- dovecot - dovecot.org

[Dovecot] key -> object mailstore
by Damien Churchill 21 Sep '12

21 Sep '12

Hi, I was wondering what would be entailed in modifying dovecot 2.2 to support storing mail in an object store. I've seen a few mails dotted around in the ML history about supporting such a thing and seen it's basically dependant upon some changes in lib-storage to support writing messages without locking. Is this still the case? Regards, Damien

5 7

[Dovecot] http://xi.rename-it.nl down?
by Matthias 21 Sep '12

21 Sep '12

Hello! Could it be, that http://xi.rename-it.nl is down? Thanks, Matthias

4 5

[Dovecot] userdb missing driver
by Surreal 21 Sep '12

21 Sep '12

Good Day, I'm using dovecot 2.1.8 and this is my dovecot -n output: # 2.1.8: dovecot.conf # OS: FreeBSD 9.0-STABLE i386 auth_default_realm = domain.xxx auth_mechanisms = plain login auth_realms = domainone.xxx domaintwo.xxx disable_plaintext_auth = no first_valid_gid = 5000 first_valid_uid = 5000 lda_mailbox_autocreate = yes mail_gid = 5000 mail_location = maildir:~/ mail_plugins = quota expire mail_log notify mail_temp_dir = /var/tmp mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { expire = Trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = maildir:User quota quota2_rule = *:storage=3G quota_rule = *:storage=3G quota_rule2 = Trash:storage=+30%% quota_rule3 = Sent:storage=+30%% quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=75%% quota-warning 75 %u } sendmail_path = /usr/local/sbin/sendmail service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = vmail } ssl = no userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 3 mail_plugins = quota expire mail_log notify imap_quota imap_zlib } protocol pop3 { mail_max_userip_connections = 2 } doveconf: Fatal: Error in configuration file /usr/local/etc/dovecot/dovecot.conf: userdb is missing driver ---------------------------- This is my dovecot-sql.conf.ext connect = host=127.0.0.1 port=3306 user=daemonuser password=password dbname=postfix driver = mysql default_pass_scheme = MD5-CRYPT password_query = SELECT password,CONCAT('/mail/', maildir) AS userdb_home,\ '5000' AS userdb_uid, '5000' AS userdb_gid, allow_nets,\ concat('*:bytes=', quota) AS userdb_quota_rule\ FROM mailbox WHERE username='%u' AND domain='%d' AND active=1 user_query = SELECT CONCAT('/mail/', maildir) AS home, 'maildir:~/' as mail, '5000' AS uid, '5000' AS gid,\ concat('*:bytes=', quota) AS quota_rule\ FROM mailbox WHERE username='%u' AND domain='%d' AND active=1 #iterate_query = SELECT username AS user FROM mailbox ------------------------------ I'm sure i granted all privileges to daemonuser to postfix db. This is my first on dovecot so my knowledge is very minimal, all help possible is very much appreciated. Thanks

5 6

[Dovecot] Trouble implementing Antispam plug-in for Dovecot
by Ben Johnson 20 Sep '12

20 Sep '12

Hello, I am attempting to use the Antispam plug-in for Dovecot and am having trouble with the implementation. My configuration is Dovecot (1.2.9) + Sieve + SpamAssassin on Ubuntu 10.04. Mail that SpamAssassin tags as SPAM is moved into the affected user's "Junk" folder (/var/vmail/example.com/user/Maildir/.Junk). I followed the Wiki article at http://wiki2.dovecot.org/Plugins/Antispam . After restarting Dovecot, my IMAP client (Thunderbird v15) reports the following whenever I attempt to move mail from Inbox to "Junk" directory: "[CANNOT] antispam plugin not configured" That exact phrase appears only once in a Google search ( http://dovecot-antispam.sourcearchive.com/documentation/1.1plus-p20090218.g… ): if (!hamaddr || !spamaddr) { mail_storage_set_error(t->box->storage, ME(NOTPOSSIBLE) "antispam plugin not configured"); return -1; } Based on the surrounding source code, which I realize may be old, it seems that Ham and Spam addresses are required, or similar. I am using the following configuration options: /etc/dovecot/dovecot.conf -------------------- ## IMAP specific settings protocol imap { mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap mail_plugins = quota imap_quota antispam } # [...] plugin { antispam_debug_target = syslog antispam_verbose_debug = 1 antispam_backend = pipe antispam_pipe_program = /usr/bin/sa-learn-pipe.sh antispam_pipe_program_spam_arg = --spam antispam_pipe_program_notspam_arg = --ham antispam_spam_pattern_ignorecase = spam;junk } -------------------- For what it's worth, the logging directives seem not to have any effect (and perhaps the rest of the directives do not, either, hence the problem I'm having). I tried changing the above directives to their older directive names (I also changed the order slightly, which may be irrelevant): -------------------- plugin { antispam_debug_target = syslog antispam_verbose_debug = 1 antispam_backend = pipe antispam_mail_spam = --spam antispam_mail_notspam = --ham antispam_mail_sendmail = /usr/bin/sa-learn-pipe.sh antispam_spam_pattern_ignorecase = spam;junk } -------------------- This changed the message in my IMAP client, when attempting to move a message from my Inbox to the Junk folder, to: "[SERVERBUG] failed to send mail" Does this indicate a problem with the "/usr/bin/sa-learn-pipe.sh" script that is provided on the Wiki (cited above)? Also, it was not clear from the documentation ( http://johannes.sipsolutions.net/files/antispam.html ) whether or not the Pipe back-end requires the X-DSPAM-Signature header, and if so, to what value it should be set when using SpamAssassin. Thanks for any pointers, -Ben

7 15

[Dovecot] Wrong quota calculation
by Cibest ML 20 Sep '12

20 Sep '12

Hi, We've a strange quota behavior on our dovecot servers. It seems that it's somehow doubling the real used storage (or could be something like twice the inbox size + size of other folders, hard to know for sure). It was initial setup with the maildir++ system. Now it's been configured with dict and mysql table but the result is the same. Dovecot version : 2.1.7 (from squeeze-backports). Maildir format is used As example, let's use mailbox(a)domain.com. If I check in the quota table, I'll find : - size : 697151354 - number of files : 1510 Now if I check the Maildir folder on the filesystem, I'll find : - size : 347960000 - number of files : 824 (using find . -type f|grep -v dovecot|wc -l, not 100% accurate) Another mail box Reported by dovecot : 503446986 1081 Filesystem : 248592000 598 Does anyone has an idea of what could be possibly wrong. We've checked & double-checked everything and nothing seems to be wrong (no dsync used). -- Regards Sébastien

3 9

[Dovecot] v2.1.10 released
by Timo Sirainen 20 Sep '12

20 Sep '12

http://dovecot.org/releases/2.1/dovecot-2.1.10.tar.gz http://dovecot.org/releases/2.1/dovecot-2.1.10.tar.gz.sig The director bugfix is pretty important at least when running in two director setups, since it can break the directors until both of them are manually shut down. I'm not entirely sure if the same happens in >2 director setups, but I'd think so (although I do wonder why I haven't seen it happen in them). BTW. I'm hoping for v2.2.alpha1 release within a week or two and to get it stabilized rather quickly. + imap: Implemented THREAD=ORDEREDSUBJECT extension. + Added "doveadm exec" command to easily execute commands from libexec_dir, e.g. "doveadm exec imap -u user@domain" + Added "doveadm copy" command. + doveadm copy/move: Added optional user parameter to specify the source username. This allows easily copying mails between different users. + Added namespace { disabled } setting to quickly enable/disable namespaces. This is especially useful when its value is returned by userdb. + Added mailbox_alias plugin. It allows creating mailbox aliases using symlinks. + imapc storage: Added imapc_max_idle_time setting to force activity on connection. + fts-solr: Expunging multiple messages is now faster. - director: In some conditions director may have disconnected from another director (without logging about it), thinking it was sending invalid data. - imap: Various fixes to listing mailboxes. - pop3-migration plugin: Avoid disconnection from POP3 server due to idling. - login processes crashed if there were a lot of local {} or remote {} settings blocks.

2 4

[Dovecot] Prevent Download messages from server
by Selcuk Yazar 20 Sep '12

20 Sep '12

Hi, can we prevent download messages from server user by user ? sme common used mail's message must be remain at the server, but sometimes we download them ? thanks in advance -- Selçuk YAZAR

5 8

Re: [Dovecot] Prevent Download messages from server
by Peter Mogensen 20 Sep '12

20 Sep '12

> we have no problem, just i want to learn how can i do that. i think > it's clear . Well... I'm pretty sure most others don't. But anyway. As in ALL Internet protocols (IMAP being no exception), letting the client read data on the server requires it to download the data. Preventing download will prevent reading the mail. Period. So if you're fine with that and just want to learn how to do it, then just disable the account in the user database. /Peter

4 4

Re: [Dovecot] Dovecot deliver Segmentation fault when arrive the first message
by interfaSys sàrl 20 Sep '12

20 Sep '12

I see the same crashes on FreeBSD. Turning off ACL makes the crashes disappear. I'm getting a different backtrace though and it doesn't seem to be related to ACL: Core was generated by `imap-login'. Program terminated with signal 11, Segmentation fault. Reading symbols from /usr/lib/dovecot/libdovecot-login.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot-login.so.0 Reading symbols from /usr/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.7...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/local/lib/libssl.so.8...done. Loaded symbols for /usr/local/lib/libssl.so.8 Reading symbols from /usr/local/lib/libcrypto.so.8...done. Loaded symbols for /usr/local/lib/libcrypto.so.8 Reading symbols from /usr/lib/librt.so.1...done. Loaded symbols for /usr/lib/librt.so.1 Reading symbols from /lib/libthr.so.3...done. Loaded symbols for /lib/libthr.so.3 Reading symbols from /usr/lib/libz.so...done. Loaded symbols for /usr/lib/libz.so Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x00000000104b99a6 in hash_table_destroy (_table=0x28) at _ctype.h:143 143 return (_c < 0 || _c >= __mb_sb_limit) ? _c : [New Thread 10e041c0 (LWP 103332/initial thread)] (gdb) bt full #0 0x00000000104b99a6 in hash_table_destroy (_table=0x28) at _ctype.h:143 table = (struct hash_table *) 0x10e29700 #1 0x0000000010478cf1 in settings_parser_deinit (_ctx=0x10e29778) at array.h:197 ctx = (struct setting_parser_context *) 0x0 #2 0x00000000104ac4ea in master_service_settings_cache_deinit (_cache=0x1045da08) at master-service-settings-cache.c:81 cache = (struct master_service_settings_cache *) 0x10e2e040 entry = (struct settings_entry *) 0x10e29740 next = (struct settings_entry *) 0x0 __FUNCTION__ = "master_service_settings_cache_deinit" #3 0x000000001044d1df in login_settings_deinit () at login-settings.c:129 No locals. #4 0x000000001044dd7e in main_deinit () at main.c:62 No locals. #5 0x000000001044df5c in login_binary_run (binary=0x4051c0, argc=2, argv=0x7fffffffebd8) at main.c:62 service_flags = 72 set_pool = 0x10e2d020 allow_core_dumps = true login_socket = 0x10457491 "login" c = -1 #6 0x00000000004036ee in main (argc=2, argv=0x7fffffffebd8) at client.c:40 No locals. Cheers, Olivier

2 1

Re: [Dovecot] [PATCH] Generalize HMAC implementation
by Florian Zeitz 19 Sep '12

19 Sep '12

Am 11.09.2012 20:21, schrieb Timo Sirainen: > On 11.9.2012, at 21.07, Florian Zeitz wrote: > >>> I think we could simply #define the largest allowed context_size, use it for these buffers' sizes and then add i_assert(meth->context_size <= HMAC_MAX_CONTEXT_SIZE) >>> >> Well, either that, or we could use a union of all known context structs >> there. > > That annoyingly requires #including in hmac.h all the different .h files that contain hash contexts. When new hashes are added I doubt anyone remembers to update that. And since the hmac_context is rather rarely used I don't think it matters if we just use a somewhat large context size. > >> Or we could use i_malloc() and i_free() under the assumption hmac_init() >> + hmac_final() calls are always matched. > > Yeah, that's not too bad either I guess. Although it is different from other hash_init()+final calls which don't require it, and it's also wasting CPU a bit. > Here is an updated version of the patch. It uses the variant defining the largest allowed content size. I choose 1024 bit (128 Byte), since that is what most of the SHA-3 candidates use, so it's hopefully somewhat future proof. It's also rebased to the current head and switches the hmac uses added since the last version over to the changed API. It also fixes an "interesting" compiler warning I got with clang, which complained about the fact that struct hmac_context* was (re)declared in the prototype of hmac_md5_get_cram_context() and therefore separate from the one declared in hmac.h. Regards, Florian

1 1

[Dovecot] Deleting a folder with & character
by Angel L. Mateo 19 Sep '12

19 Sep '12

Hello, One of my users has a mailbox named 'INBOX.Kron & SPM' (maybe created a long time ago, when we use courier imap as pop/imap server, but I'm not sure). I can see the maildir with a doveadm list command: amateo_adm@myotis31:~$ sudo doveadm mailbox list -u <user> ... INBOX.Kron & SPM ... but I can't delete it, neithe rename it: amateo_adm@myotis31:~$ sudo doveadm mailbox delete -u <user> 'INBOX.Kron & SPM' doveadm(jrfv): Error: Can't delete mailbox INBOX.Kron & SPM: Mailbox doesn't exist: INBOX.Kron &- SPM amateo_adm@myotis31:~$ sudo doveadm mailbox delete -u <user> 'INBOX.Kron \& SPM' doveadm(jrfv): Error: Can't delete mailbox INBOX.Kron \& SPM: Mailbox doesn't exist: INBOX.Kron \&- SPM is there any way to delete it with doveadm command? should I use a specific syntax or escape to indicate the name?

5 5

[Dovecot] 2.1.10 crashes at login (buf->used <= buf->alloc)
by interfaSys sàrl 19 Sep '12

19 Sep '12

Hello, There is a big problem with 2.1.10. Here is what I saw in the logs: Sep 18 22:22:23 imap(): Panic: file buffer.c: line 86 (buffer_check_limits): assertion failed: (buf->used <= buf->alloc) Sep 18 22:22:23 imap(): Fatal: master: service(imap): child 26833 killed with signal 6 (core dumped) Reverting to 2.1.9 with the exact same config file works just fine Cheers, Olivier

4 10

[Dovecot] ssl cert for mail server
by cc "maco" young 19 Sep '12

19 Sep '12

for testing a new ssl cert. it works ok for browsers, but > openssl s_client -crlf -connect ms1.trailsandtribulations.net:443 => verify error:num=19:self signed certificate in certificate chain is this ssl cert - as it's constructed - is ok for mail clients? (realize needs to be on mail port etc - right now talking about the cert itself.) have had problems with thunderbird, and was wondering if this might be part of the problem.

2 1

[Dovecot] Released Pigeonhole v0.3.3 for Dovecot v2.1.10
by Stephan Bosch 18 Sep '12

18 Sep '12

Hello Dovecot users, Version 0.3.2 was a bit broken, because it failed to compile against installed Dovecot headers. Changelog v0.3.3: - Fixed compile against installed Dovecot headers. This was broken by the ld.gold fix in the previous release. The release is available as follows: http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.3.tar.gz http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.3.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] lda bug: multiple passdb ignored
by Алексей Панкратов 18 Sep '12

18 Sep '12

Greetings. When dovecot configured to use multiple passdb and static userdb as: #password database in multiple ldap subtree passdb { driver = ldap args = /usr/local/etc/dovecot/dv-ldap-real.conf } passdb { driver = ldap args = /usr/local/etc/dovecot/dv-ldap-virtual.conf } userdb { driver = static args = uid=pop gid=mailnull } all works fine but... When LDA deliver mail it check passdb but only first appeared in configuration: 18.09.2012 15:00:18 auth: Debug: master in: USER 1 info(a)zzz.zz service=lda 18.09.2012 15:00:18 auth: Debug: cache(info(a)zzz.zz): miss 18.09.2012 15:00:18 auth: Debug: ldap(info(a)zzz.zz): pass search: base=ou=account,ou=it,dc=planar,dc=local scope=subtree filter=(&(objectClass=x-mailUser)(uid=info)) fields=x-mailPassword 18.09.2012 15:00:18 lda: Debug: auth input: 18.09.2012 15:00:18 auth: Debug: cache(info(a)planar.spb.ru): hit: 18.09.2012 15:00:18 auth: Debug: master out: NOTFOUND 1 1 P.S. dovecot version 2.1.7 sysytem x86 FreeBSD 9.0

3 4

[Dovecot] Proxy connection timeouts
by Kelsey Cummings 18 Sep '12

18 Sep '12

We are seeing a few (0-15) proxy failures like the following out of ~3m successful proxied connections a day. Average session creation load over our peak hour is about 47/sec. The backend servers aren't logging anything that would suggest any internal problem like insufficient processes to handle the load. It doesn't seem to happen when utilization is lowest at night. dovecot: imap-login: Error: proxy(foo): connect(1.1.1.1, 143) failed: Connection timed out (after 63 secs) I'm curious if anyone else has seen any similar problems or has any suggestions. # dovecot -n # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.5.2.el6.x86_64 x86_64 Scientific Linux release 6.3 (Carbon) auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes auth_verbose_passwords = sha1 auth_worker_max_count = 64 mail_fsync = always mail_log_prefix = "%s(%u): session=%{session} " mail_plugins = stats zlib maildir_very_dirty_syncs = yes mmap_disable = yes passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = imap driver = pam } plugin { lazy_expunge = DELETED_MESSAGES. stats_refresh = 30 secs stats_track_cmds = yes } protocols = imap pop3 service anvil { client_limit = 10000 } service auth { client_limit = 10000 vsz_limit = 512 M } service doveadm { inet_listener { port = 1842 } unix_listener doveadm-server { mode = 0666 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 7000 process_min_avail = 32 } service imap-postlogin { executable = script-login -d /etc/dovecot/bin/sonic-imap-postlogin user = $default_internal_user } service imap { executable = imap imap-postlogin process_limit = 4096 vsz_limit = 512 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } process_limit = 2000 process_min_avail = 32 } service pop3-postlogin { executable = script-login -d /etc/dovecot/bin/sonic-pop3-postlogin user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin process_limit = 4096 } service stats { fifo_listener stats-mail { mode = 0666 } } shutdown_clients = no ssl = required ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key ssl_parameters_regenerate = 1 days syslog_facility = local0 userdb { driver = passwd } verbose_proctitle = yes protocol imap { imap_id_send = support-url support-email mail_max_userip_connections = 20 mail_plugins = stats zlib mwi_update mail_log notify imap_stats imap_zlib ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key } protocol pop3 { mail_plugins = stats zlib lazy_expunge pop3_fast_size_lookups = yes pop3_uidl_format = %f ssl_ca = </etc/dovecot/ssl/pop.sonic.net.ca-bundle ssl_cert = </etc/dovecot/ssl/pop.sonic.net.crt ssl_key = </etc/dovecot/ssl/pop.sonic.net.key }

2 1

[Dovecot] Mailbox aliases
by Timo Sirainen 18 Sep '12

18 Sep '12

I've been wondering about ways to handle all the various different Sent/Sent Messages/Sent Items/etc mailboxes that different clients create and if there could be a way to make them work at least somewhat better. I'm mainly thinking about ISP-like installations where users are using tons of different clients and there's no way to get everyone configured properly. Of course the eventual solution is hopefully that all the clients will support SPECIAL-USE extension, but while waiting for that maybe mailbox aliases could help some. So one possibility would be to force autocreation of wanted specific mailbox names, and create aliases for the other commonly used mailboxes. The main difference here for the current behavior is that all of the mailboxes would contain the same mails, instead of different mails going to different mailboxes with different clients. So for example: .. mailbox Sent { auto = create special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent alias_for = Sent } .. If "Sent Messages" doesn't exist: - DELETE Sent works as usual - RENAME Sent works as usual If "Sent Messages" is created: - it's symlinked to Sent - DELETE "Sent messages" deletes the symlink, not the contents - RENAME "Sent messages" isn't allowed - DELETE/RENAME Sent fails with message: Delete/Rename for Sent not allowed before "Sent Messages" is deleted. Thoughts? The main disadvantage is that clients would still see two different mailboxes, and some would download contents from both of them. I was thinking about creating some wiki page which could list the best working configurations and also a client list, which would specify if it supports SPECIAL-USE and what the default mailbox names it uses are.

4 4

[Dovecot] Released Pigeonhole v0.3.2 for Dovecot v2.1.9
by Stephan Bosch 18 Sep '12

18 Sep '12

Hello Dovecot users, I've been busy recently with some wholly unrelated Dovecot IMAP patches, so Sieve development moved a bit into the background. This release therefore consists mostly of small bugfixes. The most important change is the fix of a bug in ManageSieve's CHECKSCRIPT command that causes a segfault. Quite a few people have encountered this problem recently, so it is about time I release this now. Changelog v0.3.2: + sieve-refilter tool: improved man page documentation by explicitly specifying the syntax used for mailbox arguments. + Sieve: spamtest and virustest extensions: improved trace debugging of score calculation. + Sieve: made error messages about exceeding the maximum number of actions more verbose. - Sieve tools: fixed problems with running as root: sievec and sieve-dump now ignore mail_uid and mail_gid settings when run as root. - Sieve: fixed bug in action accounting (for limit checking): increase action instance count only when an action is actually created. - Sieve: include extension: fixed namespace separation of :global and :personal scripts. - ManageSieve: fixed segfault bug triggered by CHECKSCRIPT command. - Fixed linking with ld.gold. - Fixed several Clang compile warnings and a few potential bugs. The release is available as follows: http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.2.tar.gz http://www.rename-it.nl/dovecot/2.1/dovecot-2.1-pigeonhole-0.3.2.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

[Dovecot] trash plugin together with sieve_before ?
by Jan-Frode Myklebust 18 Sep '12

18 Sep '12

We have a sieve script doing sieve_before to sort spam to spam-folders. Now I'm trying to configure the "Trash" plugin, but it doesn't seem to work.. I noticed my config file says: # Space separated list of plugins to load (none known to be useful so far). Do NOT # try to load IMAP plugins here. #mail_plugins = and that doveconf doesn't list any plugins loaded for "protocol sieve". Should we load quota and trash here ? -jf

2 1

[Dovecot] Shared Mailboxes in a multi domain environment
by Alessio Cecchi 18 Sep '12

18 Sep '12

Hi, I would like to enable mailbox sharing for my users. I'm using dovecot 2.1.9 with vpopmail authentication. For security reason shared mailboxes should be available only for users of the same domain. Dovecot's wiki suggest to enable acl like this: plugin { # assumes mailboxes are in /var/mail/%d/%n: acl_shared_dict = file:/var/mail/%d/shared-mailboxes.db } but in vpopmail, and also in many others configuration, mailboxes are, for example, in /var/mail/nas1/%d, /var/mail/nas2/%d and so on, so it's difficult to restrict shared mailboxes available only for the same domain. A trick could be set acl_shared_dict to /var/mail/%d-shared-mailboxes.db, but I don't know if it's safe on an NFS environment. So, why don't provide a way to restrict shared mailboxes also for dict in SQL? One way could be to add to "user_shares" table a column "domains" which is the same domain of the mailbox'owner and a config option, for acl, like acl_only_for_same_domain =yes/no so dovecot can add a "WHERE %n = domain" for the SELECT. Are there other possible solutions? Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ on LinkedIn -> http://www.linkedin.com/in/alessice Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it

2 2

[Dovecot] dovecot 1.x: problem with quota
by Toni Mueller 17 Sep '12

17 Sep '12

Hi, I have now verified that there is a problem with quota (and sieve?). Summary: If the "maildirsize" file gets garbled (= every once in a while), mail is getting lost randomly. Details: I have a Debian box (6.0.5/amd64) with a Postfix server (2.7.1), which delivers email via Dovecot (1.2.15) to local disk (ext3). My email is filtered via a sieve script (wish I could have something better, eg. procmail). The account data is fetched from an SQL database, and I have a default quota set in dovecot.conf (200MB). My own mailbox has no quota (*:storage=0, mentioned in the database). A client sent an email to me, which is logged as being delivered like normal to my mailbox, but doesn't show up there. After poking around, I decided to simply delete the maildirsize file and have the client send that email again, and voila, it shows up in my mailbox. At the same time, however, other emails get delivered just fine, so the heinous thing is that you don't immediately notice that something fishy is going on - only when the client actually calls you (sort of defeats some uses of email)... The problem is worsened by the fact that you can't tell *which* emails get lost - you only end up with a random subset of "your" messages. The problem occurred now after running for a few months. FWIW, the problem with the garbled maildirsize file resulted in a different user's email getting bounced due to "mailbox full", when it wasn't. Questions: * Is this a known problem (Google was unhelpful/unwieldy)? * How can I prevent the problem, short of setting up a cron job to delete that file every week? * How can I log the delivery of messages in dovecot's log, not only the POP3/IMAP activity when people fetch their email? TIA! Kind regards, --Toni++

1 1

[Dovecot] Can`t get over 1024 processes
by Tomáš Randa 17 Sep '12

17 Sep '12

Hello, I have configuration question. Running FreeBSD 9.0 / AMD64 / Dovecot 2.1.8 version and cannot get over 1024 processes. I`ve increased process_limit in imap and pop3 and still have messages in syslog like: maxproc limit exceeded by uid 89, please see tuning(7) and login.conf(5). Did I forget to increase some other value? System values are higher - kern.maxprocperuid: 8192 and kern.maxproc: 12288 I`d like to have more secure configuration > one process to one connection. Thanks for help. Tomas My config: # OS: FreeBSD 9.0-STABLE amd64 auth_mechanisms = plain login digest-md5 cram-md5 default_client_limit = 6200 default_process_limit = 4096 disable_plaintext_auth = no first_valid_gid = 89 first_valid_uid = 89 info_log_path = /var/log/dovecot-info.log last_valid_gid = 89 last_valid_uid = 89 listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = Mail Toaster (Dovecot) ready. mail_location = maildir:~/Maildir mail_privileged_group = mail maildir_broken_filename_sizes = yes passdb { driver = vpopmail } plugin { quota = maildir quota_rule = Trash:ignore } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { mode = 0600 } } service imap-login { process_limit = 1536 service_count = 1 } service imap { process_limit = 2048 } service pop3-login { service_count = 1 } service pop3 { process_limit = 2048 } shutdown_clients = no ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { args = blocking=yes driver = passwd } userdb { driver = vpopmail } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 1024 mail_plugins = quota imap_quota } protocol lda { mail_plugins = quota imap_quota sendmail_path = /var/qmail/bin/sendmail } -- Tomáš Randa, Blueboard.cz s.r.o. ---------------------------------- http://hosting.blueboard.cz GSM: +420 775 086 575 Jabber: tomas(a)blueboard.cz Tel: +420 245 008 678 -- Tomáš Randa, Blueboard.cz s.r.o. ---------------------------------- http://hosting.blueboard.cz GSM: +420 775 086 575 Jabber: tomas(a)blueboard.cz Tel: +420 245 008 678

3 9

[Dovecot] clucene build warnings?
by Charles Marcus 17 Sep '12

17 Sep '12

Hi all/Timo, Is clucene still the best/recommended method for enabling full text search? Although I haven't enabled FTS yet, I plan on doing sometime in the future, and was going to be using clucene, but before I do, I'd like to see if I need to worry about an issue I've been seeing ever since I first installed clucene (and still get every time it is upgraded)... I run gentoo linux on an amd64 server, and have always gotten this warning whenever it is updated (and also got it when I first installed it): QA Notice: Package triggers severe warnings which indicate that it may exhibit random runtime failures. /var/tmp/portage/dev-cpp/clucene-2.3.3.4-r4/work/clucene-core-2.3.3.4/src/core/CLucene/index/DocumentsWriter.cpp:129:33: warning: passing NULL to non-pointer argument 2 of ‘void* memset(void*, int, size_t)’ Please do not file a Gentoo bug and instead report the above QA issues directly to the upstream developers of this software. Homepage:http://clucene.sourceforge.net/ Has anyone else ever seen similar warnings when building clucene? Is the gentoo ebuild output correct that this is not a gentoo bug, but is in fact a problem with upstream? If so, is it harmless? Or should I try to get upstream to fix it? That said, being that ianap, I probably wouldn't be much help to them, so, Timo, any chance you can see if this is a problem that needs to be addressed with them? Thanks, -- Best regards, Charles

3 10

[Dovecot] Mailbox directory permissions (LDA, 0600 -> 0660, virtual users)
by Marcin Hłybin 17 Sep '12

17 Sep '12

Hello, I have a quite common dovecot configuration with virtual users support: 1. User configuration is stored in MySQL database. 2. Mailboxes are owned by vmail:vmail with permission 0600 or drwx------. Is it possible to change mailbox mode to 0660? Dovecot version is 2.1.7 Part of SQL configuration: user_query = \ SELECT \ CONCAT_WS('/', home, u.uid, d.domain_name, u.user_name) AS home, \ 500 AS uid, \ 500 AS gid \ FROM users u \ LEFT JOIN domains d ON u.domain_id = d.id \ WHERE \ u.user_name = '%n' AND \ d.domain_name = '%d' AND \ u.active = 1 Regards. -- M.

2 7

[Dovecot] doveadm backup - Fatal: All your namespaces have a location setting.
by Tobias Hachmer 17 Sep '12

17 Sep '12

Hello list, I am using dovecot v2.1.9 and have a problem with doveadm backup: # doveadm backup -u user(a)domain.com maildir:/backup/domain.com/user/Maildir doveadm(user(a)domain.com): Fatal: All your namespaces have a location setting. It should be empty (default mail_location) in the namespace to be converted. Here my namespace config: namespace { list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/shared/%%u prefix = Gemeinsame-Postfaecher/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir:INDEX=/var/vmail/indexes/%u prefix = separator = / subscriptions = yes type = private } Have I got a problem with my namespace config? Regards, Tobias Hachmer

2 1

[Dovecot] RFC 6154: German umlauts in special_use folder names
by Daniel Parthey 17 Sep '12

17 Sep '12

Hi, the Drafts special folder is called "Entwürfe" in German locale. How should the special_use entry in the config file look like? Would you recommended to use the encoded folder name... mailbox "Entw&APw-rfe" { special_use = \Drafts } ...or rather the utf-8 Encoding in the dovecot config file? mailbox "Entwürfe" { special_use = \Drafts } Regards Daniel -- https://plus.google.com/103021802792276734820

3 4

[Dovecot] Strip backslash from usernames
by Dominic Malolepszy 17 Sep '12

17 Sep '12

Hi, Is there a way to strip a backslash if it exists at the start of username like \user(a)example.com within the Dovecot LDA? I am using Dovecot 2.1.9 with a LDAP backend, so I cannot do any sort of SQL trickery. Dominic.

2 2

[Dovecot] Edit an existing message or replacing it
by Mostafa Rokooie 16 Sep '12

16 Sep '12

Hi, I want to know is there any solution to edit an existing message in mailbox via IMAP? or replace it with a new message (store a new message with same UID)? Thank you very much, --Mostafa Rokooie

2 1

[Dovecot] Error: User doesn't have home dir set, disabling duplicate database
by Carsten Laun-De Lellis 16 Sep '12

16 Sep '12

Hi all I receive the following error in my mail.log. Does anybody know how to configure dovecot to get rid of this ? I have one server up and running with postfix, dovecot and a mysql backend. The error above happens on another server with postfix, dovecot and a ldap backend. Any hints ? Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 Fax: +49 (6306) 992142 email: <mailto:carsten.delellis@delellis.net> carsten.delellis(a)delellis.net

4 5

[Dovecot] POP3S PORT
by Robert JR 14 Sep '12

14 Sep '12

Hello I am using dovecot with POP3S and IMAPS ports, When client connect to POP3S port (995) , i can see in dovecot log file that the protocol is TLSv1 So how come the protocol is TLSv1 and not SSL ? Does the user connect t port 995 with SSL protocol then encrypt again inside the SSL session to make The TLSv1 protocol ? Or does the client use TLSv1 Protocol immediately when connect to port 995 without Using SSL protocol ? Please Help. Robert JR

3 2

[Dovecot] sieve_execute_bytecode failed with squirrelmail
by Gregory Charot (EVENIUM) 14 Sep '12

14 Sep '12

Hello all, I'm using dovecot on CentOS 5.8 (official CentOS package) and have lot of lock and "sieve_execute_bytecode error" in my dovecot.log. $ cat /etc/redhat-release CentOS release 5.8 (Final) $ dovecot --version 1.0.13 The sieve scripts are generated by squirrelmail mail and are mostly mail filters and vacations notices. $ yum info squirrelmail.noarch Installed Packages Name : squirrelmail Arch : noarch Version : 1.4.8 Release : 5.el5.centos.13 When I look at my dovecot.log I have a lot of sieve error : deliver(foo): Sep 11 15:08:04 Info: msgid=<1881992580.96697.1347363282479.JavaMail.jboss(a)gula1.xxx.com>: save failed to EvSUPPORT: Timeout while wait ing for lock deliver(foo): Sep 11 15:08:04 Info: sieve runtime error: Fileinto: Generic Error deliver(foo): Sep 11 15:08:04 Error: sieve_execute_bytecode(/home/foo/.dovecot.sievec) failed The server hosts around 50 mailboxes, some people does have sieve errors some doesn't. Is there any way to get more details about the runtime error ? How can I debug this issue ? Thanks a lot in advance, Greg My config below : #dovecot -n # 1.0.13: /etc/dovecot.conf log_path: /var/log/dovecot.log ssl_ca_file: /etc/pki/roch_crt/roch_evenium_com.ca-bundle ssl_cert_file: /etc/pki/roch_crt/roch_evenium_com.crt ssl_key_file: /etc/pki/roch_crt/private/roch-private.key ssl_cipher_list: ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+SSLv3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_process_per_connection: no login_process_size: 256 login_processes_count: 10 login_max_connections: 32 mail_privileged_group: mail dotlock_use_excl: yes fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls,oe-ns-eoh auth default: passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/run/dovecot/auth-client mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384

2 3

[Dovecot] Possible mbox corruption if mail is saved with wrong Content-Length header (2.1.6)
by Jost Krieger 14 Sep '12

14 Sep '12

One of our users likes to delete attachments from his mails. He is using roundcube and we installed a plugin for that. He reports that from time to time one of his mails gets corrupted (cut off in the middle). I could verify there is something wrong in the logs: imap(x1234567): Error: Cached message size larger than expected (6796 > 2844) imap(x1234567): Error: Corrupted index cache file /net/mbx3/disc2/home/85/x1234567/Index/.imap/Sent/dovecot.index.cache: Broken physical size for mail UID 5001 imap(x1234567): Error: read(/net/mbx3/disc2/home/85/x1234567/Mail/Sent) failed: Input/output error (FETCH for mailbox Sent UID 5001) imap(x1234567): Info: Disconnected: Internal error occurred. Refer to server log for more information. [2012-08-23 00:00:49] in=1124145 out=1324791 I had a look at the plugin and it works by duplicating the message and leaving out the attachment(s). The headers are also duplicated, including Content-Length. I've fixed that in the plugin, (don't know yet if it helps), but I think it shouldn't cause such breakage in dovecot. # doveconf -n # 2.1.6: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.9-103.ELsmp i686 Red Hat Enterprise Linux AS release 4 (Nahant Update 9) doveconf: Warning: Dovecot was last started using /usr/local/dovecot/etc/dovecot.conf, but this config is /usr/local/dovecot/etc/dovecot/dovecot.conf auth_master_user_separator = * disable_plaintext_auth = no doveadm_password = (hidden) lda_mailbox_autocreate = yes log_path = /dev/stderr log_timestamp = mail_location = mbox:~/Mail:INBOX=~/Mailbox:INDEX=~/Index mail_plugins = " quota zlib mail_log notify virtual" mdbox_rotate_size = 5 M namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes inbox = no list = children location = maildir:~/Maildir prefix = "#MD/" separator = / type = private } passdb { driver = pam } passdb { args = /usr/local/dovecot/etc/passwd.dovcot.master driver = passwd-file master = yes } plugin { acl = vfile mail_log_events = undelete mailbox_delete mailbox_rename mailbox_create mail_log_fields = uid box msgid size quota = fs:Disk quota } protocols = pop3 imap service auth { client_limit = 4300 user = root } service doveadm { inet_listener { port = 542 } } service imap-login { inet_listener imap { address = 134.147.64.42 port = 143 } service_count = 0 } service imap { drop_priv_before_exec = yes process_limit = 4096 vsz_limit = 1 G } service pop3-login { inet_listener pop3 { address = 134.147.64.42 port = 110 } service_count = 0 } service pop3 { drop_priv_before_exec = yes process_limit = 2048 vsz_limit = 512 M } ssl = no userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota zlib mail_log notify virtual imap_quota imap_zlib" } Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 4

[Dovecot] Couldn't drop privileges: User is missing UID (see mail_uid setting)
by Carsten Laun-De Lellis 14 Sep '12

14 Sep '12

Hi all I hope anyone could help me out with my problem regarding the user_id settings. I am running my mail servers just for fun and I am not a professional mail admin. After I am using postfix and dovecot for my mail servers with a mysql backend for the last 2 years I have tried to set up an installation with a ldap backend. I followed the how-to from the Postfix Book and now I have always the following error message: Couldn't drop privileges: User is missing UID (see mail_uid setting) This error message occurs whenever I try to connect via a mail client. System emails were delivered the way I expected. So I assume postfix is working fine. The ldap search I use for user authentication is as follows: uris = ldap://myserver.com dn = cn=admin, dc=mydomain, dc=com dnpass = secure tls = no base = ou=mailuser,dc=mydomain,dc=com ldap_version = 3 user_attrs = pfMailMessageStore=home user_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) pass_attrs = pfClearPassword=password,pfMailMessageStore=userdb_home pass_filter = (&(objectClass=PFMailAccount)(pfMail=%u)) default_pass_scheme = PLAIN user_global_uid = 5000 user_global_gid = 5000 I am using dovecot 2.1.9, postfix 2.8.5 and openldap 2.4.23 I would appreciate any help or tipps. ~ Mit freundlichem Gruß Carsten Laun-De Lellis Dipl.-Ing. Elektrotechnik Certified Information Systems Auditor (CISA) Hauptstrasse 13 D-67705 Trippstadt Phone: +49 (6306) 992140 Mobile: +49 (151) 27530865 Fax: +49 (6306) 992142 email: <mailto:carsten.delellis@delellis.net> carsten.delellis(a)delellis.net

1 0

[Dovecot] best way to activate quota
by Angel L. Mateo 14 Sep '12

14 Sep '12

Hello, I'm planning to activate quota control in dovecot, with maildir quota backend. I have about 70k users in my system directed to 4 backend servers (with a director to ensure that a user is always directed to the same server). I have tried to activate it in one of my nodes. The problem is that load of it has increase a lot, as much as the system was unusable (maildir is in nfs storage, with indexes in local disks). What do you think is the best to activate it? I have think that I could use doveadm commands to calculate an initial quota (on low load periods) and then activate quota, hoping that although quota is not correct, it would be used. Should this work?

5 9

[Dovecot] antispam_plugin prevents IMAP login (error 3) [Dovecot 2.0.19]
by dof＠projektfabrik.com 13 Sep '12

13 Sep '12

Hi everybody, trying to get the Dovecot antispam_plugin to work and I must be doing something wrong, because as soon as it is enabled with a certain backend, imap logins do not work anymore (the session is immediately closed after a successful login). Interestingly, pipe and spool2dir are working (that is, the session won't be closed), dspam-exec and crm114-exec are not. If this happens, mail_debug output is as follows: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10420, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_antispam_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof master: Error: service(imap): child 10420 returned error 3 Without the plugin I get: imap-login: Login: user=<dof>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=10469, secured imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_autocreate_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so imap(dof): Debug: Effective uid=23244, gid=8, home=/var/spool/dovecot/userdata/dof imap(dof): Debug: Home dir not found: /var/spool/dovecot/userdata/dof imap(dof): Debug: fs: root=/var/spool/dovecot/mail/dof, index=, control=, inbox=/var/spool/dovecot/mail/dof/INBOX, alt= imap(dof): Debug: Namespace : Using permissions from /var/spool/dovecot/mail/dof: mode=0755 gid=-1 Hopefully this is just a configuration problem. I tried the plugin in the Ubuntu repository (I'm using LTS 12.04) and even checked out the source from git and compiled it myself, but to no avail. Thanks a lot in advance and best regards, Florian ------------------- dovecot -n output: auth_cache_size = 128 k auth_cache_ttl = 20 mins auth_failure_delay = 10 secs auth_mechanisms = plain login disable_plaintext_auth = no login_greeting = Projektfabrik IMAP ready. mail_gid = mail mail_home = /var/spool/dovecot/userdata/%u mail_location = maildir:/var/spool/dovecot/mail/%u:INBOX=/var/spool/dovecot/mail/%u/INBOX:LAYOUT=fs mail_uid = dovemail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { antispam_backend = dspam-exec antispam_dspam_binary = /usr/bin/dspam antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_spam = Spam antispam_trash = trash;Trash;Deleted Items; Deleted Messages autocreate = INBOX/Sent Mail autocreate2 = INBOX/Spam autocreate3 = INBOX/Trash autosubscribe = INBOX/Sent Mail autosubscribe2 = INBOX/Spam autosubscribe3 = INBOX/Trash fts = squat sieve = /var/spool/dovecot/sieve/%u/defaultbc sieve_before = /etc/dovecot/sieve/spam.sieve sieve_dir = /var/spool/dovecot/sieve/%u } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0600 user = postfix } unix_listener auth-userdb { mode = 0600 user = dovemail } user = dovenull } service imap-login { inet_listener imap { address = localhost port = 143 } inet_listener imaps { address = localhost XX.XXX.XX.XXX port = 993 } service_count = 1 user = dovenull } service managesieve-login { inet_listener sieve { address = localhost port = 2000 } service_count = 1 user = dovenull } service pop3-login { inet_listener pop3 { address = localhost port = 110 } inet_listener pop3s { address = XX.XXX.XX.XXX port = 995 } service_count = 1 user = dovenull } ssl_ca = </etc/ssl/dovecot/cacert.pem ssl_cert = </etc/ssl/dovecot/cert.pem ssl_key = </etc/ssl/dovecot/key.pem protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_plugins = antispam autocreate fts fts_squat } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_lock_session = yes } protocol lda { mail_fsync = optimized mail_plugins = sieve postmaster_address = postmaster(a)projektfabrik.com }

2 1

[Dovecot] cyrus2dovecot script converts mailboxes to bigger sizes
by Igor Zinovik 13 Sep '12

13 Sep '12

Hello, list. I'm asking question not directly connected with dovecot. I'm planning a migration from cyrus-imapd to dovecot and i'm using cyrus2dovecot script (by Freie Universität Berlin) to convert mailboxes of users, but i'm wondering why size of mailbox in Maildir++ is so much bigger than mailbox in cyrus format after conversion: linux-a9qw:~/ # du -sh /mnt/imap/z/user/zinovik /srv/vmail/petrsu.ru/z/zinovik/Maildir 238M /mnt/imap/z/user/zinovik 1.2G /srv/vmail/mydom.ru/z/zinovik/Maildir I was planning to implement quota for mailboxes about 1 gigabyte, but after conversion I would not be able to receive messages to my own box, because i'm overquota. I think the only way would be to set quota up to 15 GB since some of users have mailbox with 12GB after conversion, but I have no such disk capacity to allow more than 1500 users have 15GB quota. Would it be practical solution to compress all files after conversion and enable zlib support in dovecot?

1 1

[Dovecot] doveadm director map : User listing returned failure
by Ramón Frontera 13 Sep '12

13 Sep '12

Hello we are running Dovecot 2.1.9. We have 2 proxies with director and 4 mail servers. We have the user information in a LDAP. I try to do: # doveadm director map doveadm(root): Error: User listing returned failure doveadm(root): Error: user listing failed user mail server ip expire time <unknown> x.x.x.x 2012-09-12 10:52:17 <unknown> x.x.x.x 2012-09-12 10:55:53 in the dovecot log i have found: dovecot: auth: Error: Trying to iterate users, but userdbs don't support it What can I do to solve this problem? Thanks in advance. -- ------------------------------------------ Ramon Frontera Gallardo Universitat de les Illes Balears

2 1

[Dovecot] Dovecot 1.x POP3 to Dovecot 2.x POP3 mbox to Maildir best transfer program/method
by Tim E. 12 Sep '12

12 Sep '12

I have a box running Dovecot 1.x POP3 only server using mbox format. I want to port the mail over to a Centos 6.3 box running a Dovecot 2.x POP3 only server using Maildir format. The main thing I want to do is support XUID/read/unread status so the transfer is transparent for the end user. I have been able to achieve transfers from the mbox format to Maildir but loose the XUID/read/unread status so that the Thunderbird client always re-downloads all the mail as if it were new. Ive googled and I have tried the following: dsync : dovecot 1.x server is too old and doesnt support the command? mb2md.pl: transfers the mbox to maildir and creates file dovecot-uidlist but the Thunderbird client redownloads the files virtualmin copy-mailbox: transfers the mailbox to Maildir but doesnt reproduce the dovecot indexes. Any thoughts would be appreciated. I would like to produce a howto of the process when I am done.

2 6

[Dovecot] TIMO HELP! director ring wont stay connected
by Kelsey Cummings 12 Sep '12

12 Sep '12

I've had 2x director ring up and running with production load on 2.1.8 with around 10,000 active connections for two weeks and everything has been working great - until this morning. There isn't anything obvious in the logs beyond the fact that the director connections started bouncing. It was not resolved by reloads or restarts or an upgrade to 2.1.9 (only the directors.) I've dropped one of the servers out of the ring to prevent suffering but this is a less than ideal situation. Any idea what is going on? Load today is consistent with low weekend load since it is a major US holiday so this wouldn't appear to be a load related issue. auth_master_user_separator = * auth_username_format = %Ln auth_verbose = yes default_client_limit = 10000 director_mail_servers = 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 director_servers = a.director.foo b.director.foo disable_plaintext_auth = no doveadm_proxy_port = 1842 login_trusted_networks = 10.0.0.1 mbox_write_locks = fcntl passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = proxy=y nopassword=y driver = static } service anvil { client_limit = 20103 } service auth { client_limit = 41704 } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9321 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director process_limit = 20000 process_min_avail = 32 } service imap { process_limit = 20480 } service pop3-login { executable = pop3-login director process_limit = 20000 process_min_avail = 32 } ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key ssl_parameters_regenerate = 1 days syslog_facility = local0 protocol imap { ssl_ca = </etc/dovecot/ssl/gd_bundle.crt ssl_cert = </etc/dovecot/ssl/imap.sonic.net.crt ssl_key = </etc/dovecot/ssl/imap.sonic.net.key } protocol pop3 { ssl_ca = </etc/dovecot/ssl/pop.sonic.net.ca-bundle ssl_cert = </etc/dovecot/ssl/pop.sonic.net.crt ssl_key = </etc/dovecot/ssl/pop.sonic.net.key } >Sep 3 09:22:42 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:22:45 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:49 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:53 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:22:54 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/left disconnected >Sep 3 09:22:59 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/left disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:02 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:23:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User foo host lookup failed: Timeout - queued for 47 secs (Ring synced for 30 secs, weak user, user refreshed 47 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bar host lookup failed: Timeout - queued for 38 secs (Ring synced for 30 secs, weak user, user refreshed 38 secs ago) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: director: User bla2 host lookup failed: Timeout - queued for 30 secs (Ring synced for 30 secs) >Sep 3 09:23:32 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:23:32 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:23:32 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:02 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/out disconnected before handshake finished >Sep 3 09:24:02 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:05 a.director. a dovecot: director: Warning: Delaying new user requests until ring is synced >Sep 3 09:24:32 a.director. a dovecot: director: Warning: Ring is synced, continuing delayed requests >Sep 3 09:24:41 b.director. b dovecot: director: Error: Director 10.10.10.71:9321/right disconnected >Sep 3 09:24:41 b.director. b dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:24:41 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:24:41 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director left >Sep 3 09:25:11 b.director. b dovecot: director: Error: User hash 2285697953 is being redirected to two hosts: 10.10.10.39 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689467) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 623192092 is being redirected to two hosts: 10.10.10.76 and 10.10.10.39 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 b.director. b dovecot: director: Error: User hash 1683990717 is being redirected to two hosts: 10.10.10.43 and 10.10.10.76 (old_ts=1346689481,handshaking,recv_ts=1346689468) >Sep 3 09:25:12 a.director. a dovecot: director: Error: Director 10.10.10.37:9321/right disconnected >Sep 3 09:25:12 a.director. a dovecot: director: Warning: director: Couldn't connect to right side, we must be the only director lef -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

3 10

[Dovecot] Expire plugin with multiple mail servers
by Ramón Frontera 12 Sep '12

12 Sep '12

Hello we are running Dovecot 2.1.9 and I want to configure expire plugin. We have 2 proxies with director and 4 mail servers. I have configured expire plugin on a single mail server and it works Ok. I don't konw how to configure with 4 mail servers and 2 proxies. My first idea is create on each mailserver one sqlite database and configure the expire plugin on proxy, but I don't know if this is a good idea. I don't know if the database should be in one proxy, and I don't know which server has to do the "doveadm expunge" command Do you have any idea how is the best way to configure expire plugin on this scenario? Thanks in advance. -- Ramon Frontera Gallardo Universitat de les Illes Balears

3 3

[Dovecot] dovecot/log not running
by Mark Hinch 12 Sep '12

12 Sep '12

I'm running 2.1.7 as downloaded/installed by Debian (and then appropriately setup for my config, ...). It almost works. I can send/receive email from thunderbird, squirrelmail, ... However there are two anomalies: 1. dovecot/log is not running. After restarting dovecot (and waiting 30 seconds), I have this in the log files: Sep 6 17:42:16 hinch4 dovecot: master: Dovecot v2.1.7 starting up (core dumps disabled) Sep 6 17:42:56 hinch4 dovecot: master: Error: service(anvil): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(log): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(ssl-params): Initial status notification not received in 30 seconds, killing the process Sep 6 17:42:56 hinch4 dovecot: master: Error: service(log): child 31286 killed with signal 9 After 30 seconds, a "ps -ef | grep dovecot" yields: dovenull 1858 20223 0 18:56 ? 00:00:00 dovecot/imap-login root 1859 20223 0 18:56 ? 00:00:00 dovecot/auth -w mhinch 1860 20223 0 18:56 ? 00:00:00 dovecot/imap root 1862 14520 0 18:56 pts/3 00:00:00 grep dovecot root 20223 1 0 18:54 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf dovenull 25144 20223 0 18:55 ? 00:00:00 dovecot/imap-login dovecot 25147 20223 0 18:55 ? 00:00:00 dovecot/anvil root 25148 20223 0 18:55 ? 00:00:00 dovecot/config dovecot 25161 20223 0 18:55 ? 00:00:00 dovecot/auth root 25174 20223 0 18:55 ? 00:00:00 dovecot/ssl-params mhinch 25208 20223 0 18:55 ? 00:00:00 dovecot/imap Seems like everything is there except dovecot/log. ssl-params and anvil came back (?!?). A "doveadm log find" dumps this in the log: Sep 6 18:52:24 hinch4 dovecot: doveadm: Debug: This is Dovecot's debug log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: This is Dovecot's info log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Warning: This is Dovecot's warning log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Error: This is Dovecot's error log (1346975543) Sep 6 18:52:24 hinch4 dovecot: doveadm: Fatal: This is Dovecot's fatal log (1346975543) However, further debugging that I try to do (see next problem) does not result in ANY further input to the log files, even though I have all known logging turned on. So I *think* that logging is not actually running. If I can get that started, then I'll take a crack at the next problem myself ... 2. However, as long as I have your attention, my next problem is that it seems like dovecot/imap-login hangs(?). After a few hours, I have something like: # ps -ef | grep dovecot dovecot 530 31186 0 18:49 ? 00:00:00 dovecot/auth root 13277 31186 0 17:47 ? 00:00:00 dovecot/config dovenull 13664 31186 0 18:44 ? 00:00:00 dovecot/imap-login root 20207 14520 0 18:54 pts/3 00:00:00 grep dovecot dovenull 27599 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27601 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27603 31186 0 18:45 ? 00:00:00 dovecot/imap-login dovenull 27607 31186 0 18:45 ? 00:00:00 dovecot/imap-login root 31186 1 0 17:42 ? 00:00:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf dovecot 31289 31186 0 17:42 ? 00:00:00 dovecot/anvil with exactly 100 imap-login processes. I'm the only meaningful user on the machine (unless somebody is imap DoS-ing me), so this does not make much sense. Obviously thunderbird is polling the machine and each time is leaving around a imap-log process. As far as I can tell, thunderbird successfully logs in (i.e., I get mail) though I can't be sure whether these are successful logins or not (no logging!). What hangs imap-log processes for hours at a time? After a while of course, dovecot will not start any new imap-login processes so Thunderbird cannot get any more mail until I restart dovecot. Then everything is OK for another 12 hours or so. Ideas on either problem? -Mark

3 3

[Dovecot] Found bug on doing IMAP search with UTF8 chars
by Weinreich, Nico 12 Sep '12

12 Sep '12

Hi! I'm using Roundcube 0.9git as mail frontend and have installed Dovecot 2.1.7 on Debian Squeeze. When searching for mail via Roundcube and the keyword contains "special" chars (like german umlauts), then Dovecot seems to die when the folder does not contain a message which contains this keyword, i.e. folder contains message /w subject "Dies ist eine Nachricht" => search for "Nachricht" => Roundcube shows that messages folder contains message /w subject "Dies ist eine Nachricht" => search for "Nachricht123" => Roundcube shows error that no messages where found folder contains message /w subject "Auflösung der Frage" => search for "Lösung" => Roundcube shows that messages folder contains message /w subject "Auflösung der Frage" => search for "Lösung123" => Roundcube shows error saying: "Connection to storage server failed" Looking into /var/log/mail.log shows: Sep 5 11:43:32 mail dovecot: imap(abc(a)def.de): Panic: search key not utf8: L.sung123 dsr_sub_allocation Sep 5 11:43:32 mail dovecot: imap(abc(a)def.de): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4478a) [0 x7f065ba8e78a] -> /usr/lib/dovecot/libdovecot.so.0(+0x447d6) [0x7f065ba8e7d6] -> /usr/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f065ba655ef ] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a3cb) [0x7f065bd6f3cb] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9a8aa) [0x7f065bd6f8 aa] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x78641) [0x7f065bd4d641] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_search_args_fore ach+0x3c) [0x7f065bd4d7bc] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header+0x29) [0x7f065ba78eb9] -> /usr/lib/dovecot/libdovecot-st orage.so.0(+0x9a0cf) [0x7f065bd6f0cf] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9b160) [0x7f065bd70160] -> /usr/lib/dovecot/libdovecot- storage.so.0(index_storage_search_next_nonblock+0x48) [0x7f065bd706e8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonbl ock+0x27) [0x7f065bd51a07] -> dovecot/imap() [0x41668f] -> dovecot/imap(imap_search_start+0xd8) [0x416ad8] -> dovecot/imap(cmd_sort+0x1e6) [ 0x40e636] -> dovecot/imap(command_exec+0x3d) [0x41157d] -> dovecot/imap() [0x4104fe] -> dovecot/imap(client_handle_input+0x135) [0x410805] - > dovecot/imap(client_input+0x5f) [0x41112f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f065ba9a926] -> /usr/lib/dovecot/ libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f065ba9b95f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f065ba9a8c8] -> /usr/li b/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f065ba87053] -> dovecot/imap(main+0x2a4) [0x419354] -> /lib/libc.so.6(__libc_start_ma in+0xfd) [0x7f065b706c8d] -> dovecot/imap() [0x408e79] Huh? This error only occurs when I search for a keyword, that contains probably non-ASCII-US chars (like umlauts, euro sign EUR ...) and no message was found in that folder. When there is any message which contains this keyword, then Roundcube is fine and there error above cannot be found in mail.log. Can anybody confirm this behaviour? Regards

3 10

[Dovecot] Resynchronization of indexes (or Warning: Maildir Scanning <dir> took <X> seconds)
by Angel L. Mateo 12 Sep '12

12 Sep '12

Hello, We have a dovecot servers farm with storage in NFS and indexes in local files. Under heavy load conditions we a log of messages in the form: Sep 3 12:35:49 myotis32 dovecot: imap(<imapuser>): Warning: Maildir: Scanning <maildir cur directory> took 62 seconds (9516 readdir()s, 0 rename()s to cur/, why=0x80) We have check that messages are directed with lmtp to the same server the user (scenario 3 at http://wiki2.dovecot.org/NFS with director in front of backend servers). So my question is why is dovecot using these readdirs operations? why it is scanning the whole cur directory of the user? I guess this is an index resynchronization, but I don't know could it be the cause. PS: I have attached my dovecot -n output

2 4

[Dovecot] dsync issue: "Server sent invalid input: Error parsing input: Unexpected ')'"
by Gábor Lénárt 11 Sep '12

11 Sep '12

Hi, I'm trying to use dsync (dovecot version 2.1.9) for IMAP only per-user migration from other IMAP servers to my shiny new one. One worked quite well, but there is a problem with an old IMAP server: dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Looking up IP address dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Connecting to 192.168.10.100:143 dsync(migtest@office): Error: imapc(imap-sunw-old.servers.intra:143): Server sent invalid input: Error parsing input: Unexpected ')' dsync(migtest@office): Debug: imapc(imap-sunw-old.servers.intra:143): Disconnected dsync(migtest@office): Error: imapc: Command failed: Disconnected from server dsync(migtest@office): Error: user migtest@office: Initialization failed: Initializing mail storage from mail_location setting failed: imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-09-10 11:49:02] dsync(migtest@office): Fatal: User init failed What can cause this? "By hand" test with telnet'ing says: dovecot-test:~$ telnet imap-sunw-old.servers.intra 143 Trying 192.168.10.100... Connected to imap-sunw-old.servers.intra. Escape character is '^]'. * OK [CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS CHILDREN BINARY UNSELECT SORT LANGUAGE XSENDER X-NETSCAPE XSERVERINFO X-SUN-SORT X-SUN-IMAP X-ANNOTATEMORE X-UNAUTHENTICATE XUM1 AUTH=PLAIN] imap-sunw-old.servers.intra IMAP4 service (Sun Java(tm) System Messaging Server 6.3-5.02 (built Oct 12 2007; 32bit)) (this is one line of course) Is it possible that the problem about ')' is caused by this line? Or is it tottaly different issue? I just think this, because the the major difference between this and the working server on migration is to have ')' and '(' at the imap "greeting", the working server does not have those, and the error message is about something with ')'. The command was the following (no configuration in dovecot for this, only this command is given at shell level - currently mainly for testing if it works or not); doveadm -D -v -o imapc_features=rfc822.size \ -o imapc_host=192.168.10.100 \ -o imapc_user=migtest@office -o imapc_password=SECRET backup -R -f \ -u migtest@office imapc: This was OK with a dovecot v1 as the "source" (as I've written) but has the problem I've desribed with that "old" sun messaging server as the source. I've also used tcpdump then wireshark's "follow TCP stream" on it: the communication seems to be just that "greeting" line, then my (target) dovecot sends FIN. That "old" server works otherwise since years with various IMAP clients. The log of my server does not contain too much just the db lookups, which works nicely (the same for working and non-working source IMAP servers): Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: prefetch(migtest@office): passdb didn't return userdb entries, trying the next userdb Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: ldap(migtest@office): user search: base=cn=mail,dc=office,dc=intra scope=subtree filter=(&(objectClass=mailUser)(uid=migtest@office)) fields=uid Sep 10 11:49:02 dovecot-test dovecot: auth: Debug: ldap(migtest@office): result: uid=migtest@office Any help is welcome, - Gábor

2 2

[Dovecot] [PATCH] Generalize HMAC implementation
by Florian Zeitz 11 Sep '12

11 Sep '12

Hello everyone and Timo in particular, about a year ago I implemented a SHA-1 variant of the HMAC(-MD5) present in Dovecot. I had always disliked this a bit, because it replicates a lot of code. This patch generalizes the HMAC function to take a hash_method struct as parameter, and changes existing code which uses the "old" HMAC function to use this new one. I'm not really sure this is actually a good idea, but I still felt I should provide the code in case you would want to merge it upstream. Attached is the patch as a hg export based on the revision of dovecot-2.2 current at the time of writing. Regards, Florian Zeitz

2 2

[Dovecot] FTS indexing
by Ralf Hildebrandt 11 Sep '12

11 Sep '12

I'm reacreating all FTS indices on all my users' INBOX folders: mkdir ~%s/Maildir/lucene-indexes && chown %s:users ~%s/Maildir/lucene-indexes doveadm index -u %s -q INBOX In "ps auxwww" I'm seeing this: tbudkevy 29186 3.7 0.0 6616 3056 ? S 18:11 0:15 dovecot/indexer-worker [tschuetz INBOX] how can a dovecot/indexer-worker actually access the INBOX of the user "tschuetz" (where "tbudkevy" doesn't have access, due to the different UID)...? Should ~%s/Maildir/lucene-indexes be filled after having run the command sequence for all users? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 5

[Dovecot] Quota less mailbox with mdbox
by Héctor Moreno Blanco 11 Sep '12

11 Sep '12

Good morning everyone, I have a little doubt about setting a quotaless mailbox with mdbox. Currently we have dovecot 2.0.10 with Maildir as mailbox system. We want to migrate to mdbox. The migration is simple and easy, but there are some configuration settings we cannot set to work properly. In our dovecot with Maildir we have the namespace INBOX with certain quota and another one without quota. This is working like a charm. Dovecot.conf: ... namespace { separator = . prefix = inbox = yes type = private } namespace { inbox = no location = prefix = INBOX. separator = . hidden = yes type = private list = no } namespace { location = maildir:%h/Maildir/_backup prefix = _backup. separator = . type = private } ... plugin/quota = maildir:_backup:ns= ... Dovecot-ldap.conf: ... pass_filter = (&(objectClass=qmailUser)(uid=%u)(accountActive=TRUE)) pass_attrs = uid=user,userPassword=password, mailQuotaSize=quota_rule=*:bytes=%$ user_attrs = mailMessageStore=home, mailQuotaSize=quota_rule=*:bytes=%$ user_filter = (&(objectClass=qmailUser)(|(mailAlternateAddress=%u)(mail=%u)(uid=%u))(accountActive=TRUE)) ... When migrated to mdbox and changing the configuration, we don't know how to get it work. We have also tried to follow the instructions from the wiki of dovecot2 without success. Could anyone give us a clue please? If additional information is needed, please let me know. Thank you very much in advanced. Kind regards. ________________________________ [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\logo_gmv.gif] Héctor Moreno Blanco División de Seguridad e Infraestructuras / Security and Infrastructures Division GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com <http://www.gmv.com/> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_blog.gif]<http://www.gmv.com/b2_gmv> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_facebook.gif]<http://www.facebook.com/infoGMV> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_twitter.gif]<http://www.twitter.com/infoGMV_es> [Descripción: C:\Documents and Settings\hhmb\Datos de programa\Microsoft\Firmas\icon_youtube.gif]<http://www.youtube.com/infoGMV> P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

3 2

[Dovecot] Memory leak by getting the virtual size of a IMAP folder
by Dafan Zhai 11 Sep '12

11 Sep '12

Hi everyone, I am writing a dovecot statistic plugin, which calls the 'mailbox_get_metadata' function with MAILBOX_METADATA_VIRTUAL_SIZE as the 2nd parameter. enum mailbox_status_items metadata_items = MAILBOX_METADATA_VIRTUAL_SIZE; struct mailbox_metadata metadata; mailbox_get_metadata(mailbox, metadata_items, &metadata); but Valgrind finds a memory leak when this function is called: ---------------------------------------------------snip-------------------------------------------------------------- ==10304== 12,288 bytes in 3 blocks are definitely lost in loss record 74 of 76 ==10304== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10304== by 0x416EE9F: block_alloc (mempool-alloconly.c:237) ==10304== by 0x416F16C: pool_alloconly_create (mempool-alloconly.c:140) ==10304== by 0x409C07D: mail_search_build_init (mail-search-build.c:187) ==10304== by 0x40C77F1: index_mailbox_get_metadata (index-status.c:200) ==10304== by 0x4067102: maildir_mailbox_get_metadata (maildir-storage.c:486) ==10304== by 0x409F78B: mailbox_get_metadata (mail-storage.c:1298) ==10304== by 0x490492D: mailbox_status_update (statistic-plugin.c:310) ==10304== by 0x4904E2E: statistic_mail_save (statistic-plugin.c:426) ==10304== by 0x41A054D: notify_contexts_mail_save (notify-plugin.c:61) ==10304== by 0x41A104F: notify_save_finish (notify-storage.c:143) ==10304== by 0x409EE94: mailbox_save_finish (mail-storage.c:1673) ---------------------------------------------------snip-------------------------------------------------------------- I have looked into the source code, and found that from the 'mail_search_build_init' function call in lib-storage/index/index-status.c:200 a pool is created, but the pool is not freed in the mailbox_search_deinit function call in lib-storage/index/index-status.c:218. This may be the reason of the memory leak. But I do not know how to free the pool. It seems to me that doveadm is having the same memory leak because it is using 'mail_search_build_init' too. ---------------------------------------------------snip-------------------------------------------------------------- # valgrind --leak-check=full doveadm mailbox status -u testuser1 vsize INBOX ==10457== Memcheck, a memory error detector ==10457== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al. ==10457== Using Valgrind-3.6.1 and LibVEX; rerun with -h for copyright info ==10457== Command: doveadm mailbox status -u testuser1 vsize INBOX ==10457== INBOX vsize=41643319 ==10457== ==10457== HEAP SUMMARY: ==10457== in use at exit: 4,356 bytes in 3 blocks ==10457== total heap usage: 440 allocs, 437 frees, 539,124 bytes allocated ==10457== ==10457== 4,096 bytes in 1 blocks are definitely lost in loss record 3 of 3 ==10457== at 0x40222A4: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==10457== by 0x41AEE9F: ??? (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x41AF16C: pool_alloconly_create (in /usr/lib/dovecot/libdovecot.so.0.0.0) ==10457== by 0x40DC07D: mail_search_build_init (in /usr/lib/dovecot/libdovecot-storage.so.0.0.0) ==10457== by 0x8057EB8: doveadm_mail_mailbox_search_args_build (in /usr/bin/doveadm) ==10457== by 0x805855A: ??? (in /usr/bin/doveadm) ==10457== by 0x8053A7B: doveadm_mail_single_user (in /usr/bin/doveadm) ==10457== by 0x8053D2B: ??? (in /usr/bin/doveadm) ==10457== by 0x80541CF: doveadm_mail_try_run (in /usr/bin/doveadm) ==10457== by 0x805B863: main (in /usr/bin/doveadm) ==10457== ==10457== LEAK SUMMARY: ==10457== definitely lost: 4,096 bytes in 1 blocks ==10457== indirectly lost: 0 bytes in 0 blocks ==10457== possibly lost: 0 bytes in 0 blocks ==10457== still reachable: 260 bytes in 2 blocks ==10457== suppressed: 0 bytes in 0 blocks ==10457== Reachable blocks (those to which a pointer was found) are not shown. ==10457== To see them, rerun with: --leak-check=full --show-reachable=yes ==10457== ==10457== For counts of detected and suppressed errors, rerun with: -v ==10457== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 122 from 35) ---------------------------------------------------snip-------------------------------------------------------------- Dovecot version: 2.1.9 OS: Linux 3.0.30-dist i686 maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX I have applied the following patches from the dovecot 2.1 branch fixing memory leaks: http://hg.dovecot.org/dovecot-2.1/rev/7bdbca7b0913 http://hg.dovecot.org/dovecot-2.1/rev/963482677c0b It would be nice if you could give me some hints how I can address this issue? Thanks in advance! Greetings, Dafan

2 2

[Dovecot] dovecot proxy ssl-parameter from database?
by Daniel Funke 11 Sep '12

11 Sep '12

Hi List, I want to migrate my IMAP-users from an old Courier-IMAP-Server to a new dovecot-Server. The old server supports IMAP without and with TLS. The new one only with TLS. To users should be migrated one by one with changing some client parameters. To leave the servername of the imap server I want to use the dovecot proxy during migration. the proxy uses a sql db to look for the old or new host for every user. So far all works fine. My question is the TLS or noTLS connection from the client to the proxy. How can I make the ssl-parameter user-dependant? clients to the old courier server should work without or with tls through the proxy and clients to the new dovecot server should only work WITH TLS between Client and proxy. (After migration of all clients the proxy should be switched off an all clients connect directly to the dovecot server.) I tried with http://wiki2.dovecot.org/UserDatabase/ExtraFields and returned a field "userdb_ssl" ("required" for host dovecot, "yes" for host courier). But it doesn't work. A migrated user can still login without tls to the proxy and the dovecot backend. Any ideas? Daniel Here is my doveconf -n # 2.1.9: /opt/dovecot/etc/dovecot/dovecot.conf doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1503) # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_mechanisms = plain login default_process_limit = 500 disable_plaintext_auth = no listen = * managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /opt/dovecot/etc/dovecot/sql.conf driver = sql } protocols = imap pop3 service imap-login { inet_listener imaps { port = 0 } } service pop3-login { inet_listener pop3s { port = 0 } } ssl_cert = </etc/pki/tls/certs/server.crt ssl_key = </etc/pki/tls/private/server.key userdb { driver = prefetch } verbose_proctitle = yes

2 1

[Dovecot] Alerts when process limits are met
by David Anderson 11 Sep '12

11 Sep '12

Hi, I've not found the answer to this question anywhere - please forgive me if I overlooked. I'd like to be able to be automatically alerted if process limits are hit (e.g. max POP3 logins). Is there a way that I can configure a script to be run, in the same way that I can with quota warnings? I can of course use logwatch, but this alerts me the next day, and logwatch can be noisy and it's easy to overlook. My motivation: for some reason my POP3 listener was hanging, and I had to restart dovecot (this is 2.0.9). But I was not aware - the process was still there, it was accepting connections (but not doing anything useful with them) and was actually managing to log the fact that the process limit was being hit (as more and more connections came in). If I could have been alerted I could have restarted dovecot earlier. Many thanks, David -- WordShell - WordPress fast from the CLI - www.wordshell.net

3 2

[Dovecot] ACL MySQL dict: to_user==from_user entries
by Roland Rosenfeld 11 Sep '12

11 Sep '12

Hi! We run dovecot 2.1.6 with ACL support and MySQL dict for shared/shared-boxes/user/$to/$from. When a user does a SETACL (via IMAP) to himself he is added as $to and $from to the MySQL dict. Se for example this IMAP conversation: 5 GETACL INBOX * ACL "INBOX" "user@domain" lrwstipekxacd 5 OK Getacl completed. 6 SETACL INBOX user@domain lrwstipekxacd 6 OK Setacl complete. 7 GETACL INBOX * ACL "INBOX" "user@domain" akxeilprwtscd 7 OK Getacl completed. As you can see, user@domain sets the ACL of his INBOX to the same value it was set before (reading it from the server after this idempotent write changed the order but none of the flags). But after "SETACL INBOX user@domain lrwstipekxacd" I see a new entry in my imap_acl_shares table where to_user and from_user both contain the value "user@domain". As far as I can see, this entry does not make much sense in the database, because every user should be able so see its own folders. But adding this line may blow up the database especially according to the full table scan problem for acl dict rebuild mentioned in http://www.dovecot.org/list/dovecot/2012-August/067548.html. Does it make sense to run a daily cron job, that removes all entries with from_user=to_user or may this cause other inconsistencies? If you need to have a look at my complete setup, it's in http://www.dovecot.org/list/dovecot/2012-July/067130.html, so I don't have to clone this here. Tschoeeee Roland

2 1

[Dovecot] imap_idle_notify_interval
by Andreas Meyer 11 Sep '12

11 Sep '12

Hi! I want to change the imap_idle_notify_interval t0 29 minutes and have edited the 20-imap.conf with imap_idle_notify_interval = 29 mins and restarted the server. doveconf -n shows me this: .... protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 10 mail_plugins = " quota imap_quota autocreate" } .... doveconf |grep idle shows me the following output: default_idle_kill = 1 mins imap_idle_notify_interval = 2 mins mailbox_idle_check_interval = 30 secs idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 0 idle_kill = 4294967295 secs idle_kill = 0 idle_kill = 4294967295 secs imap_idle_notify_interval = 29 mins I see two line of imap_idle_notify_interval. What is the right one? Greetings Andreas

2 2

[Dovecot] Is it possible to save only some messages compressed to mdbox? (2.1.6)
by Jost Krieger 11 Sep '12

11 Sep '12

I'm trying to save some messages as compressed (via zlib plugin) and it doesn't seem to work. Here's a log line (I'm logging to stderr): d k 1345467448.705591500 1345467448.705596500 1345467448.974808500 1650 <XXXXXXXXXXXXXXXXXXXXXXXXXX(a)YYY.ruhr-uni-bochum.de> local.jost.krieger+hirn(a)ruhr-uni-bochum.de 10909 80 Extra: -o plugin/zlib_save_level=9 -o plugin/zlib_save=bz2 lda(kriegjcb): Info: msgid=<20120820125728.58CC9172B6C(a)c2-4-7.noc.ruhr-uni-bochum.de>: saved mail to Hirn-2012-08 did 0+0+1 This probably doesn't make much sense to anyone except the last line but 1. It is a somewhat complicated qmail/maildrop/dovecot setup, which works for the standard cases. The Extra gets interpolated into the lda command and this works because an incorrect option blows up the delivery. The mails arrive uncompressed. So here's the questions: 1. Is it possible to have compressed/uncompressed mails mixed in an mdbox? 2. Will it work via "-o" in lda delivery? I tried to find out in the source but found it hard to see which options are pulled in when. Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 2

Re: [Dovecot] ChgrpNoPerm issue
by Joseph Tam 10 Sep '12

10 Sep '12

Robert JR <roundcube222(a)alaadin.org> writes: > The problem is /var/mail (Owner is > useraccount and the group us mail) , and here comes the problem > Dovecot > keeps trying to chown the imap folder inside the homedirectory with > user:mail account and since > And this is the reason of error that appears > in my log file. Dovecot is trying to keep the permission of your index caches consistent with that of your mailbox it indexes. The INBOX index cache is kept in your user's mail directory (as per your default settings), although you can change that location. > The option mail_access_groups=mail solve the problem.. > but I read it is not secure.. > With my current configutation, users login > with imap to read mail , can they use > any the mail_access_groups=mail > and read other poeple mail ? Yes, that's the security problem. > does my configutation > is a shard mailbox > and could be unsecure.. Could not parse your question/comment. > why didnot have > this issue with uw-imapd? and why dovecot try to chown the .imap > folder > with the mail group ? uw-imapd was not as picky. The extra consideration for group ownership is so that shared access to mailbox files, and their associated index caches, remain consistent. For example, if you shared a mailbox among your colleagues in group "staff" and the mailbox has group=staff,perm=g+rw, then the index caches will inherit those permissions, and members of group staff can access mailbox and indices alike. [You later write ...] > Sep 9 11:22:30 dovecot: pop3(r): Error: > fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) > failed: Operation not permitted (egid=501(r), group based on > /var/mail/r) > > i know that chmod 0600 /var/mail , will solve the problem > and i will no longer receive the above errors again You also have to make sure that autocreated INBOXs (i.e. a brand new account) does not start out with anything other than 0600. You may have to use dovecot's LDA or twist your LDA's arm to create mailboxes that way. I guess you can also avoid these errors by using memory indices, but you forego the advantages of persistent indices. > But my question is > that incase i did not set chmod /var/mail 0600, can i ignore such > errors, is these errors harmful ? if this errors keep coming and i > ignored them would this cause mbx corruption .. please advise No, you can't ignore these errors. They will break IMAP access to those mailboxes (as you will find out). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] precise reading of plugin deleted to trash
by ml 10 Sep '12

10 Sep '12

hello timo and other dev after a precise reading of plugin deleted to trash it appears to me like things more varariables are declared NULL in the code. it appears to me as being possible to achieve actions even if messages with the same id appears several times in different INBOX when it is the exact order of things -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

1 0

[Dovecot] Chown ChgrpNoPerm problem
by Robert JR 10 Sep '12

10 Sep '12

Hello, I just have a one simple question. my logs has the following entries Sep 9 02:48:10 dovecot: pop3(r): Error: fchown(/home/r/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) Sep 9 11:22:30 dovecot: pop3(r): Error: fchown(/home/r/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=501(r), group based on /var/mail/r) i know that chmod 0600 /var/mail , will solve the problem and i will no longer receive the above errors again But my question is that incase i did not set chmod /var/mail 0600, can i ignore such errors, is these errors harmful ? if this errors keep coming and i ignored them would this cause mbx corruption .. please advise My dovecot conf is disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks. Robert

1 0

[Dovecot] ChgrpNoPerm issue
by Robert JR 09 Sep '12

09 Sep '12

I have dovecot version 2.0.9 I am confused about this article http://wiki2.dovecot.org/Errors/ChgrpNoPerm my mail_location = mbox:~/mymail:INBOX=/var/mail/%u So my inbox is at var/mail/ and my imap folder is /home/user/mymail The problem is /var/mail (Owner is useraccount and the group us mail) , and here comes the problem Dovecot keeps trying to chown the imap folder inside the homedirectory with user:mail account and since And this is the reason of error that appears in my log file. The option mail_access_groups=mail solve the problem.. but I read it is not secure.. With my current configutation, users login with imap to read mail , can they use any the mail_access_groups=mail and read other poeple mail ? does my configutation is a shard mailbox and could be unsecure.. my main quesion , for my current configuration , can i use mail_access_groups=mail safely or can some user use this to read other people mail ? attached my configuration. why didnot have this issue with uw-imapd? and why dovecot try to chown the .imap folder with the mail group ? dovecot -n output is # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) disable_plaintext_auth = no mail_debug = yes mail_location = mbox:~/mymail:INBOX=/var/mail/%u mbox_write_locks = fcntl passdb { driver = pam } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } [ Robert

1 0

[Dovecot] Sieve command line tool status for Refiltering
by Dieter Knopf 09 Sep '12

09 Sep '12

Hello, is there any update about the sieve command line tool? I really need some way to refilter my mails without loosings flags and without moving all messages in a different folder. This is possible with procmail via direct access to the file system without the need of getmail. Thanks

3 5

[Dovecot] Auth worker max line size
by Emmanuel Dreyfus 09 Sep '12

09 Sep '12

Hello I have been playing with some exotic authentication scheme with Dovecot and PAM. That involves sending really large base64 encoded data as the IMAP password, and I have hit a line limit in Dovecot, with AUTH_WORKER_MAX_LINE_LENGTH set to 1024. This limit is especially frustrating since other parts of the software use much larger limits: MAX_INBUF_SIZE 4096 MAX_IMAP_LINE 8192 AUTH_CLIENT_MAX_LINE_LENGTH 8192 I had to make the patch attached below to get my authentication working. I can live with this local patch, but given the much more liberal limits of MAX_INBUF_SIZE at 4096 makes we wonder if this 1024 limit on AUTH_WORKER_MAX_LINE_LENGTH could not be a bug. Or is there a security concern at using more than 1kB? Opinions? (please Cc: me, I'm not subscribed ot the list) --- src/auth/auth-worker-client.h.orig 2009-06-23 18:32:15.000000000 +0200 +++ src/auth/auth-worker-client.h 2009-06-23 18:32:33.000000000 +0200 @@ -1,8 +1,8 @@ #ifndef AUTH_WORKER_CLIENT_H #define AUTH_WORKER_CLIENT_H -#define AUTH_WORKER_MAX_LINE_LENGTH 1024 +#define AUTH_WORKER_MAX_LINE_LENGTH 4096 struct auth_worker_client *auth_worker_client_create(struct auth *auth, int fd); void auth_worker_client_destroy(struct auth_worker_client **client); void auth_worker_client_unref(struct auth_worker_client **client); -- Emmanuel Dreyfus manu(a)netbsd.org

3 5

[Dovecot] Vpopmail Dynamic Authentication Module
by Eric Sisolak 08 Sep '12

08 Sep '12

Hello, We currently use qmail with vpopmail for e-mail and are looking to switch from courier-imap to dovecot for IMAP on our RedHat EL 5 systems. Our goal is to use the dovecot RPM supplied by RH (v1.0.7) if at all possible. We can do this if we are able to dynamically load the vpopmail auth module. The wiki (http://wiki.dovecot.org/CompilingSource) notes that this should be possible: Dovecot can also dynamically load authentication modules from the $prefix/lib/dovecot/auth/ directory. Binary packages builders should use them for authentication modules which require external libraries (e. g. LDAP and vpopmail). There is no standard way to build them as modules currently, but something like this should work: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL \-I../.. -I../lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so \-lvpopmail I had to modify the command to build the module, but was able to successfully build it: gcc -shared -fPIC -DHAVE_CONFIG_H -DUSERDB_VPOPMAIL -DPASSDB_VPOPMAIL -I../.. -I../lib -I/home/vpopmail/include -I/home/vpopmail/lib userdb-vpopmail.c passdb-vpopmail.c -o vpopmail.so -L/home/vpopmail/lib/libvpopmail.a I am unable to get the module to load properly. Dovecot built with --with-vpopmail works perfectly. When I start dovecot and it tries to load the module it reports: Aug 23 16:48:18 ctd-nix1 dovecot: Dovecot v1.0.7 starting up Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlopen(/usr/lib64/dovecot/auth/vpopmail.so) failed: /usr/lib64/dovecot/auth/vpopmail.so: undefined symbol: vclose Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): dlsym(passdb_vpopmail) failed: dovecot-auth: undefined symbol: passdb_vpopmail Aug 23 16:48:18 ctd-nix1 dovecot: auth(default): Unknown passdb driver 'vpopmail' (typo, or Dovecot was built without support for it? Check with dovecot --build-options) Aug 23 16:48:18 ctd-nix1 dovecot: Auth process died too early - shutting down Sometimes instead the last line is replaced with: Aug 23 15:02:45 ctd-nix1 dovecot: child 5412 (auth) returned error 89 Thanks! Eric

2 2

[Dovecot] problem about pop3 using dovecot
by bmalik 08 Sep '12

08 Sep '12

I upgraded dovecot from 1.1 to 2.1.8 pop3/imap works but i have a problem. i use pop3 protocol on outlook 2010 for my account. and i set keep my mails on the server for 5 days or until i delete them. These settings were working old dovecot1.1. But when i upgraded it to 2.1.8. if i even delete a mail from outlook the server doesn't delete or old mails are not deleted. what can be the problem ? thanks -- View this message in context: http://dovecot.2317879.n4.nabble.com/problem-about-pop3-using-dovecot-tp373… Sent from the Dovecot mailing list archive at Nabble.com.

4 7

Re: [Dovecot] about postlogin in dovecot2
by Joseph Tam 07 Sep '12

07 Sep '12

<bmalik(a)ihlas.net.tr> writes: > where do i have to locate the passwd-file in dovecot2 For what purpose? Master user? Password/user lookup? passdb { driver = passwd-file master = yes args = /anywhere/you/want/master-users pass = yes } passdb { driver = passwd-file args = /anywhere/you/want/passwd } userdb { driver = passwd-file args = /anywhere/you/want/passwd } Joseph Tam <jtam.home(a)gmail.com>

4 7

[Dovecot] Disconnect users for a distinct period of time?
by Michael Grimm 07 Sep '12

07 Sep '12

Hi -- Today, I've learned who to disable incoming mail delivery to dovecot (accepted by postfix), temporarily. Now, I would like to know if there is a way to make a "doveadm kick -A" a permanent disconnect until one would allow reconnects, again? This should be done *without* shutting down dovecot or *extensive* re-configuration. A "doveadm block -u <joe> -m 'sorry: running maintenance, please, come back later'" alike tool/funtionality would be ideal. Background: I would like to avoid any modification of my user's maildirs by a running dovecot server while modifying maildir formats, mdbox_rotate_size setting, and alike, where I would need doveadm/dsnyc access to userdb. (I know there a ways to achieve this without downtimes, and I have already done so.) I just want to be sure that I haven't overseen such a tool/functionality in the documentation. Did I or didn't I? Thanks and regards, Michael

3 2

[Dovecot] pop3 migration
by TeTeHacko 07 Sep '12

07 Sep '12

Hi, I have problems with pop3 migration, the server disconect the dovesync when fetching mails after 5 minutes with this error in server log: xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6548 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 47522 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6549 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 355289 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6550 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 9638 octets xx.xx.xx.xx [28F4] 11:54:05 <<< RETR 6551 xx.xx.xx.xx [28F4] 11:54:05 >>> +OK 2188 octets xx.xx.xx.xx [28F4] 11:59:05 >>> -ERR Command unrecognized: "" xx.xx.xx.xx [28F4] 11:59:05 *** <info(a)istan.cz> 6551 477693894 00:12:55 ERROR xx.xx.xx.xx [28F4] 11:59:05 Disconnected and this in dovecot log: dsync(info(a)istan.cz): Debug: imapc(mail.stable.cz:143): Authenticated successfully dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Looking up IP address dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Connecting to 88.86.120.212:110 dsync(info(a)istan.cz): Debug: pop3c(mail.stable.cz): Authenticating as info(a)istan.cz dsync(info(a)istan.cz): Error: pop3c(mail.stable.cz): Server disconnected unexpectedly dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 1: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 2: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 3: Disconnected dsync(info(a)istan.cz): Error: pop3_migration: Failed to get header for msg 4: Disconnected is there any timeout in dovecot for 300s? can anybody point me where may be some problem? This error occurs everytime i test it and the mail box has cca 2GB, on small mailboxes is no problem, i try this patch: http://hg.dovecot.org/dovecot-2.1/rev/ab6a4455b27d on dovecot version 2.1.7 but the problem isn't solved. Thanks for help Tomas Herceg

2 2

[Dovecot] dsync mirror and sieve ?
by Xavier Beaudouin 07 Sep '12

07 Sep '12

Hi there, I am currently doing some extensive test with dsync, but it appear that : dsync -u <user> maildir:/path/to/new/Maildir doesn't seems to sync sieves rules. Is there a good way to sync sieves as well ? :p Regards, Xavier

2 1

Re: [Dovecot] Removing specific entry in user/auth cache
by Joseph Tam 07 Sep '12

07 Sep '12

Francisco Wagner C. Freire <wgrcunha(a)gmail.com> writes: > On Wed, Jun 27, 2012 at 9:24 AM, Timo Sirainen <tss(a)iki.fi> wrote: > >> On 27.6.2012, at 14.10, Angel L. Mateo wrote: >> >>> We have dovecot configured with auth cache. Is there any way to >> remove a specific entry (not all) from this cache? >> >> Nope. What do you need it for? > > I dont known about Angel, but for me is useful because sometimes i need to > deactivate smtp/imap/pop access from accounts, or change their home after > storage migration, and removing a specific record i can use a long time > cache. I'm not sure that the auth cache holds that information, but I think you can at least invalidate a particular auth cache entry by 1) Changing the user password (and save the previous hash) 2) Authenticate using the new credentials (and invalidate the auth cache entry). For example, you can just do a manual connection on your dovecot server x login someuser newpassword This will replace the cache entry with a new one. 3) When you are ready to put the account back online, change the password back to the original. A password mismatch forces a resync to your authentication system which will restore the auth cache. Joseph Tam <jtam.home(a)gmail.com>

4 8

[Dovecot] Managesieve segfault with dovecot 2.1.8
by Daniel Parthey 07 Sep '12

07 Sep '12

Hi, I'm getting segfaults and unexpected disconnects from managesieve server, when the Thunderbird SIEVE extension tries to validate SIEVE scripts agains Pidgeonhole in Dovecot 2.1.8. The extension says: "Server terminated unexpectedly the connection, click on reconnect to try again." It can be reproduced by simply calling CHECKSCRIPT followed by a string: mail01:~# telnet 127.0.0.1 19200 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Sieve" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN" "VERSION" "1.0" OK "Mailbox" AUTHENTICATE "PLAIN" "AGRwYXJ0aGV5QGV4YW1wbGUub3JnAGRwYXJ0aGV5" OK "Logged in." CHECKSCRIPT {6+} abcdef Connection closed by foreign host. The server interrupts the connection and the logs show the following: # dovecot.log Sep 7 01:40:46 dovecot: mailbox: mail: managesieve(dparthey(a)example.org): Fatal: master: service(managesieve): child 31356 killed with signal 11 (core dumped) # kern.log Sep 7 01:40:46 kernel: [1417105.954609] managesieve[31356]: segfault at 0 ip 00007f1c415c4876 sp 00007fffb3731f88 error 4 in libc-2.11.1.so[7f1c41543000+17a000] Here is the backtrace: mail01:~# gdb /usr/lib/dovecot/managesieve /var/tmp/core.managesieve.31356 Core was generated by `dovecot-mailbox/managesieve'. Program terminated with signal 11, Segmentation fault. #0 0x00007f1c415c4876 in ?? () from /lib/libc.so.6 (gdb) bt full #0 0x00007f1c415c4876 in ?? () from /lib/libc.so.6 No symbol table info available. #1 0x000000000040b1c3 in sieve_storage_save_will_activate (ctx=0x257f1a0) at sieve-storage-save.c:328 _data_stack_cur_id = 4 scriptname = 0x25400ae "default.sieve" ret = <value optimized out> #2 0x00000000004065b0 in cmd_putscript_finish_parsing (cmd=0x2575cb8) at cmd-putscript.c:206 ehandler = <value optimized out> cpflags = <value optimized out> sbin = <value optimized out> errors = <value optimized out> _data_stack_cur_id = 0 script = <value optimized out> client = 0x2575c30 ctx = 0x2578180 args = 0x254bc68 ret = <value optimized out> #3 0x0000000000406838 in cmd_putscript_continue_script (cmd=0x2575cb8) at cmd-putscript.c:423 all_written = <value optimized out> client = 0x2575c30 ctx = 0x2578180 size = 39279968 #4 0x0000000000406caf in client_input_putscript (context=0x2575c30) at cmd-putscript.c:84 cmd = 0x2575cb8 __FUNCTION__ = "client_input_putscript" #5 0x00007f1c41d1d3e6 in io_loop_call_io (io=0x2575fd0) at ioloop.c:379 ioloop = 0x2548680 t_id = 2 #6 0x00007f1c41d1e46f in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:213 ctx = 0x25489f0 event = 0x2548a60 list = 0x2576020 io = 0x0 tv = {tv_sec = 18, tv_usec = 988469} msecs = <value optimized out> ret = <value optimized out> i = 0 call = false #7 0x00007f1c41d1d388 in io_loop_run (ioloop=0x2548680) at ioloop.c:398 No locals. #8 0x00007f1c41d09653 in master_service_run (service=0x2548530, callback=0x25400ae) at master-service.c:543 No locals. #9 0x00000000004096ce in main (argc=1, argv=0x2548370) at main.c:308 set_roots = {0x610d60, 0x0} login_set = {auth_socket_path = 0x2540088 "/var/run/dovecot/auth-master", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x409810 <login_client_connected>, failure_callback = 0x409290 <login_client_failed>} service_flags = <value optimized out> storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT username = 0x0 c = <value optimized out> Regards Daniel -- https://plus.google.com/103021802792276734820

2 1

[Dovecot] thunderbird not connecting
by cc young 06 Sep '12

06 Sep '12

cannot get TB to recognize either pop3/s or imap/s server can connect just fine with: openssl s_client -connect ms1.myserver.net:993 . login ... but trying with TB /var/log/mail.log gets: dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx -- View this message in context: http://dovecot.2317879.n4.nabble.com/thunderbird-not-connecting-tp37389.html Sent from the Dovecot mailing list archive at Nabble.com.

6 8

[Dovecot] dovecotadm error
by Michael 06 Sep '12

06 Sep '12

When I use the following command: doveadm expunge -A mailbox Junk savedbefore 28d I get: doveadm(root): Error: User listing returned failure In the mail log file it says: dovecot: auth-worker(18549): Error: sql: Iterate query failed: Table 'system.users' doesn't exist (using built-in default iterate_query: SELECT username, domain FROM users) However this is setup: dovecot-sql.conf: iterate_query = SELECT username AS user FROM accounts though I have had to comment the following from dovecot.conf: #iteratedb { # args = /usr/local/etc/dovecot/dovecot-sql.conf # driver = sql #} because it errors on dovecot start up. I have already spent a bit of time on the Dovecot website and Google trying to find an answer. I want to get the expires plugin working. Any leads please? dovecot -n # 2.1.9: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.29.6-rt24-smp i686 Slackware 13.1.0 auth_master_user_separator = * auth_mechanisms = plain login dict { expire = mysql:/usr/local/etc/dovecot/dovecot-dict-expire.conf quotadict = mysql:/usr/local/etc/dovecot/dovecot-dict-sql.conf } disable_plaintext_auth = no first_valid_gid = 1000 first_valid_uid = 1000 mail_access_groups = dovecot mail_location = Maildir:%h/Maildir mail_plugins = " expire" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } plugin { autocreate = Drafts autocreate2 = Junk autocreate3 = Sent autocreate4 = Trash autosubscribe = Drafts autosubscribe2 = Junk autosubscribe3 = Sent autosubscribe4 = Trash expire = Junk expire_dict = proxy::expire quota = dict:user::proxy::quotadict sieve = %h/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/before.sieve sieve_dir = %h/sieve sieve_global_dir = /var/lib/dovecot/sieve/global/ } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { inet_listener imap { address = DELETED } } service managesieve-login { executable = /usr/local/libexec/dovecot/managesieve-login } service managesieve { executable = /usr/local/libexec/dovecot/managesieve } ssl_cert = </etc/ssl/private/DELETED.pem ssl_key = </etc/ssl/private/DELETED.pem userdb { args = /usr/local/etc/dovecot/dovecot-sql.lda.conf driver = sql } userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = autocreate quota imap_quota zlib imap_zlib } protocol pop3 { mail_plugins = quota } protocol lda { hostname = DELETED mail_plugins = quota sieve postmaster_address = DELETED sendmail_path = /usr/sbin/sendmail } protocol sieve { mail_debug = yes }

2 1

[Dovecot] different userdb and/or passdb for lmtp and pop3/imap?
by Gábor Lénárt 06 Sep '12

06 Sep '12

Dear All, I have a bit complex question about ldap based user/passdb with some twists caused by the LDAP schema I have to use. It's complex for me at least, since it's my first time to try to setup any dovecot install which is more than a "trivial" thing eg for some unix system users. What I'd like to do: Users are stored in LDAP with the following schema: storageMailUid: contains user's uid in x@z format, and it CAN be different than mail address. This value is used to login (pop3/imap) and to get the maildir path (well, home) in the form of /mailstorage/z/x/ regardless of the value of the "mail" attribute. If @z part is missing (I mean the user supplied login, not the LDAP!), some default value (example.com) should be treated (I guess that's easy: auth_default_realm may be enough, isn't it). It is NOT possible to login via pop3/imap with mail, only with storageMailUid! This storageMailUid can specify a string which is not even an existing mail address, of course. mail: contains user's mail address, or even mail addresses (there can be more mail addresses - more mail ldap attributes - for a single ldap entry). This attribute cannot be used for pop3/imap login, neither it counts to resolve the maildir path, it only counts when a mail is received: the location of the user's maildir must be got from storageMailUid. storageMailQuota: it contains the quota value (in bytes) for the given user, which should be enforced on receiving mail, or by using IMAP (not counting the Trash folder which is a fixed size for all users and it must be handled outside of this). All user maildirs have the same fixed unix UID/GID, which is not stored in LDAP, but must be configured statically. "Home directory" of the user is also not stored in LDAP, it must be got from storageMailUid LDAP parameter. Mails are received via LMTP only. I'd like to use prefetchdb to minimalize the amount of LDAP lookups (however I can live without that). I am unsure if auth_bind is OK, or it should not be used, currently I'd like to play with auth_bind, since it worked before on other servers well. I'm totally lost with the user_attrs/pass_attrs to create this kind of configuration. In case of static userdb, it was easy to set up: passdb { args = /etc/dovecot/dovecot-ldap-passdb.conf driver = ldap } userdb { args = uid=vmail gid=vmail home=/mailstorage/%Ld/%Ln driver = static } With this, pop3/imap worked (quota was not of the scope yet, though), however lmtp is not ("passdb doesn't support lookups, can't verify user's existence" which is odd for me, as userdb does not support it in my opinion). Please, give some suggestion how to set up userdb and passdb to support this configuration which works with the described scenario. I should also set iterate_filter and iterate_attrs I guess, so some doveadm commands can work then (-A stuffs, I guess). I am also not sure if auth service should be used or not (I mean extra configuration related): since I want LMTP not LDA, I guessed I don't need it, but I am not sure. I am also confused, because on receiving a mail (via LMTP) different kind of LDAP lookup is needed: then mail must be searched, but it's storageMailUid based lookup in case of pop3 or imap login ... Is it possible to give different userdb/passdb for lmtp and pop3/imap? In theory it's even possible to have x(a)example.com as mail and y(a)example.com as storageMailUid for one user, and the opposite for the another, so lookups cannot be done together for mail and storageMailUid. The LDAP schema/rest of the system works this way, not an option to change. Any help is greatly welcomed. Thanks a lot in advance, Gábor

1 1

[Dovecot] Anyone else seeing lots of random duplicate messages???
by Charles Marcus 06 Sep '12

06 Sep '12

Almost every message I'm getting through this list is duplicated, down to the same exact message-ID... Anyone else seeing this? Charles

6 8

[Dovecot] managesieve problem
by Léon Keijser 06 Sep '12

06 Sep '12

Hi, I'm using roundcube in combination with postfix (2.6.6), dovecot (2.0.9) and pigeonhole (2.0.9). All works well except sieve. I've already posted on the roundcube forum (http://www.roundcubeforum.net/index.php/topic,9690.0.html ) but was told I should ask here since it's more likely a dovecot issue rather than roundcube. The problem is that if I want to manage sieve filters from roundcube, I get this error in maillog: Sep 5 12:55:39 emperor dovecot: managesieve-login: Login: user=<leon(a)EXAMPLE.COM>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1575, secured Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Error: sieve-storage: stat((null)) failed: Bad address Sep 5 12:55:39 emperor dovecot: managesieve(leon(a)EXAMPLE.COM): Fatal: Failed to open Sieve storage The managesieve daemon is listening though: emperor ~ # netstat -tlpne | grep dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 0 1275042 362/dovecot tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 0 1275037 362/dovecot tcp 0 0 0.0.0.0:4190 0.0.0.0:* LISTEN 0 1275035 362/dovecot tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 0 1275044 362/dovecot tcp 0 0 :::143 :::* LISTEN 0 1275043 362/dovecot tcp 0 0 :::2000 :::* LISTEN 0 1275038 362/dovecot tcp 0 0 :::4190 :::* LISTEN 0 1275036 362/dovecot tcp 0 0 :::993 :::* LISTEN 0 1275045 362/dovecot emperor ~ # telnet localhost 4190 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." Before I paste any configuration files, I wanted to ask first if this is a common/known issue. Else, please let me know what additional information I should provide. Thanks in advance! kind regards, Léon

2 5

[Dovecot] Length of attachment filenames
by Fuhrmann, Hauke 06 Sep '12

06 Sep '12

Hi there, I have a beginners question to Dovecot: does it have a restriction on the supported length and character encodings of filenames of attachments? Can filenames be arbitrary large? Cheers, Hauke -- Diese E-Mail kann vertrauliche und/oder rechtlich geschuetzte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender durch eine Antwortmail und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Wir danken fuer Ihre Kooperation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient or have received this e-mail in error, you are on notice of its status. Please notify the sender immediately by reply e-mail and delete this e-mail from your systems. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly prohibited. Thank you for your cooperation.

3 2

[Dovecot] dovecot stats: useful data to gather
by Patrick Ben Koetter 06 Sep '12

06 Sep '12

Timo, following our discussion on dovecot stats at the LinuxTag 2012 my team and I sat down and put together a list of stat items we think to be useful in daily dovecot usage. Besides pulling together all the data we also think it would be useful to have an SNMP interface to access the stats. Our offer to create and contribute a standalone web interface for dovecot stats stands. Here are the stats we believe to be useful: Login/Logout - total number login success/time - total number login failure/time - total number per authentication mechanism - total number plain sessions - total number STARTTLS sessions - total number of currently connected users (pop3/pop3s/imap/imaps/managesieve) - login names of connected users (not really stats, but great for actions regarding those uses e.g. force logout) - total number logout commands/time - total number BYE responses (autologout) Mailbox state - Inflow rate (number incoming messages/time) - Deleted rate (number \Deleted flagged messages/time) - Expunge rate (number Expunge operations/time) - total number current messages mailboxes normal storage - total number current messages mailboxes alt storage - total number read messages mailboxes normal storage - total number read messages mailboxes alt storage - per user number current messages mailboxes normal storage - per user number current messages mailboxes alt storage - per user number read messages mailboxes normal storage - per user number read messages mailboxes alt storage Mailbox Quota - total number persons under soft-quota per quota - total number persons above or equal soft-quota per quota - total number persons above or equal hard-quota per quota Performance - minimum time to write a message - maximum time to write a message - average time to write a message - minimum time to modify a message - maximum time to modify a message - average time to modify a message - minimum time to delete a message - maximum time to delete a message - average time to delete a message - minimum time search operations - maximum time search operations - average time search operations Regards, p@rick -- state of mind () http://www.state-of-mind.de Franziskanerstraße 15 Telefon +49 89 3090 4664 81669 München Telefax +49 89 3090 4666 Amtsgericht München Partnerschaftsregister PR 563

5 5

Re: [Dovecot] thunderbird not connecting
by Joseph Tam 05 Sep '12

05 Sep '12

On Wed, 5 Sep 2012, Charles Marcus wrote > On 2012-09-05 6:23 AM, cc maco young <bangkokmaco(a)gmail.com> wrote: >> On Wed, Sep 5, 2012 at 12:02 AM, Stan Hoeppner<stan(a)hardwarefreak.com>wrote: >>> What does TB activity manager say? > >> Activity Manager is blank >> >> as an update, went to Claws email client. it had enough feedback and gave >> me enough ways to tweak - got everything going. >> >> went back to TB. recognized server, but no username/password. perhaps >> it's not letting the full email - which is the user name - through. but >> who knows? no feedback. > > You're looking at the wrong end. > > You need to be looking at your SERVER logs, not the Clients. Actually, I think he did supply that and it showed imap and pop3 not getting any auth information. > dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, > lip=xxx.xx.xx.xx > dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, lip=xxx.xx.xx.xx There are other log options to verbosely log auth and ssl information, and that might help. I frequently see the above log messages when the client and the server get their security protocol (SSL/TLS) and ports crossed up (i.e. trying IMAP/SSL on port 143 or trying IMAP/TLS on port 993). Try fiddling with TB's setting here and see if anything shakes loose. You can also use openssl and simulate the server end and maybe that will shed light on the situation: (You'll have to read the man page yourself to find all the options) openssl s_server -accept 993 ... Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] mail_location / mail_home
by Denny Schierz 05 Sep '12

05 Sep '12

hi, I had a long (upgraded today from 2.0.17 to 2.1.9) time mail_location and mail_home at the same path, which I recognize know, that it wasn't a good idea, idea. On my testsystem I've set: mail_home = /imap/spool/%d/%1u/%u mail_location = maildir:~/:INDEX=~/ otherwise I don't have access to the mails anymore. Is that ok? cu denny

3 3

[Dovecot] Outlook 2013 imap specialuse RFC6154 XLIST
by Robert Schetterer 05 Sep '12

05 Sep '12

Hi, perhaps somebody wants to this --snip Microsoft® Outlook® 2013 Preview Outlook 2013 Preview implements the IMAP LIST extension specified in [RFC6154] as the XLIST command. ---snip taken out of [MS-STANOIMAP].pdf which zip you may download here http://msdn.microsoft.com/en-us/library/ee157124%28v=exchg.80%29 -- Best Regards MfG Robert Schetterer

3 6

[Dovecot] strange Folder in subscription list (was: Imap Ghost Folder)
by Sascha Zucca 05 Sep '12

05 Sep '12

Hi list, here's the complete Problem for easy reading again. Can someone reproduce this? I have a strange "ghostfolder" when using shares/%%n/ as prefix for shared namespace. If i swith only this setting to shares/%%u/ everything is just as wanted, only then the prefix is very long, so i would prefer the name. dovecot --version 2.1.7 dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-14-pve i686 Debian 6.0.5 simfs auth_mechanisms = plain login disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%%d/%%n/Maildir mail_plugins = acl mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/shared/%%u prefix = shares/%%n/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota } protocol imap { mail_plugins = quota imap_quota acl imap_acl } Thank you very much for your help Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

1 0

Re: [Dovecot] finding messages deleted before timespec
by Joseph Tam 04 Sep '12

04 Sep '12

On Tue, 4 Sep 2012, Sven Hartge wrote: > I am searching for a search_query which only matches messages with the > flag \Deleted whose flag has been set 24h or longer ago. > > Doing something like > > doveadm expunge -A mailbox \* DELETED > > is not the solution, since it will expunge all deleted mails without > looking at the time when they have been deleted. > > Using savedbefore does not work either, since a message may have been > saved 2 years ago but only recently deleted. You could work out a cron job that does a "doveadm search ...", then diff it with one generated 24 hours ago, extract the common GID/UUIDs, then do a second pass to delete them. Not elegant, but it would probably work. (I just read the man page, and there doesn't seem to be an option to pipe the search like "doveadm search ... | doveadm expunge ...". You'll have to expunge one message at a time. Ugh.) Or maybe the advice "don't worry, be happy" applies here. I find that too many "mistake mitigation" features is counterproductive as users habitually relying on them, rather than being careful. Extending your grace period to a week will lessen the probability of this race condition. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Custom auth process in dovecot 2
by Richard Platel 04 Sep '12

04 Sep '12

Hi, I'm trying to upgrade from dovecot-1.1.x to 2.1.7. We have our own custom auth server process (because we want to do our own password validation and for other reasons) that listens on a UNIX domain socket and speaks the dovecot auth protocol. In dovecot 1.1 we could configure this with auth external { socket connect { master { path = /var/run/dovecot/auth.sock } } } as per http://wiki.dovecot.org/MainConfig I haven't been able to figure out how to do this in 2.1.7, is it possible?

2 1

[Dovecot] finding messages deleted before timespec
by Sven Hartge 04 Sep '12

04 Sep '12

Hi! I've been pondering about doveadm-search-query(7) and trying to formulate a search query for some time now and it seems there is no way to search for messages, which have been marked DELETED before a certain time. I want to use this to expunge all DELETED messages which have been in that state for 24h or longer. For example a cronjob runs at midnight to expunge those messages but a user deletes one just 10 minutes before that, this message should not be deleted until the day after. This is my first time diving deeper into IMAP search queries so I have the nagging feeling I am missing something important here. Grüße, Sven. -- Sigmentation fault. Core dumped.

3 4

[Dovecot] doveadm command to block a user?
by Angel L. Mateo 04 Sep '12

04 Sep '12

Hello, Is there any command to be able to lock imap access to a specific user? With doveadm kick I could close his connections, but I want to avoid future ones too and just for imap. Any way to do it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 1

Re: [Dovecot] thunderbird not connecting
by Spyros Tsiolis 04 Sep '12

04 Sep '12

>________________________________ > From: "cc "maco" young" <bangkokmaco(a)gmail.com> >To: Spyros Tsiolis <stsiol(a)yahoo.co.uk> >Sent: Tuesday, 4 September 2012, 16:00 >Subject: Re: [Dovecot] thunderbird not connecting > > >On Tue, Sep 4, 2012 at 2:31 PM, Spyros Tsiolis <stsiol(a)yahoo.co.uk> wrote: > >> . . . . %< . . . . . %< . . . . . . . . > >what you showed is what I remember when I was last hacking in TB. now all options are gone. screenshot attached > > >think I know problem. got tired of TB - no options, no feedback. ok if everything works; otherwise sucks. > > >went to claws. they have actual messages, actual logs. had similar problem, but claws easily allowed me to override. see this: http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2199 > > >know my cert chain ok because http://www.sslshopper.com/ssl-checker.html checks chain ok > > >anyway, thanks for your help, and goodbye thunderbird > > > > I remember being stuck on this. I know what you are saying. Give it another go. Tinker with it. You'll get there. If you're fed up with TB, that's another thing. However, you _can_ get round this. I know I did. Just my 2c, Regards, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] problems with ssl cert
by cc "maco" young 04 Sep '12

04 Sep '12

in conf.d/10-ssl.conf: ssl = yes ssl_cert = </etc/ssl/certs/ms1xxx.net.crt ssl_key = </etc/ssl/private/ms1.xxx.net.key when try to set up an account in thrunderbird, get /var/log/mail.log: imap-login: Disconnected (no auth attempts): rip=223.205.150.234, lip=xx.xx.xx.xx, TLS: SSL_read() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown: SSL alert number openssl s_client -connect mail.myserver.com:993 - successful using the same cert in gning / chrome is successful, so think the cert is ok

2 1

Re: [Dovecot] thunderbird not connecting
by Spyros Tsiolis 04 Sep '12

04 Sep '12

>________________________________ > From: "cc "maco" young" <bangkokmaco(a)gmail.com> >To: Spyros Tsiolis <stsiol(a)yahoo.co.uk> >Sent: Tuesday, 4 September 2012, 9:42 >Subject: Re: [Dovecot] thunderbird not connecting > > >On Tue, Sep 4, 2012 at 12:59 PM, Spyros Tsiolis <stsiol(a)yahoo.co.uk> wrote: > > >> >>----- Original Message ----- >>> From: cc young <bangkokmaco(a)gmail.com> >>> To: dovecot(a)dovecot.org >>> Cc: >>> Sent: Tuesday, 4 September 2012, 7:21 >>> Subject: [Dovecot] thunderbird not connecting >>> >>> cannot get TB to recognize either pop3/s or imap/s server >>> >>> can connect just fine with: >>> >>> openssl s_client -connect ms1.myserver.net:993 >>> . login ... >>> >>> but trying with TB /var/log/mail.log gets: >>> >>> dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> >>> >>> >>> >>> -- >>> View this message in context: >>> http://dovecot.2317879.n4.nabble.com/thunderbird-not-connecting-tp37389.html >>> Sent from the Dovecot mailing list archive at Nabble.com. >>> >> >> >>Thunderbird is not the best of clients out there. >>It's ok but not the best. >> >>I am using TB on my sites and found out that it has many issues. >>Can you be a bit more specific ? >>Are you trying to connect to Secure IMAP ? (993) on dovecot ? >> >>In that case, as far as I remember you have to "fool" Thunderbird >>during the mail account set up process. >> >>It's a bit crazy, I know but it's true. I have documented everything. >>Let me know where the hickup is and I'll try to get the docs and >>let you know how to work around this. >> >>HTH, >> > > >right - trying to connect to Secure IMAP ? (993) on dovecot > > >not in love with thunderbird, but need to access via linux and ms > > >any help / insight would be wonderful > > Hi again, Taken from my docs . This is the first part for Mozilla Thunderbird setup. I've seen this work both on Win32 systems and linux systems (mainly Linux Mint). There's a part on pop3/smtp. I am sure you can skip that and do your own magic for those two protocols : Pre-Installation, Wizard Configuration -------------------------------------- During initial Thunderbird startup, the admin is greeted by a welcome window named “Mail Account Setup” Click on Cancel Installation ------------ Click on “Edit” -> “Account Settings” New window pops up Click on “Add” New window pops up Fill in “Description” (e.g. “Name Surname mailbox”) On “Server Name” enter the IP address (e.g. 192.168.3.5) On “Port” enter the SMTP port (e.g. 25) On “Security and Authentication” → “Connection Security” enter none On “Authentication Method” choose Password transmitted insecurely On “Username” enter the users' username including the FQDN (e.g. name(a)domain.gr) Click on OK From “Edit”, click on “Account Settings” From “Account Actions” click on “Add Mail Account” New windows pops up Enter in the same name for “Your name” Enter in the same e-mail address for “Email address” On “Password” enter in users' password Click on “Continue” then without waiting click on “Manual Config” Once “Manual Config” is clicked, thunderbird will allow the admin to perform additional configuration tasks For “Incoming” the admin will choose “IMAP”, Server Hostname will be set to the servers' IP address (again, 192.168.3.5) From “Port” choose “993” From “SSL” choose “SSL/TLS” From “Authentication” choose “Autodetect” For “Outgoing” the admin will let the “SMTP” option For “Server Hostname”, choose the same IP address (e.g. 192.168.3.5) For “Port” choose “25” For “SSL” choose “None” For “Authentication” choose “Normal Password” On the Username field, enter the full user name, e.g. “user(a)domain.xn--gr-02t Click on “Re-test” Click on “Create Account” Check on the “I understand the Risks” checkbox Click on “Create Account” Click on “Confirm Security Exception” Click on “OK” Hope this helps and best regards, Spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] dovecot-antispam and Thunderbird, Outlook, etc.
by Eddy Ilg|univation 04 Sep '12

04 Sep '12

Hi, In the documentation of dovecot-antispam it is mentioned that moving mails out of the spam folders trains them as non-spam. I.e. thunderbird automatically deletes old spam messages (after a time limit, i.e. 14 days). Will this also train the old spam messages as non-spam? Cheers, Eddy

2 1

[Dovecot] Disable security for testing?
by Voytek Eymont 03 Sep '12

03 Sep '12

I want to offer 'plain' unsecure pop/imap access, just for temp. testing purpose, do I simply comment out ssl = required ? Voytek -- Swyped on Motrix with K-9 Mail. Please excuse my brevity.

5 11

[Dovecot] dovecot sasl + postfix issue
by tseveendorj 03 Sep '12

03 Sep '12

Hello, I'm trying to configure postfix + Dovecot SASL for user authenticated mail relay. I set following configuration on postfix queue_directory = /var/spool/postfix smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_authenticated_header = yes smtpd_sasl_security_options = noanonymous smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination Following are dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS auth_mechanisms = plain login digest-md5 base_dir = /var/run/dovecot/ mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r when I see telnet localhost 25 eberx@beastie:/etc/dovecot/conf.d$ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 beastie ESMTP Postfix (Ubuntu) ehlo beastie 250-beastie 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN quit 221 2.0.0 Bye Connection closed by foreign host. there is no 250-AUTH How do I fix this ?

2 1

[Dovecot] Imap Ghost folder
by Sascha Zucca 03 Sep '12

03 Sep '12

Hi list, i have a strange "ghost" folder in my subscription list and just can't find out how to get rid of it. It seems to be someones Inbox, but it doesn't tell me whose. Here's a screenshot of Open-Xchanges Web-GUI: /http://s9.postimage.org/6aohh97ov/iehadjhb.jpg / As you can see there is an unamed folder just under Freigaben (Shares). In Thunderbird: /http://s12.postimage.org/z0n82k2u5/bjddgefg.jpg/ Now the Folder is "INBOX"...But it is noones Inbox, as the corresponding user (amazon e.g.) should be a prefix-folder right before the share. some output over Telnet: 1 lsub "" "*" * LSUB () "/" "INBOX" * LSUB () "/" "INBOX/Amazon" * LSUB () "/" "INBOX/Bestellung" * LSUB () "/" "Drafts" * LSUB () "/" "Sent Items" * LSUB () "/" "Spam" * LSUB () "/" "Trash" * LSUB () "/" "Freigaben/amazon/INBOX" 1 OK Lsub completed. 1 list "" "*" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "Sent Items" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/Amazon" * LIST (\HasNoChildren) "/" "INBOX/Bestellung" * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\Noselect \HasChildren) "/" "Freigaben/amazon" * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" * LIST (\HasNoChildren) "/" "Freigaben/amazon/INBOX" 1 OK List completed. This looks a bit strange to me: * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" But i don't know really if that is the ghostfolder. finally here's the interesting part in my dovecot.conf: / namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = Freigaben/%%n/ location = maildir:/var/mail/vhosts/%%d/%%n/:INDEX=/var/mail/vhosts/%%d/%%n/ subscriptions = no list = children inbox = no } / Any idea how to banish the ghost in the machine? Thank you very much Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

4 17

[Dovecot] exclude a folder for lazy expunge (move to trash)
by Angel L. Mateo 03 Sep '12

03 Sep '12

Hello, I'm configuring lazy expunge plugin to act as a kind of backup of my user's emails. I'm getting a little problem because a lot of my users use "move to trash" behaviour in their email client (most of them are using thunderbird which has no option to hide deleted messages and is a hassle working with mark as deleted with it). The problem combining move to trash with lazy expunge is that messages are stored in the expunge namespace twice, first when it was deleted from the original folder and the second when is deleted from the trash. So... is there any way to exclude trash folder from lazy expunge plugin, so mails are stored in the expunge namespace only when they are deleted from their original folder and not from the trash? Another idea... We are purging trash folders with a cron running "doveadm purge" commands. Is there any way to run this command disabling lazy expunge plugin? Any other idea not to duplicate these emails? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 2

[Dovecot] [Postfix] SASL Auth. using Dovecot with password forwarding proxy configuration
by Adi Pircalabu 03 Sep '12

03 Sep '12

Hi, I'm relatively new to Dovecot and I did a bit of search but couldn't find a possible solution for the particular setup I'm working on. Basically I have an SMTP/POP/IMAP proxy setup running Postfix & Dovecot. IMAP/POP authentication is done using the password proxy feature, where the login credentials are passed to the backend server after a db lookup, which does the actual authentication. The POP/IMAP part is working fine. What I'm trying to do is to use Dovecot SASL implementation in Postfix to do SMTP authentication in a similar manner. The problem I have with my current configuration is that SMTP authentication succeeds if only the username matches, because password forwarding works if the authentication succeeds with any given password, as documented at http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy My question is, given the above: is there a way to get SMTP authentication properly in this scenario? The way I see it now, Dovecot SASL accepting the login if only the user matches isn't quite "complete", the auth process should go further and authenticate against the backend server, same as for POP/IMAP connections. Does this requirement make any sense? Maybe I'm missing something in Dovecot configuration to get the SMTP authentication work in password forwarding mode, few pointers will be highly appreciated. PopBSMTP is not an sensible alternative in my case. Here's my configuration, plus some dovecot auth_debug log entries. As you can see, SMTP authentication succeeds with any given password. ---Dovecot--- dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.centos.plus.x86_64 x86_64 CentOS release 6.3 (Final) auth_cache_size = 4 k auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/pki/tls/certs/ca-cert.pem ssl_cert = </etc/pki/tls/certs/_cert.pem ssl_key = </etc/pki/tls/certs/_key.pem userdb { driver = prefetch } grep -v "^$\|^#" /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix password=postfixpassword password_query = SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = '%u' ---Dovecot--- ---Postfix--- smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination ---Postfix--- ---/var/log/maillog--- (IMAP connection) Aug 31 11:20:20 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=192.168.1.222#011rip=192.168.1.56#011lport=993#011rport=44024#011resp=AGFAMGFkaXRlc3QubmV0ADEyM3F3ZVpYQw== Aug 31 11:20:20 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.56): miss Aug 31 11:20:20 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:20:20 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:20:21 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:20:21 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.56): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:20:21 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=BACKEND_SERVER_IP#011email=a@0aditest.net#011proxy#011pass=1234567890 Aug 31 11:20:21 centos6 dovecot: imap-login: Debug: Ignoring unknown passdb extra field: email Aug 31 11:20:21 centos6 dovecot: imap-login: proxy(a(a)0aditest.net): started proxying to BACKEND_SERVER_IP:143: user=<a(a)0aditest.net>, method=PLAIN, rip=192.168.1.56, lip=192.168.1.222, TLS [...] (SMTP connection) Aug 31 11:36:14 centos6 postfix/smtpd[11213]: connect from unknown[192.168.1.200] Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: auth client connected (pid=11213) Aug 31 11:36:14 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.1.222#011rip=192.168.1.200#011resp=AGFAMGFkaXRlc3QubmV0AGFzZA== Aug 31 11:36:14 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.200): miss Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:36:14 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.200): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:36:14 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=203.63.79.87#011email=a@0aditest.net#011proxy#011pass=anygivenpassword Aug 31 11:36:14 centos6 postfix/smtpd[11213]: C9620600A9: client=unknown[192.168.1.200], sasl_method=PLAIN, sasl_username=a(a)0aditest.net Aug 31 11:36:14 centos6 postfix/cleanup[11219]: C9620600A9: message-id=<20120831113614.72ed32df(a)adi.ddns.local> [...] ---/var/log/maillog--- -- Adi Pircalabu

3 5

[Dovecot] possible work plugin deleted_to_trash for otrher foler
by ml 03 Sep '12

03 Sep '12

Hi Timo in the present work would be possible to walk to another folder for deleted_to_trash please answer me -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

2 3

[Dovecot] Special Folder Mocking
by Eddy Ilg|univation 02 Sep '12

02 Sep '12

Dear Dovecot List, probably everyone knows the problem that different clients use different names for "Sent", "Trash" and so on. A simple question: Isn't it possible to advertise one imap folder with different names, depending on the client? E.g. if the client is Outlook, show the "Sent" folder as "Sent Elements" (translated from german) and if the client is Thunderbird, show the "Sent" folder as "Sent"? Best regards, Eddy Ilg

3 4

[Dovecot] New log entries with 2.0.19?
by Knute Johnson 02 Sep '12

02 Sep '12

I just upgraded my Ubuntu server from 11.10 to 12.04.1 and that upgraded Dovecot to 2.0.19. For some reason I'm getting a lot more (5 times) disconnect in IDLE and inactivity time outs. I'm using only IMAP with two users. Both users access the server from multiple devices, phone, tablet and desktop computer. I had previously set the max_userip_connections to 20 and rarely got the following limits exceeded message. That's probably being triggered when we are both home and using all of our devices on the same network. I've now changed it to 40 and we'll see how that does. The other is the IDLE and inactivity timeouts. I don't really understand how IDLE works and I couldn't find an inactivity timeout setting to play with. There are at this second 32 imap or imap-login processes running with only two phones and one desktop running. That's a few more than before the upgrade but not a lot. --------------------- Dovecot Begin ------------------------ Dovecot limits exceeded: max_userip_connections: penny from 216.240.58.138 to 216.240.58.140: 56 Time(s) Dovecot disconnects: Disconnected in IDLE: 485 Time(s) Inactivity: 343 Time(s) no auth attempts: 14 Time(s) no reason: 21 Time(s) Everything seems to be working OK so maybe I should just not worry about it? Thanks, knute... # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_first_valid_uid = 500 auth_gssapi_hostname = auth_krb5_keytab = auth_last_valid_uid = 0 auth_master_user_separator = auth_mechanisms = plain login auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 60 default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_proxy_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = imap_idle_notify_interval = 2 mins imap_logout_format = bytes=%i/%o imap_max_line_length = 64 k import_environment = TZ info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_proxy = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c login_trusted_networks = mail_access_groups = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = mail_privileged_group = mail_save_crlf = no mail_temp_dir = /tmp mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index_disable = no maildir_copy_with_hardlinks = yes maildir_stat_dirs = no maildir_very_dirty_syncs = no master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no passdb { args = deny = no driver = pam master = no pass = no } pop3_client_workarounds = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_format = %08Xu%08Xv postmaster_address = protocols = " imap" quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s sendmail_path = /usr/sbin/sendmail service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 4096 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0600 user = } unix_listener login/login { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 ssl = no } inet_listener imaps { address = port = 993 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 0 ssl = no } inet_listener pop3s { address = port = 0 ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_cert = ssl_client_key = ssl_key = </etc/ssl/private/dovecot.pem ssl_key_password = ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = driver = passwd } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol imap { imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS mail_max_userip_connections = 40 } -- Knute Johnson

1 1

[Dovecot] Strange messages?
by Knute Johnson 02 Sep '12

02 Sep '12

The following messages show up in the output of a script that does some backup. This too is new with the upgrade to Ubuntu server 12.04.1 and dovecot 2.0.19. Anybody know what would generate these sorts of messages? Where or what would cause them? WARN: Duplicate profile 'Dovecot POP3', using last found WARN: Duplicate profile 'Dovecot Secure POP3', using last found WARN: Duplicate profile 'Dovecot IMAP', using last found WARN: Duplicate profile 'Dovecot Secure IMAP', using last found Thanks, -- Knute Johnson

1 0

[Dovecot] How Converting/Using courier-userdb Files ?
by Dirk Caspari 02 Sep '12

02 Sep '12

Hello, how can i convert/use the Original userdb-Files from courier Installation ? The files are looking like a "Special"-DB-Format and are not readable. ----------------- #file /etc/courier/userdb.dat /etc/courier/userdb.dat: GNU dbm 1.x or ndbm database, little endian ----------------- /etc/courier/userdb.dat /etc/courier/userdbshadow.dat These Files was created with the following scripts (Part of "courier-authlib-userdb" Package). ......... /usr/sbin/makeuserdb /usr/sbin/pw2userdb /usr/sbin/userdb .......... Regards D I R K

3 2

Re: [Dovecot] Alerts when process limits are met
by David Anderson 01 Sep '12

01 Sep '12

Hi, Thanks. I used monit, and will code something up of that kind - but I was curious as to whether dovecot had something built in; external monitoring is a somewhat blunter tool, as you don't get to know exactly why there was a problem unless you also parse the logs. Tricky to investigate this kind of issue - it has only happened once, and I had a few hundred people trying to log in, so no time to start debugging! But if it recurs I'll be back to ask for guidance... Many thanks, David -- WordShell - WordPress fast from the CLI - www.wordshell.net On 01/09/12 12:15, Noel Butler wrote: > Seen similar, we use mon¹ for network monitoring, our mon pop3 script > is modified to not only connect, but login, if it cant the trigger > becomes active and if fails again at next check, it alerts engineers > by sms. > > Though, I would investigate the core issue, Timo "apparently" fixed > that hung session stuff in 2.0, it was common in 0.x and 1.x series. > > Cheers > > 1: ( <http://sourceforge.net/projects/mon/files/mon/> > http://sourceforge.net/projects/mon/files/mon/ ) > > >

1 0

[Dovecot] Testing process?
by leam hall 01 Sep '12

01 Sep '12

Morning all! Total newbie question. I'm learning Dovecot and will be plugging in a few things and testing it end to end. What test structures or tools are available for making sure the install is correct and the parameters are taken? Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/>

3 3

[Dovecot] Dovecot generate file when over quota detected
by Dominic Malolepszy 31 Aug '12

31 Aug '12

Hi, I am curious if Dovecot can add an empty file into a Maildir folder as soon as a mailbox has exceeded 100% capacity, and later when it detects the quota has fallen below 100% unlink the file. The idea is the Dovecot LDA would deliver the message and if this caused the mailbox to reach 100%+, add a file into the maibox say "username/Maildir/overquota". Interactions via Dovecot IMAP/POP3 that lower the mailbox usage, for example the user popping, or deleting mail from the mailbox would trigger Dovecot to unlink the file. This means that an MTA can efficiently check for the existence of this 'overquota' file and return a "user(a)domain.com Mailbox full" TEMPFAIL error early during the SMTP transaction prior to accepting any data. Dominic

2 3

[Dovecot] LDAP auth and multiple attributes to construct the mail path
by Anatoly Ivanov 31 Aug '12

31 Aug '12

Hello, So I am trying to construct mail path for my LDAP user lookups, and i need to use two attributes instead of one. For examle, my LDAP directory has two attributes: departmentAttr and userIDAttr, and I want the maildir to reside in /home/${departmentAttr}/${userIDAttr} Unfortunately, I cannot seem to find a way to configure dovecot this way. Right now, I have something like user_attrs = departmentAttr=mail=maildir:/home/%$/%u But %u is the username (which in my environment can easily change, so I cannot use this for maildir location). Any ideas on how to achieve that? So far I have just one brute-force solution - to create an attribute MailDirAttr, and populate it with concatenation of departmentAttr+'/'+userIDAttr by means of a scheduled task. This sounds like unnecessary information duplication, which is usually a very bad practice. So, again - any ideas? Thank you, Anatoly.

2 1

[Dovecot] segfault in mail_user_get_home()
by Lazy 31 Aug '12

31 Aug '12

gdb ./src/imap/.libs/imap Reading symbols from /usr/src/dovecot-2.1.9/src/imap/.libs/imap...done. (gdb) run Starting program: /usr/src/dovecot-2.1.9/src/imap/.libs/imap warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". process 1104 is executing new program: /usr/local/dovecot/bin/doveconf [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". process 1104 is executing new program: /usr/src/dovecot-2.1.9/src/imap/.libs/imap [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Program received signal SIGSEGV, Segmentation fault. 0x00007ffff7b2a0ff in mail_user_get_home (user=0x0, home_r=0x7fffffffe308) at mail-user.c:310 310 if (user->home_looked_up) { (gdb) bt #0 0x00007ffff7b2a0ff in mail_user_get_home (user=0x0, home_r=0x7fffffffe308) at mail-user.c:310 #1 0x00007ffff7ad172e in mdbox_storage_find_root_dir (ns=0x648610) at mdbox-storage.c:90 #2 0x00007ffff7ad180c in mdbox_storage_autodetect (ns=0x648610, set=0x7fffffffe4d0) at mdbox-storage.c:113 #3 0x00007ffff7b2345d in mail_storage_autodetect (ns=0x648610, set=0x7fffffffe4d0) at mail-storage.c:105 #4 0x00007ffff7b2369d in mail_storage_get_class (ns=0x648610, driver=0x0, list_set=0x7fffffffe4d0, flags=0, error_r=0x7fffffffe5b8) at mail-storage.c:180 #5 0x00007ffff7b23c90 in mail_storage_create (ns=0x648610, driver=0x0, flags=0, error_r=0x7fffffffe5b8) at mail-storage.c:342 #6 0x00007ffff7b1c62a in namespace_add (user=0x649be0, ns_set=0x64a8c8, unexpanded_ns_set=0x64a1c0, mail_set=0x64a440, ns_p=0x645380, error_r=0x7fffffffe6e8) at mail-namespace.c:126 #7 0x00007ffff7b1ccbb in mail_namespaces_init (user=0x649be0, error_r=0x7fffffffe6e8) at mail-namespace.c:289 #8 0x00007ffff7b34a64 in mail_storage_service_init_post (ctx=0x633460, user=0x633e08, priv=0x7fffffffe6f0, mail_user_r=0x7fffffffe7b8, error_r=0x7fffffffe6e8) at mail-storage-service.c:641 #9 0x00007ffff7b35dd6 in mail_storage_service_next (ctx=0x633460, user=0x633e08, mail_user_r=0x7fffffffe7b8) at mail-storage-service.c:1114 #10 0x00007ffff7b35efa in mail_storage_service_lookup_next (ctx=0x633460, input=0x7fffffffe810, user_r=0x7fffffffe7c0, mail_user_r=0x7fffffffe7b8, error_r=0x7fffffffe808) at mail-storage-service.c:1149 #11 0x000000000041f61c in client_create_from_input (input=0x7fffffffe810, login_client=0x7fffffffe880, fd_in=0, fd_out=1, input_buf=0x0, error_r=0x7fffffffe808) at main.c:202 #12 0x000000000041f859 in main_stdio_run (username=0x0) at main.c:247 #13 0x000000000041fd0a in main (argc=1, argv=0x631370) at main.c:381 /usr/local/dovecot/bin/doveconf -n # 2.1.9: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32 x86_64 Debian wheezy/sid namespace test { list = children location = maildir:/root/test prefix = test. subscriptions = yes type = shared } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = subscriptions = yes } passdb { driver = pam } ssl = no userdb { driver = passwd } without type = shared there is no segfault, I understand this config might not work (invoking imap directly) but it should't segfault. Regards, Michal Grzedzicki

2 2

[Dovecot] Variables in LDAP userdb
by Alex Crow 31 Aug '12

31 Aug '12

Hi Timo, Is it OK to have dovecot variables in entries in an LDAP userdb? Say I wanted to set the mail userdb parameter to override mail_location, would it work by having an entry in LDAP (eg for mailMessageStore attrib) like: mdbox:/home/email/%d/%n:INDEX=/home/indexes/%d/%1n/%n:ALT=/home/email_archive/%d/%1n/%n and those % variables will still be expanded by dovecot? Or would I be required to replace them in the LDAP directory with their actual values? Cheers Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. "Transact" is operated by Integrated Financial Arrangements plc Domain House, 5-7 Singer Street, London EC2A 4BQ Tel: (020) 7608 4900 Fax: (020) 7608 5300 (Registered office: as above; Registered in England and Wales under number: 3727592) Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)

2 3

[Dovecot] Merge multiple doveadm commands
by Ralf Hildebrandt 31 Aug '12

31 Aug '12

Can I merge these three commands into one? doveadm expunge -u %s mailbox \"INBOX.Deleted Messages\" NOT NEW doveadm expunge -u %s mailbox INBOX.Trash NOT NEW doveadm expunge -u %s mailbox INBOX deleted -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

2 1

[Dovecot] doveadm commands returning 139 at director servers
by Angel L. Mateo 31 Aug '12

31 Aug '12

Hello, I have configured director in front of dovecot imap/pop/lmtp servers. When I need to manipulate a user mailbox, I use doveadm commands at director server's, with -S option. But some commands return exit code 139 when command returns more than 40 entries (I think). For example, the command: sudo doveadm fetch -u amateo hdr mailbox Trash HEADER Subject "nyctalus11/" executed at the backend server returns 952 mails, but executed at director server with -S option, returns only 40 mails and exit code 139. I'm using dovecot 2.1.5 and I attached doveconf -n at director and backend servers. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

1 1

[Dovecot] deliver doesn't update cache index with mbox
by Gerhard Wiesinger 30 Aug '12

30 Aug '12

Hello Timo, I'm having a problem with mbox that opening folder is slow when new mails are delivered to a folder. I'm delivering through the deliver program. Deliver updates index files but IHMO not completely correct. Therefore I compared index files before and after: 1.) Just delivered 2.) After accessing through imap via Thunderbird diff looks like (stripped down to the relevant things): INDEX: -first recent uid ......... = 25847 +first recent uid ......... = 25848 -log file tail offset ..... = 16468 -log file head offset ..... = 16468 +log file tail offset ..... = 16828 +log file head offset ..... = 16828 - - sync_mtime . = 2012-08-30 19:38:05 + - sync_mtime . = 2012-08-30 20:09:23 - - dirty_flag . = 1 + - dirty_flag . = 0 - - highest_modseq = 11162 + - highest_modseq = 11163 - - log_offset ... = 16468 + - log_offset ... = 16828 CACHE: -used_file_size ....... = 6385696 +used_file_size ....... = 6392132 RECORD: seq=25663, uid=25835, flags=0x00 - - ext 0 keywords : (0000) - - ext 1 modseq : 11156 (942b000000000000) + - ext 0 keywords : (0100) + - ext 1 modseq : 11163 (9b2b000000000000) - ext 2 mbox : 42923286 (16f58e0200000000) - - ext 3 cache : 0 (00000000) + - ext 3 cache : 6385696 (20706100) - ext 4 header-md5: (00000000000000000000000000000000) + - cache offset=6385696 size=488, prev_offset = 0 + - hdr.BCC: + - hdr.CC: + - hdr.CONTENT-TYPE: 18: Content-Type: text/plain; charset=us-ascii + - hdr.DATE: 13: Date: Thu, 30 Aug 2012 19:37:24 +0200 <some other hdr.xxxxx lines removed> + - size.virtual: 1081 (3904000000000000) Same patterns from record: 25664-25675 What does dirty_flag=1 mean? Why are the cache headers missing and not written by deliver? Any ideas? Config is below. Thank you. Ciao, Gerhard # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux listen = * mail_full_filesystem_access = yes mail_location = mbox:~:INBOX=/var/mail/%u mbox_lazy_writes = no mbox_write_locks = fcntl passdb { driver = pam } postmaster_address = postmaster@domain protocols = imap service auth { unix_listener auth-userdb { group = users mode = 0660 } } service imap-login { inet_listener imap { port = 0 } } service imap { executable = imap postlogin } service postlogin { executable = script-login -d rawlog } ssl_cert = </etc/pki/dovecot/dovecot-extern.pem ssl_key = </etc/pki/dovecot/private/dovecot-extern.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep } protocol lda { lda_mailbox_autocreate = yes log_timestamp = %Y.%m.%d %H:%M:%S%t mail_debug = yes mail_location = mbox:~/Mail:INBOX=/var/mail/%u }

1 0

[Dovecot] FS Quotas, what am I doing wrong?
by Kelsey Cummings 29 Aug '12

29 Aug '12

I'm not able to get the FS quota module to behave as I expect. Depsite having function fs quotas and dovecot apparently configured to use then, the quotas appear to be empty and/or not configured. Any clues? # quota kgc Disk quotas for user kgc (uid 500): Filesystem blocks quota limit grace files quota limit grace /dev/sda3 1229460 7000000 8000000 103776 5000000 6000000 # doveadm quota get -u kgc Quota name Type Value Limit % User user STORAGE 0 - 0 User user MESSAGE 0 - 0 # telnet 0 143 ... A003 GETQUOTAROOT INBOX <- Not sure this is correct A003 OK No quota. imap-login: Login: user=<kgc>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=6048, secured, session=<1CGqXm7IhwB/AAAB> imap: Debug: Loading modules from directory: /usr/lib64/dovecot imap: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so imap: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so imap(kgc): Debug: Effective uid=500, gid=501, home=/home/kgc imap(kgc): Debug: Quota root: name=User user backend=fs args=inode_per_mail:noenforcing imap(kgc): Debug: maildir++: root=/home/kgc/Maildir, index=, control=, inbox=/home/kgc/Maildir, alt= imap(kgc): Debug: fs quota add mailbox dir = /home/kgc/Maildir imap(kgc): Debug: fs quota block device = /dev/sda3 imap(kgc): Debug: fs quota mount point = / imap(kgc): Debug: fs quota mount type = ext4 # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.5.1.el6.x86_64 x86_64 Scientific Linux release 6.0 (Carbon) mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = quota mbox_write_locks = fcntl passdb { driver = pam } plugin { quota = fs:User user:inode_per_mail:noenforcing } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = quota imap_quota } -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

1 0

[Dovecot] IMAP IDLE - iPhone?
by dovecot＠noboost.org 29 Aug '12

29 Aug '12

Hi All, Probably a very common question now days. I'd like to configure our iPhones at work to go directly to my dovecot server (currently dovecot-2.0.9-2.el6_1.1.x86_64). Using the IMAP IDLE (push email) protocol. Has anyone successfully deployed this? If yes, did you have to use an app from the Apple store? For me the IMAP process works, however it's clearly not notifying the client when new email is detected on the server. cya Craig

15 30

[Dovecot] Dovecot Director Output buffer full
by Dominic Malolepszy 29 Aug '12

29 Aug '12

Hi, I have been seeing the following messages in logs on all my Dovecot servers each running both a dovecot-director instance and a dovecot pop3/imap backend. These logs appear to relate to problems with the director. Aug 28 16:09:52 dovecot01 dovecot: director: Error: director(10.0.0.2:9090/right): Output buffer full, disconnecting Aug 28 16:10:01 dovecot01 dovecot: director: Error: Ring SYNC appears to have got lost, resending Aug 28 16:10:02 dovecot01 dovecot: director: Error: Director 10.0.0.2:9090/right disconnected Aug 28 16:09:51 dovecot02 dovecot: director: Error: director(10.0.0.3:9090/right): Output buffer full, disconnecting Aug 28 16:09:57 dovecot02 dovecot: director: Error: Ring SYNC appears to have got lost, resending Aug 28 16:10:01 dovecot02 dovecot: director: Error: Director 10.0.0.3:9090/right disconnected Aug 28 16:10:02 dovecot02 dovecot: director: Error: director(10.0.0.1:9090/left): Ping timed out, disconnecting Aug 28 16:13:15 dovecot02 dovecot: director: Warning: Delaying new user requests until ring is synced Note dovecot01 has IP 10.0.0.1 and dovecot02 has IP 10.0.0.2 and so on. This seems to show up when I enable the poolmon script (https://github.com/brandond/poolmon) on all the servers, and all servers start simultaneous logins to each others Dovecot backends. I did notice that the poolmon script has been flapping vhost weights a lot (I am looking at making the script handle transient errors better), which means that it is connecting to the dovecot-director socket every few minutes and changing vhost weights from 100 to 0 and vice-versa. Is there some sort of limit in the Dovecot Director that is being exceeded that should be tweaked? # 2.1.5: /etc/dovecot-director/dovecot.conf # OS: Linux 2.6.32-279.el6.mccqfix.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.3 (Santiago) auth_cache_size = 100 M auth_default_realm = example.com auth_failure_delay = 5 secs auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1 auth_worker_max_count = 600 base_dir = /var/run/dovecot-director/ director_mail_servers = 10.0.0.1 10.0.0.2 10.0.0.3 10.0.0.4 10.0.0.5 director_servers = 10.0.0.1 10.0.0.2 10.0.0.3 10.0.0.4 10.0.0.5 disable_plaintext_auth = no instance_name = dovecot-dir passdb { args = /etc/dovecot-director/dovecot-sql.conf driver = sql } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = 10.0.0.1 port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { address = 10.0.0.1 port = 143 } inet_listener imaps { address = 10.0.0.1 port = 993 ssl = yes } process_min_avail = 100 } service pop3-login { executable = pop3-login director inet_listener pop3 { address = 10.0.0.1 port = 110 } inet_listener pop3s { address = 10.0.0.1 port = 995 ssl = yes } process_min_avail = 100 } verbose_proctitle = yes

1 0

[Dovecot] Size of Mailbox affecting the sending of mail?
by Tim Smith 29 Aug '12

29 Aug '12

Hi, I didn't know where to post this one so I'll start off with you guys and then try Postfix if I'm barking up the wrong tree! Having set up my mail server (Dovecot/Postfix), users are experiencing long delays (a couple of minutes) when sending mail from mail client such as Thunderbird - this increases with attachments. Having had a brief discussion with someone, they mentioned that the reason that this may be to do with the size of the mailbox. I couldn't see the rationale behind this unless Dovecot is syncing the mailbox after every sent mail (due to possibly saving the sent item?) The mail is being delivered successfully but the amount of time it is taking to complete the action is far too long! Sorry this is a bit vague but any advice on trying to diagnose the problem would be appreciated. Thanks in advance! Tim

6 9

[Dovecot] quota: ignore deleted messages (?)
by Sven Hartge 28 Aug '12

28 Aug '12

Hi! I am currently in the process of preparing a migration of our old Courier-based IMAP/POP server setup to a Dovecot-based one. During this process I came across the following problem with the difference Courier and Dovecot handle deleted messages and mail quota. Quote from http://www.courier-mta.org/imap/README.maildirquota.html: ,---- | The default application configuration that uses this maildirquota | library does not count deleted messages, and any contents of the Trash | folder, against the quota. Messages that are marked as deleted (but not | yet actually removed), or messages that are moved to the Trash folder | (which is subject to automatic purging) do not count towards the set | quota. `---- Ignoring the content (or increasing the quota) of the Trash folder is easy and no problem, but ignoring deleted messages seems impossible without changes to the code. While deleted messages are still stored on the server and still take up space until they are expunged, counting them against the quota is somewhat counter-intuitive because most clients don't show those mails and the normal user is unaware the mails he deleted are still there and take up space. Worse yet, if the client uses move-to-Trash, a user deleting mails will double the used space (until Expunge is used) and this may push him over his quota and thus cause any new mail delivery to fail. Unfortunately as our users are used to the courier way of handling the quota this will cause trouble after the migration. And this setup is run at a University, so I don't have any control over the clients a user uses and the behavior of said clients so I am not able to disable the move-to-Trash feature or force an immediate Expunge after a delete. So I propose an additional flag for the quota_rule config option to be able to enable a more lax interpretation of the quota enforcement: quota_rule = *:storage=1G:ignoredeleted quota_rule2 = Trash:storage=+100M Of course I would then have a nightly cronjob which force-expunges all deleted messages so that users can't store mails infinitely in their mailboxes. Thanks for your time and Grüße, Sven. -- Sigmentation fault. Core dumped.

5 18

[Dovecot] Deleting metadata smashes file dovecot.dict
by Andre Gröbe 28 Aug '12

28 Aug '12

Hi, I am using dovecot (see dovecot -n output below) with metadata plugin in my own plugin. I want to insert and delete some large metadata (>4KiB). It seems, that the delete in a second call of my plugin smashes the file dovecot.dict in users dir: 1st call: *dovecot.dict is empty -delete metadata 1 -delete metadata 2 -insert metadata 1 ~8KiB -insert metadata 2 <1KiB *dovecot.dict contains two entries 2nd call: -delete metadata 1 -delete metadata 2 -insert metadata 1 ~8KiB -insert metadata 2 <1KiB *dovecot.dict contains the two entries + some waste If all eight steps are called together (in the same plugin context) the file dovecot.dict seems to be ok. I have created a test plugin to reproduce this behaviour: <http://temp-share.com/show/dPf3myu5W>. It needs the notify and (patched) metadata plugin to run. To get it work i copy an email from one IMAP folder to another (to trigger the copy notifier). It seems, that there is an issue on writing metadata/dict, can anybody reproduce it or knows what is wrong? TIA -- Andre

3 10

[Dovecot] Sieve/pigeonhole rejects email addresses for valid UNIX users
by David Anderson 28 Aug '12

28 Aug '12

Self-explanatory, I hope (note the period on the end of the username); sieve/pigeonhole does not allow you to have senders which end with a period, which means that any UNIX users with such usernames who send mail have it rejected by sieve: # useradd testuser. # su - testuser. $ mail david(a)example.com -s 'testing' 123 . [testuser.@levi ~]$ logout # less /var/log/maillog Aug 22 07:50:56 levi dovecot: lda(david(a)example.com): Error: sieve: envelope sender address 'testuser.(a)myhost.example.com' is unparsable Versions: dovecot-pigeonhole-0.2.6-21.el5 dovecot-managesieve-0.2.6-21.el5 dovecot-2.0.18-1_134.el5 Why would anyone have a UNIX username ending in a period? For one, web hosting companies may use your domain name as your username - but be subject to a 32-character limit, so your domain name gets truncated. David -- WordShell - WordPress fast from the CLI - www.wordshell.net

4 6

[Dovecot] use sieve plugin with variable and folders
by Alano Conraz 28 Aug '12

28 Aug '12

Hello , I'm trying to use the pigeonhole plugin but I'm experiencing configuration problem... Hope you could help me! Firstly : my sieve filter test is the next one : /////////////////// require ["fileinto" , "variables" , "mailbox"]; if address :matches "Delivered-To" "*(a)*.*" { fileinto :create ".INBOX.iop" ; stop ; } //////////////////// I get in the log the following : "error: msgid=<****>: failed to store into mailbox '.INBOX.iop': Invalid mailbox name" And the email is stored in the INBOX (implicit keep was successful) I checked that "lda_mailbox_autocreate" and "lda_mailbox_autosubscribre" are set to "yes". Then , when this problem be solved, I would like to know if it is possible with the sieve plugin to implement the following algorithm : - extract the address from the header field "Delivered-To" and set the variable $delivto to this previous value. - extract the address from the header field "To" and set the variable $to to this previous value. - compare $delivto and $to : if they are diffrent, then redirect the email in the subfolder .INBOX.iop. Thank you for any help!

2 1

[Dovecot] Fabricio Archanjo invited you to check out Dropbox
by Dropbox 28 Aug '12

28 Aug '12

Fabricio Archanjo wants you to try Dropbox! Dropbox lets you bring all your photos, docs and videos with you anywhere and share them easily. Accept invitation here: http://www.dropbox.com/el/?r=/referrals/NjI1MTc0NDM1Mjc%3Fsrc%3Dreferrals_b… - The Dropbox Team ____________________________________________________ To stop receiving invites from Dropbox, please go to http://www.dropbox.com/bl/694ad39c033e/dovecot%40dovecot.org

1 0

[Dovecot] Fabricio Archanjo invited you to check out Dropbox
by Dropbox 28 Aug '12

28 Aug '12

Fabricio Archanjo wants you to try Dropbox! Dropbox lets you bring all your photos, docs and videos with you anywhere and share them easily. Accept invitation here: http://www.dropbox.com/el/?r=/referrals/NjI1MTc0MTkzODc%3Fsrc%3Dreferrals_b… - The Dropbox Team ____________________________________________________ To stop receiving invites from Dropbox, please go to http://www.dropbox.com/bl/694ad39c033e/dovecot%40dovecot.org

1 0

[Dovecot] Help with Virtual Plugin
by Joy 28 Aug '12

28 Aug '12

Dear Experts, I have configured virtual plugin for my setup which is working as expected but after this dovecot lda is unable to deliver message to any mailbox and showing following error:- Error: user XXXXX: Initialization failed: Namespace 'virtual.': Unknown mail storage driver virtual Aug 28 12:46:27 lda(XXXXX): Fatal: Invalid user settings. Refer to server log for more information. Here is Namespace setting on my server:- namespace { type = private separator = . prefix = inbox = yes } namespace { prefix = virtual. separator = . location = virtual:~/Maildir/virtual:LAYOUT=maildir++ } Please let me know what could be the issue..

3 4

[Dovecot] Java driver for doveadm
by Thufir 27 Aug '12

27 Aug '12

I've looked at http://wiki2.dovecot.org/Tools/Doveadm/Mailbox and there a few features I like which javax.mail just doesn't have. Is there maybe a Java driver for doveadm? thanks, Thufir

3 3

[Dovecot] plugin development: retrieve username -d -f inside plugins
by Alano Conraz 27 Aug '12

27 Aug '12

Hello, i don't know if it a the right place to ask my question related to the development of dovecot plugins, please correct me if it is not. I'm trying some dovecot plugin development. I did a little plugin that suit my needs but i'd like to go further now... I would like to know if there is a kind of "getenv" function that I could call to retrieve in my plugin the username of the mailbox being delivered by dovecot-lda or served by imap server. For example, when I use the deliver with "cat file.txt | deliver -d " user(a)domain.net" -f "me(a)domain.net" I would like to call a function that could return for me the argument of "-d" or "-f". i'm working with dovecot 2.0.17 by now. Thank you

2 3

[Dovecot] Recipe for "admin-less restore"
by Ralf Hildebrandt 27 Aug '12

27 Aug '12

Is there a way for setting up dovecot in such a way that a user can "jump back in time" to an old mailbox "state" in order to retrieve his accidentially deleted mail? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | http://www.charite.de

5 4

[Dovecot] How to configure dovecot for specific mailboxes only?
by Alex 27 Aug '12

27 Aug '12

Hi, is it possible to configure dovecot so that it only serves mailboxes of specified users? All other users should be completely ignored so that no indexing of messages or other resource consuming actions take place. Thanks in advance, Alex

2 1

[Dovecot] dovecot stats error
by Robert Schetterer 25 Aug '12

25 Aug '12

Hi Timo, any idea whats this related too ? dovecot: stats: Error: Mail server input error: UPDATE-SESSION: stats shrank: mrbytes 21703727 < 25193928 -- Best Regards MfG Robert Schetterer

3 3

[Dovecot] UIDPLUS for Maildir?
by Martin Rabl 25 Aug '12

25 Aug '12

Hi, I found the following comment in the documentation (http://wiki.dovecot.org/FeatUIDPLUS) last edited on 2009-03-15 > Dovecot already supported UIDPLUS at one point for mbox, but implementing it > for Maildir has to be done differently (UIDs are allocated later with Maildir). > So currently the UIDPLUS code is removed until it can be made to > work with Maildir. My question: does this extension now run with maildir? Thank you, Martin

2 1

[Dovecot] dsync replication available for testing
by Timo Sirainen 25 Aug '12

25 Aug '12

In dovecot-2.1 hg you can now test dsync-based replication. Everything isn't finished yet, but it appears to work and I've enabled it for my @dovecot.fi mails. Some issues: - public namespace isn't replicated at all - shared namespace is replicated, but not private mail flags - I've only tested SSH replication setup now, not director replication setup (and director setup is still missing many things) - SSH replication setup uses aggregator process, which isn't really necessary and can probably be avoided in future Below is a configuration for virtual user setup. System user configuration works pretty much the same, except doveadm/ssh is run as root. Try first that dsync works successfully with ssh in host1: doveadm sync -u user@domain remote:vmail@host2.example.com and also in host2: doveadm sync -u user@domain remote:vmail@host1.example.com ------ mail_plugins = $mail_plugins notify replication service aggregator { # give enough permissions for mail processes fifo_listener replication-notify-fifo { user = vmail mode = 0600 } unix_listener replication-notify { user = vmail mode = 0600 } } service replicator { # start replication at startup process_min_avail = 1 } plugin { # host1 replicates to host2 mail_replica = remote:vmail@host2.example.com # host2 replicates to host1 #mail_replica = remote:vmail@host1.example.com } #dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace} service doveadm { # if you're using a single virtual user, set this to # start ssh as vmail (not root) user = vmail }

4 20

[Dovecot] Problem use localized prefix in namespace
by (Dovecot) Sergey Sidlyarenko 25 Aug '12

25 Aug '12

dovecot --version 2.1.7 uname -a Linux ns 3.2.0-2-amd64 #1 SMP Mon Jun 11 17:24:18 UTC 2012 x86_64 GNU/Linux Debian sid Problem with localized prefix in namespace. Create namespace namespace { hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/var/mail/%d%n/test1:LAYOUT=fs:DIRNAME=maildirfolder:UTF-8 mailbox next { auto = subscribe special_use = } prefix = Тест1/ separator = / subscriptions = yes type = private } namespace { hidden = no ignore_on_failure = no inbox = no list = yes location = maildir:/var/mail/%d%n/test2:LAYOUT=fs:DIRNAME=maildirfolder:UTF-8 mailbox next { auto = subscribe special_use = } prefix = &BCIENQRBBEI-2/ separator = / subscriptions = yes type = private } result A0002 NAMESPACE * NAMESPACE (("" "/")("links/" "/")({10} Тест1/ "/")("&BCIENQRBBEI-2/" "/")) NIL NIL A0002 OK Namespace completed. A0003 LIST "" "*" ... cut * LIST (\Noselect \HasChildren) "/" "&BCIENQRBBEI-1" * LIST (\HasNoChildren) "/" "&BCIENQRBBEI-1/next" * LIST (\Noselect \HasChildren) "/" "&-BCIENQRBBEI-2" * LIST (\HasNoChildren) "/" "&-BCIENQRBBEI-2/next" * LIST (\HasNoChildren) "/" "&BCIENQRBBEI-1/next" * LIST (\HasNoChildren) "/" "&-BCIENQRBBEI-2/next" A0002 OK List completed. A0003 LSUB "" "*" ... cut * LSUB () "/" "&-BCIENQRBBEI-2/next" * LSUB () "/" "&BCIENQRBBEI-1/next" * LSUB () "/" "&BCIENQRBBEI-1/next" * LSUB () "/" "&-BCIENQRBBEI-2/next" A0003 OK Lsub completed. A0004 SELECT "&BCIENQRBBEI-1/next" * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1344240572] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences A0004 OK [READ-WRITE] Select completed. A0005 SELECT "&BCIENQRBBEI-2/next" Connection closed by foreign host. in error log 2012-08-17 22:19:17 imap(admin(a)lefoyer.ru): Panic: file mail-storage.c: line 791 (mailbox_check_mismatching_separators): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) 2012-08-17 22:19:17 imap(admin(a)lefoyer.ru): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x4413a) [0x7f8d6bcc613a] -> /usr/lib/dovecot/libdovecot.so.0(+0x4417e) [0x7f8d6bcc617e] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8d6bc9d82a] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x7e506) [0x7f8d6bf8e506] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0x18) [0x7f8d6bf8e538] -> dovecot/imap(cmd_select_full+0x13e) [0x40ddbe] -> dovecot/imap(command_exec+0x3c) [0x4118dc] -> dovecot/imap() [0x4109ae] -> dovecot/imap() [0x410a5a] -> dovecot/imap(client_handle_input+0x11d) [0x410cad] -> dovecot/imap(client_input+0x62) [0x411552] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f8d6bcd2ff6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xa7) [0x7f8d6bcd3ca7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f8d6bcd2a08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f8d6bcbf483] -> dovecot/imap(main+0x285) [0x409265] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f8d6b919ead] -> dovecot/imap() [0x4093d5] 2012-08-17 22:19:17 imap(admin(a)lefoyer.ru): Fatal: master: service(imap): child 20040 killed with signal 6 (core dumps disabled) -- Best regards, Sidlyarenko Sergey Aleksandrovish +7(495)509-42-07 tresh_dovecot(a)lefoyer.ru mailto:tresh_dovecot@lefoyer.ru

2 2

[Dovecot] Shared mdboxes
by Wagner Michel Martins de Azevedo 24 Aug '12

24 Aug '12

Hi Timo, I'm trying to share two folders. The first one it's public and the other is per user based, using acl's to control access etc . Dovecot create the folders, but when I'll subscribe using ThunderBird client both of them seens like watermarked and has a "mailboxes" folder inside. I can set up the acl's rules using Thunderbird. Log files like mail.log don't show nothing in special and mail.err has nothing. Here is the config. # 2.1.8 (b4cd382b6606): /etc/dovecot/dovecot.conf# OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.5 /etc/dovecot/conf.d/10.mail.conf namespace { type = public separator = . prefix = public. location = mdbox:/var/mail_shares/public:INDEX=/var/mail_shares/public subscriptions = no}namespace { type = shared separator = . prefix = %h/shared location = mdbox:%h/shared:INDEX=%h/shared subscriptions = no list = children} Thanks, Wagner Azevedo

1 0

[Dovecot] enabling per user quota plugin and problems with pop3
by Angel L. Mateo 24 Aug '12

24 Aug '12

Hello, I am configuring quota plugin per user, not for the whole system. As documentation says (http://wiki2.dovecot.org/Quota) I have to add "quota" to the global mail_plugins and "imap_quota" to mail_plugins for protocol imap, but I don't know how to configure this in a userdb. I'm using a passwd-file in the way: <user>:{plain}password:<uid>:<gid>::<home>::userdb_mail_plugins=quota,imap_quota but this activate both plugins in the global mail_plugins option. The problem with this is that if the user tries to connect via pop3 instead of imap (a thing that I permit, although the user shouldn't do it) I have the error: Aug 20 10:04:18 myotis30 dovecot: pop3: Error: dlopen(/usr/lib/dovecot/modules/lib11_imap_quota_plugin.so) failed: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: undefined symbol: client_send_tagline is there any way to solve this problem? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 5

Re: [Dovecot] problem with virtual plugin/index files?
by Lutz Preßler 24 Aug '12

24 Aug '12

Hello, Timo: on Oct 29th I wrote ---- with latest 2.0.6 (601065674f74), the following virtual mailbox is not behaving correctly. I'm quite sure that the problem has not existed in some earlier 2.0.x (maybe only INBOX as mailbox then though): ~user/Maildir/virtual/.week/dovecot-virtual contains INBOX INBOX.* -INBOX.Trash inthread refs younger 604800 This works as expected for the first time. But later on, also older messages/ threads are included until I delete the virtual/.week/dovecot.index*. ---- Just want to state that this problem still persists with latest version. Any idea? Thanks and greetings, Lutz -- Lutz Preßler <Lutz.Pressler(a)SerNet.DE> http://www.SerNet.DE/ SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen Tel.: +49-551-370000-2, FAX: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

2 4

[Dovecot] Error: Couldn't open INBOX: Timeout while waiting for lock
by Kavish Karkera 23 Aug '12

23 Aug '12

Hi , My users are frequetly getting the below error, Aug 21 00:04:18 blade6 dovecot: pop3-login: proxy(hgl_dipak): Login failed to 192.168.1.43:110: [IN-USE] Couldn't open INBOX: Timeout while waiting for lock. We are proxing pop connections from one pop server (dovecot version 1.1.20) i.e 192.168.1.39 to the other pop Server (Dovecot version 2.0.16 ) i.e 192.168.1.4. We have set pop3_lock_session = yes and dont want to disable it. Please Help !! :) K.K

2 1

[Dovecot] userdb multiple databases
by Angel L. Mateo 23 Aug '12

23 Aug '12

Hello, I'm trying to configure per user plugins. My original passdb and userdb is in a ldap directory (using userdb with prefetch). To configure per user plugins (in fact, I want to enable quota plugin for some users) I need to configure mail_plugins attribute in the userdb. The problem is that I don't know any ldap attribute to store this information (is there any schema with includes an attribute for this). So I want to configure it in a passwd-file file. My problem is that I don't know if I can chain userdb databases. I know I can configure multiple databases, but as far as I know, they are looked in order, so if the user is found in the first one, then is no look for the user in the second one, so I have to configure all user's attributes in the passwd-file database. Is there any way to chain these lookups? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

2 1

[Dovecot] Panic: file mail-storage.c: line 791 (mailbox_check_mismatching_separators)
by Claus Rosenberger 23 Aug '12

23 Aug '12

Hi, with fetching the folder structure with the webclient Tine i can see following error messages inside of the logfiles: Panic: file mail-storage.c: line 791 (mailbox_check_mismatching_separators): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x448fa) [0x7f70036db8fa] -> /usr/lib/dovecot/libdovecot.so.0(+0x44946) [0x7f70036db946] -> /usr/lib/dovecot/libdovecot.so.0(+0x1b8ca) [0x7f70036b28ca] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open_stream+0) [0x7f70039a1550] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_open+0xf) [0x7f70039a156f] -> dovecot/imap(cmd_select_full+0x14a) [0x40db1a] -> dovecot/imap(command_exec+0x3d) [0x41160d] -> dovecot/imap() [0x41058e] -> dovecot/imap() [0x41066d] -> dovecot/imap(client_handle_input+0x135) [0x410895] -> dovecot/imap(client_input+0x5f) [0x4111bf] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f70036e7ea6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9f) [0x7f70036e8f2f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f70036e7e48] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f70036d4103] -> dovecot/imap(main+0x2a5) [0x419695] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f7003353c8d] -> dovecot/imap() [0x408f49] Fatal: master: service(imap): child 21152 killed with signal 6 (core dumps disabled) ------------ dovecot -n ------------ # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.5 ext4 first_valid_gid = 104 first_valid_uid = 107 last_valid_gid = 104 last_valid_uid = 107 login_trusted_networks = 10.20.11.4 mail_gid = 104 mail_location = maildir:/var/spool/dovecot/%Ld/%Ln/Maildir mail_plugins = quota acl mail_privileged_group = mail mail_uid = 107 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { hidden = no list = children location = maildir:/var/spool/dovecot/%%d/%%n/Maildir:INDEX=/var/spool/dovecot/%d/%n/Maildir/shared/%%n prefix = shared/%%n/ separator = / type = shared } namespace inbox { inbox = yes location = prefix = INBOX/ separator = / type = private } namespace virtual { alias_for = INBOX/ hidden = yes list = no location = prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/spool/dovecot/%d/shared-mailboxes quota = maildir:User quota quota_rule = *:storage=1GB sieve = /var/spool/dovecot/%Ld/%Ln/.dovecot.sieve sieve_dir = /var/spool/dovecot/%Ld/%Ln/sieve } postmaster_address = postmaster(a)rocnet.de protocols = " imap sieve pop3 sieve" service auth { unix_listener auth-userdb { group = dovecot mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service imap { process_limit = 1024 } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { process_limit = 1024 } ssl_cert = </etc/ssl/certs/pop3d.pem ssl_key = </etc/ssl/private/pop3d.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lda { mail_plugins = quota acl sieve } protocol imap { mail_plugins = quota acl imap_quota imap_acl } I checked if there are special characters in the folder structure but there are only standard ones. ---- Claus

2 2

[Dovecot] No status for INBOX/* in mbox NS (2.1.6)
by Jost Krieger 23 Aug '12

23 Aug '12

Maybe it's fixed, but the last "interesting" text in the Changelog was before 2.1.6. Most of our users still have mboxes in the classical layout, so you can't have subfolders and messages in the same folder, *except for the INBOX*, as it is physically separate. Someone complained that he saw subfolders in roundcube he couldn't delete, because they didn't show up in the subscription view. Before hitting on roundcube, I mperformed a few checks and got the following: root@cx-y-z qmail # doveadm mailbox status -u usera messages 'INBOX/*' root@cx-y-z qmail # doveadm mailbox status -u usera messages 'INBOX/test1' INBOX/test1 messages=0 This is mysterious. It doesn't happen with my account, that is in a mdbox: root@cx-y-z qmail # doveadm mailbox status -u kriegjcb messages 'INBOX/*' INBOX/test1 messages=1 Our setup is a bit complicated, but most of it shouldn't be relevant to the problem. # 2.1.6: /usr/local/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.9-103.ELsmp i686 Red Hat Enterprise Linux AS release 4 (Nahant Update 9) auth_first_valid_uid = 100 auth_master_user_separator = * dict { quota = mysql:/usr/local/dovecot/etc/dovecot-dict-mysql.conf } disable_plaintext_auth = no first_valid_uid = 100 lda_mailbox_autocreate = yes log_path = /dev/stderr log_timestamp = mail_access_groups = nofiles mail_location = mbox:~/Mail:INBOX=~/Mailbox:INDEX=~/Index mail_plugins = " quota zlib mail_log notify virtual stats" mdbox_rotate_size = 5 M namespace { hidden = no inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes inbox = no list = children location = maildir:~/Maildir prefix = "#MD/" separator = / type = private } namespace { hidden = yes list = no location = virtual:~/Maildir/Virtual prefix = Virtual/ separator = / type = private } namespace { hidden = yes list = no location = virtual:/usr/local/dovecot/etc/virtuell:INDEX=~/Virtuell prefix = Virtuell/ separator = / subscriptions = no type = private } passdb { driver = pam } passdb { args = /usr/local/dovecot/etc/passwd.dovcot.master driver = passwd-file master = yes } plugin { acl = vfile mail_log_events = undelete mailbox_delete mailbox_rename mailbox_create mail_log_fields = uid box msgid size quota = dict:User quota::proxy::quota quota2 = fs:Disk quota stats_refresh = 30 secs stats_track_cmds = yes } protocols = pop3 imap service auth { client_limit = 4300 user = root } service dict { unix_listener dict { group = nofiles mode = 0666 } } service doveadm { inet_listener { port = 542 } } service imap-login { inet_listener imap { address = 134.147.64.38 port = 143 } service_count = 0 } service imap { drop_priv_before_exec = yes process_limit = 2048 vsz_limit = 1 G } service pop3-login { inet_listener pop3 { address = 134.147.64.38 port = 110 } service_count = 0 } service pop3 { drop_priv_before_exec = yes process_limit = 2048 vsz_limit = 512 M } service stats { fifo_listener stats-mail { mode = 0666 user = dovenull } } ssl = no stats_command_min_time = 5 mins stats_domain_min_time = 1 hours stats_ip_min_time = 1 hours stats_memory_limit = 64 M userdb { args = /usr/local/dovecot/etc/dovecot-mysql.conf driver = sql } userdb { driver = passwd } protocol imap { mail_max_userip_connections = 50 mail_plugins = " quota zlib mail_log notify virtual stats imap_quota imap_zlib imap_stats" } Thanks Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 1

[Dovecot] For the wishlist
by Jost Krieger 23 Aug '12

23 Aug '12

I would like very much to have a "doveadm copy", which probably could be made out of "doveadm move" by removing ca. 2 lines (and changing a few strings from "move" to "copy"). This would make it a lot easier to script quite a few things without using a real imap client. I can run around this by doing an import followed by a move but this will duplicate the mails (even when using mdbox). Mit freundlichen Grüßen Jost Krieger -- | Helft Spam ausrotten! HTML in Mail ist unhöflich. | | Postmaster, JAPH, manchmal Wahrsager am RZ der RUB | | Wahre Worte sind nicht gefällig, gefällige Worte sind nicht wahr.| | Lao Tse, Tao Te King 81 |

2 1

[Dovecot] Dovecot / Win8 Mail App Folder Subscription Issue
by Adam Rosi-Kessel 23 Aug '12

23 Aug '12

Win8 RTM Mail App now supports IMAP. I am running Dovecot 1.2.15 on a Debian Stable server. The App works fine except the list of folders displayed seems to be a random subset of all my folders. I can't figure out how it's picking which folders to show, or how to change what's subscribed. Editing the "subscriptions" folder in ~/Maildir/ doesn't seem to have any impact. Any suggestions on how to troubleshoot or narrow done this issue? I posted to a Microsoft forum but was told the Mail App will only support official email providers.

1 0

[Dovecot] MailDir Issue
by Frank Kirschner 23 Aug '12

23 Aug '12

Hello List, I'm still running dovecot in version 1.1.7 No I have setup a new installation with dovecot 2.0.9 and had running some tests with a testdomain. Everything is working well. The Maildir has exactly the same structure like ../domain/username/... Can I copy the whole maildir to the new server? Logical that I have also to move the SMTP network configuration to the new machine. best regards Frank

2 1

[Dovecot] doveadm director move behaviour
by Angel L. Mateo 23 Aug '12

23 Aug '12

Hi, I have a director farm running in front of dovecot pop/imap servers. For a reason, one of my backend servers have been down, so poolmon disables it in director servers and users corresponding to it has been sent to other servers. Until this, no problem. Now my failed backend server is up again, and I want to redirect all of its users to it, without waiting for it director sessions to end. So I have used doveadm director move <user> <backend ip> to move them to its "hashed" server. Although a doveadm director status <user> now shows me that this user is directed to the new server, doveadm who in the temporal server shows me that the user is actually connected to it, although messages are delivered to it through is correct server. So I have had to manually kick that users in the temporal servers. Is this the expected behaviour of the move command for director? Is there any way to also force the kick of the imap/pop user's connection in the temporal server? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868887590 Fax: 868888337

3 8

[Dovecot] more dsync issues
by Jeff Gustafson 23 Aug '12

23 Aug '12

It hit another dsync snag. We have a script that executes a dsync backup command to a remote host. No write should be happening on the remote host (the backup host). The error is: dsync-local(anonymous(a)domain.com): Error: remote: dsync-remote(anonymous(a)domain.com): Error: Can't delete mailbox INBOX: INBOX can't be deleted. dsync-remote(anonymous(a)domain.com): Error: command MSG-SAVE failed dsync-local(anonymous(a)domain.com): Error: read() from worker server failed: EOF dsync-local(anonymous(a)domain.com): Error: Unexpected reply from server: dsync-local(anonymous(a)domain.com): Warning: Mailbox changes caused a desync. You may want to run dsync again. We're currently running 2.1.7 since > 2.1.8 causes a problem with our webmail software. ...Jeff

1 0

[Dovecot] blf-crypt
by Sven Schwyn 23 Aug '12

23 Aug '12

Hi The blf-crypt password schema mentioned in the docs could be a solution to my auth problem. However, the docs state that actual support depends on the glibc. Mine apparently doesn't. Does support depend on the glibc's version (mine is 2.15-r2)? Maybe someone with access to a box with a good enough glibc could do the following and post the hash for the plain password "test"? doveadm pw -s BLF-CRYPT Enter new password: test With this I could verify whether the BLF-CRYPT scheme would solve my problem in the first place without going through the hassle of upping the glibc. Thanks a bunch!

2 1

[Dovecot] difference between namespace auto=subscribe and autocreate plugin
by Igor Zinovik 22 Aug '12

22 Aug '12

Hello. I read docs, but still do not understand difference between following configuration options: namespace inbox { # Create and subscribe to folder mailbox Drafts { auto=subscribe } and `autocreate' plugin plugin { autocreate = inbox.Drafts autosubscribe = inbox.Drafts On wiki page that describes `autocreate' plugin i read: ... mailboxes that must always exist for all users. So even if user delete Drafts IMAP folder on next connection server will create it. Is `mailbox' undocumented feature? I see it only in configuration file, but wiki does not mention it.

2 1

[Dovecot] How dovecot treats UTF8 mailbox names in sieve scripts and `namespace' section
by Igor Zinovik 22 Aug '12

22 Aug '12

Hello. I read on upgrading page that one can use UTF8 mailbox names for plugins. As i understand i do not need to convert UTF8 names to mUTF-7 and can use raw UTF8 in plugins section, e.g.: /etc/dovecot/dovecot.conf ... plugin { ... # Autocreate \Spam folder autocreate = Спам autosubscribe = Спам ... But what about sieve scripts and other configuration sections: 1. Do i need to convert UTF8 mailbox names in `namespace' section? namespace inbox { ... mailbox &BCEEPwQwBDw- { special_use = \Junk } 2. Do i need to convert UTF8 mailbox names in sieve scripts? /etc/dovecot/dovecot_before.sieve ... require ["reject","fileinto"]; # Put all spam into separete IMAP folder if header :contains "X-Spam-Flag" "YES" { fileinto "&BCEEPwQwBDw-"; }

3 2

[Dovecot] [PATCH] Replace hard-coded PKG_STATEDIR with state_dir setting
by Chris Webb 22 Aug '12

22 Aug '12

Sharing an installed copy of dovecot between several users each running a daemon within their own account (or using the same binaries for a system daemon and a user daemon) is difficult because the compile-time directory PKG_STATEDIR (typically /var/lib/dovecot) is hard-coded as the location of things like the ssl-parameters.dat file and the replicator database. Replace all these uses of PKG_STATEDIR with a state_dir setting which defaults to PKG_STATEDIR but can be overridden in dovecot.conf, in the same way base_dir can be used to override PKG_RUNDIR. Signed-off-by: <chris(a)arachsys.com> --- src/config/Makefile.am | 1 - src/doveadm/doveadm-instance.c | 10 ++++------ src/doveadm/doveadm-mount.c | 3 +-- src/doveadm/doveadm-settings.c | 2 -- src/doveadm/doveadm-settings.h | 1 - src/lib-master/master-instance.h | 2 ++ src/lib-master/master-service-settings.c | 2 -- src/lib-master/master-service-settings.h | 1 - src/lib-master/master-service.c | 6 ++---- src/login-common/ssl-proxy-openssl.c | 3 ++- src/master/main.c | 11 ++++------- src/master/master-settings.c | 6 ++---- src/master/master-settings.h | 1 - src/replication/replicator/replicator-settings.c | 2 -- src/replication/replicator/replicator-settings.h | 1 - src/replication/replicator/replicator.c | 16 +++++----------- src/ssl-params/main.c | 5 ++--- src/ssl-params/ssl-params-settings.c | 2 -- src/ssl-params/ssl-params-settings.h | 1 - 19 files changed, 24 insertions(+), 52 deletions(-) diff --git a/src/config/Makefile.am b/src/config/Makefile.am --- a/src/config/Makefile.am +++ b/src/config/Makefile.am @@ -9,6 +9,7 @@ -I$(top_srcdir)/src/lib-settings \ -I$(top_srcdir)/src/lib-master \ -DPKG_RUNDIR=\""$(rundir)"\" \ + -DPKG_STATEDIR=\""$(statedir)"\" \ -DPKG_LIBEXECDIR=\""$(pkglibexecdir)"\" \ -DEXAMPLE_CONFIG_DIR=\""$(exampledir)"\" \ -DMODULEDIR=\""$(moduledir)"\" \ diff --git a/src/doveadm/doveadm-instance.c b/src/doveadm/doveadm-instance.c --- a/src/doveadm/doveadm-instance.c +++ b/src/doveadm/doveadm-instance.c @@ -48,7 +48,7 @@ struct master_instance_list *list; struct master_instance_list_iter *iter; const struct master_instance *inst; - const char *pidfile_path; + const char *instance_path, *pidfile_path; bool show_config = FALSE; int c; @@ -71,7 +71,8 @@ doveadm_print_header_simple("running"); } - list = master_instance_list_init(MASTER_INSTANCE_PATH); + instance_path = t_strconcat(doveadm_settings->state_dir, "/instances", NULL); + list = master_instance_list_init(instance_path); iter = master_instance_list_iterate_init(list); while ((inst = master_instance_iterate_list_next(iter)) != NULL) { if (argv[0] != NULL && strcmp(argv[0], inst->name) != 0) @@ -99,13 +100,14 @@ { struct master_instance_list *list; const struct master_instance *inst; - const char *base_dir; + const char *base_dir, *instance_path; int ret; if (argc != 2) instance_cmd_help(cmd_instance_remove); - list = master_instance_list_init(MASTER_INSTANCE_PATH); + instance_path = t_strconcat(doveadm_settings->state_dir, "/instances", NULL); + list = master_instance_list_init(instance_path); inst = master_instance_list_find_by_name(list, argv[1]); base_dir = inst != NULL ? inst->base_dir : argv[1]; if ((ret = master_instance_list_remove(list, base_dir)) < 0) { diff --git a/src/doveadm/doveadm-mount.c b/src/doveadm/doveadm-mount.c --- a/src/doveadm/doveadm-mount.c +++ b/src/doveadm/doveadm-mount.c @@ -13,7 +13,8 @@ { const char *perm_path, *state_path; - perm_path = t_strconcat(PKG_STATEDIR"/"MOUNTPOINT_LIST_FNAME, NULL); + perm_path = t_strconcat(doveadm_settings->state_dir, + "/"MOUNTPOINT_LIST_FNAME, NULL); state_path = t_strconcat(doveadm_settings->base_dir, "/"MOUNTPOINT_LIST_FNAME, NULL); return mountpoint_list_init(perm_path, state_path); diff --git a/src/doveadm/doveadm-settings.c b/src/doveadm/doveadm-settings.c --- a/src/doveadm/doveadm-settings.c +++ b/src/doveadm/doveadm-settings.c @@ -53,6 +53,7 @@ static const struct setting_define doveadm_setting_defines[] = { DEF(SET_STR, base_dir), + DEF(SET_STR, state_dir), DEF(SET_STR, mail_plugins), DEF(SET_STR, mail_plugin_dir), DEF(SET_STR, doveadm_socket_path), @@ -70,6 +71,7 @@ const struct doveadm_settings doveadm_default_settings = { .base_dir = PKG_RUNDIR, + .state_dir = PKG_STATEDIR, .mail_plugins = "", .mail_plugin_dir = MODULEDIR, .doveadm_socket_path = "doveadm-server", diff --git a/src/doveadm/doveadm-settings.h b/src/doveadm/doveadm-settings.h --- a/src/doveadm/doveadm-settings.h +++ b/src/doveadm/doveadm-settings.h @@ -3,6 +3,7 @@ struct doveadm_settings { const char *base_dir; + const char *state_dir; const char *mail_plugins; const char *mail_plugin_dir; const char *doveadm_socket_path; diff --git a/src/lib-master/master-instance.h b/src/lib-master/master-instance.h --- a/src/lib-master/master-instance.h +++ b/src/lib-master/master-instance.h @@ -1,8 +1,6 @@ #ifndef MASTER_INSTANCE_H #define MASTER_INSTANCE_H -#define MASTER_INSTANCE_PATH PKG_STATEDIR"/instances" - struct master_instance_list; struct master_instance { diff --git a/src/lib-master/master-service-settings.c b/src/lib-master/master-service-settings.c --- a/src/lib-master/master-service-settings.c +++ b/src/lib-master/master-service-settings.c @@ -33,6 +33,7 @@ master_service_settings_check(void *_set, pool_t pool, const char **error_r); static const struct setting_define master_service_setting_defines[] = { + DEF(SET_STR, state_dir), DEF(SET_STR, log_path), DEF(SET_STR, info_log_path), DEF(SET_STR, debug_log_path), @@ -47,6 +48,7 @@ }; static const struct master_service_settings master_service_default_settings = { + .state_dir = PKG_STATEDIR, .log_path = "syslog", .info_log_path = "", .debug_log_path = "", diff --git a/src/lib-master/master-service-settings.h b/src/lib-master/master-service-settings.h --- a/src/lib-master/master-service-settings.h +++ b/src/lib-master/master-service-settings.h @@ -7,6 +7,7 @@ struct master_service; struct master_service_settings { + const char *state_dir; const char *log_path; const char *info_log_path; const char *debug_log_path; diff --git a/src/lib-master/master-service.c b/src/lib-master/master-service.c --- a/src/lib-master/master-service.c +++ b/src/lib-master/master-service.c @@ -332,9 +332,11 @@ { struct master_instance_list *list; const struct master_instance *inst; - const char *path; + const char *instance_path, *path; - list = master_instance_list_init(MASTER_INSTANCE_PATH); + instance_path = t_strconcat(master_service->set->state_dir, + "/instances", NULL); + list = master_instance_list_init(instance_path); inst = master_instance_list_find_by_name(list, name); if (inst != NULL) { path = t_strdup_printf("%s/dovecot.conf", inst->base_dir); diff --git a/src/login-common/ssl-proxy-openssl.c b/src/login-common/ssl-proxy-openssl.c --- a/src/login-common/ssl-proxy-openssl.c +++ b/src/login-common/ssl-proxy-openssl.c @@ -152,8 +152,7 @@ static void ssl_params_corrupted(void) { - i_fatal("Corrupted SSL parameters file: " - PKG_STATEDIR"/ssl-parameters.dat"); + i_fatal("Corrupted SSL parameters file: ssl-parameters.dat"); } static void read_next(struct ssl_parameters *params, void *data, size_t size) diff --git a/src/master/main.c b/src/master/main.c --- a/src/master/main.c +++ b/src/master/main.c @@ -311,7 +311,7 @@ struct mountpoint_list *mountpoints; const char *perm_path, *state_path; - perm_path = t_strconcat(PKG_STATEDIR"/"MOUNTPOINT_LIST_FNAME, NULL); + perm_path = t_strconcat(set->state_dir, "/"MOUNTPOINT_LIST_FNAME, NULL); state_path = t_strconcat(set->base_dir, "/"MOUNTPOINT_LIST_FNAME, NULL); mountpoints = mountpoint_list_init(perm_path, state_path); @@ -340,9 +340,12 @@ instance_update_now, list); } -static void instance_update(void) +static void instance_update(const struct master_settings *set) { - instances = master_instance_list_init(MASTER_INSTANCE_PATH); + const char *path; + + path = t_strconcat(set->state_dir, "/instances", NULL); + instances = master_instance_list_init(path); instance_update_now(instances); } @@ -538,7 +541,7 @@ create_pid_file(pidfile_path); create_config_symlink(set); mountpoints_update(set); - instance_update(); + instance_update(set); services_monitor_start(services); } diff --git a/src/master/master-settings.c b/src/master/master-settings.c --- a/src/master/master-settings.c +++ b/src/master/master-settings.c @@ -171,6 +171,7 @@ static const struct setting_define master_setting_defines[] = { DEF(SET_STR, base_dir), + DEF(SET_STR, state_dir), DEF(SET_STR, libexec_dir), DEF(SET_STR, instance_name), DEF(SET_STR, import_environment), @@ -211,6 +212,7 @@ static const struct master_settings master_default_settings = { .base_dir = PKG_RUNDIR, + .state_dir = PKG_STATEDIR, .libexec_dir = PKG_LIBEXECDIR, .instance_name = PACKAGE, .import_environment = "TZ" ENV_SYSTEMD ENV_GDB, @@ -737,8 +739,8 @@ } /* Make sure our permanent state directory exists */ - if (mkdir_parents(PKG_STATEDIR, 0750) < 0 && errno != EEXIST) { - i_error("mkdir(%s) failed: %m", PKG_STATEDIR); + if (mkdir_parents(set->state_dir, 0750) < 0 && errno != EEXIST) { + i_error("mkdir(%s) failed: %m", set->state_dir); return FALSE; } diff --git a/src/master/master-settings.h b/src/master/master-settings.h --- a/src/master/master-settings.h +++ b/src/master/master-settings.h @@ -5,6 +5,7 @@ struct master_settings { const char *base_dir; + const char *state_dir; const char *libexec_dir; const char *instance_name; const char *import_environment; diff --git a/src/replication/replicator/replicator-settings.c b/src/replication/replicator/replicator-settings.c --- a/src/replication/replicator/replicator-settings.c +++ b/src/replication/replicator/replicator-settings.c @@ -49,6 +49,7 @@ { type, #name, offsetof(struct replicator_settings, name), NULL } static const struct setting_define replicator_setting_defines[] = { + DEF(SET_STR, state_dir), DEF(SET_STR, auth_socket_path), DEF(SET_STR, doveadm_socket_path), @@ -59,6 +60,7 @@ }; const struct replicator_settings replicator_default_settings = { + .state_dir = PKG_STATEDIR, .auth_socket_path = "auth-userdb", .doveadm_socket_path = "doveadm-server", diff --git a/src/replication/replicator/replicator-settings.h b/src/replication/replicator/replicator-settings.h --- a/src/replication/replicator/replicator-settings.h +++ b/src/replication/replicator/replicator-settings.h @@ -2,6 +2,7 @@ #define REPLICATOR_SETTINGS_H struct replicator_settings { + const char *state_dir; const char *auth_socket_path; const char *doveadm_socket_path; diff --git a/src/replication/replicator/replicator.c b/src/replication/replicator/replicator.c --- a/src/replication/replicator/replicator.c +++ b/src/replication/replicator/replicator.c @@ -13,7 +13,6 @@ #define REPLICATOR_AUTH_SERVICE_NAME "replicator" #define REPLICATOR_DB_DUMP_INTERVAL_MSECS (1000*60*15) -#define REPLICATOR_DB_PATH PKG_STATEDIR"/replicator.db" static struct replicator_queue *queue; static struct replicator_brain *brain; @@ -32,7 +31,7 @@ struct auth_master_user_list_ctx *ctx; struct auth_user_info user_info; struct replicator_user *user; - const char *username; + const char *db_path, *username; auth_conn = auth_master_init(set->auth_socket_path, AUTH_MASTER_FLAG_NO_IDLE_TIMEOUT); @@ -53,12 +52,16 @@ auth_master_deinit(&auth_conn); /* add updates from replicator db, if it exists */ - (void)replicator_queue_import(queue, REPLICATOR_DB_PATH); + db_path = t_strconcat(set->state_dir, "replicator.db", NULL); + (void)replicator_queue_import(queue, db_path); } static void replicator_dump_timeout(void *context ATTR_UNUSED) { - (void)replicator_queue_export(queue, REPLICATOR_DB_PATH); + const char *db_path; + + db_path = t_strconcat(set->state_dir, "replicator.db", NULL); + (void)replicator_queue_export(queue, db_path); } static void main_init(void) @@ -77,10 +80,13 @@ static void main_deinit(void) { + const char *db_path; + notify_connections_destroy_all(); replicator_brain_deinit(&brain); timeout_remove(&to_dump); - (void)replicator_queue_export(queue, REPLICATOR_DB_PATH); + db_path = t_strconcat(set->state_dir, "replicator.db", NULL); + (void)replicator_queue_export(queue, db_path); replicator_queue_deinit(&queue); } diff --git a/src/ssl-params/main.c b/src/ssl-params/main.c --- a/src/ssl-params/main.c +++ b/src/ssl-params/main.c @@ -112,11 +112,12 @@ static void main_init(const struct ssl_params_settings *set) { + const char *filename; lib_signals_set_handler(SIGCHLD, LIBSIG_FLAGS_SAFE, sig_chld, NULL); ssl_params = buffer_create_dynamic(default_pool, 1024); - param = ssl_params_init(PKG_STATEDIR"/"SSL_BUILD_PARAM_FNAME, - ssl_params_callback, set); + filename = t_strconcat(set->state_dir, "/"SSL_BUILD_PARAM_FNAME, NULL); + param = ssl_params_init(filename, ssl_params_callback, set); } static void main_deinit(void) diff --git a/src/ssl-params/ssl-params-settings.c b/src/ssl-params/ssl-params-settings.c --- a/src/ssl-params/ssl-params-settings.c +++ b/src/ssl-params/ssl-params-settings.c @@ -58,12 +58,14 @@ { type, #name, offsetof(struct ssl_params_settings, name), NULL } static const struct setting_define ssl_params_setting_defines[] = { + DEF(SET_STR, state_dir), DEF(SET_TIME, ssl_parameters_regenerate), SETTING_DEFINE_LIST_END }; static const struct ssl_params_settings ssl_params_default_settings = { + .state_dir = PKG_STATEDIR, .ssl_parameters_regenerate = 3600*24*7 }; diff --git a/src/ssl-params/ssl-params-settings.h b/src/ssl-params/ssl-params-settings.h --- a/src/ssl-params/ssl-params-settings.h +++ b/src/ssl-params/ssl-params-settings.h @@ -4,6 +4,7 @@ struct master_service; struct ssl_params_settings { + const char *state_dir; unsigned int ssl_parameters_regenerate; };

2 2

[Dovecot] Ways to poke and prod Dovecot?
by leam hall 21 Aug '12

21 Aug '12

I'm a newbie and want to learn more about Dovecot. I can install it in a test bed but am not sure how to run it so it shows me what it's doing but i'm not actually mailing stuff. Is there a doc somewhere? Thanks! Leam -- Mind on a Mission <http://leamhall.blogspot.com/>

2 1

[Dovecot] Search extensions
by Timo Sirainen 21 Aug '12

21 Aug '12

I'm thinking about adding at least one new SEARCH command extension to Dovecot: ability to search from any headers in the mail, including MIME headers in the body. So the idea is that you could somewhat quickly ask e.g. "show me all mails with pdf attachments": a search or x-anyheader application/pdf x-anyheader .pdf b fetch $ bodystructure The client can verify the results with the fetch. The "x-anyheader" can already be implemented without changes to full text search plugin, because all backends store message/MIME headers and body text separately. So, questions for the list, especially client developers: 1) What's a better name for x-anyheader? :) 2) Any other ideas about search extensions you'd want to see? Maybe I could get this standardized at some point. I think one other thing missing has been "show me messages that have attachments". I've thought about maybe creating a $hasattachments keyword for that, which the server could automatically set for new mails that it thinks has attachments (and clients can set/unset the keyword if wanted).

3 3

[Dovecot] Spaces in DN with AD auth
by Chris Visser 21 Aug '12

21 Aug '12

Hi guys, I'm back to fiddling with my Dovecot and AD intergation and I've noticed that if a DN contains spaces, dovecot doesn't bind to the AD server. I'm running: dovecot-2.1.1 exim-4.72 on CentOS 6.3 Exim binds fine with the DNs containing spaces, it's just dovecot that exhibits the symptoms. Chris Visser Linux/Network Infrastructure ================== Please read our Email Disclaimer : http://www.rtt.co.za/disclaimer.html

3 4

[Dovecot] namespace from snapshots
by Karl Oulmi 21 Aug '12

21 Aug '12

hi all, I'm trying to give access to snapshots taken from by dell iscsi MD3200i to my maildirs users. snapshot are mounted in read only mode from my FreeBSD box. In my /usr/local/etc/dovecot/conf.d/10-mail.conf, I have : namespace inbox { inbox = yes } namespace da1 { prefix = INBOX.backup.da1. hidden = no list = yes inbox = no location = maildir:/da1/%u/Maildir type = private } I have two problems : - In my log, dovecot complain about the fact that my snapshot filsystem is read only Error: open(/da1/test2(a)toto.com/Maildir/.Trash/dovecot-uidlist) failed: Read-only file system The second problem is that through my thunderbird I can't see the Inbox saved in the snapshot (whereas I see Sent and Trash folders) If anyone could help me, It would be nice. Regard, Karl.

3 7

[Dovecot] dovecot 2.1 Master account Error
by tmihalicek 20 Aug '12

20 Aug '12

HI I am running parallel dovecot 1.2 for main accounts and 2.1 for test accounts, and for some reason when i try to login with master user on dovecot 2.1 service errors. However the normal user logins and rest works flawlesly Here is the debug Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: auth client connected (pid=27557) Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=pop3#011secured#011no-penalty#011session=ZOcF2GHHdQAKVCKD#011lip=10.84.34.122#011rip=10.84.34.131#011lport=110#011rport=60021 Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: client out: CONT#0111#011 Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: client in: CONT<hidden> Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: auth(migration(a)example.net,10.84.34.131,master,<ZOcF2GHHdQAKVCKD>): Master user lookup for login: tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: passwd-file(migration(a)example.net,10.84.34.131,master,<ZOcF2GHHdQAKVCKD>): lookup: user=migration(a)example.net file=/etc/dovecot/master-users Aug 16 15:15:56 mailstore-node-02 dovecot: auth: passdb(migration(a)example.net,10.84.34.131,master,<ZOcF2GHHdQAKVCKD>): Master user logging in as tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: ldap(tomislav.mihalicek(a)example.net,10.84.34.131,<ZOcF2GHHdQAKVCKD>): pass search: base=ou=accounts,dc=example,dc=net scope=subtree filter=(&(objectClass=mailUser)(accountService=mail)(accountService=pop3secured)(|(mail=tomislav.mihalicek@example.net)(mailAlternateAddress=tomislav.mihalicek@example.net))) fields=mail,userPassword Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: ldap(tomislav.mihalicek(a)example.net,10.84.34.131,<ZOcF2GHHdQAKVCKD>): result: mail=tomislav.mihalicek(a)example.net userPassword=<hidden> Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: client out: OK#0111#011user=tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: master in: REQUEST#0113563585537#01127557#0111#0118ccf2bab093bd33a4b93958c99236471 Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: ldap(tomislav.mihalicek(a)example.net,10.84.34.131,<ZOcF2GHHdQAKVCKD>): user search: base=ou=accounts,dc=example,dc=net scope=subtree filter=(&(objectClass=mailUser)(accountService=mail)(accountService=pop3secured)(|(mail=tomislav.mihalicek@example.net)(mailAlternateAddress=tomislav.mihalicek@example.net))) fields=mail,homeDirectory,mailQuotaSize Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: ldap(tomislav.mihalicek(a)example.net,10.84.34.131,<ZOcF2GHHdQAKVCKD>): result: mail=tomislav.mihalicek(a)example.net mailQuotaSize=4294967296 homeDirectory=/mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek Aug 16 15:15:56 mailstore-node-02 dovecot: auth: Debug: master out: USER#0113563585537#011tomislav.mihalicek@example.net#011home=/mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek#011quota_rule=*:bytes=4294967296#011master_user=migration@example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3-login: Login: user=<tomislav.mihalicek(a)example.net>, method=PLAIN, rip=10.84.34.131, lip=10.84.34.122, mpid=27558, secured, session=<ZOcF2GHHdQAKVCKD> Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Loading modules from directory: /usr/lib/dovecot/modules Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib15_notify_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_expire_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_mail_log_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_virtual_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib20_zlib_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_stats_plugin.so Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Added userdb setting: plugin/master_user=migration(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3: Debug: Added userdb setting: plugin/quota_rule=*:bytes=4294967296 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Effective uid=10101, gid=10101, home=/mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Quota root: name=user backend=dict args=:proxy::quota Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Quota rule: root=user mailbox=* bytes=4294967296 messages=0 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Quota warning: bytes=4080218931 (95%) messages=0 reverse=no command=quota-warning 95 tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Quota warning: bytes=3650722201 (85%) messages=0 reverse=no command=quota-warning 85 tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Quota warning: bytes=3006477107 (70%) messages=0 reverse=no command=quota-warning 70 tomislav.mihalicek(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: dict quota: user=tomislav.mihalicek(a)example.net, uri=proxy::quota, noenforcing=0 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=sdbox:~/sdbox:INDEX=~/index Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: fs: root=/mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek/sdbox, index=/mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek/index, control=, inbox=, alt= Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: initializing backend with data: vfile:/etc/dovecot/global-acls:cache_secs=300 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: acl username = migration(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: owner = 0 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: Global ACL directory: /etc/dovecot/global-acls Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: Namespace : type=shared, prefix=X-Share/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:%h/Maildir:INDEX=~/index/Shared/%u Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: initializing backend with data: vfile:/etc/dovecot/global-acls:cache_secs=300 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: acl username = migration(a)example.net Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl: owner = 0 Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: Global ACL directory: /etc/dovecot/global-acls Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: file /etc/dovecot/global-acls/INBOX not found Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: file /mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek/sdbox/mailboxes/INBOX/dbox-Mails/dovecot-acl not found Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: file /etc/dovecot/global-acls/ not found Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Debug: acl vfile: file /mailbox/maildirs/example.net/t/o/m/tomislav.mihalicek/sdbox/mailboxes/dovecot-acl not found Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Error: Failed to autocreate mailbox INBOX: Permission denied Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Error: Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2012-08-16 15:15:56] Aug 16 15:15:56 mailstore-node-02 dovecot: pop3(tomislav.mihalicek(a)example.net): Couldn't open INBOX top=0/0, retr=0/0, del=0/0, size=0 -- View this message in context: http://dovecot.2317879.n4.nabble.com/dovecot-2-1-Master-account-Error-tp371… Sent from the Dovecot mailing list archive at Nabble.com.

2 2

Re: [Dovecot] Hostname Based forwarding
by Joseph Tam 20 Aug '12

20 Aug '12

Merrickville <merrickville(a)gmail.com> writes: > Is there a way to proxy based on the host name the client has configured in > his/her email client? (Like Apache VirtualHosts) I doubt it; the virtual name is not part of the IMAP protocol as it is in HTTP. The IMAP server is not told which hostname was mapped to its IP. You'll either have to add the @domain, or perhaps multi-home your host, remap one of your domains to the new IP, and add another running instance of dovecot to listen on that interface. Joseph Tam <jtam.home(a)gmail.com>

2 1

Re: [Dovecot] SOLVED antispam_plugin prevents IMAP login (error 3) [Dovecot 2.0.19]
by dof＠projektfabrik.com 20 Aug '12

20 Aug '12

On 17.08.2012 12:06, dof(a)projektfabrik.com wrote: > Hi everybody, > > trying to get the Dovecot antispam_plugin to work and I must be doing > something wrong, because as soon as it is enabled with a certain > backend, imap logins do not work anymore (the session is immediately > closed after a successful login). Interestingly, pipe and spool2dir > are working (that is, the session won't be closed), dspam-exec and > crm114-exec are not. If this happens, mail_debug output is as > follows: > > [...] Hi again, how embarrassing. I should use the correct name for the backend type. :\ So everything works as expected, sorry for spamming the mailing list. Best regards, Florian

1 0

[Dovecot] Full text search in attachments
by Mailing 20 Aug '12

20 Aug '12

Hello, is it possible to use the Solr full text search plugin for indexing mail attachments? I found a very old patch and some hints regarding a fts_decoder script that I don't understand. Making Solr indexing PDF or Office files shouldn't be that difficult, but how can I enable the plugin to transfer the attachments to Solr? Best regards, Sebastian

2 3

[Dovecot] case insensitive acl
by Andre Rodier 19 Aug '12

19 Aug '12

Hello, I have notice that when I use ACL, the name of the user in the dovec-acl-list file is case sensitive. Because I use LDAP, the name of the users is case insensitive. Would it be possible to have an option in Dovecot, to ignore the case of the ACL ? This would be useful with some ACL managers, like roundcube ACL plugin, that uses an LDAP query to autocomplete the user name for the ACL. Kind regards, André

2 2

[Dovecot] Mdbox corruption
by 3.listas＠adminlinux.com.br 19 Aug '12

19 Aug '12

Hi, I have a "ubuntu10.04 + ext4-filesystem + dovecot-2.0.13 +mdbox" configuration in my server. It works fine with ~50k accounts. Recently happened a filesystem corruption in a device of StMailLocation and I fix with fsck.ext4. After this crash, one account began to show access timeout and errors like this on force-resync: # doveadm force-resync -u account INBOX doveadm(account): Warning: mdbox /path-to-mdbox/storage: rebuilding indexes doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.83 (around offset=16): EOF reading msg header (got 0/30 bytes) doveadm(account): Warning: dbox: Copy of the broken file saved to /path-to-mdbox/storage/m.83.broken doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.83 (around offset=16): EOF reading msg header (got 0/30 bytes) doveadm(account): Error: mdbox rebuild: Failed to fix file /path-to-mdbox/storage/m.83 doveadm(account): Error: Corrupted dbox file /path-to-mdbox/storage/m.92 (around offset=7): Invalid dbox version ... Should I worry about the m.X.broken files ? How I fix these broken mdboxes ? Thanks. -- Thiago Henrique adminlinux.com.br

2 1

[Dovecot] Permission denied on dovecot.lda-dupes
by ppridt 19 Aug '12

19 Aug '12

Hi, I have converted my Imap Server from Courier to Dovecot in order to use sieve support. Everything works fine with the exception that the sender always gets the vacation msg since there is a permission error on writing of dovecot.lda-dupes. I've tried several version of permissions including 777 to both home and maildir - always the same result. I also googled for hours .. Any help will be appreciated. Paul This is the debug log: ----------------------------------------------------------------------------------------------------- Aug 13 14:51:26 Srv dovecot: deliver(pp): Loading modules from directory: /usr/lib/dovecot/modules/lda Aug 13 14:51:26 Srv dovecot: deliver(pp): Module loaded: /usr/lib/dovecot/modules/lda/lib90_sieve_plugin.so Aug 13 14:51:26 Srv dovecot: deliver(pp): Home dir not found: Aug 13 14:51:26 Srv dovecot: deliver(pp): maildir: data=/Daten/Vmail/pp/Maildir Aug 13 14:51:26 Srv dovecot: deliver(pp): maildir++: root=/Daten/Vmail/pp/Maildir, index=, control=, inbox=/Daten/Vmail/pp/Maildir Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: using sieve path for user's script: /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: opening script /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): sieve: executing compiled script /Daten/Vmail/pp/.dovecot.sieve Aug 13 14:51:26 Srv dovecot: deliver(pp): Namespace : Using permissions from /Daten/Vmail/pp/Maildir: mode=0700 gid=-1 Aug 13 14:51:26 Srv dovecot: deliver(pp): file_dotlock_create(/.dovecot.lda-dupes) failed: Permission denied ----------------------------------------------------------------------------------------------------- This ist my dovecot.conf: ----------------------------------------------------------------------------------------------------- protocols = imap imaps managesieve mail_debug = yes log_path = info_log_path = disable_plaintext_auth = no # Authentication configuration: mail_location = maildir:/Daten/Vmail/%u/Maildir auth_verbose = yes mail_nfs_storage = no mail_nfs_index = no nfs_check = no lock_method = dotlock mail_uid = vmail mail_gid = vmail auth default { mechanisms = plain login passdb pam { } userdb passwd { args = uid=vmail gid=vmail home=/home/%u mail=maildir:/Daten/Vmail/%u/Maildir } socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = vmail } } } protocol lda { postmaster_address = admin(a)ppridt.dnsalias.org mail_plugins = sieve auth_socket_path = /var/run/dovecot/auth-master } protocol managesieve { login_executable = /usr/lib/dovecot/managesieve-login mail_executable = /usr/lib/dovecot/managesieve managesieve_implementation_string = Cyrus timsieved v2.2.13 } plugin { sieve=/Daten/Vmail/%u/.dovecot.sieve sieve_dir=/Daten/Vmail/%u/.sieve } ----------------------------------------------------------------------------------------------------- This is the exim delivery transport: ----------------------------------------------------------------------------------------------------- dovecot_lda: driver = pipe command = /usr/lib/dovecot/deliver message_prefix = message_suffix = log_output delivery_date_add envelope_to_add return_path_add user = vmail group = vmail temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78 ----------------------------------------------------------------------------------------------------- -- View this message in context: http://dovecot.2317879.n4.nabble.com/Permission-denied-on-dovecot-lda-dupes… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] imap-login process_limit (100) reached, client connections are being dropped
by Voytek Eymont 19 Aug '12

19 Aug '12

noticed this in the log today, after about 11 warning IMAP appears to have not worked, 'service dovecot reload' got it going again question: what to check/alter ? ---------------- # grep process_limit /var/log/maillog Aug 13 15:31:44 geko dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped ''' Aug 13 20:45:35 geko dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped # doveconf -n | grep limit # # dovecot --version 2.1.1 # ps ax | grep imap | wc 109 546 4693 # ps ax | grep imap-login | wc 57 286 2619 # doveadm who | wc 16 122 1531 centos 6, 20 virtual domains, 100 users -- Voytek Eymont

2 1

[Dovecot] dsync \noselect on INBOX.INBOX skips sync of INBOX
by Nikolai Schupbach 19 Aug '12

19 Aug '12

Hi Timo, We have encountered an issue today with a number of migrations. Some customers have mailboxes on the source IMAP server that look like this: 3 LIST "" * * LIST () "." "INBOX" * LIST () "." "INBOX.Statements" * LIST () "." "INBOX.Draft" * LIST () "." "INBOX.Drafts" * LIST () "." "INBOX.Invoices" * LIST (\Noselect) "." "INBOX.INBOX" * LIST () "." "INBOX.Jokes" * LIST () "." "INBOX.Payslips" * LIST () "." "INBOX.Personal" When we run dsync it skips the INBOX presumably because of the Noselect on INBOX.INBOX. and the "imapc_list_prefix = INBOX" setting. Regards, Nikolai.

2 1

[Dovecot] maildir to sdbox offline conversion
by _ET_ 19 Aug '12

19 Aug '12

Hi all. I've just installed dovecot v2.1 in a multihomed, multiinstance setup, It took me two days to convert the old v1.1 configs, now everything works like charm! But. :) I have several maildir mailboxes, I decided to use the sdbox storage type instead. I ran into difficoulties using the dsync util. My virtual users are in an OpenLDAP DB on a differnet machine, and I do not have access to the database (I can authenticate the users from ldap, but cannot change or see anything) So it's not easy to do an "online" conversion and follow the instructions at dsync's wiki. Do you know a way how to simply tell dsync or a similar util the following dsync convert maildir:/data/vmail/domain/user sdbox:/newdata/vmail/domain/user without touching the ldap database, only the files on the disk. I can run this command as root on this mail server, if it is needed, I can run the command for each and every maildir. That's not a problem. any ideas, how this wouléd be the simpliest? -- View this message in context: http://old.nabble.com/maildir-to-sdbox-offline-conversion-tp34274589p342745… Sent from the Dovecot mailing list archive at Nabble.com.

2 1

[Dovecot] Dsync and SIS
by Alex Crow 19 Aug '12

19 Aug '12

Hi all, Just to clarify, if we back up a dovecot 2 server with SIS for attachments and ALT storage by rsyncing it (including the SIS and ALT storage) to a remote server when it's idle (or at least almost entirely so), and run dovecot on that machine, would it seem feasible to restore backups from that server by using dysnc - specifically for the scenario where someone accidentally deletes emails/folders etc.? I've seen queries about SIS before but nothing specifically about this scenario. Cheers Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. "Transact" is operated by Integrated Financial Arrangements plc Domain House, 5-7 Singer Street, London EC2A 4BQ Tel: (020) 7608 4900 Fax: (020) 7608 5300 (Registered office: as above; Registered in England and Wales under number: 3727592) Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)

2 1

[Dovecot] Listen on multiple ports possible using same protocol?
by Michael Durket 18 Aug '12

18 Aug '12

Is it possible to have multiple Listen directives in a dovecot configuration file for the same protocol? I am running dovecot-1.2.11 and I want to be able to use the "standard port" as well as a test port: protocol imap { listen = *:143 listen = *:10143 ssl_listen = *:993 ssl_listen = *:10993 for example. Or is this more preferably done by pointing dovecot at different configuration files?

4 3

[Dovecot] Expire-tool does not delete duplicate messages (dovecot-1.2.17)
by Oleksii Krykun 17 Aug '12

17 Aug '12

Trying to implement expire plugin. expire-tool works fine. This delete expunged messages but not all of them. I have duplicate messages in appropriate folder. These messages are from expanding postfix aliases (e.g. postmaster@, hostmaster@, abuse@ etc. points to same mailbox and spam often sent to all of them. If duplicate message is received only one entry in dovecot-uidlist is created and only first of duplicates is deleted with expire-tool. Rest of duolicates are not deleted. Any suggestions. Thanks, Kryol

2 1

[Dovecot] dsync backup gets stuck... fails
by Jeff Gustafson 17 Aug '12

17 Aug '12

More dsync issues. We were running 2.1.7 and we updated to 2.1.9. Same problem with both versions. I'm getting an error 75 on about 40 boxes out of 1800. It is the same list of boxes every time we use 'dsync backup' to backup the server. dsync seems to stop communicating to the backup box (over ssh). strace just shows it sitting at a epoll_wait. Once the program quits (times out?), a 'du' shows the destination is smaller (200kbyte in one case). Has anyone else seen an exit code of 75? Nothing in the documentation mentions what exit code 75 could mean. What can I do to help the developers locate the bug? ...Jeff

3 11

[Dovecot] some mdbox mails get lost each day
by Christian Rößner 16 Aug '12

16 Aug '12

Hi, I have a strange problem here. I had installed Dovecot-2.1.6 on a customers setup. They have 102 mail accounts on the server. The started using this dovecot version on the 20th June. One mailbox suddenly started expunging mails. Not from the current day, but one week back in the past. First I thought about an Outlook issue. Some filter or archieving thing, but we did a test and on one day, the curstomer did not start Outlook first; instead he checked his mails with the SOGo-webinterface. We saw that mails got deleted again. I checked for sieve filters. None. I upgraded dovecot to 2.1.7, as I have not done any newer packages yet for Ubuntu (using my own PPA). Same problem one day later. I tested with telnet locally. Same result as in the client. I also did doveadm dump -t log and index and saw that there had been expunged mails. Yesterday I asked the customer to backup all his mails in Outlook. After that I renamed the whole mdbox folder of this account on the server and sent one test mail to recreate the mailbox. After that her restored his mail in Outlook. This morning her contacted me and said that all mails are ok right now and no mails have been erased anymore. Coud this been a corrupted index? I also chekced the storage/-folder and see that all mails are still on disk. Now he asked me if there is any way to get all the lost messaged back? It would be okay for him, if all mails since June are sent again, as he can clean his mailbox afterwards. So does somebody have an idea on how to solve this? Maybe scripting something in python and using local sendmail command? Or is there some doveadm voodoo to repair the index or unexpunge all mails? Thanks in advance -Christian Rößner --- Rößner-Network-Solutions Bachelor of Science Informatik Erlenwiese 14, 36304 Alsfeld T: +49 6631 7882340-0 F: +49 6631 7882340-9 M: +49 176 93118939 USt-IdNr.: DE225643613 http://www.roessner-network-solutions.com

2 10

[Dovecot] Hostname Based forwarding
by Merrickville 16 Aug '12

16 Aug '12

Trying to figure out hostname based IMAP proxy forwarding. I have two mail servers: mail.example.com mail.fakedomain.ca proxy server running dovecat/IMAPS, facing the Internet. *Both* names are DNS resolve(able), but.., both are the *same IP address.* For example: Joe configures his email client username: joe(a)example.com IMAP Addr: mail.example.com For example: Jane configures her email client username: jane(a)fakedomain.ca IMAP Addr: mail.fakedomain.ca So, now all clients must change their user-name in their email client to their full email address, because there is a Jane & Joe on "both" servers and..., dovecot proxies based on 'user name' Is there a way to proxy based on the host name the client has configured in his/her email client? (Like Apache VirtualHosts) This would be ideal, as the clients can then go back to using just their name as the username. Thanks Rick -- View this message in context: http://dovecot.2317879.n4.nabble.com/Hostname-Based-forwarding-tp37110.html Sent from the Dovecot mailing list archive at Nabble.com.

1 0

[Dovecot] v2.2 status update: IMAP NOTIFY extension and more
by Timo Sirainen 16 Aug '12

16 Aug '12

v2.2 hg now has support for NOTIFY extension. The only thing missing is support for SubscriptionChange events. Now would be a good time for IMAP clients to start implementing and testing it. :) I remember K9 developers at least said they were just waiting for Dovecot to support it first. v2.2 implements some other extensions also: BINARY, CATENATE and MOVE. Stephan has also implemented URLAUTH pretty far. Hopefully it gets finished in time for v2.2.0. I'll also try to implement the rest of the LEMONADE extensions: CONVERT, CONTEXT=SORT and URLAUTH=BINARY. I'm also considering implementing an SMTP submission server, which works only as a proxy to the real SMTP server. The benefits of it would mainly be: * It could support BURL command and other extensions required by LEMONADE. The real SMTP server would see only regular DATA commands. * Would make SMTP AUTH easy to implement regardless of what the real SMTP server is.

5 11

[Dovecot] Postfix & Dovecot: Client certificate authentication
by "JARRY Jérémy" 16 Aug '12

16 Aug '12

Hello, I would like to set up an authentication using certificate with Dovecot: A user sends mail to Postfix and Dovecot authentication is valid only if certificate is trusted. So, I enable the parameter auth_ssl_require_client_cert in dovecot configuration but it is not running. Here are the postfix logs: Aug 16 09:51:48 myserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 16 09:51:48 myserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 16 09:51:48 myserver dovecot: auth: Debug: auth client connected (pid=6922) Aug 16 09:51:51 myserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=smtp nologin lip=127.0.0.1 rip=127.0.0.1 secured resp=xxx Aug 16 09:51:51 myserver postfix/smtpd[6922]: warning: localhost.localdomain[127.0.0.1]: SASL PLAIN authentication failed: Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: PLAIN(?,127.0.0.1): Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client out: FAIL 1 reason=Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client in: AUTH 2 LOGIN service=smtp nologin lip=127.0.0.1 rip=127.0.0.1 secured Aug 16 09:51:51 myserver dovecot: auth: LOGIN(?,127.0.0.1): Client didn't present valid SSL certificate Aug 16 09:51:51 myserver dovecot: auth: Debug: client out: FAIL 2 reason=Client didn't present valid SSL certificate Aug 16 09:51:51 myserver postfix/smtpd[6922]: warning: localhost.localdomain[127.0.0.1]: SASL LOGIN authentication failed: Client didn't present valid SSL certificate It seems Postfix doesn't send the client certificat to Dovecot. What do you think ? What is wrong ? Below are some information about my configuration: OS: RHEL5 Postfix: 2.7.3 Dovecot: 2.0.14 Dovecot config: auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes auth_verbose = yes mail_debug = yes passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocols = none service auth { unix_listener /data/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } ssl = required ssl_ca = </etc/dovecot/ca.pem ssl_cert = </etc/dovecot/cert.pem ssl_key = </etc/dovecot/key.pem ssl_verify_client_cert = yes userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_ssl = yes Thanks for your help

2 1

[Dovecot] bcrypt again
by Sven Schwyn 15 Aug '12

15 Aug '12

Hi I'd like Dovecot to consume a list of users exported from an external application which stores bcrypted passwords. This has been asked in the past, however, I'm not sure how to read the following reply: > If you are using Dovecot< 2.0 you can also use any of the algorithms > supported by your system's libc. But then you have to prefix the hashes > with {CRYPT} - not {{BLF,SHA256,SHA512}-CRYPT}. I'm on Dovecot 2.0.19. Does this mean that only the hashes listed with "doveadm pw -l" are supported and even if glibc can do bcrypt, the CRYPT scheme won't do the trick anymore? Thanks for your help!

2 1

[Dovecot] Thread sorting problem
by CpServiceSPb 15 Aug '12

15 Aug '12

Hi. How much may implementing of THREAD=ORDEREDSUBJECT to Dovecot 2.1.x or later cost ? Artyom.

2 2

[Dovecot] about postlogin in dovecot2
by Bulend Mali 14 Aug '12

14 Aug '12

Hello I use dovecot2 on vpopmail,qmail. i want to use login-intranet-imap.sh in order to restrict by emailaddress and ip address. i read it at http://wiki2.dovecot.org/PostLoginScripting. But there is an expression "mail_executable" in conf. but there is no such thing in dovecot2. what is equivalent of it for dovecot2 ? -- View this message in context: http://old.nabble.com/about-postlogin-in-dovecot2-tp34275123p34275123.html Sent from the Dovecot mailing list archive at Nabble.com.

4 14

[Dovecot] vacation and field FROM
by Николай Клименко 14 Aug '12

14 Aug '12

Hi to all Here is the following scheme: Dovecot in a link with AD. For LDA and IMAP different views are used in a base. For example there is a user with such e-mail type - 1.name(a)domain.ltd with the name of authorization auth_1.name. Incoming male folds up in /var/mail/domain/auth_1.name When vacation is on, the letters from 1.name(a)domain.ltd are sent in a following way auth_1.name(a)domain.ltd I guess the problem is in two different data-base queries. Could you please tell me how to solve this problem and to make the answer to be sent from the same adress it is comes to. part of dovecot.conf protocol lda { mail_plugins = sieve acl hostname = domain.ltd postmaster_address = <postmaster(a)domain.ltd> auth_socket_path = /var/run/dovecot/auth-master_lda log_path = /var/log/dovecot-deliver.log } auth default { verbose = no debug = no debug_passwords = no mechanisms = plain user = dovecot passdb passwd-file { args = /etc/dovecot/passwd.masterusers master = yes } passdb ldap { args = /etc/dovecot/dovecot-ldap.conf } userdb static { args = uid=20000 gid=20000 home=/opt/mail/user_mailbox/%Lu allow_all_users=yes } socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = vmail group = vmail } client { path = /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } } } auth auth_lda { verbose = no debug = no debug_passwords = no mechanisms = plain user = dovecot passdb ldap { args = /etc/dovecot/dovecot-ldap_lda.conf } userdb ldap { args = /etc/dovecot/dovecot-ldap_lda.conf } socket listen { master { path = /var/run/dovecot/auth-master_lda mode = 0660 user = vmail group = vmail } part of dovecot-ldap.conf (filter options) pass_attrs = sAMAccountName=user pass_filter = (&(sAMAccountName=%u)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) part of dovecot-ldap_lda.conf user_attrs = sAMAccountName=user user_filter = (mail=%u) pass_attrs = sAMAccountName=user pass_filter = (mail=%u) --

1 0

[Dovecot] Libdovecot-sieve segfaults
by Nikita Koshikov 14 Aug '12

14 Aug '12

Hello Stephan, Preface - one of my users went to vacation and changed his sieve script to run autoreply vacation message, after that - I have noticed some annoying errors in system log, like: dovecot-lda[2400]: segfault at 3eb3333f ip b7446c7a sp bfaab050 error 4 in libdovecot-sieve.so.0.0.0[b7429000+5b000] Dovecot-error log is empty, but in exim log(exim runs dovecot-lda) I got: 2012-08-13 09:35:27 1T0oFK-0000aW-6j ** sr(a)domain.com (sr(a)domain.com, root(a)domain.com) <postmaster(a)domain.com > F=<59942270813(a)mymail.in.ua> R=ldap_accept T=local_delivery: Child process of local_delivery transport (running command "/usr/libexec/dovecot/dovecot-lda -e -d $local_part@$domain") was terminated by signal 11 (Segmentation fault) sr(a)domain.com - is the user, who created such sieve-script, which cause segfaults. I have tried run the same message over this script from sieve-test utility - but result is success. Can you please, take a look to this sieve script and check is it ok, I'll send it to you privately since it contains user's data. Also I'll attach message.eml which triggers segfault. Dovecot version - 2.0.21, Sieve version - 0.2.6. Relevant to sieve dovecot config section: plugin { sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/default-after.sieve sieve_dir = ~/sieve sieve_extensions = +notify +spamtest sieve_spamtest_max_value = 10 sieve_spamtest_status_header = X-Spam-Scan-Score sieve_spamtest_status_type = score } Hope you'll help.

1 0

[Dovecot] pop3 proxying error
by tonio＠starbridge.org 13 Aug '12

13 Aug '12

Hi Timo, I've got some errors with pop3 proxying and dovecot 2.1.9 I's occured on the proxy side: Aug 7 13:16:47 dev1 dovecot: pop3-login: Fatal: master: service(pop3-login): child 23046 killed with signal 11 (core dumped) Server side shows no error, and runs the same dovecot version. Thanks for your help. Best regards Tonio Buonaguidi Core dump: GNU gdb (GDB) 7.4.1-debian Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/pop3-login...done. [New LWP 23046] warning: Can't read pathname for load map: Erreur d'entrée/sortie. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/pop3-login -D'. Program terminated with signal 11, Segmentation fault. #0 settings_parser_dup (old_ctx=0x8783480, new_pool=0x632e6465) at settings-parser.c:1742 1742 pool_ref(new_pool); doveconf -n # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32.2-xxxx-std-ipv6-32 i686 Debian wheezy/sid auth_cache_size = 4 k auth_mechanisms = plain login director_mail_servers = bb.bb.bb.bb cc.cc.cc.cc director_servers = dd.dd.dd.dd aa.aa.aa.aa log_timestamp = %Y-%m-%d %H:%M:%S mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = comparator-i;octet comparator-i;ascii-casemap fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date spamtest spamtestplus virustest passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = mail mode = 0660 user = postfix } unix_listener auth-master { mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0660 user = vmail } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { address = aa.aa.aa.aa port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director inet_listener imap { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 143 } inet_listener imaps { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 993 } process_limit = 256 process_min_avail = 2 service_count = 0 vsz_limit = 256 M } service managesieve-login { inet_listener sieve { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 4190 } vsz_limit = 64 M } service pop3-login { executable = pop3-login -D inet_listener pop3 { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 110 } inet_listener pop3s { address = aa.aa.aa.aa yy.yyy.yy.yy xx.xx.xx.xx port = 995 } service_count = 0 } ssl_ca = </etc/dovecot/ca-bundle.crt ssl_cert = </etc/dovecot/imap.xxx.certchained2.pem ssl_client_cert = </etc/dovecot/imap.xxx.certchained2.pem ssl_client_key = </etc/dovecot/imap.xxx.key.pem ssl_key = </etc/dovecot/imap.xxx.key.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail imap_max_line_length = 64 k mail_max_userip_connections = 10 } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol sieve { passdb { args = /etc/dovecot/sieve-sql.conf driver = sql } } local xx.xx.xx.xx { disable_plaintext_auth = no } local yy.yyy.yy.yy { protocol imap { ssl = required ssl_cert = </etc/dovecot/mail.pem ssl_key = </etc/dovecot/mail.key.pem } } local yy.yyy.yy.yy { protocol sieve { ssl = required ssl_cert = </etc/dovecot/mail.pem ssl_key = </etc/dovecot/mail.pem } } local xx.xx.xx.xx { protocol imap { ssl = yes ssl_cert = </etc/dovecot/imap.certchained.pem ssl_key = </etc/dovecot/imap.key.pem } } local xx.xx.xx.xx { protocol pop3 { ssl = yes ssl_cert = </etc/dovecot/pop.certchained.pem ssl_key = </etc/dovecot/pop.key.pem } } local xx.xx.xx.xx { protocol sieve { ssl = yes ssl_cert = </etc/dovecot/mail.certchained.pem ssl_key = </etc/dovecot/mail.key.pem } }

2 10

[Dovecot] HA Mailbox Design
by Nikolaos Milas 13 Aug '12

13 Aug '12

Hi, We would like to implement a Highly Available Mail Server and would like to ask advice on how to architect this. Some details on our setup: Currently we have only one internal mail server (Postfix/Dovecot 2.0 - planning to move to 2.1), receiving mail from a gateway server (filtering spam/viruses) - a Cisco Ironport - which we are considering to replace with one (or a set of) cloud-based Postfix/Amavis-new/SpamAssassin/ClamAV VMs (currently in testing mode). Delivery uses Dovecot LDA. User accounts are LDAP-based. We use Maildir and the load is low (aside spam). Only about 250 users/mailboxes (4G each). All servers are CentOS 5.8 (planning move to 6.3) KVM VMs (on a cloud where we don't have control on the host, but on highly reliable hardware/networks). We can have VMs on two different clouds and we also have at least two different connections (routes) to the cloud(s) (to support HA). Any directions will be appreciated. Hoping to design an HA architecture but aiming to keep it simple and (as much as possible) easily maintainable one. Thanks for your response and help, Nick

5 8

[Dovecot] master user auth problem
by Ibrahim Harrani 13 Aug '12

13 Aug '12

Hi, I tried to setup a master auth authentication. I also use auth_pop3wrapper to authenticate from qmail-ldap. But I could not login with master user. Here is the config. auth_master_user_separator = * passdb { driver = passwd-file args = /usr/local/etc/dovecot/passwd.masterusers master = yes pass = yes } passdb { # Path for checkpassword binary driver = checkpassword args = /var/qmail/bin/auth_popwrapper } userdb { driver = prefetch } cat /opt/surmail/etc/dovecot/passwd.masterusers user:{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g= The log: #telnet localhost 143 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN] SurGATE Messaging Suite POP3/IMAP ready. o login user(a)domain.com*user password o NO [AUTHORIZATIONFAILED] Authorization failed Aug 09 16:17:44 auth: Debug: auth(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): Master user lookup for login: user(a)domain.com Aug 09 16:17:44 auth: Debug: passwd-file(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): lookup: user=user file= /usr/local/etc/dovecot/passwd.masterusers Aug 09 16:17:44 auth: Info: passdb(user,127.0.0.1,master,<KmGNDdXGrwB/AAAB>): Master user logging in as user(a)domain.com Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): execute: /var/qmail/bin/auth_popwrapper /usr/local/dovecot/libexec/dovecot/checkpassword-reply Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): Received input: Aug 09 16:17:44 auth: Debug: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): exit_status=3 Aug 09 16:17:44 auth: Info: checkpassword(user(a)domain.com,127.0.0.1,<KmGNDdXGrwB/AAAB>): Login failed (status=3) Aug 09 16:17:46 auth: Debug: client out: FAIL 1 user=user(a)domain.com authz Aug 09 16:18:08 auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=KmGNDdXGrwB/AAAB lip=127.0.0.1 rip=127.0.0.1 lport=143 rport=48047 resp=<hidden>

1 0

[Dovecot] Running spamc during LMTP delivery
by martin f krafft 12 Aug '12

12 Aug '12

Hello list, we are using dovecot-lmtp for delivery to virtual users, and vmm[1] to manage them. 1. http://vmm.localdomain.org/ One nice feature of vmm is that every virtual user has their own UID/GID on the UNIX filesystem. There is no passwd entry, so no shell login, but each user effectively has a home directory and can run commands in isolation and with lowered privileges. This requires dovecot-lmtp because only the LMTP LDA runs with root rights and can drop privileges to become the specific user for which it is delivering mail. We would now like to run SpamAssassin with the possibility of using the antispam plugin to enable virtual users to train their databases. Do you have an idea how I could let dovecot-lmtp invoke spamc? Or an external command as a filter, to be run by the final user? Thanks, -- martin | http://madduck.net/ | http://two.sentenc.es/ "truth is stranger than fiction, but it is because fiction is obliged to stick to possibilities; truth isnt." -- mark twain spamtraps: madduck.bogus(a)madduck.net

4 6

[Dovecot] Exim and Dovecot
by Rafael Nathan 11 Aug '12

11 Aug '12

Hi, I am installing Exim and Dovecot through yum on my Centos 5 x86_64 machine. Exim is unable to find the virtual users. Is there a full-fledged guide to get the two working. Any help is highly appreciated. Regards, Rafael

1 0

[Dovecot] looking for information on Vacation auto-reply
by rob 10 Aug '12

10 Aug '12

Hello We are looking for information on how to use Vacation auto-reply . I've read http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage and a few other pages, but have not found how to set it up. We use sogo and thunderbird . Is there a how to or document for this somewhere? This is our configuration information: dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-2-amd64 x86_64 Debian wheezy/sid auth_mechanisms = plain login auth_username_format = %Ln lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_location = maildir:%h/Maildir mail_plugins = " quota" maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_plugins = quota sieve quota = fs:user quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = storage=60%% quota-warning 60 %u quota_warning4 = storage=40%% quota-warning 40 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve/spam.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ } postmaster_address = fbcadmin(a)fantinibakery.com protocols = " imap lmtp sieve" quota_full_tempfail = yes service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } } service imap-login { service_count = 0 vsz_limit = 128 M } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 1 service_count = 0 vsz_limit = 256 M } service quota-warning { executable = script /fbc/bin/mail/quota-warning.sh user = dovecot } ssl = required ssl_ca = </etc/postfix/ssl/gd_bundle.crt ssl_cert = </etc/postfix/ssl/mail.fantinibakery.com.crt ssl_key = </etc/postfix/ssl/mail.fantinibakery.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota sieve } protocol imap { mail_max_userip_connections = 30 mail_plugins = " quota imap_quota" plugin { antispam_backend = spool2dir antispam_signature = X-DSPAM-Signature antispam_spam = Junk antispam_spool2dir_notspam = /var/spamtrain/not-spam/%%020lu-%u-%%05 antispam_spool2dir_spam = /var/spamtrain/spam/%%020lu-%u-%%05 antispam_trash = Trash antispam_verbose_debug = 1 } } protocol sieve { mail_debug = yes managesieve_implementation_string = Dovecot Pigeonhole }

3 5

[Dovecot] lmtp: Error: mmap failed with file ... dovecot.index.cache: Cannot allocate memory
by David Jonas 10 Aug '12

10 Aug '12

Hello, I have a mailbox with an ungodly number of small messages in it. When new messages are delivered lmtp kicks up an error like the one below. I tried raising the vsz_limit for lmtp but that didn't see to help. Any ideas (besides deleting 400k messages)? Thanks! dovecot: lmtp(6068, user(a)example.com) Error: mmap() failed with file /home/vmail/domains/example.com/user/Maildir/dovecot.index.cache: Cannot allocate memory # ls -lah dovecot.index.cache -rw------- 1 vmail vmail 128M Jul 29 20:16 dovecot.index.cache # doveadm mailbox status -u user(a)example.com all inbox INBOX messages=434118 recent=59848 uidnext=434119 uidvalidity=1293568548 unseen=432625 highestmodseq=14023 vsize=1329486283 guid=f8d48232244a1a4dfe2e0000cb0ad7e0 # doveconf -n ... default_vsz_limit = 256 M service lmtp { inet_listener lmtp { port = 24 } vsz_limit = 256 M }

2 3

[Dovecot] postfix mysql quota map to dovecot dict in mysql
by Benny Pedersen 10 Aug '12

10 Aug '12

currently dovecot dict is CREATE TABLE IF NOT EXISTS `quota` ( `username` varchar(100) COLLATE latin1_general_ci NOT NULL, `bytes` bigint(20) NOT NULL DEFAULT '0', `messages` int(11) NOT NULL DEFAULT '0', PRIMARY KEY (`username`) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci; there is not field that says how much quota each user have, so one cant make a query on how much its left pr user how can i resolve this in dovecot dict ? i like to do an postfix mysql map to temp reject if quota is out of limit -- Benny Pedersen

3 4

[Dovecot] Server side Sieve with virtual users
by Luigi Rosa 10 Aug '12

10 Aug '12

Is there a way to implement server-side filters with Dovecot configured with virtual users (userbase in mysql, a single *NIX user account that owns /var/spool/mail and its content)? Thanks Ciao, luigi -- / +--[Luigi Rosa]-- \ A generation which ignores history has no past... and no future.

3 3

Re: [Dovecot] Server side Sieve with virtual users
by Adrian Minta 09 Aug '12

09 Aug '12

On 08/09/12 20:10, Luigi Rosa wrote: > Adrian Minta said the following on 09/08/2012 18:33: > >>> Is there a way to implement server-side filters with Dovecot >>> configured with >>> virtual users (userbase in mysql, a single *NIX user account that owns >>> /var/spool/mail and its content)? > >> Yes ! > > :) > > And the webpage/wikipage with documentation about this is.... ? > > > Ciao, > luigi > First step is to have a mail system that works without sieve. This is the hard part. Depending on your preferred distro here are two nice webpages for this: http://wiki.mediatemple.net/w/(ve):Install_Postfix_with_Dovecot_on_CentOS http://workaround.org/ispmail Second step is to enable sieve, for witch you only need to uncomment the specific lines from dovecot.conf. For dovecot 1.2, you will have something like: protocols = pop3 pop3s imap imaps managesieve protocol lda { ... mail_plugins: quota sieve } protocol managesieve { } plugin { ... sieve=~/.dovecot.sieve sieve_dir=~/sieve } -- Best regards, Adrian Minta

3 4

[Dovecot] Dovecot LMTP - Delivered-To header weirdness
by Daniel Piddock 09 Aug '12

09 Aug '12

Hi, I'm not sure if this is a deliberate design decision or a technical limitation that I've missed. Please briefly explain if so :). Or a bug or feature request? When LMTP receives a mail with a single recipient it adds a Delivered-To header. However if the message is delivered in a batch that header isn't added. At first I thought maybe the LMTP was doing something with hardlinks but that doesn't appear to be the case (for rather obvious reasons.) Sample headers (single recipient): Return-Path: <user(a)domain.test> Delivered-To: <user(a)domain.test> Received: from mx.domain.test ([127.0.0.1]) by domain.test (Dovecot) with LMTP id ZNTPFX2NI1CcCwAAVMeomg for <user(a)domain.test>; Thu, 09 Aug 2012 11:14:21 +0100 Envelope-to: user(a)domain.test Delivery-date: Thu, 09 Aug 2012 11:14:21 +0100 Received: from host.domain.test ([172.16.252.1]:44058) by relay.domain.test ([172.16.252.120]:25) with esmtp id 1SzPkz-0000lz-7v (Exim 4.80) for user(a)domain.test (return-path <user(a)domain.test>); Thu, 09 Aug 2012 11:14:21 +0100 Message-ID: <50238D7D.2000707(a)domain.test> Date: Thu, 09 Aug 2012 11:14:21 +0100 From: User <user(a)domain.test> To: User <user(a)domain.test> Subject: test And an expansion list: Return-Path: <user(a)domain.test> Received: from mx.domain.test ([127.0.0.1]) by domain.test (Dovecot) with LMTP id Gf+yBmiNI1CECwAAVMeomg ; Thu, 09 Aug 2012 11:14:00 +0100 Envelope-to: expansion(a)domain.test Delivery-date: Thu, 09 Aug 2012 11:14:00 +0100 Received: from host.domain.test ([172.16.252.1]:44053) by relay.domain.test ([172.16.252.120]:25) with esmtp id 1SzPkd-0000ls-Qr (Exim 4.80) for expansion(a)domain.test (return-path <user(a)domain.test>); Thu, 09 Aug 2012 11:13:59 +0100 Message-ID: <50238D67.3090802(a)domain.test> Date: Thu, 09 Aug 2012 11:13:59 +0100 From: User <user(a)domain.test> To: Expansion <expansion(a)domain.test> Subject: test At the moment we've turned off batch delivery in the exim smtp transport (max_rcpt=1). Cheers, Dan -- Daniel Piddock, Systems Administrator, CoreFiling Limited http://www.corefiling.com

3 3

[Dovecot] dovecot rpm packages for CentOS ?
by Spyros Tsiolis 09 Aug '12

09 Aug '12

Hello all again, Has anyone any idea how to get the latest dovecot version for CentOS 5.8 or 6.2 32-bit OS ? I did a quick search and found out that the official version of dovecot for CentOS v5.8 is 1.0.2 (!!). Any repos ? Any ideas :-) ? Thank you all, spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 2

Re: [Dovecot] dovecot rpm packages for CentOS ?
by Vladimir Bukov 09 Aug '12

09 Aug '12

On Thu, August 9, 2012 4:31 pm, Spyros Tsiolis wrote: > > Hello all again, > > Has anyone any idea how to get the latest dovecot version for CentOS > > 5.8 or 6.2 32-bit OS ? > > I did a quick search and found out that the official version of dovecot > > for CentOS v5.8 is 1.0.2 (!!). > > > > Any repos ? Any ideas :-) ? > http://www.city-fan.org/ftp/contrib/mail/

2 1

[Dovecot] dovecot+LDAP/AD encoding issue
by Wiethoff, Helge 09 Aug '12

09 Aug '12

Hello everybody, i have a problem with dovecot+Active Directory as Authentication-Service. I am not able to use special characters (äöüß (german umlaut)) within a password. Normally I would suggest that the ldap-query is done in UTF-8 but as I debugged the auth-process, I have seen that the password is ISO-8859-1 encoded. The "original" query (from roundcube for example) is UTF-8 encoded (I dumped the POST-Query). So far I wasn't able to find my error by myself or by searching the web. Maybe someone of you can give me a hint :-) Thanks and greetings from Germany, Helge ---- dovecot --version 2.0.16 ---- D-AS01:/etc/dovecot # grep -v '^ *$#.*$\?$' dovecot-ldap.conf.ext uris = ldap://10.37.5.90 dn = CN=ldap-d-as01,CN=Users,DC=tfh-bochum,DC=de dnpass = xxxx auth_bind = yes ldap_version = 3 base = ou=Benutzer, ou=Lehre, dc=tfh-bochum, dc=de user_attrs = =uid=10000,=gid=10000,=home=/srv/mail/%Ld/%Ln user_filter = mail=%u pass_attrs = =uid=10000,=gid=10000,=home=/srv/mail/%Ld/%Ln pass_filter = (&(mail=%u)(!(extensionAttribute3=*))) ---- dovecot -n # 2.0.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.37.6-0.11-default x86_64 openSUSE 11.4 (x86_64) auth_debug = yes auth_mechanisms = plain login auth_username_translation = %Lu auth_verbose = yes mail_location = maildir:~/Maildir mail_max_userip_connections = 1000 mail_plugins = quota managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes list = yes location = prefix = INBOX/ separator = / subscriptions = yes type = private } namespace { list = yes location = maildir:%%h/Maildir:INDEX=%h/Maildir/shared/%%u:CONTROL=%h/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/srv/mail/shared-mailboxes quota = maildir:Quota quota_rule = *:storage=1G sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_redirects = 10 } protocols = imap pop3 sieve lmtp service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0770 user = root } } service imap-login { process_min_avail = 4 service_count = 0 } service managesieve-login { inet_listener sieve { address = * port = 4190 } inet_listener sieve_deprecated { address = * port = 2000 } process_min_avail = 2 service_count = 0 } ssl_ca = </etc/ssl/certs/tfh_dfn_dtag_cacert.pem ssl_cert = </etc/ssl/certs/imap.stud.tfh-bochum.de-20110530-cert-302177588.pem ssl_key = </etc/ssl/private/imap.stud.tfh-bochum.de-20110530.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = quota } protocol imap { mail_plugins = quota acl imap_acl imap_quota } protocol pop3 { mail_plugins = quota } ________________________________ Helge Wiethoff Medienzentrum Telefon: +49 (234) 968 8717 Fax: +49 (234) 968 3453 E-Mail: Wiethoff(a)tfh-bochum.de Technische Fachhochschule Georg Agricola für Rohstoff, Energie und Umwelt zu Bochum Staatlich anerkannte Fachhochschule der DMT-Gesellschaft für Lehre und Bildung mbH Herner Straße 45 44787 Bochum http://www.tfh-bochum.de ________________________________ Träger: DMT-Gesellschaft für Lehre und Bildung mbH Sitz der Gesellschaft: Bochum Registergericht: Amtsgericht Bochum Handelsregister: B 4052 Geschäftsführung: Prof. Dr. Jürgen Kretschmann (Vorsitzender) Manfred Freitag

3 4

Re: [Dovecot] some mdbox mails get lost each day
by Timo Sirainen 09 Aug '12

09 Aug '12

On 9.8.2012, at 11.24, Christian Rößner wrote: > I had enabled mail_log and search for any kind of errors. None. Only expunge messages from a imap process. Which I thought was Outlook. But isn't. So there is an imap expunge entry for all of the mails that get lost? You should be able to match that with the IMAP client's IP address by using session IDs, for example: mail_log_prefix = "%s(%u) <%{session}>: " Also you may be able to find out what client is doing it by setting: imap_id_log = *

1 0

[Dovecot] Mail deletion and Solr index update
by Matthias Rieber 09 Aug '12

09 Aug '12

Hi, I've deleted 10000s emails and it seems that every mail is removed with a single request from Solrs index. This works, but it's quite slow. Is it possible/plans to improve that? Matthias

2 4

[Dovecot] Quota dict configuration
by Uros 08 Aug '12

08 Aug '12

Hi, I have enabled quota dict with mysql following wiki http://wiki2.dovecot.org/Quota/Dict Everything work as expected. I just have a question about query used for updating quota usage. I already check the source file dict-sql.c but i still can't figure it out. I store user info in a mysql table where only left (user) part of an email address is stored with foreign id for domain conected to domain table. The problem is administration because quota table have primary key whole email. Is there even possible to configure quota dict settings to use separate variables %n and %d like in user and password query? -- lp Uroš

1 0

[Dovecot] Statistics scripts
by Timo Sirainen 08 Aug '12

08 Aug '12

I wrote two scripts, which you can use with the stats plugin enabled to get a better "doveadm stats top" than it currently is: http://dovecot.org/tools/stats-top.pl http://dovecot.org/tools/stats.pl

2 1

[Dovecot] dsync and pop3 migration plugin fails for large inbox due to idle timeout
by Nikolai Schupbach 08 Aug '12

08 Aug '12

Timo, There is a problem with the dsync POP3 migration plugin when syncing a large INBOX. What happens is dsync establishes a connection to the POP3 server at the beginning of the sync, but then it sits there idle until it's used to sync the UIDLs. On a very large inbox with many thousands of messages it will be idle for longer than a POP3 server's idle timeout setting. When the UIDL sync occurs dsync produces the following errors (because the connection has been lost due to the POP3 server's inactivity timeout): dsync(first.last(a)test.co.nz): Error: pop3c(pop3.test.com): Server disconnected unexpectedly dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 13: Disconnected dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 14: Disconnected dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 15: Disconnected dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 16: Disconnected ... dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 14492: Disconnected dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 14493: Disconnected dsync(first.last(a)test.co.nz): Error: pop3_migration: Failed to get header for msg 14494: Disconnected Also at the end of the dsync it actually has an exit status of 0, but it shouldn't because the POP3 sync failed, and none of the UIDLs are retained. Dsync should try to keep the POP3 connection alive, by sending a regular 'NOOP' command to the POP3 server, or it should simply reconnect if sees the connection is lost. At the moment the only work around is to increase the POP3 server's idle timeout to a multi hour value, which isn't a good work around as it causes a lot of inactive POP sessions to bank up. Regards, Nikolai.

2 3

Re: [Dovecot] sieve vacation messages trouble
by asier.cidon＠externo.uam.es 08 Aug '12

08 Aug '12

The problem is solved!!!! In the library "src/lib-sieve/plugins/vacation/cmd-vacation.c", in the package "dovecot-sieve" or "dovecot-pigeonhole" modify: smtp_handle = sieve_smtp_open(senv, reply_to, NULL, &f); smtp_handle = sieve_smtp_open(senv, reply_to, reply_from, &f); You can check the correct operation in your logs. /var/log/maillog postfix/smtpd[27112]: connect from smtp.mydomain.com postfix/smtpd[27112]: A95D2168456: client=smtp.mydomain.com postfix/cleanup[27114]: A95D2168456: message-id=<A5BBC98AAF65424CADBFB6ACF0003E8B03FB4B74(a)example.com> postfix/smtpd[27112]: disconnect from smtp.mydomain.com postfix/qmgr[17010]: A95D2168456: from=<asier.cidon(a)example.com>, size=7274, nrcpt=1 (queue active) postfix/pipe[27115]: A95D2168456: to=<asier.cidon(a)mydomain.com>, relay=dovecot, delay=0.09, delays=0.01/0/0/0.08, dsn=2.0.0, status=sent (delivered via dovecot service) postfix/qmgr[17010]: A95D2168456: removed /var/log/dovecot.log dovecot: auth(default): master out: USER 1 asier.cidon(a)mydomain.com uid=xxx gid=xxx quota_rule=*:bytes=524288000 home=/buzon/asier.cidon dovecot: deliver(asier.cidon(a)mydomain.com): sieve: msgid=<A5BBC98AAF65424CADBFB6ACF0003E8B03FB4B74(a)example.com>: sent vacation response to <asier.cidon(a)example.com> dovecot: deliver(asier.cidon(a)mydomain.com): sieve: msgid=<A5BBC98AAF65424CADBFB6ACF0003E8B03FB4B74(a)example.com>: stored mail into mailbox 'INBOX' /var/log/maillog postfix/pickup[17009]: B221D168458: uid=xxx from=<asier.cidon(a)mydomain.com> postfix/cleanup[27114]: B221D168458: message-id=<dovecot-sieve-1344420404-703760-0(a)mda.mydomain.com> postfix/qmgr[17010]: B221D168458: from=<asier.cidon(a)mydomain.com>, size=661, nrcpt=1 (queue active) postfix/smtp[27195]: B221D168458: to=<asier.cidon(a)example.com>, relay=smtpinterno.mydomain.com, delay=0.04, delays=0.01/0/0.01/0.01, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as A3A092280B3) postfix/qmgr[17010]: B221D168458: removed

2 1

[Dovecot] doveadm import is always verbose
by Jürgen Obermann 08 Aug '12

08 Aug '12

Hello, with dovecot versions up to 2.1.9, when I use: doveadm import -u guser mbox:/tmp/mbox/guser/restore_2012-05-08 restore_2012-05-08 all it always sends out info messages for every mail copied like that: doveadm(guser): Info: copy from mymail: box=restore_2012-05-08/mymail, uid=5, msgid=<######>, size=6999462 I had expected to see these info messages only if I add the verbose option to doveadm. And using the option -v with: doveadm -v import -u guser mbox:/tmp/mbox/guser/restore_2012-05-08 restore_2012-05-08 all makes no difference at all, the same messages appear. The verbose option seems to be always on. Is this a bug or intended behaviour? Greetings, Jürgen -- Jürgen Obermann Hochschulrechenzentrum der Justus-Liebig-Universität Gießen Heinrich-Buff-Ring 44 Tel. 0641-9913054

2 1

[Dovecot] Dovecot with Company - level Quota
by Kavish Karkera 08 Aug '12

08 Aug '12

Hi Timo, We are using maildir as quota-backend , and performing user level quota, which is working fine. (using dovecot 2.x ). Now the requirement is to , restrict the quota to client / company level along with user level quota. For. eg. We have a mailbox path like /mail/mailstore/10001/kavish.karkera(a)linoquery.com/Maildir/ where 10001 is Client code (unique number given to very client) instead of domain name. So there would be two quota's one at company level and other user level. Such as 10001(linoquery.com) = 5GB ---> Company Quota kavish.karkera(a)linoquery.com = 0 ? ---> User Quota If the sum of the user quota under 10001/* exceeds the 5GB limit then the mails for that particular domain should get bounced. Please Help , if this is possible. Regards, Kavish Karkera

2 1

[Dovecot] replication chain
by Костырев Александр Алексеевич 08 Aug '12

08 Aug '12

good day! I wonder if it is possible to make a chain of replication in dovecot 2.1.9. Now I'm using two way replication(I use proxy to redirect users) and it's working just fine but is it possible to setup replication like this: serverA ---> serverB --> server C <--- I've added additional mail_replica2 on serverB and after restart dovecot didn't complain about errors, with doveconf -n I am able to see two replica's settings but user's mails aren't replicating to server C. no errors in logs. I want to use server C as backup server with lvm snapshots.

2 1

[Dovecot] error message. Some help please
by Spyros Tsiolis 08 Aug '12

08 Aug '12

Hello all : dovecot -n : # 1.2.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-194.17.4.el5 i686 CentOS release 5.5 (Final) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/dovecot/dovecot.log info_log_path: /var/log/dovecot/dovecot-info.log ssl_parameters_regenerate: 48 verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/dovecot/libexec/dovecot/imap-login login_greeting: * Dovecot ready * login_max_processes_count: 64 mail_location: maildir:/var/MailRoot/domains/%d/%n/Maildir mail_plugins: zlib auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: passwd-file args: /etc/dovecot/passwd passdb: driver: pam userdb: driver: static args: uid=vmail gid=vmail home=/home/vmail/%u userdb: driver: passwd From the logs : tail -100 /var/log/dovecot/dovecot | more : ......... Jul 06 13:51:20 dovecot: Warning: All login processes are in use. You may need to increase login_max_processes_count Jul 18 15:20:32 dovecot: Warning: All login processes are in use. You may need to increase login_max_processes_count Jul 19 09:16:40 dovecot: Warning: Killed with signal 15 (by pid=3062 uid=0 code=kill) ......... Should I just go ahead and increase login_max_processes_count ? Is it that simple ? Just asking for your feedback and experience chaps. Thank you in advance, Spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

2 1

Re: [Dovecot] connectionlimit for pop3s?
by Joseph Tam 07 Aug '12

07 Aug '12

On Tue, 7 Aug 2012, dovecot-request(a)dovecot.org wrote: > When switching to port 995 to use pop3s he is limited at connection > count. Some people can reach pop3s-server successful, some getting a > timeout. > ... > Somebody knows some typical clientside problems when this problem > occurs? Do the same user(s) have this problem and/or do each user have their own mail configuration for their mail readers? If yes, I would also check that the port and security protocol matches (i.e. clear/TLS/SSL on ports 110/110/995 respectively). Mismatched configurations could cause what you describe. Log messages could also be helpful here. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] how to duplicate users emails to allow deleted recovery?
by Voytek Eymont 07 Aug '12

07 Aug '12

I have a situation where a user deleted emails using iphone, then, wants he sees messages are gone from desktop client, wants them recovered from server, happened several times now is there a way to have all deletes to go to server trash for potential recovery ? off topic: is there a way on iphone to force deletions to server's trash is there a way to have dovecot duplicate all emails to say user_backup(a)dom.tld mail box ? or should I duplicate emails in postfix ? using dovecot 2 with lmpt and virtual domains thanks -- Voytek

1 0

Re: [Dovecot] redirect actions exceeds policy limit
by Mike Greene 07 Aug '12

07 Aug '12

Thank you David, I saw that in the share/docs but we didn't have the /conf.d/ folder or any of the extra conf files in place. I created that directory, copied the file over, made my changes and all is well again. Not sure why things were setup the way they were, after looking at the other files in conf.d it would appear the previous sysadmin had merged a lot of those bits and pieces into the main dovecot.conf file. Perhaps leftovers from v1.x days. Will likely address that down the road when we update that server. Mike Greene Rock Island Technology Solutions, Inc. San Juan Islands, WA. 360-378-5884 x201 > -----Original Message----- > > Date: Mon, 06 Aug 2012 14:46:22 -0400 > From: David Webmailbeta Warden <warden(a)geneseo.edu> > To: <dovecot(a)dovecot.org> > Subject: Re: [Dovecot] redirect actions exceeds policy limit > Message-ID: <f3f600e6dc1974de9bb54da5c4fed10a(a)geneseo.edu> > Content-Type: text/plain; charset="utf-8" > > > > In conf.d/90-sieve.conf we have: > > # The maximum number of redirect > actions that can be performed during > # a single script execution. > > #sieve_max_redirects = 4 > sieve_max_redirects = 25 > > I think that's the > setting you're looking for. > > -David Warden

1 0

[Dovecot] sieve vacation messages trouble
by asier.cidon＠externo.uam.es 07 Aug '12

07 Aug '12

FROM:mailman-bounces@dovecot.org DATE:27. heinäkuuta 2012 16.58.35 UTC+3.00 TO:dovecot-owner@dovecot.org SUBJECT:CONTENT FILTERED MESSAGE NOTIFICATION The attached message matched the dovecot mailing list's content filtering rules and was prevented from being forwarded on to the list membership. You are receiving the only remaining copy of the discarded message. FROM:Asier Cidon Periañez <asier.cidon(a)externo.uam.es> DATE:27. heinäkuuta 2012 16.01.59 UTC+3.00 TO:dovecot@dovecot.org SUBJECT:RE: [DOVECOT] SIEVE VACATION MESSAGES TROUBLE Hi, I have a problem when I define a Filter SIEVE vacation with Horde, Qmail and Dovecot. When I sent the message vacation for domains external, the log of postfix show <"<>"@mymachine>. I am writing you because I saw the post http://www.dovecot.org/list/dovecot/2009-June/040811.html Can you explain me whqt is the solution? Many Thanks.

3 2

[Dovecot] Pigeonhole sieve include namespace regression
by Daniel Piddock 07 Aug '12

07 Aug '12

Hi, We've recently upgraded from Dovecot 1.2.15 with Sieve 0.1.18 (Debian Squeeze) to Dovecot 2.1.8 and Pigeonhole 0.3.1. We provide a selection of global sieve scripts to make users' lives easier and one noticed that some of these have stopped working. I tracked it down to them having personal scripts with the same name. Using a really simple sieve script: require "include"; include :personal "svn"; include :global "svn"; sievec debug output for sieve 0.1.18 (trimmed a bit): * Required extensions: 0: include (16) 1: fileinto (5) * Included personal script 'svn' (block: 3): [script code here] * Included global script 'svn' (block: 4): [script code here] * Main program (block: 1): 00000000: EXTENSIONS [1]: 00000001: include 00000002: INCLUDE: 00000004: script: svn.sieve [ID: 1, BLOCK: 3] 00000006: INCLUDE: 00000008: script: svn.sieve [ID: 2, BLOCK: 4] 0000000a: [End of code] sievec debug output for Pigeonhole 0.3.1: * Required extensions (block: 1): 0: include (id: 16; block: 4) 1: fileinto (id: 5) * Included personal script 'svn' (block: 5): [script code here] * Main program (block: 2): Address Line Code 00000000: DEBUG BLOCK: 3 00000001: EXTENSIONS [1]: 00000002: include 00000003: 2: INCLUDE: 00000005: script: `svn' from /home/notroot/sieve/svn.sieve [ID: 1, BLOCK: 5] 00000007: 3: INCLUDE: 00000009: script: `svn' from /home/notroot/sieve/svn.sieve [ID: 1, BLOCK: 5] 0000000b: 3: [End of code] As can be seen the personal script is included twice. Obvious work around is to rename the personal script. However it'd be nice if namespacing came back. Cheers, Dan -- Daniel Piddock, Systems Administrator, CoreFiling Limited http://www.corefiling.com

2 2

[Dovecot] connectionlimit for pop3s?
by Hajo Locke 07 Aug '12

07 Aug '12

Hello, i have a user who is able to do pop3 on port 110 without problems and without limits. There are ~10 real users using same public IP. When switching to port 995 to use pop3s he is limited at connection count. Some people can reach pop3s-server successful, some getting a timeout. I cant find any errors or limits within my config or in my log, there are no differences between using plain text and using tls. Are there some special loglines to grep for at this situation? Maybe i missed some lines... At the moment i dont see server-side problems. Somebody knows some typical clientside problems when this problem occurs? dovecot version is 1.2.11 Thanks, Hajo

2 1

[Dovecot] LDAP auth with AD
by Chris Visser 07 Aug '12

07 Aug '12

Hi, I'm struggling to setup LDAP authentication with dovecot against an AD server. When I attempt to bind using the same DN I use to do address lookups in exim and to do searches using ldap search on the command line I get the following in my logs: Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 7 08:55:58 mail-dev dovecot: auth: Debug: auth client connected (pid=1523) Aug 7 08:55:58 mail-dev dovecot: auth: Error: LDAP: binding failed (dn CN=Linux Sync,CN=Users,DC=RTT,DC=co,DC=za): Invalid credentials, 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 I'm running CentOS 6 and connect to a Windows 2008 R2 domain. The output from dovecot -n: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_verbose = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { args = uid=exim gid=exim home=/var/spool/mail/%Ld/%Ln driver = static } And my /etc/dovecot/dovecot-ldap.conf.ext: hosts = dc01.mydomain.com base = dc=mydomain,dc=com dn = CN=Linux Sync,CN=Users,DC=mydomain,DC=com dnpass = mypass deref = never scope = subtree ldap_version = 3 auth_bind = no pass_filter = (&(objectClass=person)(mail=%u)) Chris Visser Linux/Network Infrastructure ================== Please read our Email Disclaimer : http://www.rtt.co.za/disclaimer.html

1 0

[Dovecot] redirect actions exceeds policy limit
by Mike Greene 06 Aug '12

06 Aug '12

Hello, We have a vacation/mail forwarder plugin in squirrel mail that allows customers to forward email. It has come to my attention that there is a limit (appears to be 5) on the number of addresses that can be specified. I'm now trying to track down where this policy limit is set. This is the error we see in the customers .dovecot.sieve.log file: main_script: line 26: error: number of redirect actions exceeds policy limit. sieve: info: started log at Jul 25 07:02:54. I checked the following for possible settings: /usr/local/etc/dovecot/dovecot.conf /usr/local/etc/sieve/dovecot.sieve /usr/local/etc/sieve/global.sieve I didn't see anything specific to limiting the number of redirects. I'm wondering where else I can look to find where this limit is coming from and adjust it upwards. We are using the following dovecot / pigeonhole versions. dovecot-2.0.7 dovecot-pigeonhole-0.2.1 athena# dovecot -n # 2.0.7: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.1-RELEASE amd64 auth_default_realm = rockisland.com auth_mechanisms = plain login cram-md5 auth_username_format = %Lu disable_plaintext_auth = no dotlock_use_excl = yes first_valid_gid = 1000 first_valid_uid = 1000 listen = * mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { quota = maildir quota_rule = *:storage=2G quota_warning = storage=90%% /usr/local/sbin/quota-warning.sh 90 quota_warning2 = storage=80%% /usr/local/sbin/quota-warning.sh 80 sieve = ~/.dovecot.sieve sieve_dir = ~/ sieve_global_dir = /usr/local/etc/sieve/ } protocols = imap pop3 service auth { unix_listener auth-client { mode = 0660 } unix_listener auth-master { group = vmail mode = 0600 user = vmail } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { service_count = 0 } service pop3-login { service_count = 0 } ssl_cert = </usr/local/etc/ssl/star.rockisland.com.crt.pem ssl_key = </usr/local/etc/ssl/star.rockisland.com.key.pem userdb { driver = prefetch } userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = lda_mailbox_autocreate = no lda_mailbox_autosubscribe = yes log_path = mail_plugins = quota sieve postmaster_address = postmaster(a)rockisland.com sendmail_path = /usr/sbin/sendmail } Mike Greene Rock Island Technology Solutions, Inc. San Juan Islands, WA. 360-378-5884 x201

2 1

[Dovecot] find virtual users
by Rafael Nathan 06 Aug '12

06 Aug '12

Hi, Can sendmail find virtual users in /etc/dovecot/passwd ? If yes, what are the necesary changes I have to make ? Urgent help needed. Thanks in advance. Regards, Rafael

3 2