus -- Encrypted emails preferred. PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6 02CF A9AD B7F8 AE4E 425C »Time flies like an arrow, fruit flies like a Banana.«

3 6

[Dovecot] Locking down master user to certain domains through passwd-file auth
by Andrew Obertas 12 Dec '13

12 Dec '13

Hello, I know it is possible to lock down a master user to only have access to certain domains through SQL login but I was wondering if the same was possible with a passwd-based system. I currently have a master-passwd file residing in the /etc/virtual/domain.com/ directories I want the master user to be able to log in to. Is there a way to tell passdb to only allow the master user login to proceed if they can auth to the master-passwd file in the same folder as the user? Alternatively, is there a better way to go about this? What I assumed would be the easy approach, where the domain from the user's e-mail is fetched, doesn't seem to work as %d fetches the master user's domain and, unless I'm doing something wrong, the login_domain variable cannot be used as this is outside Dovecot-auth. Any assistance with this would be appreciated. -- Best regards, Andrew Obertas Technical Support Representative Infinet Communications Group

2 2

[Dovecot] error with xz compression
by Michael Cramer 12 Dec '13

12 Dec '13

i have enabled the zlib plugin with xz compression but on some new mails i got now a segfault and the following lines in dovecot error.log Dec 12 08:51:23 imap(tester(a)domain.com): Error: lzma.read(/srv/vmail/mail/domain.com/root/storage/m.3): unexpected EOF at 136004 Dec 12 08:51:23 imap(tester(a)domain.com): Error: read(zlib(/srv/vmail/mail/domain.com/root/storage/m.3)) failed: Invalid argument (uid=2985) Dec 12 08:51:23 imap(tester(a)domain.com): Error: mail parser: read(zlib(/srv/vmail/mail/domain.com/root/storage/m.3), box=Shared/root(a)domain.com) failed: Invalid argument Dec 12 08:52:33 indexer-worker(tester(a)domain.com): Error: lzma.read(/srv/vmail/mail/domain.com/tester/storage/m.41): unexpected EOF at 4913758 the problem is that the mails can't be shown. this happens not with every mail i also got new mails that can be shown without any problem. i was not able to produce a coredump

2 1

[Dovecot] Dsync error: Couldn't drop privileges: getgrnam
by Alan McGinlay - SICS 12 Dec '13

12 Dec '13

Hi, I upgraded (in place upgrade, preserving my dovecot configs) to a newer release of ubuntu in order to gain access to slightly newer Dovecot release and be able to use Dsync for migration from Cyrus, here is my doveconf -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-44-generic x86_64 Ubuntu 12.10 auth_debug = yes auth_default_realm = whatever.com auth_master_user_separator = * auth_socket_path = /var/run/dovecot/auth-master imapc_features = rfc822.size imapc_host = oldmail.whatever.com imapc_master_user = cyradmin imapc_password = <password hidden> mail_chroot = /var/vmail mail_debug = yes mail_gid = 5000 mail_location = maildir:~/Maildir mail_prefetch_count = 20 mail_privileged_group = vmail mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = dovecot mode = 0600 user = dovecot } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = <cert ssl_key = <cert userdb { args = uid=vmail gid=vmail home=/domain/%1d/%d/%1n/%n allow_all_users=yes driver = static } protocol lmtp { postmaster_address = post(a)whatever.com } protocol imap { mail_max_userip_connections = 10 } protocol pop3 { pop3_uidl_format = %v.%u } And the command I am using to (attempt) a mailbox sync: doveadm -o mail_fsync=never backup -R -u alantestuser(a)whatever.com imapc: Produces this output: dsync(alantestuser(a)whatever.com): Error: user alantestuser(a)whatever.com: Couldn't drop privileges: getgrnam(vmail) failed: No such file or directory (in mail_privileged_group setting) dsync(alantestuser(a)whatever.com): Fatal: User init failed mail.log shows this: Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Dec 5 21:10:54 newmailserver dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libauthdb_ldap.so Dec 5 21:10:54 newmailserver dovecot: auth: Debug: passwd-file /etc/dovecot/master-users: Read 1 users in 0 secs Dec 5 21:10:54 newmailserver dovecot: auth: Debug: master in: USER#0111#011alantestuser(a)whatever.com#011service=doveadm Dec 5 21:10:54 newmailserver dovecot: auth: Debug: master out: USER#0111#011alantestuser@whatever.com#011uid=5000#011gid=5000#011home=/domain/w/whatever.com/a/alantestuser I followed this doc (which could use a little fleshing out, I will be happy to do it once I get a grasp on this!): http://wiki2.dovecot.org/Migration/Dsync Thanks in advance! /Alan

3 9

[Dovecot] managesieve error with dovecot
by saurabh 12 Dec '13

12 Dec '13

Hi All, I am using Dovecot version 2.0.9 on Centos 6.4. I have installed dovecot-pegionhole version 2.0.9 and Roundcube version 0.9.5 . After doing all the configurations. I am able to see the filters icon in roundcube setting. But whem I click it I get the error "could not connect to server" please help. Below are the error logs. ########### log from /var/log/maillog ########## Dec 11 21:41:06 eximtest dovecot: managesieve: Debug: Unknown userdb setting: plugin//mail/%d/%n/=/home/test Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: Effective uid=6006, gid=6000, home= Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: quota: No quota setting - plugin disabled Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/ayurve.co.uk/test/Maildir Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: maildir++: root=/mail/ayurve.co.uk/test/Maildir, index=, control=, inbox=/mail/ayurve.co.uk/test/Maildir Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: sieve-storage: using active sieve script path: (null) Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Debug: sieve-storage: using sieve script storage directory: (null) Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Error: sieve-storage: stat((null)) failed: Bad address Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Error: sieve-storage: stat((null)) failed: Bad address Dec 11 21:41:06 eximtest dovecot: managesieve(test(a)ayurve.co.uk): Fatal: Failed to open Sieve storage. ############## log from /var/www/html/roundcube/logs/errors ############## [11-Dec-2013 16:11:06 +0000]: PHP Error: Unable to connect to managesieve on eximtest.techblue.co.uk:4190 in /var/www/html/roundcube/plugins/managesieve/managesieve.php on line 308 (GET /roundcube/?_task=settings&_action=plugin.managesieve) [11-Dec-2013 16:11:06] Not currently in AUTHORISATION state (1): [11-Dec-2013 16:11:06] Failed to write to socket: connection lost (): ################### log from /var/www/html/roundcube/logs/sieve ################### [11-Dec-2013 16:11:06 +0000]: S: "IMPLEMENTATION" "dovecot" [11-Dec-2013 16:11:06 +0000]: S: "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date" [11-Dec-2013 16:11:06 +0000]: S: "NOTIFY" "mailto" [11-Dec-2013 16:11:06 +0000]: S: "SASL" "PLAIN" [11-Dec-2013 16:11:06 +0000]: S: "VERSION" "1.0" [11-Dec-2013 16:11:06 +0000]: S: OK "Capability completed." [11-Dec-2013 16:11:06 +0000]: C: AUTHENTICATE "PLAIN" "AHRlc3RAYXl1cnZlLmNvLnVrADRRUG9vZFdvMGQ=" [11-Dec-2013 16:11:06 +0000]: S: Thanks, Saurabh -- Saurabh Kumar (RHCSA,RHCE,RHCVA)

2 6

[Dovecot] what's wrong with this config file?
by Jim Reid 12 Dec '13

12 Dec '13

Hi. I'm setting up a new IMAPS server. Mail users don't have login access to the box but will each have unique UNIX-style UIDs: no back-end database or LDAP thing. So far. Their mail will get delivered to UNIX-style mailboxes in /var/mail/%u (where %u is the UNIX username obviously). Their IMAP folders will go in /var/imap/%u. These will contain subfolders once everyone migrates to the new set-up and some folders will contain messages and subfolders. I think this is what I configured in dovecot. However when I try to set up a test account, dovecot reports the following error: Dec 12 02:22:00 shaun dovecot: imap-login: Login: user=<jim>, method=CRAM-MD5, rip=10.0.0.1, lip=10.1.1.1, mpid=14874, TLS, session=<8Hy1Ak3t+gDDNulD> Dec 12 02:22:00 shaun dovecot: imap(jim): Error: user jim: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Dec 12 02:22:00 shaun dovecot: imap(jim): Error: Invalid user settings. Refer to server log for more information. I've checked and re-checked the wiki. google was unable to suggest any explanation either. Any ideas what's wrong? There is no duplicate namespace (and/or prefix) that I can see below. # 2.2.9: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.2-RELEASE amd64 auth_mechanisms = cram-md5 auth_verbose = yes base_dir = /var/run/dovecot/ default_client_limit = 120 director_username_hash = %Lu import_environment = TZ listen = *, [::] mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl namespace { disabled = no hidden = yes ignore_on_failure = no inbox = yes list = yes location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / subscriptions = yes type = private } namespace imapstuff { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/var/imap/%u:LAYOUT=fs prefix = separator = / subscriptions = yes type = private } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no driver = special_use = \Drafts } mailbox Junk { auto = no driver = special_use = \Junk } mailbox Sent { auto = no driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = separator = subscriptions = yes type = private } passdb { driver = pam } passdb { driver = pam } passdb { args = /usr/local/etc/dovecot-md5 driver = passwd-file } protocols = imap service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 32 drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 0 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 8 process_min_avail = 3 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = /usr/local/libexec/dovecot/imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 32 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 32 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 8 process_min_avail = 3 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 32 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } ssl_cert = </usr/local/etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </usr/local/etc/ssl/private/dovecot.pem ssl_parameters_regenerate = 1 weeks state_dir = /var/lib/dovecot syslog_facility = local4 userdb { driver = passwd } userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)example.com } protocol imap { mail_max_userip_connections = 10 mail_plugin_dir = /usr/local/lib/dovecot/imap }

3 2