- dovecot - dovecot.org

[Dovecot] Active Directory LDAP userdb and dovecot
by Simone Ferretti 06 Dec '13

06 Dec '13

Hello everybody, I have a problem with LDAP userdb and dovecot. Let me first explain my LDAP configuration: I got three Active Directory LDAP servers (a.galliera.it, b.galliera.it, c.galliera.it) responding round robin to the name galliera.it. I want to use LDAP for the userdb lookup, so I configured dovecot-ldap-userdb.conf.ext as follow: hosts = galliera.it # round robin base = dc=galliera,dc=it ldap_version = 3 auth_bind=yes auth_bind_userdn = %n(a)galliera.it dn=CN=stampa,CN=Users,DC=galliera,DC=it dnpass=stampa base = DC=galliera,DC=it scope = subtree deref = always user_attrs = sAMAccountName=home=/home/dovecot.galliera.it/%$,=uid=8,=gid=8 user_filter = (&(objectClass=person)(sAMAccountName=%n)) default_pass_scheme=CRYPT With this configuration everything go fine, I can authenticate and lookup my users in the expected way. What follows is the conversation between (one of) the LDAP server(s) and dovecot after a issue of the command $ doveadm user -u <user>@galliera.it : 62.785686 10.0.31.235 -> 10.0.5.0 TCP 74 43053 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=536265719 TSecr=0 WS=32 62.786216 10.0.5.0 -> 10.0.31.235 TCP 78 ldap > 43053 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1 62.786279 10.0.31.235 -> 10.0.5.0 TCP 66 43053 > ldap [ACK] Seq=1 Ack=1 Win=14624 Len=0 TSval=536265719 TSecr=0 62.786394 10.0.31.235 -> 10.0.5.0 LDAP 122 bindRequest(1) "CN=stampa,CN=Users,DC=galliera,DC=it" simple 62.786583 10.0.31.235 -> 10.0.5.0 TCP 74 43054 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=536265719 TSecr=0 WS=32 62.786953 10.0.5.0 -> 10.0.31.235 TCP 78 ldap > 43054 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1 62.787008 10.0.31.235 -> 10.0.5.0 TCP 66 43054 > ldap [ACK] Seq=1 Ack=1 Win=14624 Len=0 TSval=536265719 TSecr=0 62.787039 10.0.31.235 -> 10.0.5.0 LDAP 122 bindRequest(1) "CN=stampa,CN=Users,DC=galliera,DC=it" simple 62.788484 10.0.5.0 -> 10.0.31.235 LDAP 88 bindResponse(1) success 62.788528 10.0.31.235 -> 10.0.5.0 TCP 66 43053 > ldap [ACK] Seq=57 Ack=23 Win=14624 Len=0 TSval=536265719 TSecr=36040952 62.789334 10.0.5.0 -> 10.0.31.235 LDAP 88 bindResponse(1) success 62.789365 10.0.31.235 -> 10.0.5.0 TCP 66 43054 > ldap [ACK] Seq=57 Ack=23 Win=14624 Len=0 TSval=536265720 TSecr=36040952 62.789462 10.0.31.235 -> 10.0.5.0 LDAP 174 searchRequest(2) "DC=galliera,DC=it" wholeSubtree 62.790396 10.0.5.0 -> 10.0.31.235 LDAP 392 searchResEntry(2) "CN=Marco De benedetto,OU=S.S.C. Area sistemistica,OU=S.C. S.I.e.T. - Servizi informatici e telecomunicazioni,OU=Dipartimento di Staff,OU=Direzione generale,DC=galliera,DC=it" | searchResRef(2) | searchResDone(2) success 62.790508 10.0.31.235 -> 10.0.5.0 LDAP 191 searchRequest(3) "CN=Configuration,DC=galliera,DC=it" wholeSubtree 62.791077 10.0.5.0 -> 10.0.31.235 LDAP 168 searchResRef(3) | searchResDone(3) success 62.791172 10.0.31.235 -> 10.0.5.0 LDAP 203 searchRequest(4) "CN=Schema,CN=Configuration,DC=galliera,DC=it" wholeSubtree 62.791838 10.0.5.0 -> 10.0.31.235 LDAP 88 searchResDone(4) success 62.828752 10.0.31.235 -> 10.0.5.0 TCP 66 43054 > ldap [ACK] Seq=427 Ack=473 Win=15680 Len=0 TSval=536265730 TSecr=36040952 Strange things happen instead if I change the 'hosts' configuration variable to one (no matter what) of the domain controllers e.g.: hosts = a.galliera.it base = dc=galliera,dc=it ldap_version = 3 auth_bind=yes auth_bind_userdn = %n(a)galliera.it dn=CN=stampa,CN=Users,DC=galliera,DC=it dnpass=stampa base = DC=galliera,DC=it scope = subtree deref = always user_attrs = sAMAccountName=home=/home/dovecot.galliera.it/%$,=uid=8,=gid=8 user_filter = (&(objectClass=person)(sAMAccountName=%n)) default_pass_scheme=CRYPT Changing this variable to only one of the domain controllers make the doveadm request (issued as above) hang for some seconds and then exit with a Request time out message. This is the conversation record, you can note that there is *more the one* LDAP server involved in the conversation despite the fact that in the conf file only one is specified: 3427.019635 10.0.31.235 -> 10.0.10.0 TCP 74 33963 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=537106777 TSecr=0 WS=32 3427.020428 10.0.10.0 -> 10.0.31.235 TCP 78 ldap > 33963 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1 3427.020489 10.0.31.235 -> 10.0.10.0 TCP 66 33963 > ldap [ACK] Seq=1 Ack=1 Win=14624 Len=0 TSval=537106777 TSecr=0 3427.020562 10.0.31.235 -> 10.0.10.0 LDAP 122 bindRequest(1) "CN=stampa,CN=Users,DC=galliera,DC=it" simple 3427.021894 10.0.31.235 -> 10.0.10.0 TCP 74 33964 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=537106778 TSecr=0 WS=32 3427.022474 10.0.10.0 -> 10.0.31.235 LDAP 88 bindResponse(1) success 3427.022498 10.0.31.235 -> 10.0.10.0 TCP 66 33963 > ldap [ACK] Seq=57 Ack=23 Win=14624 Len=0 TSval=537106778 TSecr=33551087 3427.022805 10.0.10.0 -> 10.0.31.235 TCP 78 ldap > 33964 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1 3427.022868 10.0.31.235 -> 10.0.10.0 TCP 66 33964 > ldap [ACK] Seq=1 Ack=1 Win=14624 Len=0 TSval=537106778 TSecr=0 3427.022996 10.0.31.235 -> 10.0.10.0 LDAP 122 bindRequest(1) "CN=stampa,CN=Users,DC=galliera,DC=it" simple 3427.024537 10.0.10.0 -> 10.0.31.235 LDAP 88 bindResponse(1) success 3427.024574 10.0.31.235 -> 10.0.10.0 TCP 66 33964 > ldap [ACK] Seq=57 Ack=23 Win=14624 Len=0 TSval=537106778 TSecr=33551087 3427.024884 10.0.31.235 -> 10.0.10.0 LDAP 176 searchRequest(2) "DC=galliera,DC=it" wholeSubtree 3427.028078 10.0.10.0 -> 10.0.31.235 LDAP 391 searchResEntry(2) "CN=Simone Ferretti,OU=S.S.C. Area sistemistica,OU=S.C. S.I.e.T. - Servizi informatici e telecomunicazioni,OU=Dipartimento di Staff,OU=Direzione generale,DC=galliera,DC=it" | searchResRef(2) | searchResDone(2) success 3427.028426 10.0.31.235 -> 10.0.5.0 TCP 74 43077 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=537106779 TSecr=0 WS=32 3427.028882 10.0.5.0 -> 10.0.31.235 TCP 78 ldap > 43077 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1 3427.028932 10.0.31.235 -> 10.0.5.0 TCP 66 43077 > ldap [ACK] Seq=1 Ack=1 Win=14624 Len=0 TSval=537106780 TSecr=0 3427.029091 10.0.31.235 -> 10.0.5.0 LDAP 80 bindRequest(4) "<ROOT>" simple 3427.029816 10.0.5.0 -> 10.0.31.235 LDAP 88 bindResponse(4) success 3427.029832 10.0.31.235 -> 10.0.5.0 TCP 66 43077 > ldap [ACK] Seq=15 Ack=23 Win=14624 Len=0 TSval=537106780 TSecr=36074586 3427.030001 10.0.31.235 -> 10.0.5.0 LDAP 193 searchRequest(3) "CN=Configuration,DC=galliera,DC=it" wholeSubtree 3427.030980 10.0.5.0 -> 10.0.31.235 LDAP 168 searchResRef(3) | searchResDone(3) success 3427.064639 10.0.31.235 -> 10.0.10.0 TCP 66 33964 > ldap [ACK] Seq=167 Ack=348 Win=15680 Len=0 TSval=537106789 TSecr=33551087 3427.068791 10.0.31.235 -> 10.0.5.0 TCP 66 43077 > ldap [ACK] Seq=142 Ack=125 Win=14624 Len=0 TSval=537106790 TSecr=36074586 Is there anyone that have some ideas of what is going on? My dovecot version is 2.2.9 (5c170e0786f3) running on a debian wheezy 3.2.0-4-amd64. My Active Directory server is a windows server 2003 R2. Follows my doveconf -n: # 2.2.9 (5c170e0786f3): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_cache_size = 8 k auth_debug = yes auth_master_user_separator = * auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@+ auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 5 hostname = dovecot.galliera.it last_valid_uid = 100000 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = mail mail_debug = yes mail_gid = mail mail_location = maildir:/home/%d/%n/Maildir mail_privileged_group = mail mail_uid = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:/var/mail/shared/istituzionali:INDEX=/var/mail/shared/istituzionali/INDEX/%n prefix = Avvisi al personale. subscriptions = yes type = public } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile fts = squat fts_squat = partial=4 full=10 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = from subject uid box msgid size sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)galliera.it protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = mail } unix_listener auth-userdb { mode = 0777 user = mail } user = root } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem syslog_facility = local5 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 30 mail_plugins = fts fts_squat mail_log zlib acl imap_acl notify } protocol pop3 { pop3_uidl_format = %v.%u } Thanks in advance and ciao! Simone

1 0

[Dovecot] Expire plugin and databases
by Mauricio Tavares 06 Dec '13

06 Dec '13

Dumb question: do I need to have a database to run the expire plugin?

2 1

[Dovecot] zlib config questions
by Terry Barnum 05 Dec '13

05 Dec '13

After nearly running out of space I swapped in larger disks and then saw the recent threads about zlib compression. Unfortunately I'm still confused after reading <http://wiki2.dovecot.org/Plugins/Zlib>. In order to compress new email being stored do I only need to change 10-mail.conf to this: mail_plugins = $mail_plugins zlib and 90-plugin.conf to this: plugin { zlib_save_level = 6 zlib_save = gz ... Or do I need to instead (or also?) add it to the list of plugins in 20-imap.conf? A simple 'sudo doveadm reload' to enable? Once enabled, is there an indication in the logs that compression is taking place? Do new mail files have a suffix like .Z to indicate they've been compressed? Any gotchas to be aware of? I'm running macports dovecot 2.2.5. Thanks for any help. -Terry Terry Barnum digital OutPost http://www.dop.com

1 0

[Dovecot] Syslog debug messages
by Bruno Galindro da Costa 05 Dec '13

05 Dec '13

Is there a way to configure dovecot to register in syslog the debug messages enabled by mail_debug=yes as a debug not as information? I need this because I want to send this kind of information only to a remote server. I've configured rsyslog to do this, but dovecot is registering those debug messages as information not as debug (as I expected). This is my rsyslog config: mail.info;\ mail.warning;\ mail.err;\ mail.crit -/var/log/mail.log mail.* :omrelp:192.168.2.162:2514 root@imap:~# dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf Warning: fd limit 1024 is lower than what Dovecot can use under full load (more than 4748). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Linux 2.6.32-44-server x86_64 Ubuntu 10.04.4 LTS xfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve pop3s listen(default): *:143,[::]:143 listen(imap): *:143,[::]:143 listen(pop3): * listen(managesieve): * ssl_listen(default): *:993,[::]:993 ssl_listen(imap): *:993,[::]:993 ssl_listen(pop3): *:2221,[::]:2221 ssl_listen(managesieve): ssl_ca_file(default): /etc/dovecot/ca.crt ssl_ca_file(imap): /etc/dovecot/ca.crt ssl_ca_file(pop3): /etc/dovecot/ca.crt ssl_ca_file(managesieve): ssl_cert_file(default): /etc/dovecot/ufsc.br.crt ssl_cert_file(imap): /etc/dovecot/ufsc.br.crt ssl_cert_file(pop3): /etc/dovecot/ufsc.br.crt ssl_cert_file(managesieve): /etc/ssl/certs/dovecot.pem ssl_key_file(default): /etc/dovecot/ufsc.br.key ssl_key_file(imap): /etc/dovecot/ufsc.br.key ssl_key_file(pop3): /etc/dovecot/ufsc.br.key ssl_key_file(managesieve): /etc/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_process_per_connection: no login_process_size: 256 login_max_processes_count: 900 login_max_connections: 1024 max_mail_processes: 2048 mail_max_userip_connections(default): 2048 mail_max_userip_connections(imap): 2048 mail_max_userip_connections(pop3): 10 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_uid: vmail mail_gid: mail mail_location: maildir:/var/mail/mailboxes/%d/%n:INDEX=/var/mail/indexes/%d/%n mail_debug: yes fsync_disable(default): yes fsync_disable(imap): yes fsync_disable(pop3): yes fsync_disable(managesieve): no mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota autocreate trash zlib mail_plugins(imap): quota imap_quota autocreate trash zlib mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_implementation_string(default): dovecot managesieve_implementation_string(imap): dovecot managesieve_implementation_string(pop3): dovecot managesieve_implementation_string(managesieve): Cyrus timsieved v2.2.13 lda: fsync_disable: no postmaster_address: xxx(a)xxx.xxx.xx mail_plugins: quota sieve auth_socket_path: /var/run/dovecot/auth-master auth default: cache_size: 1024 cache_ttl: 600 cache_negative_ttl: 60 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@~ username_format: %Lu passdb: driver: checkpassword args: /etc/dovecot/passdb.v3.1.sh userdb: driver: prefetch userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-userdb.conf socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: mail plugin: quota_exceeded_message: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx. quota: maildir:DefaultQuota quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 %u quota_warning2: storage=90%% /usr/local/bin/quota-warning.sh 90 %u trash: /etc/dovecot/dovecot-trash.conf sieve: /var/mail/sieve_scripts/%d/%n/.dovecot.sieve sieve_dir: /var/mail/sieve_scripts/%d/%n/sieve mail_log_events: delete expunge copy mailbox_delete mail_log_fields: uid box msgid from subject size vsize autocreate: Spam autosubscribe: Spam -- Att. Bruno Galindro da Costa

2 1

[Dovecot] FTS solr issue with second private namespace
by Andreas Oster 05 Dec '13

05 Dec '13

Hi all, I have just stumbled over an issue with the FTS plugin of dovecot. For our primary namespace, INBOX and its subfolders, searching works without any problems but in a second namespace, which I have created for old/archived mails, searching of the mail text/body does not work. I can see the search request in the tomcat log but no result is created and the mail client (Thunderbird) keeps displaying the serach message without returning any results. Tomcat6 catalina.out: Dez 02, 2013 11:58:00 AM org.apache.solr.core.SolrCore execute INFO: [] webapp=/solr path=/select params={fl=uid,score&sort=uid+asc&q=body:"schiller"&fq=%2Bbox:1b4de60d0a6287522d0c00004424cda4+%2Buser:"testuser"&rows=2} hits=0 status=0 QTime=1 I am currently using Dovecot 2.2.9 and do not have any special FTS config: mail_plugins = quota mailbox_alias fts fts_solr plugin { fts = solr fts_solr = break-imap-search url=http://localhost:8080/solr/ fts_autoindex = yes } Thank you for your kind help best regards Andreas

1 2

[Dovecot] Full text search improvements
by Timo Sirainen 05 Dec '13

05 Dec '13

FTS indexing is something I hear quite often nowadays. I’ve added some hacks to make it work better for some installations, but it’s about time to think about the whole design and how it could be improved for everyone in future. Here are some of my initial thoughts. Currently Dovecot supports 3 full text search engines: Solr, CLucene and Dovecot Squat. CLucene plugin has various features built in, which should have been built in a generic way to work with all the engines (although Solr has most of those already built-in). Squat was abandoned a few years ago in favor of Solr/CLucene, but perhaps it could be brought back to life, since it looks like its index sizes could be smaller than Lucene's. Here's a list of things that should be added to generic Dovecot FTS code to improve all the backends: 1. Support for multiple languages. Use textcat while indexing to guess the language of the indexed data. (Perhaps run it separately for each paragraph to handle multi-language mails? Or at least many emails begin/end with different language than the text in the middle, e.g. "Foo Bar wrote:" is often in various languages.) Index the data using the detected language's stemming and other features. Keep track of which languages have been used in the index, and when searching stem the search words to all the used languages. Since each added language requires additional searches and there's the possibility of wrong detection, the list of allowed languages could be configurable. See also http://ntextcat.codeplex.com/ or at least change textcat to use UTF8. 2. Word stemming. This can be done for many languages with Snowball library. Solr has also implemented several other languages, perhaps its code can be somehow automatically translated to C(++) for use with Dovecot? 3. Don't index language-specific stopwords. We can get the word lists from e.g. Solr. 4. Try to detect compound words and index each part separately for languages that use them. http://wiki.apache.org/solr/LanguageAnalysis#Decompounding suggests two possible ways to do it. 5. Normalize words (e.g. drop diacritics). libicu can be used for this. 6. Drop (Unicode) characters that don't belong to the language? Or especially don't index most of the weird Unicode characters. This would avoid filling the index with unnecessary garbage. 7. Don't index non-text data? For example if there is large block of base64 data or something else that definitely doesn't look like text, it's pretty useless to index it. Then again, we do want to index all kinds of IDs that someone might want to search. This could be a bit difficult to implement well. 8. Index attachments separately, so it would be possible to search only attachments. (Should "SEARCH BODY word1 BODY word2" return matches if word1 and word2 are in different attachments?) 9. Attachments can be translated to indexable UTF-8 text already with fts_decoder setting by doing it via a conversion script. This could also support Apache Tika server directly. 10. It should be configurable which fields are indexed. Body and header would always be separately indexed. Optionally there could be also at least: attachments, From, To, Cc, Bcc and Subject. The From/To/Cc/Bcc could also be indexed together in one "addresses" field. The more fields there are, the larger the index, but better/faster search results. 11. Each indexed mail should have metadata: Mailbox GUID, mail UID and the language the mail was indexed with. For attachments there should also be the MIME part number. When matching results, drop results if returned language doesn't match the query language. Squat ----- Currently Squat index consists of a trie containing all the words and pointer to a file listing all the message UIDs that contain them. Each node in the trie has a pointer to the UIDs, so e.g. with "abc" the "a" node will contain UIDs of all mails that contain the "a" letter (e.g. 1,3-5,10). "ab" node will contain mails that have the "ab" substring. Since the "ab" is a subset of "a", the "ab" won't contain UIDs directly but instead it contains indexes to the "a" list to get a better compression (e.g. UID 3-5,10 -> 2-4 indexes in the "1,3-5,10" list). The "abc" node then similarly refers to the "ab" node's indexes. It's configurable how long words Squat will index. Also substring matching is configurable. By default both are 4 letters, so words longer than 4 letters will be split to 4 letter pieces which are indexed (e.g. "dovecot" -> "dove", "ovec", "veco", "ecot"). When searching these pieces are looked up and the results are merged. It's pretty pointless to do a search for 1-2 letter substrings. Most likely the user wants to find 1-2 letter word instead. Perhaps this is true also for 3 letters? The Squat index could be changed to only add results for the first 1-2 (or 1-3?) letters only for full words, not to word prefixes. This of course would mean that the "ab" referring to "a" UID list would no longer work for the first nodes. Substring searching likely wouldn't work very nicely for stemmed words. So Squat should probably index the full stemmed word and then also index the unstemmed word in the small 4 letter pieces. It should be possible to also disable substring searching entirely. Squat already attempts to reduce disk space by encoding the common characters with less bits than other characters. This is hardcoded for English language though. Each index compression could analyze the most common letters and dynamically use those. Perhaps different languages could even use separate Squat index files to get the most advantage of this? Although if there are a lot of languages it's a bit annoying to have many different index files. Squat currently indexes each Unicode character as one letter, so there can be quite a huge number of different 4 letter words. This substring indexing should probably be disabled for words that contain letters not used by the current language. The UID lists are not compressed very efficiently. See http://www2009.eprints.org/41/1/p401.pdf for alternatives. There is currently one Squat index per mailbox. There should be one per user. This requires adding a separate ID -> { mailbox GUID, UID, language, mime part } mapping file. Squat indexes should be updated in two parts. For old mails there are the large trie+uidlist base files in optimized format. For new mails there are small trie+uidlist files in a format where they are just appended to. When the trie or uidlist becomes large enough, it's first internally sorted/optimized, and then merged with the base files by recreating new optimized base files. This fixes the scalability problem with current large Squat indexes where with large unsorted indexes the sorting could have taken forever. Since substring searches in Squat produce only "maybe matches" UID lists, the mails still need to be opened and searched through. This step could probably also do the same language detection + stemming as is done during indexing to improve the search results. (And this feature could be enabled even if no FTS index is enabled.)

6 9

[Dovecot] Postfix & Dovecot Sieve Advice
by craig.dovecot＠noboost.org 05 Dec '13

05 Dec '13

Hi, I've configured up Dovecot Pigeonhole with Postfix for delivery (all working perfectly). Seeing as I'm about to use this in production, I'm just after any advice or tips people might have to safeguard email delivery from Postfix to Dovecot via LMTP? Spec: postfix-2.6.6-2.2.el6_1.x86_64 dovecot-2.0.9-5.el6.x86_64 dovecot-pigeonhole-2.0.9-5.el6.x86_64 Postfix: virtual_transport = lmtp:unix:private/dovecot-lmtp Dovecot (key settings): vim /etc/dovecot/conf.d/10-auth.conf auth_username_format = %Ln vim /etc/dovecot/conf.d/10-master.conf service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } vim /etc/dovecot/conf.d/20-lmtp.conf protocol lmtp { mail_plugins = $mail_plugins sieve } vim /etc/dovecot/conf.d/90-sieve.conf plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_vacation_min_period = 1h sieve_vacation_default_period = 10d sieve_vacation_max_period = 30d } Regards, Craig

1 0

[Dovecot] BUG: Authentication client sent unknown handshake command
by Emmanuel Dreyfus 04 Dec '13

04 Dec '13

Hi After upgrading the kernel, everything is fine, except dovecot authentication. I get this trange thing (data after REQUEST? changed just in case it contains anything sensitive): Nov 29 16:56:01 volanges dovecot: auth: Error: BUG: Authentication client sent unknown handshake command: REQUEST?6970356762?616?6?235264ef69dbd1665538af54d12fdaea?session_pid=453?req... Nov 29 16:56:01 volanges dovecot: imap: Error: Authentication server didn't send valid SPID as expected: MECH PLAIN plaintext Nov 29 16:56:01 volanges dovecot: imap: Error: Disconnected from auth server, aborting (client-pid=161 client-id=1) Nov 29 16:56:01 volanges dovecot: imap-login: Internal login failure (pid=161 id=1) (internal failure, 1 successful auths): user=<jdoe>, method=PLAIN, rip=192.0.2.251, lip=192.0.2.10, mpid=453, TLS, TLSv1 with cipher AES128-SHA (128/128 bits) Reverting to the previous kernel fixed the problem, but I have not been able to spot what the problem was. Any idea? -- Emmanuel Dreyfus manu(a)netbsd.org

3 5

[Dovecot] Ubuntu packages and broken link in docs
by Alan McGinlay - SICS 04 Dec '13

04 Dec '13

Hi, Two things: 1. Does anyone know of a good PPA with updated packages of Dovecot for Ubuntu? "For the latest Dovecot for latest Ubuntu LTS see Xiaoka APT Repository. (Outdated. Could someone provide a ppa for latest stable Dovecot, please?)" 2. On the http://wiki2.dovecot.org/PrebuiltBinaries#Ubuntu page there is a link to a supposedly outdated PPA, the ppa page now redirects to an ad for the guys services so should probably be removed. /Alan

2 1

[Dovecot] Different settings for SSL/non-SSL protocols
by Алексей Прокопчук 04 Dec '13

04 Dec '13

Good time of the day! It is possible to setup dovecot with different requirements for SSL and non-SSL protocols? What would I like to do: pop3/imap non-SSL = allowed plain text authentication. pop3/imap with SSL = allowed plain text authentication with required valid SSL certificates. I need to allow access from any IP address for first group of users, which have valid SSL certificates. And allow access from only local IP addresses for second group of users which doesn't have SSL certificates at all. I tried to setup dovecot for such task. SSL and non-SSL pop3/imap works together fine, but without require valid SSL certificates. If I set auth_ssl_require_client_cert = yes, non-SSL pop3/imap refuses authentication without valid SSL certificate. I tried to use different sections for protocol pop3 {} and protocol pop3s {} (and imap/imaps) but this seems doesn't work. Is there any way to solve this? Thanks for attention, with best regards, Alexey Prokopchuk (AP8686-RIPE)

1 2

[Dovecot] Complete migration from Cyrus on remote server
by Alan McGinlay - SICS 04 Dec '13

04 Dec '13

Hi All! I am working on a complete migration from an old solaris machine running Cyrus IMAP v2.3.14 and wish to migrate all users to a new ubuntu vm running Dovecot 2.0.19. What I have so far is a fully functional dovecot installation with LDAP / Dovecot SASL auth using Maildir++. My plan is to use Perdition IMAP proxy on a third host and migrate users a few at a time (see attached picture of my whiteboard). The proxy is in place and already used by webmail clients to connect to the old server, shortly I will change the dns to point smtp.domain.com and imap.domain.com etc to the proxy instead of the old server but I haven't finished testing yet. Once that is done it is a simple matter of changing the proxy configuration per user to make them hit the new server instead. The problem I am having with this is that I am using Imapsync (http://imapsync.lamiral.info) to perform the initial synchronization (i have scripted it to maintain sync every 10 minutes with the addtion of "--maxage 1" option) using the following command line options: /usr/local/bin/imapsync --noreleasecheck --useheader ALL --delete2 --expunge2 --tmpdir /var/vmail/cache --subscribe --subscribed --tls1 --tls2 --usecache --nofoldersizes --nocheckmessageexists --host1 oldserver.domain.com --authuser1 adminuser --user1 testuser(a)domain.com --authmech1 PLAIN --password1 <HIDDEN> --host2 newserver.domain.com --authuser2 adminuser --user2 testuser(a)domain.com --authmech2 PLAIN --password2 <HIDDEN> All email is copied over and stored in dovecot as you would expect. Then I switch the user to the new server on the imapproxy and restart the client (thunderbird or whatever). This is where all email headers are downloaded again as if they were new! There are *Many* users here who would complain intensely if this happened and I was really wanting the migration to be as invisible as possible. Is there a way to do what I have described without the clients redownloading headers / full messages? I have been working on this for some time now but have hit a roadblock and don't know where to turn, any help would be really appreciated! Notes: * The proxy is not used during imapsync. * Some users have 20 years worth of mail running into 10's of GB * I have looked at dsync but the docs state that the mailbox should not be accessed during sync, this is not possible for me (it doesn't say why this is the case however)

4 7

[Dovecot] file descriptor errors
by Christian Rößner 04 Dec '13

04 Dec '13

Hi, I use dovecot 2.2.9 on Gentoo Linux and I get lots of these erors in my log file: Dec 4 08:53:37 mx dovecot: auth: Error: close failed in file object destructor: Dec 4 08:53:37 mx dovecot: auth: Error: IOError: [Errno 9] Bad file descriptor What could cause these error messages? My mailboxes are stored on an ext4 filesystem: /dev/vdb1 on /srv/mail type ext4 (rw,noatime) doveconf -n: # OS: Linux 3.11.2-hardened x86_64 Gentoo Base System release 2.2 ext4 auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_access_groups = mail mail_attachment_dir = /srv/mail/copymail/attachments mail_gid = mail mail_location = maildir:/srv/mail/virtual/%d/%n mail_plugins = quota acl zlib mail_log notify mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk-E-Mail { auto = subscribe special_use = \Junk } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. } passdb { args = /usr/local/sbin/ispcp-decrypt.py driver = checkpassword } plugin { acl = vfile acl_shared_dict = file:/srv/mail/virtual/shared-mailboxes.db quota = dict:User quota::file:/srv/mail/virtual/%d/%n/dovecot-quota quota_rule = *:storage=300M:messages=20000 quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } postmaster_address = postmaster(a)deltaweb.de protocols = imap pop3 lmtp sieve service auth-worker { extra_groups = ssl-cert unix_listener auth-worker { mode = 0600 user = vmail } user = vmail } service auth { extra_groups = ssl-cert unix_listener /var/spool/postfix.relay/private/auth { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0660 user = vmail } user = vmail } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = ::1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/ssl/certs/mx_deltaweb_de.crt ssl_key = </etc/ssl/private/mx_deltaweb_de.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota acl zlib mail_log notify sieve } protocol lda { mail_plugins = quota acl zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota acl zlib mail_log notify imap_quota imap_acl imap_zlib } Thanks in advance -Christian Rößner -- Bachelor of Science Informatik Erlenwiese 14, 36304 Alsfeld T: +49 6631 78823400, F: +49 6631 78823409, M: +49 176 93118939 USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com

1 0

[Dovecot] Possible managesieve bug.
by Pedro R. Benito da Rocha 04 Dec '13

04 Dec '13

Hi, I'm migrating from from 1.1 to 2.2. Currently I am doing test to ensure I'm doing it right. On the old server the managesieve config says: sieve = /correo/%d/%u/dovecot.sieve sieve_dir = /correo/%d/%u/Sieve and is working fine. But the same config on the new server is not working. I have activated verbose logging and this is the result: Dec 3 09:59:41 imap-01 dovecot: managesieve-login: Login: user=<xxxx(a)ubu.es>, method=LOGIN, rip=10.145.4.65, lip=10.145.4.45, mpid=29855, session=<T7hfhJ3s+QAKkQRB> Dec 3 09:59:41 imap-01 dovecot: managesieve(xxxx(a)ubu.es): Error: sieve-storage: Performing readlink() on active sieve symlink '/correo/ubu.es/xxxx(a)ubu.es/dovecot.sieve' failed: Permission denied Dec 3 09:59:41 imap-01 dovecot: managesieve(xxxx(a)ubu.es): Error: sieve-storage: Failed to stat active sieve script symlink (/correo/ubu.es/xxxx(a)ubu.es/dovecot.sieve) Permission denied. Dec 3 09:59:41 imap-01 dovecot: managesieve(xxxx(a)ubu.es): Disconnected: Logged out bytes=120/331 Dec 3 09:59:51 imap-01 dovecot: managesieve-login: Login: user=<pedro(a)ubu.es>, method=LOGIN, rip=10.145.4.65, lip=10.145.4.45, mpid=29858, session=<6bDthJ3s+wAKkQRB> Dec 3 09:59:51 imap-01 dovecot: managesieve(xxxx(a)ubu.es): Error: sieve-storage: Performing readlink() on active sieve symlink '/correo/ubu.es/xxxx(a)ubu.es/dovecot.sieve' failed: Permission denied Dec 3 09:59:51 imap-01 dovecot: managesieve(xxxx(a)ubu.es): Disconnected: Logged out bytes=44/199 Permissions are ok. I modified the permissions using 0777 but the error message is the same. I have made other tests to see if I can find the problem, and I made it work if I delete "%d" from config, this way: sieve = /correo/%u/dovecot.sieve sieve_dir = /correo/%u/Sieve I have copied all filters preserving permissions, and with the same file permissions is working. If I add the '%d' to the path error comes again. Can anyone tell me if this is the normal behavior or is a bug? Thanks, Pedro -- ------------------------------------------------------------------------ Pedro R. Benito da Rocha - Servicio de Informatica - Area de Sistemas Universidad de Burgos (España) E-mail: pedro(a)ubu.es Tel: +34 947258845 ------------------------------------------------------------------------

2 2

[Dovecot] disconnecting (disconnected by server)
by Patrick Westenberg 03 Dec '13

03 Dec '13

Hi all, I just recognized a lot of log entries like this on my proxy: Dec 03 13:50:54 imap-login: Info: proxy(mail(a)example.com): disconnecting 1.2.3.4 (Disconnected by server): user=<mail(a)example.com>, method=PLAIN, rip=1.2.3.4, lip=2.4.6.8, TLS, session=<qk02v6DsJwBTlUQX> There are no similar entries on the backends. What does this mean? Something I have to worry about? Regards Patrick # 2.2.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_mechanisms = plain login default_process_limit = 150 director_mail_servers = 172.17.1.2 172.17.1.1 director_servers = 172.17.1.3 172.17.1.4 director_user_expire = 5 mins lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.3 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 172.17.1.3 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/certs/wildcard.example.com.crt ssl_key = </etc/ssl/private/wildcard.example.com.key protocol !smtp { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } } protocol smtp { passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } } protocol lmtp { auth_socket_path = director-userdb } # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login disable_plaintext_auth = no dotlock_use_excl = no hostname = mb01.example.com listen = 172.17.1.1 log_path = /var/log/dovecot.log login_trusted_networks = 172.17.1.3 172.17.1.4 mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.com protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { mode = 0666 user = vmail } } service lmtp { inet_listener lmtp { address = 172.17.1.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } ssl_cert = </etc/ssl/certs/mb01.example.com.crt ssl_key = </etc/ssl/private/mb01.example.com.key submission_host = mf01.wk-serv.net userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = quota imap_quota }

2 5

[Dovecot] Error in imap_address_arg_append
by Potapov Sergey 03 Dec '13

03 Dec '13

Hi Function imap_envelope_parse return incorrect result for addresses with groups due to error in imap_address_arg_append because of with ", " is added after group name and before first mailbox. Patch for dovecot v2.1 in attach.

2 1

[Dovecot] Gettings mails recently moved to a folder
by Florian Lindner 03 Dec '13

03 Dec '13

Hello, some spam training tools learn the same message over and over again. Since I want to use a daily cronjob to train messages and I do not want to have the same messages trained multiple times, I need to way to get new messages in a folder. Is there a (consolish) way to get a list of messages that were recently moved to a folder? dovecot does not modify mtime, according to RFC 3501. Thanks, Florian

5 9

[Dovecot] imap-login hangs after receiving revoked SSL certificate
by Алексей Прокопчук 03 Dec '13

03 Dec '13

Good time of the day! My English is not very good, excuse me if I said something wrong. I use dovecot-2.1.16 on Gentoo Linux amd64. I need to setup dovecot (imap and pop3) for SSL and non-SSL connection simultaneously. For SSL connections client must submit a valid SSL certificate. Now SSL part of dovecot.conf looks like this: ----------------- ssl = yes ssl_cert = </etc/ssl/dovecot/dovecot.pem ssl_key = </etc/ssl/dovecot/dovecot.pem ssl_ca = </etc/ssl/ca/ca.pem ssl_verify_client_cert = yes auth_ssl_require_client_cert = yes protocol !smtp { auth_ssl_require_client_cert = yes } ----------------- All works fine with valid certificates. But if I submit revoked certificate, dovecot doesn't send error or success messages to mail client, process 'imap-login' eats 100% CPU and completely hangs. Only SIGKILL can terminate it. When dovecot receives revoked certificate, following messages appears in the log: ------------------ Dec 2 13:50:26 mail dovecot: imap-login: Invalid certificate: certificate revoked: /O=AP inc./OU=Admins/CN=Alexey Prokopchuk/UID=alexpro Dec 2 13:50:26 mail dovecot: imap-login: Invalid certificate: Different CRL scope: /CN=AP inc. root certification authority/O=AP inc./C=UA Dec 2 13:50:39 mail last message repeated 17950 times ------------------- If I'm not mistaken, in case of revoked certificate submission, dovecot must simply answer "SSL error" or "permission denied" to client and close connection, but according to log, it tries to check certificate again and again and do it in infinite loop. I can't understand for now - I misconfigured something or it's a bug? Thanks for attention, with best regards, Alexey Prokopchuk (AP8686-RIPE)

2 3

[Dovecot] proxy, userdb and passdb
by Jogi Hofmüller 03 Dec '13

03 Dec '13

Dear all, We are getting closer to the migration of our mailsystem. Now I have a special question. We are successfully using passdb { driver = pam } and that is good. Now, how would I tell dovecot to proxy certain users (the ones not yet migrated) to the old server? My attempts to configure an additional userdb failed since this seems to override the passdb setting. Grateful for any hints! Cheers, -- j.hofmüller Optimism doesn't alter the laws of physics. - Subcommander T'Pol

4 5

[Dovecot] Dove LDA vs Exim LDA
by Kumar Shantanu 02 Dec '13

02 Dec '13

Hello All, I have built up my email server with exim + dovecot + clamv/spamassasin. I am using exim as LDA(local delivery agent). I was reading about using dovecot as LDA but I couldn't find why should I use it? Now, I am looking expert advice on "Why should I use dovecot LDA" ? Is there any benefit in terms of functionality or performance ? Any advice/suggestion/feedbacks welcome. Thanks Shantanu

5 5

[Dovecot] "[CANNOT] Mailbox GUIDs are not permanent without index files" when trying to delete folder
by Nissim Etrog 02 Dec '13

02 Dec '13

Hello, Dovecot 2.0.9 on Red Hat Enterprise Linux Server release 6.4 (Santiago) location is set to : mail_location = mbox:~/mail:INBOX=/var/mail/%u:INDEX=MEMORY Index is set to memory due to permissions problems when using disk index. Everything works, even rename folder, but when trying to delete folder, using any mail client, it fails with: "[CANNOT] Mailbox GUIDs are not permanent without index files". Why ? Regards,Nissim Etrog

1 0

[Dovecot] doveadm table formatter: hidden titles may cause misaligned headers
by Julian Reich 02 Dec '13

02 Dec '13

Hello, I recently noticed a small bug in the doveadm table formatter: hidden titles may cause the headers to be misaligned. The behavior in question was introduced by commit <http://hg.dovecot.org/dovecot-2.2/rev/210282ae46e1> and doveadm -f table quota get -A may be used to reproduce it. Most simple patch attached: it simply restores the old behavior, to some extent. Actually hiding those titles may be desired. Regards, Julian Reich

1 0

[Dovecot] dovecot-antispam plugin problem with multiple messages
by Richard Platel 29 Nov '13

29 Nov '13

Hi With dovecot 2.2.5, and dovecot-antispam built from a recent HEAD pull, when copying multiple messages to or from a Spam folder, the plugin sends multiple copies of the first message to the backend. I've tried this with the pipe and spool2dir backends. For example with the spool2dir backend, via IMAP doing A COPY 1:3 Spam yields 3 copies of message id 1 in the dir: dev:imap-8.1 rplatel@imap01:/var/run/dovecot_as_tmp$ sudo -u mail md5sum * 28ad0a215eb7ecbd3a814a8a334d85bf 00000000001385586164-rplatel(a)ff-dev.com-00001s 28ad0a215eb7ecbd3a814a8a334d85bf 00000000001385586164-rplatel(a)ff-dev.com-00002s 28ad0a215eb7ecbd3a814a8a334d85bf 00000000001385586164-rplatel(a)ff-dev.com-00003s I see the same behaviour with the pipe backend, the pipe program is invoked 3 times, but with the same message content.

1 1

[Dovecot] proxy_maybe & director incompatibility
by Trent Lloyd 29 Nov '13

29 Nov '13

Hi Folks, I spent quite some time yesterday understanding how proxy works along with the director. I came to the conclusion that proxy_maybe and director cannot be used together, but this isn’t a true incompatibility so much as caused by the way things are handled and the order they are processed in. The way proxy_maybe works is that it is processed by the auth provider once it gets the response from the passdb, it checks for proxy_maybe and then checks for the ‘host’ parameter and compares it to the local IP (this is always null at that stage, because director won’t add host until later). proxy_maybe is deleted and then if the IPs do not match (i.e. the connection should be proxied) it sets proxy. This result is returned from the auth provider and then piped into director, which adds the relevant ‘host’ parameter if ‘proxy’ is set. The problem here is that because proxy_maybe is processed before director, it is not possible to conditionally proxy when using director — only if host is also returned from passdb. The secondary problem is that director only adds host= if proxy is set (and the auth code generally assumes proxy/proxy_maybe/proxy_always are exclusive settings) — this logic would also need to change. You would also need some logic to add host only if host doesn’t already exist, to handle situations where proxies might come from both passdb and/or director. I am seeking to understand if there is any significant reason proxy_maybe is handled during the auth section, it would seem better to simply always set ‘proxy=yes’, and then optionally have proxy_maybe passed all the way through to the connection stage and then do the local host check there. This would solve my use case, and I cannot imagine what else it would break — but I am no expert on dovecot or other people’s use cases, so I am hoping for feedback from others on this and what else would need to be considered or why this would not work before I spent time trying to implement the change. Thanks, Trent Lloyd w: www.webinabox.net.au

2 1

[Dovecot] Dovecot's brittle configuration syntax
by Kai Hendry 29 Nov '13

29 Nov '13

Hi there, Whilst trying to come up with a minimal configuration for Dovecot: http://dabase.com/blog/Minimal_Dovecot/ I noticed the configuration syntax is a bit admin unfriendly. It's easy to get an infamous Error code 89. Is there any back story to the grammar or language this configuration is in? Kind regards,

2 1

Re: [Dovecot] Dovecot's brittle configuration syntax
by Joseph Tam 29 Nov '13

29 Nov '13

Kai Hendry <hendry(a)dabase.com> wrote: > Whilst trying to come up with a minimal configuration for Dovecot: > http://dabase.com/blog/Minimal_Dovecot/ I think your characterization of the complexity of dovecot configuration by simply counting configuration lines to get it working is off base. It's conceivable to have all the default values work for you and only specify those that differ from defaults (or configure your system to conform to defaults if you want to place the proverbial cart before the horse), but that doesn't make it less complex -- it just hides it. (See doveconf -a if you want to see what you're shorthanding). If you want minimal configuration fuss, you can try uw-imapd. Not a lot of knobs to twist on that thing, but you'll have to accept all its limitations as well. A well chosen set of defaults that works for most people is a good design decision, but I've seen plenty of different and oddball layouts (including the sneakernet post preceding this one) that requires a lot of flexibility, which necessarily requires a lot of configuration to express them. The sample configuration is verbose because it doubles as documentation: you can use it as a starting point and remove the parts you don't need, or start from the documentation and move forward. I agree, though, that the documentation needs an editorial overhaul -- it's a little bewildering to find what you need along with the contextual information. > I noticed the configuration syntax is a bit admin unfriendly. It's easy > to get an infamous Error code 89. > > Is there any back story to the grammar or language this configuration is > in? It appears to me to have grown organically, and maybe will need pruning some day. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] Replication via sneakernet
by David Bishop 29 Nov '13

29 Nov '13

D'oh. Replied to Timo instead of to the list. Apologies! On Thu, Nov 28, 2013 at 1:07 PM, David Bishop <dovecot(a)dpe.lusars.net>wrote: > On Thu, Nov 28, 2013 at 1:02 AM, Timo Sirainen <tss(a)iki.fi> wrote: > >> On 28.11.2013, at 5.17, David Bishop <dovecot(a)dpe.lusars.net> wrote: >> >> > There are trams shuttling back and forth along this road (stopping at >> each >> > station), and adding a small box (such as a weatherproofed Raspberry Pi >> > with a wifi dongle) to transport files up and down the road is pretty >> > simple. >> >> But if you do it this way and you can keep a full copy of the shared mail >> storage on your Raspberry, that would be possible already with dsync I >> think. dsync supports quick incremental updates by keeping track of the >> previous state between the servers. This state is saved in a file, so you >> could keep a different state for each different dsynced server. >> > > Bravo for a solution that doesn't require a code change and doesn't seem > to require directly touching the spools! :) > > Reading the man page, it looks like only mirroring for people who happen > to be checking email at a given place (as well as people who have received > mail and the shared mailboxes) seems like a pretty simple thing to do. > Hurrah! > > Thank you, this is wonderful. > > And more questions... > > If I'm running a virtual mail domain, the user/pass I give is for the > virtual mail user, correct? And, in a virtual mail setup, do I specify > "username" or "username@domain"? > > Is there a window beyond which synchronization becomes more difficult? For > instance, if messages (or metadata updates, like "I deleted this message") > get parked overnight without updating, and in the morning (9 hours later), > the trams (one at a time) pull into range of wifi, there won't be > confusion, right? > >

2 1

[Dovecot] sendmail to postfix-dovecot
by Roger Berger 28 Nov '13

28 Nov '13

Hi, I am a newbie to postfix and dovecot so I hope you can help me. I have an old server running sendmail for many years now. On this server I have about 100 domains and 500 users. The users are named as myuser or myuser.dom. People use pop3 and imap for fetching reading their email. I've setup a new server with postfix and dovecot2 on freebsd and managed to get it all working with virtual users. However, now I found out that I overlooked something; People have to login with username(a)domain.tld<mailto:username@domain.tld> on the new server but only use their username on the old server. This means they all have to change their login credentials, which is not an option. Is it possible to do some scripting before authentication where the username is looked up in the database and the right domain is added to the account? If I understand right it is not possible to use system and virtual users together. Thanks, Roger

5 6

Re: [Dovecot] Permissions problems
by Joseph Tam 28 Nov '13

28 Nov '13

<md.benson(a)gmail.com> wrote: > Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: > rename(/mpool/mail/mark/dovecot.index.log.newlock, > /mpool/mail/mark/dovecot.index.log) failed: Permission denied > ... > This is what the directory currently looks like: > > mark@proliant-1:~$ ls -la /mpool/mail > total 6 > drwxrwxrwx+ 3 root root 3 2013-11-24 17:17 . > drwxr-xr-x+ 5 root root 5 2013-11-24 13:50 .. > drwxrwxrwx+ 5 mark staff 9 2013-11-24 22:20 mark I'm think the "+" is the problem: you have, in the words of the manpage for ls, ... this character is a plus sign (+) character if a non-trivial ACL is associated with the file ... Try ls -alv /mpool/mail I don't use ACLs, so I can help you how to modify them. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Enabling quota
by Andreas Kasenides 27 Nov '13

27 Nov '13

Hello everybody. Sorry if this has been answered before, I just could not find any info. Just point me if that is so. Can somebody please explain why there is no option --with-quota (ot may be --with-fs-quota) for the configure command? As it stands now, at least for the fs back-end the only thing that tells us that Dovecot does not do quotas is after the build/configuration we get dovecot: imap(xxdxx): Error: quotactl(Q_GETQUOTA, csfs9.cs.ucy.ac.cy:/mail) failed: No such file or directory which essentially means that during the build no quota development libraries were found and therefore fs quota will not function. This is rather confusing and the above error does not help much. Note also that "dovecot --build-options" is also silent on this. I suppose other back-ends do not have this requirement since there is no need for such devel libraries. thankx Andreas

3 3

[Dovecot] Dsync on a medium sized site
by Skeffling 27 Nov '13

27 Nov '13

Hello, We're looking at changing our current Dovecot setup to use dsync between 2 servers in different data centres to share the load and to provide resilience. We're quite excited about the possibilities! We receive about 100,000 emails a day, to about 10,000 mailboxes - a mix of IMAP and POP3. We'll use Dovecot Deliver via exim to put mail in to the Maildir. Has dsync been used on sites of this size? -Any tips? Do people tend to sync between 2 servers, or do some people use more than 2? I'm interested in other people's experience before setting up some test boxes. Thanks! Andrew.

1 0

[Dovecot] Failute to compile of pigeonhole-0.4.2 with Dovecot 2.2.7
by Andreas Kasenides 27 Nov '13

27 Nov '13

On trying to compile pigeonhole-0.4.2 on Dovecot 2.2.7 on a CentOS 6.4 machine Linux xxx.xxx 2.6.32-358.14.1.el6.x86_64 #1 SMP Tue Jul 16 23:51:20 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux with ./configure --with-dovecot=/usr/local/lib/dovecot I get the following error: ............ /bin/sh ../../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/local/include/dovecot -I../.. -I../../src/lib-sieve -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-storage.lo -MD -MP -MF .deps/sieve-storage.Tpo -c -o sieve-storage.lo sieve-storage.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I/usr/local/include/dovecot -I../.. -I../../src/lib-sieve -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT sieve-storage.lo -MD -MP -MF .deps/sieve-storage.Tpo -c sieve-storage.c -fPIC -DPIC -o .libs/sieve-storage.o sieve-storage.c: In function 'sieve_storage_inbox_script_attribute_set': sieve-storage.c:702: error: 'MAILBOX_ATTRIBUTE_PREFIX_DOVECOT_PVT_SERVER' undeclared (first use in this function) sieve-storage.c:702: error: (Each undeclared identifier is reported only once sieve-storage.c:702: error: for each function it appears in.) sieve-storage.c:702: error: expected ')' before string constant sieve-storage.c:693: warning: unused parameter 'name' sieve-storage.c: In function 'sieve_storage_inbox_script_attribute_rename': sieve-storage.c:718: error: 'MAILBOX_ATTRIBUTE_PREFIX_DOVECOT_PVT_SERVER' undeclared (first use in this function) sieve-storage.c:718: error: expected ')' before string constant sieve-storage.c:720: error: expected ')' before string constant sieve-storage.c:709: warning: unused parameter 'oldname' sieve-storage.c:709: warning: unused parameter 'newname' sieve-storage.c: In function 'sieve_storage_inbox_script_attribute_unset': sieve-storage.c:738: error: 'MAILBOX_ATTRIBUTE_PREFIX_DOVECOT_PVT_SERVER' undeclared (first use in this function) sieve-storage.c:738: error: expected ')' before string constant sieve-storage.c:729: warning: unused parameter 'name' make[3]: *** [sieve-storage.lo] Error 1 make[3]: Leaving directory `/root/dovecot-2.2-pigeonhole-0.4.2/src/lib-sievestorage' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/root/dovecot-2.2-pigeonhole-0.4.2/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/root/dovecot-2.2-pigeonhole-0.4.2' make: *** [all] Error 2 Dovecot 2.2.7 compiles and runs fine. Any help appreciated. Andreas

2 2

[Dovecot] Permissions problems
by Google 27 Nov '13

27 Nov '13

Hi, I have dovecot 2.0.20 running (its an old version, I know, it came from the stable archive at OpenCSW) with Solaris SMF integration working fine. It enables and disables okay. However, I cantt connect to it, it is allowing the connection, but spewing on permissions: Nov 24 17:34:20 proliant-1 dovecot: [ID 583609 mail.info] master: Dovecot v2.0.20 starting up Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.info] imap-login: Login: user=<mark>, method=PLAIN, rip=192.168.1.69, lip=192.168.1.72, mpid=18816 Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.info] imap-login: Login: user=<mark>, method=PLAIN, rip=192.168.1.69, lip=192.168.1.72, mpid=18818 Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.info] imap-login: Login: user=<mark>, method=PLAIN, rip=192.168.1.69, lip=192.168.1.72, mpid=18820 Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.info] imap(mark): Connection closed bytes=17/340 Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.info] imap-login: Login: user=<mark>, method=PLAIN, rip=192.168.1.69, lip=192.168.1.72, mpid=18822 Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: rename(/mpool/mail/mark/dovecot.index.log.newlock, /mpool/mail/mark/dovecot.index.log) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: rename(/mpool/mail/mark/dovecot-uidlist.tmp, /mpool/mail/mark/dovecot-uidlist) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: unlink(/mpool/mail/mark/dovecot-uidlist.tmp) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: rename(/mpool/mail/mark/dovecot-uidlist.tmp, /mpool/mail/mark/dovecot-uidlist) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: unlink(/mpool/mail/mark/dovecot-uidlist.tmp) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: rename(/mpool/mail/mark/dovecot-uidlist.tmp, /mpool/mail/mark/dovecot-uidlist) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: unlink(/mpool/mail/mark/dovecot-uidlist.tmp) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: rename(/mpool/mail/mark/dovecot-uidlist.tmp, /mpool/mail/mark/dovecot-uidlist) failed: Permission denied Nov 24 17:34:27 proliant-1 dovecot: [ID 583609 mail.error] imap(mark): Error: unlink(/mpool/mail/mark/dovecot-uidlist.tmp) failed: Permission denied If I actually try to copy mail to the inbox of the account it core-dumps and does, and the SMF service drops into maintenance mode which requires re-enabling. The output from doveconf -n (this is changes from the default settings I think?) is: root@proliant-1:~# doveconf -n # 2.0.20: /etc/opt/csw/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc zfs auth_first_valid_uid = 101 disable_plaintext_auth = no first_valid_uid = 101 mail_location = maildir:/mpool/mail/%u passdb { driver = pam } ssl_cert = </opt/csw/ssl/certs/dovecot.pem ssl_key = </opt/csw/ssl/private/dovecot.pem userdb { driver = passwd } The mail_location is in a ZFS filesystem on my RAIDz array. I couldnt think of any other way of creating user-specific folders in the location. As the value suggests, each user gets their own directory on the filesystem for mail. Is this still a ‘safe’ way to do things or would I be better off relocating each user’s ‘home’ directory to the pool somehow? This is what the directory currently looks like: mark@proliant-1:~$ ls -la /mpool/mail total 6 drwxrwxrwx+ 3 root root 3 2013-11-24 17:17 . drwxr-xr-x+ 5 root root 5 2013-11-24 13:50 .. drwxrwxrwx+ 5 mark staff 9 2013-11-24 22:20 mark mark@proliant-1:~$ ls -la /mpool/mail/mark/ total 14 drwxrwxrwx+ 5 mark staff 9 2013-11-24 22:20 . drwxrwxrwx+ 3 root root 3 2013-11-24 17:17 .. drwxrwxrwx+ 2 mark staff 2 2013-11-24 17:17 cur -rwxrwxrwx+ 1 mark staff 51 2013-11-24 22:20 dovecot-uidlist.tmp -rwxrwxrwx+ 1 mark staff 8 2013-11-24 22:20 dovecot-uidvalidity -rwxrwxrwx+ 1 mark staff 0 2013-11-24 17:17 dovecot-uidvalidity.529234ad -rwxrwxrwx+ 1 mark staff 40 2013-11-24 22:20 dovecot.index.log.newlock drwxrwxrwx+ 2 mark staff 2 2013-11-24 17:17 new drwxrwxrwx+ 2 mark staff 3 2013-11-24 17:21 tmp Any ideas? -- Mark Benson http://DECtec.info Twitter: @DECtecInfo HECnet: STAR69::MARK Online Resource & Mailing List for DEC Enthusiasts.

3 2

[Dovecot] Dovecot 2.1.16
by paolo.brocchi 27 Nov '13

27 Nov '13

Hi, i would ask you a question about a particular dovecot configuration. I would like to have in INBOX folder some emails (e.g email with a header key). The same emails i would like to have into the folders, under INBOX, create by users. How can i do? Thanks Paolo

2 4

[Dovecot] Dovecot 2.1 Panic
by Alexandr Sabitov 27 Nov '13

27 Nov '13

Hi, Dovecot 2.1.12 sends panic message when it tries to authenticate some users. Apparently because they use different authentication mechanisms on different email clients at the same time. For example, in debug logs this user uses CRAM-MD5, NTLM and PLAIN in account settings of his email clients. All passwords are stored in plain text (base64) in LDAP. Please advise me what I can tweak to fix this issue ? Nov 27 06:38:36 dovecot-1 auth: Error: ldap(gone(a)in.com.au,201.45.21.151,<qZlhoBnsvQDLLRuX>): Multiple password values not supported Nov 27 06:38:36 dovecot-1 auth: Panic: file passdb-ldap.c: line 95 (ldap_lookup_finish): assertion failed: (password == NULL || scheme != NULL) Nov 27 06:38:36 dovecot-1 auth: Error: ldap(gone(a)in.com.au,201.45.21.151,<qZlhoBnsvQDLLRuX>): Multiple password values not supported Nov 27 06:38:36 dovecot-1 auth: Error: Raw backtrace: /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x485ca) [0x7f90ed51b5ca] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x48616) [0x7f90ed51b616] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f90ed4eeeef] -> dovecot-proxy/auth() [0x42967c] -> dovecot-proxy/auth() [0x428da1] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f90ed5277a6] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f90ed5287df] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f90ed527748] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f90ed513123] -> dovecot-proxy/auth(main+0x376) [0x41bd26] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f90ec2d8c8d] -> dovecot-proxy/auth() [0x40d0f9] Nov 27 06:38:36 dovecot-1 auth: Error: Raw backtrace: /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x485ca) [0x7f90ed51b5ca] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(+0x48616) [0x7f90ed51b616] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f90ed4eeeef] -> dovecot-proxy/auth() [0x42967c] -> dovecot-proxy/auth() [0x428da1] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f90ed5277a6] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f90ed5287df] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f90ed527748] -> /usr/local/dovecot/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f90ed513123] -> dovecot- proxy/auth(main+0x376) [0x41bd26] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f90ec2d8c8d] -> dovecot-proxy/auth() [0x40d0f9] Nov 27 06:38:36 dovecot-1 director: Error: Auth server disconnected unexpectedly Nov 27 06:38:36 dovecot-1 auth: Fatal: master: service(auth): child 26841 killed with signal 6 (core dumps disabled) This is LDAP configuration on one of director servers where clients are authenticated. uris = ldap://ldap-node-2.mynetwork.net, ldap://ldap-node-3.mynetwork.net debug_level = 0 base = ou=email, dc=netregistry, dc=net user_attrs = homeDirectory=home, uidNumber=uid, gidNumber=gid, mailQuotaSize=quota_rule=*:storage=%$ user_filter = (&(objectClass=nrPOPAccount)(uid=%u)) pass_attrs = uid=user, userPassword=password, =proxy=y, =destuser=%u, =pass=Secret456 pass_filter = (&(objectClass=nrPOPAccount)(uid=%u)) default_pass_scheme = PLAIN Regards, Alexandr Sabitov System Administrator

1 0

[Dovecot] Dovecot software testing and release practice
by Andreas Kasenides 26 Nov '13

26 Nov '13

Since this, it seems, was lost in, the now infamous, 2.2.9 thread I would like to resubmit the following proposal for Timo's consideration. Thanks Timo for doing an excellent job. I believe that the following will add further value to Dovecot in the long run. Thankx Andreas ============================ > On 23-11-2013 3:47, Noel Butler wrote: > > On Fri, 2013-11-22 at 10:14 +0100, Ralf Hildebrandt wrote: > * Thomas Leuxner <tlx(a)leuxner.net>: > * Ralf Hildebrandt <Ralf.Hildebrandt(a)charite.de> 2013.11.22 > 09:44: > > Which patch? > > > http://www.dovecot.org/list/dovecot/2013-November/093654.html > Pigeonhole related patches. > Damn. Those are biting me as well :/ > > These would be found if Timo reverted back to issuing RC's before any > official release, to iron out the > niggly off-putting bugs, like most software does, or gets his devs and > a community of official > >testers>each with wildly different > configurations and set ups, ASF have an excellent model that could be > >followed, >bunch of devs and testers who each report on different distros and configs, why? because no >single dev can imagine and test every possible configuration. it might just save dovecot's good name, I >recall a lot of damage was done to that in the circles I'm in when 2.0 was released with patches nearly >every few days and weeks, I know a few ISP's and businesses that went back to courier or Wu's because >major bugs were getting in often, though it has been a lot better since 2.1 series, until this release >that is :) I second this and offer my services for two, three different system configs from Dovecot's plain old simple config with MAILDIR to slightly more complicated configurations with proxying/LDAP/dsync/mySQL etc based on virtualization with KVM. I also propose that upon employing above strategy that Timo should come up with a release cycles (long term, short term) with announced targets. Patches should be released as patches strictly as needed, not releases, and should be announced on a low traffic list like he is already doing with releases. OR something along these lines. I know these are growing pains but essential. Email systems are CRITICAL for most of us. Andreas

1 0

[Dovecot] Replication master/master
by John Smith 26 Nov '13

26 Nov '13

Hello, i need help for this error: "dovecot: replicator: Error: Invalid replicator db record:" my config http://pastebin.com/jVnvyWZM -- Best Regards, Evgeny Senior System Administrator OOO "Vaz Service Hurley"

1 0

[Dovecot] Problem with Thunderbird and mailbox with SPECIAL-USE flag
by Sylvain 26 Nov '13

26 Nov '13

Hi ! I have an old Courier IMAP and in front of it, I have put a proxy cache with the great Dovecot. SOGo webmail is connected to the proxy and works great (very very more fast) but I have a problem with Thunderbird : mailbox with « SPECIAL USE » aren't automatically detected. To make that works, I must : - in Dovecot : define the namespace inbox : « prefix = » and « separator = . » - in Thunderbird : force in the account, the personal namespace to "INBOX." and untick « Allow server to exceed namespace » (sorry : personal translation :D). If I define in the namespace inbox as the dovecot wiki said : « prefix = INBOX. » and « separator = . », TB see a sub-folder INBOX and mailbox with special use aren't automatically detected. :-( I must have forgotten a parameter in my Dovecot configuration but I don't see it.. Can you have a look please ? Here my configuration : # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_debug_passwords = yes auth_mechanisms = plain login disable_plaintext_auth = no first_valid_uid = 100 imapc_host = xxxxxx mail_gid = imapproxy mail_home = /var/local/cache/dovecot/%1Mu/%1.1Mu/%u mail_location = imapc:~/imapc mail_uid = imapproxy namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . type = private } passdb { args = host=xxxxxx port=143 default_fields = userdb_imapc_user=%u userdb_imapc_password=%w driver = imap } protocols = imap ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = prefetch } Sylvain

1 1

[Dovecot] 2.2.9
by Nick Edwards 26 Nov '13

26 Nov '13

Timo (since he is the only one that maters here), In past couple of days I have seen 4 people on IRC bitten by 2.2.8 and pigeonhole bug, none of them are on this list, so like all others who want to download and build them, are unaware of the patch, so, given how wide the userbase is with pigeonhole sieve and dovecot, this would or should be considered a serious bug, so my question is Timo, is it not best to immediately push 2.2.9, or should even more server administrators become frustrated and curse waiting two more months until you have a list you think is best putting out a new release, many of them dont like the constant new releases all the time with only minor things, but with a build failure, thats a serious issue.

15 27

Re: [Dovecot] 2.2.9
by Rick Romero 26 Nov '13

26 Nov '13

Noel, I include you in the gang of three, and I only read half the posts on this list. I have no specific reason to, but it isn't a good association. A decade ago I was active on the Pegasus mail and Mercury lists, and names stood out after a while. Unfortunately on this list, the names stand out for a completely different reason - and its not positive. Just chill, everyone. You never know who's going to interview you in a year. Rick

2 1

[Dovecot] postfix and dovecot - no emails in new folder
by Don Hill 26 Nov '13

26 Nov '13

Hi. I am working on setting up Dovecot v2.0.9 and postfix 2.6.6 on centos 6.4. I have postfix configured with dovecot using virtual users. Everything seems to be working with the exception of no emails being delivered to the Maildir/new folder. If I touch a file into that folder then the file gets delivered to the email client using imap. I can also send email from the client with no problems. In fact if I look at the logs postfix says the email was delivered to the mailbox. postfix/virtual[27270]: 8652F35C38A8: to=<user(a)domain.tld>, relay=virtual, delay=0.11, delays=0.1/0.01/0/0, dsn=2.0.0, status=sent (delivered to mailbox)$ Here is my dovecot -n output *doveconf: Warning: NOTE: You can get a new clean config file with: doveconf -n > dovecot-new.conf** **doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:85: protocol { ssl_listen } has been replaced by service { inet_listener { address } }** **# OS: Linux 2.6.32-042stab079.6 x86_64 CentOS release 6.4 (Final) reiserfs** **auth_mechanisms = plain login** **default_login_user = vmail** **first_valid_gid = 5000** **first_valid_uid = 5000** **listen = *** **mail_access_groups = vmail** **mail_location = maildir:/var/vmail/%d/%u/Maildir** **mbox_write_locks = fcntl** **passdb {** ** args = scheme=SHA1 /etc/dovecot/passwd** ** driver = passwd-file** **}** **protocols = imap pop3** **service auth {** ** unix_listener auth-client {** ** group = postfix** ** mode = 0660** ** user = postfix** ** }** ** user = root** **}** **service imap-login {** ** inet_listener imaps {** ** address = *** ** }** ** process_min_avail = 1** ** user = vmail** **}** **service pop3-login {** ** inet_listener pop3s {** ** address = *** ** }** **}** **ssl_cert = </etc/pki/dovecot/certs/dovecot.pem** **ssl_key = </etc/pki/dovecot/private/dovecot.pem** **userdb {** ** args = uid=5000 gid=5000 home=/var/vmail/%d/%u allow_all_users=yes** ** driver = static** **}* Any thoughts?

4 7

[Dovecot] Invitation to connect on LinkedIn
by Don Hill 26 Nov '13

26 Nov '13

LinkedIn ------------ I'd like to add you to my professional network on LinkedIn. - Don Don Hill Senior Technical Consultant at Lincoln Financial Group Greater Chicago Area Confirm that you know Don Hill: https://www.linkedin.com/e/458g9e-hogi596x-46/isd/18305189187/jxXw8l7X/?hs=… -- You are receiving Invitation to Connect emails. Click to unsubscribe: http://www.linkedin.com/e/458g9e-hogi596x-46/V7LnuFRIQXpYNGb2yum6IE4IQU3ZkP… (c) 2012 LinkedIn Corporation. 2029 Stierlin Ct, Mountain View, CA 94043, USA.

1 0

[Dovecot] error while compiling dovecot 2.2.9
by Luuk 25 Nov '13

25 Nov '13

while doing 'sudo make install', its complaining about the existance of ‘/usr/local/lib/dovecot/auth’ ..... make[3]: Entering directory `/home/luuk/source/dovecot-2.2.9/src/anvil' /usr/bin/mkdir -p '/usr/local/lib/dovecot' /bin/sh ../../libtool --mode=install /usr/bin/install -c anvil '/usr/local/lib/dovecot' libtool: install: /usr/bin/install -c .libs/anvil /usr/local/lib/dovecot/anvil make[3]: Nothing to be done for `install-data-am'. make[3]: Leaving directory `/home/luuk/source/dovecot-2.2.9/src/anvil' make[2]: Leaving directory `/home/luuk/source/dovecot-2.2.9/src/anvil' Making install in auth make[2]: Entering directory `/home/luuk/source/dovecot-2.2.9/src/auth' make[3]: Entering directory `/home/luuk/source/dovecot-2.2.9/src/auth' /usr/bin/mkdir -p '/usr/local/lib/dovecot' /bin/sh ../../libtool --mode=install /usr/bin/install -c auth checkpassword-reply '/usr/local/lib/dovecot' libtool: install: /usr/bin/install -c .libs/auth /usr/local/lib/dovecot/auth libtool: install: /usr/bin/install -c .libs/checkpassword-reply /usr/local/lib/dovecot/checkpassword-reply /usr/bin/mkdir -p '/usr/local/lib/dovecot/auth' /usr/bin/mkdir: cannot create directory ‘/usr/local/lib/dovecot/auth’: File exists make[3]: *** [install-auth_moduleLTLIBRARIES] Error 1 make[3]: Leaving directory `/home/luuk/source/dovecot-2.2.9/src/auth' make[2]: *** [install-am] Error 2 make[2]: Leaving directory `/home/luuk/source/dovecot-2.2.9/src/auth' make[1]: *** [install-recursive] Error 1 make[1]: Leaving directory `/home/luuk/source/dovecot-2.2.9/src' make: *** [install-recursive] Error 1 luuk@asus:~/source/dovecot-2.2.9> any tips on what i did wrong?

4 7

[Dovecot] Zlib plugin - when does it make sense?
by Frerich Raabe 25 Nov '13

25 Nov '13

Hi, I run a small IMAP server for a dozen guys in the office, serving about 55GB of Maildir. I recently became aware of the Zlib plugin ( http://wiki2.dovecot.org/Plugins/Zlib ) and wondered 1. given that there is about zero CPU load on my IMAP server, is enabling the plugin a no-brainer or are there other things (except CPU load) to consider? 2. For enabling the plugin, I suppose you compress all the existing mail just once and then add 'zlib' to mail_plugins in order to have all future incoming mail saved? Any insight by people familiar with the plugin would be much appreciated - thanks! -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

4 5

[Dovecot] prohibit deletion of Junk folder
by Alexandre Ellert 25 Nov '13

25 Nov '13

Hi, I have an issue with a sieve_before rule (the script move incoming email to Junk folder when DMARC=fail and policy is quarantine) because one of my user delete his Junk folder : dovecot: lda(myuser(a)domain.com): Error: sieve: execution of script /etc/dovecot/sieve_before/01-dmarc-fail.sieve failed, but implicit keep was successful: 1 Time(s) dovecot: lda(myuser(a)domain.com): Error: sieve: msgid=<20131124212217.5F346580D49(a)anotherdomain.com>: failed to store into mailbox 'Junk': Mailbox doesn't exist: Junk: 1 Time(s) How can I do to prohibit the deletion of Junk folder by end users ? Tell me if you need 'dovecot -n' and thanks for your advices. Alexandre.

2 2

[Dovecot] Dovecot 2.2.7/2.2.8 failing to call dspam with antispam
by Guillaume Hilt 25 Nov '13

25 Nov '13

Hello again, I'm running Gentoo AMD64 2013 with postfix, mysql, dovecot and dspam : dovecot 2.2.8 (it was working fine with 2.2.6 after doing a chmod 4511 on dspam binary), dspam 3.10.2-r1 and dovecot-antispam-2.0_pre20130429 (recompiled after each dovecot upgrade). I've set dspam to debug, and mail_debug to yes. uid 1001 is user vmail (dovecot is running under vmail) gid 12 is group mail (vmail is a member, with mail,postfix,dspam,dovecot,apache) All the necessary users are trusted in dspam configuration. Here's my plugin settings : antispam_verbose_debug = 1 antispam_debug_target = syslog antispam_backend = dspam antispam_allow_append_to_spam = NO antispam_skip_from_line = NO antispam_spam = Spam antispam_trash = Trash antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --user;%u;--deliver=;--source=error;--signature=%%s antispam_dspam_spam = --class=spam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result When i'm moving an email to the dspam folder, Thunderbird throw me an error : Failed to call dspam (email is dropped in the Spam folder anyway, but a copy stay on my INBOX) ==> /var/log/mail/mail/log <== Nov 25 13:01:04 srv1 dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Nov 25 13:01:04 srv1 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib90_antispam_plugin.so Nov 25 13:01:04 srv1 dovecot: imap: Debug: Added userdb setting: plugin/maildir=shadowprojects.org/ghilt/ Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Effective uid=1001, gid=12, home=/home/vmail/shadowprojects.org/ghilt/ Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/shadowprojects.org/ghilt/.maildir Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: maildir++: root=/home/vmail/shadowprojects.org/ghilt/.maildir, index=, indexpvt=, control=, inbox=/home/vmail/shadowprojects.org/ghilt/.maildir, alt= Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Namespace : Using permissions from /home/vmail/shadowprojects.org/ghilt/.maildir: mode=0770 gid=default Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: dspam error:29764 prefix=imap(ghilt(a)shadowprojects.org): Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: executing /usr/bin/dspam failed: 13 (uid=1001, gid=12) Nov 25 13:01:04 srv1 dovecot: imap: Error: Nov 25 13:01:04 srv1 dovecot: imap: Error: ==> /var/log/dspam/dspam.debug <== 9976: [11/25/2013 13:12:23] DSPAM Instance Startup 9976: [11/25/2013 13:12:23] input args: /usr/bin/dspam --user ghilt(a)shadowprojects.org --deliver= --source=error --signature=89,52900600118151560172939 --class=spam 9976: [11/25/2013 13:12:23] pass-thru args: 9976: [11/25/2013 13:12:23] processing user ghilt(a)shadowprojects.org 9976: [11/25/2013 13:12:23] uid = 1001, euid = 0, gid = 12, egid = 12 9976: [11/25/2013 13:12:23] loading preferences for user ghilt(a)shadowprojects.org ... 9976: [11/25/2013 13:06:08] DSPAM Instance Shutdown. Exit Code: 99 9976: [11/25/2013 13:06:08] process_users() failed on error 9 If i try to call dspam like this, it works : sudo -u vmail /usr/bin/dspam --source=error --class=spam --signature=4be87a9f953248352114216 --client --user vmail Any idea ? Thanks, -- Guillaume Hilt

2 3

[Dovecot] Checkpassword interface for custom password check and home mounting
by Jouko Nikula 25 Nov '13

25 Nov '13

Hi, I'm trying to use the checkpassword interface to do a password check and if the check succeeds I mount the user home directory (including mail) using the users login password and uid. My password check seems to work, but when I add the home directory mounting things seem to stop. Dovecot never logs the result of the password check and nothing happens until the client gets bored and tries again. I added trace to the dovecot's checkpassword-reply and I see that it's really executed, it writes the reply and returns 0 for successful authentication. My dovecot version is 2.1.7. My checkpassword is a setuid binary and the mount is a self made fuse-fs. Any ideas what happens? Are there better ways to do this? Thanks, - Jouko

2 2

[Dovecot] Checkpassword interface for custom password check and home mounting
by Jouko Nikula 25 Nov '13

25 Nov '13

Hi, I'm trying to use the checkpassword interface to do a password check and if the check succeeds I mount the user home directory (including mail) using the users login password and uid. Things work well if I do the mount manually, but when I add the home directory mounting to checkpassword things seem to stop. Dovecot logs the result of the password check, but doesn't send the result to client. Here's the log: Nov 25 10:32:05 jlaptop dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Nov 25 10:32:05 jlaptop dovecot: auth: Debug: auth client connected (pid=27551) Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=8HsMAvjrvgB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39614 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client out: CONT#0111#011 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: CONT<hidden> Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): execute: /usr/sbin/gpgfusemount /usr/lib/dovecot/checkpassword-reply Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): exit_status=0 My dovecot version is 2.1.7. My checkpassword is a setuid binary and the mount is a self made fuse-fs. Any ideas what happens? Are there better ways to do this? Thanks, - Jouko

1 0

[Dovecot] quota warning by script fails
by Jimmy Koerting 24 Nov '13

24 Nov '13

Hello! I looked around all online resources I found, but I'm not able to find my failure. So any help would be welcome! The problem arises with an dovecot 2.2.6 on a 9.2 FreeBSD RELEASE in a jailed environment. I have the following config settings regarding quota (which works in general, but just without calling the script): /etc/dovecot/conf.d/90-quota.conf: ... plugin { quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service quota-warning { executable = script /usr/sbin/quota-warning.sh unix_listener quota-warning { mode = 0666 } } ... script: -rwxrwxrwx 1 root wheel 580 23 Nov 17:14 /usr/sbin/quota-warning.sh* socket: [root@testfbsd ~]# ll /var/run/dovecot/quota-warning srw-rw-rw- 1 root wheel 0 23 Nov 17:06 /var/run/dovecot/quota-warning= Calling the 'quota-warning.sh' script from the console works: Nov 23 17:00:42 testfbsd dovecot: lda(admin(a)testfbsd.XXXXXXXXX.net): msgid=<Ne509YyBcF4pRuYBSyaSfTuUquS9YW@testfbsd>: saved mail to INBOX But when I force dovecot to call it with sending to much mails to the server, the following log comes up (which show, that dovecot at least wants to call the script :"Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet" in my understanding): (no further errors or messages about non existing sockets or wrong perms etc. comes up) ==> /var/log/maillog <== Nov 23 18:19:15 testfbsd sm-mta[75486]: STARTTLS=server, relay= mail-wi0-f196.google.com [209.85.212.196], version=TLSv1/SSLv3, verify=NOT, cipher=RC4-SHA, bits=128/128 Nov 23 18:19:15 testfbsd sm-mta[75486]: rANHJEOP075486: from=< jtxxxxxxxx(a)gmail.com>, size=288072, class=0, nrcpts=1, msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>, proto=ESMTP, daemon=MTA, relay=mail-wi0-f196.google.com [209.85.212.196] ==> /var/log/debug.log <== Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Loading modules from directory: /usr/iports/lib/dovecot Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Module loaded: /usr/iports/lib/dovecot/lib10_quota_plugin.so Nov 23 18:19:17 testfbsd dovecot: auth: Debug: master in: USER 1 admin@testfbxxxxxxxxxxxxnet service=lda Nov 23 18:19:17 testfbsd dovecot: auth: Debug: passwd-file(admin@testfbxxxxxxxxxxxxnet): lookup: user=admin@testfbxxxxxxxxxxxxnet file=/etc/mail/mailuser Nov 23 18:19:17 testfbsd dovecot: auth: Debug: userdb out: USER 1 admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: auth input: admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Effective uid=1000, gid=1000, home=/home/admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=* bytes=2097152 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Trash bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Deleted Messages bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1992294 (95%) messages=0 reverse=no command=quota-warning 95 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1677721 (80%) messages=0 reverse=no command=quota-warning 80 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1048576 (50%) messages=0 reverse=no command=quota-warning 50 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=209715 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/admin@testfbxxxxxxxxxxxxnet/mail Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: maildir++: root=/home/admin@testfbxxxxxxxxxxxxnet/mail, index=, indexpvt=, control=, inbox=/home/admin@testfbxxxxxxxxxxxxnet/mail, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (50%) messages=0 reverse=no command=quota-warning 50 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=0 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Destination address: admin@testfbxxxxxxxxxxxxnet (source: user@hostname) Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace : Using permissions from /home/admin@testfbxxxxxxxxxxxxnet/mail: mode=0700 gid=default Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet ==> /var/log/maillog <== Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>: saved mail to INBOX Nov 23 18:19:18 testfbsd sm-mta[75487]: rANHJEOP075486: to=<admin@testfbxxxxxxxxxxxxnet>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=318436, dsn=2.0.0, stat=Sent So, please advice, what I miss here! Thanks a lot! Kind regards, jimmy

1 1

[Dovecot] dovecot patch: do scanf correctly
by Jann Horn 24 Nov '13

24 Nov '13

As far as I can tell, there are two places in which dovecot does not use scanf properly. This patch should fix that. -------------------------------------------------------------------------------- diff -r 8a3d0426f514 src/lib-dns/dns-lookup.c --- a/src/lib-dns/dns-lookup.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-dns/dns-lookup.c Sun Nov 24 06:30:12 2013 +0100 @@ -102,7 +102,7 @@ } /* first line: <ret> <ip count> */ if (sscanf(line, "%d %u", &result->ret, - &result->ips_count) == 0) + &result->ips_count) != 2) return -1; if (result->ret != 0) { result->error = net_gethosterror(result->ret); diff -r 8a3d0426f514 src/lib-settings/settings.c --- a/src/lib-settings/settings.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-settings/settings.c Sun Nov 24 06:30:12 2013 +0100 @@ -44,7 +44,7 @@ { int num; - if (!sscanf(value, "%i", &num) || num < 0) + if (sscanf(value, "%i", &num) != 1 || num < 0) return t_strconcat("Invalid number: ", value, NULL); *result = num; return NULL; -------------------------------------------------------------------------------- Specifically, both invocations disregard that sscanf("", "%d", &num) and similar make sscanf return EOF (-1 on my system) and the first invocation also does not account for the case that the second argument is not matched.

1 0

Re: [Dovecot] 2.2.9
by Rick Romero 23 Nov '13

23 Nov '13

Thanks for providing and maintaining a great piece of software. Rick

1 0

[Dovecot] Dict client unescaping sieve script
by Joshua Perry 22 Nov '13

22 Nov '13

I've created a dict service that listens on a unix socket and answers queries for sieve scripts (among other things). As I understand it (from the source code at http://hg.dovecot.org/dovecot-2.2/file/tip/src/lib-dict/dict-client.c) the dict client will unescape \001n, \001t, and \0011 to line feeds, tabs, and the \001 character respectively. In my service I am escaping those three characters in my response (if I don't escape them the line-oriented nature of the protocol causes a failure for multiline sieve scripts) but every time LDA attempts to process a sieve script I get an error in the logs (see below) showing sieve choking on \001 characters. Is there some configuration value I've missed or something? *dovecot log* Nov 8 23:04:54 www dovecot: lmtp(29940, josh(a)redacted.com) pxg7JxZufVL0dAAAPhZyyg: sieve: failed to compile script dict:proxy:/var/run/dovecot-auth.sock:sieve;name=main script (view user logfile /var/mail/vhosts/redacted.com/josh/.dovecot.sieve.log for more information) *.dovecot.sieve.log* sieve: info: started log at Nov 08 16:14:38. main script: line 1: error: unexpected character(s) starting with 0x01. main script: line 1: error: unexpected unknown characters found at (the presumed) end of file. main script: error: parse failed.

2 2

[Dovecot] dovecot + sieve redirect failed
by Tibor Korocz 22 Nov '13

22 Nov '13

Hi Guys, I have a strange problem and I couldn't find any solution, I hope somebody could help me. I'm using postfix+dovecot+sieve combination and I tried to set up redirect. .sieve: require ["fileinto", "regex", "date", "relational", "vacation"]; redirect "xxxx(a)gmail.com"; keep; But I get some error in the mail.log: sieve: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxxx(a)gmail.com> (refer to server log for more information) Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): sieve: msgid=<1562626302.336239.1385116787283>: stored mail into mailbox 'INBOX' Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): Error: sieve: execution of script /var/vmail/xxxx/.sieve failed, but implicit keep was successful (user logfile /var/vmail/xxxx/.sieve.log may reveal additional details) .sieve.log: error: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxx(a)gmail.com> (refer to server log for more information). I couldn't find any other details in the logs. Any idea what is the problem and what is the solution? Thanks, Tibi

2 1

[Dovecot] removing html via dovecot/sieve
by Bonz 22 Nov '13

22 Nov '13

is there a howto or similar for configuring dovecot as a user to strip mime. ideally i would like all html copies deleted, but graphics, etc dumped to ~/public_html and replaced with a url. i have a super crappy link so html, etc usually jams my spool. i can usually wget things however hence this desired approach. bonz.

2 1

[Dovecot] Personal Sieve Resieving Default Sieve?
by Jim McNamara 22 Nov '13

22 Nov '13

Hello all. In my dovecot install we have a default.sieve script which filters incoming mail based on the subdomain of our main domain. All it does is if the mail comes from A.domain.com move in to folder A in inbox, and if it comes from B.domain.com, move to folder B also in inbox. In my personal sieve script, I'd like to grab a particular email each day that the default.sieve saw coming from A.domain.com and moved it to folder A, and either copy or move it to another folder, C. My google-fu was weak while looking for second sieve passes undoing the first, so I thought it best to ask here. Thanks for your time.

2 1

[Dovecot] Pigeonhole make check fails with Dovecot 2.2.8
by Tamsy 22 Nov '13

22 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Is it just here? When compiling dovecot-2.2-pigeonhole-0.4.2 at the stage "make check" Pigeonhole is throwing the following message and stops: Test case: ./tests/test-header.svtest: 1: Test 'Basic functionality' SUCCEEDED 2: Test 'Matching empty key' SUCCEEDED 3: Test 'Ignoring whitespace' FAILED: header test does not strip leading whitespace 4: Test 'Absent or empty header' SUCCEEDED 5: Test 'Invalid header name' SUCCEEDED 6: Test 'Folded header' SUCCEEDED I have tried to compile Pigeonhole 0.4.2 and also the latest dovecot-2-2-pigeonhole-b7434a02fc51 from the Mercurial repository but the outcome at "make test" is always the same: 3: Test 'Ignoring whitespace' FAILED: header test does not strip leading whitespace Cheers, Tamsy -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJSjC2QAAoJEKYXVM1dyOfZ9xsIAKDC7goLP3N2rr90Lf0P6gam wQFmYY3HUMIKi3FKWcCy6DQBN6Qr33QWTk/b4OY1LDMOETolZTWIEwvlix+YdI8x oRdKQXWHR9k+jd9etWkNuuk2xUnbjz353IOMZ3Yc+spuv0JyUvYhef6pfq3MLTYQ R+YW4aoNp3XstAKcknnkduNwrfRXoZoFT/YOU3VQyDUwUa6u07JhuL+onZtb0mO+ HsdD4NNY28YqHY1/eoT3YNRbgtRxyOfzxh3f17ITbquM0ZgiPJucWX7HpIiwNJFu 3gqkceDLqqAL9DKUjDapSyR2IjxJlRSGcxQckxlkGXzcaTNNWqAn7mMxSr3hEaY= =EY7D -----END PGP SIGNATURE-----

5 12

[Dovecot] (no subject)
by Axel Reinhold 22 Nov '13

22 Nov '13

Subject: dovecot-2.2.8 does no more quit correctly after update to dovecot-2.2.8 monit is no more validating pop3 server due to dovecot mo more logging out correctly "+OK Logging out" is missing With 2.2.7: [root@pie ~]# telnet glen 110 Trying 188.138.31.225... Connected to glen. Escape character is '^]'. +OK Dovecot ready. <1da9.1.528e3113.qpIWrdBNJbF3qp/tA9R+sQ==(a)glen.ypack.de> quit +OK Logging out Connection closed by foreign host. with 2.2.8: [root@pie ~]# telnet glen 110 Trying 188.138.31.225... Connected to glen. Escape character is '^]'. +OK Dovecot ready. <1fc9.1.528e31b1.W4FN6a7gzBMYNOBoxP43OQ==(a)glen.ypack.de> quit Connection closed by foreign host. After quit the "+OK Logging out" is missing! New option? Or bug? Regards Axel

2 1

[Dovecot] dovecot-2.2.7: Fatal: master: service(imap): child 49545 killed with signal 11 (core dumped)
by Marcin Mirosław 21 Nov '13

21 Nov '13

Hi! After upgrade I'm noticing many coredummps, below is backtrace: $ echo "bt"|gdb .... #0 o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:222 222 if (o_stream_zlib_send_flush(zstream) < 0) (gdb) #0 o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:222 #1 0x00007a695e8f09cd in o_stream_flush (stream=stream@entry=0xc8be5b276d0) at ostream.c:147 #2 0x00007a695e83c06f in o_stream_zlib_close (stream=0xc8be5b27640, close_parent=true) at ostream-zlib.c:35 #3 0x00007a695e8f0375 in o_stream_close_full (stream=stream@entry=0xc8be5b276d0, close_parents=close_parents@entry=true) at ostream.c:49 #4 0x00007a695e8f06e2 in o_stream_close (stream=stream@entry=0xc8be5b276d0) at ostream.c:85 #5 0x00007a695e8f1738 in o_stream_copy_error_from_parent (_stream=_stream@entry=0xc8be5b27640) at ostream.c:434 #6 0x00007a695e83c5cc in o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:227 #7 0x00007a695e8f09cd in o_stream_flush (stream=stream@entry=0xc8be5b276d0) at ostream.c:147 #8 0x00007a695e83c06f in o_stream_zlib_close (stream=0xc8be5b27640, close_parent=true) at ostream-zlib.c:35 #9 0x00007a695e8f0375 in o_stream_close_full (stream=stream@entry=0xc8be5b276d0, close_parents=close_parents@entry=true) at ostream.c:49 #10 0x00007a695e8f06e2 in o_stream_close (stream=stream@entry=0xc8be5b276d0) at ostream.c:85 #11 0x00007a695e8f1738 in o_stream_copy_error_from_parent (_stream=_stream@entry=0xc8be5b27640) at ostream.c:434 #12 0x00007a695e83c5cc in o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:227 #13 0x00007a695e8f09cd in o_stream_flush (stream=stream@entry=0xc8be5b276d0) at ostream.c:147 #14 0x00007a695e83c06f in o_stream_zlib_close (stream=0xc8be5b27640, close_parent=true) at ostream-zlib.c:35 #15 0x00007a695e8f0375 in o_stream_close_full (stream=stream@entry=0xc8be5b276d0, close_parents=close_parents@entry=true) at ostream.c:49 #16 0x00007a695e8f06e2 in o_stream_close (stream=stream@entry=0xc8be5b276d0) at ostream.c:85 #17 0x00007a695e8f1738 in o_stream_copy_error_from_parent (_stream=_stream@entry=0xc8be5b27640) at ostream.c:434 #18 0x00007a695e83c5cc in o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:227 #19 0x00007a695e8f09cd in o_stream_flush (stream=stream@entry=0xc8be5b276d0) at ostream.c:147 #20 0x00007a695e83c06f in o_stream_zlib_close (stream=0xc8be5b27640, close_parent=true) at ostream-zlib.c:35 #21 0x00007a695e8f0375 in o_stream_close_full (stream=stream@entry=0xc8be5b276d0, close_parents=close_parents@entry=true) at ostream.c:49 #22 0x00007a695e8f06e2 in o_stream_close (stream=stream@entry=0xc8be5b276d0) at ostream.c:85 #23 0x00007a695e8f1738 in o_stream_copy_error_from_parent (_stream=_stream@entry=0xc8be5b27640) at ostream.c:434 #24 0x00007a695e83c5cc in o_stream_zlib_flush (stream=0xc8be5b27640) at ostream-zlib.c:227 #25 0x00007a695e8f09cd in o_stream_flush (stream=stream@entry=0xc8be5b276d0) at ostream.c:147 #26 0x00007a695e83c06f in o_stream_zlib_close (stream=0xc8be5b27640, close_parent=true) at ostream-zlib.c:35 [...] #285878 0x00007a695e8f0adc in o_stream_default_cork (_stream=0xc8be5b27640, set=<optimized out>) at ostream.c:419 #285879 o_stream_default_cork (_stream=0xc8be5b27640, set=<optimized out>) at ostream.c:412 #285880 0x00000c8be506b72d in client_input (client=0xc8be5b07b00) at imap-client.c:945 #285881 0x00007a695e8e4867 in io_loop_call_io (io=0xc8be5b8f370) at ioloop.c:387 #285882 0x00007a695e8e5d1f in io_loop_handler_run (ioloop=ioloop@entry=0xc8be5ab50f0) at ioloop-epoll.c:220 #285883 0x00007a695e8e4178 in io_loop_run (ioloop=0xc8be5ab50f0) at ioloop.c:411 #285884 0x00007a695e87a847 in master_service_run (service=0xc8be5ab4f80, callback=callback@entry=0xc8be5077f20 <client_connected>) at master-service.c:566 #285885 0x00000c8be50785d4 in main (argc=1, argv=0xc8be5ab4d50) at main.c:400 And gdb is killing by OOM. I suspect this can be related to imapc. Regards, Marcin

1 2

[Dovecot] dsync-2.2.7 incorrectly synchronizes subscription status of renamed mailbox
by Karol Jurak 21 Nov '13

21 Nov '13

Hi, It seems that dsync-2.2.7 doesn't correctly synchronize subscription status of a renamed mailbox. The situation is as follows. There are two servers: A and B, and a test user test_mdbox. Mailboxes (mdbox) of this user on both servers are synchronized. Specifically on both of them there is a (subscribed) Test1 mailbox. Replication plugin is disabled. I rename Test1 to Test2 on A with Thunderbird. The output of 'doveadm mailbox list', contents of subscriptions file and the output of 'doveadm dump -t mailboxlog dovecot.mailbox.log' (below) confirm that the rename succeeded on A. #2976: rename 2b84f621c0fd4ba8bd514c5c43ab9a89 (2013-11-19 14:30:35) #3000: subscribe 2b84f621c0fd4ba8bd514c5c43ab9a89 (2013-11-19 14:30:35) #3024: unsubscribe 99ea7bf70f6e69ad71659995677b43f8 (2013-11-19 14:30:35) Subsequently I run 'doveadm sync -u test_mdbox remote:B'. Nothing changes on A. On B 'doveadm mailbox list' shows that Test1 was renamed to Test2, but subscriptions file still contains Test1 and not Test2. The output of 'doveadm dump -t mailboxlog dovecot.mailbox.log' confirms that only rename was performed: #2160: rename 2b84f621c0fd4ba8bd514c5c43ab9a89 (2013-11-19 14:57:22) Only another 'doveadm sync -u test_mdbox remote:B' fixes subscriptions on B. The following records are added to dovecot.mailbox.log: #2184: unsubscribe 99ea7bf70f6e69ad71659995677b43f8 (2013-11-19 15:00:32) #2208: subscribe 2b84f621c0fd4ba8bd514c5c43ab9a89 (2013-11-19 15:00:32) -- Karol Jurak

2 2

[Dovecot] Enable Rawlog from userdb in Dovecot v2.2
by Steffen Kaiser 21 Nov '13

21 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, how do I enable Rawlog for one person only? http://wiki2.dovecot.org/Debugging/Rawlog describes how to enable the postlogin script for all users. Rawlog gets active only, if the dovecot.rawlog directory exists. So far, it's working. However. I suspect that there is some notable overhead in this chain, so I tried to enable rawlog via userdb extra fields. So setup the config as: service imap { executable = imap } service postlogin { executable = script-login -d rawlog unix_listener postlogin { } } In the userdb extra fields I tried: service/imap/executable=imap postlogin Log entry: imap: Debug: Unknown userdb setting: plugin/service/imap/executable=imap postlogin and: service imap/executable=imap postlogin (note the space between service imap) Log entry: imap: Debug: Unknown userdb setting: plugin/service imap/executable=imap postlogin - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUoDzAV3r2wJMiz2NAQJxgwf+NCaABKspwVffTpQqVIAdlXGi2gUrRd29 1Ic82v5xqx8jMQ+UxnKNJBX2jgs87GITWpPtTXUVS8H6piNDJrcAxT0lIun0l4Ob 4riQh01HrMjwWORAAWvHHQWZbyiDu8i2h8PjQAG/8idpCt0lCmmr2DyRQwSx+7lf JgfxfccYMRhAHtethm82cjWs3Q/M9deO+ds+aLwxGhDaYxHcU8vD3ESuhqnsR4Bh VqemH3wBADpfKH3ThRKknsfGfEU5d8bcz1GzhOcjfwC24kPsei4k9wcDAy+moyk1 8vPYyvWnhhfb0/yiO3eLpX0mdlM9Iur1X3MFvA0tFwnB8RtuqZGw3g== =/TtK -----END PGP SIGNATURE-----

2 2

Re: [Dovecot] Problems with dovecot 2.1.7, spamassassin 3.3.2 and antispam plugin
by Joseph Tam 21 Nov '13

21 Nov '13

> LD_PRELOAD=/lib/x86_64-linux-gnu/libgcc_s.so.1 /usr/bin/sa-learn -D > --progress $* /tmp/sendmail-msg-$$.txt >> /tmp/sa-learn-pipe.$$.log 2>&1 > > So far to no avail. I'm going to try the spool2dir backend with > incron. Cumbersome, but it should work ... Maybe try rebuilding whatever is using libgcc_s.so with GCC compiler option -static-libgcc? Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Reset vacation lda-dupes database
by Mike Selner ＠ Yahoo 20 Nov '13

20 Nov '13

Hello, I have dovecot 2.2.6 and pignenhole 0.4.2 running on freebsd9.1. We have a mix of unix users (/home/user) and postfixadmin users (/home/vmail/domain/user). I am using dovecot managesive with afterlogic webmail which has a managesieve plugin to set the out of office message. All works fine. I have sieve_vacation_default_period set to 1d. The problem I'm trying to solve is that users set their vacation message and want to test it. So they have their colleagues send them multiple test messages and want to make sure it works. Of course only the first message gets an auto-reply. I tell them that the auto responder only sends one message per day per sender but they would like to test it with a new message etc. So I have to remove their .lda-dupes file manually so they can try again. My previous autoresponder setup (squirrelmail) used a .forward technique and removed the vacation database when they turned the responder from off to on, and this worked well for the above issue. Is there a solution for dovecot managesieve which will remove or reset the .lda-dupes file whenever a new sieve file is uploaded? Or another solution that will reset the "vacation timer" when the user turns vacation from off to on? Thank you Mike

3 4

[Dovecot] Drac for dovecot 2.2
by Anton Lundin 20 Nov '13

20 Nov '13

Hi folks. I thought that i should publish and announce that i ported the dovecot2-drac plugin to be usable with dovecot 2.2 and Debian patched drac for IPv6. The patches can be found at: https://github.com/glance-/dovecot2-drac //Anton -- Anton Lundin

1 0

[Dovecot] status=undeliverable (lost connection with mail.larptreff.de[private/dovecot-lmtp] while sending MAIL FROM)
by Jan Phillip Greimann 20 Nov '13

20 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Good morning dovecot-community, I noticed a strange log-entry since the last day: Nov 7 08:34:42 hetzner postfix/lmtp[3764]: 61CB01A3938: to=<jg+introversion(a)larptreff.de>, relay=mail.larptreff.de[private/dovecot-lmtp], delay=0.05, delays=0.01/0.01/0.02/0.01, dsn=4.4.2, status=undeliverable (lost connection with mail.larptreff.de[private/dovecot-lmtp] while sending MAIL FROM) Thankfully I've configured a cronjob for a daily pflogsumm-report, but I don't understand this. It worked for months like a charm. It seems this only happens on mails with "+"-Delimiter. In my opinion there is only one thing which could cause this problem: I updated my dovecot on 2013/11/04 from 2.2.6-1~auto+36 to 2.2.7-1~auto+2 maillog: http://pastebin.com/WDGfEjdp doveconf -n: http://pastebin.com/ay6dxiUf I will try to downgrade again, did someone have a clue? Changelog from 2.2.7 didn't show changes on lmtp. Best regards, Jan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSe0cCAAoJENEKhqzzuxPlLOsH/iQLHuYXH/8HQJI1cyOQ/Xkl KK010kT9EwOZCax+xputF1Cyg9XSCGBwMBA8YFWjTk57EVfNZ4RZLCkpZQU8b0X/ SsDq7jyh8QTBf7K2LEs34L6g2OMbuhv3Hl+D/RqBm09HPoBUGJZEM5ZQu28QE7rD GETa3XkQPwMyo+3GwWXmAzg3wz4tOEGg6meaOzQlGVJshQpSKbDjvln5RtsVc1Qh X9Xa4HdEesH/NXxr6uKUUEjHcp67BLWvmZHrDDIOp4dATqxDbq29QGfiJFvURKur DJZ2hbPPgEFf/Wdf5l3PXfV2OgnubyLiTgRZ7pb+xFNUAlJ2YCeRv5CUigLaps8= =0Jya -----END PGP SIGNATURE-----

7 24

[Dovecot] how can i change the content of rejected message
by ihab 20 Nov '13

20 Nov '13

i use dovecot 1.2.15 and set quota in the system and when the quota full for one user1 and other user2 sent a email to this user1 a rejected email will sent to user2 i want to change the content and the title of this email ??? Thanks in advance -- View this message in context: http://dovecot.2317879.n4.nabble.com/how-can-i-change-the-content-of-reject… Sent from the Dovecot mailing list archive at Nabble.com.

5 7

[Dovecot] dovecot perl sasl ejabberd
by Костырев Александр Алексеевич 20 Nov '13

20 Nov '13

Good day to all! We would like to authenticate our ejabberd against Dovecot with perl there's such a script http://www.ejabberd.im/files/contributions/check_dovecot.pl.txt that script uses following perl library - http://cpansearch.perl.org/src/SASHA/Authen-SASL-Authd-0.04/lib/Authen/SASL… Authentication is OK, but sub user_dovecot wich queues information about a specific user doesn't work with error dovecot: auth: Error: BUG: Authentication client sent unknown handshake command: USER?1?user60(a)atlas-2.ru could someone help with this ? thanks in advance! -- С уважением, Костырев Александр администратор Linux-систем skype: a.kostyrev

2 1

[Dovecot] UID order vs date order
by Torbjorn Jansson 20 Nov '13

20 Nov '13

Hi i have recently moved a mailbox to dovecot and intend to use it via imap and i have run into a problem. when i imported the mails apparently the UID order got reversed compared to the date order, result is that some clients like on android devices download the oldest mails instead of newest. it is not so interesting to have several years old mail show up at the top of the mailbox. is there any way of convincing dovecot to renumber the mails by date order instead? i have tried to delete the dovecot-uidlist and dovecont.index* files in an unimportant folder and the only thing that happens was that all of the mails got renumbered in the wrong order again (lower numbers but still same problem) any advice? i cant be the only one that have run into this.

3 9

[Dovecot] Dovecot 2.2.5: Panic: file mail-transaction-log.c: line 350 (mail_transaction_log_set_mailbox_sync_pos)
by Rob Dosogne 20 Nov '13

20 Nov '13

Hello, I have been seeing an issue with Dovecot 2.2.5 (which is the current version packaged by cPanel). This is happening with any action that tries to access the mailbox index via IMAP. This log and debug information comes from a force-resync attempt, however, the same errors are logged when the user tries to open the mailbox or move a message to it. (User, domain, and IPs in log have been changed for privacy reasons). System is a CentOS 5.10 (x64) VPS under Virtuozzo 4.0, and is not OOMing or hitting any container limits. User is connecting from multiple devices on the same IP, most of which are Apple Mail & iOS. Other users with only Apple Mail & iOS devices are also experiencing the same errors. Log: Nov 19 15:55:33 host dovecot: imap-login: Login: user=<user(a)domain.com>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, mpid=13887, TLS, session=<A+FrZpDr/wAYzVli> Nov 19 15:55:33 host dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Nov 19 15:55:33 host dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Nov 19 15:55:33 host dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Nov 19 15:55:33 host dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Nov 19 15:55:33 host dovecot: imap: Debug: Added userdb setting: mail=maildir:/home/username/mail/domain.com/user Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Effective uid=504, gid=502, home=/home/username/mail/domain.com/user Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Quota root: name= backend=maildir args= Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Quota rule: root= mailbox=INBOX.Trash ignored Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Quota grace: root= bytes=0 (10%) Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Namespace : type=private, prefix=INBOX., sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/username/mail/domain.com/user Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: maildir++: root=/home/username/mail/domain.com/user, index=, indexpvt=, control=, inbox=/home/username/mail/domain.com/user, alt= Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl: initializing backend with data: vfile Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl: acl username = user(a)domain.com Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl: owner = 1 Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl vfile: Global ACL directory: (none) Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl vfile: file /home/username/mail/domain.com/user/.TrainSpam/dovecot-acl not found Nov 19 15:55:33 host dovecot: imap(user(a)domain.com): Debug: acl vfile: file /home/username/mail/domain.com/user/.Spam/dovecot-acl not found Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Error: broken sync positions in index file /home/username/mail/domain.com/user/.Spam/dovecot.index Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Warning: fscking index file /home/username/mail/domain.com/user/.Spam/dovecot.index Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Error: Fixed index file /home/username/mail/domain.com/user/.Spam/dovecot.index: log_file_tail_offset 3988 -> 3868 Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Panic: file mail-transaction-log.c: line 350 (mail_transaction_log_set_mailbox_sync_pos): assertion failed: (file_offset >= log->head->saved_tail_offset) Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x2b07be142400] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b07be142456] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b07be141df3] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b07bdea066b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0x89) [0x2b07bde97ed9] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b07bde25e4d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_transaction_save_commit_pre+0x856) [0x2b07bde22186] -> /usr/lib64/dovecot/libdovecot-storage.so.0 [0x2b07bde81cc8] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x86) [0x2b07bde8f466] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_transaction_commit+0xa5) [0x2b07bde820a5] -> /usr/lib64/dovecot/lib10_quota_plugin.so [0x2b07bef5252b] -> /usr/lib64/dovecot/lib01_acl_plugin.so [0x2b07bed40f77] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_ge Nov 19 15:55:35 host dovecot: imap(user(a)domain.com): Fatal: master: service(imap): child 13887 killed with signal 6 (core dumped) Debug: Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00002b07be3e0265 in raise () from /lib64/libc.so.6 (gdb) bt full #0 0x00002b07be3e0265 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00002b07be3e1d10 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00002b07be14240d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1773c798 "/usr/lib64/dovecot/libdovecot.so.0 [0x2b07be142400] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b07be142456] -> /usr/lib64/dovecot/libdovecot.so.0 [0x2b07be141df3] -> /usr/lib64/dovecot/libdovecot-stora"... #3 0x00002b07be142456 in i_internal_fatal_handler (ctx=0x7fff3c65f120, format=<value optimized out>, args=<value optimized out>) at failures.c:652 status = 0 #4 0x00002b07be141df3 in i_panic (format=0x363f <Address 0x363f out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff3c65f1f0, reg_save_area = 0x7fff3c65f130}} #5 0x00002b07bdea066b in mail_transaction_log_set_mailbox_sync_pos (log=<value optimized out>, file_seq=<value optimized out>, file_offset=<value optimized out>) at mail-transaction-log.c:350 __FUNCTION__ = "mail_transaction_log_set_mailbox_sync_pos" #6 0x00002b07bde97ed9 in mail_index_sync_update_mailbox_offset (_ctx=0x1776e588) at mail-index-sync.c:751 seq = 4 offset = 3868 #7 mail_index_sync_commit (_ctx=0x1776e588) at mail-index-sync.c:795 ctx = 0x17787570 index = 0x17770cf0 next_uid = <value optimized out> want_rotate = <value optimized out> index_undeleted = false delete_index = false ret = <value optimized out> #8 0x00002b07bde25e4d in maildir_sync_index_finish (ctx=0x1776e570, success=<value optimized out>) at maildir-sync-index.c:331 mbox = 0x1776ea30 time_diff = <value optimized out> ret = 0 #9 0x00002b07bde22186 in maildir_transaction_save_commit_pre (_ctx=0x177800e0) at maildir-save.c:1029 ctx = <value optimized out> _t = 0x17779bc0 sync_flags = <value optimized out> ret = 0 __FUNCTION__ = "maildir_transaction_save_commit_pre" #10 0x00002b07bde81cc8 in index_transaction_index_commit (index_trans=0x17779cb0, result_r=0x7fff3c65f470) at index-transaction.c:51 t = 0x17779bc0 pvt_sync_ctx = 0x0 ret = 0 __FUNCTION__ = "index_transaction_index_commit" #11 0x00002b07bde8f466 in mail_index_transaction_commit_full (_t=0x7fff3c65f498, result_r=0x7fff3c65f470) at mail-index-transaction.c:262 t = 0x17779cb0 index = 0x17770cf0 index_undeleted = false #12 0x00002b07bde820a5 in index_transaction_commit (t=0x17779bc0, changes_r=0x7fff3c65f5a0) at index-transaction.c:194 box = 0x1776ea30 itrans = 0x0 result = {log_file_seq = 0, log_file_offset = 0, commit_size = 0, ignored_modseq_changes = 0} ret = 0 #13 0x00002b07bef5252b in quota_mailbox_transaction_commit (ctx=0x17779bc0, changes_r=0x7fff3c65f5a0) at quota-storage.c:134 qt = 0x1777a890 #14 0x00002b07bed40f77 in acl_transaction_commit (ctx=0x17779bc0, changes_r=0x7fff3c65f5a0) at acl-mailbox.c:451 abox = 0x1776f048 ret = <value optimized out> #15 0x00002b07bde53975 in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fff3c65f5a0) at mail-storage.c:1847 _data_stack_cur_id = 4 t = 0x17779bc0 save_count = 1 ret = <value optimized out> __FUNCTION__ = "mailbox_transaction_commit_get_changes" #16 0x000000000040c0d3 in cmd_copy_full () No symbol table info available. #17 0x000000000040c39b in cmd_copy () No symbol table info available. #18 0x0000000000414d97 in command_exec () No symbol table info available. #19 0x0000000000413b9b in client_command_input () No symbol table info available. #20 0x0000000000413c5f in client_command_input () No symbol table info available. #21 0x0000000000413e0f in client_handle_input () No symbol table info available. #22 0x0000000000414212 in client_input () No symbol table info available. #23 0x00002b07be150f16 in io_loop_call_io (io=0x1775c450) at ioloop.c:387 ioloop = 0x17744720 t_id = 2 #24 0x00002b07be15238d in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = <value optimized out> event = 0x17746210 list = 0x1775c4a0 io = 0x363f tv = {tv_sec = 1799, tv_usec = 999752} events_count = <value optimized out> msecs = <value optimized out> ret = 1 i = 0 call = false __FUNCTION__ = "io_loop_handler_run" #25 0x00002b07be150ebd in io_loop_run (ioloop=0x17744720) at ioloop.c:406 No locals. #26 0x00002b07be107223 in master_service_run (service=0x177445b0, callback=0x363f) at master-service.c:566 No locals. #27 0x000000000041d437 in main () No symbol table info available. # dovecot -n # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-028stab101.1 x86_64 CentOS release 5.10 (Final) auth_cache_size = 2 k auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" disable_plaintext_auth = no lock_method = dotlock mail_debug = yes mailbox_idle_check_interval = 15 secs mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } plugin { acl = vfile quota = maildir quota_rule = INBOX.Trash:ignore } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0666 } } service imap-login { client_limit = 500 inet_listener imap { address = * } inet_listener imaps { address = * } process_limit = 100 process_min_avail = 2 service_count = 1 vsz_limit = 64 M } service imap { process_limit = 512 vsz_limit = 256 M } service managesieve-login { client_limit = 500 process_limit = 100 process_min_avail = 2 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 512 vsz_limit = 256 M } service pop3-login { client_limit = 500 inet_listener pop3 { address = * } inet_listener pop3s { address = * } process_limit = 100 process_min_avail = 2 service_count = 1 vsz_limit = 64 M } service pop3 { process_limit = 512 vsz_limit = 256 M } ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ssl_key = </etc/dovecot/ssl/dovecot.key userdb { driver = prefetch } userdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } verbose_proctitle = yes protocol imap { imap_idle_notify_interval = 15 mins imap_logout_format = in=%i, out=%o, bytes=%i/%o mail_max_userip_connections = 100 mail_plugins = acl quota imap_quota } protocol pop3 { mail_max_userip_connections = 100 mail_plugins = quota pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = UID%u-%v } protocol lda { postmaster_address = postmaster(a)example.com } Any help with this would be greatly appreciated! cheers, -- Rob

1 0

[Dovecot] Quick question on sieve
by LuKreme 20 Nov '13

20 Nov '13

I have a procmail recipe that does the majority of my heavy lifting for my mailing lists. It's pretty straightforward, but as I understand it, this isn't something sieve can do: # [ ] contains a space and a tab :0 * 9876543210^0 ^(List-Id:.*<|X-Mailing-List:[ ]*)\/[-A-z0-9_+]+ * 9876543210^0 ^(List-Post:[ ]*(<mailto:)?|List-Owner:[ ]*(<mailto:)?owner-)\/[-A-Z0-9_+]+ * 9876543210^0 ^(Sender:[ ]*owner-|X-BeenThere:[ ]*|Delivered-To:[ ]*mailing list )\/[-A-Za-z0-9_+]+ * 9876543210^0 ^Sender:.* List"? <(mailto:)?\/[-A-Z0-9_+]+ { LISTNAME=$MATCH } Basically, it checks the headers for any one of the headers List-ID: List-Post: List-Owner: Sender: owner- X-BeenThere: Delivered-To: Sender:.*List and parses out the name of the list, writing it to the LISTNAME variable For the vast majority of mailing lists the message is then written to .$LISTNAME/ This means that, by default, a new mailing list is automatically sorted to its own mailbox without my doing anything at all. Is this something hat Sieve can do? Does it have variable assignment? -- <div id="me"><div id="Dennis Miller>It's just my opinion. I could be wrong.</div>But I'm not.</div>

2 3

[Dovecot] NTLM authentication in Thunderbird vs Outlook 2010.
by Alexandr Sabitov 20 Nov '13

20 Nov '13

Hi List, I am using the Dovecot 2.1.12 with NTLM authentication enabled. The Dovecot is set up in cluster with directors, 60 000 connections simultaneously. I have noticed that NTLM authentication is processed differently for Thunderbird and Outlook 2010 users. It actually makes Outlook 2010 clients query LDAP more often that Thunderbird ones which is not good potentially for overall performance. Dovecot do not see a domain in NTLM Type 3 message but it does exist there. Could somebody explain please why it is happening? Tcpdump Thunderbird: 1) IP proxy.netregistry.net.19228 > dovecot-test-1.private.netregistry.net.pop3 E..3..@.}..........)K..n#...9...P..qXT..AUTH NTLM 2) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.19228 E..,..@.@.,....).....nK.9...#...P....W..+ 3) IP proxy.netregistry.net.19228 > dovecot-test-1.private.netregistry.net.pop3 E..V..@.}..........)K..n#...9...P..m.n..TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA= 4) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.19228 E.....@.@.,@...).....nK.9...#..:P.......+ TlRMTVNTUAACAAAAHAAcADAAAAAFAooAbuK/LV9v9xIAA AAAAAAAACQAJABMAAAAZABvAHYAZQBjAG8AdAAtAHQAZQBzAHQALQAxAAMAHABkAG8 AdgBlAGMAbwB0AC0AdABlAHMAdAAtADEAAAAAAA== 5) IP proxy.netregistry.net.19228 > dovecot-test-1.private.netregistry.net.pop3 E..&..@.}..........)K..n#..:9...P...|...TlRMTVNTUAADAAAAGAAYAIwAAAAYABgApAAAAAAAAABAAA AAOAA4AEAAAAAUABQAeAAAAAAAAAAAAAAABQIIAG0AaQBnAHIAYQB0AGkAbwBuAC4AdAB lAHMAdABAAG4AZQB0AHcAbwByAGsALgBpAGQALgBhAHUAbQB5AHAAcgBvAGoAZQBjAHQA cwBEqdTLLSMLdQAAAAAAAAAAAAAAAAAAAADZv(...)= Base64 decoding of the last message (NTLM Type 3): NTLMSSP?.m.i.g.r.a.t.i.o.n...t.e.s.t.@.n.e.t.w.o.r.k...i.d...a.u.m.y.p.r.o.j.e.c.t.s.D-#?u.......................(....)Nh\P 6) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.19228 E..(..@.@.,....).....nK.9...#..8P.. .'.. 7) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.19228 E..8..@.@.,....).....nK.9...#..8P.. .c..+OK Logged in. >From logs: Nov 19 18:14:53 dovecot-test-1 dovecot: auth: Debug: ldap(migration.test(a)network.id.au,203.30.252.5,<sI7Ga4LrOADLHvwF>): pass search: base=ou=email, dc=netregistry, dc=net scope=subtree filter=(&(objectClass=nrPOPAccount)(uid=migration.test(a)network.id.au)) fields=uid,userPassword Nov 19 18:14:53 dovecot-test-1 dovecot: auth: Debug: ldap(migration.test(a)network.id.au,203.30.252.5,<sI7Ga4LrOADLHvwF>): result: uid=migration.test(a)network.id.au userPassword=Secret123 All good. Outlook 2010: 1) IP proxy.netregistry.net.47129 > dovecot-test-1.private.netregistry.net.pop3 E..3..@.}..........)...n...Q..f9P..qOv..AUTH NTLM 2) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..,..@.@.P....).....n....f9...\P....W..+ 3) IP proxy.netregistry.net.47129 > dovecot-test-1.private.netregistry.net.pop3 E..b..@.}..........)...n...\..f=P..m....TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== 4) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E.....@.@.Pe...).....n....f=....P.......+ TlRMTVNTUAACAAAAHAAcADAAAAAFAooAQlAQ6i5tIiIAAAAAAAAAACQAJA BMAAAAZABvAHYAZQBjAG8AdAAtAHQAZQBzAHQALQAxAAMAHABkAG8AdgBlAGMAbwB0AC0AdABlAHM AdAAtADEAAAAAAA== 5) IP proxy.netregistry.net.47129 > dovecot-test-1.private.netregistry.net.pop3 E.....@.}..........)...n......f.P....c..TlRMTVNTUAADAAAAGAAYAJIAAAAYABgAqgAAABoAGgBIAAAAHAAcAGIAAAAUA BQAfgAAAAAAAADCAAAABQKIAgUBKAoAAAAPbgBlAHQAdwBvAHIAawAuAGkAZAAuAGEAdQBtAGkAZwByAG EAdABpAG8AbgAuAHQAZQBzAHQATQBZAFAAUgBPAEoARQBDAFQAUwADFLugRfGh3gAAAAAAAAAAAAAAAA AAAAA(...)= Base64 decoding of the last message (NTLM Type 3): NTLMSSP.....................H....b..~.?????( ...?n.e.t.w.o.r.k...i.d...a.u.m.i.g.r.a.t.i.o.n...t.e.s.t.M.Y.P.R.O.J.E.C.T.S.??E..(....)..q?%/ 6) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..(..@.@.Q....).....n....f.....P.. .5.. 7) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..E..@.@.P....).....n....f.....P.. .p..-ERR Authentication failed. >From logs: Nov 19 18:33:24 dovecot-test-1 dovecot: auth: Debug: ldap(migration.test,203.30.252.5,<Hab+rYLrPQDLHvwF>): pass search: base=ou=email, dc=netregistry, dc=net scope=subtree filter=(&(objectClass=nrPOPAccount)(uid=migration.test)) fields=uid,userPassword Nov 19 18:33:24 dovecot-test-1 dovecot: auth: ldap(migration.test,203.30.252.5,<Hab+rYLrPQDLHvwF>): unknown user Well, WHERE is my domain in the LDAP query? :) 8) IP proxy.netregistry.net.47129 > dovecot-test-1.private.netregistry.net.pop3 E..K..@.}..........)...n......f.P...X,..USER migration.test(a)network.id.au 9) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..(..@.@.P....).....n....f.....P.. .... 10) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..-..@.@.P....).....n....f.....P.. .X..+OK 11) IP proxy.netregistry.net.47129 > dovecot-test-1.private.netregistry.net.pop3 E..7..@.}..........)...n......f.P...l;..PASS Secret123 12) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..(..@.@.P....).....n....f.....P.. .... 13) IP dovecot-test-1.private.netregistry.net.pop3 > proxy.netregistry.net.47129 E..8..@.@.P....).....n....f.....P.. .c..+OK Logged in. Configuration file This is LDAP configuration on one of director servers where clients are authenticated. uris = ldap://ldap-node-2.mynetwork.net, ldap://ldap-node-3.mynetwork.net debug_level = 0 base = ou=email, dc=netregistry, dc=net user_attrs = homeDirectory=home, uidNumber=uid, gidNumber=gid, mailQuotaSize=quota_rule=*:storage=%$ user_filter = (&(objectClass=nrPOPAccount)(uid=%u)) pass_attrs = uid=user, userPassword=password, =proxy=y, =destuser=%u, =pass=Secret456 pass_filter = (&(objectClass=nrPOPAccount)(uid=%u)) default_pass_scheme = PLAIN Regards, Alexandr Sabitov System Administrator

1 0

[Dovecot] Question about dovecot 2.2 and LIST command
by Jonathan Siegle 19 Nov '13

19 Nov '13

I am running dovecot 2.2 changeset 16983:d925674c4329 on AIX. We use mbox files with the "/" delimter. I have an imap protocol question. When I do: 1 list directory1/ * 1 OK List completed. Is that the correct answer? If I do 1 list "" * it shows * LIST (\Noselect \HasChildren) "/" "directory1" I forget why I think that even with the delimiter, I should see some information about it. Is this a silly test that no imap client does? Thanks, Jonathan

3 3

[Dovecot] Crash in dovecot 2.2.6
by Ed W 19 Nov '13

19 Nov '13

Hi, I recently upgraded from a dovecot 2.1 version to 2.2.6. I now have a single user who occasionally triggers a crash (just this one user it seems?). The user connects via LiveMail (v14.0.8117.) and IMAP. Oct 29 08:05:26 mail1 dovecot: imap(customer(a)example.org): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6575a) [0xd94cc75a] -> /usr/lib/dovecot/libdovecot.so.0(+0x657cb) [0xd94cc7cb] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xd9481991] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_transaction_export+0xa69) [0xd95e3e09] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa9618) [0xd95e2618] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0xd1) [0xd95e2b31] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit+0x23) [0xd95e2c23] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_commit+0xe9) [0xd95ec0c9] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x527d2) [0xd958b7d2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x51b0c) [0xd958ab0c] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x51eea) [0xd958aeea] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_storage_sync_init+0xef) [0xd958b2af] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x3b) [0xd959c4ab] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3f) [0xd959c5ef] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x48) [0xd95cabc8] -> /usr/lib/dovecot/lib20_fts_plugin.so(+0xb362) [0xd928f362] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_status+0x49) [0xd959da79] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS](imap_status_get+0x73) [0x8064503] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS](cmd_status+0x189) [0x80591d9] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS](command_exec+0x32) [0x805d762] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS]() [0x805c747] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS]() [0x805c891] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS](client_handle_input+0x125) [0x805cae5] -> dovecot/imap [customer(a)example.org 176.35.111.117 STATUS](client_input+0x72) [0x805ce92] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x44) [0xd94def84] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xce) [0xd94dff7e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0xd94dea40] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x2e) [0xd94874be] System is gentoo 32bit. Do you need configs? Thanks for any advice Ed W

2 3

[Dovecot] Problem migration from cyrus with imapc
by claus 19 Nov '13

19 Nov '13

Hi all, i have problem with namespace when i try to migrate from cyrus to dovecot with imapc. If i login to the old cyrus i get: telnet 192.168.8.164 143 Trying 192.168.8.164... Connected to 192.168.8.164. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. a login testbox(a)old.cyrus.de secret a namespace a OK [CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE STARTTLS AUTH=DIGEST-MD5 AUTH=CRAM-MD5 SASL-IR X-NETSCAPE] User logged in * NAMESPACE (("INBOX." ".")) NIL (("" ".")) a OK Completed a list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.Drafts" * LIST (\HasNoChildren) "." "INBOX.Gesendete Mails" * LIST (\HasNoChildren) "." "INBOX.Sent" * LIST (\HasNoChildren) "." "INBOX.Trash" * LIST (\HasNoChildren) "." "INBOX.spam" * LIST (\HasChildren) "." "INBOX.test1" * LIST (\HasNoChildren) "." "INBOX.test1.test11" a OK Completed after migration with: root@dovecot-backend1:~ # dsync -o imapc_user=testbox(a)old.cyrus.de -o imapc_password=secret -o imapc_host=192.168.8.164 -o imapc_features=rfc822.size -o mailbox_list_index=no -Dv backup -R -u m1234567890 imapc: i get the folowing result: telnet 192.168.8.164 143 Trying 192.168.8.164... Connected to 192.168.8.164. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. a login testmig(a)example.org test a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA] Logged in a namespace * NAMESPACE (("INBOX." ".")) NIL NIL a OK Namespace completed. a list "" "*" * LIST (\HasChildren) "." INBOX * LIST (\HasNoChildren) "." INBOX.INBOX.Drafts * LIST (\HasNoChildren) "." "INBOX.INBOX.Gesendete Mails" * LIST (\HasNoChildren) "." INBOX.INBOX.Sent * LIST (\HasNoChildren) "." INBOX.INBOX.Trash * LIST (\HasNoChildren) "." INBOX.INBOX.spam * LIST (\HasChildren) "." INBOX.INBOX.test1 * LIST (\HasNoChildren) "." INBOX.INBOX.test1.test11 * LIST (\Noselect \HasChildren) "." INBOX.INBOX a OK List completed. Can everyone explain me where the extra "prefix INBOX" came from and how i can resolve that? The migration should be transparent for users. Did you need any extra informations? 192.168.8.164 is a dovecot-proxy. Consolelog of dsync and doveconf -n follows. Thanks! claus root@dovecot-backend1:~ # doveconf -n # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.0.93-0.8-xen x86_64 SUSE Linux Enterprise Server 11 (x86_64) auth_debug = yes auth_master_user_separator = * auth_verbose = yes disable_plaintext_auth = no login_trusted_networks = 192.168.8.164/32 mail_debug = yes mail_location = mdbox:~/mdbox:ALT=/altstorage/%h/mdbox mail_plugins = " quota stats" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = children location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = userdb_home=/vmail/%1Mu/%2.1Mu/%u driver = sql } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=10240 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_refresh = 10 secs stats_track_cmds = yes } postmaster_address = postmaster(a)mnet-online.de protocols = imap pop3 lmtp sieve service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog -b } service stats { fifo_listener stats-mail { mode = 0666 user = vmail } } ssl = no userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = home=/vmail/%1Mu/%2.1Mu/%u driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = " quota stats sieve" } protocol imap { mail_plugins = " quota stats imap_quota imap_stats" } root@dovecot-backend1:~ # root@dovecot-backend1:~ # dsync -o imapc_user=testbox(a)old.cyrus.de -o imapc_password=secret -o imapc_host=1 92.168.8.164 -o imapc_features=rfc822.size -o mailbox_list_index=no -Dv backup -R -u m1234567890 imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/modules/lib90_stats_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/modules/dovead m/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this m essage) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/modules/dov eadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignor e this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/modules/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/modules/dovead m/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore thi s message) doveadm(m1234567890): Debug: auth input: m1234567890 home=/vmail/0/e/m1234567890 uid=10000 gid=10000 doveadm(m1234567890): Debug: Effective uid=10000, gid=10000, home=/vmail/0/e/m1234567890 doveadm(m1234567890): Debug: Quota root: name=User quota backend=dict args=:file:/vmail/0/e/m1234567890/dovecot-quot a doveadm(m1234567890): Debug: Quota rule: root=User quota mailbox=* bytes=10485760 messages=0 doveadm(m1234567890): Debug: Quota grace: root=User quota bytes=1048576 (10%) doveadm(m1234567890): Debug: dict quota: user=m1234567890, uri=file:/vmail/0/e/m1234567890/dovecot-quota, noenforcin g=0 doveadm(m1234567890): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, su bscriptions=yes location=mdbox:~/mdbox:ALT=/altstorage//vmail/0/e/m1234567890/mdbox doveadm(m1234567890): Debug: fs: root=/vmail/0/e/m1234567890/mdbox, index=, indexpvt=, control=, inbox=, alt=/altsto rage//vmail/0/e/m1234567890/mdbox doveadm(m1234567890): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=n o location=fail::LAYOUT=none doveadm(m1234567890): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(m1234567890): Debug: Namespace INBOX.: Using permissions from /vmail/0/e/m1234567890/mdbox: mode=0700 gid=de fault dsync(m1234567890): Debug: Effective uid=10000, gid=10000, home=/vmail/0/e/m1234567890 dsync(m1234567890): Debug: Quota root: name=User quota backend=dict args=:file:/vmail/0/e/m1234567890/dovecot-quota dsync(m1234567890): Debug: Quota rule: root=User quota mailbox=* bytes=10485760 messages=0 dsync(m1234567890): Debug: Quota grace: root=User quota bytes=1048576 (10%) dsync(m1234567890): Debug: dict quota: user=m1234567890, uri=file:/vmail/0/e/m1234567890/dovecot-quota, noenforcing= 0 dsync(m1234567890): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subs criptions=yes location=imapc: dsync(m1234567890): Debug: imapc(192.168.8.164:143): Looking up IP address dsync(m1234567890): Debug: imapc(192.168.8.164:143): Connecting to 192.168.8.164:143 dsync(m1234567890): Debug: imapc(192.168.8.164:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5 dsync(m1234567890): Debug: imapc(192.168.8.164:143): Authenticating as testbox(a)post-ist-da.de dsync(m1234567890): Debug: imapc(192.168.8.164:143): Server capabilities: IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX -REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THR EAD=REFERENCES ANNOTATEMORE IDLE STARTTLS AUTH=DIGEST-MD5 AUTH=CRAM-MD5 SASL-IR X-NETSCAPE dsync(m1234567890): Debug: imapc(192.168.8.164:143): Authenticated successfully dsync(m1234567890): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(m1234567890): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none dsync(m1234567890): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= dsync(m1234567890): Debug: brain M: in state=master_recv_handshake dsync(m1234567890): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=send_mailbox_tree dsync(m1234567890): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=send_mailbox_tree dsync(m1234567890): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=send_mailbox_tree dsync(m1234567890): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=send_mailbox_tree dsync(m1234567890): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=send_mailbox_tree_deletes dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=0 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=0 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=0 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=0 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree changed=0 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree dsync(m1234567890): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain M: out state=recv_mailbox_tree_deletes changed=1 dsync(m1234567890): Debug: brain S: in state=send_mailbox_tree_deletes dsync(m1234567890): Debug: brain S: out state=recv_mailbox_tree changed=1 dsync(m1234567890): Debug: brain M: in state=recv_mailbox_tree_deletes dsync(m1234567890): Debug: doveadm-sieve: Iterating Sieve mailbox attributes dsync(m1234567890): Debug: sieve: Pigeonhole version 0.4.2 initializing dsync(m1234567890): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:gl obal' scripts. dsync(m1234567890): Debug: sieve-storage: using active sieve script path: /vmail/0/e/m1234567890/.dovecot.sieve dsync(m1234567890): Debug: sieve-storage: using sieve script storage directory: /vmail/0/e/m1234567890/sieve dsync(m1234567890): Debug: sieve-storage: permission lookup failed from /vmail/0/e/m1234567890/sieve dsync(m1234567890): Debug: sieve-storage: created storage directory /vmail/0/e/m1234567890/sieve/tmp dsync(m1234567890): Debug: sieve-storage: relative path to sieve storage in active link: sieve/ dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX doesn't exist yet, using d efault permissions dsync(m1234567890): Debug: Namespace INBOX.: Using permissions from /vmail/0/e/m1234567890/mdbox: mode=0700 gid=defa ult dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/Drafts doesn't exist yet, using default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/Gesendete Mails doesn't ex ist yet, using default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/Sent doesn't exist yet, us ing default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/Trash doesn't exist yet, u sing default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/spam doesn't exist yet, us ing default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/test1 doesn't exist yet, u sing default permissions dsync(m1234567890): Debug: Namespace INBOX.: /vmail/0/e/m1234567890/mdbox/mailboxes/INBOX/test1/test11 doesn't exist yet, using default permissions dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=recv_mailbox_tree dsync(m1234567890): Debug: brain S: out state=recv_mailbox_tree_deletes changed=1 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=recv_mailbox_tree_deletes dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mailbox send_state=mailbox changed=0 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=0 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: doveadm-sieve: Iterating Sieve mailbox attributes dsync(m1234567890): Debug: sieve: Pigeonhole version 0.4.2 initializing dsync(m1234567890): Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:gl obal' scripts. dsync(m1234567890): Debug: sieve-storage: using active sieve script path: /vmail/0/e/m1234567890/.dovecot.sieve dsync(m1234567890): Debug: sieve-storage: using sieve script storage directory: /vmail/0/e/m1234567890/sieve dsync(m1234567890): Debug: sieve-storage: using permissions from /vmail/0/e/m1234567890/sieve: mode=0700 gid=-1 dsync(m1234567890): Debug: sieve-storage: relative path to sieve storage in active link: sieve/ dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=attributes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=attributes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=attributes send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=17 hdr_hash=1789a3a22dd73779304ac0b58acc37 a4 dsync(m1234567890): Debug: brain M: Import INBOX: Last common UID=0 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=66 hdr_hash=774ba1d07279fbe1d87762463a8ab8 27 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=272 hdr_hash=68a2925178bf0e3dda93c8b77229a f3b dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=2721 hdr_hash=68a2925178bf0e3dda93c8b77229 af3b dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=2822 hdr_hash=d5c0ccf93da2b285badf6e43cb95 856d dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=2826 hdr_hash=5626d629f014622b9cafbe769542 de7f dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: Import INBOX: Import change GUID= UID=2827 hdr_hash=c76df14284fa8963e7c2abd677b0 b4e6 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=mail_requests changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=mail_requests dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 17 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=17 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 66 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=66 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 272 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=272 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 2721 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=2721 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 2822 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=2822 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 2826 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=2826 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=mails changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: import mail uid 2827 guid dsync(m1234567890): Debug: brain M: Import INBOX: Import mail body for GUID= UID=2827 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=mails send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=mails dsync(m1234567890): Debug: brain S: out box 'INBOX' recv_state=recv_last_common send_state=done changed=1 dsync(m1234567890): Debug: brain S: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=mails send_state=done dsync(m1234567890): Debug: brain M: Import INBOX: Saved UIDs: 17,66,272,2721,2822,2826:2827 dsync(m1234567890): Debug: brain M: Import INBOX: Finish update: min_next_uid=2828 min_first_recent_uid=1 min_highes t_modseq=1 min_highest_pvt_modseq=0 dsync(m1234567890): Debug: brain M: Import INBOX: Reassign UIDs: 1:16,18:65,67:271,273:2720,2722:2821,2823:2825 dsync(m1234567890): Debug: brain M: out box 'INBOX' recv_state=recv_last_common send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=sync_mails dsync(m1234567890): Debug: brain S: in box 'INBOX' recv_state=recv_last_common send_state=done dsync(m1234567890): Debug: brain S: out box '' recv_state=recv_last_common send_state=done changed=1 dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX' recv_state=recv_last_common send_state=done dsync(m1234567890): Debug: brain M: out box '' recv_state=recv_last_common send_state=done changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.Drafts' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.Gesendete Mails' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.Sent' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.Trash' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.spam' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.test1' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=sync_mails changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(m1234567890): Debug: brain M: in state=sync_mails dsync(m1234567890): Debug: brain M: in box 'INBOX.INBOX.test1.test11' recv_state=mailbox send_state=mailbox dsync(m1234567890): Debug: brain M: out box '' recv_state=mailbox send_state=mailbox changed=1 dsync(m1234567890): Debug: brain M: out state=master_send_mailbox changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=slave_recv_mailbox changed=0 dsync(m1234567890): Debug: brain M: in state=master_send_mailbox dsync(m1234567890): Debug: brain M: out state=done changed=1 dsync(m1234567890): Debug: brain S: in state=slave_recv_mailbox dsync(m1234567890): Debug: brain S: out state=done changed=1 dsync(m1234567890): Debug: brain M: in state=done dsync(m1234567890): Debug: brain M: out state=done changed=1 dsync(m1234567890): Debug: brain S: in state=done dsync(m1234567890): Debug: brain S: out state=done changed=1 dsync(m1234567890): Debug: imapc(192.168.8.164:143): Disconnected root@dovecot-backend1:~ #

2 1

[Dovecot] Deleted messages reappearing
by Joseba Torre 19 Nov '13

19 Nov '13

Hi all, in the last days, probably since I upgraded to 2.2.7, I'm seeing lots of deleted messages reappearing in my folders. This is after this error in the log: Nov 13 14:55:16 buzones2 dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=source_ip, lip=dest_ip, mpid=15510, TLS, session=<2bmiUA/rZACe4wQZ> Nov 13 14:55:16 buzones2 dovecot: imap(username): Error: mdbox /users/username/mdbox/mailboxes/backups/dbox-Mails: map uidvalidity mismatch (0 vs 1384350727) Nov 13 14:55:16 buzones2 dovecot: imap(username): Disconnected: Internal error occurred. Refer to server log for more information. [2013-11-13 14:55:16] in=227 out=2745 Nov 13 14:55:16 buzones2 dovecot: imap(username): Warning: fscking index file /users/username/mdbox/storage/dovecot.map.index Nov 13 14:55:17 buzones2 dovecot: imap(username): Warning: mdbox /users/username/mdbox/storage: rebuilding indexes Nov 13 14:55:17 buzones2 dovecot: imap(username): Error: /users/username/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index reset, view is now inconsistent Nov 13 14:55:17 buzones2 dovecot: imap(username): Disconnected: IMAP session state is inconsistent, please relogin. in=383 out=4820 Nov 13 14:55:18 buzones2 dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=source_ip, lip=dest_ip, mpid=15511, TLS, session=<HKq2UA/rZQCe4wQZ> Nov 13 14:55:19 buzones2 dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=source_ip, lip=dest_ip, mpid=15512, TLS, session=<pRzNUA/rZgCe4wQZ> Nov 13 15:13:07 buzones2 dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=source_ip, lip=dest_ip, mpid=15538, TLS, session=<hDV3kA/rTACe4wQZ> Nov 13 15:13:36 buzones2 dovecot: imap(username): Disconnected: Logged out in=1791 out=119343 Nov 13 15:13:44 buzones2 dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=source_ip, lip=dest_ip, mpid=15539, TLS, session=<B02lkg/rTQCe4wQZ> [username@buzones2 ~]$ dovecot --version 2.2.7 The first days I was using thunderbird, and as we talked in other thread I thought it was a client issue, but now I've seen the same problem with kmail and mutt. Regards, Joseba Torre

3 5

[Dovecot] Mail filters in incoming message
by Jos Chrispijn 19 Nov '13

19 Nov '13

With my iMap client, I use various mail rules to move specific email to the right mail folders. Downside of that is that is this mailclient is not online, all email is stuck in my inbox, which makes reading email by mobile phone kind of chaotic. I have seen several Pigeonhole Sieve examples, but I would like to know if there is a nub solution (I am not a programmer) to run filters when they enter my mail server (Postfix 2.10.2,1 icw Dovecot 1.2.17) or if there is a user friendly GUI available to set these filters? Perhaps Anyone interested to create such a GUI? Best regards, Jos Chrispijn --- Artificial intelligence is no match for natural stupidity

4 4

[Dovecot] wiki links
by Timo Sirainen 19 Nov '13

19 Nov '13

Since google points only to wiki.dovecot.org, I changed it to now redirect all requests to wiki2. I didn’t want to originally do this to avoid breaking all old links, but maybe it’s not that bad anymore. Most links exist anyway for wiki2 too.

1 0

[Dovecot] Calling dovecot-lda from maildrop/shell
by Florian Lindner 19 Nov '13

19 Nov '13

Hello, I want to make final delivery for some of my mailboxes using dovecot-lda, since I'm interested in using sieve. My usual MDA which is called from postfix is and will be maildrop. First try was to call dovecot-lda from command line: /usr/lib/dovecot/dovecot-lda -d spam(a)xgm.de < testmail which gave return code 75 (EX_TEMPFAIL) and logged: dovecot: auth-worker(3533): mysql(localhost): Connected to database system dovecot: imap-login: Login: user=<spam(a)xgm.de>, method=PLAIN, rip=::1, lip=::1, mpid=3535, secured, session=<jwXWP3HrwgAAAAAAAAAAAAAAAAAAAAAB> dovecot: imap(spam(a)xgm.de): Disconnected: Logged out in=91 out=830 dovecot: lda(spam(a)xgm.de): Error: user spam(a)xgm.de: Initialization failed: Namespace '': Mail storage autodetection failed with home=/home/flindner/Mail/spam dovecot: lda(spam(a)xgm.de): Fatal: Invalid user settings. Refer to server log for more information. My userdb/password is like that home == maildir == /home/flindner/Mail/spam (without prefixed "maildir:"). It works fine for dovecot-imap, it detects that spam is a maildir. I've also tried prefixing home and or maildir with "maildir:" or calling: HOME=maildir:~/Mail/spam /usr/lib/dovecot/dovecot-lda < testmail which gave: dovecot: lda: Error: user flindner: Relative home directory paths not supported: maildir:/home/flindner/Mail/spam dovecot: lda: Fatal: Invalid user settings. Refer to server log for more information. What is the problem with the LDA here? Thanks, Florian

2 3

[Dovecot] Dovecot Listescape plugin problem
by vupibi 18 Nov '13

18 Nov '13

Dovecot Version: 2.0.19 I'm on Ubuntu 12.04.3 using Zentyal with Dovecot for a mail Server. What I try to setup is the possibility to use slashes ("/") in folder names inside the IMAP account. Regularly if I name a folder "foo/bar", the system creates me a folder named "bar" inside a folder named "foo". Listescape should give me the possibility but it does not work. It's not possible for me to write inside the "/etc/dovecot/dovecot.conf" because Zentyal will overwrite all changes when restarting the server. So my Configs are in "/etc/dovecot/extra.conf" and look like this: mail_plugins = listescape (i tried "mail_plugins = $mail_plugins listescape" as well, no success) namespace inbox { separator = "\\" prefix = inbox = yes hidden = no list = yes location = maildir:/var/vmail/%d/%n:LAYOUT=fs } My dovecot -n output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-55-generic x86_64 Ubuntu 12.04.3 LTS ext4 auth_gssapi_hostname = mailand.sxps.local auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = gssapi plain first_valid_gid = 116 first_valid_uid = 108 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = 116 mail_home = /var/vmail/sieve/%d/%u mail_location = maildir:/var/vmail/%$ mail_plugins = listescape mail_uid = 108 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { hidden = no inbox = yes list = yes location = maildir:/var/vmail/%d/%n:LAYOUT=fs prefix = separator = \ } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = maildir:User quota quota_rule = *:storage=0 sieve = /var/vmail/sieve/%d/%u/sieve-script sieve_global_path = /var/vmail/sieve/default.sieve sieve_storage = /var/vmail/sieve/%d/%u } protocols = pop3 imap sieve service auth { executable = /usr/lib/dovecot/auth unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = ebox mode = 0600 user = ebox } user = dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } ssl_cert = </etc/dovecot/ssl/dovecot.pem ssl_key = </etc/dovecot/ssl/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve quota postmaster_address = admin(a)sxps.eu } Any Ideas? -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-Listescape-plugin-problem-tp45… Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] why the system give the user more size than quota
by ihab 18 Nov '13

18 Nov '13

Hello i put quota rules in the dovecot 1.2.15 the quota is per user and the system read from data base but the system give to user size more than quota any help please -- View this message in context: http://dovecot.2317879.n4.nabble.com/why-the-system-give-the-user-more-size… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Experience with ALTStorage on NFS mount
by Urban Loesch 18 Nov '13

18 Nov '13

Hi, we are thinking about storing older mails (eg. safed before 6 months) to an alternative storage mounted via NFS from an external storage box. Some technical details - the storage will be connected via 1 gbit ethernet. Access will be allowed from different dovecot servers, but only to divided directories for each dovecot. - storage has the option to use RAID 5 or 6. Max. amount of Disks are 15. - the index files and the primary storage are just divided in two different directories and are stored local on SAS disks with RAID 10 - current mail_location config is: mdbox:/home/vmail/%d/%n:INDEX=/home/dovecotindex/%d/%n - future mail_location config shoudl look like: mdbox:/home/vmail/%d/%n:INDEX=/home/dovecotindex/%d/%n:ALT=/home/extstorage/vmail/%d/%n My question is, if someone of you have already experience in such a setup with NFS? And are there some tuning tips for NFS? We have not many experience with NFS right now. Or perhaps is there some better solution? Many thanks and regards Urban

2 2

Re: [Dovecot] highly available userdb
by Nick Edwards 18 Nov '13

18 Nov '13

On 11/12/13, Jan-Frode Myklebust <janfrode(a)tanso.net> wrote: > My installation is only serving 1/10 of your size, but long time ago we > migrated off mysql for userdatabase, and over to LDAP. The MySQL data > source had issues (not dovecot related), and didn't seem like the right > tool for the job. A database is a database, a master is a master, and a slave is a slave our mysql has never had problem, not a single one, its why I'm so annoyed dovecot is talking to master when it doesn't need to

2 1

[Dovecot] I wrote CheckPassword Shell example for Dovecot
by Nicolay Vizovitin 18 Nov '13

18 Nov '13

Hello, Seeing as there are not too many Dovecot CheckPassword driver usage examples on the Internet, I wrote one using Shell script. You can see post about it here: http://devblog.plesk.com/2013/11/shell-checkpassword-authentication-in-dove…. The post also has a link to Mercurial repository with the example. Feel free to use the example as you see fit. You may even include it into documentation (or link to it), if you'd like. Thanks for such great software as Dovecot! -- Best regards, Nick

1 0

Re: [Dovecot] Issue with Mavericks Mail Client
by Ken Mandelberg 17 Nov '13

17 Nov '13

Timo Sirainen<tss(a)iki.fi> wrote > On 17.11.2013, at 1.47, Ken Mandelberg<km(a)mathcs.emory.edu> wrote: > >> >We run a dovecot mailserver. One of the clients I use is a Mac Laptop. Recently I upgraded from Mountain Lion (10.8) to Mavericks (10.9). Under 10.8 it worked fine. On 10.9 it syncs up when I invoke the client, but after a while stops getting updates. >> > >> >Most of my mail clients are on Linux (thunderbird) or Android (K9) and I admit that several run against my very large INBOX simultaneously. The one of the 10.9 Mac laptop is the only one with this issue. >> > >> >Is there something known about the new 10.9 Mail client on the Mac that would lose sync against dovecot? > You didn?t mention what Dovecot version. Anyway I?ve noticed once that 10.9 Mail didn?t show some of my mails until I restarted it. Then there are several other annoying bugs.. I really shouldn?t have upgraded yet. We are running Dovecot 2.0.12, and I already have the Mavericks Mail patch of a few days ago. Still requires a restart to get new mail.

2 1

[Dovecot] Issue with Mavericks Mail Client
by Ken Mandelberg 17 Nov '13

17 Nov '13

We run a dovecot mailserver. One of the clients I use is a Mac Laptop. Recently I upgraded from Mountain Lion (10.8) to Mavericks (10.9). Under 10.8 it worked fine. On 10.9 it syncs up when I invoke the client, but after a while stops getting updates. Most of my mail clients are on Linux (thunderbird) or Android (K9) and I admit that several run against my very large INBOX simultaneously. The one of the 10.9 Mac laptop is the only one with this issue. Is there something known about the new 10.9 Mail client on the Mac that would lose sync against dovecot?

2 1

Re: [Dovecot] PAM and user@domain login?
by Larry Rosenman 17 Nov '13

17 Nov '13

Yes, it does. I wish the documentation on the Wiki was easier to find gems like this. Thank You! On Fri, Nov 15, 2013 at 12:43 PM, Pascal Volk < user+dovecot(a)localhost.localdomain.org> wrote: > On 11/15/2013 06:35 PM Larry Rosenman wrote: > > Is there a way with 2.2.6 to have the system do a PAM login for user when > > presented with > > login user@domain pass > > from the IMAP services? > > > > I have a stupid android client that wants to use user@domain but doesn't > > have an option > > to pass just user..... > > > > Thanks for any help. > > > > > > > > Does auth_username_format=%n solve your issue? > > > Regards, > Pascal > -- > The trapper recommends today: decade.1331919(a)localdomain.org > -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

3 11

[Dovecot] PAM and user@domain login?
by Larry Rosenman 16 Nov '13

16 Nov '13

Is there a way with 2.2.6 to have the system do a PAM login for user when presented with login user@domain pass from the IMAP services? I have a stupid android client that wants to use user@domain but doesn't have an option to pass just user..... Thanks for any help. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

2 1

[Dovecot] Replication Setup
by springy 16 Nov '13

16 Nov '13

Hi, I am attempting to setup replication between two hosts running Centos 6.4 and Dovecot 2.2.5. My users are real unix users, so I am trying to run the replication as root user, so that it has the appropriate permissions to run. I have two users at present syd1 and syd2, and the two hosts are called syd1 and syd2 as well. When I start Dovecot with the settings below, nothing happens, and the two mailboxes remain un-synced. There are no errors in the log, just Dovecot starting successfully. I have attempted to run the dsync command manually from syd1: ssh -q -o StrictHostKeyChecking=no -i /home/vmail/.ssh/id_ecdsa root@syd2 doveadm dsync-server -usyd1 and I get the following in response, but this might be normal: VERSION dsync 3 1 Hhostname sync_ns_prefix sync_box sync_box_guid sync_type debug sync_visible_namespaces exclude_mailboxes send_mail_requests backup_send backup_recv lock_timeouno_mail_sync no_backup_overwrite Smailbox_guid last_uidvalidity last_common_uid last_common_modseq last_common_pvt_modseq changes_during_sync Nname existence mailbox_guid uid_validity uid_next last_renamed_or_created subscribed last_subscription_change Dhierarchy_sep mailboxes dirs unsubscribes Bmailbox_guid uid_validity uid_next messages_count first_recent_uid highest_modseq highest_pvt_modseq mailbox_lost cache_fields have_guids have_save_guids Atype key value stream deleted last_change modseq Ctype uid guid hdr_hash modseq pvt_modseq save_timestamp add_flags remove_flags final_flags keywords_reset keyword_changes Rguid uid Mguid uid pop3_uidl pop3_order received_date stream cname decision last_used . Hsyd2 The prompt hangs, when I push enter I get: dsync-remote(syd1): Error: dsync(local): Remote dsync doesn't use compatible protocol Please can someone help me diagnose? Cheers, D Here are my dovecot in outputs: syd1: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.23.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_mechanisms = plain login disable_plaintext_auth = no dsync_remote_cmd = ssh -q -o StrictHostKeyChecking=no -i /home/vmail/.ssh/id_ecdsa root@%{host} doveadm dsync-server -u%u mail_location = maildir:~/Maildir mail_plugins = " notify replication" mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { mail_replica = remote:root@syd2 } protocols = imap pop3 service replicator { process_min_avail = 1 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = replication } protocol imap { mail_plugins = replication } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } syd2: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.23.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login disable_plaintext_auth = no dsync_remote_cmd = ssh -q -o StrictHostKeyChecking=no -i /home/vmail/.ssh/id_ecdsa root@%{host} doveadm dsync-server -u%u mail_location = maildir:~/Maildir mail_plugins = " notify replication" mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { mail_replica = remote:root@syd2 } protocols = imap pop3 service replicator { process_min_avail = 1 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = replication } protocol imap { mail_plugins = replication } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } -- View this message in context: http://dovecot.2317879.n4.nabble.com/Replication-Setup-tp45415.html Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] Dovecot antispam unable to call dspam since dovecot upgrade to 2.X
by Guillaume Hilt 15 Nov '13

15 Nov '13

Hello, Running Gentoo AMD64 2013 with postfix, mysql, dovecot and dspam, i finally upgraded to dovecot 2.X. I'm running dovecot 2.2.6, dspam 3.10.2-r1 and dovecot-antispam-2.0_pre20130429. My DSPAM configuration hasn't changed between dovecot 1.X and 2.X. When i'm moving a mail to or from the Spam folder, Igot this error in my logs : Nov 14 10:33:25 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: dspam error:7751 prefix=imap(ghilt(a)shadowprojects.org): Nov 14 10:33:25 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: executing /usr/bin/dspam failed: 13 (uid=1001, gid=12) Nov 14 10:33:25 srv1 dovecot: imap: Error: Nov 14 10:33:25 srv1 dovecot: imap: Error: uid 1001 is user vmail (dovecot is running under vmail) gid 12 is group mail (vmail is a member, with mail,postfix,dspam,dovecot,apache) I enabled DSPAMdebug mode and when i move the mail, i don't see anything in the logs, meaning that dspam isn't called at all. Enabling debug in dovecot doesn't give me more informations. Here's my dovecot plugins settings : plugin { #setting_name = value # Selects the specific backend to be used for spam system training antispam_backend = dspam # Specifies whether to allow appending mails to the spam folder # from the unknown source. Optional, default = NO. antispam_allow_append_to_spam = NO # Specifies whether to skip the leading "From " line of the mail # piped to the backend processor. Optional, default = NO. antispam_skip_from_line = NO # semicolon-separated list of spam folders antispam_spam = Spam # semicolon-separated list of Trash folders (default unset i.e. none) antispam_trash = Trash # semicolon-separated list of unsure folders (default unset i.e. none) #antispam_unsure = # mail signature (used with any backend requiring a signature) antispam_signature = X-DSPAM-Signature # specifies what to do if the signature header is missing. Possible # values: "move" (move the mail silently without training), "error" # (display an error stating that the signature header is missing). # Optional, default = "error". antispam_signature_missing = error # specifies the path to the dspam client binary. # Optional, default = "/usr/bin/dspam". antispam_dspam_binary = /usr/bin/dspam # list of command line arguments to the dspam binary. Must include # one "%%s" in order to be replaced with the signature value. # Optional, default = "--source=error;--signature=%%s". antispam_dspam_args = --user;%u;--deliver=;--source=error;--signature=%%s # command line argument to specify that mail should be reclassified # as SPAM. Optional, default = "--class=spam". antispam_dspam_spam = --class=spam # command line argument to specify that mail should be reclassified # as not SPAM. Optional, default = "--class=innocent". antispam_dspam_notspam = --class=innocent # specifies the mail header name to derive the classification result. # Optional, default = NONE. antispam_dspam_result_header = X-DSPAM-Result # specifies the list of classification results to avoid retraining # for. Optional, default = NONE. #antispam_dspam_result_blacklist = Virus;Blocklisted;Blacklisted } USE flags : [I] mail-filter/dovecot-antispam Available versions: (~)2.0_pre20120226 (~)2.0_pre20130429 Installed versions: 2.0_pre20130429(12:26:34 04/11/2013) Homepage: http://wiki2.dovecot.org/Plugins/Antispam/ Description: A dovecot antispam plugin supporting multiple backends [I] net-mail/dovecot Available versions: 2.0.19 2.1.9 2.1.16 (~)2.1.17 2.2.5 (~)2.2.6 {bzip2 caps cydir doc imapc ipv6 kerberos ldap lucene +maildir managesieve mbox mdbox mysql pam pop3c postgres sdbox selinux sieve solr sqlite (+)ssl static-libs suid tcpd vpopmail zlib} Installed versions: 2.2.6(12:26:15 04/11/2013)(bzip2 ipv6 maildir managesieve mysql pam sieve ssl tcpd zlib -caps -cydir -doc -imapc -kerberos -ldap -lucene -mbox -mdbox -pop3c -postgres -sdbox -selinux -solr -sqlite -static-libs -suid -vpopmail) Homepage: http://www.dovecot.org/ Description: An IMAP and POP3 server written with security primarily in mind [I] mail-filter/dspam Available versions: 3.10.2-r1 {clamav daemon debug +domain-scale +hash large-scale ldap mysql postgres small-scale sqlite static-libs syslog user-homedirs virtual-users} Installed versions: 3.10.2-r1(10:08:06 14/11/2013)(clamav daemon domain-scale mysql syslog virtual-users -debug -hash -large-scale -ldap -postgres -small-scale -sqlite -static-libs -user-homedirs) Homepage: http://dspam.sourceforge.net/ Description: A statistical-algorithmic hybrid anti-spam filter DSPAM binary is owned by dspam (chmod u+s) : -r-s--x--- 1 dspam dspam 96K 14 nov. 10:08 /usr/bin/dspam And all the necessary users are trusted by DSPAM : Trust root Trust dspam Trust apache Trust mail Trust mailnull Trust smmsp Trust daemon Trust vmail Trust dovecot Trust postfix Any idea ? Thanks, -- Guillaume Hilt

4 5

[Dovecot] Dovecot panic during replication
by IT geek 31 15 Nov '13

15 Nov '13

I'm seeing the following errors on my Dovecot box when trying to replicate: Nov 15 18:44:46 server1 dovecot: dsync-server(mark): Panic: file mbox-lock.c: line 799 (mbox_lock): assertion failed: (lock_type == F_RDLCK || mbox->mbox_lock_type != F_RDLCK) Nov 15 18:44:46 server1 dovecot: dsync-server(mark): Fatal: master: service(doveadm): child 21571 killed with signal 6 (core not dumped - set service doveadm { drop_priv_before_exec=yes }) And on the target I see: Nov 15 17:47:02 server2 dovecot: dsync-server(mark): Error: read( server1.mdb.eu.com) failed: EOF Does anyone know what is causing this? I help to solve this before I can put it live :-( Here's my dovecot -n from server1: # 2.2.7: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = secret doveadm_port = 12345 listen = 192.168.1.1 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = tcp:server2.mdb.eu.com } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/mail.mdb.eu.com.crt ssl_key = </etc/openssl/private/mail.mdb.eu.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)example.com } Thanks.

1 0

[Dovecot] Sieve script problem (don't know if is it possible to do this)
by Yanko Hernández Álvarez 15 Nov '13

15 Nov '13

Hello: I'm loosing my mind trying to classify my outgoing messages with sieve-test (2.0.9, centos 6.4). It came to the point I think it's not even possible with a sieve script. I need to classify my outgoing messages in three folders: 1- To my department (@dept.example.com) 2- To my company (@example.com, @anyotherdept.example.com) (anyotherdept.example.com as in a way to say "any other domain that ends with 'example.com', but not 'dept.example.com'") 3- To the rest of the word (@any.other.domain) The problematic requirement is I need to make a copy in EVERY IMAP folder that applies. For instance: for an email such as ---- From: myuser(a)dept.example.com To: user(a)dept.example.com, user(a)example.com, user(a)other.domain ... ---- I need to make a copy to all folders: Dept (because of user(a)dept.example.com) Company (because of user(a)example.com) and Rest (because of user(a)other.domain) Rule for #1 is simple: ----- if address :matches :domain "To" "dept.example.com" { fileinto: "Dept"; } ----- Rule for #2, I don't know how to declare it: I don't know how to make a rule that matches "example.com" (or anyotherdept.example.com) and not "dept.example.com". if allof(address :matches :domain "To" "example.com", not address :matches :domain "To" "dept.example.com") { fileinto: "Company"; } ... doesn't work, because user(a)dept.example.com matches (address :matches :domain "To" "example.com"), but it doesn't matches (not address :matches :domain "To" "dept.example.com"). "user(a)example.com" matches both conditions, but sieve-test stops on the first email address with a "not matches" As for Rule #3: I don't know how to do it either, it should be the same as Rule #2, (with different parameters of course). A sieve script should be capable to do this, but it seems that I'm loosing something. Does any one knows how to do this? Kind regards Yanko PS: English is not my native language. Please forgive me any mistakes/misspellings/etc I made.

6 9

[Dovecot] Fwd: Sieve script problem (don't know if is it possible to do this)
by Yanko Hernández Álvarez 15 Nov '13

15 Nov '13

Ok, let simplify a little bit the problem: Forget about outgoing or incoming mail. Forget about IMAP or SMTP. You have a ton of emails in raw form (RFC-XXX, don’t remember the exact number right now) you want to classify… and you think: “Sieve is a language made to do exactly that kind of task… If only I could use the same mechanism dovecot-lda uses! Oh, wait… “sieve-test –e” does exactly that!!! I could use it!!!”… but so far… no success. Now, a little more context. I want to leave a copy (a historical record) of every email (work related) I received/sent. The processing/classification doesn’t have to be in real time, it can be on “down time/offline/later/scheduled”. Sent messages are hard, because of the several senders and the several copies on several folders. But I can work around it, with various tricks (bcc, different headers, etc.) and adjusting the processing sieve script. I can train myself –The interest is mine after all!-, and that’s OK. But I can’t train other people to suit my needs. And received messages are JUST AS HARD. Because I want to classify them using the same rules. I also want to keep context, to record all things work related, not only what I said, but also what was said by others, using the same rules (which by the way, are many more than the restricted example I posted). Besides, I want the PC do all the work for me, not the other way around. I think “Sieve must be capable of doing it! This is the kind of things sieve was designed for!” is a reasonable idea. But so far, no success… :-( Now, let me see all the replies in detail... (I really appreciate all the help I'm getting, thank you all very much) Yanko On 11/15/13, Stephan Bosch <stephan(a)rename-it.nl> wrote: > On 11/15/2013 8:41 AM, Steffen Kaiser wrote: >> Hi Stephan, about #3 how about the variable extension? I never used it so >> far, but it should work > > Congratulations! You fell into the same trap I did when I first saw this > problem. :) > > Consider this header: > > To: user(a)dept.example.com, user(a)example.com, user(a)other.domain > > >> > require "fileinto"; >> > require "relational"; >> >> require "variables"; >> >> set "done" "0"; >> >> > if address :is :domain "To" "dept.example.com" { >> > fileinto "Dept"; >> >> set "done" "1"; >> >> > } > > The variable "done" is set to "1", due to the first address. > >> > if allof ( >> > address :value "ne" :domain "To" "dept.example.com", >> > anyof ( >> > address :matches :domain "To" "*.example.com", >> > address :is :domain "To" "example.com")) { >> > fileinto "Company"; >> >> set "done" "1"; >> > } > > The variable "done" is set to "1", due to the second address. And now > that I think of it, it would also work on the combination of the first > and the third, making this rule still inadequate. > >> if string :is "${done}" "0" { >> fileinto "other"; >> } > > Since "done" is set to "1", the message is not filed into "other". But > that is wrong, due to the presence of the third address. > > See the core of the problem now? :) > > Regards, > > Stephan. > >

1 0

[Dovecot] Establing a GMail like workflow
by Florian Lindner 15 Nov '13

15 Nov '13

Hello! I'm about to migrate my mails from GMail back to my self hosted solution, using Dovecot imap server. I really liked gmail workflow: - (Almost) all mail goes to inbox. - Most mail is read and not important anymore, it is archived and moved to "all messages". - Inbox stays more or less clean, with only mails that are still of some interest. - Mail (except Spam) is never deleted, just archived. How can I achieve such a workflow using Dovecot and some MUA (Roundcube and probably KMail). - I can simply delete messages that I want to archive, Trash will never be purged. Problems: Some mail clients have settings like "Purge Trash at exit", so my mail is always in danger of being deleted accidently. Futhermore it does not really have the semantics of what I am actually doing. - Instead of deleting messages for archiving, move them to some Archiv folder. Since archiving is a very frequent action this involves much more cliks in the MUA than just deleting. Or some configuration change in the client. How would you do that? I'm also open to entirely different suggestions! What I want are basically these things: - Never delete legitimate mail - Use the Inbox as a workspace for mails that are still of some interest. This can also be quite old mail, time based archiving does not work. - Have some kind of mail archive. Thanks! Florian

1 0

[Dovecot] Dovecot login slow
by Marc Perkel 15 Nov '13

15 Nov '13

Can't figure out why the login is slow. I telnet to port 143 on localhost. I type: 0 login user password Takes about 10 seconds and it lets me in. I'm using MYSQL and it's a small indexed database on a fast server so it's not the mysql query that's slowing it down. At least I don't think it is. But - kind of stumped. Just wondering if there's something obvious I'm overlooking.

6 14

[Dovecot] Executing a wget? or clicking on a link in inbound email?
by Voytek 14 Nov '13

14 Nov '13

I use Dovecot, but all I know about Dovecot is that's it is an IMAP server, and, I know that it includes lots of other stuff that I see discussed on this list, but I know nothing about it. I have a situation that, maybe once a week, I get an html only email that contains 3 clickable links. I would like, on receipt of such email, auto click the first link (perhaps execute a wget to do so? or ?) Can something like this be done, which of the tools, what docs to look at? link is like so http://llll.domain.tld/irportal?id=a0000000006hWO4AAM0000000000KlOrcAAF1111… Dovecot 2.09 Centos (apologies for blank post I've just sent) -- Sent from Kaiten Mail. Please excuse my brevity.

1 0

[Dovecot] Autocreation of sieve filters
by Angel L. Mateo 14 Nov '13

14 Nov '13

Hello, Is there any way to create a predefined sieve filters during mailbox autocreation? What I want is that my user's mailboxes are automatically created (using mailbox option in namespaces) but I want them to have a predefined sieve script. Using a postlogin script could be an idea, but I'd prefer an automatic one, because postlogin only will filter after first user login -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 3

[Dovecot] trashed
by Nick Edwards 14 Nov '13

14 Nov '13

On 11/12/13, Reindl Harald <h.reindl(a)thelounge.net> wrote: > tell that Noel which is blocking my messages and so did > not read what i quoted from Benny's trolling but opens > his mouth > > tell that Noel which is abusing his power by set complete > IP-ranges on RBL lists he maintains because he does not > like one person using a mailserver on that range besides > many other people > Let us see Posfix list - BANNED Roundcube List - MODERATED Centos List - MODERATED (maybe banned) Fedora list - 1/ MODERATED - 2/ Had hissy fit temper tantrum with moderators a few days ago about his continual moderation and claimed was quitting fedora list. Likely has resubscribed to Fedora (if indeed even did quit), like on Postfix under a lists(a)rhsoft.net address or something similar and thats only the ones *I* know about. So, your in a blacklist as well? wouldnt have anything to do with your actions pretty much everywhere would it now, nooooooooooooooooooooooooooooo, of course not. Taking into account all of the above, I think its fair to say, its more than one person that doesn't like your foul mouthed antics, which was explained to you many times by fedora moderators, trying to get you to change, all you had to do, and they would remove moderation, but you refused, so you deserve it, no one else to blame but yourself YOU ARE NOT THE VICTIM >>> blocked using >>> bl.alt-backspace.org; This range is used by caustic Internet troll >>> Harald >>> Reindl h.reindl(a)thelounge.net / ACCESS DENIED - see >>> http://www.alt-backspace.org/usage.php#misc (in reply to RCPT TO >>> command) Awesome! Thanks for that, I have just enabled bl.alt-backspace.org on our company servers ciao

6 11

Re: [Dovecot] Dovecot login slow
by Joseph Tam 14 Nov '13

14 Nov '13

> ssl_ca = </usr/share/ssl/certs/rapidssl.crt > ssl_cert = </usr/share/ssl/certs/imapd.pem > ssl_key = </usr/share/ssl/certs/imapd.pem > > These lines look weird to me. Why do they have a < ? Red herring; this is standard. I think it means "feed this file into stdin". On 11/13/2013 12:41 PM, Marc Perkel wrote: >>> Takes about 10 seconds and it lets me in. I'm using MYSQL and it's a >>> small indexed database on a fast server so it's not the mysql query that's >>> slowing it down. At least I don't think it is. But - kind of stumped. Just >>> wondering if there's something obvious I'm overlooking. I think maybe turning up the verbosity on logging will help. If that doesn't, try process tracing the dovecot auth process. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot 2.0.9 Quota Limit issues
by David Johnson 14 Nov '13

14 Nov '13

Hello, I've tried searching for information regarding this problem but haven't found anything. Currently I have a Dovecot 2.0.9 with virtual users from a SQL table. Right now I'm only using global quota limits. Here is my quota setup: plugin { quota = maildir:User quota quota_rule = *:storage=3G quota_rule2 = Trash:storage=+100M quota_rule3 = Archive:storage=+1G quota_rule4 = Archive/2013:storage=+1G quota_rule5 = Junk:ignore } According to the documentation this should allow the Archive folder to have an additional 1G in it that is not counted toward the global 3G. However I have users who have 2G in the Archive folder, and about 1G elsewhere. At this point they stop receiving emails due to quota exceeded. doveadm quota get -u <user> displays this: Quota name Type Value Limit % User quota STORAGE 3150312 3145728 100 User quota MESSAGE 8271 - 0 If I change Archive:storage=+1G to Archive:ignore then they can receive emails again. After the change doveadm quota get -u displays this: Quota name Type Value Limit % User quota STORAGE 1266885 3145728 40 User quota MESSAGE 8271 - 0 Is there something I'm missing as to why this setup isn't working? Thanks! -- David J.

2 2

[Dovecot] Can't see e-mails
by Muzaffer Tolga Ozses 12 Nov '13

12 Nov '13

Hi, I have a postfix+dovecot+mysql+roundcube setup. I recently changed providers. At the moment, postfix can receive e-mails but either dovecot or roundcube can't see e-mails. I did a telnet example.com 143 then a login user pass and this is what I see: 2013-11-12 16:08:51 auth: Debug: sql(alanya(a)boradental.com.tr,193.255.135.254): SELE CT '/var/vmail/boradental.com.tr/alanya' as home, 'maildir:/var/vmail/ boradental.com .tr/alanya' as mail, 5000 AS uid, 5000 AS gid, concat('dirsize:storage=', quota) AS quota FROM mailbox WHERE username = 'alanya(a)boradental.com.tr' AND active = '1' 2013-11-12 16:08:51 auth: Debug: master out: USER 3767009281 alanya@borad ental.com.tr home=/var/vmail/boradental.com.tr/alanya mail=maildir:/va r/vmail/boradental.com.tr/alanya uid=5000 gid=5000 quota=dirsize:storage=0 so I'm assuming dovecot works. Am I right to assume this? If I'm not, what's the solution? If I am, how can I debug this? Regards,

2 2

[Dovecot] how to make quota per user ??
by ihab 12 Nov '13

12 Nov '13

I use dovecot version 1.2.15 and i put quota for all users , now i want to give more size for some emails , i already added the quota to user database , and i added the queries from http://wiki.dovecot.org/Quota/1.1 MySQL: user_query = select uid, gid, home, \ concat('*:bytes=', quota_bytes) as quota_rule \ from users where userid = '%u' # MySQL with userdb prefetch: Remember to prefix quota_rule with userdb_ # (just like all other userdb extra fields): password_query = select userid as user, password, \ uid as userdb_uid, gid as userdb_gid, \ concat('*:bytes=', quota_bytes) as userdb_quota_rule \ from users where userid = '%u' but it is not work what i have to change and in which files please ? -- View this message in context: http://dovecot.2317879.n4.nabble.com/how-to-make-quota-per-user-tp45335.html Sent from the Dovecot mailing list archive at Nabble.com.

3 2

[Dovecot] my quota warning script not getting executed2
by ihab 12 Nov '13

12 Nov '13

Why is my quota warning script not getting executed? :( dovecot version is 1.2.15 this is part of dovecot.conf protocol imap { listen = 127.0.0.1:143 #ji1 quota config mail_plugins = quota } quota = maildir:User quota quota_rule = *:storage=2M quota_exceeded_message=Quota exceeded please go http://www.go.com . quota_warning = storage=99%% /usr/local/bin/quota-warning.sh 99 %u quota_warning2 = storage=98%% /usr/local/bin/quota-warning.sh 98 %u quota_warning3 = storage=97%% /usr/local/bin/quota-warning.sh 97 %u and this is quota-warning.sh FROM="postmasterEmail" msg="From: $FROM To: TEST EMAIL Subject: Your email quota is 10% full Your mailbox is now 10% full." echo -e "$msg" | /usr/sbin/sendmail -f $FROM "TEST EMAIL " exit 0 -- View this message in context: http://dovecot.2317879.n4.nabble.com/my-quota-warning-script-not-getting-ex… Sent from the Dovecot mailing list archive at Nabble.com.

3 3

[Dovecot] Dovecot MTA
by Timo Sirainen 12 Nov '13

12 Nov '13

Hi all, I've never really wanted to create my own MTA, because I like Postfix quite a lot. And I always thought it would require a horribly lot of time to be able to create something that was anywhere even close to having Postfix's features. (I would shudder to even think about recreating Dovecot from scratch nowadays.) But slowly over time I've also been thinking of ways how things could be done a bit better, and I think I have enough ideas to start thinking about Dovecot MTA more seriously in a few more months (after my current busy schedule calms down a bit). And (unlike Dovecot!) I'm not planning on taking over the world with the MTA (or at least not very quickly), but it would definitely be useful for many installations I know of. My main design goals for the MTA are: * In normal load don't queue mails, just continue delivering the mail through different processes/services until it succeeds or fails, and only after that return ok/failure to the SMTP client. So there's no (forced) post-queue filtering, everything would normally happen pre-queue. This is required because in Germany (and EU in general?) you aren't allowed to just drop spams after SMTP server has responsed OK to the client, even if you’re 100% sure it’s a spam. So this would also mean that the SMTP DATA replies will come more slowly, which means that the SMTP server must be able to handle a lot more concurrent SMTP connections, which means that in large installations the smtpd process must be able to asynchronously handle multiple SMTP client connections. * In some cases you can't really avoid placing mails into a queue. This could be because of temporary failures or maybe because of an abnormal load spike. A mail queue in local disk isn't very nice though, because if the local disk dies, the queued mails are lost. Dovecot MTA will allow the queue to be in object storage and it will also likely support replication (similar to current dsync replication). In both of these cases if a server dies, another server can quickly take over its queue and continue handling it. * Dovecot MTA is a new product, which means we can add some requirements to how it's being used, especially related to securely sending emails between servers. It could do a bunch of checks at startup and fail to even start if everything isn't correct. Here are some things I had in mind - not sure if all of these are good ideas or not: - Require DKIM configuration. All outgoing mails will be DKIM signed. - Require the domain’s DNS to contain _submission._tcp SRV record (and actually might as well require _imap._tcp too) - Require SSL certificates to be configured and always allow remote to use STARTTLS - Require DANE TLSA record to exist and match the server's configured SSL cert - Have very good (and strict?) DNSSEC support. If we know a remote server is supposed to have valid DNSSEC entries, but doesn't, fail to deliver mail entirely? - Add a new DNS record that advertises this is a Dovecot MTA (or compatible). If such entry is found (especially when correctness is guaranteed by DNSSEC), the email sender can assume that certain features exist and work correctly. If they don't, it could indicate an attack and the mail sending should be retried later. This DNS record would of course be good to try to standardize. * Configuration: It would take years to implement all of the settings that Postfix has, but I think it's not going to be necessary. In fact I think the number of new settings to dovecot.conf that Dovecot MTA requires would be very minimal. Instead nearly all of the configuration could be done using Sieve scripts. We'd need to implement some new MTA-specific Sieve extensions and a few core features/configurations/databases that the scripts can use, but after that there wouldn't be really any limits to what could be done with them. * Try to implement as many existing interfaces as possible (e.g. Milter and various Postfix APIs like policy servers) so that it wouldn’t be necessary to reimplement all the tools and filters. So perhaps something like this could be done in time for Dovecot v2.4. Any thoughts/ideas/suggestions?

30 76

[Dovecot] blames for using maillists ?
by Benny Pedersen 12 Nov '13

12 Nov '13

why do you not simply shut up? # sieve rule require ["imap4flags"]; # rule:[reindl] if allof (header :contains "From" "h.reindl(a)thelounge.net") { setflag ["\\Seen","\\Flagged"]; stop; }

3 3

[Dovecot] dsync-server panic/fatal errors
by IT geek 31 11 Nov '13

11 Nov '13

Would anyone like to hazard a guess what these errors mean: Nov 11 18:57:04 server2 dovecot: dsync-server(mark): Panic: file mbox-lock.c: line 799 (mbox_lock): assertion failed: (lock_type == F_RDLCK || mbox->mbox_lock_type != F_RDLCK) Nov 11 18:57:04 server2 dovecot: dsync-server(mark): Fatal: master: service(doveadm): child 3119 killed with signal 6 (core not dumped - set service doveadm { drop_priv_before_exec=yes }) Getting this replication working is driving me nuts! :'-( Any help would be appreciated. -Mark

1 0

[Dovecot] Incorrect Responses on deliverable mails with LMTP server
by Thomas Leuxner 11 Nov '13

11 Nov '13

Appears some change between 2.2.6 and 2.2.7 altered the response codes for LMTP user verification probes. Dovecot 2.2.6: Nov 2 15:50:48 spectre postfix/qmgr[627]: 3dBjr80wMgz1s: from=<double-bounce(a)spectre.leuxner.net>, size=271, nrcpt=1 (queue active) Nov 2 15:50:48 spectre postfix/cleanup[6226]: 3dBjr80xbYz1w: message-id=<20131102145047.2D3C6824147(a)sam.dfn-cert.de> Nov 2 15:50:48 spectre postfix/lmtp[6228]: 3dBjr80wMgz1s: to=<tlx(a)leuxner.net>, orig_to=<security(a)leuxner.net>, relay=spectre.leuxner.net[private/dovecot-lmtp], delay=0.03, delays=0/0.01/0.01/0.01, dsn=2.1.5, status=deliverable (250 2.1.5 OK) Dovecot 2.2.7: Nov 5 05:24:04 spectre postfix/qmgr[627]: 3dDHnc5J06z1s: from=<double-bounce(a)spectre.leuxner.net>, size=271, nrcpt=1 (queue active) Nov 5 05:24:04 spectre postfix/smtpd[2484]: 3dDHnc5KWcz1w: client=web.heise.de[193.99.144.71] Nov 5 05:24:04 spectre postfix/cleanup[2489]: 3dDHnc5KWcz1w: message-id=<E1VdXxN-0002Gx-0s.01(a)web.heise.de> Nov 5 05:24:04 spectre postfix/lmtp[2491]: 3dDHnc5J06z1s: to=<tlx(a)leuxner.net>, orig_to=<newsletters(a)leuxner.net>, relay=spectre.leuxner.net[private/dovecot-lmtp], delay=0.03, delays=0/0.01/0.01/0, dsn=4.4.2, status=undeliverable (lost connection with spectre.leuxner.net[private/dovecot-lmtp] while sending MAIL FROM) While it still seems to work, mail gets delivered, it looks pretty ugly in the logs. Regards Thomas

2 2

[Dovecot] server side private/public key
by Peter Mogensen 11 Nov '13

11 Nov '13

*Christian Felsing wrote: * > Please consider to add server side private/public key encryption for incoming mails. > If client logs on, the password is used to unlock users server side private key. > If mail arrives from MTA or any other source, mail is encrypted with users public key. > Key pair should be located in LDAP or SQL server. PGP and S/MIME should be supported. > This is for the situation if NSA or other organizations asks admin for > users mail insistently, So ... exactly which security threat are you thinking about preventing here? This won't protect against: * NSA listening in on the mails when they arrive. * NSA taking a backup of your mails and wait for your first attempt to read them - at which time they'll have your private key in plain text. It seems like a much wider protection to just keep you private key for your self. /Peter

3 2

[Dovecot] Can't get sieve/managedsieve working
by Alter Depp 11 Nov '13

11 Nov '13

Hi, I am running dovecot 2.1.7 for a while, with roundcube webmail frontend 0.9.5 . Now I wanted to add sieve to filter mails. Unfortunately most tutorials are for dovecot 1.x but I'm running dovecot 2 on debian wheezy. I could upload some scripst with sieve-connect, checked and activated them. When I try to edit filters with thunderbird sieve plugin 0.2.2 nothing happens. If I try to edit filters with roundcube managesieve plugin nothing happens, too, but I get some errors in logfile: > roundcube: "Authentication failed." (3) > roundcube: Not currently in AUTHORISATION stata (1): Can someone help me, to get it running? # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.6.11+ armv6l Debian 7.2 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = mbox:~/mail:INBOX=/var/mail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { special_use = \Trash name = Trash } prefix = name = inbox } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = stefan@localhost protocols = " imap sieve" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service { inet_listener { port = 4190 name = sieve } name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl_cert = </etc/ssl/certs/ssl-cert-raspi.pem ssl_key = </etc/ssl/certs/ssl-cert-raspi.pem userdb { driver = passwd } protocol lmtp { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { mail_plugins = " sieve" service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol sieve { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } }

5 7

[Dovecot] maildir_very_dirty_syncs and GFS
by Andrea gabellini - SC 11 Nov '13

11 Nov '13

Hello, I have two dovecot 2.2.7 and postfix with LDA backend that shares a GFS partition as email storage. In front of them there is a proxy with Director. In both backend servers only Dovecot access the cur/ directory. Can I use maildir_very_dirty_syncs=yes? Thanks, Andrea -- ---------------------------------------------------------------- That is what learning is. You suddenly understand something you've understood all your life, but in a new way. ---------------------------------------------------------------- Ing. *Andrea Gabellini* Email: andrea.gabellini(a)telecomitalia.sm <mailto:Andrea%20Gabellini%20%3Candrea.gabellini@telecomitalia.sm%3E> Skype: andreagabellini Tel: (+378) 0549 886111 Fax: (+378) 0549 886188 Telecom Italia San Marino S.p.A. Strada degli Angariari, 3 47891 Rovereta Republic of San Marino http://www.telecomitalia.sm

1 0

Re: [Dovecot] Dovecot MTA
by Peter Mogensen 11 Nov '13

11 Nov '13

Timo Sirainen wrote: > And Dovecot roadmap is slowly shrinking .. there aren’t all that many > big features left anymore. Soon it’s mainly going to be improvements > to reliability and performance. So I need to find some new things to > do in any case. :) True ... If I try to make a wish list for features many of them requires fixing the IMAP protocol it self. (Like not having the folder display name being the unique identifier) Which reminds me that the IMAP5 process (if there ever was one) seems to be slowed to a halt. Now, there's a task for a developer looking for something to do ;-) /Peter

1 0

[Dovecot] Getting debug output from antispam plugin with dspam
by Igor Zinovik 11 Nov '13

11 Nov '13

Hello. I'm trying to get some output from antispam plugin when it invokes dspam binary for retraining. Currently I see no messages related to dspam execution. Dovecot IMAP server works as 'vmail' user: # ps aux|grep 'dovecot/imap' vmail 3062 0.7 0.0 29824 3008 ? S 16:22 0:00 dovecot/imap User 'vmail' is listed as trusted in /etc/dspam/dspam.conf # fgrep vmail /etc/dspam/dspam.conf Trust vmail Dovecot IMAP plugins and antispam configuration: # doveconf -n | egrep -e '(^#|antispam|protocol imap)' # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 3.7.10-1.16-default x86_64 openSUSE 12.3 (x86_64) antispam_allow_append_to_spam = YES antispam_backend = dspam antispam_dspam_args = --client;--user;%Lu;--deliver=spam,innocent;--source=error;--signature=%%s antispam_dspam_binary = /usr/sbin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Trash;Deleted;deleted;Deleted Items protocol imap { mail_plugins = expire mail_log notify quota trash imap_quota antispam Antispam plugin is successfully loaded: # grep antispam_plugin /var/log/dovecot/dovecot.log Nov 11 16:22:32 imap: Debug: Module loaded: /usr/lib64/dovecot/modules/lib90_antispam_plugin.so As i understand plugin would not work with message that do not contains dspam signature, so I sent GTUBE message to myself and when I move it to Spam folder I see only Dovecot messages: Nov 11 16:28:06 imap(zinovik(a)example.org): Info: copy from INBOX: box=Spam, uid=3422, msgid=<20131111144014.731f035b871deb0e082bc22e(a)example.org>, size=1130 Nov 11 16:28:06 imap(zinovik(a)example.org): Info: delete: box=INBOX, uid=26792, msgid=<20131111144014.731f035b871deb0e082bc22e(a)example.org>, size=1130 Nov 11 16:28:06 imap(zinovik(a)example.org): Info: expunge: box=INBOX, uid=26792, msgid=<20131111144014.731f035b871deb0e082bc22e(a)example.org>, size=1130 Dspam logs nothing, though debugging is turned on # ps aux | egrep -e '^dspam' dspam 2939 0.0 0.0 116408 2420 ? S 15:38 0:00 /usr/sbin/dspam --daemon --debug # egrep '^Debug ' /etc/dspam/dspam.conf Debug * Even if I set dspam binary to file that do not exist i do not get any debugging messages (according to code function i_debug("execution %s failed...") should be triggered). Maybe there is some kind of verbose output knob for plugins in Dovecot? I turned on everything I found (also using mail_log for imap protocol): # doveconf -n|egrep -e '(verbose|debug)' auth_debug = yes auth_verbose = yes mail_debug = yes verbose_ssl = yes Is there anybody out there who use Dovecot 2.2.7 with antispam plugin? Antispam plugin revision 5ebc6aae4d7c<http://hg.dovecot.org/dovecot-antispam-plugin/rev/5ebc6aae4d7c>

1 0

[Dovecot] Dovecot replication not redirecting if server is down
by Patrick Westenberg 11 Nov '13

11 Nov '13

Hi everyone, I'm running a test environment with a proxy in front of working replication between two backends but redirecting in case of a backend failure is not working. Nov 09 21:03:59 imap-login: Error: proxy(mail(a)example.net): connect(10.5.29.211, 143) failed: Connection refused (after 0 secs, local=10.5.29.201:38333) I appreciate any advice. Regards Patrick Proxy: # 2.2.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_process_limit = 150 director_mail_servers = 10.5.29.211 10.5.29.212 director_servers = 10.5.29.201 director_user_expire = 5 mins disable_plaintext_auth = no lmtp_proxy = yes log_path = /var/log/dovecot.log mail_plugins = notify replication managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = proxy=y nopassword=y driver = static } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 10.5.29.201 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 10.5.29.201 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } service replicator { unix_listener replicator-doveadm { mode = 0600 } } ssl = no protocol lmtp { auth_socket_path = director-userdb } Backend 1: # 2.2.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = no doveadm_password = secret doveadm_port = 12345 dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u hostname = mb01.example.net listen = 10.5.29.211 log_path = /var/log/dovecot.log mail_debug = yes mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota notify replication mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:10.5.29.212 quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.net protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener auth-userdb { mode = 0666 user = vmail } } service doveadm { inet_listener { port = 12345 } } service lmtp { inet_listener lmtp { address = 10.5.29.211 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl = no submission_host = mf01.example.net userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota notify replication sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = quota notify replication imap_quota } Backend 2: # 2.2.7: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no dotlock_use_excl = no doveadm_password = secret doveadm_port = 12345 dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u hostname = mb02.example.net listen = 10.5.29.212 log_path = /var/log/dovecot.log mail_debug = yes mail_fsync = always mail_gid = vmail mail_home = /var/mail/%d/%n mail_location = maildir:~/Maildir mail_plugins = quota notify replication mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spamverdacht { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:10.5.29.211 quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule2 = INBOX.Trash:ignore quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/sieve_after.sieve sieve_default = /usr/local/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.net protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener auth-userdb { mode = 0666 user = vmail } } service doveadm { inet_listener { port = 12345 } } service lmtp { inet_listener lmtp { address = 10.5.29.212 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/etc/dovecot/quota_warning.sh unix_listener quota-warning { user = vmail } user = root } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = vmail } } ssl = no submission_host = mf01.example.net userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota notify replication sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = quota notify replication imap_quota }

6 10

[Dovecot] sieve + notify + $subject$ + empty subject = segv
by Christian Ferbar 11 Nov '13

11 Nov '13

Hello, we can reproduce a bug where lmtp crashes: LMTP telnet session: Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. 220 lisa.m-otion.at Dovecot ready. lhlo xyz 250-xyz.m-otion.at 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING mail from:<xyz(a)m-otion.at> 250 2.1.0 OK rcpt to:<my_mailbox> 250 2.1.5 OK data 354 OK From:<xyz(a)m-otion.at> test . Connection closed by foreign host. /var/log/messages tells me: Nov 11 00:07:00 mail kernel: lmtp[15868]: segfault at 0000000000000000 rip 00002b1960d01d70 rsp 00007fff3fa95908 error 4 pigeonhole 0.4.2, dovecot 2.2.6 and this is what I found out: If you use a sieve script containing the following line notify :method "mailto" :options "xyz" :message "$from$*#+$subject$"; and send a mail without a Subject: header line lmtp crashes. The bug is related to the sieve module in /src/lib-sieve/plugins/notify/ext-notify-common.c:266. The line contains only a check if mail_get_headers_utf8 returns an error. So the workaround for this line would be to add a check if header[0] is not NULL. if ( (mail_get_headers_utf8(msgdata->mail, "subject", &header) >= 0) && header[0] ) str_append(out_msg, header[0]); IMHO this patch should be applied to the "$from$" replacement as well. The comments in the dovecot's header file says for mail_get_headers: Returns -1 if error, 0 otherwise (with or without headers found). hope it helps, Regards Christian Ferbar

2 1

[Dovecot] Replication on v2.2.6 - I'm stuck (again)
by IT geek 31 10 Nov '13

10 Nov '13

Hi, I'm trying to get Dovecot replication working between two servers. I didn't have much luck on v2.1.3, so after receiving advice from the list I have upgraded to v2.2.6. I now get the error: Oct 30 11:50:16 server1 dovecot: doveadm(mark): Error: user mark: Auth PASS lookup failed Oct 30 11:50:16 server2 dovecot: doveadm(mark): Error: sync: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_port is set) Here is my config: # 2.2.6: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login doveadm_password = mylittlesecret doveadm_port = 12345 dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u listen = 192.168.1.1 login_greeting = Go on then, let's have it... mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = remote:vmail@server2.mydomain.com replication_full_sync_interval = 1 hours } protocols = imap service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service doveadm { inet_listener { port = 12345 } } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/mail.mydomain.com.crt ssl_key = </etc/openssl/private/mail.mydomain.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)mydomain.com Can anyone give me some guidance on where I've gone wrong with my config? Any help would be appreciated, -Mark

2 7

[Dovecot] Question about folder sharing
by Achim Gottinger 09 Nov '13

09 Nov '13

Hi, I run dovecot (2.1.7) on debian wheezy in conjuniction with postfix, samba4 (as ldap backend) and sogo. I configured folder sharing but have an few issues. With my current config users can share the inbox and other folders. If the acl allows creatings subfolders this does work for all folders beside inbox. What i want to archiev is the following: If an user shares his inbox, others should be able to create subfolders and those should inherit the inboxe's acl. All subfolders of inbox should appear as folders at root level and not as subfolders of the inbox. I thought this can be done by setting the prefix of namespace inbox to INBOX/. I did this and changed the IMAP Server Folder setting in thunderbird to INBOX (like it was earlier when i used courier). Now subfolders created at rootlevel or as subfolders of the inbox appear on rootlevel in thunderbird but they do not inherit the acl's from inbox. Is there an way to achive this? doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_debug = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_master_user_separator = % auth_mechanisms = plain login gssapi auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_format = %n auth_verbose = yes debug_log_path = syslog disable_plaintext_auth = no first_valid_gid = 998 first_valid_uid = 998 info_log_path = syslog mail_debug = yes mail_gid = 998 mail_home = /home/vmail/%u mail_location = maildir:/home/vmail/%u/mail mail_plugins = acl mail_shared_explicit_inbox = no mail_uid = 998 maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:/home/vmail/%%u/mail:INDEX=/home/vmail/%u/mail/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = maildir:/home/vmail/%u/mail prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf.ext driver = ldap } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/home/vmail/.shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0777 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap-postlogin { executable = script-login /etc/dovecot/acl-groups.sh user = $default_internal_user } service imap { executable = imap imap-postlogin } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/easy-rsa/keys/dovecot.crt ssl_key = </etc/easy-rsa/keys/dovecot.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb-groups.conf.ext driver = ldap } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = acl imap_acl } protocol lmtp { mail_plugins = acl sieve }

1 4

[Dovecot] Problem with master user
by Jakub Krzyżewski 08 Nov '13

08 Nov '13

Hello. I have problem as below: Nov 8 10:41:52 store1 dovecot: auth: Debug: auth(master@example.com,::1,master,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): Master user lookup for login: jkrzyz(a)example.com Nov 8 10:41:52 store1 dovecot: auth: Debug: passwd-file(master@example.com,::1,master,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): lookup: user=master(a)example.com file=/etc/dovecot/master-use rs Nov 8 10:41:52 store1 dovecot: auth: Debug: password(master@example.com,::1,master,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): Generating DIGEST-MD5 from user 'master', password 'test' Nov 8 10:41:52 store1 dovecot: auth: passdb(master@example.com,::1,master,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): Master user logging in as jkrzyz(a)example.com Nov 8 10:41:52 store1 dovecot: auth: Debug: ldap(jkrzyz@example.com,::1,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): pass search: base=dc=example,dc=com scope=subtree filter=(&(locMailActive=TRUE)(| (uid=jkrzyz@example.com)(uid=jkrzyz)(mailRoutingAddress=jkrzyz@example.com))) fields=mailRoutingAddress,userPassword Nov 8 10:41:52 store1 dovecot: auth: Debug: ldap(jkrzyz@example.com,::1,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): result: mailRoutingAddress=jkrzyz(a)example.com userPassword=test2 Nov 8 10:41:52 store1 dovecot: auth: Debug: password(jkrzyz@example.com,::1,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): Generating DIGEST-MD5 from user 'master', password 'test2' Nov 8 10:41:52 store1 dovecot: auth: Debug: password(jkrzyz@example.com,::1,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): Credentials: d64221d543d7c9a809c7d6e424d87be8 Nov 8 10:41:52 store1 dovecot: auth: digest-md5(jkrzyz@example.com,::1,</qEuMafqyAAAAAAAAAAAAAAAAAAAAAAB>): password mismatch As you can see, password is check against user passdb and not passwd-file, where master's password is stored. Test is password of master user, test2 is password of jkrzyz Setting pass=yes or no makes no difference. What is wrong with my config? dovecot --version 2.1.7 dovecot.conf snippet: passdb { args = scheme=PLAIN /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } /etc/dovecot/master-users: master:{PLAIN}test master@example.com:{PLAIN}test

2 1

[Dovecot] how to calculate mail storage/traffic used
by Götz Reinicke - IT Koordinator 08 Nov '13

08 Nov '13

Hi, may be som mailserver admins on the list can give me som hint. Thats not dovecot related, but I know the knowledg here is enormous. We have to setup a server which gets a copy of all messages send and received by our mailserver as a 1:1 copy. Mails send to multiple recipients should be calculated and saved per user. (great if you usually have lost of mails send to groups of people.) So no dedublication should be used here. (e.g. save the message and refer the different recipients to it.) How can I calculate the current traffic in the best way to extrapolate the amount of space to be planed for the new server? We think to have a couples of days to be saved. Thanks for any hint or comment. Regards Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 3

[Dovecot] Solr clusters
by Timo Sirainen 07 Nov '13

07 Nov '13

Hi all, Has anyone implemented larger Dovecot+Solr clusters and would be willing to give some details about how it works for you? My understanding about it so far is: - SolrCloud isn’t usable with Dovecot. Replication isn’t useful, because nobody wants to pay for double the disk space for indexes that could be regenerated anyway. The autosharding isn’t very useful also, because: I think the shard keys could be created in two possible ways: a) Mails would be entirely randomly distributed across the cluster. This would make updates efficient, because the writes would be fully distributed across all servers. But I think it would also make reads somewhat inefficient, since all the servers would have to be searched and the results combined. Also if a server is lost, there’s no easy way to reindex back the missing data, because it would contain a piece of pretty much all the users’ data. b) Shard keys could be created so that the same user would typically go only to 1-2 servers. It would be possible (at least in theory) to find a broken server’s list of users and reindex only their data, but I’m not sure if this method is any easier than the non-SolrCloud setup. - Without SolrCloud you’d then need to shard the data manually. This would be easy enough to do by just assigning different users to different shards. But at some point the index is going to become too large and you need to add more shards and move some existing users to them. To keep the search performance good during the move, I guess this could be done with a script that does: 1) reindex user to new shard, 2) update userdb to point to new shard, 3) delete user from old shard, 4) doveadm fts rescan the user to remove any mails already deleted during the reindexing. - It seems that Solr index shouldn’t grow above 200 GB or the performance will be getting too bad? I’ve seen this in a few web pages. So each server should likely be running multiple separate Solr instances (shards). - http://www.hathitrust.org/blogs/large-scale-search/scaling-large-scale-sear… recommends NFS (or I guess any kind of a shared filesystem), which does seem to make sense. Since Dovecot wants to get instantly updated search results after indexing, I think it’s probably better not to separate the indexing and searching servers. - Would be interesting to know what kind of hardware your Solr servers currently have, how well they’re performing and what are the bottlenecks? From the above URL it appears that disk I/O is first, but if there’s enough of that available then CPU usage is second. I’m not quite sure where most of the memory goes - caching? - I’m guessing users are doing relatively few searches compared to how many new emails are being indexed/deleted all the time?

1 1

[Dovecot] how to display dovecot.index.cache
by ldaamandy 07 Nov '13

07 Nov '13

hello dovecot(a)dovecot.org: I want to see the contents of dovecot.index.cache . Is there any command can make it become visible character displayed ? the command idxview can displayed doveoct.index and logview can dispalyed dovecot.index.log but it seems no command to displays dovecot.index.cache for us. thanks amandy

3 6

[Dovecot] Postfix delivers mails to maildir and not to dovecot LDA for a virtual user
by Tru Pheenix 06 Nov '13

06 Nov '13

Hi I have been able to setup postfix and dovecot using postgres as the backend store with virtual user maps on Ubuntu 12.04 LTS Server. I have been following instructions from here: http://wiki2.dovecot.org/HowTo/DovecotPostgresql I haven't setup postfix to use saslauthd and PAM, instead I am using dovecot for SASL authentication. Rest of the table structures and query files are the same as from the wiki. SASL authentication works correctly for SMTP POP IMAP. I am able to send emails from a mail client such as Thunderbird with SASL authentication. However I am not able to receive emails for virtual users. I cannot figure out why. System users are getting their emails in the mail box correctly. Postfix fires the mailbox_command to hand over the mail to dovecot. This is how my *mail.log* looks when I send emails from an external domain: Nov 6 06:48:21 localhost postfix/smtpd[20053]: E075280C52: client= mail-ee0-f41.google.com[74.125.83.41] Nov 6 06:48:22 localhost postfix/cleanup[20064]: E075280C52: message-id=< CAJ+V0eCU891rSzSMVbcSy4zsRUk5GUp58b70Wv_WgZxLbKuyLw(a)mail.gmail.com> Nov 6 06:48:22 localhost postfix/qmgr[17492]: E075280C52: from=< me(a)gmail.com>, size=3124, nrcpt=1 (queue active) *Nov 6 06:48:22 localhost postfix/virtual[20066]: E075280C52: to=<someone(a)mydomain.com <someone(a)mydomain.com>>, relay=virtual, delay=0.85, delays=0.7/0.02/0/0.13, dsn=2.0.0, status=sent (delivered to maildir)* Nov 6 06:48:22 localhost postfix/qmgr[17492]: E075280C52: removed Nov 6 06:48:22 localhost postfix/smtpd[20053]: disconnect from mail-ee0-f41.google.com[74.125.83.41] Postfix seems to deliver the mail to maildir instead of the home directory of the virtual user. Incase of the system user, the logs indicate that the mailbox_command was fired and I do get to see the mail in the inbox. My postfix *main.cf <http://main.cf>*: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix dovecot_destination_recipient_limit = 1 inet_interfaces = all *mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}"* mailbox_size_limit = 0 mydestination = localhost, localhost.localdomain, localhost myhostname = mydomain.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/dovecot-auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = reject_unknown_sender_domain smtpd_tls_auth_only = yes smtpd_tls_cert_file = /root/certs/www.mydomain.com.pem smtpd_tls_key_file = /root/certs/www.mydomain.com.key smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_protocols = SSLv3, TLSv1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes tls_random_source = dev:/dev/urandom transport_maps = pgsql:/etc/postfix/transport.cf virtual_gid_maps = pgsql:/etc/postfix/gids.cf virtual_mailbox_base = /home virtual_mailbox_domains = mydomain.com *virtual_mailbox_maps = pgsql:/etc/postfix/mailboxes.cf <http://mailboxes.cf>* virtual_maps = pgsql:/etc/postfix/virtual.cf *virtual_transport = dovecot* virtual_uid_maps = pgsql:/etc/postfix/uids.cf I have included the virtual_transport parameter to indicate that dovecot is running as LDA. I have also included the pgsql query file in the virtual_mailbox_maps parameter. My *mailboxes.cf <http://mailboxes.cf> *file which points the email id of the virtual user to the appropriate mail path: user=mailreader password=secret dbname=mails table=postfix_mailboxes select_field=mailbox where_field=userid hosts=localhost My postfix *master.cf <http://master.cf>* file: smtp inet n - n - - smtpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - - - - smtp relay unix - - - - - smtp showq unix n - - - - showq error unix - - - - - error retry unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) *dovecot unix - n n - - pipe* * flags=DRhu user=vmailuser:vmailuser argv=/usr/lib/dovecot/deliver -f* * ${sender} -d ${recipient}* ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} I have included the dovecot LDA service line above so that postfix can deliver to virtual users as per: http://wiki2.dovecot.org/LDA/Postfix This is my *doveconf -n* output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-virtual i686 Ubuntu 12.04 LTS ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes mail_debug = yes *mail_location = maildir:/home/vmailuser/%d/%n/Maildir* managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </root/certs/www.mydomain.com.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </root/certs/www.mydomain.com.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } I have setup *mail_location *to point to the home directory of vmailuser under which for the given domain the virtual users mail dir is created. However, the mails clearly don't seem to get delivered for the virtual user. Any help to fix this would be appreciated. Thanks! :) Regards Tru Pheenix

1 1

[Dovecot] Missing i_stream_unref in imap_msgpart_crlf_seek()?
by Tomasz Potega 06 Nov '13

06 Nov '13

Hi, imap_msgpart_crlf_seek() returns an error stream in case of problems in message_skip_virtual(). The original input stream is not being unreferenced, preventing destroy callbacks from being executed. Shouldn't we have an i_stream_unref(&input) here: src/lib-imap-storage/imap-msgpart.c: 398 if (message_skip_virtual(input, virtual_skip, &cr_skipped) < 0) { 399 errinput = i_stream_create_error(errno); 400 i_stream_set_name(errinput, i_stream_get_name(input)); 401 return errinput; 402 } ? Best regards, Tomasz Potęga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] get_disconnect_reason() gets called with NULL ctx->litinput
by Tomasz Potega 06 Nov '13

06 Nov '13

Hi, I have found get_disconnect_reason() to be called with NULL ctx->litinput at times, making dovecot crash when accessing v_offset: src/imap/cmd-append.c: 83 switch (i_stream_read(client->input)) { 84 case -1: 85 /* disconnected */ 86 reason = get_disconnect_reason(ctx, ctx->litinput->v_offset); 87 cmd_append_finish(cmd->context); 88 /* Reset command so that client_destroy() doesn't try to call 89 cmd_append_continue_message() anymore. */ Best regards, Tomasz Potęga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] ssl-params regeneration with dovecot 2.2.7
by Frank Elsner 06 Nov '13

06 Nov '13

Hello, after switching from version 2.2.7 to 2.2.7 I miss the loglines which say: ssl-params: Generating SSL parameters ssl-params: SSL parameters regeneration completed The configuration has not been changed and reads: | # 2.2.7: /usr/local/dovecot/etc/dovecot/dovecot.conf | # OS: Linux 2.6.35.14-106.fc14.i686.PAE i686 Fedora release 14 (Laughlin) ext3 | auth_mechanisms = plain login | default_vsz_limit = 512 M | first_valid_uid = 200 | last_valid_uid = 65534 | listen = * | lmtp_save_to_detail_mailbox = yes | login_greeting = c64.shuttle.de - IMAPs Service (dovecot) ready. | login_log_format_elements = %u %r %c | mail_location = maildir:/var/spool/mail/%u | mail_log_prefix = "%Us(%u,%r): " | mail_plugin_dir = /usr/dovecot/lib/dovecot/ | mail_plugins = notify quota fts fts_squat | namespace inbox { | inbox = yes | list = yes | location = | mailbox Drafts { | special_use = \Drafts | } | mailbox Gesendet { | special_use = \Sent | } | mailbox SPAM { | special_use = \Junk | } | mailbox Sent { | special_use = \Sent | } | mailbox Trash { | special_use = \Trash | } | prefix = | subscriptions = yes | type = private | } | passdb { | args = dovecot | driver = pam | } | plugin { | fts = squat | fts_squat = partial=4 full=10 | mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append | mail_log_fields = uid box from subject msgid size flags | mail_log_group_events = yes | quota = maildir:User quota | quota_rule = *:storage=2G | quota_rule2 = Trash:storage=+100M | } | postmaster_address = postmaster(a)moltke28.b.shuttle.de | protocols = imap | service anvil { | client_limit = 1027 | } | service auth { | unix_listener auth-client { | group = exim | mode = 0660 | user = exim | } | } | service imap-login { | inet_listener imap { | port = 143 | } | inet_listener imaps { | port = 993 | ssl = yes | } | process_limit = 512 | process_min_avail = 10 | } | service imap-postlogin { | executable = script-login /usr/local/sbin/dovecot-imap-post-login | } | service imap { | executable = imap imap-postlogin | } | service lmtp { | inet_listener lmtp { | address = 0.0.0.0 | port = 24 | } | } | service pop3-login { | inet_listener pop3 { | port = 110 | } | inet_listener pop3s { | port = 995 | ssl = yes | } | } | service pop3 { | process_limit = 1024 | } | ssl_cert = </usr/local/etc/c64.shuttle.de.CRT | ssl_key = </usr/local/etc/c64.shuttle.de-dovecot.KEY | ssl_parameters_regenerate = 1 hours | userdb { | driver = passwd | } | verbose_proctitle = yes | protocol lmtp { | mail_plugins = notify quota fts fts_squat | } | protocol lda { | mail_plugins = notify quota fts fts_squat | } | protocol imap { | imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags | imap_logout_format = [%i/%o] | mail_max_userip_connections = 0 | mail_plugins = notify quota fts fts_squat quota mail_log imap_quota listescape fts fts_squat | } What's going on? No more logging or no regeneration? Greetings, Frank Elsner

2 2

[Dovecot] 2.2.6 auth process crash using LMTP and LDAP on director.
by Olivier Girard 06 Nov '13

06 Nov '13

I'm upgrading my configuration to use director and lmtp for delivery. (doveconf -n at end of the mail). I use the same config for auth on mail backends and see no errors. My setup seem to work nicely but i have some auth process crashing when using lmtp protocol. Everything is working a sexpected then i've got 5-6 errors like this in logs and a crach of the auth process: dovecot: lmtp(47269): Error: passdb lookup(_mail_): Disconnected unexpectedly pid 47406 (auth), uid 143: exited on signal 11 Actually, i didn't configure to core dump. Do you think seting up lmtp protocol to static auth adding something like folow will be better for this problem? protocol lmtp { passdb { args = proxy=y nopassword=y driver = static } } Please note that my configuration is actually listening on inet fot LMTP but that the goal is to configure postfix on the same server and switch to socket, this expain the configuration of the service auth to provide a socket to postfix. Here is my director config: % doveconf -n # 2.2.6: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.4-RELEASE-p4 amd64 auth_cache_negative_ttl = 0 auth_cache_size = 16 M auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 default_process_limit = 4000 director_mail_servers = 192.168.16.1 192.168.16.2 192.168.16.3 director_servers = 192.168.16.4 192.168.16.5 192.168.16.6 disable_plaintext_auth = no doveadm_port = 24245 info_log_path = syslog instance_name = director lmtp_proxy = yes mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } service anvil { client_limit = 12003 } service auth-worker { process_min_avail = 10 user = $default_internal_user } service auth { client_limit = 16000 unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0666 user = $default_internal_user } user = $default_internal_user } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 192.168.16.4 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service doveadm { inet_listener { port = 24245 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = * :: port = 24 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { auth_socket_path = director-userdb } protocol doveadm { auth_socket_path = director-userdb } local 192.168.16.0/24/24 { doveadm_password = mysecret } Last thing, in my config file, there is only one /24 on local network but this is another problem.

1 0

[Dovecot] Best way from Mbox to Maildir using 2.17?
by Regan Yelcich 06 Nov '13

06 Nov '13

Can someone advise the best way to convert mailboxes from Mbox to Maildir for Dovecot 2.17 on Ubuntu? Thanks.

9 20

Re: [Dovecot] Issue with postfix not handing over e-mails to dovecot
by Joseph Tam 05 Nov '13

05 Nov '13

Tru Pheenix writes: > posftconf output: https://gist.github.com/anonymous/7318863 > doveconf output: https://gist.github.com/anonymous/7318896 > tail -f /var/log/mail.* output (when receiving mail): > https://gist.github.com/anonymous/7318945 Unless these are exceeding long, you probably should inline the contents to save people from having to jump around to get the information to help you. It will also properly archive the context to the solution. >From your logs, it appears your mail system does not know what user is mapped to "someone(a)mydomain.com": Nov 5 13:21:06 localhost postfix/local[11185]: 5716D8007B: to=<someone(a)mydomain.com>, relay=local, delay=0.59, delays=0.57/0.01/0/0.01, dsn=5.1.1, status=bounced (unknown user: "someone") I don't know whether this message is produced by postfix or by dovecot, but one thing I did notice is that your postfix configuration mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}" has upper-case "EXTENSION", whereas the Dovecot wiki uses lower case: http://wiki2.dovecot.org/LDA/Postfix If that's not it, maybe it's your SQL. You can also ask dovecot to look up user "somebody" and debug your way from there: doveadm user somebody Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] squat assertion result core dump with imap process
by Kui Zhang 05 Nov '13

05 Nov '13

Hello, Recently, we had a file system problem. After fsck we started to get some core dump with imap process. Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Panic: file squat-trie.c: line 293 (squat_trie_lock): assertion failed: (trie->fd != -1) Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4892a) [0x7fe8b7c9392a] -> /usr/lib/dovecot/libdovecot.so.0(+0x48976) [0x7fe8b7c93976] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7fe8b7c66faf] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x4ef4) [0x7fe8b51d9ef4] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(squat_trie_build_deinit+0x9d2) [0x7fe8b51dcc02] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x4150) [0x7fe8b51d9150] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x41b1) [0x7fe8b51d91b1] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x6b7c) [0x7fe8b5a05b7c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_backend_update_deinit+0x2c) [0x7fe8b5a05bfc] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0xb65a) [0x7fe8b642765a] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x419) [0x7fe8b7f22069] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_sync+0x46) [0x7fe8b7f224a6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x87) [0x7fe8b7f22587] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7fe8b7f614d1] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](imap_sync_init+0x67) [0x419397] -> dovecot/imap [user(a)domain.tld204.174.223.223 UID](cmd_sync_delayed+0x1c7) [0x419637] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](client_handle_input+0x1fd) [0x41131d] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](client_input+0x5f) [0x411b7f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fe8b7c9fb56] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7fe8b7ca0b8f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fe8b7c9faf8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fe8b7c8b413] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID](main+0x2a4) [0x419dd4] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe8b78dfead] -> dovecot/imap [user(a)domain.tld 204.174.223.223 UID Nov 4 15:15:04 mail_server1 dovecot: imap(user(a)domain.tld): Fatal: master: service(imap): child 28415 killed with signal 6 (core dumped) doveadm index -u user(a)domain.tld mailbox_name Removing index files and re index help with the crashes. From time to time we still get these in the log: Nov 5 10:52:53 mail_server1 dovecot: imap(user(a)domain.tld): Error: Corrupted squat uidlist file /media/drbd/user_name/mdbox/mailboxes/Drafts/dbox-Mails/dovecot.index.search.uids: wrong indexid Nov 5 11:40:00 mail_server1 dovecot: imap(user(a)domain.tld): Error: Corrupted squat uidlist file /media/drbd/user_name/mdbox/mailboxes/folder2/dbox-Mails/dovecot.index.search.uids: wrong indexid I am using: dovecot-dbg 2:2.1.16-0~auto+30 Thanks Kui.Z

1 0

[Dovecot] increased core dumps with v2.2.7
by Anand Kumria 05 Nov '13

05 Nov '13

Hi, After upgrading to v2.2.7 yesterday, I am starting to get a larger number of bugs occurring -- unfortunately I hadn't configured things to save core dumps (now done). But I am seeing things like: dovecot: imap(user(a)example.com): Fatal: master: service(imap): child 27931 killed with signal 11 (core dumped) kernel: [151706.763475] imap[4878]: segfault at 7fff53b0aff8 ip 00007fdc7ed65ece sp 00007fff53b0b000 error 6 in lib20_zlib_plugin.so[7fdc7ed61000+7000] dovecot: imap(user2(a)example.com): Fatal: master: service(imap): child 4870 killed with signal 11 (core dumped) As soon as I have more info., I'll let you know. A

2 2

[Dovecot] (Maybe stupid) question about selecting mailbox
by kjonca＠o2.pl 05 Nov '13

05 Nov '13

Does mailbox with "\NoSelect" can be select or examine? I'm not sure but IMVHO "select x" should not work. $/usr/lib/dovecot/imap * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE COMPRESS=DEFLATE] Logged in as kjonca 2 LIST "x" "*" * LIST (\Noselect \HasChildren) "/" "x" * LIST (\HasNoChildren) "/" "x/y" 2 OK List completed. 3 SELECT x * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1376977764] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences 3 OK [READ-WRITE] Select completed. 4 logout IMAP(kjonca): Info: Disconnected: Logged out in=35 out=813 * BYE Logging out 4 OK Logout completed. doveconf -n # 2.1.17 (d463fab6db95): /etc/dovecot/dovecot.conf # OS: Linux 3.8.9+1 x86_64 Debian wheezy/sid auth_debug = yes auth_mechanisms = plain digest-md5 cram-md5 login auth_username_format = %n auth_verbose = yes listen = alfa log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:~/Mail/1:LAYOUT=fs:INBOX=~/Mail/1/INBOX mail_log_prefix = "%Us(%u): " mail_plugins = zlib passdb { args = scheme=PLAIN /etc/security/dovecot.pwd driver = passwd-file } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change save mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_execute_bin_dir = %h/sieve/bin sieve_execute_exec_timeout = 86400s sieve_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute +vnd.dovecot.filter sieve_filter_bin_dir = %h/sieve/bin sieve_filter_exec_timeout = 86400s sieve_pipe_bin_dir = %h/sieve/bin sieve_pipe_exec_timeout = 86400s sieve_plugins = sieve_extprograms } protocols = " imap lmtp" service auth { user = root } ssl = no ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = zlib sieve } protocol lda { deliver_log_format = msgid=%m: %$ log_path = ~/log/deliver.log mail_plugins = zlib sieve postmaster_address = root@localhost } protocol imap { mail_max_userip_connections = 20 mail_plugins = zlib imap_zlib mail_log notify acl } -- http://blogdebart.pl/2009/12/22/mamy-chorych-dzieci/ The goal of Computer Science is to build something that will last at least until we've finished building it.

2 2

[Dovecot] Message parser loops on certain messages (e.g. with a trailing CR character)
by Tomasz Potega 05 Nov '13

05 Nov '13

Hi, dovecot's message parser enters an endless loop when fed with certain multipart messages with stray CR characters. parse_next_body_to_boundary() assumes the '\r' might be the beginning of a boundary line, reducing the block size by one: src/lib-mail/message-parser.c: 404 /* no linefeeds in this block. we can just skip it. */ 405 ret = 0; 406 if (block_r->data[block_r->size-1] == '\r') { 407 /* this may be the beginning of the \r\n--boundary */ 408 block_r->size--; 409 } For a block size of 1 (e.g. the trailing '\r' character), dovecot ends up processing zero-sized blocks, calling message_parser_read_more() without skipping the input stream: ... #6 0x00007f94f49374c7 in i_stream_read (stream=0xbe2fc8) at istream.c:167 #7 0x00007f94f49383d5 in i_stream_read_data (stream=0xbe2fc8, data_r=0x7fff2141d6b0, size_r=0x7fff2141d6b8, threshold=1) at istream.c:497 #8 0x00007f94f4918c2b in message_parser_read_more (ctx=0xbe7c10, block_r=0x7fff2141d6a0, full_r=0x7fff2141d667) at message-parser.c:128 #9 0x00007f94f491af67 in message_parser_parse_next_block (ctx=0xbe7c10, block_r=0x7fff2141d6a0) at message-parser.c:1012 #10 0x00007f94f491b2fb in message_parser_parse_body (ctx=0xbe7c10, hdr_callback=0x7f94f4c69a75 <parse_bodystructure_part_header>, context=0xbf0450) at message-parser.c:1075 #11 0x00007f94f4c6a876 in index_mail_parse_body (mail=0xbecd00, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:895 #12 0x00007f94f4c6aedb in index_mail_parse_bodystructure (mail=0xbecd00, field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:1046 #13 0x00007f94f4c6b4a5 in index_mail_get_special (_mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at index-mail.c:1170 #14 0x00007f94f4bfab53 in maildir_mail_get_special (_mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at maildir-mail.c:570 #15 0x00007f94f4c36ea1 in mail_get_special (mail=0xbecd00, field=MAIL_FETCH_IMAP_BODYSTRUCTURE, value_r=0x7fff2141d958) at mail.c:269 #16 0x000000000041c5d7 in fetch_bodystructure (ctx=0xbd6a48, mail=0xbecd00, context=0x0) at imap-fetch.c:678 ... You will find a sample message attached to this mail. I have added a check to see if the parser is past the EOF (and omit reducing the block size then) as a band-aid fix, but this might call for a more elegant solution. Best regards, Tomasz Potêga [Wirtualna Polska] <http://www.wp.pl> Znajdziesz nas tutaj: [Wp na Facebooku] <https://www.facebook.com/WirtualnaPolska> [Wp na Twitterze] <https://twitter.com/wirtualnapolska> [Wp na SlideShare] <http://www.slideshare.net/wirtualnapolska> [Wp w Google+] <https://plus.google.com/+wppl> [Wp na YouTube] <https://www.youtube.com/user/wptvwppl> "WIRTUALNA POLSKA" Spółka Akcyjna z siedzibą w Gdańsku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sądowego - Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Gdańsk - Północ w Gdańsku pod numerem KRS 0000068548, o kapitale zakładowym 67.980.024,00 złotych opłaconym w całości oraz Numerze Identyfikacji Podatkowej 957-07-51-216.

2 1

[Dovecot] infinite loop (causing crash) whilst closing connection
by Anand Kumria 05 Nov '13

05 Nov '13

Hi Timo, As a follow-up to my earlier email, I've managed to get a few backtraces now. #305439 o_stream_close (stream=0x1680c10) at ostream.c:85 #305440 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305441 0x00007ff222f70fef in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:182 #305442 0x00007ff222f711cb in o_stream_zlib_flush (stream=<optimized out>) at ostream-zlib.c:222 #305443 0x00007ff2243f142d in o_stream_flush (stream=0x1680c10) at ostream.c:147 #305444 0x00007ff222f70ddf in o_stream_zlib_close (stream=0x1680b80, close_parent=true) at ostream-zlib.c:35 #305445 0x00007ff2243f12ce in o_stream_close_full (close_parents=true, stream=0x1680c10) at ostream.c:49 #305446 o_stream_close (stream=0x1680c10) at ostream.c:85 #305447 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305448 0x00007ff222f70fef in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:182 #305449 0x00007ff222f711cb in o_stream_zlib_flush (stream=<optimized out>) at ostream-zlib.c:222 #305450 0x00007ff2243f142d in o_stream_flush (stream=0x1680c10) at ostream.c:147 #305451 0x00007ff222f70ddf in o_stream_zlib_close (stream=0x1680b80, close_parent=true) at ostream-zlib.c:35 #305452 0x00007ff2243f12ce in o_stream_close_full (close_parents=true, stream=0x1680c10) at ostream.c:49 #305453 o_stream_close (stream=0x1680c10) at ostream.c:85 #305454 0x00007ff222f70f3c in o_stream_zlib_send_outbuf (zstream=0x1680b80) at ostream-zlib.c:97 #305455 0x00007ff222f710ff in o_stream_zlib_send_flush (zstream=0x1680b80) at ostream-zlib.c:193 #305456 0x00007ff222f71491 in o_stream_zlib_sendv (stream=0x1680b80, iov=0x7fff6b3e1870, iov_count=1) at ostream-zlib.c:257 #305457 0x00007ff2243f1785 in o_stream_sendv (stream=0x1680c10, iov=0x7fff6b3e1870, iov_count=1) at ostream.c:229 #305458 0x00007ff2243f186f in o_stream_nsendv (stream=0x1680c10, iov=<optimized out>, iov_count=<optimized out>) at ostream.c:263 #305459 0x00007ff2243f189a in o_stream_nsend (stream=<optimized out>, data=<optimized out>, size=<optimized out>) at ostream.c:255 #305460 0x00000000004157f0 in client_send_tagline (cmd=<optimized out>, data=0x423c82 "OK Close completed.") at imap-client.c:388 #305461 0x000000000040c833 in cmd_close (cmd=0x167c4d0) at cmd-close.c:37 #305462 0x000000000041707d in command_exec (cmd=0x167c4d0) at imap-commands.c:158 #305463 0x0000000000416110 in client_command_input (cmd=0x167c4d0) at imap-client.c:780 #305464 0x00000000004161f5 in client_command_input (cmd=0x167c4d0) at imap-client.c:841 #305465 0x000000000041649d in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x167b8f0) at imap-client.c:879 #305466 client_handle_input (client=0x167b8f0) at imap-client.c:891 #305467 0x00000000004165de in client_continue_pending_input (client=0x167b8f0) at imap-client.c:715 #305468 0x000000000040ed89 in idle_client_input (ctx=<optimized out>) at cmd-idle.c:112 #305469 0x00007ff2243e8686 in io_loop_call_io (io=0x16e67e0) at ioloop.c:387 #305470 0x00007ff2243e953f in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:220 #305471 0x00007ff2243e8198 in io_loop_run (ioloop=0x165d730) at ioloop.c:411 #305472 0x00007ff224397b93 in master_service_run (service=0x165d5c0, callback=<optimized out>) at master-service.c:566 #305473 0x000000000040af18 in main (argc=1, argv=0x165d390) at main.c:400 Let me know if you need further information. This is with dovecot v2.2.7 (1:2.2.7.0-1) Thanks, Anand

1 0

[Dovecot] Config problem: want SSL + local roundcube
by Rich 05 Nov '13

05 Nov '13

Hi, Have used dovecot for many years, happy that it worked well without me needing to do anything much! But since the upgrade from v1 to v2.1.7-7 I've come across some config probs. I want IMAP and to force TLS for all internet connections. However, I run RoundCube on the same server (over https) and this needs access too, but this doesn't need to be TLS because it's local anyway. The auto-config update script made some changes, it added the following to force SSL. service imap-login { inet_listener imap { port = 0 } } ssl = required But this seems to forbid the local roundcube service from logging in. Can anyone help me with my config? I had a stab, adding the following, but it didn't work. Was a complete guess anyway! remote 127.0.0.1 { ssl = no service imap-login { inet_listener imap { port = 143 } } } Here's my full config: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 7.2 ext3 auth_default_realm = artfulrobot.com log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/virtual/%d/%n mail_privileged_group = mail passdb { args = username_format=%n /etc/exim4/virtual_domains/%d/passwords driver = passwd-file } protocols = imap service auth { unix_listener auth-client { group = Debian-exim mode = 0660 } user = root } service imap-login { inet_listener imap { port = 0 } } ssl = required ssl_cert = </etc/ssl/certs/mail.artfulrobot.com-with-chain.crt ssl_key = </etc/ssl/private/mail.artfulrobot.com.key userdb { args = uid=1001 gid=1001 driver = static } userdb { driver = passwd } Thanks, Rich

3 5

[Dovecot] [bug] ssl-params hangs when FIPS is enabled
by Michal Hlavinka 05 Nov '13

05 Nov '13

Hi, we found a bug in ssl-params. It calls openssl DH generator for 512 and 1024 bits, but in FIPS mode, openssl won't generate anything for less than 1024, so it fails with: error:0506A06E:Diffie-Hellman routines:DH_BUILTIN_GENPARAMS:key size too small but when DH generator fails, ssl-params hangs forever in io_loop_run: __epoll_wait_nocancel() io_loop_handler_run(..) at ioloop-epoll.c:176 io_loop_run(..) at ioloop.c:406 master_service_run(..) at master-service.c:566 main(..) at main.c:156 Getting system in FIPS mode can be a little tricky, but DH_generator simulated failure can do the trick. Just change ssl-params/ssl-params-openssl.c:generate_dh_paramaters:39 - if (dh == NULL) { + if (1 || dh == NULL) { and when you run ssl-params (with no ssl-parameters.dat), it hangs. Let me know if you need more information. Regards, Michal Hlavinka

2 3

[Dovecot] Issue with postfix not handing over e-mails to dovecot
by Tru Pheenix 05 Nov '13

05 Nov '13

Hello! I have installed postfix with dovecot and postgresql. I have set up SASL authentication for postfix and dovecot and been able to test them successfully. I am able to send sasl authenticated emails through smtpd on postfix using a mail client like Thunderbird. However, now I am unable to receive any e-mails. When I respond to the emails, I get a not delivered failure from postfix. I cannot figure out why postfix is not handing over the e-mails to dovecot. So here are some links to follow: posftconf output: https://gist.github.com/anonymous/7318863 doveconf output: https://gist.github.com/anonymous/7318896 tail -f /var/log/mail.* output (when receiving mail): https://gist.github.com/anonymous/7318945 Any help to solve this would be highly appreciated. Regards Tru Pheenix

1 0

Re: [Dovecot] dovecot Digest, Vol 127, Issue 7
by DV Henkel-Wallace 05 Nov '13

05 Nov '13

> Date: Tue, 5 Nov 2013 08:22:57 +0100 (CET) > From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> > >> >> My specific application: I am running spamassassin and would like users >> to be able to submit spam (and ham) directly by moving it into special >> folders. > I did this before switching to antispam. > I use antispam with spool2dir now, that central directory has a inotify > watcher that trains the messages instantly. This is a great idea. In my case I think I will get away with a five minute cron job since the pickup latency should be manageable to the users and there is less to install. But I like in principle the idea of an immediate, fs-driven trigger, which would probably use fewer CPU cycles in the aggregate. > [...]all my users moved messages into spam/yes, > but copied them into spam/no Unfortunately I can't rely on users getting this right, much less understanding the difference between copy and move semantics. And I'm probably not going to be able to upgrade my users. Thanks for your advice! -d

1 0

[Dovecot] s it safe to manipulate Maildir files directly?
by DV Henkel-Wallace 05 Nov '13

05 Nov '13

> Date: Tue, 5 Nov 2013 08:40:31 +0100 > From: Oli Schacher <dovecot(a)lists.wgwh.ch> > > On Mon, 4 Nov 2013 21:49:59 -0800 > David Henkel-Wallace <gumby(a)henkel-wallace.org> wrote: > >> Having the cron job find the messages and train spamassassin is no >> problem. The question is how to move the messages. Is it safe to >> simply rename the files from my cron job? > [...] >> If I have to go through to Dovecot I am afraid I'd need the user's >> credentials, which is not appropriate. > > you can do all this with doveadm scripts. Oli, thanks for the suggestion. It hadn't occured to me to consider doveadm. That's exactly the right tool. Regards, David

1 0

[Dovecot] Is it safe to manipulate Maildir files directly?
by David Henkel-Wallace 05 Nov '13

05 Nov '13

Dovecoters, is it safe to manipulate files in Maildir/xxx directly or will Dovecot become unstable if I don't make these changes by talking to Dovecot and having it make the changes? (I'm running 2.1.7 under Wheezy, IMAP only) My specific application: I am running spamassassin and would like users to be able to submit spam (and ham) directly by moving it into special folders. A cron job can then find it and take action: feed spam messages to the bayesian trainer and then delete them; feed ham messages to the trainer and then move them into ~/Maildir/cur/ Having the cron job find the messages and train spamassassin is no problem. The question is how to move the messages. Is it safe to simply rename the files from my cron job? The dovecot wiki implies that dovecot will notice a change in mtime and deal with it safely. Am I reading this correctly? Changing a message flags (i.e. name) and/or directory will change mtime. If I have to go through to Dovecot I am afraid I'd need the user's credentials, which is not appropriate. Thanks! -d

3 2

[Dovecot] Stuck with authentication for my dovecot installation.
by Tru Pheenix 04 Nov '13

04 Nov '13

Hello! I have been following instructions from here to setup dovecot along with postfix and postgresql and sasl2. I try to login but I keep getting the following messages in /var/log/mail.log Nov 2 19:51:39 localhost dovecot: ssl-params: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: config: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:39 localhost dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:51:44 localhost dovecot: master: Dovecot v2.0.19 starting up (core dumps disabled) Nov 2 19:53:11 localhost dovecot: master: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:53:11 localhost dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill) Nov 2 19:53:11 localhost dovecot: master: Dovecot v2.0.19 starting up (core dumps disabled) Nov 2 19:53:29 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Nov 2 19:53:29 localhost dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Nov 2 19:53:29 localhost dovecot: auth: Debug: auth client connected (pid=12718) Nov 2 19:53:29 localhost dovecot: auth: pgsql(localhost): Connected to database mails Nov 2 19:53:41 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=58759#011resp=<hidden> Nov 2 19:53:41 localhost dovecot: auth: Debug: sql(someone(a)mydomain.com,127.0.0.1): query: SELECT userid as user, password FROM users WHERE userid = 'someone(a)mydomain.com' Nov 2 19:53:41 localhost dovecot: auth: sql(someone(a)mydomain.com,127.0.0.1): Password mismatch My doveconf -n gives the following output # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-24-virtual i686 Ubuntu 12.04 LTS auth_debug = yes auth_verbose = yes passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } userdb { driver = passwd } Please let me know what is wrong. Regards Tru Pheenix

2 2

[Dovecot] backup maildir mailbox bugs
by Anand Kumria 04 Nov '13

04 Nov '13

Hi, Using dovecot v2.2.5.5, I get the following: $ doveadm -v backup -R -u user(a)example.com maildir:/home/rsync/ example.com/user/Maildir/ [...] dsync(user(a)example.com): Panic: file dsync-mailbox-export.c: line 228 (export_save_change_get): assertion failed: (change->type == DSYNC_MAIL_CHANGE_TYPE_FLAG_CHANGE) dsync(user(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x59e6a) [0x7f91ad185e6a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f91ad185f2a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f91ad144b89] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_mailbox_export_init+0x8b8) [0x434028] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_sync_mailbox_open+0x233) [0x42ba83] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_slave_recv_mailbox+0x125) [0x42c615] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](dsync_brain_run+0x369) [0x42a929] -> doveadm [user(a)example.comPrinting Quotes send:mailbox recv:mailbox]() [0x42881b] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox]() [0x411ad7] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox](doveadm_mail_try_run+0x260) [0x4127a0] -> doveadm [ user(a)example.com Printing Quotes send:mailbox recv:mailbox](main+0x3f0) [0x4116c0] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f91acd8e76d] -> doveadm [user(a)example.com Printing Quotes send:mailbox recv:mailbox]() [0x4118bd] Other lines emitted were Info lines indicating what message was being processed. Unfortunately this appears to stop the backup dead in it's tracks. Suggestions on how to proceed? I was (originally) doing this as an IMAP to IMAP copy, and when that failed I managed to get the raw Maildir. Now I appear stuck with that too. Regards, Anand -- “Don’t be sad because it’s over. Smile because it happened.” – Dr. Seuss

2 4

[Dovecot] v2.2.7 released
by Timo Sirainen 04 Nov '13

04 Nov '13

http://dovecot.org/releases/2.2/dovecot-2.2.7.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.7.tar.gz.sig * Some usage of passdb checkpassword could have been exploitable by local users. You may need to modify your setup to keep it working. See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security + auth: Added ability to truncate values logged by auth_verbose_passwords (see 10-logging.conf comment) + mdbox: Added "mdbox_deleted" storage, which can be used to access messages with refcount=0. For example: doveadm import mdbox_deleted:~/mdbox "" mailbox inbox subject oops + ssl-params: Added ssl_dh_parameters_length setting. - master process was doing a hostname.domain lookup for each created process, which may have caused a lot of unnecessary DNS lookups. - dsync: Syncing over 100 messages at once caused problems in some situations, causing messages to get new UIDs. - fts-solr: Different Solr hosts for different users didn't work.

4 4

[Dovecot] Shared mailbox help needed
by Alex Ferrara 04 Nov '13

04 Nov '13

Hi everyone, I am in the middle of a migration from Cyrus 2.4 to Dovecot 2.1.7, and I have everything mostly working. I set up Dovecot to authenticate against Active Directory (Samba4) using PAM and SSSD, and have also used the fantastic cyrus2dovecot perl script to do a test migration of all our mail, and that is now working flawlessly. I have the issue of shared IMAP accounts to deal with, and I am a little stuck. I see that Dovecot is very flexible, and I think I am getting stuck in this flexibility. I thought that if I explain what I am trying to achieve, someone might point me in the right direction. In the Cyrus regime, we have several imap accounts that are shared with a group of people. These groups are actual unix groups that actual unix users are a member of. If we want a person to access a mailbox, we add them to the group and then at next login, it pops up in Thunderbird automatically. SSSD does, from what I can tell, a decent job of binding to AD and mapping AD users to unix users, but since not all of the users have an NIS uid in AD, I decided to use a static mapping. This might have been the wrong decision, I am not sure. userdb { driver = static args = uid=900 gid=900 home=/mnt/mail/%u allow_all_users=yes } It probably isn't important at this stage, but the mail spool is stored on an NFS server and the indexes are stored locally. Thanks in advance, Alex Ferrara Director Receptive IT Solutions

1 0

Re: [Dovecot] Doveadm with a 2nd Instance
by Chris Lasater 03 Nov '13

03 Nov '13

While testing some more I found out something else. I have an alias set for doveadm so it was running with sudo and that ended up being part of the issue. If doveadm is run as a regular user then the problem goes away [user@server ~]$ doveadm -i Director log find Debug: /home/user/apps/logs/director/director_debug.log Info: /home/user/apps/logs/director/director_info.log Warning: /home/user/apps/logs/director/director.log Error: /home/user/apps/logs/director/director.log Fatal: /home/user/apps/logs/director/director.log [user@server ~]$ sudo doveadm -i Director log find Debug: /home/user/apps/logs/dovecot_debug.log Info: /home/user/apps/logs/dovecot_info.log Warning: /home/user/apps/logs/dovecot.log Error: /home/user/apps/logs/dovecot.log Fatal: /home/user/apps/logs/dovecot.log Also if I run "sudo doveadm stop" to stop the main instance, I now have the ability to use the -i Director using sudo. Unfortunately this makes it difficult to manage two instances. Does anyone have an idea of getting this to work with sudo? Chris

2 2

[Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 03 Nov '13

03 Nov '13

Hi, We have clients with various security & compliance requirements. Although not required, it would be ideal to have messages encrypted at rest. We already use SSL/TLS to secure the transmission of most email. However, it would be nice to have them encrypted sitting on our server. Is anyone doing this? I think that ideally, rather than full-disk encryption, we should use an encryption that encrypts the actual email messages as they sit on our file system. This way even if we ever had our server breached by an attacker, they wouldn't be able to do anything with the messages. However, this would also mean that if the attacker can't decrypt the files, than dovecot and postfix still would need to. This means that the encryption key would need to be available to the dovecot deamon. We'd either need to have it in a file that is restricted to access only by dovecot (less secure), or use an encryption passphrase for the certificate which would have to be typed in manually each time that dovecot starts or restarts (more secure, but also more work and possibility of disruption because the server can't restart gracefully without a human being having to be present [although I don't think we have issues with unexpected restarts anyway]). Is anyone doing anything like this with dovecot? Thanks!! - Doug Mortensen Network Consultant Impala Networks Inc CCNA, MCSA, Security+, A+ Linux+, Network+, Server+ A.A.S. Information Technology . www.impalanetworks.com P: (505) 327-7300 F: (505) 327-7545

6 6

[Dovecot] Assertion error in Dovecot 2.2.6
by Mark Sapiro 03 Nov '13

03 Nov '13

Background. A while back I upgraded my phone to one currently using Android 4.1.2 and K9 mail 4.409. This phone/MUA combination seems at times to go crazy making IMAP connections. At first, I had mail_max_userip_connections = 30 (my largest imap account has 19 folders). The issue I had at that time was multiple errors like Oct 14 17:45:16 sbh16 dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=30): user=<xxx>, method=PLAIN, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS, session=<c63x5bzowQBi0uQR> I then set mail_max_userip_connections = 50 This greatly reduced but didn't completely eliminate these messages, but then I would see multiple Oct 31 16:13:40 sbh16 dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped and Oct 31 16:13:40 sbh16 dovecot: imap-login: Disconnected: Connection queue full (no auth attempts in 4 secs): user=<>, rip=xx.xx.xx.xx, lip=xx.xx.xx.xx, TLS handshaking, session=<s26xmRHqVQBi0uQR> followed finally by Oct 31 16:13:40 sbh16 dovecot: imap-login: Panic: file client-common.c: line 190 (client_destroy): assertion failed: (!client->authenticating) Oct 31 16:13:40 sbh16 dovecot: auth: Warning: auth client 19669 disconnected with 1 pending requests: EOF Oct 31 16:13:40 sbh16 dovecot: imap-login: Fatal: master: service(imap-login): child 19669 killed with signal 6 (core not dumped - add -D parameter to service imap-login { executable } I then set default_process_limit = 200, and things seem to have settled down, but I thought the panic should be reported. Possibly this is relevant - the above only seem to occur when the phone is connecting via wifi and possibly only when the phone has just switched from the phone data network to wifi. Current doveconf -n # 2.2.6: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-8.1.14.el5 i686 CentOS release 5 (Final) auth_mechanisms = plain apop login auth_worker_max_count = 5 default_process_limit = 200 mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl dotlock namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot.passwd driver = passwd-file } passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/httpd/conf/ssl/combined.crt ssl_key = </etc/httpd/conf/ssl/www.grizz.org.key userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 } -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 1

[Dovecot] METADATA for v2.2.7
by Timo Sirainen 02 Nov '13

02 Nov '13

In case someone wants to try: http://hg.dovecot.org/dovecot-2.2/rev/0a08efeb3f40 The commit message lists the TODO. So for example if you want to enable it just for webmail (because quota limits aren’t there yet): mail_attribute_dict = file:%h/dovecot-attributes local 10.0.0.0/24 { imap_metadata = yes } Compared to the old metadata plugin, there are some improvements: - Uses lib-storage attributes internally, which means: - dsync replicates METADATA - it will be easy to add support for untagged METADATA notifications to clients when they change - SETMETADATA atomically either updates all or none of the changes Things that work in the METADATA code, but still require lib-dict changes to work properly: - Values with unlimited sizes - Values with binary data (NULs)

1 0

[Dovecot] DH parameter length too small?
by Jörg Lübbert 02 Nov '13

02 Nov '13

Hello, from my understanding, using 1024bit DH parameters results in a not sufficiently secure key exchange for DH(E). Therefore I think it would be advisable to have parameters of at least 2048bit . In fact, I would see a great benefit in chosing parameter length arbitrarily. I also do not see the benefit of parameter regeneration. What were the design goals here? Thanks, Jörg Lübbert

2 1

[Dovecot] Error: Syncing mailbox virtual failed: Virtual mailbox missing configuration file
by Mike Constabel 02 Nov '13

02 Nov '13

Hi, if I use doveadm search -u xx(a)xx.de savedbefore 15w or other search queries i got as first line: doveadm(xx(a)xx.de): Error: Syncing mailbox virtual failed: Virtual mailbox missing configuration file The virtual Mailbox has a config file: # cat /mailspool1/xx.de/xx/Maildir/virtual/Alle\ eigenen\ E-Mails/dovecot-virtual * all root@srv-mail:~# doveconf -n # 2.2.6 (81aedacbb01f): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_mechanisms = plain login dict { expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot/dovecot.log mail_attachment_dir = /mailspool1/attachments mail_attachment_min_size = 64 k mail_location = mdbox:/mailspool1/%d/%n/mdbox:ALT=/mailspool2/%d/%n/mdbox mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = mdbox:/mailspool1/%%d/%%n/mdbox:INDEXPVT=~/mdbox/shared/%%u prefix = shared/%%u/ separator = / type = shared } namespace { list = children location = mdbox:/mailspool1/public-folders/mdbox:INDEXPVT=~/mdbox/public/public-folders prefix = public/ separator = / type = public } namespace { location = virtual:~/Maildir/virtual prefix = virtual/ separator = / } namespace inbox { inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { special_use = \All } mailbox virtual/Flagged { special_use = \Flagged } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/mailspool1/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_create mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_new3 = Gesendete Elemente mailbox_alias_new4 = Gelöschte Elemente mailbox_alias_new5 = Junk-E-Mail mailbox_alias_old = Sent mailbox_alias_old2 = Sent mailbox_alias_old3 = Sent mailbox_alias_old4 = Trash mailbox_alias_old5 = Junk quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } pop3_client_workarounds = outlook-no-nuls protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0660 } } service lmtp { inet_listener lmtp { address = 192.168.1.98 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } service managesieve { process_limit = 1024 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual sieve } protocol lda { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual sieve } protocol imap { mail_plugins = quota mail_log notify expire trash acl zlib mailbox_alias virtual imap_quota imap_acl }

2 1

[Dovecot] Pre imap-session scripting
by azurIt 02 Nov '13

02 Nov '13

Hi, is it possible to run a script right after the IMAP/POP3 session was started? I know about post-login scripting but this is probably not what i'm looking for. I need to run a script which will know PID of process running IMAP session (so it must be already started). Thank you. azur

2 1

[Dovecot] Broken files?
by LuKreme 02 Nov '13

02 Nov '13

Getting a lot of these error for two specific mailboxes. They repeat many times a day, usually within less than 5 minutes. mail dovecot: imap(kremels): Error: Broken file /home/kremels/Maildir/.zz.x-tech.2010/dovecot-uidlist line 2: Invalid extended fields: : $ cat .zz.x-tech.2010/dovecot-uidlist 3 V1263241007 N56581 G11fe2118db236952f984010021d1a38d OI tried deleting the files that generated the errors, but they were recreated and the errors returned. (I’m using dovecot2 and Maildir) -- Death was familiar with the concept of the eternal, ever-renewed hero, the champion with a thousand faces. He'd refrained from commenting.

3 4

Re: [Dovecot] Logging in to a virtual users Maildir
by Joseph Tam 02 Nov '13

02 Nov '13

Steve Downes <steve(a)kingswayelec.co.uk> writes: > When I open a local mutt I get the following:- > 1) could not connect to vmail-s (connection refused) (vmail-s is the > mailserver host) Full stop, anything past here and you're debugging noise. You've configured out SSL/TLS on dovecot ... > /etc/dovecot/dovecot.conf > # disable ssl for now > ssl = no ... but your Mutt configuration has ... > ~/.mutt.muttrc > set spoolfile=imaps://steve@vmail-s/ ... and your debug logs state ... > [2013-10-31 14:35:23] Reading imaps://steve@vmail-s/... > [2013-10-31 14:35:23] Looking up vmail-s... > [2013-10-31 14:35:23] Connecting to vmail-s... > [2013-10-31 14:35:23] Connection failed. errno: 111... > [2013-10-31 14:35:23] Could not connect to vmail-s (Connection > refused). > [2013-10-31 14:35:25] Connected to vmail-s:993 on fd=-1 You configured dovecot to accept only plain IMAP (on port 143), but your mail reader is configured to connect to an IMAP/SSL service (port 993). Maybe it will start working if you configure Mutt set spoolfile=imap://steve@vmail-s/ (Just guessing -- I don't use Mutt.) Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Shared namespace, separator, username and dots.
by Marcio Merlone 02 Nov '13

02 Nov '13

Hi folks, I run a legacy mailserver that i had replaced courier-imap for dovecot 1.2. Everything is fine except for shared namespace. Maildir structure has been created using dot '.' as folder separator. It happens that all our users are created as name.surname as default. So when I want to select a shared folder, MUA end up with the following IMAP command: select shared.jhon.doe.folder.subfolder Obviously I took ages to figure why it won't work since it takes 'doe' as a folder and not a username part. When sharing a folder from 'sales' user, for example, it works fine. What do you suggest to make shared folders work for all without rebuilding hundreds of maildirs to change folder separator from '.' to '/'? Thanks for any hint. # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-52-server x86_64 Ubuntu 10.04.4 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps managesieve ssl_listen: * disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_process_per_connection: no login_max_processes_count: 1024 max_mail_processes: 1024 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(managesieve): 10 first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:~/Maildir:INDEX=/var/cache/dovecot/%n fsync_disable: yes maildir_very_dirty_syncs: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota acl imap_acl mail_plugins(imap): quota imap_quota acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: . inbox: yes list: yes subscriptions: yes namespace: type: shared separator: . prefix: shared.%%u. location: maildir:%%h/Maildir:INDEX=%u/Maildir/shared/%%u list: children subscriptions: yes lda: postmaster_address: postmaster(a)a1.ind.br mail_plugins: quota sieve acl quota_full_tempfail: yes auth_socket_path: /var/run/dovecot/auth-master fsync_disable: no auth default: mechanisms: plain login master_user_separator: * passdb: driver: pam args: session=yes blocking=yes dovecot passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes userdb: driver: nss args: service=ldap blocking=yes socket: type: listen client: path: /var/spool/postfix/private/dovecot mode: 436 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 plugin: sieve: ~/.dovecot.sieve acl: vfile acl_shared_dict: proxy::acl dict: acl: mysql:/etc/dovecot/acl-dict-sql.conf -- *Marcio Merlone* TI - Administrador de redes *A1 Engenharia - Unidade Corporativa* Fone: +55 41 3616-3797 Cel: +55 41 9689-0036 http://www.a1.ind.br/ <http://www.a1.ind.br>

3 2

[Dovecot] doveadm can't import his own mdboxes
by Peer Heinlein 02 Nov '13

02 Nov '13

We're running Dovecot 2.1.17 on Debian: # 2.1.17 (9efbc0731929): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab078.27.debug i686 Debian 7.1 simfs and we're having this namespace configuration: mail_location = mdbox:/var/mail/%Ld/%Ln/mdbox namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = prefix = separator = . subscriptions = yes type = private } As you can see, our namespace seperator is "." and not "/": a LIST "" "*" * LIST (\HasChildren) "." INBOX.test * LIST (\HasNoChildren) "." INBOX.test.huhu * LIST (\HasNoChildren \Trash) "." Trash * LIST (\HasChildren) "." INBOX a OK List completed. The problem is, that doveadm isn't able to import his own mdbox-directory: 1) delete the whole mdbox folder # rm -rf mdbox 2) create the new mdbox folder and create some subfolders in it # doveadm mailbox create -u max.muster INBOX.test # doveadm mailbox create -u max.muster INBOX.test.huhu 3) put a mail into a subfolder 4) try to re-import the whole mdbox: it doesn't work # doveadm import -u max.muster mdbox:mdbox BACKUP all doveadm(max.muster): Error: Couldn't create mailbox BACKUP.INBOX/test/huhu: Character not allowed in mailbox name: '/' Looks like there's something wrong in the namespace or like doveadm is working with a hardcoded internal namespace... Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 2

[Dovecot] Configuring SPECIAL-USE Dovecot 2.0.9
by Keith Mountifield 01 Nov '13

01 Nov '13

Hi All, I'm trying to configure Dovecot 2.0.9 to support Outlook 2013. As I understand it, I need to configure XLIST. I have added imap_capability = +XLIST to 20-imap.conf When I try to query the IMAP folders I get an error "An IMAP command Failed". Looking at the logs I get XLIST Command not found. I can only assume that I'm missing something in the configuration. Any help would be greatly appreciated Thanks Keith

2 1

[Dovecot] init script as provided http://wiki2.dovecot.org/DovecotInit
by Jess Portnoy 01 Nov '13

01 Nov '13

Hello list, I would add: # dovecot Startup script for the dovecot server # # chkconfig: - # processname: dovecot # config: /path/to/config # pidfile: /path/to/pid So that it supports the chkconfig used by RHEL and clones too. Also, maybe it should be installed by the Makefile's install target? it could then also set: DAEMON=/path/to/dovecot/daemon instead of: DAEMON=/usr/local/sbin/dovecot Cause naturally, it will know the prefix chosen. May the source be with you, Jess Portnoy

2 1

[Dovecot] Logging in to a virtual users Maildir
by Steve Downes 01 Nov '13

01 Nov '13

Trying to set up a mailserver to run exim4, dovecot2, (clamav procmail or similar not yet installed) on a virtual machine & access it from various hosts mostly using Mutt. So far no attempt at encryption although there are some pem files from a previous attempt & some evidence from the mutt debug file they may be being used . So far I have attempted to set up dovecot to by accessed by MUAs only & tried to access it from Mutt on on the mailserver virtual machine & on another on locally networked machine (no networking problems). When I open a local mutt I get the following:- 1) could not connect to vmail-s (connection refused) (vmail-s is the mailserver host) 2) mutt then opens, with a blank message screen 3) from mutt I then put C (open mailbox ? for list) & ?. 4) I then get a file list for the mailbox including all dovecot files but no mailbox files except cur. new, & tmp 5) if enter on ../ I get (presumably) /home/vmail/users/steve/ showing Maildir as the 2nd line 6) select Maildir gives me my inbox but continuing the process does not give me acces to any other folders. The files in my mailbox are from my previous version of Dovecot (V1*) but I have previously tried to start anew set of mailboxes with similar results. I enclose below:- my Dovecot.conf file My muttrc file a .muttdebug0 file Dovecot log files show nothing but Dovecot stop/start lines. Any pointers please? Steve --------------------------------- /etc/dovecot/dovecot.conf # based on Dovecot.org/HowTo/SimpleVirtualInstall # Dovecot version 2 # ASD 131028 protocols = imap # separate dovecot logging log_path = /var/log/dovecot.log # info_log_path = /var/log/dovecot-info.log info_log_path = /var/log/dovecot.log mail_debug=yes # disable ssl for now ssl = no disable_plaintext_auth = no # Maildir boxes mail_location = maildir:~/home/vmail/%u/Maildir # if your using pop3, you'll need this # pop3_uidl_format = %g # authentication configuration auth_verbose=yes auth_debug=yes auth_mechanisms=plain auth_debug_passwords=yes passdb { driver = passwd-file args = /etc/dovecot/passwd } userdb { driver = static args = uid=vmail gid=vmail home=/home/vmail/%u/Maildir } -------------------------------------------- ~/.mutt.muttrc # muttrc file started 131029 set mbox_type="Maildir" set spoolfile=imaps://steve@vmail-s/ set folder="/home/vmail/users/steve" unset mark_old set postponed="/home/vmail/users/steve/drafts/" set postpone=ask-yes set imap_check_subscribed set abort_nosubject=yes set include=yes set editor="emacsclient %s" set alias_file="/home/steve/.mutt/mutt-aliases --------------------------------------------- .muttdebug0 [2013-10-31 14:35:23] Mutt/1.5.21 (2010-09-15) debugging at level 2 [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc'. [2013-10-31 14:35:23] Reading configuration file '/usr/lib/mutt/source-muttrc.d|'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/charset.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/colors.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/compressed-folders.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/gpg.rc'. [2013-10-31 14:35:23] Reading configuration file '/etc/Muttrc.d/smime.rc'. [2013-10-31 14:35:23] Reading configuration file '/home/steve/.mutt/muttrc'. [2013-10-31 14:35:23] Reading imaps://steve@vmail-s/... [2013-10-31 14:35:23] Looking up vmail-s... [2013-10-31 14:35:23] Connecting to vmail-s... [2013-10-31 14:35:23] Connection failed. errno: 111... [2013-10-31 14:35:23] Could not connect to vmail-s (Connection refused). [2013-10-31 14:35:25] Connected to vmail-s:993 on fd=-1 [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... [2013-10-31 14:35:55] Scanning /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] Scanning /home/vmail/users/steve/Maildir... 0 [2013-10-31 14:35:55] ../mh.c:728: queueing 1382383788.2292_0.mail-s:2,Sa [2013-10-31 14:35:55] ../mh.c:728: queueing 1381593772.6226_1.mail-s:2,S [2013-10-31 14:35:55] ../mh.c:728: queueing 1382022143.2719_1.mail-s:2,S [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0/54 (0%) [2013-10-31 14:35:55] Reading /home/vmail/users/steve/Maildir... 0/54 (0%) [2013-10-31 14:35:55] parse_parameters: `boundary="==Multipart_Boundary_xc75j85x"' [2013-10-31 14:35:55] parse_parameter: `boundary' = `==Multipart_Boundary_xc75j85x' [2013-10-31 14:35:55] parse_parameters: `charset="us-ascii"' [2013-10-31 14:35:55] ../mh.c:773 maildir_add_to_context(): Considering [2013-10-31 14:35:55] ../mh.c:782 Adding header structure. Flags: OR [2013-10-31 14:35:55] ../mh.c:773 maildir_add_to_context(): Considering [2013-10-31 14:35:55] Sorting mailbox... (I have cut most of the repeated lines for each email out of this file)

2 1

[Dovecot] double login lines
by Andreas Meyer 31 Oct '13

31 Oct '13

Hi! Who can tell me why I have double login lines for some accounts? Oct 31 12:35:36 imap-login: Info: Login: user=<anmeyer(a)anup.de>, method=CRAM-MD5, rip=84.179.59.177, lip=78.47.3.18, mpid=29905, TLS, TLSv1 with cipher RC4-MD5 (128/128 bits) Oct 31 12:35:36 imap-login: Info: Login: user=<anmeyer(a)anup.de>, method=CRAM-MD5, rip=84.179.59.177, lip=78.47.3.18, mpid=29906, TLS, TLSv1 with cipher RC4-MD5 (128/128 bits) I can not think of any reason why this happens at the same time. Greetings Andreas

2 1

[Dovecot] dovecot-ldap : can't find user in OU subtree
by me＠electronico.nc 31 Oct '13

31 Oct '13

Hi all, Well, I've compiled and installed dovecot 2.2.6 with following options: > ./configure --prefix=/usr/ --sysconfdir=/etc/ --with-mysql > --libexecdir=/usr/lib/ --localstatedir=/var > --with-moduledir=/usr/lib/dovecot/modules --disable-rpath > --disable-static --with-zlib --with-bzlib --with-solr --with-ldap > --with-gssapi --with-nss doveconf -n: > # 2.2.6: /etc/dovecot/dovecot.conf > # OS: Linux 3.8.0-32-generic x86_64 Ubuntu 12.04.3 LTS ext4 > auth_debug = yes > auth_mechanisms = plain login > auth_verbose = yes > first_valid_gid = 20001 > first_valid_uid = 20001 > log_timestamp = %Y-%m-%d %H:%M:%S > mail_debug = yes > mail_gid = 20001 > mail_home = /media/data/email/%n > mail_location = maildir:/media/data/email/%n/mail > mail_plugins = fts fts_solr acl zlib mail_log notify > mail_uid = 20001 > managesieve_notify_capability = mailto > managesieve_sieve_capability = comparator-i;octet > comparator-i;ascii-casemap fileinto reject envelope encoded-character > vacation subaddress comparator-i;ascii-numeric relational regex > imap4flags copy include variables body enotify environment mailbox > date spamtest spamtestplus virustest > namespace { > list = no > location = > maildir:/media/data/email/%%n/mail:INDEX=/media/data/email/%n/mail/shared/%%n > prefix = shared/%%n/ > separator = / > subscriptions = no > type = shared > } > namespace inbox { > inbox = yes > location = maildir:/media/data/email/%n/mail > mailbox Sent { > auto = subscribe > } > mailbox Spam { > auto = subscribe > } > mailbox SpamFalse { > auto = subscribe > } > mailbox SpamToLearn { > auto = subscribe > } > prefix = > separator = / > type = private > } > passdb { > args = /etc/dovecot/dovecot-ldap-passdb.conf.ext > driver = ldap > } > plugin { > acl = vfile > mail_log_events = delete undelete expunge copy mailbox_delete > mailbox_rename save mailbox_create > mail_log_fields = uid box msgid size > sieve = /media/data/email/%n/dovecot.sieve > sieve_after = /media/data/email/sieve/global.sieve > sieve_dir = /media/data/email/%n/sieve > zlib_save = bz2 > zlib_save_level = 9 > } > protocols = imap pop3 sieve lmtp > service auth { > unix_listener /var/spool/postfix/private/auth { > group = postfix > mode = 0660 > user = postfix > } > unix_listener auth-master { > group = vmail > mode = 0660 > user = vmail > } > unix_listener auth-userdb { > group = vmail > mode = 0640 > user = vmail > } > } > service imap-login { > inet_listener imap { > address = * > port = 143 > } > inet_listener imaps { > address = * > port = 993 > ssl = yes > } > process_limit = 256 > } > service lmtp { > inet_listener lmtp { > address = * > port = 24 > } > user = vmail > } > service managesieve-login { > inet_listener sieve { > address = * > port = 4190 > } > process_limit = 256 > vsz_limit = 64 M > } > service pop3-login { > inet_listener pop3 { > address = * > port = 110 > } > inet_listener pop3s { > address = * > port = 995 > ssl = yes > } > } > ssl = required > ssl_ca = </etc/postfix/tls/cacert.pem > ssl_cert = </etc/postfix/tls/radiodjiido-cert.pem > ssl_key = </etc/postfix/tls/radiodjiido-key.pem > ssl_verify_client_cert = yes > userdb { > args = /etc/dovecot/dovecot-ldap-userdb.conf.ext > driver = ldap > } > protocol imap { > imap_client_workarounds = delay-newmail > imap_max_line_length = 64 k > mail_max_userip_connections = 20 > mail_plugins = acl imap_acl mail_log notify zlib > } > protocol pop3 { > mail_plugins = zlib mail_log notify > pop3_client_workarounds = outlook-no-nuls oe-ns-eoh > pop3_uidl_format = %08Xu%08Xv > } > protocol sieve { > managesieve_logout_format = bytes ( in=%i : out=%o ) > } > protocol lda { > info_log_path = > log_path = > mail_plugins = sieve zlib mail_log notify > quota_full_tempfail = yes > syslog_facility = mail > } > protocol lmtp { > info_log_path = > log_path = > mail_plugins = sieve fts zlib mail_log notify > quota_full_tempfail = yes > } /etc/dovecot/dovecot-ldap-passdb.conf.ext: > hosts = localhost > auth_bind = yes > auth_bind_userdn = cn=%u,OU=users,dc=domain,dc=lan > ldap_version = 3 > base = ou=users,dc=domain,dc=lan > scope = subtree > pass_filter = (&(objectClass=person)(cn=%u)(mail=*)) /etc/dovecot/dovecot-ldap-userdb.conf.ext: > hosts = localhost > dn = cn=ldap,cn=Users,DC=domain,DC=lan > dnpass = My_secret_pass > ldap_version = 3 > base = OU=users,DC=domain,DC=lan > scope = subtree > user_attrs = uid=20001, gid=20001, home=/media/data/email/%n, > mail=/media/data/email/%n/mail > user_filter = (&(objectClass=person)(cn=%n)(mail=*)) > iterate_attrs = cn=user > iterate_filter = (objectClass=person) All seems to work as expected up-to-now, but : If I move a user from OU 'users' to a sub-OU 'administrative' on Active Directory : -> The user can't login anymore to Dovecot I have added the "scope = subtree" to the userdb and passdb files but it doesn't change anything. Here is the debug part when user test3 (located in ou=users, ou=administrative) tries to login: > Oct 30 18:49:12 serveur dovecot: auth: Debug: auth client connected > (pid=4292) > Oct 30 18:49:12 serveur dovecot: auth: Debug: client in: > AUTH#0111#011PLAIN#011service=imap#011secured#011session=L6uskfDpKwAKChTQ#011lip=10.10.20.1#011rip=10.10.20.208#011lport=993#011rport=54827 > Oct 30 18:49:12 serveur dovecot: auth: Debug: client passdb out: > CONT#0111#011 > Oct 30 18:49:12 serveur dovecot: auth: Debug: client in: CONT<hidden> > Oct 30 18:49:12 serveur dovecot: auth: > ldap(test3,10.10.20.208,<L6uskfDpKwAKChTQ>): invalid credentials > Oct 30 18:49:14 serveur dovecot: auth: Debug: client passdb out: > FAIL#0111#011user=test3 As soon as I move user 'test3' back to ou=users, it can login ... > Oct 30 18:53:57 serveur dovecot: auth: Debug: Loading modules from > directory: /usr/lib/dovecot/modules/auth > Oct 30 18:53:57 serveur dovecot: auth: Debug: Read auth token secret > from /var/run/dovecot/auth-token-secret.dat > Oct 30 18:53:57 serveur dovecot: auth: Debug: auth client connected > (pid=4303) > Oct 30 18:53:57 serveur dovecot: auth: Debug: client in: > AUTH#0111#011PLAIN#011service=imap#011secured#011session=h+ypovDpUAAKChTQ#011lip=10.10.20.1#011rip=10.10.20.208#011lport=993#011rport=54864 > Oct 30 18:53:57 serveur dovecot: auth: Debug: client passdb out: > CONT#0111#011 > Oct 30 18:53:57 serveur dovecot: auth: Debug: client in: CONT<hidden> > Oct 30 18:53:57 serveur dovecot: auth: Debug: client passdb out: > OK#0111#011user=test3 Thanks in advance for your time and lights. Nicolas

3 5

[Dovecot] IMAP Dovecot unknown namespace creating root folders
by marcus lively 31 Oct '13

31 Oct '13

Hi, I hope someone can point me in the right direction here. I am migrating a mailbox from a non cPanel server, and the mailboxes have folders which seem to be at the same level as the Inbox. The users access these mailboxes using IMAP. The new server configuration is Exim > Dovecot 1.2.17 > Maildir with the standard cPanel install settings. dovecot -n output below I have created the new mailbox within cPanel however when I try to create a 'top level' folder in Outlook I receive the error 'Cannot create the folder: Unknown namespace' (Note I also tried this with the windows mail client to ensure it was not client side) I know that I can get round this by setting the root folder path on the client to 'Inbox' and therefore the folders would be created as sub-folders of Inbox, and this would not be visible to the user, but I was hoping to migrate without touching the clients. Should dovecot report the default root folder path automatically, or create a default top level namespace for each user so this can be done, or could I have just gone wrong and missed something. Any advice on getting this working appreciated, thanks for any help Maspry # 1.2.17: /etc/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.4 (Final) protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/dovecot/ssl/dovecot.crt ssl_key_file: /etc/dovecot/ssl/dovecot.key ssl_cipher_list: ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_processes_count: 2 login_max_processes_count: 50 login_max_connections: 500 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(pop3): 3 maildir_copy_preserve_filename: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): acl quota imap_quota mail_plugins(imap): acl quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_logout_format(default): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(imap): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_logout_format(pop3): top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o namespace: type: private prefix: INBOX. inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com auth default: mechanisms: plain login cache_size: 1024 username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+% passdb: driver: checkpassword args: /usr/local/cpanel/bin/dovecot-auth userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 plugin: quota: maildir quota_rule: Trash:ignore acl: vfile

2 2

Re: [Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 30 Oct '13

30 Oct '13

Currently our dovecot servers are on our webhosting linux boxes. We are using the LAMP stack to host websites, and also doing email with postfix & dovecot on these systems. We provide this as a hosting setup for 100+ accounts/websites on a single server (a multi-tenant setup). Each customer has anywhere between 1-100 email accounts which Dovecot services. If a customer has vulnerable PHP code on a website, some of these will allow a remote file upload. I have seen cases where they upload a PHP script that is a sort of web-based console/shell to the server (file-system, etc.). It provides several tools which all run through the uploaded PHP script to try to brute force and do other attacks. I've seen attempts at a root exploit. We've never had a root exploit and any such case of a customer's site being hacked has been easily contained by simple filesystem permissions being correct (and the fact that we have apache setup to run all scripts as the user who is the owner of the script files, which confines the script to that users' permissions). Still nobody loves the idea of bad guys trying to hack on your box. So.... given that type of scenario, if filesystem permissions weren't correct, or some new exploit surfaced that allowed someone bypass or elevate to root, then they could theoretically have access to the entire fileystem including where emails are stored. I hope to never have this sort of thing happen. We patch our systems regularly and have other security measures we follow to prevent this. We also are managing most of the PHP scripts customers use ourselves now and are updating those for the CMS' and other systems proactively. However, it would be nice to know that even if we were breached, the emails on the server were encrypted and would be completely useless to an attacker. This type of encryption is ideal and some regulations prefer (although don't require) it. - Doug Mortensen Network Consultant Impala Networks P: 505.327.7300 -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Michael Orlitzky Sent: Monday, October 28, 2013 11:52 AM To: dovecot Subject: Re: [Dovecot] Encryption solution for messages at rest On 10/28/2013 12:02 PM, Douglas Mortensen wrote: > Hi, > > We have clients with various security & compliance requirements. > Although not required, it would be ideal to have messages encrypted at > rest. You can rule out a lot of the crazier options by answering the questions, (a) What attack scenario do you have in mind? (b) How will encryption help?

11 15

[Dovecot] Right values for Antispam plugin
by Michael Neurohr 30 Oct '13

30 Oct '13

Hi! I'm currently configuring the Dovecot Antispam plugin for the use with Dspam. In general it works, but I'm not sure about one special config parameter: antispam_dspam_args At the moment I set it to: antispam_dspam_args = --source=error;--signature=%%s;--user;%u Is that the appropriate value for retraining? I'm not sure if "%%s" is correct to get the signature value. I was not able to find any documentation that describes that value. So I just want to know if my plugin config is correct for retraining. plugin { antispam_backend = dspam antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items;Deleted Messages antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --source=error;--signature=%%s;--user;%u } Thanks, Michael

1 0

Re: [Dovecot] Encryption solution for messages at rest
by Douglas Mortensen 30 Oct '13

30 Oct '13

So I suppose you're not a fan of the email hosting systems on the planet that bundle many services onto 1 box. Thanks for the feedback. - Doug Mortensen Network Consultant Impala Networks P: 505.327.7300 -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Alan Brown Sent: Tuesday, October 29, 2013 10:05 AM To: dovecot Subject: [Dovecot] Encryption solution for messages at rest > Date: Tue, 29 Oct 2013 08:54:04 +0100 > From: Robert Schetterer <rs(a)sys4.de> > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Encryption solution for messages at rest > Message-ID: <526F699C.9080402(a)sys4.de> > Content-Type: text/plain; charset=ISO-8859-1 > > > you shouldnt host mail/imap services on the same servers with massive > http hosting, You shouldn't host anything else on a webserver FULLSTOP. Webservers are best treated as "disposable" and should be heavily sandboxed. Any resources they can use should be vetted and ideally set as "read only" Inbound external access should be firewalled down to the webserver ports and OUTBOUND traffic should be firewalled too (If it has no business initiating external connections then block all SYNs), in order to stop it becoming a DDoS zombie. It's foolish (at best) to have mail servers running on a webserver, because if it's compromised it can immediately be used as a spam engine without much further effort. At least if it has to hand mail off to another mailserver you have a chance to run outbound filtering on the emitted mail without worrying about that being compromised too.

1 0

[Dovecot] separate mail_location for system and normal users
by Andrzej A. Filip 30 Oct '13

30 Oct '13

How to configure dovecot to use different default mail_location for system (uid<1_000) and normal users (uid>=1_000)? I want to to use by default * classic mailbox in standard location for system users * maildir in $HOME subdirectory for normal users

2 3

[Dovecot] Disable unsecure POP3 at all (Dovecot 2.1)
by Андрей Кумыков 30 Oct '13

30 Oct '13

Hi to all. Is it possible to disable unsecure POP3 protocol at all in Dovecot 2.1? There was "protocols" option in 1.x version, and there was separate pop3 and pop3s modules. There is no "pop3s" in configuration files in 2.1.

3 2

[Dovecot] Problem with dovecot-lda
by Wolfgang Ganzert 29 Oct '13

29 Oct '13

Hello Ladies and Gentlemen, first of all I have to say that dovecot is really impressive. I seems to be a very goot IMAP server and has in general a good documentation. I'm a beginner regarding the administration so please excuse if my questions sound silly but I want to learn to administrate these sophisticated things. Now here's my configuration: Linux openSuSE 12.1 Postfix 2.8.8 Dovecot 2.0.16 Boundary condition: Postfix as smtp (Postfix is configured as relay server; mail is sent to smtp.web.de if mail is not locally distributed) Dovecot as IMAP server in my private network (192.168....) Situation: I want to store outgoing mail which is send by postfix also in a "SENT" folder in Dovecot. The SENT folder is available and created through the plugin "autocreate". The main.cf file from postfix contains the following mailbox command: mailbox_command = /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" -m SENT If I send a simple mail from the shell with the following command echo "Hello me" | mail -s "Dovecot test 50, shell nach SENT" $USER the mail is send to my mailbox and stored in the folder "SENT" as unread. Problem: 1. I would expect to have to mails coming in; one in my "SENT" folder because this is copy of the mail and another one which is the incoming folder because the mail was sent to me. But, there is no mail in the incoming folder. 2. If I use a mail client like kmail2 the same thing happens. The mail is distributed to the SENT folder but there's no copy in the incoming folder. 3. If I send a mail to my adress at @web.de with the postfix configuration from above I do not receive the mail at web.de. 4. If I send a mail to my adress at @web.de with a postfix simplified mailbox command NOT containing the mailbox with "-m", then mail is send to web.de and there I receive it in the incoming box. This is the simplified command: mailbox_command = /usr/lib/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" Summary: All examples from above show that I do not get a COPY of the outgoing mail in my "SENT" folder but it's the REAL mail. Can You please give me some advice what to do? Thank You! Wolfgang P.S.: In /var/log/mail and /var/log/dovecot.log I do not get any errors.

2 1

[Dovecot] Building the Antispam plugin fails
by Michael Neurohr 29 Oct '13

29 Oct '13

Hi! I'm running Dovecot 2.2.5 on a CentOS 6.4 server from the ATRPMs repository. Unfortunately this repo does not provide a packaged version of the Antispam Plugin. So I followed the steps outlined in the Dovecot Wiki [1]. But when running the command ./configure, I get stuck with the following error: checking for dovecot-config in "/usr/local/lib/dovecot"... not found configure: configure: Use --with-dovecot=DIR to provide the path to the dovecot-config file. configure: error: dovecot-config not found So I downloaded the dovecot-devel package and run the configure command again with the following command: ./configure --with-dovecot=/usr/include/dovecot but with the same result. I made sure the the directory "/usr/include/dovecot" does contain the Dovecot header files. What can I do next? Do I really also have to install Dovecot from the sources only to get the Antispam Plugin working? Thanks, Michael [1] http://wiki2.dovecot.org/Plugins/Antispam

2 2

[Dovecot] Encryption solution for messages at rest
by Alan Brown 29 Oct '13

29 Oct '13

> Date: Tue, 29 Oct 2013 08:54:04 +0100 > From: Robert Schetterer <rs(a)sys4.de> > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Encryption solution for messages at rest > Message-ID: <526F699C.9080402(a)sys4.de> > Content-Type: text/plain; charset=ISO-8859-1 > > > you shouldnt host mail/imap services on the same servers with massive > http hosting, You shouldn't host anything else on a webserver FULLSTOP. Webservers are best treated as "disposable" and should be heavily sandboxed. Any resources they can use should be vetted and ideally set as "read only" Inbound external access should be firewalled down to the webserver ports and OUTBOUND traffic should be firewalled too (If it has no business initiating external connections then block all SYNs), in order to stop it becoming a DDoS zombie. It's foolish (at best) to have mail servers running on a webserver, because if it's compromised it can immediately be used as a spam engine without much further effort. At least if it has to hand mail off to another mailserver you have a chance to run outbound filtering on the emitted mail without worrying about that being compromised too.

1 0

[Dovecot] recipient_delimiter deux
by LuKreme 29 Oct '13

29 Oct '13

OK, I've been banging my head on why my procmail setup for virtual users is no longer working (difficult to test, since enabling it breaks live user's mail). There are only a few virtual users who have any sort of filters in place anyway (the heavy procmail users are local, not virtual), and they are fairly simple, so I think I can recreate them with sieve. I think I have everything I need for sieve to work, but now what? The first thing I want to do is have sieve process recipient_delimiter into a separate mailbox (creating it, if needed). Googling just for example sieve scripts comes up empty (well, directing to the dovecot wiki which at least on the links that come up, does not have sample scripts). so, foo+bar(a)example.com will go into foo's mailstore in the folder .bar/new/ On 27 Sep 2013, at 00:24 , Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> wrote: > Dovecot LDA uses the "-m" option and only lda_mailbox_autocreate and lda_mailbox_autosubscribe, no need for recipient_delimiter to override the default mailbox. Which I still don't understand. recipient_delimiter = + is the default, so I shouldn't need to set it in my confs, I just need to setup a sieve recipe (is that what it is called? script?) that will process these messages, right? What would that look like? I have to setup the SQL users so that LMTP or LDA is used for deliver, but I want that to apply only to the sql users. Something like this, maybe? userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u sieve=/var/sieve/%u.sieve protocol_lda=$mailplugins sieve driver = sql } I'm sure that protoco_lda isn't the right syntax though. If I set sieve=/var/sieve/%u.sieve as above would users still be able to use sieve-manage to manage their own sieve files? And what MUAs support this? If I left that out, do I put ~/.dovecot.sieve in with the other mailboxes and {cur,new,tmp} and the index files, or will there be issues? If I put a dovecot.sieve file there will it just be seen, processed, and work? (SQL user's $HOME is their maildir) $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } -- 'He's mad, isn't he?' 'No, mad's when you froth at the mouth,' said Gaspode. ' He's insane. That's when you froth at the brain.'

2 4

[Dovecot] pigeonhole sources no more available
by me＠electronico.nc 29 Oct '13

29 Oct '13

Hi all, Please excuse me for this message but I can't find the pigeonhole sources available anymore. This page : http://pigeonhole.dovecot.org/download.html Points to (for latest sources) : http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz And it seems that : www.rename-it.nl is now : http://www.medicalbits.nl So we get 404 error ... Could someone point us the to right URL and, maybe, update pigeonhole.dovecot.org ? Thanks in advance for your time. Nicolas

5 4

[Dovecot] When imapc can't connect to remote IMAP prevents user login (and blocks LDA)
by Marcin Mirosław 28 Oct '13

28 Oct '13

Hi! I'm using dovecot 2.1.12-r1. When remote imap server rejects connections then I can't login into account and MTA can't deliver emails to maildir also. I'm attaching snippets of logs: 2012-12-15T18:05:43.072594+01:00 meteor dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=2001:470:1f0b:1ab3:50af:bef4:6918:78ad, lip=2001:470:1f15:1b61::2, mpid=32533, TLS, session=<T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit> 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:05:43] 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: Invalid user settings. Refer to server log for more information. And snippet when LDA tries to deliver email: 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:00:54] 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Fatal: Invalid user settings. Refer to server log for more information. I'd like to ask is this behavior correct? Thanks, Marcin doveconf -n: # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 3.6.8-hardened x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy incl ude variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = dict:User quota::proxy::quota quota_exceeded_message = Quota exceeded / Skrzynka odbiorcy jest przepelniona, wiadomosc nie zostala dostarczona sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 1M stats_refresh = 30 s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib }

2 5

[Dovecot] Dovecot replication - I'm stuck
by IT geek 31 28 Oct '13

28 Oct '13

Hi, I've been following the wiki document at http://wiki2.dovecot.org/Replication, but I've become stuck. I'm running version 2.1.3 on NetBSD 5.2 (v2.2+ isn't available as a package yet, and compiling my own is well outside my wheelhouse). I have a couple of questions: The wiki page keeps referring to "vmail". Is this a just system user I need to create? Presumably on both Dovecot boxes? If I don't use virtual users, do I need this? Here is my dovecot -n: # 2.1.3: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u listen = 192.168.1.1 login_greeting = Go on then, let's have it... mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = remote:vmail@server2.mydomain.com replication_full_sync_interval = 1 hours } protocols = imap service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/mail.mydomain.com.crt ssl_key = </etc/openssl/private/mail.mydomain.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)mydomain.com } Any help would be greatly appreciated, as I'd really love to get this working. Thanks, -Mark

3 4

Re: [Dovecot] Dbox group file permissions
by Chris Lasater 28 Oct '13

28 Oct '13

Just in case someone else has the same problem, I had to change the following two variables mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n to mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:~/ "When mail_location begins with%h or~/, its permissions are copied from the first existing parent directory if it has setgid-bit set. This isn't done when the path contains any other %variables."

1 0

[Dovecot] Blocking certain hostnames/clients
by Charles Marcus 28 Oct '13

28 Oct '13

Hello, As a result of learning of the new 'Intro' App introduced by LinkedIn, and discussing how to block SMTP access to my postfix server from these clients, I'm now interested in doing the same for dovecot. Bottom line desire is to avoid scraping/hijacking email stored on my dovecot server by any client other than a users client. This includes Intro (so, LinkedIn), Blackberry, GMail, Outlook, etc. The boss has expressed the desire to NOT block all email from them, just disallow any of their clients from AUTH'ing (either SMTP or IMAP/POP). I'd be interested if anyone has any kind of database of hostnames/IP blocks of the freemailers out there that support adding 3rd party accounts, especially ones supporting IMAP. Anyway, article raising the concern found here: http://www.bishopfox.com/blog/2013/10/linkedin-intro/ "LinkedIn released a new product today called Intro. They call it ?doing the impossible?, but some might call it ?hijacking email?. Why do we say this? Consider the following: Intro reconfigures your iOS device (e.g. iPhone, iPad) so that all of your emails go through LinkedIn?s servers. You read that right. Once you install the Intro app, all of your emails, both sent and received, are transmitted via LinkedIn?s servers. LinkedIn is forcing all your IMAP and SMTP data through their own servers and then analyzing and scraping your emails for data pertaining to?whatever they feel like." -- Best regards, */Charles/*

3 2

[Dovecot] Which MTA for a personal-use dovecot instance?
by Dan Langille 27 Oct '13

27 Oct '13

I'm planning to deploy a personal dovecot IMAP server (i.e. I am the only user) in a FreeBSD jail. At present, I have IMAP deployed on the same host as one of my mail servers, which is running Postfix. I do like Postfix, but it seems to be a bit overkill for this particular situation. All my incoming MX are provided by Google. They handle the incoming mail and forward to my private MX, and from there the mail for me goes into my ~/Maildir. With the move to IMAP in a jail, I need to get the mail from my private MX into that jail. All mail being sent to that jail will be destined for my ~/Maildir, with some massaging via procmail. Given that I've just started using mail/nullmailer, I was wondering if there was something simple that I could use. I was planning to use postfix, require TLS, lock things down tightly. But I'm open to suggestions for something simple. -- Dan Langille - http://langille.org/

2 2

[Dovecot] fts-solr indexer-worker connects to wrong solr host dovecot-2.2.4
by Richard Platel 26 Oct '13

26 Oct '13

Hello. We're setting up fts solr and want to have the solr server host be set per-user via UserDB. It looks like if a user connects and fts indexes mail, and then another user connects and indexes mail, indexer-worker is connecting to the first user's fts host: User1, hammer(a)rp-auth-test.com connects, does a SEARCH for the first time, indexer-worker gets UserDB settings and correctly indexes mail on ftsvs01: [...] auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): lookup shared/userdb/hammer(a)rp-auth-test.com auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"talk15_590ec6d100042","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs01:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 1 hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: auth input: hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: Added userdb setting: plugin/_session=talk15_590ec6d100042 indexer-worker: Debug: Added userdb setting: plugin/fts=solr indexer-worker: Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs01:8080/solr/ indexer-worker: Debug: Added userdb setting: mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/ha mmer(a)rp-auth-test.com/ indexer-worker: Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker: Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker: Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker: Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(hammer(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions =yes location=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, index=/mail/index01/215/ 573/hammer(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, alt= indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(hammer(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294685 vs 1380294612 ): /mail/index01/215/573/hammer(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(hammer(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] User1 index finishes and imap searches against ftsvs01 [...] imap(hammer(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs01:8080/solr/select?fl=uid,score&rows=2&sort=uid+asc&q=(hdr:%22…] Submitted [...] User2 grant(a)rp-auth-test.com connects and does a SEARCH, index worker gets gets UserDB settings, including fts host ftsvs02, but connects to ftsvs01 (also note index-worker initially shows wrong user in loglines) [...] auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): lookup shared/userdb/grant(a)rp-auth-test.com auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"cow80_609fed7600001","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs02:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 2 grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: auth input: grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/_session=cow80_609fed7600001 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts=solr indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs02:8080/solr/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(grant(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(grant(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(grant(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, index=/mail/index01/812/023/grant(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, alt= indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] indexer-worker indexes User2's mail on wrong fts host: [...] indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Sent header indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload [...] indexer-worker finishes and imap searches against correct fts host ftsvs02 [...] imap(grant(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs02:8080/solr/select?fl=uid,score&rows=194&sort=uid+asc&q=(hdr:%…] Submitted [...]

2 3

[Dovecot] Dovecot proxy hooks
by dac＠getodata.ro 26 Oct '13

26 Oct '13

I am interested in the possibility of using Dovecot IMAP/POP proxying capabilities to analyze emails that are passing through and possibly modify content on the fly. This subject has been discussed here [1] before. I have tried the mail-filter plugin [2], but the hooks it uses are only called in a non-proxy setup. Is there a practical way of doing this, or plans to add such a feature? Links: [1]: http://dovecot.org/list/dovecot/2006-February/011704.html [2]: http://www.dovecot.org/patches/2.2/mail-filter.tar.gz

2 1

[Dovecot] Plugin issue with update from 2.0.19 to 2.1.17
by Reinaldo Matukuma 26 Oct '13

26 Oct '13

Hello. Probably only Timo can help-me with this. I have a self-made plugin based on the zlib plugin that i use to cryptograph the messages at inbox. As a side-effect of the cryptography, my plugin changes the size of the message, but until 2.0.19 this works well with dovecot index and the W/S flags. But now, i'm going to upgrade to 2.1.17 and now i have these messages on log at my test ambiance: Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Cached message size smaller than expected (367 < 529) Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Maildir filename has wrong S value, renamed the file from /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=367,W=378:2,S to /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=529:2,S Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Corrupted index cache file /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 6 I understood with these messages that the dovecot is arguing to get the real size of the file now, overriding the return of size from my crypto plugin. But i don't understood if this is a consequence from the changes to correct the index issue (the dovecot.index.cache issue). So... I want know if the correct way to fix this would be change my plugin to return the real size of the file (that will be larger than the effective message that the plugin returne after the de-cryptography) or if i need use some new function to the plugin replace the expected size based on the real size of the message, not of the file. Thanks Reinaldo

3 4

[Dovecot] unusual dsync lines
by Anand Kumria 26 Oct '13

26 Oct '13

Hi, Another day, another dysnc attempt. Using Dovecot v2.2.5.4; I see: # doveadm -v -o imapc_user=user(a)example.com -o imapc_password=password -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u user(a)example.com imapc: dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8343, msgid=<4F387A25.5010900(a)example.com>, size=2954969 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8344, msgid=<5237B0BF.7030402(a)example.com>, size=3371710 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8345, msgid=<5237B588.6040009(a)example.com>, size=3266 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8346, msgid=<5237B6B4.2030203(a)example.com>, size=4201 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8347, msgid=<5237B888.7030807(a)example.com>, size=3371445 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8348, msgid=<5237C224.9010608(a)example.com>, size=3371745 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8349, msgid=<5237C350.5080608(a)example.com>, size=3371700 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8350, msgid=<5237C5EE.5030408(a)example.com>, size=3371619 dsync(user(a)example.com): Info: expunge: box=Drafts, uid=8209, msgid=< 4F387A25.5010900(a)example.com>, size=2954969 The interesting lines being uid=8209 and uid=8343; why would dsync both copy and then expunge the same message from the same mailbox? Regards, Anand

2 3

[Dovecot] Strange output from LIST command
by azurIt 26 Oct '13

26 Oct '13

Hi, i'm using Dovecot 2.1.7 (Debian Wheezy) and output from LIST command looks strange: C: 4 LIST () "" (INBOX INBOX.Karantena INBOX.Spam) RETURN (STATUS (UNSEEN)) S: * LIST () "." "INBOX" S: * LIST () "." "INBOX.Karantena" S: * STATUS "INBOX.Karantena" (UNSEEN 0) S: * LIST () "." "INBOX.Spam" S: * STATUS "INBOX.Spam" (UNSEEN 0) S: 4 OK List completed. The UNSEEN information for INBOX is completely missing. It is correct behavior? If not, is this a known bug in 2.1.7? Thank you. azur

9 21

[Dovecot] Login into other user's account // master user for non-master users // chroot to users.<user>
by Steffen Kaiser 26 Oct '13

26 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently some of our organizational roles uses shared secrets (aka the password) to access the mail account of an organizational role, say "sales" for example. For one, I don't like shared secrets, for second, there had been some changes to shared mailboxes, I can only say "user sales has deleted the message at then and then". Therefore I would like to access the mailboxes of organizational roles with the accounts of the humans performing the role currently. Using sharing and ACLs it is possible to map the mailboxes of "sales" to "users.sales" namespace for specific other users, actually the human ones, say userA and userB for example. However, userB does not like managing identities in its MUA and refuses to acknowledge the messages in users.sales for various reasons. One reason was that userB wants to visibly separate strictly both mail accounts, the private messages in "userB" and the role's ones in "sales". Now, I came into thinking that it would be good in such case, if userB could authentificate as, say "sales*userB" - much like a master user - and ends in "sales"'s home, but with access permissions of "userB", well, like a chroot. Would it be an interesting feature to add to Dovecot's core? If I simulate "sales*userB" with password of userB and let the userdb return the home of sales, userB would gain "owner" privilegues of sales implicitly. So there seems to exist no workaround. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUmDx3l3r2wJMiz2NAQLgVwgAw/RgAll9QPEwEPAY4hNHrTcieyZoCMUc iTGBDYcfaELnlLZJupbM4fRPyVYMe4uRmuy2pBKXwDplCriW9FIETQ36Jx6oppZn Ojf1+ZLjBUwr0OBpGMXyDd0XpNWgaEOiEzvvpOykO+pJJCKEJR7uR0usQ5cV6JRt z7qiY3t7n7H0j12Oas7w+IsRrTgMe9FsJ4D37SwxeZCpM12y17E2T2mX10ycvnTM 27/Gai8iyp/4dlO0NqBZ+qU/txqs2h+y5SARngj4Ru9YkmwutC9b8/4kBObTzzdx w1ahO3sYPTH0KmQ0Voc63H6T6U6CkBmYr9kqplkTdEiwtdg9AJSSfQ== =1arj -----END PGP SIGNATURE-----

5 7

[Dovecot] LMTP, TLS/SSL, authentication, proxy
by Jogi Hofmüller 26 Oct '13

26 Oct '13

Folks, Several questions packed into one email ;) Can dovecot use TLS/SSL on LTMP inet socket? Can I configure dovecot to only let an authenticated user deliver mail via LMTP? Can I tell dovecot to use a user/password for proxying LMTP connections? All this is related to my quest to move from cyrus to dovecot transparently to our users. And if any of the above questions can be answered with yes, I would appreciate the odd hint on howto configure that :) Thanks in advance! -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] Problems with userdb lookup
by Mario Arnold 26 Oct '13

26 Oct '13

Hello, since few days there are problems with the userdb lookup. The problem occur if the recipient user is unknown (here test(a)xtlv.cn) doveconf -n # 2.2.6 (f89e645cba90): /etc/dovecot/dovecot.conf # OS: Linux 3.2.45.stk32 i686 Debian jessie/sid ext3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = digest-md5 cram-md5 auth_username_translation = %Lu auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dov_debug.log hostname = kyoto.vtlx.cn login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_gid = vmail mail_home = /var/mail/vhosts/%Ld/%Ln mail_location = sdbox:/var/mail/vhosts/%Ld/%Ln:DIRNAME=DbOx-mAiLs mail_plugins = " quota mail_log notify expire zlib" mail_privileged_group = vmail mail_uid = vmail mailbox_list_index = yes ... passdb { args = scheme=PLAIN username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } postmaster_address = postmaster(a)xtlv.cn protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 84.38.75.44 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 84.38.75.44 port = 4190 } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = 84.38.75.44 port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status { group = postfix mode = 0660 user = postfix } } ... userdb { args = username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } ... > gdb /usr/lib/dovecot/auth core_dbg GNU gdb (GDB) 7.6 (Debian 7.6-5) Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/auth...Reading symbols from /usr/lib/debug/usr/lib/dovecot/auth...done. done. [New LWP 26466] warning: Could not load shared library symbols for linux-gate.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/auth'. Program terminated with signal 6, Aborted. #0 0xb779d424 in __kernel_vsyscall () (gdb) bt full #0 0xb779d424 in __kernel_vsyscall () No symbol table info available. #1 0xb74ec80f in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = <optimized out> resultvar = <optimized out> pid = -1218015232 selftid = 26466 #2 0xb74efcc3 in __GI_abort () at abort.c:90 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0xb7794ff4, sa_sigaction = 0xb7794ff4}, sa_mask = {__val = {0, 3077744103, 3216056844, 3078348800, 3078207408, 1, 3078184664, 3078275225, 3078207848, 3077070192, 1, 1, 0, 0, 159279448, 3077360220, 3077743598, 3078180852, 3075085960, 3077367868, 159354316, 3077744683, 3078186032, 3075227880, 3216056948, 3077897967, 0, 3078180852, 0, 0, 159354316, 3078300704}}, sa_flags = 1, sa_restorer = 0xb74efb80 <__GI_abort>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0xb772abf9 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:192 backtrace = 0x97e6978 "/usr/lib/dovecot/libdovecot.so.0(+0x67bcf) [0xb772abcf] -> /usr/lib/dovecot/libdovecot.so.0(+0x67c51) [0xb772ac51] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb76de1d6] -> /usr/lib/dovecot/libdo"... #4 0xb772ac51 in i_internal_fatal_handler (ctx=0xbfb122e4, format=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfb12304 "") at failures.c:653 status = 0 #5 0xb76de1d6 in i_panic (format=format@entry=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:264 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = 0xbfb12304 "" #6 0xb7751886 in p_strndup (pool=0xb7796544 <static_unsafe_data_stack_pool>, str=str@entry=0x0, max_chars=max_chars@entry=4294967295) at strfuncs.c:74 mem = <optimized out> len = <optimized out> __FUNCTION__ = "p_strndup" #7 0xb7751d7f in t_strndup (str=0x0, max_chars=4294967295) at strfuncs.c:236 No locals. #8 0x08057003 in auth_request_append_password (str=str@entry=0x97e68a8, request=0x97f8da8, request=0x97f8da8) at auth-request.c:1799 p = <optimized out> log_type = <optimized out> max_len = 4294967295 #9 0x08058cf2 in auth_request_log_unknown_user (request=request@entry=0x97f8da8, subsystem=subsystem@entry=0x807a0cc "passwd-file") at auth-request.c:1846 str = 0x97e68a8 #10 0x0806268c in db_passwd_file_lookup (db=0x97f4430, request=request@entry=0x97f8da8, username_format=0x97ef148 "%Lu") at db-passwd-file.c:466 pw = 0x97f4470 pu = <optimized out> table = <optimized out> username = 0x97e6598 dest = <optimized out> #11 0x0806d8bf in passwd_file_lookup (auth_request=0x97f8da8, callback=0x80599b0 <auth_request_userdb_callback>) at userdb-passwd-file.c:45 _module = <optimized out> module = <optimized out> pu = <optimized out> table = <optimized out> str = <optimized out> key = <optimized out> value = <optimized out> p = <optimized out> #12 0x08059c94 in auth_request_lookup_user (request=0x97f8da8, callback=callback@entry=0x8054ce0 <user_callback>) at auth-request.c:1072 userdb = 0x97ef150 cache_key = <optimized out> #13 0x08055612 in master_input_user (args=0x97f8751 "7\ttest(a)xtlv.cn\tservice=quota-status", conn=0x97f8b48) at auth-master-connection.c:314 auth_request = 0x97f8da8 error = 0xbfb125ac "\244\325s\267H\213\177\t" ret = <optimized out> -- 中華人民共和國

2 1

[Dovecot] Empty Mails from MAILER-DAEMON with Dovecot-Antispam and DSPAM
by Anna Christina Naß 26 Oct '13

26 Oct '13

Hallo, I've installed the dovecot-Antispam extension to my dovecot IMAP installation in conjunction with DSPAM. But when moving Mails from e.g. INBOX to Spam or vice versa, empty mails from MAILER-DAEMON appear after the original mail has been moved. This happens using Thunderbird 17esr, K-9 Mail on Android and Apple Mail (Mountain Lion). (Perhaps also when using a Webmail IMAP client) The source from one of these empty mails looks like this: ----snip---- Return-Path: <MAILER-DAEMON> X-Original-To: acn Delivered-To: acn(a)mydomain.name Received: from localhost (localhost.localdomain [127.0.0.1]) by <my host name> (Postfix) with SMTP id CB81B140011 for <acn>; Thu, 24 Oct 2013 09:23:33 +0200 (CEST) X-DSPAM-Reclassified: Spam Message-Id: <20131024072333.CB81B140011@<my host name>> Date: Thu, 24 Oct 2013 09:23:33 +0200 (CEST) From: MAILER-DAEMON ----/snip---- Do you have any idea why these mails appear and how I can prevent it? I'm using these Debian packages: ii dovecot-antispam 2.0+20120225-3 ii dovecot-core 1:2.1.7-7 ii dovecot-imapd 1:2.1.7-7 ii dovecot-ldap 1:2.1.7-7 ii dovecot-lmtpd 1:2.1.7-7 ii dovecot-managesieved 1:2.1.7-7 ii dovecot-sieve 1:2.1.7-7 ii dspam 3.10.1+dfsg-11 ii postfix 2.9.6-2 ii postfix-ldap 2.9.6-2 DSPAM is integrated in Postfix via master.cf: ----snip---- smtp inet n - - - - smtpd -o content_filter=dspam dspam unix - n n - - pipe flags=u user=vmail:vmail argv=/usr/bin/dspamc --deliver=innocent,spam --user $user Mails go to dovecot via this 'virtual'-transport: dovecot unix - n n - - pipe flags=ODRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -e -f ${sender} -d ${user} ----/snip---- The rest of my configuration follows: dovecot -n: ----snip---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 ext4 auth_cache_size = 1 M auth_mechanisms = plain login auth_worker_max_count = 5 listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%u/Maildir mail_privileged_group = mail mailbox_idle_check_interval = 15 secs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify passdb { args = /etc/dovecot/ldap-passdb.conf.ext driver = ldap } plugin { antispam_allow_append_to_spam = no antispam_backend = dspam antispam_dspam_args = --user;%Lu;--deliver=spam,innocent;--source=error antispam_dspam_binary = /usr/bin/dspamc antispam_dspam_notspam = --class=innocent antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam;Junk antispam_trash = Trash;Deleted Items;Deleted Messages sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve-before.d sieve_extensions = +notify +imapflags sieve_storage = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = $default_internal_user } service imap-login { process_min_avail = 2 service_count = 0 vsz_limit = 32 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/ssl/mycerts/my.imzadi.de.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3:!EXP:!aNULL:!ADH ssl_key = </etc/ssl/mycerts/my.imzadi.de.key userdb { args = /etc/dovecot/ldap-userdb.conf.ext default_fields = uid=vmail gid=vmail home=/var/vmail/%u driver = ldap } protocol imap { mail_max_userip_connections = 20 mail_plugins = antispam } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve postmaster_address = postmaster(a)my.imzadi.de } ----/snip---- My dspam.conf looks like: ----snip---- Home /var/spool/dspam StorageDriver /usr/lib/i386-linux-gnu/dspam/libmysql_drv.so DeliveryHost 127.0.0.1 DeliveryPort 10026 DeliveryIdent localhost DeliveryProto SMTP OnFail error Trust vmail Trust root Trust dspam TrainingMode teft TestConditionalTraining on Feature noise Feature whitelist Algorithm graham burton Tokenizer osb PValue bcr WebStats off Preference "trainingMode=TEFT" # { TOE | TUM | TEFT | NOTRAIN } -> default:teft Preference "spamAction=deliver" # { quarantine | tag | deliver } -> default:quarantine Preference "spamSubject=[SPAM]" # { string } -> default:[SPAM] Preference "statisticalSedation=5" # { 0 - 10 } -> default:0 Preference "enableBNR=on" # { on | off } -> default:off Preference "enableWhitelist=on" # { on | off } -> default:on Preference "signatureLocation=headers" # { message | headers } -> default:message Preference "tagSpam=off" # { on | off } Preference "tagNonspam=off" # { on | off } Preference "showFactors=off" # { on | off } -> default:off Preference "optIn=off" # { on | off } Preference "optOut=off" # { on | off } Preference "whitelistThreshold=10" # { Integer } -> default:10 Preference "makeCorpus=off" # { on | off } -> default:off Preference "storeFragments=off" # { on | off } -> default:off Preference "localStore=" # { on | off } -> default:username Preference "processorBias=on" # { on | off } -> default:on Preference "fallbackDomain=off" # { on | off } -> default:off Preference "trainPristine=off" # { on | off } -> default:off Preference "optOutClamAV=off" # { on | off } -> default:off Preference "ignoreRBLLookups=off" # { on | off } -> default:off Preference "RBLInoculate=off" # { on | off } -> default:off Preference "notifications=off" # { on | off } -> default:off AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride fallbackDomain AllowOverride ignoreGroups AllowOverride ignoreRBLLookups AllowOverride localStore AllowOverride makeCorpus AllowOverride optIn AllowOverride optOut AllowOverride optOutClamAV AllowOverride processorBias AllowOverride RBLInoculate AllowOverride showFactors AllowOverride signatureLocation AllowOverride spamAction AllowOverride spamSubject AllowOverride statisticalSedation AllowOverride storeFragments AllowOverride tagNonspam AllowOverride tagSpam AllowOverride trainPristine AllowOverride trainingMode AllowOverride whitelistThreshold AllowOverride dailyQuarantineSummary AllowOverride notifications IgnoreHeader DKIM-Signature IgnoreHeader X-Spam-Status IgnoreHeader X-Spam-Scanned IgnoreHeader X-Virus-Scanner-Result Notifications off PurgeSignatures 14 # Stale signatures PurgeNeutral 90 # Tokens with neutralish probabilities PurgeUnused 90 # Unused tokens PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hit LocalMX 127.0.0.1 SystemLog on UserLog on Opt out ClamAVPort 3310 ClamAVHost 127.0.0.1 ClamAVResponse spam ServerMode auto ServerPass.Relay1 "<pwd>" ServerParameters "--deliver=innocent,spam --user %u" ServerIdent "localhost.localdomain" ServerDomainSocketPath "/var/run/dspam/dspam.sock" ClientHost /var/run/dspam/dspam.sock ClientIdent "<pwd>@Relay1" ProcessorURLContext on ProcessorBias off StripRcptDomain off Include /etc/dspam/dspam.d/ ----/snip---- Thanks a lot! Kind regards, Anna Christina Naß

2 1

[Dovecot] UIDL conversion courier -> dovecot
by Will Yardley 25 Oct '13

25 Oct '13

I've got a weird split setup where POP3 is currently handled by Courier (courier-imap-3.0.2 distribution), and IMAP is currently handled by the RHEL 5 version of Dovecot (1.0.7) I'm trying to figure out a way to convert the POP3 UIDLs (in cases where the courierpop3dsizelist is newer than dovecot-uidlist, at least) to something that Dovecot will read, or to configure Dovecot's pop3 to use a UIDL format that will work, as mentioned in the migration wiki. We have some "squeaky wheel" users who don't have their POP clients set to delete messages, and are likely to complain about re-downloading their several GB of mail. Thus far, the migration scripts haven't seemed to work properly, maybe because of the versions I'm using. I'm not sure whether the Courier versions there refer to Courier MTA version or Courier IMAP version, but adjusting the UIDL format to %v-%u (as suggested for early Courier 3 / Dovecot 1.0) hasn't worked (I saw %u-%v online, but that also didn't work). Since the Courier system doesn't seem to report validity, I also tried just '%u' - this works *if* I delete the header line as well as rename the courierpop3dsizelist to dovecot-uidlist, but I still don't get the exact same UIDLs as before. I'm willing to write my own migration tool, or to adapt the existing one, but I could use some assistance knowing how to do the translation. Dovecot -n for that instance is below, slightly sanitized, obviously I can change pop3_uidl_format; I also tried getting rid of pop3_reuse_xuidl: Basically, to give a concreate example, the Courier system seems to use the filename as the UIDL, with this courierpop3dsizelist: /2 45 1382654636 1199751891.13891_0.water-ox:2,Sa 2412 0:1382654636 1199927364.22870_0.fire-ox:2,S 2440 0:1382654636 1199936486.3332_0.wood-ox:2,Sa 2074 0:1382654636 1199985712.27745_0.water-ox:2,RS 4007 0:1382654636 1199993867.23139_0.fire-ox:2,S 1550 0:1382654636 producing this UIDL output: UIDL +OK 1 1199751891.13891_0.water-ox 2 1199927364.22870_0.fire-ox 3 1199936486.3332_0.wood-ox 4 1199985712.27745_0.water-ox 5 1199993867.23139_0.fire-ox [...] Dovecot's dovecot-uidlist: 3 V1199747645 N606 562 W2412 :1199751891.13891_0.water-ox:2,Sa 563 W2440 :1199927364.22870_0.fire-ox:2,S 564 W2074 :1199936486.3332_0.wood-ox:2,Sa 565 W4007 :1199985712.27745_0.water-ox:2,RS 566 W1550 :1199993867.23139_0.fire-ox:2,S producing: UIDL +OK 1 1199747645-562 2 1199747645-563 3 1199747645-564 4 1199747645-565 5 1199747645-566 (or, if I change the format to just %u): +OK 1 650 2 651 3 652 4 653 5 654 # dovecot --version 1.0.7 # 1.0.7: /etc/dovecot.d/XXX.cfg base_dir: /var/run/dovecot/pop-its syslog_facility: local4 protocols: pop3 pop3s listen: *:110 ssl_listen: *:995 ssl_ca_file: /etc/pki/dovecot/certs/XX.pem ssl_cert_file: /etc/pki/dovecot/certs/XXXX.pem ssl_key_file: /etc/pki/dovecot/private/XXXX.key disable_plaintext_auth: yes login_dir: /var/run/dovecot/pop-its/login login_executable: /usr/libexec/dovecot/pop3-login login_greeting_capability: yes login_processes_count: 4 login_max_processes_count: 512 verbose_proctitle: yes mail_location: maildir:/var/spool/maildir/%1Ln/%Ln:INDEX=/var/spool/dovecot/indexes/%1Ln/%Ln mail_debug: yes mmap_disable: yes maildir_copy_with_hardlinks: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_reuse_xuidl: yes pop3_uidl_format: %v-%u pop3_client_workarounds: outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: Mail. inbox: yes auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot.conf-ldap userdb: driver: static args: uid=vmail gid=mail home=/var/spool/maildir/%1Ln/%Ln socket: type: listen master: path: /var/run/dovecot/pop-its/auth-master mode: 384 user: vmail group: mail TIA! /wby

1 1

[Dovecot] Replication (Mac OS X)
by Rusty Ross 25 Oct '13

25 Oct '13

Hello, I am taking a stab at setting up dovecot replication between two OS X Mavericks servers. (The dovecot version in Mavericks is 2.2.5.) The first question I have is in regards to userdb. The user accounts are Open Directory based. The output of: doveadm user ‘*' …yields only: # doveadm user ‘*' submit However, specific user accounts can be looked up explicitly, ie: # doveadm user 'mary' field value uid 214 gid 6 home mail maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F quota maildir:User quota:noenforcing quota_rule *:storage=0 mail_location maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F/dovecot.sieve sieve_dir /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve_storage /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F According to http://wiki2.dovecot.org/Replication, user listing via “doveadm user ‘*’” is required for replication. Any thoughts about how I can get that working (or work around it) in this environment? Thanks, Rusty

3 16

[Dovecot] dsync core dump
by Jogi Hofmüller 25 Oct '13

25 Oct '13

Dear all, We're slowly progressing towards migration, and now run into dscyn dumping core when trying to sync mailboxes from the old imap server. Needless to say that not one byte get's transferred. On the old.server all I see is a correct login. This is what we get for one example user: server:~# doveadm -v -D backup -R -u USER imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(USER): Debug: auth input: USER system_groups_user=USER uid=XXXX gid=YYYY home=/home/USER /etc/dovecot/proxy-userdb doveadm(USER): Debug: Unknown userdb setting: plugin//etc/dovecot/proxy-userdb=yes doveadm(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER doveadm(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir doveadm(USER): Debug: maildir++: root=/home/USER/Maildir, index=, control=, inbox=/home/USER/Maildir, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 1 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) doveadm(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u doveadm(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 0 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER dsync(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=imapc: dsync(USER): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(USER): Debug: imapc(old.server:PORT): Looking up IP address dsync(USER): Debug: imapc(old.server:PORT): Connecting to IP dsync(USER): Debug: imapc(old.server:PORT): Starting SSL handshake dsync(USER): Debug: imapc(old.server:PORT): SSL handshake successful dsync(USER): Debug: imapc(old.server:PORT): Server capabilities: IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=PLAIN ANNOTATEMORE dsync(USER): Debug: imapc(old.server:PORT): Authenticating as cyrus for user USER dsync(USER): Debug: imapc(old.server:PORT): Authenticated successfully dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 1 dsync(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u dsync(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 0 dsync(USER): Debug: acl vfile: Global ACL directory: (none) Segmentation fault (core dumped) Here is the output of dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10-3-amd64 x86_64 Debian jessie/sid auth_debug = yes imapc_features = rfc822.size imapc_host = old.server imapc_list_prefix = INBOX imapc_master_user = MASTERUSER imapc_password = MASTERPASS imapc_port = PORT imapc_ssl = imaps imapc_ssl_ca_dir = /etc/ssl/certs lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = acl namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ subscriptions = no type = shared } namespace inbox { hidden = yes inbox = yes list = no location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes type = private } passdb { args = session=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp pop3" service auth { unix_listener auth-userdb { mode = 0777 } } service lmtp { inet_listener lmtp { address = 172.16.16.78 port = 24 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/proxy-userdb driver = passwd } protocol lmtp { mail_plugins = acl } protocol imap { mail_plugins = acl autocreate imap_acl } -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] "Renaming not supported across conflicting directory permissions"
by Richard Platel 25 Oct '13

25 Oct '13

Is it possible to disable this check in 2.1.7? (without a patch and re-compile?)

3 2

[Dovecot] Replication not happening on 2.2
by Lucas Rothamel - Eye Catching Webdesign 24 Oct '13

24 Oct '13

Hello, first - thanks for the help in getting dovecot 2.2 compiled and installed on Debian. I have Dovecot 2.2 running now on two servers, and to test replication, I am polling mail on one server whilst the other creates mail regularly from crontab output. I have replication set up, but nothing at all is appearing on the other server, and I do not have any dsync / doveadm messages in /var/log/mail.log any more. With 2.1, these two used to spam many errors into mail.log. Any hints? Here is my dovecot-n output: # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/%d/%n/Maildir mail_plugins = " notify replication" mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@mydomain quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota postmaster_address = sysop@mydomain } Thanks, Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

1 0

[Dovecot] mailbox sharing with mdbox
by NOC WVNET 24 Oct '13

24 Oct '13

Hello, i want to know if it's possible to use mailbox sharing with mdbox. I have done a setup with maildir where it's working fine but with mdbox I'm only able to subscribe the shared folder but there are no messages in it. (maybe a problem with the namespace) I'm running dovecot 2.2.6 [deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2.patched main ] on Debian Wheezy Kind regards Stefan

1 0

[Dovecot] secure email server
by BONNET, Frank 23 Oct '13

23 Oct '13

Hello I have to setup a "secured" email server - encrypted filesystem - SSL or TLS only for SMTP and IMAPS - Talking only to some known other same-secured servers Any info/links welcome ! Please do not start some flame war around this ! I've been ordered to set up such server and I KNOW there are probably security holes but nothing's perfect so a starting point is necessary *Thank you for any infos*

6 7

[Dovecot] Odd Feature Request - RBL blacklist lookup to prevent authentication
by Marc Perkel 23 Oct '13

23 Oct '13

I would like to have a list of IPs (hacker list) that I can do a lookup on so that if anyone tries to authenticate to dovecot they always fail if they are on my list. I have the list - and the list is available as a DNS blacklist. I'd like to have it work with both local IP lists or RBL lookup. The idea is so hackers from known IP addresses never succeed. If Dovecot provides the feature I have about 1/2 million IP addresses of known current hackers to block. Anyone else interested in this?

8 7

[Dovecot] fstat() errors on /srv/mail/<username>/dovecot.index.log
by Zach La Celle 23 Oct '13

23 Oct '13

Dovecot version 2.1.7 Ubuntu 12.04.3 LTS Kernel 3.2.0-35-generic x86_64 I'm not sure exactly when this started occurring, but sporatically users report issues receiving email, having email saved to "Sent," etc. Looking in dovecot.log, I see the following errors: 2013-10-16 09:53:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27434, secured, session=<PnoiBtzoBgB/AAAB> 2013-10-16 09:53:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:53:21 imap(user2): Info: Disconnected: Logged out in=3616 out=495 2013-10-16 09:53:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27436, secured, session=<jE5kBtzoBwB/AAAB> 2013-10-16 09:53:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:41 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27438, secured, session=<UDJlB9zoCAB/AAAB> 2013-10-16 09:53:41 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:54:12 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27440, secured, session=<6bI5CdzoCQB/AAAB> 2013-10-16 09:54:12 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:12 imap(user5): Info: Disconnected: Logged out in=736 out=7064 2013-10-16 09:54:15 imap-login: Info: Login: user=<user6>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27442, secured, session=<t+FnCdzoCgB/AAAB> 2013-10-16 09:54:15 imap(user6): Info: Disconnected: Logged out in=95 out=902 2013-10-16 09:54:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27444, secured, session=<c/q1CdzoCwB/AAAB> 2013-10-16 09:54:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27446, secured, session=<nOb3CdzoDAB/AAAB> 2013-10-16 09:54:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 These errors are not confined to a single user, and do not occur with the same frequency. I originally was running the Dovecot shipped with the default Ubuntu repositories (don't remember which version, but it was 1.*) and used a backport to upgrade to 2.1.7 to see if that fixed it. It did not. Any ideas why this is happening?

2 4

[Dovecot] doveadm: Fatal: open(/dev/tty)
by Dan Langille 22 Oct '13

22 Oct '13

I received this message today, and remembered, you can't do that... $ doveadm pw -s SHA512-CRYPT Enter new password: doveadm(dan): Fatal: open(/dev/tty) failed: No such file or directory </pre> It seems if you have no tty, you can't create a password. Surely there is a better way to do this? Looking at the code, it's trying to open the tty and turn off echo. For the record: FreeBSD 8.4-RELEASE-p3 And yes, there is no console. I'm attached to a FreeBSD jail from the host system, directly via the ezjail-admin console command. # w 6:52PM up 18 days, 23:34, 0 users, load averages: 0.96, 0.57, 0.46 USER TTY FROM LOGIN@ IDLE WHAT # Ain't nobody there.. -- Dan Langille - http://langille.org/

2 3

[Dovecot] using dovecot in Asterisk imap storage
by Asmaa Ahmed 22 Oct '13

22 Oct '13

Hello, I am trying to use postfix/dovecot as mail server to be the imap storage for my voicemail system.For that I installed postfix and dovecot and trying to follow the instructions in this post http://etel.wiki.oreilly.com/wiki/index.php?title=Storing_Voicemail_on_an_I… I should add a master user for Asterisk to your IMAP server that has access to all user's mailboxes and as per the instructions, I should edit auth section in dovecot.conf which I can't find! Is there something wrong or should I add this section by myselfAlso I don't have dovecot.masterusers, should I create it? $/etc/dovecot$ /usr/sbin/dovecot -n# 2.0.19: /etc/dovecot/dovecot.conf# OS: Linux 3.2.0-31-virtual x86_64 Ubuntu 12.04.3 LTS mail_location = maildir:~/Maildirmanagesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavepassdb { driver = pam}plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve}protocols = imap pop3 sieveservice auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix }}ssl_cert = </etc/ssl/certs/dovecot.pemssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUMssl_key = </etc/ssl/private/dovecot.pemuserdb { driver = passwd}protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10}protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh}protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r} Thanks.

2 4

[Dovecot] Dbox group file permissions
by Chris Lasater 22 Oct '13

22 Oct '13

Hi everyone, I feel like I am missing something obvious here. I have dovecot up and running and every piece of mail is given user read/write permission. I see the option mail_gid, but I do not see anyplace to set the group permissions. I see the below wiki talking about new home directories getting their permission from the parent directory, but this does not seem to work. Any assistance would be appreciated. http://wiki2.dovecot.org/SharedMailboxes/Permissions I changed the group permissions on the parent directory, and used rm -rf to delete the user directories, then logged in again so it was recreated. [user@dovecot ~]$ sudo ls -la /mnt/home/imapd/domain.example.net/ total 24 drwxr-x--- 6 imapd imapd 4096 Oct 21 17:35 . drwxr-xr-x 46 imapd nagios 4096 Oct 21 16:55 .. drwx------ 3 imapd imapd 4096 Oct 21 16:59 user1 drwx------ 3 imapd imapd 4096 Oct 21 17:35 user2 Setup Mail is written in dbox format CentOS 5.9 dovecot 2.2.6 NFS with director Mail Configs mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n mail_uid = imapd mail_gid = imapd Thanks, Chris

1 0

[Dovecot] Mailboxes separated from IMAP server
by Reymer Antonio Vargas Solano 21 Oct '13

21 Oct '13

Hello folks, At my university we are trying to implement a distributed email backend, but I have some troubles, The topology: Server A: Postfix+LMTP # MTA Server B: Dovecot+LMTP # Just mailboxes Server C: Dovecot # POP3/IMAP Right now the Server A can leave a received email to the Server B, but I don't know how to communicate Server C to the Server B to retrieve the emails. I think that we should use IMAP protocol, but I am confused about how to connect them, I don't know if we have to use a proxy IMAP server, or another thing. Can anyone give me an idea? Regards, Reymer Antonio Vargas Solano

5 14

[Dovecot] dovecot dropbox plugin created another problem ?
by Benny Pedersen 21 Oct '13

21 Oct '13

http://blog.dynamoo.com/2013/10/dropbox-spam-leads-to-malware-on-errr.html

1 0

[Dovecot] bangkokmaco@gmail.com has indicated you're a friend. Accept?
by bangkokmaco＠gmail.com 21 Oct '13

21 Oct '13

Hi, bangkokmaco(a)gmail.com wants to follow you. ****** Is bangkokmaco(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=Dovecot+Mailing+List&… If No please follow the link below: http://invites.fliporamail.com/signup_e_no.html?fullname=Dovecot+Mailing+Li… Follow the link below to remove yourself from all such emails http://invites.fliporamail.com/uns.jsp?email=dovecot@dovecot.org&iid=3fa84c…

2 1

[Dovecot] Upgrade from 2.1 to 2.2 on Debian
by Lucas Rothamel - Eye Catching Webdesign 21 Oct '13

21 Oct '13

Hello, I am currently running Dovecot 2.1 on current Debian and need to upgrade to 2.2 to use the replication features. I understand that I therefore need to compile Dovecot myself. I am using a MySQL database for users authentication, therefore I need to compile Dovecot with mysql support: *./configure --with-mysql* Unfortunately this terminates with: *configure: error: Can't build with MySQL support: libmysqlclient not found* I installed libmysqlclient from debian repos, but it does not help. Also, how do I then connect the newly installed dovecot to my existing /etc/init.d/dovecot script? Thank you. Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

3 4

[Dovecot] Question to sieve symlink
by Andreas Meyer 20 Oct '13

20 Oct '13

Hello! A Server running openSUSE 12.3 and dovecot version 2.1.13. In the log I find Oct 19 00:23:23 managesieve(anmeyer(a)anup.de): Warning: sieve-storage: Active sieve script symlink /var/spool/vhosts/anup.de/anmeyer/.dovecot.sieve is broken: invalid/unknown path to storage (points to /var/spool/vhosts/anup.de/anmeyer/.sieve/managesieve.sieve). But the link is ok and when I login to roundcube I can manage the filters. What's the problem? Greetings Andreas

4 12

[Dovecot] patch for ssl_prefer_server_ciphers in dovecot 2.1
by Adi Kriegisch 20 Oct '13

20 Oct '13

Dear all, I tried to do a backport of 'ssl_prefer_server_ciphers' (http://hg.dovecot.org/dovecot-2.2/rev/897484f45a87/) to Dovecot 2.1 (namely the Debian version of Dovecot) and wanted to ask if there is any chance to integrate this feature into Dovecot 2.1 'upstream' as well. As the code structure changed quite a bit, I am not sure if my patch is complete. I tested it with pop3s and imaps in my test environment and it works just as expected and seemed to not have any unwanted effects. (Dovecot code is probably the most beautiful and easy to read C code I've seen, but there might also be some pitfalls I missed.) best regards, Adi Kriegisch PS: I need that feature to enable PFS while allowing Outlook to still connect and the others not to fall back to a different cipher; I was unable to find a PFS cipher that is supported by Outlook and OpenSSL.

3 7

[Dovecot] dovecot-metadata-plugin v14 patches
by Sergey Sidlyarenko 19 Oct '13

19 Oct '13

Please apply patches for dovecot-metadata-plugin v14. 1. dovecot-metadata-plugin-value_nil - fix plugin crach if entry->value == NULL (strlen(NULL) - segfault). 2. dovecot-metadata-plugin-utf7_support - add support metadata for UTF8 mailfolder. -- Sidlyarenko Sergey https://github.com/lefoyer

2 1

[Dovecot] Issues with configure script / Makefile
by Bret Jordan 19 Oct '13

19 Oct '13

Dear Dovecot, I have noticed that when you pass a --prefix in to the configure script and say specify a path of /local/dovecot-2.2.6 that when you install most of the subdirectories (etc, lib, include, libexec,etc) have a dovecot directory in them, like if you were installing to /. This is not typical of most *nix software. So I tried to specify the exact location with the following configure options, but they are not honored when it comes to installation. I have looked through the configure script to see if I can see where the problem is and can not see it. These are the ones that do not work. Some of the others, however to work. # Do not work --sysconfdir=/local/dovecot-2.2.6/etc \ --libdir=/local/dovecot-2.2.6/lib \ --includedir=/local/dovecot-2.2.6/include \ --libexecdir=/local/dovecot-2.2.6/libexec \ # Do work --docdir=/local/dovecot-2.2.6/share/doc \ --with-ssl=openssl --with-ssldir=/local/dovecot.2.2.6/ssl \ --with-statedir=/local/dovecot-2.2.6/lib \ --with-moduledir=/local/dovecot-2.2.6/lib \ --with-rundir=/run/dovecot Bret Bret Jordan CISSP | Sr Security Architect PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

1 0