- dovecot - dovecot.org

Re: [Dovecot] New install not working.
by Joseph Tam 28 Sep '13

28 Sep '13

"Rhorer, Leslie" <Leslie.Rhorer(a)twtelecom.com> writes: > At first things were looking much better, except that most of my > folders, other than the Inbox, were not showing up. I started changing > both the dovecot configuration and the folder structure of my mail > files, but now I can't even get the Inbox to populate. Outlooks says > it is there, along with any folders I create new in Outlook, plus the > Trash folder, which is the only non-local folder with anything in it. > Try what I might, I can't get my Inbox to populate or any of the > existing folders to show up at all. Here is the current output from > dovecot -n: > .... > mail_location = mbox:/RAID/home/%u/mail Maybe try mail_location = mbox:/RAID/home/%n/mail:INBOX=/RAID/home/%n/mail/inbox (%n does not include the domain part, but it might be the same as %u). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] service anvil and ssl-params not starts with dovecot started
by Dewey Du 28 Sep '13

28 Sep '13

Hi My dovecot started with the error below. What's the most possible reason for the error? “2013-08-28 11:41:40 ”master: Info: Dovecot v2.2.5 starting up (core dumps disabled) “2013-08-28 11:42:00 ”anvil: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(anvil): command startup failed, throttling for 2 secs “2013-08-28 11:42:00 ”ssl-params: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config “2013-08-28 11:42:00 ”master: Error: service(ssl-params): command startup failed, throttling for 2 secs Actually, After dovecot starts, I can telnet 110, but it takes 30seconds or so to get through the authentication. I suspect whether the error above cause the issue or not. Other information: dovecot version v2.2.5 use posfix, dovecot sasl, and mysql Attached my dovecot.conf: #auth_debug = yes auth_mechanisms = plain login #debug_log_path = /var/log/dovecot.debug default_internal_user = postfix default_login_user = postfix disable_plaintext_auth = no first_valid_uid = 1000 last_valid_uid = 1000 mail_gid = 1000 mail_uid = 1000 log_path = /var/log/dovecot.log mail_location = maildir:/var/vmail/%d/%u mail_privileged_group = vmail protocols = imap pop3 listen = * base_dir = /var/run/dovecot/ service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } user = root } ssl = no userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 2

Re: [Dovecot] recipient_delimiter
by voytek＠sbt.net.au 27 Sep '13

27 Sep '13

>> $recipient_delimiter = ‘+’ ahem, dumb question coming: //I often read various threads here, and, look at my own setup, with a view of optimizing or understanding things I should...// I have working dovecot 2.1.1 with postfix, only have virtual domains, all users in mysql; '+' delimiter is enabled in postfix, and, works OK postfix]# grep _delimiter main.cf # The recipient_delimiter parameter specifies the separator between recipient_delimiter = + BUT, I seem to have nothing in dovecot.conf: postfix]# cd /etc/dovecot dovecot]# grep delimiter * dovecot]# cd conf.d conf.d]# grep delimiter * 15-lda.conf:#recipient_delimiter = + 20-lmtp.conf:# the mail to the detail mailbox. See also recipient_delimiter and 20-lmtp.c_org:# the mail to the detail mailbox. See also recipient_delimiter and should I also enter $recipient_delimiter = ‘+’ in my /etc/dovecot/dovecot.conf ? what will it add to this working setup, what am I missing? thanks for all pointers

6 10

[Dovecot] Truncated emails
by David LEROUX 27 Sep '13

27 Sep '13

Hi, I'm running Dovecot IMAP and some times receive truncated emails. Don't understand why. Here are my settings: /dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-48-server x86_64 Ubuntu 10.04.4 LTS log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot.log log_timestamp: Â« %Y-%m-%d %H:%M:%S Â» login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_max_userip_connections: 11 mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock imap_client_workarounds: tb-extra-mailbox-sep auth default: passdb: driver: pam userdb: driver: passwd/ Hop you can help. Thanks, David

2 3

[Dovecot] v2.2.6 released
by Timo Sirainen 27 Sep '13

27 Sep '13

http://dovecot.org/releases/2.2/dovecot-2.2.6.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.6.tar.gz.sig I didn't have time to look into the latest reported dsync replication bugs, but this release should have been done a long time ago already and I'm busy for next few days, so no more waiting. Things seem to be working quite well in general though. * acl: If public/shared namespace has a shared subscriptions file for all users, don't list subscription entries that are not visible to the user accessing it. + doveadm: Added "auth lookup" command for doing passdb lookup. + login_log_format_elements: Added %{orig_user}, %{orig_username} and %{orig_domain} expanding to the username exactly as sent by the client (before any changes auth process made). + Added ssl_prefer_server_ciphers setting. + auth_verbose_passwords: Log the password also for unknown users. + Linux: Added optional support for SO_REUSEPORT with inet_listener { reuse_port=yes } - director: v2.2.5 changes caused "SYNC lost" errors - dsync: Many fixes and error handling improvements - doveadm -A: Don't waste CPU by doing a separate config lookup for each user - Long-running ssl-params process no longer prevents Dovecot restart - mbox: Fixed mailbox_list_index=yes to work correctly

3 3

[Dovecot] Index error copying compressed message
by Richard Platel 27 Sep '13

27 Sep '13

Hi. Dovecot 2.2, with the zlib plugin, I think we're getting bad index entries on IMAP COPY. On copying a message to an empty folder, in the dovecot error log I see: Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: Cached message size smaller than expected (615 < 971) Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: Corrupted index cache file /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup/dovecot.index.cache: Broken physical size for mail UID 0 Sep 19 20:34:25 imap01 dovecot: imap(grain(a)rp-auth-test.com): Error: read() failed: Invalid argument (uid=0) (Note this happens from the copy operation, not a subsequent access. Also note the UID is always 0). The filename for the message is: -rw------- 2862 mail mail 615 Aug 29 15:38 1379622865.M228140P11548.imap01,S=971,W=988:2,S S= size looks correct: $ zcat 1379622865.M228140P11548.imap01\,S\=971\,W\=988\:2\,S |wc 17 51 971 doveadm dump says: $ sudo -u mail doveadm -c /he/dovecot/conf/dovecot.conf dump /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup/ Detected file type: index -- INDEX: /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup//dovecot.index version .................. = 7.3 base header size ......... = 120 header size .............. = 208 record size .............. = 12 compat flags ............. = 1 index id ................. = 1379605150 (2013-09-19 15:39:10) flags .................... = 0 uid validity ............. = 1377629137 (2013-08-27 18:45:37) next uid ................. = 14309 messages count ........... = 1 seen messages count ...... = 1 deleted messages count ... = 0 first recent uid ......... = 14308 first unseen uid lowwater = 14309 first deleted uid lowwater = 14308 log file seq ............. = 6 log file tail offset ..... = 204 log file head offset ..... = 204 day stamp ................ = 1379548800 (2013-09-19 00:00:00) day first uid[0] ......... = 1 day first uid[1] ......... = 0 day first uid[2] ......... = 0 day first uid[3] ......... = 0 day first uid[4] ......... = 0 day first uid[5] ......... = 0 day first uid[6] ......... = 0 day first uid[7] ......... = 0 -- Extension 0 -- name ........ = maildir hdr_size .... = 36 reset_id .... = 0 record_offset = 0 record_size . = 0 record_align = 0 header - new_check_time .... = 2013-09-19 20:34:10 - new_mtime ......... = 2013-09-19 20:08:51 - new_mtime_nsecs ... = 792530000 - cur_check_time .... = 2013-09-19 20:35:38 - cur_mtime ......... = 2013-09-19 20:35:38 - cur_mtime_nsecs.... = 227710000 - uidlist_mtime ..... = 2013-09-19 20:35:38 - uidlist_mtime_nsecs = 254613000 - uidlist_size ...... = 1025178 -- Extension 1 -- name ........ = cache hdr_size .... = 0 reset_id .... = 1379605174 record_offset = 8 record_size . = 4 record_align = 4 -- Keywords -- -- CACHE: /mail/index01/434/860/grain(a)rp-auth-test.com/.Bup//dovecot.index.cache major version ........ = 1 minor version ........ = 1 indexid .............. = 1379605150 (2013-09-19 15:39:10) file_seq ............. = 1379605174 (2013-09-19 15:39:34) (24 compressions) continued_record_count = 0 record_count ......... = 0 used_file_size (old) . = 108 deleted_record_count . = 0 field_header_offset .. = 32 (0x88808080 nontranslated) -- Cache fields -- # Name Type Size Dec Last used 0: flags bit 4 tmp 2013-09-19 20:07 1: hdr.Message-ID hdr - tmp 2013-09-19 20:07 2: hdr.X-HE-Tag hdr - tmp 2013-09-19 20:07 -- RECORDS: 1 RECORD: seq=1, uid=14308, flags=0x08 (Seen) - ext 3 cache : 0 (00000000) $ sudo -u mail dovecot -c /he/dovecot/conf/dovecot.conf -n # 2.2.4.3 (12e60e803a54+): /he/dovecot/conf/dovecot.conf # OS: Linux 3.4.46-dom0-2.0.0 x86_64 Debian 7.0 debug_log_path = syslog disable_plaintext_auth = no first_valid_uid = 8 info_log_path = syslog lock_method = dotlock log_path = /var/run/dovecot/log-fifo log_timestamp = mail_fsync = always mail_gid = mail mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = zlib quota tc_mail_log notify tc_proc stats mail_uid = mail maildir_very_dirty_syncs = yes mmap_disable = yes namespace inbox { inbox = yes location = prefix = } passdb { args = host=localhost port=1143 username=%L{user}::%L{service}::%L{rip}::%L{session} driver = imap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid flags hetag memcached_servers = 10.5.47.223,10.5.47.222 quota = dict:User quota::proxy:/var/run/auth_proxy_dovecot/quotasocket:quota stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 30 secs stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service imap-login { inet_listener imap { address = 0 } inet_listener imaps { port = 0 } process_limit = 29 process_min_avail = 14 service_count = 0 } service imap-postlogin { executable = script-login -d /he/dovecot/utils/post_login.sh } service imap { executable = imap imap-postlogin process_limit = 1270 vsz_limit = 0 } service pop3-login { inet_listener pop3 { address = 0 } inet_listener pop3s { port = 0 } process_limit = 29 process_min_avail = 14 service_count = 0 } service pop3-postlogin { executable = script-login -d /he/dovecot/utils/post_login.sh } service pop3 { executable = pop3 pop3-postlogin process_limit = 206 vsz_limit = 512 M } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl = no userdb { args = /he/dovecot/conf/dovecot-tc-dict-auth.conf driver = dict } verbose_proctitle = yes protocol imap { mail_plugins = zlib quota tc_mail_log notify tc_proc stats imap_stats imap_quota }

2 2

[Dovecot] Released Pigeonhole v0.4.2 for Dovecot v2.2.6 and Pigeonhole v0.3.6 for Dovecot v2.1.17.
by Stephan Bosch 27 Sep '13

27 Sep '13

Hello Dovecot users, Now that Dovecot v2.2.6 is released, I can release a new Pigeonhole. Due to the SO_REUSEPORT changes in Dovecot, this Pigeonhole release will not compile cleanly against older Dovecot releases. This release is mainly about bugfixes. I also made a new release for Dovecot v2.1.17 that includes most of these fixes and some older ones. A word of warning for people using doveadm sync in combination with sieve: make sure you update both sides of the replication to avoid problems after upgrade. The attribute sub-tree under which Sieve scripts are replicated has moved to a different root. Since we expect that very few people are affected, there is no facility for backwards compatibility. This is no problem as long as both sides are upgraded. There is one new feature for the Sieve vacation extension. Normally vacation replies are sent with <> sender to prevent mail loops. A setting is provided to override this behavior (doc/extensions/vacation.txt), as requested on the mailing list. This is not a violation of the specification, but use this with care. Changelog v0.4.2: * Incompatible change in Sieve doveadm plugin: the root attribute for Sieve scripts is changed. Make sure that you update both sides of a dsync setup simultaneously when Sieve is involved, otherwise synchronization will likely fail. + Added support for sending Sieve vacation replies with an actual sender, rather than the default <> sender. Check the updated doc/extensions/vacation.txt for more information. - Fixed a binary code read problem in the `set' command of the Sieve variables extension. Using the set command with a modifier and an empty string value would cause code corruption problems while running the script. - Various fixes for doveadm-sieve plugin, mostly crashes. These include a fix for the `Invalid value for default sieve attribute' problem. - Various fixes for compiler and static analyzer warnings, e.g. as reported by CLang and on 32 bit systems. - Fixed the implementation of the new :options flag for the Sieve include extension. - Fixed potential segfault bug at deinitialization of the lda-sieve plugin. - Fixed messed up hex output for sieve-dump tool. Changelog v0.3.6: - Fixed a binary code read problem in the `set' command of the Sieve variables extension. Using the set command with a modifier and an empty string value would cause code corruption problems while running the script. - Various fixes for compiler and static analyzer warnings, as reported by CLang. - ManageSieve: Fixed '[' ']' stupidity for response codes (only happened before login). - Fixed setting name in example-config/conf.d/20-managesieve.conf. - Fixed messed up hex output for sieve-dump tool. The releases are available as follows: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz.sig http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.6.tar.gz http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.6.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1

[Dovecot] Strange errors with imapc+acl in 2.2.x
by René Neumann 27 Sep '13

27 Sep '13

Hi, after migrating to 2.2 (currently using 2.2.5), I see strange error messages when using imapc + public namespace + acl My setup: I create a public shared mailbox with imapc as location. Then I restrict this mailbox to one user only using ACLs. This works for this one special user, but for all others an error gets logged and they can't access their mailbox anymore: Sep 24 18:09:46 [dovecot] imap(other(a)my.domain): Error: user other(a)my.domain: Initialization failed: Namespace 'Gemeinsam.': Ambiguous mail location setting, don't know what to do with it: yes (try prefixing it with mbox: or maildir:) Sep 24 18:09:46 [dovecot] imap(other(a)my.domain): Error: Invalid user settings. Refer to server log for more information. My config (relevant parts): ------------------ Dovecot conf ---------------- imapc_host = some_host imapc_port = 143 imapc_user = some_user imapc_password = some3$pwd imapc_ssl = starttls imapc_ssl_verify = no namespace gemeinsam { type = public separator = . location = imapc: prefix = Gemeinsam. subscriptions = no } # I also tried different combinations of hidden and list plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 } ------------- /etc/dovecot/global-acls/Gemeinsam ------- anyone user=special(a)my.domain lrwstipekxa -------------------------------------------------------- Does anyone have any thoughts about this? Thanks, René

2 2

[Dovecot] recipient_delimiter
by LuKreme 27 Sep '13

27 Sep '13

Can I enable $recipient_delimiter = ‘+’ for only the virtual sql users? $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } === My pam users all have .procmailrc, and I do not want to interfere with those.

2 3

[Dovecot] Dovecot extremely slow!
by Patricio Rojo 27 Sep '13

27 Sep '13

Please help, Dovecot is running extremely slow for the last couple of weeks and it seems to be getting worse (or my patience running short). I attach the 10-master configuration and the log file after running strace according to: http://wiki.dovecot.org/Debugging/ProcessTracing I can click on an email and wait for a minute or more before receiving a connection dropped or no error at all. I use many clients (thunderbird, windows 8 mail, maildroid for android, squirrelmail) and they all have similar behavior. It happens both in the inbox and on imap subfolders. Sometimes it helps changing subfolders back and forth. I have many imap folders organized in up to 3 levels of subfolders and use postfix for delivery. Let me know any other info you require. Thanks! Patricio

6 8

[Dovecot] Courier migration and vpopmail with dovecot-lda
by Charles Sprickman 26 Sep '13

26 Sep '13

I've been using Dovecot in some fresh installs lately and have found it fairly easy to configure. However I'm starting on a migration that involves moving from some very old software (ancient vpopmail, qmail and Courier). On the Courier front, I've reviewed the migration page in the wiki, and it looks like the main concerns are just matching the namespace and then using the migration script to create new subscription and uidlist files. Given that my Courier IMAP setup is so old (4.0.6), is there anything to be aware of that's not covered in the wiki due to the age of Courier here? Are there any other general issues to be aware of as far as interactions with MUAs are concerned? For example, if Courier has been presenting the user's MUA with a given set of IMAP capabilities and then the MUA sees a bunch of extra capabilities on a subsequent login, will that trigger any strange behavior? And lastly on this subject, I will obviously be doing some testing before cutting over to the other server. Is it valid in something like Thunderbird to have it pointed to "imap.domain.com" and then change the imap server to point to something like "testimap.domain.com" for testing whether subscriptions and the uidlists are working as expected or should I fully replicate the move as an end user would see it by making the change in my local hosts file? Now, assuming that portion of the move goes alright, I'm incredibly confused about getting Dovecot and Vpopmail working together. I assume that initially I can stick with the Maildir++ mailbox format and let vpopmail's vdelivermail continue working as my LDA - vdelivermail understands how to find the user's Maildir, it can check quotas, and it can update the maildirsize file (which I'm assuming dovecot can also read and then report quota/usage to an IMAP client). However it does look like the Dovecot-only mailbox format(s) will offer much better performance than Maildir as the two dbox formats are the only supported mailbox formats with separate index files, correct? Is there any guidance on how to use dovecot's LDA with a virtual mail system such as vpopmail? From what I've read so far, I probably don't want to use the vpopmail extension supplied with dovecot, but query the mysql vpopmail db directly. I'm finding a ton of info while searching for this, but most deals with older versions of dovecot, and there are also many "this works but I don't know why" tutorials on combining dovecot and vpopmail and dovecot's own LDA. I'm not even able to guess how one handles the per-user .qmail files in vpopmail if not using vdelivermail (this is where we enable/disable spam filtering by piping the message through spamc). Any input on the overall migration process is appreciated. It's a bit overwhelming as I have to deal with a big jump in the vpopmail version, rebuilding qmail with a ridiculous number of patches, and then on top of that a migration to new imap/pop server software. eek. Thanks, Charles -- Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet www.bway.net spork(a)bway.net - 212.982.9800

2 2

[Dovecot] sieve gone mad ---help
by Rob 26 Sep '13

26 Sep '13

managesieve has gone mad. One person went on holiday when he came back his out of office would not switch off, then it replicated it's self into two other users (the vacation noticE) and started to be sent out for them and those users had never set up an out of office or looted into round cube. even deleting the vacation notice did not stop it, but if we put another vacation notice in then the new one is sent out, if we disable the new one then the old one is sent out…. mad…. how can I refresh the whole thing and start again… ? I am running this on 10.8.4 mountain lion server and I can't stop sieve… I have looked in the /Library/Server/Mail/Data/rules/USERFOLDER and removed all sieve files I have looked in each users mailbox but no seve files there… I have restarted and still sieve will not stop sending out emails…. yesterday it went crazy sending a mail a second from one mailbox back to it's self…. help….. osx 10.8 server using latest roundcube with managesieve plugin.... bash-3.2# ps -aef|grep dovecot 0 27481 1 0 12:07am ?? 0:00.36 /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -F 214 27490 27481 0 12:07am ?? 0:00.58 dovecot/anvil [4 connections] 0 28237 27481 0 12:07am ?? 0:01.69 dovecot/log 0 28239 27481 0 12:07am ?? 0:00.20 dovecot/config 227 28309 27481 0 12:08am ?? 0:42.33 dovecot/imap-login [28 connections (28 TLS)] 214 28311 27481 0 12:08am ?? 0:08.65 dovecot/auth [0 wait, 0 passdb, 0 userdb] 214 40746 27481 0 6:54am ?? 0:06.33 dovecot/imap [3 connections] 214 40747 27481 0 6:54am ?? 0:01.89 dovecot/imap [reply 192.168.5.134 IDLE] 214 45378 27481 0 8:36am ?? 0:01.73 dovecot/imap [3 connections] 214 46125 27481 0 9:03am ?? 0:00.75 dovecot/imap [2 connections] 214 46127 27481 0 9:03am ?? 0:01.84 dovecot/imap [3 connections] 214 47385 27481 0 9:35am ?? 0:01.29 dovecot/imap [3 connections] 214 56274 27481 0 1:15pm ?? 0:00.25 dovecot/imap [3 connections] 214 56275 27481 0 1:15pm ?? 0:00.36 dovecot/imap [5 connections] 214 56276 27481 0 1:15pm ?? 0:00.45 dovecot/imap [4 connections] 214 56367 27481 0 1:18pm ?? 0:00.10 dovecot/imap [liam 192.168.5.130 IDLE] 0 62854 9637 0 4:37pm ttys000 0:00.00 grep dovecot bash-3.2# /Applications/Server.app/Contents/ServerRoot/usr/sbin/dovecotd -n # 2.0.19apple1: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 12.4.0 x86_64 hfs aps_topic = com.apple.mail.XServer.68f48c72-274a-48f9-beed-71096afe3fa6 auth_mechanisms = cram-md5 x-plain-submit plain login apop gssapi digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n default_internal_user = _dovecot default_login_user = _dovenull disable_plaintext_auth = no first_valid_gid = 6 first_valid_uid = 6 mail_access_groups = mail mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file pass = yes submit = yes } passdb { driver = od } plugin { fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/roundcube.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u } postmaster_address = postmaster(a)server.risk.gg protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { extra_groups = _keytabusers idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } ssl = required ssl_ca = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.chain.pem ssl_cert = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.key.pem ssl_key_path = /etc/certificates/server.risk.gg.B61EB46F8A86687EAD8CF9B3C24CBF09CF45E178.key.pem syslog_facility = local6 userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib fts fts_sk push_notify sieve } protocol lda { mail_plugins = quota zlib fts fts_sk push_notify sieve } protocol imap { imap_id_log = * imap_id_send = "name" * "version" * mail_max_userip_connections = 50 mail_plugins = quota zlib fts fts_sk imap_quota imap_zlib imap_fts urlauth } protocol pop3 { mail_max_userip_connections = 6 } bash-3.2#

1 0

[Dovecot] login_log_format_elements does not appear to be changing log format 2.2.5
by Chris 26 Sep '13

26 Sep '13

Hi, login_log_format_elements does not seem to change the login logs. I have it set to the below setting and the word "home" does not even appear. Is there something I have to do to for this? Also I use ldap for authentication. [user@MB1 logs]$ doveconf -n | grep -i log debug_log_path = /home/user/apps/logs/dovecot_debug.log info_log_path = /home/user/apps/logs/dovecot_info.log log_path = /home/user/apps/logs/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c home=%h service imap-login { chroot = login executable = imap-login type = login user = $default_login_user [user@MB1 dovecot]$ tail -1 ~/apps/logs/dovecot_info.log Sep 04 18:19:55 imap-login: Info: Login: user=<test2(a)domain.local>, method=PLAIN, rip=10.100.5.6, lip=10.100.5.103, mpid=6571 [user@MB1 dovecot]$ dovecot --version 2.2.5

3 2

[Dovecot] Lot of connections IMAP
by Davide 26 Sep '13

26 Sep '13

Hi to all, i have dovecot 2.2.5 when i digit doveadm who i see a lot of connections IMAP for single user liker the example below xxxxx.yyyyyy(a)mail.cgilfe.it 9 imap (20572 20614 19120 20653 19136 20655 19138 20661 20471) (192.168.x.xxx) Why so many IMAP? -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

3 3

[Dovecot] Grant access for Unix-User _and_ virtual Users
by marco 26 Sep '13

26 Sep '13

Hi group, I have installed a postfix as an MTA and configured two "main" domains as well as two virtual mailbox domains. Normal unix users have their maildir in their homes (/home/%u) and the virtual mailboxes are located in /var/mail/vhosts. It works well, I only have a problem configuring dovecot. I wondered if it's possible to configure it in a way that both, unix users and virtual users, can access their mailboxes. I found some tutorials but they either give access to the "normal" unix users or to virtual users who are defined in a text file. Here some system infos: - Ubuntu 12.04.2 LTS (Kernel Version: 3.2.0-23) - Dovecot Version: 2.0.19 Hope you understand my problem. Cheers, Marco PS: It's the very first time I use a mailing list, so I hope you can forgive me possible beginner's mistakes.

2 2

[Dovecot] Dsync: Mailbox changes caused a desync.
by Aleksey Tsvetkov 26 Sep '13

26 Sep '13

Hi! Here such synchronization error: dovecot: dsync-local(alex(a)aaa.com): Warning: Mailbox changes caused a desync. You may want to run dsync again. dovecot: dsync-remote(alex(a)aaa.com): Warning: /var/mail/virtual/aaa.com/alex/.INBOX.System/dovecot-uidlist: Duplicate file entry at line 2298: 1380157263.M585262P25253.mail1.aaa.com,S=2476,W=2553 (uid 3645 -> 3662) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3650, file=1380157264.M261919P17392.mail2.aaa.com,S=2476,W=2553) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3651, file=1380157263.M586977P17315.mail2.aaa.com,S=3119,W=3175) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3652, file=1380157264.M261920P17392.mail2.aaa.com,S=2476,W=2553) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3653, file=1380157264.M261921P17392.mail2.aaa.com,S=3119,W=3175) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3654, file=1380157263.M819006P25260.mail2.aaa.com,S=2476,W=2553:2,) dovecot: dsync-remote(alex(a)aaa.com): Warning: Maildir /var/mail/virtual/aaa.com/alex/.INBOX.System: Expunged message reappeared, giving a new UID (old uid=3655, file=1380157264.M261922P17392.mail2.aaa.com,S=3119,W=3175:2,) As a result, synchronization was, but there were duplicate emails. After this synchronization is working fine, no more errors. dovecot --version 2.2.5 dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword pam passwd passwd-file sql Userdb: checkpassword nss passwd prefetch passwd-file sql Thanks! -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

1 0

[Dovecot] Passing info from mail process to mail_filter plugin script?
by Charles Cazabon 26 Sep '13

26 Sep '13

Hi, all, The mail_filter plugin allows you to pass messages through an external script/command on the way into and out of the Maildir/mbox/etc mail store. With the recent/new version of the plugin, this seems to work correctly. However, my mail-filter script (for filtering messages on the way from the mail store through the IMAP process to a remote client) needs some extra info from the IMAP mail process. I'm having difficulty figuring out how this can be accomplished. Ideally, I'd like to pass another open file descriptor (opened in the IMAP process) to the script, but I'm not sure if this is possible. Opening the file in the IMAP main.c fails, presumably due to file descriptor limits, but I don't see where restrict_fd_limit() is called there. My second choice for passing this info would be in an environment variable or argument to the mail filter script. Adding env_put() to the IMAP code doesn't seem to get the value passed to the script, presumably because the environment is getting cleared, but again I'm not certain where the list of env vars to keep is set here. There may be another way to accomplish this that I'm not thinking of? Any assistance would be appreciated. Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------

2 5

[Dovecot] "service_count = 0" for "service dict" (High-performance mode)
by Alessio Cecchi 25 Sep '13

25 Sep '13

Hi, I'm running dovecot 2.1.17 with "Login processes" in "High-performance mode" as explained here: service imap-login { service_count = 1 http://wiki2.dovecot.org/LoginProcess but i thinks I should also set "service dict" in high-performance mode since sometimes the number of dict processes reach the limit of 100 (from default_process_limit=100) and I find these errors in the logs: Sep 25 15:32:24 imap(info@xxxx), session=<z9N2SDXnIQCy71XC>: Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Connection reset by peer Sep 25 15:32:24 imap(service@xxxx), session=<xKxSSDXnwABb/1Ql>: Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Connection reset by peer or Sep 25 15:33:48 imap(info@xxxx), session=<M8FITTXnwABb/CM9>: Warning: read(/usr/local/dovecot-2.1/var/run/dovecot/dict): dict lookup took 5 seconds Sep 25 15:33:48 imap(editoria@xxxx), session=<3LpHZTTnDgBdJwmm>: Warning: read(/usr/local/dovecot-2.1/var/run/dovecot/dict): dict lookup took 5 seconds Do you think will be better set: service dict { service_count = 0 or default_process_limit=200 (instead of 100) Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 1

[Dovecot] proxy: get rid of redundant log-informations
by Reindl Harald 25 Sep '13

25 Sep '13

Hi login_log_format_elements = user=<%u> method=%m rip=%r %k is it possible to get rid of the "proxy(test(a)testserver.rhsoft.net): started proxying to 127.0.0.1:143: " part because on a proxy-only server i know that and it is explicitly not listed in "login_log_format_elements" as well as for the "TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA" it would be enough "TLSv1 DHE-RSA-CAMELLIA256-SHA" the reason is simple: * all needed informations are present * smaller logfiles * nicer "tail -f" on the syslog without breaks _____________________________________________ Aug 14 16:31:46 testserver dovecot: imap-login: proxy(test(a)testserver.rhsoft.net): started proxying to 127.0.0.1:143: user=<test(a)testserver.rhsoft.net>, method=CRAM-MD5, rip=91.118.73.99, TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)

2 9

[Dovecot] unable to lock for exclusive access: Resource temporarily unavailable
by Nikos Papadopoulos 25 Sep '13

25 Sep '13

Dears, We have a mail server (RHEL 6.0, Postfix and Dovecot 1.0.7). The output of dovecot -n is the following: # 1.0.7: /etc/dovecot.conf protocols: pop3 login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/mail/%u mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_client_workarounds: outlook-no-nuls oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd During the last days we face the following problem: There is great delay in the delivery of the emails. Some seem to not be delivered at all. Issuing the mailq command we get the following message for almost all the email accounts: (cannot update mailbox /var/mail/xyz for user xyz. unable to lock for exclusive access: Resource temporarily unavailable) Please send to me any suggestions, because I cannot resolve it and I receive a lot of pressure. Best Regards, Nikos

4 3

[Dovecot] (no subject)
by Greg Ryman 25 Sep '13

25 Sep '13

Hello, I've been out of the sysadmin game for some time and I've recently setup a mail server. Everything is working except for the quota, which I believe is likely an error in how I'm using my SQL queries. Any guidance, pointers, or advice would be greatly appreciated. root@mail:/etc/dovecot/conf.d# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab079.6 x86_64 Ubuntu 12.04.3 LTS reiserfs auth_mechanisms = plain login dict { sqldomainquota = mysql:/etc/dovecot/dovecot-sql-domain.conf sqluserquota = mysql:/etc/dovecot/dovecot-dict-sql-user.conf } first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = maildir:/var/vmail/%d/%n mail_plugins = quota mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = YES antispam_backend = dspam antispam_dspam_args = --user;%u;--deliver=;--source=error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam;Junk antispam_trash = trash;Trash autocreate = Trash autocreate2 = Junk autocreate3 = Sent autocreate4 = Drafts autocreate5 = Archive quota = dict:User Quota::proxy::sqluserquota quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_after = /etc/sieve/conf.d/after sieve_before = /etc/sieve/conf.d/before sieve_dir = ~/sieve } postmaster_address = admin(a)gryman.com protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " sieve autocreate quota" } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota antispam autocreate quota imap_quota } root@mail:/etc/dovecot# grep -v '^ *$#.*$\?$' dovecot-sql.conf driver = mysql connect = host=localhost dbname=mail user=mail password=mailpassword default_pass_scheme = MD5-CRYPT password_query = \ SELECT username as user, password, '/var/vmail/%d/%n' as userdb_home, \ 'maildir:/var/vmail/%d/%n' as userdb_mail, 150 as userdb_uid, 8 as userdb_gid \ FROM mailbox WHERE username = '%u' AND active = '1' user_query = \ SELECT '/var/vmail/%d/%n' as home, 'maildir:/var/vmail/%d/%n' as mail, \ 150 AS uid, 8 AS gid, concat('dirsize:storage=', quota) AS quota \ FROM mailbox WHERE username = '%u' AND active = '1' root@mail:/etc/dovecot# tail -n 8 /etc/postfix/master.cf # DSPAM dspam unix - n n - 10 pipe flags=Ru user=dspam argv=/usr/bin/dspam --deliver=innocent,spam --user $recipient -i -f $sender -- $recipient # Integration with Dovecot - hand mail over to it for local delivery, and # run the process under the vmail user and mail group. dovecot unix - n n - - pipe flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/dovecot-lda -d $(recipient) -- Greg Ryman

6 9

[Dovecot] 2048-bit Diffie-Hellman parameters
by Marios Titas 25 Sep '13

25 Sep '13

Currently, dovecot generates two primes for Diffie-Hellman key exchanges: a 512-bit one and a 1024-bit one. In light of recent events, I think it would be wise to add support for 2048-bit primes as well, or even better, add a configuration option that lets the user select a file (or files) containing the DH parameters In recent years, there has been increased interest in DH especially in its ephemeral version (DHE) because it provides perfect forward secrecy. In that context, the use of 1024-bit parameters might not seem such a terrible idea: if someone cracks the ephemeral key then they will only gain access to the data exchanged during that particular session. Therefore, it might not be worth the effort to crack such a key. But this is certainly not the case for IMAPS: it is quite likely that the session data will include the user's credentials.

9 11

[Dovecot] Delete to Archive?
by James E. Pace 25 Sep '13

25 Sep '13

Hi, I recently switched from being a Gmail user to running Dovecot [2.1.10] on my server. Thank you for an easy to use piece of software that solves problems! I am trying (unsuccessfully) to replicate something from GMail. When I delete a message on my iPhone (or other client), I would like to have it moved to an "All Mail" or Archive folder, instead of actually deleting it. Is this possible? Thanks, James

5 7

[Dovecot] Apple IOS 7 Mail APP uses multi body searches by default
by Urban Loesch 25 Sep '13

25 Sep '13

Hi, today we found this blogpost: http://blog.fastmail.fm/2013/09/17/ios-7-mail-app-uses-multi-folder-body-se… Have you any idea if this could impact performance of dovecot using mdbox format with 10MB per file size and zlib enabled? Thanks and regards Urban Loesch

2 1

[Dovecot] still having dsync issues after upgrading to latest
by Matthew Kaufman 25 Sep '13

25 Sep '13

Trying to migrate a bunch of users with mbox format to maildir format. dsync creates some directories, but otherwise does nothing. (Complained about the lack of "/" as separator until I added that to config, now is silent when running dsync except with the -D flag) I have tried dumping all the dovecot that came with my OS and built the latest sources, hoping I'd at least get a little better debug information out... but no luck. Lots of hopefully useful output below. What am I doing wrong? Matthew Kaufman # dovecot -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login first_valid_uid = 4999 mail_gid = 5000 mail_location = maildir:/var/mail/%d/%n mail_privileged_group = mail mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = YES antispam_backend = dspam antispam_dspam_args = --user;%u;--deliver=;--source=error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam;Junk antispam_trash = trash;Trash sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)eeph.com protocols = imap lmtp service auth-worker { user = mail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = mail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } user = mail } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/ssl/local/....crt ssl_key = </etc/ssl/local/....key userdb { args = uid=5000 gid=5000 home=/var/mail/%d/%n driver = static } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = " antispam" } # rm -r /var/mail/matthew.at # /usr/local/bin/dsync -D -u matthew(a)matthew.at mirror mbox:./Mail:INBOX=./matthew doveadm(root): Debug: Loading modules from directory: /usr/local/lib/dovecot/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/local/lib/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(matthew(a)matthew.at): Debug: Effective uid=5000, gid=5000, home=/var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: Home dir not found: /var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/matthew.at/matthew doveadm(matthew(a)matthew.at): Debug: maildir++: root=/var/mail/matthew.at/matthew, index=, indexpvt=, control=, inbox=/var/mail/matthew.at/matthew, alt= doveadm(matthew(a)matthew.at): Debug: Namespace : /var/mail/matthew.at/matthew doesn't exist yet, using default permissions doveadm(matthew(a)matthew.at): Debug: Namespace : Using permissions from /var/mail/matthew.at/matthew: mode=0700 gid=default dsync(matthew(a)matthew.at): Debug: Effective uid=5000, gid=5000, home=/var/mail/matthew.at/matthew dsync(matthew(a)matthew.at): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:./Mail:INBOX=./matthew dsync(matthew(a)matthew.at): Debug: fs: root=./Mail, index=, indexpvt=, control=, inbox=./matthew, alt= dsync(matthew(a)matthew.at): Debug: Namespace : ./Mail doesn't exist yet, using default permissions dsync(matthew(a)matthew.at): Debug: Namespace : Using permissions from ./Mail: mode=0700 gid=default dsync(matthew(a)matthew.at): Debug: brain M: in state=master_recv_handshake dsync(matthew(a)matthew.at): Debug: brain M: out state=send_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain S: out state=send_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=send_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=send_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=send_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain M: out state=recv_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=send_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain S: out state=recv_mailbox_tree changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=recv_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain M: out state=recv_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=recv_mailbox_tree dsync(matthew(a)matthew.at): Debug: brain S: out state=recv_mailbox_tree_deletes changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=recv_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain M: out state=master_send_mailbox changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=recv_mailbox_tree_deletes dsync(matthew(a)matthew.at): Debug: brain S: out state=slave_recv_mailbox changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=master_send_mailbox dsync(matthew(a)matthew.at): Debug: brain M: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=slave_recv_mailbox dsync(matthew(a)matthew.at): Debug: brain S: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain M: in state=done dsync(matthew(a)matthew.at): Debug: brain M: out state=done changed=1 dsync(matthew(a)matthew.at): Debug: brain S: in state=done dsync(matthew(a)matthew.at): Debug: brain S: out state=done changed=1 # # ls -l /var/mail/matthew.at total 4 drwx--S--- 3 vmail vmail 4096 Sep 24 17:50 matthew # ls -l /var/mail/matthew.at/matthew total 4 drwx--S--- 2 vmail vmail 4096 Sep 24 17:50 Mail # ls -l /var/mail/matthew.at/matthew/Mail total 0

2 2

[Dovecot] imaptest-20130617 seems to be reporting spurious header changes
by Mark Weaver 25 Sep '13

25 Sep '13

I'm trying to use this to test an IMAP server I'm developing (I picked the nightly up from the link on the wiki page at http://www.imapwiki.org/ImapTest/Installation) With one client using the mailbox dovecot-crlf (http://www.dovecot.org/tmp/dovecot-crlf) I get messages like: Error: test(a)npsl.co.uk[67]: 1035253882.5041.34.camel@hurina: Header From changed 'Timo Sirainen <tss(a)iki.fi> Timo Sirainen <tss(a)iki.fi' (len 52) -> 'Timo Sirainen <tss(a)iki.fi>' (len 26): * 1 FETCH (UID 2093 FLAGS () BODY ("text" "plain" ("charset" "us-ascii") NIL NIL "7bit" 913 0) BODY[HEADER.FIELDS (From From Delivered-To) ] "From: Timo Sirainen <tss(a)iki.fi> From: Timo Sirainen <tss(a)iki.fi> Delivered-To: dovecot(a)procontrol.fi " ENVELOPE ("22 Oct 2002 05:31:22 +0300" "[dovecot] Re: Architectural questions" (("Timo Sirainen" NIL "tss" "iki.fi")) (("" NIL "dovecot-bounce" "procontrol.fi")) (("Timo Sirainen" NIL "tss" "iki.fi")) (("" NIL "dovecot" "procontrol.fi")) NIL NIL "<1035249894.5044.28.camel@hurina>" "<1035253882.5041.34.camel@hurina>") BODY[HEADER.FIELDS (Cc Cc From) ] "From: Timo Sirainen <tss(a)iki.fi> ") (I added the dump of the string length by modifying the code). As I am reading it the test program has got the wrong string rather than the server -- the From header in the mbox file is From: Timo Sirainen <tss(a)iki.fi> which is 26 characters long, not 52, and includes the closing angle bracket, and the code that prints the header out is in src/mailbox-state.c, line 377: client_state_error(client, "%s: Header %s changed '%.*s' (len %d) -> '%.*\ s' (len %d)", msg->message_id, fetch_headers[i].name, (int)orig_headers[j].value_len, (const char *)orig_headers[j].value, (int)orig_headers[j].value_len, (int)fetch_headers[i].value_len, (const char *)fetch_headers[i].value, (int)fetch_headers[i].value_len); Have I read this upside down or is there an issue with the tests? If it is an issue with the tests, any pointers as to where to start looking for the issue would be helpful. Thanks, Mark

2 1

Re: [Dovecot] Problem getting a dovecot proxy to connect to another dovecot machine via STARTTLS
by Arnoud van Heuvelen 24 Sep '13

24 Sep '13

I've solved the issue by setting ssl to 'any-cert' and starttls to NULL. This does a proper SSL request to the node. I still don't understand why Dovecot does a non-SSL request on an SSL port whenever I enable starttls, but I'm happy using normal SSL. Regards,

1 0

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 24 Sep '13

24 Sep '13

> If doveadm says it's invalid UTF-8, it's invalid UTF-8. I guess your > terminal isn't actually using UTF-8 then, but something else. ("locale" > output should say something about UTF-8.) I guess doveadm could also > automatically translate parameters to UTF-8, but that's a bit annoying > to implement. You were absolutely right. After thorough testing I could make up the problem to the SSH-Client PuTTY I was using on a Windows machine while testing. The default "remote character setting" is "ISO-8859-1:1998 (Latin-1, West Europe)", when re-setting to "UTF-8", opening a new shell and testing the "doveadm mailbox rename ..." with german umlauts just works fine then. (Just for the sake of completeness, the "locale" settings were set to (LANG=de_DE.utf-8) globally in /etc/sysconfig/i18n per default.) > The problem here is that * is expanded by your shell, not doveadm. > And it expands into Tr&-AOQ-sh as it's in the filesystem, but that's > only the mUTF-7 encoding of it. The UTF-8 version of the name is > Tr&AOQ-sh. So doveadm only sees that you attempted to resync a > nonexistent mailbox. Using '*' with quotes would work, since doveadm > would do the expansion then. Thanks for pointing that * / '*' issue out. I now unterstand that the "doevadm mailbox rename" converts the input to UTF _before_ applying it in the filesystem. Now it makes sense that doveadm mailbox rename -u user 'Trash' 'Tr&AOQ-sh' must be expanded to Tr&-AOQ-sh. The "-" character directly after the "&"in Tr&-AOQ-sh comes from a special mUTF-Specification (as stated in RFC 3501, section 5.1.3): "In modified UTF-7, printable US-ASCII characters, except for "&", represent themselves; that is, characters with octet values 0x20-0x25 and 0x27-0x7e. The character "&" (0x26) is represented by the two-octet sequence "&-"." So e.g. if I wanted a german umlaut to be encoded in the filesystem, I must enter it directly into dovedm instead of the UTF encoded value. One small point left... > The UTF-8 version of the name is Tr&AOQ-sh Just for understanding - "Tr&AOQ-sh" is IMHO UTF-7, not UTF-8. Accordingly to what stated before, "Tr&-AOQ-sh" and "Tr&AOQ-sh" are encoded both the same (UTF-7), the first seen in clients as "Tr&AOQ-sh" and the second as "TrÃ¤sh". Thanks for all your help! Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] Linux SO_REUSEPORT
by Timo Sirainen 24 Sep '13

24 Sep '13

I just read about Linux v3.9's SO_REUSEPORT feature and decided to implement it for Dovecot. Would be interesting to know how it works for people :) It's going to be in v2.2.6, which I'm planning on releasing tomorrow. Note especially the warning about the bug: http://hg.dovecot.org/dovecot-2.2/rev/a991a0547daa So the idea is that you'd do something like: service imap-login { inet_listener imap { reuse_port = yes } process_min_avail = 4 # number of CPU cores } And the load should be distributed more evenly to the processes.

4 4

[Dovecot] Fwd: lmtp
by Lampa 24 Sep '13

24 Sep '13

Hello, using dovecot with postfix with mysql. Some domains have alias. Local delivery is realized over lmtp. When lmtp delivery to aliased domains, it takes bad mail_location - it takes aliased instead real domain, so lmtp is creating domain and user directory. Lmtp doesn't make sql lookup. I need lmtp delivery to real domain and i don't want to create symlinks. mail_location = maildir:/home/mail/%d/%n/Maildir real domain: domain1.com aliased domain: domain2.com rcpt: user(a)domain2.com lmtp deliver message to /home/mail/domain2.com/user/Maildir instead /home/mail/domain1.com/user/Maildir -- Lampa

3 9

[Dovecot] Permission error
by Koenraad Lelong 24 Sep '13

24 Sep '13

Hi, I'm migrating an existing dovecot (1. series) to new hardware. The new dovecot is a 2. series. I copied the old config and did a doveconf -n -c /etc/dovecot/dovecot.conf > dovecot-2.conf Then I moved the dovecot-2.conf to dovecot.conf and restarted dovecot. When Postfix tries to deliver a message I get this error : 2013-09-16 11:00:10 auth: Fatal: net_connect_unix(auth-worker) in directory /run/dovecot failed: Permission denied (euid=65534(nobody) egid=65534(nogroup) missing +r perm: /run/dovecot/auth-worker, dir owned by 0:0 mode=0755) 2013-09-16 11:00:10 master: Error: service(auth): command startup failed, throttling I tried different things with /run/dovecot/auth-worker, but the error remains. I tried to chmod 777 the socket, I chown-ed to dovecot:dovecot, vmail:vmail. What am I missing ? AFAIK the sql-tables are OK. Thanks. doveconf -n is this : # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-39-generic x86_64 Ubuntu 12.04.3 LTS auth_debug = yes auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_uid = 499 info_log_path = /var/log/dovecot.debug last_valid_uid = 499 log_path = /var/log/dovecot log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/var/vmail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } user = nobody } service imap-login { executable = /usr/lib/dovecot/imap-login inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } service imap { executable = /usr/lib/dovecot/imap } service pop3-login { executable = /usr/lib/dovecot/pop3-login inet_listener pop3 { address = * port = 110 } } service pop3 { executable = /usr/lib/dovecot/pop3 } ssl_ca = </etc/postfix/certificate/cacert.org.pem ssl_cert = </etc/postfix/certificate/mailbox.pem ssl_key = </etc/postfix/certificate/mailboxkey.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_ssl = yes protocol imap { imap_max_line_length = 64 k } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-err.log mail_plugins = sieve postmaster_address = some-one(a)ace-electronics.be sendmail_path = /usr/lib/sendmail }

2 4

[Dovecot] doveadm mailbox create error codes
by Micah Anderson 23 Sep '13

23 Sep '13

Hello, I'm trying to find out what the different 'doveadm mailbox create' error codes are. I've been looking through the source, but I can't seem to find them. I did determine that '65' happens when "Error: Can't create mailbox x: Mailbox already exists", but I've also received error 67, and the more mysterious error code 16640. Thanks for any pointers! micah

2 1

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 23 Sep '13

23 Sep '13

Hi there Timo, first of all thank you for taking your time for support! > Forget about mUTF-7 with Dovecot. It's an IMAP-protocol relic, and > Dovecot is trying to get rid of it in as many places as possible. > Although by default the filesystem users mUTF-7, but that can also > be changed with a setting. Thanks for clarifying this. > I suspect your shell is breaking the 8bit chars into invalid UTF-8. I > just tried and it works fine with me. Sorry, we got confusion here... apparently my (lousy) freemail provider which I use to post on this mailinglist doesn't send some special characters etc. unaltered exactly as I typed - so I made a console screenshot of the doveadm rename problem to make things clear. Please have a look here, it will reveal the doveadm rename problem (and that my shell is working fine): http://i.imgur.com/08wKji4.png > > To get things worse, when renaming the mailfolder in Thunderbird to > > "geschÃÂ¤ftliches" it gets correctly written in the filesystem as > > "gesch&AOQ-ftliches"- but afterwards it's NOT found anymore in the > > dovecot index, e.g. when trying doveadm force-resync -u user it is > > not listed anymore (untilback-renaming in fs to the name it was > > indexed before). > Folders aren't indexed by default (mailbox_list_index=no) and > force-resync doesn't affect them. Are you saying > "doveadm mailbox list -u user" doesn't show some folder? I'm not > aware of any bugs related to this. No, the "doveadm mailbox list -u user" works just fine. BUT - I'm still wondering about the resync issue - As I understand the "doveadm force-resync -u user *" command rebuilds the index for the MAILS within the mailfolders? If so, how can the resync be done if the mailfolder itself is not found by doveadm anymore? > I'd need to get some more specifics. Show show exists in filesystems > and what commands don't produce expected results (and what they > produce instead). For clearing up my point, I made another console screenshot with red markings to point out the problem (bug). Please have another look here: http://i.imgur.com/icPfys9.png Thanks for your support, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] can't dovecot tls/ssl to openldap
by 牧原 23 Sep '13

23 Sep '13

Hi, I want to dovecot connect to openldap with ssl/tls, and got error. When without tls/ssl, it works ok. from /var/log/maillog got: Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:05 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<muyuan>, method=PLAIN, rip=192.168.100.99, lip=10.10.120.20, TLS: Disconnected, session=<wSvD1RPnWwDAqGRj> Sep 24 05:38:11 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Can't contact LDAP server Sep 24 05:38:13 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<muyuan>, method=PLAIN, rip=192.168.100.99, lip=10.10.120.20, TLS: Disconnected, session=<2T761RPnXADAqGRj> But when I use ldapsearch, it seems also ok I use this from dovecot host ldapsearch -D "cn=dovecot,ou=bindusers,dc=smuy,dc=net" -W -H ldap://ldap.sv. hm -b "ou=accounts,dc=smuy,dc=net" �CZZ it works ok So I have no idea where to check? Or how can I got more detailed log from dovecot for that connection Sep 24 05:38:03 mail dovecot: auth: Error: LDAP: ldap_start_tls_s() failed: Connect error Because I use ldapsearch both tls/ssl works well, why dovecot connect error? What��s the detail happen in this connection? Here is my dovecot-ldap.conf.ext: # This file is commonly accessed via passdb {} or userdb {} section in # conf.d/auth-ldap.conf.ext # Space separated list of LDAP hosts to use. host:port is allowed too. #hosts = ldap.sv.hm #uris = ldaps://ldap.sv.hm:636/ uris = ldap://ldap.sv.hm:389/ dn = cn=dovecot,ou=bindusers,dc=smuy,dc=net dnpass = 1qaz2wsx #sasl_bind = no #sasl_mech = #sasl_realm = #sasl_authz_id = # Use TLS to connect to the LDAP server. tls = yes #tls = no tls_ca_cert_file = /etc/ssl/certs/ca/signing-ca.crt tls_ca_cert_dir = /etc/ssl/certs/ca #tls_cipher_suite = # TLS cert/key is used only if LDAP server requires a client certificate. #tls_cert_file = /etc/ssl/certs/mail.crt #tls_key_file = /etc/ssl/private/mail.key # Valid values: never, hard, demand, allow, try #tls_require_cert = never See some suggestions! Great thanks! muyuan

1 0

[Dovecot] dovecot 2.2.5 with plugin listescape and shared mailbox with dot in INBOX
by romain 23 Sep '13

23 Sep '13

Hi list, I have a problem with dovecot 2.2.5 and nightly (latest 20130923) with : * plugin listescape enabled * shared mailbox * and mail_shared_explicit_inbox = no Problem is I can't get list of mails in INBOX of my shared users. For example : ---------------------------------------------------------- 2013-09-23 22:20:06 imap-login: Info: Login: user=<roms>, method=PLAIN, rip=192.168.0.203, lip=192.168.20.200, mpid=6127, TLS, session=<R8D9vhLn3ADAqADL> 2013-09-23 22:20:06 imap: Debug: Loading modules from directory: /usr/local/lib/dovecot 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib01_acl_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib02_imap_acl_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_autocreate_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_listescape_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib20_zlib_plugin.so 2013-09-23 22:20:06 imap: Debug: Module loaded: /usr/local/lib/dovecot/lib30_imap_zlib_plugin.so 2013-09-23 22:20:06 imap: Debug: Added userdb setting: plugin/acl_groups=Exchange Services,Exchange Domain Servers,Propriétaires créateurs de la stratégie de groupe,Administrateurs du schéma,Admins du domaine,Administrateurs de l'entreprise,Administrators,Users,roms 2013-09-23 22:20:06 imap(roms): Warning: autocreate plugin is deprecated, use mailbox { auto } setting instead 2013-09-23 22:20:06 imap(roms): Debug: Effective uid=471, gid=471, home=/home/dovecot/dovecot//mail/roms 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/dovecot/dovecot//mail/roms/Maildir 2013-09-23 22:20:06 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/roms/Maildir, index=, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/roms/Maildir, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 1 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=shared, prefix=Other Users/%u/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Other Users/%u 2013-09-23 22:20:06 imap(roms): Debug: shared: root=/usr/local/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:06 imap(roms): Debug: Namespace : type=public, prefix=Shared Folders/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/home/dovecot/dovecot//public:INDEX=~//public 2013-09-23 22:20:06 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//public, index=/home/dovecot/dovecot//mail/roms//public, indexpvt=, control=, inbox=, alt= 2013-09-23 22:20:06 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:06 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:06 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:06 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: auth input: l.dupont system_groups_user=l.dupont uid=471 gid=471 home=/home/dovecot/dovecot//mail/l.dupont 2013-09-23 22:20:07 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/l.dupont/Maildir, index=/home/dovecot/dovecot//mail/l.dupont/Other Users/l.dupont, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/l.dupont/Maildir, alt= 2013-09-23 22:20:07 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:07 imap(roms): Debug: acl: acl username = l.dupont 2013-09-23 22:20:07 imap(roms): Debug: acl: owner = 1 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: maildir++: root=/home/dovecot/dovecot//mail/l.dupont/Maildir, index=/home/dovecot/dovecot//mail/roms/Other Users/l.dupont, indexpvt=, control=, inbox=/home/dovecot/dovecot//mail/l.dupont/Maildir, alt= 2013-09-23 22:20:07 imap(roms): Debug: acl: initializing backend with data: vfile 2013-09-23 22:20:07 imap(roms): Debug: acl: acl username = roms 2013-09-23 22:20:07 imap(roms): Debug: acl: owner = 0 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: Global ACL directory: (none) 2013-09-23 22:20:07 imap(roms): Debug: acl vfile: file /home/dovecot/dovecot//mail/l.dupont/Maildir/.Other Users.l\2edupont/dovecot-acl not found ---------------------------------------------------------- Last line see that the Shared Mailbox "Other Users/l.dupont" is converted to "Other Users.l\2edupont" Note, that this does not append when I trie to access a subfolder like "Other Users/l.dupont/Sent" If I set "mail_shared_explicit_inbox = yes" with plugin listescape, I can access "Other Users/l.dupont/INBOX" If I remove "listescape" from my plugin directive, I can access the INBOX of "Other Users/l.dupont" Thanks for any help :) Regards, Romain

1 0

[Dovecot] Vacation message and DMARC validation
by Gerson Moraes 23 Sep '13

23 Sep '13

Greetings, I have found an issue in the interaction between sieve vacation messages and the SPF, DKIM and DMARC email validation systems. For example, let's say we have a message coming from a(a)a.com to b(a)b.com at a server imap.mydomain.com. The account b(a)b.com has a vacation rule in sieve, and that generates an autoresponse to a(a)a.com. Our problem begins with the definition of section-5.1 in RFC5230 <https://tools.ietf.org/html/rfc5230#section-5.1>. It says that the envelope-from in vacation messages should be set to <>. This is the behavior currently implemented in Dovecot. We have recently added DMARC's authentication to our e-mail servers. DMARC needs one of the two authentication to pass, either SPF or DKIM. SPF works, but not the way DMARC needs it to. DMARC needs a valid SPF record that also matches the "From:" header. In this message, there are no envelope-from, so there are no domain to validate. This is the reason we use SRS to rewrite envelope-from (to do that we use the server address). The last option is to use DKIM authentication. We have clustered SMTP servers. So, in order to make a DKIM signature, the vacation message needs to be sent to the right server. That is, the server where the key to account b(a)b.com is available. To do that, we are implementing a modification to Dovecot source allowing the use of the envelope-from. The modified envelope-from will be used with the Postfix option "sender_dependent_relayhost_maps" in order to choose the right cluster. This does not break RFC5230, because the use of null sender is only a recommendation. I would like to know if a patch to the main project would be appreciated. Could you also please confirm if there are any future plans involving this feature, like an optional configuration for custom envelope-from? Thanks in advance, Gerson Moraes Digirati

3 5

[Dovecot] default client_limit
by Micah Anderson 23 Sep '13

23 Sep '13

I recently upgraded my dovecot from 2.1 to 2.2, and when I started, I received this message: doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (1024) Searching through my configs, I do not have 1024 set anywhere. In order to stop this I set client_limit=1024 in my auth{} block... this seemed odd that the defaults disagreed with each other. However, it made me realize that my system could probably handle more, if it were properly tuned, and the different limit settings at their defaults are probably smaller than they could be for my server and the load it is under. So, I'm wondering how I can accurately set some of these values? The different possible things that can be set are: default_process_limit (for some reason I have this set to 256) default_client_limit (default) default_vsz_limit (I have this set to 512M) for the imap-login service, I have: service_count = 0 process_min_avail = 10 vsz_limit = 512M for service pop3-login, these are set: service_count = 0 process_min_avail = 10 vsz_limit = 512M for service imap, process_limit = 2048 service auth, I've just set the client_limit=1024 I've also got a ulimit -n set to 2048 and in my sysctl.conf, I have the following: fs.inotify.max_user_instances = 2048 because I was seeing this in the logs: Warning: Inotify instance limit for user 8 (UID mail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances What I am looking for is a few things: . is there a formula for setting a proper value for some of these? . will dovecot warn me when I've reached a limit, so I can adjust these? thanks for any suggestions or improvements, I'm pretty sure this system can handle a lot more than it is doing right now, I just am unclear on how to tune it up to do that. micah

1 0

[Dovecot] Expunged message reappeared, giving a new UID
by Simon Fraser 23 Sep '13

23 Sep '13

I am running dovecot 2.2.2 with tcp based replication, and experiencing some duplicated emails. `doveconf -n` output is below. I have narrowed it down to the following scenario: An email arrives, and is successfully replicated to both nodes. It is in INBOX/new/ at this point on both servers. Connect with a mail client, and delete the message - without delayed expunge. So, for example, mutt (press 'd' then '$' to sync the mailbox), or Evolution set to immediately delete. The following log entry appears on the server the client is connected to: Jul 26 10:40:55 intmail3a dovecot: imap(srf): Warning: /mail/spool/s/srf/mail/INBOX/dovecot-uidlist: Duplicate file entry at line 5: 1374831638.M830754P11591.intmail3a,S=1289,W=1321 (uid 733481 -> 733482) - retrying by re-reading from beginning Jul 26 10:40:55 intmail3a dovecot: imap(srf): Warning: Maildir /mail/spool/s/srf/mail/INBOX: Expunged message reappeared, giving a new UID (old uid=733481, file=1374831638.M830754P11591.intmail3a,S=1289,W=1321) The email reappears in the mailbox, although this time it is in INBOX/new on one node and INBOX/cur on the other. As best I can tell it's always in 'new' on the server the client was connected to and in 'cur' on the other. If any other mailbox operation occurs before the delete (Marking the message in question as 'read', receiving a new message into the mailbox in a different lmtp session, marking as read or deleting & expunging some other message) then this prevents the duplication from happening. What can I do to prevent this happening? Is there a synchronisation interval I can adjust, perhaps? Although the message does get synchronised initially. Thanks in advance, Simon. # 2.2.2: /mail/etc/dovecot/dovecot.conf # OS: Linux 3.5.0-23-generic x86_64 Ubuntu 12.04.2 LTS disable_plaintext_auth = no doveadm_password = secret first_valid_uid = 100 lda_mailbox_autocreate = yes mail_gid = dovecot mail_home = /mail/spool/%1n/%n mail_location = maildir:~/mail:INBOX=~/mail/INBOX mail_plugins = notify replication mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /mail/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_replica = tcps:intmail3b:12345 sieve_dir = ~/sieve } protocols = imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = dovecot } unix_listener replication-notify { mode = 0600 user = dovecot } } service config { unix_listener config { user = dovecot } } service doveadm { inet_listener { port = 12345 ssl = yes } user = dovecot } service replicator { process_min_avail = 1 } ssl_cert = </mail/etc/certs/mail-cert.pem ssl_client_ca_dir = /etc/ssl/certs ssl_key = </mail/etc/certs/mail-key.pem userdb { args = /mail/etc/dovecot/dovecot-ldap.userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = notify replication sieve } protocol lda { mail_plugins = notify replication sieve } protocol imap { mail_max_userip_connections = 30 } -- The Wellcome Trust Sanger Institute is operated by Genome Research Limited, a charity registered in England with number 1021457 and a company registered in England with number 2742969, whose registered office is 215 Euston Road, London, NW1 2BE.

8 30

[Dovecot] Dsync error: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default
by Aleksey Tsvetkov 23 Sep '13

23 Sep '13

Hi, Introduction: There are two domains, for example (aaa.com, bbb.com) In the aaa.com domain two users (bob(a)aaa.com, alex(a)aaa.com) In the bbb.com domain there are no users. In time full sync replication (replication_full_sync_interval) operations in logs appear errors: dovecot: dsync-local(bob(a)aaa.com): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default: Invalid value for default sieve attribute dovecot: dsync-remote(bob(a)aaa.com): Error: Mailbox INBOX: Failed to set attribute vendor/vendor.dovecot/pvt/sieve/default: Invalid value for default sieve attribute One more error: dovecot: auth-worker(46263): sql(bob(a)bbb.com): unknown user dovecot: auth-worker(46263): sql(bob(a)bbb.com): Unknown user dovecot: auth-worker(46263): sql(bob): unknown user dovecot: auth-worker(46263): sql(bob): Unknown user dovecot: auth-worker(46263): sql(alex(a)aaa.com): unknown user dovecot: auth-worker(46263): sql(alex(a)aaa.com): Unknown user dovecot: auth-worker(46263): sql(alex): unknown user dovecot: auth-worker(46263): sql(alex): Unknown user Command: doveadm user '*' bob(a)aaa.com alex(a)aaa.com dovecot --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL drivers: mysql Passdb: checkpassword pam passwd passwd-file sql Userdb: checkpassword nss passwd prefetch passwd-file sql dovecot --version 2.2.5 Somebody faced this problem? -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

4 4

[Dovecot] mdbox index directories: bug?
by Holecz Endre 22 Sep '13

22 Sep '13

Hi, I'm using mdbox now (Dovecot 2.2.4), with indexes on a separate disk. Works fine, but the directories for indexes are also present in the storage folder, and are empty. Userdb (sql) returns this: home /var/vmail/domains/somedomain/someuser mail mdbox:~/mdbox:INDEX=/mnt/spool/dovecot/index/somedomain/s/someuser And the created directory structure is: /var/vmail/domains/somedomain/someuser /mdbox /mailboxes /INBOX /dbox-Mails /storage /mnt/spool/dovecot/index/somedomain/s/someuser /mailboxes /INBOX /storage /var/vmail/domains/somedomain/someuser/mdbox/mailboxes/* is always empty. Am I doing something wrong, or is this by design? :) Regards, Endre

3 3

[Dovecot] doveadm sync only creates directories, don't sync messages?
by Matthew Kaufman 22 Sep '13

22 Sep '13

Running Dovecot 2.1.7. I'm trying to migrate from an environment with mbox files to a maildir configuration. I remove all vestiges of my maildir over in /var/mail I put my old mailboxes in ./Mail and my old inbox in ./matthew. I issue this command: doveadm sync -u matthew(a)matthew.at mbox:./Mail:INBOX=./matthew Initially it gave me errors about separator, so I set the separator in the inbox namespace to "/" explicitly. Now that I've done that, and re-run it, over in the right place /var/mail, it creates "matthew" and a subdirectory "Mail". That's it. Doesn't take long to do it, either. But it doesn't copy any messages at all. I must be doing something wrong... but what? Matthew Kaufman matthew(a)eeph.com

1 0

[Dovecot] pop3c migration?
by Gedalya 22 Sep '13

22 Sep '13

Hi, I'm running dsync migrations using imapc and the source IMAP server is just too slow. It has taken 8 hours to migrate a mailbox with 47,000 messages. It seems most of the mailboxes are never accessed with IMAP, so it would be just as good to migrate them via POP3 which should work faster in my case. Is this actually meant to work? doveadm -D -o pop3c_user=xxxxxx(a)example.com -o 'pop3c_password=*******' -o pop3c_host=120.121.122.123 backup -u yyyyy(a)example.com -R pop3c: gives: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_init (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(yyyyy(a)example.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy doveadm(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: maildir++: root=/stor/real/domains/example.com/yy/yyyyy/Maildir, index=, control=, inbox=/stor/real/domains/example.com/yy/yyyyy/Maildir, alt= dsync(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy dsync(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= Segmentation fault remembering something about that... : # mkdir /tmp/pop3c # chown vmail:vmail /tmp/pop3c/ # doveadm -D -o pop3c_user=xxxxxx(a)example.com -o 'pop3c_password=*******' -o pop3c_host=120.121.122.123 backup -u yyyyy(a)example.com -R pop3c:/tmp/pop3c doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_init (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(yyyyy(a)example.com): Debug: Added userdb setting: mail=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5120M doveadm(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy doveadm(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: doveadm(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= doveadm(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/stor/real/domains/example.com/yy/yyyyy/Maildir doveadm(yyyyy(a)example.com): Debug: maildir++: root=/stor/real/domains/example.com/yy/yyyyy/Maildir, index=, control=, inbox=/stor/real/domains/example.com/yy/yyyyy/Maildir, alt= dsync(yyyyy(a)example.com): Debug: Effective uid=1001, gid=1001, home=/stor/real/domains/example.com/yy/yyyyy dsync(yyyyy(a)example.com): Debug: Namespace : type=private, prefix=POP3-MIGRATION-NS/, sep=, inbox=no, hidden=yes, list=no, subscriptions=yes location=pop3c: dsync(yyyyy(a)example.com): Debug: fs: root=, index=, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=pop3c:/tmp/pop3c dsync(yyyyy(a)example.com): Debug: fs: root=/tmp/pop3c/., index=/tmp/pop3c, control=, inbox=, alt= dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /tmp/pop3c/.: mode=0755 gid=-1 dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /stor/real/domains/example.com/yy/yyyyy/Maildir: mode=0700 gid=-1 dsync(yyyyy(a)example.com): Debug: Namespace : /tmp/pop3c/./INBOX doesn't exist yet, using default permissions dsync(yyyyy(a)example.com): Debug: Namespace : Using permissions from /tmp/pop3c/.: mode=0755 gid=-1 dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Looking up IP address dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Connecting to 120.121.122.123:110 dsync(yyyyy(a)example.com): Debug: pop3c(120.121.122.123): Authenticating as xxxxxx(a)example.com dsync(yyyyy(a)example.com): Panic: file mail-storage.c: line 1311 (mailbox_get_metadata): assertion failed: ((items & MAILBOX_METADATA_GUID) == 0 || !guid_128_is_empty(metadata_r->guid)) dsync(yyyyy(a)example.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x45caa) [0xb761ccaa] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x47) [0xb761cdc7] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb761d647] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_metadata+0x120) [0xb76f3040] -> doveadm() [0x80740bc] -> doveadm(dsync_worker_mailbox_iter_next+0x21) [0x8071c11] -> doveadm() [0x806c1f7] -> doveadm(dsync_brain_sync+0x6c0) [0x806b890] -> doveadm(dsync_brain_sync_all+0x18) [0x806c4f8] -> doveadm() [0x806961b] -> doveadm() [0x8069bbf] -> doveadm() [0x80541ec] -> doveadm(doveadm_mail_try_run+0x257) [0x8054ee7] -> doveadm(main+0x391) [0x805d0c1] -> /lib/i386-linux-gnu/i686/cmov/libc.so.6(__libc_start_main+0xe6) [0xb748ae46] -> doveadm() [0x8054001] Aborted Now I'm lost... Am I in the right direction? Thanks, Gedalya # dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 auth_default_realm = example.com auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain default_client_limit = 8096 dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imapc_host = mail01.example.com mail_gid = vmail mail_plugins = listescape mail_prefetch_count = 50 mail_uid = vmail namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash expire2 = Trash.* expire3 = Junk expire_dict = proxy::expire pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX sieve = ~/.dovecot.sieve sieve_before = /var/local/lib/dovecot/sieve/global/fileinto-spam.sieve sieve_dir = ~/sieve } pop3c_host = 120.121.122.123 postmaster_address = postmaster(a)example.com service auth-worker { user = $default_internal_user } service auth { client_limit = 20480 } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 10240 } service lmtp { inet_listener lmtp { address = 0.0.0.0 port = 7025 } } service pop3-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service pop3 { process_limit = 4096 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol doveadm { mail_plugins = listescape pop3_migration } protocol lmtp { mail_plugins = listescape sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = listescape imap_quota ssl_cert = </etc/dovecot/imap.example.com.crt ssl_key = </etc/dovecot/imap.example.com.key } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = listescape pop3_fast_size_lookups = yes pop3_no_flag_updates = yes pop3_reuse_xuidl = no pop3_save_uidl = yes pop3_uidl_format = %08Xu%08Xv ssl_cert = </etc/dovecot/pop.example.com.crt ssl_key = </etc/dovecot/pop.example.com.key } /etc/dovecot/dovecot-sql.conf.ext : driver = mysql connect = ..... default_pass_scheme = PLAIN password_query = SELECT password, \ '/stor/real/domains/%d/%2n/%n' AS userdb_home, \ 'maildir:/stor/real/domains/%d/%2n/%n/Maildir' as userdb_mail, \ concat('*:storage=', quota_mb, 'M') as userdb_quota_rule, \ 'vmail' AS userdb_uid, 'vmail' AS userdb_gid \ FROM email WHERE userid = '%n' AND domain = '%d' and deleted=0 user_query = SELECT '/stor/real/domains/%d/%2n/%n' AS home, \ 'maildir:/stor/real/domains/%d/%2n/%n/Maildir' as mail, \ concat('*:storage=', quota_mb, 'M') as quota_rule, \ 'vmail' AS uid, 'vmail' AS gid \ FROM email WHERE userid = '%n' AND domain = '%d' and deleted=0 iterate_query = SELECT userid as user, domain FROM email where deleted=0

2 2

[Dovecot] Attachment file larger than expected
by Angel L. Mateo 22 Sep '13

22 Sep '13

Hello, I'm using dovecot 2.1.16 with SiS configured as: mail_attachment_dir = <mypath> mail_attachment_min_size = 128 k mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} I'm having a few errors like: Sep 18 15:46:32 myotis51 dovecot: imap(igd): Error: Attachment file /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 larger than expected (235866) They are really few and users haven't reported any problem, but the errors are there. In this case, actual file size of the attachment is: amateo_adm@myotis51:~$ sudo stat /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 Fichero: «/mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514» Tamaño: 174476 Bloques: 344 Bloque E/S: 4096 fichero regular Dispositivo: fc00h/64512d Nodo-i: 152334473 Enlaces: 2 Acceso: (0600/-rw-------) Uid: ( 2012/ vmail) Gid: ( 204/ vmail) Acceso: 2013-09-18 15:46:20.540728654 +0200 Modificación: 2013-09-18 15:46:20.556728948 +0200 Cambio: 2013-09-18 15:46:20.556728949 +0200 Creación: - and file is identified as: amateo_adm@myotis51:~$ sudo file /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514 /mail/users/attachments/16/b0/16b0b2023a903db14d7f7bcdb1cc04c3f67a4fcb-b32c0a2aa6ae39527c870000a9061514: MIME entity, UTF-8 Unicode text, with very long lines, with CRLF line terminators Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] problem with dovecot replication over tcp
by nik600 22 Sep '13

22 Sep '13

Dear all i'm following the wiki at this page http://wiki2.dovecot.org/Replication but i'm getting this errors: #doveadm -v sync tcp:dst_hostname #doveadm(root): Fatal: Failed to start dsync-server command: 75 If i look at the dst dovecot.log file i get: Sep 16 12:42:18 auth: Error: passdb(root,xx): Auth client doesn't have permissions to do a PASS lookup: /var/run/dovecot/auth-userdb mode=0666, but not owned by UID 1002(vmail) Sep 16 12:42:18 doveadm(xx,root): Error: user root: Auth PASS lookup failed Sep 16 12:42:18 doveadm(xx,root): Debug: auth input: Sep 16 12:42:18 doveadm(xx,root): Error: dsync-server: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_proxy_port is set) I've also tried to perform a #chown vmail /var/run/dovecot/auth-userdb But the error is the same. If i do the #doveadm user * I get a list of users loaded from the database i've added these line to my dovecot-sql.conf iterate_query = SELECT username from mailbox where active=1 Any idea? Thanks -- /*************/ nik600 http://www.kumbe.it

2 1

[Dovecot] DH Parameter
by Dimi - 22 Sep '13

22 Sep '13

Hi! Is there any possibility to let dovecot serve >1024 Bit DH Parameters at SSL/TLS-connections? Is it possible to replace /var/lib/dovecot/ssl-parameters.ssl with DH-parameter generated by openssl? If not: Are there any plans to implement that? Thank you!

2 1

[Dovecot] Error: BUG: Worker sent reply with id 393, expected 394
by 刘莹莹 22 Sep '13

22 Sep '13

hi dovecot: when i login 100 users with imap protocol ,Someusers appeared a BUG in maillog like : Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 393, expected 394 Sep 10 09:05:22 auth(default): Error: worker-server(q82(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 31, expected 32 Sep 10 09:05:22 auth(default): Error: worker-server(q95(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 32, expected 33 Sep 10 09:05:22 auth(default): Error: worker-server(q99(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 auth(default): Error: BUG: Worker sent reply with id 29, expected 30 Sep 10 09:05:22 auth(default): Error: worker-server(q22(a)t.com,10.12.80.3): Aborted: Worker is buggy Sep 10 09:05:22 imap-login: Info: Internal login failure (auth failed, 1 attempts): user=<q3(a)t.com>, method=PLAIN, rip=10.12.80.3, lip=10.12.80.6

2 1

[Dovecot] Dovecot 2.0, 2.1 and 2.2.5 core dump when Quota Plugin (FS) is enabled
by Harald Strack 22 Sep '13

22 Sep '13

Hi, we are actually deploying a new IMAP-Server, targeting dovecot 2.1.17. Unfortunately, our tests with imaptest did not succeed, were ending in core dumps. We did this test: ./imaptest host=example.com port=143 user=strack pass=secret disconnect_quit no_pipelining mbox=dovecot-crlf That's what we get in dovecot's log: Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22810, session=<EurP9wPmVgCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22811, session=<mSXT9wPmWgCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22812, session=<1GbR9wPmWACBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22813, session=<JKbQ9wPmVwCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22814, session=<USLS9wPmWQCBu/Qf> Sep 10 11:17:04 imap(strack): Panic: file mbox-storage.c: line 712 (mbox_transaction_unlock): assertion failed: (mbox->box.transaction_count > 0 || mbox->mbox_lock_type == F_UNLCK) Sep 10 11:17:04 imap(strack): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0() [0x3c7824660a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78246656] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78219eaa] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c786600c0] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb7e7) [0x7f113b5427e7] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb218) [0x7f113b542218] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mbox_sync+0x88) [0x3c7865fea8] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mbox_transaction_save_commit_post+0x27) [0x3c78657c07] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c786a5313] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_transaction_commit_full+0x9f) [0x3c786b3cdf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_transaction_commit+0x8a) [0x3c786a4f5a] -> /usr/lib64/dovecot/libdovecot-storage.so.0() [0x3c78660121] -> /usr/lib/dovecot/lib10_quota_plugin.so(+0xb8af) [0x7f113b5428af] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3e) [0x3c7867aa9e] -> dovecot/imap() [0x408b3a] -> dovecot/imap() [0x4088e4] -> dovecot/imap() [0x408d3c] -> dovecot/imap(cmd_append+0x139) [0x408f99] -> dovecot/imap(command_exec+0x3d) [0x41155d] -> dovecot/imap() [0x41046e] -> dovecot/imap() [0x41055a] -> dovecot/imap(client_handle_input+0x135) [0x410785] -> dovecot/imap(client_input+0x5f) [0x4110af] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x3c78252c16] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x3c78253c9f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x3c78252bb8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x3c7823e083] -> dovecot/imap(main+0x29d) [0x4195bd] Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22826, session=<KyHU9wPmWwCBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22827, session=<kxTY9wPmXACBu/Qf> Sep 10 11:17:04 imap-login: Info: Login: user=<strack>, method=PLAIN, rip=10.10.10.31, lip=10.10.10.21, mpid=22828, session=<CXXg9wPmXQCBu/Qf> Sep 10 11:17:05 imap(strack): Fatal: master: service(imap): child 22806 killed with signal 6 (core dumped) Sep 10 11:17:05 imap(strack): Info: Connection closed in=49 out=3832 Sep 10 11:17:05 imap(strack): Info: Connection closed in=49 out=3832 That's the backtrace of the coredump: Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_sss.so.2...Reading symbols from /usr/lib/debug/lib64/libnss_sss.so.2.debug...done. done. Loaded symbols for /lib64/libnss_sss.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.107.el6_4.2.x86_64 keyutils-libs-1.4-4.el6.x86_64 krb5-libs-1.10.3-10.el6_4.4.x86_64 libcom_err-1.41.12-14.el6_4.2.x86_64 libgcc-4.4.7-3.el6.x86_64 libselinux-2.0.94-5.3.el6_4.1.x86_64 openssl-1.0.0-27.el6_4.2.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 #1 0x0000003bc0234085 in abort () from /lib64/libc.so.6 #2 0x0000003c78246618 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 #3 0x0000003c78246656 in i_internal_fatal_handler (ctx=0x7fff1c87efa0, format=<value optimized out>, args=<value optimized out>) at failures.c:649 #4 0x0000003c78219eaa in i_panic (format=0x2c1e <Address 0x2c1e out of bounds>) at failures.c:263 #5 0x0000003c786600c0 in mbox_transaction_unlock (box=0x1a51270, lock_id=<value optimized out>) at mbox-storage.c:711 #6 0x00007f95c08c77e7 in quota_mailbox_transaction_rollback (ctx=0x1a589e0) at quota-storage.c:142 #7 0x00007f95c08c7218 in quota_mailbox_sync_notify (box=0x1a51270, uid=0, sync_type=0) at quota-storage.c:301 #8 0x0000003c7865fea8 in mbox_sync (mbox=0x1a51270, flags=<value optimized out>) at mbox-sync.c:2006 #9 0x0000003c78657c07 in mbox_transaction_save_commit_post (_ctx=0x1a53e20, result=<value optimized out>) at mbox-save.c:807 #10 0x0000003c786a5313 in index_transaction_index_commit (index_trans=0x1a5a530, result_r=0x7fff1c87f190) at index-transaction.c:50 #11 0x0000003c786b3cdf in mail_index_transaction_commit_full (_t=0x7fff1c87f1b8, result_r=0x7fff1c87f190) at mail-index-transaction.c:251 #12 0x0000003c786a4f5a in index_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at index-transaction.c:132 #13 0x0000003c78660121 in mbox_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at mbox-storage.c:729 #14 0x00007f95c08c78af in quota_mailbox_transaction_commit (ctx=0x1a5a390, changes_r=0x7fff1c87f260) at quota-storage.c:124 #15 0x0000003c7867aa9e in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fff1c87f260) at mail-storage.c:1515 #16 0x0000000000408b3a in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:284 #17 0x00000000004088e4 in cmd_append_continue_message (cmd=0x1a4ea50) at cmd-append.c:466 #18 0x0000000000408d3c in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:399 #19 0x0000000000408f99 in cmd_append (cmd=0x1a4ea50) at cmd-append.c:519 #20 0x000000000041155d in command_exec (cmd=0x1a4ea50) at imap-commands.c:148 #21 0x000000000041046e in client_command_input (cmd=0x1a4ea50) at imap-client.c:684 #22 0x000000000041055a in client_command_input (cmd=0x1a4ea50) at imap-client.c:735 #23 0x0000000000410785 in client_handle_next_command (client=0x1a4e240) at imap-client.c:776 #24 client_handle_input (client=0x1a4e240) at imap-client.c:788 #25 0x00000000004110af in client_input (client=0x1a4e240) at imap-client.c:827 #26 0x0000003c78252c16 in io_loop_call_io (io=0x1a4cb70) at ioloop.c:379 #27 0x0000003c78253c9f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 #28 0x0000003c78252bb8 in io_loop_run (ioloop=0x1a35670) at ioloop.c:398 #29 0x0000003c7823e083 in master_service_run (service=0x1a35520, callback=<value optimized out>) at master-service.c:544 #30 0x00000000004195bd in main (argc=1, argv=0x1a35370) at main.c:389 That's the full backtrace of the coredump: #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.107.el6_4.2.x86_64 keyutils-libs-1.4-4.el6.x86_64 krb5-libs-1.10.3-10.el6_4.4.x86_64 libcom_err-1.41.12-14.el6_4.2.x86_64 libgcc-4.4.7-3.el6.x86_64 libselinux-2.0.94-5.3.el6_4.1.x86_64 openssl-1.0.0-27.el6_4.2.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt full #0 0x0000003bc02328a5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003bc0234085 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x0000003c78246618 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1a2d3a8 "/usr/lib64/dovecot/libdovecot.so.0() [0x3c7824660a] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78246656] -> /usr/lib64/dovecot/libdovecot.so.0() [0x3c78219eaa] -> /usr/lib64/dovecot/libdovecot-stora"... #3 0x0000003c78246656 in i_internal_fatal_handler (ctx=0x7fff1c87efa0, format=<value optimized out>, args=<value optimized out>) at failures.c:649 status = 0 #4 0x0000003c78219eaa in i_panic (format=0x2c1e <Address 0x2c1e out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff1c87f070, reg_save_area = 0x7fff1c87efb0}} #5 0x0000003c786600c0 in mbox_transaction_unlock (box=0x1a51270, lock_id=<value optimized out>) at mbox-storage.c:711 mbox = 0x1a51270 __FUNCTION__ = "mbox_transaction_unlock" #6 0x00007f95c08c77e7 in quota_mailbox_transaction_rollback (ctx=0x1a589e0) at quota-storage.c:142 qbox = 0x1a51858 qt = 0x1a66a90 #7 0x00007f95c08c7218 in quota_mailbox_sync_notify (box=0x1a51270, uid=0, sync_type=0) at quota-storage.c:301 qbox = 0x1a51858 uids = <value optimized out> sizep = <value optimized out> i = <value optimized out> count = <value optimized out> size = <value optimized out> #8 0x0000003c7865fea8 in mbox_sync (mbox=0x1a51270, flags=<value optimized out>) at mbox-sync.c:2006 lock_id = 11 ---Type <return> to continue, or q <return> to quit--- ret = 0 __FUNCTION__ = "mbox_sync" #9 0x0000003c78657c07 in mbox_transaction_save_commit_post (_ctx=0x1a53e20, result=<value optimized out>) at mbox-save.c:807 ctx = 0x1a53e20 __FUNCTION__ = "mbox_transaction_save_commit_post" #10 0x0000003c786a5313 in index_transaction_index_commit (index_trans=0x1a5a530, result_r=0x7fff1c87f190) at index-transaction.c:50 t = 0x1a5a390 ret = 0 __FUNCTION__ = "index_transaction_index_commit" #11 0x0000003c786b3cdf in mail_index_transaction_commit_full (_t=0x7fff1c87f1b8, result_r=0x7fff1c87f190) at mail-index-transaction.c:251 t = 0x1a5a530 index = 0x1a4ccc0 index_undeleted = <value optimized out> #12 0x0000003c786a4f5a in index_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at index-transaction.c:132 box = 0x1a51270 itrans = 0x0 result = {log_file_seq = 17, log_file_offset = 6032, commit_size = 196, ignored_modseq_changes = 0} ret = <value optimized out> #13 0x0000003c78660121 in mbox_transaction_commit (t=<value optimized out>, changes_r=<value optimized out>) at mbox-storage.c:729 mt = <value optimized out> box = 0x1a51270 lock_id = 11 ret = <value optimized out> #14 0x00007f95c08c78af in quota_mailbox_transaction_commit (ctx=0x1a5a390, changes_r=0x7fff1c87f260) ---Type <return> to continue, or q <return> to quit--- at quota-storage.c:124 qbox = 0x1a51858 qt = 0x1a5a1e0 #15 0x0000003c7867aa9e in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fff1c87f260) at mail-storage.c:1515 _data_stack_cur_id = 4 t = 0x1a5a390 ret = <value optimized out> #16 0x0000000000408b3a in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:284 sync_flags = <value optimized out> imap_flags = <value optimized out> changes = {pool = 0x1a61fe0, uid_validity = 1268835246, saved_uids = {arr = {buffer = 0x1a62000, element_size = 8}, v = 0x1a62000, v_modifiable = 0x1a62000}, ignored_modseq_changes = 0, changed = true, no_read_perm = false} msg = <value optimized out> client = 0x1a4e240 ctx = 0x1a4eb48 args = 0x1a59a98 flags_list = <value optimized out> flags = <value optimized out> keywords_list = <value optimized out> keywords = <value optimized out> internal_date_str = <value optimized out> msg = <value optimized out> internal_date = <value optimized out> ret = <value optimized out> timezone_offset = <value optimized out> save_count = <value optimized out> nonsync = <value optimized out> ---Type <return> to continue, or q <return> to quit--- fatal = <value optimized out> __FUNCTION__ = "cmd_append_continue_parsing" #17 0x00000000004088e4 in cmd_append_continue_message (cmd=0x1a4ea50) at cmd-append.c:466 all_written = true client = 0x1a4e240 ctx = 0x1a4eb48 size = 0 ret = <value optimized out> #18 0x0000000000408d3c in cmd_append_continue_parsing (cmd=0x1a4ea50) at cmd-append.c:399 client = 0x1a4e240 ctx = 0x1a4eb48 args = 0x1a59a98 flags_list = 0x0 flags = 0 keywords_list = 0x3c782426aa keywords = 0x0 internal_date_str = <value optimized out> msg = <value optimized out> internal_date = -1 ret = 0 timezone_offset = 0 save_count = <value optimized out> nonsync = true fatal = <value optimized out> __FUNCTION__ = "cmd_append_continue_parsing" #19 0x0000000000408f99 in cmd_append (cmd=0x1a4ea50) at cmd-append.c:519 client = 0x1a4e240 ctx = 0x1a4eb48 mailbox = 0x1a38910 "INBOX" ---Type <return> to continue, or q <return> to quit--- #20 0x000000000041155d in command_exec (cmd=0x1a4ea50) at imap-commands.c:148 hook = 0x1a36cd0 ret = <value optimized out> #21 0x000000000041046e in client_command_input (cmd=0x1a4ea50) at imap-client.c:684 client = 0x1a4e240 command = <value optimized out> __FUNCTION__ = "client_command_input" #22 0x000000000041055a in client_command_input (cmd=0x1a4ea50) at imap-client.c:735 client = 0x1a4e240 command = <value optimized out> __FUNCTION__ = "client_command_input" #23 0x0000000000410785 in client_handle_next_command (client=0x1a4e240) at imap-client.c:776 size = 1320 #24 client_handle_input (client=0x1a4e240) at imap-client.c:788 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #25 0x00000000004110af in client_input (client=0x1a4e240) at imap-client.c:827 cmd = <value optimized out> output = 0x1a4ca88 bytes = 1320 __FUNCTION__ = "client_input" #26 0x0000003c78252c16 in io_loop_call_io (io=0x1a4cb70) at ioloop.c:379 ioloop = 0x1a35670 t_id = 2 #27 0x0000003c78253c9f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x1a359e0 ---Type <return> to continue, or q <return> to quit--- events = <value optimized out> event = 0x1a35a50 list = 0x1a4cbc0 io = <value optimized out> tv = {tv_sec = 1799, tv_usec = 999319} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> #28 0x0000003c78252bb8 in io_loop_run (ioloop=0x1a35670) at ioloop.c:398 No locals. #29 0x0000003c7823e083 in master_service_run (service=0x1a35520, callback=<value optimized out>) at master-service.c:544 No locals. #30 0x00000000004195bd in main (argc=1, argv=0x1a35370) at main.c:389 set_roots = {0x41c460, 0x0} login_set = {auth_socket_path = 0x1a2d078 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x419710 <login_client_connected>, failure_callback = 0x418f30 <login_client_failed>} service_flags = <value optimized out> storage_service_flags = <value optimized out> username = <value optimized out> c = <value optimized out> That's our configuration: # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.4 (Santiago) xfs auth_debug = yes auth_verbose = yes debug_log_path = /var/log/dovecot/dovecot-debug.log default_client_limit = 3000 default_process_limit = 8192 disable_plaintext_auth = no log_path = /var/log/dovecot/dovecot.log login_greeting = Server ready. mail_debug = yes mail_location = mbox:/var/spool/fhmrz_imap/% u/dovecot-home:LAYOUT=maildir++:INBOX=/var/spool/mail/% u:INDEX=/var/opt/index/%u/dovecot-indexes:CONTROL=/var/opt/index/% u/dovecot-control mail_plugin_dir = /usr/lib/dovecot mail_plugins = listescape quota mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { driver = pam } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size flags quota = fs:User quota:user:noenforcing quota_exceeded_message = Quota exceeded, please go to http://www.timbuktu.edu/over_quota_help for instructions on how to fix this. } protocols = imap pop3 service anvil { client_limit = 16744 } service auth { client_limit = 16800 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 8192 process_min_avail = 8 } service imap { process_limit = 16084 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 16084 } ssl_cert = </etc/pki/tls/certs/example.pem ssl_key = </etc/pki/tls/private/example-key.pem userdb { driver = passwd } protocol imap { mail_max_userip_connections = 30 mail_plugins = listescape quota imap_quota } protocol pop3 { mail_max_userip_connections = 10 pop3_uidl_format = %08Xu%08Xv } The problem occurs with dovecot-2.0.9 and dovecot-2.1.17 and also dovecot-2.2.5! From the stacktrace I could see that the problem origins from the quota plugin. Thus, when I disabled the quota plugin the problem went away. The problem did only occur on a high concurrency level on one mbox/folder, running imaptest with only one user and 10 clients. When we run imaptest in a more real-world fashion with several thousand of users and clients=100, the error did not occur. Because of this I am not sure how problematic this bug will be in a production environment? What do you think? Any help is greatly appreciated! br Harald Strack -- Harald Strack, Dipl.Inf.(FH) IT Development ssystems c/o berliner gazette Danziger Str. 31 10435 Berlin Tel: +49 30 2023 6071 - 1 http://www.ssystems.de

2 1

[Dovecot] Read-only account through INDEX=MEMORY:CONTROL=MEMORY and non-writable Unix-permissions
by Steffen Kaiser 22 Sep '13

22 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, my goal is to provide a special mailbox for some mail accounts. The user should get the information, to look somewhere else. The user must not change anything at all. I also don't want to provide a mailbox for each user. I got the setup below, which seems to run with Dovecot v2.2; however, "CONTROL=MEMORY" is not documented. Is the setup stable for next versions of Dovecot or is CONTROL=MEMORY not a feature, but a bug? ====== user settings: home=/home/nomailbox mail=maildir:/home/nomailbox/Maildir:INDEX=MEMORY:CONTROL=MEMORY uid=vmail gid=vmail The structure of the directory: /home/nomailbox/: total 12 drwxr-xr-x 3 root root 4096 Oct 24 2007 ./ drwxr-xr-x 18 root root 4096 Sep 9 10:36 ../ dr-xr-xr-x 5 root root 4096 Oct 24 2007 Maildir/ /home/nomailbox/Maildir: total 20 dr-xr-xr-x 5 root root 4096 Oct 24 2007 ./ drwxr-xr-x 3 root root 4096 Oct 24 2007 ../ dr-xr-xr-x 2 root root 4096 Oct 24 2007 cur/ dr-xr-xr-x 2 root root 4096 Sep 9 08:23 new/ dr-xr-xr-- 2 root root 4096 Oct 24 2007 tmp/ /home/nomailbox/Maildir/cur: total 8 dr-xr-xr-x 2 root root 4096 Oct 24 2007 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -rw-r--r-- 1 root root 0 Oct 24 2007 .placeholder /home/nomailbox/Maildir/new: total 12 dr-xr-xr-x 2 root root 4096 Sep 9 08:23 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -r--r--r-- 1 root root 804 Sep 9 08:24 no-mailbox-for-you /home/nomailbox/Maildir/tmp: total 8 dr-xr-xr-- 2 root root 4096 Oct 24 2007 ./ dr-xr-xr-x 5 root root 4096 Oct 24 2007 ../ - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUi22kF3r2wJMiz2NAQLJEAf/WM0jXqVmZ6HtEvoKTB4grE2xFfN4Ylig imhPVf/yufYLzQw+w98fhrozEcm7UK0mUWpiJQzMowYyLNdF8tVwhgTdAfFa6fhK +L0+GxVcCuvRq/YjIivhgQ7gwZlhjLWa43Fo65HAqude4nnuyb5/RuVb0aPBlB73 1V5nMB5f9PSrlAjtK4kLOq1VRNp2SCVfBem/ESqhYSZ+O51gGZ8JRm7skWr82GmZ tdeYDa52h8CWm67S1lzNK42yNoElkLrH5MZJLCBmjg/hLjD99aMCAdgWRL5zyg/h bZzoOZNztQq0CwBHTB+KY9YBkfMmXzFtse3C0a2Eg9m5bmJmNblPGw== =iYWU -----END PGP SIGNATURE-----

2 1

[Dovecot] fdatasync -- Error -- bad file descriptor
by Vijay Rajah 22 Sep '13

22 Sep '13

Hello list, I have a dovecot 2.2.5 instance configured to use mdbox as mailbox format. I configured to use separate storage attachments and use SIS.. (doveconf -n below) I get this error Sep 6 12:29:52 vrajah.mydomain.tld dovecot: lmtp(14258, email(a)mydomain.tld) Error: fdatasync(/apps/mail/mailbox/attachments/23/12/2312039008db057a1c75-2efc2d00687d2952b2370000f89409f1) failed: Bad file descriptor I'm using centos 6.4 on a KVM with ext4 as fs. Can someone tell me why i'm getting this error? and how to fix this? -Thanks in advance Vijay ##########doveconf -n # 2.2.5: /apps/mail/dovecot/2.2.5/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.14.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login digest-md5 cram-md5 auth_socket_path = /apps/mail/var/dovecot/run/auth-userdb base_dir = /apps/mail/var/dovecot/run/ debug_log_path = /var/log/dovecot-debug.log dict { sqlquota = mysql:/apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/sqlquota.dict.ext } hostname = mail1(a)mydomain.tldmydomain.tld mail_attachment_dir = /apps/mail/mailbox/attachments mail_attachment_hash = %{sha256:80} mail_debug = yes mail_location = mdbox:/apps/mail/mailbox/%d/%n/mdbox mail_plugin_dir = /apps/mail/dovecot/2.2.5/lib/dovecot/ mail_plugins = " virtual quota zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl dotlock mdbox_rotate_size = 1 M namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = dict:User quota::proxy::sqlquota quota_grace = 10%% quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 450 4.2.2 Mailbox is full. Try again later quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_before = /apps/mail/var/dovecot/sieve/ sieve_dir = ~/sieve sieve_global_dir = /apps/mail/var/dovecot/sieve zlib_save = bz2 zlib_save_level = 9 } protocols = imap lmtp sieve service auth { unix_listener /apps/mail/var/postfix/dovecot-auth { group = postfix mode = 0660 user = postfix } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /apps/mail/var/postfix/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 10 vsz_limit = 64 M } service managesieve { process_limit = 1024 } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } shutdown_clients = no ssl_ca = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mayca.crt.pem ssl_cert = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.mydomain.tld.pem ssl_key = </apps/mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.mydomain.tld.key ssl_parameters_regenerate = 30 hours submission_host = 127.0.0.1:587 userdb { driver = prefetch } userdb { args = /apps/mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " virtual quota zlib sieve zlib" } protocol imap { mail_plugins = " virtual quota zlib imap_quota imap_zlib" } protocol lmtp { debug_log_path = /var/log/dovecot-lmtp-debg.log mail_plugins = " virtual quota zlib sieve zlib" }

2 2

[Dovecot] permission problem when using public namespace and "subscription = yes"
by Lars Uhlmann 22 Sep '13

22 Sep '13

I have configured an public namespace "Test" for a group of users: | namespace public { | separator = . | prefix = Test. | location = maildir:/mailroot/public/Test | hidden = no | list = yes | subscriptions = yes | } Using each users own subscription file for a public mailbox doesn't make sense when the mailbox is heavily used. Every directory operation (create/rename) needs to be synced between all subscribers automatically and immediately. So I set "subscriptions = yes". My ACLS look like this: | user=mark lrwstiekx | user=tim lrwstiekx | user=max lr | user=jenny lrwstiekx | user=louis lr Nevertheless _all_ my mail users still have access to the namespace's directory tree. It is my understanding that when a user doesn't has 'lookup' access, he should not be able to subscribe to this mailbox. In my opinion this is a security problem. ACLs must be processed _before_ a shared subscrition file is parsed. regards Lars

2 1

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets
by Joseph Tam 21 Sep '13

21 Sep '13

"Michael Smith (DF)" writes: > Or another option, is there any good DNS based RBLs for botnet IPs, and > is there any way to tie that in to the dovecot auth system? I've been > looking for botnet rbls, but what I've found so far doesn't seem to > work very well. Most of the IPs that I've had to firewall don't exist > in them. /dev/rob0 writes: > The problem with using XBL, anyway, is that you might have legitimate > logins from listed hosts. Example: a traveler using hotel wifi. We > (TINW) really would need a new DNSBL type (or a special result) for > this sort of abuse. > > It's a nice idea, worth building upon, if someone can fund it (or > find the time to develop it, which really amounts to the same thing.) > Imagine also a Dovecot network of reporters, where brute force > attempts worldwide are reported from Dovecots to the DNSBL, not > merely a one-way tie in. > > I'd also suggest listing SSH brute force attacks in the same DNSBL, > possibly with a different result (127.0.0.$port, so IMAP attackers > list as 127.0.0.143, SSH attackers as 127.0.0.22. Yes, we'd have to > incorporate the third quad for ports > 255, but the general idea is > for result codes to be both machine and human readable as much as > possible.) I use bl.blocklist.de as a DNSRBL for ssh BFD, but I think it also detects BFD for other protocols: http://www.blocklist.de/en/index.html The nice thing about this RBL is that you can also contribute by configuring your Fail2Ban/DenyHost to forward logs to the maintainers, to widen the detection network. I get about a 60% hit on ssh BFD attacks. I also found http://openbl.org but they distribute it as a downloadable file rather than as a DNSRBL. Maybe I can introduce the latter to the former. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Solved: startup failures "net_listen_unix(...) failed: Invalid argument"
by C. Mills 21 Sep '13

21 Sep '13

I ran into this and had a bit of trouble tracking a diagnosis down, so here it is for the archives in case anyone else runs into this. A new installation of dovecot was failing to start, with these messages: $ ./sbin/dovecot Error: service(imap-urlauth): net_listen_unix(.../var/run/dovecot/token-login/imap-urlauth) failed: Invalid argument Error: service(auth): net_listen_unix(.../var/run/dovecot/token-login/tokenlogin) failed: Invalid argument Fatal: Failed to start listeners Some of the other processes seemed to be starting up fine, and they created sockets in the expected dir, but the above two wouldn't. stracing the processes didn't show a lot, but eventually I checked the length of the installation path, and found the above two socket paths were exceeding the maximum path length limit for Unix sockets -- 108 chars on my Linux boxen. I haven't checked SuS or Posix to see what the standards say the actual minimum required size for the maximum path length is -- it might be shorter yet on other systems. Moving the installation to a less deeply nested hierarchy fixed the problem. I hope this saves someone else a headache someday. C. C. -- ----------------------------------------------------------------------- C. Mills -----------------------------------------------------------------------

2 1

[Dovecot] dovecot and PFS
by Emmanuel Dreyfus 21 Sep '13

21 Sep '13

Hi Is there known advices on how to favor PFS with dovecot? In Apache, I use the following directives, with cause all modern browsers to adopt 256 bit PFS ciphers, while keeping backward compatibility with older browsers and avoiding BEAST attack: SSLProtocol all -SSLv2 SSLHonorCipherOrder On SSLCipherSuite ECDHE@STRENGTH:ECDH@STRENGTH:DH@STRENGTH:HIGH:-SSLv3-SHA1:-TLSv10 -SHA1:RC4:!MD5:!DES:!aNULL:!eNULL dovecot does not care about BEAST, since attacker cannot inject trafic. Therefore the cipher list get simplier in dovecot.conf: ssl_cipher_list = ECDHE@STRENGTH:ECDH@STRENGTH:DH@STRENGTH:HIGH:!MD5:!DES:!aNULL :!eNULL But that list is good for browsers. I am not aware of documentation about what ciphers are advertised by various mail client. How can I know if that setting has some success pushing PFS? How can I discover which clients fail to negociate PFS ciphers? -- Emmanuel Dreyfus manu(a)netbsd.org

4 4

[Dovecot] mailbox_list_index, stops showing new mails in mailboxes
by Anton Lundin 21 Sep '13

21 Sep '13

Hello. I'm having some weird problem with (probably) mailbox_list_index, that it doesn't see new mail in mailboxes. I'm using 2.2.4 over imap and ssh/imap, and after a while dovecot stops noticing new mail in some folders. Its always the same 2-3 folders of about 30. I read something about list-index corruption in 2.2.2, and i thought it was that i was running into earlier, but this problem still occurs. This is dovecot 2.2.4, running on Solaris 10 x86_64 to homedirs on zfs, where procmail is used to deliver mail to mailboxes in mbox-format. I've tried to purge all indexes and let dovecot rebuild them, but the problem reoccurs after a couple of days. How can i help to debug this issue? Should i grab dovecot.list.index when its out-of-sync for debugging? //Anton -- Anton Lundin +46702-161604

2 1

[Dovecot] verbose_proctitle cuts dsync to proctitle to "dsyn"
by Sven Hartge 21 Sep '13

21 Sep '13

Hi Timo, little cosmetic bug report: using "verbose_proctitle = yes" shortens the proctitle of dsync to just "dsyn". Example: Note the whitespace instead of the 'c' in the proctitle: root@m-st-01:~# ps auwwwx | grep [d]syn virtmail 18141 13.0 0.1 49916 7952 pts/6 R+ 00:49 0:00 dsyn -v -u xxyyzz7 -R backup maildir:/staging/xxyyzz7/Maildir With "verbose_proctitle = no" the output looks like this: root@m-st-01:~# ps auwwwx | grep [d]syn virtmail 18347 78.6 1.6 127356 68884 pts/6 D+ 00:53 0:02 dsync -v -u aabbcc7 -R backup maildir:/staging/aabbcc7/Maildir Version of dovecot is 2.2.5 from the autobuilder (but rebuild locally): root@m-st-01:~# doveadm config -n # 2.2.5 (ec62ea3c940e): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 [...] Grüße, Sven. -- Sigmentation fault. Core dumped.

2 1

[Dovecot] Problem with MySQL virtual users and dsync
by Jordan Cook 21 Sep '13

21 Sep '13

Hello, I am using dovecot 2.2.5 on FreeBSD and I am having trouble using dsync with SSH. Everything on the server seems to be working fine (I can login, receive and send emails etc). I am using SQL for both passdb, and userdb and this seems to work fine. The 'doveadm user' command returns all the correct information for the user. I am getting the following errors in my log file: Aug 27 21:34:17 server dovecot: replicator: Error: userdb lookup: Connecting timed out Aug 27 21:34:17 server dovecot: replicator: Error: userdb lookup: Disconnected unexpectedly Aug 27 21:34:20 server last message repeated 173381 times It did seem to do an initial sync, but after that nothing is being synchronised. Has anyone else solved this problem previously or is able to help? Regards, Jordan Cook -- Packet House Limited is a company registered in England and Wales. Registered number: 07602377. Registered office: 40 Preston Avenue, Alfreton, Derbyshire, DE55 7JY This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Packet House Limited. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error.

2 1

[Dovecot] Error: file_dotlock_open() failed with file + Too many open files
by Kavish Karkera 21 Sep '13

21 Sep '13

Hi All, We are getting these below error on our IMAP server. is this because of open file limits.?? We have set it to 4096. [root@vish conf.d]# ulimit -n 4096 Aug 27 16:08:26 imap(kavish.karkera(a)example.com-24685): Error: file_dotlock_open() failed with file /data/quarantine/index//data/quarantine/mailstore/24685/.INBOX.kavish.karkera/dovecot.index.cache: Too many open files Aug 27 16:08:26 imap(kavish.karkera(a)example.com-24685): Error: open(/data/quarantine/index//data/quarantine/mailstore/24685/.INBOX.kavish.karkera/dovecot.index.cache.lock) failed: Too many open files Below is our dovecot conf file. ====================================================================== # 2.2.5: /usr/local/dovecot-2.2.5/etc/dovecot-imap/dovecot.conf # OS: Linux 2.6.18-194.26.1.el5 x86_64 CentOS release 5.5 (Final) auth_socket_path = /usr/local/var/run/dovecot2.2-imap/auth-userdb base_dir = /usr/local/var/run/dovecot2.2-imap/ default_vsz_limit = 1 G first_valid_gid = 99 first_valid_uid = 99 hostname = log_path = /var/log/dovecot2.2-imap.log mail_location = maildir:~:INDEX=/data/quarantine/index/%h:CONTROL=/data/quarantine/index/%h mail_plugins = " virtual notify" namespace { inbox = no location = prefix = separator = . type = private } namespace { hidden = yes inbox = yes list = yes location = virtual:~/virtual:LAYOUT=maildir++:INDEX=~/virtual:CONTROL=~/virtual prefix = virtual. separator = . subscriptions = no type = private } namespace { hidden = yes inbox = no list = no location = maildir:~:INDEX=/data/quarantine/index/%h:CONTROL=/data/quarantine/index/%h:LAYOUT=maildir++ prefix = boxvirtual. separator = . subscriptions = no type = private } passdb { args = /usr/local/dovecot-2.2.5/etc/dovecot-imap/dovecot-sql.conf.ext driver = sql } protocols = imap service auth { unix_listener auth-userdb { group = nobody mode = 0666 user = nobody } } service imap-login { inet_listener imap { port = 20143 } vsz_limit = 1 G } service imap-postlogin { executable = script-login -d /usr/local/bin/dovecot.virtual.sh unix_listener imap-postlogin { mode = 0666 } } service imap { executable = /usr/local/dovecot-2.2.5/libexec/dovecot/imap imap-postlogin vsz_limit = 1 G } ssl = no userdb { args = /usr/local/dovecot-2.2.5/etc/dovecot-imap/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 1000 mail_plugins = " virtual notify" } Regards, Kavish Karkera

2 1

[Dovecot] Logging pre-rewrite user ID for application-specific passwords
by Steven Murdoch 21 Sep '13

21 Sep '13

I have set up Dovecot v2.2.5 with application-specific passwords, along the lines of this blog post (http://www.dgsiegel.net/news/2013_05_21-application_specific_passwords_for_…) My users file looks like: user-foo:{BLF-CRYPT}$2...:42:42::/home/user::allow_nets=127.0.0.1/32 user=user user-bar:{BLF-CRYPT}$2...:42:42::/home/user::user=user user:{BLF-CRYPT}$2...:42:42::/home/user::nologin In this way, user-foo can log in with one password (but only from localhost), user-bar can log in from any host with a different password, but both actually being treated as the same user. When these users log in through, the log entries look like: Aug 26 23:03:01 hostname dovecot: imap-login: Login: user=<user>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=12345, TLS Whereas I would like to see the original user name (prior to the re-write), i.e. user-foo and user-bar so I can keep track of which user names are in use and from where. Is there some way to do this? I couldn't see any of the variables being suitable. There is some information in the debug logs, but I would prefer not to need to leave this on when I don't need them. Thanks in advance. Steven

2 1

[Dovecot] Dovecot never release preallocated space in mdbox
by Stéphane BERTHELOT 21 Sep '13

21 Sep '13

Hello everyone, I am currently evaluating dovecot for our new email production servers (20k+ mailboxes) and found out something strange. I'm using those settings on Dovecot 2.2.4 (x86_64 / Slackware / compiled from sources) mdbox_rotate_size = 128M mdbox_rotate_interval = 1d mdbox_preallocate_space = yes with virtual users and location like : mail_location = mdbox:~/mdbox I don't think the remaining config is relevant but ask me if you need some other parts. Using test accounts for 2 weeks now I've figured that the 128M preallocated space is never 'hole punched" (to use a similar term than "man fallocate" on Linux), even when rotating m.* files. From what I understand those files will never be appended again because of the mdbox_rotate_interval. Then doveadm purge creates new files so old ones would never grow again. Here is an example of a mdbox storage using ls -ls (which shows allocated VS used space) total 4065176 1884 -rw------- 1 mail mail 1926656 Jul 29 10:55 dovecot.map.index 4 -rw------- 1 mail mail 460 Jul 29 11:26 dovecot.map.index.log 48 -rw------- 1 mail mail 44304 Jul 29 10:55 dovecot.map.index.log.2 131072 -rw------- 1 mail mail 133165066 Jul 19 15:31 m.10 131072 -rw------- 1 mail mail 133507393 Jul 19 15:32 m.13 131072 -rw------- 1 mail mail 134155182 Jul 19 15:33 m.14 131072 -rw------- 1 mail mail 134213403 Jul 19 15:30 m.2 131072 -rw------- 1 mail mail 46464 Jul 21 04:30 m.21 131072 -rw------- 1 mail mail 134215030 Jul 19 15:30 m.3 131072 -rw------- 1 mail mail 25852 Jul 25 01:54 m.32 131072 -rw------- 1 mail mail 2360 Jul 26 00:05 m.34 131072 -rw------- 1 mail mail 169073 Jul 27 23:18 m.35 131072 -rw------- 1 mail mail 31624 Jul 27 01:55 m.36 131072 -rw------- 1 mail mail 134216982 Jul 28 04:30 m.37 131076 -rw------- 1 mail mail 134217804 Jul 28 04:30 m.38 131072 -rw------- 1 mail mail 134217341 Jul 28 04:30 m.39 131072 -rw------- 1 mail mail 134213719 Jul 19 15:30 m.4 131072 -rw------- 1 mail mail 29740970 Jul 28 04:30 m.40 131072 -rw------- 1 mail mail 129175917 Jul 28 04:30 m.41 131072 -rw------- 1 mail mail 133174937 Jul 28 04:30 m.42 131072 -rw------- 1 mail mail 633436 Jul 28 04:30 m.43 131072 -rw------- 1 mail mail 3154623 Jul 28 04:30 m.44 131072 -rw------- 1 mail mail 3676879 Jul 28 04:30 m.45 131072 -rw------- 1 mail mail 468158 Jul 28 04:30 m.46 131072 -rw------- 1 mail mail 26964 Jul 28 04:30 m.47 131072 -rw------- 1 mail mail 3574599 Jul 28 04:30 m.48 131072 -rw------- 1 mail mail 3789133 Jul 28 04:30 m.49 131072 -rw------- 1 mail mail 134215016 Jul 19 15:30 m.5 131072 -rw------- 1 mail mail 1280074 Jul 28 04:30 m.50 131076 -rw------- 1 mail mail 635459 Jul 28 22:47 m.51 131072 -rw------- 1 mail mail 1459418 Jul 29 10:55 m.52 131072 -rw------- 1 mail mail 132941013 Jul 29 11:26 m.53 131072 -rw------- 1 mail mail 134213475 Jul 19 15:30 m.7 131072 -rw------- 1 mail mail 132240074 Jul 19 15:31 m.9 There's a lot of "lost" space since preallocated space would only be reclaimed when *all* emails in m.X file have refcount=0 and after a doveadm purge call, if I read well the dovecot docs. On mailboxes patterns with low incoming mail (< 100kb / day) this would waste much space. Of course I can decrease rotate size a lot but it would then produce a lot of files and would certainly become similar performance-wise to sdbox/maildir/... There would certainly be smart to use something similar to "FALLOC_FL_PUNCH_HOLE" on rotation (when doing close() ?) so that when we're sure there won't be anymore data appended to file that the allocated space == used space. I will disable space preallocation for our next tests since it wastes much storage for us ; did you have any feedback on how much it may affect performance ? I found in this ML archives some messages about the implementation but didn't see anyone clearly stating how much better preallocation is. Thanks, best regards, Stephane Berthelot.

4 5

[Dovecot] Deleted mails in dsync backups
by Wolfgang.Friebel＠desy.de 21 Sep '13

21 Sep '13

Hello we are doing regular backups of the mdbox mail folders using dsync -u username backup mdbox:/somedir/BACKUPS/username (still with version 2.1.10, but 2.2.5 is in testing phase) We do observe that the directory size in the BACKUPS directory is growing with respect to the original mail folders. I believe this is due to deleted mails not being purged in the backup. We are doing regular doveadm purge -A cleanups, but this does (of course) not affect the backups and subsequent dsync backup runs seem not to clean up deleted mails in the backup either. Will the behaviour of the dsync backup command deal with deleted mails in the 2.2.5 release? If not, what could we do to get rid of the deleted mails in the backup (or is there another reason for the growth in size) We have e.g. after 9 month of running with 2.1.10 du -sk username 588520 du -sk /somedir/BACKUPS/username 863024 -- Wolfgang Friebel Deutsches Elektronen-Synchrotron DESY

2 1

[Dovecot] Rfc: Limit the size of an email IN the mailbox
by Ralf Hildebrandt 21 Sep '13

21 Sep '13

Currently we're in the process of migrating Dovecot mailboxes to Exchange. This is all working very well, except for the occasional user, who used his/her Drafts folder as a file storage: They started writing an email containing lots of image attachments (and thus exceeding our maximum_message_size by far). So the mail never gets sent, but stays in the Drafts folder. Once I try moving that mail to exchange, it won't accept the message since it's too big. I think it would be interesting to have a limit on the total size of an IMAP object, just like in SMTP. Thought? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

3 2

[Dovecot] INBOX protected foldername?
by Hajo Locke 21 Sep '13

21 Sep '13

Hello, have a little problem with folders with name INBOX created by Users. Some Clients use a Prefix for their Folders. In our old setup (dovecot 1.2) it was possible to create a Folder INBOX in mbox-space with some Subfolders. These Subfolders of INBOX showed up in Mailclient at toplevel. Now we updatet to 2.1.7. In higher dovecot versions INBOX seems to be a kind of protected foldername. dovecot is not offering this folder in folderlist. If i rename it, the folder is available again. There are only a few users, so i could fix this manually. But how to explain this? I did not find a setting etc. which could explain this behaviour. Our Config is pretty standard: mail_location is unchanged some dovecot versions we use: mail_location = mbox:~/mail:INBOX=/var/mail/%u most of conf is out of the box and also used in older versions. only new is namespace inbox, but should also be default: namespace inbox { inbox = yes } Is there an explaination for this behaviour? Thanks, Hajo

4 10

[Dovecot] . (dot) in maildir folder names
by Christoph Anton Mitterer 21 Sep '13

21 Sep '13

Hi. Uhm... yeah as the topic implies I want to have . (dots) in my folder names... Unfortunately dovecot's maildirmake hasn't a -f switch as the one from courier/maildrop, but that one in turn is buggy[0] and doesn't encode any characters at all. In principle, maildir++ should allow[1] having (encoded) dots in folder names,... but I don't quite understand how the encoding actually works, cause UTF-7 seems to be already the encoded (without padding and such)... but . is . in UTF-7 as well. Does dovecot support this? At least my mail clients (well I only tried Evolution so far which sucks in so many areas)... couldn't create it... but I guess it's rather a stupid client issue. Anyone knows how it would be encoded? Interestingly, and this might be actually an inssue in doveocot when I create maildirs with non-ASCII chars without encoding these, e.g. maildir/.München/ (instead of the correctly encoded (.M&APw-nchen) Dovecot seems to "export" these to the clients,... at least Evolution shows it in the list of subscribable folders (even correctly as "München")... but it doesn't allow me to actually subscribe to it. Cheers & thx, Chris. [0] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709555 [1] http://www.courier-mta.org/maildir.html#id351803

5 24

[Dovecot] Dovecot and CAPITALISATION = grrrr ;-(
by Ben 21 Sep '13

21 Sep '13

Hello, As far as I'm aware, email is case insensitive ? Dovecot however, seems to be taking offence at the fact that someone is sending mail to user(a)SOMEDOMAIN.XYZ. Postfix has no issues handling it, it when it gets passed over to Dovecot LMTP that I get log lines such as : Sep 17 13:48:22 ukc-vm02-mx01 dovecot: auth: passwd-file(user(a)SOMEDOMAIN.XYZ): unknown user However user(a)somedomain.xyz *DOES* exist in the passwd file. Just not with a capitalised domain ! I am confused. Ben

5 6

[Dovecot] mail-filter plugin v2.2 - corrupts IMAP indexes?
by Charles Cazabon 21 Sep '13

21 Sep '13

Hi, I'm trying out the mail-filter plugin (v2.2, with Dovecot 2.2.5 built from source), and it seems like any nontrivial filter causes some sort of index corruption that breaks IMAP use. i.e. using a null filter (basically `cat -`) for mail-filter.sh and mail-filter-out.sh appears to work fine, and the debug logging shows it's using the filters (though it reports the wrong Unix socket for one of them - not sure if that's an actual bug or just a copy&paste error where it logs it; there's a similar accidental use of the same Unix socket path in the readme for the plugin): Sep 15 14:24:03 imap: Debug: Loading modules from directory: .../dovecot/lib/dovecot Sep 15 14:24:03 imap: Debug: Module loaded: .../dovecot/lib/dovecot/mail_filter_plugin.so Sep 15 14:24:03 imap(charlesc): Debug: Effective uid=1000, gid=1000, home=/home/charlesc Sep 15 14:24:03 imap(charlesc): Debug: mail_filter: Filtering mail_filter via socket .../dovecot/var/run/dovecot/mail-filter Sep 15 14:24:03 imap(charlesc): Debug: mail_filter: Filtering mail_filter_out via socket .../dovecot/var/run/dovecot/mail-filter If I use a slightly more complex pair of filter scripts that just swap the case of all alpha chars in the message body (not headers), so this pair of filters results in the same output as the original message, something seems to get corrupted in the indexes, and the IMAP process fails to respond correctly to FETCH requests, and logs this: Sep 15 14:24:03 imap(charlesc): Debug: maildir++: root=.../Mail-test, index=, indexpvt=, control=, inbox=.../Mail-test, alt= Sep 15 14:24:03 imap(charlesc): Error: Cached message size smaller than expected (0 < 1092) Sep 15 14:24:03 imap(charlesc): Error: Maildir filename has wrong S value, renamed the file from .../Mail-test/new/1379276625.M25480P28541.ludmilla,S=0,W=1122 to .../Mail-test/new/1379276625.M25480P28541.ludmilla,S=1092 Sep 15 14:24:03 imap(charlesc): Error: Corrupted index cache file .../Mail-test/dovecot.index.cache: Broken physical size for mail UID 5 Sep 15 14:24:03 imap(charlesc): Error: read(BODY[]) failed: Invalid argument (FETCH for mailbox INBOX UID 5) Sep 15 14:24:03 imap(charlesc): Info: Disconnected: FETCH failed in=105 out=1176 It reports the size of the message changes, too, which is odd, as running the filters manually confirms the output is identical to the input. mail-filter.sh attached; mail-filter-out.sh is identical except using a different temp file name to avoid clashes. Am I doing something wrong? How can I prevent this "Corrupted index cache file" problem? Thanks, Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------

1 1

[Dovecot] SELECT: Bug in untagged response
by Michael M Slusarz 21 Sep '13

21 Sep '13

Dovecot 2.2.5 In selected state: C: 1 SELECT &#-&#/# S: 1 NO Mailbox name is not valid mUTF-7 S: * OK [CLOSED] Previous mailbox closed. I can verify that this only seems to happen when the mailbox name is incorrect mUTF-7. Things work fine if I access a non-existent mailbox: C: 1 SELECT non-existent-mailbox S: * OK [CLOSED] Previous mailbox closed. S: a NO Mailbox doesn't exist: non-existent-mailbox FYI: Switching to Dave C's workaround discussed here -- http://mailman2.u.washington.edu/pipermail/imap-protocol/2005-September/000… -- regarding servers that don't support UNSELECT. This would normally never happen on Dovecot since it supports UNSELECT; I'm intentionally ignoring that capability for testing purposes. I'm not pipelining a CLOSE with the above SELECT command, like Dave suggests, because the likelihood this SELECT will be successful is about zero and I'd rather avoid a BAD response to a CLOSE command, since it is plausible that a server could issue a CLIENTBUG response for a client that is trying to CLOSE a mailbox in Authenticated State. (Granted, a server could also plausibly issue a CLIENTBUG for identifying a mailbox in incorrect mUTF-7 also, but whatever.) michael

2 1

[Dovecot] Mountpoints with auto mounter
by Steffen Kram 21 Sep '13

21 Sep '13

Hi, I'm running dovecot on a OmniOS installation and I'm wondering what I can do about all those mount point warnings in my logfile. The problem occurs because of the running auto-mounter which manages my mail directories. Isn't it possible for dovecot just try to access the directories before logging an error message. Shall I remove the corresponding mount points from the list of tracked mount points with the doveadm mount-command? The documentation does say nothing about situation with an active auto mounter. Thanks for any suggestions. Cheers, Steffen

3 4

[Dovecot] zlib_save per-user or per-mailbox?
by /dev/rob0 21 Sep '13

21 Sep '13

We'd like to be able to activate zlib_save per-user or per-mailbox, but it seems to be global, all or nothing. Search of this list revealed a comment from Timo in 2012: http://www.dovecot.org/list/dovecot/2012-March/064909.html where he was thinking that compression per-namespace would be a worthy feature. Was that done? I'm in the process of replacing a 2.0 system with 2.2 EE. The old system had zlib_save activated, but seems to deliver to maildirs without compression. Does a userdb_mail entry override global zlib_save? (I'm about to test that, but duh, I am asking first.) Thanks. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

2 2

[Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 21 Sep '13

21 Sep '13

Hello there, I'm pretty sure I found a bug in latest Dovecot 2.2.5.5 (EE) when playing with the doveadm command. Naturally renaming a users mail folder should be done via "doveadm es consistent. So when using "doveadm rename" trying to rename a folder with special characters e.g. german umlauts like "Ã¤" it seems to create the folder wrongly in the filesystem. Example: When I want to rename a users folder 'geschaftliches' to 'gesch&AOQ-ftliches' ("&AOQ-" is the correct mUTF-7 encoding for "Ã¤") using the command doveadm mailbox rename -u user 'geschaftliches' 'gesch&AOQ-ftliches' it ends up in the filesystem renamed as "gesch&-AOQ-ftliches" which has an falsely added "-" set after the "&" and therefore the folder is also wrongly shown in Mailclients like Thunderbird or web-mail systems like Horde. (Apparently "doveadm rename" supports only UTF-8 which shows up when trying to rename the folder with "doveadm mailbox rename -u user 'geschÃ¤ftliches'" I get the error message "Fatal: Mailbox name not valid UTF-8: geschÃ¤ftliches") To get things worse, when renaming the mailfolder in Thunderbird to "geschÃ¤ftliches" it gets correctly written in the filesystem as "gesch&AOQ-ftliches" - but afterwards it's NOT found anymore in the dovecot index, e.g. when trying doveadm force-resync -u user it is not listed anymore (until back-renaming in fs to the name it was indexed before). This problem can be reproduced. Can you please fix this? (Not sure if this might change - maybe add an option to support UTF-7 similar to doveadm mailbox list "-7" option) Thanks in advance, Megodin My (relevant part) dovecot configuration (dovecot -n): mailstorage @ NFS with nfsvers=3 (NetApp) # 2.2.5.5 (e5350245ad9b): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) nfs auth_cache_size = 10 M auth_cache_ttl = 10 mins auth_debug = yes auth_master_user_separator = * auth_username_format = %n auth_verbose = yes disable_plaintext_auth = no listen = * lock_method = dotlock mail_debug = yes mail_fsync = always mail_gid = vmail mail_home = /mnt/placeholder/%u mail_location = sdbox:/mnt/placeholder/%u/mailstore mail_plugins = " quota fts fts_lucene" mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes passdb { args = /etc/dovecot/users.blocked deny = yes driver = passwd-file } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_lucene = whitespace_chars=@. quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=98%% quota-warning 98 %u sieve = /mnt/placeholder/%u/.dovecot.sieve sieve_dir = /mnt/placeholder/%u/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = postmaster(a)example.com protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vmail user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </example.pem ssl_key = </example2.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } verbose_proctitle = yes verbose_ssl = yes protocol lda { mail_plugins = " quota fts fts_lucene sieve" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = " quota fts fts_lucene imap_quota" } --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

Re: [Dovecot] Migrating from dovecot 2.1 to 2.2
by megodin＠inboxalias.com 21 Sep '13

21 Sep '13

Hey there micah, assuming you have your Dovecot set up using virtual users, I would advise you to use imapsync for that. It does incremental and recursive IMAP transfers from one mailbox to another (on different servers too). As it doesn't make a file copy, but let the two dovecot servers talk directly to each other via IMAP, all your mails with all flags, dates etc. will be preserved on the destination system exactly like on your source system. In your case also the indexes will be written on the fast system automatically by Dovecot 2.2.5 (if configured to do so), so this might do exactly what you are looking for. I have myself successfully transferred over 35000 accounts with imapsync (with very few problems, almost all of them because of corrupt mailboxes or special character encoding problems occured through former use of weird obsolete mail clients) and can highly recommend it. Best regards and good luck, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 20 Sep '13

20 Sep '13

What the heck, I don't get it... seems like it's bug's day for me today... the d*mn freenet web-mailclient omitted half of the sentence on exact the same part *again* - so I split it to several lines and omit some quotes... Hope this is the last try to get the _whole_ message out: Naturally renaming a users mail folder should be done via doveadm rename - and not via filesystems "mv" command - to keep dovecot indexes consistent. So sorry again for all that additional reading garbage (forum admins, please feel free to fill in the correct sentence to my original post and delete the 2 correction posts). Seems like a have to write another bug report to freenet admins... (sigh) Sorry again, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

Re: [Dovecot] Bug report: "doveadm rename" encodes special characters wrongly in mUTF-7 (in fs)
by megodin＠inboxalias.com 20 Sep '13

20 Sep '13

Sorry, it seems like some part of the sh*tty freenet webmailer omitted half of my second sentence of the message I just posted before... . ..so please replace the weird sentence: "Naturally renaming a users mail folder should be done via "doveadm es consistent." with: "Naturally renaming a users mail folder should be done via "doveadm es consistent." Sorry for confusion, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] dovecot v-2.0, postfix+mysql configuration issue.
by Vimuth 20 Sep '13

20 Sep '13

Greetings Gentlemen, Im in the attempt of configuring a postfix mail server on RHEL6.2 with the said components in the subject. I followed a couple of guides and I beleive that Im almost there, but I get the following error when I try to send a mail to a user who is in the mysql database as follows, Dovecot version that is being used is 2.0.X. echo test | mail vimuth(a)mydomain.rock [root@box1 ~]# tail -f /var/log/maillog Mar 26 07:00:44 box1 dovecot: auth: Error: sql(vimuth(a)mydomain.rock): User query failed: Table 'mailserver.users' doesn't exist (using built-in default user_query: SELECT home, uid, gid FROM users WHERE username = '%n' AND domain = '%d') Mar 26 07:00:44 box1 dovecot: lda: Error: user vimuth(a)mydomain.rock: Auth USER lookup failed Mar 26 07:00:44 box1 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Mar 26 07:00:44 box1 postfix/pipe[6291]: A9E0E23B96: to=<vimuth(a)mydomain.rock>, relay=dovecot, delay=14255, delays=14255/0.02/0/0.12, dsn=4.3.0, status=deferred (temporary failure) Mar 26 07:05:44 box1 postfix/qmgr[5675]: 2E5AD23B66: from=<root(a)box1.mydomain.rock>, size=421, nrcpt=1 (queue active) Mar 26 07:05:44 box1 dovecot: auth: Error: mysql: Query failed, retrying: Table 'mailserver.users' doesn't exist Mar 26 07:05:44 box1 dovecot: auth: Error: sql(vimuth(a)mydomain.rock): User query failed: Table 'mailserver.users' doesn't exist (using built-in default user_query: SELECT home, uid, gid FROM users WHERE username = '%n' AND domain = '%d') Mar 26 07:05:44 box1 dovecot: lda: Error: user vimuth(a)mydomain.rock: Auth USER lookup failed Mar 26 07:05:44 box1 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Mar 26 07:05:44 box1 postfix/pipe[6312]: 2E5AD23B66: to=<vimuth(a)mydomain.rock>, relay=dovecot, delay=16007, delays=16007/0.03/0/0.08, dsn=4.3.0, status=deferred (temporary failure) As I understand, this has something to do with the way I have setup my database. Im gonna post what are in my most important configuration files and also of course in the database. here's *"/etc/dovecot/dovecot-sql.conf.ext"* driver = mysql connect = host=127.0.0.1 dbname=mailserver user=mailuser password=redhat default_pass_scheme = MD5 password_query = SELECT email as user, password FROM virtual_users WHERE email='%u'; here's */etc/postfix/main.cf* # TLS parameters smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_tls_key_file = /etc/pki/tls/private/smtpd.key smtpd_tls_cert_file = /etc/pki/tls/smtpd.crt smtpd_tls_CAfile = /etc/pki/tls/certs/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom # set smtpd restrictions smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination</pre> virtual_mailbox_domains = mysql:/etc/postfix/ mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf mailbox_command = /usr/libexec/dovecot/deliver mailbox_transport = dovecot virtual_transport = dovecot dovecot_destination_recipient_limit = 1 Now to the *database * mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | mail | | mailserver | | mysql | +--------------------+[ mysql> use mailserver; Database changed mysql> select * from mailserver; mysql> show tables; +----------------------+ | Tables_in_mailserver | +----------------------+ | virtual_aliases | | virtual_domains | | virtual_users | +----------------------+ mysql> select * from virtual_users; +----+-----------+----------------------------------+----------------------+ | id | domain_id | password | email | +----+-----------+----------------------------------+----------------------+ | 1 | 1 | e2798af12a7a0f4f70b4d69efbc25f4d | vimuth(a)mydomain.rock | +----+-----------+----------------------------------+----------------------+ 1 row in set (0.00 sec) Please can someone help. If you need more information please let me know. I'm ready to tear down the entire implementation and start from the scratch. Many thanks in advance. /Vimuth

5 5

[Dovecot] Ring SYNC appears to have got lost, resending after upgrade
by Patrick Westenberg 20 Sep '13

20 Sep '13

Hi @all, on Saturday I upgraded two dovecot servers from squeeze to wheezy and dovecot from 2.1.x to 2.2.5 (compiled from sources). After the upgrade everything worked fine at first. On Sunday Morning I recognized these errors (they occured after a reload for logging purpose on midnight) on one server: director: Error: Ring SYNC appears to have got lost, resending After reloading/restarting both dovecot services the error occured on both servers. After some research I deleted some "zlib"-File which isn't needed anymore in dovecot 2.2.x and reinstalled dovecot. The error message disappeared. Today the error occured again (after the reload on midnight) and again on one node only until reloading/restarting the other node too. However, there is an additional error message: Sep 09 10:27:07 director: Error: Ring SYNC appears to have got lost, resending Sep 09 10:27:10 director: Panic: file login-connection.c: line 88 (login_host_callback): assertion failed: (strncmp(request->line, "OK\t", 3) == 0) Any ideas? Patrick node1: # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login director_mail_servers = 172.17.1.2 172.17.1.1 director_servers = 172.17.1.3 172.17.1.4 director_user_expire = 5 mins lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.3 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service lmtp { inet_listener lmtp { address = 172.17.1.3 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/certs/wildcard.xxx.crt ssl_key = </etc/ssl/private/wildcard.xxx.key protocol !smtp { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } } protocol smtp { passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } } protocol lmtp { auth_socket_path = director-userdb } node2: # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_mechanisms = plain login director_mail_servers = 172.17.1.2 172.17.1.1 director_servers = 172.17.1.4 172.17.1.3 director_user_expire = 5 mins lmtp_proxy = yes log_path = /var/log/dovecot.log managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 172.17.1.4 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service lmtp { inet_listener lmtp { address = 172.17.1.4 port = 24 } } service managesieve-login { executable = managesieve-login director inet_listener sieve { port = 4190 } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/ssl/certs/wildcard.xxx.crt ssl_key = </etc/ssl/private/wildcard.xxx.key protocol !smtp { passdb { args = proxy=y nopassword=y starttls=any-cert driver = static } } protocol smtp { passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } } protocol lmtp { auth_socket_path = director-userdb }

3 3

[Dovecot] Dovecot antispam plugin
by Davide 19 Sep '13

19 Sep '13

someone use dovecot antispam with crm114? -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

1 0

Re: [Dovecot] Basic clustered filesystem advice
by List 18 Sep '13

18 Sep '13

On 9/18/13 11:20 AM, Tim Groeneveld wrote: > > ----- Original Message ----- >> On 9/17/13 3:23 PM, Andreas Gaiser wrote: >>> Does anybody know about GlusterFS & Dovecot? >>> >>>> Time marches on, and I need to continue the service migration. I'd >>>> still >>>> like to use Dovecot (we're migrating away from Cyrus). I'm >>>> assuming the >>>> only other alternative without existing shared storage is to use >>>> DRBD >>>> and a cluster file system to provide the replication, and to >>>> ensure >>>> Director is enabled. Are there any things to watch for >>>> surrounding >>>> this? > > I still want my dream of the perfect mail storage engine in > dovecot to one day to be true. > > This magical mailbox format & storage engine would allow > storing emails in different geographical locations. There > would be an attempt to ensure that mail is always closest > to the user (ie, the mail server that the user connects > to retrieve email from). > > Then you could define how many copies of each user's mail > would be stored on a per-user basis, but those copies could > be stored on any storage server, but not more then x times > per network location. > > Unfortunately, this mystical engine does not sound like > it is going to be built in the next handful of years at > least. > > A man can dream. > > Regards, > Tim > > > > Tim, I too have had this dream but it feels very much like people just don't care about Geo-distributed messaging at scale. Since Dovecot now supports storing messages in s3 compatible storage (using obox) I was thinking about extending an object storage app I developed using node.js on top of Cassandra to implement the s3 API and see if that could breath some life into this concept. When time permits I suppose.

1 0

[Dovecot] passwd-file and MySQL
by Paolo 17 Sep '13

17 Sep '13

Speaking about multiple DB ... A my customer has a server (CentOS 6.x, dovecot 2.0.x, postfix, Squirrel+RoundCube with vacation and password plug-in), with about 3.000 users (about 200 different domains), all defined as system users and home as /home/mail/%user% The system works fine. Its only additional interest is authenticating users like user(a)domain.tld / password (maintaining also the current user.domain / password). Is it possible and How complex configuring a similar environment? Only matter of sync /etc/shadow and DB or other problems? Regards, Paolo

3 2

[Dovecot] both passwd-file and MySQL
by Andreas Meyer 16 Sep '13

16 Sep '13

Hello all! Wondering if it is possible to use a flat passwd-file for some domains and for some other a MySQL-database for queries? All of our domains are handled by passdb { args = /etc/dovecot/passwd driver = passwd-file } userdb { args = /etc/dovecot/passwd driver = passwd-file } Can one use MySQL in addition for another domain? Greetings Andreas

2 3

[Dovecot] Dovecot 2.1.1 crash
by List 16 Sep '13

16 Sep '13

Dovecot RPM from atrpms crashed, here are the logs: Aug 31 11:55:08 10.123.128.231 dovecot: imap(user@domain): Panic: Message count decreased Aug 31 11:55:08 10.123.128.231 dovecot: imap(user@domain): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x4184a) [0x7f144f00384a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x41896) [0x7f144f003896] -> /usr/lib64/dovec ot/libdovecot.so.0(+0x1934a) [0x7f144efdb34a] -> dovecot/imap() [0x417ba9] -> dovecot/imap() [0x40a636] -> dovecot/imap() [0x40a96c] -> dovecot/imap(command_exec+0x3d) [0x410a5d] -> dovecot/imap(client_command_cancel+0x3a) [0x40f3da] -> dovecot/imap(client_destroy+0xdd) [0x41025d] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f144f00fd16] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f144f010d9f] -> /usr/lib64/dovecot/libdovecot.s o.0(io_loop_run+0x28) [0x7f144f00fcb8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f144effc0d3] -> dovecot/imap(main+0x29d) [0x418a0d] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7f144ec4dcdd] -> dovecot/imap() [0x408469] Aug 31 11:55:09 10.123.128.231 dovecot: imap(user@domain): Fatal: master: service(imap): child 20986 killed with signal 6 (core dumps disabled) Doveconf -n: # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_master_user_separator = * auth_mechanisms = plain login disable_plaintext_auth = no first_valid_uid = 300 mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/sql.conf.ext driver = sql } service imap-login { inet_listener imap { port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service pop3-login { inet_listener pop3 { port = 110 } process_min_avail = 4 service_count = 0 vsz_limit = 128 M } ssl_ca = </usr/local/admin/certs/wildcard.ca ssl_cert = </usr/local/admin/certs/wildcard.crt ssl_key = </usr/local/admin/certs/wildcard.key userdb { args = /etc/dovecot/telco-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 30 }

2 1

[Dovecot] Dovecot replies with default SSL certificate instead of the vhost's
by Shadi Habbal 16 Sep '13

16 Sep '13

Hello, I'm using dovecot v2.0.21. According to http://wiki2.dovecot.org/SSL/DovecotConfiguration,dovecot 2.x supports different SSL certificate for different virtual hosts by using "local_name" directive, but I can't get it to work. When testing the certificate using "openssl s_client -connect domain.com:pop3s" I get the default certificate instead of domain.com's.----------------------------------------------------------------------------Here is the my dovecot.conf:# 2.0.21: /etc/dovecot/dovecot.conf# OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_master_user_separator = *auth_mechanisms = PLAIN LOGINdict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf}first_valid_uid = 2000last_valid_uid = 2000listen = *log_path = /var/log/dovecot.logmail_gid = 2000mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/mail_plugins = quotamail_uid = 2000managesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavenamespace { inbox = yes location = prefix = separator = / type = private}namespace { list = children location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared}passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}passdb { args = /etc/dovecot/dovecot-master-users-password driver = passwd-file master = yes}plugin { acl = vfile acl_shared_dict = proxy::acl auth_socket_path = /var/run/dovecot/auth-master autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = /%Lh/sieve/dovecot.sieve sieve_dir = /%Lh/sieve sieve_global_dir = /var/vmail/sieve sieve_global_path = /var/vmail/sieve/dovecot.sieve}protocols = pop3 imap sieveservice auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail }}service dict { unix_listener dict { group = vmail mode = 0660 user = vmail }}service imap-login { process_limit = 500 service_count = 1}service pop3-login { service_count = 1}service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail }}ssl = requiredssl_cert = </etc/pki/tls/certs/iRedMail_CA.pemssl_key = </etc/pki/tls/private/iRedMail.keyuserdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}verbose_ssl = yesprotocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/sieve.log mail_plugins = quota sieve autocreate postmaster_address = root}protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota autocreate}protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv}local_name nourcc.com { ssl_ca = </etc/ssl/comodo.ca.crt ssl_cert = </etc/pki/tls/certs/nourcc.com.pem ssl_key = </etc/pki/tls/private/nourcc.com.key}local_name rockmetal-ae.com { ssl_ca = </etc/ssl/comodo.ca.crt ssl_cert = </etc/pki/tls/certs/rockmetal-ae.com.pem ssl_key = </etc/pki/tls/private/rockmetal-ae.com.key}local_name alliance-sir.com { ssl_ca = </etc/ssl/comodo.ca.crt ssl_cert = </etc/pki/tls/certs/alliance-sir.com.pem ssl_key = </etc/pki/tls/private/alliance-sir.com.key}----------------------------------------------------------------------------Here are my certs permissions, just in case:[root@epm certs]# ll /etc/ssl/comodo.ca.crt-rw-r--r-- 1 root root 6668 Sep 14 21:51 /etc/ssl/comodo.ca.crt[root@epm certs]# ll /etc/pki/tls/certs/nourcc.com.pem-rw-r--r-- 1 root root 1801 Sep 10 00:00 /etc/pki/tls/certs/nourcc.com.pem[root@epm certs]# ll /etc/pki/tls/private/nourcc.com.key-rw------- 1 root root 1708 Sep 15 19:37 /etc/pki/tls/private/nourcc.com.key----------------------------------------------------------------------------Here is my openssl test output:$ openssl s_client -connect nourcc.com:pop3sCONNECTED(00000003)depth=0 C = SY, O = epm.nourcc.com, OU = IT, CN = epm.nourcc.com, emailAddress = root(a)epm.nourcc.comverify error:num=18:self signed certificateverify return:1depth=0 C = SY, O = epm.nourcc.com, OU = IT, CN = epm.nourcc.com, emailAddress = root(a)epm.nourcc.comverify return:1.......................... blah blah blah ......................... so I'm not sure, is there a certain way for doing it that I overlooked? Thanks.

5 10

[Dovecot] Can't download emails with large file attachment
by prabin 16 Sep '13

16 Sep '13

Hi, I am using CentOS 5.9 with postfix+dovecot v1.0.7 I have problem in downloading emails with attachment of more than 3MB via my email client. (Thunderbird, Outlook, etc) I can send emails out with more than 3MB without any problem, whereas i can't download emails. Following are the errors i found on maillog *dovecot: pop3-login: SSL_write() syscall failed: Bad file descriptor** **dovecot: impa-login: SSL_write() syscall failed: Bad file descriptor* After this the email client stops downloading emails. What could be the problem ? Please help me fix this . Thank You * **dovecot version: dovecot-1.0.7-8.el5_9.1** **openssl version: openssl-0.9.8e-26.el5_9.1** **CentOS 5.9* dovecot: POP3(support1): Disconnected top=0/0, retr=1/0, del=0/17, size=57279820 *Sep 16 17:25:56 mail dovecot: pop3-login: SSL_write() syscall failed: Bad file descriptor [110.44.xx.xx]* dovecot -n # 1.0.7: /etc/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S listen(default): 61.xx.xx.XX:143 listen(imap): 61.xx.xx.XX:143 listen(pop3): 61.xx.xx.XX:110 ssl_listen(default): 61.xx.xx.XX:993 ssl_listen(imap): 61.xx.xx.XX:993 ssl_listen(pop3): 61.xx.xx.XX:995 ssl_cert_file: /etc/pki/tls/certs/dovecot.pem ssl_key_file: /etc/pki/tls/private/dovecot.pem ssl_cipher_list: ALL:!LOW verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 512 mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes debug_passwords: yes passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

1 0

[Dovecot] Change mail_location for one user?
by Scott Galambos 16 Sep '13

16 Sep '13

Hello, I'm running the latest version of dovecot on Linux with mbox mailboxes. Everything works fine. So in my dovecot config I have mail_location = mbox:~/mail:INBOX=/var/mail/%u I would like to now change the mail_location for one user in an attempt to slowly migrate to Maildir format. I'm confused how to do this. I'm running shadow passwords: $: doveconf -n passdb passdb { driver = shadow } Testing any given user gives: $: dovecot user sarah field value uid 1478 gid 116 home /home/sarah mail mbox:~/mail:INBOX=/var/mail/sarah system_groups_user sarah What would I have to do to make only sarah's mail_location ~/Maildir now? My userdb is: $: doveconf -n userdb userdb { driver = passwd } I tried following the wiki's but its confusing. Thanks for any help or tips.

5 7

[Dovecot] Unable to use dovecot-antispam plugin
by Xavier Claude 14 Sep '13

14 Sep '13

Hello everybody, I'm trying to use the Dovecot antispam on Debian Wheezy (dovecot version 2.1.7), but it's not working, each time I put a mail in the "Spam" folder, it is send in its original folder. What bother me the most is that I don't see anything in the log. Here is my dovecot config related to the antispam plugin : plugin { antispam_allow_append_to_spam = yes antispam_backend = dspam antispam_debug_target = syslog antispam_dspam_args = --user;%Lu;--deliver=spam,innocent;--source=error;--signature=%%s antispam_dspam_binary = /usr/bin/dspam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = SPAM;Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocol imap { mail_plugins = " antispam" } And in the log, the only thing I see is the plugin initialization : Jul 27 13:18:05 twoflowers imap: antispam: plugin initialising (2.0-notgit) Jul 27 13:18:05 twoflowers imap: antispam: "SPAM" is exact match spam folder Jul 27 13:18:05 twoflowers imap: antispam: "Spam" is exact match spam folder Jul 27 13:18:05 twoflowers imap: antispam: no unsure folders Jul 27 13:18:05 twoflowers imap: antispam: "trash" is exact match trash folder Jul 27 13:18:05 twoflowers imap: antispam: "Trash" is exact match trash folder Jul 27 13:18:05 twoflowers imap: antispam: "Deleted Items" is exact match trash folder Jul 27 13:18:05 twoflowers imap: antispam: " Deleted Messages" is exact match trash folder Jul 27 13:18:05 twoflowers imap: antispam: allowing APPEND to spam folders Jul 27 13:18:05 twoflowers imap: antispam: dspam binary set to /usr/bin/dspam Jul 27 13:18:05 twoflowers imap: antispam: dspam result set to X-DSPAM-Result Jul 27 13:18:05 twoflowers imap: antispam: dspam extra arg --user Jul 27 13:18:05 twoflowers imap: antispam: dspam extra arg xavier Jul 27 13:18:05 twoflowers imap: antispam: dspam extra arg --deliver=spam,innocent Jul 27 13:18:05 twoflowers imap: antispam: dspam extra arg --source=error Jul 27 13:18:05 twoflowers imap: antispam: dspam extra arg --signature=%s Jul 27 13:18:05 twoflowers imap: antispam: signature header line is "X-DSPAM-Signature" Thank you for your help. -- Xavier Claude claude.xavier(a)gmail.com

2 5

[Dovecot] mailbox virtual/All
by Kai Hendry 14 Sep '13

14 Sep '13

Anyone using "mailbox virtual/All" ? Can't get it to work. At best I get an empty folder showing in mutt. Wondering if someone can share their complete working config with me please? This is my conf http://ix.io/838 Thanks!

1 0

[Dovecot] Temporarily disable mail delivery when using Dovecot's LDA
by Avinash Sultanpur 14 Sep '13

14 Sep '13

Hi, How can I disable mail delivery to a user or a mailbox temporarily. Is there something in the lines of qmail where you set a sticky bit on the home directory and mail delivery is deferred? Thanks, Avinash.

2 2

Re: [Dovecot] How to disable SSL and TLSv1.1?
by Reindl Harald 14 Sep '13

14 Sep '13

Am 13.09.2013 22:36, schrieb Darren Pilgrim: > This has kind of wandered out of the scope of the list i don't think so because having a question in public means also everyone reads it understands the real usefulness > On 9/13/2013 3:01 AM, Reindl Harald wrote: >> Am 13.09.2013 11:45, schrieb Darren Pilgrim: >>> On 9/11/2013 3:52 PM, Reindl Harald wrote: >>>> and that is why i said most widely used does not >>>> >>>> RHEL5: openssl-0.9.8e >>>> RHEL6: openssl-1.0.0 >>>> Fedora 17: openssl-1.0.0k >>>> Fedora 18: openssl-1.0.1e >>> >>> RHEL with outdated software bundled? You don't say. ;) >> >> bulls** - google for LTS > > My point is that you don't have to use the stock libraries. My *nix of choice, FreeBSD, still has 0.9.8 in the > current releases. Luckily there's 1.0.1e in ports and the framework makes it easy to switch port builds between > the base and port libraries. There are 1.0.1e packages for every Linux distro I've checked. my point is that it does not help much if you have the best of all available encryptions on your IMAP server because all the messages you receive pass the wire and since you can't disable SSL/TLSv1.0/TLS1.1 on the MTA side or if you do so you receive a lot of messages *completly unecnrypted* because the sending MTA falls back >>> Firefox and Thunderbird currently ship with TLS 1.1/1.2 support, >>> but not enabled by default >> >> so it is nut relevant > > How is TLS 1.1 and 1.2 support in one of the most popular suites of software not relevant? "but not enabled by default" is not relevant in the reality except you are the only user of your private server and even if see above what benefit do you have from TLS1.2 if the message passed the wire with SSL3 or unencrpyted at all > Sure, it's not enabled by default, but those of us working proactively can enable it taht will not go to happen for the majority of users > On by default simply means the feature has matured to the point where the cost of > supporting the general userbase is reasonably small. on by default means the ordinary users will use it off by default means the ordinary users will not use it >> as long the support for Windows XP is active and it comes to business >> you have to support it - period > > Yeah I know. Fortunately XP is EoS in less than a year. and until then it doe snot help much I will be very happy to see it and all of it creaky > legacy inanity go away. me too, and if it's only about having SSL-webhosts without a dedicated IP currently you can't use SNI in case of business websites as well as you can't disable SSL/TLS1.1/TLS1.2 as long you have potentially customers with WinXP/Outlook2003 and as long they are supported with updates you can't force a customer to upgrade >> fine but what helps 1.1 in case someone asks how to disable it - read >> the subject > > The subject line should have read TLSv1.0. Sorry for the typo. > FWIW, the body of my original email correctly said > I wanted to disable TLSv1.0, not 1.1 while it's not that hardliner attitude to at least support TLS1.1 i think i explained now well the non existing benefits in what you are doing if you think about the complete way a e-mail goes and in case you are not the only user of the server it's impossible to do so without lose customers or get a lot of complaints until you revert the settings

1 0

[Dovecot] Migrating from dovecot 2.1 to 2.2
by Micah Anderson 13 Sep '13

13 Sep '13

Due to the incompatibilities with the dsync protocol version between 2.1 and 2.2, I am unable to use dsync to move users to a new machine where we have 2.2.5 setup. This wouldn't normally be a problem, as I could just rsync the user's mdbox and dovecot would happily do the right thing. However, on the new system I've placed the indexes into a faster storage medium, where on the older system the indexes were included in their mail directory. I can rsync over the entire thing, including their old indexes, and dovecot will try to do the right thing and build new indexes, but what happens is all mail is marked as unread, and I get some old index cruft left around in the directories. How can I preserve the seen/unseen flags in such a migration? Thanks! micah

2 1

[Dovecot] Antispam plugin / sa-learn
by Mathieu R. 13 Sep '13

13 Sep '13

Hello, Sorry for posting on both list spamassassin and dovecot : my question is on dovecot antispam plugin, used to learn spamassassin with sa-learn. I wonder if there is a way to confirme sa-learn is correctly feeded by the antispam plugin. dovecot version : 2.1.7 spamassassin version : 3.3.2 (both packaged in debian stable, with postfix and amavis) i configured dovecot's antispam plugin this way : plugin { ... #Antispam antispam_debug_target = syslog antispam_verbose_debug = 1 antispam_backend = pipe antispam_trash = Trash antispam_spam = Junk antispam_allow_append_to_spam = no antispam_pipe_program = /srv/datadisk01/bin/sa-learn-pipe.sh antispam_pipe_program_spam_arg = --spam antispam_pipe_program_notspam_arg = --ham } refering to : http://wiki2.dovecot.org/Plugins/Antispam using that script to pipe message to sa-learn : #!/bin/sh echo /usr/bin/sa-learn $* /tmp/sendmail-msg-$$.txt ; echo "$$-start ($*)" >> /tmp/sa-learn-pipe.log ; #echo $* > /tmp/sendmail-parms.txt ; cat<&0 >> /tmp/sendmail-msg-$$.txt ; /usr/bin/sa-learn $* /tmp/sendmail-msg-$$.txt ; rm -f /tmp/sendmail-msg-$$.txt ; echo "$$-end" >> /tmp/sa-learn-pipe.log ; exit 0; here is what i got when i move a mail to Junk folder : Sep 11 18:10:10 effraie01 imap: antispam: plugin initialising (2.0-notgit) Sep 11 18:10:10 effraie01 imap: antispam: verbose debug enabled Sep 11 18:10:10 effraie01 imap: antispam: "Junk" is exact match spam folder Sep 11 18:10:10 effraie01 imap: antispam: no unsure folders Sep 11 18:10:10 effraie01 imap: antispam: "Trash" is exact match trash folder Sep 11 18:10:10 effraie01 imap: antispam: pipe backend spam argument = --spam Sep 11 18:10:10 effraie01 imap: antispam: pipe backend not-spam argument = --ham Sep 11 18:10:10 effraie01 imap: antispam: pipe backend program = /srv/datadisk01/bin/sa-learn-pipe.sh Sep 11 18:10:10 effraie01 imap: antispam: pipe backend tmpdir /tmp Sep 11 18:11:10 effraie01 imap: antispam: plugin initialising (2.0-notgit) Sep 11 18:11:10 effraie01 imap: antispam: verbose debug enabled Sep 11 18:11:10 effraie01 imap: antispam: "Junk" is exact match spam folder Sep 11 18:11:10 effraie01 imap: antispam: no unsure folders Sep 11 18:11:10 effraie01 imap: antispam: "Trash" is exact match trash folder Sep 11 18:11:10 effraie01 imap: antispam: pipe backend spam argument = --spam Sep 11 18:11:10 effraie01 imap: antispam: pipe backend not-spam argument = --ham Sep 11 18:11:10 effraie01 imap: antispam: pipe backend program = /srv/datadisk01/bin/sa-learn-pipe.sh Sep 11 18:11:10 effraie01 imap: antispam: pipe backend tmpdir /tmp Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_unsure(Junk): 0 Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_trash(INBOX): 0 Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_trash(Junk): 0 Sep 11 18:12:04 effraie01 imap: antispam: mail copy: from trash: 0, to trash: 0 Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_spam(INBOX): 0 Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_spam(Junk): 1 Sep 11 18:12:04 effraie01 imap: antispam: mailbox_is_unsure(INBOX): 0 Sep 11 18:12:04 effraie01 imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 Sep 11 18:12:04 effraie01 imap: antispam: running mailtrain backend program /srv/datadisk01/bin/sa-learn-pipe.sh Sep 11 18:12:04 effraie01 imap: antispam: running mailtrain backend program /srv/datadisk01/bin/sa-learn-pipe.sh Sep 11 18:12:04 effraie01 imap: antispam: running mailtrain backend program parameter 1 --spam and here is what i got in /tmp/sa-learn-pipe.log: 10545-start (--spam) 10545-end For me, it's working, but when i run sa-learn --backup, i just get this : v 3 db_version # this must be the first line!!! v 0 num_spam v 0 num_nonspam it's probably cause i'm using ***STANDARD-ANTI-UBE-TEST-EMAIL*** wich probably teach nothing to sa-learn, but i wonder if i can find somewher a log or something confirming sa-learn correctly get the email i pipe to it. thanks a lot in advance -- Mathieu

3 4

[Dovecot] Plugin antispam - mailtrain realtime sa-learn
by Hans Spaans 13 Sep '13

13 Sep '13

Hi, On Dovecot Wiki2[1] it is written that you need a wrapper script for sa-learn as it shouldn't support pipped input, but that is supported since SpamAssassin 2.6 at least. As far as I can see and test, the following config makes it work without a wrapper script. Can someone confirm it before the wiki is updated? plugins { antispam_backend = pipe antispam_trash = Trash antispam_spam = Junk antispam_mail_spam = --spam antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/bin/sa-learn } Hans [1] http://wiki2.dovecot.org/Plugins/Antispam

2 1

[Dovecot] Where's Dovecot's ports?
by Mohsen Pahlevanzadeh 12 Sep '13

12 Sep '13

Dear all, I installed "dovecot dovecoot-mysql postfix and postfix-mysql" from debian repository 7. I start them with "/etc/init.d/postfix start" and "/etc/init.d/dovecot start" but When i use nmap localhost I see the following output: root@sito:/etc/dovecot# nmap localhost Starting Nmap 6.00 ( http://nmap.org ) at 2013-09-12 07:35 IRDT Nmap scan report for localhost (127.0.0.1) Host is up (0.0000030s latency). Other addresses for localhost (not scanned): 127.0.0.1 Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 25/tcp open smtp 80/tcp open http 111/tcp open rpcbind 3128/tcp open squid-http 3306/tcp open mysql My Question is , Where's dovecot ? i don't see its' ports....

5 8

[Dovecot] adding user for maildir and mail_location
by Mohsen Pahlevanzadeh 12 Sep '13

12 Sep '13

Dear all, I install postfix ,postfix-mysql,dovecot-core,dovecot-mysql,dovecot-pop3,dovecot-imapd and postfixadmin form debian repo. Also i configured postfixadmin. It work fine with mbox storage, But i need to change it to my path/domain/users i saw devecot have mail_location directive. i changed it to : mail_location = maildir:/var/pool/%d/%u My questions are: 1. how can i assign mail_location directive to a maildir storage according to my path and domain/user , such as qmail? 2. i want to mysql, i need to write bash script to add/delete/update for doing them ? or dovecot provides them with command line? 3. What's permission of path in mail_location ? 4. How can i enable mysql in dovecot? My dovceconf -n is: ////////////////////////////////////// # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 mail_location = maildir:/var/pool/Maildir/%d/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } ///////////////////////////////////////////////////// Yours, Mohsen

1 0

[Dovecot] Problem getting a dovecot proxy to connect to another dovecot machine via STARTTLS
by Arnoud van Heuvelen 12 Sep '13

12 Sep '13

Hi, I'm having a bit of a problem trying to setup a dovecot proxy. I have a setup with two nodes. One is a working Dovecot/Postfix mail server (node a). The other is running a dovecot proxy and roundcube webmail. Currently I can telnet to port 143 (or openssl s_client to port 993) to localhost on node b. I can then login to a test account on node a. This all works. However, once I instruct the proxy to use SSL or TLS my problems start. When I try to login on node b (both on port 143 and 993), it will send two TCP packets on port 993 to node a. There is no TLS handshake. Consequently, my telnet session will just hang until dovecot reaches a timeout. It will then disconnect me for inactivity. I can not find any information in the logs. To clarify, the dialog: Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] Dovecot ready. a login atest(a)company.nl test123 * BYE Disconnected for inactivity. I have tried to use the following values in my proxy database: ssl='any-cert', starttls='Y' ssl='any-cert', starttls='any-cert' ssl=NULL, starttls='any-cert' Here is a strace of the imap-login process on node B: http://dpaste.com/1377232/ The illegal seek on line 30 of the strace looked suspicious to me. Here is the corresponding lsof: http://dpaste.com/1377239/ Here is node A's config: http://dpaste.com/1377247/ And here is node B's: http://dpaste.com/1377241/ This is node B's password query: password_query = SELECT NULL AS password, 'Y' AS nopassword, host, 'Y' as proxy, starttls, `ssl`, 10 AS proxy_timeout FROM proxy WHERE domain = '%d' The logs tell me the password query succeeds: Sep 12 16:32:35 auth-worker: Debug: sql(atest(a)company.nl,127.0.0.1): query: SELECT NULL AS password, 'Y' AS nopassword, host, 'Y' as proxy, starttls, `ssl`, 10 AS proxy_timeout FROM proxy WHERE domain = 'company.nl' Sep 12 16:32:35 auth: Debug: client out: OK 1 user= atest(a)company.nl host=31.CENCOR p roxy starttls=Yt ssl=any-cert proxy_timeout=10 pass=test123 Nothing after that. Node A's log gives me this: 2013-09-12 16:26:51 imap-login: Info: Disconnected (no auth attempts): rip=149.CENCORED, lip=31.CENCORED, TLS handshaking: Disconnected I'm running out of ideas. If anyone would be able to help I would be extremely grateful. Regards, Arnoud van Heuvelen

1 0

[Dovecot] 2.2.4 + metadata plugin: autoconf failed
by Andreas Schulze 12 Sep '13

12 Sep '13

Hello, (had disabled maildelivery for the list, so I can't reply) I changed the minimal version from 2.65 to 2.59 then I run ./autogen.sh && ./configure --foo ... sles9: (autoconf-2.59) ---------------------- + cd dovecot-metadata-plugin-2a17386d4dbc + ./autogen.sh + creating m4/ ... + running autoreconf ... configure.ac:13: error: possibly undefined macro: AC_PROG_CC_C99 If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. autoreconf: /usr/bin/autoconf failed with exit status: 1 sles10: (autoconf-2.59) ----------------------- + cd dovecot-metadata-plugin-2a17386d4dbc + ./autogen.sh + creating m4/ ... + running autoreconf ... configure.ac:13: error: possibly undefined macro: AC_PROG_CC_C99 If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. autoreconf: /usr/bin/autoconf failed with exit status: 1 sles11: (autoconf-2.63) ----------------------- + cd dovecot-metadata-plugin-2a17386d4dbc + ./autogen.sh + creating m4/ ... + running autoreconf ... libtoolize: putting auxiliary files in `.'. libtoolize: copying file `./ltmain.sh' libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'. libtoolize: copying file `m4/libtool.m4' libtoolize: copying file `m4/ltoptions.m4' libtoolize: copying file `m4/ltsugar.m4' libtoolize: copying file `m4/ltversion.m4' libtoolize: copying file `m4/lt~obsolete.m4' configure.ac:7: installing `./config.guess' configure.ac:7: installing `./config.sub' configure.ac:4: installing `./install-sh' configure.ac:4: installing `./missing' src/Makefile.am:33: DOVECOT_PLUGIN_DEPS does not appear in AM_CONDITIONAL src/Makefile.am:41: DOVECOT_PLUGIN_DEPS does not appear in AM_CONDITIONAL src/Makefile.am:10: `dovecot_pkglib_LTLIBRARIES' is used but `dovecot_pkglibdir' is undefined src/Makefile.am: installing `./depcomp' src/Makefile.am:13: variable `libdovecot_metadata_la_SOURCES' is defined but no program or src/Makefile.am:13: library has `libdovecot_metadata_la' as canonic name (possible typo) autoreconf: automake failed with exit status: 1 openSUSE_Factory: (autoconf-2.69) --------------------------------- + cd dovecot-metadata-plugin-2a17386d4dbc + ./autogen.sh + creating m4/ ... + running autoreconf ... libtoolize: putting auxiliary files in `.'. libtoolize: copying file `./ltmain.sh' libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'. libtoolize: copying file `m4/libtool.m4' libtoolize: copying file `m4/ltoptions.m4' libtoolize: copying file `m4/ltsugar.m4' libtoolize: copying file `m4/ltversion.m4' libtoolize: copying file `m4/lt~obsolete.m4' configure.ac:7: installing './config.guess' configure.ac:7: installing './config.sub' configure.ac:4: installing './install-sh' configure.ac:4: installing './missing' src/Makefile.am:33: error: DOVECOT_PLUGIN_DEPS does not appear in AM_CONDITIONAL src/Makefile.am:41: error: DOVECOT_PLUGIN_DEPS does not appear in AM_CONDITIONAL src/Makefile.am:10: error: 'dovecot_pkglib_LTLIBRARIES' is used but 'dovecot_pkglibdir' is undefined src/Makefile.am: installing './depcomp' src/Makefile.am:13: warning: variable 'libdovecot_metadata_la_SOURCES' is defined but no program or src/Makefile.am:13: library has 'libdovecot_metadata_la' as canonical name (possible typo) autoreconf: automake failed with exit status: 1 -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

1 1

Re: [Dovecot] Quota question.
by Bruce Markey 12 Sep '13

12 Sep '13

I think it's something more. Apparently it's not even looking at the database. Not sure what I didn't do. If anyone can point me to a good dovecot / mysql quota how to that would be helpful. Thank you bruce -- Please use PGP, ENCRYPT everything. For information about acquiring a secryption.com account, email me. My public key: https://www.secryption.com/BruceMarkey.asc or https://keyserver.pgp.com

3 2

[Dovecot] SOLVED: dovecot-2.2.5 build failed if openssl < 0.9.8
by Andreas Schulze 12 Sep '13

12 Sep '13

Hello, to build dovecot-2.2.5 on a system based on openssl-0.9.7 I had to apply the attached patch. Maybe it could be applied in the next versions Thanks. -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 1

[Dovecot] Quota question.
by Bruce Markey 12 Sep '13

12 Sep '13

I have quotas setup with dovecot. Everything seems to be running fine. Values show up fine in mysql. I set up Roundcube to show quota amounts, this also works. For some reason it's showing the old value, I had upped a quot I assume that dovecot is reporting this wrong since roundcube talks to dovecot for its info. Imap debug info: [11-Sep-2013 15:57:47 +0000]: [5986] S: A0003 OK List completed. [11-Sep-2013 15:57:47 +0000]: [5986] C: A0004 GETQUOTAROOT INBOX [11-Sep-2013 15:57:47 +0000]: [5986] S: * QUOTAROOT "INBOX" "User quota" [11-Sep-2013 15:57:47 +0000]: [5986] S: * QUOTA "User quota" (STORAGE 81 256000) [11-Sep-2013 15:57:47 +0000]: [5986] S: A0004 OK Getquotaroot completed. [11-Sep-2013 15:57:47 +0000]: [5986] C: A0005 LOGOUT I'm not sure where next to look. I made sure I didn't have a hard defaut value set in 90-quota.conf. Thank you Bruce -- Please use PGP, ENCRYPT everything. For information about acquiring a secryption.com account, email me. My public key: https://www.secryption.com/BruceMarkey.asc or https://keyserver.pgp.com

2 1

[Dovecot] slow dict lookups?
by Anand Kumria 12 Sep '13

12 Sep '13

Hi, I am beginning to see many entries like: Sep 10 21:32:06 mail1 dovecot: imap(user1(a)example1.com): Warning: read(/var/run/dovecot/dict): dict lookup took 20 seconds Sep 10 21:32:11 mail1 dovecot: imap(user2(a)example2.com): Warning: read(/var/run/dovecot/dict): dict lookup took 25 seconds Sep 10 21:32:16 mail1 dovecot: imap(user3(a)example3.com): Warning: read(/var/run/dovecot/dict): dict lookup took 30 seconds Sep 10 21:32:21 mail1 dovecot: imap(user3(a)example3.com): Error: read(/var/run/dovecot/dict) failed: Timeout after 30 seconds Sep 10 21:32:21 mail1 dovecot: imap(user1(a)example1.com): Warning: read(/var/run/dovecot/dict): dict lookup took 25 seconds Sep 10 21:32:21 mail1 dovecot: imap(user4(a)example2.com): Warning: read(/var/run/dovecot/dict): dict lookup took 24 seconds Sep 10 21:32:26 mail1 dovecot: imap(user5(a)example2.com): Warning: read(/var/run/dovecot/dict): dict lookup took 29 seconds What is the best way to look into making dict lookups faster? In my case the dict is use for user / domain quotas and is looked up via Postgres (on another host). Is there further logging I can enable to see where the problem is? Thanks, Anand

2 1

[Dovecot] question about dovecot-auth
by liuamandy 12 Sep '13

12 Sep '13

hello : i'm new to dovecot-list: i have a question about dovecot auth: the database of dovecot-auth is memcached, when i test 200 users login by imap at the same time, there are some error like this: Is there any Parameter matches wrong ? =====================error========================= Sep 12 10:14:15 IMAP(q56(a)t.com): Info: Quota warning: bytes=1048471142 (90%) messages=0 command=/opt/email/bin/dovecot-quota-warning.sh 90 q56(a)t.com Sep 12 10:14:15 IMAP(q56(a)t.com): Info: Quota warning: bytes=1106719539 (95%) messages=0 command=/opt/email/bin/dovecot-quota-warning.sh 95 q56(a)t.com Sep 12 10:14:16 auth(default): Info: 1111111111111111111111111111!:id:22 OK q148(a)t.com username=q148(a)t.com password={CRYPT}$1$711536ed$Q4xYrsYOS6bVq9mJvNoc40 home=/opt/mail mail=maildir:/opt/mail/t.com/q148/ quota_rule2=*:messages=1111 quota_rule=*:bytes=1164967936 line: OK q148(a)t.com username=q148(a)t.com password={CRYPT}$1$711536ed$Q4xYrsYOS6bVq9mJvNoc40 home=/opt/email mail=maildir:/opt/email/t.com/q148/ quota_rule2=*:messages=1111 quota_rule=*:bytes=1164967936 request:23 Sep 12 10:14:16 auth(default): Error: BUG: Worker sent reply with id 22, expected 23 Sep 12 10:14:16 auth(default): Error: worker-server(q92(a)t.com,127.0.0.1): Aborted: Worker is buggy Sep 12 10:14:16 auth(default): Info: 1111111111111111111111111111!:id:7 OK q32(a)t.com {CRYPT}$1$557ecad6$SOQhh76yfMx4zAIp3KKX61 home=/opt/mail mail=maildir:/opt/mail/t.com/q32 quota_rule2=*:messages=1111 quota_rule=*:bytes=1164967936 username=q32(a)t.com line: OK q32(a)t.com {CRYPT}$1$557ecad6$SOQhh76yfMx4zAIp3KKX61 home=/opt/mail mail=maildir:/opt/mail/t.com/q32 quota_rule2=*:messages=1111 quota_rule=*:bytes=1164967936 username=q32(a)t.com request:7 Sep 12 10:14:16 IMAP(q156(a)t.com): Info: Namespace: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes Sep 12 10:14:16 IMAP(q156(a)t.com): Info: maildir: data=/opt/email/t.com/q156/...ep 12 10:14:21 auth(default): Info: new auth connection: pid=14558 Sep 12 10:14:22 imap-login: Info: Aborted login (auth failed, 1 attempts): user=<q92(a)t.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sep 12 10:14:23 auth(default): Info: new auth connection: pid=14562 Sep 12 10:17:14 imap-login: Info: Disconnected: Inactivity (auth failed, 1 attempts): user=<q148(a)t.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Sep 12 10:17:15 auth(default): Info: new auth connection: pid=14601 ======================concurrent-script======================== my concurrent-login script is: use strict; use warnings; use Net::IMAP::Client; use Getopt::Long; use threads; my %opt = (); GetOptions(\%opt, 'pth_num|n=s'); my $pths = $opt{pth_num}; my $t1 = 0; my $passwd = "qwer1234"; sub thread_fun { my $j = 0; my $count = 2; my $k = $_[0]; my $pid = threads->self()->tid(); while ($count != 0){ my $username = "q$k\(a)t.com"; print "#####$pid $username $passwd #####\n"; my $imap = Net::IMAP::Client->new( server => '127.0.0.1', user => $username, password => $passwd, )or die "can not connect:$@"; $imap->login($username, $passwd) or die ('login failed!'. $imap->last_error); $imap->noop; $imap->select('INBOX'); $imap->noop; $imap->noop; $imap->noop; $imap->noop; $imap->logout; print "------------$username logout------------------\n"; $count--; sleep(1); } print "GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG\n" } my $i = 1; while($pths){ $t1 = threads->create(\&thread_fun, $i); if($pths != 1){ $t1->detach(); } print "create $pths\'s threads\n"; $i++; $pths--; } my $ret = $t1->join(); =========================dovecot.conf====================== my dovecot.conf about auth is:log_path = /var/log/maillog login_processes_count = 128 #listen_start_process login_max_processes_count = 128 login_max_connections = 128 #login_max_connections = 256 max_mail_processes = 1024disable_plaintext_auth = nologin_process_per_connection=yes thanks amandy

1 0

[Dovecot] Double Maildir folders.
by Bruce Markey 11 Sep '13

11 Sep '13

Somehow in setting up quotas and sieve I somehow doubled my maildir. I noticed that when I logged into my webmail I didn't see the folders I created. I went to the actual location and noticed this. Mail location is set correctly in 10-mail.conf mail_location = maildir:/var/vmail/%d/%n/Maildir So I went to /var/vmail/domain/user and saw: drwx------ 8 vmail vmail 4.0K Sep 11 22:08 . drwx------ 4 vmail vmail 4.0K Sep 10 18:40 .. drwx------ 5 vmail vmail 4.0K Sep 11 22:04 .Sent lrwxrwxrwx 1 vmail vmail 21 Sep 11 15:44 .dovecot.sieve -> sieve/roundcube.sieve -rw------- 1 vmail vmail 199 Sep 11 15:45 .dovecot.svbin drwx------ 10 vmail vmail 4.0K Sep 11 18:40 Maildir drwx------ 2 vmail vmail 4.0K Sep 11 19:46 cur -rw------- 1 vmail vmail 51 Sep 11 19:47 dovecot-uidlist -rw------- 1 vmail vmail 8 Sep 11 19:47 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Sep 11 19:46 dovecot-uidvalidity.5230c8a2 -rw------- 1 vmail vmail 248 Sep 11 19:47 dovecot.index.log -rw------- 1 vmail vmail 24 Sep 11 19:47 dovecot.mailbox.log -rw------- 1 vmail vmail 15 Sep 11 22:08 maildirsize drwx------ 2 vmail vmail 4.0K Sep 11 19:46 new drwx------ 3 vmail vmail 4.0K Sep 11 15:44 sieve -rw------- 1 vmail vmail 5 Sep 11 19:47 subscriptions drwx------ 2 vmail vmail 4.0K Sep 11 19:46 tmp Which I shouldn't see correct? Because then in /var/vmail/domain/user/Maildir I see. drwx------ 10 vmail vmail 4.0K Sep 11 18:40 . drwx------ 8 vmail vmail 4.0K Sep 11 22:08 .. drwx------ 5 vmail vmail 4.0K Sep 10 00:23 .Drafts drwx------ 5 vmail vmail 4.0K Sep 11 15:45 .Sent drwx------ 5 vmail vmail 4.0K Sep 10 01:08 .Spam drwx------ 5 vmail vmail 4.0K Sep 11 15:46 .Test Folder drwx------ 5 vmail vmail 4.0K Sep 11 15:57 .Trash drwx------ 2 vmail vmail 4.0K Sep 11 01:37 cur -rw------- 1 vmail vmail 52 Sep 11 09:17 dovecot-uidlist -rw------- 1 vmail vmail 8 Sep 11 15:45 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 Sep 10 00:17 dovecot-uidvalidity.522e6523 -rw------- 1 vmail vmail 600 Sep 10 23:08 dovecot.index -rw------- 1 vmail vmail 39K Sep 11 01:37 dovecot.index.cache -rw------- 1 vmail vmail 21K Sep 11 09:17 dovecot.index.log -rw------- 1 vmail vmail 120 Sep 11 15:44 dovecot.mailbox.log -rw------- 1 vmail vmail 20 Sep 11 18:40 maildirsize drwx------ 2 vmail vmail 4.0K Sep 11 00:16 new -rw------- 1 vmail vmail 35 Sep 11 15:44 subscriptions drwx------ 2 vmail vmail 4.0K Sep 11 00:13 tmp I went through all the conf files under /etc/dovecot/conf. and made sure I hadn't missed something. As above the maildir is correct. The only two places I can think are 90-plugin.conf which are my sieve settings. plugin { # The location of the user's active script: sieve = ~/.dovecot.sieve # If the user has no personal active script (i.e. if the file # indicated in sieve= does not exist), use this one: sieve_global_path = /var/lib/dovecot/sieve/default.sieve # The include extension fetches the :personal scripts from this # directory. When ManageSieve is used, this is also where scripts # are uploaded. sieve_dir = ~/sieve # The include extension fetches the :global scripts from this # directory. sieve_global_dir = /var/lib/dovecot/sieve/global/ } But I don't see how that would affect it. And the password and user queries were changed for the quotas. password_query = SELECT username AS user, password,CONCAT('/var/vmail/', maildir) AS userdb_home,\ '5000' AS userdb_uid, '5000' AS userdb_gid,\ concat('*:storage=', quota) AS userdb_quota_rule\ FROM mailbox WHERE username='%u' AND domain='%d' AND active=1 user_query = SELECT CONCAT('/var/vmail/', maildir) AS home, 'maildir:~/' as mail, '5000' AS uid, '5000' AS gid,\ concat('*:storage=', quota) AS quota_rule\ FROM mailbox WHERE username='%u' AND domain='%d' AND active=1 maildir in the mailbox is domain/user/ <- do I have to concat on Maildir in the query? Thanks Bruce -- Please use PGP, ENCRYPT everything. For information about acquiring a secryption.com account, email me. My public key: https://www.secryption.com/BruceMarkey.asc or https://keyserver.pgp.com

1 0

[Dovecot] Need help with Replication
by Michael Neurohr 11 Sep '13

11 Sep '13

Hi! I set up two mail servers with Postfix and Dovecot and I would like to sync all mails between the servers. So I set up replication. Now I'm still getting the following errors: =======Server 1======= Sep 11 13:43:52 mx0 dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Sep 11 13:43:52 mx0 dovecot: auth-worker(4245): mysql(127.0.0.1): Connected to database mailserver Sep 11 13:43:52 mx0 dovecot: dsync-local(user1(a)domain.com): Error: stat(/var/mail/vhosts/domain.com/user1/.dovecot.sieve/tmp) failed: Not a directory Sep 11 13:43:52 mx0 dovecot: dsync-local(user1(a)domain.com): Error: Failed to sync mailbox dovecot.sieve: Internal error occurred. Refer to server log for more information. [2013-09-11 13:43:52] ==================== =======Server 2======= Sep 11 13:45:30 mx1 dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Sep 11 13:45:32 mx1 dovecot: auth-worker(30031): mysql(127.0.0.1): Connected to database mailserver Sep 11 13:45:34 mx1 dovecot: dsync-local(user1(a)domain.com): Error: remote: dsync-remote(user1(a)domain.com): Error: stat(/var/mail/vhosts/ domain.com/user1/.dovecot.sieve/tmp) failed: Not a directory Sep 11 13:45:34 mx1 dovecot: doveadm: Error: dsync-remote(user1(a)domain.com): Error: Failed to sync mailbox dovecot.sieve: Internal error occurred. Refer to server log for more information. [2013-09-11 13:45:33] Sep 11 13:45:34 mx1 dovecot: doveadm: Error: dsync-remote(user1(a)domain.com): Error: command BOX-LIST failed Sep 11 13:45:34 mx1 dovecot: dsync-local(user1(a)domain.com): Error: Worker server's mailbox iteration failed ==================== Currently Server 1 holds all mails. Server 2 has no mails. Dovecot Version: 2.1.7 on both servers. =======Dovecot Config Server 1======= root@mx0:/home/mine# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 ext4 auth_mechanisms = plain login mail_location = maildir:/var/mail/vhosts/%d/%n mail_plugins = notify replication mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --deliver;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items;Deleted Messages mail_replica = remote:vmail@mx1.neurohr.at replication_full_sync_interval = 1 hours sieve = ~/.dovecot.sieve sieve_before = /etc/sieve/conf.d/before sieve_dir = ~/sieve sieve_extensions = +imapflags } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service config { unix_listener config { user = vmail } } service dict { unix_listener dict { user = vmail } } service doveadm { user = vmail } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 } ssl = required ssl_ca = </etc/ssl/private/mailserver/ca-bundle.crt ssl_cert = </etc/ssl/private/mailserver/mx0.neurohr.at.pem ssl_key = </etc/ssl/private/mailserver/mx0.neurohr.at.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_plugins = sieve } protocol lda { mail_plugins = sieve } protocol imap { mail_plugins = antispam } =============================== =======Dovecot Config Server 2======= root@mx1:/home/mine# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.6.11+ armv6l Debian 7.1 ext4 auth_mechanisms = plain login dsync_remote_cmd = ssh -p 2222 -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags namespace { inbox = yes location = mailbox { special_use = \Drafts name = Drafts } mailbox { special_use = \Junk name = Junk } mailbox { special_use = \Sent name = Sent } mailbox { special_use = \Sent name = Sent Messages } mailbox { auto = subscribe special_use = \Junk name = Spam } mailbox { auto = subscribe special_use = \Trash name = Trash } prefix = name = inbox } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = dspam antispam_dspam_args = --deliver;--user;%u antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items;Deleted Messages mail_replica = remote:vmail@mx0.domain.com replication_full_sync_interval = 1 hours sieve = ~/.dovecot.sieve sieve_before = /etc/sieve/conf.d/before sieve_dir = ~/sieve sieve_extensions = +imapflags } protocols = imap pop3 lmtp sieve service { fifo_listener { mode = 0600 user = vmail path = replication-notify-fifo } unix_listener { mode = 0600 user = vmail path = replication-notify } name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service { unix_listener { group = postfix mode = 0666 user = postfix path = /var/spool/postfix/private/auth } unix_listener { mode = 0600 user = vmail path = auth-userdb } user = dovecot name = auth } service { unix_listener { user = vmail path = config } name = config } service { unix_listener { user = vmail path = dict } name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { user = vmail name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service { unix_listener { group = postfix mode = 0600 user = postfix path = /var/spool/postfix/private/dovecot-lmtp } name = lmtp } service log-errors { name = log } service { inet_listener { port = 4190 name = sieve } name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service { process_min_avail = 1 name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } ssl = required ssl_ca = </etc/ssl/private/mailserver/ca-bundle.crt ssl_cert = </etc/ssl/private/mailserver/mx1.domain.com.pem ssl_key = </etc/ssl/private/mailserver/mx1.domain.com.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_plugins = sieve service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol lda { mail_plugins = sieve service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol imap { mail_plugins = antispam service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol sieve { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } protocol pop3 { service replication-notify-fifo { name = aggregator } service anvil-auth-penalty { name = anvil } service auth-worker { name = auth-worker } service auth-client { name = auth } service config { name = config } service dict { name = dict } service login/proxy-notify { name = director } service dns-client { name = dns_client } service doveadm-server { name = doveadm } service imap { name = imap-login } service login/imap { name = imap } service indexer-worker { name = indexer-worker } service indexer { name = indexer } service ipc { name = ipc } service lmtp { name = lmtp } service log-errors { name = log } service sieve { name = managesieve-login } service login/sieve { name = managesieve } service pop3 { name = pop3-login } service login/pop3 { name = pop3 } service replicator { name = replicator } service login/ssl-params { name = ssl-params } service stats-mail { name = stats } } =============================== What could be the problem? Thanks, Michael

1 0

[Dovecot] Default mail folders.
by Bruce Markey 11 Sep '13

11 Sep '13

Just want to make sure before I set this up. I read that the autocreate plugin is deprecated and to use "Mailbox settings" as listed here http://wiki2.dovecot.org/MailboxSettings. If that is correct then do I just add those mailbox blocks in /etc/dovecot/conf.d/10-mail.conf? Lastly, will "sent items" auto populate with sent items or is there something else that needs to be done. I just switched over from courier and I'm still getting used to where/how things are done. Thanks Bruce -- Please use PGP, ENCRYPT everything. For information about acquiring a secryption.com account, email me. My public key: https://www.secryption.com/BruceMarkey.asc or https://keyserver.pgp.com

3 3

[Dovecot] Sieve, vacation, company (domain-wide) message possible?
by Charles Marcus 10 Sep '13

10 Sep '13

Hello, I've been using vacation.pl from postfixadmin for many years, and since the most recent modification that allows me to specify my own strings to test for for when NOT to send a message, I'm extremely happy with it (no more auto-responses to linked-in/facebook crap, etc)... But, there is one thing I'd like to be able to do that it can't do, and there hasn't been any positive response about implementing it, so I'm asking about if this is possible to do with sieve right now, and if not, how hard would it be to implement... What I'd like is to be able to set a company (domain-wide) auto-response for when our company is closed for holidays... more specifically, extra holidays (often the boss will close an extra day for an extra long weekend). He has asked more than once about setting an auto-response for *everyone* during these periods... Thanks, -- Best regards, */Charles/*

5 7

[Dovecot] Sieve Filter global vs user specific
by inkubus 10 Sep '13

10 Sep '13

Hi@all! I'm actually fighting to make sieve in dovecot work and made quite a success by now. However, I still fail at the following constellation: Background: I'm a Mail Admin of a small IT department and we are already using Dovecot as LDA with a filtering server. Any user can easily create filter rules that apply to him (to make it easier for my colleagues we use the Roundcube plugin for rule design). I can formulate global rules that apply to all. Individual users create their rules for redirectiong mails home (a la redirect: copy "users(a)theirhomes.de";) According to the policy of my company, certain file types (eg avi, mp4, mp3, wav, etc.) must NOT be sent out to the internet. But our phone system does INTERNALLY just that - receiving calls in absence of the user it sends mails with attachments MP3 (the spoken message). These mails must of course not be forwarded outside. I also created a global rule, which supresses the delivery of these mails (using the stop command), But after my global rule follows the user specific rule and the message ist sent anyway. QUESTION: Can cause dovecot somehow not to follow the user specific rules that apply to a message after going through my global ones? The mail has to remain directly in the inbox (and must not be forwarded by the user specific filter aftwerwards) My configuration: dovecot.conf (excerpt): plugin { sieve = /home/%n/.dovecot.sieve sieve_dir = /home/%n/.mailstore/sieve sieve_global_dir = /etc/dovecot/sieve/ sieve_before = /etc/dovecot/sieve/global } /etc/dovecot/sieve/global: require ["vacation","copy","fileinto","body","imap4flags"]; # rule:[Redirect] if anyof(header :contains "From" "f...ing.telefonanlage(a)firma.intern", header :contains "Subject" "Sprachnachricht") { stop; } user specific rules are as follows # rule:[Redirect] if true { redirect :copy "users(a)theirhomes.de"; } I hope my English is understandable (got quite a cold andfighting to keep my eyes open so my English is not the best today ;-) ) I'm sure the solution for this problem is a nobvious & simple one but I'm having my blond moments today... Any help would be appreciated! yours Sven P.S. Klar bin ich mir bewusst, dass einfach die Benutzerfilter aufgebohrt werden könnten. Da aber nicht alle Kollegen... sagen wir entsprechend firm... sind, würde ich den Pflegeaufwand gern gering halten und dieses Ausnehmen vo der weiterleitung zentralisieren. -- View this message in context: http://dovecot.2317879.n4.nabble.com/Sieve-Filter-global-vs-user-specific-t… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Proxy and Master Config
by Regan Yelcich 09 Sep '13

09 Sep '13

I'm just sitting down to configure a Proxy & Master Dovecot setup with Postfix and virtual users. I have read plenty about how to configure Dovecot as a proxy, but I'm unclear what's required on the "master" end. Does the master need the -pop and -imap scripts? or does the proxy handle that and call -deliver on the master? Can anyone explain the basic setup so I get it right. Thanks.

1 0

Re: [Dovecot] Is dovecot locking properly?
by Joseph Tam 09 Sep '13

09 Sep '13

Scott Galambos writes: > Hello, I'm attempting to move form qpopper 4.1 to Dovecot 2.2.5 on > Linux. When a user checks POP mail qpopper seems to make a > .username.pop temporary file in the same /var/mail directory as the mbox > INBOX file. Watching what dovecot does I don't see this happening. Probably too quick (or perhaps you haven't configured dotlocking). Qpopper locks the INBOX when it creates a drop copy: this can be a time consuming operation, during which you can see the .$user.pop lock file. Dovecot is more intelligent: it doesn't create copies, and goes out of its way to avoid grautitous I/O. Most of the operations can be done by consulting the indices. However, I did contrive a situation to observe lock files being created. 1) Create large INBOX file test user (assuming mbox /inbox/testuser) 2a) In one window, run a shell loop monitor while : ; do ls -al /inbox/testuser.lock done 2b) In another window, create a POP3 session and do an operation that would require a lock: telnet pop-server 110 USER testuser PASS testpassword DELE 1 ... this still won't need locking -- not until ... QUIT If you use maildir format, it may still be too quick to catch. in this situation, you can process trace the pop3 worker process to verify a lock file is created. > Is this .pop file a lock file or just a temporary file? Temporary. If you have them lying around, qpopper crashed. Note: dovecot makes lockfiles of the form "$user.lock". > If its a temp file does dovecot do the same thing elsewhere? I'm > concerned dovecot is not locking properly and there will be mailbox > corruption, so I'm trying to get dovecot to mimic what qpopper does as > much as possible. By "mimic" you mean that locking works, but otherwise, you don't want dovecot to mimic qpopper: the former is much better. I have not had problems with users complaining about scrambled files. As I said, process trace your pop3 worker process if you need to verify the locking process. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] sieve vacation question
by Andreas Schulze 09 Sep '13

09 Sep '13

Hello Stephan, I love to use the vacation extension to build an echo service. I have not to worry about whether to answer or not if the sender is a list, postmaster, mailer-daemon or other crasy thing. But i like to echo the *complete headers* back. I did not found a solution with sieve yet. Is it really impossible? Thanks Andreas

2 2

[Dovecot] Is this odd?
by LuKreme 09 Sep '13

09 Sep '13

$ doveadm user kremels field value uid 1033 gid 1033 home /home/kremels mail maildir:~/Maildir system_groups_user kreme $ doveadm user user(a)virtual.example.com field value uid 89 gid 89 home /usr/local/virtual/user(a)virtual.example.com/ mail /usr/local/virtual/user(a)virtual.example.com mail_location /usr/local/virtual/user(a)virtual.example.com The local users doesn't have a mail_location set at all, and has a very different mail definition. This seem to be a side-effect of the fact that the home of the virtual user is the top level maildir, but should I set mail to maildir:~ ?? -- Where there is a party, everyone is there Everyone will leave at exactly the same time When this party is over it will start again But not been any different be exactly the same

2 2

[Dovecot] Is dovecot locking properly?
by Scott Galambos 09 Sep '13

09 Sep '13

Hello, I'm attempting to move form qpopper 4.1 to Dovecot 2.2.5 on Linux. When a user checks POP mail qpopper seems to make a .username.pop temporary file in the same /var/mail directory as the mbox INBOX file. Watching what dovecot does I don't see this happening. Is this .pop file a lock file or just a temporary file? If its a temp file does dovecot do the same thing elsewhere? I'm concerned dovecot is not locking properly and there will be mailbox corruption, so I'm trying to get dovecot to mimic what qpopper does as much as possible. I'm using procmail and its Locking strategies are: dotlocking, fcntl(), lockf(), flock(). I'm using sendmail too. I left dovecot's locking as the defaults. Thanks for any tips.

1 0

Re: [Dovecot] More fine-grained connection limitations?
by Joseph Tam 09 Sep '13

09 Sep '13

> There is the mail_max_userip_connections setting, which helps for > dealing with number of connections at any given time, but I'm looking > for something that will help deal with users who configure their mail > clients to connect too frequently. > > ... > > It would be really great if there were a way to tarpit those users to > slow them down, or send them an imap message saying they are connecting > to often and connections have been disabled for the next 5 minutes or > something. There might be an unintended consequence: I see connection spikes when users try to do a global string search across mailboxes. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] best practice to have sent mail folder on dovecot imap server
by Thomas Koch 08 Sep '13

08 Sep '13

I've already asked this here: http://serverfault.com/questions/533940/best-practice-to-have-sent-mail- folder-on-dovecot-imap-server Hi, when I add a mail account to KMail (or most other MUA I suppose) the sent mail folder is on the local machine and I don't have my sent mails on other machines. I'd like to have a sent mail folder in IMAP and I thought that there would already exist a standard or best practice how to set this up so that the mail is only transfered once to the MTA and from the MTA to the IMAP server. I even thought to remember an RFC related to this problem? It isn't that simple, is it? I'm using Exim. Regards, Thomas Koch

3 2

[Dovecot] More fine-grained connection limitations?
by Micah Anderson 07 Sep '13

07 Sep '13

There is the mail_max_userip_connections setting, which helps for dealing with number of connections at any given time, but I'm looking for something that will help deal with users who configure their mail clients to connect too frequently. For example, I've seen users who configured their clients to check (IMAP) mail every 3 seconds. This is far too frequent and puts unnecessary load on the server. Even once per minute seems excessive to me. It would be really great if there were a way to tarpit those users to slow them down, or send them an imap message saying they are connecting to often and connections have been disabled for the next 5 minutes or something. Micah ps - what happens to a user when they hit mail_mx_userip_connections? Further connections are just denied, or dropped?

1 0

[Dovecot] Plus addressing
by LuKreme 07 Sep '13

07 Sep '13

It appease that I can enable +address filtering into separate mailboxes by simply setting $recipient_delimiter = '+'; However, is there anyway to get great control over that? For example, on one account I have a lot of +addresses I use. A few, I sort into mailboxes (like my bank, credit cards, etc). The rest are either on the “spammer => /dev/null” list or get sorted into a mailbox named “Misc” (like various newsletters and offers and sales from companies I do business with). -- Sigs are b0rk3d.

6 6

[Dovecot] Dovecot 2.1.7 not starting properly, mail not delivered
by Aldo & Caroline 07 Sep '13

07 Sep '13

On my debian box dovecot does not start properly any more, and mails don't get delivered or sent. I've googled around without finding any useful leads. Hopefully someone is willing to educate me. My guess is it must be a config problem after an upgrade, since I didn't change anything myself directly. Not sure when it started, since I this mail server is not our default machine (yet). Symptoms Upon /etc/init.d/dovecot restart my command line says [ ok ] Restarting IMAP/POP3 mail server: dovecot. But I find in /var/log/mail.log: Sep 6 11:17:36 debian2 dovecot: master: Warning: Killed with signal 15 (by pid=19112 uid=0 code=kill) Sep 6 11:17:36 debian2 dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Sep 6 11:17:37 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:38 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:39 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:40 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:41 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:42 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:43 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:44 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:45 debian2 postfix/cleanup[18466]: warning: connect to TCP map 127.0.0.1:10001: Connection refused Sep 6 11:17:45 debian2 postfix/cleanup[18466]: warning: tcp:127.0.0.1:10001 lookup error for "aldo(a)alcatoka.nl" Sep 6 11:17:45 debian2 postfix/cleanup[18466]: warning: 57B7D3640073: sender_canonical_maps map lookup problem for aldo(a)alcatoka.nl Sep 6 11:17:45 debian2 postfix/pickup[17004]: warning: maildrop/4EA313640071: error writing 57B7D3640073: queue file write error I do NOT see a line like ... dovecot: auth-worker(default): pgsql: Connected to 127.0.0.1 (mailserver) as mentioned in this <https://workaround.org/ispmail/squeeze/setting-up-dovecot?page=1> tutorial, which I used to set up the previous Dovecot version (which worked OK). When starting Dovecot from the command line with dovecot -F -c /etc/dovecot/dovecot.conf nothing is printed (as if the process is waiting for more input), while it should at least produce some output, right? I'm running Debian 7.1 with an ext3 filesystem together with Postfix 2.9.6 on an x86 machine. CPU info: processor : 0 vendor_id : AuthenticAMD cpu family : 16 model : 6 model name : AMD Sempron(tm) 140 Processor cpu MHz : 800.000 cache size : 1024 KB As far as I can tell, Postfix is running OK. /etc/dovecot/dovecot.conf says: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 ext3 auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%d/%n/Maildir mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=3000 gid=3000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = mail_plugins = sieve postmaster_address = aldo(a)alcatoka.nl As far as I understand, there must be a process (dovecot-auth?) that takes care of translating mail adresses, taking a string at port 10001 and returning the translated string on 10002. This process does not seem to kick off when dovecot restarts. Please tell me if I'm thinking in the right direction, and - more importantly - what I need to do to get dovecot running. I will be happy to provide more test results if that helps, just tell me what you need. Regards, Aldo Verlinde

1 1

[Dovecot] which clients support SCRAM-SHA-1
by Reindl Harald 07 Sep '13

07 Sep '13

Hi running dovecot as IMAP/POP3-proxy with auth_mechanisms = CRAM-MD5 DIGEST-MD5 SCRAM-SHA-1 APOP LOGIN PLAIN which client supports currently "SCRAM-SHA-1" to test it?

1 0

Re: [Dovecot] doveadm expunge problems
by Joseph Tam 06 Sep '13

06 Sep '13

nicolasfo wrote: > doveadm search -u *(a)mydomain.fr MAILBOX Junk savedbefore 1d : don't lists > anything.. > > What am I missed ? > > Is this the good way to change file date (touch) and by this way, have > results to savedbefore command ? No. The date.saved value is (I think) stored in its indices, and is updated via IMAP operations. This value is not derived from file timestamps. You can use doveadm fetch to get the values that dovecot uses dovecot -ftab fetch -A 'mailbox date.saved' mailbox Junk If you actually use IMAP operations to move messages from INBOX to Junk, I think you'll find that date.saved reflects the correct value. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] userdb with LDAP
by Tobi 06 Sep '13

06 Sep '13

Hi list I currently having troubles to "connect" dovecot (for proxy) to an existing LDAP. If I got the dovecot wiki right only userdb is needed for a proxy setup where the proxy does not authenticate but just forward to the backend for authentication. So I setup the following in dovecot-ldap.conf.ext user_attrs = =password,=y=nopasswd,=y=proxy,mailHost=host user_filter = (&(objectClass=posixAccount)(uid=%u)) There is a field mailHost in LDAP which defines the correct backend for the user and defined userdb in auth-ldap.conf.ext userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } the same config again in auth-system.conf.ext The problem is that dovecot always reports back that the user is unknown. I turned on ldap debug and got the following Sep 6 13:06:10 kolab-frontend dovecot: auth: Debug: ldap(tobi.szyndler(a)datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): pass search: base=dc=datapark,dc=li scope=subtree filter=(&(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li)) fields=mailHost Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_search Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(&(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li))" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: AND Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter_list "(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(objectClass=posixAccount)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "objectClass=posixAccount" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(uid=tobi.szyndler(a)datapark.li)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "uid=tobi.szyndler(a)datapark.li" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_build_search_req ATTRS: mailHost Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_initial_request Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_server_request Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116 port: 389 (default) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: refcnt: 2 status: Connected Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: last used: Fri Sep 6 13:06:10 2013 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * msgid 4, origid 4, status InProgress Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: outstanding referrals 0, parent count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 request count 1 (abandoned 0) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Empty Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 response count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid 4 message type search-result Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 0 new referrals Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: mark request completed, ld 0x7fbc43fb4110 msgid 4 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: request done: ld 0x7fbc43fb4110 msgid 4 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_free_request (origid 4, msgid 4) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_parse_result Sep 6 13:06:10 kolab-frontend dovecot: auth: ldap(tobi.szyndler(a)datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): unknown user Sep 6 13:06:10 kolab-frontend dovecot: auth: Debug: ldap(tobi.szyndler(a)datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): pass search: base=dc=datapark,dc=li scope=subtree filter=(&(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li)) fields=mailHost Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_search Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(&(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li))" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: AND Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter_list "(objectClass=posixAccount)(uid=tobi.szyndler(a)datapark.li)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(objectClass=posixAccount)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "objectClass=posixAccount" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(uid=tobi.szyndler(a)datapark.li)" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "uid=tobi.szyndler(a)datapark.li" Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_build_search_req ATTRS: mailHost Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_initial_request Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_server_request Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_msgfree Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116 port: 389 (default) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: refcnt: 2 status: Connected Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: last used: Fri Sep 6 13:06:10 2013 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * msgid 5, origid 5, status InProgress Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: outstanding referrals 0, parent count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 request count 1 (abandoned 0) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Empty Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 response count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116 port: 389 (default) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: refcnt: 2 status: Connected Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: last used: Fri Sep 6 13:06:10 2013 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * msgid 5, origid 5, status InProgress Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: outstanding referrals 0, parent count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 request count 1 (abandoned 0) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Empty Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 response count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid 5 message type search-result Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 0 new referrals Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: mark request completed, ld 0x7fbc43fb4110 msgid 5 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: request done: ld 0x7fbc43fb4110 msgid 5 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_free_request (origid 5, msgid 5) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_parse_result Sep 6 13:06:10 kolab-frontend dovecot: auth: ldap(tobi.szyndler(a)datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): unknown user Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_msgfree Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116 port: 389 (default) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: refcnt: 1 status: Connected Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: last used: Fri Sep 6 13:06:10 2013 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Empty Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 request count 0 (abandoned 0) Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue: Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: Empty Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ld 0x7fbc43fb4110 response count 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0 Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL Sep 6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select I'm pretty sure that the error is 30cm in front of the screen :-) but I really don't see the problem Any help is highly appreciated Thanks tobi

1 1

[Dovecot] doveadm expunge problems
by nicolasfo 06 Sep '13

06 Sep '13

Hello there, I'm trying to use the doveadm expunge function, but it doesn't seems to work.. I have installed a mail test server using iredmail, Dovecot and postfix using mysql for authentications. I sent a email to this server, and change the timestamp using touch. the mail boxes are as follow : /home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49/Maildir I want to delete mails that are, let's say, 1day old from the "Junk" folder. (I put the mail I changed the date in it). I run this command : doveadm -Dv expunge -u nicolas(a)mydomain.fr mailbox "Junk" savedbefore 1d The mail is still in the "Junk" folder, and I have this output : root@mail:/home/mail/vmail1# doveadm -Dv expunge -u nicolas(a)mydomain.fr mailbox "Junk" savedbefore 1d doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(nicolas(a)mydomain.fr): Debug: Added userdb setting: plugin/master_user=nicolas(a)mydomain.fr doveadm(nicolas(a)mydomain.fr): Debug: Added userdb setting: plugin/quota_rule=*:bytes=1073741824 doveadm(nicolas(a)mydomain.fr): Debug: Effective uid=2000, gid=2000, home=/home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49/ doveadm(nicolas(a)mydomain.fr): Debug: Quota root: name=user backend=dict args=:proxy::quotadict doveadm(nicolas(a)mydomain.fr): Debug: Quota rule: root=user mailbox=* bytes=1073741824 messages=0 doveadm(nicolas(a)mydomain.fr): Debug: Quota warning: bytes=912680550 (85%) messages=0 reverse=no command=quota-warning 85 nicolas(a)mydomain.fr doveadm(nicolas(a)mydomain.fr): Debug: Quota warning: bytes=966367641 (90%) messages=0 reverse=no command=quota-warning 90 nicolas(a)mydomain.fr doveadm(nicolas(a)mydomain.fr): Debug: Quota warning: bytes=1020054732 (95%) messages=0 reverse=no command=quota-warning 95 nicolas(a)mydomain.fr doveadm(nicolas(a)mydomain.fr): Debug: dict quota: user=nicolas(a)mydomain.fr, uri=proxy::quotadict, noenforcing=0 doveadm(nicolas(a)mydomain.fr): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir://home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49//Maildir/:INDEX=//home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49//Maildir/ doveadm(nicolas(a)mydomain.fr): Debug: maildir++: root=//home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49//Maildir, index=, control=, inbox=//home/mail/vmail1/mydomain.fr/n/i/c/nicolas-2013.09.05.14.30.49//Maildir, alt= doveadm(nicolas(a)mydomain.fr): Debug: Namespace : type=shared, prefix=Shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/Shared/%u doveadm(nicolas(a)mydomain.fr): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= I don't understand, the output seems to be OK, except loading modules at the begining, but I think there's no effect to expunge command... Anyone to help me, please ? Thnaks in advance Nicolas -- View this message in context: http://dovecot.2317879.n4.nabble.com/doveadm-expunge-problems-tp44200.html Sent from the Dovecot mailing list archive at Nabble.com.

1 1

[Dovecot] stopping dictionary attacks (pop3)
by other＠ahhyes.net 05 Sep '13

05 Sep '13

Hi Guys, I was really hoping a couple of years later this would be addressed... I'm running Dovecot 2.2.5 on FreeBSD. Is there anyway to limit the number of auth attempts allowed in a single session? The reason for this is because I have "fail2ban" setup to firewall out any IP addresses that repeatedly auth fails. The issue occurs when the connection is already in an "established" state and the attacker uses the existing session to hammer away, fail2ban becomes ineffective as dovecot appears to allow the person to attempt authentication ad infinitum. It would be nice if there was config option that would for example cause the software to close the connection after X failed attempts. I use "pf" as the firewall on FreeBSD. Unless there was some command I could have fail2ban run a command that would destroy any tcp sessions in an established state prior to adding the offending IP to the block list, that would be the only way around the problem. Ideally it would be nice for dovecot have an option to control the number of failed auth attempts. Any suggestions? Cheers, Alex.

2 3

[Dovecot] Received header only showing localhost
by Matt Devaney 04 Sep '13

04 Sep '13

Hi all, Im a new dovecot user and a first-time poster so please forgive me if this is a stupid question, or even (as I suspect it might be) not really a Dovecot question. My system is the fairly typical mix of postfix, amavis-new, and Dovecot. For some reason Ive noticed that when I look at the mail headers for delivered messages the Received header is missing the detail of any external servers that the mail went through, and additionally the tag appears twice; for example the Welcome to the dovecot mailing list email has: Received: from localhost (localhost [127.0.0.1]) by droplet.the-wyvern.net (Postfix) with ESMTP id DDDD163F73 for <myname(a)mydomain.net>; Mon, 26 Aug 2013 16:40:19 +0000 (UTC) Received: from droplet.the-wyvern.net ([127.0.0.1]) by localhost (droplet.the-wyvern.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6AFMiG0TAHUv for <myname(a)mydomain.net>; Mon, 26 Aug 2013 16:40:17 +0000 (UTC) Searching through the dovecot.markmail archive I can see this doesnt seem to be too unusual in that there are other examples where folk have posted message headers with the above format, however Im wondering if theres a good reason for it and if I can turn it off? I quite like being able to see where my mail came from :) If theres a man / wiki page to read somewhere that explains it then please feel free to tell me to RTM (.. long as you also point me in the right direction :p ) Thanks, Matt

2 4

[Dovecot] OT: z-Push
by Christian Rößner 04 Sep '13

04 Sep '13

Hi, just a short question: I have installed and configured z-Push to use BackendIMAP. On my iPhone I have created an account and I can see my mails. Also sending works. So far so good. Now the question: When I create a new folder i.e. Test under the root (/), then I get an error. And after resyncing the folder has been created not under /, but under /0/Test. Also I can not remove that folder over ActiveSync. Does somebody have z-Push fully working with Dovecot or is z-Push designed for Cyrus and only some features are working with Dovecot? So at the moment folder create/move/delete does not work here with z-Push-2.0.3 and Dovecot 2.1.9 Thanks in advance -Christian Rößner --- Bachelor of Science Informatik Erlenwiese 14, 36304 Alsfeld T: +49 6631 78823400, F: +49 6631 78823409, M: +49 176 93118939 USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com

4 4

[Dovecot] Dovecot is not creating directories properly for new accounts
by Chris Lasater 04 Sep '13

04 Sep '13

Hi, I have just set up a new dovecot server with Dovecot 2.2.5. When I create a new user and try to authenticate I get the following error Sep 03 14:33:38 imap(test2): Error: user test2: Initialization failed: Initializing mail storage from mail_location setting failed: mkdir(/home/user/apps/var/mail/imap/test2/mailboxes) failed: Permission denied (euid=503(imapd) egid=503(imapd) missing +w perm: /home/user/apps/var/mail, we're not in group 502(dovecot), dir owned by 502:502 mode=0775) Sep 03 14:33:38 imap(test2): Error: Invalid user settings. Refer to server log for more information. imapd is in the dovecot group and here are the permissions [user@MB1 logs]$ ll /home/user/apps/var/ total 4 drwxrwxr-x 4 dovecot dovecot 4096 Sep 3 14:35 mail [user@MB1 logs]$ id imapd uid=503(imapd) gid=503(imapd) groups=503(imapd),500(user),502(dovecot) if I su - imapd and then run mkdir -p /home/user/apps/var/mail/imap/test2/mailboxes everything starts working and the user can log in. Isn't Dovecot supposed to be able to create these?

2 1

[Dovecot] dsync - convert plugin missing?
by Regan Yelcich 03 Sep '13

03 Sep '13

I'm looking to convert my mbox mailboxes over to Maildir. But when I try to run the dsync command: (changed with my variables) dsync -u username mirror mbox:~/mail:INBOX=/var/mail/username found on this dovecot v2.X page here: http://wiki2.dovecot.org/Migration/MailFormat I get an error that it can't find the "convert" plugin. Am I doing something wrong? Thanks.

1 0

Re: [Dovecot] Deleting messages with Mac Mail via IMAP
by Tim Schneider 03 Sep '13

03 Sep '13

The right wording (expunge) provided me with some clues. Anyway, Mac Mail does not have such a flag. It seems to be deliberately designed to do the expunge on quitting the application. Expunge can also be triggered by using cmd+shift+k with no marked messages to empty all trashes. Using this command, one can also mark a message and expunge it directly, bypassing the trash. I don't want to exclude the possiblity that this has got something to do with the IDLE system, and could be resolved by, for example, providing the right IMAP capabilities flags upon com init. Interestingly, iOS mail does delete the message in the inbox directly when moving it to trash. Thanks anyway to the contributors of this thread, I think I will have to accept this behavior, since Apple does usually not care about customer requests to resolve bugs. Mostly they declare them to be intended stupidity, even when they sell items that behave just the opposite way. Anyway, Zarafa mail server has a flag imap_expunge_on_delete. Perhaps this would be a useful feature for Dovecot to protect admins from angry customers who use well-designed Apple products. On 2013-09-03, at 20:16 , lists-dovecot <replies-lists-a1z2-dovecot(a)listmail.innovate.net> wrote: > > > ------------ Original Message ------------ >> Date: Tuesday, September 03, 2013 07:11:40 PM +0200 >> From: Tim Schneider <tim.schneider(a)portabile.net> >> To: dovecot(a)dovecot.org >> Subject: [Dovecot] Deleting messages with Mac Mail via IMAP >> >> Hello mailing list subscribers! >> >> When I delete a message in Mac Mail 6.5 (OS X 10.8.4), >> with the option to move messages to the trash set in Mac Mail >> account preferences, the message is copied to the trash, and >> markes as trashed in the cur/inbox directory on the server (STa >> flag in the file name). >> >> My horde webmail then displays this messages correctly as trashed >> in the inbox. However, I want the message to be gone from the >> inbox. >> >> Quitting Mac Mail deletes it in the inbox reliably. >> >> Is there any IMAP setting for dovecot to get move, and not copy >> and mark as trashed behavior? >>

1 0

[Dovecot] Deleting messages with Mac Mail via IMAP
by Tim Schneider 03 Sep '13

03 Sep '13

Hello mailing list subscribers! When I delete a message in Mac Mail 6.5 (OS X 10.8.4), with the option to move messages to the trash set in Mac Mail account preferences, the message is copied to the trash, and markes as trashed in the cur/inbox directory on the server (STa flag in the file name). My horde webmail then displays this messages correctly as trashed in the inbox. However, I want the message to be gone from the inbox. Quitting Mac Mail deletes it in the inbox reliably. Is there any IMAP setting for dovecot to get move, and not copy and mark as trashed behavior? Here are my dovecot settings: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = admin(a)xxx.xxx protocols = imap pop3 lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/ssl/certs/mailportabile.pem ssl_key = </etc/ssl/private/mailportabile.key submission_host = localhost userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } protocol lda { mail_plugins = " sieve" }

3 2

Re: [Dovecot] Logging passwords on auth failure/dealing with botnets
by Joseph Tam 03 Sep '13

03 Sep '13

Michael Smith writes: > We're already running fail2ban, but it doesn't seem that effective > against botnets, when they only do one attempt per IP. Yeah, distributed BFDs are tough to block unless you can characterize the clients well. > That leaves us back to getting dovecot to log the tried password for > unknown users. Another tactic might be to hook in a authentication script: http://wiki2.dovecot.org/AuthDatabase/CheckPassword You can run this as an external plugin and won't have to muck into the dovecot innards. From here, you can log attempts, keep track of bad IPs, or take action if you spot a username/password combination that merits instant blacklisting. Joseph Tam <jtam.home(a)gmail.com>

5 10

[Dovecot] sync re-copies emails assigning new UIDs
by Anand Kumria 03 Sep '13

03 Sep '13

Hi, I have been (attempting) to transition a company from in-house dovecot 1.x to a hosted dovecot 2.2 setup. I am running the doveadm sync command, and for the four mailboxes have been blocked -- sync'ing seem to be copying the same mails, over and over (note, initially I was using doveadm backup but my reading has indicated that 'doveadm sync' is better) Example: # date && doveadm -v -o imapc_user=kaye(a)example.com -o imapc_password=*pass* -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imap c_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u kaye(a)example.com imapc: Sat Aug 3 09:05:37 UTC 2013 [...] dsync(kaye(a)example.com): Info: copy from INBOX: box=INBOX, uid=5306, msgid=<FB3A2E1C62B148F8B057476BDCBB4A9B@THENORMANS>, size=13544 dsync(kaye(a)example.com): Info: copy from INBOX: box=INBOX, uid=5307, msgid=<006b01ce8dad$b8864930$2992db90$(a)com.au>, size=10163563 [...] dsync(kaye(a)example.com): Info: copy from INBOX: box=INBOX, uid=5311, msgid=< cm.083930.bijjdjk.jdkimlhij.r(a)createsend5.com>, size=46658 [...] # date && doveadm -v -o imapc_user=kaye(a)example.com -o imapc_password=*pass* -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u kaye(a)example.com imapc: Sat Aug 3 10:01:48 UTC 2013 [...] dsync(kaye(a)kamdha.com): Info: copy from INBOX: box=INBOX, uid=5324, msgid=<FB3A2E1C62B148F8B057476BDCBB4A9B@THENORMANS>, size=13544 dsync(kaye(a)kamdha.com): Info: copy from INBOX: box=INBOX, uid=5325, msgid=<006b01ce8dad$b8864930$2992db90$(a)com.au>, size=10163563 [...] dsync(kaye(a)kamdha.com): Info: copy from INBOX: box=INBOX, uid=5329, msgid=< cm.083930.bijjdjk.jdkimlhij.r(a)createsend5.com>, size=46658 [...] The exact same number of emails (some in the INBOX, some in the Sent folder) are transferred each time. In this case, I've firewalled the origin - so their entire mail system is stopped whilst I do the transfer just in case modifications of IMAP flags or additional delivieres might have been the problem. I am using Dovecot v2.2.4; is this normal expected behaviour? If so, what is the best way to ensure that a migration is done without data loss. If this isn't expected, has anyone else seen this kind of error before? Thanks, Anand

1 1

[Dovecot] setup of dovecot as proxy to dbmail
by Regan Yelcich 03 Sep '13

03 Sep '13

Can anyone point me in the direction of a detailed how-to for setting up a postfix and dovecot (proxy) node with dbmail? In particular I'm looking for a how-to which shows dovecot authenticating against the dbmail database directly. The only example I've found is this one which requires a duplication of the user database. http://content.fens.org/index.php?q=admin-howto/mail/dovecot2dbmail-proxy Thanks.

2 1

[Dovecot] Auth error in log
by Per-Henrik Lundblom 02 Sep '13

02 Sep '13

Hi, I have a setup with Dovecot handling a few virtual domains delivering mails to both local Unix account mailboxes and seperate mailboxes for virtual users defined in a MySQL database. A quick overview of the configuration shows two passdb definitions: auth default { mechanisms = plain login passdb pam { args = dovecot } passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb passwd { args = mail=maildir:~/Maildir blocking=yes } userdb static { args = uid=vmail gid=mail home=/var/spool/vmail/%d/%n allow_all_users=yes } user = root socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail group = mail } client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } !include_try /etc/dovecot/auth.d/*.auth } When a virtual user defined in the MySQL database tries to log in using IMAP or SMTP I always get auth failures logged in the system logs. Entries are like this: Aug 21 06:25:36 roadrunner dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=luser(a)mydomain.com rhost=85.224.xx.xx I assume these failures comes form the fact that PAM doesn't recognize the virtual users and Dovecot continues to the SQL passdb entry. As a result I get a _lot_ of auth failures in the logs. I have tried to come up with a way where the auth failures from PAM arent't logged if the the SQL authenication is successful. Is this possible or are there any other recommended ways to handle this? /PH -- Per-Henrik Lundblom email: ph(a)whatever.nu phone: +46 733 207126 webpage: www.whatever.nu

2 3

[Dovecot] local AND virtual mail locations ?
by Pierre-Philipp Braun 02 Sep '13

02 Sep '13

Hi, I would like to use Dovecot not only for virtual mboxes, but also for local users. In other words, I would like to use different "mail_location"s depending on "passdb" "passwd-file" versus "passwd". I need that as the smtp daemon I am using (david parsons' postoffice smtp server) serves both but is only able to process messages through procmail on local users. Here are the two mail_locations I would like to use: mail_location: mbox:~/mail/:INBOX=/var/mail/%u mail_location: mbox:/var/spool/virtual/%d/%n.imap:INBOX=/var/spool/virtual/%d/%n depending on those passdb stanzas, respectively: passdb passwd-file { args = username_format=%n /etc/virtual/%d/passwd } passdb passwd { } Any help would be appreciated. Here's my Dovecot version and current working configuration for virtual users only: # dovecot -n dovecot -n # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.3-RELEASE amd64 ufs protocols: imap ssl: no disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login first_valid_uid: 6 first_valid_gid: 6 mail_location: mbox:/var/spool/virtual/%d/%n.imap:INBOX=/var/spool/virtual/%d/%n imap_client_workarounds: tb-extra-mailbox-sep auth default: user: mail passdb: driver: passwd-file args: username_format=%n /etc/virtual/%d/passwd userdb: driver: static args: uid=6 gid=6 I find that first_valid_uid and first_valid_gid don't look pretty but it seems mandatory for the standard 'mail' user and group ownerships to work on the virtual mbox files and folders. I created the user while the group already existed. If you have any advices on that too, I would be pleased. Thanks Pierre-Philipp

3 7

[Dovecot] Getting back into Dovecot 2.2.5
by Kai Hendry 02 Sep '13

02 Sep '13

Hi there, I'm prompted to get into running my own mail server again with Gmail going bad. However I found /usr/share/doc/dovecot/example-config/conf.d/ a little scary, since I like to have my configs as minimalistic as possible, e.g. http://dabase.com/blog/Minimal_squid3_proxy_configuration/ So far I have: https://github.com/Webconverger/sg.webconverger.com/blob/master/dovecot/dov… I was kinda hoping for a Maildir, but this doesn't work: mail_location = maildir:~/Maildir:LAYOUT=fs:INBOX=/var/mail/%u I do realise /var/mail/%u is a mbox, but I was wondering if there could be some clever conversion. I was surprised something like INBOX=/var/mail/%u wasn't the default btw. Also surprised dovecot seems to choke on single line syntax like `passdb { driver = pam }` :-) Next thing I'm confused about is the `namespace inbox {` stuff. Is it really needed? I was expecting Dovecot to create the folders once I defined them, but mutt couldn't see them until I created them myself. The mail server is just for myself and a few colleagues. We will probably use mutt as our MUA and Apple Mail on IOS when we are out & about. I next plan to integrate dspam, and work out how to sort mails into folders like I previously effectively had with Gmail's labels. I was confused to which mechanism I should be using to sort mail into folders with rules. Sieve? Back to Procmail? Pigeonhole? I'm looking to avoid complexity here. On the topic of search, can I get away with not running a Solr server? Since I shudder at the thought of running Tomcat. http://wiki2.dovecot.org/Plugins/FTS Kiitos paljon for any pointers!

3 4

[Dovecot] Auto-blocking faulty login attempts
by Jos Chrispijn 01 Sep '13

01 Sep '13

Dear group, How can I block login attempts to dovecot after trying 5 times in error? -- Best regards, Jos Chrispijn --- Artificial intelligence is no match for natural stupidity

3 2

[Dovecot] Dovecot and Postfix Authentication
by Christopher Trom 31 Aug '13

31 Aug '13

I am a student and am trying to get a mail server setup for a project. I have all of the Postfix configuration taken care of, but I am confused by the way that authentication works with Dovecot in the mix. As a user of the system, am I supposed to authenticate myself to Postfix, Dovecot, both individually, or both together? My Postfix users are stored in a PostgreSQL database, should Dovecot also be connected to this db? Some basic pointers on how this setup ought to look is all that I'm hoping for. Thank you, Christopher

2 1

Re: [Dovecot] Bizarre permissions problem
by Joseph Tam 30 Aug '13

30 Aug '13

Bill Oliver writes: > There's *one* user I can't get it to work on without a > workaround. The user is "newuser" and the uid is 1111 (actual name and > number changed to protect the innocent). The error I get in my maillog > is: > > The error I get in may maillog is: > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) > Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted > > Now, it looks to me like dovecot is saying that the user newuser can't > get to the /home/newuser/mail/.imap directory because it doesn't have > permission. However, the user newuser has all the permissions it needs: > > $ ls -la /home/newuser/mail > > total 20 > drwxrw---- 3 newuser newuser 4096 Aug 29 15:01 . > drwxrw---- 6 newuser newuser 4096 Aug 29 12:16 .. > drwxrwx--- 2 newuser newuser 4096 Aug 29 16:05 .imap > -rw-rw---- 1 newuser newuser 499 Aug 13 07:56 saved-messages > -rw-rw---- 1 newuser newuser 1756 Aug 16 11:15 sent-mail The output of doveconf -n would have been useful, especially as it relates to your mail_location value, but I can make a pretty good guess at what is happening. Dovecot is trying to create indices with analogous permissions to your mailbox files. Your user's INBOX (/var/mail/newuser) has permission user:group:mode = 1111:12:0660 *but* newuser is not in group "mail" (GID 12), hence it cannot do the required chown operations. (Notice the mode of .imap/: the group write is on so the chmod worked.) Your INBOX ended up this way because some LDA's auto-create new INBOX's with these permissions (to allow access to other part of the mail sysyem that are set-gid "mail"). Options: 1) chmod g-rwx /var/mail/newuser - assumes you have no other parts of your mailsystem that needs access to all user INBOX by assuming group "mail". - dovecot is smart enough to figure out group membersip is irrelevant is groups access is nil. 2) chgrp newuser /var/mail/newuser 3) To avoid future problems: make sure new mailboxes are created with workable permissions. There are also dovecot configs that loosen up some group access, but you'll have to investigate that yourself. Joseph Tam <tam(a)math.ubc.ca>

1 0

[Dovecot] kqueue bug?
by Timo Sirainen 30 Aug '13

30 Aug '13

Apparently Dovecot with kqueue ioloop enabled causes random crashes in FreeBSD 9.1. Anyone else noticed something like that? I'm wondering if Dovecot's kqueue code has a bug somewhere (I can't find it) or could it be that FreeBSD itself has a bug? Anyway it seems to be returning events for filters that have already been removed.

4 3

[Dovecot] Log successful login plain text password
by Marco Fretz 30 Aug '13

30 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everyone, I want to use dovecot as a IMAP and POP3 proxy in front of our current E-Mail hosting server to log the plain text passwords of all successful logins for migration reasons. Actually I don't need the password to see in plain text, storing them as SHA256-CRYPT (or something dovecot can use later for auth) hash in a file or DB would be fine, too. I need this for the migration from the current mail server (using proprietary hashing to store passwords) to a new postfix / dovecot base mail system. I played around with "auth_debug_passwords" and all debug / logging options I found in the manual. Nothing logs successful login plaintext passwords. Any hint welcome. Thanks a lot, Marco -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSHZ9tAAoJEKxm7Ju3UATui2cP/A3cf2TrNvOjjtP1TCgZZ5EC igsgngPlKiXU/RwHO9shBLXUyhKDHPGihNf9KL/RjoFnrgX1asPd/RF/2b080IU3 bNO49BLs8QqoroKz5E+TL8UNixlO5YQjnerKfJ5GIJbSUTC3MaxmN62Cl9jEaTWu 4dX3MXoB3ghoxt6FETSLXz6cEXsGd6KvqxolQC13NYtvpZED+qk7z3RywK8Xp/Au Ipx3xEnDRc/YvG3PeJlsjF9Ge80GxVVH0nudNOV/zmyuNfh4PkPRerk1R4Px01zI sxnXvcNjjenCJ6DMKBmOCyBii9Wl9i4opw9k4X4Z6MFEZGiodRz1usKWJMT0VqUG NBEJDOWsoWpasWMCtduBRrNQS3JI+o1tebDAI5n3K4lJ2d27+nosDvdQ8vNlVszM 8nhSn228RQNy9SJZNAvspOYQBM2gt5IQyWGA4jhrMUkwKeTfHZik8vh8lEcwbK9q H6Myue+i+G8wVa57F1V7/7x2LNGn56BWxTDlBrtKdK3KphCgEoCny/f5VYerO8It MnCMLPXI2oCC8qqkK7x45SYSe/eQhgV93LHpI5z25TqyeJ6R+7dglderRDQcNN0n OtbYMYkqlF8xJ4k+rVFwOC5VD7Bq+S2Q4LyLEf7wFH32Dc12pI/SnAL8DPvkNgbL FshgaVOXUEkb0WhnvROl =oEzx -----END PGP SIGNATURE-----

2 5

[Dovecot] Pigeonhole Sieve - sent message to xmpp account
by Ingo Thierack 29 Aug '13

29 Aug '13

Hello, does someone know, how far the implementation of enotify - xmpp is. Would be nice to push notifications to an jabber account for specific filtered mails. Regards, Ingo

2 1

[Dovecot] Bizarre permissions problem
by Bill Oliver 29 Aug '13

29 Aug '13

Help! I have been using dovecot for some years with great success. A little while ago, I changed my mail server from Fedora to CentOS linux. I reinstalled dovecot, and *almost* everything seems to be working, but one thing. There's *one* user I can't get it to work on without a workaround. The user is "newuser" and the uid is 1111 (actual name and number changed to protect the innocent). The error I get in my maillog is: The error I get in may maillog is: Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: chown(/home/newuser/mail/.imap/INBOX, -1, 12(mail)) failed: Operation not permitted (egid=1111(newuser), group based on /var/mail/newuser) Aug 29 16:02:11 localbox dovecot: imap(newuser): Error: mkdir(/home/newuser/mail/.imap/INBOX) failed: Operation not permitted Aug 29 16:02:11 localbox dovecot: imap(newuser): Disconnected: Logged out bytes=108/669 Now, it looks to me like dovecot is saying that the user newuser can't get to the /home/newuser/mail/.imap directory because it doesn't have permission. However, the user newuser has all the permissions it needs: $ ls -la /home/newuser/mail total 20 drwxrw---- 3 newuser newuser 4096 Aug 29 15:01 . drwxrw---- 6 newuser newuser 4096 Aug 29 12:16 .. drwxrwx--- 2 newuser newuser 4096 Aug 29 16:05 .imap -rw-rw---- 1 newuser newuser 499 Aug 13 07:56 saved-messages -rw-rw---- 1 newuser newuser 1756 Aug 16 11:15 sent-mail newuser has the correct uid (1111) in /etc/dovecot/users newuser *is* the correct uid for that user, i.e.: $ id -u newuser 1111 the password is correct Both my web mail package (roundcube) and my android fail. Both work fine with all other accounts that are set up for imap services. The workaround, it turns out, is that if I make the directory /home/newuser/.imap/INBOX by hand as the user newuser, then things work. So, things seem to be working. However, I just don't understand why *this* user is having problems when none of the others are... The only thing that sets this user apart from any of the others is that it has administration privileges for the roundcube mailer MySQL database. Any explanations? Thanks! billo

2 1

[Dovecot] Sieve vacation reply problem (Dovecot+Sieve/Sendmail/Horde)
by megodin＠inboxalias.com 29 Aug '13

29 Aug '13

Hello Dovecot community, I have an annoying problem with successfully activating Sieve vacation replies - on which I have been working hard the last days without success :( I'm using Dovecot 2.2 + Sendmail + Sieve connected with Horde web-mailer IMP H3 which is generally working fine. BUT: Whenever I activate vacation script in Horde (via Ingo) and send a test-mail to this account, the mail itself arrives but the auto-vacation-reply failes: [mail.err] dovecot: lda(exampleuser): Error: sieve: original envelope recipient address 'exampleuser@dovecot_localhost' is unparsable [mail.warning] dovecot: lda(exampleuser): Warning: sieve: msgid=: vacation action aborted: envelope recipient is <> The Sieve Script which is generated and executed: # Sieve Filter produced by Ingo (http://www.horde.org/ingo/) (20.08.2013, 16:10) require ["vacation", "regex"]; # Abwesenheit if allof ( not exists ["list-help", "list-unsubscribe", "list-subscribe", "list-owner", "list-post", "list-archive", "list-id", "Mailing-List"], not header :comparator "i;ascii-casemap" :is "Precedence" ["list", "bulk", "junk"], not header :comparator "i;ascii-casemap" :matches "To" "Multiple recipients of*" ) { vacation :days 7 :addresses "example.user(a)example.com" :subject "vacation" "I am on vacation until xxxx. Please refer all urgent business to devnull(a)example.com ."; } I understand that Sieve is trying to send vacation replies to the envelope sender - apparently it gets it on the wrong line somewhere from the sendmail config. To get sendmail working along with Dovecot, I had to do some modifications: in /etc/mail/virtusertable (Alias with domain-path) @vlmail.example.com %1@dovecot_localhost in /etc/mail/access (allows relaying) to:dovecot_localhost RELAY in /etc/mail/mailertable (where to be relayed) dovecot_localhost dovecot:vlmail.example.com in /etc/mail/sendmail.cf (relevant part for the Dovecot Mailer specification): Mdovecot, P=/usr/libexec/dovecot/dovecot-lda, F=lDFMPhnu59, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP, U=vmail:vmail, T=DNS/RFC822/X-Unix, A=/usr/libexec/dovecot/dovecot-lda -d $u After several hours playing with sendmail's config I came to the end that sendmail's part must be already over when sieve is getting the original envelope recipient - it seems like it gets it from dovecot-lda. Though, when playing with the Dovecot Mailer specifications in sendmail.cf I can get different error message if I add A=/usr/libexec/dovecot/dovecot-lda -d $u -a $n (adding username part in destination address): [mail.info] dovecot: lda(exampleuser): sieve: msgid=: discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers (recipient=, and additional `:addresses' are specified) BTW, the original mails arriving have a valid Return-Path in header... I am thinking of writing global Sieve scripts (executing before the user's private sieve script), telling Sieve to use the TO: field instead of the Envelope sender but I'm not sure if this is possible, and if, which commands are needed specifically. I really start getting desperate... Can somebody get me some clue what is wrong in my config / where I should put modifications to get sieve vacation replys working properly?! Thanks in advance!! Megodin My Setup: - Dovecot EE 2.2.5.3 + pigeonhole Sieve 0.4.1 - Sendmail Version 8.14.4 (compiled with: DNSMAP HESIOD HES_GETMAILHOST LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING SASLv2 SCANF SOCKETMAP STARTTLS TCPWRAPPERS USERDB USE_LDAP_INIT) - Horde 3.3.13 (Ingo H3 1.2.6) doveconf -n # 2.2.5.3 (f54f8c8f5502): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) nfs auth_cache_size = 10 M auth_cache_ttl = 10 mins auth_debug = yes auth_master_user_separator = * auth_username_format = %n auth_verbose = yes disable_plaintext_auth = no listen = * lock_method = dotlock mail_debug = yes mail_fsync = always mail_gid = vmail mail_home = /mnt/vmails/%u mail_location = sdbox:/mnt/vmails/%u/mailstore mail_plugins = " quota fts fts_lucene" mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes passdb { args = /etc/dovecot/users.blocked deny = yes driver = passwd-file } passdb { args = /etc/dovecot/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts = lucene fts_lucene = whitespace_chars=@. quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=98%% quota-warning 98 %u sieve = /mnt/vmails/%u/.dovecot.sieve sieve_dir = /mnt/vmails/%u/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = postmaster(a)example.com protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vmail user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] 2.2.4 + metadata plugin: autoconf failed
by Andreas Schulze 29 Aug '13

29 Aug '13

Hello, I can compile metadata plugin using debian squeeze + wheezy. But build on suse enterprise server 9,10 and 11 failed. The metadata plugin require autoconf-2.65 which i too new. On the other side I can build the dovecot-2.2.4 and pigeonhole-0.4.0 plugin without problems: dovecot require autoconf-2.59 and pigeonhole does not require any specific autoconf version. I asked the authors of the plugin for support but got no response. Maybe somebody could review the plugin. Thanks Andreas -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

2 3

Re: [Dovecot] Dovecot Dsync
by Ed W 29 Aug '13

29 Aug '13

On 27/08/2013 09:54, Ben wrote: > On 23/08/2013 13:08, Ed W wrote: >> Hi >> >>> I'm on an Ubuntu LTS release so the dovecot came from their release. >>> I'd prefer to stay that way unless I really have to... >> >> Everyone is entitled to their own opinions, but "IMHO" this kind of >> attitude is a huge detriment to most software projects. I see very >> little reason to take such policies personally... >> >> 1) I use virtualisation (especially lightweight virtualisation such as >> vservers) so that each service is in its own container. Now if I have no >> interest in some container and want to let it rot (ie as per LTS), then >> I can just do so. >> 2) I use a fast moving rolling distro (gentoo in my case, Arch is >> probably a good choice also) so that I have the option to stay up to >> date when I want to >> >> The end result is you can be as up to date as you want, or let things >> rot, as you please. >> >> Unfortunately if you want to use a very old bit of software, then you >> also get to keep all it's bugs... Sorry. >> >> Good luck! Hope this inspires you to try a different route! >> >> Ed W > > Whilst to some degree I appreciate where you're coming from and agree > with you to a certain extent, I would caution that following the > bleeding edge, always running the latest versions is not without risk > or bugs either ! OK, but virtualisation also helps you mitigate this: - I setup my "containers" so that I have at least two mount points, one for the operating system and any data broken out into it's own mount. - This makes it quite simple to duplicate the container and spin up a test version pointing if required at the live data - Now you can run a test upgrade on the test container. If it works either swap them around or upgrade the original Additionally: - My choice of distro (gentoo) makes it fairly simple to build binary packages of the software I'm using. - I then use these binary packages on all my containers, additionally with guided profiles which control which packages and which options we deploy. - It's fairly simple to roll back most packages to the previous binary version if a problem is detected (logging of package changes is built-in) So it's quite low risk to use such a rolling distro in general. Note, I can't speak for other distros, but gentoo "stable" is fairly conservative and shouldn't be a problem for an experienced admin to keep up to date. It has the option to unmask "bleeding edge" packages where necessary and this can be useful to hit specific version numbers of software. It's also pretty trivial to keep a private repo of customised packages (ebuilds) with either personal patches or to pin certain versions of software. (So for example if you run, say, Dovecot with a few custom patches, then it's fairly trivial to drop these patches in a directory and now you can use the package manager to follow stable builds, but your custom patches will be rolled in for you with each update - can be very handy for some requirements) I don't have the same experience with RPM/DEB so I can't say that all the same is easy to do, but the key thing is the use of containers/virtualisation to assist with testing and upgrades. Even worst case you have to do a whole OS upgrade, at least if you can do that in a test container while the live remains running, is a big advantage Good luck Ed W

1 0

Re: [Dovecot] mailbox_list_index, stops showing new mails in mailboxes
by Joseph Tam 29 Aug '13

29 Aug '13

Anton Lundin writes: > I'm using 2.2.4 over imap and ssh/imap, and after a while dovecot > stops noticing new mail in some folders. Its always the same 2-3 > folders of about 30. > ... > This is dovecot 2.2.4, running on Solaris 10 x86_64 to homedirs on zfs, > where procmail is used to deliver mail to mailboxes in mbox-format. What's your procmail recipe for delivering messages? If you're storing it directly to a mbox file, dovecot will never get a chance to see it and update the indices. An example of invoking LDA to store messages :0 Hw * /^From:.*dummy@/ | dovecot-lda -d yourusername -m dummybox # Dump mail into my INBOX using dovecot's LDA :0 w | dovecot-lda -d yourusername Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Issues with dovecot-antipsam plugin
by Vijay Rajah 29 Aug '13

29 Aug '13

Hello list, I have a postfix 2.11 with dovecot 2.2.5 instance. I have configured and installed anavisd-new to use Spamassassin. I want to train the filter. For that i choose dovecot's antispam plugin using mailtrain backend. I compiled and installed the latest version of the antispam plugin from http://hg.dovecot.org/dovecot-antispam-plugin/rev/5ebc6aae4d7c The configuration is below. Whenever I receive an email, the LMTP process segfaults. If I comment out the antispam plugin part in the config files, all works good. THis leads me to believe the issue is with antispam plugin, or its configuration. Here is what i see in /var/log/mailllog Aug 28 23:06:31 hostname.tld postfix/qmgr[1437]: 055F6345E: from=< sender(a)example.com>, size=10370, nrcpt=1 (queue active) Aug 28 23:06:31 hostname.tld postfix/smtpd[5512]: disconnect from localhost[127.0.0.1] Aug 28 23:06:31 hostname.tld amavis[5369]: (05369-05) Passed SPAM {RelayedTaggedInbound,Quarantined}, [74.125.82.176]:51219 [74.125.82.176] < sender(a)example.com> -> <email(a)mydomain.tld>, quarantine: spam-J09TFNU33sxa.gz, Queue-ID: 3A8093119, Message-ID: < CAMGVk5vH9YzkNFJ3xnWJ0060vpuf1PPzaCHWx71AmGF_qgJTmg(a)mail.gmail.com>, mail_id: J09TFNU33sxa, Hits: 12.123, size: 9323, queued_as: 055F6345E, dkim_sd=20120113:gmail.com, 606 ms Aug 28 23:06:31 hostname.tld postfix/lmtp[5510]: 3A8093119: to=<email(a)mydomain.tld>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.6, delays=0.94/0/0/0.61, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 055F6345E) Aug 28 23:06:31 hostname.tld postfix/qmgr[1437]: 3A8093119: removed Aug 28 23:06:31 hostname.tld dovecot: lmtp(5514): Connect from local Aug 28 23:06:31 hostname.tld dovecot: lmtp(5514): Fatal: master: service(lmtp): child 5514 killed with signal 11 (core dumps disabled) Aug 28 23:06:31 hostname.tld postfix/lmtp[5513]: 055F6345E: to=<email(a)mydomain.tld>, relay=hostname.tld[/opt/var/postfix/dovecot-lmtp], delay=0.09, delays=0.04/0/0.04/0, dsn=4.4.2, status=deferred (lost connection with hostname.tld[/opt/var/postfix/dovecot-lmtp] while sending end of data -- message may be sent more than once) Can someone help in fixing the issue… -Thanks in advance Vijay ######doveconf -n # 2.2.5: /opt/dovecot/2.2.5/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.14.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login digest-md5 cram-md5 auth_socket_path = /opt/var/dovecot/run/auth-userdb base_dir = /opt/var/dovecot/run/ debug_log_path = /var/log/dovecot-debug.log hostname = mail1(a)rvijay.me mail_debug = yes mail_location = maildir:/opt/mailbox/%d/%n/Maildir mail_plugin_dir = /opt/dovecot/2.2.5/lib/dovecot/ mail_plugins = " virtual quota antispam zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /opt/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { antispam_allow_append_to_spam = no antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /opt/dovecot/2.2.5/bin/sa-learn-pipe.sh antispam_mail_sendmail_args = -u vmail antispam_mail_spam = --spam antispam_mail_tmpdir = /tmp antispam_spam = Spam antispam_trash = Trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 450 4.2.2 Mailbox is full. Try again later quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_before = /opt/var/dovecot/sieve/ sieve_dir = ~/sieve sieve_global_dir = /opt/var/dovecot/sieve zlib_save = bz2 zlib_save_level = 9 } protocols = imap lmtp sieve service auth { unix_listener /opt/var/postfix/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /opt/var/postfix/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 10 vsz_limit = 64 M } service managesieve { process_limit = 1024 } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /opt/dovecot/2.2.5/etc/dovecot/conf.d/quota-warning.sh user = vmail } shutdown_clients = no ssl_ca = </opt/dovecot/2.2.5/etc/dovecot/ssl/mayca.crt.pem ssl_cert = </opt/dovecot/2.2.5/etc/dovecot/ssl/cert.pem ssl_key = </opt/dovecot/2.2.5/etc/dovecot/ssl/key.key ssl_parameters_regenerate = 30 hours submission_host = 127.0.0.1:587 userdb { driver = prefetch } userdb { args = /opt/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " virtual quota antispam zlib sieve zlib" } protocol imap { mail_plugins = " virtual quota antispam zlib imap_quota imap_zlib" } protocol lmtp { debug_log_path = /var/log/dovecot-lmtp-debg.log mail_plugins = " virtual quota antispam zlib sieve zlib" }

1 0

[Dovecot] Enforcing server cipher list order
by Phillip Odam 28 Aug '13

28 Aug '13

I noticed a similar/same discussion back on Aug 14th titled force ciphers order for clients. However from that thread I can't find quite what I'm after. From my testing of dovecot 2.1.6, by default it appears to honor the clients cipher list order for SSL/TLS connections. I can't find any documentation on dovecot providing a setting like Apache HTTPDs to either honor the client or server cipher list i.e. SSLHonorCipherOrder. Do newer versions (> 2.1.6) of dovecot either make this configurable or force honoring of the servers cipher list order? Or is the cipher selection a function that openssl performs? The version of openssl in use is 1.0.1e-fips. Thanks Phillip

1 0

Re: [Dovecot] Log successful login plain text password
by Joseph Tam 28 Aug '13

28 Aug '13

Marco Fretz writes: > Maybe you can find a way in this direction > > http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes I've sync'd a separate password system by process tracing dovecot's auth process and dumping out the arguments of read() calls for some fixed set of descriptors and piping it into password synching script. A bit of a hack, but it works without having to touch dovecot. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Bug in dovecot 2.2.5: segfault due to bad alignment
by Andreas F. Borchert 28 Aug '13

28 Aug '13

Take a look at the sources, hmac.h declares struct hmac_context: struct hmac_context { char ctx[HMAC_MAX_CONTEXT_SIZE]; char ctxo[HMAC_MAX_CONTEXT_SIZE]; const struct hash_method *hash; }; If compiled for a 32 bit virtual address space, this has an alignment requirement of 4 due to the hash pointer. In line 171 of auth-token.c, we have following declaration of ctx as a local variable in auth_token_get(): struct hmac_context ctx; This is put on an address with an alignment requirement of 4. In lines 174 and 175 hmac_init is invoked with hash_method_sha1: hmac_init(&ctx, (const unsigned char*)username, strlen(username), &hash_method_sha1); In hmac.c, lines 43 and following, ctx->ctx with an alignment of 4 is passed to meth->init and meth->loop where meth refers to hash_method_sha1: meth->init(ctx->ctx); meth->loop(ctx->ctx, k_ipad, 64); These functions refer now to sha1_init and sha1_loop where the first parameter is expected to be a pointer to struct sha1_ctxt, a data structure which is declared in sha1.h: struct sha1_ctxt { union { uint8_t b8[20]; uint32_t b32[5]; } h; union { uint8_t b8[8]; uint64_t b64[1]; } c; union { uint8_t b8[64]; uint32_t b32[16]; } m; uint8_t count; }; Here we have with b64 one uint64_t which has on a SPARC platform an alignment requirement of 8. In consequence, struct sha1_ctxt has an alignment requirement of 8. With the invocations of meth->init and meth->loop above we pass a pointer to a data structure of alignment 4 to a function expecting a pointer to a data structure of alignment 8. Chances are that the alignment requirement is not met, causing a segmentation violation. This must be solved by declaring struct hmac_context such that is not just big enough but respects also the highest alignment required for one of the hashing data structures. There are several options to do this: * Beginning with C11, you are free to use an alignment specifier, i.e. add _Alignas ( uint64_t ) (see section 6.7.5 in ISO 9899-2011) * GCC supports alignment attributes, i.e. add __attribute__ ((aligned (8))) or whatever is required instead of 8, see http://gcc.gnu.org/onlinedocs/gcc/Variable-Attributes.html * Do not use a local variable for it, allocate the data structure using malloc instead. If you want to see a live crash, here is the relevant output of gdb that debugs ${prefix}/libexec/dovecot/auth. Program received signal SIGSEGV, Segmentation fault. sha1_loop (ctxt=0xffbff63c, input=0xffbff548, len=64) at sha1.c:224 224 sha1.c: No such file or directory. (gdb) where #0 sha1_loop (ctxt=0xffbff63c, input=0xffbff548, len=64) at sha1.c:224 #1 0xff2e218c in hmac_init (ctx=ctx@entry=0xffbff63c, key=key@entry=0x6a698 "borchert", key_len=8, meth=0x555d0 <hash_method_sha1>) at hmac.c:44 #2 0x00023310 in auth_token_get (service=service@entry=0x6a648 "imap", session_pid=0x56071 "26272", username=0x6a698 "borchert", session_id=0x6a650 "AErv6nbk6gB/AAAB") at auth-token.c:174 #3 0x00021708 in userdb_callback (result=USERDB_RESULT_OK, request=0x6a530) at auth-request-handler.c:668 #4 0x0001f144 in auth_request_userdb_callback (result=<optimized out>, result@entry=USERDB_RESULT_OK, request=request@entry=0x6a530) at auth-request.c:1039 #5 0x000312c8 in prefetch_lookup (auth_request=0x6a530, callback=0x1f058 <auth_request_userdb_callback>) at userdb-prefetch.c:40 #6 0x0001f37c in auth_request_lookup_user (request=0x6a530, callback=callback@entry=0x2150c <userdb_callback>) at auth-request.c:1072 #7 0x00022034 in auth_request_handler_master_request ( handler=<optimized out>, master=master@entry=0x6b120, id=1292369921, client_id=1, params=0x55bfc) at auth-request-handler.c:758 #8 0x0001be98 in master_input_request (args=<optimized out>, conn=0x6b120) at auth-master-connection.c:127 #9 auth_master_input_line (line=<optimized out>, conn=0x6b120) at auth-master-connection.c:598 #10 master_input (conn=0x6b120) at auth-master-connection.c:653 #11 0xff2ecca4 in io_loop_call_io (io=io@entry=0x6b398) at ioloop.c:387 #12 0xff2ed604 in io_loop_handler_run (ioloop=ioloop@entry=0x5e5e8) at ioloop-poll.c:211 #13 0xff2ec7a8 in io_loop_run (ioloop=0x5e5e8) at ioloop.c:406 #14 0xff29ad7c in master_service_run (service=0x5e128, callback=0x27b40 <client_connected>) at master-service.c:566 #15 0x0001852c in main (argc=1, argv=0xffbffd54) at main.c:393 (gdb) print ctxt $1 = (struct sha1_ctxt *) 0xffbff63c As you can see, ctxt is on a 4-byte boundary, not on an 8-byte boundary. The crash happens at sha1.c:224 where the 8-byte-alignment is indeed mandatory on a SPARC architecture: ctxt->c.b64[0] += copysiz * 8; The environment is Solaris 10 on SPARCv9. The sources have been compiled using gcc 4.8.0 for 32 bit. Andreas.

2 1

[Dovecot] Dovecot proxy to Microsoft Exchange 2013
by Ricardo Machini Barbosa 28 Aug '13

28 Aug '13

Hello, I am trying to do a proxy with dovecot to IMAP backend server that are using Microsoft Exchange 2013. I already did this with Microsoft Exchange 2007 and Microsoft Exchange 2010 and it works perfectly! But with Microsoft Exchange 2013 I can not perform LOGIN. The error log message is: /imap-login: Error: proxy(user(a)domain.com.br): Login for exchange2013.domain.com.br:143 timed out in state=4 (after 30 secs, local=x.x.x.x:59640)/ My troubleshoot was: - tcpdump on dovecot server side: I can see the commands sent/received by Microsoft Exchange. But no the "OK LOGIN" response. /* OK The Microsoft Exchange IMAP4 service in xxxx is ready.// //C CAPABILITY// //L LOGIN "user(a)domain.com.br" "123456"// //* CAPABILITY IMAP4 IMAP4rev1 AUTH=PLAIN STARTTLS UIDPLUS CHILDREN IDLE NAMESPACE LITERAL+// //C OK CAPABILITY completed./ - tcpdump with telnet login on dovecot server side: Works fine. /* OK The Microsoft Exchange IMAP4 service in xxxx is ready.// //a login "user(a)domain.com.br" "123456"// //a OK LOGIN completed.// //a logout// //* BYE Microsoft Exchange Server 2013 IMAP4 server signing off.// //a OK LOGOUT completed./ - Log verbose on Microsoft Exchange 2013. Look like that Microsoft Exchange did not receive the login command. Someone already tried do this with Microsoft Exchange 2013 ? See bellow some information about my dovecot configuration: /# 2.2.2: dovecot.conf// //# OS: Linux 2.6.32-358.2.1.el6.centos.plus.x86_64 x86_64 CentOS release 6.4 (Final)// // //base_dir = /var/run/dovecot/// //disable_plaintext_auth = no// //listen = x.x.x.x// //mbox_write_locks = fcntl// //passdb {// // args = /etc/dovecot/dovecot-ldap.conf.ext// // driver = ldap// //}// // //protocols = imap pop3// //service imap-login {// // inet_listener imap {// // port = 143// // }// // inet_listener imaps {// // port = 993// // ssl = yes// // }// // process_min_avail = 4// // service_count = 0// // vsz_limit = 512 M// //}// //service pop3-login {// // inet_listener pop3 {// // port = 110// // }// // inet_listener pop3s {// // port = 995// // ssl = yes// // }// // process_min_avail = 4// // service_count = 0// // vsz_limit = 512 M// //}// //ssl_cert = </etc/dovecot/certificate/chained.crt// //ssl_key = </etc/dovecot/certificate/cert.key// //userdb {// // driver = prefetch// //}// // ///etc/dovecot/dovecot-ldap.conf.ext// //hosts = x.x.x.x// //dn = cn=admin,o=email// //dnpass = xxxxxxx// //ldap_version = 3// //base = o=email// //scope=subtree// //pass_filter = mail=%u// //pass_attrs = uid=user,=password=,=proxy=y,mailHost=host,=nopassword=y/ Thanks, Ricardo Machini

4 7

[Dovecot] Disable PAM username change?
by George 28 Aug '13

28 Aug '13

Hi! I have a problem involving Samba4, exim4, fetchmail, Dovecot and PAM... I am using Dovecot 2.1.7 on Debian Wheezy. I have setup a "maildrop" machine, which fetches mail from an external POP3 server for multiple accounts using fetchmail, delivers to local users mailboxes through exim4 and then serves them on the intranet via IMAP with Dovecot. This works great with local unix users, but I am having some trouble to configure it to work with Samba4 AD users (Samba 4.0.9 running as a DC on the same machine). Basically, I have configured PAM with winbind and it works fine (AD users can SSH the machine for example). Dovecot also authenticates properly via PAM, but the problem is that the username gets changed in the process (PAM returrns the "username" as "DOMAIN\username"): Aug 21 22:50:22 dc2 dovecot: auth-worker(5179): Debug: auth(foo,127.0.0.1): username changed foo -> DOMAIN\foo Aug 21 22:50:22 dc2 dovecot: auth: Debug: auth(foo,127.0.0.1,<0bBfg3/kpQB/AAAB>): username changed foo -> DOMAIN\foo Aug 21 22:50:22 dc2 dovecot: auth: Debug: client out: OK#0111#011user=DOMAIN\foo So the actual problem is that exim4 is delivering the mail to, for example, "/var/mail/foo" but Dovecot is looking for the mailbox on "/var/mail/DOMAIN\foo", even if the username given in the IMAP session is just "foo". The wiki mentions<http://wiki2.dovecot.org/PasswordDatabase/PAM>that "a PAM module can change the username". Can this be avoided? I need either: * Exim to deliver the mail to the user mailbox, *including* the domain part (out of scope of this list, but information is welcome), or * Dovecot to fetch the mail *not* using the domain part as part of the username variable. As a quick and dirty workaround, I hardcoded the domain part in the exim delivery path (something like "/var/mail/DOMAIN\\$local_part"), but this is far from optimal since I cannot use both unix users and AD users, I cannot use dovecot_delivery LDA transport, etc. As a bottom line, I also posted this to the Samba list because I believe this could also be solved if winbind just always returned the username without the domain when queried (conf option not working, probable bug) Ideas are welcome!! Best regards, Jorge

1 1

[Dovecot] Install of Dovecot 2.2.5 on Solaris 10/Openssl version 0.9.7d 17 Mar 2004
by Haney, Donald 28 Aug '13

28 Aug '13

Greetings! I am attempting to install Dovecot 2.2.5 on Solaris 10 Sparc hardware with openssl version 0.9.7d 17 Mar 2004. I have created a dovecot user and a dove null user, assigned them their own login directories specifying the ksh shell and assigned them to their own groups. I have run the configure command successfully and am having trouble with the make. At first, I received the problem listed below: /bin/bash ../../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/local/lib/dovecot"\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -I/usr/sfw/include -MT iostream-openssl-context.lo -MD -MP -MF .deps/iostream-openssl-context.Tpo -c -o iostream-openssl-context.lo iostream-openssl-context.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\"/usr/local/lib/dovecot\" -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -I/usr/sfw/include -MT iostream-openssl-context.lo -MD -MP -MF .deps/iostream-openssl-context.Tpo -c iostream-openssl-context.c -fPIC -DPIC -o .libs/iostream-openssl-context.o iostream-openssl-context.c: In function `ssl_proxy_ctx_set_crypto_params': iostream-openssl-context.c:451: error: `SSL_OP_SINGLE_ECDH_USE' undeclared (first use in this function) iostream-openssl-context.c:451: error: (Each undeclared identifier is reported only once iostream-openssl-context.c:451: error: for each function it appears in.) I followed directions found in http://hg.dovecot.org/dovecot-2.2/rev/27ebd9552471 to resolve this problem (I believe). I am now seeing the following error: test-http-server.c: In function `main': test-http-server.c:122: error: size of array `type name' is negative *** Error code 1 make: Fatal error: Command failed for target `test-http-server.o' Current working directory /export/home/hanedo00/dovecot-2.2.5/src/lib-http *** Error code 1 The following command caused the error: fail= failcom='exit 1'; \ for f in x $MAKEFLAGS; do \ case $f in \ *=* | --[!k]*);; \ *k*) failcom='fail=yes';; \ esac; \ done; \ dot_seen=no; \ I have not had any luck thus far finding the solution for this error against test-http-server.o. Any assistance would be appreciated. Thanks, Don Haney This message and any attachments are solely for the use of intended recipients. The information contained herein may include trade secrets, protected health or personal information, privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you are not an intended recipient, you are hereby notified that you received this email in error, and that any review, dissemination, distribution or copying of this email and any attachment is strictly prohibited. If you have received this email in error, please contact the sender and delete the message and any attachment from your system. Thank you for your cooperation

2 1

[Dovecot] Trouble with case-sensitive LDAP user logins
by Jason Discount 28 Aug '13

28 Aug '13

Hi All, I have a client running Dovecot-Postfix on Debian Squeeze. I'm using Dovecot from the Squeeze repository. # dovecot --version 1.2.15 I've implemented a central mail_location and am using one vmail user, as I thought this would be be the best approach for when it came time to implement Shared and Public Mailboxes. # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-686 i686 Debian 6.0.7 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3s managesieve listen(default): 127.0.0.1:143 listen(imap): 127.0.0.1:143 listen(pop3): 127.0.0.1:110 listen(managesieve): * ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_listen(managesieve): ssl_ca_file: /etc/ssl/certs/RapidSSL_CA_bundle.pem ssl_cert_file: /etc/ssl/certs/mail.example.com.2013.chain.pem ssl_key_file: /etc/ssl/private/example.2013.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_max_userip_connections(default): 40 mail_max_userip_connections(imap): 40 mail_max_userip_connections(pop3): 10 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_uid: vmail mail_gid: vmail mail_location: maildir:/var/spool/dovecot/%d/%u mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes lda: postmaster_address: postmaster(a)example.com mail_plugins: sieve quota log_path: /var/log/dovecot-deliver.log info_log_path: /var/log/dovecot-deliver.log auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-userdb.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: quota: maildir:User quota_rule: *:storage=1200M quota_rule2: Deleted Messages:storage=10%% quota_rule3: Deleted Items:storage=10%% quota_rule4: Trash:storage=10%% sieve: /var/spool/sieve/%d/%u/.dovecot.sieve sieve_dir: /var/spool/sieve/%d/%u All of the mail users are LDAP users only (not local UNIX users - not using nsswitch). dovecot-ldap-userdb.conf is a symbolic link to dovecot-ldap.conf # grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-ldap.conf uris = ldaps://mail.example.com/ dn = uid=mail,ou=Services,dc=example,dc=com dnpass = ****************** tls_require_cert = hard auth_bind = yes base = ou=People,dc=example,dc=com user_attrs = quota=quota_rule=*:storage=%$M user_filter = (&(objectClass=posixAccount)(mail=%u)) pass_attrs = uid=mail,userPassword=password pass_filter = (&(objectClass=posixAccount)(mail=%u)) Now, mail addressed to user(a)example.com and user(a)EXAMPLE.com correctly gets delivered to the correct mail location of /var/spool/dovecot/example.com/user, but the problem occurs when the user creates their account with uppercase characters in their username, e.g. user(a)exaMPLE.com. This creates a new directory at /var/spool/dovecot/exaMPLE.com/user, which ever receives any mail. Is it possible to ignore the case the user enters in their mail client and always land them at the lowercase mail directory? Where would this be done? Thank you, Jay

1 0

[Dovecot] How do I get CRAM-MD5 to work?
by LuKreme 27 Aug '13

27 Aug '13

I know how to ENABLE CRAM-MD5, but getting it to actually work? <http://wiki2.dovecot.org/HowTo/CRAM-MD5> It looks like I have to 1) manually create a CRAM-MD5 data file and, I suppose, 2) manually manage the file? Given I do not know user's passwords, this might be tricky. Currently I have users authenticate against MySQL (virtual users) or pam (local users). Or do i just ignore it all and stick with PLAIN since the connection is already encrypted? What is LOGIN? My MUA supports "Password" (which is PLAIN evidently), kerberos 5, MD5 Challenge-response (CRAM-MD5), and NTML (??) -- If you have any young friends who aspire to become writers, the second-greatest favor you can do them is to present them with copies of The Elements of Style. The first-greatest, of course, is to shoot them now, while they're happy. -Dorothy Parker

1 0

[Dovecot] Migrating from Maildir to Maildir:LAYOUT=fs
by Rainer M Krug 27 Aug '13

27 Aug '13

Hi I have use dovecot together with offlineimap to download my gmail account on a single user computer and I have only one maildir (~/Maildir). As I switched to Mac, I would like to use spotlight to index my mails, which apparently does not work as they are in hidden directories (.directories). So I would like to change to LAYOUT=fs. Is there an easy way to migrate my email structure? I have several folders and subfolders, but a manual solution would be fine with me as well. My questions: 1) can I simply restructure the mailboxes and rename the folders / move them into the folders where I want them after changing the configuration of dovecot? 2) Is there an easy tool I can use for this for one mailbox which is doing it automatically? Thanks, Rainer -- Rainer M. Krug email: RMKrug<at>gmail<dot>com

3 4

[Dovecot] Developer docs?
by C. Mills 26 Aug '13

26 Aug '13

Hi, I'm looking to modify Dovecot slightly to add support for a custom feature. I've spent some time reading the code, and I've been wondering if there are any contributor/developer documents I've missed that would make getting up to speed easier. I've read much of the code, and most of the wiki, including the Design/* and /*Process pages. They give a good summary of some of the design decisions, but I don't see much other than that. The docs included in the tarball are just dumps of the wiki pages. I've browsed some of the list archives as well, without finding much to help me. Are there other resources I've missed? What I'm trying to do requires passing some additional information/state from the imap-login process (presumably through the master) to the imap mail process. Any pointers much appreciated! Thanks, C. -- ----------------------------------------------------------------------- C. Mills -----------------------------------------------------------------------

2 4

[Dovecot] Dovecot tuning for GFS2
by Andrea gabellini - SC 26 Aug '13

26 Aug '13

Hello, I'm deploing a new email cluster using Dovecot over GFS2. Actually I'm using courier over GFS. Actually I'm testing Dovecot with these parameters: mmap_disable = yes mail_fsync = always mail_nfs_storage = yes mail_nfs_index = yes lock_method = fcntl Are they correct? RedHat GFS support mmap, so is it better to enable it or leave it disabled? The documentation suggest the use of flock. What about it? Thanks, Andrea -- ---------------------------------------------------------------- Don't talk with a full mouth ... or with an empty head ---------------------------------------------------------------- Ing. *Andrea Gabellini* Email: andrea.gabellini(a)telecomitalia.sm <mailto:Andrea%20Gabellini%20%3Candrea.gabellini@telecomitalia.sm%3E> Skype: andreagabellini Tel: (+378) 0549 886111 Fax: (+378) 0549 886188 Telecom Italia San Marino S.p.A. Strada degli Angariari, 3 47891 Rovereta Republic of San Marino http://www.telecomitalia.sm

9 23

[Dovecot] zlib plugin issues
by Vijay Rajah 26 Aug '13

26 Aug '13

Hello, I'm running dovecot 2.2.5 in Centos 6.4 on EXT4 fs. I have activated zlib plugin. The incoming mails is compressed. However, when i try to retrieve the mail using imap I'm getting this error Aug 25 22:17:31 vrajah-vps5 dovecot: imap(me@<mydomain.tld>): Error: Cached message size smaller than expected (1464 < 2452) Aug 25 22:17:31 vrajah-vps5 dovecot: imap(me@<mydomain.tld>): Error: Maildir filename has wrong S value, renamed the file from /mail/mailbox/ rvijay.me/me/Maildir/.vijay_gmail/cur/1377448276.M960004P32378.vrajah-vps5,S=1464:2, to /mail/mailbox/<mydomain.tld>/me/Maildir/.vijay_gmail/cur/1377448276.M960004P32378.vrajah-vps5,S=1464:2, Aug 25 22:17:31 vrajah-vps5 dovecot: imap(me@<mydomain.tld>): Error: Corrupted index cache file /mail/mailbox/<mydomain.tld>/me/Mai ldir/.vijay_gmail/dovecot.index.cache: Broken physical size for mail UID 12 $ file /mail/mailbox/<mydomain.tld>/me/Maildir/.vijay_gmail/cur/1377448276.M960004P32378.vrajah-vps5\,S\=1464\:2\,S /mail/mailbox/<mydomain.tld>/me/Maildir/.vijay_gmail/cur/1377448276.M960004P32378.vrajah-vps5,S=1464:2,S: bzip2 compressed data, block size = 900k Am I missing anything? any ideas is much appreciated. Thanks Vijay ###################doveconf -n ############################ Here is my doveconf -n # 2.2.5: /mail/dovecot/2.2.5/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.14.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login digest-md5 cram-md5 auth_socket_path = /mail/var/dovecot/run/auth-userdb base_dir = /mail/var/dovecot/run/ debug_log_path = /var/log/dovecot-debug.log hostname = mail1(a)rvijay.me mail_location = maildir:/mail/mailbox/%d/%n/Maildir mail_plugin_dir = /mail/dovecot/2.2.5/lib/dovecot/ mail_plugins = " virtual quota zlib" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% quota_rule3 = Spam:storage=+20%% quota_status_nouser = DUNNO quota_status_overquota = 450 4.2.2 Mailbox is full. Try again later quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /mail/var/dovecot/sieve zlib_save = bz2 zlib_save_level = 9 } protocols = imap lmtp sieve service auth { unix_listener /mail/var/postfix/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /mail/var/postfix/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 10 vsz_limit = 64 M } service managesieve { process_limit = 1024 } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } service quota-warning { executable = script /mail/dovecot/2.2.5/etc/dovecot/conf.d/quota-warning.sh user = vmail } shutdown_clients = no ssl_ca = </mail/dovecot/2.2.5/etc/dovecot/ssl/mayca.crt.pem ssl_cert = </mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.rvijay.me.pem ssl_key = </mail/dovecot/2.2.5/etc/dovecot/ssl/mail1.rvijay.me.key ssl_parameters_regenerate = 30 hours submission_host = 127.0.0.1:587 userdb { driver = prefetch } userdb { args = /mail/dovecot/2.2.5/etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " virtual quota sieve zlib" } protocol imap { mail_plugins = " virtual quota imap_quota zlib" } protocol lmtp { mail_plugins = " virtual quota sieve zlib" }

1 1

[Dovecot] SMTP Proxy
by Leonardo Rodrigues 26 Aug '13

26 Aug '13

Hi, I have found a message on this mailing list dated August/2012 in which is said that dovecot could not (at least at that time) do SMTP Authentication using Proxy Features. http://www.dovecot.org/list/dovecot/2012-August/067998.html is this still true, given i'm using latest stable dovecot, v2.2.5 ? extra informations ... smtp authentication is done by postfix using: dovecot: service auth { unix_listener /var/spool/postfix/private/auth { mode = 0660 user = postfix group = postfix } } postfix: smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth Thanks ! -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

2 4

[Dovecot] Nee assistance with migrating/copying a virtual user's maildir to another virtual user
by David Varela 26 Aug '13

26 Aug '13

Hello, I am trying to move/copy a virtual user's maildir to another virtual user but am running into problems with dsync and doveadm. I'm trying to move the maildir of a user who is no longer with the company to a manager's maildir. For doveadm I am using the command: doveadm move -u scavenaugh(a)lamontanita.coop jhenning(a)lamontanita.coop/INBOX/scavenaugh INBOX ALL The error is: doveadm(scavenaugh(a)lamontanita.coop): Error: user scavenaugh(a)lamontanita.coop: Auth USER lookup failed /var/log/dovecot.log shows: passdb doesn't support lookups, can't verify user's existence dovecot -n # 2.1.6: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.2-RELEASE i386 ufs auth_cache_ttl = 14 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain gssapi login auth_use_winbind = yes auth_verbose = yes auth_winbind_helper_path = /usr/local/bin/ntlm_auth first_valid_gid = 1001 first_valid_uid = 1001 info_log_path = /var/log/dovecot_info.log last_valid_gid = 1001 last_valid_uid = 1001 log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/usr/data/vmail/%u mail_max_userip_connections = 30 mail_privileged_group = mail passdb { args = /usr/local/etc/dovecot-ldap.conf driver = ldap } plugin { sieve = /usr/data/sieve-scripts/%u.sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 } user = root } ssl_cert = </etc/ssl/dovecot/04JAN12cert.pem ssl_key = </etc/ssl//dovecot/04JAN12key.pem userdb { args = uid=vmail gid=vmail home=/usr/data/vmail/%u driver = static } valid_chroot_dirs = /usr/data/vmail verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve sendmail_path = /usr/sbin/sendmail } Your assistance is greatly appreciated. David Varela

2 5

[Dovecot] Dovecot auth error
by mehrdad nosrati 26 Aug '13

26 Aug '13

Greeting I'm newbie to Squirrelmail and just installed Dovecot in CentOS6.3. When I try to login to the Squirrelmail, then I get the following error: auth: Info: passwd(myusername(a)myserver.com): unknown user my config file is as follow: # /usr/bin/doveconf -n -c /etc/dovecot/dovecot.conf # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_mechanisms = plain login auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_debug = yes mail_location = maildir:~/MaIL mbox_write_locks = fcntl passdb { driver = passwd } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv Any help would be appreciable. Thanks! Mehrdad.

2 1

[Dovecot] A question of imap timeout exit
by 刘莹莹 26 Aug '13

26 Aug '13

hello: I have a question on imap process: if a client connect to dovecot like foxmail(version 10) , dovecot will start at least 3 imap processes , and these imap processes will online until client logout , if the client not logout ,the imap process will always online. this is similar to the long connection and imap's auto logout timer is not effect in this case. now I have two questions: 1: if there are a large number of users online at the same time ( eg about 30 000 users): so dovecot should shart at least 30 000 * 3 imap processes, if user not logout ,so many processes are online all the time .this is terrible. I dot'n know if there is a solution ?? now I have changed the timeout = 2min and test ,dovecot active disconnected imap process ,but I don't think this is a appropriate option. 2: I want to know why auto logout timer duration of IMAP protocol must be not less than 30 minuters ?? My English is not vary good ,I'm sorry but I really want to know the answer . thanks

2 1

[Dovecot] Disabled pop3-login
by LuKreme 26 Aug '13

26 Aug '13

In my dovecot.conf I do not have pop3-login anabled (since I do not support pop3): # doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = CRAM-MD5 DIGEST-MD5 APOP LOGIN PLAIN disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 50 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u driver = sql } but I see thousands (tens of thousands) of dovecot:Aug 18 14:26:06 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.93, session=<+VcroT7kUgBKX1KW> dovecot:Aug 18 14:26:10 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.93, session=<kbNdoT7kWwBKX1KW> dovecot:Aug 18 14:26:13 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.93, session=<rRWQoT7kWgBKX1KW> dovecot:Aug 18 14:26:15 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.91, session=<feCpoT7kfwBKX1KW> dovecot:Aug 18 14:26:16 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.93, session=<lmTCoT7kiQBKX1KW> dovecot:Aug 18 14:26:18 pop3-login: Info: Aborted login (auth failed, 1 attempts in 17 secs): user=<john>, method=PLAIN, rip=74.95.82.150, lip=75.148.117.91, session=<5oPcoT7ktABKX1KW> Yes, I need to install fail2ban or something on this new machine, but still... -- Mom: There was more than one lobster present at the birth of Jesus? Daughter: Duh.

6 9

[Dovecot] commented lines still active
by LuKreme 26 Aug '13

26 Aug '13

despite the manage sieve lines on dovecot.conf being currently commented out show as active in doveconf -n # cd /usr/local/etc/dovecot/ # grep -ir sieve . ./dovecot.conf:#managesieve_notify_capability = mailto ./dovecot.conf:#managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave ? -- 'You know me,' said Rincewind. 'Just when I'm getting a grip on something Fate comes along and jumps on my fingers.' --Interesting Times

3 2

[Dovecot] dovecot OK for intranet, not OK for external IPs
by Sulla 24 Aug '13

24 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear all! I'm stuck. I've got a dovecot IMAP server running (TLS, port 149) on Ubuntu 13.04 server behind a DSL router. The mailserver's IP is 10.0.0.1 When I connect to my mailbox from my intranet-PC (10.0.0.2), everything works as expected. Login OK, acces to all mailboxes is ok, everything. netstat -nt on my email server shows me: Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 10.0.0.1:143 10.0.0.2:57952 ESTABLISHED and /var/log/mail.log shows me: Aug 24 22:41:00 SERVERNAME dovecot: imap-login: Login: user=<UID>, method=PLAIN, rip=10.0.0.2, lip=10.0.0.1, mpid=24326, TLS, session=<3Ul+irfkYAAKAAAC> However, when I connect to my mailserver through the internet (from 10.196.124.7 which is a modem of my ISP), dovecot ignores the authentication request. It does nothing. Just nothing. My router forwards the connection request to my mailserver correctly, so port forwarding on the router is ok, as my mailserver gets a connection request from the client. Proof: "netstat -nt" shows me: Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 10.0.0.1:143 10.196.124.7:1024 SYN_RECV So, my server gets a connection request on port 143 from my client PC, but then nothing happens. By nothing I mean, that nothing gets written into /var/log/mail.log and my email client (Thunderbird) gets a connection timeout. Any ideas why dovecot is refusing connections? How can I solve this problem? thanx all Sulla -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlIZI7sACgkQR6b2EdogPFvqxACgrUACK1J8tHCxJR0jMUui14bs TsoAnAw4QnVr2kydjk2cErKW+i6oVu1f =86wg -----END PGP SIGNATURE-----

4 3

[Dovecot] Dovecot LDA
by LuKreme 24 Aug '13

24 Aug '13

OK, I did read <http://wiki2.dovecot.org/LDA> but it doesn't answer the question I have since it doesn't tell me what I can do with -o, exactly. What I would like to do is be able to call dovecot-lda and pass along '\\Seen', is that possible? -- Up the airy mountains, down the rushy glen... From ghosties and bogles and long-leggity beasties... My mother said I never should... We dare not go a-hunting for fear... And things that go bump... Play with the fairies in the wood... --Lords and Ladies

2 2

[Dovecot] expire plugin doesn't work?
by Anton Chigin 24 Aug '13

24 Aug '13

Hello, I've configured dovecot to use expire plugin: heres my dovecot -n: --------------------- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login dict { expire = mysql:/etc/dovecot/dovecot-dict-expire-sql.conf.ext } mail_location = maildir:/home/mail/vhosts/%d/%n mail_plugins = expire mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash 7 expire_dict = proxy::expire sieve = ~/dovecot.sieve sieve_dir = ~/sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 32 } protocols = imap pop3 lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 128 M } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_ca = </etc/ssl/my_certs/sub.class1.server.ca.pem ssl_cert = </etc/ssl/private/chig.in/mail/mail.chig.in.crt ssl_key = </etc/ssl/private/chig.in/mail/mail.chig.in.key userdb { args = uid=vmail gid=vmail home=/home/mail/vhosts/%d/%n driver = static } protocol lmtp { mail_plugins = expire sieve } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Cyrus timsieved v2.2.13 managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 } --------------------- What exactly I did.... 1) dovecot.conf dict { expire = mysql:/etc/dovecot/dovecot-dict-expire-sql.conf.ext } 2) /etc/dovecot/dovecot-dict-expire-sql.conf.ext connect = host=127.0.0.1 dbname=mailserver user=mail password=SOMEPASS map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } 3) conf.d/10-mail.conf mail_plugins = expire 4) conf.d/90-plugin.conf plugin { #setting_name = value expire = Trash 7 expire_dict = proxy::expire } 5) Created table in mysql server mysql> show create table expires; +---------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Table | Create Table | +---------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | expires | CREATE TABLE `expires` ( `username` varchar(75) NOT NULL, `mailbox` varchar(255) NOT NULL, `expire_stamp` int(11) NOT NULL, PRIMARY KEY (`username`,`mailbox`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8 | +---------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ 1 row in set (0.00 sec) And nothing works dovecot debug shows nothing: only one string related to expire plugin Aug 24 04:21:37 piscola dovecot: lmtp(16927): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_expire_plugin.so mysql general query log show nothing also... Can anyone help me please? Thanks a lot!

2 8

[Dovecot] SSL Cipher Order in Dovecot
by Marc Grooz 23 Aug '13

23 Aug '13

Hi, I want that dovecot uses PFS with my Apple Devices. I set the Cipher List to: ssl_cipher_list = DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!PSK:!SRP:!DSS:!SSLv2:!RC4 I got this from here: http://www.kuketz-blog.de/perfect-forward-secrecy-mit-apple-mail/ But then my only Outlook 2010 Client won't connect. If i enable rsa-aes128-SHA again on third place all clients connect without dhe. Dosen't dovecot horner the Cipher Order in the config? Kind regards Marc

1 0

[Dovecot] piegonhole sieve prepending header lines with an extra space
by Anand Kumria 23 Aug '13

23 Aug '13

Hi, I've noticed that the redirect sieve extension is placing an extra space before the headers of email when the 'redirect' command is used. Unfortunately this break gmail, yahoo, and most other email programs. I am using pigeonhole 0.4.0-14 with Dovecot 2.2.4.3; I see change 1781:e439789e3211 but it appears to only change how the X-Sieve header is generated. I only have the one dovecot instance but I will note that the setting 'mail_save_crlf = yes' is specified. Thanks, Anand

2 9

[Dovecot] Dovecot Dsync
by Ben 23 Aug '13

23 Aug '13

Hi, Sorry to bump it, but I've yet to receive even one reply to my question the other day about Dsync ? Everyone else seems to have been receiving replies to their questions and so I'm feeling a little lonely out in the cold. I can't believe nobody on-list uses Dsync ? Ben

4 6

[Dovecot] Logging passwords on auth failure/dealing with botnets
by Michael Smith (DF) 23 Aug '13

23 Aug '13

Hi, Since upgrading our mail servers to Postfix/Dovecot, we've seen a rather large increase in botnet brute force password attacks. I guess our old servers were too slow to suit their needs. Now, when they hit upon a valid user, it's easy to see what passwords they are trying (we've enabled auth_debug_passwords and set auth_verbose_passwords = plain). We can easily have log monitors pick up the blatant password attempts (123, 1234, 12345, 3.1415926, etc) and firewall them. Aug 22 00:21:47 host1 dovecot: auth-worker(1423): sql(aea,120.198.9.221): Password mismatch (given password: 3.1415926) However, when they are plugging away on an invalid user, all the logs show is 'unknown user'. The only way to see what they are doing is to tcpdump on the box. Almost 99% of the attacks are through SMTP/SASL attempts, using 'auth login'. Postfix is configured to use Dovecot for the authentication backend. NOTE: parens contain the base64 decoded values, this is not part of the data stream. C: auth login S: 334 VXNlcm5hbWU6 (334 Username:) C: YWVi (aeb) S: 334 UGFzc3dvcmQ6 (334 Password:) C: My4xNDE1OTI2 (3.1415926) S: 535 5.7.8 Error: authentication failed: UGFzc3dvcmQ6 (535 5.7.8 Error: authentication failed: Password:) Aug 22 11:00:31 host3 dovecot: auth-worker(19844): sql(aeb,120.198.9.221): unknown user How difficult would it be to add logging the given password, observing the auth_debug_passwords and auth_verbose_passwords settings, for all authentication failures? When we see certain patterns, we want to aggressively block those IPs, regardless of if it's a valid username or an unknown user. Or another option, is there any good DNS based RBLs for botnet IPs, and is there any way to tie that in to the dovecot auth system? I've been looking for botnet rbls, but what I've found so far doesn't seem to work very well. Most of the IPs that I've had to firewall don't exist in them. -- Michael Smith

3 2

Re: [Dovecot] Load goes up imap-login
by megodin＠inboxalias.com 22 Aug '13

22 Aug '13

Hi there Giles, not really a solution to your problem, but a hint: Try activating "verbose_proctitle = yes" in your dovecot.conf, restart service dovecot and you might get more information (when the load is produced by logged in users) - it gives you verbose information about which specific user with which IP is generating the high load. All the best, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

Re: [Dovecot] Sieve filterset not activating in Dovecot 2.0.15 with, Sieve plug-in and Roundcube 0.5.3: "NO (TRYLATER) Internal Error." (Steffen Kaiser)
by Joe Lourenco 22 Aug '13

22 Aug '13

Thank you Steffen Kaiser. I enabled the auth_debug and saw this error for permissions: Aug 22 13:41:44 managesieve($u): Error: sieve-storage: Creating symlink() /home/$u/.dovecot.sieve to sieve/Out of office.sieve failed: Permission denied The user's home directory was owned by root. Can not explain it why it was so. Thanks again! > On Wed, 21 Aug 2013, Joe Lourenco wrote: > > > roundcube: S: NO (TRYLATER) "Internal error occured. Refer to server log > > for more information. [2013-08-21 19:01:13]" > > > Nothing is showing up on the server log. > > Check out Dovecot's error log and search for that timestamp of the > message, it is there - unless, say, an out of disk error prevented the > logging. >

1 0

[Dovecot] Problem compiling 2.2.5
by Luciano Mannucci 22 Aug '13

22 Aug '13

I'm trying to upgrade a very old sparcstation running Solaris 8 which is running dovecot 1.x for few users. All I have for the task is good old gcc 2.95.2. The poor sod complains because it can't compute the sizeof(unsigned char prefix_text[]) at line 13 of log-error-buffer.c. Can I help it by - say - putting a constant between the '[]'? Or is it unfair? :-) I don't think it's woth modifying the distribution only for us owning machines that should be in a museum by now... Thanks for the good software, BTW, luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano (Italy) \ / ASCII RIBBON CAMPAIGN / PHONE : +39 2 485781 FAX: +39 2 48578250 X AGAINST HTML MAIL / E-MAIL: posthamster(a)sublink.sublink.ORG / \ AND POSTINGS / WWW: http://www.lesassaie.IT/

4 7

[Dovecot] Load goes up imap-login
by Giles Coochey 22 Aug '13

22 Aug '13

Every so often recently I've seen the load on my heavily under-used dovecot server (1 mailbox) rise up to 1 A top shows imap-login to causing the issue. I have checked /var/log/secure, /var/log/maillog, /var/log/messages and cannot see anything unusual. Anybody else seen something like this? # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.14.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) listen = * mail_location = maildir:~/.Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/.sieve } protocols = imap service imap { process_limit = 2048 } ssl_cert = </etc/pki/dovecot/certs/imap.crt ssl_key = </etc/pki/dovecot/private/imap.key userdb { driver = passwd } protocol lmtp { mail_plugins = sieve $mail_plugins } protocol lda { mail_plugins = sieve } protocol imap { mail_max_userip_connections = 50 } -- Regards, Giles Coochey, CCNP, CCNA, CCNAS NetSecSpec Ltd +44 (0) 8444 780677 +44 (0) 7983 877438 http://www.coochey.net http://www.netsecspec.co.uk giles(a)coochey.net

1 0

[Dovecot] combining pop3 and imap accounts
by Patrick Shirkey 22 Aug '13

22 Aug '13

HI, I have a working exim4 + dovecot system that uses system user folders for the inbox. exim4: domains = dsearch;/etc/exim4/virtual dovecot: mail_location = mbox:~/mail:INBOX=/var/mail/%u - I would like to add additional virtual accounts using the method described in this post: http://www.debian-administration.org/articles/302 exim4: /etc/exim4/conf.d/router/360_exim4-local_vdom_aliases vdom_aliases_maildir: debug_print = "R: vdom_aliases_maildir for $local_part@$domain" driver = redirect allow_defer allow_fail domains = dsearch;/var/mail/virtual data = /var/mail/virtual/$domain/$local_part/ directory_transport = address_directory pipe_transport = address_pipe file_transport = address_file dovecot: mail_location = maildir:/var/mail/virtual/%d/%n/ auth_userdb = passwd-file /etc/passwd.imap - I have read about "Namespace" but I am not sure if they will work with virtual pop3 and virtual imap accounts. as I also want to keep the existing pop3 setup without have to modify the location of the inbox for existing accounts pop3 accounts. It seems that exim4 is fine with this method but I am not sure about dovecot. Is it possible to have pop3 and imap running while also using multiple delivery folder locations for the mail_location directive? -- Patrick Shirkey Boost Hardware Ltd

1 0

[Dovecot] Sieve filterset not activating in Dovecot 2.0.15 with Sieve plug-in and Roundcube 0.5.3: "NO (TRYLATER) Internal Error."
by Joe Lourenco 22 Aug '13

22 Aug '13

Hello Everyone, I am running Dovecot 2.0.15 with its Sieve plug-in, and Roundcube 0.5.3. I have a problem with just one particular user, who after creating a filters set and creating a filter in Roundcube, this user cannot activate the filters set. At first, this user could not create a filter at all. That was resolved by creating the "sieve" directory with the right permissions in his /home. Logs show the following when trying to activate the filters set via the Roundcube: roundcube: S: NO (TRYLATER) "Internal error occured. Refer to server log for more information. [2013-08-21 19:01:13]" Nothing is showing up on the server log. I have tried to activate the filter via the Sieve command line, authenticating the user, then running "SETACTIVE "roundcube"", but the error is the same, an internal server error. Again, I can successfully do this via the command line or Roundcube, from say, my userid. I appreciate any help. -- Joe Lourenco Systems Administrator C & C Technologies Cell: 55-21-8596-0078 Phone: 55-21-2499-9591

2 1

[Dovecot] dovecot2, antispam and sieve versions
by Terry Barnum 21 Aug '13

21 Aug '13

I'm currently running dovecot2 v2.2.5 with dovecot2-antispam 0.0-51 and dovecot2-sieve 0.4.1, all via macports. If one wanted to downgrade to dovecot v2.2.0, would these versions of antispam and sieve still be okay to use? The reason for the question is I'm trying to diagnose a mailserver problem where after 2-6 days the machine goes deaf. Absolutely nothing of interest in any logfile that I can see except for an imap-login process crash which got me thinking about a downgrade test. Thanks, -Terry Terry Barnum digital OutPost http://www.dop.com

1 0

[Dovecot] Dovecot antispam plugin for 2.2
by Micah Anderson 21 Aug '13

21 Aug '13

Hello, I recently was looking to update to dovecot 2.2 and I have been happily using the dovecot-antispam plugin in 2.1, but found that there have been some changes in dovecot that make this version not compile against 2.2. I'm wondering if Johannes you have any plans to update it, or if others have managed to figure out what is necessary to get it to work? The particular piece that I am currently stuck on is that the dict_init() in dovecot now requires more arguments than in previous versions, it now requires this: int dict_init(const char *uri, enum dict_data_type value_type, const char *username, const char *base_dir, struct dict **dict_r, const char **error_r); but previously, we only needed four arguments. Now we need to know what to supply for '**dict_r' and '**error_r'. Any advise/help would be appreciated: make[1]: Entering directory `/home/micah/debian/dovecot-antispam/dovecot-antispam-2.0+20120225' cc -DHAVE_CONFIG_H -I/usr/include/dovecot/ -I/usr/include/dovecot/src/ -I/usr/include/dovecot/src/lib/ -I/usr/include/dovecot/src/lib-storage/ -I/usr/include/dovecot/src/lib-mail/ -I/usr/include/dovecot/src/lib-imap/ -I/usr/include/dovecot/src/lib-dict/ -I/usr/include/dovecot/src/lib-index/ -I/usr/include/dovecot/src/imap/ -o dovecot-version dovecot-version.c ./dovecot-version > dovecot-version.h CC antispam-storage.o In file included from antispam-storage-2.2.c:20:0, from antispam-storage.c:3: antispam-plugin.h: In function ‘string_dict_init’: antispam-plugin.h:288:2: error: too few arguments to function ‘dict_init’ return dict_init(uri, DICT_DATA_TYPE_STRING, username, NULL); ^ In file included from antispam-plugin.h:13:0, from antispam-storage-2.2.c:20, from antispam-storage.c:3: /usr/include/dovecot/dict.h:34:5: note: declared here int dict_init(const char *uri, enum dict_data_type value_type, ^ micah

2 1

[Dovecot] Dsync confusion...
by Ben 21 Aug '13

21 Aug '13

Hi, Maybe I've been staring at config files and man pages too long, but the doc page for Dsync is a little confusing and I don't how to solve my problem. I've probably missed something simple and stupid, but as I said, I've been staring at this problem too long and need a second pair of eyes on it ! Per doveconf below the user/owner for auth db is a user with shell /bin/false. Root SSH login is also disabled on the target machine, so I need to use a script user to do the sync. I installed dovecot on the target host and config'd it as per the second doveconf below But all I ever get are errors such as : su -c "dsync -u test(a)somewhere.example.com backup its-virtmail(a)somewhere.example.com" its_scripts dsync(its_scripts): Fatal: setuid(1001(its-virtmail) from userdb lookup) failed with euid=1002(its_scripts): Operation not permitted (This binary should probably be called with process user set to 1001(its-virtmail) instead of 1002(its_scripts)) root@ukc-vm02-mx01:/etc/dovecot/conf.d# dsync(its_scripts): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=1002(its_scripts) egid=1002(its_scripts) missing +r perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) Even if I temporarily give /bin/sh and an ssh key to the dovecot user, I still can't get it to work : ssh its-virtmail(a)somewhere.example.com dsync -u test(a)example.com dsync(its-virtmail): Error: user test(a)somewhere.example.com: Initialization failed: mail_location not set and autodetection failed: Mail storage autodetection failed with home=/srv/mail/example.com/test dsync(its-virtmail): Fatal: User init failed dsync-local(test(a)somewhere.example.com): Error: read() from worker server failed: EOF # SOURCE HOST # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-37-generic x86_64 Ubuntu 12.04.2 LTS auth_verbose = yes auth_verbose_passwords = sha1 mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { fts = solr fts_solr = url=http://localhost:8080/solr/ sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = its-virtmail mode = 0660 user = its-virtmail } } service imap-login { process_min_avail = 3 } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = its-virtmail } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieves { port = 5190 ssl = yes } process_min_avail = 3 } ssl = required ssl_cert = </etc/ssl/certs/mx_example.com.pem ssl_cipher_list = TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!3DES:!PSK:@STRENGTH ssl_key = </etc/ssl/private/mx_example.com.key userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 mail_plugins = fts fts_solr } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol lmtp { mail_plugins = sieve postmaster_address = postmaster(a)example.com } #DEST HOST # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-37-generic x86_64 Ubuntu 12.04.2 LTS auth_verbose = yes auth_verbose_passwords = sha1 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve" service auth { unix_listener auth-userdb { group = its-virtmail user = its-virtmail } } service lmtp { process_min_avail = 3 user = its-virtmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file }

3 3

[Dovecot] Question: dovecot-1.2.17 , pop3
by Kutrus Neloy 21 Aug '13

21 Aug '13

Hi, you have written in your Dovecot 2.2.5 - Changelog that you have solved a Problem with pop3. *· pop3: Avoid assert-crash if client disconnects during LIST.* My question is: Is it possible to get this problem with my version? 1.2.17 ? Thanks

4 4

[Dovecot] username and password can't be verified
by Eric Kom 21 Aug '13

21 Aug '13

Good day Folks, I am trying to setup a mail server based on dovecot(with imap and pop3) and postfix as a smtp on debian jessie/sid. The login its system user. After I have tried to configure the client (Icedove), this last can find the imap, pop3 and smtp servers; but the can't be verified. Please see below my dovecot, postfix configurations and log details. erickom@ajk:/etc/postfix$ doveconf -n # 2.2.5 (c4f754d6967e): /etc/dovecot/dovecot.conf # OS: Linux 3.10-2-486 i686 Debian jessie/sid ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login base_dir = /var/run/dovecot/ disable_plaintext_auth = no login_greeting = Great Kom, ready. mail_debug = yes mail_location = maildir:/var/mail/%d/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } erickom@ajk:/etc/postfix$ sudo postconf -n [sudo] password for erickom: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_list = problem.domain home_mailbox = Maildir/ inet_interfaces = all inet_protocols = all mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 mydestination = metropolitanbuntu.co.za, ajk.metropolitanbuntu.co.za, localhost.metropolitanbuntu.co.za, localhost, metropolitan.org.za myhostname = ajk.metropolitanbuntu.co.za mynetworks = 127.0.0.0/8 10.0.0.0/24 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + smtp_tls_cert_file = /etc/ssl/certs/smtpd.crt smtp_tls_key_file = /etc/ssl/private/smtpd.hey smtp_tls_loglevel = 1 smtp_tls_note_starttls_offer = yes smtp_tls_security_level = may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = Great Kom Networks (Pty) LTD, Ready. smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes Aug 20 09:02:36 ajk postfix/smtpd[16966]: connect from unknown[10.0.0.103] Aug 20 09:02:36 ajk postfix/smtpd[16966]: improper command pipelining after EHLO from unknown[10.0.0.103]: QUIT\r\n Aug 20 09:02:36 ajk postfix/smtpd[16966]: disconnect from unknown[10.0.0.103] Aug 20 09:02:36 ajk dovecot: auth: Debug: auth client connected (pid=17032) Aug 20 09:02:36 ajk dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=10.0.0.103, lip=10.0.0.244, session=<xjZOpFvkSAAKAABn> Aug 20 09:02:57 ajk postfix/smtpd[16966]: connect from unknown[10.0.0.103] Aug 20 09:02:57 ajk postfix/smtpd[16966]: improper command pipelining after EHLO from unknown[10.0.0.103]: QUIT\r\n Aug 20 09:02:57 ajk postfix/smtpd[16966]: disconnect from unknown[10.0.0.103] Aug 20 09:02:57 ajk dovecot: auth: Debug: auth client connected (pid=17037) Aug 20 09:02:57 ajk dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=10.0.0.103, lip=10.0.0.244, session=<Vz6IpVvkSgAKAABn> Aug 20 09:03:03 ajk dovecot: auth: Debug: auth client connected (pid=17040) Aug 20 09:03:03 ajk dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011session=okfspVvkTAAKAABn#011lip=10.0.0.244#011rip=10.0.0.103#011lport=143#011rport=57164 Aug 20 09:03:03 ajk dovecot: auth: Debug: client passdb out: CONT#0111#011 Aug 20 09:03:03 ajk dovecot: auth: Debug: client in: CONT#0111#011AGVyaWNrb21AbWV0cm9wb2xpdGFuLm9yZy56YQBuaW5hMDEwMTgzYw== (previous base64 data may contain sensitive data) Aug 20 09:03:03 ajk dovecot: auth-worker(17041): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Aug 20 09:03:03 ajk dovecot: auth-worker(17041): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Aug 20 09:03:03 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): lookup service=dovecot Aug 20 09:03:03 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): #1/1 style=1 msg=Password: Aug 20 09:03:06 ajk dovecot: auth-worker(17041): pam(erickom(a)metropolitan.org.za,10.0.0.103): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: ni$ Aug 20 09:03:08 ajk dovecot: auth: Debug: client passdb out: FAIL#0111#011user=erickom(a)metropolitan.org.za Aug 20 09:03:08 ajk dovecot: auth: Debug: client in: AUTH#0112#011LOGIN#011service=imap#011session=okfspVvkTAAKAABn#011lip=10.0.0.244#011rip=10.0.0.103#011lport=143#011rport=57164 Aug 20 09:03:12 ajk dovecot: auth: Debug: client passdb out: CONT#0112#011VXNlcm5hbWU6 Aug 20 09:03:12 ajk dovecot: auth: Debug: client in: CONT#0112#011ZXJpY2tvbUBtZXRyb3BvbGl0YW4ub3JnLnph (previous base64 data may contain sensitive data) Aug 20 09:03:12 ajk dovecot: auth: Debug: client passdb out: CONT#0112#011UGFzc3dvcmQ6 Aug 20 09:03:12 ajk dovecot: auth: Debug: client in: CONT#0112#011bmluYTAxMDE4M2M= (previous base64 data may contain sensitive data) Aug 20 09:03:12 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): lookup service=dovecot Aug 20 09:03:12 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): #1/1 style=1 msg=Password: Aug 20 09:03:14 ajk dovecot: auth-worker(17041): pam(erickom(a)metropolitan.org.za,10.0.0.103): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: ni$ Aug 20 09:03:16 ajk dovecot: auth: Debug: client passdb out: FAIL#0112#011user=erickom(a)metropolitan.org.za Aug 20 09:03:16 ajk dovecot: auth: Debug: client in: AUTH#0113#011PLAIN#011service=imap#011session=okfspVvkTAAKAABn#011lip=10.0.0.244#011rip=10.0.0.103#011lport=143#011rport=57164#011r$ Aug 20 09:03:20 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): lookup service=dovecot Aug 20 09:03:20 ajk dovecot: auth-worker(17041): Debug: pam(erickom(a)metropolitan.org.za,10.0.0.103): #1/1 style=1 msg=Password: Aug 20 09:03:22 ajk dovecot: auth-worker(17041): pam(erickom(a)metropolitan.org.za,10.0.0.103): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: ni$ Aug 20 09:03:24 ajk dovecot: auth: Debug: client passdb out: FAIL#0113#011user=erickom(a)metropolitan.org.za Aug 20 09:03:24 ajk dovecot: imap-login: Disconnected (auth failed, 3 attempts in 21 secs): user=<erickom(a)metropolitan.org.za>, method=PLAIN, rip=10.0.0.103, lip=10.0.0.244, session=<o$ Thanks for you assistance. -- Kind Regards Eric Kom System Administrator & Programmer - Metropolitan College _________________________________________ / You are scrupulously honest, frank, and \ | straightforward. Therefore you have few | \ friends. / ----------------------------------------- \ \ .--. |o_o | |:_/ | // \ \ (| Kom | ) /'\_ _/`\ \___)=(___/ 2 Hennie Van Till, White River, 1240 Tel: 013 750 2255 | Fax: 013 750 0105 | Cell: 078 879 1334 erickom(a)kom.za.net | erickom(a)metropolitancollege.co.za www.kom.za.net | www.kom.za.org | www.erickom.co.za Key fingerprint: 513E E91A C243 3020 8735 09BB 2DBC 5AD7 A9DA 1EF5

4 6

[Dovecot] High Load Average on POP/IMAP.
by Kavish Karkera 21 Aug '13

21 Aug '13

Hi, We have a serious issue running on our POP/IMAP servers these days. The load average of a servers spikes up to 400-500 as a uptime command result, for a particular time period , to be specific mostly in noon time and evening, but it last for few minutes only. We have 2 servers running dovecot 1.1.20 , in loadbanlancer, We have used KEEPLIVE (1.1.13) for loadbalacing. Server specification. Operating System : CentOS 5.5 64bit CPU cores : 16 RAM : 8GB Mail and Indexes are mounted on NFS (NetApp). Below is the dovecot -n ... (top results during high spike) ############################################################################################# # 1.1.20: /usr/local/etc/dovecot.conf # OS: Linux 2.6.28 x86_64 CentOS release 5.5 (Final) log_path: /var/log/dovecot-info.log info_log_path: /var/log/dovecot-info.log syslog_facility: local1 protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /usr/local/etc/ssl/certs/dovecot.pem ssl_key_file: /usr/local/etc/ssl/private/dovecot.pem disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Welcome to Popserver. login_process_per_connection: no max_mail_processes: 1024 mail_max_userip_connections(default): 100 mail_max_userip_connections(imap): 100 mail_max_userip_connections(pop3): 50 verbose_proctitle: yes first_valid_uid: 99 first_valid_gid: 99 mail_location: maildir:~/Maildir:INDEX=/indexes/%h:CONTROL=/indexes/%h mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 pop3_no_flag_updates(default): no pop3_no_flag_updates(imap): no pop3_no_flag_updates(pop3): yes pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls lda: postmaster_address: admin(a)research.com mail_plugins: cmusieve quota mail_log mail_plugin_dir: /usr/local/lib/dovecot/lda auth_socket_path: /var/run/dovecot/auth-master auth default: worker_max_count: 15 passdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: sql args: /usr/local/etc/dovecot-mysql.conf userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 user: nobody group: nobody master: path: /var/run/dovecot/auth-master mode: 384 user: nobody group: nobody plugin: quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 %u quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 %u quota: maildir:storage=64 ############################################################################################## ############################################################################################## top - 12:08:31 up 206 days, 10:45, 3 users, load average: 189.88, 82.07, 55.97 Tasks: 771 total, 1 running, 767 sleeping, 1 stopped, 2 zombie Cpu(s): 8.3%us, 7.6%sy, 0.0%ni, 8.3%id, 75.0%wa, 0.0%hi, 0.8%si, 0.0%st Mem: 16279824k total, 11913788k used, 4366036k free, 334308k buffers Swap: 4192956k total, 0k used, 4192956k free, 10359492k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 408 mysql 18 0 384m 38m 4412 S 52.8 0.2 42221:44 mysqld 29326 nobody 15 0 22688 10m 1112 D 3.9 0.1 0:00.05 imap 29313 nobody 16 0 14892 4892 1000 S 3.1 0.0 0:00.07 imap 28129 nobody 16 0 23688 4148 1140 S 2.3 0.0 0:00.10 imap 28936 nobody 16 0 25048 13m 1108 S 2.3 0.1 0:00.06 imap 29302 nobody 16 0 15168 3924 1000 S 2.3 0.0 0:00.05 imap 29307 nobody 16 0 12864 2892 1000 S 2.3 0.0 0:00.03 imap 21956 root 15 0 13272 1652 800 R 1.6 0.0 0:06.46 top 29119 nobody 16 0 26000 9324 1096 D 1.6 0.1 0:00.11 imap 29158 nobody 16 0 12684 2728 1028 S 1.6 0.0 0:00.03 imap 29204 nobody 16 0 14400 4232 1000 S 1.6 0.0 0:00.08 imap 29262 nobody 16 0 25436 2776 1120 S 1.6 0.0 0:00.02 imap 3397 root 10 -5 0 0 0 S 0.8 0.0 28:02.90 rpciod/2 3401 root 10 -5 0 0 0 S 0.8 0.0 337:30.77 rpciod/6 4218 root 16 0 8948 1548 588 S 0.8 0.0 8:05.53 dovecot 10214 root 15 0 50868 1968 1468 S 0.8 0.0 0:30.08 dovecot-auth 27454 nobody 16 0 19220 5048 1256 D 0.8 0.0 0:00.17 imap 27820 nobody 16 0 18916 4704 1252 D 0.8 0.0 0:00.08 imap 27925 nobody 16 0 11180 1524 1000 S 0.8 0.0 0:00.07 imap 28094 nobody 16 0 11536 2068 1148 S 0.8 0.0 0:00.13 imap 28150 nobody 16 0 12528 2396 1104 S 0.8 0.0 0:00.08 imap 28196 nobody 16 0 13976 3792 1148 S 0.8 0.0 0:00.21 imap 28292 nobody 16 0 11984 1808 1004 S 0.8 0.0 0:00.04 imap 28343 nobody 16 0 11584 2052 1152 D 0.8 0.0 0:00.02 imap 28352 nobody 15 0 11108 1492 1004 S 0.8 0.0 0:00.04 imap 28413 nobody 16 0 11220 1568 996 S 0.8 0.0 0:00.02 imap 28434 nobody 16 0 12492 2444 1004 S 0.8 0.0 0:00.05 imap 28467 nobody 16 0 11852 2044 1004 D 0.8 0.0 0:00.06 imap 28558 nobody 16 0 11904 2316 1168 S 0.8 0.0 0:00.02 imap 28643 nobody 16 0 11312 1688 1000 S 0.8 0.0 0:00.04 imap 28711 nobody 15 0 12048 1868 1004 S 0.8 0.0 0:00.04 imap 28779 nobody 16 0 23392 10m 1000 D 0.8 0.1 0:00.05 imap ############################################################################################ Regards, Kavish Karkera

3 3

[Dovecot] Delivering message to other mailbox
by Frank de Bot 20 Aug '13

20 Aug '13

Hi, On my mailserver I have for each mailbox a sieve script to put Spam-marked message into a folder (match header, then fileinto 'Spam'). This works, but I want to deliver spam-marked messages to a different mailbox. For each user a seperate mailbox is created next to the existing mailbox, allowing different authentication. How can I do this with dovecot/pigeonhole? I figured out I could redirect is the user.spam@domain which delivers to the other mailbox, but it will go into a new delivery process with amavis set up. (There's no point to scan a single message twice). Is there a way I can accomplish to directly deliver a spam-marked message to a different mailbox? Regards, Frank de Bot

2 1

[Dovecot] Using procmail to mark messages as read in dovecot
by LuKreme 20 Aug '13

20 Aug '13

So, I use procmail extensively, and I have for a long time, but marking messages as 'read' in a Maildir has always been a little wonky: TRAP='mv "$LASTFOLDER" "${LASTFOLDER}:2,S"' Since I've switched to dovecot, is there a way to mark a message on delivery as read or not new or seen? -- Clarke's Law: Sufficiently advanced technology is indistinguishable from magic

6 7

[Dovecot] Two of special mailboxes?
by LuKreme 20 Aug '13

20 Aug '13

# ls -lsd /path/to/virtual/.*{Junk,Drafts,Sent,Trash} 8 drwx------ 5 89 89 512 Aug 19 06:46 .Drafts 8 drwx------ 5 89 89 512 Aug 19 06:42 .INBOX.Drafts 8 drwx------ 5 89 89 512 Aug 20 11:44 .INBOX.Junk 8 drwx------ 5 89 89 512 Aug 19 06:42 .INBOX.Sent 8 drwx------ 5 89 89 512 Aug 19 19:41 .INBOX.Trash 8 drwx------ 5 89 89 512 Aug 19 06:55 .Junk 8 drwx------ 5 89 89 512 Aug 19 06:46 .Sent 8 drwx------ 5 89 89 512 Aug 20 11:44 .Trash # ls -nlsd /home/kremels/Maildir/.*{Junk,Drafts,Sent,Trash} 8 drwx------ 6 1004 1004 512 Aug 20 11:45 /home/kremels/Maildir/.Drafts 8 drwx------ 5 1004 1004 512 Aug 19 10:08 /home/kremels/Maildir/.INBOX.Drafts 8 drwx------ 5 1004 1004 512 Aug 19 10:01 /home/kremels/Maildir/.INBOX.Sent 8 drwx------ 6 1004 1004 512 Aug 20 11:42 /home/kremels/Maildir/.Junk 8 drwx------ 6 1004 1004 512 Aug 14 21:47 /home/kremels/Maildir/.NotJunk 8 drwx------ 6 1004 1004 512 Aug 19 22:24 /home/kremels/Maildir/.Sent 8 drwx------ 6 1004 1004 512 Aug 20 11:41 /home/kremels/Maildir/.Trash AS you can see, I only have SOME dupes in my list account. $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = CRAM-MD5 DIGEST-MD5 APOP LOGIN PLAIN disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 50 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u driver = sql } -- WHO KNOWS WHAT EVIL LURKS IN THE HEART OF MEN? The Death of Rats looked up from the feast of potato. SQUEAK, he said. Death waved a hand dismissively. WELL, YES, OBVIOUSLY *ME*, he said. I JUST WONDERED IF THERE WAS ANYONE ELSE. --The Truth

1 0

[Dovecot] age-limit
by Carlos L 20 Aug '13

20 Aug '13

I'm trying to figure if there is a "proactive" way to enforce item age on maildir . maildir-cleanup kind of does it but im looking for something similiar to quota ++ that you can add to dovecot but for item age not size. Any ideas?

3 3

[Dovecot] Maximum number of connections from user+IP exceeded
by LuKreme 20 Aug '13

20 Aug '13

All of a sudden I am getting these errors on one of my accounts: imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=10) It was working fine last night when I went to bed, and is posting these errors nearly constantly (about one every second) when I checked mail after waking up this morning. The account is question is my main account and has a lot of mail, but it is not the account with the most mailboxes, that one is working fine. I looked at the documentation on how to increase this setting, but <http://wiki.dovecot.org/MainConfig> is for 1.x and clicking the 'wiki2" link brings up a mostly blank page with no configuration info at all. It looks like in dovecot 1.x this would go in an protocol imap block, but I don't have one of those in my conf. # doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = plain login disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } -- 'Never trust a ruler who puts his faith in tunnels and bunkers and escape routes. The chances are that his heart isn't in the job.'

6 11

[Dovecot] DRAC plugin for Dovecot-2.x
by USUDA Hisashi 20 Aug '13

20 Aug '13

Hello All, I released the DRAC plugin for dovecot-2.x. http://sourceforge.jp/projects/dovecot2-drac/ It's based the plugin for dovecot-1.1: http://dovecot.org/patches/1.1/drac.c Please see README file for details. Best regards, -- mailto:usuda@designet.co.jp

2 1

[Dovecot] Calling dovecot-lda correctly from exim for virtual user setup
by Frerich Raabe 20 Aug '13

20 Aug '13

Hi, I'm running Dovecot 2.1.7 on Debian. Exim is the MTA. I was recently made aware of the fact that the way in which Exim invokes dovecot-lda is prone to code injection: dovecot_virtual_delivery: driver = pipe command = HOME=/home/vmail/\$local_part /usr/lib/dovecot/dovecot-lda -f \$sender_address use_shell .. I.e. a command is executed via the shell, and Exim uses non-sanitized user input (mail header fields) to construct the command. Now, the reason I invoked dovecot like that is to pass a plausible value for the HOME environment variable, so that dovecot-lda can determine where the Maildir directory of the recipient is. Is there any way to achieve this without requiring HOME to be set correctly? I looked at the -m switch but as far as I can see that merely defines the destination mailbox, but not the path to the Maildir directory, correct? -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

2 3

Re: [Dovecot] Dovecot + SELinux permission problems
by Thomas Harold 19 Aug '13

19 Aug '13

On 6/24/2013 9:58 AM, Johnny wrote: > Yes, /var/log/audit/ with audit.log. There are some archived logs as > well, but no recent messages regarding dovecot perms. Typically you could use "sealert -a /var/log/audit/audit.log /var/log/audit/audit.log.1" to get a feel for how many SELinux exceptions are happening. Also, when you say that the restorecon -R did not fix the issue, did you check the output of "ls -Z" after running it? However, looking at your original message, I'm wondering why the forward slashes are doubled up. For instance: "/home/user/data1/Maildir//"

2 1

[Dovecot] Disagreement on where mail goes.
by LuKreme 19 Aug '13

19 Aug '13

My virtual users have their mail stored in /usr/local/virtual/user(a)example.com/ dovecot wants to read the mail from /usr/local/virtual/user(a)example.com/Maildir which is causing problems since all new mail is being written in /usr/local/virtual/user(a)example.com/new and dovecot is looking in /usr/local/virtual/user(a)example.com/Maildir/new For the local users, /home/user/Maildir is the right directory. for right now I've had to kludge a script that moves mail from /usr/local/virtual/user(a)example.com/new to /usr/local/virtual/user(a)example.com/Maildir/new every two minutes. -- First we must assume a spherical cow.

3 4

[Dovecot] Maildirmake equiv?
by LuKreme 19 Aug '13

19 Aug '13

Since I am using dovecot I do not have courier installed, but Courier had a very handy tool for making maildir folders called `maildirmake` which I used in some automated backup scripts. How do I duplicate maildirmake in dovecot? for example: #!/bin/bash # v1.2a Testing for new dovecot install # Archive mail from folders without [0-9]{4} Maildirs # after they are 21 days old to a yearly folder MDIR="$HOME/Maildir" MDM="/usr/local/bin/maildirmake" YEAR=`/usr/local/bin/gdate -d "last month" '+%Y'` echo "The Year is $YEAR..." OIFS=$IFS IFS=" " for I in `find $MDIR -maxdepth 1 -mindepth 1 -type d| egrep -v "[0-9][0-9][0-9][0-9]"`; do MYDIR="${I}" TBASE=`basename $MYDIR` # if [ ! $TBASE == "Maildir" ]; then TDIR=`dirname $MYDIR` TARGET="${TDIR}/.zz${TBASE}.${YEAR}" # echo "$MYDIR $TARGET" if [ -d "$MYDIR/cur" ]; then echo -n "Processing ${MYDIR} => ${TARGET}..." if [ ! -d "${TARGET}" ]; then echo "" echo -n "WARNING ${TARGET} does not exist. invoking $MDM ${TARGET}..." $MDM "${TARGET}" fi if [ -d "${TARGET}" ]; then # echo "$TARGET does exist, moving files" find ${MYDIR}/cur -type f -ctime +21 -exec mv {} ${TARGET}/cur/ \; echo "done." else echo "$TARGET does not exist" fi fi # fi done IFS=$OIFS -- Forever was over. All the sands had fallen. The great race between entropy and energy had been run, and the favourite had been the winner after all. Perhaps he ought to sharpen the blade again? No. Not much point, really.

7 9

[Dovecot] dovecot is working, sort of
by LuKreme 19 Aug '13

19 Aug '13

I have dovecot setup and authenticating away for local users, but when I try to add MySQL users from postfix admin, not only does that fail, but all authentication fails. This configuration does not work: doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } and I get the following errors for *ALL* attempts to connect, not just sql ones: mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=10591, input bytes=0 Aug 14 22:56:36 mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=10592, input bytes=0 mail dovecot: auth: Fatal: mysql: Missing value in connect string: password-dovecot mail dovecot: master: Error: service(auth): command startup failed, throttling for 60 secs mail dovecot: imap-login: Disconnected: Auth process broken (disconnected before auth was ready, waited 1 secs): user=<>, rip=67.176.106.217, lip=75.148.117.91, TLS, session=<U82VTPXjvQBDsGrZ> This configuration works, but only for local users obviously: # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passed } The dovecot-sql.conf.ext file is: $ cat /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=localhost dbname=postfix user=dovecot password-dovecot default_pass_scheme = CRYPT password_query = select password from mailbox where username ='%u' user_query = select concat('/usr/local/virtual/', maildir) from mailbox where username = '%u; #iterate_query = SELECT username AS user FROM users Both to the password_query and user_query lines return the right results when I do them manually in MySQL. The one thing I am very unsure of is the default_pass_scheme (the postfixdb is a postfixadmin db), but even if that were completely wrong, it seems like the local users should still be able to authenticate even if the MySQL ones cannot? -- And east is east and west is west and if you take cranberries and stew them like applesauce they taste much more like prunes than rhubarb does.

4 8

[Dovecot] Proxy: %$ should contain username
by Reindl Harald 17 Aug '13

17 Aug '13

for nomal operations * login_log_format_elements = %r %m %k * login_log_format = %$: %s would be perfect because "proxy(h.reindl(a)thelounge.net)" contains the username *but* in case of auth errors "Disconnected (auth failed, 1 attempts in 2 secs)" does not show the username - hence currently there exists no way to avoid username double-logging in normal operations without render the log unusebale in case auf dictionary attacks / authentication failers another option would be make %$ obsolete because i do not need to see "proxy(h.reindl(a)thelounge.net): started proxying to 127.0.0.1:143" because i know that *but* in case of auth errors "%s" doe snot contain any hint of a error and would show "user=<h.reindl(a)thelounge.net>, 10.0.0.241, CRAM-MD5, TLS" even with a wrong password and nothing else that is not really optimal, in case of "tail -f" someone does not want redundant informations leading to linebreaks as well it wastes disk space Aug 17 13:17:04 mail dovecot: imap-login: proxy(h.reindl(a)thelounge.net): started proxying to 127.0.0.1:143: user=<h.reindl(a)thelounge.net>, 10.0.0.241, CRAM-MD5, TLS ____________________________________________________________________________________________________________ login_log_format_elements = %r %m %k login_log_format = %$: %s Aug 17 14:31:25 testserver dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): 84.113.45.81, PLAIN ____________________________________________________________________________________________________________ login_log_format_elements = user=<%u> %r %m %c login_log_format = %$: %s Aug 17 14:29:05 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<h.reindl(a)thelounge.net>, 10.0.0.6, PLAIN ____________________________________________________________________________________________________________

1 0

[Dovecot] MailLocation
by LuKreme 17 Aug '13

17 Aug '13

In reading http://wiki2.dovecot.org/MailLocation it is not clear to me the syntax for setting mail_location inside a userdb block. --

2 3

[Dovecot] OS X
by Jonathan Kenyon 16 Aug '13

16 Aug '13

Hi I have updated a 10.6.8 to 10.8.4 and it transferred the dovecot mail. All except one sent folder. This folder was a sent mail box and the CUR folder is in the correct place and i have deleted the index files but it still is not showing up in a mail app. Can someone suggest a way to re catalogue it. many thanks jonny

2 1

[Dovecot] Any way to test a master user's password?
by Axel Luttgens 16 Aug '13

16 Aug '13

Hello, Is there any way to easily check a master user's password, for itself, without having to refer to another user or to weak the security by allowing master users to log in for themselves? For example, this works: # doveadm auth test 'someuser*masteruser' Password: <enter master user's password here> passdb: someuser*masteruser auth succeeded but depends on the existence of another user, and is thus contingent and unnecessarily heavy. TIA, Axel

2 1

[Dovecot] rdiff-backup of Maildir?
by Thomas Harold 16 Aug '13

16 Aug '13

What's the best way to do long-term backups of the Maildir format these days? Traditionally we've just done a rdiff-backup or pointed Bacula at the Maildir. Both give us the option to reset a particular mailbox back to a previous day (any day within the last N months). Do we just need to snapshot the LVM volume that holds all the Maildir boxes, or is there some additional commands that we should run before doing the LVM snapshot?

1 0

[Dovecot] IMAP Proxying and SSL Certificates on OpenBSD
by dago＠quantentunnel.de 16 Aug '13

16 Aug '13

Hi list, I am currently trying to configure dovecot to act as a imap proxy in front of a Groupwise server. Because of a policy no services of the gw server may be directly served to the web. So currently this is only a security measure. Dovecot was previously used for providing sasl-auth capabilities to postfix. IMAP proxy features should be added now. Authentication backend is LDAP. OS is OpenBSD 5.2. Dovecot version is 2.1.8. Currently I am fighting with the following error in the logs: dovecot: master: Dovecot v2.1.8 starting up dovecot: auth: Warning: userdb passwd: Move templates args to override_fields setting dovecot: auth: Error: passwd(username,78.104.X.X,<e9YE/gDkOQBOaKfg>): getpwnam() failed: Operation not permitted dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=78.104.X.X, lip=5.9.X.X, mpid=1765, session=<e9YE/gDkOQBOaKfg> dovecot: imap(username): Error: user username: Initialization failed: Initializing mail storage from mail_location setting failed: imapc: missing imapc_password dovecot: imap(username): Error: Invalid user settings. Refer to server log for more information. I hope to also see therein the cause for not providing STARTTLS: # openssl s_client -connect mail.example.com:143 -starttls imap CONNECTED(00000003) didn't found STARTTLS in server response, try anyway... 15096:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:/SourceCache/OpenSSL098/OpenSSL098-47/src/ssl/s23_clnt.c:607: As postfix is already using the certificates, they should be okay …. # dovecot -n # 2.1.8: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.2 i386 disable_plaintext_auth = no imapc_host = 10.0.0.2 mail_gid = vmail mail_home = /home/vmail/%u mail_location = imapc:~/imapc mail_uid = vmail passdb { args = scheme=plain-md5 username_format=%n /etc/dovecot/passwd driver = passwd-file } passdb { args = /etc/dovecot/dovecot-ldap.conf default_fields = userdb_imapc_user=%u userdb_imapc_password=%w driver = ldap } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = _postfix mode = 0660 user = _postfix } user = root } service imap-login { chroot = login } service pop3-login { chroot = login } ssl = no ssl_ca = </etc/ssl/ca.crt ssl_cert = </etc/ssl/pf/mail.example.com.crt ssl_key = </etc/ssl/pf/mail.example.comkey userdb { args = username_format=%n /etc/dovecot/passwd driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } # dovecot-ldap.conf hosts = 10.0.0.2:389 dn = cn=ldapaccess,o=servercontext dnpass = secretpass auth_bind = yes ldap_version = 3 base = o=usercontext user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (&(&(objectClass=Person)(cn=%u))(groupMembership=cn=SMTPsender,o=permissiongroups)) pass_attrs = cn=user,userPassword=password pass_filter = (&(&(objectClass=Person)(cn=%u))(groupMembership=cn=SMTPsender,o=permissiongroups)) Thanks in advance! Best regards

4 4

[Dovecot] Problems with openssl library path
by Christian Felsing 16 Aug '13

16 Aug '13

Hello, I tried to compile Dovecot 2.2.5 on Debian 6 with an alternate OpenSSL installation located at /usr/local/ssl A compilation with CPPFLAGS="-I/usr/local/ssl/include" \ LDFLAGS="-L/usr/local/ssl/lib -Wl,-rpath=/usr/local/ssl/lib" \ SSL_LIBS="-L/usr/local/ssl/lib -Wl,-rpath=/usr/local/ssl/lib" \ ./configure \ --prefix=/opt/dovecot-2.2.5 \ --enable-asserts \ --enable-largefile \ --with-ldap=yes \ --with-zlib \ --with-bzlib \ --with-libcap \ --with-ssl=openssl \ --with-gc \ --with-storages=maildir,mbox,mdbox,cydir \ create a working Dovecot, but it still uses the very old Debian 6 OpenSSL 0.9.8 instead my OpenSSL 1.0.1e LD_LIBRARY_PATH has also no effect, because Dovecot strips it out. Any hints? regards Christian

2 1

[Dovecot] Using dovecot in performance tests?
by Michal Zatloukal 16 Aug '13

16 Aug '13

Hello, please Cc me into replies, I'm not subscribed. My job as of late involves testing the performance of software that functions as IMAP/POP proxy. I have an account set up where a known collection of emails is delivered from postfix, and is then dowloaded by MUA on the test machine. The thing is, sending the emails (from a separate machine on LAN) actually takes more time than the download by MUA and is (probably?) an unnecessary load on the system that I could avoid. Ideally, I would like dovecot to treat all messages in a user's mail store as always-new, ie. they would be downloaded whenever the user connected (MUA settings and state permitting). Is something like that possible? Michal Zatloukal

1 0

[Dovecot] lda and home directory
by Bob Miller 16 Aug '13

16 Aug '13

Hello, I am using qmail and lda configured such that lda should not have to do a lookup for delivery. I set my defaultdelivery like so: |HOME=/home/mail/$USER /var/qmail/bin/preline -f /usr/local/libexec/dovecot/dovecot-lda Given that the email address being delivered to is bob.miller(a)computerisms.com, I expect $USER to be equal to bob.miller and $HOME to expand to /home/mail/bob.miller/. The problem is lda reports: Debug:_Home_dir_not_found:_/home/mail/bob.miller@computerisms.com/ The whole system up to here uses only the bob.miller part, and I can't find where it keeps adding the domain part from. I have tried changing all sorts of variables and config values to try and make it quit adding the domain part, but no matter what I change lda still tries to deliver the email address as username. The only measure of success I can report is that in some configurations mail delivers to /home/mail//. Where exactly is dovecot getting this value? Side question: I note in places throughout the wiki and internet variables such as $EXT, $USER, $DEST_USERNAME, and $FROM_ENVELOPE are used. I can find no documentation, beyond my own common sense anyway, to explain how/when these variables are expanded, and what I do find doesn't seem consistent to me. For example, on the CheckPassword page, $USER is implied to expand to Username, which could contain the domain or not. However on the lda/qmail page, the variable shown is $EXT@ $USER, which implies $USER will expand as only the domain part after the @ symbol and $EXT as everything before, yet changing the variable from $USER to $EXT in my defaultdelivery file has $HOME expand to /home/mail//. Where do I find the story on how these variables (as opposed to the % variables) work? (or more specifically, is there a $VAR I can use instead of $USER that will expand to just the part before the @?) -- Computerisms Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca

2 2

[Dovecot] dovecot solr position index
by duonut 15 Aug '13

15 Aug '13

Hi I am currently running dovecot 2.2.5 and solr 4.4.0 I am using the pre supplied schema.xml with dovecot with a single change f field type from test to text_general to get it running. When I do a multi word search in a mailbox, solr complains that a position index has not been built, throws a 500 error and dovecot reverts back to searching each mail message. Does anyone know what change I need to make to the solr schema to build the position index? -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-solr-position-index-tp43897.ht… Sent from the Dovecot mailing list archive at Nabble.com.

1 0