- dovecot - dovecot.org

[Dovecot] Active Directory and Dovecot NTLM Authentication problem
by BINOTTO Luis SIDOR 02 Apr '13

02 Apr '13

Hello everyone... I have a problem when I use NTLM authentication with dovecot. The authentication is made only in PLAIN TEXT. The scenario is: Debian Squeeze 6.0.6 Dovecot 2.1.7 Samba 3.5.6. Samba is correctly configured into the domain. The error: (extract from syslog) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2]@ [SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832579 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Dovecot configuration: (dovecot -n) # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 ext3 auth_mechanisms = plain login ntlm auth_use_winbind = yes disable_plaintext_auth = no mail_location = maildir:/mailboxes/Administrativos/%Lu namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=16343 gid=16343 home=/mailboxes/Administrativos/%Lu driver = static } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = } protocol pop3 { mail_plugins = pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } Pam configuration: /etc/pam.d/dovecot auth sufficient pam_krb5.so account sufficient pam_krb5.so /etc/krb5.conf [libdefaults] default_realm = SIDOR.NET clockskew =300 [realms] SIDOR.NET = { kdc = sirprddc1.sidor.net kdc = sirprddc2.sidor.net kdc = sirprddc3.sidor.net admin_server = sirprddc1.sidor.net default_domain = sidor.net } [domain_realm] .sidor.net = SIDOR.NET sidor.net = SIDOR.NET [login] krb4_convert = true krb4_get_tickets = false [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmin.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 try_first_pass = true } /etc/samba/smb.conf #======================= Global Settings ======================= [global] ## Browsing/Identification ### security = ADS workgroup = sidorve realm = SIDOR.NET winbind use default domain = yes server string = %h wins support = no wins server = 10.50.30.51 dns proxy = no #### Debugging/Accounting #### syslog = 0 panic action = /usr/share/samba/panic-action %d ####### Authentication ####### encrypt passwords = yes ############ Misc ############ domain master = no local master = no prefered master = no winbind separator = \\ idmap uid = 10000-29000 idmap gid = 10000-29000 template shell = /bin/bash template homedir = /home/%D/%U winbind enum groups = yes winbind enum users = yes winbind refresh tickets = yes auth methods = winbind The Logs Syslog Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832426,0] utils/ntlm_auth.c:598(winbind_pw_check) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2]@ [SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:41.832579 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:41 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Apr 2 09:47:42 sirprdsvcmsg02 lrmd: [1598]: debug: rsc:Administr_fs:16: monitor Apr 2 09:47:47 sirprdsvcmsg02 dovecot: imap-login: Login: user=<test2>, method= PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23706, session=<n/6DZmHZxAAKMgKW> PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23706, session=<n/6DZmHZxAAKMgKW> Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:47.408887 , 0] utils/ntlm_auth.c:598(winbind_pw_check) Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: Login for user []\[test2] @[SIRP00000733] failed due to [winbind client not authorized to use winbindd_pam _auth_crap. Ensure permissions on /var/run/samba/winbindd_privileged are set cor rectly.] Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: [2013/04/02 09:47:47.409203 , 0] utils/ntlm_auth.c:888(manage_squid_ntlmssp_request) Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: NTLMSSP BH: NT_STATUS_ACC ESS_DENIED Apr 2 09:47:47 sirprdsvcmsg02 dovecot: auth: Error: winbind: ntlm_auth exited w ith exit code 0 Apr 2 09:47:48 sirprdsvcmsg02 postfix/postfix-script[23819]: the Postfix mail s ystem is running: PID: 2390 Apr 2 09:47:53 sirprdsvcmsg02 dovecot: imap-login: Login: user=<test2>, method= PLAIN, rip=10.50.2.150, lip=10.50.30.90, mpid=23820, session=<iBXZZmHZxQAKMgKW> Auth.log Apr 2 09:52:35 sirprdsvcmsg02 auth: pam_krb5(dovecot:auth): user test2 authenti cated as test2(a)SIDOR.NET I hope someone could help me. Thanks in advance, Best Regards, Luis " Notificacion Automatica: Este mensaje y cualquier archivo que se adjunte contiene informacion privilegiada y confidencial. Es para uso exclusivo del destinatario. Si usted ha recibido esta comunicacion por error, por favor avisenos inmediatamente. Automatic notification: This e-mail and any file transmitted with it are confidential and may be legally privileged. It is intended solely for the addressee and may not be disclosed to or used by anyone other than the addressee. If you have received this e-mail by mistake , please advise the sender immediately"

1 0

[Dovecot] (no subject)
by Walter Steiner 02 Apr '13

02 Apr '13

I've run into a problem with `doveadm backup` (2.2 rc2 and 20130226) I did not notice in 2.1.15 doveadm backup [-Dv] -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc: => crashes (signal 6 with acl plugin configured, sig 11 without acl) If this is considered a bug (not just because of the crash but in the meaning of "my configuration should work") it would be great if it could be fixed.;-) If I can provide more detail (log, gdb bt full and doveconf -n follow the next paragraph) or test something I would be happy to to so. As I'm planning dsync replication of the two backends I thought it would be better to start things with the upcoming new dovecot 2.2 (dsync protocol) instead of 2.1.15. (?!) --- first some information about what I'm trying to do --- We want to replace our single cyrus 2.4 server with two backend servers (separate storage and all user mailboxes etc. each) Even if cyrus-to-cyrus should be much easier _and_ time is slipping away I want to take this one opportunity to switch to dovecot if possible. - Thank you very much for your great work on dovecot and all the efforts! - We want the IMAP clients to continue using their folders/messages etc so I want to reproduce the "cyrus structure" we are using for the last 14 years: - own user folders: INBOX and INBOX.subfolder ... - (if possible: other user folders: user.otheruser...) - converting as much as possible of existing data To get the folders/messages into the new dovecot server(s) I'm thinking about some repeated "doveadm mirror / backup -R ... imapc:" runs while the cyrus server is still in use. The first sync run will take several days but a few more and the time will be short enough to do the complete switch-over w/o surprises. Insertion: I played with 2.1.15 and namespaces but maybe I did not understand this well enough: doveadm backup -R -u userx [w or w/o -m INBOX and/or -n INBOX] imapc: => if cyrus userx has permissions on other users mailboxes these folders are also copied. ... copied _into_ the INBOX of (dovecot) userx. I too got the known problems with INBOX.INBOX. paths. I changed dsync-brain.c sources to skip "^user." folders and to cut the additional "INBOX." => seems okay... messages (only the expected) got transferred! --- To see if things still work as with 2.1.15 (no dsync source modification!) I did (as before with 2.1.15): doveadm backup [-Dv] -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc: => but it crashes (signal 6) doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: auth input: cyrtest1(a)iai.uni-bonn.de master_user=cyrtest1(a)iai.uni-bonn.de quota_rule=*:storage=512M uid=13004 gid=13004 home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/master_user=cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/quota_rule=*:storage=512M doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1:INDEX=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1:MAILBOXDIR=mailboxes/ doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: fs: root=/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1, index=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1, indexpvt=, control=, inbox=, alt= doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: initializing backend with data: vfile:/m/d/etc/acl:cache_secs=300 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: acl username = cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl: owner = 1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: Global ACL directory: /m/d/etc/acl doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: reading file /m/d/etc/acl//.DEFAULT doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/dovecot-acl not found doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/etc/acl/INBOX not found doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: file /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/INBOX/dbox-Mails/dovecot-acl not found dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Looking up IP address dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Connecting to 10.11.12.13:993 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Starting SSL handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE AUTH=LOGIN AUTH=PLAIN SASL-IR dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticating as cyrusmaster for user cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE IDLE dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticated successfully dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: initializing backend with data: vfile:/m/d/etc/acl:cache_secs=300 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: acl username = cyrtest1(a)iai.uni-bonn.de dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl: owner = 1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: Global ACL directory: /m/d/etc/acl dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: acl vfile: reading file /m/d/etc/acl//.DEFAULT dsync(cyrtest1(a)iai.uni-bonn.de): Panic: file mailbox-list.c: line 1226: unreached dsync(cyrtest1(a)iai.uni-bonn.de): Error: Raw backtrace: /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_fatal_finish+0x26 [0xffff80ff94f93b78] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_error_handler+0x0 [0xffff80ff94f93c07] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'i_fatal+0x0 [0xffff80ff94f93ee8] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_get_root_forced+0x48 [0xffff80ff94e46984] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_list_get_root_dir+0x25 [0xffff80ff94c6e3f6] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_list_get_path+0x1f [0xffff80ff94c6e4a4] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_read+0x40 [0xffff80ff94c6e4ff] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_refresh+0x87 [0xffff80ff94c6e904] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_acllist_verify+0x44 [0xffff80ff94c6f0a0] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_vfile_object_refresh_cache+0x24f [0xffff80ff94c6d2b4] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_backend_get_default_rights+0x28 [0xffff80ff94c6ad3b] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_mailbox_try_list_fast+0xb2 [0xffff80ff94c72a6b] -> /m/sw/dc/2.2-20130226/lib/dovecot/lib01_acl_plugin.so'acl_mailbox_list_iter_init+0x188 [0xffff80ff94c72dee] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_iter_init_multiple+0x91 [0xffff80ff94e5a120] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot-storage.so.0.0.0'mailbox_list_iter_init+0x39 [0xffff80ff94e59c96] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_mailbox_tree_fill+0x103 [0x45443a] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_mailbox_trees_init+0x114 [0x448d1c] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_slave_recv_handshake+0x18d [0x4464d6] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_run_real+0xe7 [0x44681f] -> /m/sw/dc/2.2-20130226/bin/doveadm'dsync_brain_run+0x61 [0x4469c9] -> /m/sw/dc/2.2-20130226/bin/doveadm'cmd_dsync_run_local+0x325 [0x443a5a] -> /m/sw/dc/2.2-20130226/bin/doveadm'cmd_dsync_run+0x23d [0x44405d] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_next_user+0x189 [0x4284ba] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_single_user+0x157 [0x428680] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_cmd+0x3bc [0x428f24] -> /m/sw/dc/2.2-20130226/bin/doveadm'doveadm_mail_try_run+0xac [0x42919b] -> /m/sw/dc/2.2-20130226/bin/doveadm'main+0x286 [0x4332b3] -> /m/sw/dc/2.2-20130226/bin/doveadm'_start+0x6c [0x427a8c] Abort (core dumped) Core was generated by `/m/sw/dc/a/bin/doveadm -Dv backup -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc'. Program terminated with signal 6, Aborted. [New process 94877 ] #0 0xffff80ff965aaaaa in _lwp_kill () from /lib/64/libc.so.1 (gdb) bt full #0 0xffff80ff965aaaaa in _lwp_kill () from /lib/64/libc.so.1 No symbol table info available. #1 0xffff80ff9659f2a1 in thr_kill () from /lib/64/libc.so.1 No symbol table info available. #2 0xffff80ff9654feb9 in raise () from /lib/64/libc.so.1 No symbol table info available. #3 0xffff80ff96526632 in abort () from /lib/64/libc.so.1 No symbol table info available. #4 0xffff80ff94f93b9f in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:142 backtrace = 0x48d720 "/m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_fatal_finish+0x26 [0xffff80ff94f93b78] -> /m/sw/dc/2.2-20130226/lib/dovecot/libdovecot.so.0.0.0'default_error_handler+0x0 [0xffff80ff94f93"... #5 0xffff80ff94f93c07 in default_fatal_handler (ctx=0xffff80ffbfffe890, format=0xffff80ff94ec64e9 "file %s: line %d: unreached", args=0xffff80ffbfffe870) at failures.c:142 status = 0 #6 0xffff80ff94f93ee8 in i_panic (format=0xffff80ff94ec64e9 "file %s: line %d: unreached") at failures.c:142 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0xffff80ffbfffe970, reg_save_area = 0xffff80ffbfffe8a0}} #7 0xffff80ff94e46984 in mailbox_list_get_root_forced (list=0x4b3150, type=MAILBOX_LIST_PATH_TYPE_DIR) at ../../src/lib/array.h:197 path = 0x0 #8 0xffff80ff94c6e3f6 in acl_list_get_root_dir (backend=0x4c4050, type_r=0xffff80ffbfffe9fc) at acl-backend-vfile-acllist.c:32 storage = (struct mail_storage *) 0x4f6440 rootdir = 0x495c00 "P@L" maildir = 0x2004f1400 <Address 0x2004f1400 out of bounds> #9 0xffff80ff94c6e4a4 in acl_list_get_path (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 type = MAILBOX_LIST_PATH_TYPE_DIR #10 0xffff80ff94c6e4ff in acl_backend_vfile_acllist_read (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 acllist = {mtime = -139639050474768, name = 0xffff80ff94f99fcf "H\211EøH\203}ø"} input = (struct istream *) 0x496348 st = {st_dev = 5295136, st_ino = 4807680, st_mode = 3221219920, st_nlink = 33521919, st_uid = 5203008, st_gid = 0, st_rdev = 66369, st_size = -139639772307599, st_atim = {tv_sec = -139639050474816, tv_nsec = 2496056624}, st_mtim = {tv_sec = 5295136, tv_nsec = -139639772307599}, st_ctim = {tv_sec = 1361888004, tv_nsec = 5182464}, st_blksize = 5295136, st_blocks = 4807280, st_fstype = "Ðêÿ¿ÿ\200ÿÿ\000\024O\000\000\000\000"} path = 0x495a70 " \201ÿ\224ÿ\200ÿÿ" line = 0x50cc20 "" p = 0x4f1400 "" fd = -32513 ret = 0 #11 0xffff80ff94c6e904 in acl_backend_vfile_acllist_refresh (backend=0x4c4050) at acl-backend-vfile-acllist.c:32 __FUNCTION__ = "acl_backend_vfile_acllist_refresh" #12 0xffff80ff94c6f0a0 in acl_backend_vfile_acllist_verify (backend=0x4c4050, name=0x50cc20 "", mtime=1361801276) at acl-backend-vfile-acllist.c:32 acllist = (const struct acl_backend_vfile_acllist *) 0x4f6460 #13 0xffff80ff94c6d2b4 in acl_backend_vfile_object_refresh_cache (_aclobj=0x496330) at ../../../src/lib/array.h:197 aclobj = (struct acl_object_vfile *) 0x496330 backend = (struct acl_backend_vfile *) 0x4c4050 old_validity = (struct acl_backend_vfile_validity *) 0x0 validity = {global_validity = {last_check = 0, last_read_time = 1361888004, last_mtime = 1361801276, last_size = 395}, local_validity = {last_check = 0, last_read_time = 0, last_mtime = 0, last_size = 0}, mailbox_validity = {last_check = 0, last_read_time = 0, last_mtime = 0, last_size = 0}} mtime = 1361801276 ret = 1 #14 0xffff80ff94c6ad3b in acl_backend_get_default_rights (backend=0x4c4050, mask_r=0xffff80ffbfffec98) at acl-backend.c:68 No locals. #15 0xffff80ff94c72a6b in acl_mailbox_try_list_fast (ctx=0x513f50) at acl-mailbox-list.c:63 alist = (struct acl_mailbox_list *) 0x4b33e0 backend = (struct acl_backend *) 0x4c4050 idxp = (const unsigned int *) 0x4b34b0 acl_mask = (const struct acl_mask *) 0xffff80ff94f708cf nonowner_list_ctx = (struct acl_mailbox_list_context *) 0xffff80ffbfffece0 ns = (struct mail_namespace *) 0x4b3080 update_ctx = {iter_ctx = 0x514000, tree_ctx = 0x513fe0, glob = 0xffff80ffbfffec90, leaf_flags = 2499353844, parent_flags = 4294934783, update_only = 0, match_parents = 0} name = 0x6bfffecb0 <Address 0x6bfffecb0 out of bounds> ret = 1 #16 0xffff80ff94c72dee in acl_mailbox_list_iter_init (list=0x4b3150, patterns=0xffff80ffbfffede0, flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at acl-mailbox-list.c:63 _data_stack_cur_id = 3 alist = (struct acl_mailbox_list *) 0x4b33e0 ctx = (struct acl_mailbox_list_iterate_context *) 0x513f50 pool = (pool_t) 0x513f30 p = 0x0 i = 0 inboxcase = true #17 0xffff80ff94e5a120 in mailbox_list_iter_init_multiple (list=0x4b3150, patterns=0xffff80ffbfffede0, flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at mailbox-list-iter.c:98 ctx = (struct mailbox_list_iterate_context *) 0xffff80ffbfffedc0 ret = 0 __FUNCTION__ = "mailbox_list_iter_init_multiple" #18 0xffff80ff94e59c96 in mailbox_list_iter_init (list=0x4b3150, pattern=0x4f3fb8 "INBOX", flags=MAILBOX_LIST_ITER_NO_AUTO_BOXES) at mailbox-list-iter.c:68 patterns = {0x4f3fb8 "INBOX", 0x0} #19 0x000000000045443a in dsync_mailbox_tree_fill (tree=0x511b20, ns=0x4b3080, box_name=0x4f3fb8 "INBOX") at dsync-mailbox-tree-fill.c:23 list_flags = MAILBOX_LIST_ITER_NO_AUTO_BOXES subs_list_flags = 4356 iter = (struct mailbox_list_iterate_context *) 0x2e00002e004f3f5f node = (struct dsync_mailbox_node *) 0x48d708 info = (const struct mailbox_info *) 0x512b30 list_pattern = 0x4f3fb8 "INBOX" ret = 0 __FUNCTION__ = "dsync_mailbox_tree_fill" #20 0x0000000000448d1c in dsync_brain_mailbox_trees_init (brain=0x4f3200) at dsync-brain-mailbox-tree.c:31 ns = (struct mail_namespace *) 0x4b3080 #21 0x00000000004464d6 in dsync_brain_slave_recv_handshake (brain=0x4f3200) at dsync-brain.c:97 ibc_set = (const struct dsync_ibc_settings *) 0x4ac4e0 __FUNCTION__ = "dsync_brain_slave_recv_handshake" #22 0x000000000044681f in dsync_brain_run_real (brain=0x4f3200, changed_r=0xffff80ffbfffef4e) at dsync-brain.c:97 changed = false ret = true #23 0x00000000004469c9 in dsync_brain_run (brain=0x4f3200, changed_r=0xffff80ffbfffef4e) at dsync-brain.c:97 _data_stack_cur_id = 2 ret = true #24 0x0000000000443a5a in cmd_dsync_run_local (ctx=0x49d2a0, user=0x4a5ce0, brain=0x4ac760, ibc2=0x4ac3e0) at ../../../src/lib/array.h:197 brain2 = (struct dsync_brain *) 0x4f3200 user2 = (struct mail_user *) 0x4b9720 set_parser = (struct setting_parser_context *) 0x4a3b50 set_line = 0x48c8a8 "mail_location=imapc:" path1 = 0x48d680 "/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes" path2 = 0x0 brain1_running = true brain2_running = true changed1 = true changed2 = false ret = 0 __FUNCTION__ = "cmd_dsync_run_local" #25 0x000000000044405d in cmd_dsync_run (_ctx=0x49d2a0, user=0x4a5ce0) at ../../../src/lib/array.h:197 ctx = (struct dsync_cmd_context *) 0x49d2a0 ibc = (struct dsync_ibc *) 0x49c6c0 ibc2 = (struct dsync_ibc *) 0x4ac3e0 brain = (struct dsync_brain *) 0x4ac760 sync_ns = (struct mail_namespace *) 0x0 brain_flags = 13 remote_errors_logged = false status = 0 ret = 0 #26 0x00000000004284ba in doveadm_mail_next_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 error = 0xffff80ffbffff278 "âõÿ¿ÿ\200ÿÿ" ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #27 0x0000000000428680 in doveadm_mail_single_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 __FUNCTION__ = "doveadm_mail_single_user" #28 0x0000000000428f24 in doveadm_mail_cmd (cmd=0x49cac8, argc=7, argv=0xffff80ffbffff278) at doveadm-mail.c:73 input = {module = 0x0, service = 0x4671b2 "doveadm", username = 0xffff80ffbffff5c0 "cyrtest1(a)iai.uni-bonn.de", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, remote_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} ctx = (struct doveadm_mail_cmd_context *) 0x49d2a0 getopt_args = 0x48a778 "+dEfl:m:n:Nr:Rs:RAS:u:" wildcard_user = 0x0 error = 0x0 ret = 0 c = -1 #29 0x000000000042919b in doveadm_mail_try_run (cmd_name=0xffff80ffbffff5b3 "backup", argc=7, argv=0xffff80ffbffff248) at doveadm-mail.c:73 cmd__foreach_end = (const void *) 0x49cbd0 cmd = (const struct doveadm_mail_cmd *) 0x49cac8 cmd_name_len = 6 __FUNCTION__ = "doveadm_mail_try_run" #30 0x00000000004332b3 in main (argc=7, argv=0xffff80ffbffff248) at doveadm.c:63 service_flags = 10 cmd_name = 0xffff80ffbffff5b3 "backup" i = 16 quick_init = false c = -1 ---------------------------------------------------------------- 2) and without the acl plugin => crashes with signal 11 (crashes also for 2.2 doveadm backup -R with source server dovecot 2.1.15) That was the point I paniced also! doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: auth input: cyrtest1(a)iai.uni-bonn.de master_user=cyrtest1(a)iai.uni-bonn.de quota_rule=*:storage=512M uid=13004 gid=13004 home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/master_user=cyrtest1(a)iai.uni-bonn.de doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Added userdb setting: plugin/quota_rule=*:storage=512M doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1:INDEX=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1:MAILBOXDIR=mailboxes/ doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: fs: root=/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1, index=/m/d/imap/meta/iai.uni-bonn.de/cyrtest1, indexpvt=, control=, inbox=, alt= doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1 doesn't exist yet, using default permissions doveadm(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Effective uid=13004, gid=13004, home=/m/d/user/iai.uni-bonn.de/cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc: root=, index=, indexpvt=, control=, inbox=, alt= dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Looking up IP address dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Connecting to 10.11.12.13:993 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Starting SSL handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE AUTH=LOGIN AUTH=PLAIN SASL-IR dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticating as cyrusmaster for user cyrtest1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Server capabilities: IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY LOGINDISABLED COMPRESS=DEFLATE IDLE dsync(cyrtest1(a)iai.uni-bonn.de): Debug: imapc(mailbox.iai.uni-bonn.de:993): Authenticated successfully dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_handshake dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=recv_mailbox_tree changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=send_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_mailbox_tree dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=recv_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=send_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=recv_mailbox_tree changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=recv_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=master_send_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=recv_mailbox_tree dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=recv_mailbox_tree_deletes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=master_send_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes/INBOX doesn't exist yet, using default permissions dsync(cyrtest1(a)iai.uni-bonn.de): Debug: Namespace : Using permissions from /m/d/imap/mbox/iai.uni-bonn.de/cyrtest1: mode=0700 gid=default dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=slave_recv_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=recv_mailbox_tree_deletes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=master_send_mailbox changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=slave_recv_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=master_send_mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=sync_mails changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=mailbox send_state=mailbox changed=0 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=0 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=sync_mails dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=mailbox send_state=mailbox dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=changes changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out box 'INBOX' recv_state=changes send_state=mail_requests changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: in box 'INBOX' recv_state=mail_requests send_state=changes dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out box 'INBOX' recv_state=mail_requests send_state=mails changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain S: out state=done changed=1 dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in state=done dsync(cyrtest1(a)iai.uni-bonn.de): Debug: brain M: in box 'INBOX' recv_state=changes send_state=mail_requests Segmentation fault (core dumped) Core was generated by `/m/sw/dc/a/bin/doveadm -Dv backup -R -u cyrtest1(a)iai.uni-bonn.de -m INBOX imapc'. Program terminated with signal 11, Segmentation fault. [New process 94912 ] #0 0x00000000004578cc in dsync_ibc_send_mail_request (ibc=0x4a9f20, request=0x5441c0) at dsync-ibc.c:38 38 return ibc->v.is_send_queue_full(ibc) ? (gdb) bt full #0 0x00000000004578cc in dsync_ibc_send_mail_request (ibc=0x4a9f20, request=0x5441c0) at dsync-ibc.c:38 __FUNCTION__ = "dsync_ibc_send_mail_request" #1 0x000000000044a6b1 in dsync_brain_send_mail_request (brain=0x4aa5e0) at dsync-brain-mails.c:25 request = (const struct dsync_mail_request *) 0x5441c0 __FUNCTION__ = "dsync_brain_send_mail_request" #2 0x000000000044ae95 in dsync_brain_sync_mails (brain=0x4aa5e0) at dsync-brain-mails.c:25 changed = true __FUNCTION__ = "dsync_brain_sync_mails" #3 0x00000000004468c5 in dsync_brain_run_real (brain=0x4aa5e0, changed_r=0xffff80ffbfffef4f) at dsync-brain.c:97 changed = false ret = true #4 0x00000000004469c9 in dsync_brain_run (brain=0x4aa5e0, changed_r=0xffff80ffbfffef4f) at dsync-brain.c:97 _data_stack_cur_id = 2 ret = false #5 0x0000000000443a44 in cmd_dsync_run_local (ctx=0x49d2a0, user=0x4a5b40, brain=0x4aa5e0, ibc2=0x4aa260) at ../../../src/lib/array.h:197 brain2 = (struct dsync_brain *) 0x4ef910 user2 = (struct mail_user *) 0x4b5650 set_parser = (struct setting_parser_context *) 0x4a39b0 set_line = 0x48c6b0 "mail_location=imapc:" path1 = 0x48d348 "/m/d/imap/mbox/iai.uni-bonn.de/cyrtest1/mailboxes" path2 = 0x0 brain1_running = true brain2_running = true changed1 = false changed2 = true ret = 0 __FUNCTION__ = "cmd_dsync_run_local" #6 0x000000000044405d in cmd_dsync_run (_ctx=0x49d2a0, user=0x4a5b40) at ../../../src/lib/array.h:197 ctx = (struct dsync_cmd_context *) 0x49d2a0 ibc = (struct dsync_ibc *) 0x4a9f20 ibc2 = (struct dsync_ibc *) 0x4aa260 brain = (struct dsync_brain *) 0x4aa5e0 sync_ns = (struct mail_namespace *) 0x0 brain_flags = 13 remote_errors_logged = false status = 0 ret = 0 #7 0x00000000004284ba in doveadm_mail_next_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 error = 0xffff80ffbffff278 "âõÿ¿ÿ\200ÿÿ" ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #8 0x0000000000428680 in doveadm_mail_single_user (ctx=0x49d2a0, input=0xffff80ffbffff0e0, error_r=0xffff80ffbffff148) at doveadm-mail.c:73 __FUNCTION__ = "doveadm_mail_single_user" #9 0x0000000000428f24 in doveadm_mail_cmd (cmd=0x49cac8, argc=7, argv=0xffff80ffbffff278) at doveadm-mail.c:73 input = {module = 0x0, service = 0x4671b2 "doveadm", username = 0xffff80ffbffff5c0 "cyrtest1(a)iai.uni-bonn.de", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, remote_ip = {family = 0, u = {ip6 = {_S6_un = {_S6_u8 = '\0' <repeats 15 times>, _S6_u32 = {0, 0, 0, 0}, __S6_align = 0}}, ip4 = { S_un = {S_un_b = {s_b1 = 0 '\0', s_b2 = 0 '\0', s_b3 = 0 '\0', s_b4 = 0 '\0'}, S_un_w = {s_w1 = 0, s_w2 = 0}, S_addr = 0}}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} ctx = (struct doveadm_mail_cmd_context *) 0x49d2a0 getopt_args = 0x48a778 "+dEfl:m:n:Nr:Rs:RAS:u:" wildcard_user = 0x0 error = 0x0 ret = 0 c = -1 #10 0x000000000042919b in doveadm_mail_try_run (cmd_name=0xffff80ffbffff5b3 "backup", argc=7, argv=0xffff80ffbffff248) at doveadm-mail.c:73 cmd__foreach_end = (const void *) 0x49cb10 cmd = (const struct doveadm_mail_cmd *) 0x49cac8 cmd_name_len = 6 __FUNCTION__ = "doveadm_mail_try_run" #11 0x00000000004332b3 in main (argc=7, argv=0xffff80ffbffff248) at doveadm.c:63 service_flags = 10 cmd_name = 0xffff80ffbffff5b3 "backup" i = 16 quick_init = false c = -1 ------------------------------------------- # 20130226: /m/sw/dc/2.2-20130226/etc/dovecot/dovecot.conf # OS: SunOS 5.11 i86pc zfs auth_debug = yes auth_debug_passwords = yes auth_default_realm = iai.uni-bonn.de auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 base_dir = /var/run/dovecot/ debug_log_path = /tmp/dcdeb director_mail_servers = 10.8.130.2 10.8.130.1 director_servers = 10.8.130.22 10.8.130.21 imapc_features = rfc822.size imapc_host = mailbox.iai.uni-bonn.de imapc_master_user = cyrusmaster imapc_password = password imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no imapc_user = %n instance_name = be lmtp_rcpt_check_quota = yes lmtp_save_to_detail_mailbox = yes log_path = /tmp/dcerr login_trusted_networks = 10.8.130.20/30 mail_attachment_dir = /m/d/imap/att mail_attachment_hash = %{size}=%{sha512} mail_attachment_min_size = 90 k mail_debug = yes mail_gid = 13004 mail_location = sdbox:/m/d/imap/mbox/%d/%n:INDEX=/m/d/imap/meta/%d/%n:MAILBOXDIR=mailboxes/ mail_uid = 13004 mdbox_rotate_interval = 1 days namespace { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . type = private } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-giat driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file master = yes pass = yes } passdb { args = username_format=%n /m/d/etc/user/global/pw-master-top driver = passwd-file } passdb { args = scheme=CRYPT username_format=%u /m/d/etc/user/%d/pw driver = passwd-file } plugin { acl = vfile:/m/d/etc/acl:cache_secs=300 acl_shared_dict = file:/m/d/etc/shared/mailboxes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mailbox_create save flag_change mail_log_fields = uid box msgid size quota = dict:INBOX quota::file:%h/quota quota_rule = *:storage=512M } service auth-worker { user = doveauth } service auth { user = doveauth } service imap-login { process_min_avail = 4 service_count = 1 } service imap { executable = imap wsdc-postlogin-imap process_limit = 1024 } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 2003 } } service pop3 { executable = pop3 wsdc-postlogin-pop3 process_limit = 64 } service wsdc-postlogin-imap { executable = script-login /m/sw/dc/local/wsdc-postlogin.sh-imap user = $default_internal_user } service wsdc-postlogin-pop3 { executable = script-login /m/sw/dc/local/wsdc-postlogin.sh-pop3 user = $default_internal_user } ssl_cert = </m/sw/dc/a/etc/dovecot/ssl/certs/dovecotCert.pem ssl_key = </m/sw/dc/a/etc/dovecot/ssl/keys/dovecotKey.pem syslog_facility = local6 userdb { args = username_format=%n /m/d/etc/user/global/db-master default_fields = quota_rule=*:storage=512M driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/global/%n } userdb { args = username_format=%u /m/d/etc/user/%d/db default_fields = master_user=%u quota_rule=*:storage=512M driver = passwd-file override_fields = uid=dovemail gid=dovemail home=/m/d/user/%d/%n } verbose_proctitle = yes protocol imap { imap_id_send = name version os os-version support-url support-email mail_max_userip_connections = 3 mail_plugins = } protocol lmtp { debug_log_path = /tmp/lmtp.debug log_path = /tmp/lmtp.error mail_plugins = } protocol pop3 { mail_max_userip_connections = 1 pop3_lock_session = yes }

2 8

Re: [Dovecot] about maildirsize not updating
by mastertoilet＠netzero.net 02 Apr '13

02 Apr '13

Hi sorry for the delay. My configuration is using Centos 6.dovecot 2.1.1.and i have configure the quota plugin.but i am not sure what you mean by dovecot-lda.i just follow the guides on the internet and skim through dovecots documentation.i am using the local unix account for mail account not using virtual users.here is my configuration: [root@mail ~]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) base_dir = /var/run/dovecot/ mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = " quota" maildir_broken_filename_sizes = yes mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { quota = maildir:User quota quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_id_log = * imap_idle_notify_interval = 2 mins mail_plugins = " quota imap_quota" } protocol pop3 { mail_plugins = " quota imap_quota" } i am still not sure why maildirsize is not updating.thanks. ---------- Original Message ---------- On 29.3.2013, at 9.11, mastertoilet(a)netzero.net wrote: > i am currently using roundcube my webmail and configure using dovecot quota plugins. but it seems to not be updating the maildirsize when new mails comes.Deleting the maildirsize will recreate the files correctly.Is there any solutions to this problem with dovecot. Either you're not using dovecot-lda to deliver the mails, or you haven't configured quota plugin correctly for it. dovecot -n output and logs about a mail delivery would help. ____________________________________________________________ How to Sleep Like a Rock Obey this one natural trick to fall asleep and stay asleep all night. http://thirdpartyoffers.netzero.net/TGL3231/515a5604dea5456046511st03duc

1 0

[Dovecot] loop when I enable
by Andreas Meyer 01 Apr '13

01 Apr '13

Hello! I have a nasty problem with a loop when I enable quota_warning. The mailbox fills up with thousands of email within seconds. This happens only with mbox'es retrieved with POP3. From MAILER-DAEMON Thu Mar 21 13:54:07 2013 From: support(a)anup.de Subject: Mailbox Quota-Warnung X-UID: 8036 Status: X-Keywords: Content-Length: 41 Ihre Mailbox ist jetzt zu below% belegt. # doveconf -n # 2.1.7: /usr/etc/dovecot/dovecot.conf auth_mechanisms = plain cram-md5 auth_verbose = yes disable_plaintext_auth = no hostname = delta.bitcorner.eu log_path = /var/log/dovecot1 mail_home = /var/spool/vhosts/%d/%n mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave vacation-seconds namespace inbox { inbox = yes location = prefix = } passdb { args = /etc/dovecot/passwd driver = passwd-file } plugin { autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent quota = maildir:User quota quota_rule = *:storage=500MB quota_rule2 = Trash:storage=+10%% sieve = ~/.dovecot.sieve sieve_dir = ~/.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 10d sieve_vacation_max_period = 30d sieve_vacation_min_period = 1h } postmaster_address = postmaster(a)bitcorner.de protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service managesieve-login { inet_listener sieve { port = 4190 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/dovecot/ssl/hostcert.pem ssl_key = </etc/dovecot/ssl/hostkey.pem userdb { args = /etc/dovecot/passwd driver = passwd-file } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log mail_plugins = quota quota sieve } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = quota quota imap_quota autocreate } protocol lmtp { mail_plugins = quota sieve } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 10 mail_plugins = quota quota pop3_uidl_format = %08Xu%08Xv } The problem occurs when I add the following to dovecot.conf: quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u # user is no longer over quota The script executed looks like this: #!/bin/sh PERCENT=$1 USER=$2 cat << EOF | /usr/libexec/dovecot/dovecot-lda -d $USER -o "plugin/quota=maildir:User quota:noenforcing" From: support(a)anup.de Subject: Mailbox Quota-Warnung Ihre Mailbox ist jetzt zu $PERCENT% belegt. EOF What can I do? I wonder if there some solution with namespaces possible maybe? Thank you! Andreas

2 2

[Dovecot] stats: duration of sessions, commands
by Lutz Preßler 31 Mar '13

31 Mar '13

Hello Timo, I would like to have reset_timestamp (or another field) in stats dump output of levels session and command. Both session duration and individual command execution times would be interesting data to have. Greetings, Lutz

1 0

[Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem
by Christian Felsing 31 Mar '13

31 Mar '13

Hello, I would like to set up a Dovecot based mail system which uses X.509 Client Certificates for authentication. A webmail system based on Horde5 should use Dovecot as backend. For now Dovecot works with client certificates issued by my CA and Horde authenticates also with same client certs. Due to protocol it is impossible to use client certs presented by user to Horde for authentication at Dovecot, so Horde should be allowed to authenticate itself without or an arbitrary password to Dovecot. Horde and Dovecot are running in same protected LAN. Unfortunately Dovecot does not support different authentication methods on different IP addresses or ports. This does not work: remote 192.168.116.28/32 { auth_ssl_require_client_cert = no auth_ssl_username_from_cert = yes disable_plaintext_auth = no ssl = yes } Result is "doveconf: Fatal: Error in configuration file /opt/dovecot-2.2.rc3/etc/dovecot/conf.d/10-auth.conf line 103: Auth settings not supported inside local/remote blocks: auth_ssl_require_client_cert" Replacing "auth_ssl_require_client_cert = no" by "ssl_verify_client_cert = no" does not yield in an error, but it does nothing, Dovecot still insists for a client certificate. I afraid that I am trapped by this problem: http://dovecot.2317879.n4.nabble.com/Problem-with-requiring-client-certific… Is there any way to turn off client certs for specific local or remote IP addresses? best regards Christian

3 7

[Dovecot] Incorrect response when opening read-only mailboxes with per-user flags?
by Guido Berhoerster 31 Mar '13

31 Mar '13

After some debugging on the protocol level I've finally found the problem with per-user seen flags in read-only mailboxes. Dovecot actually does allow storing the seen flag on messages but AFAICS it does not communicate that correctly to clients, this is what its response to selecting a read-only mailbox with "lrs" ACL in effect for the logged in user looks like: 2 SELECT "Public/Test" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS ()] Read-only mailbox. * 2 EXISTS * 0 RECENT * OK [UNSEEN 2] First unseen. * OK [UIDVALIDITY 1364221612] UIDs valid * OK [UIDNEXT 3] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest 2 OK [READ-ONLY] Select completed. Shouldn't PERMANENTFLAGS contain \Seen here if per-user seen flags are enable and should it even be tagged READ-ONLY at all in this case? At least clients such as Python imaplib, IMAPClient, or Roundcube will open such mailboxes with EXAMINE and thus do not allow the modification of flags. -- Guido Berhoerster

3 4

[Dovecot] dsync mirror to convert from mbox (1.2x) to mdbox (2.2)
by Ken A 31 Mar '13

31 Mar '13

I'm converting mail from mbox to mdbox. I've copied mail over to a new system, and now I'm running dsync like this: dsync -u username mirror mbox:/folder_location/username:INBOX=/inbox_location/username That seemed to work, with a couple minor errors: > dsync(username): Warning: Our dotlock file /mail_location/username.lock was deleted (locked 20 secs ago, touched 20 secs ago) > dsync(username): Error: file_dotlock_delete() failed with mbox file /mail_location/username: No such file or directory Do I also need to specify where dovecot's indexes are for the old mbox files, or is this not needed for mbox conversions (when they are the source)? Thanks, Ken A.

3 3

[Dovecot] Dovecot METADATA support
by Bruce Marriner 31 Mar '13

31 Mar '13

I've been trying to work with dovecot metadata plugin and posted a question here related to that a few days ago here : http://www.dovecot.org/list/dovecot/2013-March/089241.html I just read today (e-mail on this list) from Timo Sirainen that >> >> Dovecot is getting close to having native METADATA support. >> I am very curious about this. When is "getting close" and I would guess this will be for v2.2? Will this support be the same as the dovecot-metadata-plugin in hg or something completely different? I'm sorry if I'm asking questions that have already been answered. My goal is to use Kolab3 with Dovecot instead of using Cyrus IMAP and Kolab requires metadata/annotation support. Right now I'm testing this using the dovecot-metadata-plugin but I am very interested it learning about native metadata support and testing it with Kolab 3. Any detail you can provide would be very appreciated. Bruce

2 3

[Dovecot] global mail_plugins
by Andreas Meyer 31 Mar '13

31 Mar '13

Hello! How do I know what is specified in the global mail_plugins? # doveconf |grep mail_plugins mail_plugins = mail_plugins = " quota sieve" mail_plugins = " quota imap_quota autocreate" mail_plugins = " sieve" Is it just what is defined in the dovecot.conf and when there is nothing defined there are no global mail_plugins per default? Andreas

2 1

[Dovecot] Cassandra support
by Goktug YILDIRIM 31 Mar '13

31 Mar '13

Hi, I've read some previous threads about Cassandra support. In a message at April 2012 it was written that it would take a few hours after doing some internal stuff. http://dovecot.markmail.org/search/?q=cassandra#query:cassandra%20order%3Ad… I wonder if there have been a progress since then? Or a better alternative came up? -- Goktug

3 2

[Dovecot] Custom Headers/Flags Support in dovecot
by Ramesh Natarajan 31 Mar '13

31 Mar '13

I am currently trying to evaluate if I can use dovecot to be used for my imap server like application. This is not an email application but a generic storage server that uses IMAP protocol to save and retrieve messages. The messages have standard From/To/Date headers and a lot of custom headers for threading conversations e.t.c. As a part of my application requirements I also need to support custom flags and have ability to set/change/retrieve them via IMAP. 1) Does Dovecot support custom flags to be set/changed/retrieved? 2) I understand dovecot optimizes standard RFC822 headers and flags in cache/index files for faster lookups and searches. Does custom headers and flags fall into this optimization algorithm? 3) I am planning to support multiple users and each mailbox may have upto 1000 folders. Each folder may have an average of 20 MIME encoded messages. I am planning to use local storage with single-dbox format. Do you see any issues with this? thanks Ramesh

2 1

[Dovecot] about maildirsize not updating
by mastertoilet＠netzero.net 31 Mar '13

31 Mar '13

Hi. i am currently using roundcube my webmail and configure using dovecot quota plugins. but it seems to not be updating the maildirsize when new mails comes.Deleting the maildirsize will recreate the files correctly.Is there any solutions to this problem with dovecot. ____________________________________________________________ How to Sleep Like a Rock Obey this one natural trick to fall asleep and stay asleep all night. http://thirdpartyoffers.netzero.net/TGL3231/51553ef81818d3ef72750st04duc

2 1

[Dovecot] Virtual - thread refs for labeled message
by Łukasz 31 Mar '13

31 Mar '13

Hi I hope you will understand my problem. I want to make virtual folder called "Virtual/label1-threads". This folder should have: 1. messages labeled fe. $label1 from INBOX and 2. messages from Sent folder inthread refs with those labeled. message1 <-- $label1 INBOX |----message2 <- Sent ------|-----message3 <- INBOX ..... Can anyone help me with this? -- Łukasz

2 1

[Dovecot] Conversion from Evolution maildir to imap
by Paul van der Vlis 31 Mar '13

31 Mar '13

Hello, A customer has a thin-client server with 100+ homedirs with Evolution. They are using POP3 and maildir. Now I want to switch to IMAP. Can I use Dovecot on this maildirs, or does Evolution use another kind of maildir? Does Dovecot change anything in the maildirs? Do I loose my flags this way, like "read" ? Normally I am using Cyrus IMAP. What I want to do is to install Dovecot to have access to the mail over IMAP because Dovecot can do maildir (Cyrus cannot). Then I can use imapsync to sync everything to Cyrus. Do you think that's a good idea? With regards, Paul van der Vlis. -- Paul van der Vlis Linux systeembeheer, Groningen http://www.vandervlis.nl/

2 1

[Dovecot] Managesieve Automatic Homedir Creation: File not Found Error
by linuxer＠netsteps.ch 31 Mar '13

31 Mar '13

Hi all, I'm running dovecot version 2.0.19 (Ubuntu 12.04) and I discovered some unexpected behaviour related to the Dovecot managesieve module. When connecting to the managesieve service from a client for the first time (e.g. roundcube webmail), I get an application error. This is logged by Dovecot: Error: sieve-storage: opendir(/var/.../exampledomain/exampleuser@exampledomain//sieve) failed: No such file or directory. At first glance I thought the problem was caused by the "//" in the directory path. I assume this is just a concatenation of the user virtual home directory (in my case "/var/.../exampledomain/exampleuser@exampledomain/" and the default sieve folder (~/sieve). While this looks wrong it seems not to be the actual problem (should be fixed though?) Then I noticed that the user home directory and sieve data were actually properly created despite the error. When connecting again, it worked without error. The problem can be reproduced by deleting the users virtual home directory and connecting again. A guess would be that the automatic creation of the virtual users homedir folder structure is some asychronous process not being completed in time. I also found this older thread with a similar issue: http://osdir.com/ml/dovecot-development/2010-05/msg00018.html Could also be worth mentioning that I'm running Dovecot on a virtualized host with possibly relatively poor I/O performance (maybe faster environments don't have this problem). Thanks for looking into this, and thx for the really neat dovecot software package! Cheers, L.

2 1

[Dovecot] ACL for root-level mailboxes
by Bradley Rintoul 31 Mar '13

31 Mar '13

Hello: I see in the documentation where it says that if mailboxes are created at the root level it will use the namespace's default ACL. I'm using Dovecot 2.0.9 so there is no default namespace defined, so I'm a bit handicapped here... Anyway, assuming I can figure out how to define a default namespace, how do I specify its ACL? Where would the file describing the access go? Sorry if this is a bit broad, but any help would be appreciated. Thanks, B. Rintoul

2 1

[Dovecot] Please help to make decision
by Tigran Petrosyan 30 Mar '13

30 Mar '13

Hi We are going to implement the "Dovecot" for 1 million users. We are going to use more than 100T storage space. Now we examine 2 solutions NFS or GFS2 via (Fibre Channel storage). Can someone help to make decision? What kind of storage solution we can use to achieve good performance and scalability.

8 9

[Dovecot] 3 node setup without cluster filesystem
by Michael 30 Mar '13

30 Mar '13

Hi everyone, short version: Is there any 3 host (two MX and one frontend IMAP) that can use a shared (iSCSI) ext4 volume? Long version: I am running a very complex setup right now with two MX, two proxies(lmtp/imap)/imap-frontends and two backends mounting an ocfs2 volume. I would like to reduce the complexity (and the number of hosts) and get rid of ocfs2. I ask myself if I can use an ext4 iSCSI-LUN using this setup: MX01 -> lmtp:unix:private/dovecot-lmtp -> mail_home: /var/mail MX02 -> lmtp:unix:private/dovecot-lmtp -> mail_home: /var/mail IMAP01 (imap) -> mail_home: /var/mail Regards Michael

4 3

[Dovecot] Restoring Mails via DSync
by Asai 29 Mar '13

29 Mar '13

Greetings, Can anyone give me a quick pointer to the right command to use for restoring backups made by dsync? I have our whole mail server backed up with it, but not sure how to restore... Any help would be greatly appreciated. -- --Asai

2 2

[Dovecot] changing flags automatically
by Lutz Preßler 28 Mar '13

28 Mar '13

Hello, (2.2:) there is no doveadm subcommand to change flags of messages, is it? The following should work reliably? # mark messages with subject $SUBJECT in mailbox $MAILBOX of user $USERID as read ( i=2 echo "1 SELECT "$MAILBOX doveadm search -u $USERID mailbox $MAILBOX subject "$SUBJECT" \ | while read g u do echo $i" UID STORE "$u" flags (\Seen)" i=$((i+1)); done echo "0 LOGOUT" ) | /usr/lib/dovecot/imap -u $USERID Greetings, Lutz

2 1

[Dovecot] Gmail like labels, three years later
by Pablo Vieira 27 Mar '13

27 Mar '13

On this post http://www.dovecot.org/list/dovecot/2011-June/059605.html I was asking about the possibility of using arbitrary labels on messages, much like Gmail does. On following replies, I was told about few tricks that might be used, that the IMAP protocol was being considering UTF-8 labels and ways to integrate them into the current system, etc., etc., etc. That sounds nice and all. I'm chiming in three years later only to know if things have changed, both at Dovecot and at the IMAP protocol. Are we closer to have proper labels on IMAP? Labels that help sorting messages in virtual folders where a message can belong in several of them? I consider "label vs folder" a done discussion (since labels can always include folders; a labels system can always be implemented as a folders system, but not viceversa; etc), so what's stopping development in that direction? Have any new energies being devoted to that cause? I just seen Dovecot is number 1 among IMAP servers by a large margin. Congratulations to the devs. Aleve.

3 6

Re: [Dovecot] Migrating password scheme
by Joseph Tam 27 Mar '13

27 Mar '13

Andreas wrote: > > I tried the userdb prefetch / postlogin script method to do some password > > manipulation, but it doesn't appear to work for me. In particular, I > > don't think this method works with > > > > userdb { > > driver = passwd-file > > args = /path/to/passwd-file userdb_pw=%w > > } > > > > From what i understand you have to set a userdb_<something> variable > with passdb and userdb prefetch set. The %w variable seems to be > already empty (again?) at userdb stage. Did all of that. The problem is not prefetching, but that you can't pass arguments via the args=.... Dovecot parses the entire line as a password file pathname. Timo Sirainen definitively writes: > With v2.1 try: > > userdb { > driver = passwd-file > args = /path/to/passwd-file > default_fields = pw=%w > } Thanks, Timo. This works beautifully. Furthermore, it doesn't need the userdb prefetch. Summarizing, the minimal incantation for passing dovecot variables to the post-login script is userdb { driver = passwd-file args = /var/dovecot/test/passwd default_fields = pw=%w } service imap { executable = imap postlogin ... } service pop3 { executable = imap postlogin ... } service postlogin { executable = script-login /path/to/postlogin-exec # Careful -- defaults to root user = $default_internal_user unix_listener postlogin { } } I've updated the Dovecot2 wiki, but I am unsure which userdb's "default_fields" applies to, and whether it just applies to postlogin scripts, so I documented it at http://wiki2.dovecot.org/AuthDatabase/PasswdFile Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Authentication failure messages in logs
by Nicolas Mora 27 Mar '13

27 Mar '13

Hello, I'm currently running dovecot on a debian stable and every day, I see this message dozens of time in my logs : Mar 16 11:27:57 hector dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nicolas rhost=72.53.129.223 user=nicolas on the list archive, this message for example tells to comment out the pam section. http://www.dovecot.org/list/dovecot/2008-July/031966.html Except that my authentication needs pam... Is there any way to solve this without migrating to virtual users ? Thanks in advance Here is my dovecot -n output : # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.2.13-grsec-xxxx-grs-ipv6-64 x86_64 Debian 6.0.7 protocols: imap imaps managesieve sieve ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(managesieve): ssl_cert_file: /etc/ssl/localcerts/dovecot.pem ssl_key_file: /etc/ssl/localcerts/dovecot.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_location: maildir:~/Maildir mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve lda: postmaster_address: postmaster(a)babelouest.org mail_plugins: sieve mail_plugin_dir: /usr/lib/dovecot/modules/lda sieve_dir: ~/ auth default: mechanisms: plain login passdb: driver: pam args: dovecot userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 plugin: sieve: ~/.dovecot.sieve

2 2

[Dovecot] Error Building v2.2
by Nikolaos Milas 27 Mar '13

27 Mar '13

Hello, I am trying to build Dovecot v2.2 (nightly version 20130326, which I have renamed and use as 2.2.0) on CentOS 6.4 x86_64 and I am having a problem: ... + ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu --target=x86_64-redhat-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info 'INSTALL_DATA=install -c -p -m644' --docdir=/usr/share/doc/dovecot-2.2.0 --disable-static --disable-rpath --with-nss --with-shadow --with-pam --with-gssapi=plugin --with-ldap=plugin --with-sql=plugin --with-pgsql --with-mysql --with-sqlite --with-zlib --with-libcap --with-ssl=openssl --with-ssldir=/etc/pki/dovecot --with-solr --with-docs --with-bzlib configure: error: unrecognized option: --docdir=/usr/share/doc/dovecot-2.2.0 I found here: http://www.dovecot.org/list/dovecot/2011-April/058420.html that --docdir option exists when autoconf version > 2.60. Yet: $ rpm -qa | grep autoconf autoconf-2.63-5.1.el6.noarch So, what may be wrong? Please help. Thanks, Nick

2 12

[Dovecot] Problem when indexing maildir with a large number of folders
by Andre Rodier 27 Mar '13

27 Mar '13

Hello everybody, As part of a migration from exchange 2003 to dovecot, I have converted a lot of PST files for a user. I am importing his PST files in a maildir folder called 'Archives'. Actually, I reached about 770 'Archives' folders, and the total length of their names is about 59k characters. Thanks to wc! I am using Maildir++ I can run the doveadm index command on the private namespace, however, I am not able to do this on the virtual folders. Here the error I have: > doveadm(john smith): Panic: file mail-index-transaction-update.c: line 875 (mail_index_update_header_ext): assertion failed: (offset <= (uint16_t)-1 && size > <= (uint16_t)-1 && offset + size <= (uint16_t)-1) > doveadm(gareth walters): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f9b7100714a] -> > /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x2a) [0x7f9b7100720a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f9b70fde82a] -> > /usr/lib/dovecot/libdovecot-storage.so.0(+0xb8079) [0x7f9b7130a079] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x788) > [0x7f9b6f1775a8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x33) [0x7f9b712cf3e3] -> > /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x27) [0x7f9b712cf507] -> doveadm(+0x16618) [0x7f9b719c8618] -> doveadm(+0x13346) [0x7f9b719c5346] -> > doveadm(+0x13e21) [0x7f9b719c5e21] -> doveadm(doveadm_mail_try_run+0x161) [0x7f9b719c62e1] -> doveadm(main+0x3d1) [0x7f9b719c4ef1] -> > /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f9b70c57ead] -> doveadm(+0x13125) [0x7f9b719c5125] > Aborted I can see I have reached a limit, but is there any configuration value I can use to increase this limit, please? Kind regards, André.

4 4

[Dovecot] Implementing Single instance attachment storage (SIS) with sdbox
by megodin＠inboxalias.com 27 Mar '13

27 Mar '13

Hi there, as I want to implement data dedupliction on my dovecot system (eg. a users sends the same attchment to 5 different users on my system so I only have to store the attachment one time and set pointers to the file) , I found out it could be possible with Single instance attachment storage (SIS), so I read several pages about SIS as it was quoted here (http://wiki2.dovecot.org/MailboxFormat/dbox) > dbox storage is extensible. Single instance attachment storage was already implemented as such extension. But I did not found any further intructions in Dovecot Wiki how to implement it - however, on Dovecots blog there was an older article from Timo which gave some indication how to get it work (http://blog.dovecot.org/2010/07/single-instance-attachment-storage.html) > mail_location = dbox:~/dbox:ATTACHMENTS=/attachments/$/$ But when I change my configuration according to this (I use sdbox as mail format), I just get a "Unknown setting: ATTACHMENTS" in my mail.err log. Can anybody give me a clue how to get this working? Thanks in advance! Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] Sieve Vacation for redirected email
by Dave Gattis 27 Mar '13

27 Mar '13

I posted this elsewhere, but under an old post. I apologize for the repeated question. Hello Dovecot Users, Dovecot 2.1.7 Our emails are redirected from the home office causing all vacation responses to fail with, "discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers". I need to use the Sieve Vacation option but cannot figure out how to get it working for us. If I send to the local address, it works fine. If I send to the redirect address, it fails with above error. Unfortunately, all of our emails are redirects from a single domain. There's got to be some way to make it work. Any help would be greatly appreciated, Dave Stephan Bosch-2 wrote > + Vacation extension: finally added support for using the original > recipient in vacation address check. It is also possible to disable > the recipient address check entirely. Check doc/vacation.txt for > configuration information.

5 4

[Dovecot] Importing emails from PST Archives
by Andre Rodier 27 Mar '13

27 Mar '13

Hello everyone, I am currently migrating a small company from exchange 2003 to Dovecot. So far, the most painful process has been the PST archives. (Except the inconditionals of Outlook) I have been able to create the directory structure using the last version of readpst, with the -r flag. But once this done, I have not been able to find one tool that worked correctly. Maybe the configuration I have is complex. The perl script to transform mbox files into maildirs in the dovecot distribution is old, and crashed many times in the middle of the process. I had a look to the script, and gave up trying to fix it. I found a python script that was supposed to crawl this folder structure, and to replicate it using IMAP commands, but it crashed as well, and restarting the process would import twice the same messages. The script is here: http://costela.net/2011/06/importing-an-outlook-pst-into-imap/ I found another python script that was working better, and seemed to be well written, but with one mbox to one IMAP folder only. It can be found here: http://imap-upload.svn.sourceforge.net/viewvc/imap-upload/trunk/ I have modified, and I have added some minor fixes: - Recursively traverse a folder structure, and replicate it using IMAP commands on the server. - Properly manage folder names with special characters. (dovecot can manage these characters using the listescape plugin). - Avoid taking all the resources of the server (A quirty hack that can change). I am not an expert in Python, and the script has been quickly writter to fit my needs. However I think it can be modified easily to any configuration. In the future, maybe this script can use the libpst python bindings to import the emails directly. The last version of the script, modified is here: https://github.com/arodier/EmailTools/tree/master/Migration. Do not hesitate to help me, to make the script as generic as possible, particularly if you are a python expert. I post this on this list, because I think you maybe interested if you are in the same case as me. The license is not specified, but I will probably use GPLv3. Regards, André

2 2

[Dovecot] Released Pigeonhole v0.2.4 for Dovecot v2.0.14
by Stephan Bosch 26 Mar '13

26 Mar '13

Hello Dovecot users, I release a new version of Pigeonhole tonight. This release extends the configuration capabilities of the include and vacation extensions, adds the ihave extension (RFC 5463), and fixes a few small other things. Judging by Timo's plans, this will be one of the last feature releases for Dovecot v2.0, since I'll be switching active development to Dovecot v2.1 once that matures a little more. Changelog v0.2.4: + Vacation extension: finally added support for using the original recipient in vacation address check. It is also possible to disable the recipient address check entirely. Check doc/vacation.txt for configuration information. + Include extension: made limits on the include depth and the total number of included scripts configurable. Check doc/include.txt for configuration information. + Implemented ihave extension. This allows checking for the availability of Sieve language extensions at 'runtime'. Actually, this is checked at compile time. At runtime the interpreter checks whether extensions that were not previously available are still unavailable. If the situation changed, the script is re-compiled and the ihave tests are evaluated again. + Sieve: optimized compilation of tests that yield constant results (i.e. known at compile tme), such as 'true' and 'false'. No code is produced anymore for script sections that are never executed. Also, semantics are not verified anymore in uncompiled script sections. + Made vnd.dovecot.debug extension available to the LDA plugin instead of only the command line tools. + Sieve: redirect action now adds X-Sieve-Redirected-From header (mainly for people using SPF/SRS). - Sieve: fixed bug in handling flags and keywords; in case of error an assertion was triggered. - Script storage: improved handling of unconfigured user home directory. Originally this would produce an unhelpful error message. - Imap4flags extension: prevent forcibly enabling imap4flags when imapflags is enabled. - Fixed various -Wunused-but-set-variable compiler warnings. - Include extension: forgot to check variable identifier syntax for 'global' command. - Sieve: fixed debug mode; no messages were logged in some situations. - sievec tool: forgot to enable -D (debug) parameter. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.4.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.4.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

2 1

[Dovecot] Per-user seen flags for public read-only mailboxes
by Guido Berhoerster 26 Mar '13

26 Mar '13

Hi, I have some trouble getting per-user SEEN-flags to work with read-only mailboxes in a public namespace. Basically, I'm following the wiki at http://wiki2.dovecot.org/SharedMailboxes/Public#Maildir:_Per-user_.2BAFw-Se… and the relevant configuration is as follows: namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/srv/mail/public:LAYOUT=fs:INDEX=~/public prefix = Public/ separator = / subscriptions = no type = public } plugin { acl = vfile ... } protocol imap { mail_plugins = " acl quota trash zlib autocreate imap_acl imap_quota imap_zlib" } I have a virtual-user setup with static userdb and there is no permissions problem since everything is created through dovecot: mail_gid = vmail mail_location = mdbox:~/mdbox mail_uid = vmail [...] userdb { args = uid=vmail gid=vmail home=/srv/mail/virtual/%n driver = static } The content of /srv/mail/public/dovecot-acl (and the one of all mailboxes below it) is: owner lrwstipekxa authenticated lr Users can access all mailboxes in the Public/ namespace and read the messages and I can see that dovecot.index.cache and dovecot.index.log are created under ~/public, however setting the SEEN flag for a message is ignored since the mailbox is read-only. Changing the ACL from authenticated lr to authenticated lrs allows user to set the SEEN flag, but globally on the actual mailbox. How can I get per-user SEEN flags to work? The Dovecot version is 2.0.9. Thanks, -- Guido Berhoerster

3 9

[Dovecot] Dovecot 2.1.15 on CentOS 6.4 with metadata-plugin
by Bruce Marriner 25 Mar '13

25 Mar '13

Hello, I hope somebody can help me with this :) I am trying to get Dovecot 2.1 working with Kolab 3.0 and to start that processes I need? to compile the Dovecot metadata plugin with Dovecot. For the plugin to compile correctly against the Dovecot source code Dovecot must first be patched with a patch from the plugin author (Dennis Schridde) that is currently not part of the Dovecot code (Timo, could this be added to Dovecot?) I am documenting this entire process and once it's finished it may also be helpful to the Dovecot community. You can see some of my progress, or lack of, and errors here : http://bmts.us/wiki/doku.php?id=article:kolab:dovecot In order to compile the plugin I have removed CentOS yum packages for autoconf, automake, and libtool and downloaded, compiled, and installed versions autoconf 2.69, automake 1.12.6, and libtool 2.4.2. If I download Dovecot (not from hg) I can run ./configure and make without any problems. But, to add the patch to Dovecot I need to run the autoreconf command and this is where I have trouble. [root@kolab dovecot-2.1.15]# autoreconf aclocal: warning: autoconf input should be named 'configure.ac', not 'configure.in' configure.in:284: warning: macro 'AM_ICONV' not found in library configure.in:284: error: possibly undefined macro: AM_ICONV If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation. autoreconf: /usr/local/bin/autoconf failed with exit status: 1 I read this is related to gettext, so I installed gettext 0.18.2 from source and now I get the following errors : [root@kolab dovecot-2.1.15]# autoreconf aclocal: warning: autoconf input should be named 'configure.ac', not 'configure.in' automake: warning: autoconf input should be named 'configure.ac', not 'configure.in' automake: warning: autoconf input should be named 'configure.ac', not 'configure.in' src/plugins/acl/Makefile.am:16: error: 'module_LTLIBRARIES' is used but 'moduledir' is undefined src/plugins/acl/Makefile.am:19: warning: variable 'lib01_acl_plugin_la_SOURCES' is defined but no program or src/plugins/acl/Makefile.am:19: library has 'lib01_acl_plugin_la' as canonical name (possible typo) src/plugins/acl/Makefile.am:14: warning: variable 'lib01_acl_plugin_la_LDFLAGS' is defined but no program or src/plugins/acl/Makefile.am:14: library has 'lib01_acl_plugin_la' as canonical name (possible typo) src/plugins/autocreate/Makefile.am:11: error: 'module_LTLIBRARIES' is used but 'moduledir' is undefined src/plugins/autocreate/Makefile.am:14: warning: variable 'lib20_autocreate_plugin_la_SOURCES' is defined but no program or src/plugins/autocreate/Makefile.am:14: library has 'lib20_autocreate_plugin_la' as canonical name (possible typo) src/plugins/autocreate/Makefile.am:9: warning: variable 'lib20_autocreate_plugin_la_LDFLAGS' is defined but no program or src/plugins/autocreate/Makefile.am:9: library has 'lib20_autocreate_plugin_la' as canonical name (possible typo) ... ... ... ... autoreconf: automake failed with exit status: 1

1 0

[Dovecot] doveadm with multiple commands
by Timo Sirainen 25 Mar '13

25 Mar '13

This has been in my TODO for a while and today I implemented it (but didn't dare to test it yet :) So the problem has been that you want to run for example: doveadm expunge -A mailbox Trash savedbefore 7d doveadm purge -A This is annoying because it scans through the users' mailboxes twice, wasting disk IO and CPU. So how to make it do the scan only once? The syntax I thought of today would be: doveadm multi [-A | -u wildcards] <separator string> <comand 1> [<separator string> <command 2> [...]] So the first two commands could be for example: doveadm multi -A : expunge mailbox Trash savedbefore 7d : purge The ':' character is the separator. Any other string could be used as well, for example "?SEP?" or whatever. Thoughts? Any better name for the command than "multi"?

6 13

[Dovecot] dsync replication: assertion failed: (ibc->value_input == NULL)
by Oli Schacher 25 Mar '13

25 Mar '13

current hg (33e78edac8f5) Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Panic: file dsync-ibc-stream.c: line 527 (dsync_ibc_stream_input_next): assertion failed: (ibc->value_input == NULL) Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5ebea) [0x7f67d85ffbea] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5ec36) [0x7f67d85ffc36] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1fcea) [0x7f67d85c0cea] -> dovecot/doveadm-server() [0x4258ec] -> dovecot/doveadm-server() [0x4268f6] -> dovecot/doveadm-server(dsync_brain_sync_mails+0x426) [0x41aa66] -> dovecot/doveadm-server(dsync_brain_run+0x162) [0x4172a2] -> dovecot/doveadm-server() [0x417940] -> dovecot/doveadm-server() [0x428410] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f67d860ed36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f67d860fde7] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f67d860ecd8] -> dovecot/doveadm-server() [0x414fda] -> dovecot/doveadm-server() [0x40c71f] -> dovecot/doveadm-server() [0x41459a] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f67d860ed36] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f67d860fde7] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f67d860ecd8] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f67d85c5743] -> dovecot/doveadm-server(main+0x121) [0x414ce1] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x3400a1ecdd] -> dovecot/doveadm-server() [0x40c109] Mar 25 07:47:27 fumailsynctest2 dovecot: dsync-remote(<munged>): Fatal: master: service(doveadm): child 27336 killed with signal 6 (core dumped) (gdb) bt full #0 0x0000003400a328a5 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003400a34085 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f67d85ffbf8 in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0x1baf510 "/usr/lib64/dovecot/libdovecot.so.0(+0x5ebea) [0x7f67d85ffbea] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5ec36) [0x7f67d85ffc36] -> /usr/lib64/dovecot/libdovecot.so.0(+0x1fcea) [0x7f67d85c0cea] -> dovec"... #3 0x00007f67d85ffc36 in i_internal_fatal_handler (ctx=0x7ffffc4466c0, format=<value optimized out>, args=<value optimized out>) at failures.c:652 status = 0 #4 0x00007f67d85c0cea in i_panic (format=0x6ac8 <Address 0x6ac8 out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffffc446790, reg_save_area = 0x7ffffc4466d0}} #5 0x00000000004258ec in dsync_ibc_stream_input_next (ibc=0x1bda990, item=ITEM_MAILBOX_ATTRIBUTE, decoder_r=0x7ffffc446808) at dsync-ibc-stream.c:527 line_item = ITEM_NONE line = <value optimized out> error = <value optimized out> i = <value optimized out> __FUNCTION__ = "dsync_ibc_stream_input_next" #6 0x00000000004268f6 in dsync_ibc_stream_recv_mailbox_attribute (_ibc=0x1bda990, attr_r=0x7ffffc446878) at dsync-ibc-stream.c:1311 ibc = 0x1bda990 pool = 0x1bdabc0 decoder = <value optimized out> attr = 0x1bdabe0 value = <value optimized out> ret = <value optimized out> __FUNCTION__ = "dsync_ibc_stream_recv_mailbox_attribute" #7 0x000000000041aa66 in dsync_brain_recv_mailbox_attribute (brain=0x1bdc890) at dsync-brain-mails.c:68 attr = <value optimized out> input = <value optimized out> ret = <value optimized out> #8 dsync_brain_sync_mails (brain=0x1bdc890) at dsync-brain-mails.c:316 changed = false __FUNCTION__ = "dsync_brain_sync_mails" #9 0x00000000004172a2 in dsync_brain_run_real (brain=0x1bdc890, changed_r=0x7ffffc44698f) at dsync-brain.c:423 changed = false ret = true #10 dsync_brain_run (brain=0x1bdc890, changed_r=0x7ffffc44698f) at dsync-brain.c:452 _data_stack_cur_id = 5 ret = true #11 0x0000000000417940 in dsync_brain_run_io (context=0x1bdc890) at dsync-brain.c:41 brain = 0x1bdc890 changed = false try_pending = true #12 0x0000000000428410 in dsync_ibc_stream_input (ibc=0x1bda990) at dsync-ibc-stream.c:194 No locals. #13 0x00007f67d860ed36 in io_loop_call_io (io=0x1bc9f30) at ioloop.c:387 ioloop = 0x1bb5720 t_id = 4 #14 0x00007f67d860fde7 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0x1bb8550 events = <value optimized out> event = 0x1bb85c0 ---Type <return> to continue, or q <return> to quit--- list = 0x1bbe320 io = <value optimized out> tv = {tv_sec = 4, tv_usec = 891617} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run" #15 0x00007f67d860ecd8 in io_loop_run (ioloop=0x1bb5720) at ioloop.c:406 No locals. #16 0x0000000000414fda in cmd_dsync_server_run (_ctx=0x1bcb560, user=0x1bd49b0) at doveadm-dsync.c:862 ctx = 0x1bcb560 ibc = 0x1bda990 brain = 0x1bdc890 temp_prefix = 0x1baf378 #17 0x000000000040c71f in doveadm_mail_next_user (ctx=0x1bcb560, input=<value optimized out>, error_r=0x7ffffc446ae0) at doveadm-mail.c:309 error = <value optimized out> ret = 0 __FUNCTION__ = "doveadm_mail_next_user" #18 0x000000000041459a in doveadm_mail_cmd_server_run (conn=0x1bbe510) at client-connection.c:115 error = 0x7f67d85a1000 "\177ELF\002\001\001" ret = <value optimized out> #19 client_handle_command (conn=0x1bbe510) at client-connection.c:217 ctx = 0x1bcb560 flags = <value optimized out> cmd_name = <value optimized out> input = {module = 0x0, service = 0x42ce7c "doveadm", username = 0x1bad569 "<munged>", session_id = 0x0, local_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, local_port = 0, remote_port = 0, userdb_fields = 0x0, flags_override_add = 0, flags_override_remove = 0, no_userdb_lookup = 0} argc = 2 #20 client_connection_input (conn=0x1bbe510) at client-connection.c:317 args = 0x1bad5b0 _data_stack_cur_id = 3 line = <value optimized out> ok = true #21 0x00007f67d860ed36 in io_loop_call_io (io=0x1bbe2d0) at ioloop.c:387 ioloop = 0x1bb5720 t_id = 2 #22 0x00007f67d860fde7 in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0x1bb8550 events = <value optimized out> event = 0x1bb85c0 list = 0x1bbe320 io = <value optimized out> tv = {tv_sec = 2147483, tv_usec = 0} msecs = <value optimized out> ret = 1 i = <value optimized out> call = <value optimized out> __FUNCTION__ = "io_loop_handler_run" #23 0x00007f67d860ecd8 in io_loop_run (ioloop=0x1bb5720) at ioloop.c:406 ---Type <return> to continue, or q <return> to quit--- No locals. #24 0x00007f67d85c5743 in master_service_run (service=0x1bb55c0, callback=<value optimized out>) at master-service.c:550 No locals. #25 0x0000000000414ce1 in main (argc=1, argv=0x1bb53a0) at main.c:91 set_roots = {0x42cc00, 0x0} error = 0x0

2 1

[Dovecot] nopassword not working in Dovecot 2.2rc3?
by Christian Felsing 25 Mar '13

25 Mar '13

Hello, I got some problems while set up a test system for Client Cert Auth, therefore passwords are not requred. SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users WHERE userid = 'user(a)example.net' shows exactly what is expected, bur Dovecot does net regongnize 'Y' as nopassword: Mar 25 11:18:04 dovecot dovecot: auth: Debug: sql(user(a)example.net,192.168.200.6,<gndyHr3Y/gCwxigG>): query: SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users WHERE userid = 'user(a)example.net' Mar 25 11:18:04 dovecot dovecot: auth: sql(user(a)example.net,192.168.200.6,<gndyHr3Y/gCwxigG>): Empty password returned without nopassword Mar 25 11:18:06 dovecot dovecot: auth: Debug: client passdb out: FAIL#0112#011user=user(a)example.net Mar 25 11:18:07 dovecot dovecot: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): user=<user(a)example.net>, method=PLAIN, rip=192.168.200.6, lip=192.168.200.22, TLS As shown on http://wiki2.dovecot.org/AuthDatabase/SQL select statement above should prevent Dovecot from verifying password. any hints? best regards Christian

1 0

[Dovecot] Dovecot v2 multiple domains
by Pavel Dimow 25 Mar '13

25 Mar '13

Hello, I would like to have multiple domains on same server (with different ip's) and I want that user logs with username with domain part for every domain, but I can't find any documentation on this. To be more precise I found a post regarding dovecot v1 that suggest making separate init scripts for every domain but it also suggest that dovecot v2 will support this in code. This is the post http://dovecot.org/pipermail/dovecot/2006-April/012455.html Am I missing something or this is not still possible?

2 2

[Dovecot] Dovecot DNS queries its own host many times a second
by Dominic Malolepszy 25 Mar '13

25 Mar '13

Hi, We have observed that Dovecot appears to make a DNS lookup of its own hostname many times a second. Each Dovecot server in our cluster appears to be doing around 50 queries per second to find out its own hostname. Rsyslog was the first thing we assumed was the cause, however stopping it did not help. Also the fact that at the time Dovecot was doing around 50 logins a second, seemed to correlate with it making these queries. Is there any reason why Dovecot would need to do a lookup of its own hosts IP address every time? Seems like a strange thing to do and not cache its own hostname. Dominic

3 2

[Dovecot] Confirmation Please - Dovecot for Email Delivery
by craig.dovecot＠noboost.org 25 Mar '13

25 Mar '13

Hi All, Spec: Centos 6.3x64 Dovecot-2.0.9-5.el6.x86_64 Goal: 1) Inbound emails are delivered by Dovecot and the UID/GID is determined by a local /etc/dovecot/users file. 2) I'd like to have IMAPS clients authenticate with Dovecot via LDAP. Questions: 1) I've attempted to ensure that Dovecot will always use the local password file for mail delivery as no actual password is needed. Then the LDAP server for when the IMAPS email client connects. This appears to be working as I expect, can anyone confirm/deny the below settings are correct? 2) Is there a Dovecot architecture diagram/documentation anywhere? Settings: ------------------------------------------------------------------------- File: dovecot.conf protocols = imap lmtp listen = * File: 10-auth.conf disable_plaintext_auth = yes auth_username_format = %Ln auth_mechanisms = plain !include auth-passwdfile.conf.ext !include auth-ldap.conf.ext File: auth-passwdfile.conf.ext mail_location = maildir:/home/%n/Maildir #passdb { # driver = passwd-file # args = username_format=%n /etc/dovecot/users #} userdb { driver = passwd-file args = username_format=%n /etc/dovecot/users } File: dovecot-ldap.conf.ext hosts = sysvm-ipa.noboost.org tls = yes tls_ca_cert_dir = /etc/openldap/certs auth_bind = yes auth_bind_userdn = uid=%u,cn=users,cn=accounts,dc=noboost,dc=org base = cn=users,cn=accounts,dc=noboost,dc=org pass_attrs = uid=user pass_filter = (&(objectClass=posixAccount)(uid=%u)) File: /etc/dovecot/users craig:x:890:432:Craig:/home/craig:/bin/bash ------------------------------------------------------------------------- cya Craig

1 0

[Dovecot] Reduce logging auth-worker
by Nick Edwards 25 Mar '13

25 Mar '13

Hello Timo We would like to reduce the logging by increasing severity, we don't use syslog since we use log_path = /var/log/dovecot/pop3.log Is there a way auth-worker can be made to log warn|error instead of info? Constantly 1/5th of the log file is filled with auth-work info connecting to mysql socket, which we do not need to see unless, well, we need to see it either via debug, or if there is a problem, I know this can be done from syslog, but we prefer not to use syslog, and the wiki does not indicate it can be done? Niki

6 11

[Dovecot] SiS attachment file larger than expected
by Erik Persson 24 Mar '13

24 Mar '13

Hello! Name's Erik and I have been using Dovecot for a few months and I so far quite happy with the software. To this list I am quite new though. After a testing period I have now been running a ~300 user system running CentOS 6 and Dovecot 2.1.14 with Postfix and SiS enabled. For the large part the system is running flawlessly but I have caught a few error messages: imap(censored(a)censored.domain): Error: Attachment file /mail/attachments/70/d0/70d04b12123bfb145983f5a674ee2e65029a4018aff1c6db51993b75f10bf101-117a1a3b06f54251e96200004d877aa0 larger than expected (370113) The total number of files that I have found complaints about in the log are less than 10 accessed by 3 users in a attachment file system that by now is housing 100k + files. The only common denominator I have found so far is that all the attachments are PDF files. Most if not all of the logged files are the only referenced link of the corresponding hash. Any idea what might be causing this and how it can be prevented? I do like to be a bit paranoid when it comes to data integrity. As I am not completely familiar with the dovecot tools I also wonder if there is a way to find the offending message in the mailbox other than trying to access it via a mail client? Best regards and keep up the good work! /Erik

2 2

[Dovecot] Reporting on user info
by Alex 24 Mar '13

24 Mar '13

Hi all, I've just installed fc18 with dovecot-2.1.15 and have all the usual services set up and running properly. Of course now management is interested in who is using what service, for how long. Are there any existing reporting features available from within dovecot to provide stats on mail usage over time? Ideally, I'd like to provide a log file and find out who used each service, how long they were logged in, and from where they logged in. It would also be interesting to have a real-time view of who's connected. Does any such utility exist? Thanks, Alex

2 1

[Dovecot] Replicator updates
by Timo Sirainen 24 Mar '13

24 Mar '13

Some new features in hg: - replicator now correctly saves/restores state on exit/startup. it won't immediately start resyncing everyone now always. - if sync fails for user, retry in 5 minutes - doveadm replicator status: Give overview of replication status - doveadm replicator status <usermask>: Show users' replication status - doveadm replicator replicate [-p <priority>] <usermask>: Replicate users now. replication_full_sync_interval was also changed to 24h by default. I was thinking that with that and a nightly cronjob running "doveadm replicator replicate '*'" the full syncs could only be done during night times.

1 0

Re: [Dovecot] Migrating password scheme
by Joseph Tam 24 Mar '13

24 Mar '13

I tried the userdb prefetch / postlogin script method to do some password manipulation, but it doesn't appear to work for me. In particular, I don't think this method works with userdb { driver = passwd-file args = /path/to/passwd-file userdb_pw=%w } because it doesn't understand arbitrary var=value in the args configuration. Dvoecot seems to accept the entire string as the pathname for a password file. Is there a way to pass the plaintext password to a post-login script using passwd-file userdb? Before this, I managed password manipulation by process tracing dovecot's auth process read() syscalls and parsing out the user/password from the second buffer argument. Quite a hack but it worked. Joseph Tam <jtam.home(a)gmail.com>

3 2

[Dovecot] Migarting password scheme
by lst_hoe02＠kwsoft.de 24 Mar '13

24 Mar '13

Hello, by the move to Dovecot we try to alter the password encryption stored in the database from MD5 to CRYPT-SHA256 along the Guide at http://wiki2.dovecot.org/HowTo/ConvertPasswordSchemes. It's mostly working but i still have not found out how to pass the cleartext password to the re-encrypting script. According to the HowTo it should be enough to add "'%w' AS userdb_plain_pass" to the passdb query, to get a environment variable $PLAIN_PASS in the post-login script to pass along. This does not work eg. PLAIN_PASS is always empty. This is Dovecot 2.0.19 from Ubuntu 12.04 LTS. Thanks for any help Regards Andreas

3 9

[Dovecot] Disallow POP3 from deleting messages
by DormitionSkete＠hotmail.com 23 Mar '13

23 Mar '13

I'd like to use Dovecot as our IMAP server when our users are within our LAN, but I'd also like to give them the ability to access their emails via POP3 when they are outside the LAN. I know most POP3 clients will give their users the option of not deleting the messages from the server after they are downloaded, but is there any way to restrict them from being able to do so at the server level? In other words, I want to disallow the server from accepting the DELE command from POP3 clients. Is that possible? We have some accounts that multiple users need simultaneous access to. I don't want a user to decide to set up a POP3 account on his own on his iPad or something, and inadvertently blow the Inbox away for everybody else. We have a satellite connection, so our upload speeds are real slow. I think POP3 would give a lot better user experience than IMAP when they are outside the LAN. Any help or advice will be greatly appreciated. Peter, hieromonk ---- Dormition Skete Monastery Website: http://www.DormitionSkete.org Convent Website: http://www.HolyApostlesConvent.org ----

6 15

[Dovecot] discarding vacation response for message implicitly delivered
by dovecot＠noboost.org 22 Mar '13

22 Mar '13

Hi All, Spec: * Centos 6.3x64 * postfix-2.6.6-2.2.el6_1.x86_64 * dovecot-pigeonhole-2.0.9-5.el6.x86_64 * dovecot-2.0.9-5.el6.x86_64 Challenge: Does anyone have an explination regarding this message? ------------------------------------------------------------------- "Mar 22 12:15:22 chtvm dovecot: lmtp(7004, cht): C+EZBuObS1FcGwAAlnPEfg: sieve: msgid=<20130322011522.6D55D40389(a)chtvm.noboost.org>: discarding vacation response for message implicitly delivered to <cht(a)vacation.noboost.org>" ------------------------------------------------------------------- I'm getting it when passing traffic through to the Dovecot sieve vacation extension from a virtual domain. Regards, Craig

2 1

[Dovecot] Dovecot 2.2, Thunderbird And Client Certificates -> Login fails
by Christian Felsing 22 Mar '13

22 Mar '13

Hello, I stucked in Thunderbird authentication with X.509 client certs. This is my config (dovecot -n): $ /opt/dovecot/sbin/dovecot -n # 2.2.rc3: /opt/dovecot-2.2.rc3/etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.0 auth_debug = yes auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes base_dir = /home/dovecot/ hostname = mail.ip6.li instance_name = dovecot-01 lda_mailbox_autocreate = yes mail_gid = dovecot mail_uid = dovecot managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = scheme=CRYPT username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/home/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)ip6.li protocols = imap pop3 lmtp sieve quota_full_tempfail = yes sendmail_path = /usr/lib/sendmail service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_ca = </opt/dovecot/etc/dovecot/ip6li-user-ca.pem ssl_cert = </opt/dovecot/etc/dovecot/mail.taunusstein.net.crt ssl_cert_username_field = emailAddress ssl_key = </opt/dovecot/etc/dovecot/mail.taunusstein.net.key ssl_require_crl = no ssl_verify_client_cert = yes userdb { args = username_format=%u /opt/dovecot/etc/dovecot/mailusers.993 driver = passwd-file } verbose_ssl = yes protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugin_dir = /opt/dovecot/lib/dovecot/lda mail_plugins = } protocol imap { mail_plugins = } protocol lmtp { mail_plugins = } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol pop3 { mail_plugins = pop3_uidl_format = %08Xu%08Xv } Logfile shows this after Thunderbirds tries to get access: Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: auth: Debug: Loading modules from directory: /opt/dovecot-2.2.rc3/lib/dovecot/auth Mar 22 19:22:32 dovecot dovecot: auth: Debug: Read auth token secret from /home/dovecot//auth-token-secret.dat Mar 22 19:22:32 dovecot dovecot: auth: Debug: passwd-file /opt/dovecot/etc/dovecot/mailusers.993: Read 1 users in 0 secs Mar 22 19:22:32 dovecot dovecot: auth: Debug: auth client connected (pid=20082) Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate request A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=IP6LI Root Certification Authority Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /CN=Intermediate CA for ip6.li users/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Valid certificate: /emailAddress=christian(a)felsing.lan/CN=Christian Felsing/OU=ip6.li Certificates/O=ip6.li/C=DE Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4004, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Warning: SSL alert: where=0x4008, ret=256: warning close notify [192.168.200.6] Mar 22 19:22:32 dovecot dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.200.6, lip=192.168.200.22, TLS, session=<EfvjiYfYrgCwxigG> seems client cert is ok, but Dovecot does not like Thunderbirds method to handle TLS-Cert login w/o username and password. Hint http://dovecot.org/list/dovecot/2012-December/069771.html does not seem to be valid for Dovecot 2.2 On the other hand I think it is not a suitable method to include CRLs into CA file. Certificate should include a link to CRL or - better - an URL to OCSP. Does Dovecot support OCSP? best regards Christian

1 0

[Dovecot] Altmove doesn't working after a dsync.
by Breno Moreira 22 Mar '13

22 Mar '13

Hi guys, I'm having a problem with the altmove command after a mailbox migration using dsync. What I'm trying to do is move some users from a datacenter to another and, for that, I'm using the dsync feature. First thing I do is run the dsync mirror command, and this is working properly, but all mails are moved to the main path, ignoring the ALT statement in the mail location. So, what I tried to do was run the doveadm altmove to move the old mails to the new alternate storage, but it simply doesn't work or sometimes moves only few messages. After the user receives new messages, these new files are correctly moved. It can be problem with my search parameter in the altmove command? Or this is a normal result? Best Regards, Breno Moreira -- --------------------------------------------------------------------- Breno Moreira

3 7

[Dovecot] How do I enable dsync sieve script replication?
by Oli Schacher 22 Mar '13

22 Mar '13

Hi all, Thank you Timo for adding sieve script replication to dsync, much appreciated! Should this run out of the box with 2.2.rc3 and latest pigeonhole+patch or does this have to be enabled in the configuration somehow? I upgraded my dsync replication test setup, but it doesn't sync sieve so far, so I'm not sure if this is a config issue or if I maybe made a mistake while upgrading/patching. btw: not sure if you saw this bugreport, dsync over tcp still produces "no command given" errors randomly (http://www.dovecot.org/list/dovecot/2013-March/088751.html) Thanks Oli #dovecot -n: # 2.2.rc3: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_master_user_separator = * auth_mechanisms = plain login dict { acl = mysql:/etc/dovecot/dovecot-dict-shares.conf quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } disable_plaintext_auth = no doveadm_password = <munged> listen = * login_greeting = Dovecot ready. mail_max_userip_connections = 50 mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/acls acl_shared_dict = proxy::acl mail_replica = tcp:<munged>:1337 quota = dict:::proxy::quotadict quota_rule = *:storage=10M:messages=1000 quota_rule2 = Spam:ignore quota_rule3 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=75%% quota-warning 75 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = pop3 imap lmtp sieve service aggregator { fifo_listener replication-notify-fifo { user = fumail } unix_listener replication-notify { user = fumail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = fumail mode = 0660 user = fumail } user = root } service dict { unix_listener dict { mode = 0600 user = fumail } } service doveadm { inet_listener { port = 1337 } } service imap { vsz_limit = 2 G } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve { vsz_limit = 2 G } service pop3 { vsz_limit = 2 G } service quota-warning { executable = script /usr/local/bin/quotawarning.py unix_listener quota-warning { mode = 0666 user = fumail } user = fumail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/<munged>.crt ssl_key = </etc/ssl/<munged>.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = mail_plugins = " quota notify replication acl imap_acl quota imap_quota" } protocol pop3 { mail_plugins = " quota notify replication quota" pop3_uidl_format = %08Xu%08Xv } protocol sieve { managesieve_logout_format = bytes ( in=%i : out=%o ) } protocol lmtp { deliver_log_format = from=<%f> msgid=%m action=<%$> subject=%s mail_plugins = " quota notify replication sieve quota" postmaster_address = postmaster@<munged> quota_full_tempfail = yes } -- message transmitted on 100% recycled electrons

1 0

[Dovecot] v2.2 dsync_brain_lock() FLOCK compatibility issue on Solaris 11.1
by Walter Steiner 22 Mar '13

22 Mar '13

Hello, On Oracle Solaris 11.1 (Solaris gcc-45 package set) core libraries do not provide flock() anymore. in file: src/doveadm/dsync/dsync-brain.c in function: dsync_brain_lock() around line: 234 is a (maybe unintentional) fix reference to FLOCK locks. if (file_wait_lock(brain->lock_fd, brain->lock_path, F_WRLCK, FILE_LOCK_METHOD_FLOCK, brain->lock_timeout, &brain->lock) <= 0) { resulting in a runtime error about unsupported flock() locks. (HAVE_FLOCK is not set by configure script) Personally, I have just changed "FLOCK" to "FCNTL". [ I have tried brain->lock->lock_method but this seems not to be the correct way => compile time error: dereferencing pointer to incomplete type ] Walter

2 1

Re: [Dovecot] Problem with Prefetch User Database
by megodin＠inboxalias.com 22 Mar '13

22 Mar '13

> Dovecot only sees the PAM-authentication part) > > > PAM does not return userdb-relevant information. You cannot use > userdb > prefetch. > > You could switch to first ask a ldap passdb and then, for users that > have > another password in LDAP, pam. I use PAM because of the easyness of blocking specific validated users - you can just add/remove them in a plain text file. Easy administration will be necessary because of the planned huge amount of users on the system (28.000), and sometimes blocking a user is highly time-dependent (e.g. if one answers to a phising mail and sending out his credentials which are then abused for sending spam). I would go over LDAP if there is an equivalent easy way to solve this over LDAP (easy blocking out users by e.g editing a plain text file) - is there any? Thanks, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] [dovecot-2.1.15] mdbox corruption, doveadm force-resync can't repair it (throws segfault)
by Marcin Mirosław 22 Mar '13

22 Mar '13

Hi Timo, hi all! Today i noticed imap throws segmentation faults and dumps cores. I looked into logs I can see: 2013-03-07T12:12:52.257986+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Error: Corrupted dbox file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/m.75 (around offset=2779212): EOF reading msg header (got 0/30 bytes) 2013-03-07T12:12:52.258052+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Disconnected: Internal error occurred. Refer to server log for more information. [2013-03-07 12:12:52] in=5940 out=6637723 2013-03-07T12:12:52.258595+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Warning: fscking index file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/dovecot.map.index 2013-03-07T12:12:52.285176+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Warning: mdbox /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage: rebuilding indexes 2013-03-07T12:12:55.618752+01:00 meteor dovecot: imap(marcinxxx(a)kolekcja.mejor.pl) <7sRXtFPXYAA+eX93>: Fatal: master: service(imap): child 25626 killed with signal 11 (core dumped) Here is backtrace: echo -e "bt\nbt full" |gdb -q /usr/libexec/dovecot/imap 'core-1362654775-8-11-!usr!libexec!dovecot!imap-25626' [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". warning: no loadable sections found in added symbol-file system-supplied DSO at 0x2c831788000 Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 433 mdbox-storage-rebuild.c: Nie ma takiego pliku ani katalogu. (gdb) #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 #1 rebuild_mailbox (vname=<optimized out>, ctx=0x751c007c00, ns=<optimized out>) at mdbox-storage-rebuild.c:546 #2 rebuild_namespace_mailboxes (ns=<optimized out>, ctx=0x751c007c00) at mdbox-storage-rebuild.c:577 #3 rebuild_mailboxes (ctx=0x751c007c00) at mdbox-storage-rebuild.c:597 #4 mdbox_storage_rebuild_scan (ctx=0x751c007c00) at mdbox-storage-rebuild.c:905 #5 mdbox_storage_rebuild_in_context (storage=0x751bf477a0, atomic=<optimized out>) at mdbox-storage-rebuild.c:928 #6 0x000002c8316c7703 in mdbox_storage_rebuild (storage=0x751bf477a0) at mdbox-storage-rebuild.c:944 #7 0x000002c8316c4d85 in mdbox_mailbox_close (box=0x751c0134b0) at mdbox-storage.c:195 #8 0x000002c8316f195e in mailbox_close (box=0x751c0134b0) at mail-storage.c:984 #9 0x000002c8316f19e7 in mailbox_free (_box=<optimized out>) at mail-storage.c:997 #10 0x000000751aabc869 in client_destroy (client=0x751bf6e220, reason=<optimized out>) at imap-client.c:213 #11 0x000000751aabcc7a in client_input (client=0x751bf6e220) at imap-client.c:843 #12 0x000002c83163a4b6 in io_loop_call_io (io=0x751bf939c0) at ioloop.c:379 #13 0x000002c83163b647 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 #14 0x000002c831639eb0 in io_loop_run (ioloop=0x751bf26350) at ioloop.c:398 #15 0x000002c831620827 in master_service_run (service=0x751bf26200, callback=<optimized out>) at master-service.c:544 #16 0x000000751aac65e5 in main (argc=1, argv=0x751bf26040) at main.c:389 (gdb) #0 rebuild_mailbox_multi (trans=0x751c14c870, view=<optimized out>, rebuild_ctx=0x751c14cbf0, ctx=0x751c007c00, mbox=<optimized out>) at mdbox-storage-rebuild.c:433 new_seq = 17683 hdr = 0x751c004ae0 data = 0x751c08348c expunged = false uid = 8877 map_uid = 127994 new_dbox_rec = {map_uid = 127994, save_date = 1362612657} rec = 0x0 old_seq = <optimized out> #1 rebuild_mailbox (vname=<optimized out>, ctx=0x751c007c00, ns=<optimized out>) at mdbox-storage-rebuild.c:546 box = 0x751bf7af30 mbox = 0x751bf7af30 rebuild_ctx = 0x751c14cbf0 ret = <optimized out> sync_ctx = 0x751c0132b0 view = 0x751c004f20 trans = 0x751c14c870 error = <optimized out> #2 rebuild_namespace_mailboxes (ns=<optimized out>, ctx=0x751c007c00) at mdbox-storage-rebuild.c:577 _data_stack_cur_id = 3 iter = 0x751c000340 info = <optimized out> ret = 0 #3 rebuild_mailboxes (ctx=0x751c007c00) at mdbox-storage-rebuild.c:597 storage = <optimized out> ns = <optimized out> #4 mdbox_storage_rebuild_scan (ctx=0x751c007c00) at mdbox-storage-rebuild.c:905 data = 0x751c00c2c0 data_size = 8 #5 mdbox_storage_rebuild_in_context (storage=0x751bf477a0, atomic=<optimized out>) at mdbox-storage-rebuild.c:928 ctx = 0x5137d1b10001f3fa ret = 0 #6 0x000002c8316c7703 in mdbox_storage_rebuild (storage=0x751bf477a0) at mdbox-storage-rebuild.c:944 atomic = 0x751bf983f0 ret = <optimized out> #7 0x000002c8316c4d85 in mdbox_mailbox_close (box=0x751c0134b0) at mdbox-storage.c:195 mstorage = <optimized out> #8 0x000002c8316f195e in mailbox_close (box=0x751c0134b0) at mail-storage.c:984 No locals. #9 0x000002c8316f19e7 in mailbox_free (_box=<optimized out>) at mail-storage.c:997 box = 0x751c0134b0 #10 0x000000751aabc869 in client_destroy (client=0x751bf6e220, reason=<optimized out>) at imap-client.c:213 cmd = <optimized out> __FUNCTION__ = "client_destroy" #11 0x000000751aabcc7a in client_input (client=0x751bf6e220) at imap-client.c:843 cmd = 0x2c83163a1fe <io_loop_context_activate+78> output = 0x0 bytes = 208 __FUNCTION__ = "client_input" #12 0x000002c83163a4b6 in io_loop_call_io (io=0x751bf939c0) at ioloop.c:379 ioloop = 0x751bf26350 t_id = 2 #13 0x000002c83163b647 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 ctx = 0x751bf266c0 events = 0x0 event = 0x751bf26730 list = 0x751bf6fff0 io = <optimized out> tv = {tv_sec = 4, tv_usec = 921146} msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #14 0x000002c831639eb0 in io_loop_run (ioloop=0x751bf26350) at ioloop.c:398 No locals. #15 0x000002c831620827 in master_service_run (service=0x751bf26200, callback=<optimized out>) at master-service.c:544 No locals. #16 0x000000751aac65e5 in main (argc=1, argv=0x751bf26040) at main.c:389 set_roots = {0x751aacdfa0 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0x751bf1dd40 "/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x751aac5e80 <login_client_connected>, failure_callback = 0x751aac5b90 <login_client_failed>} service_flags = <optimized out> storage_service_flags = <optimized out> username = <optimized out> c = <optimized out> (gdb) quit doveadm -v force-resync -u marcinxxx(a)kolekcja.mejor.pl "mailinglists.*" doveadm(marcinxxx(a)kolekcja.mejor.pl): Warning: fscking index file /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage/dovecot.map.index doveadm(marcinxxx(a)kolekcja.mejor.pl): Warning: mdbox /dane/domeny/mejor.pl/mail/marcin//.mdbox/mailinglists/storage: rebuilding indexes Segmentation fault How should I repair mdbox file? I have another question, `doveadm force-resync -A "*"` doesn't do resync inside namespace. Is it feature or bug?;) Thanks, Marcin # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.5-hardened-r1 x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } # 2.1.15: /etc/dovecot/dovecot.conf # OS: Linux 3.7.5-hardened-r1 x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib }

2 5

[Dovecot] 2.2.rc2: problem with acl_shared_dict
by Lutz Preßler 22 Mar '13

22 Mar '13

Hello, 2.2.rc2, configuration as before: acl_shared_dict=file:... The contents of this file is used for e.g. LISTing shared mailboxes. But even with file and directory beeing world writable, it's not written into on SETACL commands. Instead, at least sometimes (it seems to make a difference if GETACL is used before in the session) the imap process crashes on SETACL or DELETEACL. Feb 26 00:31:52 host dovecot: imap(13373, user) K64y8ZTWOgB/AAAB: Fatal: master: service(imap): child 13373 killed with signal 11 (core dumps disabled) Anything to do for further debugging? Working correctly with 2.1.15. Greetings, Lutz

2 2

[Dovecot] director's imap/pop3 login timeout
by Angel L. Mateo 21 Mar '13

21 Mar '13

Hello, We have two (load balanced) director servers in front of 4 dovecot backend servers. Yesterday we had a problem at backend servers for some users (our SSO was down, so IMAP users couldn't authenticate) and this triggered a problem in director servers where almost nobody could open a new session. In our director's logs I could see errors like this: Mar 20 20:52:47 myotis41 dovecot: imap-login: proxy(<user>): Login failed to 155.54.211.162:143: [UNAVAILABLE] Temporary authentication failure. [myotis32:2013-03-20 19:52:47] So, it seems it was trying to authenticate for 1 hour, after that it timed out the login. But this timeout is too long. Is this a director timeout? Or a backend timeout? How can I reduce it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] Log DNS revese IP address
by Juan Bernhard 21 Mar '13

21 Mar '13

Hi list. Is it possible to log the DNS reverse address of every login? I didnt find a variable *%{hostname}* but the wiki say it only works on *deliver_log_format* and not on *login_log_format_elements* Something like this: Mar 21 13:49:33 mailserver dovecot: pop3-login: Login: user=<myuser>, method=PLAIN, rip=10.10.10.15, lip=10.10.10.1, mpid=18712, *host=client02.example.com* Thanks! Regards. Juan

2 1

[Dovecot] dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>
by pvsuja 21 Mar '13

21 Mar '13

Hi, I have set up ImapcProxy based on the wiki2 page. My server is set up for no plain text auth without starttls. When I am trying to login in the proxy server, I am getting an error Unknown username/password. The log says: *dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<xxx>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS, session=<1pBG/03XogB/AAAB>* The server log: *dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip=10.x.x.x, lip=10.x.x.y* Through wireshark, I found the username and password is going in plain text only to the server. How will I enable starttls in ImapcProxy before any communication starts? Thanks and regards, Suja -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-imap-login-Aborted-login-auth-… Sent from the Dovecot mailing list archive at Nabble.com.

4 5

[Dovecot] Problem with Prefetch User Database
by megodin＠inboxalias.com 21 Mar '13

21 Mar '13

Hi there Community, I am currently setting up a Dovecot Mailserver, which works fine with some basic configuration (Dovecot + Sendmail). Sending and receiving Mails is just fine. For improving timings, I wanted to activate the prefetch user database - but apparently it doesn't seem to work correctly - I hope you can help me out! When I activate the prefetch user database, every time I get a "passdb didn't return userdb entries" from my mail.debug logs. Here's my config: passdb { driver = pam } # (I authenticate via PAM which is itself configured to ask ldap server, ldap returns it back to PAM - so Dovecot only sees the PAM-authentication part) userdb { driver = prefetch } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } # My userdb is going over ldap. Relevant parts of /etc/dovecot/dovecot-ldap.conf.ext: . .. user_attrs = uidNumber=50014,gidNumber=2084,modem-quota=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uidNumber==50014,gidNumber=2084 I'm not sure.... maybe it's because of the PAMLDAPPAM? Or am I missing out something other fundamental? Thanks for any insights, Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

2 1

[Dovecot] Problem with Prefetch User Database - additional infos
by megodin＠inboxalias.com 21 Mar '13

21 Mar '13

Hey there, sorry, sent the mail too fast. Obviously you need more information: I'm using Dovecot 2.0.9 dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.22.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext3 auth_cache_size = 10 M auth_debug = yes auth_username_format = %n auth_verbose = yes listen = * mail_debug = yes mail_gid = vmail mail_home = /dovecot/mailnfs/vmails/%u mail_location = sdbox:/dovecot/mailnfs/vmails/%u/mailstore mail_plugins = " quota" mail_privileged_group = mail mail_uid = vmail mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = dict:User quota::file:%h/dovecot-quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+50M quota_warning = storage=95%% quota-warning 95 %u } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = root } ssl_cert = Hi there Community, > > I am currently setting up a Dovecot Mailserver, which works fine with some basic configuration (Dovecot + Sendmail). Sending > and receiving Mails is just fine. For improving timings, I wanted to activate the prefetch user database - but apparently it doesn't > seem to work correctly - I hope you can help me out! > > When I activate the prefetch user database, every time I get a "passdb didn't return userdb entries" from my mail.debug logs. > > Here's my config: > > passdb { > driver = pam > } > > # (I authenticate via PAM which is itself configured to ask ldap server, ldap returns it back to PAM - so Dovecot only sees the > > PAM-authentication part) > > userdb { > driver = prefetch > } > > userdb { > driver = ldap > args = /etc/dovecot/dovecot-ldap.conf.ext > } > > # My userdb is going over ldap. > > Relevant parts of /etc/dovecot/dovecot-ldap.conf.ext: > > ... > user_attrs = uidNumber=50014,gidNumber=2084,modem-quota=quota_rule=*:storage=%$ > > user_filter = (&(objectClass=posixAccount)(uid=%u)) > > pass_attrs = uidNumber==50014,gidNumber=2084 > > > I'm not sure.... maybe it's because of the PAMLDAPPAM? Or do I miss something other fundamental? > Thanks for any insights, > Megodin --- Alle PostfÃ¤cher an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/produkte/basic/index.html _________________________________________________________________ Send and receive anonymous emails to your inbox with InboxAlias. http://www.inboxalias.com

1 0

[Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 21 Mar '13

21 Mar '13

Hello, I'm trying to install dovecot as LDA, IMAP server and Sieve functions, all of this with a Postfix, Spamassassin and a MySQL Auth. When I use a Sieve script, it 's loaded but actions are not respect with this logs : Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: using sieve path for user's script: /vmail/sieve/info.xx.com/info.sieve Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: opening script /vmail/sieve/info.xx.com/info.sieve Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: script binary /vmail/sieve/info.xx.com/info.svbin successfully loaded Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: binary save: not saving binary /vmail/sieve/info.xx.com/info.svbin, because it is already stored Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): Debug: sieve: executing script from /vmail/sieve/info.xx.com/info.svbin Mar 18 10:31:19 localhost dovecot: lda(info(a)info.xx.com): sieve: msgid=<20130318093119.7EAAEC063D(a)nflda02.xx.lan>: stored mail into mailbox 'INBOX' Mar 18 10:31:19 localhost postfix/pipe[25000]: 7EAAEC063D: to=<info(a)info.xx.com>, relay=dovecot, delay=0.54, delays=0.15/0.03/0/0.37, dsn=2.0.0, status=sent (delivered via dovecot service) The sieve script just trying to redirect to INBOX.Test folder but doesn't works.. Bellow my dovecot and postfix configuration : # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.0.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) ext4 mail_debug = yes mail_gid = 5000 mail_location = maildir:/vmail/%d/%n:INDEX=/vmail/index/%d/%n mail_privileged_group = vmail mail_uid = 5000 mbox_write_locks = fcntl namespace { inbox = yes location = prefix = separator = . subscriptions = yes type = private } passdb { driver = pam } passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { sieve = /vmail/sieve/%d/%n.sieve sieve_dir = /vmail/sieve/%d } service auth { unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = sieve } protocol lda { auth_socket_path = /var/run/dovecot/auth-userdb mail_plugins = sieve postmaster_address = postmaster(a)smtp.xx.com } # /etc/postfix/master.conf alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all inet_protocols = all mail_owner = postfix mailbox_command = /usr/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost mydomain = xx.lan myhostname = nflda02.xx.lan mynetworks = 192.168.0.0/24, 192.168.3.0/24, 127.0.0.0/8 myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop unknown_local_recipient_reject_code = 550 virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf virtual_gid_maps = static:5000 virtual_mailbox_base = /vmail/ virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_mailbox_domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf virtual_transport = dovecot virtual_uid_maps = static:5000 Sorry for this easy question, I'm new on LINUX. Thanks in advance. -- Clément PAULET

3 3

[Dovecot] Zlib plugin: Compress emails for one folder only
by Andre Rodier 21 Mar '13

21 Mar '13

Hello everyone, Is it possible to configure the zlib plugin to compress the emails in one folder only? I would like to compress the emails when they are stored in my 'Archives' folders and sub folders. Thanks, André Rodier.

3 2

[Dovecot] ulimit -n in start-script
by Peer Heinlein 21 Mar '13

21 Mar '13

Hi! Even on midrange-systems it's necessary to set "ulimit -n" to a higher value then the system default of 1024. I'd prefer having this already prepared: In /etc/defaults/dovecot we should add: # Set amount of "open files" / ulimit -n ULIMIT_OPEN_FILES=16884 In /etc/init.d/dovecot we should add: # Set amount of open files / ulimit -n [ -n "$ULIMIT_OPEN_FILES" ] && ulimit -n $ULIMIT_OPEN_FILES Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] 2.2rc2 core dump
by Heiko Schlichting 20 Mar '13

20 Mar '13

Hi, using dovecot 2.2rc2 I got core dumps during IMAP subscription change if the CONTROL directory (specified in mail_location) does not exists. userdb_mail: mbox:~/Test:INBOX=~/Test/heiko:INDEX=~/.imap/index:CONTROL=~/.imap/control If ~/.imap/control does not exists, dovecot crashes. See below for log msg, full backtrace and configuration. Heiko Heiko Schlichting Freie Universität Berlin heiko.schlichting(a)fu-berlin.de Zentraleinrichtung für Datenverarbeitung Telefon +49 30 838-54327 Fabeckstraße 32 Telefax +49 30 838454327 14195 Berlin ----------------------------------------------------------------------- Mar 11 13:57:42 12:island dovecot: imap(heiko): Panic: file mailbox-list.c: line 1066 (mailbox_list_try_mkdir_root): assertion failed: (strncmp(root_dir, path, strlen(root_dir)) == 0) Mar 11 13:57:42 13:island dovecot: imap(heiko): Error: Raw backtrace: /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60c8a) [0x7f12ad342c8a] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60cd6) [0x7f12ad342cd6] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f12ad303faf] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_try_mkdir_root+0x573) [0x7f12ad61db43] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_mkdir_root+0x12) [0x7f12ad61db92] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(subsfile_set_subscribed+0x346) [0x7f12ad62ff66] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(mailbox_list_set_subscribed+0x1b) [0x7f12ad61aebb] -> /home/dovecot/server/lib/dovecot/libdovecot-storage.so.0(index_storage_set_subscribed+0x48) [0x7f12ad63f3c8] -> dovecot/imap [heiko 130.133.5.5 subscribe](cmd_subscribe_full+0xd8) [0x4129c8] -> dovecot/imap [heiko 130.133.5.5 subscribe](command_exec+0x3d) [0x41604d] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x4151a0] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x41528d] -> dovecot/imap [heiko 130.133.5.5 subscribe](client_handle_input+0x11d) [0x41550d] -> dovecot/imap [heiko 130.133.5.5 subscribe](client_input+0x6f) [0x41588f] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f12ad3518f6] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f12ad35296f] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f12ad351898] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f12ad308c03] -> dovecot/imap [heiko 130.133.5.5 subscribe](main+0x2a7) [0x41eb17] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f12acf9ec8d] -> dovecot/imap [heiko 130.133.5.5 subscribe]() [0x40b559] Mar 11 13:57:42 12:island dovecot: imap(heiko): Fatal: master: service(imap): child 387120 killed with signal 6 (core dumped) ----------------------------------------------------------------------- Core was generated by `dovecot/imap'. Program terminated with signal 6, Aborted. #0 0x00007f12acfb21b5 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 in ../nptl/sysdeps/unix/sysv/linux/raise.c #0 0x00007f12acfb21b5 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 pid = <value optimized out> selftid = <value optimized out> #1 0x00007f12acfb4fc0 in *__GI_abort () at abort.c:92 act = {__sigaction_handler = {sa_handler = 0x2, sa_sigaction = 0x2}, sa_mask = {__val = {139718192212334, 140734208616120, 140734208615824, 15504224, 139718192015737, 139718188100360, 139718199721984, 206158430224, 4294967295, 140734208615136, 1, 2826480, 0, 140734208615824, 15504224, 139718191620096}}, sa_flags = -1383389422, sa_restorer = 0x1} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007f12ad342c9d in default_fatal_finish (type=<value optimized out>, status=0) at failures.c:191 backtrace = 0xec93d0 "/home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60c8a) [0x7f12ad342c8a] -> /home/dovecot/server/lib/dovecot/libdovecot.so.0(+0x60cd6) [0x7f12ad342cd6] -> /home/dovecot/server/lib/dovecot/libdoveco"... #3 0x00007f12ad342cd6 in i_internal_fatal_handler (ctx=0x7fff3c832420, format=<value optimized out>, args=<value optimized out>) at failures.c:652 status = 0 #4 0x00007f12ad303faf in i_panic (format=0x5e830 <Address 0x5e830 out of bounds>) at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff3c8324f0, reg_save_area = 0x7fff3c832430}} #5 0x00007f12ad61db43 in mailbox_list_try_mkdir_root (list=0xedfa30, path=0xec9340 "/home/heiko/.imap/control", type=MAILBOX_LIST_PATH_TYPE_CONTROL, error_r=0x7fff3c8326b8) at mailbox-list.c:1066 root_dir = 0xec9360 "/home/heiko/.imap/control/.imap" error = <value optimized out> st = {st_dev = 0, st_ino = 139718191603264, st_nlink = 6471272, st_mode = 63, st_uid = 0, st_gid = 2908382760, __pad0 = 32530, st_rdev = 139718199874936, st_size = 140734208616208, st_blksize = 4294967295, st_blocks = 139718194534888, st_atim = {tv_sec = 1, tv_nsec = 3167384}, st_mtim = {tv_sec = 0, tv_nsec = 15602912}, st_ctim = {tv_sec = 139718199711400, tv_nsec = 139718194466816}, __unused = {139718197716754, 1, 0}} perm = {file_uid = 5006, file_gid = 700, file_create_mode = 416, dir_create_mode = 488, file_create_gid = 4294967295, file_create_gid_origin = 0xedfdf8 "/home/heiko/Test", gid_origin_is_mailbox_path = false, mail_index_permissions_set = false} __FUNCTION__ = "mailbox_list_try_mkdir_root" #6 0x00007f12ad61db92 in mailbox_list_mkdir_root (list=0x5e830, path=0x5e830 <Address 0x5e830 out of bounds>, type=MAILBOX_LIST_PATH_TYPE_INDEX_PRIVATE) at mailbox-list.c:1100 error = <value optimized out> #7 0x00007f12ad62ff66 in subsfile_set_subscribed (list=0xedfa30, path=0xec9310 "/home/heiko/.imap/control/.subscriptions", temp_prefix=<value optimized out>, name=0xee8360 "hostmaster", set=true) at subscription-file.c:122 mail_set = 0xee14e0 dotlock_set = {temp_prefix = 0xedfc28 ".temp.Island.387120.", lock_suffix = 0x0, timeout = 120, stale_timeout = 30, callback = 0, context = 0x0, use_excl_lock = 1, nfs_flush = 1, use_io_notify = 0} dotlock = 0x0 perm = {file_uid = 5006, file_gid = 700, file_create_mode = 416, dir_create_mode = 488, file_create_gid = 4294967295, file_create_gid_origin = 0xedfca0 "/home/heiko/Test", gid_origin_is_mailbox_path = false, mail_index_permissions_set = false} line = <value optimized out> input = <value optimized out> output = <value optimized out> fd_in = <value optimized out> fd_out = -1 type = <value optimized out> found = <value optimized out> changed = false failed = false #8 0x00007f12ad61aebb in mailbox_list_set_subscribed (list=0x5e830, name=0x5e830 <Address 0x5e830 out of bounds>, set=6) at mailbox-list.c:1481 ret = 6 #9 0x00007f12ad63f3c8 in index_storage_set_subscribed (box=0xee8000, set=6) at index-storage.c:854 ns = 0xee8000 list = 0xedfa30 subs_name = 0x5e830 <Address 0x5e830 out of bounds> guid = "\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000" __FUNCTION__ = "index_storage_set_subscribed" #10 0x00000000004129c8 in cmd_subscribe_full (cmd=0xee57e0, subscribe=48) at cmd-subscribe.c:72 ns = <value optimized out> box = 0xee8000 box2 = 0x7f12ad34080b mailbox = 0xec92b0 "hostmaster" orig_mailbox = 0xed4aa0 "hostmaster" unsubscribed_mailbox2 = false sep = 0 '\000' #11 0x000000000041604d in command_exec (cmd=0xee57e0) at imap-commands.c:156 hook = 0xed2d90 ret = <value optimized out> #12 0x00000000004151a0 in client_command_input (cmd=0xee57e0) at imap-client.c:775 client = 0xee4e30 command = <value optimized out> __FUNCTION__ = "client_command_input" #13 0x000000000041528d in client_command_input (cmd=0xee57e0) at imap-client.c:836 client = 0xee4e30 command = 0x0 __FUNCTION__ = "client_command_input" #14 0x000000000041550d in client_handle_next_command (client=0xee4e30) at imap-client.c:874 No locals. #15 client_handle_input (client=0xee4e30) at imap-client.c:886 _data_stack_cur_id = 3 ret = 48 remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #16 0x000000000041588f in client_input (client=0xee4e30) at imap-client.c:928 cmd = <value optimized out> output = 0xee5688 bytes = <value optimized out> __FUNCTION__ = "client_input" #17 0x00007f12ad3518f6 in io_loop_call_io (io=0xee06f0) at ioloop.c:387 ioloop = 0xed1720 t_id = 2 #18 0x00007f12ad35296f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:215 ctx = 0xed1aa0 event = 0xed1b10 list = 0xee5730 io = 0x5e830 tv = {tv_sec = 1799, tv_usec = 999958} msecs = <value optimized out> ret = 1 i = 0 call = false __FUNCTION__ = "io_loop_handler_run" #19 0x00007f12ad351898 in io_loop_run (ioloop=0xed1720) at ioloop.c:406 No locals. #20 0x00007f12ad308c03 in master_service_run (service=0xed15c0, callback=0x5e830) at master-service.c:550 No locals. #21 0x000000000041eb17 in main (argc=1, argv=0xed1390) at main.c:400 set_roots = {0x426140, 0x0} login_set = {auth_socket_path = 0xec9050 "\035", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41ed10 <login_client_connected>, failure_callback = 0x41ecb0 <login_client_failed>, request_auth_token = 1} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> ----------------------------------------------------------------------- # 2.2.rc2: /home/dovecot/server/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 auth_mechanisms = plain login auth_username_format = %Ln auth_verbose = yes default_login_user = nobody default_vsz_limit = 2 G first_valid_uid = 1000 listen = 130.133.10.100 mail_fsync = always mail_nfs_storage = yes namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { args = /server/dovecot/bin/checkpassword-isnet driver = checkpassword } protocols = imap service auth-worker { user = $default_internal_user } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } shutdown_clients = no ssl = required ssl_cert = </server/dovecot/server/etc/dovecot/certs/certificate.pem ssl_key = </server/dovecot/server/etc/dovecot/certs/key.pem userdb { driver = prefetch } verbose_proctitle = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 50 }

2 6

[Dovecot] v2.2.rc3 released
by Timo Sirainen 20 Mar '13

20 Mar '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc3.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc3.tar.gz.sig As mentioned in http://dovecot.org/list/dovecot/2013-March/089044.html there are some new rather large features. Also various mostly rather small bugfixes. + dsync: Support syncing ACLs (and Sieve scripts with Pigeonhole) + ldap: Support subqueries and value pointers, see http://wiki2.dovecot.org/AuthDatabase/LDAP/Userdb + postmaster_address setting: Expand %d to recipient's domain - Fixed a crash when decoding quoted-printable content. - dsync: Various bugfixes

1 0

[Dovecot] dovecot: auth-worker: order of authentication types
by David Obando 20 Mar '13

20 Mar '13

Hi all, I'm setting a mailserver using dovecot version: 2.1.7. On the server I have a couple of system users using PAM authentication and a lot of virtual users using SQL authentication. When a virtual user (e.g. david(a)virtdomain.de) logs in dovecot tries to authenticate the user via PAM and after failing it uses SQL: Mar 19 11:39:42 orange dovecot: auth-worker(7815): pam(david(a)virtdomain.de,<ip address>): pam_authenticate() failed: Authentication failure (password mismatch?) Mar 19 11:39:42 orange dovecot: auth: passwd(david(a)virtdomain.de,<ip address>,<T58IuUTYvgDZbill>): unknown user Mar 19 11:39:42 orange dovecot: imap-login: Login: user=<david(a)virtdomain.de>, method=PLAIN, rip=<...>, lip=<...>, mpid=7816, TLS Could I set up dovecot authentication so *users that authenticate with only their username (i.e. system users) always and only use PAM authentication *users that authenticate with their e-mail-address always and only use SQL authentication ??? Thanks, david -- The day microsoft makes something that doesn't suck is the day they start making vacuum cleaners. gpg --keyserver pgp.mit.edu --recv-keys 1920BD87 Key fingerprint = 3326 32CE 888B DFF1 DED3 B8D2 105F 29CB 1920 BD87

2 2

[Dovecot] Override quota settings with LDAP
by Hanno Hirschberger 20 Mar '13

20 Mar '13

Hi all, my current Dovecot setup is fetching both the imap quota limit and the mail location settings from LDAP entries. user_attrs = [...] UDBmailQuota=quota_rule=*:bytes=%$, mailLocation=mail That is because we have 3 users who wants to fetch their mail from /var/mail/<username>. All the other users have maildir with maildir quota. The LDAP entry for /var/mail user looks like this: mailLocation: mbox:/var/empty:INBOX=/var/mail/<username>:INDEX=MEMORY Works fine with one exception: the mail quota for /var/mail users. The dovecot log gets spammed with: Mar 20 13:37:04 lmtp(2494, username): Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota Mar 20 13:37:04 lmtp(2494, username): Error: opendir(/var/empty/.imap) failed: No such file or directory ... which is only logical, because there's no maildir for that user. I want to get rid of these error messages and like to ask you if there's a way to override the "quota = maildir:User quota" setting in my Dovecot configuration for the 3 /var/mail users. For example with an extra LDAP field? Sadly I don't really know how to realize this. Or is there any other / better way? You can look at my doveconf -n output here: http://pastebin.com/mJZ2CXbg Best regards, Hanno

2 1

[Dovecot] shared folders and "subscriptions = yes"
by Lars Uhlmann 20 Mar '13

20 Mar '13

Example (dovecot 1.2.15): ,-[dovecot.conf] | namespace public { | separator = / | prefix = management | location = maildir:/path/to/management | subscriptions = yes | } | | namespace public { | separator = / | prefix = sales | location = maildir:/path/to/sales | subscriptions = yes | } `----- To have all IMAP-Users automatically updated their shared folder structure I use "subscriptions = yes". This works with the side effect, that all IMAP-Users can see _all_ folders in every namespace even if they do not have "lookup" access. This is of course not wanted. Is it possible to have dovecot check the ACL file in the root of a namespace before it parses the subscrptions file? regards Lars

2 1

[Dovecot] dsync migration questions
by Michael Smith (DF) 20 Mar '13

20 Mar '13

We are currently in the process of replacing one of our customer mail systems with a dovecot solution. However, one of the sticking points right now is how to get the old mail to the new system. On the dovecot side, we are using mdbox storage. On the old system we are using qpopper/mbox mailboxes in the following setup. All user inboxes are in /mnt/mail/mail_spool. Only select, privileged, users have mail folders in /mnt/mail/mail_spool/FOLDERS/user/. I know, insane setup, but it's almost 18 years legacy now. Like this... /mnt/mail/mail_spool/user1.mbox /mnt/mail/mail_spool/user2.mbox /mnt/mail/mail_spool/user3.mbox /mnt/mail/mail_spool/user4.mbox /mnt/mail/mail_spool/FOLDERS/user2/folder1.mbox /mnt/mail/mail_spool/FOLDERS/user2/folder2.mbox Also, the UIDs between the old system and the new dovecot solution are different. User1 may have uid 2134 on the old system, but have uid 193847 on the new system. We've tried the following. Note: User Anakin has a single message already in the new inbox. mkdir -p /mnt/mail/mail_spool/.migrate/ ln /mnt/mail/mail_spool/anakin /mnt/mail/mail_spool/.migrate/inbox chmod 644 /mnt/mail/mail_spool/.migrate/inbox dsync -D -v -R -u anakin(a)domain.com backup mbox:/mnt/mail/mail_spool/.migrate/ ... chmod 600 /mnt/mail/mail_spool/.migrate/inbox /bin/rm -rf /mnt/mail/mail_spool/.migrate dsync(root): Debug: Loading modules from directory: /usr/lib64/dovecot dsync(root): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so dsync(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so dsync(root): Debug: auth input: anakin uid=1000001228 gid=1000001228 home=/var/spool/mail/CC/1000001228 quota_rule=*:storage=0:messages=0 dsync(root): Debug: Added userdb setting: plugin/quota_rule=*:storage=0:messages=0 dsync(root): Debug: Effective uid=1000001228, gid=1000001228, home=/var/spool/mail/CC/1000001228 dsync(root): Debug: Quota root: name=User quota backend=dict args=:file:/var/spool/mail/CC/1000001228/dovecot.quota dsync(root): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 dsync(root): Debug: dict quota: user=anakin, uri=file:/var/spool/mail/CC/1000001228/dovecot.quota, noenforcing=0 dsync(root): Debug: fs: root=/var/spool/mail/CC/1000001228/mail, index=/var/spool/mail/CC/1000001228/index, control=, inbox= dsync(root): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(root): Debug: Effective uid=1000001228, gid=1000001228, home=/var/spool/mail/CC/1000001228 dsync(root): Debug: Quota root: name=User quota backend=dict args=:file:/var/spool/mail/CC/1000001228/dovecot.quota dsync(root): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 dsync(root): Debug: dict quota: user=anakin, uri=file:/var/spool/mail/CC/1000001228/dovecot.quota, noenforcing=0 dsync(root): Debug: mbox: INBOX defaulted to /mnt/test/mail_spool/.migrate/inbox dsync(root): Debug: fs: root=/mnt/test/mail_spool/.migrate, index=, control=, inbox=/mnt/test/mail_spool/.migrate/inbox dsync(anakin): Debug: Namespace : Using permissions from /mnt/test/mail_spool/.migrate: mode=0777 gid=-1 dsync(anakin): Error: Can't delete mailbox INBOX: INBOX can't be deleted. dsync(anakin): Debug: Namespace : Permission lookup failed from /var/spool/mail/CC/1000001228/mail/mailboxes/INBOX_b6845831821c42517c490000a72406a4 dsync(anakin): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(anakin): Debug: Namespace : Permission lookup failed from /var/spool/mail/CC/1000001228/mail/mailboxes/INBOX_b6845831821c42517c490000a72406a4 dsync(anakin): Debug: Namespace : Using permissions from /var/spool/mail/CC/1000001228/mail: mode=0700 gid=-1 dsync(anakin): Info: INBOX: only in dest dsync(anakin): Info: INBOX: only in source dsync(anakin): Error: Trying to open a non-listed mailbox with guid=814b6332541c425169490000a72406a4 dsync(anakin): Error: msg iteration failed: Couldn't open mailbox 814b6332541c425169490000a72406a4 dsync(anakin): Error: Trying to open a non-listed mailbox with guid=814b6332541c425169490000a72406a4 Nothing was migrated. In some other combinations, trying to reproduce them again, it does migrate the old mail, but first destroys the existing mail in the new mailbox. Our goal is to cut mail delivery over to the new dovecot system (which will result in existing emails before migration), and then migrate the old mail *while* maintaining message UIDs. This is the easiest way to ensure no "lost" email with the migration. What are we doing wrong, and how do we achieve our goals? Thanks in advance. -- Michael Smith

2 1

[Dovecot] Logon with Client Certificate and OTP fallback
by dovecot.pkoch＠dfgh.net 20 Mar '13

20 Mar '13

Dear Dovecot experts, we have unusual authentication requirements, namely: - almost all of our user are using a smartcard to connect with our mailserver. Thunderbird is our friend here as it will use the smartcard as an additional certificate store and Thunderbird will do client certificate based authentication when connecting via SSL with a mailserver - there's no way (at least that I know of) for our iPad users to use a smartcard, so our iPad and iPhone users use OTP token (http://www.gooze.eu/catalog/otp-tokens-oath-0) For 10 years we are using a very simple POP3-server where I replaced the authentication routines with my own functions and these function are doing the following: 1) if the connection was made without SSL refuse to connect 2) if the client was using a client certificate extract the username from the certificate. Since we cannot stop Thunderbird from sending a username/passowrd-combination we compare the username from the certificate with the username Thunderbird has sent. If the usernames matches we allow access and ignore the password. 3) if the client did not sent a client certificate we calculate the current OneTimePassword of the users OTP-token and compare that with the password Thunderbird has sent. If the passwords matches we allow access. If a OTP-password was validated it can be used for 24 hours so our OTP-users must use their tokens only once a day. Now we would like to switch from POP3 to IMAP, so here are my questions: - can Dovecot be CONFIGURED to do the above. I compiled it yesterday and SSL client authentication works as expected. OTP seems to be supported via PAM and I can write a PAM-modul for our OTP-tokens, so OTP would be possible too. But how do I tell Dovecot to do OTP-auth as a fallback for ClientCert-auth. - I already looked into the sourcecode of Dovecot. Seems like all the authentication routines were built as pluggable modules. Is there any documentation out there on how how to built my own auth-module. Integrating the OTP-auth directly into Dovecot would be a lot easier (for me) than creating a PAM-module, so I would prefer that. If there was interest from other people I would add some configuration options to Dovecot (for example the location of the OTP-token list). Otherwise I would just hardcode everything into the source. Peter

3 3

[Dovecot] ACL to make mailboxes populated by master account Read Only for regular users.
by Alex Cherniak 20 Mar '13

20 Mar '13

We have a solution using Dovecot as a secondary mail archive. All mailboxes are populated/groomed by master account and the actual users have only read access. This is achieved by a simple ACL approach. dovecot.conf has protocol imap { mail_plugins = acl quota imap_quota zlib } plugin { acl = vfile:/etc/dovecot/acls:cache_secs=300 } /etc/dovecot/acls/.DEFAULT file is trivial: user=master lrwstipekxa owner lr It used to work with Dovecot 2.0.4 for years, but after upgrade to 2.0.18 users now have full access to folders created by master account and can delete, add and move mails. Should it behave this way? How can I "secure" mailboxes again? Any help is appreciated.

2 1

[Dovecot] Core dump in 2.2.rc2 with FETCH 1 BODY.PEEK[ALL]
by Steffen Kaiser 20 Mar '13

20 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Usingt ./sbin/dovecot --version 2.2.rc2 (7a08461c5559) with Maildir, 2 FETCH 1 BODY.PEEK[ALL] dumps core, bt full is: #0 0x00007fa166e721b5 in raise () from /lib/libc.so.6 No symbol table info available. #1 0x00007fa166e74fc0 in abort () from /lib/libc.so.6 No symbol table info available. #2 0x00007fa16721ac47 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:191 backtrace = 0x181e2d0 "/usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x78c20) [0x7fa16721ac20] -> /usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x7a0dd) [0x7fa16721c0dd] -> /usr/local/dovecot-2.2.rc2/lib"... #3 0x00007fa16721c0dd in i_internal_fatal_handler (ctx=0x7fffa3de5d90, format=0x7fa1675bbde1 "file %s: line %d: unreached", args=0x7fffa3de5d70) at failures.c:652 status = 0 #4 0x00007fa16721af90 in i_panic (format=0x7fa1675bbde1 "file %s: line %d: unreached") at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffa3de5e70, reg_save_area = 0x7fffa3de5da0}} #5 0x00007fa16759d415 in imap_msgpart_parse (section=0x181e278 "ALL", msgpart_r=0x18476c0) at imap-msgpart.c:291 msgpart = 0x1851c40 pool = 0x1851c20 i = 0 next_digit = true ret = 0 #6 0x000000000041e734 in imap_fetch_body_section_init (ctx=0x7fffa3de5fa0) at imap-fetch-body.c:358 body = 0x18476b8 list_args = 0x7fa1672152a7 list_count = 0 str = 0x0 p = 0x181e26e "" error = 0x7fffa3de6460 "\001" __FUNCTION__ = "imap_fetch_body_section_init" #7 0x000000000041d064 in fetch_body_init (ctx=0x7fffa3de5fa0) at imap-fetch.c:670 No locals. #8 0x000000000041b6b5 in imap_fetch_init_handler (init_ctx=0x7fffa3de5fa0) at imap-fetch.c:62 handler = 0x1827e10 lookup_name = 0x181e270 "BODY" p = 0x181e264 ".PEEK[ALL]" __FUNCTION__ = "imap_fetch_init_handler" #9 0x000000000040e6f5 in imap_fetch_cmd_init_handler (ctx=0x1847068, cmd=0x1846f60, name=0x181e260 "BODY.PEEK[ALL]", args=0x7fffa3de5fe8) at cmd-fetch.c:36 init_ctx = {fetch_ctx = 0x1847068, pool = 0x1846f40, name = 0x181e260 "BODY.PEEK[ALL]", args = 0x1829978, error = 0x0} __FUNCTION__ = "imap_fetch_cmd_init_handler" #10 0x000000000040e86d in fetch_parse_args (ctx=0x1847068, cmd=0x1846f60, arg=0x1829978, next_arg_r=0x7fffa3de6078) at cmd-fetch.c:69 str = 0x181e260 "BODY.PEEK[ALL]" macro = 0x0 #11 0x000000000040eef3 in cmd_fetch (cmd=0x1846f60) at cmd-fetch.c:258 client = 0x1846380 ctx = 0x1847068 args = 0x1829918 next_arg = 0x7fa166e75130 list_arg = 0x1847048 search_args = 0x1850c30 qresync_args = {qresync_sample_seqset = 0x1, qresync_sample_uidset = 0x41a22c} messageset = 0x1829a78 "1" send_vanished = false ret = 1 #12 0x000000000041a18f in command_exec (cmd=0x1846f60) at imap-commands.c:156 hook = 0x1827d70 ret = false #13 0x00000000004190f2 in client_command_input (cmd=0x1846f60) at imap-client.c:775 client = 0x1846380 command = 0x20041a274 __FUNCTION__ = "client_command_input" #14 0x00000000004193f2 in client_command_input (cmd=0x1846f60) at imap-client.c:836 client = 0x1846380 command = 0x1827858 __FUNCTION__ = "client_command_input" #15 0x0000000000419512 in client_handle_next_command (client=0x1846380, remove_io_r=0x7fffa3de61bd) at imap-client.c:874 No locals. #16 0x0000000000419592 in client_handle_input (client=0x1846380) at imap-client.c:886 _data_stack_cur_id = 3 ret = false remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #17 0x0000000000419725 in client_input (client=0x1846380) at imap-client.c:928 cmd = 0x183c8a8 output = 0x1846d98 bytes = 26 __FUNCTION__ = "client_input" #18 0x00007fa167231e1b in io_loop_call_io (io=0x1846e60) at ioloop.c:387 ioloop = 0x1826700 t_id = 2 #19 0x00007fa167233aaa in io_loop_handler_run (ioloop=0x1826700) at ioloop-epoll.c:215 ctx = 0x1826a80 events = 0x1826af0 event = 0x1826af0 list = 0x1846eb0 io = 0x1846e60 tv = {tv_sec = 1725, tv_usec = 816704} events_count = 6 msecs = 1725817 ret = 1 i = 0 j = 0 call = true __FUNCTION__ = "io_loop_handler_run" #20 0x00007fa167231ebe in io_loop_run (ioloop=0x1826700) at ioloop.c:406 No locals. #21 0x00007fa1671caa45 in master_service_run (service=0x18265a0, callback=0x4262c6 <client_connected>) at master-service.c:550 No locals. #22 0x00000000004265df in main (argc=1, argv=0x1826390) at main.c:400 set_roots = {0x42f700, 0x0} login_set = {auth_socket_path = 0x181e048 "\200\340\201\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x426078 <login_client_connected>, failure_callback = 0x426252 <login_client_failed>, request_auth_token = 1} service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUThQFl3r2wJMiz2NAQI+zwf8CLsphLKRsB2pgFAuoNT9UAcs74DVC5CT JqNw1X4IOau9fY+m0fyZC/xOowjZiPn0yz8ZIYG/6l5dFZxNKzuyUBwh1pHVqcP7 WOrM71+ZW43gT6hibCtaxyW61BQ3XoK/nIDVZM67eVcy7G/DFuGd9RJsV4Bh3iuO g3lXqaeFAeghukMKrvU/YwIXFVyjXsjjy8ZPm3QEtUEKWN8OXaveJ3O4VT/K0VWG 234D47rBT3KFt/kqwTn95LIp10DZzzch2i/QBe992acGi78Mz4F0+VT+lJFa6nlO ZIzAeqhQRXoM8a86N0RJHri4xIMCzPHXjx/5lWL0TDe6N4ITfzEMCQ== =PrvL -----END PGP SIGNATURE-----

3 3

[Dovecot] Lot of dovecot process writes
by Angel L. Mateo 20 Mar '13

20 Mar '13

Hello, While monitoring my servers' behaviour (ubuntu 12.04 with dovecot 2.1.9, with about 70000 users) I have found that lots of disk usage is done by dovecot process (the parent process). Since lmtp, imap and pop3 connections are handle by their own process, what could be the reason of this? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

3 4

[Dovecot] Maildir or Mdbox and expunge messages.
by Evgeny Basov 20 Mar '13

20 Mar '13

Hello. I tested dovecot's work with expunge messages on Mdbox over strace (see at tail of message). As I can see dovecot process opens old storage m.* file, reads it content, opens new temporary file, writes in this one content and rename this new one to m.(*+1). How fast this algorithm works on system with about 10000 users and 5Tb data? I will use mdbox_rotate_interval for delayed expunge but I think that simple delete file in Maildir must be faster than expunge from Mdbox. Please, tell me about real experience work with Mdbox on big loaded systems. ++++++++++++++++ 0.000017 open("/var/vmail/example.org/user/storage/.temp.1362474108.P7152Q0M909647.mailsys", O_RDWR|O_CREAT|O_TRUNC, 0666) = 11 0.000063 umask(077) = 066 0.000015 fallocate(11, 01, 0, 10485760) = 0 0.000054 fstat(11, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 0.000043 pread(10, "\1\2N 0000000000000285\nFC"..., 8192, 16) = 1465 0.000025 write(11, "2 M1e C5135b47c\n\1\2N 000"..., 691) = 691 0.000041 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log.2", 0x7fff235b34c0) = -1 ENOENT (No such file or directory) 0.000026 alarm(180) = 0 0.000018 fcntl(9, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0 0.000020 alarm(0) = 180 0.000018 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log", {st_mode=S_IFREG|0600, st_size=3656, ...}) = 0 0.000031 fstat(9, {st_mode=S_IFREG|0600, st_size=3656, ...}) = 0 0.000041 write(11, "\n\1\3\nR5135ad97\nV29b\nG5840870697ad"..., 62) = 62 0.000023 fdatasync(11) = 0 0.079275 stat("/var/vmail/example.org/user/storage/m.8", 0x7fff235b3640) = -1 ENOENT (No such file or directory) 0.000061 rename("/var/vmail/example.org/user/storage/.temp.1362474108.P7152Q0M909647.mailsys", "/var/vmail/example.org/user/storage/m.8") = 0 0.000164 write(9, "\200\200\200\203\0\0\10\20\210\0\0\0\200\200\200\207@\0\0\20\0\0\0\0\0\0\0\0\10\0\0\0"..., 152) = 152 0.000094 fcntl(9, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0 0.000042 unlink("/var/vmail/example.org/user/storage/m.7") = 0 0.000059 stat("/var/vmail/example.org/user/indexes/storage/dovecot.map.index.log", {st_mode=S_IFREG|0600, st_size=3808, ...}) = 0 0.000055 fstat(9, {st_mode=S_IFREG|0600, st_size=3808, ...}) = 0

2 1

[Dovecot] Stability of extraction of attachment
by Angel L. Mateo 20 Mar '13

20 Mar '13

Hello, We are migrating our dovecot servers from 2.1.9 to 2.1.15 (or 2.2 if there is a stable version soon) and maildir format to mdbox. Looking for mdbox options I have found options: * mail_attachment_dir * mail_attachement_min_size * mail_attachment_fs * mail_attachment_hash but this options are described with the message: # WARNING: This feature hasn't been tested much yet. Use at your own risk. What is the state of these options? Could I use it in a production environment? In case of yes, what is the best deduplicating option? Let it to the FS? Or configuring with "sis posix" or "sis-queue posix"? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 1

[Dovecot] Exposing masteruser info to cllients via lmtp-proxy connections
by Alexandr Sabitov 20 Mar '13

20 Mar '13

Hello, Please somebody suggest me how to remove the "*masteruser" appendix from the dovecot director database while using masteruser authentication. My situation is: - all users get authenticated in LDAP on the dovecot-director frontend - then they are forwarded to dovecot backend as username*masteruser ( this is a way how to proxy users with encrypted passwords). To enable it a added an extra field in LDAP-dovecot configuration: destuser=%u*masteruser This works OK, but problems are: - I have lmtp-proxy on the dovecot frontend and I have to use the same "%u*masteruser" field in lmtp passdb because the director thinks that me(a)mail.com and me(a)mail.com*masteruser are different users and would send lmtp-proxy connections to other dovecot backend. Here is a problem: "Delivery-To" and "Received" fields in any email contains "*masteruser" ! I need to remove any mentions about "masteruser" authentication from client emails. Also another little problem: - If I run "doveadm status" tool then to get user's data I need to specify user as "username*masteruser" Thank you in advance. Alexandr Sabitov Netregistry

2 1

[Dovecot] Imaptest: Fatal: opendir(/usr/local/lib/dovecot) failed: No such file or directory
by Steffen Kaiser 20 Mar '13

20 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, is it possible to build imaptest ( http://imapwiki.org/ImapTest ) that the binary has no external dependencies? I followed the Install page: 1) downloaded both "latest" tgz 2) cd dovecot-* && ./configure --without-shared-libs && make 3) cd ../imaptest-* && ./configure --without-shared-libs \ - --with-dovecot=$(dirname $(pwd))/dovecot-20130221 && make 4) strace -e open -f -o log src/imaptest Fatal: opendir(/usr/local/lib/dovecot) failed: No such file or directory 5) cat log 4534 open("/etc/ld.so.cache", O_RDONLY) = 3 4534 open("/lib/libdl.so.2", O_RDONLY) = 3 4534 open("/lib/librt.so.1", O_RDONLY) = 3 4534 open("/lib/libc.so.6", O_RDONLY) = 3 4534 open("/lib/libpthread.so.0", O_RDONLY) = 3 4534 open("/usr/local/lib/dovecot", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 ENOENT (No such file or directory) Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUS84zV3r2wJMiz2NAQInNwf/bJmjQaBxzjr/dmVDMwN2ptBvm5mFmUFy YYVwdQMfr1oDf8Jr9XIuag4gYCrgdzIxppUo+7scu+F72dCEF7uNvh2h1EdVhY+i Dy+z8fWLwyl332dGsL1XW93wtY8CJ/ybd34fEh/15M7uKaWYioocp2kyb8uZ4CPJ faIJ8Xaqpem8Rx1Erthkw+YKrVqMQiO7cnPgsCSdoxCFTFU3wJW7+mq2DVjyUUqv bIVgH8RSF79u5xKa54YAZBxW/KaQtkhcCWZAzEQFxmUl6qvOiAs/5/HmYDeftihS jp0ApB05mdsPQ/hCYd9f9Vt8Wyk5b4/QEeh4rzGeqOPn3boo7dp9Nw== =D56V -----END PGP SIGNATURE-----

2 4

[Dovecot] v2.2 status update
by Timo Sirainen 20 Mar '13

20 Mar '13

So, I'm still planning on getting v2.2.0 out Really Soon now. Unfortunately I've had to quickly develop some rather large features still at this stage. I was initially planning on leaving them for v2.3, but they were a requirement for one project and implementing them now to v2.2 was the least amount of trouble for me. (And yes, I'm aware I haven't replied to a lot of emails in this list. There are about 60 unread ones. Hopefully I'll have time to go through them this week.) So, what we have now: * dsync can sync ACLs * dsync can sync Sieve scripts - Slightly unfinished patch for Pigeonhole at http://dovecot.org/patches/2.2/doveadm-sieve-plugin.diff * dsync does the ACL/Sieve syncing by having implemented generic mailbox attribute syncing. (The ACLs/Sieve scripts are transparently mapped into the attribute hierarchy.) ACL plugin also supports now restricting attribute set/get/iteration. IMAP METADATA extension can be implemented using mailbox attributes. The dsync/ACL support was the main reason why I had planned on delaying native IMAP METADATA support until v2.3, but there's really no reason for that anymore. So expect IMAP METADATA support also early in v2.2.x (disabled by default). I'll still need to figure out how to do quota for it. * LDAP values can now have DN pointers to other entries that are queried. (Support for LDAP URLs could probably also be added with little trouble.) The configuration becomes a bit more complex again, but until the whole LDAP configuration is redesigned this will work. Example: user_attrs = \ =user=%{ldap:uid}, \ @mail=%{ldap:mailDN}, \ =uid=%{ldap:uidNumber@mail}, \ =gid=%{ldap:gidNumber@mail}, \ =home=%{ldap:rootPath@mail}/%d/%n

2 4

[Dovecot] dovecot 2 in ubuntu 12.04 or Debian Squeeze
by pvsuja 20 Mar '13

20 Mar '13

Dear sir, I have to set up a mail gateway which will be explored to Internet and a secure mail server in the Intranet. I need a smart imap proxy in the mail gateway which will fetch the mail from server and present to user through either a stand alone mail client or a web mail client. All authentication is through ldap server. I have installed Dovecot 2.2 Unstable in my Ubuntu 12.04 with ssl enabled But when I am starting dovecot, I am getting the following error *doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/conf.d/10-ssl.conf line 12: Unknown setting: ssl_cert* I couldn't figure out what is wrong. Please help me to sort it out. Thanks & Regards, Suja PV LEOS -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-2-in-ubuntu-12-04-or-Debian-Sq… Sent from the Dovecot mailing list archive at Nabble.com.

5 14

Re: [Dovecot] Question regarding Postfix and Dovecot
by Daniel Reinhardt 19 Mar '13

19 Mar '13

Replying back to the list. On Thu, Mar 14, 2013 at 10:51 AM, mourik jan c heupink < heupink(a)merit.unu.edu> wrote: > please reply to the list > > > On 3/14/2013 11:38 AM, Daniel Reinhardt wrote: > >> Yes I have read everything on that, and yet postfix does not even see >> the dovecot virtual transport. >> >> >> On Thu, Mar 14, 2013 at 10:37 AM, mourik jan c heupink >> <heupink(a)merit.unu.edu <mailto:heupink@merit.unu.edu>**> wrote: >> >> Hi Daniel, >> >> I'm new to dovecot myself, but did you read this: >> http://wiki2.dovecot.org/LDA/_**_Postfix<http://wiki2.dovecot.org/LDA/__Postfix> >> >> <http://wiki2.dovecot.org/LDA/**Postfix<http://wiki2.dovecot.org/LDA/Postfix> >> > >> >> I'm guessing that perhaps you need to configure your virtual >> transport? So, in master.cf <http://master.cf>, include a line like: >> >> >> dovecot unix - n n - - pipe >> flags=DRhu user=vmail:vmail >> argv=/usr/local/libexec/__**dovecot/dovecot-lda -f ${sender} -d >> ${recipient} >> >> and configure virtual_transport = dovecot in main.cf <http://main.cf> >> >> >> But again... I'm very new to all this myself, but perhaps it helps? >> >> Regards, >> MJ >> >> >> >> >> -- >> Daniel Reinhardt >> cryptodan(a)cryptodan.net <mailto:cryptodan@cryptodan.**net<cryptodan(a)cryptodan.net> >> > >> http://www.cryptodan.net >> 301-875-7018(c) >> 410-455-0488(h) >> > -- Daniel Reinhardt cryptodan(a)cryptodan.net http://www.cryptodan.net 301-875-7018(c) 410-455-0488(h)

20 53

Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 19 Mar '13

19 Mar '13

Hello Steffen, Thanks for your help, your message has reminds me that I forget the header specification. This new sieve script works for me : require ["fileinto"]; if allof (header :contains "To" "abuse(a)info.xx.com") { fileinto "INBOX.Test"; redirect "clement.xx(a)xx.net"; stop; } Thanks, Clement ----- Date: Mon, 18 Mar 2013 14:28:17 +0100 (CET) From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ? Message-ID: <alpine.DEB.2.02.1303181419590.3303(a)pc-2m63.inf.fh-bonn-rhein-sieg.de> Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 18 Mar 2013, Clement PAULET wrote: Dear Clement, This is my script (using for my test) : require "fileinto"; if address "To" "info(a)info.xx.com" { fileinto "Test"; } Works for me in v2.2. Did you verified that the header "To" really exists in the message and that "info(a)info.xx.com" is part of it? The log you've posted displays the envelope information, which is not necessary the same as the header information. Also, remove the precompiled Sieve script, in order to ensure that the pre-compiled one is really one from the script. You could also decompile it to make sure, it has been created from your test script. You'll find sieve-dump in src/sieve-tools/, if you compile from sources, or maybe in /usr/local/bin.

1 0

[Dovecot] SMTP Client authentication to remote Postfix/Dovecot
by Christian Benke 19 Mar '13

19 Mar '13

Hello! This is probably another basic question and i'm not even sure if it's something where Dovecot is involved, but i'll give it a shot. So i've setup Postfix with Dovecot and system-auth on my remote server. So far it looks like everything is working fine and dandy via SASL(PLAIN) and TLS. I'm just not happy about my local SMTP client settings. I'm going to try to work with mutt in the future, so i need a local MTA - i've decided to try it with Postfix. This works so far and i can send mails with mutt. However - my setup relies on smtp_sasl_password_maps for authentication. I'm not too happy to have plaintext-passwords of remote systems lying around on my local filesystem. It doesn't really ease my mind that the file is readable by root only, this doesn't help if my laptop's harddisk gets mounted elsewhere. Are there alternatives or better ways to do SMTP authentication? http://www.postfix.org/SASL_README.html#server_cyrus_comm says: > saslauthd can verify the SMTP client credentials by using them to log into an IMAP server So i have my mutt-client which is logged in to the remote Dovecot IMAP. Mutt uses the local MTA to send the mail. Is there some way to tell the local postfix or a local dovecot to authenticate the SMTP-Session via the existing IMAP-login? Or some other way where i at least don't rely on plaintext passwords but secure, encrypted hashes? Sorry if this is a redundant thread, "smtp client" authentication site:dovecot.org/list' and the likes are not exactly the most rewarding or unique search terms unfortunately. Thanks, Christian -- Central Asia by bike, starting May 2013 - http://poab.org

1 1

[Dovecot] Integrating with Drupal SQL db
by info＠stos.se 19 Mar '13

19 Mar '13

Hi I'm trying to get Dovecot to use Drupal users password for authenticating IMAP users. But I just cant figure out how to make Dovecot understand the password hash type that Drupal 7 is using. My example user with password Teacher1 looks like this in Drupal database: $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU Dovecot retrieves this hash but complains that its not a recognized hash type, or that the hash is wrong, depending on if I change the default hash type in Dovecot config. Any help appreciated. root@SSiS:/etc/postfix# dovecot --version 1.2.15 root@SSiS:/etc/postfix# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-12-pve i686 Debian 6.0.7 simfs log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/home/vmail/ mbox_write_locks: fcntl dotlock auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd root@SSiS:/etc/postfix# root@SSiS:/etc/postfix# grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=Drupal user=Dru_Adm password=localu default_pass_scheme = CRYPT password_query = SELECT name AS user, pass AS password FROM users WHERE name='%n' user_query = SELECT CONCAT(SUBSTRING_INDEX(mail,'@',-1),'/',SUBSTRING_INDEX(mail,'@',1),'/') AS mail FROM users WHERE name='%n' root@SSiS:/etc/postfix# tail /var/log/mail.log Mar 11 16:17:42 SSiS dovecot: auth(default): new auth connection: pid=8593 Mar 11 16:17:51 SSiS dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=52316#011resp=AFRlYWNoZXIxAFRlYWNoZXIx Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): lookup service=dovecot Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): #1/1 style=1 msg=Password: Mar 11 16:17:54 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: Teacher1) Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): query: SELECT name AS user, pass AS password FROM users WHERE name='Teacher1' Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): Password mismatch Mar 11 16:17:54 SSiS dovecot: auth-worker(default): md5_verify(Teacher1): Not a valid MD5-CRYPT or PLAIN-MD5 password Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): CRYPT(Teacher1) != '$S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU' Mar 11 16:17:56 SSiS dovecot: auth(default): client out: FAIL#0111#011user=Teacher1 Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 11 16:32:36 SSiS dovecot: auth(default): new auth connection: pid=9075 Mar 11 16:32:41 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts): rip=127.0.0.1, lip=127.0.0.1, secured root@SSiS:/etc/postfix#

5 8

[Dovecot] Random LDA failure to access auth socket
by Chris Richards 19 Mar '13

19 Mar '13

Greetings all. Please forgive me if I'm posting something that has already been addressed, but my google-foo is not strong enough to find the solution. I've got a dovecot server running version 2.0.19 on Gentoo Hardened. I have Postfix as my MTA, and it is calling the Dovecot LDA to deliver the mail. Everything is working great, mail is being delivered, and the users are happy. However, I am noticing that I have random entries like this: Mar 1 20:19:23 hermes dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=97(dovecot) egid=97(dovecot) missing +r perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) Mar 1 20:19:23 hermes dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Since these messages came from the server log, looking in the server log for more information is rather pointless. I have 10-master.conf configured as follows: service auth { unix_listener auth-userdb { mode = 0600 user = vmail group = vmail } In 15-lda.conf I have: protocol lda { mail_plugins = $mail_plugins sieve quota } In Postfix master.cf, I have the following: dovecot unix - n n - - pipe flags=DRhu user=vmail:users argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop} Permissions on the socket are: srw------- 1 vmail vmail 0 Feb 24 23:43 auth-userdb Judging from the log, my problem is that the LDA appears to be trying to access the socket as the dovecot user (rather than the vmail user), but my question is why? What logging can I use to tell me if postfix is calling with the wrong permissions or if the lda is somehow getting confused? Any help or suggestions greatly appreciated. Thanks, Gizmo

2 6

[Dovecot] SASL + Postfix woes
by Jerry 18 Mar '13

18 Mar '13

Okay, I wasn't going to try and fix up the messed up mail server I was given; however, I decided that I might as well try. Situation: The system has a Postfix MTA and uses Dovecot for LDA and Cyrus-SASL for SASL. That works fine. I decided that I wanted to switch over to Dovecot for SASL. dovecot is presently using MySQL for its database. I make the (I thought) necessary changes in Postfix and restarted it. Big problem. SASL is now broken. I turned on logging in Dovecot to see what was happening, but apparently nothing is happening. There are no entries regarding Postfix attempting to negotiate an SASL request with Dovecot. This is the "dovecot -n" outout (yes, I know it is an old version) # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.3-STABLE amd64 ufs log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/seibercom.net/gerard mail_plugins: expire imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)seibercom.net mail_plugins: sieve sieve_global_path: /usr/local/etc/dovecot/sieve/gerard.sieve sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: expire: Trash 2 Spam/* 2 expire_dict: proxy::expire dict: expire: mysql:/usr/local/etc/dovecot-dict-expire.conf This is the "dovecot-sql.conf" file: driver = mysql connect = host=localhost dbname=Dovecot user=root password=xxxxxxxx password_query = SELECT concat(userid, '@', domain) AS user, password \ FROM users WHERE userid = '%n' AND domain = '%d' user_query = SELECT uid, gid, home FROM users WHERE userid = '%n' AND domain = '%d' This is the pertinent part of the postconf -fn output: broken_sasl_auth_clients = yes smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_password_maps smtp_sasl_security_options = noanonymous smtp_sasl_type = dovecot smtpd_client_restrictions = reject_unauth_pipelining permit_sasl_authenticated smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = noanonymous I have tried using "dovecot" in place of "private/auth", but it doesn't make any difference. This is the only output from the postfix maillog: Mar 18 08:13:02 scorpio postfix/smtpd[65217]: connect from localhost[127.0.0.1] Mar 18 08:13:02 scorpio postfix/smtpd[65217]: warning: localhost[127.0.0.1]: SASL CRAM-MD5 authentication failed: authentication failure Mar 18 08:13:02 scorpio postfix/smtpd[65217]: lost connection after AUTH from localhost[127.0.0.1] Again, it doesn't appear that Postfix ever actually makes contact with Dovecot. I am probably doing something extremely stupid, but I just cannot figure out what it is. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

2 2

[Dovecot] Dovecot with sasl/imaps/postfix and thunderbird
by Alex 18 Mar '13

18 Mar '13

Hi, I have an fc18 system with postfix and dovecot-2.1.13 and have configured them to use sasl for SMTP Auth and Maildir with imaps. The system is running now, so I'm trying to set up thunderbird to autodetect all settings during the initial account setup. However, it seems to want to use port 143 and STARTTLS, and not port 993, which is what I would expect. When I force it to use 993, I receive a certificate failure message: Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: initializing the server-side TLS engine Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_tls_session_cache Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: connect from unknown[192.168.1.43] Mar 12 23:20:45 propnew dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.43, lip=66.111.222.101, TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate: SSL alert number 42, session=<BGBS5MXXhQDAqAEr> Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: lost connection after CONNECT from unknown[192.168.1.43] These are self-signed certs created using dovecot's mkcert.sh script. Is this a problem with the cert or with the dovecot configuration? Is it conventional to use port 143 for encrypted IMAP connections these days, and not just 993? I'm finding that port 25 works with TLS and postfix now too, not just port 587, so I'm really confused. I've included my doveconf output below. I'd appreciate it if someone could review it for me to be sure. # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.8.1-201.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2000 disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/home/%u/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 20 service_count = 0 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { driver = passwd } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks, Alex

9 18

Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 18 Mar '13

18 Mar '13

Hello Steffen, Thanks for your reply, This is my script (using for my test) : require "fileinto"; if address "To" "info(a)info.xx.com" { fileinto "Test"; } Clement ------------------------------ Message: 7 Date: Mon, 18 Mar 2013 13:23:33 +0100 (CET) From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ? Message-ID: <alpine.DEB.2.02.1303181322430.3303(a)pc-2m63.inf.fh-bonn-rhein-sieg.de> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 18 Mar 2013, Clement PAULET wrote: When I use a Sieve script, it 's loaded but actions are not respect with this logs : The sieve script just trying to redirect to INBOX.Test folder but doesn't works.. First of all, how does your script looks like? - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUUcHRl3r2wJMiz2NAQKoswf/WczI0q9k0WqWzRPr7lwuBEeiQQlYBDaq Lap8YNnbxDsczxgYZ/i0gDrq7f612A0nKWHBC806DxH4dHNyUwBPYVqFAT7edvk4 ns99f4bNh6GsufC1CY5tY/1DjT5ykEzkTmaV443YH50jQ4iPnDohOMsBBRlhoWN4 8KCLCNafCYXf48QjnAfoLt4TjaxyYb//7otYJN2CqLOGbvWoJwrpNgmuhvST+PNm RQXLG1lpxzt7QMP++fTMXa6A/SwVsglhAUS6xFdAuoOBsx1jPtvA+mot9gqpi02I j2WquMsycviWprYD2FsET903TWU/5+boxg2UBOettsTqhfwABkIcvQ== =ygun -----END PGP SIGNATURE-----

2 1

[Dovecot] Dovecot not obeying disable_plaintext_auth = yes and how to force/disable encryption
by Darren Pilgrim 18 Mar '13

18 Mar '13

I'm using Dovecot 2.1.15. I need to require encryption and only secure auth on public addresses, but allow plaintext auth over an unencrypted connection on localhost. I have so far (excerpts from `doveconf -a`): auth_mechanisms = cram-md5 plain disable_plaintext_auth = yes listen = service imap-login { inet_listener imap-local { address = ::1 port = 143 ssl = no } inet_listener imap-pub { address = 2001:db8::1 port = 993 ssl = yes } } service managesieve-login { inet_listener sieve-local { address = ::1 port = 4190 ssl = no } inet_listener sieve-pub { address = 2001:db8::1 port = 4190 ssl = no } } The ssl option only seems to switch the inet_listener between using a secure socket and using STARTTLS. How do I tell a given inet_listener to do neither? How do I tell a given inet_listener to require STARTTLS before allowing AUTH/SASL? I would prefer to offer only CRAM-MD5 on the UGA/public ports, and only PLAIN or at least also PLAIN on localhost. I tried adding auth_mechanisms lines to each inet_listener block, but got parse errors. How do I do this? Dovecot seems to ignore disable_plaintext_auth = yes: # telnet 2001:db8::1 4190 Trying 2001:db8::1... Connected to host.example.com. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "CRAM-MD5 PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." -- Please reply on list.

1 1

[Dovecot] Dovecot as LDA with Postfix and virtual users
by Christian Benke 17 Mar '13

17 Mar '13

Hello! I've been trying to configure Dovecot to work as LDA for file-based virtual users with Postfix. Some part in the configuration seems to miss though, as mails are received by Postfix, but instead of giving it to Dovecot for delivery, it delivers the mails itself. Postfix drops the mail in /var/mail/<user>/mbox, if Dovecot would be called, it should deliver it to /var/vmail/<domain>/<user>/Maildir. I've made sure to add the dovecot-service to postfix/master.cf according to http://wiki2.dovecot.org/LDA/Postfix and tried all kinds of settings and did quadruple checks for errors. I'm using Debian 6.0 with Dovecot 2.1.7(From backports) and Postfix 2.7.1 I've been trying to figure out what's missing for a few hours now and have to give up for today. I hope someone can help me with a hint what's missing or wrong :-/ Here's an excerpt from my mail.log, my postconf -n and dovecot -n: Mar 17 00:02:46 poab postfix/smtpd[15333]: connect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: setting up TLS connection from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: Anonymous TLS connection established from mail-wg0-f47.google.com[74.125.82.47]: TLSv1 with cipher RC4-SHA (128/128 bits) Mar 17 00:02:46 poab dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Mar 17 00:02:46 poab dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 1 users in 0 secs Mar 17 00:02:46 poab dovecot: auth: Debug: auth client connected (pid=0) Mar 17 00:02:46 poab postfix/smtpd[15333]: 66AD04E23EE: client=mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/cleanup[15340]: 66AD04E23EE: message-id=<CAAMQ8bSEetcSYKKHKhbAqWxJwRewaPB_wA2DK8J4N-q5Y+dG7w(a)mail.gmail.com> Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: from=<benkkk AT wheemail.com>, size=1611, nrcpt=1 (queue active) Mar 17 00:02:46 poab postfix/smtpd[15333]: disconnect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/local[15341]: 66AD04E23EE: to=<benkkk AT example.com>, relay=local, delay=0.35, delays=0.3/0.01/0/0.04, dsn=2.0.0, status=sent (delivered to mailbox) Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: removed # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 3 inet_interfaces = all inet_protocols = all mailbox_size_limit = 5120000000 myhostname = example.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relayhost = smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_reject_unlisted_recipient = yes smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = hash:/etc/postfix/sender_login_maps smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_key_file = /etc/ssl/private/postfix.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_maps virtual_transport = dovecot # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-openvz-amd64 x86_64 Debian 6.0.7 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes auth_verbose_passwords = sha1 first_valid_gid = 5000 first_valid_uid = 5000 last_valid_gid = 5000 last_valid_uid = 5000 lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_gid = 5000 mail_home = /var/vmail/%d/%n mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA1 /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } } ssl_cert = </etc/ssl/certs/postfix.pem ssl_key = </etc/ssl/private/postfix.key userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = } Thanks & good night, Christian -- Central Asia by bike, starting May 2013 - http://poab.org

2 4

[Dovecot] Dovecot SASL & Postfix
by Jerry 17 Mar '13

17 Mar '13

This is probably a dumb question, but I'll ask anyway. I am currently using Postfix with Dovecot and Cyrus-SASL. I want to switch over to Dovecot SASL. The regular Dovecot user/password file is not the same as the file used by cyrus-sasl. Usewr names and passwords are different. I created a flat file that dovecot can use for SASL look-ups; however, exactly where in the Dovecot config file to I place the entry. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

3 5

[Dovecot] Connection to PGSQL fails?
by Bjørn T Johansen 17 Mar '13

17 Mar '13

I have configured a new server and copied the dovecot-sql.conf file that works a different server to the new server... But when Dovecot tries to connect to the database, the following error appears..: Mar 16 22:28:25 smtp dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Mar 16 22:28:25 smtp dovecot: auth: Error: pgsql: Connect failed to serviceadmin: could not connect to server: Permission denied Mar 16 22:28:25 smtp dovecot: auth: Error: #011Is the server running on host "10.50.150.35" and accepting Mar 16 22:28:25 smtp dovecot: auth: Error: #011TCP/IP connections on port 5432? Mar 16 22:28:25 smtp dovecot: auth: Debug: auth client connected (pid=1768) But if I use psql and connects to the same db server with the same username and password, I can successfully connect... What am I missing? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" -----------------------------------------------------------------------------------------------

3 7

[Dovecot] sieve: seconds-extension for vacation
by Peer Heinlein 16 Mar '13

16 Mar '13

Hi, looks like Dovecot-Sieve doesn't know the seconds-extension for vacation: main script: line 5: error: unknown tagged argument ':seconds' for the vacation command (reported only once at first occurence). main script: error: validation failed. http://tools.ietf.org/html/rfc6131 Could this be added during the next releases? Regards, Peer -- Treffen Sie uns auf den Chemnitzer Linux-Tagen vom 16. bis 17. März 2013! Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] Dovecot error wuth MySQL
by Cesar 16 Mar '13

16 Mar '13

Hello PeopleCan anybody help me?My scenario:- One computer with:a) postfix-2.6.6-2.2.el6_1.x86_64b) mysql-5.1.66-2.el6_3.x86_64c) dovecot-2.0.9-2.el6_1.1.x86_64d) dovecot-mysql-2.0.9-2.el6_1.1.x86_64Postfix and Dovecot auth over MySQLThe Problem:- logwatch show me: Dovecot disconnects: auth failed, 1 attempts: 1 Time(s) in IDLE: 2 Time(s) no auth attempts: 6 Time(s) no reason: 6 Time(s) **Unmatched Entries** dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone away: 125 Time(s)(125 Times Wow)For example part of maillog show me:About MySQL auth failed:Mar 10 03:55:05 gateway dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone awayMar 10 03:55:05 gateway dovecot: auth: mysql: Connected to localhost (mail)Mar 10 03:55:05 gateway dovecot: pop3-login: Login: user=user-name(a)domain.com>, method=PLAIN, rip=192.168.100.31, lip=190.128.232.2, mpid=16352Mar 10 03:55:05 gateway dovecot: pop3(user-name(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0The Question:How to fix it? (i don't want to see the dovecot auth error mysql)I will be very grateful to anyone who can help me ----- Best Regards Cesar -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-error-wuth-MySQL-tp40765.html Sent from the Dovecot mailing list archive at Nabble.com.

5 6

[Dovecot] Question regarding Postfix and Dovecot
by Daniel Reinhardt 16 Mar '13

16 Mar '13

All, Thank you for having this list, and I have a question regarding why postfix is not handing off delivery to Dovecot to virtual users. Here is all I can offer since I am not at my server: *Here is the debug information for my postfix setup:* [code] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: ipv4 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: inet_addr_local: configured 2 IPv4 addresses Mar 13 20:23:55 andromeda postfix/smtpd[15316]: process generation: 3 (3) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: relay_domains: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect to subsystem private/proxymap Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = open Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr table = unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr flags = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 16 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: proxy:unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Compiled against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Run-time linked against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: hash:/etc/aliases Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_va_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: table = alias Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: select_field = goto Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: where_field = address Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_va_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: query = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' AND alias.address=concat('%u', '@', alias_domain.target_domain) AND alias.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_alias_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_vmb_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: table = mailbox Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: select_field = CONCAT(domain, '/', local_part) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: where_field = username Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_vmb_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: query = SELECT maildir FROM mailbox, alias_domain \ WHERE alias_domain.alias_domain = '%d' \ AND mailbox.username=concat('%u', '@', alias_domain.target_domain ) \ AND mailbox.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_mailbox_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_helo_hostname_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_address_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_recipient_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_sender_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: AHVrzbFVvc2OBJm0YrMwfr0jnTbg7Iomx767MU6gr+4= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = policy Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr cache_type = smtpd Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connection established Mar 13 20:23:55 andromeda postfix/smtpd[15316]: master_notify: status 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: resource Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: software Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect from mail-ve0-f174.google.com[209.85.128.174] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: smtp_stream_setup: maxtime=300 enable_deadline=0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostname: mail-ve0-f174.google.com ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostaddr: 209.85.128.174 ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = connect Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr ident = smtp:209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report connect to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "j" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{daemon_name}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "v" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "Postfix 2.9.6" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: non-protocol events for protocol version 6: Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: transport=inet endpoint=127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: trying... [127.0.0.1] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: vstream_tweak_tcp: TCP_MAXSEG 16384 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_version=0x6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: milter inet:127.0.0.1:8891 version 6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: events SMFIP_NOHELO SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGHDRS SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_conn_event: milter inet:127.0.0.1:8891: connect mail-ve0-f174.google.com/209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_CONNECT; macros: j=andromeda.home {daemon_name}=andromeda.home v=Postfix 2.9.6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: reply: SMFIR_CONTINUE data 0 bytes Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 andromeda.home ESMTP Postfix (Ubuntu) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: EHLO mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report helo to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{tls_version}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher_bits}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_subject}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_issuer}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_helo_event: milter inet:127.0.0.1:8891: helo mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_HELO; macros: (none) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: skipping event SMFIC_HELO for milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-andromeda.home Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-PIPELINING Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-SIZE 10240000 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-VRFY Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ETRN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ENHANCEDSTATUSCODES Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-8BITMIME Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250 DSN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: query milter states for other event Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_other_event: milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 2.0.0 Ready to start TLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: abort all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_abort: abort milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: Yq65+voc3LQNVdBh7hwpJK7T0kNDyGKblUpQTyAY8oA= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/cleanup[15325]: D43E610006A: message-id=< CADUOTo1h8zkNH-Pi-xpZ03Ko+n1_GqbhEdW23MN-npSYVyjYPA(a)mail.gmail.com> Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: mail-ve0-f174.google.com [209.85.128.174] not internal Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: not authenticated Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing domain match for 'gmail.com' Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing subdomain match for 'gmail.com' Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: from=< cryptodan(a)gmail.com>, size=6398, nrcpt=1 (queue active) Mar 13 20:23:55 andromeda postfix/local[15327]: D43E610006A: to=< cryptodan(a)cryptodan.net>, relay=local, delay=0.16, delays=0.15/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: removed Mar 13 20:24:01 andromeda postfix/smtpd[15316]: proxymap stream disconnect Mar 13 20:24:01 andromeda postfix/smtpd[15316]: auto_clnt_close: disconnect private/tlsmgr stream Mar 13 20:24:01 andromeda postfix/smtpd[15316]: rewrite stream disconnect Mar 13 20:25:35 andromeda postfix/smtpd[15316]: idle timeout -- exiting Mar 13 20:27:12 andromeda dovecot: auth-worker: mysql(localhost): Connected to database mail Mar 13 20:27:12 andromeda dovecot: pop3-login: Login: user=< cryptodan(a)cryptodan.net>, method=PLAIN, rip=96.244.76.114, lip=192.168.1.8, mpid=15341, TLS Mar 13 20:27:12 andromeda dovecot: pop3(cryptodan(a)cryptodan.net): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection rate 1/60s for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection count 1 for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max cache size 1 at Mar 14 00:23:55 [/code] *Here is the output of postconf -d:* [code] root@andromeda:/etc/postfix# postconf -d 2bounce_notice_recipient = postmaster access_map_defer_code = 450 access_map_reject_code = 554 address_verify_cache_cleanup_interval = 12h address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = btree:$data_directory/verify_cache address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = ${stress?1}${stress:3} address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = $double_bounce_sender address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_sender_ttl = 0s address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, nis:mail.aliases allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_add_missing_headers = no always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = yes application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = yes body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = no bsmtp_delivery_slot_cost = $default_delivery_slot_cost bsmtp_delivery_slot_discount = $default_delivery_slot_discount bsmtp_delivery_slot_loan = $default_delivery_slot_loan bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback bsmtp_destination_rate_delay = $default_destination_rate_delay bsmtp_destination_recipient_limit = $default_destination_recipient_limit bsmtp_extra_recipient_limit = $default_extra_recipient_limit bsmtp_initial_destination_concurrency = $initial_destination_concurrency bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots bsmtp_recipient_limit = $default_recipient_limit bsmtp_recipient_refill_delay = $default_recipient_refill_delay bsmtp_recipient_refill_limit = $default_recipient_refill_limit bsmtp_time_limit = $command_time_limit canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = cyrus_sasl_config_path = daemon_directory = /usr/lib/postfix daemon_table_open_error_is_fatal = no daemon_timeout = 18000s data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = debugger_command = default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_failed_cohort_limit = 1 default_destination_concurrency_limit = 20 default_destination_concurrency_negative_feedback = 1 default_destination_concurrency_positive_feedback = 1 default_destination_rate_delay = 0s default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_filter_nexthop = default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 20000 default_recipient_refill_delay = 5s default_recipient_refill_limit = 100 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 0h deliver_lock_attempts = 20 deliver_lock_delay = 1s destination_concurrency_feedback_debug = no detect_8bit_encoding_header = yes disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = no dnsblog_reply_delay = 0s dnsblog_service_name = dnsblog dont_remove = 0 double_bounce_sender = double-bounce dovecot_delivery_slot_cost = $default_delivery_slot_cost dovecot_delivery_slot_discount = $default_delivery_slot_discount dovecot_delivery_slot_loan = $default_delivery_slot_loan dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit dovecot_destination_concurrency_limit = $default_destination_concurrency_limit dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback dovecot_destination_rate_delay = $default_destination_rate_delay dovecot_destination_recipient_limit = $default_destination_recipient_limit dovecot_extra_recipient_limit = $default_extra_recipient_limit dovecot_initial_destination_concurrency = $initial_destination_concurrency dovecot_minimum_delivery_slots = $default_minimum_delivery_slots dovecot_recipient_limit = $default_recipient_limit dovecot_recipient_refill_delay = $default_recipient_refill_delay dovecot_recipient_refill_limit = $default_recipient_refill_limit dovecot_time_limit = $command_time_limit duplicate_filter_limit = 1000 empty_address_default_transport_maps_lookup_key = <> empty_address_recipient = MAILER-DAEMON empty_address_relayhost_maps_lookup_key = <> enable_long_queue_ids = no enable_original_recipient = yes error_delivery_slot_cost = $default_delivery_slot_cost error_delivery_slot_discount = $default_delivery_slot_discount error_delivery_slot_loan = $default_delivery_slot_loan error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit error_destination_concurrency_limit = $default_destination_concurrency_limit error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback error_destination_rate_delay = $default_destination_rate_delay error_destination_recipient_limit = $default_destination_recipient_limit error_extra_recipient_limit = $default_extra_recipient_limit error_initial_destination_concurrency = $initial_destination_concurrency error_minimum_delivery_slots = $default_minimum_delivery_slots error_notice_recipient = postmaster error_recipient_limit = $default_recipient_limit error_recipient_refill_delay = $default_recipient_refill_delay error_recipient_refill_limit = $default_recipient_refill_limit error_service_name = error execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = hopcount_limit = 50 html_directory = no ifmail_delivery_slot_cost = $default_delivery_slot_cost ifmail_delivery_slot_discount = $default_delivery_slot_discount ifmail_delivery_slot_loan = $default_delivery_slot_loan ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit ifmail_destination_concurrency_limit = $default_destination_concurrency_limit ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback ifmail_destination_rate_delay = $default_destination_rate_delay ifmail_destination_recipient_limit = $default_destination_recipient_limit ifmail_extra_recipient_limit = $default_extra_recipient_limit ifmail_initial_destination_concurrency = $initial_destination_concurrency ifmail_minimum_delivery_slots = $default_minimum_delivery_slots ifmail_recipient_limit = $default_recipient_limit ifmail_recipient_refill_delay = $default_recipient_refill_delay ifmail_recipient_refill_limit = $default_recipient_refill_limit ifmail_time_limit = $command_time_limit ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = all inet_protocols = all initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 5s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmtp_address_preference = any lmtp_assume_final = no lmtp_bind_address = lmtp_bind_address6 = lmtp_body_checks = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_delivery_slot_cost = $default_delivery_slot_cost lmtp_delivery_slot_discount = $default_delivery_slot_discount lmtp_delivery_slot_loan = $default_delivery_slot_loan lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback lmtp_destination_rate_delay = $default_destination_rate_delay lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_dns_resolver_options = lmtp_enforce_tls = no lmtp_extra_recipient_limit = $default_extra_recipient_limit lmtp_generic_maps = lmtp_header_checks = lmtp_host_lookup = dns lmtp_initial_destination_concurrency = $initial_destination_concurrency lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 998 lmtp_mail_timeout = 300s lmtp_mime_header_checks = lmtp_minimum_delivery_slots = $default_minimum_delivery_slots lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_nested_header_checks = lmtp_per_record_deadline = no lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_maps = lmtp_pix_workaround_threshold_time = 500s lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_recipient_limit = $default_recipient_limit lmtp_recipient_refill_delay = $default_recipient_refill_delay lmtp_recipient_refill_limit = $default_recipient_refill_limit lmtp_reply_filter = lmtp_rset_timeout = 20s lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_dummy_mail_auth = no lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_skip_quit_response = no lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_block_early_mail_reply = no lmtp_tls_cert_file = lmtp_tls_ciphers = export lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_eccert_file = lmtp_tls_eckey_file = $lmtp_tls_eccert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_fingerprint_cert_match = lmtp_tls_fingerprint_digest = md5 lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = !SSLv2 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_protocols = !SSLv2 lmtp_tls_scert_verifydepth = 9 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_delivery_slot_cost = $default_delivery_slot_cost local_delivery_slot_discount = $default_delivery_slot_discount local_delivery_slot_loan = $default_delivery_slot_loan local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit local_destination_concurrency_limit = 2 local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback local_destination_rate_delay = $default_destination_rate_delay local_destination_recipient_limit = 1 local_extra_recipient_limit = $default_extra_recipient_limit local_header_rewrite_clients = permit_inet_interfaces local_initial_destination_concurrency = $initial_destination_concurrency local_minimum_delivery_slots = $default_minimum_delivery_slots local_recipient_limit = $default_recipient_limit local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_recipient_refill_delay = $default_recipient_refill_delay local_recipient_refill_limit = $default_recipient_refill_limit local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20130203 mail_spool_directory = /var/mail mail_version = 2.9.6 mailbox_command = mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 51200000 mailbox_transport = mailbox_transport_maps = maildrop_delivery_slot_cost = $default_delivery_slot_cost maildrop_delivery_slot_discount = $default_delivery_slot_discount maildrop_delivery_slot_loan = $default_delivery_slot_loan maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit maildrop_destination_concurrency_limit = $default_destination_concurrency_limit maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback maildrop_destination_rate_delay = $default_destination_rate_delay maildrop_destination_recipient_limit = $default_destination_recipient_limit maildrop_extra_recipient_limit = $default_extra_recipient_limit maildrop_initial_destination_concurrency = $initial_destination_concurrency maildrop_minimum_delivery_slots = $default_minimum_delivery_slots maildrop_recipient_limit = $default_recipient_limit maildrop_recipient_refill_delay = $default_recipient_refill_delay maildrop_recipient_refill_limit = $default_recipient_refill_limit maildrop_time_limit = $command_time_limit mailman_delivery_slot_cost = $default_delivery_slot_cost mailman_delivery_slot_discount = $default_delivery_slot_discount mailman_delivery_slot_loan = $default_delivery_slot_loan mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit mailman_destination_concurrency_limit = $default_destination_concurrency_limit mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback mailman_destination_rate_delay = $default_destination_rate_delay mailman_destination_recipient_limit = $default_destination_recipient_limit mailman_extra_recipient_limit = $default_extra_recipient_limit mailman_initial_destination_concurrency = $initial_destination_concurrency mailman_minimum_delivery_slots = $default_minimum_delivery_slots mailman_recipient_limit = $default_recipient_limit mailman_recipient_refill_delay = $default_recipient_refill_delay mailman_recipient_refill_limit = $default_recipient_refill_limit mailman_time_limit = $command_time_limit mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = master_service_disable = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 10240000 message_strip_characters = milter_command_timeout = 30s milter_connect_macros = j {daemon_name} v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_end_of_header_macros = i milter_header_checks = milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer} milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer} milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 300s multi_instance_directories = multi_instance_enable = no multi_instance_group = multi_instance_name = multi_instance_wrapper = multi_recipient_bounce_reject_code = 550 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = localdomain myhostname = andromeda.home mynetworks = 127.0.0.0/8 192.168.1.0/24 mynetworks_style = subnet myorigin = $myhostname nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = yes parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 postmulti_control_commands = reload flush postmulti_start_commands = start postmulti_stop_commands = stop abort drain quick-stop postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_bare_newline_ttl = 30d postscreen_blacklist_action = ignore postscreen_cache_cleanup_interval = 12h postscreen_cache_map = btree:$data_directory/postscreen_cache postscreen_cache_retention_time = 7d postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit postscreen_command_count_limit = 20 postscreen_command_filter = postscreen_command_time_limit = ${stress?10}${stress:300}s postscreen_disable_vrfy_command = $disable_vrfy_command postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords postscreen_dnsbl_action = ignore postscreen_dnsbl_reply_map = postscreen_dnsbl_sites = postscreen_dnsbl_threshold = 1 postscreen_dnsbl_ttl = 1h postscreen_enforce_tls = $smtpd_enforce_tls postscreen_expansion_filter = $smtpd_expansion_filter postscreen_forbidden_commands = $smtpd_forbidden_commands postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = ${stress?2}${stress:6}s postscreen_helo_required = $smtpd_helo_required postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = no postscreen_non_smtp_command_ttl = 30d postscreen_pipelining_action = enforce postscreen_pipelining_enable = no postscreen_pipelining_ttl = 30d postscreen_post_queue_limit = $default_process_limit postscreen_pre_queue_limit = $default_process_limit postscreen_reject_footer = $smtpd_reject_footer postscreen_tls_security_level = $smtpd_tls_security_level postscreen_use_tls = $smtpd_use_tls postscreen_watchdog_timeout = 10s postscreen_whitelist_interfaces = static:all prepend_delivered_header = command, file, forward process_id_directory = pid propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map proxymap_service_name = proxymap proxywrite_service_name = proxywrite qmgr_clog_warn_time = 300s qmgr_daemon_timeout = 1000s qmgr_fudge_factor = 100 qmgr_ipc_timeout = 60s qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_client_port_logging = no qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 300s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/postfix receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = reject_code = 554 reject_tempfail_action = defer_if_permit relay_clientcerts = relay_delivery_slot_cost = $default_delivery_slot_cost relay_delivery_slot_discount = $default_delivery_slot_discount relay_delivery_slot_loan = $default_delivery_slot_loan relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback relay_destination_rate_delay = $default_destination_rate_delay relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = $mydestination relay_domains_reject_code = 554 relay_extra_recipient_limit = $default_extra_recipient_limit relay_initial_destination_concurrency = $initial_destination_concurrency relay_minimum_delivery_slots = $default_minimum_delivery_slots relay_recipient_limit = $default_recipient_limit relay_recipient_maps = relay_recipient_refill_delay = $default_recipient_refill_delay relay_recipient_refill_limit = $default_recipient_refill_limit relay_transport = relay relayhost = relocated_maps = remote_header_rewrite_domain = require_home_directory = no reset_owner_alias = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no retry_delivery_slot_cost = $default_delivery_slot_cost retry_delivery_slot_discount = $default_delivery_slot_discount retry_delivery_slot_loan = $default_delivery_slot_loan retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit retry_destination_concurrency_limit = $default_destination_concurrency_limit retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback retry_destination_rate_delay = $default_destination_rate_delay retry_destination_recipient_limit = $default_destination_recipient_limit retry_extra_recipient_limit = $default_extra_recipient_limit retry_initial_destination_concurrency = $initial_destination_concurrency retry_minimum_delivery_slots = $default_minimum_delivery_slots retry_recipient_limit = $default_recipient_limit retry_recipient_refill_delay = $default_recipient_refill_delay retry_recipient_refill_limit = $default_recipient_refill_limit rewrite_service_name = rewrite sample_directory = /usr/share/doc/postfix/examples scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback scalemail-backend_destination_rate_delay = $default_destination_rate_delay scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots scalemail-backend_recipient_limit = $default_recipient_limit scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit scalemail-backend_time_limit = $command_time_limit send_cyrus_sasl_authzid = no sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = sender_dependent_default_transport_maps = sender_dependent_relayhost_maps = sendmail_fix_line_endings = always sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = postdrop show_user_unknown_table_name = yes showq_service_name = showq smtp_address_preference = any smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_body_checks = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_delivery_slot_cost = $default_delivery_slot_cost smtp_delivery_slot_discount = $default_delivery_slot_discount smtp_delivery_slot_loan = $default_delivery_slot_loan smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback smtp_destination_rate_delay = $default_destination_rate_delay smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_dns_resolver_options = smtp_enforce_tls = no smtp_extra_recipient_limit = $default_extra_recipient_limit smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_header_checks = smtp_helo_name = $myhostname smtp_helo_timeout = 300s smtp_host_lookup = dns smtp_initial_destination_concurrency = $initial_destination_concurrency smtp_line_length_limit = 998 smtp_mail_timeout = 300s smtp_mime_header_checks = smtp_minimum_delivery_slots = $default_minimum_delivery_slots smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_nested_header_checks = smtp_never_send_ehlo = no smtp_per_record_deadline = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_maps = smtp_pix_workaround_threshold_time = 500s smtp_pix_workarounds = disable_esmtp,delay_dotcrlf smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_recipient_limit = $default_recipient_limit smtp_recipient_refill_delay = $default_recipient_refill_delay smtp_recipient_refill_limit = $default_recipient_refill_limit smtp_reply_filter = smtp_rset_timeout = 20s smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = noplaintext, noanonymous smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_dummy_mail_auth = no smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_block_early_mail_reply = no smtp_tls_cert_file = smtp_tls_ciphers = export smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_eccert_file = smtp_tls_eckey_file = $smtp_tls_eccert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_fingerprint_cert_match = smtp_tls_fingerprint_digest = md5 smtp_tls_key_file = $smtp_tls_cert_file smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = !SSLv2 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_protocols = !SSLv2 smtp_tls_scert_verifydepth = 9 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_verify_cert_match = hostname smtp_use_tls = no smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP $mail_name smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_port_logging = no smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = smtpd_command_filter = smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_helo_required = no smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = ${stress?1}${stress:100} smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_per_record_deadline = ${stress?yes}${stress:no} smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_options = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_reject_footer = smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_restriction_classes = smtpd_sasl_auth_enable = no smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = smtpd smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = cyrus smtpd_sender_login_maps = smtpd_sender_restrictions = smtpd_service_name = smtpd smtpd_soft_error_limit = 10 smtpd_starttls_timeout = ${stress?10}${stress:300}s smtpd_timeout = ${stress?10}${stress:300}s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = no smtpd_tls_ccert_verifydepth = 9 smtpd_tls_cert_file = smtpd_tls_ciphers = export smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_eccert_file = smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = $smtpd_tls_cert_file smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mailbox_ownership = yes strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name} tcp_windowsize = 0 tls_append_default_CA = no tls_daemon_random_bytes = 32 tls_disable_workarounds = tls_eecdh_strong_curve = prime256v1 tls_eecdh_ultra_curve = secp384r1 tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH tls_legacy_public_key_fingerprints = no tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH tls_null_cipherlist = eNULL:!aNULL tls_preempt_cipherlist = no tls_random_bytes = 32 tls_random_exchange_name = ${data_directory}/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom tlsproxy_enforce_tls = $smtpd_enforce_tls tlsproxy_service_name = tlsproxy tlsproxy_tls_CAfile = $smtpd_tls_CAfile tlsproxy_tls_CApath = $smtpd_tls_CApath tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth tlsproxy_tls_cert_file = $smtpd_tls_cert_file tlsproxy_tls_ciphers = $smtpd_tls_ciphers tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest tlsproxy_tls_key_file = $smtpd_tls_key_file tlsproxy_tls_loglevel = $smtpd_tls_loglevel tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols tlsproxy_tls_protocols = $smtpd_tls_protocols tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert tlsproxy_tls_security_level = $smtpd_tls_security_level tlsproxy_tls_session_cache_timeout = $smtpd_tls_session_cache_timeout tlsproxy_use_tls = $smtpd_use_tls tlsproxy_watchdog_timeout = 10s trace_service_name = trace transport_maps = transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = unknown_address_reject_code = 450 unknown_address_tempfail_action = $reject_tempfail_action unknown_client_reject_code = 450 unknown_helo_hostname_tempfail_action = $reject_tempfail_action unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_defer_code = 450 unverified_recipient_reject_code = 450 unverified_recipient_reject_reason = unverified_recipient_tempfail_action = $reject_tempfail_action unverified_sender_defer_code = 450 unverified_sender_reject_code = 450 unverified_sender_reject_reason = unverified_sender_tempfail_action = $reject_tempfail_action uucp_delivery_slot_cost = $default_delivery_slot_cost uucp_delivery_slot_discount = $default_delivery_slot_discount uucp_delivery_slot_loan = $default_delivery_slot_loan uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit uucp_destination_concurrency_limit = $default_destination_concurrency_limit uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback uucp_destination_rate_delay = $default_destination_rate_delay uucp_destination_recipient_limit = $default_destination_recipient_limit uucp_extra_recipient_limit = $default_extra_recipient_limit uucp_initial_destination_concurrency = $initial_destination_concurrency uucp_minimum_delivery_slots = $default_minimum_delivery_slots uucp_recipient_limit = $default_recipient_limit uucp_recipient_refill_delay = $default_recipient_refill_delay uucp_recipient_refill_limit = $default_recipient_refill_limit uucp_time_limit = $command_time_limit verp_delimiter_filter = -=+ virtual_alias_domains = $virtual_alias_maps virtual_alias_expansion_limit = 1000 virtual_alias_maps = $virtual_maps virtual_alias_recursion_limit = 1000 virtual_delivery_slot_cost = $default_delivery_slot_cost virtual_delivery_slot_discount = $default_delivery_slot_discount virtual_delivery_slot_loan = $default_delivery_slot_loan virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback virtual_destination_rate_delay = $default_destination_rate_delay virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_extra_recipient_limit = $default_extra_recipient_limit virtual_gid_maps = virtual_initial_destination_concurrency = $initial_destination_concurrency virtual_mailbox_base = virtual_mailbox_domains = $virtual_mailbox_maps virtual_mailbox_limit = 51200000 virtual_mailbox_lock = fcntl, dotlock virtual_mailbox_maps = virtual_minimum_delivery_slots = $default_minimum_delivery_slots virtual_minimum_uid = 100 virtual_recipient_limit = $default_recipient_limit virtual_recipient_refill_delay = $default_recipient_refill_delay virtual_recipient_refill_limit = $default_recipient_refill_limit virtual_transport = virtual virtual_uid_maps = [/code] *Here is the output of my dovecot -n:* [code] root@andromeda:/etc/postfix# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-38-generic-pae i686 Ubuntu 12.04.2 LTS ext4 disable_plaintext_auth = no first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = mbox:/var/vmail/%d/%n mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)cryptodan.net protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 01224 user = vmail } } ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } [/code] I hope I provided enough information. Thanks, -- Daniel Reinhardt cryptodan(a)cryptodan.net http://www.cryptodan.net 301-875-7018(c) 410-455-0488(h)

4 3

[Dovecot] Panic when indexing virtual folder with solr
by Andre Rodier 15 Mar '13

15 Mar '13

Hello Timo and everyone, I am using dovecot 2.1 on debian7 with the fts-solr plugin, and everything is working fine. I have a Virtual folder with all emails, and when I run a doveadm index, I have an error if I don't index real folders first. Example: doveadm -v index -u 'andre rodier' 'Search/*' => Panic: file solr-connection.c: line 416 (solr_connection_select): assertion failed: (!conn->posting) Now, if I rune the doveadm index on the real folders first, the next time I do the index on the virtual folder, everything is fine: doveadm -v index -u 'andre rodier' '*' doveadm -v index -u 'andre rodier' 'Search/*' I wonder if dovecot can run the index on the real folder instead of displaying this error? I hope that will help.

4 3

[Dovecot] problem with charset and encoding
by Héctor Moreno Blanco 15 Mar '13

15 Mar '13

Hello everyone, We are having some troubles since we updated dovecot from 2.0.10 to 2.1.6. With 2.0.10 with messages with this headers: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Showed the special characters fine. However, with this new version, there are special characters that are not correctly showed. For example: "Su c=F3digo de activaci=F3n " must be "Su código de activación ", but in all email clients, even in webmail, is showed like the first way without decoding it. Maybe some configuration or libraries I missed? Could you please help us with this? Thank you very much in advanced. Kind regards, Héctor Moreno Blanco. P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 3

[Dovecot] Bare bones Debian vmWare appliance?
by Charles Marcus 15 Mar '13

15 Mar '13

Hi all, Does anyone know of a decent bare-bones debian vmWare appliance I can download to play with? Thanks, -- Best regards, Charles

3 3

[Dovecot] Converting from Cyrus -> Dovecot sdbox
by lst_hoe02＠kwsoft.de 14 Mar '13

14 Mar '13

Hello we like to convert a IMAP server with Cyrus 2.2 to Dovecot 2.0.19 and sdbox mail format. From what i have read until now this is a two stage process with converting first from Cyrus to (Dovecot) maildir with for example cyrus2dovecot and than with dsync from maildir to sdbox. Is this correct or are there other possibilities to go in one step from Cyrus format to sdbox? Regards Andreas

2 1

[Dovecot] stats plugins causing dns lookup per connection
by Kelsey Cummings 14 Mar '13

14 Mar '13

I noticed our imap servers were generating a lot of A record lookups for their own IP's the other day and just got around to tracking down the source. Seems like they are all being caused by guid_128_generate() - perhaps the lookup could be cached at start up or it could just use make use of the hostname rather than spending the effort to get the IP via gethostbyname() calls. The function is used in a few other places too, so this might help more than just the stats plugin. nscd and/or host entries mitigate the total time spent on the lookup of course, but it seems unnecessary. -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

2 2

[Dovecot] Sieve mark message as read
by Donny Brooks 13 Mar '13

13 Mar '13

I am trying to get the advanced functionality of managesieve working for our users. If this is not the proper place to ask this, please just say so. I have enabled sieve and it works just fine for basic moving messages to folders. However the problem comes in to play when a user selects something like "delete" or "mark as read" in the filter. It just simply does not do that function. I have installed the imapflags and imap4flags and added the needed parts to the dovecot config but it still does not seem to work. We are running Centos 6.3 with dovecot-2.0.9-2.el6_1.1.x86_64 and dovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64 installed. What could I be missing to make this work? -- Donny B.

2 4

[Dovecot] Qmail-LDAP/Dovecot Cluster
by Jeff Hardy 13 Mar '13

13 Mar '13

Hello, I have worked with qmail-ldap and Dovecot for a number of years, and recently wrote up a piece going into great detail about all aspects of our environment. It currently supports a rather small installation of ~10K active users. If it should be of interest: http://fritz.potsdam.edu/projects/email It is intended primarily for system administrators or mail administrators interested in building mail infrastructure on top of open-source technologies, and is inspired by the likes of Life with qmail. Topics include storage, backup, directory integration, local and remote mail exchange, checkpassword SMTP-Auth and Dovecot login, RBLs, content-scanning and anti-spam, quarantine, webmail, etc. Full installation directions and configuration stanzas are provided for nearly every piece of the infrastructure. Comments/criticism welcome. Cheers. -Jeff -- Jeffrey M Hardy Network / Systems Administrator hardyjm(a)potsdam.edu

1 0

[Dovecot] mail_max_userip_connections
by Simon Brereton 13 Mar '13

13 Mar '13

Hi Sometimes, I hit mail_max_userip_connections limit. As far as I know I'm the only person that does, but I would like to find out why before someone else hits the limit. Is there a command available that can list the connections per IP? I'd like to find out which client is causing this. Or do you have a better suggestion? Should I just raise the limit (it's still at the default 10, which I never changed). What are the implications of this. Thanks. Simon

3 7

[Dovecot] Limiting size of stored emails
by Patrick Joy 13 Mar '13

13 Mar '13

Hi, Would appreciate some advice on this issue. I'm running dovecot version 1.0.10 on ubuntu 8.04 LTS. Recently a user created a draft email in their client (outlook) and added a 4GB attachment. The email was uploaded to the draft imap folder on the server. After this the client would then go into a endless synchronisation loop every time outlook was opened. For example in the most recent case 400GB of data was downloaded to the client when the user left outlook synchronising for 5 days. I know this may be a bug with the client or client os however I would like to know if there is a way to limit the size of individual emails that can be stored in the imap store to prevent users creating huge drafts. There is no reason they should need an email draft of this size as it can never be sent through SMTP. Thanks

3 7

[Dovecot] Documentation Clarification
by andreas＠cymail.eu 12 Mar '13

12 Mar '13

Can somebody please clarify the following in the documentation? I am actually looging at the 2.x docs: In the http://wiki2.dovecot.org/Authentication file there is a good effort to clarify between authentication mechanisms and password schemes. The authentication mechanisms are described in http://wiki2.dovecot.org/Authentication/Mechanisms. That is fine. But then looking at the http://wiki2.dovecot.org/Authentication/PasswordSchemes there is a section "Non-plaintext authentication mechanisms" which looks to me to be a repeat of what there is in the description of the authentication mechanisms. This section lists one more mechanism, LANMAN. Can somebody explain why this section is in this file? And which of the two is applicable. Thank you Andreas

2 1

Re: [Dovecot] Integrating with Drupal SQL db
by Andreas Meyer 12 Mar '13

12 Mar '13

Hello! I took the thread back to the list. Tobias Rådenholt <tobias.radenholt(a)stos.se> wrote: > I think it is ssha512 hashing. It's not stos.se that's affected. It's > swedishschoolinsydney.org.au Just found this: capabilities are 'IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS LOGINDISABLED' meaning you can log in via STARTTLS but not via plaintext authentication. Does it have something to do woth your problem? > Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid > commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, > rip=127.0.0.1, lip=127.0.0.1, secured > Thanks! > /Tobias Andreas > <info(a)stos.se> wrote: > > > Hi > > > > I'm trying to get Dovecot to use Drupal users password for authenticating > > IMAP users. But I just cant figure out how to make Dovecot understand the > > password hash type that Drupal 7 is using. > > > > My example user with password Teacher1 looks like this in Drupal database: > > $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU > > This is not CRAM-MD5, is it? > > > Dovecot retrieves this hash but complains that its not a recognized hash > > type, or that the hash is wrong, depending on if I change the default hash > > type in Dovecot config. > > > > Any help appreciated. > > This is what I get connecting to your server: > Connected to stos.se. > Escape character is '^]'. > * OK [CAPABILITY IMAP4REV1 NAMESPACE ID AUTH=PLAIN AUTH=LOGIN UIDPLUS STARTTLS ACL METADATA] Debian-60-squeeze-64-minimal IMAP4rev1 Citadel 7.83 ready > > This is what I get connecting to mine: > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=CRAM-MD5] Dovecot ready. > > I see no AUTH=CRAM-MD5 in capabilites of your server. > > Andreas

2 1

[Dovecot] dovecot virtual user 'unknown'...
by Dr Michael Daly 12 Mar '13

12 Mar '13

Hi I have a problem whereby Dovecot 1.0.7 is reporting that a recently setup virtual user in /etc/dovecot_passdb is 'unknown'. I have been trying to setup the user 'info' in a plaintext passwd-file /etc/dovecot_passdb as a virtual user, ie non system user. I suspect I have not properly setup 'info' as a virtual imap user... if so, how should I do this? Existing system users are in '/etc/passdb' and authenticate without problems. System users have their home directory in /home/system_user1/mail/.imap eg /home/system_user1/mail/.imap/INBOX ...file is /var/spool/mail/systemuser1 /home/system_user1/mail/.imap/Sent ... file is in /home/system_user1/mail/Sent /home/system_user1/mail/.imap/Drafts... file is in /home/system_user1/mail/Drafts whereas the postfix virtual user's (username is 'info') mailbox is configured as... call it /var/spool/mail/virtualusersdomain1/info Postfix's virtual_mailbox_base = /var/spool/mail. The virtual_mailbox_domains, including that of user 'info', are a subdirectory of /var/spool/mail This is the log entry produced when user 'info' attempts to login via squirrelmail: PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=<hidden> dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): lookup: user=info file=/etc/dovecot_passdb dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): unknown user dovecot: Mar 12 00:32:40 Info: auth(default): pam(info,::ffff:127.0.0.1): lookup service=dovecot dovecot: Mar 12 00:32:40 Info: auth(default): new auth connection: pid=569 dovecot: Mar 12 00:32:42 Info: auth(default): pam(info,::ffff:127.0.0.1): pam_authenticate() failed: Authentication failure dovecot: Mar 12 00:32:42 Info: imap-login: Aborted login: user=<info>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured dovecot: Mar 12 00:32:42 Info: auth(default): client out: FAIL 1 user=info So, /etc/dovecot_passdb has ownership root:root, permissions 644 and only the contents: info:{PLAIN}Myplaintextpassword I have tried logging in both as info and also as info@virtualusersdomain1 dovecot -n shows: # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_processes_count: 2 mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: passwd-file args: /etc/dovecot_passdb passdb: driver: pam userdb: driver: passwd-file args: home=/var/spool/mail/%d/%n mail=mbox:~/mail /etc/dovecot_passdb userdb: driver: passwd args: /etc/passwd This is all that was in orginally in /etc/dovecot.conf: protocols = imap imaps pop3 pop3s disable_plaintext_auth = no protocol imap { } protocol pop3 { } protocol lda { } auth default { mechanisms = plain } passdb pam { } userdb passwd { } user = root dict { } Dovecot runs as root. Anyway, any advice would be great! Thanks

1 0

[Dovecot] doveadm password check
by Thomas Pries 11 Mar '13

11 Mar '13

Hi, I want to write some php code that users can change there dovecot password via a roundcube plugin. I'm using php function crypt(...) to generate the hashes and everything works well so far. I'm using doveadm pw to generate testhashes e.g.: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -p abc {BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y I expected an "ok" when using -t the hash when entering abc as a password, but I got: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -t \{BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y Enter password to verify: doveadm(root): Fatal: reverse password verification check failed: Password mismatch What went wrong? Kind Regards Thomas

3 3

[Dovecot] Random questions on backing up Dovecot
by Tabbed Out 11 Mar '13

11 Mar '13

Hi, I've read a few threads about the subject, but I am hoping someone can comment on a few misunderstandings that I might have? It seems like doing a tar of the mail folder location then rsyncing it over to the backup location is the general idea. I plan to have dovecot create 6 virtual users using Maildir, located at /var/mail. A few specifics I am unclear on: 1) Someone here gave a descriptive outline on this here: http://www.dovecot.org/list/dovecot/2011-August/060368.html It's a bit silly, but does anyone have any comments about his suggestion on doing a 'tar cvf' first, then doing a gzip on that archive? Are the benefits really that great? 2) My lack of understanding of control files and index files contribute to this question. If I want to move to a new server and I only tar'd my /var/mail, how does this affect control files? Is it as simple as just copying pasting back into /var/mail on the new server, and then Dovecot will create new UUIDs for the messages? 3) How do I handle the case where the script is currently tarring/gzipping the entire /var/mail, but I receive a new mail during that period? What happens if I use thunderbird to delete a mail during the archiving process?

1 0

[Dovecot] zlib plugin bug?
by Jan Phillip Greimann 11 Mar '13

11 Mar '13

Hi there, got a problem with the zlib plugin, just wanted to test it on a test-mailserver, configured like in the wiki (http://wiki2.dovecot.org/Plugins/Zlib) and restarted the server. I've send an email to a blank maildir++ mailbox, the file is saved as gzip compressed file, but the "Z" flag is missing in the filename. Is that a bug in the plugin, or in dovecot? Greetings, Jan ------------------------------------------------------------- --- additional data: >>> find . ./dovecot-uidlist ./dovecot.mailbox.log ./tmp ./cur ./cur/1362746783.M97516P28534.s16,S=1321,W=1352:2,Sa ./maildirsize ./new ./dovecot.index.cache ./dovecot-keywords ./dovecot-uidvalidity.5139a483 ./subscriptions ./dovecot.index.log ./dovecot-uidvalidity ./dovecot-acl-list >>> file ./cur/1362746783.M97516P28534* ./cur/1362746783.M97516P28534.s16,S=1321,W=1352:2,Sa: gzip compressed data, from Unix >>> dpkg -l |grep dove ii debian-dovecot-auto-keyring 2010.01.30 GnuPG archive keys of the Automatic Dovecot Debian repository ii dovecot-common 2:2.2.0~rc2-0~auto+23 Transitional package for dovecot ii dovecot-core 2:2.2.0~rc2-0~auto+23 secure mail server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-imapd 2:2.2.0~rc2-0~auto+23 secure IMAP server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-lmtpd 2:2.2.0~rc2-0~auto+23 secure LMTP server for Dovecot ii dovecot-managesieved 2:2.2.0~rc2-0~auto+23 secure ManageSieve server for Dovecot ii dovecot-mysql 2:2.2.0~rc2-0~auto+23 MySQL support for Dovecot ii dovecot-pop3d 2:2.2.0~rc2-0~auto+23 secure POP3 server that supports mbox, maildir, dbox and mdbox mailboxes ii dovecot-sieve 2:2.2.0~rc2-0~auto+23 sieve filters support for Dovecot >>> doveconf -n # 2.2.rc2 (52e5d4186006): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 ext3 auth_debug = yes auth_verbose = yes listen = * mail_debug = yes mail_gid = vmail mail_location = maildir:/var/vmail/%d/%n/Maildir:LAYOUT=fs mail_plugins = quota acl zlib mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_anyone = allow autocreate = Trash autocreate2 = Drafts autocreate3 = Sent autocreate5 = Archives autosubscribe = Trash autosubscribe2 = Drafts autosubscribe3 = Sent quota = maildir:User quota sieve = ~/.dovecot.sieve sieve_dir = ~/sieve zlib_save = gz zlib_save_level = 6 } protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { idle_kill = 1 hours unix_listener dict { group = vmail mode = 0660 } } service imap-login { inet_listener imap { port = 0 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 0 } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota acl zlib sieve } protocol lda { mail_plugins = quota acl zlib sieve } protocol imap { mail_plugins = quota acl zlib imap_zlib imap_quota imap_acl autocreate }

2 2

[Dovecot] virtual folder - crash while searching
by Matthias Rieber 10 Mar '13

10 Mar '13

Hi, I've upgraded from dovecot 2.0 to 2.1. When I perform a header search in a virtual folder dovecot crashes. Here's the stacktrace: http://pastebin.com/urSDDzku Regards, Matthias

4 11

[Dovecot] When dovecot delivery, nested maildir (<user>/maildir/maildir) is "auto"created
by Nunzio Falcone 08 Mar '13

08 Mar '13

Scenario: Sogo/Mysql+Postfix+Dovecot(only IMAP)+LDAP (Active Directory) To make clean the understand of my issue I've performed those step go to /var/vmail/utente2 and perform in this directory "rm -rf *" After I send email to utente2 via "telenet localhost 25" I return to /var/vmail/utente2 and perform "ls -la" that shows me: maildir |-maildir |-cur |-new |-tmp but the expected results was |-maildir |-cur |-new |-tmp the relevant part of telnet session is: Mar 05 19:53:17 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 05 19:53:17 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Mar 05 19:53:17 auth: Debug: auth client connected (pid=3286) Mar 05 19:54:35 auth: Debug: master in: USER 1 utente2/maildir/(a)domain.local service=lda Mar 05 19:54:35 auth: Debug: master out: USER 1 utente2/maildir/(a)domain.local uid=500 gid=500 home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda: Debug: auth input: utente2/maildir/(a)domain.local uid=500 gid=500 home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: Effective uid=500, gid=500, home=/var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: Home dir not found: /var/vmail/utente2/maildir/(a)domain.local Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: maildir++: root=/var/vmail/utente2/maildir//maildir, index=, control=, inbox=/var/vmail/utente2/maildir//maildir Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Debug: none: root=, index=, control=, inbox= Mar 05 19:54:35 lda(utente2/maildir/(a)domain.local): Info: msgid=<20130305185423.6E56B407B6(a)posta.domain.local>: saved mail to INBOX NB: note the wrong path of inbox inbox=/var/vmail/utente2/maildir//maildir From SOGO when I login the "autocreate" work well: in root folder of "utente2" I can see |-maildir |-cur |-new |-tmp But if I send email from SOGO frontend, same error of "telnetting" *What is wrong in my config?* dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext4 auth_debug = yes auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@/ auth_username_format = %Lu first_valid_gid = 500 last_valid_gid = 500 last_valid_uid = 500 log_path = /var/log/dovecot mail_debug = yes mail_location = maildir:/var/vmail/%n/maildir mbox_write_locks = fcntl passdb { driver = pam } postmaster_address = administrator(a)domain.local protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=500 gid=500 home=/var/vmail/%Lu allow_all_users=yes driver = static } valid_chroot_dirs = /var/vmail /etc/postfix/master.cf (relevant) # Dovecot LDA dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} /etc/postfix/ldap-groups.cf server_host = domain.local search_base = CN=users,DC=domain,DC=local bind = yes bind_dn = query(a)domain.local bind_pw = ********** query_filter = (&(objectclass=group) (mail=%s)) leaf_result_attribute = mail special_result_attribute = member version = 3 -- *Nunzio Falcone* nunzio.falcone(a)gmail.com *Cell * +39 320 1167923 *Voip*+39 081 0117933 *Fax * +39 081 0113049

2 5

[Dovecot] Inotify max_user_instances
by Daniel L. Miller 08 Mar '13

08 Mar '13

Maybe I have multiple problems - dunno. I've started seeing the following log lines: Mar 7 07:46:22 bubba dovecot: imap(dmiller(a)amfes.com): Warning: Inotify instance limit for user 5000 (UID vmail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances max_user_instances is currently 128. I've tried stopping and restarting dovecot - the message immediately returns. I could just increase max_user_instances - but I'd like to understand what the number SHOULD be and why simply restarting Dovecot doesn't fix it. If this issue is for user "vmail" this is used by mail services only - and I've only got a few users on my system. I'm also fighting a netfilter issue - my connection tracking counters keep climbing. Don't know if this is in any way related. -- Daniel

2 2

Re: [Dovecot] Changin password in LDAP
by Steffen Kaiser 07 Mar '13

07 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 20 Feb 2013, Arto Saraniva wrote: > We are using now dovecot 2.0.21 with open-ldap, but this situations has > already taken a quite long time. When user changes the password, we have > to reload dovecot every time, otherwise the change is ignored and > dovecot sees only the old password. Any ideas where the problem might > exist? does this help? http://wiki2.dovecot.org/Authentication/Caching?highlight=(auth_cache_ttl) - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUSTb2l3r2wJMiz2NAQLp3gf8DM2xCn03yWoVrCjbYNZeflBNRLbD67gE zqvrKUOqkyyDbUl1lgNcJOG39MI2eZpbDXzyWZ8nzzCnPKGOF2mNN76vPGmf6ZrR AQ0EaiJaYRoE14BQykQGvBSnoXgcyW0Ue4Z2RcmIS0iILfGN+VODDKc9PitC99Rc RJb6dQPft3FLM3oWca6BI1OkUuIF9EJcK3M4ROwr84s+OAs/6rkxIDgCCIdh5JZ5 svOkUxVE38zod+Det3yBuoWo5HOXYiE9Qi9jKn8xjQl8a06snXRuw1QktsyLKLjc 64T7KFa5IfXaVzOXCIWiiPiN7T0BVJzJ8G1YbHMzFqYkiPNa4NIO2Q== =NDhf -----END PGP SIGNATURE-----

2 1

[Dovecot] Migrating from CourierMail to Dovecot
by Robert Moskowitz 07 Mar '13

07 Mar '13

My current mail server is a Fedora12 system running postfix/mysql/couriermail/squirrelmail mix. My new server is a Centos6 running postfix/mysql/postfixadmin/dovecot/roundcube mix. I have 4 virtual domains and about 20 users; not a big setup by any measure. Both servers have the same host name, but are currently on separate subnets. My current plan is to stop services on the old server, switch them on subnets, rename the old server, and let 'slow users' drain the old server over a couple of days. Then I got to thinking, could I migrate the /home/vmail/domain/user/new folders from the old to new server? Not too many rsync commands to run to pull it off, but would that work? Is there something dovecot needs to do, and not just drop the files into the .../new folder? Or is there some utility to run to properly place the mail files? The file names are similar. Courier file names look like: 1362661301.Vfd01I2422e6M121970.klovia.htt-consult.com,S=17381 Whereas dovecot adds a ",W=nnn" string to the file name. I am assuming the content is otherwise the same. I would like to test out the migration, and then pull it off over a sunday. Due to meetings and holidays, this won't happen until early April, so I have time to work out the details. All guidance and pointers are greatly appreciated.

1 1

[Dovecot] Ask about IMAP UID
by Shiquan Wang 07 Mar '13

07 Mar '13

Hi all, I am new to dovecot. I am trying to use offlineimap + dovecot + gnus for some emails on multiple machines. I need to use org-mode capture links on emails. I want to know if the same email will have the same IMAP UID on different machines given that they are synced by offlineimap to a local maildir and served by dovecot respectively. Best, Shiquan -- 王时全 Shiquan Wang ************************************************************************************** National Laboratory of Pattern Recognition (NLPR) Institute of Automation, Chinese Academy of Sciences(CASIA) No.95 ZhongGuanCun East Road, HaiDian District, Beijing, China, 100190 Tel: +86-10-62653768 Fax: +86-10-62551993 Email: sqwang(a)nlpr.ia.ac.cn / shiquanwang(a)gmail.com Homepage: http://www.cbsr.ia.ac.cn/users/sqwang/ **************************************************************************************

3 2

[Dovecot] Upgrading 1.2 to 2.x
by Simon Brereton 06 Mar '13

06 Mar '13

Hi I'm about to upgrade to 2.1.7 in my test environment, but "doveconf -n -c dovecot.1.conf > dovecot.2.conf" is producing a blank file, so I am unsure how to proceed. I know a lot has changed between them, so I don't really want to have to start from scratch unless I have to. I have tried both as my user and with sudo. Simon

11 23

[Dovecot] failing ssl authentication
by Ivars Strazdiņš 06 Mar '13

06 Mar '13

Hi, I have a fairly basic dovecot 2.0.19 configuration on Ubuntu 12.04 LTS server with self signed certificates and "ssl = required" option set. It had been working for years flawlessly (including upgrade from 1.x to 2.0.19). Please see full "dovecot -n" output at the end of this post. Until recently, new mail user agents (MUA) are having problems. I cannot pass the account creation step, MUA says that there is some problem. I tried to isolate the problem and did some testing with various combinations of MUA and OS and I am still confused where is the problem - in dovecot, self signed certificates (in operation since 2003, expires this summer), or MUA, or operating system. All tests done with IMAP. For example, Recent Thunderbird versions (>10) do not work at all on most OS'es (tried Windows, Linux, OS X). Actually, v10 does not let me setup an account, but there is a way to get through by clicking on Advanced button. Then the account in Thunderbird is created. After that all works fine and Thunderbird can even be upgraded to the latest version. Windows Live Mail 2012 (former Outlook Express) works on Windows XP and Windows 7, but fails on Windows 8. dovecot.log gets this: 2013-03-06 22:44:38 imap-login: Info: Disconnected (no auth attempts): rip=x.x.x.x, lip=y.y.y.y, TLS handshaking: Disconnected Outlook 2013 does not work in either Windows 7 or Windows 8. Dovecot log for Outlook 2013 looks good, but Outlook complains. 2013-03-06 18:38:22 imap-login: Info: Login: user=<ivarss>, method=PLAIN, rip=x.x.x.x lip=y.y.y.y, mpid=16801, TLS I enabled verbose_ssl = yes in dovecot configuration, and all failing attempts produce this type of log 2013-03-06 22:34:10 imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [x.x.x.x] What does this mean - a problem with certificate on the client side, MUA, that is? How could this be cured then? Thanks for your time and patience! Ivars doveconf -n output: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-37-virtual x86_64 Ubuntu 12.04.2 LTS auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes default_process_limit = 300 info_log_path = /var/log/dovecot-info.log lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_fsync = never mail_location = maildir:~/Maildir:INBOX=~/Maildir:LAYOUT=fs mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { antispam_backend = mailtrain antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/local/sbin/antispam.sh antispam_mail_sendmail_args = -f;%u(a)edited.domain antispam_mail_spam = --spam antispam_spam = junk antispam_trash = Trash autocreate = junk autocreate2 = Sent autocreate3 = Drafts autocreate4 = Trash autosubscribe = junk autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = Trash fts = squat fts_squat = partial=4 full=10 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = from, subject, flags, uid, box, msgid, size sieve = ~/roundcube.sieve sieve_dir = ~/sieve } postmaster_address = postmaster protocols = " imap sieve pop3" service auth-worker { client_limit = 0 } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = musers mode = 0660 user = root } user = root } service imap { process_limit = 1024 } service pop3 { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/private/server.crt ssl_key = </etc/ssl/private/server.key userdb { driver = passwd } valid_chroot_dirs = /var/mail:/home protocol lda { mail_fsync = optimized mail_plugins = " sieve" } protocol imap { imap_client_workarounds = tb-lsub-flags delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = " autocreate fts fts_squat antispam" } protocol pop3 { mail_plugins = " fts fts_squat" pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lmtp { mail_fsync = optimized mail_plugins = " sieve" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date }

2 3

[Dovecot] Broken physical size caching in Dovecot 2.1.10
by Rob Redpath 06 Mar '13

06 Mar '13

Hi, I'm encountering two, probably related, errors in my Dovecot 2.1.10 install. The issue relates to compressed email stored in Maildir format directories. In some cases, a mailbox will become inaccessible, and the following will be logged from a doveadm fetch:- doveadm(info(a)example.com): Error: Corrupted index cache file /var/spool/virtual_mail/info_example.com_d/dovecot.index.cache: Broken physical size for mail UID 2777 doveadm(info(a)example.com): Error: Cached message size smaller than expected (18996 < 64624) doveadm(info(a)example.com): Error: Maildir filename has wrong S value, renamed the file from /var/spool/virtual_mail/info_example.com_d/cur/1277451630.H877760P14612.mailserver.example.com,S=18996:2,Z to /var/spool/virtual_mail/info_example.com_d/cur/1277451630.H877760P14612.mailserver.example.com,S=18996:2,Z Interestingly, the file mentioned in the error ( /var/spool/virtual_mail/info_example.com_d/dovecot.index.cache ) doesn't exist. The uncompressed size of the file is 64624 bytes, the compressed size is 18996. My attempts to debug the issue myself didn't get very far - the function that appears to return the wrong value is in /src/lib-storage/index/maildir/maildir-mail.c in the 2.1.13 source; it's do_fix_size() and appears to not consider whether a file is compressed or not when reporting it's size for S= value purposes. Can anyone help? I'm happy to provide parts of dovecot -n output if required, but I'd rather not post configuration in a public forum if it's not required. -- Rob Redpath Systems Administrator Heart Internet Ltd E: rob.redpath(a)heartinternet.co.uk DDI: 0115 845 6643 www.heartinternet.co.uk<http://www.heartinternet.co.uk> ****************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it. Heart Internet Ltd accepts no responsibility for information, errors or omissions in this email. ******************************************************************

3 13

[Dovecot] question regarding rw-access on mailbox on creation/login (dovecot 1.2.17)
by Götz Reinicke - IT Koordinator 06 Mar '13

06 Mar '13

Hi, currently I have one new user with a problem. When she logs in to dovecot with pop3 from her apple mail, dovecot tells problems with the +w permission. Error: open(/var/mail/******) failed: Permission denied (euid=3462(******) egid=548(dozenten) missing +w perm: /var/mail) /var/mail is rw by root.mail I cant see why just this particular user has that problem/gets that messages. AFAIK no one changed any default permissions on directories or set different users. What could be "wrong"? Any suggestions is welcome. Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

3 4

[Dovecot] Suggestions for upgrading dovecot 1.0.7 Redhat EL 5.x
by Götz Reinicke - IT Koordinator 06 Mar '13

06 Mar '13

Hi, we still have our solid rock dovecot 1.0.7 Redhat el 5.x up and running. We don't need much magic or special setups. However we'd like to think what might be the next step in upgrading our setup. Each user one mbox mailbox. About 500 imap/pop3 accounts, 400GB data. First of all: to what version is a good step from 1.0? Can we get a rpm from e.g. atrpms repository? Dose anyone has any experiences in doing such a "big" step forward? Or should we think of migrating to a total updated Redhat EL 6.x / Dovecot 2.0.x system? Any suggestions and comments are welcome. Regards . G. Reinicke -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

4 7

[Dovecot] Corrupted squat uidlist file
by Roger Lynn 05 Mar '13

05 Mar '13

Hi, I frequently get errors similar to this logged: Mar 5 17:49:20 alphonse dovecot: imap(roger): Error: Corrupted squat uidlist file /home/roger/Maildir/.Debian/dovecot.index.search.uids: wrong indexid I am running the Debian package version 1:2.1.7-7 on an up to date Debian Testing system with ext4 filing systems. 'doveadm index -A "*"' is run six nights a week and 'doveadm fts rescan -A' on the seventh night. The output of 'doveconf -n' should be attached. Is this something to be worried about? Am I doing something wrong? Thanks, Roger

1 0

[Dovecot] lmtp problem with wrong index path
by Dimos Alevizos 05 Mar '13

05 Mar '13

Hello, we've been using dovecot for pop3 and imap for some time now and we're in the middle of deploying lmtp as well, however we're run into a problem we can't solve. Specifically for some reason it seems that dovecot tries to write to the wrong index file during some, but not all, lmtp deliveries. If lmtp tries to deliver to person user_a@domain, sometimes it'll try to write to index directory user_b@domain using user_a euid. We haven't found and pattern in the problem. A user may receive multiple mails with only 1 in 20 or more deliveries having problems. The only things that we know is that user_b (the wrong one) is always from the same domain as the correct user and always (so far) also a recipient in the same mail. Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=10054601(<unknown>) egid=165(<unknown>) missing +x perm: /indexes/2/b/0/diefecon.log(a)ika.gr, dir owned by 10107819:165 mode=0700) Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: nfs_flush_chown_uid: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX) failed: Permission denied Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) Error: stat(/indexes/2/b/0/diefecon.log(a)ika.gr/.imap/INBOX/dovecot.index) failed: Permission denied (euid=10054601(<unknown>) egid=165(<unknown>) missing +x perm: /indexes/2/b/0/diefecon.log(a)ika.gr, dir owned by 10107819:165 mode=0700) Feb 25 09:07:01 pop02 dovecot: lmtp(20931, sub1ika(a)ika.gr) T8WxCGwHK1HDUQAAB7uMaw: msgid=<542C6CCE00F7433B9F5E0860C32F87FE@sofia>: save failed to INBOX: Timeout while waiting for lock As you can see below it seems that failure to write to the index doesn't stop the mail being delivered. Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) Error: stat(/var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr/.imap/INBOX/dovecot.index.log) failed: Permission denied (euid=10096573(<unknown>) egid=165(<unknown>) missing +x perm: /var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr, dir owned by 10096925:165 mode=0700) Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) Error: stat(/var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr/.imap/INBOX/dovecot.index) failed: Permission denied (euid=10096573(<unknown>) egid=165(<unknown>) missing +x perm: /var/index/dovecot/4/c/6/d.irakleias-serron(a)kep.gov.gr, dir owned by 10096925:165 mode=0700) Feb 25 10:47:36 pop08 dovecot: lmtp(19139, d.lefkona(a)kep.gov.gr) ua0ANmIeK1HDSgAADehEhg: sieve: msgid=<E299E69CBA0EFA4C9870A944ACBC4DCC03AA9C3F(a)SYZ3MAIL01.exchange.n3.syzefxis.gov.gr>: stored mail into mailbox 'INBOX' Our current setup is 3 directors (dovecot 2.1.12) proxying pop3/imap and lmtp to a farm of 8 dovecot servers (all of them 2.1.15). All of our mailboxes are stored in NFS. A seperate farm of postfix MX servers will be responsible to send mails via lmtp to our directors. Currently we're keeping dovecot indexes locally but we're beginning to move them to NFS as well (we've changed 2 of the 8 servers and hopefully today the 6 remaining) Our configuration is : # 2.1.15: /opt/dovecot-2.1.15/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.22.el5 x86_64 CentOS release 5.9 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 5 M auth_cache_ttl = 10 mins auth_verbose = yes default_client_limit = 5000 default_process_limit = 500 disable_plaintext_auth = no first_valid_uid = 20 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = OTENET ready login_trusted_networks = 83.235.66.0/24 mail_access_groups = mail otemail disk root mail_fsync = always mail_location = mbox:INDEX=/var/index/dovecot/%1Mu/%2.1Mu/%3.1Mu/%u mail_nfs_index = yes mail_nfs_storage = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify mbox_lock_timeout = 3 secs mbox_read_locks = dotlock fcntl mmap_disable = yes passdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { quota = dirsize:User quota quota_warning = storage=95%% quota-warning 95 %u sieve = ~/.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } postmaster_address = postmaster(a)otenet.gr quota_full_tempfail = yes service auth-worker { user = dovenull } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { client_limit = 1 inet_listener lmtp { port = 24 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /opt/dovecot/etc/dovecot/quota-warning.sh user = dovecot } ssl = no userdb { args = /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve quota" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 100 } protocol pop3 { mail_max_userip_connections = 100 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes pop3_reuse_xuidl = yes pop3_uidl_format = %08Xu%08Xv } [root@pop02 ~]# egrep -v "^#|^$" /opt/dovecot/etc/dovecot/dovecot-ldap.conf.ext hosts = 62.103.147.203 dn = "cn=*****,ou=people,dc=otenet,dc=gr" dnpass = ***** base = ou=people,dc=otenet,dc=gr scope = onelevel user_attrs = folderPath=home,mailQuota=quota_rule=*:storage=%$M,uidNumber=uid,gidNumber=gid,mailPath=mail=mbox:~/:INBOX=%$:INDEX=/indexes/%1Mu/%2.1Mu/%3.1Mu/%u user_filter = (&(|(objectClass=otenetMailAccount)(objectClass=otenetservices))(|(uid=%u)(mail=%u)(mailAlternateAddress=%u))) pass_attrs = mail=user,userpassword=password pass_filter = (&(|(objectClass=otenetMailAccount)(objectClass=otenetservices))(|(uid=%u)(mail=%u)(mailAlternateAddress=%u))) default_pass_scheme = CRYPT Dimos Alevizos

4 7

[Dovecot] Migration from v1 to v2 with hashed directory structure
by Pavel Dimow 05 Mar '13

05 Mar '13

Hi, I want to upgrade to version 2 but I would like to solve a long standing problem with 'flat' directory structure ie we have /var/spool/vmail/mydomain.com/user(a)mydomain.com and I want a new server with version 2 to have hashed directory structure like /var/spool/vmail/mydomain.com/u/s/user I was wondering it f there is some better solution then dir hashing or a way to hash a dir other then first two letters. Also any suggestion how to perform this migration from old to new server with hashing on the fly? Thanks in advance.

4 5

[Dovecot] postfix+dovecot+samba4+openldap: dovecot lda:Error: user sammy: Initialization failed: mail_location not set and autodetection failed
by Sammy Mercieca 05 Mar '13

05 Mar '13

I'm trying to setup a samba4 with openchange which uses postfix+dovecot+openldap on a ubuntu 12.04.2 system. I can send outgoing emails but incoming emails fail. I looked up the logs and I get: Mar 5 11:03:48 testerA dovecot: lda(sammy): Error: user sammy: Initialization failed: mail_location not set and autodetection failed: Mail storage autodetection failed with home=/var/mail Mar 5 11:03:48 testerA dovecot: lda(sammy): Fatal: Invalid user settings. Refer to server log for more information. any idea what I am doing wrong? Any hints, pointers would be much appreciated. now the user is a virtual user. The /var/mail/sammy exists: drwxr-sr-x 10 vmail vmail 4096 Mar 4 13:48 sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:12 Sammy -> sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:12 sammy(a)abertax.com -> sammy lrwxrwxrwx 1 vmail vmail 5 Feb 28 12:13 Sammy(a)abertax.com -> sammy lrwxrwxrwx 1 vmail vmail 5 Mar 1 15:05 sammy(a)abx.abertax.com -> sammy The dovecot configuration is: # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-38-generic x86_64 Ubuntu 12.04.2 LTS ext4 disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.message log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = maildir:/var/mail/%u mail_privileged_group = mail passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { driver = pam } protocols = imap service auth { unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { user = vmail } user = root } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { driver = passwd } protocol lda { hostname = abx.abertax.com info_log_path = /var/log/dovecot.info.log log_path = /var/log/dovecot.message postmaster_address = postmaster@mydomain } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } and dovevot-ldap.conf: uris = ldap://localhost:3389 dn = cn=admin,dc=mydomain dnpass = openchange tls = no ldap_version = 3 base = dc=mydomain scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid user_filter = (uid=%u) pass_attrs = uid=user,userPassword=password pass_filter = (uid=%u) Thanks Sammy

1 0

Re: [Dovecot] [Users] I need help with my mail client [Was: running cron on UTC]
by Steve Litt 04 Mar '13

04 Mar '13

On Fri, 1 Mar 2013 07:02:54 -0500 Jerry <jerry(a)seibercom.net> wrote: > On Fri, 1 Mar 2013 00:34:33 -0800 > Ian Zimmerman articulated: > > > On Fri, 1 Mar 2013 02:57:10 -0500 > > Steve Litt <slitt(a)troubleshooters.com> wrote: > > > > Steve> Can anyone tell me how to start narrowing down the cause of > > Steve> this behavior? > > > > You could begin by telling the (ocluc) list admins to _stop munging_ > > the damn Reply-To headers. That is broken behavior, as nicely > > explained here (among many other places): > > > > http://www.unicom.com/pw/reply-to-harmful.html > > Interestingly enough, there is also an opposite opinion on the matter: > <http://marc.merlins.org/netrants/reply-to-useful.html> > > Personally, I believe ALL list replies should go directly to the list > and not to an individual unless the individual has specifically > requested such action. However, I am aware that there are those who > disagree with that philosophy. Thanks Ian and Jerry, It's doubtful that the OCLUG's defaulting replies to "list" (characterized by some as "munging") is the root cause here, because probably 90% of the mailing lists I'm on default replies to the list, and this symptom happens only with OCLUG's list. Whatever it is, it doesn't happen when I use Thunderbird instead of Claws. Of course it also doesn't happen on Claws on all the rest of the mailing lists I participate in. The fact that replying from Thunderbird eliminates the symptom, even if I later look at my IMAP using Claws, says to me that the root cause isn't in my Dovecot IMAP server. Paul from the Claws list pointed out that OCLUG emails' List-Post (oclug(a)mailman.oclug.org) and Reply-To (oclug(a)penguin.oclug.org) don't match. So far, that's the only thing about OCLUG I've found that's remotely different from everyone else. I have no idea whether this mismatch was intended, or whether it came about through an accident of history. I also don't know how hard it would be to get them to match. Steffen from the Claws list asked whether I configured Claws-Mail to add List-Post to the recipient list, and whether I've configured any reply action, that adds another recipient to the message. The answer to the second question is "no", my OCLUG folder has no properties or processing, my .procmailrc has no filters that change mail from OCLUG. As far as Steffen's second question, I don't know where in Claws' config options this would be configured, but the following command indicates to me that it's unlikely: slitt@mydesk:~/.claws-mail$ grep -irl "list-post" * | grep -v imapcache tmp/tmpfile.00000055 slitt@mydesk:~/.claws-mail$ Another point of information is that this symptom occurs whether I "reply to list" or just "reply". Since I'm happy with both Claws-Mail and OCLUG, I'll "solve" the problem by trying to remember to delete the CC automatically inserted by each Claws reply to OCLUG mail. I might also look into installing OCLUG folder specific processing or properties, or maybe even setting a procmail filter to change the headers on mail from OCLUG. It would basically be a short filter invoking an awk command. However it gets solved, I'll let you all know about it. Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance

2 1

[Dovecot] panic in dovecot when using fts with solr
by Andre Rodier 04 Mar '13

04 Mar '13

Hello All, I have a panic error in dovecot when I try to use the fts search with Solr. The version of dovecot I use is version 2.1 I have used a telnet session to search, but I don't know if this make a difference: telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 login andre-rodier XXXXXXXXXX 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE SEARCH=FUZZY QUOTA ACL RIGHTS=texk] Logged in 2 select Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback \*)] Flags permitted. * 2158 EXISTS * 0 RECENT * OK [UIDVALIDITY 1354776694] UIDs valid * OK [UIDNEXT 2568] Predicted next UID * OK [HIGHESTMODSEQ 9739] Highest 2 OK [READ-WRITE] Select completed. 3 search text Valentine * OK Searched 47% of the mailbox, ETA 0:10 * OK Searched 79% of the mailbox, ETA 0:05 * SEARCH 1120 1238 1279 1975 1990 1991 1992 1998 1999 2000 2001 2002 2058 2106 2107 2110 2151 3 OK Search completed (32.210 secs). ---------------------------------------------------------------------- Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f5f4237214a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f5f4237218e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5f4234982a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f5f402d48d9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4ac7) [0x7f5f402d1ac7] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0x339) [0x7f5f408f1f19] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc6e0) [0x7f5f408f66e0] -> dovecot/indexer-worker(+0x28d4) [0x7f5f42ae88d4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f5f4237f016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f5f4237fcc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f5f4237ea28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5f4236b483] -> dovecot/indexer-worker(main+0xfe) [0x7f5f42ae834e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5f41fc2ead] -> dovecot/indexer-worker(+0x23f5) [0x7f5f42ae83f5] Mar 2 22:48:02 lapetus dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for andre rodier(a)indiefield.co.uk Mar 2 22:48:02 lapetus dovecot: imap(andre rodier(a)indiefield.co.uk) Error: indexer failed to index mailbox INBOX Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Fatal: master: service(indexer-worker): child 19644 killed with signal 6 (core dumps disabled) ---------------------------------------------------------------------- Regards, Andre

2 3

[Dovecot] dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections)
by David Brown 04 Mar '13

04 Mar '13

Hi, has anyone seen this issue before as I have not. I'm a long time dovecot user and I don't see anything in the config that should cause this. The mail.log gets hit a lot of times with this same log message: dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections) I have noted that it is more evident when I try to mass delete many messages. Any ideas of how to diagnose this issue? The dovecot -n follows: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.1-rscloud x86_64 Ubuntu 10.04.4 LTS log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_processes_count: 5 login_max_processes_count: 256 mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes mbox_write_locks: fcntl dotlock auth default: realms: davidwbrown.name default_realm: dobbeltganger.com username_format: %n verbose: yes debug: yes debug_passwords: yes passdb: driver: shadow userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix

2 1

[Dovecot] tcpwrap: Fatal: master: service(tcpwrap): child $PID killed with signal 11
by Pascal Volk 04 Mar '13

04 Mar '13

Hi Timo, today I've started Dovecot v2.2.rc2 (976bf9e69367) for the first time. /var/log/mail.log: Mar 3 14:28:33 mail dovecot: master: Dovecot v2.2.rc2 (976bf9e69367) starting up Mar 3 14:28:38 mail dovecot: master: Error: service(tcpwrap): command startup failed, throttling for 2 secs Mar 3 14:28:38 mail dovecot: tcpwrap: Fatal: master: service(tcpwrap): child $PID killed with signal 11 (core dumped) Mar 3 14:28:38 mail dovecot: imap-login: Error: read(tcpwrap) failed: Connection reset by peer Mar 3 14:28:38 mail dovecot: imap-login: access(tcpwrap): Client refused (rip=$RIP) Mar 3 14:28:38 mail dovecot: auth: pgsql(/var/run/postgresql): Connected to database mailsys Regards, Pascal -- The trapper recommends today: f007ba11.1306214(a)localdomain.org

2 1

[Dovecot] dsync-remote(): Error: doveadm client: No command given
by Aleksey Tsvetkov 04 Mar '13

04 Mar '13

Hi! I test dsync through tcp. In a log error: dsync-remote (): Error: doveadm client: No command given All are synchronized. The error is shown by rand for the user and on that server where it is synchronized # 2.2.rc2 (976bf9e69367): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.6 ext3 auth_mechanisms = plain login digest-md5 auth_username_format = %Ln@%Ld disable_plaintext_auth = no doveadm_port = 24000 hostname = optnet.local listen = * mail_gid = vmail mail_home = /var/mail/virtual/%d/%n mail_location = maildir:/var/mail/virtual/%d/%n mail_plugins = notify replication mail_privileged_group = mail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/auth/users driver = passwd-file } plugin { mail_replica = tcp:192.168.0.190 } service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth-worker { unix_listener auth-worker { group = vmail mode = 0666 user = vmail } } service auth { unix_listener auth-client { mode = 0660 user = Debian-exim } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = vmail } service doveadm { inet_listener { port = 24000 } } service imap-login { inet_listener imap { port = 143 } } service lmtp { inet_listener lmtp { port = 24 } user = vmail } service pop3-login { inet_listener pop3 { port = 110 } } service replicator { process_min_avail = 1 } ssl = no ssl_cert = </usr/local/etc/dovecot/ssl/dovecot.pem ssl_key = </usr/local/etc/dovecot/ssl/dovecot.key userdb { args = /usr/local/etc/dovecot/auth/users driver = passwd-file } protocol lda { mail_plugins = notify replication } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags } protocol lmtp { mail_plugins = notify replication } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } local 192.168.0.0/24/24 { doveadm_password = password } Logs: Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Connect from 192.168.0.192 Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Loading modules from directory: /usr/local/lib/dovecot Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Module loaded: /usr/local/lib/dovecot/lib15_notify_plugin.so Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: Module loaded: /usr/local/lib/dovecot/lib20_replication_plugin.so Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) SAKxFU+ZNFHGcgAAaoqQ0w: msgid=<E1UCUqK-00013S-OA(a)jb.optnet.ru>: saved mail to INBOX Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Disconnect from 192.168.0.192: Connection closed (in reset) Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: auth input: user=anna(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: doveadm(anna(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/anna: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: auth input: user=alex(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: auth input: alex(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/alex Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/alex Mar 4 16:53:35 dov1 dovecot: doveadm(alex(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/alex, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/alex, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(alex(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/alex: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: auth input: user=mike(a)optnet.local Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: auth input: mike(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/mike Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/mike Mar 4 16:53:35 dov1 dovecot: doveadm(mike(a)optnet.local): Debug: maildir++: root=/var/mail/virtual/optnet.local/mike, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/mike, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(mike(a)optnet.local): Debug: Namespace : Using permissions from /var/mail/virtual/optnet.local/mike: mode=0700 gid=default Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Connect from 192.168.0.192 Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Debug: auth input: anna(a)optnet.local uid=1005 gid=1005 Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Effective uid=1005, gid=1005, home=/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/virtual/optnet.local/anna Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) Debug: maildir++: root=/var/mail/virtual/optnet.local/anna, index=, indexpvt=, control=, inbox=/var/mail/virtual/optnet.local/anna, alt= Mar 4 16:53:35 dov1 dovecot: dsync-remote(alex(a)optnet.local): Error: doveadm client: No command given Mar 4 16:53:35 dov1 dovecot: lmtp(29382, anna(a)optnet.local) TAKxFU+ZNFHGcgAAaoqQ0w: msgid=<E1UCUqK-00013h-VD(a)jb.optnet.ru>: saved mail to INBOX Mar 4 16:53:35 dov1 dovecot: lmtp(29382): Disconnect from 192.168.0.192: Connection closed (in reset) -- Best regards, Aleksey Tsvetkov System Administrator Company Grand Vision tel. +7(495)933-39-79, ext. 184

2 1

[Dovecot] thunderbird Problem on win 7 fixed
by Robert Schetterer 04 Mar '13

04 Mar '13

Hi just for Info, today i got a support call for 2 imap accounts with windows 7 64 with thunderbird 17.03 not syncing new mails in INBOX ( no problem other folders ) reproducable on serveral computers , with new installs of thunderbird no antivirus etc was involved The accounts worked perfect with thunderbird same version in linux and in horde webmail, no bug in server or tb log was shown no thunderbird recover etc procedure helped i final ended up in deleting dovecot.index dovecot.index.cache dovecot.index.log dovecot.index.log.2 dovecot-uidlist this fixed the problem no idea why it only came up on windows Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

1 0

[Dovecot] dovecot proxying with imapc
by suja 04 Mar '13

04 Mar '13

Dear sir, I have to set up a mail gateway which will be explored to Internet and a secure mail server in the Intranet. I need a smart imap proxy in the mail gateway which will fetch the mail from server and present to user through either a stand alone mail client or a web mail client. All authentication is through ldap server. I followed the instructions given in http://wiki2.dovecot.org/HowTo/ImapcProxy But while logging in I am getting a error: dovecot: imap(user1): Error: user user1:Initialization failed: Initializing mail storage from mail_location setting failed: Unknown mail storage driver imapc dovecot: imap(user1): Error: Invalid user settings. Refer to server log for more information. I couldn't figure out what is wrong. Please help me to sort it out. Thanks & Regards, Suja PV LEOS ---------------------------------------------------------------- This mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. LEOS has taken every reasonable precaution to remove any viruses however you should also carry out your own virus checks before opening the e-mail or attachment.

2 1

[Dovecot] panic in dovecot when using fts with solr
by Andre Rodier 02 Mar '13

02 Mar '13

Hello All, I have a panic error in dovecot when I try to use the fts search with Solr. The version of dovecot I use is version 2.1 I have used a telnet session to search, but I don't know if this make a difference: telnet localhost imap Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. 1 login andre-rodier XXXXXXXXXX 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE SEARCH=FUZZY QUOTA ACL RIGHTS=texk] Logged in 2 select Inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk $labels_4f9cce7caf4df $Forwarded $MDNSent Junk $labels_50f53a5862fb9 $label2 $label1 $label4 $label3 announce announces $ulabels_50f548e03429e feedback \*)] Flags permitted. * 2158 EXISTS * 0 RECENT * OK [UIDVALIDITY 1354776694] UIDs valid * OK [UIDNEXT 2568] Predicted next UID * OK [HIGHESTMODSEQ 9739] Highest 2 OK [READ-WRITE] Select completed. 3 search text Valentine * OK Searched 47% of the mailbox, ETA 0:10 * OK Searched 79% of the mailbox, ETA 0:05 * SEARCH 1120 1238 1279 1975 1990 1991 1992 1998 1999 2000 2001 2002 2058 2106 2107 2110 2151 3 OK Search completed (32.210 secs). ---------------------------------------------------------------------- Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Panic: file solr-connection.c: line 545 (solr_connection_post_more): assertion failed: (maxfd >= 0) Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4414a) [0x7f5f4237214a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4418e) [0x7f5f4237218e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5f4234982a] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(solr_connection_post_more+0x249) [0x7f5f402d48d9] -> /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so(+0x4ac7) [0x7f5f402d1ac7] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_build_mail+0x339) [0x7f5f408f1f19] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc6e0) [0x7f5f408f66e0] -> dovecot/indexer-worker(+0x28d4) [0x7f5f42ae88d4] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f5f4237f016] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f5f4237fcc7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f5f4237ea28] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5f4236b483] -> dovecot/indexer-worker(main+0xfe) [0x7f5f42ae834e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5f41fc2ead] -> dovecot/indexer-worker(+0x23f5) [0x7f5f42ae83f5] Mar 2 22:48:02 lapetus dovecot: indexer: Error: Indexer worker disconnected, discarding 1 requests for andre rodier(a)indiefield.co.uk Mar 2 22:48:02 lapetus dovecot: imap(andre rodier(a)indiefield.co.uk) Error: indexer failed to index mailbox INBOX Mar 2 22:48:02 lapetus dovecot: indexer-worker(andre rodier(a)indiefield.co.uk) Fatal: master: service(indexer-worker): child 19644 killed with signal 6 (core dumps disabled) ---------------------------------------------------------------------- Regards, Andre

1 0

[Dovecot] Error delivery
by Fabian von Romberg 02 Mar '13

02 Mar '13

Hi all, Im getting the following error when an email is to be delivered. Below error message: relay=dovecot, delay=4912, delays=4911/0.03/0/0.69, dsn=4.3.0, status=deferred (Command died with signal 11: "/usr/local/dovecot/libexec/dovecot/deliver") Can anyone please address me where the problem might be? Thanks in advance and regards, Fabian

4 8

[Dovecot] [OT] NJABL
by Noel Butler 02 Mar '13

02 Mar '13

If you are using this DNSBL in your MTA, best remove it, it's no more.

1 0

[Dovecot] v2.2.rc2 released
by Timo Sirainen 01 Mar '13

01 Mar '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc2.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc2.tar.gz.sig Looks like the last changes I did today just before rc1 release made it just about unusable. This one is actually running on my servers. :)

5 8

[Dovecot] how to talk with doveadmin unix socket
by Piotr Rotter 01 Mar '13

01 Mar '13

Hello, I would like to get mailbox quota by doveadm unix socket (/var/run/dovecor/doveadm-server). I get from strace syntax of comunication: write(9, "VERSION\t1\t0\nUSER\t1\tpiotr.rotter(a)active24.pl\tservice=doveadm\n", 60) = 60 read(9, "VERSION\t1\t1\nSPID\t20805\n", 8192) = 23 read(9, "USER\t1\tpiotr.rotter@active24.pl\temail=piotr.rotter@active24.pl\tclear=7T33z456\thome=/vm/08/A/active24.pl/piotr.rotter/\tuid=502\tgid=502\tquota_rule=*:storage=2097152000B\tquota_rule2=*:messages=50000\n", 8169) = 196 and I wrote super simple client in php: <?php $sock = stream_socket_client('unix:///var/run/dovecot/doveadm-server', $errno, $errstr); fwrite($sock, "VERSION\t1\t0\nUSER\t1\tpiotr.rotter(a)active24.pl\tservice=doveadm\n"); echo fread($sock, 4096)."\n"; echo fread($sock, 4096)."\n"; fclose($sock); ?> But i get only "+" sign and line in errorlog as below: 2013-02-28T00:39:56.377437+01:00 kurier9 dovecot: doveadm: Error: doveadm client not compatible with this server (mixed old and new binaries?) I would be very grateful for your help with this problem, what I doing wrong. My current dovecot version is 2.1.13

4 7

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 01 Mar '13

01 Mar '13

>> >> But I tried to create a fresh account in Dovecot (not migrated from >> Courier), and it >> still shows a intermixed folder order: >> >> a list "" * >> * LIST (\HasNoChildren) "/" "Spam" >> * LIST (\HasNoChildren) "/" "Sent" >> * LIST (\HasNoChildren) "/" "Drafts" >> * LIST (\HasNoChildren) "/" "Trash" >> * LIST (\HasNoChildren) "/" "INBOX" >> * LIST (\HasNoChildren) "/" "Pub" >> a OK List completed. > >Why does this matter? IMAP does NOT enforce any sort of required >sorting order, and no IMAP client can assume a sort order. So >enforcing a sort order on the server is just a waste of resources. > Just a cosmetic problem, of course. Some IMAP clients do sort folders, others do not, so they show different folder sort order in Dovecot, if migrated from Courier (Courier seems to sort folders, so that the system ones appear first). We just needed a seamless migration. >FWIW, this is completely legal IMAP output also (albeit inefficient): > >a list "" * >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Sent" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Drafts" >* LIST (\HasNoChildren) "/" "Trash" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "Spam" >* LIST (\HasNoChildren) "/" "INBOX" >* LIST (\HasNoChildren) "/" "Pub" >a OK List completed. > So, it is legal to even list each folder several times? >michael WBR, valerius

3 2

[Dovecot] No NTLM with PAM after upgrade
by Phil Quesinberry 01 Mar '13

01 Mar '13

After updating From Dovecot 1.07 (included with CentOS 5) to 2.11, NTLM authentication will not work. Attempts to authenticate against Samba version 4.0.4-GIT-20cb7de also fail with 'auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL', despite the fact that the same user can sign on to the Samba domain and access files. What I'm really trying to understand here though is why version 1.07 would do NTLM with PAM just fine, but later versions I've tried will not. After failing to get later versions to work, I decided to see if I could at least get them to do NTLM by authenticating against a Samba domain but that won't work either. 1.07 did NTLM just fine authenticating against a system user account with PAM, as demonstrated by the following excerpt from the log: dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:46:59 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:47:42 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:03 Info: imap-login: Login: user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out dovecot: Feb 06 12:48:44 Info: IMAP(pquesinb): Disconnected: Logged out Authentication settings for 1.07 were as follows (excerpt from -n output, see below for full output): auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd Since 1.07 was such an old version, I first tried updating to 1.2.17 and lost the ability to do NTLM authentication with the same settings: Feb 06 16:09:32 dovecot: Info: Dovecot v1.2.17 starting up (core dumps disabled) Feb 06 16:09:46 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:09:53 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:10:05 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Feb 06 16:11:54 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:04 auth(default): Info: password(pquesinb,192.168.2.100): Requested NTLM scheme, but we have a NULL password Feb 06 16:12:16 imap-login: Info: Disconnected (auth failed, 2 attempts): user=<pquesinb>, method=NTLM, rip=192.168.2.100, lip=192.168.2.102 Next I decided to try 2.x and since I had installed 1.2.17 from source, I thought it would be wise to install from an RPM which had been "blessed" for CentOS 5, so 2.1.1 was installed from the RPMs linked to on the Dovecot download site: http://dl.atrpms.net/all/dovecot-2.1.1-2_132.el5.x86_64.rpm Still no NTLM authentication with 2.x using PAM, so I decided to try authenticating against the Samba 4 domain using Samba's winbind daemon and ntlm_auth helper. That still doesn't work however, as seen by the following log excerpt but plaintext login which is also enabled, works: Feb 28 23:29:13 auth: Debug: auth client connected (pid=18518) Feb 28 23:29:13 auth: Debug: client in: AUTH 1 NTLM service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 Feb 28 23:29:15 auth: Debug: client out: FAIL 1 Feb 28 23:29:15 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4530 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:17 auth: Debug: client out: CONT 1 Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVxxxxxxxAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== Feb 28 23:29:17 auth: Error: could not obtain winbind netbios name! Feb 28 23:29:17 auth: Error: could not obtain winbind domain name! Feb 28 23:29:17 auth: Debug: client out: CONT 1 TlRMTVNTUAACAAAAGAAYADgAAAAFxxxxxxxxxSsAAAAAAAAAAIoAigBQAAAABgEAAAAAAA9IAEUA UgBTAEMASABMxxxxxxxxxxUATgACABgASABFAFIAUwBDAEgATABBAFUAUgBFAE4AAQAOAFMARQBS AFYARQBSADEABAAgAGgAZQByAHMAYwBoAGwAYQB1AHIAZQBuAC4AYwBvAG0AAwAwAFMAZQByAHYA ZQByADEALgBoAGUAcgBzAGMAaABsAGEAdQByAGUAbgAuAGMAbwBtAAAAAAA= Feb 28 23:29:17 auth: Debug: client in: CONT 1 TlRMTVNTUAADAAAAGAAYAGoAAAC6ALoAggAAAAAAAABIAAAAEAAQAEgAAAASABIAWAAAAAAAAAAx xxxxxxxKIogUBKAoAAAAPcABxAHUAZQBzAGkAbgBiAFEAUwBFAC0AVwxxxxxxxx+cYeYzU98pxsa 17QyN6VD8kE2RibAjNedd/ooN2y4/uSr/ZQYxxxxxxxxxU1Fs4BjelQ/JBNkYkAAAAAAgAYAEgAR QBSAFMAQwBIAEwAQQBVAFIARQBOAAEADgBTAEUAUgBWAEUAUgAxAAQAIABoAGUAcgBzAGMAaABsA GEAdQBxxxxxxxxxxbwBtAAMAMABTAGUAcgB2AGUAcgAxAC4AaABlAHIAcwBjAGxxxxxxxxxxxxlA G4ALgBjAG8AbQAAAAAAAAAAAA== Feb 28 23:29:17 auth: Info: winbind(?,192.168.2.100): user not authenticated: NT_STATUS_UNSUCCESSFUL Feb 28 23:29:19 auth: Debug: cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth-worker(18524): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 23:29:19 auth: Debug: client out: FAIL 1 Feb 28 23:29:19 auth: Debug: client in: AUTH 2 PLAIN service=imap lip=192.168.2.102 rip=192.168.2.100 lport=143 rport=4531 resp=AHBxdWVzaW5iAFN0ZXdCMHkv Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Feb 28 23:29:19 auth-worker(18524): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): lookup service=dovecot Feb 28 23:29:19 auth-worker(18524): Debug: pam(pquesinb,192.168.2.100): #1/1 style=1 msg=Password: Feb 28 23:29:19 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:19 auth: Debug: master in: REQUEST 751435777 18513 2 db445872b80e33772b5f0d35d50af3d1 Feb 28 23:29:19 auth: Debug: userdb-cache(pquesinb,192.168.2.100): miss Feb 28 23:29:19 auth: Debug: passwd(pquesinb,192.168.2.100): lookup Feb 28 23:29:19 auth: Debug: master out: USER 751435777 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:19 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18526 Feb 28 23:29:27 auth: Debug: cache(pquesinb,192.168.2.100): hit: {SHA1}+2ZUmdHOxxxxxxxxxxxxOLinOC0= user=pquesinb user=pquesinb Feb 28 23:29:27 auth: Debug: client out: OK 2 user=pquesinb Feb 28 23:29:27 auth: Debug: master in: REQUEST 3169320961 18518 2 6bd7b4fd283994029394360a2f5b4048 Feb 28 23:29:27 auth: Debug: userdb-cache(pquesinb,192.168.2.100): hit: pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 auth: Debug: master out: USER 3169320961 pquesinb system_groups_user=pquesinb uid=507 gid=508 home=/home/pquesinb Feb 28 23:29:27 imap-login: Info: Login: user=<pquesinb>, method=PLAIN, rip=192.168.2.100, lip=192.168.2.102, mpid=18531 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=861 out=31433 Feb 28 23:30:00 imap(pquesinb): Info: Disconnected: Logged out in=120 out=739 Here is the -n output for both 2.11 and 1.07, login/mail executables and plugins are present within the configured paths for both versions: Config output for 2.11: [root@Server1 log]# dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-348.1.1.el5.centos.plusxen x86_64 CentOS release 5.9 (Final) auth_cache_size = 16 M auth_debug = yes auth_debug_passwords = yes auth_mechanisms = ntlm plain auth_use_winbind = yes auth_verbose = yes disable_plaintext_auth = no info_log_path = /var/log/dovecot.log listen = * log_path = /var/log/dovecot.log mail_location = maildir:~/Maildir maildir_very_dirty_syncs = yes passdb { args = cache_key=%u dovecot driver = pam } passdb { driver = shadow } protocols = imap pop3 service auth { executable = /usr/libexec/dovecot/auth user = root } service imap-login { client_limit = 256 executable = /usr/libexec/dovecot/imap-login process_limit = 128 user = dovecot vsz_limit = 64 M } service imap { executable = /usr/libexec/dovecot/imap process_limit = 64 } service pop3-login { client_limit = 256 process_limit = 128 user = dovecot vsz_limit = 64 M } service pop3 { process_limit = 64 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_client_workarounds = mail_plugin_dir = /usr/local/lib/dovecot/imap } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugin_dir = /usr/local/lib/dovecot/lda } Here is the config output from the 1.07 version, which worked: [root@Server1 init.d]# dovecot107 -n # 1.0.7: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: ntlm plain passdb: driver: passwd-file args: /etc/dovecot.users passdb: driver: pam args: cache_key=%u dovecot userdb: driver: passwd I'm fairly new to Dovecot, so if someone out there could at least point me in the right direction in order to help me better understand why things aren't working with the newer versions I would really appreciate it. Many thanks, Phil Quesinberry Q Systems Engineering, Inc. Embedded Systems Hardware/Software Development and VoIP Business Telephone Hosting Improve your business telephone services and save money (410) 969-8002 http://www.qsystemsengineering.com

1 0

[Dovecot] Maildir Control files and quota
by Tabbed Out 01 Mar '13

01 Mar '13

Hello all, the dovecot wiki recommended that the index and control files for maildir be placed on a partition which does not have a quota. I have a VPS which gives me 20 gigs of space. Since space is tight, is there some way to calculate how much space the partition needs for the control and index files? Would 1 gig be sufficient in the long run?

2 1

[Dovecot] postfix, dovecot, samba, winbind
by Denis Witt 01 Mar '13

01 Mar '13

Hello List, we're currently working on the migration of our LDAP/Samba3-Domain to Samba4-Active-Directory. So far everything works fine. Postfix can deliver Mails using ProxyAddresses-Information from the AD and Dovecot delivers the mail. Unfortunately when Postfix tells Dovecot to deliver the mail he submit the username without the AD-Domain part: Feb 28 17:17:59 tpdc postfix/pickup[30396]: 5DDAE2C0C2B: uid=0 from=<root> Feb 28 17:17:59 tpdc postfix/cleanup[30402]: 5DDAE2C0C2B: message-id=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de> Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: from=<root(a)concepts-and-training.de>, size=463, nrcpt=1 (queue active) Feb 28 17:17:59 tpdc dovecot: lda(dwitt): msgid=<20130228161759.5DDAE2C0C2B(a)mx0.concepts-and-training.de>: saved mail to INBOX Feb 28 17:17:59 tpdc postfix/local[30404]: 5DDAE2C0C2B: to=<dwitt(a)concepts-and-training.de>, orig_to=<denis.witt(a)cat06.de>, relay=local, delay=0.24, delays=0.1/0.01/0/0.13, dsn=2.0.0, status=sent (delivered to command: /usr/lib/dovecot/deliver) Feb 28 17:17:59 tpdc postfix/qmgr[30395]: 5DDAE2C0C2B: removed So Dovecot saves the Mail to "/var/mail/dwitt/", which is fine for me. The Problem kicks in when I try to read my Mail. Dovecot uses "TESTDOM\dwitt" as username and so he didn't find the Mailbox and create a new one in "/var/mail/TESTDOM\dwitt". I tried to fix it with auth_username_translation and auth_username_format but it doesn't work. Any ideas? Thanks!

2 2

[Dovecot] help needed with dovecot authentication
by peter lawrie 01 Mar '13

01 Mar '13

Hi I have been asked to configure an dedicated rhel6 server for a customer. I did not realise when I took this on how complicated it was going to be! The purpose of the server is to host a group of websites for small businesses. It came with postfix-2.6.6-2.2 dovecot-2.0.9 and mysql-2.1.67-1 I have installed virtualmin 3.98, usermin1.540-1 and horde 5 About a dozen currently inactive websites have been set up, mail is in /home/<domain>/Maildir My problem is that I can telnet to postfix to send and receive emails and can see these within postfix in webmin I have been having many problems getting dovecot to connect successfully to postfix. I have also installed horde 5 which requires to authenticate to an imap server - that is dovecot. This one server is intended to provide all services, so plain authentication is fine. But I can't use /etc/passwd as the users are in virtualmin I tried configuring ssl, with self-certification so the browser interface is https: At the moment I've restored dovecot.conf and conf.d/10-master.conf, 10-auth.conf and 10-mail.conf to their original settings. So an attempt to login through usermin gives me this Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 19:44:19 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 19:44:19 scotz1 dovecot: auth: Fatal: sql: Configuration file path not given Feb 28 19:44:19 scotz1 dovecot: master: Error: service(auth): command startup failed, throttling Previous to restoring the conf files I was getting this from horde Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: auth client connected (pid=25627) Feb 28 17:55:02 scotz1 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=439 54#011resp=dGVzdHNjb3R6LmNvLnVrAHRlc3RzY290ei5jby51awBwYXNzd29yZA== Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Feb 28 17:55:02 scotz1 dovecot: auth: Debug: passwd(testscotz.co.uk,127.0.0.1): lookup Feb 28 17:55:02 scotz1 dovecot: auth: passwd(testscotz.co.uk,127.0.0.1): unknown user Horde is using mysql for its database, but I don't particularly care what dovecot uses, although it seems sensible to do the same I have created and removed several mysql databases during my attempts to get this to work. I would greatly appreciate some assistance with this as every 'howto' I have found by googling describes different setups and just gets me deeper in the mire! I want an authentication mechanism on this one server that virtualmin users and horde users (same people!) can use for imap mail. I thought I knew what I was doing before I took this one on (I have configured and manage a dozen centos servers), but this one is making my head spin. Yours in hope! Peter Lawrie

6 7

[Dovecot] Disallow Deletion from Trash Folder
by Bradley Rintoul 01 Mar '13

01 Mar '13

Hello: I've been tasked with trying to find a way to keep users from ever "permanently" deleting emails. The users are running Thunderbird and are using the "Archive" option for when emails are deleted. However, they are still able to delete emails from the Archive folders... I'm wondering if there's any way that I can configure Dovecot to make sure that emails *never* get removed from the filesystem. I know it's probably kind of a bizarre request, but is there any way that Dovecot can help me out in this regard? Thanks! B. Rintoul

5 4

[Dovecot] sending of password did not succeed
by Peter Sparkes 01 Mar '13

01 Mar '13

Hi Today I have upgraded my Debian server from lenny to squeeze and my email stopped working. I am using Dovecot 1.2.15 with exim4. Exim4 is working and mail is being delivered to the mailboxes - /home/ didm.co.uk/peter/Maildir/new etc When I try to download emails to my I get "sending of password did not succeed, Mail server mail.didm.co.ukresponded:Authentication failed" and the server Dovecot error log "utime(/home/didm.co.uk/peter/Maildir/tmp) failed: Permission denied" etc Help please Peter

3 2

[Dovecot] I need help with my mail client: was [OCLUG] running cron on UTC
by Steve Litt 01 Mar '13

01 Mar '13

On Thu, 28 Feb 2013 19:29:20 -0800 Kevin Cernekee <cernekee(a)gmail.com> wrote: > On Thu, Feb 28, 2013 at 5:54 PM, Nathan Haines <nhaines(a)ubuntu.com> I'm sorry to hijack a thread to do this, but I actually had to reply to someone in order to show you the symptom. Before describing the symptom, let me give you the situation... I'm running Claws-Mail 3.8.1 on Xubuntu 12.10. On the way out I just do normal port 465 SSL to my web host's SMTP server. On the way back, fetchmail grabs my messages from my ISP using IMAP (and erasing them on on the ISP's server after retrieval), then delivers them to procmail, which, based on filters, drops them into the correct directories of the Dovecot server running on my desktop. Claws-mail then views all my email on the IMAP server. slitt@mydesk:~$ dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 ext4 At the bottom of this email I'll put a copy of a typical full header on a post from me. Here's the symptom: Every time I reply to an OCLUG post, Claws-Mail loads the *To* with oclug(a)mailman.oclug.org and the *CC* with oclug(a)penguin.oclug.org. Unless I remember to delete the CC, this makes me double post every time, and must be quite annoying to you all. This happens *only* on OCLUG posts: None of my other mailing lists display this symptom. It's actually weirder than that, because although when I compose the message the preceding is true, by the time I get the two messages back they both say oclug(a)penguin.oclug.org. This happens only with the OCLUG list, no others. I studied the full headers of the two messages when they came back to me, and could discern no difference in the two. What I did find, however, is that all OCLUG messages have: List-Post: <mailto:oclug@mailman.oclug.org> Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> Can anyone tell me how to start narrowing down the cause of this behavior? I've CC'ed the Claws-Mail list and the Dovecot list in hopes that maybe they have some ideas. The fact that the rest of you don't post doubles makes me wonder if it's a mail client thing (but of course, only for OCLUG). Thanks, SteveT Steve Litt * http://www.troubleshooters.com/ Troubleshooting Training * Human Performance ====================================================== Return-path: <oclug-bounces(a)penguin.oclug.org> Envelope-to: slitt(a)troubleshooters.com Delivery-date: Thu, 28 Feb 2013 23:57:27 -0700 Received: from box20.bluehost.com [69.89.18.20] by mydesk with IMAP (fetchmail-6.3.21) for <slitt@localhost> (single-drop); Fri, 01 Mar 2013 02:00:09 -0500 (EST) Received: from athrbthr by box500.bluehost.com with local-bsmtp (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuI-0004wp-KM for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:27 -0700 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on box500.bluehost.com X-Spam-Level: X-Spam-Status: No, score=0.9 required=6.0 tests=BAYES_20,DKIM_SIGNED,RDNS_NONE, T_DKIM_INVALID shortcircuit=no autolearn=no version=3.3.1 Received: from [66.51.217.34] (port=57600 helo=mailman.oclug.org) by box500.bluehost.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.80) (envelope-from <oclug-bounces(a)penguin.oclug.org>) id 1UBJuH-0004vU-Sl for slitt(a)troubleshooters.com; Thu, 28 Feb 2013 23:57:26 -0700 Received: from penguin.oclug.org (localhost.localdomain [127.0.0.1]) by mailman.oclug.org (8.13.8/8.13.8) with ESMTP id r216sAxl005168; Thu, 28 Feb 2013 22:54:25 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216sAxl005168 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=oclug.org; s=key1; t=1362120877; i=(a)oclug.org; bh=pGJLvLZRLVQZMvAPrmj0xY5yD15S7XKt7ZIXrtLn+n8=; h=Date:From:To:Message-ID:In-Reply-To:References:Mime-Version:Cc: Subject:Reply-To:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:Content-Type:Content-Transfer-Encoding; b=Ikxul7U6431nG0j1/UvXZoPbuId9Olh01KBQFgHtvW4XY4vRSdO0c/3K04k8S52Gz XbPB09lBM+MgYdwfz96Euo5fIKe63jqud0IMfa51HdMC8soz9AwTFLiY/Bf45dQbc/ L7GWPtjXX/RIjqgZmxV19GqgvALnmaDZ+p9aYlSs= Received: from oproxy5-pub.bluehost.com (oproxy5-pub.bluehost.com [67.222.38.55]) by mailman.oclug.org (8.13.8/8.13.8) with SMTP id r216rFYG005142 for <oclug(a)penguin.oclug.org>; Thu, 28 Feb 2013 22:53:26 -0800 X-DKIM: OpenDKIM Filter v2.2.0 mailman.oclug.org r216rFYG005142 Authentication-Results: mailman.oclug.org; dkim=pass (768-bit key) header.i=(a)troubleshooters.com header.b=pN/Ec/8K; dkim-adsp=pass Received: (qmail 24695 invoked by uid 0); 1 Mar 2013 06:53:12 -0000 Received: from unknown (HELO box500.bluehost.com) (74.220.219.100) by cpoproxy2.bluehost.com with SMTP; 1 Mar 2013 06:53:12 -0000 Received: from [184.90.206.64] (port=58237 helo=mydesk) by box500.bluehost.com with esmtpsa (SSLv3:RC4-SHA:128) (Exim 4.80) (envelope-from <slitt(a)troubleshooters.com>) id 1UBJqB-0007gc-KK; Thu, 28 Feb 2013 23:53:11 -0700 Date: Fri, 1 Mar 2013 01:53:07 -0500 From: Steve Litt <slitt(a)troubleshooters.com> To: oclug(a)penguin.oclug.org Message-ID: <20130301015307.69d0330f@mydesk> In-Reply-To: <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> References: <CAOF6TY_dmSP+ZS60wKaZo3Lq6iZ+fcqkbh4H46Jz8HOp+xRprQ(a)mail.gmail.com> <512FB61F.6070607(a)truesdail.com> <CAEiYjQLRUhbu4MCYoodDBxLYVOoc01dJjA1+dGQywkd7_1w0SQ(a)mail.gmail.com> Organization: Troubleshooters.Com X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.13; x86_64-pc-linux-gnu) Mime-Version: 1.0 X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:smtp auth 184.90.206.64 authed with junk(a)a3b3.com} Cc: Orange County Linux Users Group <oclug(a)penguin.oclug.org> Subject: Re: [OCLUG] Clonezilla vs Ubuntu backup? X-BeenThere: oclug(a)mailman.oclug.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Orange County Linux Users Group <oclug(a)penguin.oclug.org> List-Id: Orange County Linux Users Group <oclug.mailman.oclug.org> List-Unsubscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=unsubscribe> List-Archive: <http://mailman.oclug.org/mailman/private/oclug> List-Post: <mailto:oclug@mailman.oclug.org> List-Help: <mailto:oclug-request@mailman.oclug.org?subject=help> List-Subscribe: <http://mailman.oclug.org/mailman/listinfo/oclug>, <mailto:oclug-request@mailman.oclug.org?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: oclug-bounces(a)penguin.oclug.org X-Identified-User: {36493:box500.bluehost.com:athrbthr:a3b3.com} {sentby:spamassassin for local delivery to identified user} ======================================================

2 1

[Dovecot] Looking for HOWTO for fc18 with postfix/TLS/imaps
by Alex 01 Mar '13

01 Mar '13

Hi all, Does there already exist a document that outlines the best approach to implement postfix with dovecot? I'd like to set up a Maildir system with TLS clients and SMTP Auth. I don't think I need to require client certs, but want to avoid cleartext passwords. It's unclear to me whether to use 143 with TLS or 993. I've currently set it up using 143 with STARTTLS using normal passwords. Is this correct? Can I use a regular apache web cert to provide an authorized cert and key to use for authentication by the clients? Thanks, Alex

1 0

[Dovecot] Support for PolarSSL?
by Charles Marcus 01 Mar '13

01 Mar '13

Hey Timo, Just curious if you ever thought about supporting other than just OpenSSL? PolarSSL looks really interesting, has no major dependencies and is very lightweight compared to OpenSSL, GNUTLS or others... https://polarssl.org/ I guess it could be a lot of work, or not, anyway, I'm just curious... -- Best regards, */Charles/*

6 5

[Dovecot] Best practice for sieve script synchronization
by Oli Schacher 28 Feb '13

28 Feb '13

We consider deploying a two server active-active setup with dsync replication for ~2500 users. I was wondering how people handle sieve script synchronization in such setups. We came up with a few options for syncing: 1) rsync/unison ~/sieve every x seconds 2) move sieve dirs to separatate partition and sync with gluster or drbd 3) patch roundcube managesieve sieve plugin to upload to both managesieve servers (only roundcube can access managesieve in our setup) 4) store sieve scripts in mysql and patch roundcube managesieve plugin to directly access the db instead of using managesieve (we tried this, but apparently sieve scripts read from db via dovecot dict can't have more than one line? show stopper due to roundcube sieve plugin needing comments to parse the scripts) 5) wait until Timo/Stephan add additional magic to dsync for sieve scripts as discussed in http://www.dovecot.org/list/dovecot/2011-October/061699.html ;-) We are tending towards 1) as this seems simplest and most robust solution but before we re-invent the wheel we'd like to "hear" your thoughts... Thanks Oli -- This message does not contain horse meat

6 7

Re: [Dovecot] sending of password did not succeed
by Peter Sparkes 28 Feb '13

28 Feb '13

Hi Harald > > Thanks for replying > > stat /home/didm.co.uk/peter/Maildir/tmp gives > > File: `/home/didm.co.uk/peter/Maildir/tmp' > Size: 4096 Blocks: 8 IO Block: 4096 directory > Device: 901h/2305d Inode: 13836957 Links: 2 > Access: (0755/drwxr-xr-x) Uid: ( 1223/ peter) Gid: ( 1108/didm.co.uk) > Access: 2013-02-28 04:36:36.000000000 +0000 > Modify: 2013-02-28 17:08:22.000000000 +0000 > Change: 2013-02-28 17:08:22.000000000 +0000 > > ls -lha -R /home/didm.co.uk/peter/ ouputs a long list part of which is > > /home/didm.co.uk/peter/Maildir/new: > total 844K > drwxr-xr-x 2 peter didm.co.uk 4.0K Feb 28 17:08 . > drwxr-xr-x 8 peter didm.co.uk 4.0K Feb 28 08:01 .. > -rw------- 1 peter peter 12K Feb 28 08:41 > 1362040901.H489863P3132.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.2K Feb 28 08:46 > 1362041185.H453645P3137.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.8K Feb 28 08:59 > 1362041976.H290857P3254.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.1K Feb 28 09:01 > 1362042100.H237350P3263.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 303K Feb 28 09:05 > 1362042315.H1078P3266.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 29K Feb 28 09:16 > 1362042969.H141065P4039.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 15K Feb 28 09:29 > 1362043772.H424096P4070.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 485 Feb 28 09:34 > 1362044091.H313425P4077.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 11K Feb 28 09:44 > 1362044642.H822470P4880.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 2.4K Feb 28 11:38 > 1362051505.H650923P7747.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.6K Feb 28 12:03 > 1362053012.H602533P8671.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 27K Feb 28 12:44 > 1362055442.H625207P10611.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 40K Feb 28 13:14 > 1362057256.H571100P11598.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 83K Feb 28 13:15 > 1362057339.H568650P11605.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 9.3K Feb 28 14:05 > 1362060354.H307724P12580.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 16K Feb 28 14:25 > 1362061514.H650991P13554.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 9.0K Feb 28 15:47 > 1362066474.H389245P16304.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 46K Feb 28 15:53 > 1362066827.H631037P16382.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 3.9K Feb 28 15:56 > 1362067018.H98463P16401.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 20K Feb 28 16:15 > 1362068100.H694502P17251.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 44K Feb 28 16:27 > 1362068836.H298454P17321.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 53K Feb 28 17:06 > 1362071183.H205812P18284.didm-a.dh.bytemark.co.uk > -rw------- 1 peter peter 53K Feb 28 17:08 > 1362071302.H916902P18293.didm-a.dh.bytemark.co.uk > > > Regards > > Peter > > > On Thu, Feb 28, 2013 at 5:27 PM, Reindl Harald <h.reindl(a)thelounge.net>wrote: > >> >> >> Am 28.02.2013 18:20, schrieb Peter Sparkes: >> > Hi >> > >> > Today I have upgraded my Debian server from lenny to squeeze and my >> email >> > stopped working. >> > >> > I am using Dovecot 1.2.15 with exim4. >> > >> > Exim4 is working and mail is being delivered to the mailboxes - /home/ >> > didm.co.uk/peter/Maildir/new etc >> > >> > When I try to download emails to my I get >> > >> > "sending of password did not succeed, Mail server >> > mail.didm.co.ukresponded:Authentication failed" >> > >> > and the server Dovecot error log "utime(/home/ >> didm.co.uk/peter/Maildir/tmp) >> > failed: Permission denied" etc >> >> and what says "stat /home/didm.co.uk/peter/Maildir/tmp" >> or "ls -lha -R /home/didm.co.uk/peter/"? >> >> >

1 0

[Dovecot] sieve /editheader / addheader :last crash
by Peter Rindfuss 28 Feb '13

28 Feb '13

Hi Everybody, I'm using dovecot 2.1.14 from http://xi.rename-it.nl/debian/ with debian squeeze stable. In general, sieve works fine for me, but "addheader :last ..." from the editheader extension causes a crash when it processes a message. I was able to narrow this down a bit: It only happens if "addheader :last" is the first editheader command executed in a script. If it is preceded by any "deleteheader" or "addheader" without ":last", everything is fine. This is what I get from sieve-test when it crashes: sieve-test(root): Panic: file istream.c: line 133 (i_stream_read): assertion failed: (_stream->skip != _stream->pos) sieve-test(root): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4881a) [0x7f5e0b37681a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f5e0b376902] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f5e0b349f7f] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x17c) [0x7f5e0b37da9c] -> /usr/lib/dovecot/libdovecot.so.0(+0x51453) [0x7f5e0b37f453] -> /usr/lib/dovecot/libdovecot.so.0(+0x5150e) [0x7f5e0b37f50e] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f5e0b37d989] -> /usr/lib/dovecot/libdovecot.so.0(+0x53fe1) [0x7f5e0b381fe1] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f5e0b37d989] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x52) [0x7f5e0b37dc72] -> /usr/lib/dovecot/libdovecot.so.0(io_stream_copy+0x41) [0x7f5e0b38ae21] -> /usr/lib/dovecot/libdovecot.so.0(+0x5e1de) [0x7f5e0b38c1de] -> /usr/lib/dovecot/libdovecot.so.0(o_stream_send_istream+0x33) [0x7f5e0b38acb3] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_save_continue+0x38) [0x7f5e0be0caf8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_storage_copy+0xb8) [0x7f5e0be376d8] -> /usr/lib/dovecot/libdovecot-storage.so.0(maildir_copy+0x56) [0x7f5e0be086c6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_copy+0x4a) [0x7f5e0be3ce9a] -> /usr/lib/dovecot/libdovecot-sieve.so.0(+0x3fa66) [0x7f5e0c103a66] -> /usr/lib/dovecot/libdovecot-sieve.so.0(+0x366b4) [0x7f5e0c0fa6b4] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_result_execute+0x3ff) [0x7f5e0c0fabef] -> /usr/lib/dovecot/libdovecot-sieve.so.0(sieve_execute+0x56) [0x7f5e0c10b456] -> sieve-test(main+0x73e) [0x403a5e] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f5e0abdec8d] -> sieve-test() [0x403219] Aborted Best regards Peter

2 4

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

> >however what you used at migrate, some from your old clients may not >update their folder searchlist to/at new namespace, or have fixed prefix >setup etc, i didnt remember exactly but i think you can have both >namespace setups somehow for stay compatible with "old clients" >try search list and wiki > > Yes, thanks -- I'll look into wiki... But I tried to create a fresh account in Dovecot (not migrated from Courier), and it still shows a intermixed folder order: a list "" * * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasNoChildren) "/" "Sent" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "Pub" a OK List completed. So, it is not a migration problem -- note that it is the LIST command output, so it is not got influenced by some IMAP client folder searchlist/mask or its namespace settings (like in Thunderbird) WBR, valery

2 1

[Dovecot] patch for crash while FTS-searching through virtual mailbox
by Mike Abbott 28 Feb '13

28 Feb '13

FTS-searching through a virtual mailbox crashes dovecot-2.1.15 when the FTS backend does not support lookup_multi. src/plugins/fts/fts-api.h says for fts_backend_lookup() that "The arrays in result must be initialized by caller." FTS backends can therefore assume that the arrays are initialized by their caller. However, fts_backend_lookup_multi() does not initialize the per-box arrays before calling the FTS backend’s lookup function. This patch fixes the resulting crash. --- dovecot-2.1.15/src/plugins/fts/fts-api.c 2012-08-03 09:09:28.000000000 -0500 +++ dovecot/src/plugins/fts/fts-api.c 2013-02-28 14:35:43.000000000 -0600 @@ -337,8 +337,12 @@ result->box_results = p_new(result->pool, struct fts_result, i+1); for (i = 0; boxes[i] != NULL; i++) { + struct fts_result *box_result = &result->box_results[i]; + p_array_init(&box_result->definite_uids, result->pool, 32); + p_array_init(&box_result->maybe_uids, result->pool, 32); + p_array_init(&box_result->scores, result->pool, 32); if (backend->v.lookup(backend, boxes[i], args, - and_args, &result->box_results[i]) < 0) + and_args, box_result) < 0) return -1; } return 0;

1 0

[Dovecot] header brakage on sieve redirect ?
by Lazy 28 Feb '13

28 Feb '13

Hi all, In the sieve file require ["copy"]; redirect :copy "asdf(a)asd.pl"; emails with headers containing \n in non terminated " field like Cc: xxx <xxx(a)plus.pl>, "asd, Grzegorz " <xxxxx(a)nsn.com> Subject: RE: RF after redirecting them Cc: xxx <xxx(a)plus.pl>, "asd,\ \ Grzegorz " <xxxxx(a)nsn.com> Subject: RE: RF mail delivered locally by dovecot-lda is unaltered lack of space before second \ brakes the headers. I'm investigating if this isn't cosed by qmail-inject, but my first suspect is sieve. dovecot 2.0.13, sieve 0.3.3, dovecot-delivery is used as an exclusive lda for qmail Regards, Michal Grzedzicki

1 1

[Dovecot] Public free (libre) mailbox hosting service for everybody!
by אנטולי קרס נר 28 Feb '13

28 Feb '13

Hello e-mail software developers and users! I'd like to ask all of you a question. And of course hear relevant opinion. I've been using free software happily for a few years, and I found free/open source alternatives for many popular proprietary tools such as Facebook, Dropbox, Micro$oft Windows & Office, Youtube, Skype and many many others. Some of the alternatives are probably known to some of you, while others are still unknown to many. But I couldn't find a replacement to mailbox hosting. I'm using a Gmail mailbox and I hate it. So many free and open source mail servers and I still use Gmail, a closed-source service (which also probably tracks all my data, including Google searches I do, and uses it for all kinds of statistics and advertising, but that's another issue). So I asked myself, why is there no mailbox hosting service which respects user freedom? I sent an e-mail to the Free Software Foundation, and got a suggestion to ask all of you: do you know any free (libre) mail server out there? If you do, please inform me, and the whole free software community, developers and users. I couldn't find any. If nobody else finds any either, the plan is to start a new server. There are so many server tools and programs, like the ones you use and develop. It's just like hosting a Git repository or videos of pictures for the masses. We can do it with e-mail too. Q: Why don't I start my own personal server? A: I'm a programmer and I can do it - with some effort, but I can. The problem is not me. The problem is that all the non-programmer and non-technical users can't. And they shouldn't. We tech people can, and should, run such servers for everybody. For all users who want their basic freedoms respected. Another question to tech people: I'm not an expert in e-mail software, so I'm not really sure setting up a server is as easy as all other online services we get, such as Diaspora (facebook replacement), MediaGoblin (Youtube replacement), Gitorious (git repo hosting). Is there a technical issue preventing people from running a mail server, or it's just a matter of having enough money to run it, and the necessary technical skills (which many of you probably have). If it's possible, we'll do it. Also, if users had to pay for such a service, it would be okay. I don't mind paying for my free software stack. I'd actually find it a way to contribute back to the people and projects which deserve it. The point is not money; such a service can get funds. The point if FREEDOM. Waiting for response and opinions from you, my fellow free software community members, Anatoly Krasner Free software enthusiast/activist Israel

2 1

Re: [Dovecot] sending of password did not succeed
by Reindl Harald 28 Feb '13

28 Feb '13

PLEASE do NOT response off-list on mailing-lists and in general NOT use HTML messages for lists as you can see below what happens quting them i am using dovecot ONLY as proxy/auth-provider so my intention was to help others get more infos Am 28.02.2013 18:37, schrieb Peter Sparkes: > Hi Harald > Thanks for replying > > stat /home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp> gives > > File: `/home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>' > Size: 4096 Blocks: 8 IO Block: 4096 directory > Device: 901h/2305d Inode: 13836957 Links: 2 > Access: (0755/drwxr-xr-x) Uid: ( 1223/ peter) Gid: ( 1108/didm.co.uk <http://didm.co.uk>) > Access: 2013-02-28 04:36:36.000000000 +0000 > Modify: 2013-02-28 17:08:22.000000000 +0000 > Change: 2013-02-28 17:08:22.000000000 +0000 > > ls -lha -R /home/didm.co.uk/peter/ <http://didm.co.uk/peter/> ouputs a long list part of which is > > /home/didm.co.uk/peter/Maildir/new <http://didm.co.uk/peter/Maildir/new>: > total 844K > drwxr-xr-x 2 peter didm.co.uk <http://didm.co.uk> 4.0K Feb 28 17:08 . > drwxr-xr-x 8 peter didm.co.uk <http://didm.co.uk> 4.0K Feb 28 08:01 .. > -rw------- 1 peter peter 12K Feb 28 08:41 1362040901.H489863P3132.didm-a.dh.bytemark.co.uk > <http://1362040901.H489863P3132.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.2K Feb 28 08:46 1362041185.H453645P3137.didm-a.dh.bytemark.co.uk > <http://1362041185.H453645P3137.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.8K Feb 28 08:59 1362041976.H290857P3254.didm-a.dh.bytemark.co.uk > <http://1362041976.H290857P3254.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.1K Feb 28 09:01 1362042100.H237350P3263.didm-a.dh.bytemark.co.uk > <http://1362042100.H237350P3263.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 303K Feb 28 09:05 1362042315.H1078P3266.didm-a.dh.bytemark.co.uk > <http://1362042315.H1078P3266.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 29K Feb 28 09:16 1362042969.H141065P4039.didm-a.dh.bytemark.co.uk > <http://1362042969.H141065P4039.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 15K Feb 28 09:29 1362043772.H424096P4070.didm-a.dh.bytemark.co.uk > <http://1362043772.H424096P4070.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 485 Feb 28 09:34 1362044091.H313425P4077.didm-a.dh.bytemark.co.uk > <http://1362044091.H313425P4077.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 11K Feb 28 09:44 1362044642.H822470P4880.didm-a.dh.bytemark.co.uk > <http://1362044642.H822470P4880.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 2.4K Feb 28 11:38 1362051505.H650923P7747.didm-a.dh.bytemark.co.uk > <http://1362051505.H650923P7747.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.6K Feb 28 12:03 1362053012.H602533P8671.didm-a.dh.bytemark.co.uk > <http://1362053012.H602533P8671.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 27K Feb 28 12:44 1362055442.H625207P10611.didm-a.dh.bytemark.co.uk > <http://1362055442.H625207P10611.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 40K Feb 28 13:14 1362057256.H571100P11598.didm-a.dh.bytemark.co.uk > <http://1362057256.H571100P11598.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 83K Feb 28 13:15 1362057339.H568650P11605.didm-a.dh.bytemark.co.uk > <http://1362057339.H568650P11605.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 9.3K Feb 28 14:05 1362060354.H307724P12580.didm-a.dh.bytemark.co.uk > <http://1362060354.H307724P12580.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 16K Feb 28 14:25 1362061514.H650991P13554.didm-a.dh.bytemark.co.uk > <http://1362061514.H650991P13554.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 9.0K Feb 28 15:47 1362066474.H389245P16304.didm-a.dh.bytemark.co.uk > <http://1362066474.H389245P16304.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 46K Feb 28 15:53 1362066827.H631037P16382.didm-a.dh.bytemark.co.uk > <http://1362066827.H631037P16382.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 3.9K Feb 28 15:56 1362067018.H98463P16401.didm-a.dh.bytemark.co.uk > <http://1362067018.H98463P16401.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 20K Feb 28 16:15 1362068100.H694502P17251.didm-a.dh.bytemark.co.uk > <http://1362068100.H694502P17251.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 44K Feb 28 16:27 1362068836.H298454P17321.didm-a.dh.bytemark.co.uk > <http://1362068836.H298454P17321.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 53K Feb 28 17:06 1362071183.H205812P18284.didm-a.dh.bytemark.co.uk > <http://1362071183.H205812P18284.didm-a.dh.bytemark.co.uk> > -rw------- 1 peter peter 53K Feb 28 17:08 1362071302.H916902P18293.didm-a.dh.bytemark.co.uk > <http://1362071302.H916902P18293.didm-a.dh.bytemark.co.uk> > > > On Thu, Feb 28, 2013 at 5:27 PM, Reindl Harald <h.reindl(a)thelounge.net <mailto:h.reindl@thelounge.net>> wrote: > > > > Am 28.02.2013 18:20, schrieb Peter Sparkes: > > Hi > > > > Today I have upgraded my Debian server from lenny to squeeze and my email > > stopped working. > > > > I am using Dovecot 1.2.15 with exim4. > > > > Exim4 is working and mail is being delivered to the mailboxes - /home/ > > didm.co.uk/peter/Maildir/new <http://didm.co.uk/peter/Maildir/new> etc > > > > When I try to download emails to my I get > > > > "sending of password did not succeed, Mail server > > mail.didm.co.ukresponded:Authentication failed" > > > > and the server Dovecot error log "utime(/home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>) > > failed: Permission denied" etc > > and what says "stat /home/didm.co.uk/peter/Maildir/tmp <http://didm.co.uk/peter/Maildir/tmp>" > or "ls -lha -R /home/didm.co.uk/peter/ <http://didm.co.uk/peter/>"?

1 0

[Dovecot] Real-time sync using dsync
by Nikolaos Milas 28 Feb '13

28 Feb '13

Hi, Can we use dsync to achieve *continuous* (real-time) sync between two servers (Mirror mode)? Running in such a "continuous" dsync mode, we would replicate two servers to one another continuously, so that the two would be concurrently available/accessible/useable (as POP3/IMAP servers), and getting synced in real time. Is this possible? (If yes, I think it would be much easier to setup such an architecture, rather that resorting to shared file systems, network-based storage etc.) Thanks, Nick

7 12

Re: [Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

>> >> Is there a way to influence the folder sort order in Dovecot? >> >> WBR, >> valery >> >> > >comming from courier it may be a namespace problem > >http://wiki2.dovecot.org/Migration/Courier > >Dovecot configuration > >Courier by default uses "INBOX." as the IMAP namespace for private >mailboxes. If you want a transparent migration, you'll need to configure >Dovecot to use a namespace with "INBOX." prefix as well. > >mail_location = maildir:~/Maildir > >namespace { > prefix = INBOX. > separator = . > inbox = yes >} > Yes, I knew about that. In Courier, we had 'INBOX.' namespace prefix and '.' as a separator. Now we have empty prefix and a '/' as a separator. So, the settings are as follows: namespace { location = maildir:/usr/mailsuite/data/%d/%n type = private separator = / prefix = inbox = yes } But I used the courier-dovecot-migrate.pl script from Timo, as recommended. Where might be the traces of Courier (namespace settings etc.) remained? It seems that Courier and Dovecot use separate sets of files in user mailbox. Maybe, the migrate script expects the settings to be prefix = 'INBOX.' and separator = '.', what we don't want, so, we must modify the migrate script to change namespace settings when migrating? WBR, valery

2 1

[Dovecot] Dovecot - PowerMTA
by Clement PAULET 28 Feb '13

28 Feb '13

> Hello, > > I'm in charge of a PowerMTA SMTP gateway which is sending many email > marketing campain. > > This gateway stored all incoming email (reply to) in a specific > folder like this "domain.tld/mailbox". > All email' incoming are stored in the same file "mailbox" and are > paste at the end of the file with all headers. > It's look like a Mbox file format. > > In order to process our client requests (reply to), I search a > solution that can order mail by category (SPAM, Out of Office, > contact, etc..) and that I can submit after to our dedicated services. > > Do you think this is possible by a Dovecot/Sieve configuration ? (Our > MTA isn't a Postfix server and we can not change his configuration). > > Good day everybody and sorry for the post on dovecot-news list. > > Clement PAULET

1 0

[Dovecot] IMAP folders sort order
by Valery V. Sedletski 28 Feb '13

28 Feb '13

Hi all We migrated our IMAP server from Courier to Dovecot. The minor problem appeared: Dovecot LIST command now shows mailbox listing in some weird order. (I suppose, it is filesystem directory order) Previously, with Courier, it was sorted, i.e., the INBOX was the first, followed by other system folders. This is not a problem with our webmail, because it sorts folders by its own. But with some IMAP clients, we have folders intermixed. Is there a way to influence the folder sort order in Dovecot? WBR, valery

2 1

[Dovecot] dsync with imapc and hidden folders
by Angel L. Mateo 28 Feb '13

28 Feb '13

Hello, I'm trying to use dsync to copy mail from one server to a newer one, so I'm using imapc as source (when running dsync in the destination server). The command I'm using is like this: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<original server> -o imapc_features=rfc822.size -o mailbox_list_index=no backup -R -f -u "<myuser>" imapc: This command is working. The problem I have is that I'm using lazy_expunge in the original server, and namespace used in the original server has the config: namespace { hidden = yes list = no location = maildir:~/Maildir/expunged prefix = BORRADOS. separator = . } so, it is not being synchronized. I have tried to synchronized from the original server instead of destination with: sudo dsync -vD -o imapc_user="<myuser>*master" -o imapc_password="<master pass>" -o imapc_host=<dest server> -o imapc_features=rfc822.size -o mailbox_list_index=no -o mail_location=maildir:<myuserhome>/Maildir/expunged backup -f -u "amateo" imapc: with this, no message is copied and I have errors like: dsync(<myuser>): Error: Mailbox Archives.2003_kk changed its GUID (e7fc0b2d831e1c51984d000029c62294 -> 7d325fb944b953993df5d27ce2ee786c) Any idea to copy messages in this namespace without needing to make it plubic? Is there any hidden option for dysnc? Could I use doveadm backup? How? (it seems that documentation for dsync and doveadm backup is not updated) -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 0

[Dovecot] Logs when moving mails
by Christian Forjahn 28 Feb '13

28 Feb '13

Hi, I have a problem with an older mailserver. We have an account where 10 Users use one IMAP Account to manage their work. Sometimes some of the emails seem to disappear. I think they are moved somewhere but I can´t tell it for sure. Is there a way to make dovecot logging any movement of emails (I would prefer doing it only for one account). This account is not a local user. Thanks for your help, Chris mailserver:~ # dovecot --version 1.0.3 mailserver:~ # dovecot -n # 1.0.3: /etc/dovecot/dovecot.conf protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/exim/mailserver.cert.pem ssl_key_file: /etc/exim/mailserver.key.pem ssl_verify_client_cert: yes disable_plaintext_auth: no shutdown_clients: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login verbose_proctitle: yes maildir_copy_with_hardlinks: yes maildir_copy_preserve_filename: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib64/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/modules/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep imap_client_workarounds(pop3): outlook-idle pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login username_translation: %@ master_user_separator: * passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: checkpassword args: /etc/dovecot/checkpassword userdb: driver: prefetch socket: type: listen client: path: /var/run/dovecot/auth-client mode: 432 group: mail mailserver:~ #

2 1

Re: [Dovecot] Public free (libre) mailbox hosting service for everybody!
by Simon Brereton 28 Feb '13

28 Feb '13

On 28 Feb 2013 08:26, "אנטולי קרסנר" <tombackton(a)gmail.com> wrote: > > I've written a response to someone else, explaining some issues you > mention here. > > A little note on UI: we don't need web UI. It's a good addition but > unnecessary for the beginning. There are many free-software desktop mail > clients. Some are big and complicated, but some are very simple and very > easy to use, just like Gmail is. So UI is not a critical issue right > now, we just need to be able to easily configure a mail client, e.g. > Evolution, to work with the server. > > And it's great to hear people like the idea and want to help! With hard > work and cooperation, everything is possible! > > - Anatoly Krasner > > On ד', 2013-02-27 at 18:39 -0500, Bennett Todd wrote: > > The operational cost is non-zero. Besides hardware, which must include > > backups, and enough physical diversity to offer availability, an email > > server is an attractive nuisance; spammers and other criminals > > constantly attempt sabotage and burglary, and it takes ongoing > > manpower to attempt to hold them temporarily at bay. > > > > And unless you put hard caps on message sizes, people will use their > > mailboxes as backup drives, or just email their vacation movies to > > family, and you'll be buying drives, and hence replacing them, often. > > > > I love the idea, I'm fond of running mailservers myself. But I've gone > > Google. > > > > As for software, I won't pitch my favorite components to this wide > > list, but I know how to find all the pieces I'd need except the > > webmail front-end for the utterly non-technical. > > > > If you limited the scope to IMAP and SMTP, both SSL authenticated, it > > wouldn't be too hard to spec out. > > > > Host on AWS EC3 or the like, then find an affordable solution to spam, > > and you can sell to anyone who doesn't expect their email to be > > private from governments. > > > > Anybody know of a well-engineered and maintained SSL library? > > cesmail.net anyone? Simon

1 0

[Dovecot] selinux rules for dovecot
by Robert Moskowitz 27 Feb '13

27 Feb '13

I am running selinux in permissive mode on my new mail server, in part because of dovecot. I would really like to use selinux, but I suspect it may be a challenge. My setup is on Centos 6.3 with dovecot using mysql for virutal domains and users. I am looking for a set of definitive selinux instructions, not a pointer to selinux tutorial. Here are examples of what I am seeing: Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33468): avc: denied { search } for pid=2994 comm="dict" name="mysql" dev=dm-0 ino=1705864 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_db_t:s0 tclass=dir Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33469): avc: denied { write } for pid=2994 comm="dict" name="mysql.sock" dev=dm-0 ino=1706116 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mysqld_var_run_t:s0 tclass=sock_file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.770:33470): avc: denied { connectto } for pid=2994 comm="dict" path="/var/lib/mysql/mysql.sock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=unix_stream_socket Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33471): avc: denied { getattr } for pid=2994 comm="dict" path="/usr/share/mysql/charsets/Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file Feb 27 16:46:08 klovia kernel: type=1400 audit(1362001568.771:33472): avc: denied { read } for pid=2994 comm="dict" name="Index.xml" dev=dm-0 ino=395155 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file

1 0

[Dovecot] v2.2.beta2 released
by Timo Sirainen 27 Feb '13

27 Feb '13

http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz http://dovecot.org/releases/2.2/beta/dovecot-2.2.beta2.tar.gz.sig A ton of fixes since beta1. Especially the new dsync and the replication server related to that should really work now. It also works correctly now for shared mailboxes with private \Seen flags. And the replication server uses incremental syncing after the initial full sync, so it should be pretty efficient also. I've only two things left to do before v2.2.rc1: 1. Implement dsync to work via TCP and TCP+SSL sockets. This is pretty easy to do actually, since it can use the existing doveadm-server to start up. 2. Read up all the pending mails from Dovecot mailing list and fix up the reported issues. Actually I guess most of those are for v2.1, but still I should get around to it. :) There shouldn't be any major bugs left, so I'm expecting v2.2.rc1 out in maybe a week or so, hopefully followed by the final v2.2.0 soon afterwards. Please test and report any bugs found!

6 16

[Dovecot] Help with vpopmail authentication
by Fran Márquez 27 Feb '13

27 Feb '13

Hello, Currently I have a qmail server with vpopmail+courierImap. I want setup a new server in DMZ for proxy IMAP connections and I have a doubt with authentication method. I've read that dovecot can use a vpopmail driver for authentication. As my user database/password is stored by vpopmail, I think that this would be the best method for check the auth logins against dovecot. But I've read the docs and many examples availables on WWW and I haven't found any reference to validate against an *external* vpopmail server. The examples configuration doesn't contain any host/port, so I suppose that driver try to use a local vopomaild. In my case, I only want dovecot for proxying IMAP connections to my current mail server, without store mails or user/password info in dovecot server, because all that info is already stored in real mailserver. The ideal scenario would be this: user ---IMAPs----> dovecot ----- IMAP ---> mailserver Any advice will be wellcome. Regards and thank you very much in advance

1 0

[Dovecot] > 2.2.rc2: doveadm who -> Bad file descriptor
by Lutz Preßler 27 Feb '13

27 Feb '13

Hello, 2.2.rc2 is reproducibly fine, but (all from xi.rename-it.nl) dovecot_2.2.0~rc2-0~auto+11 (15988:2020ed15efb9) and dovecot_2.2.0~rc2-0~auto+7 (15980:d84c7c11d7b7) have "doveadm who" not working: # doveadm who doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor strace doveadm who ends with: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(-1, F_GETFL) = -1 EBADF (Bad file descriptor) write(2, "doveadm(root): Fatal: fcntl(-1, "..., 69doveadm(root): Fatal: fcntl(-1, F_GETFL) failed: Bad file descriptor ) = 69 exit_group(75) = ? same with 2.2.rc2 includes: socket(PF_FILE, SOCK_STREAM, 0) = 8 fcntl(8, F_GETFL) = 0x2 (flags O_RDWR) fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(8, {sa_family=AF_FILE, path="/var/run/dovecot/anvil"}, 110) = 0 fcntl(8, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK) fcntl(8, F_SETFL, O_RDWR) = 0 fstat(8, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0 write(8, "VERSION\tanvil\t1\t0\nCONNECT-DUMP\n", 31) = 31 Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 2

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 27 Feb '13

27 Feb '13

>> >> So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail >> after it is fetched? > >with getmail > >[destination] >type = MDA_external >path = /usr/lib/dovecot/deliver > >But then it will be copied to INBOX... -- Is it possible to specify the >other folder to deliver to, >> to the deliver program? > >the sieve filter invoked bx deliver does it, i.e rule > >if header :contains ... fileinto :create "folder" > >or whatever > Ah, yes. Really, I looked to mpop options, it can call various LDA's. And, dovecot-lda has "-m" parameter, which allows to specify the mailbox name. So, I can deliver the mail arrived by fetcher, via dovecot-lda, and Sieve filters will work. Also, as a bonus, delivering mail via LDA will correctly update user quotas -- the problem which resolved by itself :) Great :) >> >>> >>>> outgoing mail to folders, specific >>> >>> outgoing mail is smtp, with i.e imap copy to sent folder etc >>> if you want other folders your imap client should do it >>> >> >> So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >in general ,i dont think so , there may be some workaround with server >bcc_copy and i.e plus adressing with sieve then for "sent" mail > Yes, this is a variant. But what if I modify the Dovecot post-login script (a wrapper for IMAP process), or add the sieve plugin to protocol "imap {mail_plugins = ...}" ? Will it be invoked on each operation with mailboxes? >> >>> >>> try i.e >>> >>> https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search >>> >>> >>>> to their recipients. WBR, valery

2 1

[Dovecot] Protocol logging - TLS vs SSL
by Charles Marcus 27 Feb '13

27 Feb '13

Hi all, Ok, I have: login_log_format_elements = user=<%u> method=%m rip=%r lport=%{lport} mpid=%e %c session=<%{session}> We only allow inbound IMAP, and only SSL on port 993. Looking at the logs, %c is obviously the encryption type, but... Why does it say 'TLS', when it technically (there is a difference after all) should say 'SSL'? Not a big deal, but it is just something I've been meaning to ask. -- Best regards, */Charles/*

6 26

[Dovecot] Can't access to shared mailbox
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, I have a user sharing a folder to me (and other users). This has worked for me for a time. And it is still working for some users, but not for me. I'm using thunderbird (17.0.3, ubuntu 12.04 package). My server is dovecot 2.1.9 (it's the same since it works). The user sharing its mailbox is: $ sudo doveadm user t userdb: t home : /home/generica/02/001002 uid : 1002 he is sharing its mailbox "cron". This is its dovecot-acl: root@myotis31:/home/generica/02/001002/Maildir# cat dovecot-acl user=<other user> kxeilprwts user=<my user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts user=<other user> kxeilprwts I can subscribe to this folder: # sudo doveadm mailbox subscribe -u <myuser> shared.t.cron # sudo doveadm mailbox list -u <myuser> -s INBOX ... ... shared.t.cron but when I try to access to this folder through thunderbird (what I really do in TB is subscribe/unsubscribe to it, because it is not actually listed in the folder list), I get: Feb 26 13:35:03 myotis32 dovecot: imap(<myuser>): Error: Couldn't create namespace 'shared.' for user shared: userdb didn't return a home directory, but plugin setting quota used it (%h): dict:User quota::file:%h/Maildir/dovecot.quota With doveadm commands I can access to the shared folder from my user (not the user sharing): $ sudo doveadm search -u <myuser> mailbox shared.t.cron | wc -l 652 Other users can use this shared folder without any (apparent) problem. I have attached my doveconf -n. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

[Dovecot] Special characters in dovecot.conf
by Antonio Casado Rodriguez 27 Feb '13

27 Feb '13

Hi all, I've configured "quota_exceeded_message" in dovecot 1.2, but I have two questions: - Can I use "CRLF" in it? I'd like have two messages: english and spanish. - If char character set in dovecot.conf is ASCII, How do I set special characters (spanish)? The email received is in UTF-8 Thanks you -- Antonio Casado Rodríguez Administrador de Servicios de Red y Seguridad TIC Área de Comunicaciones STIC (Servicio de las Tecnologías de la Información y las Comunicaciones) UNIVERSIDAD DE ALMERÍA Este mensaje y los ficheros que puedan ser adjuntados son confidenciales. Los mismos contienen información reservada que no puede ser difundida. Si usted ha recibido este correo por error, tenga la amabilidad de eliminarlo de su sistema y avisar al remitente mediante reenvío a su dirección electrónica; no deberá copiar el mensaje ni divulgar su contenido a ninguna persona. Su dirección de correo electrónico junto a sus datos personales constan en un fichero titularidad de La UNIVERSIDAD DE ALMERÍA cuya finalidad es la de mantener el contacto con usted. Si quiere saber de qué información disponemos de usted, modificarla, y en su caso, cancelarla, puede hacerlo enviando un escrito al efecto, acompañado de una fotocopia de su D.N.I. a la siguiente dirección: UNIVERSIDAD DE ALMERÍA –. Secretaría General de La Universidad de Almería. Edificio Central, Planta baja. Ctra. Sacramento s/n, La Cañada de San Urbano. CP 04120 Almería

2 1

[Dovecot] Master passwords and ACLs
by Angel L. Mateo 27 Feb '13

27 Feb '13

Hello, Since I have activated acl plugin, master password is no longer working. I'm running dovecot 2.1.9 with master password and acl plugin (among others). I have attached my configuration. If I disable acl plugin, it works, but if I enabled it, dovecot fails. In the client, I get: amateo@joshua:~$ telnet myotis30.um.es 143 Trying 155.54.211.169... Connected to myotis30.um.es. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. 1 login <user>*master <master pass> 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in 2 SELECT INBOX 2 NO [SERVERBUG] Internal error occurred. Refer to server log for more information. [2013-02-27 11:46:50] and in the server I get: Feb 27 11:46:47 myotis30 dovecot: imap-login: Login: user=<<user>>, method=PLAIN, rip=155.54.67.5, lip=155.54.211.169, mpid=53762, session=<aECqfbLWvACbNkMF> Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib02_imap_acl_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/master_user=master Feb 27 11:46:47 myotis30 dovecot: imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=10G Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Effective uid=113246, gid=110, home=/home/alumnos/46/113246 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: No acl_shared_dict setting - shared mailbox listing is disabled Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota root: name=User quota backend=dict args=:file:/home/alumnos/46/113246/Maildir/dovecot.quota Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=* bytes=10737418240 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Quota rule: root=User quota mailbox=Trash bytes=+1073741824 messages=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: dict quota: user=<user>, uri=file:/home/alumnos/46/113246/Maildir/dovecot.quota, noenforcing=0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir:INDEX=/var/indexes/<user> Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir, index=/var/indexes/<user>, control=, inbox=/home/alumnos/46/113246/Maildir, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=private, prefix=BORRADOS., sep=., inbox=no, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir/expunged Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: maildir++: root=/home/alumnos/46/113246/Maildir/expunged, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: Namespace : type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: initializing backend with data: vfile Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: acl username = master Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl: owner = 0 Feb 27 11:46:47 myotis30 dovecot: imap(<user>): Debug: acl vfile: Global ACL directory: (none) Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Debug: acl vfile: file /home/alumnos/46/113246/Maildir/dovecot-acl not found Feb 27 11:46:50 myotis30 dovecot: imap(<user>): Error: Failed to autocreate mailbox INBOX: Permission denied This user, accesed directly, without master user, works perfectly, with no problem, even with acl plugin. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

1 1

[Dovecot] "sent" and "accepted" missing mails
by Spyros Tsiolis 27 Feb '13

27 Feb '13

Hello all, OK, this most probably is not dovecot related. However, I have to start from somewhere. output of "dovecot -n" : # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 96 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd User (really weird user) today tells me she is missing "sent" and "accepted" folders. She is running the latest version of Thunderbird on a windows XP pro 32-bit machine. My question is : Should I hunt something that is dovecot-related or is it MUA related ? And since I brought this up; Does anyone know if dovecot (v1.2.16) has any limits on user quota, message sizes and stuff like that ? Thank you kindly, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

3 2

[Dovecot] doveadm search not showing expected results
by btb＠bitrate.net 27 Feb '13

27 Feb '13

i'm running doveadm search: >doveadm search -A mailbox sent savedbefore 365d > and it's returning no results. a similar command does return some results: >doveadm search -A mailbox sent savedbefore 120d | grep -iF 'jdoe' jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 65 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 66 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 67 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 68 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 69 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 70 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 71 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 72 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 73 jdoe 7b9a8b0b7d37504fe72c000055e4fe9a 74 [...] however, i see many messages in the sent mailbox much older than 365 days: >l ~jdoe/mail/Maildir/.sent/cur/ total 82M -rw------- 1 jdoe jdoe 411 Jul 12 2011 1310503747.M652859P14078.flip,S=411,W=423:2,S -rw------- 1 jdoe jdoe 515 Jul 12 2011 1310523810.M800998P5307.flip,S=515,W=530:2,Sgh -rw------- 1 jdoe jdoe 1.4K Jul 17 2011 1310922140.M604706P14587.flip,S=1339,W=1378:2,Sgh -rw------- 1 jdoe jdoe 2.7K Jul 17 2011 1310955899.M58727P3373.flip,S=2731,W=2814:2,Sgh -rw------- 1 jdoe jdoe 4.1K Jul 18 2011 1311032789.M471208P19367.flip,S=4162,W=4284:2,Sgh -rw------- 1 jdoe jdoe 451 Jul 22 2011 1311363858.M21157P19993.flip,S=451,W=464:2,Sgh -rw------- 1 jdoe jdoe 461 Jul 23 2011 1311436347.M315008P29267.flip,S=461,W=474:2,Sgh -rw------- 1 jdoe jdoe 1.6K Jul 26 2011 1311731312.M902135P25749.flip,S=1607,W=1655:2,Sgh -rw------- 1 jdoe jdoe 888 Jul 31 2011 1312161704.M81319P3943.flip,S=888,W=911:2,Sgh -rw------- 1 jdoe jdoe 676 Aug 4 2011 1312512384.M809375P3684.flip,S=676,W=692:2,Sgh -rw------- 1 jdoe jdoe 556 Aug 6 2011 1312669537.M999983P18243.flip,S=556,W=571:2,Sgh -rw------- 1 jdoe jdoe 1.8K Aug 7 2011 1312737844.M921026P22678.flip,S=1769,W=1817:2,RSgh -rw------- 1 jdoe jdoe 2.5K Aug 8 2011 1312842718.M632088P24434.flip,S=2489,W=2559:2,Sgh -rw------- 1 jdoe jdoe 2.3K Aug 10 2011 1312997501.M29900P8705.flip,S=2254,W=2306:2,RSghi -rw------- 1 jdoe jdoe 1.2K Aug 10 2011 1312998375.M806199P8705.flip,S=1200,W=1223:2,S -rw------- 1 jdoe jdoe 2.8K Aug 10 2011 1312998687.M179687P8705.flip,S=2857,W=2931:2,S -rw------- 1 jdoe jdoe 1.9K Aug 10 2011 1313017076.M909199P8264.flip,S=1889,W=1941:2,Sgh -rw------- 1 jdoe jdoe 2.8K Aug 12 2011 1313172631.M470122P23201.flip,S=2822,W=2895:2,RSgh -rw------- 1 jdoe jdoe 3.3K Aug 16 2011 1313502988.M870415P19669.flip,S=3333,W=3413:2,RSghi -rw------- 1 jdoe jdoe 3.4K Aug 16 2011 1313523978.M484997P19669.flip,S=3447,W=3534:2,S -rw------- 1 jdoe jdoe 939 Aug 16 2011 1313545488.M796759P21368.flip,S=939,W=968:2,Sgh -rw------- 1 jdoe jdoe 3.9K Aug 17 2011 1313600016.M183385P25953.flip,S=3989,W=4092:2,S -rw------- 1 jdoe jdoe 1.3K Aug 22 2011 1314028430.M280232P10201.flip,S=1291,W=1326:2,S -rw------- 1 jdoe jdoe 943 Aug 22 2011 1314067361.M643189P1408.flip,S=943,W=967:2,Sgh -rw------- 1 jdoe jdoe 1.1K Aug 23 2011 1314114645.M26643P14083.flip,S=1108,W=1142:2,S -rw------- 1 jdoe jdoe 932 Aug 24 2011 1314237640.M473097P22476.flip,S=932,W=954:2,Sgh -rw------- 1 jdoe jdoe 5.8K Sep 1 2011 1314900538.M22534P26553.flip,S=5851,W=5976:2,Sgh [...] -rw------- 1 jdoe jdoe 423 Feb 17 13:00 1361124040.M492223P13245.xenon,S=423,W=436:2,Sab -rw------- 1 jdoe jdoe 423 Feb 17 13:02 1361124143.M127879P13245.xenon,S=423,W=436:2,Sab -rw------- 1 jdoe jdoe 412 Feb 17 14:13 1361128391.M812807P13644.xenon,S=412,W=425:2,Sab -rw------- 1 jdoe jdoe 1.6K Feb 18 21:12 1361239930.M525334P20966.xenon,S=1621,W=1660:2,Sab -rw------- 1 jdoe jdoe 422 Feb 19 20:53 1361325222.M901235P32184.xenon,S=422,W=435:2,Sab -rw------- 1 jdoe jdoe 1.8K Feb 19 21:06 1361325990.M129075P32180.xenon,S=1818,W=1864:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:13 1361326428.M381244P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:22 1361326968.M84809P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:24 1361327050.M328090P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 424 Feb 19 21:25 1361327139.M963578P32180.xenon,S=424,W=437:2,Sab -rw------- 1 jdoe jdoe 1.3K Feb 20 08:23 1361366627.M318860P22786.xenon,S=1230,W=1260:2,S -rw------- 1 jdoe jdoe 3.0K Feb 20 10:44 1361375042.M340353P5202.xenon,S=3019,W=3082:2,S -rw------- 1 jdoe jdoe 1.1K Feb 21 09:09 1361455754.M925454P13135.xenon,S=1025,W=1048:2,S -rw------- 1 jdoe jdoe 1.4K Feb 21 11:18 1361463526.M927071P13133.xenon,S=1344,W=1376:2,S -rw------- 1 jdoe jdoe 1.6K Feb 23 11:14 1361636078.M972572P18385.xenon,S=1636,W=1672:2,Sab -rw------- 1 jdoe jdoe 1.5K Feb 23 11:26 1361636803.M56491P18385.xenon,S=1490,W=1524:2,Sab -rw------- 1 jdoe jdoe 2.2K Feb 24 14:25 1361733929.M725648P18385.xenon,S=2178,W=2229:2,Sab > i do see these older messages properly listed and viewable in my imap client. how can i figure out what i'm doing wrong, and troubleshoot why doveadm doesn't seem to consider these message as matching? thanks -ben

2 2

[Dovecot] Deleted / read mails show up as new on remote imap clients
by Andre Bischof 27 Feb '13

27 Feb '13

Hi, I've one problem: Mails, which I already read or deleted via my IMAP client (Thunderbird) on the same machine running the server (it runs behind DynDNS on my local machine, thanks to http://mein.homelinux.com/wiki/mailserver/) show up again if I connect via IMAP from other client computers, i.e. my notebook (Thunderbird again). As you can see from the config below I have /home/user/Maildir, not /var/mail - is that the problem? Or is that anything else, resulting in status from emails not being stored (or not being available remote) in the responding dovecot files (dovecot.index?). Some month ago I migrated from Cyrus, and if I remember correct I had some problems with migrating subscriptions, stati and so on (one had to use a special script, sorry, it's been some time now) ;-) So maybe s.th. went wrong which could be the source of this problem? Just guessing ... Ok, here's my config: root@linux:/lost+found# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 auth_verbose = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } root@linux:/lost+found# root@linux:/lost+found# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.5.0-25-generic x86_64 Ubuntu 12.10 auth_verbose = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes list = yes location = prefix = separator = . type = private } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } root@linux:/lost+found# If you need other info pls let me know. Any help is greatly appreciated! Regards Andre -- rheinSinn - A. Bischof Gottesweg 46, 50969 Köln Tel. 0221 / 46 75 59 87 - Mob. 0179 / 510 45 92 andre.bischof(a)rheinsinn.de www.rheinsinn.de - www.coaching-evaluationen.de

4 9

[Dovecot] Converting a POP3 client to IMAP
by Kristen J. Webb 26 Feb '13

26 Feb '13

I have a dovecot 2.0 dovecot server set up for https/imap with spam, av, and some preliminary sieve filters in place. Our current email is outsourced and so we have used POP3 to keep all email on our systems for many years. I have run tests to move mail to the new imap server and that seems to work pretty well. However, we have lots of mail going back over a decade and used a lot of aliases that forwarded email to many users. I find the moving mail multiple times using Thunderbird results in multiple copies of the same email. Is there a best practice for moving mail such that we can take advantage of the hard link feature for all those older copies that are currently in POP3 files? It would also be nice to be able to auto file things. I don't see the sieve filters being activated when I copy mail in Thunderbird. Many thanks in advance for any guidance. Kris -- This message is NOT encrypted -------------------------------- Mr. Kristen J. Webb Chief Technology Officer Teradactyl LLC. 2450 Baylor Dr. S.E. Albuquerque, New Mexico 87106 Phone: 1-505-338-6000 Email: kwebb(a)teradactyl.com Web: http://www.teradactyl.com Providers of Scalable Backup Solutions for Unique Data Environments -------------------------------- NOTICE TO RECIPIENTS: Any information contained in or attached to this message is intended solely for the use of the intended recipient(s). If you are not the intended recipient of this transmittal, you are hereby notified that you received this transmittal in error, and we request that you please delete and destroy all copies and attachments in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited. Regular internet e-mail transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate, and it should not be relied upon as such. If you prefer to communicate with Teradactyl LLC. using secure (i.e., encrypted and/or digitally signed) e-mail transmission, please notify the sender. Otherwise, you will be deemed to have consented to communicate with Teradactyl via regular internet e-mail transmission. Please note that Teradactyl reserves the right to intercept, monitor, and retain all e-mail messages (including secure e-mail messages) sent to or from its systems as permitted by applicable law.

3 3

[Dovecot] Dict quota timeout error: Has anything changed in the latest versions?
by Alessio Cecchi 26 Feb '13

26 Feb '13

Hi, I'm using dict quota with mysql for track them via SQL query instead of read maildirsize file. Primary quota and enforcing is provided via userdb and is "maildir" type. Since dovecot 2.1.10-13 (but perhaps even before) when a new user log in via POP/IMAP or receive an email for the first time dovecot created the entry for the users in the table "quota" of dovecot database with quota usage and number of messages (before of this login/delivery the user has no entry in the quota table of dovecot DB). After the update to 2.1.14 when a new user login or receive an email for the first time dovecot was unable to create (immediately) the entry in quota table and in the log print these errors: Feb 12 11:03:49 master: Info: Dovecot v2.1.15 starting up (core dumps disabled) Feb 12 11:04:02 auth-worker(31421): Info: mysql(localhost): Connected to database vpopmail Feb 12 11:04:02 pop3-login: Info: Login: user=<alessio(a)domain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31422, secured, session=<eK4gJYTV1QB/AAAB> Feb 12 11:04:08 pop3(alessio(a)domain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=0/9, size=18618 Feb 12 11:04:41 pop3-login: Info: Login: user=<alessio(a)domain.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=31424, secured, session=<D7F0J4TV1gB/AAAB> Feb 12 11:05:11 pop3(alessio(a)domain.com): Info: Disconnected: Logged out top=0/0, retr=0/0, del=1/9, size=18618 Feb 12 11:05:11 dict: Info: mysql(10.10.3.19): Connected to database dovecot [ here is when I "quit" from telnet session] Feb 12 11:05:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:06:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:06:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:07:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:07:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:08:11 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds Feb 12 11:08:41 pop3(alessio(a)domain.com): Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds [ only now telnet close the session ] This is the telnet session: # telnet 0 110 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. +OK Dovecot ready. user alessio(a)domain.com +OK pass ciao +OK Logged in. list +OK 8 messages: 1 1594 2 1594 3 1594 4 1594 5 1594 6 1594 7 3755 8 3714 . dele 8 +OK Marked to be deleted. quit [ here dovecot wait about 3 minuts before close the connecctions ] +OK Logging out, messages deleted. Connection closed by foreign host. After 3 minutes of wait in the mysql database dovecot insert the entry for the new users: mysql> use dovecot Database changed mysql> select * from quota where username='alessio(a)domain.com'; +--------------------------+---------+----------+ | username | bytes | messages | +--------------------------+---------+----------+ | alessio(a)domain.com | 2144030 | 15 | +--------------------------+---------+----------+ Errors like Error: read(/usr/local/dovecot-2.1/var/run/dovecot/dict) failed: Timeout after 30 seconds were present also before the upgrade but they were occasional, now I had to disable "dict quota". Can this be fixed? My dovecot configuration: # cat /usr/local/dovecot-2.1/etc/dovecot/dovecot-dict-sql.conf.ext connect = host=10.10.3.19 dbname=dovecot user=dovecot password=XXX map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } # dovecot -n # 2.1.15: /usr/local/dovecot-2.1/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-xen-amd64 x86_64 Debian 6.0.6 auth_cache_size = 512 k auth_worker_max_count = 60 default_login_user = nobody dict { acl = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-share-folder.conf sqlquota = mysql:/usr/local/dovecot-2.1/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no dotlock_use_excl = no first_valid_gid = 89 first_valid_uid = 89 last_valid_gid = 89 last_valid_uid = 89 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot/dovecot.log mail_fsync = always mail_location = maildir:~/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = quota acl zlib maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /usr/local/dovecot-2.1/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/dovecot-2.1/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = proxy::acl quota = maildir:UserQuota quota2 = dict:User usage::proxy::sqlquota quota_rule2 = Trash:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_default = /usr/local/dovecot-2.1/etc/dovecot/sieve/default.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve sendmail_path = /var/qmail/bin/sendmail service auth { unix_listener auth-userdb { group = vchkpw mode = 0660 user = vpopmail } } service dict { unix_listener dict { group = vchkpw mode = 0660 user = vpopmail } } service imap-login { service_count = 0 } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { service_count = 0 } service quota-warning { executable = script /usr/local/dovecot-2.1/etc/dovecot/scripts/quota-warning.sh unix_listener quota-warning { user = vpopmail } user = vpopmail } ssl_cert = </etc/ssl/certs/wildcard.net.pem ssl_key = </etc/ssl/private/wildcard.net.key userdb { args = /usr/local/dovecot-2.1/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { log_path = /var/log/dovecot/lda.log mail_plugins = quota acl zlib sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 20 mail_plugins = quota acl zlib imap_quota imap_acl } protocol sieve { mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 5 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 4

Re: [Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 26 Feb '13

26 Feb '13

>---- Original Message ---- >From: Robert Schetterer <rs(a)sys4.de> >To: dovecot(a)dovecot.org >Sent: Вт, Фев 26, 2013, 5:55 PM >Subject: Re: [Dovecot] Sieve filters on folders, different from INBOX > >Am 26.02.2013 14:20, schrieb Valery V. Sedletski: >> Hi all >> >> Is it possible to configure Dovecot's sieve plugin to act on message >> arrival to folders, other than INBOX? > >sieve is invoked by lda or lmtp not "as arrive in inbox" > > >> I wish to move messages fetched by pop3 fetcher to special folder, or sort > >if you use i.e getmail and maildir it may possible > >look > >http://pyropus.ca/software/getmail/getmailrc-examples I use mpop with a shell wrapper script. The fetcher is working on IMAP server side (not on user side, as usual). So, it is used to pull email from several POP3 servers to our IMAP server. The mail is stored in Maildir++ format. Yes, it is possible to configure fetcher to sort messages to folders by its own means, but I'd like to implement the mail sorting by means of Sieve filters. The user can easy configure filters in webmail interface, then it work with any IMAP client, because it is done on IMAP server side. So, if sieve is invoked by lda, then, probably, I could invoke dovecot-lda from wrapper script on each mail after it is fetched? But then it will be copied to INBOX... -- Is it possible to specify the other folder to deliver to, to the deliver program? > >> outgoing mail to folders, specific > >outgoing mail is smtp, with i.e imap copy to sent folder etc >if you want other folders your imap client should do it > So, I can invoke Sieve interpreter from SMTP server, or process it via dovecot-lda, like in fetcher case? > >try i.e > >https://addons.mozilla.org/de/thunderbird/addon/send-filter/?src=search > > >> to their recipients. >> >> Thanhs in advance, > >i guess what you want in gneral ,is more advanced ( new ) handling >of mail workflow at all, look at list archives for more info on >some stuff you asked, some may work in the future with new features in >imap and sieve, but meanwhile you have to workaround > I used such features with my old POP3 client (it was the good old PMMail in OS/2). But it worked on POP3 client side, with local folders. It seemed to be not very advanced, but I just got a case to implement the same with Dovecot and Exim :) >> >> WBR, >> valery >> >> >> > > > >Best Regards >MfG Robert Schetterer > >-- >[*] sys4 AG > >http://sys4.de, +49 (89) 30 90 46 64 >Franziskanerstraße 15, 81669 München > >Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 >Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer >Aufsichtsratsvorsitzender: Joerg Heidrich

2 1

[Dovecot] Imap-login service count/limits
by Thomas Hummel 26 Feb '13

26 Feb '13

Hello Timo, I'm trying to configure dovecot-2.1.15 master correctly regarding imap-login limits. I want to use service_count=0 and I'm starting with something like this : #default_process_limit = 100 #default_client_limit = 1000 service imap-login { [...] service_count = 0 process_min_avail = 8 vsz_limit = 1024M } -> Does it make sense to set a process_limit if service_count = 0 ? why ? Doesn't service_count = 0 mean that no additionnal imap-login process would be created (except for process_min_avail) ? -> Does it make sense to set process_min_avail <> 0 if service_count = 0 ? why ? and if yes, what's the rule of thumb to find the correct value according to the number of connections estimation ? -> Assuming every client is configured to use STARTTLS and opens by default 5 imap connections, each client would consume 5 of the 1000 default_client_limit, right ? -> is 1024M too high for vsz_limit and may expose to memory leaks ? In other words, what limit should be raised to scale a lot a connections ? Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Groupe Exploitation et Infrastructure

1 2

[Dovecot] Sieve filters on folders, different from INBOX
by Valery V. Sedletski 26 Feb '13

26 Feb '13

Hi all Is it possible to configure Dovecot's sieve plugin to act on message arrival to folders, other than INBOX? I wish to move messages fetched by pop3 fetcher to special folder, or sort outgoing mail to folders, specific to their recipients. Thanhs in advance, WBR, valery

2 1

[Dovecot] Broken foldernames in mbox
by Peer Heinlein 26 Feb '13

26 Feb '13

I have a mbox-User with some crazy foldernames: -rw------- 1 vmail vmail 19238931 17. Dez 2011 Foo & Co -rw------- 1 vmail vmail 82415 19. Nov 22:06 Foo &- Co Dovecot can't handle that correctly: # dovecot mailbox list -u user Foo & Co Foo & Co dsyncing those folders produces some errors: dsync(awad): Error: Mailboxes don't have unique GUIDs: 228d0731cb186750e9150000a69b85fa is shared by Foo & Co and Foo & Co Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

[Dovecot] dsync can't sync mbox2mdbox two times
by Peer Heinlein 26 Feb '13

26 Feb '13

Hi, I have a server with Dovecot 2.1.x and I'm trying to convert mbox-storages to mdbox-storages. # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.7 mail_location = mbox:~/mail During the first run everything's okay, but if I run the migration a second time, the later migration is broken: root@mailstore1:/srv/vmail/cklein# rm -R mdbox/ root@mailstore1:/srv/vmail/cklein# doveadm -v -o mail_plugins=zlib sync -u cklein mdbox:/srv/vmail/cklein/mdbox dsync(cklein): Info: test: only in source (guid=0c323b1a430a7350c8590000a69b85fa) dsync(cklein): Info: saved-drafts: only in source (guid=a759b2290cda65504c590000a69b85fa) dsync(cklein): Info: inbox: only in source (guid=a84828310cda65504d590000a69b85fa) dsync(cklein): Info: sent-mail: only in source (guid=a859b2290cda65504c590000a69b85fa) dsync(cklein): Info: spam-mail: only in source (guid=a959b2290cda65504c590000a69b85fa) dsync(cklein): Info: mail-trash: only in source (guid=aa59b2290cda65504c590000a69b85fa) dsync(cklein): Info: Trash: only in source (guid=c0d2c117a785755049640000fd7d4449) dsync(cklein): Info: INBOX.test2: only in source (guid=d6c2d20a2bd013511d030000a69b85fa) dsync(cklein): Info: huhu: only in source (guid=e310ed050ecf1351c37d0000a69b85fa) root@mailstore1:/srv/vmail/cklein# doveadm -v -o mail_plugins=zlib sync -u cklein mdbox:/srv/vmail/cklein/mdbox dsync(cklein): Error: Can't rename mailbox inbox to INBOX: Target mailbox already exists This is what the mbox-folder of the user looks like: root@mailstore1:/srv/vmail/cklein# ls -la mail/ insgesamt 404 drwx------ 4 vmail vmail 4096 26. Feb 10:09 . drwx------ 5 vmail vmail 4096 18. Feb 23:20 .. -rw------- 1 vmail vmail 540 26. Feb 10:09 huhu drwx------ 17 vmail vmail 4096 7. Feb 17:02 .imap -rw------- 1 vmail vmail 97664 26. Feb 10:09 inbox -rw------- 1 vmail vmail 540 26. Feb 10:09 INBOX.test2 drwx------ 2 vmail vmail 4096 26. Feb 09:56 mail -rw------- 1 vmail vmail 18842 26. Feb 10:09 mail-trash -rw------- 1 vmail vmail 2768 26. Feb 10:09 saved-drafts -rw------- 1 vmail vmail 239274 26. Feb 10:09 sent-mail -rw------- 1 vmail vmail 540 26. Feb 10:09 spam-mail -rw------- 1 vmail vmail 78 7. Feb 16:56 .subscriptions -rw------- 1 vmail vmail 598 26. Feb 10:09 test -rw------- 1 vmail vmail 540 26. Feb 10:09 Trash And this is what Dovecot can see accessing the mbox-storage: root@mailstore1:/srv/vmail/cklein# doveadm mailbox list -u cklein test mail-trash saved-drafts sent-mail spam-mail Trash huhu INBOX.test2 inbox mail And this is what Dovecot can see accessing the mdbox-storage: root@mailstore1:/srv/vmail/cklein# doveadm -c /etc/dovecot/mdbox-test.conf mailbox list -u cklein sent-mail saved-drafts Trash spam-mail mail-trash mail huhu test INBOX INBOX.test2 Is it a bug renaming the inbox-Folder to uppercases or do I have a mistake in my mbox-structure? Peer -- Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

1 1

[Dovecot] 2.2.rc2: quota crash
by Lutz Preßler 26 Feb '13

26 Feb '13

Hello, 2.2.rc2 with configuration as sent with my last mail ("2.2beta2: LSUB broke"). The following sequence crashes with INBOX containing unseen message: * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE SEARCH=FUZZY COMPRESS=DEFLATE QUOTA ACL RIGHTS=texk] Logged in as user A0002 STATUS INBOX (MESSAGES UNSEEN) * STATUS INBOX (MESSAGES 5651 UNSEEN 5) A0002 OK Status completed. A0003 SELECT INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded \*)] Flags permitted. * 5651 EXISTS * 0 RECENT * OK [UNSEEN 5647] First unseen. * OK [UIDVALIDITY 1060286197] UIDs valid * OK [UIDNEXT 42051] Predicted next UID * OK [HIGHESTMODSEQ 6878] Highest A0003 OK [READ-WRITE] Select completed. A0004 UID SEARCH 5651 * SEARCH 42050 A0004 OK Search completed (0.000 secs). A0005 GETQUOTAROOT INBOX imap(4140, lpressl) : Panic: file mail-namespace.c: line 654 (mail_namespace_find): assertion failed: (ns != NULL) imap(4140, lpressl) : Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6079a) [0x7f617b7f679a] -> /usr/lib/dovecot/libdovecot.so.0(default_fatal_handler+0x32) [0x7f617b7f6882] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f617b7b7eaf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x760e2) [0x7f617bac30e2] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_namespace_find_unalias+0x19) [0x7f617bac3109] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(+0x5238) [0x7f617a7ec238] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_get_resource+0xb7) [0x7f617a7ec3b7] -> /usr/lib/dovecot/modules/lib10_quota_plugin.so(quota_root_iter_next+0xf1) [0x7f617a7ece11] -> /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so(+0x1bd5) [0x7f617a5e5bd5] -> /usr/lib/dovecot/imap(command_exec+0x3d) [0x41603d] -> /usr/lib/dovecot/imap() [0x415190] -> /usr/lib/dovecot/imap() [0x41527d] -> /usr/lib/dovecot/imap(client_handle_input+0x11d) [0x4154fd] -> /usr/lib/dovecot/imap(client_input+0x6f) [0x41587f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f617b805426] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f617b80647f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f617b8053c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f617b7bcb03] -> /usr/lib/dovecot/imap(main+0x2a7) [0x41eb07] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f617b452c8d] -> /usr/lib/dovecot/imap() [0x40b549] Abgebrochen GETQUOTAROOT directly after SELECT INBOX (without UID SEARCH) does not. No crash without imap_quota plugin either, of course... Regards, Lutz

2 1

[Dovecot] What to back up from a mdbox
by Dag Nygren 26 Feb '13

26 Feb '13

Hi short question to the list: - What parts of a mdbox mail store directory can I leave out from my backup? I can see huge *.cache files for eample. Can these be rebuilt? - Can dovecot recover from a backup "on the fly"? Best Dag

2 1

[Dovecot] Dovecot SASL: SCRAM-SHA-1 Authentication Fails
by Thomas Reim 26 Feb '13

26 Feb '13

Dear all, I use Dovecot SASL (2.1.15) on Ubuntu 12.04 for IMAP authentication and Postfix SASL authentication. I tried to setup SCRAM-SHA-1 as SASL mechanism. This works well on Dovecot's client side towards my OpenLDAP server (with libsasl-2), but fails on the server side (IMAP and SMTP). In the following, there's an extract from Dovecot's log, when using mutt as SMTP client: dovecot: auth: Debug: auth client connected (pid=0) dovecot: auth: Debug: client in: AUTH#0111#011 SCRAM-SHA-1#011 service=smtp#011 nologin#011 lip=192.168.0.65#011 rip=192.168.0.65#011 secured#011 resp=<hidden> dovecot: auth: scram-sha-1(?,192.168.0.65): authzid not supported dovecot: auth: Debug: client passdb out: FAIL#0111 postfix/smtpd[7621]: warning: markaurel.gas.de[192.168.0.65]: SASL SCRAM-SHA-1 authentication failed Here's the log, when using mutt as IMAP client: dovecot: auth: Debug: auth client connected (pid=23409) dovecot: auth: Debug: client in: AUTH#0111#011 SCRAM-SHA-1#011 service=imap#011 secured#011 session=<session ID>#011 lip=192.168.0.65#011 rip=192.168.0.65#011 lport=143#011 rport=36543#011 resp=<hidden> auth: scram-sha-1(?,192.168.0.65,<session ID>): authzid not supported auth: Debug: client passdb out: FAIL#0111 In the following is mutt's output: imap_authenticate: Trying method scram-sha-1 SASL local ip: 192.168.0.65;36543, remote ip:192.168.0.65;143 External SSF: 128 External authentication name: myname mutt_sasl_cb_authname: getting authname for mail.mydomain.local:143 mutt_sasl_cb_authname: getting user for mail.gas.de:143 mutt_sasl_cb_pass: getting password for myname@mail.mydomain.local:143 Authentifiziere (SCRAM-SHA-1)... 4> a0002 AUTHENTICATE SCRAM-SHA-1 <uuencoded string> 4< a0002 NO [AUTHENTICATIONFAILED] Authentication failed. IMAP queue drained imap_auth_sasl: scram-sha-1 failed I've configured mutt, so that it immediately retries the SASL authentication using DIGEST-MD5. This 2nd try is succesful and mutt gets access to the imap/smtp service. Any hints, what's going wrong here? Output of dovecot -n: # 2.1.15 (e33fe1a7bb89): /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-37-generic x86_64 Ubuntu 12.04.2 LTS auth_debug = yes auth_mechanisms = scram-sha-1 digest-md5 plain login auth_verbose = yes base_dir = /var/run/dovecot/ log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = vmail mail_location = mdbox:~/mdbox mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster@localhost protocols = imap lmtp quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail user = vmail } } service imap-login { inet_listener imap { address = 192.168.0.65 port = 143 } inet_listener imaps { address = 192.168.0.65 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 10 mail_plugins = " mail_log notify" }

2 1

[Dovecot] 2.1.12: Panic: file solr-connection.c: line 547 (solr_connection_post_more)
by Marc Schiffbauer 26 Feb '13

26 Feb '13

Hi all, I am having a problem indexing one of my mailboxes using the solr fts backend in dovecot 2.1.12 For many mailboxes it works just fine, but on one mailbox I currently always get a panic. solr setup: Java: icedtea 6.1.11.5 Solr: 3.6.2 running in tomcat 7.0.32 Command to reproduce error: doveadm index -u my@user badmailbox I already noticed that there have been some solr backend fixes just before 2.1.21 release... Is this another bug in the backend? Any idea? IMO relevant logs line parts: java.io.CharConversionException: Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) complete dovecot log: doveadm(my@user): Error: fts_solr: Invalid XML input at 85:198: mismatched tag (near: <html><head><title>Apache Tomcat/7.0.32-gentoo - Error report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:wh) doveadm(my@user): Panic: file solr-connection.c: line 547 (solr_connection_post_more): assertion failed: (maxfd >= 0) doveadm(my@user): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x4bcdb) [0x34fbd53ecdb] -> /usr/lib64/dovecot/libdovecot.so.0(default_fatal_handler+0x3a) [0x34fbd53edb8] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x34fbd50eeac] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(solr_connection_post_more+0x2a4) [0x34fbba81072] -> /usr/lib64/dovecot/lib21_fts_solr_plugin.so(+0x40a5) [0x34fbba7d0a5] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x462) [0x34fbbc8d6dc] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xd8c2) [0x34fbbc928c2] -> doveadm(+0x17a30) [0x264ecb7a30] -> doveadm(+0x13a45) [0x264ecb3a45] -> doveadm(+0x14762) [0x264ecb4762] -> doveadm(doveadm_mail_try_run+0x173) [0x264ecb4cfd] -> doveadm(main+0x3e9) [0x264ecbd0d5] -> /lib64/libc.so.6(__libc_start_main+0xfd) [0x34fbd16a48d] -> doveadm(+0x13809) [0x264ecb3809] Aborted complete java exception: Dec 31, 2012 4:12:58 AM org.apache.solr.core.SolrCore execute INFO: [] webapp=/solr-web path=/update params={} status=500 QTime=118 Dec 31, 2012 4:12:58 AM org.apache.solr.common.SolrException log SEVERE: java.lang.RuntimeException: [was class java.io.CharConversionException] Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) at com.ctc.wstx.util.ExceptionUtil.throwRuntimeException(ExceptionUtil.java:18) at com.ctc.wstx.sr.StreamScanner.throwLazyError(StreamScanner.java:731) at com.ctc.wstx.sr.BasicStreamReader.safeFinishToken(BasicStreamReader.java:3657) at com.ctc.wstx.sr.BasicStreamReader.getText(BasicStreamReader.java:809) at org.apache.solr.handler.XMLLoader.readDoc(XMLLoader.java:315) at org.apache.solr.handler.XMLLoader.processUpdate(XMLLoader.java:156) at org.apache.solr.handler.XMLLoader.load(XMLLoader.java:79) at org.apache.solr.handler.ContentStreamHandlerBase.handleRequestBody(ContentStreamHandlerBase.java:58) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:129) at org.apache.solr.core.SolrCore.execute(SolrCore.java:1376) at org.apache.solr.servlet.SolrDispatchFilter.execute(SolrDispatchFilter.java:365) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:260) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Unknown Source) at org.apache.catalina.core.ApplicationFilterChain.doFilter(Unknown Source) at org.apache.catalina.core.StandardWrapperValve.invoke(Unknown Source) at org.apache.catalina.core.StandardContextValve.invoke(Unknown Source) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(Unknown Source) at org.apache.catalina.core.StandardHostValve.invoke(Unknown Source) at org.apache.catalina.valves.ErrorReportValve.invoke(Unknown Source) at org.apache.catalina.valves.AccessLogValve.invoke(Unknown Source) at org.apache.catalina.core.StandardEngineValve.invoke(Unknown Source) at org.apache.catalina.connector.CoyoteAdapter.service(Unknown Source) at org.apache.coyote.http11.AbstractHttp11Processor.process(Unknown Source) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Unknown Source) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(Unknown Source) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:679) Caused by: java.io.CharConversionException: Invalid UTF-8 start byte 0xf8 (at char #483989, byte #532382) at com.ctc.wstx.io.UTF8Reader.reportInvalidInitial(UTF8Reader.java:302) at com.ctc.wstx.io.UTF8Reader.read(UTF8Reader.java:188) at com.ctc.wstx.io.ReaderSource.readInto(ReaderSource.java:84) at com.ctc.wstx.io.BranchingReaderSource.readInto(BranchingReaderSource.java:57) at com.ctc.wstx.sr.StreamScanner.loadMore(StreamScanner.java:992) at com.ctc.wstx.sr.BasicStreamReader.readTextSecondary(BasicStreamReader.java:4628) at com.ctc.wstx.sr.BasicStreamReader.readCoalescedText(BasicStreamReader.java:4126) at com.ctc.wstx.sr.BasicStreamReader.finishToken(BasicStreamReader.java:3701) at com.ctc.wstx.sr.BasicStreamReader.safeFinishToken(BasicStreamReader.java:3649) ... 25 more TIA -Marc -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich

4 9

[Dovecot] Dovecot auth works when tested with doveadm, but fails with Postfix
by Darren Pilgrim 25 Feb '13

25 Feb '13

I have three postfix 2.9.5 servers: chombo, rush, yoshi. Chombo relays to rush and yoshi for outbound email. Outbound relay requires SASL authentication. Rush and yoshi run Dovecot 2.1.12 servers with simple passwd-file backends. If I create a new password hash for chombo's user, houseloki, on either rush or yoshi: # doveadm pw -u houseloki -p <password> {CRAM-MD5}... Then I add that to rush and yoshi's passwd file: houseloki@_auth.bluerosetech.com:{CRAM-MD5}... Then `doveadm reload`, it works fine: # doveadm auth houseloki <password> passdb: houseloki auth succeeded extra fields: user=houseloki(a)_auth.bluerosetech.com So I add that username and password to the smtp_sasl_password_maps hash file on chombo, reload postfix, and then try to relay something from chombo, it fails with rush and yoshi logging warnings like: Feb 19 03:32:33 yoshi postfix/smtpd[75783]: warning: chombo.example.com[2001:db8::2]: SASL DIGEST-MD5 authentication failed: <really long string redacted> Rush and yoshi have other hashes in their passwd files, and if I configure chombo to use one of those, it works fine. Those hashes use digest-md5 and are at least a few years old. I tried that scheme instead of the default cram-md5, as well as several others, but none work. I've poured over the wiki and man pages, but can't find the problem. What am I missing? Why can I not generate new hashes correctly?

2 3

Re: [Dovecot] v2.2.rc1 released
by Michael Grimm 25 Feb '13

25 Feb '13

> Please test and report any bugs found. New in rc1: | doveconf: Error: dlopen(/.../lib/dovecot/settings/libmanagesieve_login_settings.so) failed: /.../lib/dovecot/settings/libmanagesieve_login_settings.so: Undefined symbol "hook_config_parser_begin" | doveconf: Error: dlopen(/.../lib/dovecot/settings/libmanagesieve_settings.so) failed: /.../lib/dovecot/settings/libmanagesieve_settings.so: Undefined symbol "mail_user_setting_parser_info" | doveconf: Error: protocols: Unknown protocol: sieve | doveconf: Fatal: Error in configuration file /.../etc/dovecot/dovecot.conf: protocols: Unknown protocol: sieve Regards, Michael

3 9

[Dovecot] 2.2beta2: LSUB broken
by Lutz Preßler 25 Feb '13

25 Feb '13

Hello, I have some problems with (listing) subscriptions on my test system running 2.2beta2 (compared with 2.1.15, configuration and Maildir content unchanged): With 2.1.15: 0 lsub "" "*" * LSUB () "." "INBOX.Trash" * LSUB () "." "INBOX.in2009" * LSUB () "." "INBOX.test" * LSUB () "." "INBOX.test.test2" * LSUB () "." "INBOX.in2010" * LSUB () "." "INBOX.in" * LSUB () "." "INBOX.virtual.small" * LSUB () "." "INBOX.virtual.sent" * LSUB () "." "INBOX.virtual.allin" * LSUB () "." "INBOX.virtual.week" * LSUB () "." "INBOX.virtual.gmail" 0 OK Lsub completed. With 2.2beta2 (output of doveconf -n attached): 0 lsub "" "*" 0 OK Lsub completed. ... empty list. Same with "list (subscribed)". After disableing the "virtual" namespace in the config, it gets: 0 lsub "" "*" * LSUB () "." Trash * LSUB () "." in2009 * LSUB () "." test * LSUB () "." test.test2 * LSUB () "." in2010 * LSUB () "." in * LSUB () "." INBOX.Trash * LSUB () "." INBOX.in2009 * LSUB () "." INBOX.test * LSUB () "." INBOX.test.test2 * LSUB () "." INBOX.in2010 * LSUB () "." INBOX.in 0 OK Lsub completed. Note mailboxes listed with and without INBOX. prefix. Thanks, Lutz

2 3

[Dovecot] v2.2.rc1 released
by Timo Sirainen 25 Feb '13

25 Feb '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc1.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc1.tar.gz.sig A few fixes since beta2. Also added tcp and tcps (=tcp+ssl) targets for dsync, where the destination needs to be a doveadm-server listener. I'm planning on releasing v2.2.0 in 1-2 weeks if no major problems are found. Please test and report any bugs found. BTW. I've also gone through basically all of my unread emails. If you haven't gotten a reply to something, ask again. Here's again all the biggest changes since v2.1: * When creating home directories, the permissions are copied from the parent directory if it has setgid-bit set. For full details, see http://wiki2.dovecot.org/SharedMailboxes/Permissions * "doveadm auth" command was renamed to "doveadm auth test" * IMAP: ID command now advertises server name as Dovecot by default. It was already trivial to guess this from command replies. * dovecot.index.cache files can be safely accessed only by v2.1.11+. Older versions may think they're corrupted and delete them. * LDA/LMTP: If saving a mail brings user from under quota to over quota, allow it based on quota_grace setting (default: 10% above quota limit). * pop3_lock_session=yes now uses a POP3-only dovecot-pop3-session.lock file instead of actually locking the mailbox (and causing IMAP/LDA/LMTP to wait for the POP3 session to close). * mail_shared_explicit_inbox setting's default switched to "no". * ssl_client_ca_dir setting replaced imapc_ssl_ca_dir and pop3c_ssl_ca_dir settings. + Implemented IMAP MOVE and BINARY extensions + Implemented IMAP CATENATE, URLAUTH and URLAUTH=BINARY extensions (by Stephan Bosch). + Implemented IMAP NOTIFY extension. Requires mailbox_list_index=yes to be enabled. + Redesigned and rewritten dsync. The new design makes the syncing faster, more reliable and more featureful. The new dsync protocol isn't backwards compatible with old dsync versions (but is designed to be forwards compatible with future versions). + All mailbox formats now support per-user message flags for shared mailboxes by using a private index. It can be enabled by adding :INDEXPVT=<path> to mail location. This should be used instead of :INDEX also for Maildir/mbox to improve performance. + Improved mailbox list indexes. They should be usable now, although still disabled by default. + Added LAYOUT=index. The mailbox directories are created using their GUIDs in the filesystem, while the actual GUID <-> name mapping exists only in the index. + LMTP proxy: Implemented XCLIENT extension for passing remote IP address through proxy.

1 0

[Dovecot] Bug when a duplicated file is found
by Angel L. Mateo 25 Feb '13

25 Feb '13

Hello, Last days we had to restore some mailboxes from backup. Our mailboxes are in maildir format and during restore, some duplicated files appeared. The situation is: * A user has messages in his new directory when the backup is made * In some moment after the backup is done, the user accesses to his mailbox, so the message is move to the cur directory. * We restore his mailbox directly to his maildir path, so the message is now at new directory too. When this happens, dovecot detect it and it renames one of the files. This is the reported log: Feb 13 23:08:05 myotis31 dovecot: imap(<user>): Warning: Fixed a duplicate: /home/alumnos/59/122559/Maildir/cur/1360169810.M670208P13643.myotis31,S=6282,W=6409:2, -> 1360793285.M721935P29136.myotis31 The problem with this is that we are using zlib plugin so messages are compressed. When the rename is done, the rename is to a name without the S=XXXX field (neither the W=XXX, although this field is less sensible), so the result is that user's can't access to any message after this one. I think than in this situation, rename one of the files is a good solution (although it provokes duplicate mails, but this an expected/acceptable situation after the restore), but the rename should maintain the S= and W= fields (and even other maildir flags). -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

3 3

[Dovecot] SSL errors for just one client after updaing both dovecot and openssl
by Charles Marcus 25 Feb '13

25 Feb '13

Hi all, Ok, I have a strange problem after updating both dovecot and openssl... OpenSSL was 1.0.0j, now updated to 1.0.1c Dovecot was 2.1.13, now updated to 2.1.15 I'm getting a bunch of lines like the following: Feb 23 10:48:01 myhost dovecot: imap-login: Disconnected (no auth attempts in 29 secs): user=<>, rip=#.#.#.#, lport=993, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<In+cO2bWngCthJz2> where only the session id (and number of seconds for no auth attempts) is different... This is happening for only the one client. All other clients - I've counted about 25 so far - are working fine. Anyone have any ideas? I can't believe it is a generic openssl problem, since it is only affecting the one client. I've contacted him and asked him to reboot any/all devices that connect to our mail to see if that helps... -- Best regards, */Charles/*

3 3

[Dovecot] understanding namespace configuration
by btb＠bitrate.net 25 Feb '13

25 Feb '13

i'm a little confused about namespace configuration. reading http://wiki2.dovecot.org/Namespaces , and looking at the examples, it seems that when a namespace is declared, you can either do "namespace { ..." or "namespace foo { ..." - i'm having trouble finding clarity on the significance of "foo" though. it would appear it's not required, but then what is its purpose? what does it mean? does it imply something? it's also unclear to me how to create the "default private namespace". i see that there are three types of namespaces, but the list of namespace settings doesn't seem to include a parameter to set the namespace type. what am i missing? it's also not quite clear how to denote a namespace as "default". from coming across this thread [ http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001077.ht… ] it would indicate in theory that a namespace is denoted as default by using an empty prefix - but i wasn't able to find corroboration of that in dovecot's documentation. thanks -ben

2 3

[Dovecot] dovecot-2.2: broken domain quota calculation
by Evgeny Basov 25 Feb '13

25 Feb '13

Hello. Used next version of dovecot: # dovecot --version 20130205 (03a0af22100d+) Quota configuration: plugin { quota = dict:Domain quota:%d:redis:host=127.0.0.1:prefix=domain/ quota_rule = *:storage=0 quota_rule2 = Trash:storage=+5%% quota2 = dict:User quota::redis:host=127.0.0.1:prefix=user/ quota2_rule = *:storage=0 quota2_rule2 = Trash:storage=+5%% } Problem: incorrect quota calculations. Dovecot gets size and messages count of all domain from last user in list. In 2.1 works fine. Steps to reproduce problem: 1. install dovecot 2. create over 50 users with e-mails 3. execute: doveadm quota recalc -A 4. execute: doveadm quota get -A 5. get count of all users message: sum in some application result of execution doveadm quota get -A | grep MESSAGE | grep 'User quota' | awk '{print $5}' (139443 messages) 6. get size of all users message: sum in some application result of execution doveadm quota get -A | grep STORAGE | grep 'User quota' | awk '{print $5}' (2304399 Kb) 7. look at some user user(a)example.org Domain quota STORAGE 82408 51200000 0 user(a)example.org Domain quota MESSAGE 1078 - 0 user(a)example.org User quota STORAGE 0 209715200 0 user(a)example.org User quota MESSAGE 0 - 0 and see 1078 messages and 82408 Kb in domain quota 8. look at last user in list z(a)example.org Domain quota STORAGE 82408 51200000 0 z(a)example.org Domain quota MESSAGE 1078 - 0 z(a)example.org User quota STORAGE 82408 209715200 0 z(a)example.org User quota MESSAGE 1078 - 0 and see matching values.

2 2

[Dovecot] Possible sort optimization (?)
by Michael M Slusarz 25 Feb '13

25 Feb '13

Maybe this is just noise... but I can reproduce this fairly reliably. Mailbox with 21,000+ messages This query: a UID SORT RETURN (ALL COUNT) (DATE) UTF-8 SUBJECT "foo" is always about 10 percent slower than this split query (I've done this 4-5 times, and the numbers are similar): a UID SEARCH RETURN (SAVE) CHARSET UTF-8 SUBJECT "foo" b UID SORT RETURN (ALL COUNT) (DATE) UTF-8 UID $ (The particular query I used matched 5 messages out of the 21,000+) My not-very-scientific benchmarking process: 1.) Stop dovecot process 2.) Delete all dovecot index files for that mailbox 3.) Flush linux paging cache (sync && echo 3 > /proc/sys/vm/drop_caches) 4.) Restart dovecot 5.) Access dovecot via command-line (PREAUTH) 6.) SELECT mailbox 7.) Issue command(s) Could be a potential area for performance improvement or could simply be lazy benchmarking. michael

2 2

[Dovecot] Problem with the command hooks api
by Tony 24 Feb '13

24 Feb '13

I have been trying to use the command hook api in an experimental plugin I have written. The hook is registered using the command_hook_register function, and for most commands my hook functions get called once as expected. But when the client uses one of the "UID" commands (e.g. "UID FETCH" ) the hook functions are executed twice. I am using dovecot version 2.1.12. Am I correct in thinking this is a bug? If I am wrong and this is the intended behaviour, how should I detect whether the hook function call is the first or second for a client's command (in particular for the 'post command' hook)? Assuming it is a bug, I modified the code in the command_exec function to stop the second hook call, a patch for this is below. This appears to apply to later dovecot releases as well. I am happy for this code to be included in future releases of dovecot. Thanks, Tony. diff -ur -x .deps -x Makefile dovecot-2.1.12-orig/src/imap/imap-commands.c dovecot-2.1.12-mod/src/imap/imap-commands.c --- dovecot-2.1.12-orig/src/imap/imap-commands.c 2012-03-22 12:59:17.000000000 +0000 +++ dovecot-2.1.12-mod/src/imap/imap-commands.c 2013-02-20 17:15:50.000000000 +0000 @@ -38,7 +38,7 @@ { "FETCH", cmd_fetch, COMMAND_FLAG_USES_SEQS }, { "SEARCH", cmd_search, COMMAND_FLAG_USES_SEQS }, { "STORE", cmd_store, COMMAND_FLAG_USES_SEQS }, - { "UID", cmd_uid, 0 }, + { "UID", cmd_uid, COMMAND_FLAG_HOOKS_DELAY }, { "UID COPY", cmd_copy, COMMAND_FLAG_BREAKS_SEQS }, { "UID FETCH", cmd_fetch, COMMAND_FLAG_BREAKS_SEQS }, { "UID SEARCH", cmd_search, COMMAND_FLAG_BREAKS_SEQS }, @@ -142,12 +142,20 @@ { const struct command_hook *hook; bool ret; + bool exec_hooks = FALSE; - array_foreach(&command_hooks, hook) - hook->pre(cmd); + if ( !(cmd->cmd_flags & COMMAND_FLAG_HOOKS_DELAY)) { + exec_hooks = TRUE; + array_foreach(&command_hooks, hook) + hook->pre(cmd); + } ret = cmd->func(cmd); - array_foreach(&command_hooks, hook) - hook->post(cmd); + + if (exec_hooks != FALSE) + { + array_foreach(&command_hooks, hook) + hook->post(cmd); + } return ret; } diff -ur -x .deps -x Makefile dovecot-2.1.12-orig/src/imap/imap-commands.h dovecot-2.1.12-mod/src/imap/imap-commands.h --- dovecot-2.1.12-orig/src/imap/imap-commands.h 2011-12-13 11:35:28.000000000 +0000 +++ dovecot-2.1.12-mod/src/imap/imap-commands.h 2013-02-20 17:15:44.000000000 +0000 @@ -30,7 +30,9 @@ Dovecot internally returns it for all kinds of commands, but unfortunately RFC 5530 specifies it only for "delete something" operations. */ - COMMAND_FLAG_USE_NONEXISTENT = 0x10 + COMMAND_FLAG_USE_NONEXISTENT = 0x10, + /* Set when need to delay command hook function calls due to recursive command_exec() */ + COMMAND_FLAG_HOOKS_DELAY = 0x20 }; struct command {

2 1

[Dovecot] LMTP logging
by Peter Rindfuss 24 Feb '13

24 Feb '13

Hi, Is there a way (in Dovecot 2.1.14) to sent LMTP log entries and IMAP log entries to different files? I know I could achieve this with syslog-ng, but as LDA has a log file of its own, I am wondering if this is possible with LMTP as well. I apologize if I missed something in the wiki. Thanks, Peter

3 5

[Dovecot] Problem importing mail from maildir directory
by Thomas Koeller 24 Feb '13

24 Feb '13

Hi, I am trying to import mail from a maildir directory into dovecot using the 'doveadm import' command: ----------- bash-4.0$ doveadm -D import -u marion maildir:${HOME}/Mail '' ALL doveadm(marion): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(marion): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so doveadm(marion): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(marion): Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so doveadm(marion): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(marion): Debug: Effective uid=10001, gid=10000, home=/home/marion doveadm(marion): Debug: quota: No quota setting - plugin disabled doveadm(marion): Debug: maildir++: root=/home/marion/Mail, index=, control=, inbox=/home/marion/Mail, alt= doveadm(marion): Debug: Effective uid=10001, gid=10000, home=/home/marion doveadm(marion): Debug: quota: No quota setting - plugin disabled doveadm(marion): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/marion doveadm(marion): Debug: fs: root=/home/marion/mail, index=, control=, inbox=/var/spool/mail/marion, alt= ----------- What I get is - no mails are imported - no error messages are output - nothing is written to the system log in other words, nothing happens at all. Any hints? tk

2 1

[Dovecot] make install fails on Solaris 10
by Henrik Johansson 23 Feb '13

23 Feb '13

Hello, I am trying to build dovecot-2.1.15 on Solaris 10 update 10 with Solaris Studio 12.3 and get this error: /bin/bash ../../libtool --tag=CC --mode=link /opt/SUNWspro/bin/cc -fast -xipo=2 -I/usr/sfw/include -I/usr/sfw/include -no-undefined -o doveadm doveadm-mail.o doveadm-mail-altmove.o doveadm-mail-expunge.o doveadm-mail-fetch.o doveadm-mail-import.o doveadm-mail-index.o doveadm-mail-iter.o doveadm-mail-mailbox.o doveadm-mail-mailbox-status.o doveadm-mail-copymove.o doveadm-mailbox-list-iter.o doveadm-mail-search.o doveadm-mail-server.o doveadm-print.o doveadm-settings.o doveadm-util.o server-connection.o doveadm.o doveadm-auth.o doveadm-director.o doveadm-dump.o doveadm-dump-dbox.o doveadm-dump-index.o doveadm-dump-log.o doveadm-dump-mailboxlog.o doveadm-dump-thread.o doveadm-instance.o doveadm-kick.o doveadm-log.o doveadm-master.o doveadm-mount.o doveadm-mutf7.o doveadm-penalty.o doveadm-print-flow.o doveadm-print-pager.o doveadm-print-tab.o doveadm-print-table.o doveadm-proxy.o doveadm-pw.o doveadm-sis.o doveadm-stats.o doveadm-who.o dsync/libdsync.a ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib-otp/libotp.a ../../src/lib-storage/libdovecot-storage.la -R/usr/sfw/lib -L/usr/sfw/lib -lssl -lcrypto -lsocket -lnsl -ldl ../../src/lib-dovecot/libdovecot.la -export-dynamic -lnsl -lsocket -lrt -lsendfile libtool: link: /opt/SUNWspro/bin/cc -fast -xipo=2 -I/usr/sfw/include -I/usr/sfw/include -o .libs/doveadm doveadm-mail.o doveadm-mail-altmove.o doveadm-mail-expunge.o doveadm-mail-fetch.o doveadm-mail-import.o doveadm-mail-index.o doveadm-mail-iter.o doveadm-mail-mailbox.o doveadm-mail-mailbox-status.o doveadm-mail-copymove.o doveadm-mailbox-list-iter.o doveadm-mail-search.o doveadm-mail-server.o doveadm-print.o doveadm-settings.o doveadm-util.o server-connection.o doveadm.o doveadm-auth.o doveadm-director.o doveadm-dump.o doveadm-dump-dbox.o doveadm-dump-index.o doveadm-dump-log.o doveadm-dump-mailboxlog.o doveadm-dump-thread.o doveadm-instance.o doveadm-kick.o doveadm-log.o doveadm-master.o doveadm-mount.o doveadm-mutf7.o doveadm-penalty.o doveadm-print-flow.o doveadm-print-pager.o doveadm-print-tab.o doveadm-print-table.o doveadm-proxy.o doveadm-pw.o doveadm-sis.o doveadm-stats.o doveadm-who.o dsync/libdsync.a ../auth/libpassword.a ../lib-ntlm/libntlm.a ../lib-otp/libotp.a ../../src/lib-storage/.libs/libdovecot-storage.so -L/usr/sfw/lib /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so -lssl -lcrypto -ldl ../../src/lib-dovecot/.libs/libdovecot.so -lnsl -lsocket -lrt -lsendfile -R/opt/HNKSdovecot/lib/dovecot -R/usr/sfw/lib ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file ld: warning: file ../../src/lib-dovecot/.libs/libdovecot.so: linked to /home/henrikj/Build/dovecot-2.1.15/src/lib-dovecot/.libs/libdovecot.so: attempted multiple inclusion of file Undefined first referenced symbol in file $XBKaiwbjOCHRV5w.array_append_array_i..L93 dsync/libdsync.a(dsync-brain.o) $XBKaiwbjOCHRV5w.array_append_array_i..L94 dsync/libdsync.a(dsync-brain.o) $XBKaiwbjOCHRV5w.array_append_array_i..L95 dsync/libdsync.a(dsync-brain.o) ld: fatal: symbol referencing errors. No output written to .libs/doveadm *** Error code 2 make: Fatal error: Command failed for target `doveadm' Current working directory /home/henrikj/Build/dovecot-2.1.15/src/doveadm *** Error code 1 Any suggestions? Thanks Henrik

1 0

Re: [Dovecot] problems with imaps
by Joseph Tam 23 Feb '13

23 Feb '13

On 2013-02-22, Matthias Leopold wrote: > with thunderbird 10.0.12 i can't connect to port 993 and get errors in > the logs like > > TLS: SSL_read() failed: error:14094412:SSL > routines:SSL3_READ_BYTES:sslv3 alert bad certificate > > (certificate generated by dovecot mkcert.sh) I haven't come across any problems with our use of self-signed certificates, but I run the latest 2.1.x dovecot so maybe there's some SSL changes between our version and your's. The fact that the same certificate works for other clients, and also for TLS on Thunderbird seem to suggest Thunderbird is fumbling it. But maybe you can try the command diagnostic from the command line "openssl s_client -connect yourserver:993 ..." or use one of the online certificate checkers to get some useful diagnostics. > TLS: SSL_read() failed: error:14094418:SSL > routines:SSL3_READ_BYTES:tlsv1 alert unknown ca This error entry pops up in my logs once in a while. I think the error might be misleading since the error message happen in the middle of a long sequence of successful connections. Also check that the client is actually using the right security mode (not TLS or clear), perhaps by doing a network snoop. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] doveadm user error messages
by Thomas Leuxner 22 Feb '13

22 Feb '13

I use 'doveadm user' in some scripts and the exit codes are fine for my purposes. During tests it transpired that Dovecot 2.1 would give an error message when querying for non-existent users. Dovecot 2.2 just exits without a word. Not sure this is intended behaviour: $ doveadm user foo $ echo $? 67 $ id foo id: foo: No such user Regards Thomas

2 2

[Dovecot] assert in mail-transaction-log-file.c
by Anton Yuzhaninov 22 Feb '13

22 Feb '13

I setup new server with dovecot 2.1.12 and mboxes from backup (moboxes was used with dovecot 1.1.6). OS: FreeBSD 8.3-STABLE, amd64. All index files from dovecot 1.1.6 has been deleted. Some times dovecot processes aborted. E. g. Jan 25 03:01:52 ost dovecot: lda(user(a)example.ru): Panic: file mail-transaction-log-file.c: line 1694 (mail_transaction_log_file_map): assertion failed: (file->buffer != NULL) (gdb) bt #0 0x0000000800bd610c in kill () from /lib/libc.so.7 #1 0x0000000800bd4f0b in abort () from /lib/libc.so.7 #2 0x000000080099b339 in default_fatal_finish (type=72898, status=0) at failures.c:191 #3 0x000000080099b3be in i_syslog_fatal_handler (ctx=<value optimized out>, format=<value optimized out>, args=<value optimized out>) at failures.c:413 #4 0x000000080099a8a3 in i_panic (format=<value optimized out>) at failures.c:263 #5 0x000000080081bdb6 in mail_transaction_log_file_map (file=0x801670e00, start_offset=40, end_offset=18446744073709551615) at mail-transaction-log-file.c:1694 #6 0x000000080081da41 in mail_transaction_log_view_set (view=0x801654a80, min_file_seq=1, min_file_offset=40, max_file_seq=2, max_file_offset=18446744073709551615, reset_r=0x7fffffffbedf) at mail-transaction-log-view.c:228 #7 0x000000080081519d in mail_index_sync_map (_map=0x801670b08, type=MAIL_INDEX_SYNC_HANDLER_HEAD, force=false) at mail-index-sync-update.c:950 #8 0x0000000800805be0 in mail_index_map (index=0x801670a80, type=MAIL_INDEX_SYNC_HANDLER_HEAD) at mail-index-map-read.c:415 #9 0x0000000800800bde in mail_index_refresh (index=<value optimized out>) at mail-index.c:735 #10 0x00000008007b2344 in mbox_sync_header_refresh (mbox=0x801680840) at mbox-sync.c:1652 #11 0x00000008007b24e2 in mbox_sync_has_changed_full (mbox=0x801680840, leave_dirty=true, empty_r=0x7fffffffe2e8) at mbox-sync.c:1729 #12 0x00000008007ae1a7 in mbox_save_begin (_ctx=0x80161a500, input=0x801669660) at mbox-save.c:296 #13 0x00000008018025ae in notify_save_begin (ctx=0x80161a500, input=0x801669660) at notify-storage.c:130 #14 0x00000008014261fd in quota_save_begin (ctx=0x80161a500, input=0x801669660) at quota-storage.c:251 #15 0x00000008007cfecc in mailbox_save_begin (ctx=0x7fffffffe3d0, input=0x801669660) at mail-storage.c:1652 #16 0x00000008007ca48d in mail_storage_copy (ctx=0x80161a500, mail=0x801637040) at mail-copy.c:68 #17 0x000000080180269d in notify_copy (ctx=0x80161a500, mail=0x801637040) at notify-storage.c:105 #18 0x00000008014262f6 in quota_copy (ctx=0x80161a500, mail=0x801637040) at quota-storage.c:200 #19 0x00000008007cfe04 in mailbox_copy (_ctx=<value optimized out>, mail=0x801637040) at mail-storage.c:1721 #20 0x0000000801b4b706 in act_store_execute (action=<value optimized out>, aenv=0x8016a3070, tr_context=<value optimized out>) at sieve-actions.c:551 #21 0x0000000801b428de in sieve_result_execute (result=0x8016a3040, keep=0x0) at sieve-result.c:1117 #22 0x0000000801b52d5a in sieve_execute (sbin=<value optimized out>, msgdata=<value optimized out>, senv=<value optimized out>, ehandler=<value optimized out>, flags=<value optimized out>, keep=0x0) at sieve.c:508 #23 0x0000000801a0aec6 in lda_sieve_deliver_mail (mdctx=0x7fffffffe970, storage_r=0x7fffffffe8e8) at lda-sieve-plugin.c:424 #24 0x0000000800651735 in mail_deliver (ctx=0x7fffffffe970, storage_r=0x7fffffffe8e8) at mail-deliver.c:390 #25 0x0000000000402ffa in main (argc=6, argv=0x7fffffffea78) at main.c:434 (gdb) f 5 (gdb) p *file $1 = {log = 0x8016463d0, next = 0x0, refcount = 5, filepath = 0x801620420 "(in-memory index).log", fd = -1, st_ino = 13919248, st_dev = 109, last_mtime = 1359082912, last_size = 0, hdr = {major_version = 1 '\001', minor_version = 2 '\002', hdr_size = 40, indexid = 1359082912, file_seq = 2, prev_file_seq = 0, prev_file_offset = 0, create_stamp = 1359082912, initial_modseq = 0, compat_flags = 1 '\001', unused = "\000\000", unused2 = 0}, mmap_buffer = {data = 0x0, used = 0, priv = {0x0, 0x0, 0x0, 0x0, 0x0}}, buffer = 0x0, buffer_offset = 0, mmap_base = 0x0, mmap_size = 0, sync_offset = 40, sync_highest_modseq = 0, saved_tail_offset = 0, max_tail_offset = 0, saved_tail_sync_offset = 0, index_deleted_offset = 0, index_undeleted_offset = 0, modseq_cache = {{offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, { offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, { offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}, {offset = 0, highest_modseq = 0}}, file_lock = 0x0, lock_created = 0, locked = 0, locked_sync_offset_updated = 0, corrupted = 0} Also same aborts can happen in imap processes: Jan 24 16:35:04 ost dovecot: imap(user(a)example.ru): Panic: file mail-transaction-log-file.c: line 1694 (mail_transaction_log_file_map): assertion failed: (file->buffer != NULL) -- Anton Yuzhaninov

2 2

[Dovecot] Ubuntu-12.04 packages for latest Dovecot release
by 3.listas＠adminlinux.com.br 22 Feb '13

22 Feb '13

Hi, Does anyone here know a trusted package repository for Ubuntu LTS which has always the latest version of Dovecot? Thanks ! -- Thiago Henrique adminlinux.com.br

3 4

[Dovecot] problems with imaps
by Matthias Leopold 22 Feb '13

22 Feb '13

hi, i'm using dovecot 1.2.15 with self signed certificates using starttls on ports 110/143 works ok with thunderbird 10.0.12 (and i guess most other clients) using imaps on port 993 works with outlook 2002. with thunderbird 10.0.12 i can't connect to port 993 and get errors in the logs like TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate (certificate generated by dovecot mkcert.sh) or TLS: SSL_read() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (certificate generated by own openssl cmdline) i know that a lot of information is missing, but since this looks like a more general problem i dare to ask for help before posting more config details thx matthias

3 3