- dovecot - dovecot.org

[Dovecot] Log DNS revese IP address
by Juan Bernhard 21 Mar '13

21 Mar '13

Hi list. Is it possible to log the DNS reverse address of every login? I didnt find a variable *%{hostname}* but the wiki say it only works on *deliver_log_format* and not on *login_log_format_elements* Something like this: Mar 21 13:49:33 mailserver dovecot: pop3-login: Login: user=<myuser>, method=PLAIN, rip=10.10.10.15, lip=10.10.10.1, mpid=18712, *host=client02.example.com* Thanks! Regards. Juan

2 1

[Dovecot] dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>
by pvsuja 21 Mar '13

21 Mar '13

Hi, I have set up ImapcProxy based on the wiki2 page. My server is set up for no plain text auth without starttls. When I am trying to login in the proxy server, I am getting an error Unknown username/password. The log says: *dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>* The server log: *dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip=10.x.x.x, lip=10.x.x.y* Through wireshark, I found the username and password is going in plain text only to the server. How will I enable starttls in ImapcProxy before any communication starts? Thanks and regards, Suja -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-imap-login-Aborted-login-auth-… Sent from the Dovecot mailing list archive at Nabble.com.

4 5

[Dovecot] Problem with Prefetch User Database
by megodin＠inboxalias.com 21 Mar '13

21 Mar '13

Hi there Community, I am currently setting up a Dovecot Mailserver, which works fine with some basic configuration (Dovecot + Sendmail). Sending and receiving Mails is just fine. For improving timings, I wanted to activate the prefetch user database - but apparently it doesn't seem to work correctly - I hope you can help me out! When I activate the prefetch user database, every time I get a "passdb didn't return userdb entries" from my mail.debug logs. Here's my config: passdb { driver = pam } # (I authenticate via PAM which is itself configured to ask ldap server, ldap returns it back to PAM - so Dovecot only sees the PAM-authentication part) userdb { driver = prefetch } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } # My userdb is going over ldap. Relevant parts of /etc/dovecot/dovecot-ldap.conf.ext: . .. user_attrs = uidNumber=50014,gidNumber=2084,modem-quota=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uidNumber==50014,gidNumber=2084 I'm not sure.... maybe it's because of the PAMLDAPPAM? Or am I missing out something other fundamental? Thanks for any insights, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] Problem with Prefetch User Database - additional infos
by megodin＠inboxalias.com 21 Mar '13

21 Mar '13

Hey there, sorry, sent the mail too fast. Obviously you need more information: I'm using Dovecot 2.0.9 dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext3 auth_cache_size = 10 M auth_debug = yes auth_username_format = %n auth_verbose = yes listen = * mail_debug = yes mail_gid = vmail mail_home = /dovecot/mailnfs/vmails/%u mail_location = sdbox:/dovecot/mailnfs/vmails/%u/mailstore mail_plugins = " quota" mail_privileged_group = mail mail_uid = vmail mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = root } ssl_cert = Hi there Community, > > I am currently setting up a Dovecot Mailserver, which works fine with some basic configuration (Dovecot + Sendmail). Sending > and receiving Mails is just fine. For improving timings, I wanted to activate the prefetch user database - but apparently it doesn't > seem to work correctly - I hope you can help me out! > > When I activate the prefetch user database, every time I get a "passdb didn't return userdb entries" from my mail.debug logs. > > Here's my config: > > passdb { > driver = pam > } > > # (I authenticate via PAM which is itself configured to ask ldap server, ldap returns it back to PAM - so Dovecot only sees the > > PAM-authentication part) > > userdb { > driver = prefetch > } > > userdb { > driver = ldap > args = /etc/dovecot/dovecot-ldap.conf.ext > } > > # My userdb is going over ldap. > > Relevant parts of /etc/dovecot/dovecot-ldap.conf.ext: > > ... > user_attrs = uidNumber=50014,gidNumber=2084,modem-quota=quota_rule=*:storage=%$ > > user_filter = (&(objectClass=posixAccount)(uid=%u)) > > pass_attrs = uidNumber==50014,gidNumber=2084 > > > I'm not sure.... maybe it's because of the PAMLDAPPAM? Or do I miss something other fundamental? > Thanks for any insights, > Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 21 Mar '13

21 Mar '13

Hello, I'm trying to install dovecot as LDA, IMAP server and Sieve functions, all of this with a Postfix, Spamassassin and a MySQL Auth. When I use a Sieve script, it 's loaded but actions are not respect with this logs : Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: using sieve path for user's script: /vmail/sieve/info.xx.com/info.sieve Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: opening script /vmail/sieve/info.xx.com/info.sieve Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: script binary /vmail/sieve/info.xx.com/info.svbin successfully loaded Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: binary save: not saving binary /vmail/sieve/info.xx.com/info.svbin, because it is already stored Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: executing script from /vmail/sieve/info.xx.com/info.svbin Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): sieve: msgid=<20130318093119.7EAAEC063D(a)nflda02.xx.lan>: stored mail into mailbox 'INBOX' Mar 18 10:31:19 localhost postfix/pipe[25000]: 7EAAEC063D: to=<info(a)info.xx.com>, relay=dovecot, delay=0.54, delays=0.15/0.03/0/0.37, dsn=2.0.0, status=sent (delivered via dovecot service) The sieve script just trying to redirect to INBOX.Test folder but doesn't works.. Bellow my dovecot and postfix configuration : # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.0.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 mail_debug = yes mail_gid = 5000 mail_location = maildir:/vmail/%d/%n:INDEX=/vmail/index/%d/%n mail_privileged_group = vmail mail_uid = 5000 mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = . subscriptions = yes type = private } passdb { driver = pam } passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { sieve = /vmail/sieve/%d/%n.sieve sieve_dir = /vmail/sieve/%d } service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = sieve } protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb mail_plugins = sieve postmaster_address = postmaster(a)smtp.xx.com } # /etc/postfix/master.conf alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all inet_protocols = all mail_owner = postfix mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost mydomain = xx.lan myhostname = nflda02.xx.lan mynetworks = 192.168.0.0/24, 192.168.3.0/24, 127.0.0.0/8 myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop unknown_local_recipient_reject_code = 550 virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /vmail/ virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_mailbox_domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 Sorry for this easy question, I'm new on LINUX. Thanks in advance. -- Clément PAULET

3 3

[Dovecot] Zlib plugin: Compress emails for one folder only
by Andre Rodier 21 Mar '13

21 Mar '13

Hello everyone, Is it possible to configure the zlib plugin to compress the emails in one folder only? I would like to compress the emails when they are stored in my 'Archives' folders and sub folders. Thanks, André Rodier.

3 2

[Dovecot] ulimit -n in start-script
by Peer Heinlein 21 Mar '13

21 Mar '13

Hi! Even on midrange-systems it's necessary to set "ulimit -n" to a higher value then the system default of 1024. I'd prefer having this already prepared: In /etc/defaults/dovecot we should add: # Set amount of "open files" / ulimit -n ULIMIT_OPEN_FILES=16884 In /etc/init.d/dovecot we should add: # Set amount of open files / ulimit -n [ -n "$ULIMIT_OPEN_FILES" ] && ulimit -n $ULIMIT_OPEN_FILES Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] 2.2rc2 core dump
by Heiko Schlichting 21 Mar '13

21 Mar '13

Hi, using dovecot 2.2rc2 I got core dumps during IMAP subscription change if the CONTROL directory (specified in mail_location) does not exists. userdb_mail: mbox:~/Test:INBOX=~/Test/heiko:INDEX=~/.imap/index:CONTROL=~/.imap/control If ~/.imap/control does not exists, dovecot crashes. See below for log msg, full backtrace and configuration. Heiko Heiko Schlichting Freie Universität Berlin heiko.schlichting(a)fu-berlin.de Zentraleinrichtung für Datenverarbeitung Telefon +49 30 838-54327 Fabeckstraße 32 Telefax +49 30 838454327 14195 Berlin ----------------------------------------------------------------------- Mar 11 13:57:42 12:island dovecot: imap(heiko): Panic: file mailbox-list.c: line 1066 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Mar 11 13:57:42 13:island dovecot: imap(heiko): Error: Raw backtrace: /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60c8a) [0x7f12ad342c8a] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60cd6) [0x7f12ad342cd6] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f12ad303faf] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_try_mkdir_root+0x573) [0x7f12ad61db43] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_mkdir_root+0x12) [0x7f12ad61db92] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(subsfile_set_subscribed+0x346) [0x7f12ad62ff66] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_set_subscribed+0x1b) [0x7f12ad61aebb] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(index_storage_set_subscribed+0x48) [0x7f12ad63f3c8] -> dovecot/imap [heiko 130.133.5.5 subscribe](cmd_subscribe_full+0xd8) [0x4129c8] -> dovecot/imap [heiko 130.133.5.5 subscribe](command_exec+0x3d) [0x41604d] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x4151a0] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x41528d] -> dovecot/imap [heiko 130.133.5.5 subscribe](client_handle_input+0x11d) [0x41550d] -> dovecot/imap [heiko 130.133.5.5 subscribe](client_input+0x6f) [0x41588f] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f12ad3518f6] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f12ad35296f] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f12ad351898] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f12ad308c03] -> dovecot/imap [heiko 130.133.5.5 subscribe](main+0x2a7) [0x41eb17] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f12acf9ec8d] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x40b559] Mar 11 13:57:42 12:island dovecot: imap(heiko): Fatal: master: service(imap): child 387120 killed with signal 6 (core dumped) ----------------------------------------------------------------------- Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00007f12acfb21b5 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 in ../nptl/sysdeps/unix/sysv/linux/raise.c #0 0x00007f12acfb21b5 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 pid = <value optimized out> selftid = <value optimized out> #1 0x00007f12acfb4fc0 in *__GI_abort () at abort.c:92 act = {__sigaction_handler = {sa_handler = 0x2, sa_sigaction = 0x2}, sa_mask = {__val = {139718192212334, 140734208616120, 140734208615824, 15504224, 139718192015737, 139718188100360, 139718199721984, 206158430224, 4294967295, 140734208615136, 1, 2826480, 0, 140734208615824, 15504224, 139718191620096}}, sa_flags = -1383389422, sa_restorer = 0x1} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007f12ad342c9d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0xec93d0 "/home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60c8a) [0x7f12ad342c8a] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60cd6) [0x7f12ad342cd6] -> /home/dovecot/server/lib/dovecot/libdoveco"... #3 0x00007f12ad342cd6 in i_internal_fatal_handler (ctx=0x7fff3c832420, format=<value optimized out>, args=<value optimized out>) at failures.c:652 status = 0 #4 0x00007f12ad303faf in i_panic (format=0x5e830 <Address 0x5e830 out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff3c8324f0, reg_save_area = 0x7fff3c832430}} #5 0x00007f12ad61db43 in mailbox_list_try_mkdir_root (list=0xedfa30, path=0xec9340 "/home/heiko/.imap/control", type=MAILBOX_LIST_PATH_TYPE_CONTROL, error_r=0x7fff3c8326b8) at mailbox-list.c:1066 root_dir = 0xec9360 "/home/heiko/.imap/control/.imap" error = <value optimized out> st = {st_dev = 0, st_ino = 139718191603264, st_nlink = 6471272, st_mode = 63, st_uid = 0, st_gid = 2908382760, __pad0 = 32530, st_rdev = 139718199874936, st_size = 140734208616208, st_blksize = 4294967295, st_blocks = 139718194534888, st_atim = {tv_sec = 1, tv_nsec = 3167384}, st_mtim = {tv_sec = 0, tv_nsec = 15602912}, st_ctim = {tv_sec = 139718199711400, tv_nsec = 139718194466816}, __unused = {139718197716754, 1, 0}} perm = {file_uid = 5006, file_gid = 700, file_create_mode = 416, dir_create_mode = 488, file_create_gid = 4294967295, file_create_gid_origin = 0xedfdf8 "/home/heiko/Test", gid_origin_is_mailbox_path = false, mail_index_permissions_set = false} __FUNCTION__ = "mailbox_list_try_mkdir_root" #6 0x00007f12ad61db92 in mailbox_list_mkdir_root (list=0x5e830, path=0x5e830 <Address 0x5e830 out of bounds>, type=MAILBOX_LIST_PATH_TYPE_INDEX_PRIVATE) at mailbox-list.c:1100 error = <value optimized out> #7 0x00007f12ad62ff66 in subsfile_set_subscribed (list=0xedfa30, path=0xec9310 "/home/heiko/.imap/control/.subscriptions", temp_prefix=<value optimized out>, name=0xee8360 "hostmaster", set=true) at subscription-file.c:122 mail_set = 0xee14e0 dotlock_set = {temp_prefix = 0xedfc28 ".temp.Island.387120.", lock_suffix = 0x0, timeout = 120, stale_timeout = 30, callback = 0, context = 0x0, use_excl_lock = 1, nfs_flush = 1, use_io_notify = 0} dotlock = 0x0 perm = {file_uid = 5006, file_gid = 700, file_create_mode = 416, dir_create_mode = 488, file_create_gid = 4294967295, file_create_gid_origin = 0xedfca0 "/home/heiko/Test", gid_origin_is_mailbox_path = false, mail_index_permissions_set = false} line = <value optimized out> input = <value optimized out> output = <value optimized out> fd_in = <value optimized out> fd_out = -1 type = <value optimized out> found = <value optimized out> changed = false failed = false #8 0x00007f12ad61aebb in mailbox_list_set_subscribed (list=0x5e830, name=0x5e830 <Address 0x5e830 out of bounds>, set=6) at mailbox-list.c:1481 ret = 6 #9 0x00007f12ad63f3c8 in index_storage_set_subscribed (box=0xee8000, set=6) at index-storage.c:854 ns = 0xee8000 list = 0xedfa30 subs_name = 0x5e830 <Address 0x5e830 out of bounds> guid = "\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000" __FUNCTION__ = "index_storage_set_subscribed" #10 0x00000000004129c8 in cmd_subscribe_full (cmd=0xee57e0, subscribe=48) at cmd-subscribe.c:72 ns = <value optimized out> box = 0xee8000 box2 = 0x7f12ad34080b mailbox = 0xec92b0 "hostmaster" orig_mailbox = 0xed4aa0 "hostmaster" unsubscribed_mailbox2 = false sep = 0 '\000' #11 0x000000000041604d in command_exec (cmd=0xee57e0) at imap-commands.c:156 hook = 0xed2d90 ret = <value optimized out> #12 0x00000000004151a0 in client_command_input (cmd=0xee57e0) at imap-client.c:775 client = 0xee4e30 command = <value optimized out> __FUNCTION__ = "client_command_input" #13 0x000000000041528d in client_command_input (cmd=0xee57e0) at imap-client.c:836 client = 0xee4e30 command = 0x0 __FUNCTION__ = "client_command_input" #14 0x000000000041550d in client_handle_next_command (client=0xee4e30) at imap-client.c:874 No locals. #15 client_handle_input (client=0xee4e30) at imap-client.c:886 _data_stack_cur_id = 3 ret = 48 remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #16 0x000000000041588f in client_input (client=0xee4e30) at imap-client.c:928 cmd = <value optimized out> output = 0xee5688 bytes = <value optimized out> __FUNCTION__ = "client_input" #17 0x00007f12ad3518f6 in io_loop_call_io (io=0xee06f0) at ioloop.c:387 ioloop = 0xed1720 t_id = 2 #18 0x00007f12ad35296f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0xed1aa0 event = 0xed1b10 list = 0xee5730 io = 0x5e830 tv = {tv_sec = 1799, tv_usec = 999958} msecs = <value optimized out> ret = 1 i = 0 call = false __FUNCTION__ = "io_loop_handler_run" #19 0x00007f12ad351898 in io_loop_run (ioloop=0xed1720) at ioloop.c:406 No locals. #20 0x00007f12ad308c03 in master_service_run (service=0xed15c0, callback=0x5e830) at master-service.c:550 No locals. #21 0x000000000041eb17 in main (argc=1, argv=0xed1390) at main.c:400 set_roots = {0x426140, 0x0} login_set = {auth_socket_path = 0xec9050 "\035", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41ed10 <login_client_connected>, failure_callback = 0x41ecb0 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> ----------------------------------------------------------------------- # 2.2.rc2: /home/dovecot/server/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes default_login_user = nobody default_vsz_limit = 2 G first_valid_uid = 1000 listen = 130.133.10.100 mail_fsync = always mail_nfs_storage = yes namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /server/dovecot/bin/checkpassword-isnet driver = checkpassword } protocols = imap service auth-worker { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } shutdown_clients = no ssl = required ssl_cert = </server/dovecot/server/etc/dovecot/certs/certificate.pem ssl_key = </server/dovecot/server/etc/dovecot/certs/key.pem userdb { driver = prefetch } verbose_proctitle = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 }

2 6

[Dovecot] v2.2.rc3 released
by Timo Sirainen 20 Mar '13

20 Mar '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc3.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc3.tar.gz.sig As mentioned in http://dovecot.org/list/dovecot/2013-March/089044.html there are some new rather large features. Also various mostly rather small bugfixes. + dsync: Support syncing ACLs (and Sieve scripts with Pigeonhole) + ldap: Support subqueries and value pointers, see http://wiki2.dovecot.org/AuthDatabase/LDAP/Userdb + postmaster_address setting: Expand %d to recipient's domain - Fixed a crash when decoding quoted-printable content. - dsync: Various bugfixes

1 0

[Dovecot] dovecot: auth-worker: order of authentication types
by David Obando 20 Mar '13

20 Mar '13

Hi all, I'm setting a mailserver using dovecot version: 2.1.7. On the server I have a couple of system users using PAM authentication and a lot of virtual users using SQL authentication. When a virtual user (e.g. david(a)virtdomain.de) logs in dovecot tries to authenticate the user via PAM and after failing it uses SQL: Mar 19 11:39:42 orange dovecot: auth-worker(7815): pam(david(a)virtdomain.de,<ip address>): pam_authenticate() failed: Authentication failure (password mismatch?) Mar 19 11:39:42 orange dovecot: auth: passwd(david(a)virtdomain.de,<ip address>,<T58IuUTYvgDZbill>): unknown user Mar 19 11:39:42 orange dovecot: imap-login: Login: user=<david(a)virtdomain.de>, method=PLAIN, rip=<...>, lip=<...>, mpid=7816, TLS Could I set up dovecot authentication so *users that authenticate with only their username (i.e. system users) always and only use PAM authentication *users that authenticate with their e-mail-address always and only use SQL authentication ??? Thanks, david -- The day microsoft makes something that doesn't suck is the day they start making vacuum cleaners. gpg --keyserver pgp.mit.edu --recv-keys 1920BD87 Key fingerprint = 3326 32CE 888B DFF1 DED3 B8D2 105F 29CB 1920 BD87

2 2

[Dovecot] Override quota settings with LDAP
by Hanno Hirschberger 20 Mar '13

20 Mar '13

Hi all, my current Dovecot setup is fetching both the imap quota limit and the mail location settings from LDAP entries. user_attrs = [...] UDBmailQuota=quota_rule=*:bytes=%$, mailLocation=mail That is because we have 3 users who wants to fetch their mail from /var/mail/<username>. All the other users have maildir with maildir quota. The LDAP entry for /var/mail user looks like this: mailLocation: mbox:/var/empty:INBOX=/var/mail/<username>:INDEX=MEMORY Works fine with one exception: the mail quota for /var/mail users. The dovecot log gets spammed with: Mar 20 13:37:04 lmtp(2494, username): Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota Mar 20 13:37:04 lmtp(2494, username): Error: opendir(/var/empty/.imap) failed: No such file or directory ... which is only logical, because there's no maildir for that user. I want to get rid of these error messages and like to ask you if there's a way to override the "quota = maildir:User quota" setting in my Dovecot configuration for the 3 /var/mail users. For example with an extra LDAP field? Sadly I don't really know how to realize this. Or is there any other / better way? You can look at my doveconf -n output here: http://pastebin.com/mJZ2CXbg Best regards, Hanno

2 1

[Dovecot] shared folders and "subscriptions = yes"
by Lars Uhlmann 20 Mar '13

20 Mar '13

Example (dovecot 1.2.15): ,-[dovecot.conf] | namespace public { | separator = / | prefix = management | location = maildir:/path/to/management | subscriptions = yes | } | | namespace public { | separator = / | prefix = sales | location = maildir:/path/to/sales | subscriptions = yes | } `----- To have all IMAP-Users automatically updated their shared folder structure I use "subscriptions = yes". This works with the side effect, that all IMAP-Users can see _all_ folders in every namespace even if they do not have "lookup" access. This is of course not wanted. Is it possible to have dovecot check the ACL file in the root of a namespace before it parses the subscrptions file? regards Lars

2 1

[Dovecot] dsync migration questions
by Michael Smith (DF) 20 Mar '13

20 Mar '13

We are currently in the process of replacing one of our customer mail systems with a dovecot solution. However, one of the sticking points right now is how to get the old mail to the new system. On the dovecot side, we are using mdbox storage. On the old system we are using qpopper/mbox mailboxes in the following setup. All user inboxes are in /mnt/mail/mail_spool. Only select, privileged, users have mail folders in /mnt/mail/mail_spool/FOLDERS/user/. I know, insane setup, but it's almost 18 years legacy now. Like this... /mnt/mail/mail_spool/user1.mbox /mnt/mail/mail_spool/user2.mbox /mnt/mail/mail_spool/user3.mbox /mnt/mail/mail_spool/user4.mbox /mnt/mail/mail_spool/FOLDERS/user2/folder1.mbox /mnt/mail/mail_spool/FOLDERS/user2/folder2.mbox Also, the UIDs between the old system and the new dovecot solution are different. User1 may have uid 2134 on the old system, but have uid 193847 on the new system. We've tried the following. Note: User Anakin has a single message already in the new inbox. mkdir -p /mnt/mail/mail_spool/.migrate/ ln /mnt/mail/mail_spool/anakin /mnt/mail/mail_spool/.migrate/inbox chmod 644 /mnt/mail/mail_spool/.migrate/inbox dsync -D -v -R -u anakin(a)domain.com backup mbox:/mnt/mail/mail_spool/.migrate/ ... chmod 600 /mnt/mail/mail_spool/.migrate/inbox /bin/rm -rf /mnt/mail/mail_spool/.migrate dsync(root): Debug: Loading modules from directory: /usr/lib64/dovecot dsync(root): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so dsync(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so dsync(root): Debug: auth input: anakin uid=1000001228 gid=1000001228 home=/var/spool/mail/CC/1000001228 quota_rule=*:storage=0:messages=0 dsync(root): Debug: Added userdb setting: plugin/quota_rule=*:storage=0:messages=0 dsync(root): Debug: Effective uid=1000001228, gid=1000001228, home=/var/spool/mail/CC/1000001228 dsync(root): Debug: Quota root: name=User quota backend=dict args=:file:/var/spool/mail/CC/1000001228/dovecot.quota dsync(root): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 dsync(root): Debug: dict quota: user=anakin, uri=file:/var/spool/mail/CC/1000001228/dovecot.quota, noenforcing=0 dsync(root): Debug: fs: root=/var/spool/mail/CC/1000001228/mail, index=/var/spool/mail/CC/1000001228/index, control=, inbox= dsync(root): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(root): Debug: Effective uid=1000001228, gid=1000001228, home=/var/spool/mail/CC/1000001228 dsync(root): Debug: Quota root: name=User quota backend=dict args=:file:/var/spool/mail/CC/1000001228/dovecot.quota dsync(root): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 dsync(root): Debug: dict quota: user=anakin, uri=file:/var/spool/mail/CC/1000001228/dovecot.quota, noenforcing=0 dsync(root): Debug: mbox: INBOX defaulted to /mnt/test/mail_spool/.migrate/inbox dsync(root): Debug: fs: root=/mnt/test/mail_spool/.migrate, index=, control=, inbox=/mnt/test/mail_spool/.migrate/inbox dsync(anakin): Debug: Namespace : Using permissions from /mnt/test/mail_spool/.migrate: mode=0777 gid=-1 dsync(anakin): Error: Can't delete mailbox INBOX: INBOX can't be deleted. dsync(anakin): Debug: Namespace : Permission lookup failed from /var/spool/mail/CC/1000001228/mail/mailboxes/INBOX_b6845831821c42517c490000a72406a4 dsync(anakin): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(anakin): Debug: Namespace : Permission lookup failed from /var/spool/mail/CC/1000001228/mail/mailboxes/INBOX_b6845831821c42517c490000a72406a4 dsync(anakin): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(anakin): Info: INBOX: only in dest dsync(anakin): Info: INBOX: only in source dsync(anakin): Error: Trying to open a non-listed mailbox with guid=814b6332541c425169490000a72406a4 dsync(anakin): Error: msg iteration failed: Couldn't open mailbox 814b6332541c425169490000a72406a4 dsync(anakin): Error: Trying to open a non-listed mailbox with guid=814b6332541c425169490000a72406a4 Nothing was migrated. In some other combinations, trying to reproduce them again, it does migrate the old mail, but first destroys the existing mail in the new mailbox. Our goal is to cut mail delivery over to the new dovecot system (which will result in existing emails before migration), and then migrate the old mail *while* maintaining message UIDs. This is the easiest way to ensure no "lost" email with the migration. What are we doing wrong, and how do we achieve our goals? Thanks in advance. -- Michael Smith

2 1

[Dovecot] Logon with Client Certificate and OTP fallback
by dovecot.pkoch＠dfgh.net 20 Mar '13

20 Mar '13

Dear Dovecot experts, we have unusual authentication requirements, namely: - almost all of our user are using a smartcard to connect with our mailserver. Thunderbird is our friend here as it will use the smartcard as an additional certificate store and Thunderbird will do client certificate based authentication when connecting via SSL with a mailserver - there's no way (at least that I know of) for our iPad users to use a smartcard, so our iPad and iPhone users use OTP token (http://www.gooze.eu/catalog/otp-tokens-oath-0) For 10 years we are using a very simple POP3-server where I replaced the authentication routines with my own functions and these function are doing the following: 1) if the connection was made without SSL refuse to connect 2) if the client was using a client certificate extract the username from the certificate. Since we cannot stop Thunderbird from sending a username/passowrd-combination we compare the username from the certificate with the username Thunderbird has sent. If the usernames matches we allow access and ignore the password. 3) if the client did not sent a client certificate we calculate the current OneTimePassword of the users OTP-token and compare that with the password Thunderbird has sent. If the passwords matches we allow access. If a OTP-password was validated it can be used for 24 hours so our OTP-users must use their tokens only once a day. Now we would like to switch from POP3 to IMAP, so here are my questions: - can Dovecot be CONFIGURED to do the above. I compiled it yesterday and SSL client authentication works as expected. OTP seems to be supported via PAM and I can write a PAM-modul for our OTP-tokens, so OTP would be possible too. But how do I tell Dovecot to do OTP-auth as a fallback for ClientCert-auth. - I already looked into the sourcecode of Dovecot. Seems like all the authentication routines were built as pluggable modules. Is there any documentation out there on how how to built my own auth-module. Integrating the OTP-auth directly into Dovecot would be a lot easier (for me) than creating a PAM-module, so I would prefer that. If there was interest from other people I would add some configuration options to Dovecot (for example the location of the OTP-token list). Otherwise I would just hardcode everything into the source. Peter

3 3

[Dovecot] ACL to make mailboxes populated by master account Read Only for regular users.
by Alex Cherniak 20 Mar '13

20 Mar '13

We have a solution using Dovecot as a secondary mail archive. All mailboxes are populated/groomed by master account and the actual users have only read access. This is achieved by a simple ACL approach. dovecot.conf has protocol imap { mail_plugins = acl quota imap_quota zlib } plugin { acl = vfile:/etc/dovecot/acls:cache_secs=300 } /etc/dovecot/acls/.DEFAULT file is trivial: user=master lrwstipekxa owner lr It used to work with Dovecot 2.0.4 for years, but after upgrade to 2.0.18 users now have full access to folders created by master account and can delete, add and move mails. Should it behave this way? How can I "secure" mailboxes again? Any help is appreciated.

2 1

[Dovecot] Core dump in 2.2.rc2 with FETCH 1 BODY.PEEK[ALL]
by Steffen Kaiser 20 Mar '13

20 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Usingt ./sbin/dovecot --version 2.2.rc2 (7a08461c5559) with Maildir, 2 FETCH 1 BODY.PEEK[ALL] dumps core, bt full is: #0 0x00007fa166e721b5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007fa166e74fc0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007fa16721ac47 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:191 backtrace = 0x181e2d0 "/usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x78c20) [0x7fa16721ac20] -> /usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x7a0dd) [0x7fa16721c0dd] -> /usr/local/dovecot-2.2.rc2/lib"... #3 0x00007fa16721c0dd in i_internal_fatal_handler (ctx=0x7fffa3de5d90, format=0x7fa1675bbde1 "file %s: line %d: unreached", args=0x7fffa3de5d70) at failures.c:652 status = 0 #4 0x00007fa16721af90 in i_panic (format=0x7fa1675bbde1 "file %s: line %d: unreached") at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffa3de5e70, reg_save_area = 0x7fffa3de5da0}} #5 0x00007fa16759d415 in imap_msgpart_parse (section=0x181e278 "ALL", msgpart_r=0x18476c0) at imap-msgpart.c:291 msgpart = 0x1851c40 pool = 0x1851c20 i = 0 next_digit = true ret = 0 #6 0x000000000041e734 in imap_fetch_body_section_init (ctx=0x7fffa3de5fa0) at imap-fetch-body.c:358 body = 0x18476b8 list_args = 0x7fa1672152a7 list_count = 0 str = 0x0 p = 0x181e26e "" error = 0x7fffa3de6460 "\001" __FUNCTION__ = "imap_fetch_body_section_init" #7 0x000000000041d064 in fetch_body_init (ctx=0x7fffa3de5fa0) at imap-fetch.c:670 No locals. #8 0x000000000041b6b5 in imap_fetch_init_handler (init_ctx=0x7fffa3de5fa0) at imap-fetch.c:62 handler = 0x1827e10 lookup_name = 0x181e270 "BODY" p = 0x181e264 ".PEEK[ALL]" __FUNCTION__ = "imap_fetch_init_handler" #9 0x000000000040e6f5 in imap_fetch_cmd_init_handler (ctx=0x1847068, cmd=0x1846f60, name=0x181e260 "BODY.PEEK[ALL]", args=0x7fffa3de5fe8) at cmd-fetch.c:36 init_ctx = {fetch_ctx = 0x1847068, pool = 0x1846f40, name = 0x181e260 "BODY.PEEK[ALL]", args = 0x1829978, error = 0x0} __FUNCTION__ = "imap_fetch_cmd_init_handler" #10 0x000000000040e86d in fetch_parse_args (ctx=0x1847068, cmd=0x1846f60, arg=0x1829978, next_arg_r=0x7fffa3de6078) at cmd-fetch.c:69 str = 0x181e260 "BODY.PEEK[ALL]" macro = 0x0 #11 0x000000000040eef3 in cmd_fetch (cmd=0x1846f60) at cmd-fetch.c:258 client = 0x1846380 ctx = 0x1847068 args = 0x1829918 next_arg = 0x7fa166e75130 list_arg = 0x1847048 search_args = 0x1850c30 qresync_args = {qresync_sample_seqset = 0x1, qresync_sample_uidset = 0x41a22c} messageset = 0x1829a78 "1" send_vanished = false ret = 1 #12 0x000000000041a18f in command_exec (cmd=0x1846f60) at imap-commands.c:156 hook = 0x1827d70 ret = false #13 0x00000000004190f2 in client_command_input (cmd=0x1846f60) at imap-client.c:775 client = 0x1846380 command = 0x20041a274 __FUNCTION__ = "client_command_input" #14 0x00000000004193f2 in client_command_input (cmd=0x1846f60) at imap-client.c:836 client = 0x1846380 command = 0x1827858 __FUNCTION__ = "client_command_input" #15 0x0000000000419512 in client_handle_next_command (client=0x1846380, remove_io_r=0x7fffa3de61bd) at imap-client.c:874 No locals. #16 0x0000000000419592 in client_handle_input (client=0x1846380) at imap-client.c:886 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #17 0x0000000000419725 in client_input (client=0x1846380) at imap-client.c:928 cmd = 0x183c8a8 output = 0x1846d98 bytes = 26 __FUNCTION__ = "client_input" #18 0x00007fa167231e1b in io_loop_call_io (io=0x1846e60) at ioloop.c:387 ioloop = 0x1826700 t_id = 2 #19 0x00007fa167233aaa in io_loop_handler_run (ioloop=0x1826700) at ioloop-epoll.c:215 ctx = 0x1826a80 events = 0x1826af0 event = 0x1826af0 list = 0x1846eb0 io = 0x1846e60 tv = {tv_sec = 1725, tv_usec = 816704} events_count = 6 msecs = 1725817 ret = 1 i = 0 j = 0 call = true __FUNCTION__ = "io_loop_handler_run" #20 0x00007fa167231ebe in io_loop_run (ioloop=0x1826700) at ioloop.c:406 No locals. #21 0x00007fa1671caa45 in master_service_run (service=0x18265a0, callback=0x4262c6 <client_connected>) at master-service.c:550 No locals. #22 0x00000000004265df in main (argc=1, argv=0x1826390) at main.c:400 set_roots = {0x42f700, 0x0} login_set = {auth_socket_path = 0x181e048 "\200\340\201\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x426078 <login_client_connected>, failure_callback = 0x426252 <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUThQFl3r2wJMiz2NAQI+zwf8CLsphLKRsB2pgFAuoNT9UAcs74DVC5CT JqNw1X4IOau9fY+m0fyZC/xOowjZiPn0yz8ZIYG/6l5dFZxNKzuyUBwh1pHVqcP7 WOrM71+ZW43gT6hibCtaxyW61BQ3XoK/nIDVZM67eVcy7G/DFuGd9RJsV4Bh3iuO g3lXqaeFAeghukMKrvU/YwIXFVyjXsjjy8ZPm3QEtUEKWN8OXaveJ3O4VT/K0VWG 234D47rBT3KFt/kqwTn95LIp10DZzzch2i/QBe992acGi78Mz4F0+VT+lJFa6nlO ZIzAeqhQRXoM8a86N0RJHri4xIMCzPHXjx/5lWL0TDe6N4ITfzEMCQ== =PrvL -----END PGP SIGNATURE-----

3 3

[Dovecot] Lot of dovecot process writes
by Angel L. Mateo 20 Mar '13

20 Mar '13

Hello, While monitoring my servers' behaviour (ubuntu 12.04 with dovecot 2.1.9, with about 70000 users) I have found that lots of disk usage is done by dovecot process (the parent process). Since lmtp, imap and pop3 connections are handle by their own process, what could be the reason of this? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

3 4

[Dovecot] Maildir or Mdbox and expunge messages.
by Evgeny Basov 20 Mar '13

20 Mar '13

Hello. I tested dovecot's work with expunge messages on Mdbox over strace (see at tail of message). As I can see dovecot process opens old storage m.* file, reads it content, opens new temporary file, writes in this one content and rename this new one to m.(*+1). How fast this algorithm works on system with about 10000 users and 5Tb data? I will use mdbox_rotate_interval for delayed expunge but I think that simple delete file in Maildir must be faster than expunge from Mdbox. Please, tell me about real experience work with Mdbox on big loaded systems. ++++++++++++++++ 0.000017 open("/var/vmail/example.org/user/storage/.temp.1362474108.P7152Q0M909647.mailsys", O_RDWR|O_CREAT|O_TRUNC, 0666) = 11 0.000063 umask(077) = 066 0.000015 fallocate(11, 01, 0, 10485760) = 0 0.000054 fstat(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 0.000043 pread(10, "\1\2N 0000000000000285\nFC"..., 8192, 16) = 1465 0.000025 write(11, "2 M1e C5135b47c\n\1\2N 000"..., 691) = 691 0.000041 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log.2", 0x7fff235b34c0) = -1 ENOENT (No such file or directory) 0.000026 alarm(180) = 0 0.000018 fcntl(9, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0 0.000020 alarm(0) = 180 0.000018 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log", {st_mode=S_IFREG|0600, st_size=3656, ...}) = 0 0.000031 fstat(9, {st_mode=S_IFREG|0600, st_size=3656, ...}) = 0 0.000041 write(11, "\n\1\3\nR5135ad97\nV29b\nG5840870697ad"..., 62) = 62 0.000023 fdatasync(11) = 0 0.079275 stat("/var/vmail/example.org/user/storage/m.8", 0x7fff235b3640) = -1 ENOENT (No such file or directory) 0.000061 rename("/var/vmail/example.org/user/storage/.temp.1362474108.P7152Q0M909647.mailsys", "/var/vmail/example.org/user/storage/m.8") = 0 0.000164 write(9, "\200\200\200\203\0\0\10\20\210\0\0\0\200\200\200\207@\0\0\20\0\0\0\0\0\0\0\0\10\0\0\0"..., 152) = 152 0.000094 fcntl(9, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0 0.000042 unlink("/var/vmail/example.org/user/storage/m.7") = 0 0.000059 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log", {st_mode=S_IFREG|0600, st_size=3808, ...}) = 0 0.000055 fstat(9, {st_mode=S_IFREG|0600, st_size=3808, ...}) = 0

2 1

[Dovecot] Stability of extraction of attachment
by Angel L. Mateo 20 Mar '13

20 Mar '13

Hello, We are migrating our dovecot servers from 2.1.9 to 2.1.15 (or 2.2 if there is a stable version soon) and maildir format to mdbox. Looking for mdbox options I have found options: * mail_attachment_dir * mail_attachement_min_size * mail_attachment_fs * mail_attachment_hash but this options are described with the message: # WARNING: This feature hasn't been tested much yet. Use at your own risk. What is the state of these options? Could I use it in a production environment? In case of yes, what is the best deduplicating option? Let it to the FS? Or configuring with "sis posix" or "sis-queue posix"? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] Exposing masteruser info to cllients via lmtp-proxy connections
by Alexandr Sabitov 20 Mar '13

20 Mar '13

Hello, Please somebody suggest me how to remove the "*masteruser" appendix from the dovecot director database while using masteruser authentication. My situation is: - all users get authenticated in LDAP on the dovecot-director frontend - then they are forwarded to dovecot backend as username*masteruser ( this is a way how to proxy users with encrypted passwords). To enable it a added an extra field in LDAP-dovecot configuration: destuser=%u*masteruser This works OK, but problems are: - I have lmtp-proxy on the dovecot frontend and I have to use the same "%u*masteruser" field in lmtp passdb because the director thinks that me(a)mail.com and me(a)mail.com*masteruser are different users and would send lmtp-proxy connections to other dovecot backend. Here is a problem: "Delivery-To" and "Received" fields in any email contains "*masteruser" ! I need to remove any mentions about "masteruser" authentication from client emails. Also another little problem: - If I run "doveadm status" tool then to get user's data I need to specify user as "username*masteruser" Thank you in advance. Alexandr Sabitov Netregistry

2 1

[Dovecot] Imaptest: Fatal: opendir(/usr/local/lib/dovecot) failed: No such file or directory
by Steffen Kaiser 20 Mar '13

20 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, is it possible to build imaptest ( http://imapwiki.org/ImapTest ) that the binary has no external dependencies? I followed the Install page: 1) downloaded both "latest" tgz 2) cd dovecot-* && ./configure --without-shared-libs && make 3) cd ../imaptest-* && ./configure --without-shared-libs \ - --with-dovecot=$(dirname $(pwd))/dovecot-20130221 && make 4) strace -e open -f -o log src/imaptest Fatal: opendir(/usr/local/lib/dovecot) failed: No such file or directory 5) cat log 4534 open("/etc/ld.so.cache", O_RDONLY) = 3 4534 open("/lib/libdl.so.2", O_RDONLY) = 3 4534 open("/lib/librt.so.1", O_RDONLY) = 3 4534 open("/lib/libc.so.6", O_RDONLY) = 3 4534 open("/lib/libpthread.so.0", O_RDONLY) = 3 4534 open("/usr/local/lib/dovecot", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT (No such file or directory) Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUS84zV3r2wJMiz2NAQInNwf/bJmjQaBxzjr/dmVDMwN2ptBvm5mFmUFy YYVwdQMfr1oDf8Jr9XIuag4gYCrgdzIxppUo+7scu+F72dCEF7uNvh2h1EdVhY+i Dy+z8fWLwyl332dGsL1XW93wtY8CJ/ybd34fEh/15M7uKaWYioocp2kyb8uZ4CPJ faIJ8Xaqpem8Rx1Erthkw+YKrVqMQiO7cnPgsCSdoxCFTFU3wJW7+mq2DVjyUUqv bIVgH8RSF79u5xKa54YAZBxW/KaQtkhcCWZAzEQFxmUl6qvOiAs/5/HmYDeftihS jp0ApB05mdsPQ/hCYd9f9Vt8Wyk5b4/QEeh4rzGeqOPn3boo7dp9Nw== =D56V -----END PGP SIGNATURE-----

2 4

[Dovecot] v2.2 status update
by Timo Sirainen 20 Mar '13

20 Mar '13

So, I'm still planning on getting v2.2.0 out Really Soon now. Unfortunately I've had to quickly develop some rather large features still at this stage. I was initially planning on leaving them for v2.3, but they were a requirement for one project and implementing them now to v2.2 was the least amount of trouble for me. (And yes, I'm aware I haven't replied to a lot of emails in this list. There are about 60 unread ones. Hopefully I'll have time to go through them this week.) So, what we have now: * dsync can sync ACLs * dsync can sync Sieve scripts - Slightly unfinished patch for Pigeonhole at http://dovecot.org/patches/2.2/doveadm-sieve-plugin.diff * dsync does the ACL/Sieve syncing by having implemented generic mailbox attribute syncing. (The ACLs/Sieve scripts are transparently mapped into the attribute hierarchy.) ACL plugin also supports now restricting attribute set/get/iteration. IMAP METADATA extension can be implemented using mailbox attributes. The dsync/ACL support was the main reason why I had planned on delaying native IMAP METADATA support until v2.3, but there's really no reason for that anymore. So expect IMAP METADATA support also early in v2.2.x (disabled by default). I'll still need to figure out how to do quota for it. * LDAP values can now have DN pointers to other entries that are queried. (Support for LDAP URLs could probably also be added with little trouble.) The configuration becomes a bit more complex again, but until the whole LDAP configuration is redesigned this will work. Example: user_attrs = \ =user=%{ldap:uid}, \ @mail=%{ldap:mailDN}, \ =uid=%{ldap:uidNumber@mail}, \ =gid=%{ldap:gidNumber@mail}, \ =home=%{ldap:rootPath@mail}/%d/%n

2 4

[Dovecot] dovecot 2 in ubuntu 12.04 or Debian Squeeze
by pvsuja 20 Mar '13

20 Mar '13

Dear sir, I have to set up a mail gateway which will be explored to Internet and a secure mail server in the Intranet. I need a smart imap proxy in the mail gateway which will fetch the mail from server and present to user through either a stand alone mail client or a web mail client. All authentication is through ldap server. I have installed Dovecot 2.2 Unstable in my Ubuntu 12.04 with ssl enabled But when I am starting dovecot, I am getting the following error *doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/conf.d/10-ssl.conf line 12: Unknown setting: ssl_cert* I couldn't figure out what is wrong. Please help me to sort it out. Thanks & Regards, Suja PV LEOS -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-2-in-ubuntu-12-04-or-Debian-Sq… Sent from the Dovecot mailing list archive at Nabble.com.

5 14

Re: [Dovecot] Question regarding Postfix and Dovecot
by Daniel Reinhardt 19 Mar '13

19 Mar '13

Replying back to the list. On Thu, Mar 14, 2013 at 10:51 AM, mourik jan c heupink < heupink(a)merit.unu.edu> wrote: > please reply to the list > > > On 3/14/2013 11:38 AM, Daniel Reinhardt wrote: > >> Yes I have read everything on that, and yet postfix does not even see >> the dovecot virtual transport. >> >> >> On Thu, Mar 14, 2013 at 10:37 AM, mourik jan c heupink >> <heupink(a)merit.unu.edu <mailto:heupink@merit.unu.edu>**> wrote: >> >> Hi Daniel, >> >> I'm new to dovecot myself, but did you read this: >> http://wiki2.dovecot.org/LDA/_**_Postfix<http://wiki2.dovecot.org/LDA/__Postfix> >> >> <http://wiki2.dovecot.org/LDA/**Postfix<http://wiki2.dovecot.org/LDA/Postfix> >> > >> >> I'm guessing that perhaps you need to configure your virtual >> transport? So, in master.cf <http://master.cf>, include a line like: >> >> >> dovecot unix - n n - - pipe >> flags=DRhu user=vmail:vmail >> argv=/usr/local/libexec/__**dovecot/dovecot-lda -f ${sender} -d >> ${recipient} >> >> and configure virtual_transport = dovecot in main.cf <http://main.cf> >> >> >> But again... I'm very new to all this myself, but perhaps it helps? >> >> Regards, >> MJ >> >> >> >> >> -- >> Daniel Reinhardt >> cryptodan(a)cryptodan.net <mailto:cryptodan@cryptodan.**net<cryptodan(a)cryptodan.net> >> > >> http://www.cryptodan.net >> 301-875-7018(c) >> 410-455-0488(h) >> > -- Daniel Reinhardt cryptodan(a)cryptodan.net http://www.cryptodan.net 301-875-7018(c) 410-455-0488(h)

20 53

Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 19 Mar '13

19 Mar '13

Hello Steffen, Thanks for your help, your message has reminds me that I forget the header specification. This new sieve script works for me : require ["fileinto"]; if allof (header :contains "To" "abuse(a)info.xx.com") { fileinto "INBOX.Test"; redirect "clement.xx(a)xx.net"; stop; } Thanks, Clement ----- Date: Mon, 18 Mar 2013 14:28:17 +0100 (CET) From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ? Message-ID: <alpine.DEB.2.02.1303181419590.3303(a)pc-2m63.inf.fh-bonn-rhein-sieg.de> Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 18 Mar 2013, Clement PAULET wrote: Dear Clement, This is my script (using for my test) : require "fileinto"; if address "To" "info(a)info.xx.com" { fileinto "Test"; } Works for me in v2.2. Did you verified that the header "To" really exists in the message and that "info(a)info.xx.com" is part of it? The log you've posted displays the envelope information, which is not necessary the same as the header information. Also, remove the precompiled Sieve script, in order to ensure that the pre-compiled one is really one from the script. You could also decompile it to make sure, it has been created from your test script. You'll find sieve-dump in src/sieve-tools/, if you compile from sources, or maybe in /usr/local/bin.

1 0

[Dovecot] SMTP Client authentication to remote Postfix/Dovecot
by Christian Benke 19 Mar '13

19 Mar '13

Hello! This is probably another basic question and i'm not even sure if it's something where Dovecot is involved, but i'll give it a shot. So i've setup Postfix with Dovecot and system-auth on my remote server. So far it looks like everything is working fine and dandy via SASL(PLAIN) and TLS. I'm just not happy about my local SMTP client settings. I'm going to try to work with mutt in the future, so i need a local MTA - i've decided to try it with Postfix. This works so far and i can send mails with mutt. However - my setup relies on smtp_sasl_password_maps for authentication. I'm not too happy to have plaintext-passwords of remote systems lying around on my local filesystem. It doesn't really ease my mind that the file is readable by root only, this doesn't help if my laptop's harddisk gets mounted elsewhere. Are there alternatives or better ways to do SMTP authentication? http://www.postfix.org/SASL_README.html#server_cyrus_comm says: > saslauthd can verify the SMTP client credentials by using them to log into an IMAP server So i have my mutt-client which is logged in to the remote Dovecot IMAP. Mutt uses the local MTA to send the mail. Is there some way to tell the local postfix or a local dovecot to authenticate the SMTP-Session via the existing IMAP-login? Or some other way where i at least don't rely on plaintext passwords but secure, encrypted hashes? Sorry if this is a redundant thread, "smtp client" authentication site:dovecot.org/list' and the likes are not exactly the most rewarding or unique search terms unfortunately. Thanks, Christian -- Central Asia by bike, starting May 2013 - http://poab.org

1 1

[Dovecot] Integrating with Drupal SQL db
by info＠stos.se 19 Mar '13

19 Mar '13

Hi I'm trying to get Dovecot to use Drupal users password for authenticating IMAP users. But I just cant figure out how to make Dovecot understand the password hash type that Drupal 7 is using. My example user with password Teacher1 looks like this in Drupal database: $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU Dovecot retrieves this hash but complains that its not a recognized hash type, or that the hash is wrong, depending on if I change the default hash type in Dovecot config. Any help appreciated. root@SSiS:/etc/postfix# dovecot --version 1.2.15 root@SSiS:/etc/postfix# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-12-pve i686 Debian 6.0.7 simfs log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/home/vmail/ mbox_write_locks: fcntl dotlock auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd root@SSiS:/etc/postfix# root@SSiS:/etc/postfix# grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=Drupal user=Dru_Adm password=localu default_pass_scheme = CRYPT password_query = SELECT name AS user, pass AS password FROM users WHERE name='%n' user_query = SELECT CONCAT(SUBSTRING_INDEX(mail,'@',-1),'/',SUBSTRING_INDEX(mail,'@',1),'/') AS mail FROM users WHERE name='%n' root@SSiS:/etc/postfix# tail /var/log/mail.log Mar 11 16:17:42 SSiS dovecot: auth(default): new auth connection: pid=8593 Mar 11 16:17:51 SSiS dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=52316#011resp=AFRlYWNoZXIxAFRlYWNoZXIx Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): lookup service=dovecot Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): #1/1 style=1 msg=Password: Mar 11 16:17:54 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: Teacher1) Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): query: SELECT name AS user, pass AS password FROM users WHERE name='Teacher1' Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): Password mismatch Mar 11 16:17:54 SSiS dovecot: auth-worker(default): md5_verify(Teacher1): Not a valid MD5-CRYPT or PLAIN-MD5 password Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): CRYPT(Teacher1) != '$S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU' Mar 11 16:17:56 SSiS dovecot: auth(default): client out: FAIL#0111#011user=Teacher1 Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 11 16:32:36 SSiS dovecot: auth(default): new auth connection: pid=9075 Mar 11 16:32:41 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts): rip=127.0.0.1, lip=127.0.0.1, secured root@SSiS:/etc/postfix#

5 8

[Dovecot] Random LDA failure to access auth socket
by Chris Richards 19 Mar '13

19 Mar '13

Greetings all. Please forgive me if I'm posting something that has already been addressed, but my google-foo is not strong enough to find the solution. I've got a dovecot server running version 2.0.19 on Gentoo Hardened. I have Postfix as my MTA, and it is calling the Dovecot LDA to deliver the mail. Everything is working great, mail is being delivered, and the users are happy. However, I am noticing that I have random entries like this: Mar 1 20:19:23 hermes dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=97(dovecot) egid=97(dovecot) missing +r perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) Mar 1 20:19:23 hermes dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Since these messages came from the server log, looking in the server log for more information is rather pointless. I have 10-master.conf configured as follows: service auth { unix_listener auth-userdb { mode = 0600 user = vmail group = vmail } In 15-lda.conf I have: protocol lda { mail_plugins = $mail_plugins sieve quota } In Postfix master.cf, I have the following: dovecot unix - n n - - pipe flags=DRhu user=vmail:users argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop} Permissions on the socket are: srw------- 1 vmail vmail 0 Feb 24 23:43 auth-userdb Judging from the log, my problem is that the LDA appears to be trying to access the socket as the dovecot user (rather than the vmail user), but my question is why? What logging can I use to tell me if postfix is calling with the wrong permissions or if the lda is somehow getting confused? Any help or suggestions greatly appreciated. Thanks, Gizmo

2 6

[Dovecot] SASL + Postfix woes
by Jerry 18 Mar '13

18 Mar '13

Okay, I wasn't going to try and fix up the messed up mail server I was given; however, I decided that I might as well try. Situation: The system has a Postfix MTA and uses Dovecot for LDA and Cyrus-SASL for SASL. That works fine. I decided that I wanted to switch over to Dovecot for SASL. dovecot is presently using MySQL for its database. I make the (I thought) necessary changes in Postfix and restarted it. Big problem. SASL is now broken. I turned on logging in Dovecot to see what was happening, but apparently nothing is happening. There are no entries regarding Postfix attempting to negotiate an SASL request with Dovecot. This is the "dovecot -n" outout (yes, I know it is an old version) # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.3-STABLE amd64 ufs log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/seibercom.net/gerard mail_plugins: expire imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)seibercom.net mail_plugins: sieve sieve_global_path: /usr/local/etc/dovecot/sieve/gerard.sieve sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: expire: Trash 2 Spam/* 2 expire_dict: proxy::expire dict: expire: mysql:/usr/local/etc/dovecot-dict-expire.conf This is the "dovecot-sql.conf" file: driver = mysql connect = host=localhost dbname=Dovecot user=root password=xxxxxxxx password_query = SELECT concat(userid, '@', domain) AS user, password \ FROM users WHERE userid = '%n' AND domain = '%d' user_query = SELECT uid, gid, home FROM users WHERE userid = '%n' AND domain = '%d' This is the pertinent part of the postconf -fn output: broken_sasl_auth_clients = yes smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_password_maps smtp_sasl_security_options = noanonymous smtp_sasl_type = dovecot smtpd_client_restrictions = reject_unauth_pipelining permit_sasl_authenticated smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = noanonymous I have tried using "dovecot" in place of "private/auth", but it doesn't make any difference. This is the only output from the postfix maillog: Mar 18 08:13:02 scorpio postfix/smtpd[65217]: connect from localhost[127.0.0.1] Mar 18 08:13:02 scorpio postfix/smtpd[65217]: warning: localhost[127.0.0.1]: SASL CRAM-MD5 authentication failed: authentication failure Mar 18 08:13:02 scorpio postfix/smtpd[65217]: lost connection after AUTH from localhost[127.0.0.1] Again, it doesn't appear that Postfix ever actually makes contact with Dovecot. I am probably doing something extremely stupid, but I just cannot figure out what it is. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

2 2

[Dovecot] Dovecot with sasl/imaps/postfix and thunderbird
by Alex 18 Mar '13

18 Mar '13

Hi, I have an fc18 system with postfix and dovecot-2.1.13 and have configured them to use sasl for SMTP Auth and Maildir with imaps. The system is running now, so I'm trying to set up thunderbird to autodetect all settings during the initial account setup. However, it seems to want to use port 143 and STARTTLS, and not port 993, which is what I would expect. When I force it to use 993, I receive a certificate failure message: Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: initializing the server-side TLS engine Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_tls_session_cache Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: connect from unknown[192.168.1.43] Mar 12 23:20:45 propnew dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.43, lip=66.111.222.101, TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate: SSL alert number 42, session=<BGBS5MXXhQDAqAEr> Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: lost connection after CONNECT from unknown[192.168.1.43] These are self-signed certs created using dovecot's mkcert.sh script. Is this a problem with the cert or with the dovecot configuration? Is it conventional to use port 143 for encrypted IMAP connections these days, and not just 993? I'm finding that port 25 works with TLS and postfix now too, not just port 587, so I'm really confused. I've included my doveconf output below. I'd appreciate it if someone could review it for me to be sure. # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.8.1-201.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2000 disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/home/%u/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 20 service_count = 0 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { driver = passwd } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks, Alex

9 18

Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 18 Mar '13

18 Mar '13

Hello Steffen, Thanks for your reply, This is my script (using for my test) : require "fileinto"; if address "To" "info(a)info.xx.com" { fileinto "Test"; } Clement ------------------------------ Message: 7 Date: Mon, 18 Mar 2013 13:23:33 +0100 (CET) From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ? Message-ID: <alpine.DEB.2.02.1303181322430.3303(a)pc-2m63.inf.fh-bonn-rhein-sieg.de> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 18 Mar 2013, Clement PAULET wrote: When I use a Sieve script, it 's loaded but actions are not respect with this logs : The sieve script just trying to redirect to INBOX.Test folder but doesn't works.. First of all, how does your script looks like? - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUUcHRl3r2wJMiz2NAQKoswf/WczI0q9k0WqWzRPr7lwuBEeiQQlYBDaq Lap8YNnbxDsczxgYZ/i0gDrq7f612A0nKWHBC806DxH4dHNyUwBPYVqFAT7edvk4 ns99f4bNh6GsufC1CY5tY/1DjT5ykEzkTmaV443YH50jQ4iPnDohOMsBBRlhoWN4 8KCLCNafCYXf48QjnAfoLt4TjaxyYb//7otYJN2CqLOGbvWoJwrpNgmuhvST+PNm RQXLG1lpxzt7QMP++fTMXa6A/SwVsglhAUS6xFdAuoOBsx1jPtvA+mot9gqpi02I j2WquMsycviWprYD2FsET903TWU/5+boxg2UBOettsTqhfwABkIcvQ== =ygun -----END PGP SIGNATURE-----

2 1

[Dovecot] Dovecot not obeying disable_plaintext_auth = yes and how to force/disable encryption
by Darren Pilgrim 18 Mar '13

18 Mar '13

I'm using Dovecot 2.1.15. I need to require encryption and only secure auth on public addresses, but allow plaintext auth over an unencrypted connection on localhost. I have so far (excerpts from `doveconf -a`): auth_mechanisms = cram-md5 plain disable_plaintext_auth = yes listen = service imap-login { inet_listener imap-local { address = ::1 port = 143 ssl = no } inet_listener imap-pub { address = 2001:db8::1 port = 993 ssl = yes } } service managesieve-login { inet_listener sieve-local { address = ::1 port = 4190 ssl = no } inet_listener sieve-pub { address = 2001:db8::1 port = 4190 ssl = no } } The ssl option only seems to switch the inet_listener between using a secure socket and using STARTTLS. How do I tell a given inet_listener to do neither? How do I tell a given inet_listener to require STARTTLS before allowing AUTH/SASL? I would prefer to offer only CRAM-MD5 on the UGA/public ports, and only PLAIN or at least also PLAIN on localhost. I tried adding auth_mechanisms lines to each inet_listener block, but got parse errors. How do I do this? Dovecot seems to ignore disable_plaintext_auth = yes: # telnet 2001:db8::1 4190 Trying 2001:db8::1... Connected to host.example.com. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "CRAM-MD5 PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." -- Please reply on list.

1 1

[Dovecot] Dovecot as LDA with Postfix and virtual users
by Christian Benke 17 Mar '13

17 Mar '13

Hello! I've been trying to configure Dovecot to work as LDA for file-based virtual users with Postfix. Some part in the configuration seems to miss though, as mails are received by Postfix, but instead of giving it to Dovecot for delivery, it delivers the mails itself. Postfix drops the mail in /var/mail/<user>/mbox, if Dovecot would be called, it should deliver it to /var/vmail/<domain>/<user>/Maildir. I've made sure to add the dovecot-service to postfix/master.cf according to http://wiki2.dovecot.org/LDA/Postfix and tried all kinds of settings and did quadruple checks for errors. I'm using Debian 6.0 with Dovecot 2.1.7(From backports) and Postfix 2.7.1 I've been trying to figure out what's missing for a few hours now and have to give up for today. I hope someone can help me with a hint what's missing or wrong :-/ Here's an excerpt from my mail.log, my postconf -n and dovecot -n: Mar 17 00:02:46 poab postfix/smtpd[15333]: connect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: setting up TLS connection from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: Anonymous TLS connection established from mail-wg0-f47.google.com[74.125.82.47]: TLSv1 with cipher RC4-SHA (128/128 bits) Mar 17 00:02:46 poab dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Mar 17 00:02:46 poab dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 1 users in 0 secs Mar 17 00:02:46 poab dovecot: auth: Debug: auth client connected (pid=0) Mar 17 00:02:46 poab postfix/smtpd[15333]: 66AD04E23EE: client=mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/cleanup[15340]: 66AD04E23EE: message-id=<CAAMQ8bSEetcSYKKHKhbAqWxJwRewaPB_wA2DK8J4N-q5Y+dG7w(a)mail.gmail.com> Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: from=<benkkk AT wheemail.com>, size=1611, nrcpt=1 (queue active) Mar 17 00:02:46 poab postfix/smtpd[15333]: disconnect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/local[15341]: 66AD04E23EE: to=<benkkk AT example.com>, relay=local, delay=0.35, delays=0.3/0.01/0/0.04, dsn=2.0.0, status=sent (delivered to mailbox) Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: removed # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 3 inet_interfaces = all inet_protocols = all mailbox_size_limit = 5120000000 myhostname = example.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relayhost = smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_reject_unlisted_recipient = yes smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = hash:/etc/postfix/sender_login_maps smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_key_file = /etc/ssl/private/postfix.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_maps virtual_transport = dovecot # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-openvz-amd64 x86_64 Debian 6.0.7 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes auth_verbose_passwords = sha1 first_valid_gid = 5000 first_valid_uid = 5000 last_valid_gid = 5000 last_valid_uid = 5000 lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_gid = 5000 mail_home = /var/vmail/%d/%n mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA1 /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } } ssl_cert = </etc/ssl/certs/postfix.pem ssl_key = </etc/ssl/private/postfix.key userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = } Thanks & good night, Christian -- Central Asia by bike, starting May 2013 - http://poab.org

2 4

[Dovecot] Dovecot SASL & Postfix
by Jerry 17 Mar '13

17 Mar '13

This is probably a dumb question, but I'll ask anyway. I am currently using Postfix with Dovecot and Cyrus-SASL. I want to switch over to Dovecot SASL. The regular Dovecot user/password file is not the same as the file used by cyrus-sasl. Usewr names and passwords are different. I created a flat file that dovecot can use for SASL look-ups; however, exactly where in the Dovecot config file to I place the entry. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

3 5

[Dovecot] Connection to PGSQL fails?
by Bjørn T Johansen 17 Mar '13

17 Mar '13

I have configured a new server and copied the dovecot-sql.conf file that works a different server to the new server... But when Dovecot tries to connect to the database, the following error appears..: Mar 16 22:28:25 smtp dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Mar 16 22:28:25 smtp dovecot: auth: Error: pgsql: Connect failed to serviceadmin: could not connect to server: Permission denied Mar 16 22:28:25 smtp dovecot: auth: Error: #011Is the server running on host "10.50.150.35" and accepting Mar 16 22:28:25 smtp dovecot: auth: Error: #011TCP/IP connections on port 5432? Mar 16 22:28:25 smtp dovecot: auth: Debug: auth client connected (pid=1768) But if I use psql and connects to the same db server with the same username and password, I can successfully connect... What am I missing? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" -----------------------------------------------------------------------------------------------

3 7

[Dovecot] sieve: seconds-extension for vacation
by Peer Heinlein 16 Mar '13

16 Mar '13

Hi, looks like Dovecot-Sieve doesn't know the seconds-extension for vacation: main script: line 5: error: unknown tagged argument ':seconds' for the vacation command (reported only once at first occurence). main script: error: validation failed. http://tools.ietf.org/html/rfc6131 Could this be added during the next releases? Regards, Peer -- Treffen Sie uns auf den Chemnitzer Linux-Tagen vom 16. bis 17. März 2013! Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] Dovecot error wuth MySQL
by Cesar 16 Mar '13

16 Mar '13

Hello PeopleCan anybody help me?My scenario:- One computer with:a) postfix-2.6.6-2.2.el6_1.x86_64b) mysql-5.1.66-2.el6_3.x86_64c) dovecot-2.0.9-2.el6_1.1.x86_64d) dovecot-mysql-2.0.9-2.el6_1.1.x86_64Postfix and Dovecot auth over MySQLThe Problem:- logwatch show me: Dovecot disconnects: auth failed, 1 attempts: 1 Time(s) in IDLE: 2 Time(s) no auth attempts: 6 Time(s) no reason: 6 Time(s) **Unmatched Entries** dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone away: 125 Time(s)(125 Times Wow)For example part of maillog show me:About MySQL auth failed:Mar 10 03:55:05 gateway dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone awayMar 10 03:55:05 gateway dovecot: auth: mysql: Connected to localhost (mail)Mar 10 03:55:05 gateway dovecot: pop3-login: Login: user=user-name(a)domain.com>, method=PLAIN, rip=192.168.100.31, lip=190.128.232.2, mpid=16352Mar 10 03:55:05 gateway dovecot: pop3(user-name(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0The Question:How to fix it? (i don't want to see the dovecot auth error mysql)I will be very grateful to anyone who can help me ----- Best Regards Cesar -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-error-wuth-MySQL-tp40765.html Sent from the Dovecot mailing list archive at Nabble.com.

5 6

[Dovecot] Question regarding Postfix and Dovecot
by Daniel Reinhardt 16 Mar '13

16 Mar '13

All, Thank you for having this list, and I have a question regarding why postfix is not handing off delivery to Dovecot to virtual users. Here is all I can offer since I am not at my server: *Here is the debug information for my postfix setup:* [code] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: ipv4 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: inet_addr_local: configured 2 IPv4 addresses Mar 13 20:23:55 andromeda postfix/smtpd[15316]: process generation: 3 (3) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: relay_domains: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect to subsystem private/proxymap Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = open Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr table = unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr flags = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 16 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: proxy:unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Compiled against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Run-time linked against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: hash:/etc/aliases Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_va_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: table = alias Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: select_field = goto Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: where_field = address Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_va_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: query = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' AND alias.address=concat('%u', '@', alias_domain.target_domain) AND alias.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_alias_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_vmb_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: table = mailbox Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: select_field = CONCAT(domain, '/', local_part) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: where_field = username Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_vmb_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: query = SELECT maildir FROM mailbox, alias_domain \ WHERE alias_domain.alias_domain = '%d' \ AND mailbox.username=concat('%u', '@', alias_domain.target_domain ) \ AND mailbox.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_mailbox_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_helo_hostname_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_address_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_recipient_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_sender_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: AHVrzbFVvc2OBJm0YrMwfr0jnTbg7Iomx767MU6gr+4= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = policy Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr cache_type = smtpd Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connection established Mar 13 20:23:55 andromeda postfix/smtpd[15316]: master_notify: status 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: resource Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: software Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect from mail-ve0-f174.google.com[209.85.128.174] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: smtp_stream_setup: maxtime=300 enable_deadline=0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostname: mail-ve0-f174.google.com ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostaddr: 209.85.128.174 ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = connect Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr ident = smtp:209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report connect to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "j" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{daemon_name}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "v" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "Postfix 2.9.6" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: non-protocol events for protocol version 6: Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: transport=inet endpoint=127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: trying... [127.0.0.1] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: vstream_tweak_tcp: TCP_MAXSEG 16384 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_version=0x6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: milter inet:127.0.0.1:8891 version 6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: events SMFIP_NOHELO SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGHDRS SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_conn_event: milter inet:127.0.0.1:8891: connect mail-ve0-f174.google.com/209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_CONNECT; macros: j=andromeda.home {daemon_name}=andromeda.home v=Postfix 2.9.6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: reply: SMFIR_CONTINUE data 0 bytes Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 andromeda.home ESMTP Postfix (Ubuntu) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: EHLO mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report helo to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{tls_version}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher_bits}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_subject}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_issuer}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_helo_event: milter inet:127.0.0.1:8891: helo mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_HELO; macros: (none) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: skipping event SMFIC_HELO for milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-andromeda.home Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-PIPELINING Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-SIZE 10240000 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-VRFY Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ETRN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ENHANCEDSTATUSCODES Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-8BITMIME Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250 DSN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: query milter states for other event Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_other_event: milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 2.0.0 Ready to start TLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: abort all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_abort: abort milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: Yq65+voc3LQNVdBh7hwpJK7T0kNDyGKblUpQTyAY8oA= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/cleanup[15325]: D43E610006A: message-id=< CADUOTo1h8zkNH-Pi-xpZ03Ko+n1_GqbhEdW23MN-npSYVyjYPA(a)mail.gmail.com> Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: mail-ve0-f174.google.com [209.85.128.174] not internal Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: not authenticated Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing domain match for 'gmail.com' Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing subdomain match for 'gmail.com' Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: from=< cryptodan(a)gmail.com>, size=6398, nrcpt=1 (queue active) Mar 13 20:23:55 andromeda postfix/local[15327]: D43E610006A: to=< cryptodan(a)cryptodan.net>, relay=local, delay=0.16, delays=0.15/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: removed Mar 13 20:24:01 andromeda postfix/smtpd[15316]: proxymap stream disconnect Mar 13 20:24:01 andromeda postfix/smtpd[15316]: auto_clnt_close: disconnect private/tlsmgr stream Mar 13 20:24:01 andromeda postfix/smtpd[15316]: rewrite stream disconnect Mar 13 20:25:35 andromeda postfix/smtpd[15316]: idle timeout -- exiting Mar 13 20:27:12 andromeda dovecot: auth-worker: mysql(localhost): Connected to database mail Mar 13 20:27:12 andromeda dovecot: pop3-login: Login: user=< cryptodan(a)cryptodan.net>, method=PLAIN, rip=96.244.76.114, lip=192.168.1.8, mpid=15341, TLS Mar 13 20:27:12 andromeda dovecot: pop3(cryptodan(a)cryptodan.net): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection rate 1/60s for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection count 1 for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max cache size 1 at Mar 14 00:23:55 [/code] *Here is the output of postconf -d:* [code] root@andromeda:/etc/postfix# postconf -d 2bounce_notice_recipient = postmaster access_map_defer_code = 450 access_map_reject_code = 554 address_verify_cache_cleanup_interval = 12h address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = btree:$data_directory/verify_cache address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = ${stress?1}${stress:3} address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = $double_bounce_sender address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_sender_ttl = 0s address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, nis:mail.aliases allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_add_missing_headers = no always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = yes application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = yes body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = no bsmtp_delivery_slot_cost = $default_delivery_slot_cost bsmtp_delivery_slot_discount = $default_delivery_slot_discount bsmtp_delivery_slot_loan = $default_delivery_slot_loan bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback bsmtp_destination_rate_delay = $default_destination_rate_delay bsmtp_destination_recipient_limit = $default_destination_recipient_limit bsmtp_extra_recipient_limit = $default_extra_recipient_limit bsmtp_initial_destination_concurrency = $initial_destination_concurrency bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots bsmtp_recipient_limit = $default_recipient_limit bsmtp_recipient_refill_delay = $default_recipient_refill_delay bsmtp_recipient_refill_limit = $default_recipient_refill_limit bsmtp_time_limit = $command_time_limit canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = cyrus_sasl_config_path = daemon_directory = /usr/lib/postfix daemon_table_open_error_is_fatal = no daemon_timeout = 18000s data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = debugger_command = default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_failed_cohort_limit = 1 default_destination_concurrency_limit = 20 default_destination_concurrency_negative_feedback = 1 default_destination_concurrency_positive_feedback = 1 default_destination_rate_delay = 0s default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_filter_nexthop = default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 20000 default_recipient_refill_delay = 5s default_recipient_refill_limit = 100 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 0h deliver_lock_attempts = 20 deliver_lock_delay = 1s destination_concurrency_feedback_debug = no detect_8bit_encoding_header = yes disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = no dnsblog_reply_delay = 0s dnsblog_service_name = dnsblog dont_remove = 0 double_bounce_sender = double-bounce dovecot_delivery_slot_cost = $default_delivery_slot_cost dovecot_delivery_slot_discount = $default_delivery_slot_discount dovecot_delivery_slot_loan = $default_delivery_slot_loan dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit dovecot_destination_concurrency_limit = $default_destination_concurrency_limit dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback dovecot_destination_rate_delay = $default_destination_rate_delay dovecot_destination_recipient_limit = $default_destination_recipient_limit dovecot_extra_recipient_limit = $default_extra_recipient_limit dovecot_initial_destination_concurrency = $initial_destination_concurrency dovecot_minimum_delivery_slots = $default_minimum_delivery_slots dovecot_recipient_limit = $default_recipient_limit dovecot_recipient_refill_delay = $default_recipient_refill_delay dovecot_recipient_refill_limit = $default_recipient_refill_limit dovecot_time_limit = $command_time_limit duplicate_filter_limit = 1000 empty_address_default_transport_maps_lookup_key = <> empty_address_recipient = MAILER-DAEMON empty_address_relayhost_maps_lookup_key = <> enable_long_queue_ids = no enable_original_recipient = yes error_delivery_slot_cost = $default_delivery_slot_cost error_delivery_slot_discount = $default_delivery_slot_discount error_delivery_slot_loan = $default_delivery_slot_loan error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit error_destination_concurrency_limit = $default_destination_concurrency_limit error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback error_destination_rate_delay = $default_destination_rate_delay error_destination_recipient_limit = $default_destination_recipient_limit error_extra_recipient_limit = $default_extra_recipient_limit error_initial_destination_concurrency = $initial_destination_concurrency error_minimum_delivery_slots = $default_minimum_delivery_slots error_notice_recipient = postmaster error_recipient_limit = $default_recipient_limit error_recipient_refill_delay = $default_recipient_refill_delay error_recipient_refill_limit = $default_recipient_refill_limit error_service_name = error execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = hopcount_limit = 50 html_directory = no ifmail_delivery_slot_cost = $default_delivery_slot_cost ifmail_delivery_slot_discount = $default_delivery_slot_discount ifmail_delivery_slot_loan = $default_delivery_slot_loan ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit ifmail_destination_concurrency_limit = $default_destination_concurrency_limit ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback ifmail_destination_rate_delay = $default_destination_rate_delay ifmail_destination_recipient_limit = $default_destination_recipient_limit ifmail_extra_recipient_limit = $default_extra_recipient_limit ifmail_initial_destination_concurrency = $initial_destination_concurrency ifmail_minimum_delivery_slots = $default_minimum_delivery_slots ifmail_recipient_limit = $default_recipient_limit ifmail_recipient_refill_delay = $default_recipient_refill_delay ifmail_recipient_refill_limit = $default_recipient_refill_limit ifmail_time_limit = $command_time_limit ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = all inet_protocols = all initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 5s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmtp_address_preference = any lmtp_assume_final = no lmtp_bind_address = lmtp_bind_address6 = lmtp_body_checks = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_delivery_slot_cost = $default_delivery_slot_cost lmtp_delivery_slot_discount = $default_delivery_slot_discount lmtp_delivery_slot_loan = $default_delivery_slot_loan lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback lmtp_destination_rate_delay = $default_destination_rate_delay lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_dns_resolver_options = lmtp_enforce_tls = no lmtp_extra_recipient_limit = $default_extra_recipient_limit lmtp_generic_maps = lmtp_header_checks = lmtp_host_lookup = dns lmtp_initial_destination_concurrency = $initial_destination_concurrency lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 998 lmtp_mail_timeout = 300s lmtp_mime_header_checks = lmtp_minimum_delivery_slots = $default_minimum_delivery_slots lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_nested_header_checks = lmtp_per_record_deadline = no lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_maps = lmtp_pix_workaround_threshold_time = 500s lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_recipient_limit = $default_recipient_limit lmtp_recipient_refill_delay = $default_recipient_refill_delay lmtp_recipient_refill_limit = $default_recipient_refill_limit lmtp_reply_filter = lmtp_rset_timeout = 20s lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_dummy_mail_auth = no lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_skip_quit_response = no lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_block_early_mail_reply = no lmtp_tls_cert_file = lmtp_tls_ciphers = export lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_eccert_file = lmtp_tls_eckey_file = $lmtp_tls_eccert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_fingerprint_cert_match = lmtp_tls_fingerprint_digest = md5 lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = !SSLv2 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_protocols = !SSLv2 lmtp_tls_scert_verifydepth = 9 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_delivery_slot_cost = $default_delivery_slot_cost local_delivery_slot_discount = $default_delivery_slot_discount local_delivery_slot_loan = $default_delivery_slot_loan local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit local_destination_concurrency_limit = 2 local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback local_destination_rate_delay = $default_destination_rate_delay local_destination_recipient_limit = 1 local_extra_recipient_limit = $default_extra_recipient_limit local_header_rewrite_clients = permit_inet_interfaces local_initial_destination_concurrency = $initial_destination_concurrency local_minimum_delivery_slots = $default_minimum_delivery_slots local_recipient_limit = $default_recipient_limit local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_recipient_refill_delay = $default_recipient_refill_delay local_recipient_refill_limit = $default_recipient_refill_limit local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20130203 mail_spool_directory = /var/mail mail_version = 2.9.6 mailbox_command = mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 51200000 mailbox_transport = mailbox_transport_maps = maildrop_delivery_slot_cost = $default_delivery_slot_cost maildrop_delivery_slot_discount = $default_delivery_slot_discount maildrop_delivery_slot_loan = $default_delivery_slot_loan maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit maildrop_destination_concurrency_limit = $default_destination_concurrency_limit maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback maildrop_destination_rate_delay = $default_destination_rate_delay maildrop_destination_recipient_limit = $default_destination_recipient_limit maildrop_extra_recipient_limit = $default_extra_recipient_limit maildrop_initial_destination_concurrency = $initial_destination_concurrency maildrop_minimum_delivery_slots = $default_minimum_delivery_slots maildrop_recipient_limit = $default_recipient_limit maildrop_recipient_refill_delay = $default_recipient_refill_delay maildrop_recipient_refill_limit = $default_recipient_refill_limit maildrop_time_limit = $command_time_limit mailman_delivery_slot_cost = $default_delivery_slot_cost mailman_delivery_slot_discount = $default_delivery_slot_discount mailman_delivery_slot_loan = $default_delivery_slot_loan mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit mailman_destination_concurrency_limit = $default_destination_concurrency_limit mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback mailman_destination_rate_delay = $default_destination_rate_delay mailman_destination_recipient_limit = $default_destination_recipient_limit mailman_extra_recipient_limit = $default_extra_recipient_limit mailman_initial_destination_concurrency = $initial_destination_concurrency mailman_minimum_delivery_slots = $default_minimum_delivery_slots mailman_recipient_limit = $default_recipient_limit mailman_recipient_refill_delay = $default_recipient_refill_delay mailman_recipient_refill_limit = $default_recipient_refill_limit mailman_time_limit = $command_time_limit mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = master_service_disable = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 10240000 message_strip_characters = milter_command_timeout = 30s milter_connect_macros = j {daemon_name} v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_end_of_header_macros = i milter_header_checks = milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer} milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer} milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 300s multi_instance_directories = multi_instance_enable = no multi_instance_group = multi_instance_name = multi_instance_wrapper = multi_recipient_bounce_reject_code = 550 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = localdomain myhostname = andromeda.home mynetworks = 127.0.0.0/8 192.168.1.0/24 mynetworks_style = subnet myorigin = $myhostname nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = yes parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 postmulti_control_commands = reload flush postmulti_start_commands = start postmulti_stop_commands = stop abort drain quick-stop postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_bare_newline_ttl = 30d postscreen_blacklist_action = ignore postscreen_cache_cleanup_interval = 12h postscreen_cache_map = btree:$data_directory/postscreen_cache postscreen_cache_retention_time = 7d postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit postscreen_command_count_limit = 20 postscreen_command_filter = postscreen_command_time_limit = ${stress?10}${stress:300}s postscreen_disable_vrfy_command = $disable_vrfy_command postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords postscreen_dnsbl_action = ignore postscreen_dnsbl_reply_map = postscreen_dnsbl_sites = postscreen_dnsbl_threshold = 1 postscreen_dnsbl_ttl = 1h postscreen_enforce_tls = $smtpd_enforce_tls postscreen_expansion_filter = $smtpd_expansion_filter postscreen_forbidden_commands = $smtpd_forbidden_commands postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = ${stress?2}${stress:6}s postscreen_helo_required = $smtpd_helo_required postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = no postscreen_non_smtp_command_ttl = 30d postscreen_pipelining_action = enforce postscreen_pipelining_enable = no postscreen_pipelining_ttl = 30d postscreen_post_queue_limit = $default_process_limit postscreen_pre_queue_limit = $default_process_limit postscreen_reject_footer = $smtpd_reject_footer postscreen_tls_security_level = $smtpd_tls_security_level postscreen_use_tls = $smtpd_use_tls postscreen_watchdog_timeout = 10s postscreen_whitelist_interfaces = static:all prepend_delivered_header = command, file, forward process_id_directory = pid propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map proxymap_service_name = proxymap proxywrite_service_name = proxywrite qmgr_clog_warn_time = 300s qmgr_daemon_timeout = 1000s qmgr_fudge_factor = 100 qmgr_ipc_timeout = 60s qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_client_port_logging = no qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 300s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/postfix receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = reject_code = 554 reject_tempfail_action = defer_if_permit relay_clientcerts = relay_delivery_slot_cost = $default_delivery_slot_cost relay_delivery_slot_discount = $default_delivery_slot_discount relay_delivery_slot_loan = $default_delivery_slot_loan relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback relay_destination_rate_delay = $default_destination_rate_delay relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = $mydestination relay_domains_reject_code = 554 relay_extra_recipient_limit = $default_extra_recipient_limit relay_initial_destination_concurrency = $initial_destination_concurrency relay_minimum_delivery_slots = $default_minimum_delivery_slots relay_recipient_limit = $default_recipient_limit relay_recipient_maps = relay_recipient_refill_delay = $default_recipient_refill_delay relay_recipient_refill_limit = $default_recipient_refill_limit relay_transport = relay relayhost = relocated_maps = remote_header_rewrite_domain = require_home_directory = no reset_owner_alias = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no retry_delivery_slot_cost = $default_delivery_slot_cost retry_delivery_slot_discount = $default_delivery_slot_discount retry_delivery_slot_loan = $default_delivery_slot_loan retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit retry_destination_concurrency_limit = $default_destination_concurrency_limit retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback retry_destination_rate_delay = $default_destination_rate_delay retry_destination_recipient_limit = $default_destination_recipient_limit retry_extra_recipient_limit = $default_extra_recipient_limit retry_initial_destination_concurrency = $initial_destination_concurrency retry_minimum_delivery_slots = $default_minimum_delivery_slots retry_recipient_limit = $default_recipient_limit retry_recipient_refill_delay = $default_recipient_refill_delay retry_recipient_refill_limit = $default_recipient_refill_limit rewrite_service_name = rewrite sample_directory = /usr/share/doc/postfix/examples scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback scalemail-backend_destination_rate_delay = $default_destination_rate_delay scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots scalemail-backend_recipient_limit = $default_recipient_limit scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit scalemail-backend_time_limit = $command_time_limit send_cyrus_sasl_authzid = no sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = sender_dependent_default_transport_maps = sender_dependent_relayhost_maps = sendmail_fix_line_endings = always sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = postdrop show_user_unknown_table_name = yes showq_service_name = showq smtp_address_preference = any smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_body_checks = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_delivery_slot_cost = $default_delivery_slot_cost smtp_delivery_slot_discount = $default_delivery_slot_discount smtp_delivery_slot_loan = $default_delivery_slot_loan smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback smtp_destination_rate_delay = $default_destination_rate_delay smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_dns_resolver_options = smtp_enforce_tls = no smtp_extra_recipient_limit = $default_extra_recipient_limit smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_header_checks = smtp_helo_name = $myhostname smtp_helo_timeout = 300s smtp_host_lookup = dns smtp_initial_destination_concurrency = $initial_destination_concurrency smtp_line_length_limit = 998 smtp_mail_timeout = 300s smtp_mime_header_checks = smtp_minimum_delivery_slots = $default_minimum_delivery_slots smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_nested_header_checks = smtp_never_send_ehlo = no smtp_per_record_deadline = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_maps = smtp_pix_workaround_threshold_time = 500s smtp_pix_workarounds = disable_esmtp,delay_dotcrlf smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_recipient_limit = $default_recipient_limit smtp_recipient_refill_delay = $default_recipient_refill_delay smtp_recipient_refill_limit = $default_recipient_refill_limit smtp_reply_filter = smtp_rset_timeout = 20s smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = noplaintext, noanonymous smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_dummy_mail_auth = no smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_block_early_mail_reply = no smtp_tls_cert_file = smtp_tls_ciphers = export smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_eccert_file = smtp_tls_eckey_file = $smtp_tls_eccert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_fingerprint_cert_match = smtp_tls_fingerprint_digest = md5 smtp_tls_key_file = $smtp_tls_cert_file smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = !SSLv2 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_protocols = !SSLv2 smtp_tls_scert_verifydepth = 9 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_verify_cert_match = hostname smtp_use_tls = no smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP $mail_name smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_port_logging = no smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = smtpd_command_filter = smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_helo_required = no smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = ${stress?1}${stress:100} smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_per_record_deadline = ${stress?yes}${stress:no} smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_options = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_reject_footer = smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_restriction_classes = smtpd_sasl_auth_enable = no smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = smtpd smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = cyrus smtpd_sender_login_maps = smtpd_sender_restrictions = smtpd_service_name = smtpd smtpd_soft_error_limit = 10 smtpd_starttls_timeout = ${stress?10}${stress:300}s smtpd_timeout = ${stress?10}${stress:300}s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = no smtpd_tls_ccert_verifydepth = 9 smtpd_tls_cert_file = smtpd_tls_ciphers = export smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_eccert_file = smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = $smtpd_tls_cert_file smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mailbox_ownership = yes strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name} tcp_windowsize = 0 tls_append_default_CA = no tls_daemon_random_bytes = 32 tls_disable_workarounds = tls_eecdh_strong_curve = prime256v1 tls_eecdh_ultra_curve = secp384r1 tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH tls_legacy_public_key_fingerprints = no tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH tls_null_cipherlist = eNULL:!aNULL tls_preempt_cipherlist = no tls_random_bytes = 32 tls_random_exchange_name = ${data_directory}/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom tlsproxy_enforce_tls = $smtpd_enforce_tls tlsproxy_service_name = tlsproxy tlsproxy_tls_CAfile = $smtpd_tls_CAfile tlsproxy_tls_CApath = $smtpd_tls_CApath tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth tlsproxy_tls_cert_file = $smtpd_tls_cert_file tlsproxy_tls_ciphers = $smtpd_tls_ciphers tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest tlsproxy_tls_key_file = $smtpd_tls_key_file tlsproxy_tls_loglevel = $smtpd_tls_loglevel tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols tlsproxy_tls_protocols = $smtpd_tls_protocols tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert tlsproxy_tls_security_level = $smtpd_tls_security_level tlsproxy_tls_session_cache_timeout = $smtpd_tls_session_cache_timeout tlsproxy_use_tls = $smtpd_use_tls tlsproxy_watchdog_timeout = 10s trace_service_name = trace transport_maps = transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = unknown_address_reject_code = 450 unknown_address_tempfail_action = $reject_tempfail_action unknown_client_reject_code = 450 unknown_helo_hostname_tempfail_action = $reject_tempfail_action unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_defer_code = 450 unverified_recipient_reject_code = 450 unverified_recipient_reject_reason = unverified_recipient_tempfail_action = $reject_tempfail_action unverified_sender_defer_code = 450 unverified_sender_reject_code = 450 unverified_sender_reject_reason = unverified_sender_tempfail_action = $reject_tempfail_action uucp_delivery_slot_cost = $default_delivery_slot_cost uucp_delivery_slot_discount = $default_delivery_slot_discount uucp_delivery_slot_loan = $default_delivery_slot_loan uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit uucp_destination_concurrency_limit = $default_destination_concurrency_limit uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback uucp_destination_rate_delay = $default_destination_rate_delay uucp_destination_recipient_limit = $default_destination_recipient_limit uucp_extra_recipient_limit = $default_extra_recipient_limit uucp_initial_destination_concurrency = $initial_destination_concurrency uucp_minimum_delivery_slots = $default_minimum_delivery_slots uucp_recipient_limit = $default_recipient_limit uucp_recipient_refill_delay = $default_recipient_refill_delay uucp_recipient_refill_limit = $default_recipient_refill_limit uucp_time_limit = $command_time_limit verp_delimiter_filter = -=+ virtual_alias_domains = $virtual_alias_maps virtual_alias_expansion_limit = 1000 virtual_alias_maps = $virtual_maps virtual_alias_recursion_limit = 1000 virtual_delivery_slot_cost = $default_delivery_slot_cost virtual_delivery_slot_discount = $default_delivery_slot_discount virtual_delivery_slot_loan = $default_delivery_slot_loan virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback virtual_destination_rate_delay = $default_destination_rate_delay virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_extra_recipient_limit = $default_extra_recipient_limit virtual_gid_maps = virtual_initial_destination_concurrency = $initial_destination_concurrency virtual_mailbox_base = virtual_mailbox_domains = $virtual_mailbox_maps virtual_mailbox_limit = 51200000 virtual_mailbox_lock = fcntl, dotlock virtual_mailbox_maps = virtual_minimum_delivery_slots = $default_minimum_delivery_slots virtual_minimum_uid = 100 virtual_recipient_limit = $default_recipient_limit virtual_recipient_refill_delay = $default_recipient_refill_delay virtual_recipient_refill_limit = $default_recipient_refill_limit virtual_transport = virtual virtual_uid_maps = [/code] *Here is the output of my dovecot -n:* [code] root@andromeda:/etc/postfix# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-38-generic-pae i686 Ubuntu 12.04.2 LTS ext4 disable_plaintext_auth = no first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = mbox:/var/vmail/%d/%n mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)cryptodan.net protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 01224 user = vmail } } ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } [/code] I hope I provided enough information. Thanks, -- Daniel Reinhardt cryptodan(a)cryptodan.net http://www.cryptodan.net 301-875-7018(c) 410-455-0488(h)

4 3

[Dovecot] Panic when indexing virtual folder with solr
by Andre Rodier 15 Mar '13

15 Mar '13

Hello Timo and everyone, I am using dovecot 2.1 on debian7 with the fts-solr plugin, and everything is working fine. I have a Virtual folder with all emails, and when I run a doveadm index, I have an error if I don't index real folders first. Example: doveadm -v index -u 'andre rodier' 'Search/*' => Panic: file solr-connection.c: line 416 (solr_connection_select): assertion failed: (!conn->posting) Now, if I rune the doveadm index on the real folders first, the next time I do the index on the virtual folder, everything is fine: doveadm -v index -u 'andre rodier' '*' doveadm -v index -u 'andre rodier' 'Search/*' I wonder if dovecot can run the index on the real folder instead of displaying this error? I hope that will help.

4 3

[Dovecot] problem with charset and encoding
by Héctor Moreno Blanco 15 Mar '13

15 Mar '13

Hello everyone, We are having some troubles since we updated dovecot from 2.0.10 to 2.1.6. With 2.0.10 with messages with this headers: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Showed the special characters fine. However, with this new version, there are special characters that are not correctly showed. For example: "Su c=F3digo de activaci=F3n " must be "Su código de activación ", but in all email clients, even in webmail, is showed like the first way without decoding it. Maybe some configuration or libraries I missed? Could you please help us with this? Thank you very much in advanced. Kind regards, Héctor Moreno Blanco. P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 3

[Dovecot] Bare bones Debian vmWare appliance?
by Charles Marcus 15 Mar '13

15 Mar '13

Hi all, Does anyone know of a decent bare-bones debian vmWare appliance I can download to play with? Thanks, -- Best regards, Charles

3 3

[Dovecot] Converting from Cyrus -> Dovecot sdbox
by lst_hoe02＠kwsoft.de 14 Mar '13

14 Mar '13

Hello we like to convert a IMAP server with Cyrus 2.2 to Dovecot 2.0.19 and sdbox mail format. From what i have read until now this is a two stage process with converting first from Cyrus to (Dovecot) maildir with for example cyrus2dovecot and than with dsync from maildir to sdbox. Is this correct or are there other possibilities to go in one step from Cyrus format to sdbox? Regards Andreas

2 1

[Dovecot] stats plugins causing dns lookup per connection
by Kelsey Cummings 14 Mar '13

14 Mar '13

I noticed our imap servers were generating a lot of A record lookups for their own IP's the other day and just got around to tracking down the source. Seems like they are all being caused by guid_128_generate() - perhaps the lookup could be cached at start up or it could just use make use of the hostname rather than spending the effort to get the IP via gethostbyname() calls. The function is used in a few other places too, so this might help more than just the stats plugin. nscd and/or host entries mitigate the total time spent on the lookup of course, but it seems unnecessary. -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

2 2

[Dovecot] Sieve mark message as read
by Donny Brooks 13 Mar '13

13 Mar '13

I am trying to get the advanced functionality of managesieve working for our users. If this is not the proper place to ask this, please just say so. I have enabled sieve and it works just fine for basic moving messages to folders. However the problem comes in to play when a user selects something like "delete" or "mark as read" in the filter. It just simply does not do that function. I have installed the imapflags and imap4flags and added the needed parts to the dovecot config but it still does not seem to work. We are running Centos 6.3 with dovecot-2.0.9-2.el6_1.1.x86_64 and dovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64 installed. What could I be missing to make this work? -- Donny B.

2 4

[Dovecot] Qmail-LDAP/Dovecot Cluster
by Jeff Hardy 13 Mar '13

13 Mar '13

Hello, I have worked with qmail-ldap and Dovecot for a number of years, and recently wrote up a piece going into great detail about all aspects of our environment. It currently supports a rather small installation of ~10K active users. If it should be of interest: http://fritz.potsdam.edu/projects/email It is intended primarily for system administrators or mail administrators interested in building mail infrastructure on top of open-source technologies, and is inspired by the likes of Life with qmail. Topics include storage, backup, directory integration, local and remote mail exchange, checkpassword SMTP-Auth and Dovecot login, RBLs, content-scanning and anti-spam, quarantine, webmail, etc. Full installation directions and configuration stanzas are provided for nearly every piece of the infrastructure. Comments/criticism welcome. Cheers. -Jeff -- Jeffrey M Hardy Network / Systems Administrator hardyjm(a)potsdam.edu

1 0

[Dovecot] mail_max_userip_connections
by Simon Brereton 13 Mar '13

13 Mar '13

Hi Sometimes, I hit mail_max_userip_connections limit. As far as I know I'm the only person that does, but I would like to find out why before someone else hits the limit. Is there a command available that can list the connections per IP? I'd like to find out which client is causing this. Or do you have a better suggestion? Should I just raise the limit (it's still at the default 10, which I never changed). What are the implications of this. Thanks. Simon

3 7

[Dovecot] Limiting size of stored emails
by Patrick Joy 13 Mar '13

13 Mar '13

Hi, Would appreciate some advice on this issue. I'm running dovecot version 1.0.10 on ubuntu 8.04 LTS. Recently a user created a draft email in their client (outlook) and added a 4GB attachment. The email was uploaded to the draft imap folder on the server. After this the client would then go into a endless synchronisation loop every time outlook was opened. For example in the most recent case 400GB of data was downloaded to the client when the user left outlook synchronising for 5 days. I know this may be a bug with the client or client os however I would like to know if there is a way to limit the size of individual emails that can be stored in the imap store to prevent users creating huge drafts. There is no reason they should need an email draft of this size as it can never be sent through SMTP. Thanks

3 7

[Dovecot] Documentation Clarification
by andreas＠cymail.eu 12 Mar '13

12 Mar '13

Can somebody please clarify the following in the documentation? I am actually looging at the 2.x docs: In the http://wiki2.dovecot.org/Authentication file there is a good effort to clarify between authentication mechanisms and password schemes. The authentication mechanisms are described in http://wiki2.dovecot.org/Authentication/Mechanisms. That is fine. But then looking at the http://wiki2.dovecot.org/Authentication/PasswordSchemes there is a section "Non-plaintext authentication mechanisms" which looks to me to be a repeat of what there is in the description of the authentication mechanisms. This section lists one more mechanism, LANMAN. Can somebody explain why this section is in this file? And which of the two is applicable. Thank you Andreas

2 1

Re: [Dovecot] Integrating with Drupal SQL db
by Andreas Meyer 12 Mar '13

12 Mar '13

Hello! I took the thread back to the list. Tobias Rådenholt <tobias.radenholt(a)stos.se> wrote: > I think it is ssha512 hashing. It's not stos.se that's affected. It's > swedishschoolinsydney.org.au Just found this: capabilities are 'IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS LOGINDISABLED' meaning you can log in via STARTTLS but not via plaintext authentication. Does it have something to do woth your problem? > Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid > commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, > rip=127.0.0.1, lip=127.0.0.1, secured > Thanks! > /Tobias Andreas > <info(a)stos.se> wrote: > > > Hi > > > > I'm trying to get Dovecot to use Drupal users password for authenticating > > IMAP users. But I just cant figure out how to make Dovecot understand the > > password hash type that Drupal 7 is using. > > > > My example user with password Teacher1 looks like this in Drupal database: > > $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU > > This is not CRAM-MD5, is it? > > > Dovecot retrieves this hash but complains that its not a recognized hash > > type, or that the hash is wrong, depending on if I change the default hash > > type in Dovecot config. > > > > Any help appreciated. > > This is what I get connecting to your server: > Connected to stos.se. > Escape character is '^]'. > * OK [CAPABILITY IMAP4REV1 NAMESPACE ID AUTH=PLAIN AUTH=LOGIN UIDPLUS STARTTLS ACL METADATA] Debian-60-squeeze-64-minimal IMAP4rev1 Citadel 7.83 ready > > This is what I get connecting to mine: > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=CRAM-MD5] Dovecot ready. > > I see no AUTH=CRAM-MD5 in capabilites of your server. > > Andreas

2 1

[Dovecot] dovecot virtual user 'unknown'...
by Dr Michael Daly 12 Mar '13

12 Mar '13

Hi I have a problem whereby Dovecot 1.0.7 is reporting that a recently setup virtual user in /etc/dovecot_passdb is 'unknown'. I have been trying to setup the user 'info' in a plaintext passwd-file /etc/dovecot_passdb as a virtual user, ie non system user. I suspect I have not properly setup 'info' as a virtual imap user... if so, how should I do this? Existing system users are in '/etc/passdb' and authenticate without problems. System users have their home directory in /home/system_user1/mail/.imap eg /home/system_user1/mail/.imap/INBOX ...file is /var/spool/mail/systemuser1 /home/system_user1/mail/.imap/Sent ... file is in /home/system_user1/mail/Sent /home/system_user1/mail/.imap/Drafts... file is in /home/system_user1/mail/Drafts whereas the postfix virtual user's (username is 'info') mailbox is configured as... call it /var/spool/mail/virtualusersdomain1/info Postfix's virtual_mailbox_base = /var/spool/mail. The virtual_mailbox_domains, including that of user 'info', are a subdirectory of /var/spool/mail This is the log entry produced when user 'info' attempts to login via squirrelmail: PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=<hidden> dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): lookup: user=info file=/etc/dovecot_passdb dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): unknown user dovecot: Mar 12 00:32:40 Info: auth(default): pam(info,::ffff:127.0.0.1): lookup service=dovecot dovecot: Mar 12 00:32:40 Info: auth(default): new auth connection: pid=569 dovecot: Mar 12 00:32:42 Info: auth(default): pam(info,::ffff:127.0.0.1): pam_authenticate() failed: Authentication failure dovecot: Mar 12 00:32:42 Info: imap-login: Aborted login: user=<info>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured dovecot: Mar 12 00:32:42 Info: auth(default): client out: FAIL 1 user=info So, /etc/dovecot_passdb has ownership root:root, permissions 644 and only the contents: info:{PLAIN}Myplaintextpassword I have tried logging in both as info and also as info@virtualusersdomain1 dovecot -n shows: # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_processes_count: 2 mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: passwd-file args: /etc/dovecot_passdb passdb: driver: pam userdb: driver: passwd-file args: home=/var/spool/mail/%d/%n mail=mbox:~/mail /etc/dovecot_passdb userdb: driver: passwd args: /etc/passwd This is all that was in orginally in /etc/dovecot.conf: protocols = imap imaps pop3 pop3s disable_plaintext_auth = no protocol imap { } protocol pop3 { } protocol lda { } auth default { mechanisms = plain } passdb pam { } userdb passwd { } user = root dict { } Dovecot runs as root. Anyway, any advice would be great! Thanks

1 0

[Dovecot] doveadm password check
by Thomas Pries 12 Mar '13

12 Mar '13

Hi, I want to write some php code that users can change there dovecot password via a roundcube plugin. I'm using php function crypt(...) to generate the hashes and everything works well so far. I'm using doveadm pw to generate testhashes e.g.: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -p abc {BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y I expected an "ok" when using -t the hash when entering abc as a password, but I got: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -t \{BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y Enter password to verify: doveadm(root): Fatal: reverse password verification check failed: Password mismatch What went wrong? Kind Regards Thomas

3 3

[Dovecot] Random questions on backing up Dovecot
by Tabbed Out 11 Mar '13

11 Mar '13

Hi, I've read a few threads about the subject, but I am hoping someone can comment on a few misunderstandings that I might have? It seems like doing a tar of the mail folder location then rsyncing it over to the backup location is the general idea. I plan to have dovecot create 6 virtual users using Maildir, located at /var/mail. A few specifics I am unclear on: 1) Someone here gave a descriptive outline on this here: http://www.dovecot.org/list/dovecot/2011-August/060368.html It's a bit silly, but does anyone have any comments about his suggestion on doing a 'tar cvf' first, then doing a gzip on that archive? Are the benefits really that great? 2) My lack of understanding of control files and index files contribute to this question. If I want to move to a new server and I only tar'd my /var/mail, how does this affect control files? Is it as simple as just copying pasting back into /var/mail on the new server, and then Dovecot will create new UUIDs for the messages? 3) How do I handle the case where the script is currently tarring/gzipping the entire /var/mail, but I receive a new mail during that period? What happens if I use thunderbird to delete a mail during the archiving process?

1 0

[Dovecot] zlib plugin bug?
by Jan Phillip Greimann 11 Mar '13

11 Mar '13

Hi there, got a problem with the zlib plugin, just wanted to test it on a test-mailserver, configured like in the wiki (http://wiki2.dovecot.org/Plugins/Zlib) and restarted the server. I've send an email to a blank maildir++ mailbox, the file is saved as gzip compressed file, but the "Z" flag is missing in the filename. Is that a bug in the plugin, or in dovecot? Greetings, Jan ------------------------------------------------------------- --- additional data: >>> find . ./dovecot-uidlist ./dovecot.mailbox.log ./tmp ./cur ./cur/1362746783.M97516P28534.s16,S=1321,W=1352:2,Sa ./maildirsize ./new ./dovecot.index.cache ./dovecot-keywords ./dovecot-uidvalidity.5139a483 ./subscriptions ./dovecot.index.log ./dovecot-uidvalidity ./dovecot-acl-list >>> file ./cur/1362746783.M97516P28534* ./cur/1362746783.M97516P28534.s16,S=1321,W=1352:2,Sa: gzip compressed data, from Unix >>> dpkg -l |grep dove ii debian-dovecot-auto-keyring 2010.01.30 GnuPG archive keys of the Automatic Dovecot Debian repository ii dovecot-common 2:2.2.0~rc2-0~auto+23 Transitional package for dovecot ii dovecot-core 2:2.2.0~rc2-0~auto+23 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-imapd 2:2.2.0~rc2-0~auto+23 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-lmtpd 2:2.2.0~rc2-0~auto+23 secure LMTP server for Dovecot ii dovecot-managesieved 2:2.2.0~rc2-0~auto+23 secure ManageSieve server for Dovecot ii dovecot-mysql 2:2.2.0~rc2-0~auto+23 MySQL support for Dovecot ii dovecot-pop3d 2:2.2.0~rc2-0~auto+23 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-sieve 2:2.2.0~rc2-0~auto+23 sieve filters support for Dovecot >>> doveconf -n # 2.2.rc2 (52e5d4186006): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 ext3 auth_debug = yes auth_verbose = yes listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir:LAYOUT=fs mail_plugins = quota acl zlib mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_anyone = allow autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autocreate5 = Archives autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent quota = maildir:User quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { idle_kill = 1 hours unix_listener dict { group = vmail mode = 0660 } } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota acl zlib sieve } protocol lda { mail_plugins = quota acl zlib sieve } protocol imap { mail_plugins = quota acl zlib imap_zlib imap_quota imap_acl autocreate }

2 2

[Dovecot] virtual folder - crash while searching
by Matthias Rieber 10 Mar '13

10 Mar '13

Hi, I've upgraded from dovecot 2.0 to 2.1. When I perform a header search in a virtual folder dovecot crashes. Here's the stacktrace: http://pastebin.com/urSDDzku Regards, Matthias

4 11

[Dovecot] When dovecot delivery, nested maildir (<user>/maildir/maildir) is "auto"created
by Nunzio Falcone 08 Mar '13

08 Mar '13

Scenario: Sogo/Mysql+Postfix+Dovecot(only IMAP)+LDAP (Active Directory) To make clean the understand of my issue I've performed those step go to /var/vmail/utente2 and perform in this directory "rm -rf *" After I send email to utente2 via "telenet localhost 25" I return to /var/vmail/utente2 and perform "ls -la" that shows me: maildir |-maildir |-cur |-new |-tmp but the expected results was |-maildir |-cur |-new |-tmp the relevant part of telnet session is: Mar 05 19:53:17 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Mar 05 19:53:17 auth: Debug: auth client connected (pid=3286) Mar 05 19:54:35 auth: Debug: master in: USER 1 utente2/maildir/(a)domain.local service=lda Mar 05 19:54:35 auth: Debug: master out: USER 1 utente2/maildir/(a)domain.local uid=500 gid=500 home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda: Debug: auth input: utente2/maildir/(a)domain.local uid=500 gid=500 home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: Effective uid=500, gid=500, home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: Home dir not found: /var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: maildir++: root=/var/vmail/utente2/maildir//maildir, index=, control=, inbox=/var/vmail/utente2/maildir//maildir Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: none: root=, index=, control=, inbox= Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Info: msgid=<20130305185423.6E56B407B6(a)posta.domain.local>: saved mail to INBOX NB: note the wrong path of inbox inbox=/var/vmail/utente2/maildir//maildir From SOGO when I login the "autocreate" work well: in root folder of "utente2" I can see |-maildir |-cur |-new |-tmp But if I send email from SOGO frontend, same error of "telnetting" *What is wrong in my config?* dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@/ auth_username_format = %Lu first_valid_gid = 500 last_valid_gid = 500 last_valid_uid = 500 log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:/var/vmail/%n/maildir mbox_write_locks = fcntl passdb { driver = pam } postmaster_address = administrator(a)domain.local protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=500 gid=500 home=/var/vmail/%Lu allow_all_users=yes driver = static } valid_chroot_dirs = /var/vmail /etc/postfix/master.cf (relevant) # Dovecot LDA dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} /etc/postfix/ldap-groups.cf server_host = domain.local search_base = CN=users,DC=domain,DC=local bind = yes bind_dn = query(a)domain.local bind_pw = ********** query_filter = (&(objectclass=group) (mail=%s)) leaf_result_attribute = mail special_result_attribute = member version = 3 -- *Nunzio Falcone* nunzio.falcone(a)gmail.com *Cell * +39 320 1167923 *Voip*+39 081 0117933 *Fax * +39 081 0113049

2 5

[Dovecot] Inotify max_user_instances
by Daniel L. Miller 08 Mar '13

08 Mar '13

Maybe I have multiple problems - dunno. I've started seeing the following log lines: Mar 7 07:46:22 bubba dovecot: imap(dmiller(a)amfes.com): Warning: Inotify instance limit for user 5000 (UID vmail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances max_user_instances is currently 128. I've tried stopping and restarting dovecot - the message immediately returns. I could just increase max_user_instances - but I'd like to understand what the number SHOULD be and why simply restarting Dovecot doesn't fix it. If this issue is for user "vmail" this is used by mail services only - and I've only got a few users on my system. I'm also fighting a netfilter issue - my connection tracking counters keep climbing. Don't know if this is in any way related. -- Daniel

2 2

Re: [Dovecot] Changin password in LDAP
by Steffen Kaiser 07 Mar '13

07 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 20 Feb 2013, Arto Saraniva wrote: > We are using now dovecot 2.0.21 with open-ldap, but this situations has > already taken a quite long time. When user changes the password, we have > to reload dovecot every time, otherwise the change is ignored and > dovecot sees only the old password. Any ideas where the problem might > exist? does this help? http://wiki2.dovecot.org/Authentication/Caching?highlight=(auth_cache_ttl) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUSTb2l3r2wJMiz2NAQLp3gf8DM2xCn03yWoVrCjbYNZeflBNRLbD67gE zqvrKUOqkyyDbUl1lgNcJOG39MI2eZpbDXzyWZ8nzzCnPKGOF2mNN76vPGmf6ZrR AQ0EaiJaYRoE14BQykQGvBSnoXgcyW0Ue4Z2RcmIS0iILfGN+VODDKc9PitC99Rc RJb6dQPft3FLM3oWca6BI1OkUuIF9EJcK3M4ROwr84s+OAs/6rkxIDgCCIdh5JZ5 svOkUxVE38zod+Det3yBuoWo5HOXYiE9Qi9jKn8xjQl8a06snXRuw1QktsyLKLjc 64T7KFa5IfXaVzOXCIWiiPiN7T0BVJzJ8G1YbHMzFqYkiPNa4NIO2Q== =NDhf -----END PGP SIGNATURE-----

2 1

[Dovecot] Migrating from CourierMail to Dovecot
by Robert Moskowitz 07 Mar '13

07 Mar '13

My current mail server is a Fedora12 system running postfix/mysql/couriermail/squirrelmail mix. My new server is a Centos6 running postfix/mysql/postfixadmin/dovecot/roundcube mix. I have 4 virtual domains and about 20 users; not a big setup by any measure. Both servers have the same host name, but are currently on separate subnets. My current plan is to stop services on the old server, switch them on subnets, rename the old server, and let 'slow users' drain the old server over a couple of days. Then I got to thinking, could I migrate the /home/vmail/domain/user/new folders from the old to new server? Not too many rsync commands to run to pull it off, but would that work? Is there something dovecot needs to do, and not just drop the files into the .../new folder? Or is there some utility to run to properly place the mail files? The file names are similar. Courier file names look like: 1362661301.Vfd01I2422e6M121970.klovia.htt-consult.com,S=17381 Whereas dovecot adds a ",W=nnn" string to the file name. I am assuming the content is otherwise the same. I would like to test out the migration, and then pull it off over a sunday. Due to meetings and holidays, this won't happen until early April, so I have time to work out the details. All guidance and pointers are greatly appreciated.

1 1

[Dovecot] Ask about IMAP UID
by Shiquan Wang 07 Mar '13

07 Mar '13

Hi all, I am new to dovecot. I am trying to use offlineimap + dovecot + gnus for some emails on multiple machines. I need to use org-mode capture links on emails. I want to know if the same email will have the same IMAP UID on different machines given that they are synced by offlineimap to a local maildir and served by dovecot respectively. Best, Shiquan -- 王时全 Shiquan Wang ************************************************************************************** National Laboratory of Pattern Recognition (NLPR) Institute of Automation, Chinese Academy of Sciences(CASIA) No.95 ZhongGuanCun East Road, HaiDian District, Beijing, China, 100190 Tel: +86-10-62653768 Fax: +86-10-62551993 Email: sqwang(a)nlpr.ia.ac.cn / shiquanwang(a)gmail.com Homepage: http://www.cbsr.ia.ac.cn/users/sqwang/ **************************************************************************************

3 2

[Dovecot] Upgrading 1.2 to 2.x
by Simon Brereton 06 Mar '13

06 Mar '13

Hi I'm about to upgrade to 2.1.7 in my test environment, but "doveconf -n -c dovecot.1.conf > dovecot.2.conf" is producing a blank file, so I am unsure how to proceed. I know a lot has changed between them, so I don't really want to have to start from scratch unless I have to. I have tried both as my user and with sudo. Simon

11 23

[Dovecot] failing ssl authentication
by Ivars Strazdiņš 06 Mar '13

06 Mar '13

Hi, I have a fairly basic dovecot 2.0.19 configuration on Ubuntu 12.04 LTS server with self signed certificates and "ssl = required" option set. It had been working for years flawlessly (including upgrade from 1.x to 2.0.19). Please see full "dovecot -n" output at the end of this post. Until recently, new mail user agents (MUA) are having problems. I cannot pass the account creation step, MUA says that there is some problem. I tried to isolate the problem and did some testing with various combinations of MUA and OS and I am still confused where is the problem - in dovecot, self signed certificates (in operation since 2003, expires this summer), or MUA, or operating system. All tests done with IMAP. For example, Recent Thunderbird versions (>10) do not work at all on most OS'es (tried Windows, Linux, OS X). Actually, v10 does not let me setup an account, but there is a way to get through by clicking on Advanced button. Then the account in Thunderbird is created. After that all works fine and Thunderbird can even be upgraded to the latest version. Windows Live Mail 2012 (former Outlook Express) works on Windows XP and Windows 7, but fails on Windows 8. dovecot.log gets this: 2013-03-06 22:44:38 imap-login: Info: Disconnected (no auth attempts): rip=x.x.x.x, lip=y.y.y.y, TLS handshaking: Disconnected Outlook 2013 does not work in either Windows 7 or Windows 8. Dovecot log for Outlook 2013 looks good, but Outlook complains. 2013-03-06 18:38:22 imap-login: Info: Login: user=<ivarss>, method=PLAIN, rip=x.x.x.x lip=y.y.y.y, mpid=16801, TLS I enabled verbose_ssl = yes in dovecot configuration, and all failing attempts produce this type of log 2013-03-06 22:34:10 imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [x.x.x.x] What does this mean - a problem with certificate on the client side, MUA, that is? How could this be cured then? Thanks for your time and patience! Ivars doveconf -n output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-37-virtual x86_64 Ubuntu 12.04.2 LTS auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes default_process_limit = 300 info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = never mail_location = maildir:~/Maildir:INBOX=~/Maildir:LAYOUT=fs mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/sbin/antispam.sh antispam_mail_sendmail_args = -f;%u(a)edited.domain antispam_mail_spam = --spam antispam_spam = junk antispam_trash = Trash autocreate = junk autocreate2 = Sent autocreate3 = Drafts autocreate4 = Trash autosubscribe = junk autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = Trash fts = squat fts_squat = partial=4 full=10 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = from, subject, flags, uid, box, msgid, size sieve = ~/roundcube.sieve sieve_dir = ~/sieve } postmaster_address = postmaster protocols = " imap sieve pop3" service auth-worker { client_limit = 0 } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = musers mode = 0660 user = root } user = root } service imap { process_limit = 1024 } service pop3 { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/private/server.crt ssl_key = </etc/ssl/private/server.key userdb { driver = passwd } valid_chroot_dirs = /var/mail:/home protocol lda { mail_fsync = optimized mail_plugins = " sieve" } protocol imap { imap_client_workarounds = tb-lsub-flags delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = " autocreate fts fts_squat antispam" } protocol pop3 { mail_plugins = " fts fts_squat" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lmtp { mail_fsync = optimized mail_plugins = " sieve" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date }

2 3

[Dovecot] Broken physical size caching in Dovecot 2.1.10
by Rob Redpath 06 Mar '13

06 Mar '13

Hi, I'm encountering two, probably related, errors in my Dovecot 2.1.10 install. The issue relates to compressed email stored in Maildir format directories. In some cases, a mailbox will become inaccessible, and the following will be logged from a doveadm fetch:- doveadm(info(a)example.com): Error: Corrupted index cache file /var/spool/virtual_mail/info_example.com_d/dovecot.index.cache: Broken physical size for mail UID 2777 doveadm(info(a)example.com): Error: Cached message size smaller than expected (18996 < 64624) doveadm(info(a)example.com): Error: Maildir filename has wrong S value, renamed the file from /var/spool/virtual_mail/info_example.com_d/cur/1277451630.H877760P14612.mailserver.example.com,S=18996:2,Z to /var/spool/virtual_mail/info_example.com_d/cur/1277451630.H877760P14612.mailserver.example.com,S=18996:2,Z Interestingly, the file mentioned in the error ( /var/spool/virtual_mail/info_example.com_d/dovecot.index.cache ) doesn't exist. The uncompressed size of the file is 64624 bytes, the compressed size is 18996. My attempts to debug the issue myself didn't get very far - the function that appears to return the wrong value is in /src/lib-storage/index/maildir/maildir-mail.c in the 2.1.13 source; it's do_fix_size() and appears to not consider whether a file is compressed or not when reporting it's size for S= value purposes. Can anyone help? I'm happy to provide parts of dovecot -n output if required, but I'd rather not post configuration in a public forum if it's not required. -- Rob Redpath Systems Administrator Heart Internet Ltd E: rob.redpath(a)heartinternet.co.uk DDI: 0115 845 6643 www.heartinternet.co.uk<http://www.heartinternet.co.uk> ****************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Heart Internet Ltd accepts no responsibility for information, errors or omissions in this email. ******************************************************************

3 13

[Dovecot] question regarding rw-access on mailbox on creation/login (dovecot 1.2.17)
by Götz Reinicke - IT Koordinator 06 Mar '13

06 Mar '13

Hi, currently I have one new user with a problem. When she logs in to dovecot with pop3 from her apple mail, dovecot tells problems with the +w permission. Error: open(/var/mail/******) failed: Permission denied (euid=3462(******) egid=548(dozenten) missing +w perm: /var/mail) /var/mail is rw by root.mail I cant see why just this particular user has that problem/gets that messages. AFAIK no one changed any default permissions on directories or set different users. What could be "wrong"? Any suggestions is welcome. Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

3 4

[Dovecot] Suggestions for upgrading dovecot 1.0.7 Redhat EL 5.x
by Götz Reinicke - IT Koordinator 06 Mar '13

06 Mar '13

Hi, we still have our solid rock dovecot 1.0.7 Redhat el 5.x up and running. We don't need much magic or special setups. However we'd like to think what might be the next step in upgrading our setup. Each user one mbox mailbox. About 500 imap/pop3 accounts, 400GB data. First of all: to what version is a good step from 1.0? Can we get a rpm from e.g. atrpms repository? Dose anyone has any experiences in doing such a "big" step forward? Or should we think of migrating to a total updated Redhat EL 6.x / Dovecot 2.0.x system? Any suggestions and comments are welcome. Regards . G. Reinicke -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 7

[Dovecot] Corrupted squat uidlist file
by Roger Lynn 06 Mar '13

06 Mar '13

Hi, I frequently get errors similar to this logged: Mar 5 17:49:20 alphonse dovecot: imap(roger): Error: Corrupted squat uidlist file /home/roger/Maildir/.Debian/dovecot.index.search.uids: wrong indexid I am running the Debian package version 1:2.1.7-7 on an up to date Debian Testing system with ext4 filing systems. 'doveadm index -A "*"' is run six nights a week and 'doveadm fts rescan -A' on the seventh night. The output of 'doveconf -n' should be attached. Is this something to be worried about? Am I doing something wrong? Thanks, Roger

1 0

[Dovecot] lmtp problem with wrong index path
by Dimos Alevizos 05 Mar '13

05 Mar '13

Hello, we've been using dovecot for pop3 and imap for some time now and we're in the middle of deploying lmtp as well, however we're run into a problem we can't solve. Specifically for some reason it seems that dovecot tries to write to the wrong index file during some, but not all, lmtp deliveries. If lmtp tries to deliver to person user_a@domain, sometimes it'll try to write to index directory user_b@domain using user_a euid. We haven't found and pattern in the problem. A user may receive multiple mails with only 1 in 20 or more deliveries having problems. The only things that we know is that user_b (the wrong one) is always from the same domain as the correct user and always (so far) also a recipient in the same mail. Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=10054601(<unknown>) egid=165(<unknown>) missing +x perm: /indexes/2/b/0/diefecon.log(a)ika.gr, dir owned by 10107819:165 mode=0700) Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: nfs_flush_chown_uid: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX) failed: Permission denied Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX/dovecot.index) failed: Permission denied (euid=10054601(<unknown>) egid=165(<unknown>) missing +x perm: /indexes/2/b/0/diefecon.log(a)ika.gr, dir owned by 10107819:165 mode=0700) Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) T8WxCGwHK1HDUQAAB7uMaw: msgid=<542C6CCE00F7433B9F5E0860C32F87FE@sofia>: save failed to INBOX: Timeout while waiting for lock As you can see below it seems that failure to write to the index doesn't stop the mail being delivered. Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) Error: stat(/var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=10096573(<unknown>) egid=165(<unknown>) missing +x perm: /var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr, dir owned by 10096925:165 mode=0700) Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) Error: stat(/var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr/.imap/INBOX/dovecot.index) failed: Permission denied (euid=10096573(<unknown>) egid=165(<unknown>) missing +x perm: /var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr, dir owned by 10096925:165 mode=0700) Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) ua0ANmIeK1HDSgAADehEhg: sieve: msgid=<E299E69CBA0EFA4C9870A944ACBC4DCC03AA9C3F(a)SYZ3MAIL01.exchange.n3.syzefxis.gov.gr>: stored mail into mailbox 'INBOX' Our current setup is 3 directors (dovecot 2.1.12) proxying pop3/imap and lmtp to a farm of 8 dovecot servers (all of them 2.1.15). All of our mailboxes are stored in NFS. A seperate farm of postfix MX servers will be responsible to send mails via lmtp to our directors. Currently we're keeping dovecot indexes locally but we're beginning to move them to NFS as well (we've changed 2 of the 8 servers and hopefully today the 6 remaining) Our configuration is : # 2.1.15: /opt/dovecot-2.1.15/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.22.el5 x86_64 CentOS release 5.9 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 5 M auth_cache_ttl = 10 mins auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 disable_plaintext_auth = no first_valid_uid = 20 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = OTENET ready login_trusted_networks = 83.235.66.0/24 mail_access_groups = mail otemail disk root mail_fsync = always mail_location = mbox:INDEX=/var/index/dovecot/%1Mu/%2.1Mu/%3.1Mu/%u mail_nfs_index = yes mail_nfs_storage = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mbox_lock_timeout = 3 secs mbox_read_locks = dotlock fcntl mmap_disable = yes passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dirsize:User quota quota_warning = storage=95%% quota-warning 95 %u sieve = ~/.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } postmaster_address = postmaster(a)otenet.gr quota_full_tempfail = yes service auth-worker { user = dovenull } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /opt/dovecot/etc/dovecot/quota-warning.sh user = dovecot } ssl = no userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve quota" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv } [root@pop02 ~]# egrep -v "^#|^$" /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext hosts = 62.103.147.203 dn = "cn=*****,ou=people,dc=otenet,dc=gr" dnpass = ***** base = ou=people,dc=otenet,dc=gr scope = onelevel user_attrs = folderPath=home,mailQuota=quota_rule=*:storage=%$M,uidNumber=uid,gidNumber=gid,mailPath=mail=mbox:~/:INBOX=%$:INDEX=/indexes/%1Mu/%2.1Mu/%3.1Mu/%u user_filter = (&(|(objectClass=otenetMailAccount)(objectClass=otenetservices))(|(uid=%u)(mail=%u)(mailAlternateAddress=%u))) pass_attrs = mail=user,userpassword=password pass_filter = (&(|(objectClass=otenetMailAccount)(objectClass=otenetservices))(|(uid=%u)(mail=%u)(mailAlternateAddress=%u))) default_pass_scheme = CRYPT Dimos Alevizos

4 7

[Dovecot] Migration from v1 to v2 with hashed directory structure
by Pavel Dimow 05 Mar '13

05 Mar '13

Hi, I want to upgrade to version 2 but I would like to solve a long standing problem with 'flat' directory structure ie we have /var/spool/vmail/mydomain.com/user(a)mydomain.com and I want a new server with version 2 to have hashed directory structure like /var/spool/vmail/mydomain.com/u/s/user I was wondering it f there is some better solution then dir hashing or a way to hash a dir other then first two letters. Also any suggestion how to perform this migration from old to new server with hashing on the fly? Thanks in advance.

4 5

[Dovecot] postfix+dovecot+samba4+openldap: dovecot lda:Error: user sammy: Initialization failed: mail_location not set and autodetection failed
by Sammy Mercieca 05 Mar '13

05 Mar '13

I'm trying to setup a samba4 with openchange which uses postfix+dovecot+openldap on a ubuntu 12.04.2 system. I can send outgoing emails but incoming emails fail. I looked up the logs and I get: Mar 5 11:03:48 testerA dovecot: lda(sammy): Error: user sammy: Initialization failed: mail_location not set and autodetection failed: Mail storage autodetection failed with home=/var/mail Mar 5 11:03:48 testerA dovecot: lda(sammy): Fatal: Invalid user settings. Refer to server log for more information. any idea what I am doing wrong? Any hints, pointers would be much appreciated. now the user is a virtual user. The /var/mail/sammy exists: drwxr-sr-x 10 vmail vmail 4096 Mar 4 13:48 sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:12 Sammy -> sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:12 sammy(a)abertax.com -> sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:13 Sammy(a)abertax.com -> sammy lrwxrwxrwx 1 vmail vmail 5 Mar 1 15:05 sammy(a)abx.abertax.com -> sammy The dovecot configuration is: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-38-generic x86_64 Ubuntu 12.04.2 LTS ext4 disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.message log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/var/mail/%u mail_privileged_group = mail passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { driver = pam } protocols = imap service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { user = vmail } user = root } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { driver = passwd } protocol lda { hostname = abx.abertax.com info_log_path = /var/log/dovecot.info.log log_path = /var/log/dovecot.message postmaster_address = postmaster@mydomain } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } and dovevot-ldap.conf: uris = ldap://localhost:3389 dn = cn=admin,dc=mydomain dnpass = openchange tls = no ldap_version = 3 base = dc=mydomain scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (uid=%u) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%u) Thanks Sammy

1 0

Re: [Dovecot] [Users] I need help with my mail client [Was: running cron on UTC]
by Steve Litt 04 Mar '13

04 Mar '13

On Fri, 1 Mar 2013 07:02:54 -0500 Jerry <jerry(a)seibercom.net> wrote: > On Fri, 1 Mar 2013 00:34:33 -0800 > Ian Zimmerman articulated: > > > On Fri, 1 Mar 2013 02:57:10 -0500 > > Steve Litt <slitt(a)troubleshooters.com> wrote: > > > > Steve> Can anyone tell me how to start narrowing down the cause of > > Steve> this behavior? > > > > You could begin by telling the (ocluc) list admins to _stop munging_ > > the damn Reply-To headers. That is broken behavior, as nicely > > explained here (among many other places): > > > > http://www.unicom.com/pw/reply-to-harmful.html > > Interestingly enough, there is also an opposite opinion on the matter: > <http://marc.merlins.org/netrants/reply-to-useful.html> > > Personally, I believe ALL list replies should go directly to the list > and not to an individual unless the individual has specifically > requested such action. However, I am aware that there are those who > disagree with that philosophy. Thanks Ian and Jerry, It's doubtful that the OCLUG's defaulting replies to "list" (characterized by some as "munging") is the root cause here, because probably 90% of the mailing lists I'm on default replies to the list, and this symptom happens only with OCLUG's list. Whatever it is, it doesn't happen when I use Thunderbird instead of Claws. Of course it also doesn't happen on Claws on all the rest of the mailing lists I participate in. The fact that replying from Thunderbird eliminates the symptom, even if I later look at my IMAP using Claws, says to me that the root cause isn't in my Dovecot IMAP server. Paul from the Claws list pointed out that OCLUG emails' List-Post (oclug(a)mailman.oclug.org) and Reply-To (oclug(a)penguin.oclug.org) don't match. So far, that's the only thing about OCLUG I've found that's remotely different from everyone else. I have no idea whether this mismatch was intended, or whether it came about through an accident of history. I also don't know how hard it would be to get them to match. Steffen from the Claws list asked whether I configured Claws-Mail to add List-Post to the recipient list, and whether I've configured any reply action, that adds another recipient to the message. The answer to the second question is "no", my OCLUG folder has no properties or processing, my .procmailrc has no filters that change mail from OCLUG. As far as Steffen's second question, I don't know where in Claws' config options this would be configured, but the following command indicates to me that it's unlikely: slitt@mydesk:~/.claws-mail$ grep -irl "list-post" * | grep -v imapcache tmp/tmpfile.00000055 slitt@mydesk:~/.claws-mail$ Another point of information is that this symptom occurs whether I "reply to list" or just "reply". Since I'm happy with both Claws-Mail and OCLUG, I'll "solve" the problem by trying to remember to delete the CC automatically inserted by each Claws reply to OCLUG mail. I might also look into installing OCLUG folder specific processing or properties, or maybe even setting a procmail filter to change the headers on mail from OCLUG. It would basically be a short filter invoking an awk command. However it gets solved, I'll let you all know about it. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] panic in dovecot when using fts with solr
by Andre Rodier 04 Mar '13

04 Mar '13

Hello All, I have a panic error in dovecot when I try to use the fts search with Solr. The version of dovecot I use is version 2.1 I have used a telnet session to search, but I don't know if this make a difference: telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 login andre-rodier XXXXXXXXXX 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE SEARCH=FUZZY QUOTA ACL RIGHTS=texk] Logged in 2 select Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback \*)] Flags permitted. * 2158 EXISTS * 0 RECENT * OK [UIDVALIDITY 1354776694] UIDs valid * OK [UIDNEXT 2568] Predicted next UID * OK [HIGHESTMODSEQ 9739] Highest 2 OK [READ-WRITE] Select completed. 3 search text Valentine * OK Searched 47% of the mailbox, ETA 0:10 * OK Searched 79% of the mailbox, ETA 0:05 * SEARCH 1120 1238 1279 1975 1990 1991 1992 1998 1999 2000 2001 2002 2058 2106 2107 2110 2151 3 OK Search completed (32.210 secs). ---------------------------------------------------------------------- Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f5f4237214a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f5f4237218e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5f4234982a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f5f402d48d9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4ac7) [0x7f5f402d1ac7] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0x339) [0x7f5f408f1f19] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc6e0) [0x7f5f408f66e0] -> dovecot/indexer-worker(+0x28d4) [0x7f5f42ae88d4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f5f4237f016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f5f4237fcc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f5f4237ea28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5f4236b483] -> dovecot/indexer-worker(main+0xfe) [0x7f5f42ae834e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5f41fc2ead] -> dovecot/indexer-worker(+0x23f5) [0x7f5f42ae83f5] Mar 2 22:48:02 lapetus dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for andre rodier(a)indiefield.co.uk Mar 2 22:48:02 lapetus dovecot: imap(andre rodier(a)indiefield.co.uk) Error: indexer failed to index mailbox INBOX Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Fatal: master: service(indexer-worker): child 19644 killed with signal 6 (core dumps disabled) ---------------------------------------------------------------------- Regards, Andre

2 3

[Dovecot] dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections)
by David Brown 04 Mar '13

04 Mar '13

Hi, has anyone seen this issue before as I have not. I'm a long time dovecot user and I don't see anything in the config that should cause this. The mail.log gets hit a lot of times with this same log message: dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections) I have noted that it is more evident when I try to mass delete many messages. Any ideas of how to diagnose this issue? The dovecot -n follows: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.1-rscloud x86_64 Ubuntu 10.04.4 LTS log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_processes_count: 5 login_max_processes_count: 256 mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock auth default: realms: davidwbrown.name default_realm: dobbeltganger.com username_format: %n verbose: yes debug: yes debug_passwords: yes passdb: driver: shadow userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

2 1

[Dovecot] tcpwrap: Fatal: master: service(tcpwrap): child $PID killed with signal 11
by Pascal Volk 04 Mar '13

04 Mar '13

Hi Timo, today I've started Dovecot v2.2.rc2 (976bf9e69367) for the first time. /var/log/mail.log: Mar 3 14:28:33 mail dovecot: master: Dovecot v2.2.rc2 (976bf9e69367) starting up Mar 3 14:28:38 mail dovecot: master: Error: service(tcpwrap): command startup failed, throttling for 2 secs Mar 3 14:28:38 mail dovecot: tcpwrap: Fatal: master: service(tcpwrap): child $PID killed with signal 11 (core dumped) Mar 3 14:28:38 mail dovecot: imap-login: Error: read(tcpwrap) failed: Connection reset by peer Mar 3 14:28:38 mail dovecot: imap-login: access(tcpwrap): Client refused (rip=$RIP) Mar 3 14:28:38 mail dovecot: auth: pgsql(/var/run/postgresql): Connected to database mailsys Regards, Pascal -- The trapper recommends today: f007ba11.1306214(a)localdomain.org

2 1

[Dovecot] dsync-remote(): Error: doveadm client: No command given
by Aleksey Tsvetkov 04 Mar '13

04 Mar '13

Hi! I test dsync through tcp. In a log error: dsync-remote (): Error: doveadm client: No command given All are synchronized. The error is shown by rand for the user and on that server where it is synchronized # 2.2.rc2 (976bf9e69367): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 ext3 auth_mechanisms = plain login digest-md5 auth_username_format = %Ln@%Ld disable_plaintext_auth = no doveadm_port = 24000 hostname = optnet.local listen = * mail_gid = vmail mail_home = /var/mail/virtual/%d/%n mail_location = maildir:/var/mail/virtual/%d/%n mail_plugins = notify replication mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/auth/users driver = passwd-file } plugin { mail_replica = tcp:192.168.0.190 } service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth-worker { unix_listener auth-worker { group = vmail mode = 0666 user = vmail } } service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = vmail } service doveadm { inet_listener { port = 24000 } } service imap-login { inet_listener imap { port = 143 } } service lmtp { inet_listener lmtp { port = 24 } user = vmail } service pop3-login { inet_listener pop3 { port = 110 } } service replicator { process_min_avail = 1 } ssl = no ssl_cert = </usr/local/etc/dovecot/ssl/dovecot.pem ssl_key = </usr/local/etc/dovecot/ssl/dovecot.key userdb { args = /usr/local/etc/dovecot/auth/users driver = passwd-file } protocol lda { mail_plugins = notify replication } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags } protocol lmtp { mail_plugins = notify replication } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } local 192.168.0.0/24/24 { doveadm_password = password } Logs: Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Connect from 192.168.0.192 Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Loading modules from directory: /usr/local/lib/dovecot Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Module loaded: /usr/local/lib/dovecot/lib20_replication_plugin.so Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) SAKxFU+ZNFHGcgAAaoqQ0w: msgid=<E1UCUqK-00013S-OA(a)jb.optnet.ru>: saved mail to INBOX Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Disconnect from 192.168.0.192: Connection closed (in reset) Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: auth input: user=anna(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/anna: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: auth input: user=alex(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: auth input: alex(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/alex Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/alex Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/alex, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/alex, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(alex(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/alex: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: auth input: user=mike(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: auth input: mike(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/mike Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/mike Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/mike, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/mike, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(mike(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/mike: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Connect from 192.168.0.192 Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(alex(a)optnet.local): Error: doveadm client: No command given Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) TAKxFU+ZNFHGcgAAaoqQ0w: msgid=<E1UCUqK-00013h-VD(a)jb.optnet.ru>: saved mail to INBOX Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Disconnect from 192.168.0.192: Connection closed (in reset) -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

2 1

[Dovecot] thunderbird Problem on win 7 fixed
by Robert Schetterer 04 Mar '13

04 Mar '13

Hi just for Info, today i got a support call for 2 imap accounts with windows 7 64 with thunderbird 17.03 not syncing new mails in INBOX ( no problem other folders ) reproducable on serveral computers , with new installs of thunderbird no antivirus etc was involved The accounts worked perfect with thunderbird same version in linux and in horde webmail, no bug in server or tb log was shown no thunderbird recover etc procedure helped i final ended up in deleting dovecot.index dovecot.index.cache dovecot.index.log dovecot.index.log.2 dovecot-uidlist this fixed the problem no idea why it only came up on windows Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

1 0

[Dovecot] dovecot proxying with imapc
by suja 04 Mar '13

04 Mar '13

Dear sir, I have to set up a mail gateway which will be explored to Internet and a secure mail server in the Intranet. I need a smart imap proxy in the mail gateway which will fetch the mail from server and present to user through either a stand alone mail client or a web mail client. All authentication is through ldap server. I followed the instructions given in http://wiki2.dovecot.org/HowTo/ImapcProxy But while logging in I am getting a error: dovecot: imap(user1): Error: user user1:Initialization failed: Initializing mail storage from mail_location setting failed: Unknown mail storage driver imapc dovecot: imap(user1): Error: Invalid user settings. Refer to server log for more information. I couldn't figure out what is wrong. Please help me to sort it out. Thanks & Regards, Suja PV LEOS ---------------------------------------------------------------- This mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. LEOS has taken every reasonable precaution to remove any viruses however you should also carry out your own virus checks before opening the e-mail or attachment.

2 1

[Dovecot] panic in dovecot when using fts with solr
by Andre Rodier 03 Mar '13

03 Mar '13

Hello All, I have a panic error in dovecot when I try to use the fts search with Solr. The version of dovecot I use is version 2.1 I have used a telnet session to search, but I don't know if this make a difference: telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 login andre-rodier XXXXXXXXXX 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE SEARCH=FUZZY QUOTA ACL RIGHTS=texk] Logged in 2 select Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback \*)] Flags permitted. * 2158 EXISTS * 0 RECENT * OK [UIDVALIDITY 1354776694] UIDs valid * OK [UIDNEXT 2568] Predicted next UID * OK [HIGHESTMODSEQ 9739] Highest 2 OK [READ-WRITE] Select completed. 3 search text Valentine * OK Searched 47% of the mailbox, ETA 0:10 * OK Searched 79% of the mailbox, ETA 0:05 * SEARCH 1120 1238 1279 1975 1990 1991 1992 1998 1999 2000 2001 2002 2058 2106 2107 2110 2151 3 OK Search completed (32.210 secs). ---------------------------------------------------------------------- Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f5f4237214a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f5f4237218e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5f4234982a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f5f402d48d9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4ac7) [0x7f5f402d1ac7] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0x339) [0x7f5f408f1f19] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc6e0) [0x7f5f408f66e0] -> dovecot/indexer-worker(+0x28d4) [0x7f5f42ae88d4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f5f4237f016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f5f4237fcc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f5f4237ea28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5f4236b483] -> dovecot/indexer-worker(main+0xfe) [0x7f5f42ae834e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5f41fc2ead] -> dovecot/indexer-worker(+0x23f5) [0x7f5f42ae83f5] Mar 2 22:48:02 lapetus dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for andre rodier(a)indiefield.co.uk Mar 2 22:48:02 lapetus dovecot: imap(andre rodier(a)indiefield.co.uk) Error: indexer failed to index mailbox INBOX Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Fatal: master: service(indexer-worker): child 19644 killed with signal 6 (core dumps disabled) ---------------------------------------------------------------------- Regards, Andre

1 0

[Dovecot] Error delivery
by Fabian von Romberg 02 Mar '13

02 Mar '13

Hi all, Im getting the following error when an email is to be delivered. Below error message: relay=dovecot, delay=4912, delays=4911/0.03/0/0.69, dsn=4.3.0, status=deferred (Command died with signal 11: "/usr/local/dovecot/libexec/dovecot/deliver") Can anyone please address me where the problem might be? Thanks in advance and regards, Fabian

4 8

[Dovecot] [OT] NJABL
by Noel Butler 02 Mar '13

02 Mar '13

If you are using this DNSBL in your MTA, best remove it, it's no more.

1 0

[Dovecot] v2.2.rc2 released
by Timo Sirainen 02 Mar '13

02 Mar '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc2.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc2.tar.gz.sig Looks like the last changes I did today just before rc1 release made it just about unusable. This one is actually running on my servers. :)

5 8

[Dovecot] how to talk with doveadmin unix socket
by Piotr Rotter 02 Mar '13

02 Mar '13

Hello, I would like to get mailbox quota by doveadm unix socket (/var/run/dovecor/doveadm-server). I get from strace syntax of comunication: write(9, "VERSION\t1\t0\nUSER\t1\tpiotr.rotter(a)active24.pl\tservice=doveadm\n", 60) = 60 read(9, "VERSION\t1\t1\nSPID\t20805\n", 8192) = 23 read(9, "USER\t1\tpiotr.rotter@active24.pl\temail=piotr.rotter@active24.pl\tclear=7T33z456\thome=/vm/08/A/active24.pl/piotr.rotter/\tuid=502\tgid=502\tquota_rule=*:storage=2097152000B\tquota_rule2=*:messages=50000\n", 8169) = 196 and I wrote super simple client in php: <?php $sock = stream_socket_client('unix:///var/run/dovecot/doveadm-server', $errno, $errstr); fwrite($sock, "VERSION\t1\t0\nUSER\t1\tpiotr.rotter(a)active24.pl\tservice=doveadm\n"); echo fread($sock, 4096)."\n"; echo fread($sock, 4096)."\n"; fclose($sock); ?> But i get only "+" sign and line in errorlog as below: 2013-02-28T00:39:56.377437+01:00 kurier9 dovecot: doveadm: Error: doveadm client not compatible with this server (mixed old and new binaries?) I would be very grateful for your help with this problem, what I doing wrong. My current dovecot version is 2.1.13

4 7

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 01 Mar '13

01 Mar '13

>> >> But I tried to create a fresh account in Dovecot (not migrated from >> Courier), and it >> still shows a intermixed folder order: >> >> a list "" * >> * LIST (\HasNoChildren) "/" "Spam" >> * LIST (\HasNoChildren) "/" "Sent" >> * LIST (\HasNoChildren) "/" "Drafts" >> * LIST (\HasNoChildren) "/" "Trash" >> * LIST (\HasNoChildren) "/" "INBOX" >> * LIST (\HasNoChildren) "/" "Pub" >> a OK List completed. > >Why does this matter? IMAP does NOT enforce any sort of required >sorting order, and no IMAP client can assume a sort order. So >enforcing a sort order on the server is just a waste of resources. > Just a cosmetic problem, of course. Some IMAP clients do sort folders, others do not, so they show different folder sort order in Dovecot, if migrated from Courier (Courier seems to sort folders, so that the system ones appear first). We just needed a seamless migration. >FWIW, this is completely legal IMAP output also (albeit inefficient): > >a list "" * >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Sent" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Drafts" >* LIST (\HasNoChildren) "/" "Trash" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "INBOX" >* LIST (\HasNoChildren) "/" "Pub" >a OK List completed. > So, it is legal to even list each folder several times? >michael WBR, valerius

3 2

[Dovecot] No NTLM with PAM after upgrade
by Phil Quesinberry 01 Mar '13

01 Mar '13

After updating From Dovecot 1.07 (included with CentOS 5) to 2.11, NTLM authentication will not work. Attempts to authenticate against Samba version 4.0.4-GIT-20cb7de also fail with 'auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL', despite the fact that the same user can sign on to the Samba domain and access files. What I'm really trying to understand here though is why version 1.07 would do NTLM with PAM just fine, but later versions I've tried will not. After failing to get later versions to work, I decided to see if I could at least get them to do NTLM by authenticating against a Samba domain but that won't work either. 1.07 did NTLM just fine authenticating against a system user account with PAM, as demonstrated by the following excerpt from the log: dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out Authentication settings for 1.07 were as follows (excerpt from -n output, see below for full output): auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd Since 1.07 was such an old version, I first tried updating to 1.2.17 and lost the ability to do NTLM authentication with the same settings: Feb 06 16:09:32 dovecot: Info: Dovecot v1.2.17 starting up (core dumps disabled) Feb 06 16:09:46 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:09:53 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:10:05 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Feb 06 16:11:54 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:04 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:16 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Next I decided to try 2.x and since I had installed 1.2.17 from source, I thought it would be wise to install from an RPM which had been "blessed" for CentOS 5, so 2.1.1 was installed from the RPMs linked to on the Dovecot download site: http://dl.atrpms.net/all/dovecot-2.1.1-2_132.el5.x86_64.rpm Still no NTLM authentication with 2.x using PAM, so I decided to try authenticating against the Samba 4 domain using Samba's winbind daemon and ntlm_auth helper. That still doesn't work however, as seen by the following log excerpt but plaintext login which is also enabled, works: Feb 28 23:29:13 auth: Debug: auth client connected (pid=18518) Feb 28 23:29:13 auth: Debug: client in: AUTH 1 NTLM service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 Feb 28 23:29:15 auth: Debug: client out: FAIL 1 Feb 28 23:29:15 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4530 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:17 auth: Debug: client out: CONT 1 Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVxxxxxxxAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== Feb 28 23:29:17 auth: Error: could not obtain winbind netbios name! Feb 28 23:29:17 auth: Error: could not obtain winbind domain name! Feb 28 23:29:17 auth: Debug: client out: CONT 1 TlRMTVNTUAACAAAAGAAYADgAAAAFxxxxxxxxxSsAAAAAAAAAAIoAigBQAAAABgEAAAAAAA9IAEUA UgBTAEMASABMxxxxxxxxxxUATgACABgASABFAFIAUwBDAEgATABBAFUAUgBFAE4AAQAOAFMARQBS AFYARQBSADEABAAgAGgAZQByAHMAYwBoAGwAYQB1AHIAZQBuAC4AYwBvAG0AAwAwAFMAZQByAHYA ZQByADEALgBoAGUAcgBzAGMAaABsAGEAdQByAGUAbgAuAGMAbwBtAAAAAAA= Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVNTUAADAAAAGAAYAGoAAAC6ALoAggAAAAAAAABIAAAAEAAQAEgAAAASABIAWAAAAAAAAAAx xxxxxxxKIogUBKAoAAAAPcABxAHUAZQBzAGkAbgBiAFEAUwBFAC0AVwxxxxxxxx+cYeYzU98pxsa 17QyN6VD8kE2RibAjNedd/ooN2y4/uSr/ZQYxxxxxxxxxU1Fs4BjelQ/JBNkYkAAAAAAgAYAEgAR QBSAFMAQwBIAEwAQQBVAFIARQBOAAEADgBTAEUAUgBWAEUAUgAxAAQAIABoAGUAcgBzAGMAaABsA GEAdQBxxxxxxxxxxbwBtAAMAMABTAGUAcgB2AGUAcgAxAC4AaABlAHIAcwBjAGxxxxxxxxxxxxlA G4ALgBjAG8AbQAAAAAAAAAAAA== Feb 28 23:29:17 auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL Feb 28 23:29:19 auth: Debug: cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth-worker(18524): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 23:29:19 auth: Debug: client out: FAIL 1 Feb 28 23:29:19 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): lookup service=dovecot Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): #1/1 style=1 msg=Password: Feb 28 23:29:19 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:19 auth: Debug: master in: REQUEST 751435777 18513 2 db445872b80e33772b5f0d35d50af3d1 Feb 28 23:29:19 auth: Debug: userdb-cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth: Debug: passwd(pquesinb,192.168.2.100): lookup Feb 28 23:29:19 auth: Debug: master out: USER 751435777 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:19 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18526 Feb 28 23:29:27 auth: Debug: cache(pquesinb,192.168.2.100): hit: {SHA1}+2ZUmdHOxxxxxxxxxxxxOLinOC0= user=pquesinb user=pquesinb Feb 28 23:29:27 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:27 auth: Debug: master in: REQUEST 3169320961 18518 2 6bd7b4fd283994029394360a2f5b4048 Feb 28 23:29:27 auth: Debug: userdb-cache(pquesinb,192.168.2.100): hit: pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 auth: Debug: master out: USER 3169320961 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18531 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=861 out=31433 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=120 out=739 Here is the -n output for both 2.11 and 1.07, login/mail executables and plugins are present within the configured paths for both versions: Config output for 2.11: [root@Server1 log]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.1.1.el5.centos.plusxen x86_64 CentOS release 5.9 (Final) auth_cache_size = 16 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = ntlm plain auth_use_winbind = yes auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/Maildir maildir_very_dirty_syncs = yes passdb { args = cache_key=%u dovecot driver = pam } passdb { driver = shadow } protocols = imap pop3 service auth { executable = /usr/libexec/dovecot/auth user = root } service imap-login { client_limit = 256 executable = /usr/libexec/dovecot/imap-login process_limit = 128 user = dovecot vsz_limit = 64 M } service imap { executable = /usr/libexec/dovecot/imap process_limit = 64 } service pop3-login { client_limit = 256 process_limit = 128 user = dovecot vsz_limit = 64 M } service pop3 { process_limit = 64 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = mail_plugin_dir = /usr/local/lib/dovecot/imap } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugin_dir = /usr/local/lib/dovecot/lda } Here is the config output from the 1.07 version, which worked: [root@Server1 init.d]# dovecot107 -n # 1.0.7: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd I'm fairly new to Dovecot, so if someone out there could at least point me in the right direction in order to help me better understand why things aren't working with the newer versions I would really appreciate it. Many thanks, Phil Quesinberry Q Systems Engineering, Inc. Embedded Systems Hardware/Software Development and VoIP Business Telephone Hosting Improve your business telephone services and save money (410) 969-8002 http://www.qsystemsengineering.com

1 0

[Dovecot] Maildir Control files and quota
by Tabbed Out 01 Mar '13

01 Mar '13

Hello all, the dovecot wiki recommended that the index and control files for maildir be placed on a partition which does not have a quota. I have a VPS which gives me 20 gigs of space. Since space is tight, is there some way to calculate how much space the partition needs for the control and index files? Would 1 gig be sufficient in the long run?

2 1

[Dovecot] postfix, dovecot, samba, winbind
by Denis Witt 01 Mar '13

01 Mar '13

Hello List, we're currently working on the migration of our LDAP/Samba3-Domain to Samba4-Active-Directory. So far everything works fine. Postfix can deliver Mails using ProxyAddresses-Information from the AD and Dovecot delivers the mail. Unfortunately when Postfix tells Dovecot to deliver the mail he submit the username without the AD-Domain part: Feb 28 17:17:59 tpdc postfix/pickup[30396]: 5DDAE2C0C2B: uid=0 from=<root> Feb 28 17:17:59 tpdc postfix/cleanup[30402]: 5DDAE2C0C2B: message-id=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de> Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: from=<root(a)concepts-and-training.de>, size=463, nrcpt=1 (queue active) Feb 28 17:17:59 tpdc dovecot: lda(dwitt): msgid=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de>: saved mail to INBOX Feb 28 17:17:59 tpdc postfix/local[30404]: 5DDAE2C0C2B: to=<dwitt(a)concepts-and-training.de>, orig_to=<denis.witt(a)cat06.de>, relay=local, delay=0.24, delays=0.1/0.01/0/0.13, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver) Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: removed So Dovecot saves the Mail to "/var/mail/dwitt/", which is fine for me. The Problem kicks in when I try to read my Mail. Dovecot uses "TESTDOM\dwitt" as username and so he didn't find the Mailbox and create a new one in "/var/mail/TESTDOM\dwitt". I tried to fix it with auth_username_translation and auth_username_format but it doesn't work. Any ideas? Thanks!

2 2

[Dovecot] help needed with dovecot authentication
by peter lawrie 01 Mar '13

01 Mar '13

Hi I have been asked to configure an dedicated rhel6 server for a customer. I did not realise when I took this on how complicated it was going to be! The purpose of the server is to host a group of websites for small businesses. It came with postfix-2.6.6-2.2 dovecot-2.0.9 and mysql-2.1.67-1 I have installed virtualmin 3.98, usermin1.540-1 and horde 5 About a dozen currently inactive websites have been set up, mail is in /home/<domain>/Maildir My problem is that I can telnet to postfix to send and receive emails and can see these within postfix in webmin I have been having many problems getting dovecot to connect successfully to postfix. I have also installed horde 5 which requires to authenticate to an imap server - that is dovecot. This one server is intended to provide all services, so plain authentication is fine. But I can't use /etc/passwd as the users are in virtualmin I tried configuring ssl, with self-certification so the browser interface is https: At the moment I've restored dovecot.conf and conf.d/10-master.conf, 10-auth.conf and 10-mail.conf to their original settings. So an attempt to login through usermin gives me this Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 19:44:19 scotz1 dovecot: auth: Fatal: sql: Configuration file path not given Feb 28 19:44:19 scotz1 dovecot: master: Error: service(auth): command startup failed, throttling Previous to restoring the conf files I was getting this from horde Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: auth client connected (pid=25627) Feb 28 17:55:02 scotz1 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=439 54#011resp=dGVzdHNjb3R6LmNvLnVrAHRlc3RzY290ei5jby51awBwYXNzd29yZA== Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: passwd(testscotz.co.uk,127.0.0.1): lookup Feb 28 17:55:02 scotz1 dovecot: auth: passwd(testscotz.co.uk,127.0.0.1): unknown user Horde is using mysql for its database, but I don't particularly care what dovecot uses, although it seems sensible to do the same I have created and removed several mysql databases during my attempts to get this to work. I would greatly appreciate some assistance with this as every 'howto' I have found by googling describes different setups and just gets me deeper in the mire! I want an authentication mechanism on this one server that virtualmin users and horde users (same people!) can use for imap mail. I thought I knew what I was doing before I took this one on (I have configured and manage a dozen centos servers), but this one is making my head spin. Yours in hope! Peter Lawrie

6 7

[Dovecot] Disallow Deletion from Trash Folder
by Bradley Rintoul 01 Mar '13

01 Mar '13

Hello: I've been tasked with trying to find a way to keep users from ever "permanently" deleting emails. The users are running Thunderbird and are using the "Archive" option for when emails are deleted. However, they are still able to delete emails from the Archive folders... I'm wondering if there's any way that I can configure Dovecot to make sure that emails *never* get removed from the filesystem. I know it's probably kind of a bizarre request, but is there any way that Dovecot can help me out in this regard? Thanks! B. Rintoul

5 4

[Dovecot] sending of password did not succeed
by Peter Sparkes 01 Mar '13

01 Mar '13

Hi Today I have upgraded my Debian server from lenny to squeeze and my email stopped working. I am using Dovecot 1.2.15 with exim4. Exim4 is working and mail is being delivered to the mailboxes - /home/ didm.co.uk/peter/Maildir/new etc When I try to download emails to my I get "sending of password did not succeed, Mail server mail.didm.co.ukresponded:Authentication failed" and the server Dovecot error log "utime(/home/didm.co.uk/peter/Maildir/tmp) failed: Permission denied" etc Help please Peter

3 2

[Dovecot] I need help with my mail client: was [OCLUG] running cron on UTC
by Steve Litt 01 Mar '13

01 Mar '13

On Thu, 28 Feb 2013 19:29:20 -0800 Kevin Cernekee <cernekee(a)gmail.com> wrote: > On Thu, Feb 28, 2013 at 5:54 PM, Nathan Haines <nhaines(a)ubuntu.com> I'm sorry to hijack a thread to do this, but I actually had to reply to someone in order to show you the symptom. Before describing the symptom, let me give you the situation... I'm running Claws-Mail 3.8.1 on Xubuntu 12.10. On the way out I just do normal port 465 SSL to my web host's SMTP server. On the way back, fetchmail grabs my messages from my ISP using IMAP (and erasing them on on the ISP's server after retrieval), then delivers them to procmail, which, based on filters, drops them into the correct directories of the Dovecot server running on my desktop. Claws-mail then views all my email on the IMAP server. slitt@mydesk:~$ dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 ext4 At the bottom of this email I'll put a copy of a typical full header on a post from me. Here's the symptom: Every time I reply to an OCLUG post, Claws-Mail loads the *To* with oclug(a)mailman.oclug.org and the *CC* with oclug(a)penguin.oclug.org. Unless I remember to delete the CC, this makes me double post every time, and must be quite annoying to you all. This happens *only* on OCLUG posts: None of my other mailing lists display this symptom. It's actually weirder than that, because although when I compose the message the preceding is true, by the time I get the two messages back they both say oclug(a)penguin.oclug.org. This happens only with the OCLUG list, no others. I studied the full headers of the two messages when they came back to me, and could discern no difference in the two. What I did find, however, is that all OCLUG messages have: List-Post: <mailto:oclug@mailman.oclug.org> Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> Can anyone tell me how to start narrowing down the cause of this behavior? I've CC'ed the Claws-Mail list and the Dovecot list in hopes that maybe they have some ideas. The fact that the rest of you don't post doubles makes me wonder if it's a mail client thing (but of course, only for OCLUG). Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance ====================================================== Return-path: <oclug-bounces(a)penguin.oclug.org> Envelope-to: slitt(a)troubleshooters.com Delivery-date: Thu, 28 Feb 2013 23:57:27 -0700 Received: from box20.bluehost.com [69.89.18.20] by mydesk with IMAP (fetchmail-6.3.21) for <slitt@localhost> (single-drop); Fri, 01 Mar 2013 02:00:09 -0500 (EST) Received: from athrbthr by box500.bluehost.com with local-bsmtp (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuI-0004wp-KM for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:27 -0700 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on box500.bluehost.com X-Spam-Level: X-Spam-Status: No, score=0.9 required=6.0 tests=BAYES_20,DKIM_SIGNED,RDNS_NONE, T_DKIM_INVALID shortcircuit=no autolearn=no version=3.3.1 Received: from [66.51.217.34] (port=57600 helo=mailman.oclug.org) by box500.bluehost.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuH-0004vU-Sl for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:26 -0700 Received: from penguin.oclug.org (localhost.localdomain [127.0.0.1]) by mailman.oclug.org (8.13.8/8.13.8) with ESMTP id r216sAxl005168; Thu, 28 Feb 2013 22:54:25 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216sAxl005168 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=oclug.org; s=key1; t=1362120877; i=(a)oclug.org; bh=pGJLvLZRLVQZMvAPrmj0xY5yD15S7XKt7ZIXrtLn+n8=; h=Date:From:To:Message-ID:In-Reply-To:References:Mime-Version:Cc: Subject:Reply-To:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:Content-Type:Content-Transfer-Encoding; b=Ikxul7U6431nG0j1/UvXZoPbuId9Olh01KBQFgHtvW4XY4vRSdO0c/3K04k8S52Gz XbPB09lBM+MgYdwfz96Euo5fIKe63jqud0IMfa51HdMC8soz9AwTFLiY/Bf45dQbc/ L7GWPtjXX/RIjqgZmxV19GqgvALnmaDZ+p9aYlSs= Received: from oproxy5-pub.bluehost.com (oproxy5-pub.bluehost.com [67.222.38.55]) by mailman.oclug.org (8.13.8/8.13.8) with SMTP id r216rFYG005142 for <oclug(a)penguin.oclug.org>; Thu, 28 Feb 2013 22:53:26 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216rFYG005142 Authentication-Results: mailman.oclug.org; dkim=pass (768-bit key) header.i=(a)troubleshooters.com header.b=pN/Ec/8K; dkim-adsp=pass Received: (qmail 24695 invoked by uid 0); 1 Mar 2013 06:53:12 -0000 Received: from unknown (HELO box500.bluehost.com) (74.220.219.100) by cpoproxy2.bluehost.com with SMTP; 1 Mar 2013 06:53:12 -0000 Received: from [184.90.206.64] (port=58237 helo=mydesk) by box500.bluehost.com with esmtpsa (SSLv3:RC4-SHA:128) (Exim 4.80) (envelope-from <slitt(a)troubleshooters.com>) id 1UBJqB-0007gc-KK; Thu, 28 Feb 2013 23:53:11 -0700 Date: Fri, 1 Mar 2013 01:53:07 -0500 From: Steve Litt <slitt(a)troubleshooters.com> To: oclug(a)penguin.oclug.org Message-ID: <20130301015307.69d0330f@mydesk> In-Reply-To: <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> References: <CAOF6TY_dmSP+ZS60wKaZo3Lq6iZ+fcqkbh4H46Jz8HOp+xRprQ(a)mail.gmail.com> <512FB61F.6070607(a)truesdail.com> <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> Organization: Troubleshooters.Com X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.13; x86_64-pc-linux-gnu) Mime-Version: 1.0 X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:smtp auth 184.90.206.64 authed with junk(a)a3b3.com} Cc: Orange County Linux Users Group <oclug(a)penguin.oclug.org> Subject: Re: [OCLUG] Clonezilla vs Ubuntu backup? X-BeenThere: oclug(a)mailman.oclug.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> List-Unsubscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=unsubscribe> List-Archive: <http://mailman.oclug.org/mailman/private/oclug> List-Post: <mailto:oclug@mailman.oclug.org> List-Help: <mailto:oclug-request@mailman.oclug.org?subject=help> List-Subscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: oclug-bounces(a)penguin.oclug.org X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:spamassassin for local delivery to identified user} ======================================================

2 1

[Dovecot] Looking for HOWTO for fc18 with postfix/TLS/imaps
by Alex 01 Mar '13

01 Mar '13

Hi all, Does there already exist a document that outlines the best approach to implement postfix with dovecot? I'd like to set up a Maildir system with TLS clients and SMTP Auth. I don't think I need to require client certs, but want to avoid cleartext passwords. It's unclear to me whether to use 143 with TLS or 993. I've currently set it up using 143 with STARTTLS using normal passwords. Is this correct? Can I use a regular apache web cert to provide an authorized cert and key to use for authentication by the clients? Thanks, Alex

1 0

[Dovecot] Support for PolarSSL?
by Charles Marcus 01 Mar '13

01 Mar '13

Hey Timo, Just curious if you ever thought about supporting other than just OpenSSL? PolarSSL looks really interesting, has no major dependencies and is very lightweight compared to OpenSSL, GNUTLS or others... https://polarssl.org/ I guess it could be a lot of work, or not, anyway, I'm just curious... -- Best regards, */Charles/*

6 5

[Dovecot] Best practice for sieve script synchronization
by Oli Schacher 01 Mar '13

01 Mar '13

We consider deploying a two server active-active setup with dsync replication for ~2500 users. I was wondering how people handle sieve script synchronization in such setups. We came up with a few options for syncing: 1) rsync/unison ~/sieve every x seconds 2) move sieve dirs to separatate partition and sync with gluster or drbd 3) patch roundcube managesieve sieve plugin to upload to both managesieve servers (only roundcube can access managesieve in our setup) 4) store sieve scripts in mysql and patch roundcube managesieve plugin to directly access the db instead of using managesieve (we tried this, but apparently sieve scripts read from db via dovecot dict can't have more than one line? show stopper due to roundcube sieve plugin needing comments to parse the scripts) 5) wait until Timo/Stephan add additional magic to dsync for sieve scripts as discussed in http://www.dovecot.org/list/dovecot/2011-October/061699.html ;-) We are tending towards 1) as this seems simplest and most robust solution but before we re-invent the wheel we'd like to "hear" your thoughts... Thanks Oli -- This message does not contain horse meat

6 7

Re: [Dovecot] sending of password did not succeed
by Peter Sparkes 01 Mar '13

01 Mar '13

Hi Harald > > Thanks for replying > > stat /home/didm.co.uk/peter/Maildir/tmp gives > > File: `/home/didm.co.uk/peter/Maildir/tmp' > Size: 4096 Blocks: 8 IO Block: 4096 directory > Device: 901h/2305d Inode: 13836957 Links: 2 > Access: (0755/drwxr-xr-x) Uid: ( 1223/ peter) Gid: ( 1108/didm.co.uk) > Access: 2013-02-28 04:36:36.000000000 +0000 > Modify: 2013-02-28 17:08:22.000000000 +0000 > Change: 2013-02-28 17:08:22.000000000 +0000 > > ls -lha -R /home/didm.co.uk/peter/ ouputs a long list part of which is > > /home/didm.co.uk/peter/Maildir/new: > total 844K > drwxr-xr-x 2 peter didm.co.uk 4.0K Feb 28 17:08 . > drwxr-xr-x 8 peter didm.co.uk 4.0K Feb 28 08:01 .. > -rw------- 1 peter peter 12K Feb 28 08:41 > 1362040901.H489863P3132.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.2K Feb 28 08:46 > 1362041185.H453645P3137.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.8K Feb 28 08:59 > 1362041976.H290857P3254.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.1K Feb 28 09:01 > 1362042100.H237350P3263.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 303K Feb 28 09:05 > 1362042315.H1078P3266.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 29K Feb 28 09:16 > 1362042969.H141065P4039.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 15K Feb 28 09:29 > 1362043772.H424096P4070.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 485 Feb 28 09:34 > 1362044091.H313425P4077.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 11K Feb 28 09:44 > 1362044642.H822470P4880.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.4K Feb 28 11:38 > 1362051505.H650923P7747.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.6K Feb 28 12:03 > 1362053012.H602533P8671.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 27K Feb 28 12:44 > 1362055442.H625207P10611.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 40K Feb 28 13:14 > 1362057256.H571100P11598.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 83K Feb 28 13:15 > 1362057339.H568650P11605.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 9.3K Feb 28 14:05 > 1362060354.H307724P12580.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 16K Feb 28 14:25 > 1362061514.H650991P13554.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 9.0K Feb 28 15:47 > 1362066474.H389245P16304.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 46K Feb 28 15:53 > 1362066827.H631037P16382.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.9K Feb 28 15:56 > 1362067018.H98463P16401.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 20K Feb 28 16:15 > 1362068100.H694502P17251.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 44K Feb 28 16:27 > 1362068836.H298454P17321.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 53K Feb 28 17:06 > 1362071183.H205812P18284.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 53K Feb 28 17:08 > 1362071302.H916902P18293.didm-a.dh.bytemark.co.uk > > > Regards > > Peter > > > On Thu, Feb 28, 2013 at 5:27 PM, Reindl Harald <h.reindl(a)thelounge.net>wrote: > >> >> >> Am 28.02.2013 18:20, schrieb Peter Sparkes: >> > Hi >> > >> > Today I have upgraded my Debian server from lenny to squeeze and my >> email >> > stopped working. >> > >> > I am using Dovecot 1.2.15 with exim4. >> > >> > Exim4 is working and mail is being delivered to the mailboxes - /home/ >> > didm.co.uk/peter/Maildir/new etc >> > >> > When I try to download emails to my I get >> > >> > "sending of password did not succeed, Mail server >> > mail.didm.co.ukresponded:Authentication failed" >> > >> > and the server Dovecot error log "utime(/home/ >> didm.co.uk/peter/Maildir/tmp) >> > failed: Permission denied" etc >> >> and what says "stat /home/didm.co.uk/peter/Maildir/tmp" >> or "ls -lha -R /home/didm.co.uk/peter/"? >> >> >

1 0

[Dovecot] sieve /editheader / addheader :last crash
by Peter Rindfuss 01 Mar '13

01 Mar '13

Hi Everybody, I'm using dovecot 2.1.14 from http://xi.rename-it.nl/debian/ with debian squeeze stable. In general, sieve works fine for me, but "addheader :last ..." from the editheader extension causes a crash when it processes a message. I was able to narrow this down a bit: It only happens if "addheader :last" is the first editheader command executed in a script. If it is preceded by any "deleteheader" or "addheader" without ":last", everything is fine. This is what I get from sieve-test when it crashes: sieve-test(root): Panic: file istream.c: line 133 (i_stream_read): assertion failed: (_stream->skip != _stream->pos) sieve-test(root): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4881a) [0x7f5e0b37681a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f5e0b376902] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f5e0b349f7f] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x17c) [0x7f5e0b37da9c] -> /usr/lib/dovecot/libdovecot.so.0(+0x51453) [0x7f5e0b37f453] -> /usr/lib/dovecot/libdovecot.so.0(+0x5150e) [0x7f5e0b37f50e] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f5e0b37d989] -> /usr/lib/dovecot/libdovecot.so.0(+0x53fe1) [0x7f5e0b381fe1] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f5e0b37d989] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x52) [0x7f5e0b37dc72] -> /usr/lib/dovecot/libdovecot.so.0(io_stream_copy+0x41) [0x7f5e0b38ae21] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e1de) [0x7f5e0b38c1de] -> /usr/lib/dovecot/libdovecot.so.0(o_stream_send_istream+0x33) [0x7f5e0b38acb3] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_save_continue+0x38) [0x7f5e0be0caf8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_copy+0xb8) [0x7f5e0be376d8] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_copy+0x56) [0x7f5e0be086c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x4a) [0x7f5e0be3ce9a] -> /usr/lib/dovecot/libdovecot-sieve.so.0(+0x3fa66) [0x7f5e0c103a66] -> /usr/lib/dovecot/libdovecot-sieve.so.0(+0x366b4) [0x7f5e0c0fa6b4] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x3ff) [0x7f5e0c0fabef] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x56) [0x7f5e0c10b456] -> sieve-test(main+0x73e) [0x403a5e] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f5e0abdec8d] -> sieve-test() [0x403219] Aborted Best regards Peter

2 4

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

> >however what you used at migrate, some from your old clients may not >update their folder searchlist to/at new namespace, or have fixed prefix >setup etc, i didnt remember exactly but i think you can have both >namespace setups somehow for stay compatible with "old clients" >try search list and wiki > > Yes, thanks -- I'll look into wiki... But I tried to create a fresh account in Dovecot (not migrated from Courier), and it still shows a intermixed folder order: a list "" * * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasNoChildren) "/" "Sent" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "Pub" a OK List completed. So, it is not a migration problem -- note that it is the LIST command output, so it is not got influenced by some IMAP client folder searchlist/mask or its namespace settings (like in Thunderbird) WBR, valery

2 1

[Dovecot] patch for crash while FTS-searching through virtual mailbox
by Mike Abbott 28 Feb '13

28 Feb '13

FTS-searching through a virtual mailbox crashes dovecot-2.1.15 when the FTS backend does not support lookup_multi. src/plugins/fts/fts-api.h says for fts_backend_lookup() that "The arrays in result must be initialized by caller." FTS backends can therefore assume that the arrays are initialized by their caller. However, fts_backend_lookup_multi() does not initialize the per-box arrays before calling the FTS backend’s lookup function. This patch fixes the resulting crash. --- dovecot-2.1.15/src/plugins/fts/fts-api.c 2012-08-03 09:09:28.000000000 -0500 +++ dovecot/src/plugins/fts/fts-api.c 2013-02-28 14:35:43.000000000 -0600 @@ -337,8 +337,12 @@ result->box_results = p_new(result->pool, struct fts_result, i+1); for (i = 0; boxes[i] != NULL; i++) { + struct fts_result *box_result = &result->box_results[i]; + p_array_init(&box_result->definite_uids, result->pool, 32); + p_array_init(&box_result->maybe_uids, result->pool, 32); + p_array_init(&box_result->scores, result->pool, 32); if (backend->v.lookup(backend, boxes[i], args, - and_args, &result->box_results[i]) < 0) + and_args, box_result) < 0) return -1; } return 0;

1 0

[Dovecot] header brakage on sieve redirect ?
by Lazy 28 Feb '13

28 Feb '13

Hi all, In the sieve file require ["copy"]; redirect :copy "asdf(a)asd.pl"; emails with headers containing \n in non terminated " field like Cc: xxx <xxx(a)plus.pl>, "asd, Grzegorz " <xxxxx(a)nsn.com> Subject: RE: RF after redirecting them Cc: xxx <xxx(a)plus.pl>, "asd,\ \ Grzegorz " <xxxxx(a)nsn.com> Subject: RE: RF mail delivered locally by dovecot-lda is unaltered lack of space before second \ brakes the headers. I'm investigating if this isn't cosed by qmail-inject, but my first suspect is sieve. dovecot 2.0.13, sieve 0.3.3, dovecot-delivery is used as an exclusive lda for qmail Regards, Michal Grzedzicki

1 1

[Dovecot] Public free (libre) mailbox hosting service for everybody!
by אנטולי קרס נר 28 Feb '13

28 Feb '13

Hello e-mail software developers and users! I'd like to ask all of you a question. And of course hear relevant opinion. I've been using free software happily for a few years, and I found free/open source alternatives for many popular proprietary tools such as Facebook, Dropbox, Micro$oft Windows & Office, Youtube, Skype and many many others. Some of the alternatives are probably known to some of you, while others are still unknown to many. But I couldn't find a replacement to mailbox hosting. I'm using a Gmail mailbox and I hate it. So many free and open source mail servers and I still use Gmail, a closed-source service (which also probably tracks all my data, including Google searches I do, and uses it for all kinds of statistics and advertising, but that's another issue). So I asked myself, why is there no mailbox hosting service which respects user freedom? I sent an e-mail to the Free Software Foundation, and got a suggestion to ask all of you: do you know any free (libre) mail server out there? If you do, please inform me, and the whole free software community, developers and users. I couldn't find any. If nobody else finds any either, the plan is to start a new server. There are so many server tools and programs, like the ones you use and develop. It's just like hosting a Git repository or videos of pictures for the masses. We can do it with e-mail too. Q: Why don't I start my own personal server? A: I'm a programmer and I can do it - with some effort, but I can. The problem is not me. The problem is that all the non-programmer and non-technical users can't. And they shouldn't. We tech people can, and should, run such servers for everybody. For all users who want their basic freedoms respected. Another question to tech people: I'm not an expert in e-mail software, so I'm not really sure setting up a server is as easy as all other online services we get, such as Diaspora (facebook replacement), MediaGoblin (Youtube replacement), Gitorious (git repo hosting). Is there a technical issue preventing people from running a mail server, or it's just a matter of having enough money to run it, and the necessary technical skills (which many of you probably have). If it's possible, we'll do it. Also, if users had to pay for such a service, it would be okay. I don't mind paying for my free software stack. I'd actually find it a way to contribute back to the people and projects which deserve it. The point is not money; such a service can get funds. The point if FREEDOM. Waiting for response and opinions from you, my fellow free software community members, Anatoly Krasner Free software enthusiast/activist Israel

2 1

Re: [Dovecot] sending of password did not succeed
by Reindl Harald 28 Feb '13

28 Feb '13

PLEASE do NOT response off-list on mailing-lists and in general NOT use HTML messages for lists as you can see below what happens quting them i am using dovecot ONLY as proxy/auth-provider so my intention was to help others get more infos Am 28.02.2013 18:37, schrieb Peter Sparkes: > Hi Harald > Thanks for replying > > stat /home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp> gives > > File: `/home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>' > Size: 4096 Blocks: 8 IO Block: 4096 directory > Device: 901h/2305d Inode: 13836957 Links: 2 > Access: (0755/drwxr-xr-x) Uid: ( 1223/ peter) Gid: ( 1108/didm.co.uk <http://didm.co.uk>) > Access: 2013-02-28 04:36:36.000000000 +0000 > Modify: 2013-02-28 17:08:22.000000000 +0000 > Change: 2013-02-28 17:08:22.000000000 +0000 > > ls -lha -R /home/didm.co.uk/peter/ <http://didm.co.uk/peter/> ouputs a long list part of which is > > /home/didm.co.uk/peter/Maildir/new <http://didm.co.uk/peter/Maildir/new>: > total 844K > drwxr-xr-x 2 peter didm.co.uk <http://didm.co.uk> 4.0K Feb 28 17:08 . > drwxr-xr-x 8 peter didm.co.uk <http://didm.co.uk> 4.0K Feb 28 08:01 .. > -rw------- 1 peter peter 12K Feb 28 08:41 1362040901.H489863P3132.didm-a.dh.bytemark.co.uk > <http://1362040901.H489863P3132.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.2K Feb 28 08:46 1362041185.H453645P3137.didm-a.dh.bytemark.co.uk > <http://1362041185.H453645P3137.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.8K Feb 28 08:59 1362041976.H290857P3254.didm-a.dh.bytemark.co.uk > <http://1362041976.H290857P3254.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.1K Feb 28 09:01 1362042100.H237350P3263.didm-a.dh.bytemark.co.uk > <http://1362042100.H237350P3263.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 303K Feb 28 09:05 1362042315.H1078P3266.didm-a.dh.bytemark.co.uk > <http://1362042315.H1078P3266.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 29K Feb 28 09:16 1362042969.H141065P4039.didm-a.dh.bytemark.co.uk > <http://1362042969.H141065P4039.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 15K Feb 28 09:29 1362043772.H424096P4070.didm-a.dh.bytemark.co.uk > <http://1362043772.H424096P4070.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 485 Feb 28 09:34 1362044091.H313425P4077.didm-a.dh.bytemark.co.uk > <http://1362044091.H313425P4077.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 11K Feb 28 09:44 1362044642.H822470P4880.didm-a.dh.bytemark.co.uk > <http://1362044642.H822470P4880.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.4K Feb 28 11:38 1362051505.H650923P7747.didm-a.dh.bytemark.co.uk > <http://1362051505.H650923P7747.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.6K Feb 28 12:03 1362053012.H602533P8671.didm-a.dh.bytemark.co.uk > <http://1362053012.H602533P8671.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 27K Feb 28 12:44 1362055442.H625207P10611.didm-a.dh.bytemark.co.uk > <http://1362055442.H625207P10611.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 40K Feb 28 13:14 1362057256.H571100P11598.didm-a.dh.bytemark.co.uk > <http://1362057256.H571100P11598.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 83K Feb 28 13:15 1362057339.H568650P11605.didm-a.dh.bytemark.co.uk > <http://1362057339.H568650P11605.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 9.3K Feb 28 14:05 1362060354.H307724P12580.didm-a.dh.bytemark.co.uk > <http://1362060354.H307724P12580.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 16K Feb 28 14:25 1362061514.H650991P13554.didm-a.dh.bytemark.co.uk > <http://1362061514.H650991P13554.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 9.0K Feb 28 15:47 1362066474.H389245P16304.didm-a.dh.bytemark.co.uk > <http://1362066474.H389245P16304.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 46K Feb 28 15:53 1362066827.H631037P16382.didm-a.dh.bytemark.co.uk > <http://1362066827.H631037P16382.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.9K Feb 28 15:56 1362067018.H98463P16401.didm-a.dh.bytemark.co.uk > <http://1362067018.H98463P16401.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 20K Feb 28 16:15 1362068100.H694502P17251.didm-a.dh.bytemark.co.uk > <http://1362068100.H694502P17251.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 44K Feb 28 16:27 1362068836.H298454P17321.didm-a.dh.bytemark.co.uk > <http://1362068836.H298454P17321.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 53K Feb 28 17:06 1362071183.H205812P18284.didm-a.dh.bytemark.co.uk > <http://1362071183.H205812P18284.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 53K Feb 28 17:08 1362071302.H916902P18293.didm-a.dh.bytemark.co.uk > <http://1362071302.H916902P18293.didm-a.dh.bytemark.co.uk> > > > On Thu, Feb 28, 2013 at 5:27 PM, Reindl Harald <h.reindl(a)thelounge.net <mailto:h.reindl@thelounge.net>> wrote: > > > > Am 28.02.2013 18:20, schrieb Peter Sparkes: > > Hi > > > > Today I have upgraded my Debian server from lenny to squeeze and my email > > stopped working. > > > > I am using Dovecot 1.2.15 with exim4. > > > > Exim4 is working and mail is being delivered to the mailboxes - /home/ > > didm.co.uk/peter/Maildir/new <http://didm.co.uk/peter/Maildir/new> etc > > > > When I try to download emails to my I get > > > > "sending of password did not succeed, Mail server > > mail.didm.co.ukresponded:Authentication failed" > > > > and the server Dovecot error log "utime(/home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>) > > failed: Permission denied" etc > > and what says "stat /home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>" > or "ls -lha -R /home/didm.co.uk/peter/ <http://didm.co.uk/peter/>"?

1 0

[Dovecot] Real-time sync using dsync
by Nikolaos Milas 28 Feb '13

28 Feb '13

Hi, Can we use dsync to achieve *continuous* (real-time) sync between two servers (Mirror mode)? Running in such a "continuous" dsync mode, we would replicate two servers to one another continuously, so that the two would be concurrently available/accessible/useable (as POP3/IMAP servers), and getting synced in real time. Is this possible? (If yes, I think it would be much easier to setup such an architecture, rather that resorting to shared file systems, network-based storage etc.) Thanks, Nick

7 12

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

>> >> Is there a way to influence the folder sort order in Dovecot? >> >> WBR, >> valery >> >> > >comming from courier it may be a namespace problem > >http://wiki2.dovecot.org/Migration/Courier > >Dovecot configuration > >Courier by default uses "INBOX." as the IMAP namespace for private >mailboxes. If you want a transparent migration, you'll need to configure >Dovecot to use a namespace with "INBOX." prefix as well. > >mail_location = maildir:~/Maildir > >namespace { > prefix = INBOX. > separator = . > inbox = yes >} > Yes, I knew about that. In Courier, we had 'INBOX.' namespace prefix and '.' as a separator. Now we have empty prefix and a '/' as a separator. So, the settings are as follows: namespace { location = maildir:/usr/mailsuite/data/%d/%n type = private separator = / prefix = inbox = yes } But I used the courier-dovecot-migrate.pl script from Timo, as recommended. Where might be the traces of Courier (namespace settings etc.) remained? It seems that Courier and Dovecot use separate sets of files in user mailbox. Maybe, the migrate script expects the settings to be prefix = 'INBOX.' and separator = '.', what we don't want, so, we must modify the migrate script to change namespace settings when migrating? WBR, valery

2 1

[Dovecot] Dovecot - PowerMTA
by Clement PAULET 28 Feb '13

28 Feb '13

> Hello, > > I'm in charge of a PowerMTA SMTP gateway which is sending many email > marketing campain. > > This gateway stored all incoming email (reply to) in a specific > folder like this "domain.tld/mailbox". > All email' incoming are stored in the same file "mailbox" and are > paste at the end of the file with all headers. > It's look like a Mbox file format. > > In order to process our client requests (reply to), I search a > solution that can order mail by category (SPAM, Out of Office, > contact, etc..) and that I can submit after to our dedicated services. > > Do you think this is possible by a Dovecot/Sieve configuration ? (Our > MTA isn't a Postfix server and we can not change his configuration). > > Good day everybody and sorry for the post on dovecot-news list. > > Clement PAULET

1 0

[Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

Hi all We migrated our IMAP server from Courier to Dovecot. The minor problem appeared: Dovecot LIST command now shows mailbox listing in some weird order. (I suppose, it is filesystem directory order) Previously, with Courier, it was sorted, i.e., the INBOX was the first, followed by other system folders. This is not a problem with our webmail, because it sorts folders by its own. But with some IMAP clients, we have folders intermixed. Is there a way to influence the folder sort order in Dovecot? WBR, valery

2 1

[Dovecot] dsync with imapc and hidden folders
by Angel L. Mateo 28 Feb '13

28 Feb '13

Hello, I'm trying to use dsync to copy mail from one server to a newer one, so I'm using imapc as source (when running dsync in the destination server). The command I'm using is like this: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<original server> -o imapc_features=rfc822.size -o mailbox_list_index=no backup -R -f -u "<myuser>" imapc: This command is working. The problem I have is that I'm using lazy_expunge in the original server, and namespace used in the original server has the config: namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = BORRADOS. separator = . } so, it is not being synchronized. I have tried to synchronized from the original server instead of destination with: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<dest server> -o imapc_features=rfc822.size -o mailbox_list_index=no -o mail_location=maildir:<myuserhome>/Maildir/expunged backup -f -u "amateo" imapc: with this, no message is copied and I have errors like: dsync(<myuser>): Error: Mailbox Archives.2003_kk changed its GUID (e7fc0b2d831e1c51984d000029c62294 -> 7d325fb944b953993df5d27ce2ee786c) Any idea to copy messages in this namespace without needing to make it plubic? Is there any hidden option for dysnc? Could I use doveadm backup? How? (it seems that documentation for dsync and doveadm backup is not updated) -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

[Dovecot] Logs when moving mails
by Christian Forjahn 28 Feb '13

28 Feb '13

Hi, I have a problem with an older mailserver. We have an account where 10 Users use one IMAP Account to manage their work. Sometimes some of the emails seem to disappear. I think they are moved somewhere but I can´t tell it for sure. Is there a way to make dovecot logging any movement of emails (I would prefer doing it only for one account). This account is not a local user. Thanks for your help, Chris mailserver:~ # dovecot --version 1.0.3 mailserver:~ # dovecot -n # 1.0.3: /etc/dovecot/dovecot.conf protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/exim/mailserver.cert.pem ssl_key_file: /etc/exim/mailserver.key.pem ssl_verify_client_cert: yes disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login verbose_proctitle: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_translation: %@ master_user_separator: * passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: checkpassword args: /etc/dovecot/checkpassword userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail mailserver:~ #

2 1

Re: [Dovecot] Public free (libre) mailbox hosting service for everybody!
by Simon Brereton 28 Feb '13

28 Feb '13

On 28 Feb 2013 08:26, "אנטולי קרסנר" <tombackton(a)gmail.com> wrote: > > I've written a response to someone else, explaining some issues you > mention here. > > A little note on UI: we don't need web UI. It's a good addition but > unnecessary for the beginning. There are many free-software desktop mail > clients. Some are big and complicated, but some are very simple and very > easy to use, just like Gmail is. So UI is not a critical issue right > now, we just need to be able to easily configure a mail client, e.g. > Evolution, to work with the server. > > And it's great to hear people like the idea and want to help! With hard > work and cooperation, everything is possible! > > - Anatoly Krasner > > On ד', 2013-02-27 at 18:39 -0500, Bennett Todd wrote: > > The operational cost is non-zero. Besides hardware, which must include > > backups, and enough physical diversity to offer availability, an email > > server is an attractive nuisance; spammers and other criminals > > constantly attempt sabotage and burglary, and it takes ongoing > > manpower to attempt to hold them temporarily at bay. > > > > And unless you put hard caps on message sizes, people will use their > > mailboxes as backup drives, or just email their vacation movies to > > family, and you'll be buying drives, and hence replacing them, often. > > > > I love the idea, I'm fond of running mailservers myself. But I've gone > > Google. > > > > As for software, I won't pitch my favorite components to this wide > > list, but I know how to find all the pieces I'd need except the > > webmail front-end for the utterly non-technical. > > > > If you limited the scope to IMAP and SMTP, both SSL authenticated, it > > wouldn't be too hard to spec out. > > > > Host on AWS EC3 or the like, then find an affordable solution to spam, > > and you can sell to anyone who doesn't expect their email to be > > private from governments. > > > > Anybody know of a well-engineered and maintained SSL library? > > cesmail.net anyone? Simon

1 0

[Dovecot] selinux rules for dovecot
by Robert Moskowitz 28 Feb '13

28 Feb '13

I am running selinux in permissive mode on my new mail server, in part because of dovecot. I would really like to use selinux, but I suspect it may be a challenge. My setup is on Centos 6.3 with dovecot using mysql for virutal domains and users. I am looking for a set of definitive selinux instructions, not a pointer to selinux tutorial. Here are examples of what I am seeing: Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33468): avc: denied { search } for pid=2994 comm="dict" name="mysql" dev=dm-0 ino=1705864 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_db_t:s0 tclass=dir Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33469): avc: denied { write } for pid=2994 comm="dict" name="mysql.sock" dev=dm-0 ino=1706116 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_var_run_t:s0 tclass=sock_file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33470): avc: denied { connectto } for pid=2994 comm="dict" path="/var/lib/mysql/mysql.sock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=unix_stream_socket Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33471): avc: denied { getattr } for pid=2994 comm="dict" path="/usr/share/mysql/charsets/Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33472): avc: denied { read } for pid=2994 comm="dict" name="Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file

1 0

[Dovecot] v2.2.beta2 released
by Timo Sirainen 27 Feb '13

27 Feb '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz.sig A ton of fixes since beta1. Especially the new dsync and the replication server related to that should really work now. It also works correctly now for shared mailboxes with private \Seen flags. And the replication server uses incremental syncing after the initial full sync, so it should be pretty efficient also. I've only two things left to do before v2.2.rc1: 1. Implement dsync to work via TCP and TCP+SSL sockets. This is pretty easy to do actually, since it can use the existing doveadm-server to start up. 2. Read up all the pending mails from Dovecot mailing list and fix up the reported issues. Actually I guess most of those are for v2.1, but still I should get around to it. :) There shouldn't be any major bugs left, so I'm expecting v2.2.rc1 out in maybe a week or so, hopefully followed by the final v2.2.0 soon afterwards. Please test and report any bugs found!

6 16

[Dovecot] Help with vpopmail authentication
by Fran Márquez 27 Feb '13

27 Feb '13

Hello, Currently I have a qmail server with vpopmail+courierImap. I want setup a new server in DMZ for proxy IMAP connections and I have a doubt with authentication method. I've read that dovecot can use a vpopmail driver for authentication. As my user database/password is stored by vpopmail, I think that this would be the best method for check the auth logins against dovecot. But I've read the docs and many examples availables on WWW and I haven't found any reference to validate against an *external* vpopmail server. The examples configuration doesn't contain any host/port, so I suppose that driver try to use a local vopomaild. In my case, I only want dovecot for proxying IMAP connections to my current mail server, without store mails or user/password info in dovecot server, because all that info is already stored in real mailserver. The ideal scenario would be this: user ---IMAPs----> dovecot ----- IMAP ---> mailserver Any advice will be wellcome. Regards and thank you very much in advance

1 0

[Dovecot] > 2.2.rc2: doveadm who -> Bad file descriptor
by Lutz Preßler 27 Feb '13

27 Feb '13

Hello, 2.2.rc2 is reproducibly fine, but (all from xi.rename-it.nl) dovecot_2.2.0~rc2-0~auto+11 (15988:2020ed15efb9) and dovecot_2.2.0~rc2-0~auto+7 (15980:d84c7c11d7b7) have "doveadm who" not working: # doveadm who doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor strace doveadm who ends with: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(-1, F_GETFL) = -1 EBADF (Bad file descriptor) write(2, "doveadm(root): Fatal: fcntl(-1, "..., 69doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor ) = 69 exit_group(75) = ? same with 2.2.rc2 includes: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(8, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK) fcntl(8, F_SETFL, O_RDWR) = 0 fstat(8, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 write(8, "VERSION\tanvil\t1\t0\nCONNECT-DUMP\n", 31) = 31 Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 27 Feb '13

27 Feb '13

>> >> So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail >> after it is fetched? > >with getmail > >[destination] >type = MDA_external >path = /usr/lib/dovecot/deliver > >But then it will be copied to INBOX... -- Is it possible to specify the >other folder to deliver to, >> to the deliver program? > >the sieve filter invoked bx deliver does it, i.e rule > >if header :contains ... fileinto :create "folder" > >or whatever > Ah, yes. Really, I looked to mpop options, it can call various LDA's. And, dovecot-lda has "-m" parameter, which allows to specify the mailbox name. So, I can deliver the mail arrived by fetcher, via dovecot-lda, and Sieve filters will work. Also, as a bonus, delivering mail via LDA will correctly update user quotas -- the problem which resolved by itself :) Great :) >> >>> >>>> outgoing mail to folders, specific >>> >>> outgoing mail is smtp, with i.e imap copy to sent folder etc >>> if you want other folders your imap client should do it >>> >> >> So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >in general ,i dont think so , there may be some workaround with server >bcc_copy and i.e plus adressing with sieve then for "sent" mail > Yes, this is a variant. But what if I modify the Dovecot post-login script (a wrapper for IMAP process), or add the sieve plugin to protocol "imap {mail_plugins = ...}" ? Will it be invoked on each operation with mailboxes? >> >>> >>> try i.e >>> >>> https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search >>> >>> >>>> to their recipients. WBR, valery

2 1

[Dovecot] Protocol logging - TLS vs SSL
by Charles Marcus 27 Feb '13

27 Feb '13

Hi all, Ok, I have: login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport} mpid=%e %c session=<%{session}> We only allow inbound IMAP, and only SSL on port 993. Looking at the logs, %c is obviously the encryption type, but... Why does it say 'TLS', when it technically (there is a difference after all) should say 'SSL'? Not a big deal, but it is just something I've been meaning to ask. -- Best regards, */Charles/*

6 26

[Dovecot] Can't access to shared mailbox
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, I have a user sharing a folder to me (and other users). This has worked for me for a time. And it is still working for some users, but not for me. I'm using thunderbird (17.0.3, ubuntu 12.04 package). My server is dovecot 2.1.9 (it's the same since it works). The user sharing its mailbox is: $ sudo doveadm user t userdb: t home : /home/generica/02/001002 uid : 1002 he is sharing its mailbox "cron". This is its dovecot-acl: root@myotis31:/home/generica/02/001002/Maildir# cat dovecot-acl user=<other user> kxeilprwts user=<my user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts I can subscribe to this folder: # sudo doveadm mailbox subscribe -u <myuser> shared.t.cron # sudo doveadm mailbox list -u <myuser> -s INBOX ... ... shared.t.cron but when I try to access to this folder through thunderbird (what I really do in TB is subscribe/unsubscribe to it, because it is not actually listed in the folder list), I get: Feb 26 13:35:03 myotis32 dovecot: imap(<myuser>): Error: Couldn't create namespace 'shared.' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/Maildir/dovecot.quota With doveadm commands I can access to the shared folder from my user (not the user sharing): $ sudo doveadm search -u <myuser> mailbox shared.t.cron | wc -l 652 Other users can use this shared folder without any (apparent) problem. I have attached my doveconf -n. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] Special characters in dovecot.conf
by Antonio Casado Rodriguez 27 Feb '13

27 Feb '13

Hi all, I've configured "quota_exceeded_message" in dovecot 1.2, but I have two questions: - Can I use "CRLF" in it? I'd like have two messages: english and spanish. - If char character set in dovecot.conf is ASCII, How do I set special characters (spanish)? The email received is in UTF-8 Thanks you -- Antonio Casado Rodríguez Administrador de Servicios de Red y Seguridad TIC Área de Comunicaciones STIC (Servicio de las Tecnologías de la Información y las Comunicaciones) UNIVERSIDAD DE ALMERÍA Este mensaje y los ficheros que puedan ser adjuntados son confidenciales. Los mismos contienen información reservada que no puede ser difundida. Si usted ha recibido este correo por error, tenga la amabilidad de eliminarlo de su sistema y avisar al remitente mediante reenvío a su dirección electrónica; no deberá copiar el mensaje ni divulgar su contenido a ninguna persona. Su dirección de correo electrónico junto a sus datos personales constan en un fichero titularidad de La UNIVERSIDAD DE ALMERÍA cuya finalidad es la de mantener el contacto con usted. Si quiere saber de qué información disponemos de usted, modificarla, y en su caso, cancelarla, puede hacerlo enviando un escrito al efecto, acompañado de una fotocopia de su D.N.I. a la siguiente dirección: UNIVERSIDAD DE ALMERÍA –. Secretaría General de La Universidad de Almería. Edificio Central, Planta baja. Ctra. Sacramento s/n, La Cañada de San Urbano. CP 04120 Almería

2 1

[Dovecot] Master passwords and ACLs
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, Since I have activated acl plugin, master password is no longer working. I'm running dovecot 2.1.9 with master password and acl plugin (among others). I have attached my configuration. If I disable acl plugin, it works, but if I enabled it, dovecot fails. In the client, I get: amateo@joshua:~$ telnet myotis30.um.es 143 Trying 155.54.211.169... Connected to myotis30.um.es. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 1 login <user>*master <master pass> 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in 2 SELECT INBOX 2 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2013-02-27 11:46:50] and in the server I get: Feb 27 11:46:47 myotis30 dovecot: imap-login: Login: user=<<user>>, method=PLAIN, rip=155.54.67.5, lip=155.54.211.169, mpid=53762, session=<aECqfbLWvACbNkMF> Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/master_user=master Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=10G Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Effective uid=113246, gid=110, home=/home/alumnos/46/113246 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota root: name=User quota backend=dict args=:file:/home/alumnos/46/113246/Maildir/dovecot.quota Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=* bytes=10737418240 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=Trash bytes=+1073741824 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: dict quota: user=<user>, uri=file:/home/alumnos/46/113246/Maildir/dovecot.quota, noenforcing=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir:INDEX=/var/indexes/<user> Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir, index=/var/indexes/<user>, control=, inbox=/home/alumnos/46/113246/Maildir, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=BORRADOS., sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir/expunged Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir/expunged, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Debug: acl vfile: file /home/alumnos/46/113246/Maildir/dovecot-acl not found Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Error: Failed to autocreate mailbox INBOX: Permission denied This user, accesed directly, without master user, works perfectly, with no problem, even with acl plugin. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 1

[Dovecot] "sent" and "accepted" missing mails
by Spyros Tsiolis 27 Feb '13

27 Feb '13

Hello all, OK, this most probably is not dovecot related. However, I have to start from somewhere. output of "dovecot -n" : # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 96 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd User (really weird user) today tells me she is missing "sent" and "accepted" folders. She is running the latest version of Thunderbird on a windows XP pro 32-bit machine. My question is : Should I hunt something that is dovecot-related or is it MUA related ? And since I brought this up; Does anyone know if dovecot (v1.2.16) has any limits on user quota, message sizes and stuff like that ? Thank you kindly, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

3 2

[Dovecot] doveadm search not showing expected results
by btb＠bitrate.net 27 Feb '13

27 Feb '13

i'm running doveadm search: >doveadm search -A mailbox sent savedbefore 365d > and it's returning no results. a similar command does return some results: >doveadm search -A mailbox sent savedbefore 120d | grep -iF 'jdoe' jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 65 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 66 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 67 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 68 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 69 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 70 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 71 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 72 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 73 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 74 [...] however, i see many messages in the sent mailbox much older than 365 days: >l ~jdoe/mail/Maildir/.sent/cur/ total 82M -rw------- 1 jdoe jdoe 411 Jul 12 2011 1310503747.M652859P14078.flip,S=411,W=423:2,S -rw------- 1 jdoe jdoe 515 Jul 12 2011 1310523810.M800998P5307.flip,S=515,W=530:2,Sgh -rw------- 1 jdoe jdoe 1.4K Jul 17 2011 1310922140.M604706P14587.flip,S=1339,W=1378:2,Sgh -rw------- 1 jdoe jdoe 2.7K Jul 17 2011 1310955899.M58727P3373.flip,S=2731,W=2814:2,Sgh -rw------- 1 jdoe jdoe 4.1K Jul 18 2011 1311032789.M471208P19367.flip,S=4162,W=4284:2,Sgh -rw------- 1 jdoe jdoe 451 Jul 22 2011 1311363858.M21157P19993.flip,S=451,W=464:2,Sgh -rw------- 1 jdoe jdoe 461 Jul 23 2011 1311436347.M315008P29267.flip,S=461,W=474:2,Sgh -rw------- 1 jdoe jdoe 1.6K Jul 26 2011 1311731312.M902135P25749.flip,S=1607,W=1655:2,Sgh -rw------- 1 jdoe jdoe 888 Jul 31 2011 1312161704.M81319P3943.flip,S=888,W=911:2,Sgh -rw------- 1 jdoe jdoe 676 Aug 4 2011 1312512384.M809375P3684.flip,S=676,W=692:2,Sgh -rw------- 1 jdoe jdoe 556 Aug 6 2011 1312669537.M999983P18243.flip,S=556,W=571:2,Sgh -rw------- 1 jdoe jdoe 1.8K Aug 7 2011 1312737844.M921026P22678.flip,S=1769,W=1817:2,RSgh -rw------- 1 jdoe jdoe 2.5K Aug 8 2011 1312842718.M632088P24434.flip,S=2489,W=2559:2,Sgh -rw------- 1 jdoe jdoe 2.3K Aug 10 2011 1312997501.M29900P8705.flip,S=2254,W=2306:2,RSghi -rw------- 1 jdoe jdoe 1.2K Aug 10 2011 1312998375.M806199P8705.flip,S=1200,W=1223:2,S -rw------- 1 jdoe jdoe 2.8K Aug 10 2011 1312998687.M179687P8705.flip,S=2857,W=2931:2,S -rw------- 1 jdoe jdoe 1.9K Aug 10 2011 1313017076.M909199P8264.flip,S=1889,W=1941:2,Sgh -rw------- 1 jdoe jdoe 2.8K Aug 12 2011 1313172631.M470122P23201.flip,S=2822,W=2895:2,RSgh -rw------- 1 jdoe jdoe 3.3K Aug 16 2011 1313502988.M870415P19669.flip,S=3333,W=3413:2,RSghi -rw------- 1 jdoe jdoe 3.4K Aug 16 2011 1313523978.M484997P19669.flip,S=3447,W=3534:2,S -rw------- 1 jdoe jdoe 939 Aug 16 2011 1313545488.M796759P21368.flip,S=939,W=968:2,Sgh -rw------- 1 jdoe jdoe 3.9K Aug 17 2011 1313600016.M183385P25953.flip,S=3989,W=4092:2,S -rw------- 1 jdoe jdoe 1.3K Aug 22 2011 1314028430.M280232P10201.flip,S=1291,W=1326:2,S -rw------- 1 jdoe jdoe 943 Aug 22 2011 1314067361.M643189P1408.flip,S=943,W=967:2,Sgh -rw------- 1 jdoe jdoe 1.1K Aug 23 2011 1314114645.M26643P14083.flip,S=1108,W=1142:2,S -rw------- 1 jdoe jdoe 932 Aug 24 2011 1314237640.M473097P22476.flip,S=932,W=954:2,Sgh -rw------- 1 jdoe jdoe 5.8K Sep 1 2011 1314900538.M22534P26553.flip,S=5851,W=5976:2,Sgh [...] -rw------- 1 jdoe jdoe 423 Feb 17 13:00 1361124040.M492223P13245.xenon,S=423,W=436:2,Sab -rw------- 1 jdoe jdoe 423 Feb 17 13:02 1361124143.M127879P13245.xenon,S=423,W=436:2,Sab -rw------- 1 jdoe jdoe 412 Feb 17 14:13 1361128391.M812807P13644.xenon,S=412,W=425:2,Sab -rw------- 1 jdoe jdoe 1.6K Feb 18 21:12 1361239930.M525334P20966.xenon,S=1621,W=1660:2,Sab -rw------- 1 jdoe jdoe 422 Feb 19 20:53 1361325222.M901235P32184.xenon,S=422,W=435:2,Sab -rw------- 1 jdoe jdoe 1.8K Feb 19 21:06 1361325990.M129075P32180.xenon,S=1818,W=1864:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:13 1361326428.M381244P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:22 1361326968.M84809P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:24 1361327050.M328090P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:25 1361327139.M963578P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 1.3K Feb 20 08:23 1361366627.M318860P22786.xenon,S=1230,W=1260:2,S -rw------- 1 jdoe jdoe 3.0K Feb 20 10:44 1361375042.M340353P5202.xenon,S=3019,W=3082:2,S -rw------- 1 jdoe jdoe 1.1K Feb 21 09:09 1361455754.M925454P13135.xenon,S=1025,W=1048:2,S -rw------- 1 jdoe jdoe 1.4K Feb 21 11:18 1361463526.M927071P13133.xenon,S=1344,W=1376:2,S -rw------- 1 jdoe jdoe 1.6K Feb 23 11:14 1361636078.M972572P18385.xenon,S=1636,W=1672:2,Sab -rw------- 1 jdoe jdoe 1.5K Feb 23 11:26 1361636803.M56491P18385.xenon,S=1490,W=1524:2,Sab -rw------- 1 jdoe jdoe 2.2K Feb 24 14:25 1361733929.M725648P18385.xenon,S=2178,W=2229:2,Sab > i do see these older messages properly listed and viewable in my imap client. how can i figure out what i'm doing wrong, and troubleshoot why doveadm doesn't seem to consider these message as matching? thanks -ben

2 2

[Dovecot] Deleted / read mails show up as new on remote imap clients
by Andre Bischof 27 Feb '13

27 Feb '13

Hi, I've one problem: Mails, which I already read or deleted via my IMAP client (Thunderbird) on the same machine running the server (it runs behind DynDNS on my local machine, thanks to http://mein.homelinux.com/wiki/mailserver/) show up again if I connect via IMAP from other client computers, i.e. my notebook (Thunderbird again). As you can see from the config below I have /home/user/Maildir, not /var/mail - is that the problem? Or is that anything else, resulting in status from emails not being stored (or not being available remote) in the responding dovecot files (dovecot.index?). Some month ago I migrated from Cyrus, and if I remember correct I had some problems with migrating subscriptions, stati and so on (one had to use a special script, sorry, it's been some time now) ;-) So maybe s.th. went wrong which could be the source of this problem? Just guessing ... Ok, here's my config: root@linux:/lost+found# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 auth_verbose = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } root@linux:/lost+found# root@linux:/lost+found# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 auth_verbose = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } root@linux:/lost+found# If you need other info pls let me know. Any help is greatly appreciated! Regards Andre -- rheinSinn - A. Bischof Gottesweg 46, 50969 Köln Tel. 0221 / 46 75 59 87 - Mob. 0179 / 510 45 92 andre.bischof(a)rheinsinn.de www.rheinsinn.de - www.coaching-evaluationen.de

4 9

[Dovecot] Converting a POP3 client to IMAP
by Kristen J. Webb 27 Feb '13

27 Feb '13

I have a dovecot 2.0 dovecot server set up for https/imap with spam, av, and some preliminary sieve filters in place. Our current email is outsourced and so we have used POP3 to keep all email on our systems for many years. I have run tests to move mail to the new imap server and that seems to work pretty well. However, we have lots of mail going back over a decade and used a lot of aliases that forwarded email to many users. I find the moving mail multiple times using Thunderbird results in multiple copies of the same email. Is there a best practice for moving mail such that we can take advantage of the hard link feature for all those older copies that are currently in POP3 files? It would also be nice to be able to auto file things. I don't see the sieve filters being activated when I copy mail in Thunderbird. Many thanks in advance for any guidance. Kris -- This message is NOT encrypted -------------------------------- Mr. Kristen J. Webb Chief Technology Officer Teradactyl LLC. 2450 Baylor Dr. S.E. Albuquerque, New Mexico 87106 Phone: 1-505-338-6000 Email: kwebb(a)teradactyl.com Web: http://www.teradactyl.com Providers of Scalable Backup Solutions for Unique Data Environments -------------------------------- NOTICE TO RECIPIENTS: Any information contained in or attached to this message is intended solely for the use of the intended recipient(s). If you are not the intended recipient of this transmittal, you are hereby notified that you received this transmittal in error, and we request that you please delete and destroy all copies and attachments in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited. Regular internet e-mail transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate, and it should not be relied upon as such. If you prefer to communicate with Teradactyl LLC. using secure (i.e., encrypted and/or digitally signed) e-mail transmission, please notify the sender. Otherwise, you will be deemed to have consented to communicate with Teradactyl via regular internet e-mail transmission. Please note that Teradactyl reserves the right to intercept, monitor, and retain all e-mail messages (including secure e-mail messages) sent to or from its systems as permitted by applicable law.

3 3

[Dovecot] Dict quota timeout error: Has anything changed in the latest versions?
by Alessio Cecchi 26 Feb '13

26 Feb '13

Hi, I'm using dict quota with mysql for track them via SQL query instead of read maildirsize file. Primary quota and enforcing is provided via userdb and is "maildir" type. Since dovecot 2.1.10-13 (but perhaps even before) when a new user log in via POP/IMAP or receive an email for the first time dovecot created the entry for the users in the table "quota" of dovecot database with quota usage and number of messages (before of this login/delivery the user has no entry in the quota table of dovecot DB). After the update to 2.1.14 when a new user login or receive an email for the first time dovecot was unable to create (immediately) the entry in quota table and in the log print these errors: Feb 12 11:03:49 master: Info: Dovecot v2.1.15 starting up (core dumps disabled) Feb 12 11:04:02 auth-worker(31421): Info: mysql(localhost): Connected to database vpopmail Feb 12 11:04:02 pop3-login: Info: Login: user=<alessio(a)domain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31422, secured, session=<eK4gJYTV1QB/AAAB> Feb 12 11:04:08 pop3(alessio(a)domain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=18618 Feb 12 11:04:41 pop3-login: Info: Login: user=<alessio(a)domain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31424, secured, session=<D7F0J4TV1gB/AAAB> Feb 12 11:05:11 pop3(alessio(a)domain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=1/9, size=18618 Feb 12 11:05:11 dict: Info: mysql(10.10.3.19): Connected to database dovecot [ here is when I "quit" from telnet session] Feb 12 11:05:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:06:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:06:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:07:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:07:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:08:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:08:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds [ only now telnet close the session ] This is the telnet session: # telnet 0 110 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. +OK Dovecot ready. user alessio(a)domain.com +OK pass ciao +OK Logged in. list +OK 8 messages: 1 1594 2 1594 3 1594 4 1594 5 1594 6 1594 7 3755 8 3714 . dele 8 +OK Marked to be deleted. quit [ here dovecot wait about 3 minuts before close the connecctions ] +OK Logging out, messages deleted. Connection closed by foreign host. After 3 minutes of wait in the mysql database dovecot insert the entry for the new users: mysql> use dovecot Database changed mysql> select * from quota where username='alessio(a)domain.com'; +--------------------------+---------+----------+ | username | bytes | messages | +--------------------------+---------+----------+ | alessio(a)domain.com | 2144030 | 15 | +--------------------------+---------+----------+ Errors like Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds were present also before the upgrade but they were occasional, now I had to disable "dict quota". Can this be fixed? My dovecot configuration: # cat /usr/local/dovecot-2.1/etc/dovecot/dovecot-dict-sql.conf.ext connect = host=10.10.3.19 dbname=dovecot user=dovecot password=XXX map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } # dovecot -n # 2.1.15: /usr/local/dovecot-2.1/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.6 auth_cache_size = 512 k auth_worker_max_count = 60 default_login_user = nobody dict { acl = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-share-folder.conf sqlquota = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/dovecot.log mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota acl zlib maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /usr/local/dovecot-2.1/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/dovecot-2.1/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = proxy::acl quota = maildir:UserQuota quota2 = dict:User usage::proxy::sqlquota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_default = /usr/local/dovecot-2.1/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth { unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { service_count = 0 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 0 } service quota-warning { executable = script /usr/local/dovecot-2.1/etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </etc/ssl/certs/wildcard.net.pem ssl_key = </etc/ssl/private/wildcard.net.key userdb { args = /usr/local/dovecot-2.1/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { log_path = /var/log/dovecot/lda.log mail_plugins = quota acl zlib sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 20 mail_plugins = quota acl zlib imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 5 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 4

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 26 Feb '13

26 Feb '13

>---- Original Message ---- >From: Robert Schetterer <rs(a)sys4.de> >To: dovecot(a)dovecot.org >Sent: Вт, Фев 26, 2013, 5:55 PM >Subject: Re: [Dovecot] Sieve filters on folders, different from INBOX > >Am 26.02.2013 14:20, schrieb Valery V. Sedletski: >> Hi all >> >> Is it possible to configure Dovecot's sieve plugin to act on message >> arrival to folders, other than INBOX? > >sieve is invoked by lda or lmtp not "as arrive in inbox" > > >> I wish to move messages fetched by pop3 fetcher to special folder, or sort > >if you use i.e getmail and maildir it may possible > >look > >http://pyropus.ca/software/getmail/getmailrc-examples I use mpop with a shell wrapper script. The fetcher is working on IMAP server side (not on user side, as usual). So, it is used to pull email from several POP3 servers to our IMAP server. The mail is stored in Maildir++ format. Yes, it is possible to configure fetcher to sort messages to folders by its own means, but I'd like to implement the mail sorting by means of Sieve filters. The user can easy configure filters in webmail interface, then it work with any IMAP client, because it is done on IMAP server side. So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail after it is fetched? But then it will be copied to INBOX... -- Is it possible to specify the other folder to deliver to, to the deliver program? > >> outgoing mail to folders, specific > >outgoing mail is smtp, with i.e imap copy to sent folder etc >if you want other folders your imap client should do it > So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >try i.e > >https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search > > >> to their recipients. >> >> Thanhs in advance, > >i guess what you want in gneral ,is more advanced ( new ) handling >of mail workflow at all, look at list archives for more info on >some stuff you asked, some may work in the future with new features in >imap and sieve, but meanwhile you have to workaround > I used such features with my old POP3 client (it was the good old PMMail in OS/2). But it worked on POP3 client side, with local folders. It seemed to be not very advanced, but I just got a case to implement the same with Dovecot and Exim :) >> >> WBR, >> valery >> >> >> > > > >Best Regards >MfG Robert Schetterer > >-- >[*] sys4 AG > >http://sys4.de, +49 (89) 30 90 46 64 >Franziskanerstraße 15, 81669 München > >Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 >Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer >Aufsichtsratsvorsitzender: Joerg Heidrich

2 1

[Dovecot] Imap-login service count/limits
by Thomas Hummel 26 Feb '13

26 Feb '13

Hello Timo, I'm trying to configure dovecot-2.1.15 master correctly regarding imap-login limits. I want to use service_count=0 and I'm starting with something like this : #default_process_limit = 100 #default_client_limit = 1000 service imap-login { [...] service_count = 0 process_min_avail = 8 vsz_limit = 1024M } -> Does it make sense to set a process_limit if service_count = 0 ? why ? Doesn't service_count = 0 mean that no additionnal imap-login process would be created (except for process_min_avail) ? -> Does it make sense to set process_min_avail <> 0 if service_count = 0 ? why ? and if yes, what's the rule of thumb to find the correct value according to the number of connections estimation ? -> Assuming every client is configured to use STARTTLS and opens by default 5 imap connections, each client would consume 5 of the 1000 default_client_limit, right ? -> is 1024M too high for vsz_limit and may expose to memory leaks ? In other words, what limit should be raised to scale a lot a connections ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

1 2

[Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 26 Feb '13

26 Feb '13

Hi all Is it possible to configure Dovecot's sieve plugin to act on message arrival to folders, other than INBOX? I wish to move messages fetched by pop3 fetcher to special folder, or sort outgoing mail to folders, specific to their recipients. Thanhs in advance, WBR, valery

2 1

[Dovecot] Broken foldernames in mbox
by Peer Heinlein 26 Feb '13

26 Feb '13

I have a mbox-User with some crazy foldernames: -rw------- 1 vmail vmail 19238931 17. Dez 2011 Foo & Co -rw------- 1 vmail vmail 82415 19. Nov 22:06 Foo &- Co Dovecot can't handle that correctly: # dovecot mailbox list -u user Foo & Co Foo & Co dsyncing those folders produces some errors: dsync(awad): Error: Mailboxes don't have unique GUIDs: 228d0731cb186750e9150000a69b85fa is shared by Foo & Co and Foo & Co Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] dsync can't sync mbox2mdbox two times
by Peer Heinlein 26 Feb '13

26 Feb '13

Hi, I have a server with Dovecot 2.1.x and I'm trying to convert mbox-storages to mdbox-storages. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 mail_location = mbox:~/mail During the first run everything's okay, but if I run the migration a second time, the later migration is broken: root@mailstore1:/srv/vmail/cklein# rm -R mdbox/ root@mailstore1:/srv/vmail/cklein# doveadm -v -o mail_plugins=zlib sync -u cklein mdbox:/srv/vmail/cklein/mdbox dsync(cklein): Info: test: only in source (guid=0c323b1a430a7350c8590000a69b85fa) dsync(cklein): Info: saved-drafts: only in source (guid=a759b2290cda65504c590000a69b85fa) dsync(cklein): Info: inbox: only in source (guid=a84828310cda65504d590000a69b85fa) dsync(cklein): Info: sent-mail: only in source (guid=a859b2290cda65504c590000a69b85fa) dsync(cklein): Info: spam-mail: only in source (guid=a959b2290cda65504c590000a69b85fa) dsync(cklein): Info: mail-trash: only in source (guid=aa59b2290cda65504c590000a69b85fa) dsync(cklein): Info: Trash: only in source (guid=c0d2c117a785755049640000fd7d4449) dsync(cklein): Info: INBOX.test2: only in source (guid=d6c2d20a2bd013511d030000a69b85fa) dsync(cklein): Info: huhu: only in source (guid=e310ed050ecf1351c37d0000a69b85fa) root@mailstore1:/srv/vmail/cklein# doveadm -v -o mail_plugins=zlib sync -u cklein mdbox:/srv/vmail/cklein/mdbox dsync(cklein): Error: Can't rename mailbox inbox to INBOX: Target mailbox already exists This is what the mbox-folder of the user looks like: root@mailstore1:/srv/vmail/cklein# ls -la mail/ insgesamt 404 drwx------ 4 vmail vmail 4096 26. Feb 10:09 . drwx------ 5 vmail vmail 4096 18. Feb 23:20 .. -rw------- 1 vmail vmail 540 26. Feb 10:09 huhu drwx------ 17 vmail vmail 4096 7. Feb 17:02 .imap -rw------- 1 vmail vmail 97664 26. Feb 10:09 inbox -rw------- 1 vmail vmail 540 26. Feb 10:09 INBOX.test2 drwx------ 2 vmail vmail 4096 26. Feb 09:56 mail -rw------- 1 vmail vmail 18842 26. Feb 10:09 mail-trash -rw------- 1 vmail vmail 2768 26. Feb 10:09 saved-drafts -rw------- 1 vmail vmail 239274 26. Feb 10:09 sent-mail -rw------- 1 vmail vmail 540 26. Feb 10:09 spam-mail -rw------- 1 vmail vmail 78 7. Feb 16:56 .subscriptions -rw------- 1 vmail vmail 598 26. Feb 10:09 test -rw------- 1 vmail vmail 540 26. Feb 10:09 Trash And this is what Dovecot can see accessing the mbox-storage: root@mailstore1:/srv/vmail/cklein# doveadm mailbox list -u cklein test mail-trash saved-drafts sent-mail spam-mail Trash huhu INBOX.test2 inbox mail And this is what Dovecot can see accessing the mdbox-storage: root@mailstore1:/srv/vmail/cklein# doveadm -c /etc/dovecot/mdbox-test.conf mailbox list -u cklein sent-mail saved-drafts Trash spam-mail mail-trash mail huhu test INBOX INBOX.test2 Is it a bug renaming the inbox-Folder to uppercases or do I have a mistake in my mbox-structure? Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 1

[Dovecot] 2.2.rc2: quota crash
by Lutz Preßler 26 Feb '13

26 Feb '13

Hello, 2.2.rc2 with configuration as sent with my last mail ("2.2beta2: LSUB broke"). The following sequence crashes with INBOX containing unseen message: * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in as user A0002 STATUS INBOX (MESSAGES UNSEEN) * STATUS INBOX (MESSAGES 5651 UNSEEN 5) A0002 OK Status completed. A0003 SELECT INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded \*)] Flags permitted. * 5651 EXISTS * 0 RECENT * OK [UNSEEN 5647] First unseen. * OK [UIDVALIDITY 1060286197] UIDs valid * OK [UIDNEXT 42051] Predicted next UID * OK [HIGHESTMODSEQ 6878] Highest A0003 OK [READ-WRITE] Select completed. A0004 UID SEARCH 5651 * SEARCH 42050 A0004 OK Search completed (0.000 secs). A0005 GETQUOTAROOT INBOX imap(4140, lpressl) : Panic: file mail-namespace.c: line 654 (mail_namespace_find): assertion failed: (ns != NULL) imap(4140, lpressl) : Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6079a) [0x7f617b7f679a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f617b7f6882] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f617b7b7eaf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x760e2) [0x7f617bac30e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0x19) [0x7f617bac3109] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0x5238) [0x7f617a7ec238] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_get_resource+0xb7) [0x7f617a7ec3b7] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_root_iter_next+0xf1) [0x7f617a7ece11] -> /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so(+0x1bd5) [0x7f617a5e5bd5] -> /usr/lib/dovecot/imap(command_exec+0x3d) [0x41603d] -> /usr/lib/dovecot/imap() [0x415190] -> /usr/lib/dovecot/imap() [0x41527d] -> /usr/lib/dovecot/imap(client_handle_input+0x11d) [0x4154fd] -> /usr/lib/dovecot/imap(client_input+0x6f) [0x41587f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f617b805426] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f617b80647f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f617b8053c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f617b7bcb03] -> /usr/lib/dovecot/imap(main+0x2a7) [0x41eb07] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f617b452c8d] -> /usr/lib/dovecot/imap() [0x40b549] Abgebrochen GETQUOTAROOT directly after SELECT INBOX (without UID SEARCH) does not. No crash without imap_quota plugin either, of course... Regards, Lutz

2 1

[Dovecot] What to back up from a mdbox
by Dag Nygren 26 Feb '13

26 Feb '13

Hi short question to the list: - What parts of a mdbox mail store directory can I leave out from my backup? I can see huge *.cache files for eample. Can these be rebuilt? - Can dovecot recover from a backup "on the fly"? Best Dag

2 1

[Dovecot] Dovecot SASL: SCRAM-SHA-1 Authentication Fails
by Thomas Reim 26 Feb '13

26 Feb '13

Dear all, I use Dovecot SASL (2.1.15) on Ubuntu 12.04 for IMAP authentication and Postfix SASL authentication. I tried to setup SCRAM-SHA-1 as SASL mechanism. This works well on Dovecot's client side towards my OpenLDAP server (with libsasl-2), but fails on the server side (IMAP and SMTP). In the following, there's an extract from Dovecot's log, when using mutt as SMTP client: dovecot: auth: Debug: auth client connected (pid=0) dovecot: auth: Debug: client in: AUTH#0111#011 SCRAM-SHA-1#011 service=smtp#011 nologin#011 lip=192.168.0.65#011 rip=192.168.0.65#011 secured#011 resp=<hidden> dovecot: auth: scram-sha-1(?,192.168.0.65): authzid not supported dovecot: auth: Debug: client passdb out: FAIL#0111 postfix/smtpd[7621]: warning: markaurel.gas.de[192.168.0.65]: SASL SCRAM-SHA-1 authentication failed Here's the log, when using mutt as IMAP client: dovecot: auth: Debug: auth client connected (pid=23409) dovecot: auth: Debug: client in: AUTH#0111#011 SCRAM-SHA-1#011 service=imap#011 secured#011 session=<session ID>#011 lip=192.168.0.65#011 rip=192.168.0.65#011 lport=143#011 rport=36543#011 resp=<hidden> auth: scram-sha-1(?,192.168.0.65,<session ID>): authzid not supported auth: Debug: client passdb out: FAIL#0111 In the following is mutt's output: imap_authenticate: Trying method scram-sha-1 SASL local ip: 192.168.0.65;36543, remote ip:192.168.0.65;143 External SSF: 128 External authentication name: myname mutt_sasl_cb_authname: getting authname for mail.mydomain.local:143 mutt_sasl_cb_authname: getting user for mail.gas.de:143 mutt_sasl_cb_pass: getting password for myname@mail.mydomain.local:143 Authentifiziere (SCRAM-SHA-1)... 4> a0002 AUTHENTICATE SCRAM-SHA-1 <uuencoded string> 4< a0002 NO [AUTHENTICATIONFAILED] Authentication failed. IMAP queue drained imap_auth_sasl: scram-sha-1 failed I've configured mutt, so that it immediately retries the SASL authentication using DIGEST-MD5. This 2nd try is succesful and mutt gets access to the imap/smtp service. Any hints, what's going wrong here? Output of dovecot -n: # 2.1.15 (e33fe1a7bb89): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-37-generic x86_64 Ubuntu 12.04.2 LTS auth_debug = yes auth_mechanisms = scram-sha-1 digest-md5 plain login auth_verbose = yes base_dir = /var/run/dovecot/ log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = vmail mail_location = mdbox:~/mdbox mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap lmtp quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } service imap-login { inet_listener imap { address = 192.168.0.65 port = 143 } inet_listener imaps { address = 192.168.0.65 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 10 mail_plugins = " mail_log notify" }

2 1

[Dovecot] 2.1.12: Panic: file solr-connection.c: line 547 (solr_connection_post_more)
by Marc Schiffbauer 26 Feb '13

26 Feb '13

Hi all, I am having a problem indexing one of my mailboxes using the solr fts backend in dovecot 2.1.12 For many mailboxes it works just fine, but on one mailbox I currently always get a panic. solr setup: Java: icedtea 6.1.11.5 Solr: 3.6.2 running in tomcat 7.0.32 Command to reproduce error: doveadm index -u my@user badmailbox I already noticed that there have been some solr backend fixes just before 2.1.21 release... Is this another bug in the backend? Any idea? IMO relevant logs line parts: java.io.CharConversionException: Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) complete dovecot log: doveadm(my@user): Error: fts_solr: Invalid XML input at 85:198: mismatched tag (near: <html><head><title>Apache Tomcat/7.0.32-gentoo - Error report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:wh) doveadm(my@user): Panic: file solr-connection.c: line 547 (solr_connection_post_more): assertion failed: (maxfd >= 0) doveadm(my@user): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x4bcdb) [0x34fbd53ecdb] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x3a) [0x34fbd53edb8] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x34fbd50eeac] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x2a4) [0x34fbba81072] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x40a5) [0x34fbba7d0a5] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x462) [0x34fbbc8d6dc] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xd8c2) [0x34fbbc928c2] -> doveadm(+0x17a30) [0x264ecb7a30] -> doveadm(+0x13a45) [0x264ecb3a45] -> doveadm(+0x14762) [0x264ecb4762] -> doveadm(doveadm_mail_try_run+0x173) [0x264ecb4cfd] -> doveadm(main+0x3e9) [0x264ecbd0d5] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x34fbd16a48d] -> doveadm(+0x13809) [0x264ecb3809] Aborted complete java exception: Dec 31, 2012 4:12:58 AM org.apache.solr.core.SolrCore execute INFO: [] webapp=/solr-web path=/update params={} status=500 QTime=118 Dec 31, 2012 4:12:58 AM org.apache.solr.common.SolrException log SEVERE: java.lang.RuntimeException: [was class java.io.CharConversionException] Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) at com.ctc.wstx.util.ExceptionUtil.throwRuntimeException(ExceptionUtil.java:18) at com.ctc.wstx.sr.StreamScanner.throwLazyError(StreamScanner.java:731) at com.ctc.wstx.sr.BasicStreamReader.safeFinishToken(BasicStreamReader.java:3657) at com.ctc.wstx.sr.BasicStreamReader.getText(BasicStreamReader.java:809) at org.apache.solr.handler.XMLLoader.readDoc(XMLLoader.java:315) at org.apache.solr.handler.XMLLoader.processUpdate(XMLLoader.java:156) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:79) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:58) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:365) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:260) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source) at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source) at org.apache.catalina.core.StandardWrapperValve.invoke(Unknown Source) at org.apache.catalina.core.StandardContextValve.invoke(Unknown Source) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(Unknown Source) at org.apache.catalina.core.StandardHostValve.invoke(Unknown Source) at org.apache.catalina.valves.ErrorReportValve.invoke(Unknown Source) at org.apache.catalina.valves.AccessLogValve.invoke(Unknown Source) at org.apache.catalina.core.StandardEngineValve.invoke(Unknown Source) at org.apache.catalina.connector.CoyoteAdapter.service(Unknown Source) at org.apache.coyote.http11.AbstractHttp11Processor.process(Unknown Source) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Unknown Source) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(Unknown Source) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:679) Caused by: java.io.CharConversionException: Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) at com.ctc.wstx.io.UTF8Reader.reportInvalidInitial(UTF8Reader.java:302) at com.ctc.wstx.io.UTF8Reader.read(UTF8Reader.java:188) at com.ctc.wstx.io.ReaderSource.readInto(ReaderSource.java:84) at com.ctc.wstx.io.BranchingReaderSource.readInto(BranchingReaderSource.java:57) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:992) at com.ctc.wstx.sr.BasicStreamReader.readTextSecondary(BasicStreamReader.java:4628) at com.ctc.wstx.sr.BasicStreamReader.readCoalescedText(BasicStreamReader.java:4126) at com.ctc.wstx.sr.BasicStreamReader.finishToken(BasicStreamReader.java:3701) at com.ctc.wstx.sr.BasicStreamReader.safeFinishToken(BasicStreamReader.java:3649) ... 25 more TIA -Marc -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 9

[Dovecot] Dovecot auth works when tested with doveadm, but fails with Postfix
by Darren Pilgrim 26 Feb '13

26 Feb '13

I have three postfix 2.9.5 servers: chombo, rush, yoshi. Chombo relays to rush and yoshi for outbound email. Outbound relay requires SASL authentication. Rush and yoshi run Dovecot 2.1.12 servers with simple passwd-file backends. If I create a new password hash for chombo's user, houseloki, on either rush or yoshi: # doveadm pw -u houseloki -p <password> {CRAM-MD5}... Then I add that to rush and yoshi's passwd file: houseloki@_auth.bluerosetech.com:{CRAM-MD5}... Then `doveadm reload`, it works fine: # doveadm auth houseloki <password> passdb: houseloki auth succeeded extra fields: user=houseloki(a)_auth.bluerosetech.com So I add that username and password to the smtp_sasl_password_maps hash file on chombo, reload postfix, and then try to relay something from chombo, it fails with rush and yoshi logging warnings like: Feb 19 03:32:33 yoshi postfix/smtpd[75783]: warning: chombo.example.com[2001:db8::2]: SASL DIGEST-MD5 authentication failed: <really long string redacted> Rush and yoshi have other hashes in their passwd files, and if I configure chombo to use one of those, it works fine. Those hashes use digest-md5 and are at least a few years old. I tried that scheme instead of the default cram-md5, as well as several others, but none work. I've poured over the wiki and man pages, but can't find the problem. What am I missing? Why can I not generate new hashes correctly?

2 3

Re: [Dovecot] v2.2.rc1 released
by Michael Grimm 25 Feb '13

25 Feb '13

> Please test and report any bugs found. New in rc1: | doveconf: Error: dlopen(/.../lib/dovecot/settings/libmanagesieve_login_settings.so) failed: /.../lib/dovecot/settings/libmanagesieve_login_settings.so: Undefined symbol "hook_config_parser_begin" | doveconf: Error: dlopen(/.../lib/dovecot/settings/libmanagesieve_settings.so) failed: /.../lib/dovecot/settings/libmanagesieve_settings.so: Undefined symbol "mail_user_setting_parser_info" | doveconf: Error: protocols: Unknown protocol: sieve | doveconf: Fatal: Error in configuration file /.../etc/dovecot/dovecot.conf: protocols: Unknown protocol: sieve Regards, Michael

3 9

[Dovecot] 2.2beta2: LSUB broken
by Lutz Preßler 25 Feb '13

25 Feb '13

Hello, I have some problems with (listing) subscriptions on my test system running 2.2beta2 (compared with 2.1.15, configuration and Maildir content unchanged): With 2.1.15: 0 lsub "" "*" * LSUB () "." "INBOX.Trash" * LSUB () "." "INBOX.in2009" * LSUB () "." "INBOX.test" * LSUB () "." "INBOX.test.test2" * LSUB () "." "INBOX.in2010" * LSUB () "." "INBOX.in" * LSUB () "." "INBOX.virtual.small" * LSUB () "." "INBOX.virtual.sent" * LSUB () "." "INBOX.virtual.allin" * LSUB () "." "INBOX.virtual.week" * LSUB () "." "INBOX.virtual.gmail" 0 OK Lsub completed. With 2.2beta2 (output of doveconf -n attached): 0 lsub "" "*" 0 OK Lsub completed. ... empty list. Same with "list (subscribed)". After disableing the "virtual" namespace in the config, it gets: 0 lsub "" "*" * LSUB () "." Trash * LSUB () "." in2009 * LSUB () "." test * LSUB () "." test.test2 * LSUB () "." in2010 * LSUB () "." in * LSUB () "." INBOX.Trash * LSUB () "." INBOX.in2009 * LSUB () "." INBOX.test * LSUB () "." INBOX.test.test2 * LSUB () "." INBOX.in2010 * LSUB () "." INBOX.in 0 OK Lsub completed. Note mailboxes listed with and without INBOX. prefix. Thanks, Lutz

2 3

[Dovecot] v2.2.rc1 released
by Timo Sirainen 25 Feb '13

25 Feb '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc1.tar.gz.sig A few fixes since beta2. Also added tcp and tcps (=tcp+ssl) targets for dsync, where the destination needs to be a doveadm-server listener. I'm planning on releasing v2.2.0 in 1-2 weeks if no major problems are found. Please test and report any bugs found. BTW. I've also gone through basically all of my unread emails. If you haven't gotten a reply to something, ask again. Here's again all the biggest changes since v2.1: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. * LDA/LMTP: If saving a mail brings user from under quota to over quota, allow it based on quota_grace setting (default: 10% above quota limit). * pop3_lock_session=yes now uses a POP3-only dovecot-pop3-session.lock file instead of actually locking the mailbox (and causing IMAP/LDA/LMTP to wait for the POP3 session to close). * mail_shared_explicit_inbox setting's default switched to "no". * ssl_client_ca_dir setting replaced imapc_ssl_ca_dir and pop3c_ssl_ca_dir settings. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

1 0

[Dovecot] Bug when a duplicated file is found
by Angel L. Mateo 25 Feb '13

25 Feb '13

Hello, Last days we had to restore some mailboxes from backup. Our mailboxes are in maildir format and during restore, some duplicated files appeared. The situation is: * A user has messages in his new directory when the backup is made * In some moment after the backup is done, the user accesses to his mailbox, so the message is move to the cur directory. * We restore his mailbox directly to his maildir path, so the message is now at new directory too. When this happens, dovecot detect it and it renames one of the files. This is the reported log: Feb 13 23:08:05 myotis31 dovecot: imap(<user>): Warning: Fixed a duplicate: /home/alumnos/59/122559/Maildir/cur/1360169810.M670208P13643.myotis31,S=6282,W=6409:2, -> 1360793285.M721935P29136.myotis31 The problem with this is that we are using zlib plugin so messages are compressed. When the rename is done, the rename is to a name without the S=XXXX field (neither the W=XXX, although this field is less sensible), so the result is that user's can't access to any message after this one. I think than in this situation, rename one of the files is a good solution (although it provokes duplicate mails, but this an expected/acceptable situation after the restore), but the rename should maintain the S= and W= fields (and even other maildir flags). -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

3 3

[Dovecot] SSL errors for just one client after updaing both dovecot and openssl
by Charles Marcus 25 Feb '13

25 Feb '13

Hi all, Ok, I have a strange problem after updating both dovecot and openssl... OpenSSL was 1.0.0j, now updated to 1.0.1c Dovecot was 2.1.13, now updated to 2.1.15 I'm getting a bunch of lines like the following: Feb 23 10:48:01 myhost dovecot: imap-login: Disconnected (no auth attempts in 29 secs): user=<>, rip=#.#.#.#, lport=993, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<In+cO2bWngCthJz2> where only the session id (and number of seconds for no auth attempts) is different... This is happening for only the one client. All other clients - I've counted about 25 so far - are working fine. Anyone have any ideas? I can't believe it is a generic openssl problem, since it is only affecting the one client. I've contacted him and asked him to reboot any/all devices that connect to our mail to see if that helps... -- Best regards, */Charles/*

3 3

[Dovecot] understanding namespace configuration
by btb＠bitrate.net 25 Feb '13

25 Feb '13

i'm a little confused about namespace configuration. reading http://wiki2.dovecot.org/Namespaces , and looking at the examples, it seems that when a namespace is declared, you can either do "namespace { ..." or "namespace foo { ..." - i'm having trouble finding clarity on the significance of "foo" though. it would appear it's not required, but then what is its purpose? what does it mean? does it imply something? it's also unclear to me how to create the "default private namespace". i see that there are three types of namespaces, but the list of namespace settings doesn't seem to include a parameter to set the namespace type. what am i missing? it's also not quite clear how to denote a namespace as "default". from coming across this thread [ http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001077.ht… ] it would indicate in theory that a namespace is denoted as default by using an empty prefix - but i wasn't able to find corroboration of that in dovecot's documentation. thanks -ben

2 3

[Dovecot] dovecot-2.2: broken domain quota calculation
by Evgeny Basov 25 Feb '13

25 Feb '13

Hello. Used next version of dovecot: # dovecot --version 20130205 (03a0af22100d+) Quota configuration: plugin { quota = dict:Domain quota:%d:redis:host=127.0.0.1:prefix=domain/ quota_rule = *:storage=0 quota_rule2 = Trash:storage=+5%% quota2 = dict:User quota::redis:host=127.0.0.1:prefix=user/ quota2_rule = *:storage=0 quota2_rule2 = Trash:storage=+5%% } Problem: incorrect quota calculations. Dovecot gets size and messages count of all domain from last user in list. In 2.1 works fine. Steps to reproduce problem: 1. install dovecot 2. create over 50 users with e-mails 3. execute: doveadm quota recalc -A 4. execute: doveadm quota get -A 5. get count of all users message: sum in some application result of execution doveadm quota get -A | grep MESSAGE | grep 'User quota' | awk '{print $5}' (139443 messages) 6. get size of all users message: sum in some application result of execution doveadm quota get -A | grep STORAGE | grep 'User quota' | awk '{print $5}' (2304399 Kb) 7. look at some user user(a)example.org Domain quota STORAGE 82408 51200000 0 user(a)example.org Domain quota MESSAGE 1078 - 0 user(a)example.org User quota STORAGE 0 209715200 0 user(a)example.org User quota MESSAGE 0 - 0 and see 1078 messages and 82408 Kb in domain quota 8. look at last user in list z(a)example.org Domain quota STORAGE 82408 51200000 0 z(a)example.org Domain quota MESSAGE 1078 - 0 z(a)example.org User quota STORAGE 82408 209715200 0 z(a)example.org User quota MESSAGE 1078 - 0 and see matching values.

2 2

[Dovecot] Possible sort optimization (?)
by Michael M Slusarz 25 Feb '13

25 Feb '13

Maybe this is just noise... but I can reproduce this fairly reliably. Mailbox with 21,000+ messages This query: a UID SORT RETURN (ALL COUNT) (DATE) UTF-8 SUBJECT "foo" is always about 10 percent slower than this split query (I've done this 4-5 times, and the numbers are similar): a UID SEARCH RETURN (SAVE) CHARSET UTF-8 SUBJECT "foo" b UID SORT RETURN (ALL COUNT) (DATE) UTF-8 UID $ (The particular query I used matched 5 messages out of the 21,000+) My not-very-scientific benchmarking process: 1.) Stop dovecot process 2.) Delete all dovecot index files for that mailbox 3.) Flush linux paging cache (sync && echo 3 > /proc/sys/vm/drop_caches) 4.) Restart dovecot 5.) Access dovecot via command-line (PREAUTH) 6.) SELECT mailbox 7.) Issue command(s) Could be a potential area for performance improvement or could simply be lazy benchmarking. michael

2 2

[Dovecot] Problem with the command hooks api
by Tony 24 Feb '13

24 Feb '13

I have been trying to use the command hook api in an experimental plugin I have written. The hook is registered using the command_hook_register function, and for most commands my hook functions get called once as expected. But when the client uses one of the "UID" commands (e.g. "UID FETCH" ) the hook functions are executed twice. I am using dovecot version 2.1.12. Am I correct in thinking this is a bug? If I am wrong and this is the intended behaviour, how should I detect whether the hook function call is the first or second for a client's command (in particular for the 'post command' hook)? Assuming it is a bug, I modified the code in the command_exec function to stop the second hook call, a patch for this is below. This appears to apply to later dovecot releases as well. I am happy for this code to be included in future releases of dovecot. Thanks, Tony. diff -ur -x .deps -x Makefile dovecot-2.1.12-orig/src/imap/imap-commands.c dovecot-2.1.12-mod/src/imap/imap-commands.c --- dovecot-2.1.12-orig/src/imap/imap-commands.c 2012-03-22 12:59:17.000000000 +0000 +++ dovecot-2.1.12-mod/src/imap/imap-commands.c 2013-02-20 17:15:50.000000000 +0000 @@ -38,7 +38,7 @@ { "FETCH", cmd_fetch, COMMAND_FLAG_USES_SEQS }, { "SEARCH", cmd_search, COMMAND_FLAG_USES_SEQS }, { "STORE", cmd_store, COMMAND_FLAG_USES_SEQS }, - { "UID", cmd_uid, 0 }, + { "UID", cmd_uid, COMMAND_FLAG_HOOKS_DELAY }, { "UID COPY", cmd_copy, COMMAND_FLAG_BREAKS_SEQS }, { "UID FETCH", cmd_fetch, COMMAND_FLAG_BREAKS_SEQS }, { "UID SEARCH", cmd_search, COMMAND_FLAG_BREAKS_SEQS }, @@ -142,12 +142,20 @@ { const struct command_hook *hook; bool ret; + bool exec_hooks = FALSE; - array_foreach(&command_hooks, hook) - hook->pre(cmd); + if ( !(cmd->cmd_flags & COMMAND_FLAG_HOOKS_DELAY)) { + exec_hooks = TRUE; + array_foreach(&command_hooks, hook) + hook->pre(cmd); + } ret = cmd->func(cmd); - array_foreach(&command_hooks, hook) - hook->post(cmd); + + if (exec_hooks != FALSE) + { + array_foreach(&command_hooks, hook) + hook->post(cmd); + } return ret; } diff -ur -x .deps -x Makefile dovecot-2.1.12-orig/src/imap/imap-commands.h dovecot-2.1.12-mod/src/imap/imap-commands.h --- dovecot-2.1.12-orig/src/imap/imap-commands.h 2011-12-13 11:35:28.000000000 +0000 +++ dovecot-2.1.12-mod/src/imap/imap-commands.h 2013-02-20 17:15:44.000000000 +0000 @@ -30,7 +30,9 @@ Dovecot internally returns it for all kinds of commands, but unfortunately RFC 5530 specifies it only for "delete something" operations. */ - COMMAND_FLAG_USE_NONEXISTENT = 0x10 + COMMAND_FLAG_USE_NONEXISTENT = 0x10, + /* Set when need to delay command hook function calls due to recursive command_exec() */ + COMMAND_FLAG_HOOKS_DELAY = 0x20 }; struct command {

2 1

[Dovecot] LMTP logging
by Peter Rindfuss 24 Feb '13

24 Feb '13

Hi, Is there a way (in Dovecot 2.1.14) to sent LMTP log entries and IMAP log entries to different files? I know I could achieve this with syslog-ng, but as LDA has a log file of its own, I am wondering if this is possible with LMTP as well. I apologize if I missed something in the wiki. Thanks, Peter

3 5

[Dovecot] Problem importing mail from maildir directory
by Thomas Koeller 24 Feb '13

24 Feb '13

Hi, I am trying to import mail from a maildir directory into dovecot using the 'doveadm import' command: ----------- bash-4.0$ doveadm -D import -u marion maildir:${HOME}/Mail '' ALL doveadm(marion): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(marion): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(marion): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(marion): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(marion): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Effective uid=10001, gid=10000, home=/home/marion doveadm(marion): Debug: quota: No quota setting - plugin disabled doveadm(marion): Debug: maildir++: root=/home/marion/Mail, index=, control=, inbox=/home/marion/Mail, alt= doveadm(marion): Debug: Effective uid=10001, gid=10000, home=/home/marion doveadm(marion): Debug: quota: No quota setting - plugin disabled doveadm(marion): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/marion doveadm(marion): Debug: fs: root=/home/marion/mail, index=, control=, inbox=/var/spool/mail/marion, alt= ----------- What I get is - no mails are imported - no error messages are output - nothing is written to the system log in other words, nothing happens at all. Any hints? tk

2 1

[Dovecot] make install fails on Solaris 10
by Henrik Johansson 24 Feb '13

24 Feb '13

Hello, I am trying to build dovecot-2.1.15 on Solaris 10 update 10 with Solaris Studio 12.3 and get this error: /bin/bash ../../libtool --tag=CC --mode=link /opt/SUNWspro/bin/cc -fast -xipo=2 -I/usr/sfw/include -I/usr/sfw/include -no-undefined -o doveadm doveadm-mail.o doveadm-mail-altmove.o doveadm-mail-expunge.o doveadm-mail-fetch.o doveadm-mail-import.o doveadm-mail-index.o doveadm-mail-iter.o doveadm-mail-mailbox.o doveadm-mail-mailbox-status.o doveadm-mail-copymove.o doveadm-mailbox-list-iter.o doveadm-mail-search.o doveadm-mail-server.o doveadm-print.o doveadm-settings.o doveadm-util.o server-connection.o doveadm.o doveadm-auth.o doveadm-director.o doveadm-dump.o doveadm-dump-dbox.o doveadm-dump-index.o doveadm-dump-log.o doveadm-dump-mailboxlog.o doveadm-dump-thread.o doveadm-instance.o doveadm-kick.o doveadm-log.o doveadm-master.o doveadm-mount.o doveadm-mutf7.o doveadm-penalty.o doveadm-print-flow.o doveadm-print-pager.o doveadm-print-tab.o doveadm-print-table.o doveadm-proxy.o doveadm-pw.o doveadm-sis.o doveadm-stats.o doveadm-who.o dsync/libdsync.a ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib-otp/libotp.a ../../src/lib-storage/libdovecot-storage.la -R/usr/sfw/lib -L/usr/sfw/lib -lssl -lcrypto -lsocket -lnsl -ldl ../../src/lib-dovecot/libdovecot.la -export-dynamic -lnsl -lsocket -lrt -lsendfile libtool: link: /opt/SUNWspro/bin/cc -fast -xipo=2 -I/usr/sfw/include -I/usr/sfw/include -o .libs/doveadm doveadm-mail.o doveadm-mail-altmove.o doveadm-mail-expunge.o doveadm-mail-fetch.o doveadm-mail-import.o doveadm-mail-index.o doveadm-mail-iter.o doveadm-mail-mailbox.o doveadm-mail-mailbox-status.o doveadm-mail-copymove.o doveadm-mailbox-list-iter.o doveadm-mail-search.o doveadm-mail-server.o doveadm-print.o doveadm-settings.o doveadm-util.o server-connection.o doveadm.o doveadm-auth.o doveadm-director.o doveadm-dump.o doveadm-dump-dbox.o doveadm-dump-index.o doveadm-dump-log.o doveadm-dump-mailboxlog.o doveadm-dump-thread.o doveadm-instance.o doveadm-kick.o doveadm-log.o doveadm-master.o doveadm-mount.o doveadm-mutf7.o doveadm-penalty.o doveadm-print-flow.o doveadm-print-pager.o doveadm-print-tab.o doveadm-print-table.o doveadm-proxy.o doveadm-pw.o doveadm-sis.o doveadm-stats.o doveadm-who.o dsync/libdsync.a ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib-otp/libotp.a ../../src/lib-storage/.libs/libdovecot-storage.so -L/usr/sfw/lib /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so -lssl -lcrypto -ldl ../../src/lib-dovecot/.libs/libdovecot.so -lnsl -lsocket -lrt -lsendfile -R/opt/HNKSdovecot/lib/dovecot -R/usr/sfw/lib ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file $XBKaiwbjOCHRV5w.array_append_array_i..L93 dsync/libdsync.a(dsync-brain.o) $XBKaiwbjOCHRV5w.array_append_array_i..L94 dsync/libdsync.a(dsync-brain.o) $XBKaiwbjOCHRV5w.array_append_array_i..L95 dsync/libdsync.a(dsync-brain.o) ld: fatal: symbol referencing errors. No output written to .libs/doveadm *** Error code 2 make: Fatal error: Command failed for target `doveadm' Current working directory /home/henrikj/Build/dovecot-2.1.15/src/doveadm *** Error code 1 Any suggestions? Thanks Henrik

1 0

Re: [Dovecot] problems with imaps
by Joseph Tam 23 Feb '13

23 Feb '13

On 2013-02-22, Matthias Leopold wrote: > with thunderbird 10.0.12 i can't connect to port 993 and get errors in > the logs like > > TLS: SSL_read() failed: error:14094412:SSL > routines:SSL3_READ_BYTES:sslv3 alert bad certificate > > (certificate generated by dovecot mkcert.sh) I haven't come across any problems with our use of self-signed certificates, but I run the latest 2.1.x dovecot so maybe there's some SSL changes between our version and your's. The fact that the same certificate works for other clients, and also for TLS on Thunderbird seem to suggest Thunderbird is fumbling it. But maybe you can try the command diagnostic from the command line "openssl s_client -connect yourserver:993 ..." or use one of the online certificate checkers to get some useful diagnostics. > TLS: SSL_read() failed: error:14094418:SSL > routines:SSL3_READ_BYTES:tlsv1 alert unknown ca This error entry pops up in my logs once in a while. I think the error might be misleading since the error message happen in the middle of a long sequence of successful connections. Also check that the client is actually using the right security mode (not TLS or clear), perhaps by doing a network snoop. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] doveadm user error messages
by Thomas Leuxner 22 Feb '13

22 Feb '13

I use 'doveadm user' in some scripts and the exit codes are fine for my purposes. During tests it transpired that Dovecot 2.1 would give an error message when querying for non-existent users. Dovecot 2.2 just exits without a word. Not sure this is intended behaviour: $ doveadm user foo $ echo $? 67 $ id foo id: foo: No such user Regards Thomas

2 2

[Dovecot] assert in mail-transaction-log-file.c
by Anton Yuzhaninov 22 Feb '13

22 Feb '13

I setup new server with dovecot 2.1.12 and mboxes from backup (moboxes was used with dovecot 1.1.6). OS: FreeBSD 8.3-STABLE, amd64. All index files from dovecot 1.1.6 has been deleted. Some times dovecot processes aborted. E. g. Jan 25 03:01:52 ost dovecot: lda(user(a)example.ru): Panic: file mail-transaction-log-file.c: line 1694 (mail_transaction_log_file_map): assertion failed: (file->buffer != NULL) (gdb) bt #0 0x0000000800bd610c in kill () from /lib/libc.so.7 #1 0x0000000800bd4f0b in abort () from /lib/libc.so.7 #2 0x000000080099b339 in default_fatal_finish (type=72898, status=0) at failures.c:191 #3 0x000000080099b3be in i_syslog_fatal_handler (ctx=<value optimized out>, format=<value optimized out>, args=<value optimized out>) at failures.c:413 #4 0x000000080099a8a3 in i_panic (format=<value optimized out>) at failures.c:263 #5 0x000000080081bdb6 in mail_transaction_log_file_map (file=0x801670e00, start_offset=40, end_offset=18446744073709551615) at mail-transaction-log-file.c:1694 #6 0x000000080081da41 in mail_transaction_log_view_set (view=0x801654a80, min_file_seq=1, min_file_offset=40, max_file_seq=2, max_file_offset=18446744073709551615, reset_r=0x7fffffffbedf) at mail-transaction-log-view.c:228 #7 0x000000080081519d in mail_index_sync_map (_map=0x801670b08, type=MAIL_INDEX_SYNC_HANDLER_HEAD, force=false) at mail-index-sync-update.c:950 #8 0x0000000800805be0 in mail_index_map (index=0x801670a80, type=MAIL_INDEX_SYNC_HANDLER_HEAD) at mail-index-map-read.c:415 #9 0x0000000800800bde in mail_index_refresh (index=<value optimized out>) at mail-index.c:735 #10 0x00000008007b2344 in mbox_sync_header_refresh (mbox=0x801680840) at mbox-sync.c:1652 #11 0x00000008007b24e2 in mbox_sync_has_changed_full (mbox=0x801680840, leave_dirty=true, empty_r=0x7fffffffe2e8) at mbox-sync.c:1729 #12 0x00000008007ae1a7 in mbox_save_begin (_ctx=0x80161a500, input=0x801669660) at mbox-save.c:296 #13 0x00000008018025ae in notify_save_begin (ctx=0x80161a500, input=0x801669660) at notify-storage.c:130 #14 0x00000008014261fd in quota_save_begin (ctx=0x80161a500, input=0x801669660) at quota-storage.c:251 #15 0x00000008007cfecc in mailbox_save_begin (ctx=0x7fffffffe3d0, input=0x801669660) at mail-storage.c:1652 #16 0x00000008007ca48d in mail_storage_copy (ctx=0x80161a500, mail=0x801637040) at mail-copy.c:68 #17 0x000000080180269d in notify_copy (ctx=0x80161a500, mail=0x801637040) at notify-storage.c:105 #18 0x00000008014262f6 in quota_copy (ctx=0x80161a500, mail=0x801637040) at quota-storage.c:200 #19 0x00000008007cfe04 in mailbox_copy (_ctx=<value optimized out>, mail=0x801637040) at mail-storage.c:1721 #20 0x0000000801b4b706 in act_store_execute (action=<value optimized out>, aenv=0x8016a3070, tr_context=<value optimized out>) at sieve-actions.c:551 #21 0x0000000801b428de in sieve_result_execute (result=0x8016a3040, keep=0x0) at sieve-result.c:1117 #22 0x0000000801b52d5a in sieve_execute (sbin=<value optimized out>, msgdata=<value optimized out>, senv=<value optimized out>, ehandler=<value optimized out>, flags=<value optimized out>, keep=0x0) at sieve.c:508 #23 0x0000000801a0aec6 in lda_sieve_deliver_mail (mdctx=0x7fffffffe970, storage_r=0x7fffffffe8e8) at lda-sieve-plugin.c:424 #24 0x0000000800651735 in mail_deliver (ctx=0x7fffffffe970, storage_r=0x7fffffffe8e8) at mail-deliver.c:390 #25 0x0000000000402ffa in main (argc=6, argv=0x7fffffffea78) at main.c:434 (gdb) f 5 (gdb) p *file $1 = {log = 0x8016463d0, next = 0x0, refcount = 5, filepath = 0x801620420 "(in-memory index).log", fd = -1, st_ino = 13919248, st_dev = 109, last_mtime = 1359082912, last_size = 0, hdr = {major_version = 1 '\001', minor_version = 2 '\002', hdr_size = 40, indexid = 1359082912, file_seq = 2, prev_file_seq = 0, prev_file_offset = 0, create_stamp = 1359082912, initial_modseq = 0, compat_flags = 1 '\001', unused = "\000\000", unused2 = 0}, mmap_buffer = {data = 0x0, used = 0, priv = {0x0, 0x0, 0x0, 0x0, 0x0}}, buffer = 0x0, buffer_offset = 0, mmap_base = 0x0, mmap_size = 0, sync_offset = 40, sync_highest_modseq = 0, saved_tail_offset = 0, max_tail_offset = 0, saved_tail_sync_offset = 0, index_deleted_offset = 0, index_undeleted_offset = 0, modseq_cache = {{offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, { offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, { offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}}, file_lock = 0x0, lock_created = 0, locked = 0, locked_sync_offset_updated = 0, corrupted = 0} Also same aborts can happen in imap processes: Jan 24 16:35:04 ost dovecot: imap(user(a)example.ru): Panic: file mail-transaction-log-file.c: line 1694 (mail_transaction_log_file_map): assertion failed: (file->buffer != NULL) -- Anton Yuzhaninov

2 2

[Dovecot] Ubuntu-12.04 packages for latest Dovecot release
by 3.listas＠adminlinux.com.br 22 Feb '13

22 Feb '13

Hi, Does anyone here know a trusted package repository for Ubuntu LTS which has always the latest version of Dovecot? Thanks ! -- Thiago Henrique adminlinux.com.br

3 4

[Dovecot] problems with imaps
by Matthias Leopold 22 Feb '13

22 Feb '13

hi, i'm using dovecot 1.2.15 with self signed certificates using starttls on ports 110/143 works ok with thunderbird 10.0.12 (and i guess most other clients) using imaps on port 993 works with outlook 2002. with thunderbird 10.0.12 i can't connect to port 993 and get errors in the logs like TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate (certificate generated by dovecot mkcert.sh) or TLS: SSL_read() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (certificate generated by own openssl cmdline) i know that a lot of information is missing, but since this looks like a more general problem i dare to ask for help before posting more config details thx matthias

3 3

[Dovecot] High CPU Usage with 2.2
by Odhiambo Washington 22 Feb '13

22 Feb '13

I am seeing a rather high CPU usage with 2.2 now: last pid: 30725; load averages: 4.58, 27.36, 25.49 up 0+15:36:12 16:02:53 103 processes: 4 running, 98 sleeping, 1 zombie CPU: 34.5% user, 0.0% nice, 65.4% system, 0.2% interrupt, 0.0% idle Mem: 602M Active, 1767M Inact, 254M Wired, 6116K Cache, 112M Buf, 490M Free Swap: 5900M Total, 5900M Free PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 30569 mailnull 1 112 0 4956K 2784K RUN 0 1:27 68.65% pop3 30704 mailnull 1 108 0 4956K 2876K CPU0 0 0:10 57.37% pop3 30712 mailnull 1 106 0 4944K 2780K RUN 1 0:07 45.26% pop3 30636 root 1 44 0 3696K 1784K CPU1 1 0:00 0.10% top My entire configuration - http://pastebin.com/XGZb5kKN -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler.

2 3

[Dovecot] pop3_lock_session and mdbox format
by Ewald Dieterich 22 Feb '13

22 Feb '13

Setting "pop3_lock_session = yes" in the configuration has no effect when I use Dovecot 2.1.13 with the mdbox format. A second POP3 connection to the same mailbox is still allowed. Grepping for MAILBOX_FLAG_KEEP_LOCKED in the source code shows that POP3 session locking only works for the Maildir and mbox formats. Is it possible to enable it for the mdbox format, as well? Ewald

2 1

[Dovecot] environment for dovecot auth
by Emmanuel Dreyfus 22 Feb '13

22 Feb '13

Hi Is there a way to set environment variables for the auth process? All I found for now is to replace it by a shell script that sets variables and then launch the real auth, but I wonder if there is a better way. -- Emmanuel Dreyfus manu(a)netbsd.org

2 1

[Dovecot] [PATCH] support for NetBSD 6.0 libquota
by manu＠netbsd.org 22 Feb '13

22 Feb '13

Hi NetBSD 6.0 introduced a new improved quota subsystem and an unified API (libquota) to handle the new and old quota implementation. dovecot is unable to use the new quota implementation right now, and will even fail to build with the old quota API on NetBSD 6.0: Here are dovecot patches to support NetBSD libquota: http://ftp.espci.fr/shadow/manu/dovecot-libquota.tgz -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu(a)netbsd.org

2 1

[Dovecot] Trouble with expire plugin
by Gedalya 22 Feb '13

22 Feb '13

Hi all, Maybe someone here can help me with this problem, not sure if this is a configuration issue or an actual bug. my daily cron job says: #!/bin/sh doveadm expunge -A mailbox Junk savedbefore 14d doveadm expunge -A mailbox Trash savedbefore 30d doveadm expunge -A mailbox "Trash.*" savedbefore 30d But it hasn't been deleting any messages in a long time, I'm not sure when it stopped working. I've also noticed that it does delete matching rows in the expires database (expire_stamp < savedbefore days). Furthermore, rows are deleted even when running doveadm search, and regardless of the mailbox column, i.e. even when != the mailbox name being searched! Anyway why should doveadm search delete rows in the expires database? The database is mysql. ---- dovecot -n ---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-0.bpo.3-amd64 x86_64 Debian 6.0.6 auth_default_realm = xxxxxxx.com auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain default_client_limit = 8096 dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no mail_gid = vmail mail_plugins = quota expire listescape mail_uid = vmail managesieve_sieve_capability = fileinto envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_backend = pipe antispam_pipe_program = /usr/bin/ssh antispam_pipe_program_args = -l;spamd;-i;/etc/dovecot/sareport.key;mx1.xxxxxxx.com antispam_pipe_program_notspam_arg = revoke antispam_pipe_program_spam_arg = report antispam_pipe_tmpdir = /tmp antispam_spam = Junk antispam_trash_pattern_ignorecase = trash;Deleted * autocreate = Trash autocreate2 = Junk autocreate3 = Drafts autocreate4 = Sent autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Sent expire = Trash expire2 = Trash.* expire3 = Junk expire_dict = proxy::expire quota = dict:user::proxy::quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+250M quota_rule3 = Junk:ignore quota_warning = storage=99%% quota-warning 99 %u quota_warning2 = storage=95%% quota-warning 95 %u sieve = ~/.dovecot.sieve sieve_before = /var/local/lib/dovecot/sieve/global/fileinto-spam.sieve sieve_dir = ~/sieve sieve_extensions = -vacation -body -reject -enotify -environment -virustest -spamtest sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 10K sieve_quota_max_scripts = 10 } postmaster_address = postmaster(a)xxxxxxx.com protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 20480 unix_listener auth-userdb { group = root mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 10240 } service lmtp { inet_listener lmtp { address = 0.0.0.0 port = 7025 } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 0 vsz_limit = 128 M } service pop3-login { process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service pop3 { process_limit = 4096 } service quota-warning { executable = script /usr/local/bin/quota-warning unix_listener quota-warning { user = vmail } user = vmail } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota expire listescape sieve } protocol lda { mail_plugins = quota expire listescape sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = quota expire listescape autocreate imap_quota antispam ssl_cert = </etc/dovecot/imap.xxxxxxx.com.crt ssl_key = </etc/dovecot/imap.xxxxxxx.com.key } protocol sieve { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = quota expire listescape pop3_fast_size_lookups = yes pop3_lock_session = no pop3_no_flag_updates = yes pop3_reuse_xuidl = yes pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv ssl_cert = </etc/dovecot/pop.xxxxxxx.com.crt ssl_key = </etc/dovecot/pop.xxxxxxx.com.key } in dovecot-sql.conf.ext I have: iterate_query = SELECT userid as user, domain FROM email where deleted=0 ---- dovecot-dict-sql.conf.ext ---- connect = host=localhost dbname=email user=email map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } }

3 5

[Dovecot] patch to fix binary attachment indexing
by Mike Abbott 22 Feb '13

22 Feb '13

FTS indexing of binary attachments is broken in dovecot-2.1.15: the binary data which fts_build_mail_real() sends to fts_build_body_block() (which sends it to fts_backend_update_build_more()) is garbled. This patch ungarbles it but I’m not positive it’s the best fix. --- dovecot-2.1.15/src/plugins/fts/fts-build-mail.c 2012-11-27 02:07:27.000000000 -0600 +++ dovecot/src/plugins/fts/fts-build-mail.c 2013-02-21 19:48:15.000000000 -0600 @@ -178,7 +178,8 @@ *binary_body_r = TRUE; key.type = FTS_BACKEND_BUILD_KEY_BODY_PART_BINARY; } - if (ctx->body_parser == NULL) + if (ctx->body_parser == NULL && + key.type != FTS_BACKEND_BUILD_KEY_BODY_PART_BINARY) ctx->body_parser = fts_parser_text_init(); key.body_content_type = content_type; key.body_content_disposition = ctx->content_disposition;

2 2

[Dovecot] error running indexer-worker as non-root user
by Mike Abbott 22 Feb '13

22 Feb '13

Using dovecot-2.1.15 if I run indexer-worker as a non-root user it fails with an error: Feb 11 13:06:47 indexer-worker: Error: user foobar: Error reading configuration: net_connect_unix(/var/run/dovecot/config) failed: Permission denied This is what I added to 10-master.conf: service indexer-worker { user = _dovecot } The wiki says it should work: <http://wiki2.dovecot.org/Services> indexer-worker [...] • user=root, but the privileges are (temporarily) dropped to the mail user's privileges after userdb lookup. If only a single UID is used, user can be set to the mail UID for higher security, because the process can't gain root privileges anymore. And the code says it should work: <src/indexer/indexer-worker.c> static void drop_privileges(void) { [...] if (set.uid != 0) { /* open config connection before dropping privileges */ Of course the config socket is locked down as it should be: srw------- 1 root daemon 0 Feb 11 13:06 /var/run/dovecot/config Here's where the error comes from: 2 libdovecot.0.dylib 0x00000001019612a0 master_service_settings_read + 2168 3 libdovecot.0.dylib 0x000000010196193e master_service_settings_cache_read + 294 4 libdovecot-storage.0.dylib 0x000000010185d9ad mail_storage_service_read_settings + 510 5 libdovecot-storage.0.dylib 0x000000010185da5d mail_storage_service_lookup + 96 6 libdovecot-storage.0.dylib 0x000000010185f06a mail_storage_service_lookup_next + 42 7 indexer-worker 0x00000001018101a1 master_connection_input + 335 8 libdovecot.0.dylib 0x0000000101972455 io_loop_call_io + 46 9 libdovecot.0.dylib 0x000000010197343e io_loop_handler_run + 214 10 libdovecot.0.dylib 0x0000000101972600 io_loop_run + 77 11 libdovecot.0.dylib 0x00000001019601ef master_service_run + 24 12 indexer-worker 0x000000010180ff17 main + 490 13 libdyld.dylib 0x00007fff89d2f7b5 start + 1 Is this a bug or am I configuring it incorrectly? Thanks.

2 2

[Dovecot] Userdb passwd and 'nologin' users
by Ben Morrow 22 Feb '13

22 Feb '13

I am running Dovecot with system users (userdb passwd), but some of those users don't have shell accounts on the IMAP server so their shell on that machine is set to /usr/sbin/nologin. Currently I am using maildirs and this is not a problem, but I am in the process of switching to dbox which means I will need a cronjob running 'doveadm purge -A'. During testing I found that those users with a 'nologin' shell are not included in the list returned by the userdb iterator, and that the iterator doesn't honour the first/last_valid_uid settings. This inconsistency seems undesirable, so the attached patch - makes lookup perform the same checks as iteration, - makes the 'nologin' check configurable, - adds a new optional check that the user owns their home directory. The last check was the one performed by qmail, and seems to me to be a more reliable 'is this a real user' check than a nologin shell. If this patch is applied, the release notes for the next release should probably mention that system users with a 'nologin' shell will no longer be allowed to log in to IMAP until the 'auth_check_nologin' setting is changed from true to false. Also, there seem to be two first/last_valid_uid settings: first_valid_uid itself, which is honoured by the storage subsystem, and auth_first_valid_uid, which is honoured by the 'passwd' userdb. Is this intentional? Ben

3 5

[Dovecot] "Header is huge" in fts-solr
by Valery V. Sedletski 22 Feb '13

22 Feb '13

Hi, Timo and all! I am trying to index mail in a test mailbox using fts_solr plugin for full-text search. On most mailboxes, it works fine, but on some big messages I get warnings like the following, and then I get an Out of memory error from Solr, then the indexer-worker process (or doveadm) crashes with "assertion failed" error and the backtrace: ========================================================== doveadm(valerius(a)test.afterlogic.com): Warning: fts-solr(valerius(a)test.afterlogic.com): Mailbox gmail.com UID=48 header size is huge doveadm(valerius(a)test.afterlogic.com): Warning: fts-solr(valerius(a)test.afterlogic.com): Mailbox gmail.com UID=49 header size is huge doveadm(valerius(a)test.afterlogic.com): Panic: file ../../../../src/plugins/fts-solr/solr-connection.c: line 548 (solr_connection_post_more): assertion failed: (maxfd >= 0) doveadm(valerius(a)test.afterlogic.com): Error: Raw backtrace: /usr/mailsuite/lib/dovecot/libdovecot.so.0(+0x58f04) [0x7fe8a908af04] -> /usr/mailsuite/lib/dovecot/libdovecot.so.0(default_error_handler+0) [0x7fe8a908af93] -> /usr/mailsuite/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fe8a908b274] -> /usr/mailsuite/lib/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x2d2) [0x7fe8a75fe973] -> /usr/mailsuite/lib/dovecot/lib21_fts_solr_plugin.so(+0x4d03) [0x7fe8a75f9d03] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(fts_backend_update_build_more+0x77) [0x7fe8a7c1d401] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(+0x7fe2) [0x7fe8a7c1dfe2] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(+0x80d5) [0x7fe8a7c1e0d5] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(+0x89e4) [0x7fe8a7c1e9e4] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(fts_build_mail+0x2b) [0x7fe8a7c1ebf5] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(+0xe7cf) [0x7fe8a7c247cf] -> /usr/mailsuite/lib/dovecot/lib20_fts_plugin.so(+0xe8ba) [0x7fe8a7c248ba] -> /usr/mailsuite/lib/dovecot/libdovecot-storage.so.0(mail_precache+0x25) [0x7fe8a9379bc9] -> /usr/mailsuite/bin/doveadm() [0x4139de] -> /usr/mailsuite/bin/doveadm() [0x413c17] -> /usr/mailsuite/bin/doveadm() [0x413f18] -> /usr/mailsuite/bin/doveadm() [0x40fea6] -> /usr/mailsuite/bin/doveadm(doveadm_mail_single_user+0x154) [0x410069] -> /usr/mailsuite/bin/doveadm() [0x41090a] -> /usr/mailsuite/bin/doveadm(doveadm_mail_try_run+0xac) [0x410b81] -> /usr/mailsuite/bin/doveadm(main+0x28d) [0x41a92c] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fe8a8cc9ead] -> /usr/mailsuite/bin/doveadm() [0x40f499] ========================================================== And Solr log, at the same time: ========================================================== 2013-02-01 18:03:53.342:INFO::Logging to STDERR via org.mortbay.log.StdErrLog 2013-02-01 18:03:53.425:INFO::jetty-6.1-SNAPSHOT 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: JNDI not configured for solr (NoInitialContextEx) 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: solr home defaulted to 'solr/' (could not find system property or JNDI) 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader INFO: new SolrResourceLoader for deduced Solr Home: 'solr/' 01.02.2013 18:03:53 org.apache.solr.servlet.SolrDispatchFilter init INFO: SolrDispatchFilter.init() 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: JNDI not configured for solr (NoInitialContextEx) 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: solr home defaulted to 'solr/' (could not find system property or JNDI) 01.02.2013 18:03:53 org.apache.solr.core.CoreContainerSInitializer initialize INFO: looking for solr.xml: /home/valerius/apache-solr-3.6.2/example/solr/solr.xml 01.02.2013 18:03:53 org.apache.solr.core.CoreContainer load INFO: Loading CoreContainer using Solr Home: 'solr/' 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader INFO: new SolrResourceLoader for directory: 'solr/' 01.02.2013 18:03:53 org.apache.solr.core.CoreContainer create INFO: Creating SolrCore '' using instanceDir: solr/. 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader INFO: new SolrResourceLoader for directory: 'solr/./' 01.02.2013 18:03:53 org.apache.solr.core.SolrConfig initLibs INFO: Adding specified lib dirs to ClassLoader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/dist/apache-solr-cell-3.6.2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/poi-ooxml-3.8-beta4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/jdom-1.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/bcprov-jdk15-1.45.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/xmlbeans-2.3.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/boilerpipe-1.1.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/xercesImpl-2.8.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/tika-core-1.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/metadata-extractor-2.4.0-beta-1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/apache-mime4j-core-0.7.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/fontbox-1.6.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/pdfbox-1.6.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/dom4j-1.6.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/asm-3.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/jempbox-1.6.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/poi-ooxml-schemas-3.8-beta4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/rome-0.9.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/bcmail-jdk15-1.45.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/tagsoup-1.2.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/icu4j-4.8.1.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/poi-3.8-beta4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/tika-parsers-1.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/poi-scratchpad-3.8-beta4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/commons-compress-1.3.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/xml-apis-1.0.b2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/extraction/lib/apache-mime4j-dom-0.7.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/dist/apache-solr-clustering-3.6.2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/jackson-mapper-asl-1.7.4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/mahout-collections-0.3.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/mahout-math-0.3.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/hppc-0.3.4-jdk15.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/carrot2-core-3.5.0.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/jackson-core-asl-1.7.4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/clustering/lib/simple-xml-2.4.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/dist/apache-solr-dataimporthandler-3.6.2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/dataimporthandler/lib/mail-1.4.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/dataimporthandler/lib/activation-1.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/dist/apache-solr-langid-3.6.2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/langid/lib/langdetect-1.1-20120112.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/langid/lib/jsonic-1.2.7.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/dist/apache-solr-velocity-3.6.2.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/velocity/lib/velocity-1.6.4.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/velocity/lib/commons-collections-3.2.1.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/velocity/lib/commons-beanutils-1.7.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrResourceLoader replaceClassLoader INFO: Adding 'file:/home/valerius/apache-solr-3.6.2/contrib/velocity/lib/velocity-tools-2.0.jar' to classloader 01.02.2013 18:03:53 org.apache.solr.core.SolrConfig INFO: Using Lucene MatchVersion: LUCENE_36 01.02.2013 18:03:54 org.apache.solr.core.SolrConfig INFO: Loaded SolrConfig: solrconfig.xml 01.02.2013 18:03:54 org.apache.solr.schema.IndexSchema readSchema INFO: Reading Solr Schema 01.02.2013 18:03:54 org.apache.solr.schema.IndexSchema readSchema INFO: Schema name=dovecot 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created string: org.apache.solr.schema.StrField 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created long: org.apache.solr.schema.LongField 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created slong: org.apache.solr.schema.SortableLongField 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created float: org.apache.solr.schema.FloatField 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created boolean: org.apache.solr.schema.BoolField 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.WhitespaceTokenizerFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.SynonymFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.StopFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.WordDelimiterFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.LowerCaseFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.SnowballPorterFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.RemoveDuplicatesTokenFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.WhitespaceTokenizerFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.StopFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.WordDelimiterFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.LowerCaseFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.SnowballPorterFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.NGramFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created : org.apache.solr.analysis.RemoveDuplicatesTokenFilterFactory 01.02.2013 18:03:54 org.apache.solr.util.plugin.AbstractPluginLoader load INFO: created text: org.apache.solr.schema.TextField 01.02.2013 18:03:54 org.apache.solr.schema.IndexSchema readSchema INFO: default search field in schema is body 01.02.2013 18:03:54 org.apache.solr.schema.IndexSchema readSchema INFO: query parser default operator is AND 01.02.2013 18:03:54 org.apache.solr.schema.IndexSchema readSchema INFO: unique key field: id 01.02.2013 18:03:54 org.apache.solr.core.SolrCore INFO: [] Opening new SolrCore at solr/./, dataDir=solr/./data/ 01.02.2013 18:03:54 org.apache.solr.core.JmxMonitoredMap INFO: JMX monitoring is enabled. Adding Solr mbeans to JMX Server: com.sun.jmx.mbeanserver.JmxMBeanServer@27b4c1d7 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initListeners INFO: [] Added SolrEventListener for newSearcher: org.apache.solr.core.QuerySenderListener{queries=[]} 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initListeners INFO: [] Added SolrEventListener for firstSearcher: org.apache.solr.core.QuerySenderListener{queries=[{q=static firstSearcher warming in solrconfig.xml}]} 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initWriters INFO: created json: solr.JSONResponseWriter 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initWriters INFO: adding lazy queryResponseWriter: solr.VelocityResponseWriter 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initWriters INFO: created velocity: solr.VelocityResponseWriter 01.02.2013 18:03:54 org.apache.solr.core.SolrCore initWriters INFO: created xslt: solr.XSLTResponseWriter 01.02.2013 18:03:54 org.apache.solr.response.XSLTResponseWriter init INFO: xsltCacheLifetimeSeconds=5 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /select: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /browse: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update: solr.XmlUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update/javabin: solr.BinaryUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.CSVRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update/csv: solr.CSVRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.JsonUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update/json: solr.JsonUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.extraction.ExtractingRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update/extract: solr.extraction.ExtractingRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.XsltUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /update/xslt: solr.XsltUpdateRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.FieldAnalysisRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /analysis/field: solr.FieldAnalysisRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.DocumentAnalysisRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /analysis/document: solr.DocumentAnalysisRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /admin/: solr.admin.AdminHandlers 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /admin/ping: solr.PingRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /debug/dump: solr.DumpRequestHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /spell: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /tvrh: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /terms: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: adding lazy requestHandler: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.core.RequestHandlers initHandlersFromConfig INFO: created /elevate: solr.SearchHandler 01.02.2013 18:03:54 org.apache.solr.search.SolrIndexSearcher INFO: Opening Searcher@5c29ea31 main 01.02.2013 18:03:54 org.apache.solr.update.CommitTracker INFO: commitTracker AutoCommit: disabled 01.02.2013 18:03:54 org.apache.solr.handler.component.SpellCheckComponent inform INFO: Initializing spell checkers 01.02.2013 18:03:54 org.apache.solr.handler.component.SpellCheckComponent inform INFO: No queryConverter defined, using default converter 01.02.2013 18:03:54 org.apache.solr.handler.component.QueryElevationComponent inform INFO: Loading QueryElevation from: /home/valerius/apache-solr-3.6.2/example/solr/./conf/elevate.xml 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.QueryComponent@4d16318b 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.FacetComponent@6c0ec436 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.MoreLikeThisComponent@3d73eca6 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.HighlightComponent@5b5a5cf 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.StatsComponent@5898bbf6 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding debug component:org.apache.solr.handler.component.DebugComponent@135c40eb 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting socketTimeout to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting urlScheme to: http:// 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting connTimeout to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maxConnectionsPerHost to: 20 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting corePoolSize to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maximumPoolSize to: 2147483647 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maxThreadIdleTime to: 5 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting sizeOfQueue to: -1 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting fairnessPolicy to: false 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.QueryComponent@4d16318b 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.FacetComponent@6c0ec436 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.MoreLikeThisComponent@3d73eca6 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.HighlightComponent@5b5a5cf 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.StatsComponent@5898bbf6 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding component:org.apache.solr.handler.component.SpellCheckComponent@18f2225f 01.02.2013 18:03:54 org.apache.solr.handler.component.SearchHandler inform INFO: Adding debug component:org.apache.solr.handler.component.DebugComponent@135c40eb 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting socketTimeout to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting urlScheme to: http:// 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting connTimeout to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maxConnectionsPerHost to: 20 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting corePoolSize to: 0 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maximumPoolSize to: 2147483647 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting maxThreadIdleTime to: 5 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting sizeOfQueue to: -1 01.02.2013 18:03:54 org.apache.solr.handler.component.HttpShardHandlerFactory getParameter INFO: Setting fairnessPolicy to: false 01.02.2013 18:03:54 org.apache.solr.core.QuerySenderListener newSearcher INFO: QuerySenderListener sending requests to Searcher@5c29ea31 main 01.02.2013 18:03:54 org.apache.solr.core.CoreContainer register INFO: registering core: 01.02.2013 18:03:54 org.apache.solr.servlet.SolrDispatchFilter init INFO: user.dir=/home/valerius/apache-solr-3.6.2/example 01.02.2013 18:03:54 org.apache.solr.servlet.SolrDispatchFilter init INFO: SolrDispatchFilter.init() done 01.02.2013 18:03:54 org.apache.solr.common.SolrException log SEVERE: org.apache.solr.common.SolrException: undefined field text at org.apache.solr.schema.IndexSchema.getDynamicFieldType(IndexSchema.java:1330) at org.apache.solr.schema.IndexSchemaSSolrQueryAnalyzer.getAnalyzer(IndexSchema.java:408) at org.apache.solr.schema.IndexSchemaSSolrIndexAnalyzer.reusableTokenStream(IndexSchema.java:383) at org.apache.lucene.queryParser.QueryParser.getFieldQuery(QueryParser.java:574) at org.apache.solr.search.SolrQueryParser.getFieldQuery(SolrQueryParser.java:206) at org.apache.lucene.queryParser.QueryParser.Term(QueryParser.java:1436) at org.apache.lucene.queryParser.QueryParser.Clause(QueryParser.java:1319) at org.apache.lucene.queryParser.QueryParser.Query(QueryParser.java:1245) at org.apache.lucene.queryParser.QueryParser.TopLevelQuery(QueryParser.java:1234) at org.apache.lucene.queryParser.QueryParser.parse(QueryParser.java:206) at org.apache.solr.search.LuceneQParser.parse(LuceneQParserPlugin.java:79) at org.apache.solr.search.QParser.getQuery(QParser.java:143) at org.apache.solr.handler.component.QueryComponent.prepare(QueryComponent.java:105) at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:165) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.core.QuerySenderListener.newSearcher(QuerySenderListener.java:59) at org.apache.solr.core.SolrCoreS3.call(SolrCore.java:1182) at java.util.concurrent.FutureTaskSSync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutorSWorker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:679) 01.02.2013 18:03:54 org.apache.solr.core.SolrCore execute INFO: [] webapp=null path=null params={event=firstSearcher&q=static+firstSearcher+warming+in+solrconfig.xml} status=400 QTime=22 01.02.2013 18:03:54 org.apache.solr.core.QuerySenderListener newSearcher INFO: QuerySenderListener done. 01.02.2013 18:03:54 org.apache.solr.handler.component.SpellCheckComponentSSpellCheckerListener newSearcher INFO: Loading spell index for spellchecker: default 01.02.2013 18:03:54 org.apache.solr.core.SolrCore registerSearcher INFO: [] Registered new searcher Searcher@5c29ea31 main 01.02.2013 18:03:54 org.apache.solr.servlet.SolrServlet init INFO: SolrServlet.init() 01.02.2013 18:03:54 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: JNDI not configured for solr (NoInitialContextEx) 01.02.2013 18:03:54 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: solr home defaulted to 'solr/' (could not find system property or JNDI) 01.02.2013 18:03:54 org.apache.solr.servlet.SolrServlet init INFO: SolrServlet.init() done 01.02.2013 18:03:54 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: JNDI not configured for solr (NoInitialContextEx) 01.02.2013 18:03:54 org.apache.solr.core.SolrResourceLoader locateSolrHome INFO: solr home defaulted to 'solr/' (could not find system property or JNDI) 01.02.2013 18:03:54 org.apache.solr.servlet.SolrUpdateServlet init INFO: SolrUpdateServlet.init() done 2013-02-01 18:03:54.449:INFO::Started SocketConnector@0.0.0.0:8983 01.02.2013 18:04:40 org.apache.solr.core.SolrDeletionPolicy onInit INFO: SolrDeletionPolicy.onInit: commits:num=1 commit{dir=/home/valerius/apache-solr-3.6.2/example/solr/data/index,segFN=segments_1,version=1359741540635,generation=1,filenames=[segments_1] 01.02.2013 18:04:40 org.apache.solr.core.SolrDeletionPolicy updateCommits INFO: newest commit = 1359741540635 01.02.2013 18:05:05 org.apache.solr.update.processor.LogUpdateProcessor finish INFO: {add=[1/5cc6513b4dc6de5093660000b304ded5/valerius(a)test.afterlogic.com, 48/5cc6513b4dc6de5093660000b304ded5/valerius(a)test.afterlogic.com]} 0 24629 01.02.2013 18:05:05 org.apache.solr.common.SolrException log SEVERE: java.lang.OutOfMemoryError: Java heap space at org.apache.lucene.index.FreqProxTermsWriterPerFieldSFreqProxPostingsArray.(FreqProxTermsWriterPerField.java:193) at org.apache.lucene.index.FreqProxTermsWriterPerFieldSFreqProxPostingsArray.newInstance(FreqProxTermsWriterPerField.java:204) at org.apache.lucene.index.ParallelPostingsArray.grow(ParallelPostingsArray.java:48) at org.apache.lucene.index.TermsHashPerField.growParallelPostingsArray(TermsHashPerField.java:157) at org.apache.lucene.index.TermsHashPerField.add(TermsHashPerField.java:460) at org.apache.lucene.index.DocInverterPerField.processFields(DocInverterPerField.java:189) at org.apache.lucene.index.DocFieldProcessorPerThread.processDocument(DocFieldProcessorPerThread.java:278) at org.apache.lucene.index.DocumentsWriter.updateDocument(DocumentsWriter.java:766) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:2328) at org.apache.lucene.index.IndexWriter.updateDocument(IndexWriter.java:2300) at org.apache.solr.update.DirectUpdateHandler2.addDoc(DirectUpdateHandler2.java:240) at org.apache.solr.update.processor.RunUpdateProcessor.processAdd(RunUpdateProcessorFactory.java:61) at org.apache.solr.update.processor.LogUpdateProcessor.processAdd(LogUpdateProcessorFactory.java:115) at org.apache.solr.handler.XMLLoader.processUpdate(XMLLoader.java:157) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:79) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:58) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:365) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:260) at org.mortbay.jetty.servlet.ServletHandlerSCachedChain.doFilter(ServletHandler.java:1212) at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:399) at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216) at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182) at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766) at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:450) at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230) at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114) at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152) at org.mortbay.jetty.Server.handle(Server.java:326) at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542) at org.mortbay.jetty.HttpConnectionSRequestHandler.content(HttpConnection.java:945) 2013-02-01 18:05:42.595:INFO::Shutdown hook executing 2013-02-01 18:05:42.596:INFO::Graceful shutdown SocketConnector@0.0.0.0:8983 2013-02-01 18:05:42.596:INFO::Graceful shutdown org.mortbay.jetty.webapp.WebAppContext@5484ff20{/solr,file:/home/valerius/apache-solr-3.6.2/example/webapps/solr.war} 2013-02-01 18:05:43.596:INFO::Stopped SocketConnector@0.0.0.0:8983 2013-02-01 18:05:43.784:INFO::Shutdown hook complete ========================================================== So, it seems that Dovecot tries to parse messages in the mailbox, and can't correctly determine where the message header ends. So, it thinks that the message header is big, and passes very big data to Solr. When trying to index it, Solr exhausts the available memory (though, I have 8 Gb of RAM on my machine, and java eats more than 2 Gb when indexing). Then connections to Solr get closed, and maxfd is invalid, hence the assertion is failed. Note also the following error ========================================================== SEVERE: org.apache.solr.common.SolrException: undefined field text ========================================================== before an out of memory error. I also tried to tweak the decode2text.sh script to ignore all attachments bigger than 1 Mb (just test if the file is bigger than 1 Mb, and if so, return "1"). This won't help. As I understood, this is because of big header, so attachments doesn't matter. I separated the set of messages which cause this error (by their UID's). So, I can give them as a testcase, the size of them all in archive is about 40 Mb. The error can be reproduced if put all these messages into an empty mailbox, and do reindexing, via IMAP search, or via "doveadm index -u ". I use Dovecot version 2.1.13. My doveconf -n : ========================================================== # 2.1.13: /usr/mailsuite/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian wheezy/sid ext4 auth_debug = yes auth_debug_passwords = yes auth_default_realm = test.afterlogic.com auth_mechanisms = plain login auth_socket_path = /usr/mailsuite/var/run/dovecot/auth-master base_dir = /usr/mailsuite/var/run/dovecot/ debug_log_path = /usr/mailsuite/var/log/dovecot/debug.log default_internal_user = exim dict { domainquotadict = mysql:/usr/mailsuite/etc/dovecot/dovecot-domain-quota-dict.conf realmquotadict = mysql:/usr/mailsuite/etc/dovecot/dovecot-realm-quota-dict.conf userquotadict = mysql:/usr/mailsuite/etc/dovecot/dovecot-user-quota-dict.conf } disable_plaintext_auth = no info_log_path = /usr/mailsuite/var/log/dovecot/info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /usr/mailsuite/var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_gid = exim mail_home = /usr/mailsuite/data/settings/%d/%n mail_location = maildir:/usr/mailsuite/data/%d/%n mail_plugins = listescape fts fts_solr virtual mail_uid = exim managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave spamtest spamtestplus mbox_write_locks = fcntl namespace { inbox = yes location = maildir:/usr/mailsuite/data/%d/%n prefix = separator = / type = private } namespace { hidden = yes inbox = no list = no location = virtual:/usr/mailsuite/data/virtual/:LAYOUT=maildir++:INDEX=/usr/mailsuite/data/indexes/ prefix = All/ separator = / type = private } passdb { args = /usr/mailsuite/etc/dovecot/dovecot-sql.conf driver = sql } passdb { args = /usr/mailsuite/etc/dovecot/dovecot-sql.conf driver = sql } plugin { antispam_allow_append_to_spam = no antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/mailsuite/scripts/sa-learn-pipe.sh antispam_mail_spam = --spam antispam_mail_tmpdir = /tmp antispam_signature = X-Spam-Flag antispam_signature_missing = error antispam_spam = SPAM antispam_spam_pattern = SPAM antispam_spam_pattern_ignorecase = SPAM antispam_trash = trash;Trash;Deleted Items; Deleted Messages antispam_trash_pattern = trash;Trash;Deleted * antispam_trash_pattern_ignorecase = trash;Deleted * antispam_unsure = antispam_unsure_pattern = antispam_unsure_pattern_ignorecase = fts = solr fts_decoder = decode2text fts_solr = break-imap-search url=http://localhost:8983/solr/ quota = dict:User quota::proxy::userquotadict quota2 = dict::%d:proxy::domainquotadict quota_rule = *:storage=100G quota_rule2 = Trash:storage=+20%% quota_rule3 = Spam:ignore quota_warning = storage=99%% quota-warning user 99 %d %n quota_warning2 = storage=95%% quota-warning user 95 %d %n quota_warning3 = storage=80%% quota-warning user 80 %d %n sieve = /usr/mailsuite/data/%d/%n/sieve.sieve sieve_before = /usr/mailsuite/etc/sieve/system.sieve sieve_dir = /usr/mailsuite/data/%d/%n/filters/ sieve_extensions = +spamtest +spamtestplus +relational +comparator-i;ascii-numeric sieve_global_dir = /usr/mailsuite/etc/sieve/ } protocols = imap pop3 lmtp sieve sendmail_path = /usr/mailsuite/bin/sendmail service auth { unix_listener auth-client { group = exim mode = 0666 user = exim } unix_listener auth-master { group = exim mode = 0666 user = exim } user = Sdefault_internal_user } service decode2text { executable = script /usr/mailsuite/libexec/dovecot/decode2text.sh unix_listener decode2text { mode = 0666 } user = exim } service dict { unix_listener dict { group = exim mode = 0600 user = exim } } service imap-login { inet_listener imap { port = 143 } } service imap-postlogin { executable = script-login /usr/mailsuite/scripts/dovecot-postlogin.sh user = root } service imap { executable = imap imap-postlogin } service indexer-worker { user = root vsz_limit = 768 M } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 1 vsz_limit = 64 M } service quota-warning { executable = script /usr/mailsuite/scripts/send_mail_warnquota.sh unix_listener quota-warning { user = exim } user = exim } ssl_cert =

2 1

[Dovecot] Errors with doveadm when using checkpassword
by Andy Dills 22 Feb '13

22 Feb '13

We have a checkpassword authentication with mysql pre-fetch for the userdb lookups. When trying to do: doveadm search -u andytest(a)xecu.net mailbox Trash DELETED I get: doveadm(andytest(a)xecu.net): Error: user andytest(a)xecu.net: Auth PASS lookup failed doveadm(andytest(a)xecu.net): Fatal: /var/run/dovecot/auth-userdb: passdb lookup failed (to see if user is proxied, because doveadm_proxy_port is set) And I see this in the logs: Feb 4 12:02:04 mail-out01 dovecot: auth: Error: userdb-checkpassword(andytest(a)xecu.net): Child 12591 exited with status 1 I'm not surprised the checkpassword lookup is failing; the password isn't being supplied. Shouldn't it just be doing the prefetch lookup instead, like the lmtp service? Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

2 6

[Dovecot] fts_solr search in subfolders?
by Frederic Biermann 22 Feb '13

22 Feb '13

Hello, i am using dovecot 2.1.x with Solr 4.x and it is all working fine. Search in current selected folder is extremly fast. But i want to ask if it is possible that i have selected inbox, setup a search and get results from subfolders. This is not working for me. I have to select the subfolder and then i get results. Is there any solution to fix this? best regards lexusburn

3 4

[Dovecot] Connection leak in sqlpool for ACL Dict Postgres in v2.1.15 (14907:b96df105ec55) and v2.2.beta1 (15857:07dfd4391d22)
by Steffen Kaiser 22 Feb '13

22 Feb '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm using a postgres dict for ACL, when when use deleteacl or setacl I get a "not connected" error and (v2.2) Panic: file driver-pgsql.c: line 84 (driver_pgsql_set_state): assertion failed: (state == SQL_DB_STATE_BUSY || db->cur_result == NULL) and a rawdump eventually. You can trigger the error with the "dict" socket easily: while true; do ( echo -en "H2\t0\t0\t\tacl\nI1\tshared/shared-boxes/\n" sleep 1 ) | socat - unix:/var/run/dovecot2.2/dict done I interprete H2-I1..-bang.log.gz (logged with v2.1) so, that each time the ACL dict is iterated, driver_sqlpool_query_s() is executed two times, once for user_shares and once for anyone_shares. I guess that the user_shares one is never finished, so that the sqlpool keeps that slot in "busy" state until timeout. The information about the slots of the log lines 0x9886d0 1. state=3 to_recon=(nil) ready=0 |driver_sqlpool_query_s end is generated by: conns = array_get(&db->all_connections, &count); for (i = 0; i < count; i++) { struct sql_db *conndb = conns[i].db; i_info("SKA: POOL: [%u] %p %u. state=%u to_recon=%p ready=%u |%s", getpid(), db, i, conndb->state, conndb->to_reconnect, SQL_DB_IS_READY(conndb)? 1: 0, msg); } msg is the function, where that log function is called from, e.g. at the end of driver_sqlpool_query_s() in this case, which is right before the return. When the user_shares query ends in driver_sqlpool_query_s(), one additional slot of the sqlpool is in state 3, at the end of driver_sqlpool_query_s() of the anyone_shares query there are two slots in state 3. When the next I1 command triggers the next iteration, there is one slot still in state 3 at the start of driver_sqlpool_query_s(), which seems to be the slot used for the user_shares query of the previous I1 command. It looks like that the user_shares query has not been "finished" correctly and is left open. The assert() panics, because db->cur_result is != NULL. When all slots in the pool have been used up, the sqlpool enters "not connected" state and all dict connections fail with this error now. Then the assert causes the dict to die eventually, I guess, because of a timeout. The quota dict seems to not trigger that behaviour, because it uses the "L" (lookup) command, but when the sqlpool is in "not connected" state, these commands fail, too. Attached you'll find the config and log file. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUSTYgF3r2wJMiz2NAQLCGggAqcAThH8/phYIGxnkjEt3ECGBabCvDO72 L28rjvaakFffy5jmhrLrcV2b765W9XsZ/bhNOhfkQADAf8oCU9Z5q4h7wG+ZnoMj 4sd1Zax7wU/8idmrF1esSYAfZ1kCVq/ySHY7zs8stoWcpiUk6uQMN4ynYS7c3kxJ yaOWz31s0r4pS8muktq9qCwjlCXDjTigIiPbw9X5qpJ8hnvJq9Xv/BfW5uf1xKKK BXNB+HrQYrOA6VD3KCjteZhaquQFd18B9b35WkBH77thwSbaN1/R4zy8CLLpZOkS 5ss5K/doPitCunGRcNiVD8srgUU6Po7Zv0akBmE1XUfBKkn6JUILDQ== =VpqF -----END PGP SIGNATURE----- = Mailscanner Information [FB02] == Rename Filename At least one attachement has been renamed to overcome a potential filename attack. Right-click on the item and select SaveAs, in order to save the file with its original name. Mindestens ein Anhang wurde umbenannt, um eine potentielle Attacke mit unleserlichen Dateinamen zu verhinden. Um ihn mit seinem orginialen Namen zu speichern, klicken Sie rechts auf den Anhang und wählen SaveAs. See FAQ [http://www5.inf.fh-bonn-rhein-sieg.de/FAQ/mail/scan/] for more information. NewName |OldName ------------------+------------------- H2-I1.-bang.log.gz|H2-I1..-bang.log.gz -- This information was created by the mailscanner automatically. No human interferred with the process.

2 3

[Dovecot] Dovecot 2.2. proxy_maybe and twice SSL connections
by Evgeny Basov 22 Feb '13

22 Feb '13

Hello. 1. I have two identically hosts 2. I have set up replication between two hosts 3. I have 'Y' AS proxy_maybe in password_query. 4. password_query returns one of this one hosts 5. I set this parameters in dovecot config: disable_plaintext_auth = yes ssl = yes auth_mechanisms = plain login for enforce use encrypted connections by client programs. When the client connects to host imap2 directly, connection is encrypted, it is good. | client | ---- (1) ----> |imap2 (proxy_maybe='y', host = imap2)| And when the client connects to another host, I have (1) and (2) connections are encrypted | client | ---- (1) ----> |imap1 (proxy_maybe='y', host = imap2)| ---- (2) ----> |imap2| but need only (1). How do I have desired behavior? Is it possible?

3 5

[Dovecot] Using different auth_default_realm on multiple sockets with postfix. Is it possible?
by Gábor Lénárt 22 Feb '13

22 Feb '13

Hi, I have more postfix smtpd instances (via master.cf) listening on different ports, and the FW passes the inbound mail submit connections to the right port. The problem: it seems postfix is not able to append "default realm" and I need to set different values for the instances. As far as I see, it's not possible as postfix only passes the base64 encoded string from the user to the dovecot auth service (as I'm using dovecot for sasl authentication). We're talking about PLAIN and LOGIN methods. In the other hand, dovecot is happily append "realm" with auth_default_realm. It works (which does not with postfix) but again: I need more defaults. I wouldn't like to run multiple instances of dovecot (just for having a single setting be different), so I've tried similar solutions: service auth { unix_listener /var/spool/postfix/private/auth-dom1 { group = postfix mode = 0660 user = postfix } auth_default_realm = domain1.com } And the same for /var/spool/postfix/private/auth-dom2 with domain2.com. I thought then I could use postfix's master.cf to give different auth socket (like /var/spool/postfix/private/auth-dom1 and auth-dom2) with smtpd_sasl_path postfix parameter. However it seems dovecot finds auth_default_realm invalid unless it's used in the global scope of the configuration. It's dovecot 2.0.19 (in Ubuntu 12.04 LTS). Is it possible at all, what I would like to do? Maybe with newer dovecot, or can you suggest me some other solution? Any feedback is welcomed and thanked. Thanks, - Gábor

2 1

[Dovecot] Errors after enable vnd.dovecot.duplicate
by Alessio Cecchi 22 Feb '13

22 Feb '13

Hi, on dovecot 2.1.14 and pigeonhole-0.3.3 after creating a default.sieve like this: require ["vnd.dovecot.duplicate", "fileinto", "mailbox"]; if duplicate { fileinto "Trash"; } I have two strange errors, one is many of this error in lda.log: Feb 19 14:43:17 lda(info(a)domain.com): Error: file_dotlock_create(/home/vpopmail/domains/domain.com/info/.dovecot.lda-dup… failed: Resource temporarily unavailable Feb 19 14:43:43 lda(info(a)domain.com): Error: file_dotlock_create(/home/vpopmail/domains/domain.com/info/.dovecot.lda-dup… failed: Resource temporarily unavailable Feb 19 14:44:29 lda(info(a)domain.com): Error: rename(/home/vpopmail/domains/domain.com/info/.dovecot.lda-dupes.lock, /home/vpopmail/domains/domain.com/info/.dovecot.lda-dupes) failed: No such file or directory Feb 19 14:44:29 lda(info(a)domain.com): Error: file_dotlock_replace(/home/vpopmail/domains/domain.com/info/.dovecot.lda-du… failed: No such file or directory Note that my mailboxes are store on NFS. This happens for many accounts. Another error is that some messages have not Message-ID in lda.log and when this happens emails are treated as duplicate: # grep "msgid=: stored" /var/log/dovecot/lda.log Feb 18 08:02:13 lda(info(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'INBOX' Feb 18 09:37:06 lda(info(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 18 10:29:37 lda(cracigna(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 18 11:38:00 lda(info(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 18 12:09:22 lda(info(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 18 16:10:52 lda(info(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 19 14:18:19 lda(cracigna(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'Trash' Feb 19 14:24:21 lda(panizzon(a)domain.com): Info: sieve: msgid=: stored mail into mailbox 'INBOX' After some investigations this emails are sent all from the same user with a Lotus Domino Server. Can these errors be solved? My dovecot configuration: # 2.1.14: /usr/local/dovecot-2.1/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.6 auth_cache_size = 512 k auth_worker_max_count = 60 default_login_user = nobody dict { acl = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-share-folder.conf expire = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/dovecot.log mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota acl zlib expire maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vnd.dovecot.duplicate mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = cache_key=%s%u webmail=192.168.13.215 driver = vpopmail } plugin { acl = vfile:/usr/local/dovecot-2.1/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = proxy::acl expire = Trash expire2 = Spam expire_dict = proxy::expire quota = maildir:UserQuota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_default = /usr/local/dovecot-2.1/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve sieve_extensions = +vnd.dovecot.duplicate } protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { service_count = 0 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 0 } service quota-warning { executable = script /usr/local/dovecot-2.1/etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </usr/local/dovecot-2.1/etc/ssl/wildcard.pem ssl_key = </usr/local/dovecot-2.1/etc/ssl/wildcard.key submission_host = localhost userdb { args = quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol lda { log_path = /var/log/dovecot/lda.log mail_plugins = quota acl zlib expire sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 29 mins mail_max_userip_connections = 18 mail_plugins = quota acl zlib expire imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 5 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

3 4

[Dovecot] Full-text search
by Valery V. Sedletski 22 Feb '13

22 Feb '13

Hi all I discovered that the full-text search (fts) plugin can work without SQUAT/LUCENE/SOLR backend. I.e., Dovecot creates separate indexes for header search in files dovecot.index and dovecot.index.cache. Even, the search by headers is fast enough, and can search for phrases. Also, it seems that this buillt-in search is faster than Solr-based search. But if I enable the Solr backend (fts_solr), then the FTS generic plugin built-in search becomes disabled. But, Solr-based Full-text search is faster if search inside message bodies. Also, it appears that the built-in search inside message bodies works too, but very slow (it seems that is because it is dumb file-based search and does not use indexes at all) So, my question is: is it possible to combine the built-in search with Solr or Lucene plugin-based search so that the first one searches by headers, and the second one works by bodies? This could make the advantages of both search methods combined. WBR, valery

2 1

[Dovecot] LDA misbehavior?
by Eugene Paskevich 22 Feb '13

22 Feb '13

Hello, Could somebody please give me a hint on what might be going wrong? Feb 21 16:33:07 hopper dovecot: lda(eugene): Panic: file mail-storage.c: line 1757 (mailbox_transaction_commit_get_changes): assertion failed: (ret < 0 || seq_range_count(&changes_r->saved_uids) == save_count) Feb 21 16:33:07 hopper dovecot: lda(eugene): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6019a) [0x7f38e5ef619a] -> /usr/lib/dovecot/ibdovecot.s o.0(i_syslog_fatal_handler+0x2b) [0x7f38e5ef621b] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f38e5eb81f4] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7c0de) [0x7f38e61cd0de] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver_save+0x1b2) [0x7f38e6469d62] -> /usr/lib/dovecot/libdovecot-lda.so.0(mail_deliver+0xe3) [0x7f38e646a113] -> /usr/lib/dovecot/dovecot-lda(main+0x38a) [0x40295a] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f38e5b2aead] -> /usr/lib/dovecot/dovecot-lda() [0x4031e1] Feb 21 16:33:07 hopper exim[10094]: 1U8XCf-0002Za-4s ** eugene(a)hopper.volia.net <root(a)hopper.volia.net> R=local_user T=dovecot_delivery: Child process of dovecot_delivery transport (running command "/usr/lib/dovecot/dovecot-lda -f $sender_address -a $original_local_part@$original_domain") was terminated by signal 6 (Aborted) Feb 21 16:33:07 hopper exim[10094]: 1U8XCf-0002Za-4s Frozen (delivery error message) It started a couple of days ago. Triggered by the mass delivery. E.g. by for i in {1..50}; do { mail -s "test $i" eugene(a)hopper.volia.net <<< "Try $i" & }; done I suspected that sieve might cause that, but disabling it gave nothing. Current root@hopper[pts/0]:/etc/dovecot> doveconf -n # 2.2.beta1 (808a64899e8a): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } postmaster_address = hopper(a)volia.net protocols = imap service imap-login { inet_listener imap { port = 143 } inet_listener imap2 { port = 1357 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } Is there any other info I could provide? -- Eugene Paskevich | *==)----------- | Plug me into eugene(a)raptor.kiev.ua | -----------(==* | The Matrix

2 1

[Dovecot] Bug: empty m-files
by Peer Heinlein 22 Feb '13

22 Feb '13

Having an empty m-File, doveadm force-resync isn't able to detect and repair this: -rw------- 1 vmail vmail 4948043 8. Jan 20:32 m.634 -rw------- 1 vmail vmail 5237411 8. Jan 20:32 m.635 -rw------- 1 vmail vmail 0 9. Jan 16:23 m.636 mail1:~ # doveadm force-resync -u user mailbox INBOX doveadm(user): Warning: fscking index file /vmail/example.com/user//mdbox/storage/dovecot.map.index doveadm(user): Warning: mdbox /vmail/example.com/user//mdbox/storage: rebuilding indexes doveadm(user): Error: Corrupted dbox file /vmail/example.com/user//mdbox/storage/m.636 (around offset=0): EOF while reading file header doveadm(user): Error: mdbox rebuild: Failed to fix file /vmail/example.com/user//mdbox/storage/m.636 doveadm(user): Error: mdbox /vmail/example.com/user//mdbox/storage: Duplicate GUID 2cafdd2f0224ec50773c0000085c1439 in m.627:16 and m.638:16 Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] Crash in dsync [dovecot 2.1.7]
by Joe Beaubien 22 Feb '13

22 Feb '13

Just taught i'd report this crash while running the ofllowing command: 19748 Aborted (core dumped) $DSYNC_BINARY -f -u document backup mdbox:$LOCAL_BACKUP_PATH/emails/document >> $LOG_FILE 2>&1 Here is the traceback I got: dsync(document): Error: Mailbox INBOX/Julie: Corrupted index, uidvalidity=0 dsync(document): Warning: mdbox /backup_hdd/current/emails/document/storage: rebuilding indexes dsync(document): Panic: file mdbox-storage-rebuild.c: line 66 (mdbox_storage_rebuild_init): assertion failed: (!storage->rebuilding_storage) dsync(document): Error: Raw backtrace: /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(+0x4203a) [0x7faa3bbde03a] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7faa3bbde0fa] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7faa3bbb53f0] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_rebuild_in_context+0x117e) [0x7faa3be656de] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x23a) [0x7faa3be62b1a] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_sync+0x33) [0x7faa3be630f3] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x7e) [0x7faa3be631be] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7faa3bea2871] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7faa3bea2997] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_mark_index_deleted+0x9b) [0x7faa3bea3aeb] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0x85) [0x7faa3bea3a25] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_rebuild_in_context+0xb7b) [0x7faa3be650db] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_sync_begin+0x23a) [0x7faa3be62b1a] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_sync+0x33) [0x7faa3be630f3] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mdbox_storage_sync_init+0x7e) [0x7faa3be631be] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x31) [0x7faa3bea2871] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7faa3bea2997] -> /opt/dovecot-2.1.7/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x8a) [0x7faa3bec47da] -> /opt/dovecot/lib/dovecot/lib20_fts_plugin.so(+0xc002) [0x7faa3a775002] -> /opt/dovecot/bin/dsync() [0x42bf9a] -> /opt/dovecot/bin/dsync(dsync_worker_mailbox_iter_next+0x29) [0x428eb9] -> /opt/dovecot/bin/dsync() [0x423bfe] -> /opt/dovecot/bin/dsync(dsync_brain_sync+0x832) [0x4233a2] -> /opt/dovecot/bin/dsync(dsync_brain_sync_all+0x18) [0x423ee8] -> /opt/dovecot/bin/dsync() [0x420f36] -> /opt/dovecot/bin/dsync() [0x4215b2] -> /opt/dovecot/bin/dsync() [0x40e798] -> /opt/dovecot/bin/dsync() [0x40f1ea]

2 1

[Dovecot] Problem with managesieve proxy
by Lance A. Brown 22 Feb '13

22 Feb '13

Hi folks, I'm setting up a new dovecot email service and have a proxy server running in front of it to facilitate migrating users from my very old UW-IMAP-based mail server to the new one. I have a mysql proxy table that directs inbound IMAP and LMTP connections to the correct server, works great. Managesieve connections are not working through the proxy using either with the sieverules plugin for RoundCube or the Sieve plugin for Thunderbird. If I point them directly at the actual dovecot server everything works fine, so I must have something wrong in my proxy setup. This is what I get in the maillogs when I try to connect to the managesieve proxy: PROXY machine: Feb 21 16:16:38 sortie dovecot: managesieve-login: Error: proxy: Remote x.y.z.110:4190 disconnected: Connection closed (state=0, duration=0s): user=<brown>, method=PLAIN, rip=x.y.z.83, lip=x.y.z.109, TLS, session=<0jUal0LWswCYAxZT> Feb 21 16:16:38 sortie dovecot: managesieve-login: Disconnected (internal failure, 1 succesful auths): user=<brown>, method=PLAIN, rip=x.y.z.83, lip=x.y.z.109, TLS, session=<0jUal0LWswCYAxZT> SERVER machine: Feb 21 16:16:38 postie dovecot: managesieve-login: Disconnected: Too many invalid commands. (no auth attempts in 0 secs): user=<>, rip=x.y.z.109, lip=x.y.z.110, session=<REgal0LWnQCYAxZt> Output of a 'tcpdump -A' is attached as well if needed. x.y.z.83 - Roundcube webmail server x.y.z.109 - PROXY x.y.z.110 - SERVER If I turn off TLS all-around I get an error in the roundcube log that says: [20-Feb-2013 23:02:27] No supported authentication method found. The server supports these methods: , but we want to use: PLAIN (): [20-Feb-2013 23:02:27] Not currently in AUTHORISATION state (1): I am using Pigeonhole 0.3.3 on both proxy and server. Dovecot configurations for the proxy and server are attached below. Here are the SQL files referenced in the proxy configs. Long lines broke for readability. /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=XXX password_query = SELECT NULL AS password, 'any-cert' as 'ssl', \ 'Y' as nopassword, host, user as destuser, \ 'Y' AS proxy \ FROM proxy WHERE user = '%u' /etc/dovecot/dovecot-sql-lmtp.conf.ext driver = mysql connect = host=localhost dbname=dovecot user=dovecot password=XXX password_query = SELECT NULL AS password, 'any-cert' as 'ssl', \ 'Y' as nopassword, host, user as destuser, 'Y' AS proxy \ FROM proxy WHERE user = '%n' The proxy DB table looks like this: - -- Table structure for table `proxy` -- CREATE TABLE IF NOT EXISTS `proxy` ( `id` int(11) NOT NULL AUTO_INCREMENT, `user` varchar(255) NOT NULL, `email` varchar(64) NOT NULL, `host` varchar(16) DEFAULT NULL, PRIMARY KEY (`id`), UNIQUE KEY `user_index` (`user`) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=379 ; -- -- Dumping data for table `proxy` -- INSERT INTO `proxy` (`id`, `user`, `email`, `host`) VALUES (1, 'brown', '', 'x.y.z.110'), (2, 'fizgig', '', 'x.r.z.15'), 110 is the new dovecot IMAP server, 15 is the old UW-IMAP server. Any advice on getting managesieve proxy running would be greatly appreciated. Thanks, --[Lance] -- GPG Fingerprint: 409B A409 A38D 92BF 15D9 6EEE 9A82 F2AC 69AC 07B9 CACert.org Assurer

1 1

[Dovecot] Dovecot list archives not updating
by Mark Sapiro 22 Feb '13

22 Feb '13

The February archive indexes of this list haven't been updating since Feb 8. The text file at <http://dovecot.org/pipermail/dovecot/2013-February.txt> appears to be up to date with all posts, but the index pages at <http://dovecot.org/pipermail/dovecot/2013-February/thread.html>, <http://dovecot.org/pipermail/dovecot/2013-February/subject.html>, <http://dovecot.org/pipermail/dovecot/2013-February/author.html> and <http://dovecot.org/pipermail/dovecot/2013-February/date.html> have no posts after the one at <http://dovecot.org/pipermail/dovecot/2013-February/071213.html> from Fri Feb 8 16:31:49 EET 2013. Subsequent posts appear to not have individual HTML pages either as URLs <http://dovecot.org/pipermail/dovecot/2013-February/071214.html> and <http://dovecot.org/pipermail/dovecot/2013-February/071215.html> return 404 errors. I suspect there is a permissions issue starting soon after Fri Feb 8 16:31:49 EET 2013 and that Mailman's error log has lots of tracebacks from this. If that is the case, the messages were probably all shunted and running Mailman's bin/unshunt after fixing the underlying issue and also making sure that any messages older than Fri Feb 8 16:31:49 EET 2013 in Mailman's 'shunt' queue that should not also be reprocessed are removed. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

[Dovecot] Public folders and dsync replication Dovecot v2.1.7
by Steve Brown 21 Feb '13

21 Feb '13

Dear all I have a few public folders setup and working fine, and one such public folder is 'Public/General'. I'm trying to sort dsync replication out to another server and notice that the system log is full of error messages similar to: dovecot: doveadm: Error: dsync-remote(username: Error: Can't update subscription Pu blic/General: Invalid mailbox name The replication setup is basically as per the v2 wiki. It seems that when a mail client subscribes to a public folder, the folder name is put into '~/Maildir/subscriptions' and this seems to be the cause of the error during replication. The mails are not synchronised to the other server. Public namespace is: namespace { type = public separator = / prefix = Public/ location = maildir:/home/shared/public subscriptions = no list = yes } Hopefully somebody can send the clue bus over? Steve -- Steve Brown Operations Manager Connection Services Ltd +44 (0)1189 711 765 Direct +44 (0)870 751 7571 Fax www.connectionservices.com www.hotspot-directory.com

3 2

Re: [Dovecot] Dovecot LDA LDAP lookups on samba4 server ends very often in timeouts (Christian Wiese)
by Marco Carcano 21 Feb '13

21 Feb '13

Dear Christian thank you very much - you got it at the very first shot: modified /etc/ openldap/ldap.conf adding REFERRALS off en everything works without issues now many thanks Marco Carcano

1 0

[Dovecot] Dovecot LDA LDAP lookups on samba4 server ends very often in timeouts
by marco＠carcano.ch 20 Feb '13

20 Feb '13

I hope that someone will be so kind to help me into solving this really strange thing (don't know if it is a bug or not) I have a samba4 server and want to use postfix+dovecot - dovecot version is 2.0.11 as for the postfix side everything is OK (all the LDAP lookups works without any error, tested also manually with postmap -q) the real pain is with dovecot deliver: it seems that sometimes lda tries to lookup to the LDPA (samba 4) server, got a reply, an then report(after 2 minutes) a lookup timeout error the really strange thing is that (very seldom) lda works, but most of the times I got the timeout error. The strange thing is that if I use ldapsearch I never got timeout neither late replies, and even postfix performs its lookups without any issue it seems something related to lda itself (I do not know if I have a wrong configuration, but I think this is not a configuration issue, otherwise it should not work at all) here are the information logged when it does not work - after this log you will find the one when I got the failure (if needed I can provide a .pcap file too) (trailing and leading spaces of AT charcater has been added by me) ############################## FAULTY DELIVER LOG ############################################# Feb 20 12:20:50 sng02 postfix/smtpd[8928]: connect from localhost[127.0.0.1] Feb 20 12:21:14 sng02 postfix/smtpd[8928]: A38D4407F5: client=localhost[127.0.0.1] Feb 20 12:21:20 sng02 postfix/cleanup[8891]: A38D4407F5: warning: header Subject: prova from localhost[127.0.0.1]; from=<marco @ senderdomain.tld> to=<mac @ mydomain.com> proto=SMTP helo=<senderdomain.tld> Feb 20 12:21:20 sng02 postfix/cleanup[8891]: A38D4407F5: message-id=<20130220112114.A38D4407F5 @ srv01.mydomain.local> Feb 20 12:21:20 sng02 postfix/qmgr[8889]: A38D4407F5: from=<marco @ senderdomain.tld>, size=371, nrcpt=1 (queue active) Feb 20 12:21:20 sng02 dovecot: lda: Debug: Loading modules from directory: /usr/lib64/dovecot Feb 20 12:21:20 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Feb 20 12:21:20 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib20_expire_plugin.so Feb 20 12:21:20 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Feb 20 12:21:20 sng02 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 20 12:21:20 sng02 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 20 12:21:20 sng02 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 20 12:21:20 sng02 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Feb 20 12:21:20 sng02 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 20 12:21:20 sng02 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_bind Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_simple_bind Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_sasl_bind Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_new_connection 1 1 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_open_connection Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_connect_to_host: TCP localhost:389 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_new_socket: 16 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_prepare_socket: 16 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_connect_to_host: Trying ::1 389 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_pvt_connect: fd: 16 tm: -1 async: 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_open_defconn: successful Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_server_request Feb 20 12:21:20 sng02 dovecot: auth: Debug: master in: USER#0111#011marco.carcano#011service=lda Feb 20 12:21:20 sng02 dovecot: auth: Debug: password(marco.carcano): passdb doesn't support credential lookups Feb 20 12:21:20 sng02 dovecot: auth: Error: static(marco.carcano): passdb doesn't support lookups, can't verify user's existence Feb 20 12:21:20 sng02 dovecot: auth: Debug: ldap(marco.carcano): user search: base=DC=mydomain,DC=local scope=subtree filter=(sAMAccountname=marco.carcano) fields=Mailbox,dovecotMailQuota Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_result ld 0x6cba60 msgid -1 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 msgid -1 (timeout 0 usec) Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 1 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 1 message type bind Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 0 new referrals Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: mark request completed, ld 0x6cba60 msgid 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: request done: ld 0x6cba60 msgid 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_parse_result Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_search Feb 20 12:21:20 sng02 dovecot: auth: Error: put_filter: "(sAMAccountname=marco.carcano)" Feb 20 12:21:20 sng02 dovecot: auth: Error: put_filter: simple Feb 20 12:21:20 sng02 dovecot: auth: Error: put_simple_filter: "sAMAccountname=marco.carcano" Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_server_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_msgfree Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_result ld 0x6cba60 msgid -1 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 msgid -1 (timeout 0 usec) Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 1 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_result ld 0x6cba60 msgid -1 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 msgid -1 (timeout 0 usec) Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 1 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 2 message type search-entry Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_first_attribute Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_get_values Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_next_attribute Feb 20 12:21:20 sng02 dovecot: auth: Debug: ldap(marco.carcano): result: dovecotMailQuota(quota_rule=%$)=*:storage=8192M Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_msgfree Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_result ld 0x6cba60 msgid -1 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 msgid -1 (timeout 0 usec) Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 1 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid -1 all 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 2 message type search-reference Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chase_v3referrals Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_url_parse_ext(ldap://mydomain.local/CN=Configuration,DC=mydomain,DC=local) Feb 20 12:21:20 sng02 dovecot: auth: Error: re_encode_request: new msgid 3, new dn <CN=Configuration,DC=mydomain,DC=local> Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chase_v3referral: msgid 2, url "ldap://mydomain.local/CN=Configuration,DC=mydomain,DC=local" Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_server_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_new_connection 0 1 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_open_connection Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_connect_to_host: TCP mydomain.local:389 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_new_socket: 18 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_prepare_socket: 18 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_connect_to_host: Trying 192.168.32.2:389 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_pvt_connect: fd: 18 tm: -1 async: 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: anonymous rebind via ldap_sasl_bind("") Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_sasl_bind Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_send_server_request Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_result ld 0x6cba60 msgid 4 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 msgid 4 (timeout 100000 usec) Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: mydomain.local port: 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: rebind in progress Feb 20 12:21:20 sng02 dovecot: auth: Error: queue is empty Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 3 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 4, origid 4, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 1, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 2 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 2 message type search-result Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 0 new referrals Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: mark request completed, ld 0x6cba60 msgid 2 Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg ld 0x6cba60 0 s 99952 us to go Feb 20 12:21:20 sng02 dovecot: auth: Error: wait4msg continue ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Connections: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: mydomain.local port: 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: rebind in progress Feb 20 12:21:20 sng02 dovecot: auth: Error: queue is empty Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 20 12:21:20 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 20 12:21:20 sng02 dovecot: auth: Error: last used: Wed Feb 20 12:21:20 2013 Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Outstanding Requests: Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 4, origid 4, status InProgress Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: * msgid 2, origid 2, status RequestCompleted Feb 20 12:21:20 sng02 dovecot: auth: Error: outstanding referrals 1, parent count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 request count 2 (abandoned 0) Feb 20 12:21:20 sng02 dovecot: auth: Error: ** ld 0x6cba60 Response Queue: Feb 20 12:21:20 sng02 dovecot: auth: Error: Empty Feb 20 12:21:20 sng02 dovecot: auth: Error: ld 0x6cba60 response count 0 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x6cba60 NULL Feb 20 12:21:20 sng02 dovecot: auth: Error: ldap_int_select Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 4 all 1 Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 msgid 4 message type bind Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: ld 0x6cba60 0 new referrals Feb 20 12:21:20 sng02 dovecot: auth: Error: read1msg: mark request completed, ld 0x6cba60 msgid 4 Feb 20 12:21:22 sng02 postfix/smtpd[8928]: disconnect from localhost[127.0.0.1] Feb 20 12:23:55 sng02 dovecot: lda: Error: userdb lookup(marco.carcano): Request timed out Feb 20 12:23:55 sng02 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Feb 20 12:23:56 sng02 postfix/pipe[8897]: A38D4407F5: to=<marco.carcano @ mydomain.local>, orig_to=<mac @ mydomain.com>, relay=dovecot, delay=171, delays=16/0.01/0/155, dsn=4.3.0, status=deferred (temporary failure) Feb 20 12:24:10 sng02 dovecot: master: Warning: Killed with signal 15 (by pid=8946 uid=0 code=kill) Feb 20 12:24:10 sng02 dovecot: auth: ldap(marco.carcano): Shutting down Feb 20 12:24:10 sng02 dovecot: auth: Debug: master out: FAIL#0111 Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_unbind Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_request (origid 2, msgid 3) Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_connection 1 1 Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_send_unbind Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_connection: actually freed Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_connection 1 1 Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_send_unbind Feb 20 12:24:10 sng02 dovecot: auth: Error: ldap_free_connection: actually freed Feb 20 12:24:18 sng02 postfix/postfix-script[8962]: stopping the Postfix mail system Feb 20 12:24:18 sng02 postfix/master[8886]: terminating on signal 15 ############################## END OF FAULTY DELIVER LOG ############################################# I'll add the log of a succefully delivered message in another mail (otherwise I exceed message size limit of the list)

2 1

Re: [Dovecot] Dovecot LDA LDAP lookups on samba4 server ends very often in timeouts
by marco＠carcano.ch 20 Feb '13

20 Feb '13

just to complete the informations of this thread, here is the log of a mail delivered succesfully (trailing and leading spaces of AT charcater has been added by me) ############################## MAIL SUCCEFFULLY DELIVERED LOG ############################################# Feb 19 17:41:01 sng02 postfix/smtpd[4006]: connect from localhost[127.0.0.1] Feb 19 17:41:28 sng02 postfix/smtpd[4006]: 95659407F5: client=localhost[127.0.0.1] Feb 19 17:41:36 sng02 postfix/cleanup[4011]: 95659407F5: warning: header Subject: prova from localhost[127.0.0.1]; from=<marco @ senderdomain.tld> to=<mac @ mydomain.com> proto=SMTP helo=<senderdomain.tld> Feb 19 17:41:36 sng02 postfix/cleanup[4011]: 95659407F5: message-id=<20130219164128.95659407F5 @ srv01.mydomain.local> Feb 19 17:41:36 sng02 postfix/qmgr[3992]: 95659407F5: from=<marco @ senderdomain.tld>, size=371, nrcpt=1 (queue active) Feb 19 17:41:36 sng02 dovecot: lda: Debug: Loading modules from directory: /usr/lib64/dovecot Feb 19 17:41:36 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Feb 19 17:41:36 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib20_expire_plugin.so Feb 19 17:41:36 sng02 dovecot: lda: Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Feb 19 17:41:36 sng02 dovecot: auth: Debug: master in: USER#0111#011marco.carcano#011service=lda Feb 19 17:41:36 sng02 dovecot: auth: Debug: password(marco.carcano): passdb doesn't support credential lookups Feb 19 17:41:36 sng02 dovecot: auth: Error: static(marco.carcano): passdb doesn't support lookups, can't verify user's existence Feb 19 17:41:36 sng02 dovecot: auth: Debug: ldap(marco.carcano): user search: base=DC=mydomain,DC=local scope=subtree filter=(sAMAccountname=marco.carcano) fields=Mailbox,dovecotMailQuota Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap(marco.carcano): Connection appears to be hanging, reconnecting Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_unbind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_request (origid 2, msgid 3) Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_request (origid 2, msgid 2) Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_connection 1 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_unbind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_connection: actually freed Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_connection 1 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_unbind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_connection: actually freed Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_create Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_bind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_simple_bind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_sasl_bind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_new_connection 1 1 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_open_connection Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_connect_to_host: TCP localhost:389 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_new_socket: 16 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_prepare_socket: 16 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_connect_to_host: Trying ::1 389 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_pvt_connect: fd: 16 tm: -1 async: 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_open_defconn: successful Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_server_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_result ld 0x666a60 msgid -1 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 msgid -1 (timeout 0 usec) Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 1, origid 1, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 request count 1 (abandoned 0) Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Response Queue: Feb 19 17:41:36 sng02 dovecot: auth: Error: Empty Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 response count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x666a60 NULL Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_select Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid 1 message type bind Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 0 new referrals Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: mark request completed, ld 0x666a60 msgid 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: request done: ld 0x666a60 msgid 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <> Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_free_request (origid 1, msgid 1) Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_parse_result Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_search Feb 19 17:41:36 sng02 dovecot: auth: Error: put_filter: "(sAMAccountname=marco.carcano)" Feb 19 17:41:36 sng02 dovecot: auth: Error: put_filter: simple Feb 19 17:41:36 sng02 dovecot: auth: Error: put_simple_filter: "sAMAccountname=marco.carcano" Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_server_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_search Feb 19 17:41:36 sng02 dovecot: auth: Error: put_filter: "(sAMAccountname=marco.carcano)" Feb 19 17:41:36 sng02 dovecot: auth: Error: put_filter: simple Feb 19 17:41:36 sng02 dovecot: auth: Error: put_simple_filter: "sAMAccountname=marco.carcano" Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_server_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_msgfree Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_result ld 0x666a60 msgid -1 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 msgid -1 (timeout 0 usec) Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 3 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 3, origid 3, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 request count 2 (abandoned 0) Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Response Queue: Feb 19 17:41:36 sng02 dovecot: auth: Error: Empty Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 response count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x666a60 NULL Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_select Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_result ld 0x666a60 msgid -1 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 msgid -1 (timeout 0 usec) Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 3 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 3, origid 3, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 request count 2 (abandoned 0) Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Response Queue: Feb 19 17:41:36 sng02 dovecot: auth: Error: Empty Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 response count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x666a60 NULL Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_select Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid 2 message type search-entry Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_msgfree Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_result ld 0x666a60 msgid -1 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 msgid -1 (timeout 0 usec) Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 3 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 3, origid 3, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 request count 2 (abandoned 0) Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Response Queue: Feb 19 17:41:36 sng02 dovecot: auth: Error: Empty Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 response count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x666a60 NULL Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_select Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid -1 all 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid 2 message type search-reference Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chase_v3referrals Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_url_parse_ext(ldap://mydomain.local/CN=Configuration,DC=mydomain,DC=local) Feb 19 17:41:36 sng02 dovecot: auth: Error: re_encode_request: new msgid 4, new dn <CN=Configuration,DC=mydomain,DC=local> Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chase_v3referral: msgid 2, url "ldap://mydomain.local/CN=Configuration,DC=mydomain,DC=local" Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_server_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_new_connection 0 1 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_open_connection Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_connect_to_host: TCP mydomain.local:389 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_new_socket: 18 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_prepare_socket: 18 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_connect_to_host: Trying 192.168.32.2:389 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_pvt_connect: fd: 18 tm: -1 async: 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: anonymous rebind via ldap_sasl_bind("") Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_sasl_bind Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_initial_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_send_server_request Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_result ld 0x666a60 msgid 5 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 msgid 5 (timeout 100000 usec) Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid 5 all 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: mydomain.local port: 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: rebind in progress Feb 19 17:41:36 sng02 dovecot: auth: Error: queue is empty Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 4 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 5, origid 5, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 3, origid 3, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 0, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: * msgid 2, origid 2, status InProgress Feb 19 17:41:36 sng02 dovecot: auth: Error: outstanding referrals 1, parent count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 request count 3 (abandoned 0) Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Response Queue: Feb 19 17:41:36 sng02 dovecot: auth: Error: Empty Feb 19 17:41:36 sng02 dovecot: auth: Error: ld 0x666a60 response count 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList ld 0x666a60 msgid 5 all 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_chkResponseList returns ld 0x666a60 NULL Feb 19 17:41:36 sng02 dovecot: auth: Error: ldap_int_select Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid 5 all 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 msgid 2 message type search-result Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: ld 0x666a60 0 new referrals Feb 19 17:41:36 sng02 dovecot: auth: Error: read1msg: mark request completed, ld 0x666a60 msgid 2 Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg ld 0x666a60 0 s 99954 us to go Feb 19 17:41:36 sng02 dovecot: auth: Error: wait4msg continue ld 0x666a60 msgid 5 all 1 Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Connections: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: mydomain.local port: 0 Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 2 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: rebind in progress Feb 19 17:41:36 sng02 dovecot: auth: Error: queue is empty Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: * host: localhost port: 389 (default) Feb 19 17:41:36 sng02 dovecot: auth: Error: refcnt: 3 status: Connected Feb 19 17:41:36 sng02 dovecot: auth: Error: last used: Tue Feb 19 17:41:36 2013 Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: Feb 19 17:41:36 sng02 dovecot: auth: Error: ** ld 0x666a60 Outstanding Requests: Feb 19 17:41:36 sng02 dovecot: lda: Debug: auth input: marco.carcano quota_rule=*:storage=8192M Feb 19 17:41:36 sng02 dovecot: lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=8192M Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Effective uid=8, gid=12, home= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota root: name=User quota backend=maildir args= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=User quota mailbox=* bytes=8589934592 messages=0 Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=8160437862 (95%) messages=0 reverse=no command=quota-warning 95 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=7301444403 (85%) messages=0 reverse=no command=quota-warning 85 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=6442450944 (75%) messages=0 reverse=no command=quota-warning 75 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota root: name=Shared quota backend=maildir args=ns=Public/ Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=Shared quota mailbox=* bytes=20971520000 messages=0 Feb 19 17:41:36 sng02 dovecot: lda: Error: user marco.carcano: Auth USER lookup failed Feb 19 17:41:36 sng02 dovecot: lda: Debug: auth input: Feb 19 17:41:36 sng02 dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/mailboxstore/marco.carcano/Maildir Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: maildir++: root=/home/mailboxstore/marco.carcano/Maildir, index=, control=, inbox=/home/mailboxstore/marco.carcano/Maildir Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Namespace : type=shared, prefix=shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/home/mailboxstore/%Lu/Maildir:INDEX=/home/mailboxstore/marco.carcano/Maildir/shared/%Lu Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: shared: root=/var/run/dovecot, index=, control=, inbox= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Namespace : type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/home/mailboxstore/public Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: maildir++: root=/home/mailboxstore/public, index=, control=, inbox= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: expire: No expire setting - plugin disabled Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota root: name=User quota backend=maildir args= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=User quota mailbox=* bytes=1073741824 messages=0 Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=1020054732 (95%) messages=0 reverse=no command=quota-warning 95 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=912680550 (85%) messages=0 reverse=no command=quota-warning 85 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota warning: bytes=805306368 (75%) messages=0 reverse=no command=quota-warning 75 marco.carcano Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota root: name=Shared quota backend=maildir args=ns=Public/ Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: Quota rule: root=Shared quota mailbox=* bytes=20971520000 messages=0 Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: none: root=, index=, control=, inbox= Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Error: User marco.carcano doesn't have home dir set, disabling duplicate database Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: sieve: user's script path /home/mailboxstore/marco.carcano/.dovecot.sieve doesn't exist (using global script path in stead) Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: sieve: user has no valid personal script Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): Debug: sieve: no scripts to execute: reverting to default delivery. Feb 19 17:41:36 sng02 postfix/pipe[3995]: 7D9AE407E7: to=<marco.carcano @ mydomain.local>, orig_to=<mac @ mydomain.com>, relay=dovecot, delay=17102, delays=17034/0.05/0/68, dsn=4.3.0, status=deferred (temporary failure) Feb 19 17:41:36 sng02 dovecot: lda(marco.carcano): msgid=<20130219164128.95659407F5 @ srv01.mydomain.local>: saved mail to INBOX Feb 19 17:41:36 sng02 postfix/pipe[4013]: 95659407F5: to=<marco.carcano @ mydomain.local>, orig_to=<mac @ mydomain.com>, relay=dovecot, delay=22, delays=22/0.02/0/0.14, dsn=2.0.0, status=sent (delivered via dovecot service) Feb 19 17:41:36 sng02 postfix/qmgr[3992]: 95659407F5: removed Feb 19 17:41:38 sng02 postfix/smtpd[4006]: disconnect from localhost[127.0.0.1] ############################## END OF MAIL SUCCEFFULLY DELIVERED LOG #############################################

1 0

[Dovecot] Changin password in LDAP
by Arto Saraniva 20 Feb '13

20 Feb '13

We are using now dovecot 2.0.21 with open-ldap, but this situations has already taken a quite long time. When user changes the password, we have to reload dovecot every time, otherwise the change is ignored and dovecot sees only the old password. Any ideas where the problem might exist? Conf: # 2.0.21: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.24.1.el5 i686 CentOS release 5.9 (Final) auth_cache_size = 100 M auth_mechanisms = plain login auth_verbose = yes default_process_limit = 5000 disable_plaintext_auth = no info_log_path = /var/log/dovecot.log mail_location = maildir:~/Maildir:INDEX=/var/spool/indexes/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = maildir:User Quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)artio.net service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { service_count = 0 } service imap-postlogin { executable = script-login /usr/local/sbin/dovecot-postscript-imap user = root } service imap { executable = imap imap-postlogin } service pop3-postlogin { executable = script-login /usr/local/sbin/dovecot-postscript-pop3 user = root } service pop3 { executable = pop3 pop3-postlogin } ssl_ca = </usr/share/ssl/certs/mail_artio_net-2012-geotrust.ca ssl_cert = </usr/share/ssl/certs/mail_artio_net-2012-geotrust.crt ssl_key = </usr/share/ssl/private/mail_artio_net-2012-geotrust.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = sieve quota } protocol imap { mail_max_userip_connections = 50 mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } Dovecot-ldap.conf: # NOTE: We don't support "authentication binds", so you'll have to give # dovecot-auth read access to userPassword field in LDAP server. With OpenLDAP # this is done by modifying /etc/ldap/slapd.conf. There should already be # something like this: # access to attribute=userPassword # by dn="<dovecot's dn>" read # add this # by anonymous auth # by self write # by * none # Space separated list of LDAP hosts to use. host:port is allowed too. #hosts = hosts = 123.123.123.123 123.123.123.124 # Distinguished Name - the username used to login to the LDAP server #dn = # Password for LDAP server #dnpass = # LDAP protocol version to use. Likely 2 or 3. ldap_version = 3 # LDAP base #base = uid=someone, dc=foo, dc=bar, dc=org base = dc=artio,dc=net # Dereference: never, searching, finding, always deref = never # Search scope: base, onelevel, subtree scope = subtree # User attributes in order: # Virtual user name (user@domain) # Home directory # MAIL environment # System user name (for getting user's groups from /etc/group) # - For virtual users you don't want to use this, so this defaults to none. # System UID # System GID #user_attrs = uid,homeDirectory,,,uidNumber,gidNumber # user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid # user_attrs = cn,homeDirectory,,uid,uidNumber,gidNumber #user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,artioMailQuotaSize=quota_rule=*:storage=%$M # Filter for user lookup. Some variables can be used: # %u - username # %n - user part in user@domain, same as %u if there's no domain # %d - domain part in user@domain, empty if user there's no domain #user_filter = (&(objectClass=posixAccount)(uid=%u)) user_filter = (&(objectClass=posixAccount)(|(uid=%u)(mail=%u))) # Password checking attributes in order: # Virtual user name (user@domain) # Password, may optionally start with {type}, eg. {crypt} #pass_attrs = uid,userPassword # pass_attrs = cn,userPassword pass_attrs = uid=user, userPassword=password # Filter for password lookups #pass_filter = (&(objectClass=posixAccount)(uid=%u)) pass_filter = (&(objectClass=posixAccount)(|(uid=%u)(mail=%u))) # Default password scheme. "{scheme}" before password overrides this. # Currently supported schemes include PLAIN, PLAIN-MD5, DIGEST-MD5, CRYPT #default_pass_scheme = CRYPT default_pass_scheme = CRYPT # You can use same UID and GID for all user accounts if you really want to. # If the UID/GID is still found from LDAP reply, it overrides these values. #user_global_uid = #user_global_gid = Pam: /etc/pam.d/dovecot #%PAM-1.0 auth required pam_nologin.so auth include system-auth account include system-auth session include system-auth

1 0

[Dovecot] Dovecot 2 + Quota - CentOS 6.3
by drum.lucas＠gmail.com 20 Feb '13

20 Feb '13

Hello, I've a postfix+postfixadmin+mysql server+roundcubemail centos 6 mail server. My question is as follows: In postfixadmin it's possible that he show me how the mailbox is full. Show this information is dovecot service? What is the purpose of quota in dovecot? Thanks! *Lucas Possamai *

2 1

[Dovecot] 1.x with mbox files to 2.x with mdbox, I think?
by Ken A 20 Feb '13

20 Feb '13

Hi, I have a couple questions about migrating from 1.x to 2.x I'm needing to support larger mailbox sizes and mdbox seems like the right format to use to get larger size boxes and maintain, or possibly even increase speed. Is that correct? Am I correct that the best way to accomplish this migration is to copy the mboxes over to the new server and then use dsync to convert them to mdbox? Thanks for your thoughts! Ken -- Ken Anderson Pacific Internet - http://www.pacific.net Latest Pacific.Net Status - http://twitter.com/pacnetstatus

1 0

[Dovecot] Ping re: error running indexer-worker as non-root user
by Mike Abbott 19 Feb '13

19 Feb '13

Any hints about the issue I wrote about on Feb. 11? http://markmail.org/message/6g7itsu2u3fdnfkd Thanks.

1 0

[Dovecot] Dovecot-2.1.14 - pop3 processes always hangs forever - another follow-up
by Axel Luttgens 19 Feb '13

19 Feb '13

Hello, With the same basic configs as in my previous messages, I tried with the maildir format instead of the mbox format. That is, in both cases ("virtual" uids/gids vs a single "real" uid/gid), doveconf -n shows: mail_location = maildir:~/maildir instead of: mail_location = mbox:~/mboxes:INBOX=~/mboxes/inbox Here too, with "virtual" uids/gids, connections thru pop hang forever, while imap connections behave flawlessly. And with a single "real" uid/gid, connections thru both pop and imap behave as expected. As a result, it could be inferred that the problems I am encountering with pop connections do not depend on the mailbox format in use, and that they are entirely related to "virtual" uids/gids. To recap: with this very basic config # 2.1.14: /_ETC/dovecot/dovecot.conf # OS: Darwin 12.2.1 x86_64 auth_verbose = yes disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mboxes:INBOX=~/mboxes/inbox passdb { args = /_ETC/dovecot/db.conf driver = sql } ssl = no userdb { driver = prefetch } a pop connection hangs forever after the pass command $ telnet 127.0.0.1 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user user2 +OK pass pass2 and the log shows (here, when the user connects for the first time) dovecot[2997]: pop3-login: Login: user=<user2>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3113, secured, session=<GTOlMjfV3gB/AAAB> dovecot[2997]: pop3(user2): Debug: Effective uid=100003, gid=100003, home=/_Data/Mailstores/100003 dovecot[2997]: pop3(user2): Debug: Home dir not found: /_Data/Mailstores/100003 dovecot[2997]: pop3(user2): Debug: fs: root=/_Data/Mailstores/100003/mboxes, index=, control=, inbox=/_Data/Mailstores/100003/mboxes/inbox, alt= dovecot[2997]: pop3(user2): Debug: Namespace : /_Data/Mailstores/100003/mboxes doesn't exist yet, using default permissions dovecot[2997]: pop3(user2): Debug: Namespace : Using permissions from /_Data/Mailstores/100003/mboxes: mode=0700 gid=-1 dovecot[2997]: pop3(user2): Debug: Namespace : /_Data/Mailstores/100003/mboxes/inbox doesn't exist yet, using default permissions dovecot[2997]: pop3(user2): Debug: Namespace : Using permissions from /_Data/Mailstores/100003/mboxes: mode=0700 gid=-1 dovecot[2997]: pop3(user2): Debug: Namespace : /_Data/Mailstores/100003/mboxes/inbox doesn't exist yet, using default permissions dovecot[2997]: pop3(user2): Debug: Namespace : Using permissions from /_Data/Mailstores/100003/mboxes: mode=0700 gid=-1 With exactly the same config, imap connections are fully functional. Does someone have an explanation? TIA, Axel

2 11

[Dovecot] Defer emails until the user is ready to deal with them (snooze button / bring-forward file / bring-up file for emails)
by Chris Laif 19 Feb '13

19 Feb '13

Hi, I would like to add a feature to my email-client (Thunderbird) which stops emails from showing up until a specific time (e.g. having buttons for: show again this evening, tomorrow, next week, next month ...). As far as I've learned this is not possible with IMAP: - storing the 'do-not-show-until-time' within a custom header-field requires down- and uploading of the whole email and therefore causes problems especially with large emails - IMAP keywords are limited are limited in quantity and can not be compared with datetime functions Any suggestions will be greatly appreciated! Chris

6 20

[Dovecot] Get rid of inotify in 2.1.15
by Martin Rabl 19 Feb '13

19 Feb '13

Hi, after update to Dovecot 2.1.5 (Ubuntu 12.04, dovecot from https://launchpad.net/~kokelnet/+archive/dovecot21) we are getting a huge ;-) bunch of log entries about " imap(USERNAME): Warning: Inotify instance limit for user 5000 (UID vmail)". At last I did an echo 512 > /proc/sys/fs/inotify/max_user_instances but the logentries did appear again after some minutes. Maybe you have a hint for me? Thank you! At the bottom my current configuration. -- Greetings, Martin Rabl # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-36-generic x86_64 Ubuntu 12.04.2 LTS auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = * auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = /var/run/dovecot/auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = vmail default_login_user = vmail default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict { acl = mysql:/etc/dovecot/dovecot-dict-acl-sql.conf.ext } dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_ca_dir = imapc_ssl_verify = yes imapc_user = %u import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = * lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%Y-%m-%d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c login_trusted_networks = mail_access_groups = vmail mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:~/Maildir:INBOX=~/Maildir/INBOX:LAYOUT=fs mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_prefetch_count = 0 mail_privileged_group = vmail mail_save_crlf = no mail_shared_explicit_inbox = yes mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = vmail mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:%%Lh/Maildir/:INDEX=%%Lh/shared-idx/%%u:INBOX=%%Lh/Maildir/INBOX:LAYOUT=fs prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/srv/vmail/public:LAYOUT=fs prefix = public/ separator = / subscriptions = no type = public } namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Junk { auto = no special_use = \Junk } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/passwd.masterusers default_fields = deny = no driver = passwd-file master = yes override_fields = pass = no } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext default_fields = deny = no driver = ldap master = no override_fields = pass = no } passdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = deny = no driver = sql master = no override_fields = pass = no } plugin { acl = vfile acl_shared_dict = proxy::acl autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts autosubscribe5 = public/Files autosubscribe6 = public/Groupware autosubscribe7 = public/EXAMPLE sieve = ~/.dovecot.sieve sieve_after = /srv/vmail/sieve/after.sieve sieve_before = /srv/vmail/sieve/before.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_dir = /srv/vmail/sieve sieve_global_path = /srv/vmail/sieve/globalsieverc } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_ca_dir = pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = postmaster(a)EXAMPLE.de protocols = imap sieve quota_full_tempfail = yes recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_full_sync_interval = 12 hours replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = vmail mode = 0660 user = vmail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 2048 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 ssl = no } inet_listener sieve_deprecated { address = port = 2000 ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 ssl = no } inet_listener pop3s { address = port = 995 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = </etc/ssl/imap.EXAMPLE.de-20110527-20160525.pem ssl_cert = </etc/ssl/imap.EXAMPLE.de-20110527-20160525.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_key = </etc/ssl/imap.EXAMPLE.de-20110527-20160525.pem ssl_key_password = ssl_parameters_regenerate = 1 weeks ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = driver = sql override_fields = } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_client_workarounds = delay-newmail tb-lsub-flags tb-lsub-flags tb-extra-mailbox-sep mail_max_userip_connections = 10 mail_plugins = acl imap_acl autocreate } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve autocreate postmaster_address = postmaster(a)EXAMPLE.de quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags }

3 2

[Dovecot] statistics on proxy ???
by Marco Giunta 19 Feb '13

19 Feb '13

Hi at all, could I have imap statistics on my dovecot proxy server ?? Here my config: # 2.1.13: /etc/dovecot/dovecot.conf ... mail_plugins = stats ... plugin { ... stats_refresh = 30 secs stats_track_cmds = yes } ... service stats { fifo_listener stats-mail { mode = 0666 } } ... protocol imap { ... mail_plugins = stats imap_stats } File '/var/run/dovecot/stats' is always 0 byte: # ls -la /var/run/dovecot/stats srw-------. 1 root root 0 Feb 18 14:24 /var/run/dovecot/stats and 'dovecotadm' say always: # doveadm stats dump session doveadm(root): Info: no statistics available Is there something wrong in my config, or stats are not available on proxy ??? Cheers, Marco

2 2

[Dovecot] Private message flags in shared mailboxes
by Timo Sirainen 19 Feb '13

19 Feb '13

I'm wondering a bit how these should work. Comments welcome. In v2.2 the recommended way to enable private flags for shared mailboxes is to create private indexes with :INDEXPVT=<path>. This creates dovecot.index.pvt[.log] files which only contain message UIDs and flags. The indexes are updated somewhat lazily by updating them whenever user has the shared mailbox opened and it gets synced. 1. What would be a good place to configure which flags are shared and which are private? Currently it forces \Seen flag to be private and others not. With Maildir I used to have the idea of configuring these in dovecot-shared file, but that's a rather annoying extra file. Then again it could be cached into dovecot.index. Another possibility would be in dovecot-acl file, but public mailboxes might be enabled without ACL plugin. Mailbox attributes (for URLAUTH and for future METADATA) also exist in v2.2, but they require configuring a dict for them, which isn't very efficient either to read every time a mailbox is accessed. Mailbox's admin user should be able to do this somehow via IMAP protocol also. METADATA would pretty much be required for that I guess. 2. Private flags aren't currently inherited from the primary (shared) flags. With user-shared mailboxes this is good, because the owner doesn't have private indexes for the mailboxes, so when owner reads a mail it gets a \Seen flag in the primary index. If that mailbox was shared to someone else, the \Seen flag shouldn't be set. But this also means that for truly shared (public) mailboxes that have no owner you can't set initial flags with Sieve's addflag command (e.g. \Seen flag to high-scored mails in Spam). I guess it could be possible to change this so that the inheritance is done for public namespaces but not for shared namespaces, but is that really a good idea either?.. 3. Currently COPY/APPEND ignore any private flags (which also means dsync won't set them always). Fixing this would require remembering these flags, committing the save to primary index, syncing the private index to get the new mails added there, then updating their flags (or doing it directly at sync stage with some kludging code). To avoid race conditions the private index would need to be locked before committing the save. I guess this is doable.. 4. Private keywords aren't supported. I guess not much worse than system flags, but more code complexity. Wonder if anyone would care about them.

2 2

[Dovecot] Quota Problems with LMTP in HG 62a930eb22b5
by Thomas Leuxner 18 Feb '13

18 Feb '13

Since updating to the latest HG these errors occur. Nothing else changed in the config: $ dovecot --version 2.2.beta1 (62a930eb22b5) ==> /var/log/dovecot/dovecot.log <== Feb 18 09:47:32 spectre dovecot: lmtp(14340): Connect from local Feb 18 09:47:32 spectre dovecot: lmtp(14340, tlx(a)leuxner.net) Error: mkdir_parents(/var/vmail/domains/leuxner.net/tlx/mdbox) failed: File exists Feb 18 09:47:32 spectre dovecot: lmtp(14340, tlx(a)leuxner.net) Error: mkdir_parents(/var/vmail/domains/leuxner.net/tlx/mdbox) failed: File exists Feb 18 09:47:32 spectre dovecot: lmtp(14340, tlx(a)leuxner.net) Error: dict quota: Quota update failed, it's now desynced $ doveconf -n # 2.2.beta1 (62a930eb22b5): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-0.bpo.4-amd64 x86_64 Debian 6.0.6 auth_cache_size = 16 k auth_verbose = yes mail_location = mdbox:~/mdbox mail_plugins = acl quota stats mailbox_list_index = yes namespace { list = yes location = mdbox:/var/vmail/public:INDEXPVT=~/mdbox/public prefix = Public/ separator = / subscriptions = no type = public } namespace inbox { hidden = no inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } plugin { acl = vfile:/var/vmail/conf.d/%d/acls:cache_secs=300 mail_log_events = expunge mailbox_delete quota = dict:user::file:%h/mdbox/dovecot-quota quota_rule = *:storage=1GB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /var/vmail/conf.d/%d/sieve stats_refresh = 30s stats_track_cmds = yes } protocols = " imap lmtp" quota_full_tempfail = yes service auth-worker { unix_listener auth-worker { user = doveauth } user = doveauth } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = doveauth } service imap-login { inet_listener imap { address = 1.2.3.4 port = 143 } inet_listener imaps { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service stats { fifo_listener stats-mail { mode = 0600 user = vmail } } ssl_ca = </etc/ssl/certs/SSL123_CA_Bundle.pem ssl_cert = </etc/ssl/certs/host_domain_tld.crt ssl_key = </etc/ssl/private/host_domain_tld.key syslog_facility = local1 userdb { args = username_format=%u /var/vmail/auth.d/%d/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = acl quota stats sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl quota stats mail_log notify imap_acl imap_quota imap_stats }

2 3

[Dovecot] Dsync converting dbox->Maildir
by Anes Mukhametov 17 Feb '13

17 Feb '13

Hi! I've changed my mailbox format from dbox to Maildir. The problem is maildir message filename extension has no S=/W= field after migration. Using dovecot 2.1.15.

2 3

Re: [Dovecot] dovecot-uidlist crashing and re retriving messages by pop3 clients
by Piotr Rotter 17 Feb '13

17 Feb '13

I configure director temporary in some tricky way because I have to serve md5 and ntlm authentication method and I do not want reconfigure pop/imap servers. Can you confirm I done all ok becouse I have that issue: # doveadm director map doveadm(root): Error: User listing returned failure doveadm(root): Error: user listing failed user mail server ip expire time <unknown> 192.168.111.24 2013-02-14 00:57:34 <unknown> 192.168.111.21 2013-02-14 00:57:46 yet everything else works ok My password_query: password_query = SELECT clear AS password, 'Y' as proxy, '%u' AS destuser, clear AS pass FROM postfix_users WHERE email = '%u' My director server config (dovecot -n): # dovecot -n # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.7.1-hardened-r2 x86_64 Gentoo Base System release 2.1 auth_mechanisms = plain login digest-md5 cram-md5 ntlm apop auth_verbose = yes default_client_limit = 10000 default_process_limit = 10000 default_vsz_limit = 512 M deliver_log_format = from=%f, msgid=%m, psize=%p: %$ director_mail_servers = 192.168.111.21 192.168.111.22 192.168.111.23 192.168.111.24 192.168.111.25 192.168.111.26 director_servers = 195.78.67.29 director_user_expire = 2 hours disable_plaintext_auth = no passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = box msgid from size } protocols = imap pop3 service auth { client_limit = 10000 unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service director { inet_listener { port = 9090 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service pop3-login { executable = pop3-login director } ssl_ca = </etc/ssl/dovecot.ca ssl_cert = </etc/ssl/dovecot.crt ssl_key = </etc/ssl/dovecot.key

2 4

[Dovecot] Virtual Users Dovecot and Postfix
by Silvio Siefke 17 Feb '13

17 Feb '13

Hello, i want setup my Mailserver with the Tutorial on Dovecot Wiki. http://wiki2.dovecot.org/HowTo/VirtualUserFlatFilesPostfix I have one question for this, must i set the Mailadresses in /etc/postfix/virtual too or is the passwd File from dovecot enough? Thank you for help & Greetings Silvio

3 5

[Dovecot] doveadm -D quota get -u user
by Robert Schetterer 16 Feb '13

16 Feb '13

Hi Timo, just running into problems with doveadm -D quota get -u user doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_expire_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_listescape_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_virtual_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_lucene_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so doveadm(root): Fatal: Unknown command 'quota', but plugin quota exists. Try to set mail_plugins=quota should mail_plugins=quota really be set ? dovecot --version 2.1.12 (abcc9959b757) Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

2 2

[Dovecot] proxy imaps
by Antonio Casado Rodriguez 16 Feb '13

16 Feb '13

Hi all, I had a imaps dovecot server working normal. I wanted to isolate the Internet connection by placing a proxy imap(Intranet connections still connect directly to the imap server). Yesterday I set up oneproxy imaps dovecot and thereafter, imap dovecot logs on errors: imap-login: Error: OpenSSL malloc() failed. You may need to increase login_process_size Need dovecot more memory with imap proxy connections than direct connections? Regards -- Antonio Casado Rodríguez Administrador de Servicios de Red y Seguridad TIC Área de Comunicaciones STIC (Servicio de las Tecnologías de la Información y las Comunicaciones) UNIVERSIDAD DE ALMERÍA Este mensaje y los ficheros que puedan ser adjuntados son confidenciales. Los mismos contienen información reservada que no puede ser difundida. Si usted ha recibido este correo por error, tenga la amabilidad de eliminarlo de su sistema y avisar al remitente mediante reenvío a su dirección electrónica; no deberá copiar el mensaje ni divulgar su contenido a ninguna persona. Su dirección de correo electrónico junto a sus datos personales constan en un fichero titularidad de La UNIVERSIDAD DE ALMERÍA cuya finalidad es la de mantener el contacto con usted. Si quiere saber de qué información disponemos de usted, modificarla, y en su caso, cancelarla, puede hacerlo enviando un escrito al efecto, acompañado de una fotocopia de su D.N.I. a la siguiente dirección: UNIVERSIDAD DE ALMERÍA –. Secretaría General de La Universidad de Almería. Edificio Central, Planta baja. Ctra. Sacramento s/n, La Cañada de San Urbano. CP 04120 Almería

2 1

[Dovecot] Segfault with doveadm-server
by Evgeny Basov 16 Feb '13

16 Feb '13

Hello. With dovecot ver. from 20130211 I have a segfault on doveadm when sync. There are messages from server: 2013-02-14T12:42:35.508031+04:00 imap1 kernel: [870542.927083] doveadm-server[9483]: segfault at 4 ip 00000074b228bc24 sp 000003f30b8e61b0 error 4 in doveadm-server[74b226b000+3a000] or 2013-02-14T12:47:39.850942+04:00 imap1 kernel: [870847.279513] doveadm[9513]: segfault at 4 ip 00000006b31ac294 sp 000003dc5c669a90 error 4 in doveadm[6b3178000+5f000] I cannot catch process doveadm-server by strace because it starts with unknown PID on demand.

3 4

[Dovecot] dovecot-2.2: dsync to imapc not working
by Evgeny Basov 16 Feb '13

16 Feb '13

Hello. I have dovecot installation # dovecot --version 20130205 (03a0af22100d+) built with imapc backend. I'm tried to sync mailboxes from another server after clean mail directory localy: # dsync -v -o imapc_user="user(a)example.org" -o imapc_password="pass" -o imapc_host=imap.example.org -o imapc_features=rfc822.size -o mailbox_list_index=no backup -R -f -u "user(a)example.org" imapc: and get this message dsync(user(a)example.org): Error: Exporting mailbox INBOX failed: Backend doesn't support GUIDs, sync with header hashes instead Repeated command returns this one message: dsync(user(a)example.org): Error: Mailbox INBOX sync: mailbox_delete failed: INBOX can't be deleted. What wrong with this build? Maybe there is another way to do it? For example create backup in local temporary directory and synchronize this one and working storage.

2 3

[Dovecot] accumulating orphaned processes
by Jeff Gustafson 16 Feb '13

16 Feb '13

I'm getting orphaned processes on our mail servers. Some machines has processes hanging around from a week ago. I'm running the current stable of dovecot 2.1.15, but the problem has been happening for a while now. I thought it would be good to report the issue. I ran an strace on one of them and this is the output: Process 21370 attached - interrupt to quit open("/var/run/dovecot/stats-mail", O_WRONLY) = 7 write(7, "DISCONNECT\ta09ade0350d81d517a530"..., 44) = 44 munmap(0x7f1ad8a8d000, 266240) = 0 close(13) = 0 close(12) = 0 epoll_ctl(9, EPOLL_CTL_DEL, 11, {0, {u32=17384128, u64=17384128}}) = 0 close(11) = 0 close(7) = 0 munmap(0x7f1ada5d6000, 2106272) = 0 munmap(0x7f1ada7d9000, 2161360) = 0 munmap(0x7f1ada3cf000, 2124136) = 0 munmap(0x323c800000, 2162768) = 0 munmap(0x7f1ad9fc8000, 2102976) = 0 munmap(0x7f1ada1ca000, 2114728) = 0 epoll_ctl(9, EPOLL_CTL_DEL, 4, {0, {u32=17319120, u64=17319120}}) = 0 close(4) = 0 close(8) = 0 close(9) = 0 exit_group(0) = ? Process 21370 detached As you can see, the process exited at that point. Any ideas? ...Jeff

2 1

[Dovecot] Requested xxxx scheme, but we have a NULL password after upgrade
by PhilQ 15 Feb '13

15 Feb '13

I'm having an issue I can't seem to work around after upgrading from Dovecot 1.0.7 to 1.2.17. After getting Dovecot 1.07 working on CentOS 5.9, I decided that it might be wise to upgrade to a later version, so I stuck with 1.x and went with 1.2.17, which I had to compile from source. CentOS was originally using /etc as the starting path for Dovecot files but the source distribution puts most of the stuff under /usr/local/etc. After the usual config>make>make install dance I made the necessary changes to point to the new libraries, modules, etc. and the "imap-login: Fatal: Dovecot version mismatch: Master is v1.2.17, login is v1.0.7...." messages went away. After doing this though I cannot login, I get the following error messages: Feb 13 15:50:40 auth(default): Info: client in: AUTH 7 NTLM service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=1470 Feb 13 15:50:40 auth(default): Info: client out: CONT 7 Feb 13 15:50:40 auth(default): Info: client in: CONT 7 TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== Feb 13 15:50:40 auth(default): Info: client out: CONT 7 TlRMTVNTUAACAAAAMAAwADAAAAAFAooATj7XW6ve2hwAAAAAAAAAADgAOABgAAAAUwBlAHIAdgBlAHIAMQAuAGgAZQByAHMAYwBoAGwAYQB1AHIAZQBuAC4AYwBvAG0AAwAwAFMAZQByAHYAZQByADEALgBoAGUAcgBzAGMAaABsAGEAdQByAGUAbgAuAGMAbwBtAAAAAAA= Feb 13 15:50:40 auth(default): Info: client in: CONT 7 TlRMTVNTUAADAAAAGAAYAGoAAABoAGgAggAAAAAAAABIAAAAEAAQAEgAAAASABIAWAAAAAAAAADqAAAABQKIAgUBKAoAAAAP*CENSORED*bgBiAFEAUwBFAC0AVwBJAE4AWABQAEXO6p/WuopqQ02x1kzJGW3NoQELKw32N88JqkbMOYOVErhiS492elwBAQAAAAAAA*CENSORED*ysN9jcAAAAAAwAwAFMAZQByAHYAZQByADEALgBoAGUAcgBzAGMAaABsAGEAdQByAGUAbgAuAGMAbwBtAAAAAAAAAAAA Feb 13 15:50:40 auth(default): Info: cache(pquesinb,192.168.2.100): miss Feb 13 15:50:40 auth(default): Info: passwd-file(pquesinb,192.168.2.100): lookup: user=pquesinb file=/etc/dovecot.users Feb 13 15:50:40 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 13 15:50:40 auth(default): Info: cache(pquesinb,192.168.2.100): miss Feb 13 15:50:40 auth(default): Info: password(pquesinb,192.168.2.100): passdb doesn't support credential lookups Feb 13 15:50:40 auth(default): Info: cache(pquesinb,192.168.2.100): miss Feb 13 15:50:40 auth(default): Info: password(pquesinb,192.168.2.100): passdb doesn't support credential lookups Feb 13 15:50:40 auth(default): Info: cache(pquesinb,192.168.2.100): miss Feb 13 15:50:40 auth(default): Info: password(pquesinb,192.168.2.100): passdb doesn't support credential lookups Feb 13 15:50:40 auth(default): Info: cache(pquesinb,192.168.2.100): miss Feb 13 15:50:40 auth(default): Info: password(pquesinb,192.168.2.100): passdb doesn't support credential lookups Feb 13 15:50:42 auth(default): Info: client out: FAIL 7 user=pquesinb Looking at the log from the old version while it was working, I was getting messages like the following: dovecot: Feb 04 14:14:21 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 04 14:14:21 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 04 14:15:03 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 04 14:15:03 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 04 14:15:23 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 04 14:15:23 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 04 14:16:05 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 04 14:16:05 Info: IMAP(pquesinb): Disconnected: Logged out /etc/dovecot.users contains a list of usernames. Is this error the result of additional security which has been incorporated into the later version of Dovecot, or is it because my installation of the later version from source is broken, somehow incompatible, etc? Dovecot was configured to use PAM and it appeared to know the password of my account, failing when it was entered incorrectly so I'm assuming that it was successfully using PAM. I kept the same syntax in the later config file. >From dovecot.conf: passdb pam { # [session=yes] [setcred=yes] [failure_show_msg=yes] [max_requests=<n>] # [cache_key=<key>] [<service name>] # # session=yes makes Dovecot open and immediately close PAM session. Some # PAM plugins need this to work, such as pam_mkhomedir. # # setcred=yes makes Dovecot establish PAM credentials if some PAM plugins # need that. They aren't ever deleted though, so this isn't enabled by # default. # # max_requests specifies how many PAM lookups to do in one process before # recreating the process. The default is 100, because many PAM plugins # leak memory. # # cache_key can be used to enable authentication caching for PAM # (auth_cache_size also needs to be set). It isn't enabled by default # because PAM modules can do all kinds of checks besides checking password, # such as checking IP address. Dovecot can't know about these checks # without some help. cache_key is simply a list of variables (see # doc/wiki/Variables.txt) which must match for the cached data to be used. # Here are some examples: # %u - Username must match. Probably sufficient for most uses. # %u%r - Username and remote IP address must match. # %u%s - Username and service (ie. IMAP, POP3) must match. # # The service name can contain variables, for example %Ls expands to # pop3 or imap. # # Some examples: # args = session=yes %Ls args = cache_key=%u dovecot #args = dovecot } If anyone could give me some ideas on where to go from here, I'd really appreciate it. If there's little chance of getting the newer version to work with CentOS 5 then I'm ready to just drop back to the older version. Thanks a bunch. - Phil Config info follows: [root@Server1 lda]# dovecot -n # 1.2.17: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-348.el5.centos.plusxen x86_64 CentOS release 5.9 (Final) log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.log protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/pki/dovecot/certs/dovecot.pem ssl_key_file: /etc/pki/dovecot/private/dovecot.pem disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login max_mail_processes: 64 mail_location: maildir:~/Maildir maildir_very_dirty_syncs: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 100 imap_client_workarounds(default): outlook-idle imap_client_workarounds(imap): outlook-idle imap_client_workarounds(pop3): lda: mail_plugin_dir: /usr/local/lib/dovecot/lda auth default: mechanisms: ntlm plain login digest-md5 cache_size: 16 cache_ttl: 90 verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot passdb: driver: passwd passdb: driver: shadow userdb: driver: passwd -- View this message in context: http://dovecot.2317879.n4.nabble.com/Requested-xxxx-scheme-but-we-have-a-NU… Sent from the Dovecot mailing list archive at Nabble.com.

1 2

Re: [Dovecot] Authentication with many Windows AD
by Antonio Alberola 14 Feb '13

14 Feb '13

Hi, > You can set as many databases as you want. Check this: > > http://wiki2.dovecot.org/PasswordDatabase > http://wiki2.dovecot.org/Authentication/MultipleDatabases This solution is valid if I have only one domain. In case you have more than one domain, you need authenticate in the appropriate LDAP server. Is That correct? I'm going to explain my particular case. I have five Windows domains with some users who belong to those domains. I also have other users who are authenticated with local UNIX accounts. The only thing that I can do (I think) is using a Radius server. But, I'd rather not use it.

2 1

Re: [Dovecot] Imap process crash: assertion failed: (full_fs_access)
by Joseph Tam 14 Feb '13

14 Feb '13

On Wed, 13 Feb 2013, dovecot-request(a)dovecot.org wrote: Timo Sirainen <tss(a)iki.fi> writes: >>>> Any guess at what would cause this? >>>>> Feb 7 21:20:53 server dovecot: imap(user): Panic: file >>>> mailbox-list-fs-iter.c: line 447 (fs_list_get_roots): assertion >>>> failed: (full_fs_access) >>> LIST command that had invalid parameters that somehow got through the >>> first validity check. What namespace config do you have? >> >> namespace { >> alias_for = >> hidden = yes >> list = no >> location = >> prefix = / >> separator = / >> } > > This one causes these crashes. Fixed in v2.2 now: http://hg.dovecot.org/dovecot-2.2/rev/fb367a977077 Thanks for diagnosing this. I'll probably remove this namespace or limp along until 2.2 becomes the latest stable release. I added this namespace alias in an abundance of caution: this was to prevent users from trying to peruse the entire file space e.g. /etc. A poor man's chroot. I didn't test this thoroughly to see if it actually did what it was supposed to. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Authentication with many Windows AD
by Antonio Alberola 14 Feb '13

14 Feb '13

Dear All, I'm a new user of Dovecot and I need support with the authentication process. I use Dovecot 2.0.9 and Postfix 2.6.6 on host x86_64-redhat-linux-gnu 2.6.32-279.14.1.el6.x86_64 CentOS release 6.3 (Final) I need to select the validation method depending on the user. I have users that have to be authenticate with UNIX account, and I have others thats have to be authenticate with Windows AD. For example, some sysadmins and special accounts needs validate with Unix accounts. Other normal users have to authenticate with Windows AD, I have many Windows controllers. Some users authenticate to a specific Windows AD and other users are validated in another one. How I can do this? Thank you very much. Antonio Alberola

3 2

[Dovecot] FreeBSD, Dovecot and ZFS
by Jason Lock 13 Feb '13

13 Feb '13

Mail Issues - FreeBSD Hello, my apologies if this may be the wrong forum but hoping that maybe someone might be able to provide some insight. Have a very sporadic and strange issue with our mail servers running Dovecot on FreeBSD. There are three servers hosting Dovecot with FreeBSD as the underlying operating system. All three connect to a NAS server, again running FreeBSD and ZFS. When the specific issue occurs, clients connecting to check mail via POP3 or IMAP experience long delays and timeouts. To the point where POP3 Logins fail due to the timeouts. The issue is further compounded by clients increasing the number of attempts to check mail. Part of the frustration in attempting to diagnose the issue is not knowing the root cause or symptom that initates the issue. Wondering if anyone has experienced anything similar, or suggestions on ways to help identify the root cause

5 6

[Dovecot] dovecot-uidlist crashing and re retriving messages by pop3 clients
by Piotr Rotter 13 Feb '13

13 Feb '13

Hello, I have issue with dovecot (v. 2.1.13)configuration after implementation dovecot-lda (I used maildrop earlier). Now i have 9 servers with storage by NFS v3. My problem is frequently dovecot-uidlist crashing. 2013-02-13T13:34:02.447969+01:00 k1 dovecot: imap(user(a)domain.com): Error: Broken file /path_to_mailbox/dovecot-uidlist line 3170: Invalid data: 2013-02-13T13:34:34.527715+01:00 k1 dovecot: pop3(user(a)domain.com): Error: Broken file /path_to_mailbox/dovecot-uidlist line 367: Invalid data: It happens few time in minute for diferent users and has effect to re retriving messages by pop3 clients. This my NFS mount options: (rw,tcp,vers=3,actimeo=0) 10-mail.conf options: mmap_disable = yes dotlock_use_excl = yes mail_fsync=always mail_nfs_storage = yes mail_nfs_index = yes lock_method = dotlock I do not know what I did wrong and how solve this issue. Maybe NFS v4 or fcntl locks or migration to pop3_uidl_format = %g will by solution. Please some hint. Please any help for solve this issue and sorry my english.

2 1

[Dovecot] backing up maildir dovecot files
by David Mehler 13 Feb '13

13 Feb '13

Hello, I'm having to migrate servers. Both are dovecot2 systems. I'm wanting to copy over my mail store from one system to the other. I'd like to preserve dates/times of emails. These are maildir setups on both boxes, I'd like to be as transparent to the end user as possible. I currently have the first dovecot system offline and the second dovecot system is offline. Recommendations? Thanks. Dave.

5 9

[Dovecot] dsync 2.1.10 does not correctly handle renames of mailbox subtrees
by Karol Jurak 13 Feb '13

13 Feb '13

Hi, It seems that dsync 2.1.10 does not correctly handle renames of mailbox subtrees. The scenario is as follows. There are two servers, A and B, both running dovecot 2.1.10 and configured to use mdbox. Automatic replication between them is disabled, ie. replication plugin is not active and replicator service has process_min_avail = 0. I perform the following actions: 1. On A: doveadm mailbox create -u test_user a a/b a/b/c d 2. On A: doveadm sync -u test_user -d The result is as expected: on both A and B there are a/b/c and d mailboxes. Now I connect to A via IMAP and rename a/b to d/b. The result is as expected: on A there are a and d/b/c mailboxes. Next I execute on A 'doveadm sync -u mailstoragetest -d' and now the result is not as expected: there are a/b/c and d/b subtrees on both A and B and a/b is just a directory, ie. it does not contain dbox-Mails (the rest are proper mailboxes). dovecot.mailbox.logs have the following records appended to them: A: #2112: rename 33259783092361d18c60ba1c7cfe973c (2013-02-12 10:42:55) - this probably is the rename of a/b to d/b (recursive, ie. including children - in this case a/b/c => d/b/c) by the IMAP client #2136: rename ee2be6da91ae879476b152d7ca041f1b (1970-01-01 01:00:00) - rename of d/b/c to a/b/c by dsync (unexpected/incorrect) B: #1104: rename 33259783092361d18c60ba1c7cfe973c (1970-01-01 01:00:00) - rename of a/b to d/b (non recursive) by dsync What seems to be missing is the record in A's dovecot.mailbox.log describing the rename of a/b/c to d/b/c (or in general case the set of records describing the renames of all the children of a/b). Would appending such records allow dsync to make correct decisions as to which mailboxes and on which servers to rename? Thanks for any help. # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.1 auth_master_user_separator = * auth_username_format = %Ln default_vsz_limit = 2 G dotlock_use_excl = no dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l5 log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = mail mail_location = mdbox:~/mdbox:ALT=/var/vmail/alt/%n mail_plugins = acl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile } protocols = imap lmtp pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { executable = /usr/lib/dovecot/auth unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } unix_listener auth-userdb { mode = 0666 } user = root } service dict { unix_listener dict { mode = 0666 } } service doveadm { process_min_avail = 1 service_count = 1024 } service imap-login { chroot = login executable = /usr/lib/dovecot/imap-login inet_listener imap { address = * port = 143 } service_count = 0 user = dovecot } service imap { executable = /usr/lib/dovecot/imap } service lmtp { inet_listener lmtp { port = 24 } process_limit = 48 } service pop3-login { chroot = login executable = /usr/lib/dovecot/pop3-login inet_listener pop3 { address = * port = 110 } service_count = 0 user = dovecot } service pop3 { executable = /usr/lib/dovecot/pop3 } ssl = no userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = acl } protocol lmtp { mail_plugins = acl } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = acl } -- Karol Jurak

2 2

Re: [Dovecot] Imap process crash: assertion failed: (full_fs_access)
by Joseph Tam 13 Feb '13

13 Feb '13

Timo Sirainen <tss(a)iki.fi> writes: > > Any guess at what would cause this? > > > > Feb 7 21:20:53 server dovecot: imap(user): Panic: file > > mailbox-list-fs-iter.c: line 447 (fs_list_get_roots): assertion > > failed: (full_fs_access) > > LIST command that had invalid parameters that somehow got through the > first validity check. What namespace config do you have? I got more info from the user that had this problem. He reported that he was was setting up a new Email client (Nexus4 Android) and he sent me a screenshot of his setup. Everything look ordinary except perhaps the IMAP prefix set to "mail". My setup documents inform users to leave it blank, but sometimes they use "mail/", a holdover from the uw-imapd days. I provide some aliases for that, but I don't know what would happen if you leave off the trailing "/". My namespace settings as reported by dovecot -n: namespace { inbox = yes location = prefix = separator = / } (The following are aliases to keep backward compatibility) namespace { alias_for = hidden = yes list = no location = prefix = / separator = / } namespace { alias_for = hidden = yes list = no location = prefix = mail/ separator = / } namespace { alias_for = hidden = yes list = no location = prefix = ~/mail/ separator = / } namespace { alias_for = hidden = yes list = no location = prefix = ~%u/mail/ separator = / } I've asked the user to change his prefix, and he'll probably report back. Joseph Tam <jtam.home(a)gmail.com>

2 2

[Dovecot] Is there any way to mask or hide the INBOX label for Dovecot 1.2.x Shared Mailboxes?
by Jason Discount 13 Feb '13

13 Feb '13

Hello, I'm setting up a new Dovecot sever to replace an old Cyrus server, and need to keep things as consistent as possible. I have a couple local accounts, like junkmail and notjunkmail that users get shared access to, and can drop things in to train sa-update. However, when users share over junkmail's inbox, it's displayed in the hierarchy: • Other Users • junkmail • INBOX Is there any way to get junkmail's INBOX to just show up at Other Users/junkmail and not require that extra depth? • Other Users • junkmail I'm running Debian Squeeze and the standard dovecot package available therein: > # uname -a > Linux internet.digitalquay.com.au 2.6.32-5-xen-amd64 #1 SMP Sun Sep 23 13:49:30 UTC 2012 x86_64 GNU/Linux > #dovecot --version > 1.2.15 I'm running in a configuration where all mail is owned by the vmail user, due to the impression I'm under, that it's a better way if there is to be shared mailboxes. Relevant bits of dovecot -n: > mail_uid: vmail > mail_gid: vmail > mail_location: maildir:/var/spool/dovecot/user/%u > mail_plugins: acl imap_acl > namespace: > type: private > separator: / > inbox: yes > list: yes > subscriptions: yes > namespace: > type: shared > separator: / > prefix: Other Users/%%u/ > location: maildir:/var/spool/dovecot/user/%%u:INDEX="/var/spool/dovecot/user/%u/Other\ Users/%%u" > list: children > auth default: > passdb: > driver: ldap > args: /etc/dovecot/dovecot-ldap.conf > userdb: > driver: passwd > args: uid=vmail gid=vmail blocking=yes mail=maildir:/var/spool/dovecot/user/%u Am I barking up the wrong tree, or is this possible? Thanks, Jay

2 1

[Dovecot] Marking messages read / retaining date with Sieve
by Bret Martin 13 Feb '13

13 Feb '13

I'm trying to mark several hundred thousand messages as read as they are delivered via dovecot-lda(1). (I'm importing some mail from another format for migration purposes.) I've been able to do this with Sieve, but it has the side effect that the messages' received and saved dates are set to the current date, and Apple Mail (at least) uses one of these to display the message date. Without the Sieve filter in place, the dates are retained based on the From_ line as I would like. Does anyone know of any way I can either - retain the date when delivering using Sieve? - systematically mark a specific set of messages as read *after* delivery instead, perhaps with doveadm(1)? (even marking *everything* read would work in this particular case. I couldn't find any way to set flags with doveadm) Thanks, --Bret

2 5